From gedetil at cs.umanitoba.ca  Tue Jun  2 11:18:47 2009
From: gedetil at cs.umanitoba.ca (Gilbert E. Detillieux)
Date: Tue, 02 Jun 2009 11:18:47 -0500
Subject: [RndTbl] Fwd: HotCloud '09 Registration Now Open
Message-ID: <4A2550E7.5000702@cs.umanitoba.ca>

FYI...

-------- Original Message --------
Subject: [Board] HotCloud '09 Registration Now Open
Date: Thu, 28 May 2009 10:16:05 -0700
From: Lionel Garth Jones <lgj at usenix.org>

We'd like to invite you to the Workshop on Hot Topics in Cloud
Computing (HotCloud '09), taking place in San Diego, CA, June 15, 2009.

HotCloud '09 will discuss challenges in the Cloud Computing paradigm,
including the design, implementation, and deployment of virtualized
clouds.

Join academics and practitioners in sharing experiences, leveraging each
other's perspectives, and identifying new and emerging "hot" trends in
this area.

The program includes sessions on:
* Cloud Platforms and Architectures
* Elastic Clouds and Resource Management
* Storage Cloud and Appliances
* Map Reduce and Cloud Applications
* Panel on Cloud Computing

The full program can be found at
http://www.usenix.org/events/hotcloud09/tech/

Don't miss this opportunity to engage in dynamic discussion on
key topics in the cloud computing community. Register today at
http://www.usenix.org/hotcloud09/proga

HotCloud will be co-located with the 2009 USENIX Annual Technical
Conference (USENIX '09), June 14-19:
http://www.usenix.org/events/usenix09/

Multiple Conference Savings: Go to both HotCloud '09 and USENIX '09 and
save $100 off your USENIX '09 registration.
Contact the Conference Department at conference at usenix.org to receive
your priority discount code.

NOTE: If you're already registered for USENIX '09, contact the
Conference Department at the email address above to receive your $100
refund.

We look forward to seeing you in San Diego!

Sambit Sahu, IBM T.J. Watson Research Center
Prashant Shenoy, University of Massachusetts Amherst
HotCloud '09 Program Chairs

----------------------------------
Workshop on Hot Topics in Cloud Computing (HotCloud '09)
June 15, 2009
San Diego, CA
Sponsored by USENIX: The Advanced Computing Systems Association
Register online by Monday, June 8, 2009, noon PDT
http://www.usenix.org/hotcloud/proga
----------------------------------


From gedetil at cs.umanitoba.ca  Tue Jun  2 13:14:21 2009
From: gedetil at cs.umanitoba.ca (Gilbert E. Detillieux)
Date: Tue, 2 Jun 2009 13:14:21 -0500 (CDT)
Subject: [RndTbl] MUUG Meeting, June 9, 7:30pm -- TrustedBSD Architecture
Message-ID: <200906021814.n52IELa07386@iron.cs.umanitoba.ca>

The Manitoba UNIX User Group (MUUG) will be holding its next monthly
meeting on Tuesday, June 9.  The meeting topic for this month is
as follows:

   TrustedBSD Architecture

   The TrustedBSD project develops advanced security features for the
   FreeBSD operating system. Features from TrustedBSD have also made
   their way into other operating systems, such as NetBSD, OpenBSD,
   Mac OS X, and Linux.

   Christian Peron is a FreeBSD security developer. He will discuss
   the security deficiencies in the architectures of most existing
   operating  systems. Christian will show us the technical and
   architectural changes that the TrustedBSD project made to the
   FreeBSD operating system to enhance security. Some of the changes
   include separating the access control framework from the security
   policy, modifying the kernel to support an auditing framework, and
   setting up an intrusion detection system.

The group holds its general meetings at 7:30pm on the second Tuesday of
every month from September to June.  (There are no meetings in July and
August.) Meetings are open to the general public; you don't have to be a
MUUG member to attend.

   **********************************************************************
   Please note our meeting location: The IBM offices, at 400 Ellice Ave.
   (between Edmonton and Kennedy). When you arrive, you will have to
   sign in at the reception desk, and then wait for someone to take you
   (in groups) to the meeting room. Please try to arrive by about 7:15pm, 
   so the meeting can start promptly at 7:30pm. Don't be late, or you may
   not get in.  (But don't come too early either, since security may not
   be there to let you in before 7:15 or so.) Non-members may be required
   to show photo ID at the security desk.

   Limited parking is available for free on the street, either on Ellice
   Ave. or on some of the intersecting streets. Indoor parking is also
   available nearby, at Portage Place, for $5.00 for the evening. Bicycle
   parking is available in a bike rack under video surveillance located
   behind the building on Webb Place.
   **********************************************************************

For more information about MUUG, and its monthly meetings, check out their
Web server:

	http://www.muug.mb.ca/

Help us promote this month's meeting, by putting this poster up on your
workplace bulletin board or other suitable public message board:

	http://www.muug.mb.ca/meetings/MUUGmeeting.pdf

-- 
Gilbert E. Detillieux		E-mail: <gedetil at muug.mb.ca>
Manitoba UNIX User Group	Web:	http://www.muug.mb.ca/
PO Box 130 St-Boniface		Phone:  (204)474-8161
Winnipeg MB CANADA  R2H 3B4	Fax:    (204)474-7609

From high.res.mike at gmail.com  Sun Jun 14 13:02:42 2009
From: high.res.mike at gmail.com (Mike Pfaiffer)
Date: Sun, 14 Jun 2009 13:02:42 -0500
Subject: [RndTbl] Quad core motherboards
Message-ID: <4A353B42.9070602@gmail.com>

	I'm looking to pick up a quad core machine. I've been told some 
motherboards don't work too well with Linux and BSD. Apparently all 
other components work fine. The guys I was going to pick it up from said 
they were going to do some research on the matter and get back to me. 
This was early May. Looks like I'll have to walk in with a list. So the 
question is which motherboards work?

	This is a personal machine which will be retired as a server of some 
sort when I upgrade again in about five years or so. Also, I'd like to 
"one up" a friend who just picked up one about a month ago and is 
running it as a quad 2.5GHz machine. ;-)

				Later
				Mike


From high.res.mike at gmail.com  Tue Jun 16 18:46:30 2009
From: high.res.mike at gmail.com (Mike Pfaiffer)
Date: Tue, 16 Jun 2009 18:46:30 -0500
Subject: [RndTbl] Routing questions
Message-ID: <4A382ED6.1050107@gmail.com>

	The set-up to the question is I picked up a decently modern wireless 
router to play with. I allow no connection to the internet (nothing in 
the WAN port). I have a couple of computers I can connect to the wired 
ports of the router (assign static IPs within the subnet but outside the 
DHCP range). These machines (both *NIX boxes) will provide services such 
as a web server and a mud/game server. The router will allow open access 
to anyone who wants to connect (I want to provide my own content for 
experimentation). Since I have physical control of the hardware I'm not 
too worried about security.

	Initially I'd like to be able to redirect all http traffic not bound 
for my web server to my web server. For example someone trying to get to 
Google will get my info page instead. But if someone were trying to 
access a different page on the same machine would still be able to connect.

	I've done the RTFM thing and got confused. The manual seems to dance 
around the issue but doesn't seem to say anything which looks to be 
appropriate. The firewall is used mainly to filter incoming (from the 
WAN port) traffic. IP filters control the outbound (to the WAN port) 
filtering. The routing page talks about routing requests to a specific 
IP outside the LAN side. Virtual servers route requests from the WAN 
side to a specific LAN address. The port forwarding section looked more 
like an extension to the firewall page.

	Here is what I'd like to do graphically.

Rule 1:
LAN requests non-192.168.X.Y web page --> Router says "You must mean 
192.168.X.Y" --> Router sends traffic to 192.168.X.Y/index.html
Rule 2:
LAN requests 192.168.X.Y/whatever.html --> Router passes along the 
request to 192.168.X.Y web server

	The question is how can I do this? I know I've missed something, but 
the manual didn't seem to help. I'll admit to not checking Google, but 
I'm not sure what search terms to use.

	This ties in with the wireless questions I was asking a couple of 
months ago. After I get this working I'll be looking at authentication 
for other services and extending the range of coverage.

				Later
				Mike


From billreid at shaw.ca  Tue Jun 16 19:00:21 2009
From: billreid at shaw.ca (Bill Reid)
Date: Tue, 16 Jun 2009 19:00:21 -0500
Subject: [RndTbl] Routing questions
In-Reply-To: <4A382ED6.1050107@gmail.com>
References: <4A382ED6.1050107@gmail.com>
Message-ID: <4A383215.8080600@shaw.ca>

Hi Mike,

What you want to do goes way beyond what most low end routers are 
designed to do. As you suggest the rules are applied to traffic coming 
into the WAN port and not local traffic. Your proposal also is not just 
IP routing but is also URL routing(i.e more like a proxy).

The port 80 redirect is available in the mods to the Linksys router via 
firmware replacement(an exmaple is openwrt.org)

-- Bill

Mike Pfaiffer wrote:
> 	The set-up to the question is I picked up a decently modern wireless 
> router to play with. I allow no connection to the internet (nothing in 
> the WAN port). I have a couple of computers I can connect to the wired 
> ports of the router (assign static IPs within the subnet but outside the 
> DHCP range). These machines (both *NIX boxes) will provide services such 
> as a web server and a mud/game server. The router will allow open access 
> to anyone who wants to connect (I want to provide my own content for 
> experimentation). Since I have physical control of the hardware I'm not 
> too worried about security.
> 
> 	Initially I'd like to be able to redirect all http traffic not bound 
> for my web server to my web server. For example someone trying to get to 
> Google will get my info page instead. But if someone were trying to 
> access a different page on the same machine would still be able to connect.
> 
> 	I've done the RTFM thing and got confused. The manual seems to dance 
> around the issue but doesn't seem to say anything which looks to be 
> appropriate. The firewall is used mainly to filter incoming (from the 
> WAN port) traffic. IP filters control the outbound (to the WAN port) 
> filtering. The routing page talks about routing requests to a specific 
> IP outside the LAN side. Virtual servers route requests from the WAN 
> side to a specific LAN address. The port forwarding section looked more 
> like an extension to the firewall page.
> 
> 	Here is what I'd like to do graphically.
> 
> Rule 1:
> LAN requests non-192.168.X.Y web page --> Router says "You must mean 
> 192.168.X.Y" --> Router sends traffic to 192.168.X.Y/index.html
> Rule 2:
> LAN requests 192.168.X.Y/whatever.html --> Router passes along the 
> request to 192.168.X.Y web server
> 
> 	The question is how can I do this? I know I've missed something, but 
> the manual didn't seem to help. I'll admit to not checking Google, but 
> I'm not sure what search terms to use.
> 
> 	This ties in with the wireless questions I was asking a couple of 
> months ago. After I get this working I'll be looking at authentication 
> for other services and extending the range of coverage.
> 
> 				Later
> 				Mike
> 
> _______________________________________________
> Roundtable mailing list
> Roundtable at muug.mb.ca
> http://www.muug.mb.ca/mailman/listinfo/roundtable
> 


From sean at tinfoilhat.ca  Wed Jun 17 00:04:58 2009
From: sean at tinfoilhat.ca (Sean Cody)
Date: Wed, 17 Jun 2009 00:04:58 -0500
Subject: [RndTbl] Routing questions
In-Reply-To: <4A383215.8080600@shaw.ca>
References: <4A382ED6.1050107@gmail.com> <4A383215.8080600@shaw.ca>
Message-ID: <932088F8-2D40-4816-BE08-28665EF3127A@tinfoilhat.ca>

Agreed.
What you are wanting is sort of like a captive portal.
But this is easier done using squid in transparent mode with a custom  
redirector script (which I've done for April fools pranks so I know it  
works).

On 16-Jun-09, at 7:00 PM, Bill Reid wrote:

> Hi Mike,
>
> What you want to do goes way beyond what most low end routers are
> designed to do. As you suggest the rules are applied to traffic coming
> into the WAN port and not local traffic. Your proposal also is not  
> just
> IP routing but is also URL routing(i.e more like a proxy).
>
> The port 80 redirect is available in the mods to the Linksys router  
> via
> firmware replacement(an exmaple is openwrt.org)
>
> -- Bill
>
> Mike Pfaiffer wrote:
>> 	The set-up to the question is I picked up a decently modern wireless
>> router to play with. I allow no connection to the internet (nothing  
>> in
>> the WAN port). I have a couple of computers I can connect to the  
>> wired
>> ports of the router (assign static IPs within the subnet but  
>> outside the
>> DHCP range). These machines (both *NIX boxes) will provide services  
>> such
>> as a web server and a mud/game server. The router will allow open  
>> access
>> to anyone who wants to connect (I want to provide my own content for
>> experimentation). Since I have physical control of the hardware I'm  
>> not
>> too worried about security.
>>
>> 	Initially I'd like to be able to redirect all http traffic not bound
>> for my web server to my web server. For example someone trying to  
>> get to
>> Google will get my info page instead. But if someone were trying to
>> access a different page on the same machine would still be able to  
>> connect.
>>
>> 	I've done the RTFM thing and got confused. The manual seems to dance
>> around the issue but doesn't seem to say anything which looks to be
>> appropriate. The firewall is used mainly to filter incoming (from the
>> WAN port) traffic. IP filters control the outbound (to the WAN port)
>> filtering. The routing page talks about routing requests to a  
>> specific
>> IP outside the LAN side. Virtual servers route requests from the WAN
>> side to a specific LAN address. The port forwarding section looked  
>> more
>> like an extension to the firewall page.
>>
>> 	Here is what I'd like to do graphically.
>>
>> Rule 1:
>> LAN requests non-192.168.X.Y web page --> Router says "You must mean
>> 192.168.X.Y" --> Router sends traffic to 192.168.X.Y/index.html
>> Rule 2:
>> LAN requests 192.168.X.Y/whatever.html --> Router passes along the
>> request to 192.168.X.Y web server
>>
>> 	The question is how can I do this? I know I've missed something, but
>> the manual didn't seem to help. I'll admit to not checking Google,  
>> but
>> I'm not sure what search terms to use.
>>
>> 	This ties in with the wireless questions I was asking a couple of
>> months ago. After I get this working I'll be looking at  
>> authentication
>> for other services and extending the range of coverage.
>>
>> 				Later
>> 				Mike
>>
>> _______________________________________________
>> Roundtable mailing list
>> Roundtable at muug.mb.ca
>> http://www.muug.mb.ca/mailman/listinfo/roundtable
>>
>
> _______________________________________________
> Roundtable mailing list
> Roundtable at muug.mb.ca
> http://www.muug.mb.ca/mailman/listinfo/roundtable

-- 
Sean



From high.res.mike at gmail.com  Wed Jun 17 05:04:30 2009
From: high.res.mike at gmail.com (Mike Pfaiffer)
Date: Wed, 17 Jun 2009 05:04:30 -0500
Subject: [RndTbl] Routing questions
In-Reply-To: <daf1b8090906161731m12fce87at154863386eaab14b@mail.gmail.com>
References: <4A382ED6.1050107@gmail.com> <4A383215.8080600@shaw.ca>
	<daf1b8090906161731m12fce87at154863386eaab14b@mail.gmail.com>
Message-ID: <4A38BFAE.5040307@gmail.com>

Dan Keizer wrote:
> yeah -- like Bill says -- you want to use a customized firmware to
> perform that function.
> 
> Check out a few micro builds ... a couple I've used are below -- you
> didn't say what hardware you have, but check the following:
> 
> dd-wrt:  http://www.dd-wrt.com/wiki/index.php/Supported_Devices
> openwrt: http://oldwiki.openwrt.org/TableOfHardware.html
> 
> you would probably like dd-wrt -- it is very user friendly and
> provides alot of functionality ... a small screenshot of one of my
> dd-wrt router configs is attached -- (I don't have that service
> enabled)
> 
> openwrt has a large collection (and I mean large!) of downloadable
> programs cross-compiled for the various supported platforms... both
> have ssh and http control.
> 
> Dan.

	If it works with my D-Link (see the reply to Bill) I can see where I 
have a lot more reading and research to do. I'll have to look at 
alternative firmware.

	Since I'm slowly getting into this sort of thing user friendly is a big 
bonus.

				Later
				Mike


> On Tue, Jun 16, 2009 at 7:00 PM, Bill Reid<billreid at shaw.ca> wrote:
>> Hi Mike,
>>
>> What you want to do goes way beyond what most low end routers are
>> designed to do. As you suggest the rules are applied to traffic coming
>> into the WAN port and not local traffic. Your proposal also is not just
>> IP routing but is also URL routing(i.e more like a proxy).
>>
>> The port 80 redirect is available in the mods to the Linksys router via
>> firmware replacement(an exmaple is openwrt.org)
>>
>> -- Bill
>>
>> Mike Pfaiffer wrote:
>>>       The set-up to the question is I picked up a decently modern wireless
>>> router to play with. I allow no connection to the internet (nothing in
>>> the WAN port). I have a couple of computers I can connect to the wired
>>> ports of the router (assign static IPs within the subnet but outside the
>>> DHCP range). These machines (both *NIX boxes) will provide services such
>>> as a web server and a mud/game server. The router will allow open access
>>> to anyone who wants to connect (I want to provide my own content for
>>> experimentation). Since I have physical control of the hardware I'm not
>>> too worried about security.
>>>
>>>       Initially I'd like to be able to redirect all http traffic not bound
>>> for my web server to my web server. For example someone trying to get to
>>> Google will get my info page instead. But if someone were trying to
>>> access a different page on the same machine would still be able to connect.
>>>
>>>       I've done the RTFM thing and got confused. The manual seems to dance
>>> around the issue but doesn't seem to say anything which looks to be
>>> appropriate. The firewall is used mainly to filter incoming (from the
>>> WAN port) traffic. IP filters control the outbound (to the WAN port)
>>> filtering. The routing page talks about routing requests to a specific
>>> IP outside the LAN side. Virtual servers route requests from the WAN
>>> side to a specific LAN address. The port forwarding section looked more
>>> like an extension to the firewall page.
>>>
>>>       Here is what I'd like to do graphically.
>>>
>>> Rule 1:
>>> LAN requests non-192.168.X.Y web page --> Router says "You must mean
>>> 192.168.X.Y" --> Router sends traffic to 192.168.X.Y/index.html
>>> Rule 2:
>>> LAN requests 192.168.X.Y/whatever.html --> Router passes along the
>>> request to 192.168.X.Y web server
>>>
>>>       The question is how can I do this? I know I've missed something, but
>>> the manual didn't seem to help. I'll admit to not checking Google, but
>>> I'm not sure what search terms to use.
>>>
>>>       This ties in with the wireless questions I was asking a couple of
>>> months ago. After I get this working I'll be looking at authentication
>>> for other services and extending the range of coverage.
>>>
>>>                               Later
>>>                               Mike
>>>
>>> _______________________________________________
>>> Roundtable mailing list
>>> Roundtable at muug.mb.ca
>>> http://www.muug.mb.ca/mailman/listinfo/roundtable
>>>
>> _______________________________________________
>> Roundtable mailing list
>> Roundtable at muug.mb.ca
>> http://www.muug.mb.ca/mailman/listinfo/roundtable
>>
>>
>> ------------------------------------------------------------------------
>>


From high.res.mike at gmail.com  Wed Jun 17 04:58:21 2009
From: high.res.mike at gmail.com (Mike Pfaiffer)
Date: Wed, 17 Jun 2009 04:58:21 -0500
Subject: [RndTbl] Routing questions
In-Reply-To: <4A383215.8080600@shaw.ca>
References: <4A382ED6.1050107@gmail.com> <4A383215.8080600@shaw.ca>
Message-ID: <4A38BE3D.1030202@gmail.com>

Bill Reid wrote:
> Hi Mike,
> 
> What you want to do goes way beyond what most low end routers are 
> designed to do. As you suggest the rules are applied to traffic coming 
> into the WAN port and not local traffic. Your proposal also is not just 
> IP routing but is also URL routing(i.e more like a proxy).

	I wasn't really thinking along the lines of a proxy. It makes sense 
though. While I was half asleep last night I was thinking it might be 
easy to connect a computer to the WAN port to pretend it's the internet. 
It could then redirect all traffic back to the web server on the LAN. 
Maybe this is what Sean was talking about. I'm not sure.

> The port 80 redirect is available in the mods to the Linksys router via 
> firmware replacement(an exmaple is openwrt.org)

	I can see how that would be useful in this situation. It could be 
redirected and fail with a 404 which could be redirected to the info page.

	I'm using a D-Link 655. Would that make a difference?

> -- Bill
> 
> Mike Pfaiffer wrote:
>>     The set-up to the question is I picked up a decently modern 
>> wireless router to play with. I allow no connection to the internet 
>> (nothing in the WAN port). I have a couple of computers I can connect 
>> to the wired ports of the router (assign static IPs within the subnet 
>> but outside the DHCP range). These machines (both *NIX boxes) will 
>> provide services such as a web server and a mud/game server. The 
>> router will allow open access to anyone who wants to connect (I want 
>> to provide my own content for experimentation). Since I have physical 
>> control of the hardware I'm not too worried about security.
>>
>>     Initially I'd like to be able to redirect all http traffic not 
>> bound for my web server to my web server. For example someone trying 
>> to get to Google will get my info page instead. But if someone were 
>> trying to access a different page on the same machine would still be 
>> able to connect.
>>
>>     I've done the RTFM thing and got confused. The manual seems to 
>> dance around the issue but doesn't seem to say anything which looks to 
>> be appropriate. The firewall is used mainly to filter incoming (from 
>> the WAN port) traffic. IP filters control the outbound (to the WAN 
>> port) filtering. The routing page talks about routing requests to a 
>> specific IP outside the LAN side. Virtual servers route requests from 
>> the WAN side to a specific LAN address. The port forwarding section 
>> looked more like an extension to the firewall page.
>>
>>     Here is what I'd like to do graphically.
>>
>> Rule 1:
>> LAN requests non-192.168.X.Y web page --> Router says "You must mean 
>> 192.168.X.Y" --> Router sends traffic to 192.168.X.Y/index.html
>> Rule 2:
>> LAN requests 192.168.X.Y/whatever.html --> Router passes along the 
>> request to 192.168.X.Y web server
>>
>>     The question is how can I do this? I know I've missed something, 
>> but the manual didn't seem to help. I'll admit to not checking Google, 
>> but I'm not sure what search terms to use.
>>
>>     This ties in with the wireless questions I was asking a couple of 
>> months ago. After I get this working I'll be looking at authentication 
>> for other services and extending the range of coverage.
>>
>>                 Later
>>                 Mike
>>
>> _______________________________________________
>> Roundtable mailing list
>> Roundtable at muug.mb.ca
>> http://www.muug.mb.ca/mailman/listinfo/roundtable
>>
> 
> 


From high.res.mike at gmail.com  Wed Jun 17 05:31:31 2009
From: high.res.mike at gmail.com (Mike Pfaiffer)
Date: Wed, 17 Jun 2009 05:31:31 -0500
Subject: [RndTbl] Routing questions
In-Reply-To: <932088F8-2D40-4816-BE08-28665EF3127A@tinfoilhat.ca>
References: <4A382ED6.1050107@gmail.com> <4A383215.8080600@shaw.ca>
	<932088F8-2D40-4816-BE08-28665EF3127A@tinfoilhat.ca>
Message-ID: <4A38C603.3040408@gmail.com>

Sean Cody wrote:
> Agreed.
> What you are wanting is sort of like a captive portal.
> But this is easier done using squid in transparent mode with a custom  
> redirector script (which I've done for April fools pranks so I know it  
> works).

	Sounds interesting. I wanted to answer all the responses before I left 
for the day. I'd like to hear the details though...

				Later
				Mike



> On 16-Jun-09, at 7:00 PM, Bill Reid wrote:
> 
>> Hi Mike,
>>
>> What you want to do goes way beyond what most low end routers are
>> designed to do. As you suggest the rules are applied to traffic coming
>> into the WAN port and not local traffic. Your proposal also is not  
>> just
>> IP routing but is also URL routing(i.e more like a proxy).
>>
>> The port 80 redirect is available in the mods to the Linksys router  
>> via
>> firmware replacement(an exmaple is openwrt.org)
>>
>> -- Bill
>>
>> Mike Pfaiffer wrote:
>>> 	The set-up to the question is I picked up a decently modern wireless
>>> router to play with. I allow no connection to the internet (nothing  
>>> in
>>> the WAN port). I have a couple of computers I can connect to the  
>>> wired
>>> ports of the router (assign static IPs within the subnet but  
>>> outside the
>>> DHCP range). These machines (both *NIX boxes) will provide services  
>>> such
>>> as a web server and a mud/game server. The router will allow open  
>>> access
>>> to anyone who wants to connect (I want to provide my own content for
>>> experimentation). Since I have physical control of the hardware I'm  
>>> not
>>> too worried about security.
>>>
>>> 	Initially I'd like to be able to redirect all http traffic not bound
>>> for my web server to my web server. For example someone trying to  
>>> get to
>>> Google will get my info page instead. But if someone were trying to
>>> access a different page on the same machine would still be able to  
>>> connect.
>>>
>>> 	I've done the RTFM thing and got confused. The manual seems to dance
>>> around the issue but doesn't seem to say anything which looks to be
>>> appropriate. The firewall is used mainly to filter incoming (from the
>>> WAN port) traffic. IP filters control the outbound (to the WAN port)
>>> filtering. The routing page talks about routing requests to a  
>>> specific
>>> IP outside the LAN side. Virtual servers route requests from the WAN
>>> side to a specific LAN address. The port forwarding section looked  
>>> more
>>> like an extension to the firewall page.
>>>
>>> 	Here is what I'd like to do graphically.
>>>
>>> Rule 1:
>>> LAN requests non-192.168.X.Y web page --> Router says "You must mean
>>> 192.168.X.Y" --> Router sends traffic to 192.168.X.Y/index.html
>>> Rule 2:
>>> LAN requests 192.168.X.Y/whatever.html --> Router passes along the
>>> request to 192.168.X.Y web server
>>>
>>> 	The question is how can I do this? I know I've missed something, but
>>> the manual didn't seem to help. I'll admit to not checking Google,  
>>> but
>>> I'm not sure what search terms to use.
>>>
>>> 	This ties in with the wireless questions I was asking a couple of
>>> months ago. After I get this working I'll be looking at  
>>> authentication
>>> for other services and extending the range of coverage.
>>>
>>> 				Later
>>> 				Mike
>>>
>>> _______________________________________________
>>> Roundtable mailing list
>>> Roundtable at muug.mb.ca
>>> http://www.muug.mb.ca/mailman/listinfo/roundtable
>>>
>> _______________________________________________
>> Roundtable mailing list
>> Roundtable at muug.mb.ca
>> http://www.muug.mb.ca/mailman/listinfo/roundtable
> 


From billreid at shaw.ca  Wed Jun 17 10:15:18 2009
From: billreid at shaw.ca (Bill Reid)
Date: Wed, 17 Jun 2009 10:15:18 -0500
Subject: [RndTbl] Routing questions
In-Reply-To: <4A38BE3D.1030202@gmail.com>
References: <4A382ED6.1050107@gmail.com> <4A383215.8080600@shaw.ca>
	<4A38BE3D.1030202@gmail.com>
Message-ID: <4A390886.9070507@shaw.ca>

Mike Pfaiffer wrote:

>     I'm using a D-Link 655. Would that make a difference?
> 

Here is the list of D-Link routers from the Openwrt site. The 655 is not 
on the list.

http://oldwiki.openwrt.org/Hardware(2f)DLink.html


-- Bill

From ummar143 at shaw.ca  Wed Jun 17 15:12:21 2009
From: ummar143 at shaw.ca (Dan Martin)
Date: Wed, 17 Jun 2009 15:12:21 -0500
Subject: [RndTbl] Mac OS file recovery
In-Reply-To: <4A383215.8080600@shaw.ca>
References: <4A382ED6.1050107@gmail.com> <4A383215.8080600@shaw.ca>
Message-ID: <93D66227-DFEB-4C61-873E-F27064292354@shaw.ca>

Yes, I am hanging my head in shame for not having backed up.

An error by NetBeans trashed a number of scripts that I have spent  
weeks writing.  Not in the trash, so I assume that it rm's things -  
apparently without warning when I attempted to rename a project.

Does anyone have suggestions about how to recover the files,  
commercially or otherwise?

Dan Martin
GP Hospital Practitioner
ummar143 at shaw.ca
(204) 831-1746
answering machine always on


From high.res.mike at gmail.com  Wed Jun 17 23:08:35 2009
From: high.res.mike at gmail.com (Mike Pfaiffer)
Date: Wed, 17 Jun 2009 23:08:35 -0500
Subject: [RndTbl] Mac OS file recovery
In-Reply-To: <93D66227-DFEB-4C61-873E-F27064292354@shaw.ca>
References: <4A382ED6.1050107@gmail.com> <4A383215.8080600@shaw.ca>
	<93D66227-DFEB-4C61-873E-F27064292354@shaw.ca>
Message-ID: <4A39BDC3.9060001@gmail.com>

Dan Martin wrote:
> Yes, I am hanging my head in shame for not having backed up.
> 
> An error by NetBeans trashed a number of scripts that I have spent  
> weeks writing.  Not in the trash, so I assume that it rm's things -  
> apparently without warning when I attempted to rename a project.
> 
> Does anyone have suggestions about how to recover the files,  
> commercially or otherwise?
> 
> Dan Martin
> GP Hospital Practitioner
> ummar143 at shaw.ca
> (204) 831-1746
> answering machine always on


	I seem to remember the OS X man page for rm showed an rm -W option (not 
available in Linux) which will recover named files.

				Later
				Mike



From high.res.mike at gmail.com  Wed Jun 17 23:23:02 2009
From: high.res.mike at gmail.com (Mike Pfaiffer)
Date: Wed, 17 Jun 2009 23:23:02 -0500
Subject: [RndTbl] Routing questions
In-Reply-To: <4A390886.9070507@shaw.ca>
References: <4A382ED6.1050107@gmail.com> <4A383215.8080600@shaw.ca>
	<4A38BE3D.1030202@gmail.com> <4A390886.9070507@shaw.ca>
Message-ID: <4A39C126.60909@gmail.com>

Bill Reid wrote:
> Mike Pfaiffer wrote:
> 
>>     I'm using a D-Link 655. Would that make a difference?
>>
> 
> Here is the list of D-Link routers from the Openwrt site. The 655 is not 
> on the list.
> 
> http://oldwiki.openwrt.org/Hardware(2f)DLink.html
> 
> 
> -- Bill
> 

	I guess in six months it will be there.

	Still, Seans idea about using a proxy might be interesting. I could 
tell the router the machine is a gateway then I won't have to redirect 
port 80 because it'll already be going to the proxy. From there I can 
mangle the URL and send it back through the router. Does that sound 
about right?

				Later
				Mike



From athompso at athompso.net  Thu Jun 18 13:21:53 2009
From: athompso at athompso.net (Adam Thompson)
Date: Thu, 18 Jun 2009 13:21:53 -0500
Subject: [RndTbl] The SPARC is dead
Message-ID: <8ce1230f0906181121w70768722hc746db0dd66d405f@mail.gmail.com>

http://www.itbusiness.ca/it/client/en/CDN/News.asp?sub=true&id=53588

The SPARC is dead, long live Sun... uh, I mean Oracle...

*sigh*
Another half-decent chip architecture bites the dust.  PA-RISC.  AXP.
MIPS.  PPC.  SPARC.
(OK, I know PA-RISC got rolled into IA64... which is nearly dead, itself.
And PPC is still alive and well in embedded platforms; I figure IBM's POWER
chips have about the same life expectancty as HP's IA64.)

So when the dust settles, we'll be left with, what, x86-64 - which it'd be
almost more accurate to say *happened* than was *designed*; PowerPC -
carefully hidden under the hood, ? la Cell processor or in millions of
devices; and ARM - also carefully hidden under the hood.

Have I missed anything?  Are there *any* chip architectures out there other
than x86 that aren't dying or dead *in the public's mind*?

-- 
-Adam Thompson
<athompso at athompso.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.muug.mb.ca/pipermail/roundtable/attachments/20090618/ebddf1bf/attachment.html 

From gedetil at cs.umanitoba.ca  Thu Jun 18 16:57:57 2009
From: gedetil at cs.umanitoba.ca (Gilbert E. Detillieux)
Date: Thu, 18 Jun 2009 16:57:57 -0500
Subject: [RndTbl] Fwd: O'Reilly UG News: InsideMobile Conference--Register
 Now & Save $150, Create & Market Your Own Mobile Apps
Message-ID: <4A3AB865.3040107@cs.umanitoba.ca>

FYI...

-------- Original Message --------
Subject: O'Reilly UG News: InsideMobile Conference--Register Now & Save 
$150, Create & Market Your Own Mobile Apps
Date: Thu, 18 Jun 2009 14:46:17 -0700
From: Marsee Henon <marsee at oreilly.com>

If you would like to view this information in your browser, click here:
http://post.oreilly.com/rd/9z1zhfmn5chu0alguc2d5pvaunn3k45l404m4fo2vdo

Forward this announcement - 
http://post.oreilly.com/f2f/9z1zbgsn2gplal275547l6ap5dt2627dpgj51n2vvio

Hi there

Can you share this with your group members if you think they'll be
interested?


What does it take to build mobile apps on different platforms?
Find out at our InsideMobile Conference, July 26 & 27--San Jose, CA.

Don't wait to learn how to develop mobile apps. Mobile is a huge and
growing market, ripe with opportunity. At InsideMobile in San Jose, CA,
you'll learn how to develop for this field right away--not just for
one device, but for all of the top frameworks, including iPhone,
Blackberry, Windows Mobile, Android, and Palm webOS.

Which platform is the easiest to work with? Which will give your apps
the greatest exposure? Get answers at InsideMobile and network with
established mobile developers.

Early Bird Price: $250 for the first 100 registrations (Save $150 on the
regular price of $400)

What will you learn at InsideMobile?

* The basics of developing on major mobile platforms
* How to develop for the small screen and manage other mobile platform
eccentricities
* How to make money developing mobile applications
* What it takes to develop for more than one platform at a time
* The tools you need to be a successful mobile developer
* The differences among platforms, and what makes each one unique

Featured speakers include:

*Francisco Diaz-Mitoma, co-founder of Tonnect
Gus Holcomb, principal engineer with Twin Technologies
*Phil Libin, CEO of Evernote
*Giorgio Natili, Founder and Head of GNStudio
*Raj Singh, Vice President of Business Development for Skyfire
*Brian Fling, author of Mobile Design and Development (O'Reilly, Aug 09)
*Dan Burcaw, co-founder of Push IO, LLC


For more information on InsideMobile Conference, see:
http://post.oreilly.com/rd/9z1zs7447fh49frcemvv7ica127d8ej42qcc5a4h288

Have a mobile topic you'd like to propose? For information on how to 
submit your topic, see:
http://post.oreilly.com/rd/9z1z8p7gv18guh9mhfbfo6iruc6pk58i1q2h5m2e5o0

To keep up with conference news from John Wilker and Tom Ortega, see:
http://post.oreilly.com/rd/9z1z1loe2i6ujneve9i594qt60p3dg8fp8pjo998gm8

If you want to develop mobile apps or learn to develop for other mobile
platforms, don't miss this event.

================================================================
Marsee Henon
O'Reilly
1005 Gravenstein Highway North
Sebastopol, CA   95472
800-998-9938
http://post.oreilly.com/rd/9z1zstpuijfsmhf6fmf7b5he71ih9u5jt9eik3v5rt0
Follow us on Twitter at 
http://post.oreilly.com/rd/9z1z4trmhjpekr2e4iafq39llqrjevq61u7r6gnjhfo

You are receiving this email because you are a User Group contact with
O'Reilly Media. If you would like to stop receiving these newsletters or
announcements from O'Reilly, send an email to marsee at oreilly.com.

================================================================

Forward this announcement - 
http://post.oreilly.com/f2f/9z1zbgsn2gplal275547l6ap5dt2627dpgj51n2vvio


From sbalneav at legalaid.mb.ca  Fri Jun 19 10:15:39 2009
From: sbalneav at legalaid.mb.ca (Scott Balneaves)
Date: Fri, 19 Jun 2009 10:15:39 -0500
Subject: [RndTbl] The SPARC is dead
In-Reply-To: <8ce1230f0906181121w70768722hc746db0dd66d405f@mail.gmail.com>
References: <8ce1230f0906181121w70768722hc746db0dd66d405f@mail.gmail.com>
Message-ID: <20090619151539.GC19525@legalaid.mb.ca>

On Thu, Jun 18, 2009 at 01:21:53PM -0500, Adam Thompson wrote:

> Have I missed anything?  Are there *any* chip architectures out there other
> than x86 that aren't dying or dead *in the public's mind*?

Oh, come on.  A monoculture's worked so well for the world in the desktop
operating system biz, I'm sure a monoculture in the hardware biz will work just
as well.

Scott

-- 
Scott L. Balneaves | The dissemination of knowledge is one of the
Systems Department | cornerstones of civilization.
Legal Aid Manitoba |     -- John F. Budd

From trevor at tecnopolis.ca  Sat Jun 27 06:33:49 2009
From: trevor at tecnopolis.ca (Trevor Cordes)
Date: Sat, 27 Jun 2009 06:33:49 -0500
Subject: [RndTbl] Quad core motherboards
In-Reply-To: <4A353B42.9070602@gmail.com>
References: <4A353B42.9070602@gmail.com>
Message-ID: <20090627063349.6de91906@pog.tecnopolis.ca>

On 2009-06-14 Mike Pfaiffer wrote:
> 	I'm looking to pick up a quad core machine. I've been told
> some motherboards don't work too well with Linux and BSD. Apparently
> all other components work fine. The guys I was going to pick it up
> from said they were going to do some research on the matter and get
> back to me. This was early May. Looks like I'll have to walk in with
> a list. So the question is which motherboards work?

Any Intel-based chipset board should work fine all the time for me.  The
only issues might be with less well-supported ATI and Nvidia chipsets.

My company can get in whatever motherboards you require at, probably,
the best Wpg prices.  So if you want a quote, send your model #'s to me
and list your best local price.

From high.res.mike at gmail.com  Sat Jun 27 15:34:46 2009
From: high.res.mike at gmail.com (Mike Pfaiffer)
Date: Sat, 27 Jun 2009 15:34:46 -0500
Subject: [RndTbl] Quad core motherboards
In-Reply-To: <20090627063349.6de91906@pog.tecnopolis.ca>
References: <4A353B42.9070602@gmail.com>
	<20090627063349.6de91906@pog.tecnopolis.ca>
Message-ID: <4A468266.7080408@gmail.com>

Trevor Cordes wrote:
> On 2009-06-14 Mike Pfaiffer wrote:
>> 	I'm looking to pick up a quad core machine. I've been told
>> some motherboards don't work too well with Linux and BSD. Apparently
>> all other components work fine. The guys I was going to pick it up
>> from said they were going to do some research on the matter and get
>> back to me. This was early May. Looks like I'll have to walk in with
>> a list. So the question is which motherboards work?
> 
> Any Intel-based chipset board should work fine all the time for me.  The
> only issues might be with less well-supported ATI and Nvidia chipsets.

	A number of people have said their AMD boards are fine. After much 
consultation, I've decided to go with Intel. On-board graphics are fine 
for the moment. I expect the machine to last quite a while and may 
eventually need a video card. By that time it will be necessary to do 
more research. Hopefully the drivers will be available by then.

> My company can get in whatever motherboards you require at, probably,
> the best Wpg prices.  So if you want a quote, send your model #'s to me
> and list your best local price.

	Bad timing I'm afraid. I'm already talking with John D. from Brandon. 
Have been for a couple of weeks. We still have some details to work out, 
but he's going to get back to me about the possible configurations and 
their prices. At the moment Intel does seem the way to go. RAM prices 
are cheap. We're looking at a mini-ATX board with a 2.7 or 2.8 GHz 
(rounding up) chip with loads of cache. (a big improvement over my 
current 1.5GHz chip). We're aiming for $800 but expect it to be slightly 
more. Oddly enough this is what I paid for my current machine back in 
the day.

	Although, a friend of mine decided to go cheap and bought 
discontinued/slower parts to put together himself and it ended up at 
less than half the price. Since this machine has to last I'm looking for 
something more robust. The thing is both you and John know what works in 
the *NIX world and will have something I can take home at the end of the 
day knowing it will work when I power it on. If I put it together myself 
and say, crack the chip while applying the cooling tower, I'm the one 
who's out of luck. To me the costs of labour for you guys as retailers 
to do it for me is worth it. After all you guys aren't going to come 
back and say the machine doesn't work and I'll have to buy a second or 
third chip. Besides, if it doesn't work there'll be someone to yell at 
other than myself. ;-)

				Later
				Mike

From montanaq at gmail.com  Tue Jun 30 09:22:23 2009
From: montanaq at gmail.com (Montana Quiring)
Date: Tue, 30 Jun 2009 09:22:23 -0500
Subject: [RndTbl] non-deletable directory but writable inside the directory
Message-ID: <bdad73b60906300722s40610c18r78146c6cace85c32@mail.gmail.com>

Hello,

I'm updating my public machine image with Ubuntu 8.04
I would like for the Desktop directory in the users home directory to be
non-deletable but still allow the user to download files to that folder (the
files in the Desktop folder get deleted on a reboot).
Right now my work around is a script in the runtime directory that deletes
all of the files in the Desktop directory and then recreates and chowns it
(in case it's been deleted).
Assigning the directory the immutable bit stops it from being deleted but
also doesn't allow the user to write in that folder. :(

I tried all the google results I could find, but couldn't find a working
solution.
Any suggestions?


-- 
-Montana
Blog:
http://montanaquiring.info
My Friend Feed:
http://friendfeed.com/antikx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.muug.mb.ca/pipermail/roundtable/attachments/20090630/50a8a99d/attachment.html 

From gedetil at cs.umanitoba.ca  Tue Jun 30 10:43:23 2009
From: gedetil at cs.umanitoba.ca (Gilbert E. Detillieux)
Date: Tue, 30 Jun 2009 10:43:23 -0500
Subject: [RndTbl] non-deletable directory but writable inside the
	directory
In-Reply-To: <bdad73b60906300722s40610c18r78146c6cace85c32@mail.gmail.com>
References: <bdad73b60906300722s40610c18r78146c6cace85c32@mail.gmail.com>
Message-ID: <4A4A329B.3000208@cs.umanitoba.ca>

On 2009-06-30 09:22, Montana Quiring wrote:
> I'm updating my public machine image with Ubuntu 8.04
> I would like for the Desktop directory in the users home directory to be 
> non-deletable but still allow the user to download files to that folder 
> (the files in the Desktop folder get deleted on a reboot).
> Right now my work around is a script in the runtime directory that 
> deletes all of the files in the Desktop directory and then recreates and 
> chowns it (in case it's been deleted).
> Assigning the directory the immutable bit stops it from being deleted 
> but also doesn't allow the user to write in that folder. :(
> 
> I tried all the google results I could find, but couldn't find a working 
> solution.
> Any suggestions?

How about putting an immutable file or subdirectory inside the Desktop 
directory?  Since the Desktop directory can never be emptied, it would 
then become non-deletable itself, but could still be writable.

-- 
Gilbert E. Detillieux		E-mail:	<gedetil at cs.umanitoba.ca>
Dept. of Computer Science	Web:	http://www.cs.umanitoba.ca/~gedetil/
University of Manitoba		Phone:	(204)474-8161
Winnipeg MB CANADA  R3T 2N2	Fax:	(204)474-7609

From montanaq at gmail.com  Tue Jun 30 10:46:55 2009
From: montanaq at gmail.com (Montana Quiring)
Date: Tue, 30 Jun 2009 10:46:55 -0500
Subject: [RndTbl] non-deletable directory but writable inside the
	directory
In-Reply-To: <4A4A329B.3000208@cs.umanitoba.ca>
References: <bdad73b60906300722s40610c18r78146c6cace85c32@mail.gmail.com>
	<4A4A329B.3000208@cs.umanitoba.ca>
Message-ID: <bdad73b60906300846g4db569bbne0f90e10a31f64c2@mail.gmail.com>

ohhh... good idea! thanks.
I would still want to empty out the Desktop directory every reboot. I'm
wondering if the *rm* command would delete everything but the immutable file
or just stop and error out. I'll have to test.

-MQ

On Tue, Jun 30, 2009 at 10:43 AM, Gilbert E. Detillieux <
gedetil at cs.umanitoba.ca> wrote:

> On 2009-06-30 09:22, Montana Quiring wrote:
>
>> I'm updating my public machine image with Ubuntu 8.04
>> I would like for the Desktop directory in the users home directory to be
>> non-deletable but still allow the user to download files to that folder (the
>> files in the Desktop folder get deleted on a reboot).
>> Right now my work around is a script in the runtime directory that deletes
>> all of the files in the Desktop directory and then recreates and chowns it
>> (in case it's been deleted).
>> Assigning the directory the immutable bit stops it from being deleted but
>> also doesn't allow the user to write in that folder. :(
>>
>> I tried all the google results I could find, but couldn't find a working
>> solution.
>> Any suggestions?
>>
>
> How about putting an immutable file or subdirectory inside the Desktop
> directory?  Since the Desktop directory can never be emptied, it would then
> become non-deletable itself, but could still be writable.
>
> --
> Gilbert E. Detillieux           E-mail: <gedetil at cs.umanitoba.ca>
> Dept. of Computer Science       Web:
> http://www.cs.umanitoba.ca/~gedetil/<http://www.cs.umanitoba.ca/%7Egedetil/>
> University of Manitoba          Phone:  (204)474-8161
> Winnipeg MB CANADA  R3T 2N2     Fax:    (204)474-7609
>



-- 
-Montana
Blog:
http://montanaquiring.info
My Friend Feed:
http://friendfeed.com/antikx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.muug.mb.ca/pipermail/roundtable/attachments/20090630/fa47ed2b/attachment.html 

From gedetil at cs.umanitoba.ca  Tue Jun 30 10:53:40 2009
From: gedetil at cs.umanitoba.ca (Gilbert E. Detillieux)
Date: Tue, 30 Jun 2009 10:53:40 -0500
Subject: [RndTbl] non-deletable directory but writable inside the
	directory
In-Reply-To: <bdad73b60906300846g4db569bbne0f90e10a31f64c2@mail.gmail.com>
References: <bdad73b60906300722s40610c18r78146c6cace85c32@mail.gmail.com>	
	<4A4A329B.3000208@cs.umanitoba.ca>
	<bdad73b60906300846g4db569bbne0f90e10a31f64c2@mail.gmail.com>
Message-ID: <4A4A3504.1000601@cs.umanitoba.ca>

On 2009-06-30 10:46, Montana Quiring wrote:
> ohhh... good idea! thanks.
> I would still want to empty out the Desktop directory every reboot. I'm 
> wondering if the *rm* command would delete everything but the immutable 
> file or just stop and error out. I'll have to test.

"rm -f" should do the trick, since it will ignore errors and continue.

-- 
Gilbert E. Detillieux		E-mail:	<gedetil at cs.umanitoba.ca>
Dept. of Computer Science	Web:	http://www.cs.umanitoba.ca/~gedetil/
University of Manitoba		Phone:	(204)474-8161
Winnipeg MB CANADA  R3T 2N2	Fax:	(204)474-7609

From montanaq at gmail.com  Tue Jun 30 11:04:30 2009
From: montanaq at gmail.com (Montana Quiring)
Date: Tue, 30 Jun 2009 11:04:30 -0500
Subject: [RndTbl] non-deletable directory but writable inside the
	directory
In-Reply-To: <4A4A3504.1000601@cs.umanitoba.ca>
References: <bdad73b60906300722s40610c18r78146c6cace85c32@mail.gmail.com>
	<4A4A329B.3000208@cs.umanitoba.ca>
	<bdad73b60906300846g4db569bbne0f90e10a31f64c2@mail.gmail.com>
	<4A4A3504.1000601@cs.umanitoba.ca>
Message-ID: <bdad73b60906300904l8053059kaf304f2a8699d81c@mail.gmail.com>

ya! It works like a charm.
I made the immutable file a '.' (hidden) file so that it doesn't even show
up in ROX.
Thanks for your help Gilbert.
-MQ

On Tue, Jun 30, 2009 at 10:53 AM, Gilbert E. Detillieux <
gedetil at cs.umanitoba.ca> wrote:

> On 2009-06-30 10:46, Montana Quiring wrote:
>
>> ohhh... good idea! thanks.
>> I would still want to empty out the Desktop directory every reboot. I'm
>> wondering if the *rm* command would delete everything but the immutable file
>> or just stop and error out. I'll have to test.
>>
>
> "rm -f" should do the trick, since it will ignore errors and continue.
>
>
> --
> Gilbert E. Detillieux           E-mail: <gedetil at cs.umanitoba.ca>
> Dept. of Computer Science       Web:
> http://www.cs.umanitoba.ca/~gedetil/<http://www.cs.umanitoba.ca/%7Egedetil/>
> University of Manitoba          Phone:  (204)474-8161
> Winnipeg MB CANADA  R3T 2N2     Fax:    (204)474-7609
>



-- 
-Montana
Blog:
http://montanaquiring.info
My Friend Feed:
http://friendfeed.com/antikx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.muug.mb.ca/pipermail/roundtable/attachments/20090630/587ea0cb/attachment.html 

From john at johnlange.ca  Tue Jun 30 14:09:30 2009
From: john at johnlange.ca (John Lange)
Date: Tue, 30 Jun 2009 14:09:30 -0500
Subject: [RndTbl] non-deletable directory but writable inside the
 directory
In-Reply-To: <bdad73b60906300722s40610c18r78146c6cace85c32@mail.gmail.com>
References: <bdad73b60906300722s40610c18r78146c6cace85c32@mail.gmail.com>
Message-ID: <1246388970.5310.29.camel@vandium.darkcore.net>

On Tue, 2009-06-30 at 09:22 -0500, Montana Quiring wrote:
> Hello,
> 
> I'm updating my public machine image with Ubuntu 8.04
> I would like for the Desktop directory in the users home directory to
> be non-deletable but still allow the user to download files to that
> folder (the files in the Desktop folder get deleted on a reboot). 
> Right now my work around is a script in the runtime directory that
> deletes all of the files in the Desktop directory and then recreates
> and chowns it (in case it's been deleted).
> Assigning the directory the immutable bit stops it from being deleted
> but also doesn't allow the user to write in that folder. :(
> 
> I tried all the google results I could find, but couldn't find a
> working solution.
> Any suggestions?

If home is not writable, then users can't delete their home directory
even if they own it.

e.g.

Permissions on /home:
drwxr-xr-x 5 root root 4096 2009-05-26 20:47 home/

Permissions inside /home:
drwxr-xr-x 90 johnlange users  4096 2009-06-30 13:56 johnlange/

I can not delete /home/johnlange

The permissions on the parent directory apply to the contents of that
directory.

-- 
John Lange
http://www.johnlange.ca


From ve4drk at gmail.com  Tue Jun 16 19:37:06 2009
From: ve4drk at gmail.com (Dan Keizer)
Date: Wed, 17 Jun 2009 00:37:06 -0000
Subject: [RndTbl] Routing questions
In-Reply-To: <4A383215.8080600@shaw.ca>
References: <4A382ED6.1050107@gmail.com> <4A383215.8080600@shaw.ca>
Message-ID: <daf1b8090906161731m12fce87at154863386eaab14b@mail.gmail.com>

yeah -- like Bill says -- you want to use a customized firmware to
perform that function.

Check out a few micro builds ... a couple I've used are below -- you
didn't say what hardware you have, but check the following:

dd-wrt:  http://www.dd-wrt.com/wiki/index.php/Supported_Devices
openwrt: http://oldwiki.openwrt.org/TableOfHardware.html

you would probably like dd-wrt -- it is very user friendly and
provides alot of functionality ... a small screenshot of one of my
dd-wrt router configs is attached -- (I don't have that service
enabled)

openwrt has a large collection (and I mean large!) of downloadable
programs cross-compiled for the various supported platforms... both
have ssh and http control.

Dan.

On Tue, Jun 16, 2009 at 7:00 PM, Bill Reid<billreid at shaw.ca> wrote:
> Hi Mike,
>
> What you want to do goes way beyond what most low end routers are
> designed to do. As you suggest the rules are applied to traffic coming
> into the WAN port and not local traffic. Your proposal also is not just
> IP routing but is also URL routing(i.e more like a proxy).
>
> The port 80 redirect is available in the mods to the Linksys router via
> firmware replacement(an exmaple is openwrt.org)
>
> -- Bill
>
> Mike Pfaiffer wrote:
>> ? ? ? The set-up to the question is I picked up a decently modern wireless
>> router to play with. I allow no connection to the internet (nothing in
>> the WAN port). I have a couple of computers I can connect to the wired
>> ports of the router (assign static IPs within the subnet but outside the
>> DHCP range). These machines (both *NIX boxes) will provide services such
>> as a web server and a mud/game server. The router will allow open access
>> to anyone who wants to connect (I want to provide my own content for
>> experimentation). Since I have physical control of the hardware I'm not
>> too worried about security.
>>
>> ? ? ? Initially I'd like to be able to redirect all http traffic not bound
>> for my web server to my web server. For example someone trying to get to
>> Google will get my info page instead. But if someone were trying to
>> access a different page on the same machine would still be able to connect.
>>
>> ? ? ? I've done the RTFM thing and got confused. The manual seems to dance
>> around the issue but doesn't seem to say anything which looks to be
>> appropriate. The firewall is used mainly to filter incoming (from the
>> WAN port) traffic. IP filters control the outbound (to the WAN port)
>> filtering. The routing page talks about routing requests to a specific
>> IP outside the LAN side. Virtual servers route requests from the WAN
>> side to a specific LAN address. The port forwarding section looked more
>> like an extension to the firewall page.
>>
>> ? ? ? Here is what I'd like to do graphically.
>>
>> Rule 1:
>> LAN requests non-192.168.X.Y web page --> Router says "You must mean
>> 192.168.X.Y" --> Router sends traffic to 192.168.X.Y/index.html
>> Rule 2:
>> LAN requests 192.168.X.Y/whatever.html --> Router passes along the
>> request to 192.168.X.Y web server
>>
>> ? ? ? The question is how can I do this? I know I've missed something, but
>> the manual didn't seem to help. I'll admit to not checking Google, but
>> I'm not sure what search terms to use.
>>
>> ? ? ? This ties in with the wireless questions I was asking a couple of
>> months ago. After I get this working I'll be looking at authentication
>> for other services and extending the range of coverage.
>>
>> ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? Later
>> ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? Mike
>>
>> _______________________________________________
>> Roundtable mailing list
>> Roundtable at muug.mb.ca
>> http://www.muug.mb.ca/mailman/listinfo/roundtable
>>
>
> _______________________________________________
> Roundtable mailing list
> Roundtable at muug.mb.ca
> http://www.muug.mb.ca/mailman/listinfo/roundtable
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: SS-20090616192547.png
Type: image/png
Size: 36508 bytes
Desc: not available
Url : http://www.muug.mb.ca/pipermail/roundtable/attachments/20090617/a9a1fc8a/attachment.png