Re: [gentoo-security] Weird Network and Portage Digest Issues

[Chris Wensink]

This may seem like a simple solution, but try changing the mirror. 
Find a file that generates the errors, try emerging it, then unemerge
it, and change your mirror, and re-emerge it.  That way you can at
least tell of the problem is related to a local setting or the mirror
your working with.  Because it's happening at work and at home, the
problem seems to be nothing related to your systems.

Does anyone know of some sort of md5 checksum package / procedure to
verify the integrity of a package download and test it, before
configuring, compiling and installing it?  Maybe this is the next
thing a talented programmer needs to build to prevent problems like
this in the future.

Chris

On Mon, 23 Aug 2004 13:45:45 -0400, bryank@××××××.edu <bryank@××××××.edu> wrote:
> I noticed this with datapipe.net.  Any others?
>
> --Kevin


>
>
>
> On Mon, Aug 23, 2004 at 05:32:13PM +0200, Spider wrote:
>
> > begin  quote
> > On Mon, 23 Aug 2004 11:11:03 -0400 (EDT)
> > "Joey McCoy" <ixion@××××××.com> wrote:
> >
> > > Hey guys,
> > >
> > > I thought maybe these issues were related to my home systems, but I've
> > > noticed the same problems here at work today.
> > <snip>
> > > What is going on here? Is there some new DoS causing the downloads to
> > > hang? If so, what's up with the bad digests? I haven't noticed any new
> > > attacks in my IDS logs, but I haven't been paying much attention to my
> > > firewall logs.. could there be some exploit intercepting emerge
> > > downloads?
> >
> >
> > Nothing so fancy I'm afraid. We had a broken mirror that would do html
> > meta redidrects, effectively borking all files downloaded.
> >
> > //Spider
> >
> > --
> > begin  .signature
> > Tortured users / Laughing in pain
> > See Microsoft KB Article Q265230 for more information.
> > end
>
>
>
>

--
gentoo-security@g.o mailing list