| |
| |
| |
|
Page: 1 2 3 4 5
Comments:
<0> ipsec and ssl are just two encryption protocols?
<0> spike: i also dont quite understand the purpose of VPN, its just like having encrypted access to network shares or databases as opposed to ssh where you actually have access to an actual shell interface...i dont see why VPN is more widely used?
<1> unix_infidel: saying ipsec and ssl are just two encryption protocols is *very* reductive and incomplete... but well, guess one can kinda say it
<2> unix_infidel: ipsec is an encapsulation protocol. ssl is an "secure socket layer" and the method of encryption is left to another protocol.
<0> ok...that make sense.
<1> that's wrong too
<0> rawr.
<1> anyway
<1> unix_infidel: well, take the cl***ical example: you need to access a webserver hosting an intranet application
<1> unix_infidel: normally available only from host on the LAN. how would you do that with ssh?
<1> you could actually doing with port tunnelling, maybe with a couple of jumps considering you cant really have a shell on the fw
<1> unix_infidel: doing that is tricky, none of the user would know how to, and it's not flexible (thinks that besides that you need also access to some other web app hosted on another internal server)
<1> unix_infidel: with vpn it's like you're sitting on that LAN, so you can access whatever resources you please with no additional effort
<1> unix_infidel: that's why VPN is more widely used: ssh tunnels are hard to maintain, hard to setup, and not flexible
<0> so its like remote desktop with added security?
<1> no
<1> rdesktop is vnc, nothing to do with that
<1> unix_infidel: pay attention to the bit where I say "it's like you're sitting on that LAN"
<0> right, i dont quite see how that's different from the ssh at the presentation level.
<3> you're using your applications, not those on a remote machine
<0> ahh, ok.
<0> i think i get it. You're working just as if you were working on a workstation that exists as a domain relative to the domain server and the web server.
<0> but what i dont understand is how that's different than ssh-ing into that worksation, wouldnt you have the same access?
<1> yes
<1> there's no difference between ssh->host and ssh->(vpn->host)
<0> but its more widely used...because its....EASIER to use :P
<1> see the example above, go on and try to setup ~8 ssh tunnells
<1> it's not a matter of easiness, it's really a matter of usability
<0> spike: you mean one per application you need access to?
<1> one per protocol per server...
<1> you'd endup with a dozen of tunnels in minutes on a fairly busy site
<1> really not doable
<0> ok its starting to coalesce.
<1> and you cant use ssh to tunnel traffic, which is nice for roadwarriors security
<1> tunnel traffic = tunnel your whole traffic
<0> you'd need to remote workstation--(ssh)-->intranet workstation--(ssh)-->a lotta servers (web, domain, database)
<1> unix_infidel: and you're not talking firewalls into account, and privileges necessary to bind <1024 ports, and more
<1> Ala Kazam
<1> :)
<0> spike: thanks for making thet absract a little bit more concrete.
<3> ldapclient init -a profileName=default -a domainName=acm.jhu.edu ldap.acm.jhu.edu
<3> err
<0> now just need to look at the way it looks at the presentation level.
<1> unix_infidel: uh? presentation level what? as in OSI model?
<0> spike: well, not necessarily no.
<0> i mean more like once you're vpned into a box, what does the client look like and how do you interact.
<1> I already told you twice
<1> you dont vpn into a box
<0> erm into a network
<0> you told me its like being in that intranet as a client.
<1> yes, it's like sitting there, on the LAN, with an internal rfc1918 ip
<1> even if vpn clients always are on a separated subnet
<1> night amrit|zzz
<4> night
<5> hey guys, i'm trying to understand what dnsreports.com is saying in the first FAIL that occurs for my domain, altcall.com. any ideas?: http://www.dnsreport.com/tools/dnsreport.ch?domain=altcall.com
<3> litage: the nameservers aren't returning additional A records for the NS entries (normally in the same reply)
<3> this is a bit OT though =P
<3> I guess this is networks hour or something
<5> hah
<1> :)
<1> heya TipTap
<6> morning spike
<6> it's far too hot this morning
<1> c'mon guys, CCNA for free :P
<1> TipTap: *this* morning? so was yesterday and the day before :(
<6> yeh, but today i am stuck in the office
<1> and it's damned still.... no wind at all :/
<6> no air conditioning or anything so it feels really sticky and horrible
<5> Triskelios: i'm using tinydns as my authoritative nameserver. would this be a config issue, or tinydns-behaviour issue?
<3> litage: probably server behaviour
<5> hrm
<3> also, try dig A ns1.altcall.com @202.168.41.222
<3> something is clearly broken =P
<5> Triskelios: ns1.altcall.com (tinydns) is authoritative for 18 different domains. thus, i have 18 variations of this: .DOMAIN.TLD:202.168.41.222:ns1.altcall.com:259200
<3> the other domains don't matter right now
<3> at least, they shouldn't...
<3> it does happen to repeat the same record 18 times, though
<3> so maybe it's confused
<5> Triskelios: that's what i'm thinking: doubtful it's a coincidence that i have 18 variations of .DOMAIN.TLD:202.168.41.222:ns1.altcall.com:259200 and dig is returning a similar # of entries
<3> seems it's applying all 18 instances to all domains?
<7> when I do to http://e2eweb.bristol-city.gov.uk/publicaccess/dc/dcapplication/application_detailview.aspx?caseno=J0E6IQDNDD000
<7> and click on "view ***ociated documents" I get a page not found error
<7> apparently it works in IE
<7> any ideas what is going on?
<5> leshaste: in their infinite[ly useless] wisdom, the bristol gov't made [parts of] their site IE-only
<7> litage: any idea how they did that? I see " path="http://e2edocs.bristol-city.gov.uk/WAM/findCaseFile.do?appName=planning&appNumber=06/02227/F">View ***ociated <u>d</u>ocuments...</button><input cl***="cButton" value="View ***ociated documents..." id="KHTML_btnDocuments" onclick="
<7> javascript:goToImages(this);
<7> which is the right url
<7> and if I copy and paste it "changing the & to &" it works
<7> so what did they do to break it?
<5> leshaste: from your description, the site depends on browser behaviour that is specific to IE
<7> litage: can you see from the source what they did?
<5> leshaste: i'm afraid i don't have time to look at the source right now
<7> :(
<5> leshaste: however, i would first confirm that the problem does not occur when using IE
<7> it doesn't
<5> leshaste: send them an email explaining the issue, and telling them that X% of people these days use firefox
<5> leshaste: s/firefox/non-IE/
<7> I need to find out the specific issue
<3> leshaste: er, it actually works fine in konq here. the link you pasted was javascript generated for konq, too...
<3> (I don't know why they have special treatment for konq, but they check for it specifically)
<7> Triskelios: oh.. does it work in firefox for you.. or opera?
<7> neither works for me
<3> I don't have either installed here
<7> I should make sure before I complain :)
<7> ok
<7> thanks
<3> can you take a screenshot?
<7> yep.. what of?
<3> just the rendering problem
<7> Triskelios: the problem is much simpler than that... I go to http://e2eweb.bristol-city.gov.uk/publicaccess/dc/dcapplication/undefined
<3> yes, but the link is broken by the parser
<7> ok.. so a screenshot of that web page?
<7> sorry to be dumb.. just want to provide something useful
<3> yes
<7> http://img138.imageshack.us/img138/226/screen8hz.png
<3> no I mean of the button
<3> actually, I don't need that...
<7> http://img120.imageshack.us/img120/762/screen7po.png
<7> Triskelios: what are your thoughts?
<3> <button element>.path is returning "undefined"
<3> instead of the value path=... sets
<3> path isn't a standard attribute, so that's probably being ignored
<7> right.. except for in IE where it works for some reason
<7> and konqueror! :)
<3> those don't ignore any attributes, I guess
<3> so the fix would have to be not to use javascript:goToImages and put the path in the onclick/onkeypress
<3> so instead of 'onclick="javascript:goToImages(this)" path=URL', do 'onclick="window.open(<URL>"'
<7> brilliant thanks
<7> s/ /, /
<3> onclick="javascript:window.open... I mean
<8> hey, i'm a linux noob and i've got a question about firefox
<1> cbear: and that would be?
<1> cbear: btw, official firefox channel is on irc.mozilla.org, #firefox
<1> 'morning Jenna
<9> morning spike
<8> spike: i know how to uncompress it and get it running and everything, but when I do that it's usually just in my home folder
<9> morning all
<8> spike: when i install programs like this, is there a more general directory that i should be uncompressing to?
<1> cbear: like this how? from sources?
<1> cbear: or as a user compared as root?
<1> compared to*
<8> spike: i mean, when i install it, then i have to point to my home directory to run it, whereas, the firefox comes preinstalled is available for all users
<1> cbear: I still dont get your point... the INSTALL file clearly says how to install firefox system wide
<1> btw, your distro should ship a package for it
<8> slackware
<1> ok,no idea, when I used slackware firefox didnt exist :)
<1> cbear: anyway, after unpacking the tar.gz look to the INSTALL file
<1> it tells you how to install it so it's available to all users on your system
Return to
#linuxhelp
or
Go to some related
logs:
#gentoo
#debian
dchroot Command not found
BCM94318 ubuntu package
can't watch mov firefox ubuntu
#debian
#math
gcc 3.4.6 optimization errors
#gimp
#web
|
|
