Ocenite etot tekst:


Tekst budet popolnyat'sya.

YA  znayu  edinstvennyj  distributiv  Linux,  kotoryj  mozhno bylo
ispol'zovat'  srazu,  ne  kovyryayas'  v  ego  konfig-fajlah,   v
pol'zovatel'skom okruzhenii, i t.p. - Slackware 1.0 obrazca 1994
goda.

Vse  posleduyushchie  relizy  Slackware,  a  tem  pache RedHat pered
upotrebleniem trebuyut hirurgicheskogo vmeshatel'stva.




     rpmbuild --rebuild bla-bla.src.rpm

    Bol'she tonkostej otkryvaetsya pri
    rpm -ivh kernel-*.src.rpm
    vi /usr/src/redhat/SPECS/kernel-2.6.spec
    ... [custom]
    rpmbuild -ba /usr/src/redhat/SPECS/kernel-2.6.spec






lockkit --disable -q   # otklyuchit' fajrvoll





 From: Sergej Bogomolov.
 Glyuchit, sil net. No moj SoundBlaster tol'ko v nem rabotaet.
 From: Dmitrij Voloshin
 Glyuchnyj.
 From: Maksim Moshkov
 Glyuki,  a  kakie  -  sam  ne pojmu, vrode i ne vpomnish' na chto
zhalovat'sya. A na firewall ya opyat' postavil 4.2  (s  zaplatkami,
estestvenno).
 From: YUrij Vasil'evich Kovalenko 
     1.)  esli ne ustanovil LILO imenno s etogo distributiva (a
u menya na mashine est' eshche i RH-4.2) rc.sysinit ne  mozhet  najti
moduli.
     2.)  Posle  ustanovki  v resolv.conf poyavilas' tol'ko odna
stroka s odnim slovom "search", informaciyu o seti prosil uznat'
po  bootp.   Sledstviya  - rugan' na nepravil'nyj format fajla i
otsutstvie dostupa k nameserver.
     3.)  Pri  sborke  yadra  34-1  iz /updates ruchkami prishlos'
delat' link asm - asm-i386
     4.)  Glint  zavis  pri  poyavlenii  v  /updates  direktorii
(/jpeg).   |to  to,  chto  vspomnilos'  srazu,  osobenno   yarkie
vpechatleniya  ot  1  punkta.   Po  sravneniyu s 4.2 - ochen' syro,
ochen' ploho reagiruet na lyuboj shag v storonu  ot  predstavlenij
avtorov  ob  konfiguracii  mashiny.  RH-4.2  ispol'zuyu 5 chasov v
sutki na on lajn obrabotke eksperimenta, 5.0 i 5.1  ne  vnushayut
doveriya dlya etoj celi, zhdu 5.2.

    RedHat 5.0

From: Sergej Kuzovkov Ustanovil RedHat 5.0 - net graficheskoj konfiguryalki dlya Iksov, propala udobnaya programma statnet, a programma GhostView pri vybore punkta "print" vmesto imeni printera trebuet teper' vvesti komandu pechati...

    Nesovmestimyj cpio

Arhiv cpio -ov v RedHat 5.0 ne chitaetsya na drugih platformah. A sovmestimyj cpio -ovca - NE CHITAETSYA na samom Linux!!! Snesti "rodnoj" cpio, i zamenit' ego "starym" iz 4.2 V yavnoj forme zadavat' klyuch -H crc

    RedHat 4.2, 5.0

Problema: Installyaciya po NFS - nagluho zavisaet. "Permition denied" Lechenie: Vy ved' etot distributiv sftpili? A pravo "execute", kotoroe ftp sbrosil, vosstanovit' ne zabyli? cd redhat ; chmod -R a+x .

    fstab: Propal disk C:, gde disketki A:, B:

Problema: Kak rabotat' s dosovskimi disketami? RedHat predpolagaet, chto nastoyashchij unixoid pol'zuetsya disketkami formata ext2, i ne vstrechaetsya s FAT-ovskimi dosovskimi floppi. Problema: Ne podklyuchayutsya dosovskie razdely zhestkogo diska. Potomu chto installyator "zabyl" sdelat' mount-point dlya nih. Problema: CHto delat' s CDROM-om? Lechenie: Sozdat' sootvetstvuyushchie katalogi mkdir /a mkdir /b mkdir /cdrom mkdir /dos mkdir /dosd V fajle /etc/fstab dobavit'/ispravit' strochki: /dev/fd0 /a msdos defaults,user,umask=000,noauto 0 0 /dev/fd1 /b msdos defaults,user,umask=000,noauto 0 0 /dev/cdrom /cdrom iso9660 defaults,user,ro,exec,dev,suid,noauto 0 0 /dev/hda1 /dos msdos defaults,user,umask=000 0 0

    startx: |konomim odin virtual'nyj terminal i nemnogo pamyati

Problema: Posle zapuska X, startx zanimaet odin virtual'nyj terminal, i ostavlyaet za soboj dva sleeped processa. Lechenie: V fajle /usr/bin/X11/startx ispravit' strochku xinit $clientargs -- $serverargs na exec xinit $clientargs -- $serverargs &

    lpd: udalennaya pechat' - permition denied

Problema: RedHat host po umolchaniyu ne dozvolyaet pechatat' na svoem printere udalennym lpr klientam. Lechenie: (voobshche-to tak ono i dolzhno byt' - security) V fajl /etc/hosts.lpd vpisat' vse hosty, kotorym dozvoleno pechatat'.

    RedHat: otsutstvuet pcnfsd

Problema: PC s klientami NFS ne poluchayut dostup k setevomu disku. Lechenie: to, chto nuzhno vpisat' v /etc/exports hotya-by takuyu strochku / (rw) eto, polagayu, osobogo udivleniya vyzyvat' ne dolzhno. No, v RedHat ne vhodit demon pcnfsd ! Skompilirujte pcnfsd iz ishodnikov, ili voz'mite ego iz RedHatovskogo Contrib'a ili iz Slackware, i dobav'te zapusk rpc.pcnfsd v fajl aktivizacii nfsserver'a /etc/rc.d/rc3.d/S60nfs daemon rpc.mountd daemon rpc.nfsd + daemon rpc.pcnfsd echo

    profile: Problemy s kirilicej iz-za krivogo okruzheniya

Problemy: vi risuet russkie bukvy vos'mirichnymi kodami. less risuet russkie bukvy shestnadcaterichnymi kodami. Bash ne pozvolyaet vvesti v komandnoj stroke russkih bukv i merzko pishchit pri etom. Lechenie: V /etc/profile dobav'te komandy LC_CTYPE=iso_8859_1 export LC_CTYPE # |to spasaet russkie bukvy v VI LC_LOCALE=iso_8859_1 export LC_LOCALE # |to spasaet russkie bukvy v VI LESS="-e -r -X" export LESS # CHtob less russkie bukvy ne kalechil

    /etc/inittab: RedHat stiraet ekran pered vyvodom Login:

Problema: pered tem, kak vyvesti priglashenie login, stiraetsya ekran. Kstati, iz-za etogo sbrasyvaetsya russkij alfavit i perekodirovku koi2alt prihodilos' vosstanavlivat' ruchkami echo -e '\033(K' Lechenie: V /etc/inittab popravit' strochki zapuska getty (dobavit' "--noclear") 1:12345:respawn:/sbin/mingetty --noclear tty1 . . .

    profile: Kak raspravit'sya s neudobnym priglasheniem bash

Problema: Priglashenie komandnogo interpretatora bash vo pervyh nevrazumitel'no, a vo vtoryh v raznyh okoshkah ono raznoe. Lechenie: Priglashenie zadaetsya peremennoj okruzheniya PS1. Naiven, kto schitaet, chto dostatochno ustanovit' ee v svoem pol'zovatel'skom .profile . Uvy, sledy krivogo okruzheniya nado vykorchevyvat' s kornem. V fajlah /etc/profile /etc/skel/.bashrc $HOME/.profile dobav'te/isprav'te komandu PS1='\u@tty2:\w/\$ ' export PS1 Fajl /etc/bashrc unichtozh'te. Vse chto bylo v nem razumnogo (IMHO - nichego v nem razumnogo net) vernite na svoe zakonnoe mesto v /etc/profile

    /etc/skel: Lazhovoe pol'zovatel'skoe okruzhenie

Problema: Vystavlyaetsya bezumnoe znachenie peremennoj PS1. Ne otrabatyvaetsya pol'zovatel'skij .profile Lechenie: Udalit' v domashnem kataloge fajly .bash_logout .bash_profile Ispravit' fajl .bashrc na PS1='\u@tty2:\w/\$ ' export PS1 CHtoby prekratit' "oschastvlivlivanie" vseh svoih yuzerov, prodelat' tu zhe operaciyu v kataloge /etc/skel Prodolzhenie sleduet. Rekomenduyu tak zhe posmotret': Nachalo raboty v sisteme ()

    Komanda man po zavershenii prosmotra stiraet ekran s manualom

Problema: Komanda man po zavershenii prosmotra stiraet ekran s manualom Nazyvaetsya "a u tebya ved' horoshaya pamyat'? Isn't it?" Lechenie: man ispol'zuet dlya prosmotra komandu less. U less est' klyuch "-X" - "ne deinicializirovat' ekran po okonchanii. Poetomu dobav'te ego k defoltnym klyucham v peremennuyu okruzheniya LESS v svoem profajle. LESS="-e -r -X" export LESS Lechenie: drugoj metod - popravit' v opisanii terminala stroku deinicializacii (ah, kak tam ona nazyvaetsya?), i ubrat' iz nee komandu stiraniya ekrana.

    crontab: massa izlishnih rabot

crontab root'a lezhit u RedHat v nestandartnom meste - /etc/crontab . Mozhet byt' dlya BOLXSHOGO mnogo pol'zovatel'skogo internet-servera i nuzhen takoj ogromnyj spisok planiruemyh rabot, no vse ravno, rekomenduyu na nego posmotret', sokratit' chastotu zapuska raz edak v 10, a koe-chto sovsem zakommentirovat'. Konkretno: sokratit' chastotu atrun 0,10,20,30,40,50 * * * * root /usr/sbin/atrun # Trim log files uvelichit' razmer pri kotorom log-fajl udalyaetsya s 16 do 256kb Esli ispol'zuetsya uucp to dobavit' chistku uucp-ishyh log-fajlov. V Redhat Linux ezhednevno puskaetsya komanda updatedb, sozdayushchaya indeks dlya locate. Odnako v etot indeks popadayut fajly tol'ko iz kornevogo kataloga. Lechenie: ispravit' klyuchi komandy updatedb v fajle /etc/cron.daily/updatedb.cron s --localpaths='' --netpaths='/' na --localpaths='/' --netpaths=''

    Konfiguraciya XDM

Postavlyaemyj s RedHat fajl Xsession nerabotosposoben. Poprav'te v /etc/X11/xdm/Xsession nizhnij fragment teksta na primerno takoj: ################## moshkow ############################# sysprofile=/etc/profile profile=$HOME/.profile [ -f "$sysprofile" ] && . $sysprofile [ -f "$profile" ] && . $profile [ -f "$resources" ] || resources=$HOME/.Xdefaults [ -f "$resources" ] || resources=$HOME/.Xresources [ -f "$startup" ] || startup=$HOME/.xinitrc [ -f "$startup" ] || startup=$HOME/.xsession [ -f "$startup" ] || startup=/usr/lib/X11/xinit/xinitrc if [ -f "$startup" ]; then xrdb -load "$resources" exec sh "$startup" fi ################## moshkow #############################

    Raznoe. Nereshennye problemy

Posle perekompilyacii yadra VSE moduli, prishedshie s distributivom perestayut rabotat'. Ih ostaetsya tol'ko unichtozhit'. No iBCS unichtozhat' zhalko - a on skompilirovan pochemu-to pod versiyu yadra 2.0.13 vmesto 2.0.18. Prihoditsya iskat' ishodnik iBCS i perekompilirovat'.

    * SECURITY *

SHtatnaya postavka sendmail 8.7.5 imeet security hole - lokal'nyj yuzer imeet vozmozhnost' poluchit' root prava. SHtatnaya postavka sendmail 8.7.5 nerabotosposobna voobshche - primerno chetvert' vseh pisem nedostavlyaetsya po prichine delivery errors Edinstvennyj metod lecheniya - upgrade do versii 8.8.5, u kotorogo etot bug zalechen Postavlyaemyj s RedHat 3.0 mount imeet security hole - lokal'nyj yuzer imeet vozmozhnost' poluchit' root prava. Proizvedite update na ispravlennuyu versiyu, ftp://ftp.redhat.com/pub/redhat/redhat-3.0.3/i386/updates/RPMS/mount-2.5k-1.i386.rpm ili snimite setuid-bit s komand mount/umount # chmod u-s /bin/mount /bin/umount

    Neskol'ko rekomendacij po bezopasnosti

Vol'nyj perevod s http://www.corbina.net/~ppinpro/alx/gen-rule.html Esli vash distributiv staree 3-5 mesyacev - smelo vykidyvajte ego na svalku. On soderzhit massu izvestnyh vsemu miru security holes i ne imeet massy poleznyh utilit. Obyazatel'no perekompilirujte yadro, vykinuv iz nego vse ne nuzhnye sejchas dravera. Ne zabud'te sdelat' chmod 400 /vmlinuz. Dobav'te v /etc/lilo.conf vozmozhnost' zagruzki predydushchego yadra. Otredaktirujte /etc/inetd.conf. Zakommentirujte v nem VSE strochki, kotoryh ne ponimaete. Esli chto-to ostalos' nezakommentirovanno, pomestite stroku ALL : ALL v fajl /etc/hosts.deny I individual'nye strochki razreshenij na doverennye hosty v fajle /etc/hosts.allow VSE versii sendmail, krome SAMOJ SVEZHEJ pozvolyayut vzlomat' vash komp'yuter iz seti. Unichtozhte fajl so staroj versiej. wu-ftp demon nenadezhen i opasen. Nikto ne poklyanetsya, chto v nem ispravleny vse security holes.

    Konfigurirovanie tcp-wrapper'a

Po umolchaniyu vse servisy v /etc/inetd.conf otkryty. Rekomenduetsya ogranichit' dostup k svoej mashine, ostaviv ego tol'ko doverennym hostam i svoej lokal'noj seti. Perekryt' dostup snaruzhi na uzlovuyu mashinu: V fajl /etc/hosts.deny vstavit' strochku ALL : ALL Otkryt' dostup na uzlovuyu mashinu s mashin lokal'noj seti 195.0.1.0 V fajl /etc/hosts.allow vstavit' strochki ALL : \ 127.0.0.1 ALL : \ 195.0.1.0/255.255.255.0

    A kakoj versii sendmail na vashej mashine?

Date: 10 apr 97 Kstati CERT sovetuet stavit' Sendmail 8.8.5. Bolee rannie versii pozvolyayut udalenno vypolnyat' lyubye komandy ot imeni superpol'zovatelya na vashej mashine.

    httpd: dyryavye cgi-skripty

SHtatnaya postavka Apach-httpd imeet cgi-skript /home/httpd/cgi-bin/phf kotoryj pozvolyaet vypolnyat' proizvol'nye komandy na vashej mashine ot imeni yuzera nobody

    Securnye parametry yadra

Pri rekonfiguracii yadra ne zabud'te vzvesti flazhki: > * Drop source routes pakets [Y] Drop packets that have a source route flag set. This stops simpliest redirection attacks and should be always set to yes. > * always defragment [Y] Reassemble packet from fragments first and only after that apply firewalling rulesets. Unless you have a really good reason not to do this ( and I am yet to hear one ), it should be set t yes.

    Imeyushchij dostup k konsoli Linux mozhet stat' superyuzerom

0. Zagruzka so svoej zagruzochnoj diskety 1. Booting to single-user mode LILO: linux single Debian obhodit eto popravkami v /etc/initab, a RedHat - propuskaet # What to do in single-user mode. ~~:S:wait:/sbin/sulogin 2. Ukazat' al'ternativnuyu programmu init LILO: linux init=/bin/bash 3. Zadat' drugoj root-partition LILO: linux root=/dev/hda1 Esli sozdat' v otdel'noj particii vsyu polozhennuyu dlya kornya strukturu, to mozhno budet s nee zagruzit'sya. |tu vozmozhnost' mozhno poluchit', naprimer, esli /tmp montiruetsya v otdel'nuyu particiyu. Ili mashina podderzhivaet UMS­ DOS i imeet dosovskij razdel. Lechenie Zakryt' parolem BIOS-setting i otklyuchit' vozmozhnost' zagruzit'sya s diskety. Zakryvajte vozmozhnost' perehvata LILO-prompt A workaround can be achieved by using PASSWORD and RESTRICT options in /etc/lilo.conf. Vnimanie: /etc/lilo.conf dolzhen byt' root.root 600, chtob nikto ne smog etot parol' podsmotret'.

    kerneld and ifconfig zagruzyat lyuboj kernel-modul'

Komanda /sbin/ifconfig module-name pozvolyaet _lyubomu_ pol'zovatelyu zagruzit' modul' iz kataloga /lib/modules ispol'zuya kerneld. Lechenie: Poka ne zalecheno v promyshlennom masshtabe. Otklyuchajte kerneld ili yavno ukazyvajte moduli, kotorye mozhno gruzit', uberite vse lishnie moduli dostavshiesya vam posle installyacii.

    * PROCHEE *

    /etc/rc.d : Lishnie komandy pri nachal'noj zagruzke

Problema: pri nachal'noj zagruzke zapuskaetsya bol'shoe kolichestvo izlishnih servisov (chto osobenno nerviruet na domashnih standalone mashinah) Lechenie: Zajti v katalog /etc/rc.d/rc3.d i pereimenovat' "lishnie" fajly: mv S45pcmcia s45pcmcia . . .

    /etc/sysconfig/network-scripts/ : Nekorrektnye ustanovki staticheskogo routinga

Esli pytat'sya ustanavlivat' staticheskij routing setej cherez "control-panel -- Network" - to ne rabotaet. Lechenie: Libo dobavit' komandy route add -net network.address gw your-host v fajl /etc/rc.d/rc.local Libo ispravit' v konce /etc/sysconfig/network-scripts/ifup-routes grep "$1 " /etc/sysconfig/static-routes | while read device args; do route add -$args $device done na grep "$1 " /etc/sysconfig/static-routes | while read device args; do route add -$args # $device ########## done

    /etc/sysconfig/network-scripts/ : Nekorrektnye skripty

From: Roman (mrv@fia.volga.ru) Problema: Pripeklo ustanovit' dva PPP interfejsa. pol'zovalsya standartnoj konfiguryaloj v iksah. Glyuk - pri vystavlenii u odnogo interfejsa priznaka Default gateway, tablica routinga stroitsya s dvumya default Lechenie: Analiz pokazal - pri zapuske demona PPPD, esli emu yavno ne ukazat' otkaz ot Default gateway, to po umolchaniyu on postavitsya sam. Neobhodimo v fajle /etc/sysconfig/network-scripts/ifup-ppp najti stroku: if [ "${DEFROUTE}" = yes ] ; then opts = "$opts defaultroute" fi I dobavit' v nee: if [ "${DEFROUTE}" = yes ] ; then opts = "$opts defaultroute" else opts = "$opts -defaultroute" fi Problema: Pri ispol'zovanii Alias na setevye karty ne otrabatyvaetsya Static-route Primer: Est' adapter eth0 , delaem alias na nego eth0:0 Pri popytke postrojki staticheskogo routinga v fajle /etc/sysconfig/static-routes dlya seti na interfejse eth0:0 posle perezagruzki komp'yutera nichego ne proizojdet. Lechenie: Gotovogo reshenie poka net, no prichina v skripte kotoryj inicializiruet zapusk seti V nem analiz interfejsov v fajle /etc/sysconfig/static-routes idet do znaka "dvoetochie" Lechenie2: Kardinal'noe - gorbatogo mogila ispravit. Vykinut' GUI-control-panel i konfigurit' rukami i vstavlyat' komandy pod'ema interfejsov i routinga v /etc/rc.d/rc.local

    Raspolozhenie yadra /vmlinuz ili /boot/vmlinuz ?

Problema: zamorochki s yadrom. S installyacii rabochee yadro kladetsya v /boot/vmlinuz i /etc/lilo.conf zatachivaetsya pod nego, a pri perekompilyacii, po komande make zlilo yadro zabrasyvaetsya v /vmlinuz Lechenie: Popravit' /etc/lilo.conf ruchkami, i skazat' lilo

    Nastraivaemye parametry yadra

Na sil'no zagruzhennyh sistemah nachinaetsya igra v nehvatku: cannot fork try again, no more filedescriptors, no more pty... Lechenie: Uvelich'te nastraivaemye parametry i perekompilirujte yadro. CHislo psevdoterminalov (a sledovatel'no chislo xterm'ov, telnetov...) /usr/src/linux/include/linux/tty.h #define NR_PTYS 256 /* etot parametr trogat' ne rekomenduetsya */ I ne zabud'te mknod dlya bol'shego chisla pty Maksimal'noe chislo processov /usr/src/linux/include/linux/tasks.h #define NR_TASKS 4090 /* On x86 Max 4092, or 4090 w/APM configured */ #define MAX_TASKS_PER_USER (NR_TASKS/2) #define MIN_TASKS_LEFT_FOR_ROOT 16 CHislo fajldeskriptorov i otkrytyh fajlov. /usr/src/linux/include/fs.h #define NR_FILE 4096 #define NR_INODE 3072

    Update RedHat 3.0.3 --> 4.0

Normal'no mozhno postavit' RedHat s CD ili po NFS. A vot s lokal'nogo zhestkogo diska... #$%^#$&&^)#%$@$&^*%%^ a eshche on ster moj fajl /etc/hosts, /etc/httpd/conf/*, pereimenoval /etc/sendmail.cf, /etc/lilo.conf Koroche, ya-to postavil. A Vy?

    Update RedHat 4.0 --> 4.1

1. Vo vremya ustanovki v samom konce sprashivaetsya: "Keep current network setting" YA skazal "No", mashina neozhidanno sdelala re­ boot, i potom ej bylo ne zdorovo. Vo vtoroj raz ya skazal ej "Keep" 2. Posle update na nachal'noj zagruzke poyavlyaetsya soobshchenie klog-daemon: ws unknown action Prichina: V fajle syslog.conf razrezalos' neskol'ko strochek. news.=crit /var/log/news/ne ws.crit ^^^ skleit' 3. V sendmail 8.8.5 ne udaetsya po normal'nomu nastroit' uucp- delivering. Nesmotrya na Smart-relay-host, on tem ne menee pytaetsya sdelat' na adresa DNS-resolving. Otklyuchit' ne udalos', FEATURE(nodns) ne pomogla. Prishlos' vzyat' staryj uucp_without_dns sendmail.cf iz-pod slackware 2.0

    Prodolzhenie sleduet: xdm, uucp, startx-win95...

Prisylajte svoi sovety/zamechaniya/dopolneniya po povodu vsego vysheskazannogo Maksim Moshkov. moshkow@ipsun.ras.ru

    Esli ne rabotaet setevaya karta

http://www.scyld.com/network/rtl8139.html http://www.scyld.com/expert/modules.html Kompilyaciya modulya s draverom: gcc -DMODULE -D__KERNEL__ -O6 -c driver.c Installyaciya v /lib/modules/kernel-version/net/driver.o install -m 644 driver.o /lib/modules/`uname -r`/net/ /etc/modules.conf: ########################### alias eth0 driver options driver full_duplex=1,0,1 debug=0 # vklyuchit' full-duplex na 1 i 3-j karte ###########################

    Vozmozhnye popravki v TCP-konfige

esli slishkom mnogo time_wait netstat -na -f inet | grep ^tcp4 | awk '{print $(NF)}'|sort |uniq -c echo 1600 >/proc/sys/net/ipv4/tcp_keepalive_time echo 20 >/proc/sys/net/ipv4/tcp_fin_timeout echo 1 > /proc/sys/net/ipv4/tcp_keepalive_probes echo 0 > /proc/sys/net/ipv4/tcp_window_scaling echo 0 > /proc/sys/net/ipv4/tcp_sack echo 0 > /proc/sys/net/ipv4/tcp_timestamps echo 393213 > /proc/sys/net/core/rmem_max echo 393213 > /proc/sys/net/core/rmem_default echo 393213 > /proc/sys/net/core/wmem_max echo 393213 > /proc/sys/net/core/wmem_default

    Izgotovlenie emergensy boot floppy

# mke2fs /dev/fd0 # mount /dev/fd0 /mnt/fd # mkdir /mnt/fd/boot # mkdir /mnt/fd/boot/grub # cp /boot/grub/stage1 /mnt/fd/boot/grub/stage1 # cp /boot/grub/stage2 /mnt/fd/boot/grub/stage2 # cp /boot/grub/menu.lst /mnt/fd/boot/grub/menu.lst # umount /mnt/fd # /sbin/grub --batch --device-map=/dev/null <
Last-modified: Fri, 28 Apr 2006 08:23:52 GMT
Ocenite etot tekst: