WinXPnews
WinXPnews E-Zine
Tue, Jul 9, 2002 (Vol. 2, 27 - Issue 33)
Feel free to forward this newsletter to other WinXP enthusiasts.
Read this newsletter online here:

For a quick unsubscribe (gasp!) click here:

Time To Patch Your Windows Media Player
This issue of WinXPnews contains:
EDITOR'S CORNER
How to Publish Your Windows XP FTP Server to the Internet
HINTS, TIPS, TRICKS & TWEAKS
Allow Dial-up Connections to Synchronize Time with Internet Time Servers
HOW TO'S: ALL THE NEW XP FEATURES
How to Secure an FTP Server on Windows XP Professional
WINXP SECURITY: UPDATES & PATCHES
Cumulative Patch for Windows Media PlayerCumulative Patches for Excel and Word for Windows
UPGRADING & COMPATIBILITY ISSUES
A Computer May Hang During a Heavy Load with an Ericsson HIS ModemKnowledge Base Search Center - If it is Not Broke, Do Not Break it!
WINXP CONFIGURING & TROUBLESHOOTING
A Description of the Repair Option on a Local Area Network or High-Speed Internet ConnectionKeyboard and Mouse Do Not Work When You Start WindowsHow to Deploy Windows XP Images from Windows 2000 RIS Servers
FAVE LINKS
This Week's Links We Like. Tips, Hints And Fun Stuff
BOOK OF THE WEEK
Windows XP Power Tools
SPONSOR: iHateSpam - Eliminate Irritating Junk Email
Irritated with porn, bogus business offers and viagra ads in your mailbox?
Angry about losing your valuable time deleting all that junk? Need a spam-
blocker that eliminates this annoying spam? Stop the spam in your inbox
with iHateSpam. It gives you control over the ever increasing flood of
junk email. Runs under Windows 95/98/ME/NT/2000/XP. Best of all, the limited
time Intro Offer is just $19.95 with online delivery of full product and a
30-day money back guarantee. This is a real no-brainer. Get Your Copy Now!
Visit iHateSpam - Eliminate Irritating Junk Email for more information.
EDITOR'S CORNER
How to Publish Your Windows XP FTP Server to the Internet
Several of you wrote in about last week's article on installing an FTP Server. You said "that was great, but you only told half the story". You wanted to know two more things:
How to make the FTP Server available to Internet users
How to secure the FTP Server
There are several ways to make an FTP server on the internal network available to users on the Internet. These methods are referred to as "Server Publishing". You can use a Windows XP computer running Internet Connection Services (ICS) to publish a server on your internal network.
Let's take a look at a common scenario. You have a Windows XP computer connected to the Internet with an always-on cable or DSL connection. You have another computer on your private network also running Windows XP. You've installed the FTP Server on this internal network computer and put files into the FTP folder. Now you want Internet users to connect to the FTP Server through the ICS computer directly connected to the Internet.
You can do this with the Windows XP ICS! Here's how:
Go into the Network Connections window. You can get there from the Network applet in the Control Panel.
Right click the network interface directly connected to the Internet and click Properties.
Click on the Advanced tab in the connection's Properties dialog box. Put a checkmark in the Internet Connection Firewall checkbox. Always make sure the Internet Connection Firewall (ICF) is enabled when you connect a computer directly to the Internet.
Click the Settings button, then click on the Services tab in the Advanced Settings dialog box.
Now click the Add button. This brings up the Service Settings dialog box. Type in My FTP Server in the Description of service text box. In the Name or IP address text box, type in the IP address of the computer on your private network that's running the FTP server. Since you're using ICS, it'll have an IP address like 192.168.0.x, where x is different for each machine on your network. You might want to manually assign the IP address the FTP Server already has, so that it doesn't change in the future. You can find out what IP address your FTP server is using by opening a command prompt at the FTP server and typing in the command ipconfig. That will give you the IP address the FTP Server is using. Back to the Service Settings dialog box, select the TCP option button. For the External Port and the Internet port, put in the port number you assigned to the FTP server on your internal network. Read this week's How To section to see how to change the listening port number. Clic!
k OK
Click OK, and then click OK one more time! You might need to disable and enable the adapter after making the change. You can do that by right clicking the always-on interface.
The procedure is very similar for dial-up connections. However, there are problems with dial-up connections (and many always-on connections) because the IP address on the external interface of the ICS computer changes over time. Next week I'll share with you a cool way you can get around this problem by using something called a "dynamic DNS service". I've used one for years, and it works great. Make sure to tune in next week for the details.
There you have it. Is server publishing in your future? Have any questions on the method I described above? If so, let me know! There are lots of ways you can publish services. Tell me how you do it, and tricks you've learned along the way. If you're having problems with server publishing, let me know about those too! I'll be sure to include what I learn from you in upcoming newsletters.
Until next week,
Tom Shinder, Editor
(email us with feedback: feedback@winxpnews.com)
SPONSOR: Is Your PC Spying On You?
You are surfing the Web. Check out sites, download some music or
software that might be cool. Guess what? Your PC might have picked up
a cyber transmitted disease (CTD). These pests might now be monitoring
what you are doing and report this back to their "black hat" owners
and reveal your personal information. PestPatrol kills 'em all off.
Get your copy on the online shop for just 30 bucks with immediate online delivery. Protect your PC and your confidential data!
Visit Is Your PC Spying On You? for more information.
HINTS, TIPS, TRICKS & TWEAKS
Allow Dial-up Connections to Synchronize Time with Internet Time Servers
Do you use a dial-up connection but can't get your machine to synchronize its clock with an Internet time server when the Internet Connection Firewall (ICF) is enabled? If so, here's a tip Richard Surry sent in on how to fix the problem:
Open your Network Connections window from the start menu.
Right click on your modem (or other dial-up connection) and click Properties.
Click on the Advanced tab. You already have a checkmark in the box that enables the ICF. Click on the Settings button.
Click on the Services tab, then click on the Add button in the Services tab.
That should open the Service Settings dialog box. In the Description box, put in Internet Time Service. For the Name or IP address of the computer hosting this service on your network, type in 127.0.0.1. Select the TCP  protocol option button. For both the external and internal port numbers, type 123.
If you're online, disconnect and reconnect. Now synchronize the time by double click on the clock in the system tray and going to the Internet Time tab.
This is an interesting tip, and it represents an even more interesting problem. For you network geeks out there, I'll ask you this question: Why should we allow unsolicited inbound connections for the Internet Time Service? The ICF should not block responses to solicited outbound connections, so why should we have to enable reverse NAT to make this work?
HOW TO'S: ALL THE NEW XP FEATURES
How to Secure an FTP Server on Windows XP Professional
Last week we went over how to install the Windows XP FTP Server. It will work fine after going through the steps outlined last week, but several of you asked for more information on how to secure the FTP Server because you wanted to connect it to the Internet. It's a very good idea to understand how FTP security works before putting the server on the Internet. Here are some suggestions:
Open the Internet Information Services console from the Administrative Tools menu. In the left pane of the console, expand your server name and then expand the FTP Sites node.
Right click on the Default FTP Site and click the Properties command.
Click on the FTP Site tab. Notice that the default TCP Port is set to 21. This is the well-known port for FTP. You can increase security a bit by changing this port to another value that's in the 1026-65534 range. This secures it from poorly motivated click-kiddies and also allows you to get around your ISP blocking incoming connections to TCP port 21. Friends who connect to your FTP server will need to change the port number on their FTP client software as well.
The Windows XP FTP server has a hard coded limit of 10 simultaneous connections. You might want to change this to a lower number to reduce the chance of a LAN party on the external interface of the FTP server.
Put a checkmark in the Enable Logging checkbox. Click the Properties button to the right of the log format drop-down list box. Click the Daily option button on the General Properties tab. On the Extended Properties tab, select all of the Extended Properties. Click OK.
Click on the Security Accounts tab. Place a checkmark in the Allow only anonymous connections checkbox. This prevents users from sending username and password credentials to the FTP server. You don't want users to send credentials because those credentials are sent in "clear text", which can be read by anyone who's listening on the wire.
Click the Messages tab. Enter a Welcome message, an Exit message, and a message users will see if there are no available connections.
Click on the Home Directory tab. Make sure there is a checkmark in the Read and Log Visits checkboxes. REMOVE the checkmark in the Write checkbox. Note the location in the Local Path text box. Navigate to that path in the Windows Explorer.
Right click on the FTPROOT folder and click Properties.
Click on the Security tab. Make sure that SYSTEM has Full Control. Assign the IUSR_ account READ access only. Remove all other permissions for the IUSR account. Make sure you give Adminstrators Full Control tool. This allows you, the administrator on the FTP Server computer, to add, remove and change files in the FTPROOT folder.
Stop and restart the FTP Server. Now your FTP server is secure and Internet bad guys won't be able to use it to distribute porno and bootlegged software.
WINXP SECURITY: UPDATES & PATCHES
Cumulative Patch for Windows Media Player
I think it was a couple months ago when I wrote about some serious problems with the Windows Media Player (WMP). At that time you could download a "cumulative" patch that would update the Media Player with the latest security fixes. Well, it's time to download another "cumulative" patch! A couple other problems were found in WMP that could cause some problems. To read more about the problem head on over to:

You'll also find the download locations for Windows Media Player versions 6.4, 7.1 and 8.0 (XP) on that page.
Cumulative Patches for Excel and Word for Windows
If you run Microsoft Word or Excel, versions 2000 or 2002 (XP), then you need to head on over to the Microsoft site to download some security fixes. These fixes handle security glitches that could get you in trouble if you don't take care of them! Head on over to Microsoft's site where you can find individual fixes for each program. You only need download the fix that applies to your computer:

UPGRADING & COMPATIBILITY ISSUES
A Computer May Hang During a Heavy Load with an Ericsson HIS Modem
If your computer has a Ericsson HIS modem, you might experience a dreaded blue screen and see the message IRQL_NOT_LESS_OR_EQUAL or DRIVER_CORRUPTED_EXPOOL. The problem is that you're downloading too much and your poor modem can't keep up! Microsoft recognizes that this isn't a problem with the modem, but with the modem driver. To download a fix visit Microsoft's site. After getting the fix, you can download as much as you like without worrying about blue screens!

Knowledge Base Search Center - If it is Not Broke, Do Not Break it!
It wasn't so long ago when you could search the Microsoft Knowledge Base for articles that came up in the last 3 days, 7 days, 14 days, 30 days, 90 days and 6 months. It was great! But Microsoft decided to "fix" the Knowledge Base search page, and now it really sucks! It's hard to find things that used to come up easily, the site is often down, and searching based on age of articles just doesn't work anymore.
Try this: go to:

and on the left side of the page select Windows XP in the top drop down list box. Don't put anything in the For solutions containing...(optional) text box. Leave the Any of the words entered option selected in the Using drop down list box. For Maximum Age select 3 days. For Results Limit select 150 articles. Click Search Now. Whoa! Nothing. OK, it's reasonable to see no articles related to Windows XP in the last 3 days. Try again, this time using 7 days. Whaat? Still no articles. OK, it was a holiday week in the USA last week. Let's try 14 days. Nothing again! That seems sort of strange, doesn't it? Let's give it another try with 30 days. Still no articles! What's going on here? Keep trying for 6 months and one year. You still won't find anything. It's pretty sad, because this used to work.
WINXP CONFIGURING & TROUBLESHOOTING
A Description of the Repair Option on a Local Area Network or High-Speed Internet Connection
Here's the answer to a question I've had for a long time. What the heck does that "Repair" option for a network connection actually do? It's not in the help file, but it's on the Microsoft Web site. Here's what it does:
Sends an ipconfig /renew
Flushes the ARP cache with a arp -d
Reloads the NetBIOS name cache with a nbtstat -R
Updates its WINS server with an nbtstat -RR
Clear out the DNS client cache with an ipconfig /flushdns
Reregisters the client with a DDNS server with a ipconfig /registerdns
Check out the original article over at:

Keyboard and Mouse Do Not Work When You Start Windows
Have you been hit with this one? You're working in Windows XP and shut down for the day. The next morning you start up your Windows XP computer and the mouse pointer is stuck! The only way to get it going again is to restart the computer, and for some reason the pointer starts moving again. What's up with that? I still haven't figured that one out, but Microsoft has a KB article that claims it's from a corrupt registry. I doubt that's the case in my situation because the problem is intermittent. But if you find that your mouse is always stuck, you might want to check out:

How to Deploy Windows XP Images from Windows 2000 RIS Servers
Are you planning to roll out lots of Windows XP computers on your network in the near future? If so, you're probably looking for a good way to automate the process. You can use the Windows 2000 Remote Installation Services (RIS) if you're running Windows 2000 Servers on your network. For the basic procedure and some tips, tricks, and gotcha's, check out:

FAVE LINKS
This Week's Links We Like. Tips, Hints And Fun StuffBe Afraid, be very afraid - the future of Big Brother in computing

Get Revenge on your computer!

Pringles Super Spud Boxing

BOOK OF THE WEEK
Windows XP Power Tools
A book full of personal experiences and anecdotes that will equip you with the tips and tricks you need to become an XP afficionado. Coverage includes automating tasks using scripting, the Command Console Survivor Guide, networking, registry, maximizing security/firewalls, hardware, installation/configuration, and database hosting/accessing. The CD contains the best third party utilities around.
Step-by-Step Instruction Helps You Harness the Full Power of Windows XP. Whether you're running Windows XP Home Edition or Professional, Windows XP Power Tools arms you with the advanced skills you need to become the ultimate power user. Full of undocumented tips and tricks and written by a Windows expert, this book provides you with step-by-step instructions for customization, optimization, troubleshooting and shortcuts for working more efficiently. A must-have for power users and network administrators, Windows XP Power Tools includes a CD filled with power tools including security, e-mail, diagnostic and data recovery utilities.

ABOUT WINXPNEWS
What Our Lawyers Make Us Say
These documents are provided for informational purposes only. The information
contained in this document represents the current view of Sunbelt Software
Distribution on the issues discussed as of the date of publication. Because
Sunbelt must respond to changes in market conditions, it should not be
interpreted to be a commitment on the part of Sunbelt and Sunbelt cannot
guarantee the accuracy of any information presented after the date of
publication.
INFORMATION PROVIDED IN THIS DOCUMENT IS PROVIDED "AS IS" WITHOUT WARRANTY OF
ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND FREEDOM
FROM INFRINGEMENT.
The user assumes the entire risk as to the accuracy and the use of this
document. This document may be copied and distributed subject to the
following conditions: 1) All text must be copied without modification and all pages
must be included; 2) All copies must contain Sunbelt's copyright notice and any
other notices provided therein; and 3) This document may not be distributed
for profit. All trademarks acknowledged. Copyright Sunbelt Software
Distribution, Inc. 1996-2002.
About Your Subscription to WinXPnews
This is a posting from WinXPnews. You are subscribed as cncnvc@fsg.com
To manage your profile, please visit our site by clicking on the following link:

For a quick unsubscribe (gasp!), click here:


Made me chuckle.

rOD.
--
"Don't frown, don't pout, don't snivel, don't cry,
Don't cough, don't choke, don't faint, don't die."
>> Doing the blogging thang again at  <<


----------------------------------------------------------------------
1. iSilo(TM) 3.2 for Palm OS and Pocket PC enters beta1
2. iSilo(TM) 3.2 for Windows enters beta1
3. iSiloX 3.2 for Windows and Mac OS enters beta1
4. iSiloXC 3.2 for Windows, Linux, FreeBSD, Mac OS X,
and Solaris enter beta1
----------------------------------------------------------------------
======================================================================
1. iSilo(TM) 3.2 for Palm OS and Pocket PC enters beta1
----------------------------------------------------------------------
iSilo(TM) 3.2b1 adds the following new features to iSilo 3.15:
- A System Information dialog, accessible from either the document
list view or while viewing a document through the Tools menu.
The dialog displays the user name (e.g., owner name) and the
associated user ID of the device.  For Palm OS, the dialog also
displays the free and total amount of dynamic and storage memory.
- Support for iSiloX/iSiloXC generated password protected documents.
The password protection is embedded into the document during
conversion and can not be modified nor removed from the converted
document.
- Support for iSiloX/iSiloXC generated registration code protected
documents. The registration code protection is embedded into the
document during conversion.
- Support for iSiloX/iSiloXC generated documents that include an
expiration date. The expiration date is embedded into the document
during conversion.
- Support for displaying Title, Author, and Publisher information
messages through the Document Information dialog accessible through
the Edit menu while viewing a document.
Please note that this is a beta version of the software, and as
such is intended for testing purposes to help eliminate problems
and issues before the release.
Please report any problems or issues you encounter by sending an
email to email@iSilo.com.  When reporting problems, please include
all potentially relevant details, including the exact steps used
to reproduce the problem, OS version, and hardware configuration.
To download iSilo(TM) 3.2b1 for Palm OS(R), please go to this URL:
To download iSilo 3.2b1 for Pocket PC, please go to this URL:
======================================================================
2. iSilo(TM) 3.2 for Windows enters beta1
----------------------------------------------------------------------
iSilo(TM) 3.2 will be the first version of iSilo for Windows
and has the requirements shown here.
Basic requirements:
- Pentium or comparable processor
- Windows 95 with Internet Explorer 4.0.1 or later, Windows 98,
Windows Millennium, Windows NT 4.0 with Service Pack 6,
Windows 2000, or Windows XP
- 16MB of RAM for Windowsr 95 and Windows 98 (32MB recommended),
32MB of RAM for Windows Millennium and Windows NT 4.0,
64MB of RAM for Windows 2000 and Windows XP
- 5MB of available hard-disk space for installation
Additional functionality specific requirements:
- Additional memory required for document storage.
- iSiloX required for creating documents utilizing maximum document
presentation capabilities.
Please note that this is a beta version of the software, and as
such is intended for testing purposes to help eliminate problems
and issues before the release.
Please report any problems or issues you encounter by sending an
email to email@iSilo.com.  When reporting problems, please include
all potentially relevant details, including the exact steps used
to reproduce the problem, OS version, and hardware configuration.
To download iSilo 3.2b1 for Windows, please go to this URL:
======================================================================
3. iSiloX 3.2 for Windows and Mac OS enters beta1
----------------------------------------------------------------------
iSiloX 3.2b1 adds the following features to iSiloX 3.15:
- In the Security properties, added support for protecting a document
with any or all of a password, registrationn code, and expiration
date.
- Added a Messages property page for specifying title, author,
publisher, password, registration code, and expiration date
messages for the document.
- Added cookie support and a Cookies property page for managing
cookies.
Please note that this is a beta version of the software, and as
such is intended for testing purposes to help eliminate problems
and issues before the release.
Please report any problems or issues you encounter by sending an
email to email@iSilo.com.  When reporting problems, please include
all potentially relevant details, including the exact steps used
to reproduce the problem, OS version, and hardware configuration.
To download iSiloX 3.2b1 for Windows, please go to this URL:
To download iSiloX 3.2b1 for Mac OS, please go to this URL:
======================================================================
4. iSiloXC 3.2 for Windows, Linux, FreeBSD, Mac OS X,
and Solaris enter beta1
----------------------------------------------------------------------
iSiloX 3.2b1 adds the following features to iSiloX 3.15:
- Added
,
, and
container
elements under the
element for protecting a
document with any or all of a password, registration code, and
expiration date. See .ixl file format for more information.
- Added
element for specifying title, author, publisher,
password, registration code, and expiration date messages for the
document. See .ixl file format for more information.
- Added cookie support and the
element for managing
cookies. See .ixl file format for more information.
Please note that this is a beta version of the software, and as
such is intended for testing purposes to help eliminate problems
and issues before the release.
Please report any problems or issues you encounter by sending an
email to email@iSilo.com.  When reporting problems, please include
all potentially relevant details, including the exact steps used
to reproduce the problem, OS version, and hardware configuration.
To download iSiloXC 3.2b1 for Windows, please go to this URL:
To download iSiloXC 3.2b1 for Linux, please go to this URL:
To download iSiloXC 3.2b1 for FreeBSD, please go to this URL:
To download iSiloXC 3.2b1 for Mac OS X, please go to this URL:
To download iSiloXC 3.2b1 for Solaris, please go to this URL:
----------------------------------------------------------------------
You have received this message because you subscribed to the
iSilo(TM) mailing list.  If you would like to be removed from
this list, please send an email with the subject "unsubscribe"
to:
.
Please note that this email address only handles subscriptions
and unsubscriptions of the mailing list.  Any other messages
sent to this email address are automatically deleted.
----------------------------------------------------------------------
iSilo(TM)                          email@iSilo.com


CNET Hardware Newsletter
Samsung ML-1430
In Hardware
Unitech 2U4U DMR-300
In Electronics
Video Explosion Deluxe
In Software
Sony Ericsson T68
In Wireless
Computers
All CNET
The Web
July 10, 2002
--Tom Dunlap
Senior editor
CNET Hardware
Dear Readers,
Hey, it's not all bad news in the corporate world. One definite
business success story is Big Blue's ThinkPad T series. These
versatile and speedy thin-and-light notebooks share a sturdy,
well-designed black case and come in so many configurations that
you can find one that's right for just about any use. They also
range in price from $2,199 to a hefty $3,499.  For a comprehensive
look at this line of notebooks, check out our verdict.
Read the review
|
Check latest prices
click  here for details
Intel's new insidesThe i845 chipset's many flavors are faster, better, and a lot more confusing. Read before you shop.
 Gateway 300 series keeps PCs simple
 Modernize your motherboard
Most popular
Desktops
1. Gateway 700XL
2. Dell Dimension 4000 series
3. HP Pavilion 950
4. Alienware Aurora DDR
5. Falcon Northwest Mach V
See all most popular desktops
IBM's thin ThinkPads fit to a T
The ThinkPad T-series notebooks are fast, and they offer a great
design, innovative features, and good support. For a comprehensive
look at this line of notebooks, check out our verdict.
Read the review
|
Check latest prices
Inside the Labs: The PC of the future, part two
Mira, a flat-panel display that wirelessly connects to a PC, will
let you take your system anywhere in your house--or so Microsoft
promises. This is just one of the coming-soon-to-a-living room-near
-you technologies that Microsoft promoted at its annual hardware
summit. Labs Manager Daniel A. Begun has the scoop on the next
batch of Microsoft-promoted technologies that could change the way
consumers use their PCs.
Gateway 300 series keeps PCs simple
Gateway's most basic desktop line offers some good values for
students and families buying second computers for their children--
if you configure carefully. But if you're eyeing the fancy LCD and
DVD-ROM drive options, get a fancier PC to go with them. Find out
why in our review.
Read the review | Configure & price
Midrange iBuyPower PC suffers from low-end blues
The generic iBuyPower Argous has some nice features, but it lacks
the performance, the support, and the finishing touches delivered
by similarly priced competitors. Read our review to find out where
it falls short--and which systems in this price range present
better alternatives.
Read the review | Check latest prices
Add wireless networking for $200 or less
Wi-Fi (802.11b) access points provide the cheapest, easiest way to
extend your wired or wireless network to the far-flung reaches of
your home or office. Check our reviews of access points from Agere
Systems, Belkin, and D-Link to see which is the cheapest, which has
the best security, and more.
Read the review
the hottest products this week
Cendyne 48X/12X/48X EIDE |
Check latest prices
95ms access time; 2MB cache
IBM ThinkPad R32 |
Check latest prices
Pentium 4-M-1.8GHz; 256MB RAM; 30GB hard drive
Toshiba Satellite 5105-S502 |
Check latest prices
P4-1.7GHz; 512MB RAM; 40GB hard drive
Sony GDM FW900 |
Check latest prices
24 inches of new viewing bliss; built-in USB hub
Overheard on Computers.com
"Simply wow!"
"Now this is an awesome machine"
"Slick, spartan design--raw power"
"Powerful, solid, and durable"
"Love it--oh, what a programmer's keyboard!"
"Best of the best"
"Reliably fast with beautiful screen"
Click here to find out what this mystery product is.
Read the review | Check latest prices
Click here to see more of CNET's User Opinions.
CNET Message Boards: Computer Help is here
Stumped by computer hardware and software problems? Never fear;
check out the CNET Message Boards, where quick help is just a post
away. Join us in the Computer Help forums.
Live tech help: submit your questions now
CNET News.com: Top CIOs on the future of IT
Find a job you love, with more than 1 million postings
ZDNet: This IT director has had enough of Microsoft
May Editors' Choice award: Pioneer's HTS-910DV
The e-mail address for your subscription is qqqqqqqqqq-cnet-newsletters@example.com
Unsubscribe |
Change e-mail format |
Change e-mail address|
FAQ |
Advertise
Price comparisons |
Product reviews |
Tech news |
Downloads |
All CNET services
Copyright 2002 CNET Networks, Inc. All rights reserved.
.


firewalls Digest	Thu, 25 Jul 2002	Volume: 01  Issue: 033
In This Issue:
Re: QOS
FW: disable some sites
DNAT with iptables question
RE: DNAT with iptables question
----------------------------------------------------------------------
From: "George J. Jahchan"
Subject: Re: QOS
Date: Thu, 25 Jul 2002 12:11:40 +0300
> So, I'm forced to conclude that the PacketShaper either sucks in a major
> way, or that your explanation/the explanation that you have been given of
> it is wrong. (Sorry.)
You are wrong on both counts. Explanation is valid for symmetrical TCP, for
others see explanations below.
> Yes, all packets in an established TCP connection have the ACK flag set.
> So all packets except SYNs are candidates for delay when traffic limits
> are exceeded? Whoops.
You should change that to: ... are always candidates for predictive or
preventive delay.
ACKs are delayed (per flow) in such a way that WAN-bound traffic reaching
the edge router's Ethernet interface does not exceed WAN link speed (NO
ROUTER QUEUES!). It does not wait for the link to be at or near saturation
to act -- that is why, unlike queueing, it is predictive and not reactive.
It slows down the rate of transmission of sending hosts (on a per-flow
basis) to accommodate WAN link speed limit and current network utilization,
rather than fill up queues at LAN speeds and empty them at WAN speeds,
eventually dropping the excess once the queue(s) fill up, informing hosts to
slow down their rate of transmission once queues are beyond a fixed
threshold (90%?).
Rate control works equally well for outbound and inbound traffic. Ever heard
of an effective queueing technology for inbound traffic? Queueing packets
after they have crossed a congested link does not make much sense, does it?
Re: IPsec/GRE or other encapsulated traffic
It obviously cannot dissect IPsec/GRE or other encapsulated traffic: it sees
the tunnel as one connection if the tunneling device is before the PS on the
LAN side (VPN gateway and router are two separate devices, PS between them).
If the router does the tunneling, then the PS sees clear traffic. Typically,
in an organization the first scenario would be the case at headquarters and
the second at branch offices. The PS at the branch sees traffic inside the
tunnel whereas the unit at HQ sees all traffic as one tunnel which allows
full management of both tunneled and clear traffic at both ends.
UDP and asymmetrical TCP (where the PS and router only see the outgoing
packet, return traffic coming back through a satellite downlink to a station
on the LAN) are handled differently.
For asymmetrical TCP, it will time the release of packets to the receiving
device, thereby indirectly timing the release of acknowledgements by the
receiving host. This informs the sender's TCP/IP stack that it should slow
the release of packets because limited bandwidth is available.
For UDP, it utilizes flow-based derivative random drop. It selectively drops
only one packet at a time from flows that are predicted to cause congestion,
which prevents heavy retransmissions and application timeouts.
ICMP packets exceeding policy limits are dropped.
>_Maybe_ you can do a special case for TCP and try to offload some of the
queueing on
> the endpoints, but I really don't see the real gain in that.
The real gain is manageability and control. A LAN host only knows about the
state of its own connections and is oblivious to WAN conditions until its
TCP/IP stack learns (when router queues are nearly full) that the WAN is
congested. A PS will predict and inform the LAN hosts' TCP/IP stacks of the
"speed limit to obey" for every connection (based on policies and network
conditions), avoiding congestion. Control for asymmetrical TCP and UDP may
not be as "tight" as for symmetrical TCP, but it does work.
Queueing is akin to deploying cops only when traffic jams occur, vs. rate
control where cops are permanently deployed throughout town, communicating
with each other and with a central control point, predicting upcoming
congestion and regulating traffic, ensuring a smooth flow of traffic. If
there is potential for congestion, it will take a driver a hell of lot
longer to cross town with first approach than it will with the second. Do
you agree?
----- Original Message -----
From: "Mikael Olsson"
To: "George J. Jahchan"
Cc: "Firewalls List"
Sent: Wednesday, July 24, 2002 4:50 pm
Subject: Re: QOS
"George J. Jahchan" wrote:
>
> The whole purpose of the device is to pro-actively prevent WAN
congestion --
> it sits between client and server (client inside/server outside or client
> outside/server inside -- it does not make any difference) and pro-actively
> adjusts the TCP window size (by delaying the acknowledgement) to get the
> sending host to honor the speed limit for that individual connection
> (calculated in real-time based on user-defined policies and current
network
> conditions).
Umm, don't get me wrong here, but I think you've been fed a less-than-
accurate sales pitch.
Let's ponder this for a minute.
The device works by delaying ACKs... that is: packets with the ACK
flag set, right?
...
[letting this sink in for a while]
...
Yes, all packets in an established TCP connection have the ACK flag set.
So all packets except SYNs are candidates for delay when traffic limits
are exceeded? Whoops.
Okay, let's assume for a second that the packets aren't actually delayed,
but that the ACK sequence numbers or TCP window size fields are re-written
(dicey). All you've accomplished is move the queueing (delaying) from
the traffic shaper to the endpoints. You still get L7-to-L7 delays. Big
deal if it happens on the wire or in the stack. Also, convincing endpoints
to do delays probably results in less-than-perfect shaping since stack
retransmit timings suddenly affect the actual bandwidth available rather
than having the shaper itself do it; the shaper knows exactly when there
is bandwidth available.
But this doesn't even begin to touch on other protocols like UDP or
ICMP. Or, for that matter, IPsec/GRE/whatever tunneled traffic.
Neither of them have sequence numbers or window sizes that you can
manipulate.
So, I'm forced to conclude that the PacketShaper either sucks in a major
way, or that your explanation/the explanation that you have been given of
it is wrong. (Sorry.)
What I think happens is that the delay is
Subject: FW: disable some sites
Date: Thu, 25 Jul 2002 13:44:18 +0200
The list addy changed ofcourse   :o)
> -----Original Message-----
> From:	Hiemstra, Brenno
> Sent:	donderdag 25 juli 2002 12:27
> To:	'Michael Zhao'; Hiemstra, Brenno
> Cc:	firewalls@lists.gnac.net
> Subject:	RE: disable some sites
>
> Michael,
>
> If I was in your shoes I would first investigate if there
> is a security policy in your organisation. If you dont know
> what I mean by a security policy I would advice you to
> start reading about it. A search on google would be of a
> big help for you.
>
> If there is a security policy I would read it and investigate
> what is tells about how employees are able to use their
> workstations for performing their function. In a security
> policy there should be things what employees are allowed
> to do on the network / internet and what not.
>
> If there isnt a security policy I would advice you to implement
> one in your company. Because without one you cant punish
> employees by violating the policy and if there is a court case
> you dont have any rock solid thing to smack around with.
>
> Without a policy you are just implementing solutions to prevent
> employees in doing things that, im my opinion, they arent allowed
> to do on their workstations anyway. I dont like the idea that
> employees play games, use kazaa, ICQ, MSN, etc etc in stead
> of working what we pay them to do. This is why a security policy
> is important because then you can say to employees that they
> violated it and that there are consequences for that (deny internet
> access, etc etc).
>
> Owkee...    now that this is out of the way time to proceed about
> the proxy thingie.
>
> A proxy dont have to be the default gateway of your network to
> use it. It is a function in Internet Explorer or whatever browser you
> use in your network.
>
> If you ask me Checkpoint Firewalls are just good in using for what
> their real purpose is and that is firewalling a network. I dont like the
> idea that my firewall is also CVS http thingie because I dont think
> a firewall is its purpose to do that. Proxies are a much better solutions
> for that and they are also developed for that purpose.
>
> Depending on your network setup and the OS and Proxy brand of your
> current proxy you have several solutions which was already provided
> by people on this list. My favorite proxy is Squid and there are probably
> a lot of http blacklist programs that work with Squid to block websites
> and stuff.
>
> I still think you should first deny direct internet traffic from
> workstations.
> and only allow traffic to the internet from servers that are allowed to do
> so. You should think about proxies, email servers, etc etc. This should
> also prevent people from playing games, especially those Quake kinda
> games because those use ports that arent necessary for normal
> webbrowsing. Games running over port 80 and not http related are blocked
> by the proxy if that proxy is a true Layer 7 application layer proxy.
> These
> kinda proxies can view in the TCP/IP packet and see if this is legitimate
> http traffic or that someone tries to tunnel something over port 80.
>
> Anyway...    again food for some thoughts,
>
> Regards,
>
>
>
> Brenno
>
>
> -----Original Message-----
> From:	Michael Zhao [SMTP:mzhao@everlastingsystems.com]
> Sent:	woensdag 24 juli 2002 2:38
> To:	Hiemstra, Brenno
> Cc:	firewalls@lists.gnac.net
> Subject:	Re: disable some sites
>
> Thanks your reply.
>
> I built up my network three years ago . I have proxy which we only use
> cache to accelerate our internet accessing , it is not a gateway . It is
> too difficult to change the topology , many thing need to be changed.
>
> Did you have another idea to help me? Someone suggest me to buy the
> websence , but I dont have the budget right now.
>
> Thanks a lot
>
> Michael
>
> Hiemstra, Brenno wrote:
>
> >Michael,
> >
> >The first thing is to build a security policy that
> >states what people are allowed to do and what
> >not. Everyone needs to accept this policy and
> >if they violate it you can apply rules that you state
> >in your security policy.
> >
> >If I had the option for your network setup I would
> >install a proxy server and demand every client
> >to connect to the proxy if they want to use the
> >internet.
> >
> >The proxy will only allow http, ftp, and other "approved"
> >services to connect to the internet. And you can let
> >them check to some database which websites are
> >allowed and deny access to sites that aren't allowed
> >
> >Your company firewall will only allow the proxy to connect
> >to the internet. Clients are denied.
> >
> >This way the clients cant connect directly to the internet
> >game servers and on the proxy you can deny clients
> >to connect to the game servers.
> >
> >I hope this is an option for you.
> >
> >Regards,
> >
> >
> >Brenno
> >
> >>-----Original Message-----
> >>From:	Michael Zhao [SMTP:mzhao@everlastingsystems.com]
> >>Sent:	dinsdag 23 juli 2002 14:10
> >>To:	firewalls@lists.gnac.net
> >>Subject:	disable some sites
> >>
> >>Hi , all
> >>
> >>I choose checkpoint fw-1 as my firewall . I found many company users
> >>play internet games like CS, ourgame . I find users download their
> >>clients software and install  on their local workstation , after run it
> >>, the programe can connect to game server automatically .
> >>
> >>Usally , there are many sites of every internet game server. I.E. I want
>
> >>disable accessing the game servers like xxx.ourgame.com from my internal
>
> >>net , how can I do that except find all of their IP address , because it
>
> >>is so complecat to do . Who can tell me .
> >>
> >>Regards,
> >>Michael
> >>
> >>--
> >>Firewalls mailing list - [ firewalls@isc.org ]
> >>To unsubscribe:
> >>
>
------------------------------
Date: Thu, 25 Jul 2002 15:08:21 -0600
From: Jerry Lynde
Subject: DNAT with iptables question
Howdy folks,
I've been scouring the online docs for solid info on how to accomplish DNAT
with iptables.
Essentially, I have converted the ipmasqadm lines of the form...
ipmasqadm portfw -a -P tcp -L $WEB_OUT  http    -R $WEB_IN      http
to iptables lines of the form...
$IPTABLES -A PREROUTING -t nat -p tcp -d $WEB_OUT --dport 80 -j DNAT --to
$WEB_IN:80
with the accompanying lines...
$IPTABLES -A FORWARD -i $INTIF -o $EXTIF -m state --state
ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -m state --state
ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp -j ACCEPT
The last two lines seem functionally sorta redundant, but I threw em in in
an effort to make this work.
So far, I am unable to show that it's working correctly... I even tried
logging all packets...
$IPTABLES -A FORWARD -i $INTIF -p tcp -j LOG --log-level info
$IPTABLES -A FORWARD -i $EXTIF -p tcp -j LOG --log-level info
But nothing show up in /var/log/messages or anywhere else for that matter.
This is on a Redhat 7.3 box.
Any help, clues, flames, RT(his particular)FM, etc are appreciated.
I read the list, so please don't reply directly in addition to the list
resposne.
Thanks,
Jer
------------------------------
From: "Reckhard, Tobias"
Subject: RE: DNAT with iptables question
Date: Fri, 26 Jul 2002 08:32:37 +0200
> $IPTABLES -A PREROUTING -t nat -p tcp -d $WEB_OUT --dport 80
> -j DNAT --to
> $WEB_IN:80
>
> with the accompanying lines...
>
>
> $IPTABLES -A FORWARD -i $INTIF -o $EXTIF -m state --state
> ESTABLISHED,RELATED -j ACCEPT
> $IPTABLES -A FORWARD -i $EXTIF -o $INTIF -m state --state
> ESTABLISHED,RELATED -j ACCEPT
> $IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp -j ACCEPT
>
> The last two lines seem functionally sorta redundant, but I
> threw em in in
> an effort to make this work.
You're missing the NEW state. The initial SYN packet will not match with
either of the first two rules. It should match the third if it's inbound,
though.
> So far, I am unable to show that it's working correctly... I
> even tried
> logging all packets...
>
> $IPTABLES -A FORWARD -i $INTIF -p tcp -j LOG --log-level info
> $IPTABLES -A FORWARD -i $EXTIF -p tcp -j LOG --log-level info
>
> But nothing show up in /var/log/messages or anywhere else for
> that matter.
You need to insert those logging rules above any ACCEPT, REJECT or DENY
rules for them to be of any use. Are you sure the packets are hitting the
box at all? Try moving the log rules to the top of the FORWARD chain,
introduce logging rules to the PREROUTING, POSTROUTING, INPUT and OUTPUT
chains, and/or use tcpdump as well to see where the packets are travelling.
Cheers
Tobias
------------------------------
End of firewalls Digest V1 #33
******************************


__  __ _2002-08-16   _ _____ _  __
|  \/  (_)_ __ (_) \ | |_   _| |/ /    o Join! mail an empty message to
| |\/| | | '_ \| |  \| | | | | ' /     o ntknow-subscribe@lists.ntk.net
| |  | | | | | | | |\  | | | | . \     o Website (+ archive) lives at:
|_|  |_|_|_| |_|_|_| \_| |_| |_|\_\    o
>> MINI NEWS
> ANTI-NEWS
> EVENT QUEUE
> TRACKING
> MEMEPOOL
> GEEK MEDIA
> the objection that "Elvis - was a hero to most, but he
never meant shit to me" is addressed in ENTERTAINING ELVIS
(1.35am, Fri, ITV), in which "The King" offers his views on
our modern-day pop acts... the horror continues in the form of
CANDYMAN II (1.10am, Fri, C4) and William Peter "The Exorcist"
Blatty's psycho-nonsense THE NINTH CONFIGURATION (2.45am, Fri,
C4)... and Jason "Seinfeld" Alexander plays one of a bunch of
gay friends - not that there's anything wrong with that - in
LOVE! VALOUR! COMPASSION! (12.40am, Fri, C5)... Jarvis Cocker
*is* Rolf Harris, while "Allstars" impersonate the recently
deceased "Steps" in CELEBRITY STARS IN THEIR EYES (8.30pm,
Sat, ITV)... Sarah Michelle Gellar and Selma "Legally Blonde"
Blair put the "les" back into "Les Liaisons Dangereuses" in
their noted  classic
CRUEL INTENTIONS (9.30pm, Sat, C4)... leading into a late-
night character actor fest featuring Paul "Boogie Nights"
Anderson's feature debut HARD EIGHT (12.35am, Sat, BBC2),
David Mamet's Steve Martin con-game THE SPANISH PRISONER
(1.20am, Sat, C4), and Oirish juvenile delinquent coming-of-
ager THE BUTCHER BOY (12.55am, Sat, C5)... things get back to
normal on Sunday with the incomprehensible remake of MISSION:
IMPOSSIBLE (8.15pm, Sun, BBC1) - not to be confused with the
simultaneously fruitless THE HUNT FOR THE ANTHRAX KILLER (9pm,
Sun, BBC2)... Christina Ricci, Lisa Kudrow comedy THE OPPOSITE
OF SEX (10pm, Sum, C4) has snappy script, no plot... and it's
the final episode of the seemingly interminable 24 (10pm, Sun,
BBC2):  ... the - presumably
rhetorically titled - DID BARRY GEORGE KILL JILL DANDO? (9pm,
Mon, C4) and WHO KILLED SIMONE VALENTINE? (11.05pm, Mon, C4)
are helpfully scheduled either either side of SIX FEET UNDER
(10pm, Mon, C4)... Michael "David St Hubbins" McKean moves
into management in sub-"Spinal Tap" hostage romp AIRHEADS
(10.55pm, Mon, C5)... the consistently worrying TEENAGE KICKS
(10pm, Tue, C4) looks at "Teenage Dwarfs" - next week:
"Teenage Dirtbags"?... and
inspiration BARGAIN HUNT (8pm, Thu, BBC1) arrives on prime-
time - frankly we still prefer his mix of "147 Lockdown"...
FILM>> if they'd used the proper mathematical sigma symbol in
the title, then the sequel could have been called "The
Derivative Of Distress - With Respect To Terror" for largely
humourless feelgood nuclear thriller THE SUM OF ALL FEARS
(  :
We see [Bridget "Coyote Ugly" Moynahan] in bed, showing some
cleavage; the camera briefly focuses on some cheerleaders'
clothed butts during the Super Bowl)... oh and it's the full
release this week for SPY KIDS 2: THE ISLAND OF LOST DREAMS
(  : telepathy;
pelvic thrusts by a child; drinking with multiple drugging;
"Let's kick their [posteriors]" - which is not included in the
list of three/four letter word vocabulary but is impudent;
toilet humor - smothering in a pile of dung with fecal matter
in mouth)...
CONFECTIONERY THEORY>> "Are you tracking breakfast cereal?"
inquired a concerned LLOYD WOOD, after recently wandering into
the "kiddy end" of the cereal aisle. "They've all gone CD-ROM
on the front", he observed - causing him, for a moment to
think he was looking at "some really bloated computer
magazines". Of course we are, Lloyd, though we're not as
easily swayed by gimmicks as you are, and thus can impartially
report that NESTLE's Maryland-style COOKIE CRISP are the most
biscuit-like breakfast ever, easily triumphing over KELLOGG's
FROSTIES CHOCOLATE (too much chocolate, not enough "frosty"),
COCO POPS CRUNCHERS (clump together in this humid weather) and
even the Winnie The Pooh-themed DISNEY HUNNY B's - and if you
mix them all together, the milk goes so chocolatey it'll turn
your Pooh brown... elsewhere in dairy, MCDONALD'S continue a
disappointing run of toppings for the MCFLURRY (99p) -
Cadbury's Caramel is rubbish, and Jammie Dodgers not a patch
on our second-favourite McFlurry of all time, the Strawberry
Crunch: #l .
Reader ED AVIS complains that KFC don't tell you that their
"M&M" AVALANCHE (also 99p) does not feature real M&Ms but
"special miniaturised ones", which he describes as "frozen
solid" and "might as well be small bits of gravel for all the
chocolate flavour they impart". While, following last week's
announcement of Ice T's Posse Pops, CRAIG LEFF thought we'd be
reassured by the news that NBC are launching their own range
of TV-themed Baskin-Robbins ice-creams, including a "Fear
Factor" flavour designed to recreate the experience of eating
"dirt and spiders":
... back with confectionery, LEON VERRALL remained unimpressed
with STARBURST FRUITINESSE (from 49p, "tasted of plastic...
[resembled] those 'food pills' they thought we'd all be eating
by now"), DAVID BLANE grudgingly approved of the TWIX TRIPLE
CHOC LIMITED EDITION ("Not bad, faintly evoking Penguins,
which I never liked because of the thick chocolate"), and the
whole point of that controversial "It's not for girls"
campaign was revealed: to position NESTLE DOUBLE CREAM (40p)
as a more female-friendly version of the YORKIE BAR. Other
treats to look forward to in coming weeks: Cola-flavoured
CADBURY-TREBOR REFRESHERS, chicken-wings-flavoured HULA HOOPS,
bacon QUAVERS, the (presumably) non-crisp-like GOLDEN WONDER
FRUIT WONDERS - or, indeed, any of this weird new American
stuff:  ,
ranging from SCORNED WOMAN CHOCOLATE JALAPENO FUDGE to SOFT
AND CHEWY STINKY FEET ("Mmm, these feet are *so* stinky")...
>> SMALL PRINT
500KB attachments is forbidden by the Geneva Convention.
Your country may be at risk if you fail to comply.


WORLD WIDE WORDS         ISSUE 303          Saturday 17 August 2002
-------------------------------------------------------------------
Sent each Saturday to 15,000+ subscribers in at least 119 countries
Editor: Michael Quinion, Thornbury, Bristol, UK      ISSN 1470-1448
-------------------------------------------------------------------
IF YOU RESPOND TO THIS MAILING, REMEMBER TO CHANGE THE OUTGOING
ADDRESS TO ONE OF THOSE IN THE 'CONTACT ADDRESSES' SECTION.
Contents
-------------------------------------------------------------------
1. Feedback, notes and comments.
2. Turns of Phrase: Asian Brown Cloud.
3. Weird Words: Pyknic.
4. Q&A: Mash note.
5. Endnote.
A. Subscription commands.
B. Contact addresses.
1. Feedback, notes and comments
-------------------------------------------------------------------
MACHINIMA  My reputation for small errors continues to grow (I am
keeping quiet about the big ones) with a misprint in last week's
piece on this word. In the sentence giving the etymology, of all
places, I misspelled it "mechanima", thus confusing everybody.
APPETITE OVER TIN CUP  Several replies came in about this saying,
confirming that variations on it and other ways of saying "head
over heels" are widely known, especially "ass over appetite" from
the US, where "appetite" may be a transferred term for the mouth.
But the specific form that Maria Jessup Robinson was asking about,
"appetite over tin cup", seems not to be known much at all. It
would seem to be a conflation of the British expression "arse over
teakettle" and the American "ass over appetite" (note my deliberate
use of the two spellings of "arse" here!). The saying was probably
modified because at the time it was created a tea kettle was an
item less common in America than in Britain. Even in Britain these
days it is obsolete as a fixed term except within this expression,
which itself is now not very common.
BUMBERSHOOT  Several subscribers have pointed out that the word is
in the lyric of a song sung by Dick Van Dyke in the film "Chitty
Chitty Bang Bang":
Me ol' bam-boo, me ol' bam-boo
You'd better never bother with me ol' bam-boo
You can have me hat or me bumbershoot
But you'd better never bother with me ol' bam-boo
It may be one reason why some Americans, not familiar with the word
in their own country, have come to believe it must be British.
OLOGIES AND ISMS  The publication date of my book has been moved
back a week in the UK to 29 August. A review by Jonathon Green is
scheduled for the issue of 31 August (assuming nobody changes the
date again). See
for
more details and UK ordering information.
2. Turns of Phrase: Asian Brown Cloud
-------------------------------------------------------------------
As though we didn't have enough to worry about weather-wise, what
with global warming, the ozone hole, and the new El Niño season,
UN scientists have now identified this new threat to the world's
climate. It is a cloud of smog three kilometres deep, enveloping
the whole of southern Asia - a soup of industrial pollutants,
carbon monoxide from vehicle exhausts and particles of soot from
burning forests and millions of rural cooking fires. It blocks 15%
of sunlight, which reduces crop yields. It also creates acid rain,
leads to respiratory illnesses, reduces rainfall and causes extreme
weather events. Because the cloud is capable of being dispersed
rapidly around the world, it may affect a much wider area than just
Asia. The term "Asian Brown Cloud" seems to have been around for a
couple of years in scientific circles, but came to prominence this
week in a report prepared by a team of international climatologists
at the UN Environment Programme in preparation for the World Summit
on Sustainable Development in Johannesburg next week. The good
news, they say, is that unlike other causes of pollution and
climate change, this one is curable if Asians can shift to more
efficient ways of burning fuels.
The "Asian Brown Cloud," a 2-mile-thick blanket of pollution over
South Asia, may be causing the premature deaths of half a million
people in India each year, deadly flooding in some areas and
drought in others, a new U.N.-sponsored study indicates.
["Los Angeles Times", Aug. 2002]
A UN-backed study released on Friday said the "Asian Brown Cloud" -
a vast haze of pollution stretching across South Asia - is damaging
agriculture, modifying rainfall patterns and endangering the
population.
["Agence France Presse", Aug. 2002]
3. Weird Words: Pyknic  /'pIknIk/
-------------------------------------------------------------------
Short and fat.
Nothing to do with al-fresco meals, though it is said the same way
as "picnic".
In the early years of the twentieth century the German psychiatrist
Ernst Kretschmer examined criminals to try to tie their physical
shape and constitution to their personalities and mental illnesses.
Tall and thin ones he called "asthenic" (or "leptosomic") and
considered them to be the sort that commits fraud and petty theft.
A second set were athletic types with well-developed muscles, whom
he concluded, unsurprisingly, were more likely to be violent. The
third sort were the "pyknic" ones, who seemed to be a mixture of
the other two kinds so far as their criminal tendencies were
concerned. He took "pyknic" from Greek "puknos", thick or close-
packed; it appeared first in his book "Körperbau und Charakter"
(Physique and Character) in 1921, from where it soon moved into
English.
The American psychologist William Sheldon built on and modified
Kretschmer's ideas, coming up with the three terms to describe body
types - "endomorph", "mesomorph" and "ectomorph" - that are now
more common. He considered Kretschmer's pyknic type to be a mixture
of the endomorph (with a soft round body tending to put on fat, the
Santa Claus type) and the mesomorph (with a compact, powerful, and
athletic body tending to the Tarzan or Mr Universe type) and came
up with the phrase "pyknic practical joke" to describe a person who
is muscular in early life but who later goes pear-shaped and
balloons out into obesity.
4. Q&A
-------------------------------------------------------------------
Q. A friend and I were reading a recent article in the "New York
Times" that made mention of a "mash note". I had never heard this
term before, but I extrapolated that it is some sort of love note.
Is there a more specific meaning than a simple love note? And can
you give some insight as to the origin of the term? [Jane
Rosenthal, California]
A. You're right about the meaning of the phrase.
We have to go back some way to find the origin. The first form was
the word "mash" by itself. This was a slang term in the US in the
1870s for an infatuation or crush (a magazine in 1877 defined it as
"a deep but fleeting affection of the heart"). A "mash" could also
be a dandy or the object of one's affection (of either sex) or - as
a verb - to make amorous advances to a member of the opposite sex,
to flirt or seduce. A "masher" was a man who thought himself
irresistible to the female sex but whose advances were often
unwelcome.
The evidence collected by Professor Lighter in the "Random House
Historical Dictionary of American Slang" and by others suggests
that it was originally a term used in and around the theatre.
Charles Godfrey Leland (best known for his "Hans Breitmanns
Ballads" about a German immigrant) wrote a note above his poem,
"The Masher", dated about 1895, confirming this:
The word to "mash," in the sense of causing love or
attracting by a glance or fascinating look, came into
ordinary slang from the American stage. Thus an actress
was often fined for "mashing" or smiling at men in the
audience.
"Mash" and its derivatives crossed the Atlantic to Britain about
1880. "Masher" in particular became a term in London society,
especially among the more raffish supper-club and theatre-going
classes, for a type of fashionable male. The Oxford English
Dictionary defines it (with a distinctly maidenly air of drawing
away its collective skirts) as "a fop of affected manners and
exaggerated style of dress who frequented music-halls and
fashionable promenades and who posed as a 'lady-killer'", noting
that the word had been common "in 1882 and for a few years after".
In a letter from London in the old "Overland Monthly and Out West
Magazine" in 1889, a correspondent described a member of an
impoverished theatrical company: "This dashing youth was distinctly
conscious of his fascinations for the buxom maids who sighed beside
us, and the airy and elegant nonchalance of the glances that
superbly took them in would be a lesson for champion 'mashers' of a
far higher class".
A "mash note" (in its first appearances, "mash letter") was an
obvious enough extension: a love letter. It is recorded first in
1880 and - as you have discovered - is still doing well.
Where "mash" and its relatives come from has been a subject of
debate. It is sometimes said that it is from the standard English
word meaning to make soft by one of various means, with its obvious
reference to rendering the object of one's attentions pliable and
yielding. Max Beerbohm, writing in London in 1894 (mashers were
still around then, despite the OED's comment) remarked that some
people derived it from "Ma Chère", "the mode of address used by the
gilded youth to the barmaids of the period". But he thought it
really came from "the chorus of a song, which, at that time, had a
great vogue in the music-halls: 'I'm the slashing, dashing, mashing
Montmorency of the day.'" We're pretty sure now that he was wrong,
but he could hardly know that.
Back to Charles Leland again. Apart from his humorous writings, he
also researched and wrote a great deal about the Romany language as
well as Gypsy songs and customs. The following note from the
introduction to the poem gives an origin that is now widely
accepted:
It was introduced by the well-known gypsy family of actors,
C., among whom Romany was habitually spoken. The word
"masher" or "mash" means in that tongue to allure, delude,
or entice. It was doubtless much aided in its popularity by
its quasi-identity with the English word. But there can be
no doubt as to the gypsy origin of "mash" as used on the
stage. I am indebted for this information to the late well-
known impresario Palmer of New York, and I made a note of
it years before the term had become at all popular.
Though defunct in British English, "mash" and "masher" have never
quite gone away in America. "Mash" had a resurgence of popularity
as student slang in the 1980s in the sense of necking or petting,
though that may be a back-formation from "mash note".
5. Endnote
-------------------------------------------------------------------
"A Spanish lady asked an acquaintance during a visit to Ireland
whether there was a word in his language similar to 'manaña'. The
Irishman thought for a moment, then said: 'Sure there is, but it
doesn't have the same sense of urgency.'" [Traditional Irish joke.]
A. Subscription commands
-------------------------------------------------------------------
To leave the list, change your subscription address, or subscribe,
please visit
.
Or, you can send a message to
from the address at which you are (or want to be) subscribed:
To leave, send: SIGNOFF WORLDWIDEWORDS
To join, send: SUBSCRIBE WORLDWIDEWORDS First-name Last-name
B. Contact addresses
-------------------------------------------------------------------
Do not use the address that comes up when you hit 'Reply' on this
mailing, or your message will be sent to an electronic dead-letter
office. Either create a new message, or change the outgoing 'To:'
address to one of these:
For general comments, especially responses to Q&A pieces:
.
For questions intended for reply in a future Q&A feature:
.
-------------------------------------------------------------------
World Wide Words is copyright (c) Michael Quinion 2002.  All rights
reserved. The Words Web site is at
.
-------------------------------------------------------------------
You may reproduce this newsletter in whole or in part in other free
media online provided that you include this note and the copyright
notice above. Reproduction in print media or on Web sites requires
prior permission: contact
.
-------------------------------------------------------------------


I did more testing with your patch on top of today's CVS, but the patch
didn't help at all.
The following is the results of the tests:
Testing setup:
1. created a "/dev/md0" with 4 scsi disks
2. created a LVM Volume group "vg" with the "/dev/md0"
3. created a LVM logical volume "vol1" with "vg"
4. created a XFS fs with a command:
mkfs.xfs -f -d sunit=8,swidth=8 /dev/vg/vol1
-----------meta-data=/dev/vg/vol1           isize=256    agcount=8,
agsize=32767 blks
-----------data     =                       bsize=4096   blocks=262136,
imaxpct=25
-----------         =                       sunit=1      swidth=1 blks,
unwritten=0
-----------naming   =version 2              bsize=4096
-----------log      =internal log           bsize=4096   blocks=1200,
version=1
-----------         =                       sunit=1 blks
-----------realtime =none                   extsz=65536  blocks=0,
rtextents=0
Test results:
1. mount with quota enabled => occasional kernel oops, attached the file
oops1
2. mount without quota enabled => occasional kernel oops, attached the file
oops2
3. mount without quota enabled, while md device is in degraded mode =>
always kernel oops, attached the file oops3
Thanks,
JLee
----- Original Message -----
From: "Eric Sandeen"
To: "James Lee"
Cc:
;
Sent: Tuesday, August 13, 2002 3:03 PM
Subject: Re: kernel BUG at filemap.c:843!
> Hi guys -
>
> We treat MD and LVM somewhat specially, and I wonder if in this case MD
> is masking the fact that you're using LVM, and that might be where the
> problem starts.
>
> Can you try this patch, which will cause LVM & MD to be treated the
> same, to see if it helps?  It's probably not the final solution, but it
> might offer some hints.
>
> Thanks,
>
> -Eric
>
> --- linux/fs/xfs/pagebuf/page_buf_locking.c_1.24 Tue Aug 13 14:05:18 2002
> +++ linux/fs/xfs/pagebuf/page_buf_locking.c Tue Aug 13 13:59:37 2002
> @@ -198,7 +196,7 @@
>   pagebuf_target_blocksize(target, PAGE_CACHE_SIZE);
>
>   if ((MAJOR(dev) == MD_MAJOR) || (MAJOR(dev) == EVMS_MAJOR))
> - target->pbr_flags = PBR_ALIGNED_ONLY;
> + target->pbr_flags = PBR_SECTOR_ONLY;
>   else if (MAJOR(dev) == LVM_BLK_MAJOR)
>   target->pbr_flags = PBR_SECTOR_ONLY;
>   else
>
>
>
> On Mon, 2002-08-12 at 01:40, James Lee wrote:
> > Hi,
> >
> > I'm also having the exactly same problem.
> > Tested with 2.4.19-xfs(checked out from SGI's CVS on Aug 10) on Redhat
7.2.
> > Kernel and userland tools are compiled with gcc 2.91.66
> > The following is the result of some tests:
> >
> > scsidisks -> xfs: OK
> > scsidisks -> raid5 -> xfs: OK
> > scsidisks -> lvm -> xfs: OK
> > scsidisks -> raid0 -> lvm -> xfs: OK
> > scsidisks -> raid1 -> lvm -> xfs: OK
> > scsidisks -> raid5 -> lvm -> xfs: kernel BUG at filemap.c:843!
> >
> > This problem is always reproducible with the following shell script:
> >
> >         #!/bin/sh
> >         mkraid /dev/md0
> >         vgcreate VolumeGroup /dev/md0
> >         lvcreate -L1G -nTestVolume VolumeGroup
> >         mkfs.xfs -f -d size=32m /dev/VolumeGroup/TestVolume
> >         mount -t xfs /dev/VolumeGroup/TestVolume
> > /mnt -onoatime,nodiratime,usrquota,grpquota
> >
> > Whenever I run the above script, mount command always generates kernel
oops.
> > But, if I insert some delay as of the following, then mount goes well:
>
>
> --
> Eric Sandeen      XFS for Linux
> sandeen@sgi.com   SGI, Inc.         651-683-3102
begin 666 oops1.dat
M=&5S=&5D.B R+C0N,3DM>&9S("A31TDG
7-T96T@8W)E871E9"!O;B!T;W @;V8@
M3%9-("L@340L('-O;65T:6UE
6UO;W!S(#(N-"XQ(&]N(&DV.#8@,BXT+C$Y+B @3W!T:6]N
7-T
M96TN;6%P+3(N-"XQ.2 H9&5F875L="D*"E=A
6UB;VP@:6YF;W)M871I;VXN("!)
M('=I;&P*87-S=6UE('1H870@=&AE(&QO9R!M871C:&5S('1H92!K97)N96P@
M86YD(&UO9'5L97,@=&AA="!A
6UO;W!S("UT(&5L9C,R+6DS.#8@
M+6$@:3,X-@I%1DQ!1U,Z(# P,#$P,C0V"F5A>#H@8S$Y969B-# @("!E8G@Z
M(&,P,V$W9#$T(" @96-X.B P,# P,# Q-B @(&5D>#H@,# P,# P,# *97-I
M.B!C,6,P,&5C8R @(&5D:3H@9C5F,F9F,C @("!E8G Z(# P,# P,# Q(" @
M97-P.B!F-6-D,3DY. ID
2MA8R\Q,3 ^"E1R86-E.R!C,#(T-C4X.2 \
&9S7W)E861?8G5F*S-E+V8P
M/@I4
&9S7W)E861S8BLX,"]C,#X*5')A8V4[(&,P,C-B960T(#QX9G-?8VUO=6YT
M9G,K-3
7-T96U?8V%L;"LS,R\S.#X*0V]D93L@(&,P,3)B9&0V(#QU;FQO8VM?
M
&9F9F9F9F5A*"5E8W@I+"5E8W@*0V]D93L@(&,P
M,3)B9&1C(#QU;FQO8VM?
#0H)65S:2DL)65A> I#;V1E.R @8S Q
M,F)D93$@/'5N;&]C:U]P86=E*S4Q+S
&9S("A31TDG
7-T96T@=VET:"!Q=6]T82!E;F%B;&5D
M+"!C
&9S("UF("UD('-U;FET/3@L
6]U(&-A;B!G970*;6]R92!A8V-U
'!L86EN
#H@8S S83=D
M,30@("!E8W@Z(# P,# P,#$V(" @961X.B P,# P,# P, IE
&9S
M7V)U;&MS=&%T*S%B,R]B.# ^"E1R86-E.R!C,#%F,3,Y.2 \>&9S7W%M7W%U
M;W1A8VAE8VLK8SDO,34P/@I4
&9S7VUO=6YT
M9G,K9C!B+S$P,# ^"E1R86-E.R!C,#(S,S9B8B \>&9S7W)E861S8BLS8B]C
M,#X*5')A8V4[(&,P,C,S-S P(#QX9G-?
7-?;6]U;G0K830O
M,3 P/@I4
I#;V1E.R @8S Q,F)D9#D@/'5N;&]C:U]P86=E*S0Y+S
"DL)65C> I#;V1E.R @8S Q,F)D9&,@/'5N;&]C:U]P86=E*S1C+S
&]R(" @("0P
M>&,P+"5A; I#;V1E.R @8S Q,F)D9&4@/'5N;&]C:U]P86=E*S1E+S
"PP>#0H)65S:2D*0V]D93L@(&,P,3)B9&4T(#QU;FQO8VM?
#(P/B!C,#$R8F1F-B \=6YL;V-K7W!A9V4K-C8O-S ^"D-O
M9&4[("!C,#$R8F1E-B \=6YL;V-K7W!A9V4K-38O-S ^"B @,3 Z(" @-6(@
M(" @(" @(" @(" @(" @(" @(" @("!P;W @(" @)65B> I#;V1E.R @8S Q
M,F)D93
I#;V1E.R @8S Q,F)D
M93D@/'5N;&]C:U]P86=E*S4Y+S
&]R(" @("5E87@L*"5E87@I"@H*-B!W87)N:6YG
2!N;W0@8F4@
&9S("A31TDG
7-T96T@8W)E871E9"!O;B!T;W @;V8@
M3%9-("L@340L('=H:6QE($U$(&ES(&EN(&1E9W)A9&5D(&UO9&4@86QW87ES
M(&=E;F5R871E
&9S("UF("UD('-U;FET/3@L
6UO;W!S(#T]/3T]
M/3T]/3T]/3T]/3T]/3T]/0IK
6US("AD969A=6QT*0H@(" @("UL("]P
6UB;VP@
2!T96QL:6YG(&UE
M('1H92!K97)N96P@=F5R
6US(&5T8RX@(&MS>6UO;W!S("UH(&5X
#H@,# P,# P,38@
M("!E9'@Z(# P,# P,# P"F5S:3H@8S%C,#)A8S@@("!E9&DZ(&5F,#EE96,P
M(" @96)P.B P,# P,# P,2 @(&5S
2MA8R\Q,3 ^"E1R86-E.R!C,#(T-C4X.2 \
&9S7W)E861S8BLR,2]C
M,#X*5')A8V4[(&,P,C-B9#1E(#QX9G-?8VUO=6YT9G,K,V5E+S8Q,#X*5')A
M8V4[(&,P,C-C,#!B(#QX9G-?;6]U;G0K-&(O-C ^"E1R86-E.R!C,#(T968R
M-B \;&EN=F9S7W)E861?
7-?;6]U;G0K830O,3 P/@I4
I#;V1E.R @8S Q,F)D9#D@/'5N;&]C:U]P86=E
M*S0Y+S
"DL)65C> I#;V1E.R @8S Q,F)D9&,@/'5N
M;&]C:U]P86=E*S1C+S
&]R(" @("0P>&,P+"5A; I#;V1E.R @8S Q,F)D9&4@/'5N;&]C
M:U]P86=E*S1E+S
"PP>#0H)65S:2D*0V]D93L@(&,P,3)B9&4T(#QU
M;FQO8VM?
#(P/B!C,#$R8F1F-B \=6YL;V-K
M7W!A9V4K-C8O-S ^"D-O9&4[("!C,#$R8F1E-B \=6YL;V-K7W!A9V4K-38O
M-S ^"B @,3 Z(" @-6(@(" @(" @(" @(" @(" @(" @(" @("!P;W @(" @
M)65B> I#;V1E.R @8S Q,F)D93
I#;V1E.R @8S Q,F)D93D@/'5N;&]C:U]P86=E*S4Y+S
&]R(" @("5E87@L*"5E87@I
M"@H]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
+/3T]/3T]/3T]/0H`
`
end


EFFector       Vol. 15, No. 25        August 16, 2002     ren@eff.org
A Publication of the Electronic Frontier Foundation     ISSN 1062-9424
In the 225th Issue of EFFector:
* Judge Grants Consumer Voice in ReplayTV Lawsuit
* Musician Disputes Industry's Stance on Music Sharing
* Shake Your Money Maker; EFF Is Throwing a Party Next Thursday!
* Join the Fun at EFF's VIP Party with Wil Wheaton!
* Court Hearing Set in DeCSS Publication Jurisdiction Case
* Deep Links: Lawrence Lessig's Second-to-Last Speech on Copyright
* Deep Links: The "Total Information Awareness System," or, How
to Build a Police State
* Deep Links: Can the Digital Hub Survive Hollywood?
* Administrivia
For more information on EFF activities & alerts:
To join EFF or make an additional donation:

EFF is a member-supported nonprofit. Please sign up as a member today!
* Judge Grants Consumer Voice in ReplayTV Lawsuit
Hollywood Tries to Skip Over Consumers' Concerns
Los Angeles - Judge Florence Cooper today granted five ReplayTV owners
a voice in the court debate over their rights to record television
programs and to skip commercials using digital video recorders (DVRs).
The federal court denied the entertainment industry motion to dismiss
the ReplayTV owners' lawsuit and agreed to combine the consumer
lawsuit with an entertainment industry lawsuit filed last fall to ban
ReplayTV DVRs.
"We're pleased the court has recognized that the debate about digital
video recorders must include the customers who purchase and use the
devices," said Electronic Frontier Foundation (EFF) Intellectual
Property Attorney Robin Gross.
"[T]he issue of whether the Newmark Plaintiffs' use of the ReplayTV
DVRs' send-show and commercial-skipping features constitutes fair use
will most likely figure prominently in both the ReplayTV action and
the Newmark action," wrote Judge Cooper in her opinion.
Responding to the entertainment industry's lawsuit against DVR
manufacturers, EFF petitioned the court on behalf of the five ReplayTV
owners to declare legal their use of the digital devices also known as
personal video recorders (PVRs). EFF seeks to ensure that the legal
debate over DVRs will include consumers' concerns along with those of
the entertainment and consumer electronics industries.
The entertainment industry claims that commercial skipping infringes
copyright and digital recording aids piracy.
"I'm not a crook if I skip commercials or share a news interview of
myself with my mom using the SendShow feature rather than sending her
a videotape," said Craig Newmark, founder of craigslist.org and a
ReplayTV owner. "I shouldn't have to worry about getting prosecuted,
but the Turner Broadcasting CEO tells us that taking a bathroom break
is criminal. We even have Senators urging Attorney General Ashcroft to
prosecute people who share files."
Along with Newmark, ReplayTV customers filing the lawsuit with legal
representation by the EFF are: Keith Ogden, owner of a financial
broker firm in San Francisco; Shawn Hughes, a small business owner in
Georgia; Seattle journalist Glenn Fleishman; and southern Californian
video engineer Phil Wright.
Links:
For this release:

Court order denying dismissal and combining the ReplayTV cases:

For more information on the ReplayTV customers' suit:

For more information on the entertainment industry's suit:

EFF Fair Use FAQ:

- end -
* Musician Disputes Industry's Stance on Music Sharing
Janis Ian Urges Artists Speak Out, Support Free Downloads
San Francisco - Grammy-winning songwriter and recording artist Janis
Ian today challenged the music industry by celebrating peer-to-peer
(P2P) music sharing as a boon to musicians.
Ian, who is in the San Francisco Bay Area as part of her current
concert tour, recently published "The Internet Debacle," a pointed
critique of the music industry's disregard for musicians and consumers
who want to distribute and acquire music online. The Electronic
Frontier Foundation (EFF) applauds Ian's actions and hopes that others
will see the Internet as an aid, not a threat, to musicians.
In the article, Ian assails the major record labels' argument that P2P
file-sharing is harming artists.
"Free Internet downloads are good for the music industry and its
artists," explains Ian. "Every act that can't get signed to a major,
for whatever reason, can reach literally millions of new listeners,
enticing them to buy the CD and come to the concerts."
She adds that during the heyday of Napster she saw a marked increase
in CD sales from her website. She attacks technological and political
measures meant to harm consumers by restricting their right to copy
and back up their legally purchased music.
Ian will play on August 17 in San Rafael, CA.
During her 17 album career, Ian has earned nine Grammy nominations and
three awards. Her best known songs include 1967's "Society's Child"
and 1975's "At Seventeen." More recently, her 1993 album "Breaking
Silence" was nominated for a Grammy Award as Contemporary Folk Album
of the Year. Her songs have been recorded by artists ranging from
Bette Midler to Cher, from Glen Campbell to Vanilla Fudge, and from
Joan Baez to Etta James.
Links:
For this release:

Janis Ian's "Internet Debacle" article:

Janis Ian's follow-up article:

Janis Ian's tour information:

- end -
* EFF CAFE 2002 - a Benefit for EFF's Campaign for Audiovisual
Free Expression
Support Free Expression and See Barney-Wheaton Deathmatch
Thursday, August 22nd, 2002/ 9pm - afterhours
San Francisco - Join the hottest DJs of the electronic dance music
scene, celebrity boxers, and the foremost cyberspace activists as we
party to protect the future of music. The Electronic Frontier
Foundation presents CAFE 2002 - a Benefit for EFF's Campaign for
Audio-Visual Free Expression at 9 p.m. on Thursday, August 22nd, 2002
at the DNA Lounge in San Francisco. Admission is on a sliding scale
and begins at $10.
The night features world-class DJs, live acts, and producers from all
parts of the fast-growing electronic music community and a special
treat: celebrity boxing with Wil Wheaton and Barney the purple
dinosaur! Wil Wheaton, of Star Trek: The Next Generation and Stand By
Me fame, will take on Barney in a celebrity boxing matchup for the
history books. All proceeds from the event will directly benefit EFF's
CAFE project, helping to preserve your freedom to express yourself in
innovative ways.
For more information, see:

Or contact:
Katina Bishop
Director of Education and Offline Activism
Electronic Frontier Foundation
415-436-9333 x101
katina@eff.org
- end -
* Join the Fun at EFF's VIP Party with Wil Wheaton!
Did you love/hate him on Star Trek: The Next Generation? Did you
laugh/cringe in sympathy at the leeches scene in Stand By Me? Need one
last signature to round out your autograph collection of childhood
movie stars?
Do we even need to ask how you feel about Barney the purple dinosaur?
RSVP quickly for the Electronic Frontier Foundation's (EFF) VIP Party
with Wil Wheaton immediately preceding CAFE 2002: a Benefit for EFF's
Campaign for Audio-Visual Free Expression.
Join Wheaton and the foremost cyberspace activists for drinks in the
upstairs room of the DNA Lounge, San Francisco's leading dance club.
Enjoy free drinks, good company, and excellent music. Take the battle
against Barney and his legal thugs into your own hands with a swing at
EFF's ferocious Barney pinata.
Former technology entrepeneur and cypherpunk Sameer Parekh, now an
electronic musician and event promoter, will play a mix of fresh
minimal techno and electro for your aural edification.
All proceeds from the event will directly benefit EFF's CAFE project,
helping to preserve your freedom to express yourself in innovative
ways. Tickets are $50 (includes cost of CAFE 2002 and two drinks).
When: August 22, 2002 at 8:00 p.m.
Where: The DNA Lounge 375 Eleventh Street, San Francisco, CA 94103
21+ w/ID, NO EXCEPTIONS
To reserve your ticket, contact:
Katina Bishop
EFF Education Director
415-436-9333 x101
katina@eff.org
- end -
* Court Hearing Set in DeCSS Publication Jurisdiction Case
On September 5, 2002, the California Supreme Court will hear oral
arguments about whether a California court has jurisdiction over
Matthew Pavlovich, an Indiana college student who is a resident of
Texas, for his hosting of an Internet mailing list. Pavlovich
maintained the mailing list for the LiVid programming group, which
provides a unified development and user resource center for video and
DVD-related work for the Linux operating system. One of the group's
projects was to create a DVD player for computer systems that run
Linux. As part of that effort, DeCSS, a program that decrypts the copy
protection on DVDs, was published on the group's mailing list. The
entertainment industry has sued Pavlovich in California court, and
last year a California appellate court ruled Pavlovich was within the
state court's jurisdiction since he published information that relates
to the entertainment industry, which is based in California.
EFF and Pavlovich's legal team argue that Pavlovich is outside of
California's jurisdiction since he was a college student in Indiana
with no contacts to California when DeCSS was published on the LiVid
list. The hearing on September 5 will take place in San Francisco.
Links:
For more info on the case:

- end -
Deep Links
Deep Links is a new department in the EFFector featuring noteworthy
news items, victories and threats from around the Internet.
* Lawrence Lessig's Second-to-Last Speech on Copyright
Lawrence Lessig gave one of his last public speeches on copyright at
the O'Reilly Open Source Conference. He will be taking time off of the
speaking circuit to prepare for the Eldred v. Archroft case, which he
is arguing before the Supreme Court this fall. Copies of the speech
are available in many formats here:

- end -
* The "Total Information Awareness System"
A colorful diagram of John Poindexter's scary plan to eliminate
terrorists.

- end -
* Can the Digital Hub Survive Hollywood?
Cory Doctorow on how innovation and technology suffer at the hands of
the content industry.

- end -
* Administrivia
EFFector is published by:
The Electronic Frontier Foundation
454 Shotwell Street
San Francisco CA 94110-1914 USA
+1 415 436 9333 (voice)
+1 415 436 9993 (fax)

Editor:
Ren Bucholz, Activist
ren@eff.org
To Join EFF online, or make an additional donation, go to:

Membership & donation queries: membership@eff.org
General EFF, legal, policy or online resources queries: ask@eff.org
Reproduction of this publication in electronic media is encouraged.
Signed articles do not necessarily represent the views of EFF. To
reproduce signed articles individually, please contact the authors for
their express permission. Press releases and EFF announcements &
articles may be reproduced individually at will.
To change your address, plese visit
>>From there, you can update all your information. If you have already
subscribed to the EFF Action Center, please visit

(Please ask ren@eff.org to manually remove you from the list if this
does not work for you for some reason.)
Back issues are available at:

To get the latest issue, send any message to
effector-reflector@eff.org (or er@eff.org), and it will be mailed to
you automatically. You can also get it via the Web at:
 html
++++++++++++++++++++++++
You received this message because eff-all@eff.org is a member of the
mailing list originating from alerts@action.eff.org. To unsubscribe
from all mailing lists originating from alerts@action.eff.org, send an
email to alerts@action.eff.org with 'Remove' as the only text in the
subject line.


use Perl Daily Newsletter
In this issue:
* TPJ Ceases Publication
+--------------------------------------------------------------------+
| TPJ Ceases Publication                                             |
|   posted by hfb on Friday August 16, @21:17 (news)                 |
|                 |
+--------------------------------------------------------------------+
[0]TorgoX writes "Bad news, folks: [1]SysAdmin is stopping publishing The
Perl Journal. I just heard from the SysAdmin editors. Ad revenues are
down so much that all tech mags are apparently in dire straits, and
SysAdmin has basically been taking a big loss on TPJ for a while now; and
the money people say that it just can't keep doing that. So the issue
that's in the mail now is apparently [2]the last."
Discuss this story at:

Links:
0.
1.
2.
Copyright 1997-2002 pudge.  All rights reserved.
======================================================================
You have received this message because you subscribed to it
on use Perl.  To stop receiving this and other
messages from use Perl, or to add more messages
or change your preferences, please go to your user page.

You can log in and change your preferences from there.


LIFETIME MOVIE NEWSLETTER
This Week's Movies to Watch on Lifetime
[  ]
August 19, 2002
*************************************************************************
COMING AT YOU THIS WEEK...
1) "THE SECRET LIFE OF ZOEY" PREMIERE!
2) THE BUZZ ABOUT THE UPCOMING MOVIE
3) MOVIES AIRING THIS WEEK
4) BIG EVENT: A MARTINEZ SUNDAY
5) FUN AND GAMES
*************************************************************************
"THE SECRET LIFE OF ZOEY" PREMIERE!
Take a sneak peek at Lifetime’s next exciting Original Movie, "The Secret Life of Zoey" [  ], airing on Monday, August 19 at 9 pm et/pt. Zoey's mom thought she knew everything about her perfect teenage daughter. But when she realizes that her child is addicted to drugs, both of their worlds spin out of control. This dramatic film delves into the topic of teenage drug addiction and features stellar performers Mia Farrow, Andrew McCarthy and Julia Whelan, from TV's "Once and Again." Go behind the scenes with the cast [  ],
read real-life recovery stories of teen drug addicts [  ], and learn how to keep your kids drug-free with 10 expert tips [  ].
*************************************************************************
THE BUZZ ABOUT THE UPCOMING MOVIE
People are already talking about the sensitive subject of kids and drug addiction featured in "The Secret Life of Zoey."
Lifetimetv.com community member BELFAST BELLE writes:
"My belief is that I started using drugs to fit in and to cope with things that happened to me. My mom died when I was 10. I had to live away from my dad and brothers. Where I grew up I was sexually abused for years, but I didn't dare tell anyone. When I finally went to live with my dad and brothers, I had no self-esteem left. I experienced so much shame, and in my mind it seemed as if everyone knew what happened. Drugs helped me to feel OK and like I was a part of something. When my dad died, I was devastated. It threw me into a full-blown addiction. My drug use landed me in rehab, in debt and in strained relationships with my brothers. Thanks to the help of Narcotics Anonymous, I have been clean since December 28, 1991. I now have great relationships with my siblings. I love them more than they will ever know. I also have a beautiful seven-year-old daughter who has never seen her mother touch drugs. I don't have any desire to use, either -- just the desire to be the best pe
rson I can be."
Express yourself! Tell us your thoughts on "The Secret Life of Zoey" and let us know if addiction has affected your life. Go to our Message Boards at
*************************************************************************
MOVIES AIRING THIS WEEK
"The Wrong Woman," premiering August 20 at 9 pm et/pt
Melanie is flirting with a married man -- her boss. When he turns up dead, she is framed for his murder! Will the victim's wife help save Melanie from jail? Starring "The Division" star Nancy McKeon [  ].
[  ]
"Hit and Run," airing August 21 at 9 pm et/pt
Joanna is the ideal mother, wife and friend. But her "perfect" life is altered forever when she accidentally hits a young girl with her car and leaves the scene. What catches up with her first -- her conscience or the police? Starring "The Division" star Lisa Vidal
[  ].
[  ]
"Get to the Heart: The Barbara Mandrell Story," premiering August 22 at 9 pm et/pt
Barbara Mandrell plays herself in this inspiring autobiographical movie about the country-western singer's rise to fame and the car crash that nearly killed her. Also starring Dolly Parton and Kenny Rogers. Find out more about this Grammy-winning crooner [  ].
[  ]
"Road Rage," airing August 23 at 9 pm et/pt
It's just another day on the freeway for Ellen Carson, until she innocently cuts off Eddie, a short-tempered delivery driver who is upset over recent deaths in his family. Then Ellen and her loved ones become the stalking targets of Eddie's violent wrath. Starring Yasmine Bleeth.
[  ]
*************************************************************************
BIG EVENT: A MARTINEZ SUNDAY
Tune in on Sunday, August 25, for a day filled with movies showcasing heartthrob A Martinez, who stars in Lifetime's exciting new legal series, "For the People" [  ].
"She-Devil," airing August 25 at 12 pm et/pt
When Ruth's husband, Bob, leaves her for another woman, Ruth devises a devious plot to ruin both their lives piece by piece. It's a face-off between Roseanne Barr and Meryl Streep!
[  ]
"Manhunt: Search for the Night Stalker," airing August 25 at 2 pm et/pt
This true story recalls how famed serial killer Richard Ramirez terrorized Los Angeles for six months by murdering people in their own homes. See how the cops finally caught this vicious criminal.
[  ]
"Sweet Dreams," airing August 25 at 4 pm et/pt
She wakes up from a coma and nothing is as it seems. Will she regain her memory and realize that her husband and his mistress are out to get her? Starring Tiffani-Amber Thiessen.
[  ]
"Cruel Justice," airing August 25 at 6 pm et/pt
After his daughter's rapist is set free by the courts, a father seeks justice on his own terms.
[  ]
***********************************************************************
FUN AND GAMES
Think you're ultimate film fanatic? Prove it! Play Cinema Sequence and see if you really know all the star facts and flick stats [  ].
***********************************************************************
SUBSCRIPTION INFORMATION FOR THE LIFETIME MOVIE NEWSLETTER
Please do not reply to this e-mail; it's automatically generated, and this mailbox is not read by anyone. Therefore you will not get a response. If you wish to be removed from the Lifetime Movie Newsletter mailing list, please send an e-mail to unsubscribe-movies@email.lifetimetv.com. If you are a My Lifetime member and wish to add to or modify your current newsletter preferences, please go to  and change your subscription options. If you need to write to us, please do so at subscriptions@lifetimetv.com. Thank you.


ZDNet Announcements
July 10, 2002
Exclusive
Offer for ZDNet
Members...
Now
40% off!
Dear
ZDNet Member:
Just a quick
note to let you know that your ZDNet membership now qualifies
you for a special 40% discount on ZDNet
Rewards, our advanced tech service! Join ZDNet
Rewards and you get all
these great benefits:
Interactive
Web design classes: learn online, at your own pace
Subscription
to Computer Shopper magazine
Access
to ZDNet's private tech research center
Members-only
online forum for expert PC guidance and support
WebFerretPRO:
a FULL copy of the ultimate Web search utility
And
more... try
it now!
Try ZDNet
Rewards for a full month for just $1 -- and if you
love using these advanced features, you can become a full member
for 40% off the regular cost! Go here for all the details:
Join
today and get your first month for just $1!
Thanks for
being a part of ZDNet, the premier technology community.
-- The ZDNet
team
Sign up for more free newsletters from ZDNet
The e-mail address for your subscription is qqqqqqqqqq-zdnet@example.com
Unsubscribe |
Manage
My Subscriptions | FAQ |
Advertise
Home |eBusiness | Security | Networking | Applications | Platforms | Hardware | Careers
Copyright 2002 CNET Networks, Inc. All rights reserved. ZDNet is a registered service mark of CNET Networks, Inc.


____________________________________________________________
T H E . M O U T H P I E C E  Monday, August 19th, 2002
____________________________________________________________
Do you enjoy this publication? Then give your friends a FREE
GIFT SUBSCRIPTION to it today. Just click below and
"Shag-a-Friend"!

Give a Gift Subscription!
____________________________________________________________
To SUBSCRIBE:
To UNSUBSCRIBE:
To COMMENT, write to
AOL Links:
Subscribe
Unsubscribe
Email the Editor
____________________________________________________________
[m]  q u o t e s . o f . t h e . d a y
"A Houston woman has been arrested for running over her
husband three times and killing him with her Mercedes.  The
woman claims it was an accident. Three times.  That shows you
what a smooth ride the Mercedes is."
-Jay Leno
"It’s been reported that the couple from ABC’s reality show
"The Bachelor," has broken up.  It’s not surprising since
studies show that 60% of fake TV marriages end in divorce."
-Conan O'Brien
"You know 'that look' women get when they want sex? Me
neither."
-Steve Martin
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ sponsor ~~~~
Say Goodbye To Pain...It's As Easy As 1-2-3!
* -   COMPARE & SAVE $20.00 to the TV Product   - *
Don't let chronic pain stop you from enjoying life! Introducing
New and Improved Blue Ease Pain Reliever. You've seen similar
products selling on TV for as much as $39.99. Why pay that
much when you can get better results for half the price?
Simply apply Blue Ease to the targeted area and within
minutes the pain vanishes. Blue Ease is Great For:
* Arthritis             * Insect stings/Spider bites
* Lower back pain       * Migraine Headaches
* Sore muscles          * Knee, hip, shoulder, hand pain
* Burns & Sunburn       * Sports injuries, strains & sprains
PLUS, Blue Ease is GUARANTEED to work for you! If it doesn't
just return the unused portion for a refund. Order a 4 oz jar
today for only $19.99, a savings of $20.00, by visiting:

Blue Ease
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[m] h u m o r . s i t e s
^^^^^^^^^^^^^^^^^^^^^
BUG REVIEW
This website provides you with any kind of information you
need to know about bugs. Search by the insects name or by
location such as lawns and turfs, flowers, and trees and
scrubs. This website comes in handy when trying to figure out
what kind of weird bugs you have around the house.

-
-
MYSTERY PHOTO
Visit each week to see if you can identify the object(s) in
the mystery photo. It may be a close-up of some ordinary object
or setting, or something photographed at an odd angle or in an
unusual setting, or some unusual object.
If you think you know what it is, enter your answer in our
drawing.  A winner will be chosen each week from among the
correct entries.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ sponsor ~~~~
An Exquisite Genuine Blue-Topaz Necklace for FREE?
UNBELIEVABLE! While supplies last, we are giving away these
stunning Genuine Blue Topaz Necklaces - FREE! (you cover the
s&h of $4.97)!
This exquisitely cut Blue Topaz stone will make heads turn. A
stunning pendant that is accented by a stylish, 18" manmade
gold chain, this gorgeous necklace makes a wonderful gift for
a friend - or especially for yourself!
BUT YOU MUST ACT RIGHT NOW! Due to an overwhelming response to
this FREE offer there's no telling when our inventory will run
out. Sorry -- limit 4 per order. GET YOUR FREE NECKLACE NOW:

Click Here
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[m]  b i t s . n . b o b s
^^^^^^^^^^^^^^^^^^^^^
Things You'll Never Hear A Man Say...
1. I just love how Barry Manilow sings, don't you?
2. No, I don't want another beer. I have to work tomorrow.
3. You know, her breasts are just too big for my liking.
4. Sometimes I just want to be held.
5. Boy, that Barbara Walters on "20/20" is one sexy babe.
6. Sure, honey! I'd be happy to discuss the state of our
relationship.
7. We haven't been to the mall for ages. Let's go shopping and
I can hold your purse.
8. Forget Monday Night Football. Let's watch something
meaningful on the "Lifetime Channel."
9. It's late. Put your clothes back on and I'll take you home.
10. Honey, I'm going to the store. Do you need more tampons?
11. Actually, I prefer it when *you* hold the remote.
12. I'm sick of beer. Give me a fruit juice.
13. Great! Your mother's coming to stay with us again.
14. I wonder if my gorgeous neighbour knows that her drapes are
open when she's getting ready for bed. Maybe I should tell
her.
15. No way. You weeded the garden last week. It's my turn.
16. Better get rid of these old Playboy magazines. I don't
look at them any more.
17. I understand.
18. This movie has way too much gratuitous nudity.
19. Damn, we're late for church!
20. No! I don't want to see your sister's breasts.
21. Damn these onions, pass me a tissue.
22. Put some panties on, for Pete's sake.
23. Eat something! You are starting to look like a Victoria's
Secret Model!
24. Don't pick that up, I got it.
25. Happy Anniversary!
26. Hey, isn't today your Mother's birthday?
27. Let's talk. I miss talking.
28. Gay men have rights too!
29. I am just too tired to have sex again today!
30. Are you losing weight, sweetie?
_________________________________________________________
LINKS FOR AOL MEMBERS
Today's Humor Sites:
BUG REVIEW
MYSTERY PHOTO
------------------------------------------------------------
t h e . m o u t h p i e c e
SUBSCRIBE/UNSUBSCRIBE instructions are at the TOP of this
issue.
____________________________________________________________
END OF THE MOUTHPIECE - Another FREE ShagMail publication
FREE fun in your mailbox every day!! Check out Shagmail.com
FREE Newsletters
Copyright 2002 by Pulse Direct, Inc. All rights reserved.
Feel free to forward this, in its entirety, to others.
---
You are currently subscribed to mouthpiece as: mothlight@fastmail.fm