KCLUG September 2004

kclug@kclug.org

63 participants
117 discussions

RE: Which distro can anyone recommend for low end hardware ?
by Rob Becker 04 Oct '04

04 Oct '04

This doesn't answer your question regarding a specific distro, but whatever distro you use, carefully audit all services that run at start. With a machine that is not connected to a network, many of your network services can be disabled. Also look at running a light desktop manager like ICEWM. If there is any budget at all for adding RAM and or a newer HD, it may be well worth your time to do so. A P2/200 will be sufficient for the duties you suggest, but a faster HD and more RAM will make things much speedier. Good luck with it. Rob -----Original Message----- From: Oren Beck [mailto:oren_beck@hotmail.com] Sent: Sunday, September 26, 2004 5:28 PM To: List - KCLUG Subject: Which distro can anyone recommend for low end hardware ? Ok folks- This one is not the usual "could have googled for it " question . A day care center worker wants to buy cheap used hardware and have me or someone else make it work . This center is a not-for-profit so Surplus Exchange is a viable hardware source . Here's where KCLUG can come in . Showing that Open Source is truly viable for this person's need . What is needed ? Single user single desktop maybe not even networked or if so only at the printer share level Compatibility with Msword and Excel in both directions , Printing flyers . Archiving all flyers etc . Likely this system may never be internet connected ! So from that outline- What distro is suggested, And more importantly why ? Presently owned system is a P2/200 with 64 meg ram and 840 meg HD . Suggestions for what to use on this would be appreciated from anyone having had experience with the suggested distro. _______________________________________________ Kclug mailing list Kclug(a)kclug.org http://kclug.org/mailman/listinfo/kclug

2 1

Which distro can anyone recommend for low end hardware ?
by Oren Beck 04 Oct '04

04 Oct '04

Ok folks- This one is not the usual "could have googled for it " question . A day care center worker wants to buy cheap used hardware and have me or someone else make it work . This center is a not-for-profit so Surplus Exchange is a viable hardware source . Here's where KCLUG can come in . Showing that Open Source is truly viable for this person's need . What is needed ? Single user single desktop maybe not even networked or if so only at the printer share level Compatibility with Msword and Excel in both directions , Printing flyers . Archiving all flyers etc . Likely this system may never be internet connected ! So from that outline- What distro is suggested, And more importantly why ? Presently owned system is a P2/200 with 64 meg ram and 840 meg HD . Suggestions for what to use on this would be appreciated from anyone having had experience with the suggested distro.

5 5

KCLUG 4Q Meetings confirmed
by Jim Herrmann 04 Oct '04

04 Oct '04

KCLUG has been confirmed for the following meeting times at the Downtown Kansas City Public Library, 14 W 10th, KC MO 64105. See you there! Wednesday, October 06, 2004 6:00 pm - 8:45 pm KCLUG (Confirmed) Meeting Room 312 Tuesday, October 19, 2004 6:00 pm - 8:45 pm KCLUG (Confirmed) Meeting Room 312 Wednesday, November 03, 2004 6:00 pm - 8:45 pm KCLUG (Confirmed) Meeting Room 312 Tuesday, November 16, 2004 6:00 pm - 8:45 pm KCLUG (Confirmed) Meeting Room 312 Wednesday, December 01, 2004 6:00 pm - 8:45 pm KCLUG (Confirmed) Meeting Room 312 Tuesday, December 21, 2004 6:00 pm - 8:45 pm KCLUG (Confirmed) Meeting Room 312 -- "Our enemies are innovative and resourceful, and so are we. They never stop thinking about new ways to harm our country and our people, and neither do we." -- George W. Bush --

2 1

Re: still no ssh access
by Brian Kelsay 30 Sep '04

30 Sep '04

PPPoE is not a factor as I have Comcast cable not RR. No I haven't tried to connect to the firewall. If I want to, I enable ssh and it defaults to port 222. [OT] On the PPPoE front, my wife wants me to look into/consider switching to SBC DSL, getting phone, internet and cell thru them and then we could get satellite TV. I've got to run the numbers and see if that combo will be cheaper. If I get a TIVO satellite receiver thrown in I may do it. I haven't actually recorded any TV shows in 6-8 months, but w/ TIVO I think I would. Especially if I could get the LAN stuff setup w/ the unit. View the recorded programs on my PC. Brian Kelsay >>> Jonathan Hutchins <> 09/30/04 04:04PM >>> On Thursday 30 September 2004 01:04 pm, Brian Kelsay wrote: > Now that I have sshd running on the new server and I can connect to it from > another PC on my LAN, I know that it should work. Have you tried connecting to the firewall itself with ssh? What kind of WAN connection do you have? I was unable to connect to a system that was on an SBC PPPoE modem. I think the problem was with the PPPoE connection, but I never did track it down.

1 0

still no ssh access
by Brian Kelsay 30 Sep '04

30 Sep '04

Now that I have sshd running on the new server and I can connect to it from another PC on my LAN, I know that it should work. I have setup port 80, 8000 and 21 to forward to 22 on the server, but none allow me to connect with Putty from work. Those that remember, I had narrowed it down to port 80 being unblocked on outbound and POSSIBLY port 21. I just want the ability to sftp a few small files to it, enable new functions and test the webserver in general. The rules are set up in IPCop correctly. I am about to resign myself to the fact that there is no way to do this unless there is some other package that I can put on the server to allow remote access via port 80 or 443 (https). Anybody know of something like webmin that comes by default to work on 443 and then allows you to ssh or ftp? I feel really stupid. The next step I will try is to put webmin on 443 instead of 10000 or whatever it is set by default, but I'm not confident. I probably need to leave my current port forwarding rules until LUG meeting night to see if I can get in remotely from another location. This has been a testing nightmare for me. Brian Kelsay

5 4

Re: still no ssh access
by Brian Kelsay 30 Sep '04

30 Sep '04

Now that is a good question and probably the answer. I believe in the scientific method for testing of any type. Make changes to only one item at a time until all are exhausted so you know what made the difference. I have never had to change this before. I assume it is sshd.conf. I'll give it a look tonight and set everything else back the way it was. Brian Kelsay >>> <JARiley 09/30/04 03:13PM >>> Why don't you just change your sshd config file to use port 443, then the encrypted traffic won't throw up any flags to the firewall admins. James Riley, CISSP

1 0

Re: still no ssh access
by Brian Kelsay 30 Sep '04

30 Sep '04

Interesting, but I have already been able to use Putty on a PC in my LAN. It worked with no change. Brian Kelsay >>> Rich Edelman <redelman(a)speedscript.com> 09/30/04 01:39PM >>> What I've found I needed to do to allow PuTTY and WinSCP clients to connect is to change the sshd config. These are the options I needed to change, keep in mind this has been on SuSE 9.x, your distribution may vary. /etc/ssh/sshd_config: #PasswordAuthentication no #PermitEmptyPasswords no UsePAM yes

2 1

RE: still no ssh access
by Brian Kelsay 30 Sep '04

30 Sep '04

The IPCop box, if ssh is enabled on it, will allow ssh on 222. You can then port forward 22 to one box internal and setup any others with different external ports forwarded to specific boxes port 22. e.g. ip:22 -->192.168.0.3:22, ip:1022-->192.168.0.4:22, ip:1023-->192.168.0.5:22. Unfortuantely I can't do that. My workplace blocks outbound connections to anything but 80, 443 and 21 (ftp). I have tried port 22, 80, and 21 forwarded at the firewall to server port 22. Brian Kelsay >>> "Dustin Decker" <dustin.decker(a)1on1security.com> 09/30/04 01:25PM >>> IPCop is designed to have ssh run on port 222, leaving you the luxury of forwarding the SSH port (which is 22 btw, not 21) to another host on your network. If you're on RoadRunner, you might want to modify IPCop to have the web admin interface listen on something other than port 445, as that is blocked because of the number of worms which attack Win2K on that port. If you are trying to connect to a host _behind_ IPCop, forward port 22 to that host. If you are trying to connect to IPCol itself, use the -p flag to connect on port 222. Dustin > -----Original Message----- > Of Brian Kelsay > Sent: Thursday, September 30, 2004 1:04 PM > To: kclug(a)kclug.org > Subject: still no ssh access > > Now that I have sshd running on the new server and I can connect to it > from another PC on my LAN, I know that it should work. I have setup port > 80, 8000 and 21 to forward to 22 on the server, but none allow me to > connect with Putty from work. Those that remember, I had narrowed it down > to port 80 being unblocked on outbound and POSSIBLY port 21. I just want > the ability to sftp a few small files to it, enable new functions and test > the webserver in general. The rules are set up in IPCop correctly. I am > about to resign myself to the fact that there is no way to do this unless > there is some other package that I can put on the server to allow remote > access via port 80 or 443 (https). > > Anybody know of something like webmin that comes by default to work on 443 > and then allows you to ssh or ftp? I feel really stupid. The next step > I will try is to put webmin on 443 instead of 10000 or whatever it is set > by default, but I'm not confident. > > I probably need to leave my current port forwarding rules until LUG > meeting night to see if I can get in remotely from another location. > This has been a testing nightmare for me. > > Brian Kelsay

1 0

Re: still no ssh access
by Brian Kelsay 30 Sep '04

30 Sep '04

Why should it matter? It is not 3 services, but one, with one ultimate destination and I am the only user. There are no connections on 22, 80, 21 or 8000 until I attempt them. I only attempt to connect to one at a time. What's the difference from this and having a firewall forward both 80 and 8080 to the same webserver, which I understand is standard practice? Brian Kelsay >>> crash 3m <crash3m(a)gmail.com> 09/30/04 01:22PM >>> Your forwarding 3 ports, to 1 port? I dont believe thats a workable solution, if you forward port 80 on the external machine, to 22 on the internal machine, and set putty to connect to port 80 for an ssh/scp connection you can transfer your files. But AFAIK (and IANA tcpi/ip expert) you cannot have the 3 services listening on the same port on the same protocol (e.g. you could have one on udp and one on tcp) Surely there will be some others that will chime in with a more accurate answer. On Thu, 30 Sep 2004 13:04:01 -0500, Brian Kelsay <brian.kelsay(a)kcc.usda.gov> wrote: > Now that I have sshd running on the new server and I can connect to it from another PC on my LAN, I know that it should work. I have setup port 80, 8000 and 21 to forward to 22 on the server, but none allow me to connect with Putty from work. Those that remember, I had narrowed it down to port 80 being unblocked on outbound and POSSIBLY port 21. I just want the ability to sftp a few small files to it, enable new functions and test the webserver in general. The rules are set up in IPCop correctly. I am about to resign myself to the fact that there is no way to do this unless there is some other package that I can put on the server to allow remote access via port 80 or 443 (https). > > Anybody know of something like webmin that comes by default to work on 443 and then allows you to ssh or ftp? I feel really stupid. The next step I will try is to put webmin on 443 instead of 10000 or whatever it is set by default, but I'm not confident. > > I probably need to leave my current port forwarding rules until LUG meeting night to see if I can get in remotely from another location. This has been a testing nightmare for me. > > Brian Kelsay > > _______________________________________________ > Kclug mailing list > Kclug(a)kclug.org > http://kclug.org/mailman/listinfo/kclug > -- Got gmail? I do hahaha _______________________________________________ Kclug mailing list Kclug(a)kclug.org http://kclug.org/mailman/listinfo/kclug

1 0

OT: W98SE needed
by Jonathan Hutchins 30 Sep '04

30 Sep '04

I need to restore the OS on an older laptop, and I would prefer to go with W98SE rather than the original W98. Unfortunately that's one of the things I don't have in my cumulative computer junk stash. I don't mind asking my client to buy a copy, but they're a bit hard to find these days. I can get a copy of the media, but I'll need a license/certificate/activation key too. If any of you _does_ have such a thing in their cumulative computer junk stash, I'd be glad to buy it from you; if you know of somewhere that might have it please let me know.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG September 2004