[12:24] <radevil> hello, is there anyone in here working for cannonical???
[12:31] <lionel> radevil: fabionne and infinity are
[12:31] <lionel> but they are probabily not around
[12:35] <radevil> mm ok
[12:35] <radevil> i'm right now doing my CV to send it to canonical
[12:36] <radevil> i wanted to speak with any of them to know a little bit more about the job
[12:40] <radevil> :)
[01:24] <andel7> exit
[02:04] <radevil> s
[02:04] <radevil> ls
[02:11] <mralphabet> grep
[02:23] <shawarma> kill
[03:38] <radevil> Hello
[03:39] <shawarma> hi
[03:41] <radevil> do you work for canonical?
[03:43] <shawarma> Nope.
[03:44] <dj-fu> lol
[03:44] <dj-fu> isn't a shawarma like a kebab but with different bread?
[06:43] <josh_> anyone here that can help me with me half-life server ????
[06:43] <josh_> ..its runing good just cant get to it from LAN
[06:44] <josh_> i can get to all other servers on teh box via my ddns exept the half-life server
[02:52] <dsdg> halo i am running pureftpd-mysql on ubuntu, how can i stop users from deleteing?
[02:53] <dsdg> no one knows?
[02:54] <dsdg> ok, i see this, -K  --keepallfiles, but where do i add it..?
[03:14] <mralphabet> dsdg: it generally takes more then 1 minute for you to get an answer, have patience
[03:15] <dsdg> hehehe
[03:15] <dsdg> yea i have actually given up man, sometimes ubuntu can be quite confusing...take pureftpd for instance, wtf did they try to do there? wtf is the config files...?
[03:16] <dsdg> crazy devs...
[03:16] <mralphabet> yes, because everybody loves being ridiculed because we don't answer your question within 30 seconds
[03:16] <mralphabet> . . .
[03:16] <dsdg> its not about that really,
[03:16] <mralphabet> dsdg: there's a server dev job open with canonical, feel free to put an app in
[03:16] <dsdg> all i want is a normal config file, like gentoo, etc etc, where i can add options, instead i must sniff it out of /etc/default/pure-ftpd
[03:18] <dsdg> mralphabet, again, it;'s not about that...this seems to be the only defence a dev can come up with, "if you dont like it, do it yourself" that's getting old man,
[03:18] <fabbione> dsdg: you want it in one file.. somebody else wants it splitted in multiple files.. take your pick
[03:18] <fabbione> it's matemathically impossible to make everybody happy
[03:18] <dsdg> fabbione, no, i said i am looking for a config file...
[03:18] <fabbione> dsdg: did you check in /usr/share/doc/pure-ftpd ?
[03:18] <dsdg> for instance, where will i add a simple option like -K to my startup options of pureftpd?
[03:18] <fabbione> i don't have it installed
[03:19] <fabbione> i don't use it.. so i can't say.. but usually a start up option is in /etc/default/ or /etc/init.d/pure...
[03:21] <dsdg> fabbione, i am reading through there, thanks for that btw, trust me i just want things easier, not more difficult, 
[03:21] <fabbione> dsdg: if this is your first time with Ubuntu/debian based systems, you will need to get used to some differences with other distros
[03:21] <fabbione> it's normal
[03:21] <fabbione> there are always differences
[03:22] <fabbione> but i am being rethoric here
[03:22] <fabbione> anyway what i told you before is valid for let say 99% of the packages out there
[03:22] <dsdg> fabbione, i know, i have been using gentoo for years so trust me, i can work on any distro, boss-man wants this server on ubuntu...so here i am, suppose ill just give it time,
[03:26] <fabbione>  /usr/share/doc/packagename 
[03:26] <fabbione> i hate boss that forces people on distro foobar
[03:26] <dsdg> yea :( 
[03:31] <dsdg> ah good news :) but not on the ftp side, apache this time,
[04:02] <dballester> hi to all
[04:04] <dballester> mralphabet, what is the best way to propose a feature or enhancement for ubuntu-server ( it's about raw devices )
[04:05] <fabbione> dballester: you want to create a spec in launchpad and propose it for discussion
[04:05] <dballester> ok
[04:05] <fabbione> the spec in LP will point to the wiki.ubuntu.com/blabla page
[04:06] <fabbione> with all details about the spec
[04:06] <fabbione> then once the spec is in a reasonable state you propose it
[04:06] <dballester> indeed
[04:06] <dballester> in fact is very simple and may be you're solving it in another way
[04:06] <ivoks> dballester: easy set up of raw devices?
[04:09] <dballester> at least the initial mknod c 162 0 to be done at installation time, if i'm not wrong seems that is not created ( at least I needed to create it by hand to be able to use raw command )
[04:09] <andel7> hi guys
[04:14] <lionel> hi andel7
[04:42] <chandu_> hi
[04:45] <chandu_> what services will be enabled by default in Ubuntu-server
[04:46] <shawarma> None, really.
[04:46] <fabbione> chandu_: none. no open ports/services. you can select at install time if yuo want DNS server and/or LAMP server
[04:46] <shawarma> Unless you choose the LAMP or DNS install.
[04:46] <shawarma> heh..
[04:47] <chandu_> shawarma, Does it contains only these two server componets ..LAMP & DNS
[04:47] <shawarma> Well, no.
[04:47] <shawarma> But those are the ones you can choose at install time.
[04:47] <shawarma> After installation, you can install anything you want.
[04:47] <chandu_> shawarma, ok
[04:47] <fabbione> as shawarma sais
[04:47] <shawarma> web servers, ftp servers.. Anything in the Ubuntu archive.
[04:48] <fabbione> LAMP and DNS are just common enough to be worth asking at install time
[04:48] <chandu_> shawarma, So ..If I am not chosing thsoe during installation ..it means only desktop will get installed
[04:48] <shawarma> No desktop.
[04:48] <chandu_> shawarma, oh .only base system
[04:48] <shawarma> That's pretty much what server installation means.
[04:48] <chandu_> shawarma, without X
[04:48] <shawarma> chandu_: All the available software is the same in the "regular" ubuntu version and the server on.e
[04:49] <chandu_> shawarma, ok
[04:49] <shawarma> chandu_: It's just a matter of what is installed by default.
[04:49] <shawarma> chandu_: Oh, there's a different kernel for server installs, though.
[04:49] <chandu_> shawarma, but in the regular ubuntu version .. U get desktop by default once U installed right
[04:49] <shawarma> chandu_: Lower HZ, another io scheduler by default, iirc.. Stuff like that.
[04:49] <chandu_> shawarma, different version of kernel ..of kernel with different configuration
[04:49] <shawarma> chandu_: Yes.
[04:50] <shawarma> chandu_: Same version, slightly different configuration.
[04:50] <chandu_> shawarma, k
[04:50] <chandu_> shawarma, the how abt in server version ..no desktop by default
[04:50] <chandu_> shawarma, As of I know servers wont come with desktop
[04:50] <shawarma> chandu_: No. Only very basic installation.
[04:50] <chandu_> shawarma, ok
[04:50] <shawarma> chandu_: We have a pretty strict "no open ports by default" policy.
[04:51] <chandu_> shawarma, So over the basic isntallation ..whatver server components we need ..we need to instal using apt-get
[04:51] <shawarma> chandu_: That's the idea, yes.
[04:51] <chandu_> shawarma, 
[04:51] <chandu_> no open ports by default" policy. means what
[04:51] <shawarma> It means that when you're done installing any version of Ubuntu, there's no services listeing for network connections. It's a security decision made long ago.
[04:52] <chandu_> shawarma,means network service wont be there by default
[04:52] <shawarma> The server installation cd contains a bunch of server software, though, but it's not installed and configured by default.
[04:52] <shawarma> chandu_: Yes.
[04:53] <chandu_> shawarma, then if no network ..how do you connect to repo and install componetns thru apt-get
[04:53] <chandu_> shawarma, you need to put the server cd ..and install locally
[04:53] <shawarma> chandu_: Oh, you can connect to the network. The network cannot connect to you.
[04:53] <chandu_> shawarma, ok ok ..its one way
[04:53] <chandu_> shawarma, no packets from outside network coming inside
[04:53] <jsgotangco> its pretty neat
[04:53] <shawarma> chandu_: It's not like there's not network support. There are just no networked services installed by default.
[04:54] <shawarma> chandu_: Precisely.
[04:55] <chandu_> shawarma, is there any doc or website where can I get the more detail abt server and what packages do I need to install to setup a fully qualified server ..with security features like PAM, selinux and all
[04:57] <chandu_> shawarma, Why server components are not installed by default during installation .. is it because of the policy as you told for some security reasons
[05:01] <mralphabet> yes
[05:02] <mralphabet> there are a lot of linux distributions that have many services (services meaning telnet, ssh, ftp, dns, http, https, etc etc etc) installed by default
[05:03] <mralphabet> for those people out there in the world that simply install a system and never apply updates, that server with open services will soon become insecure because of exploits or whatever else
[05:04] <jsgotangco> the install provides you a good base to design your own setup with very little hassle
[05:04] <mralphabet> This is opposed to the debian approach where the only services that are open are the services you choose
[05:04] <jsgotangco> so there is an assumption that you actually know what you are installing/using
[05:05] <fabbione> we install less than Debian
[05:05] <fabbione> not even openssh is installed
[05:05] <mralphabet> fabbione: right, sorry
[05:10] <chandu_> so in debian some services will be enabled by default
[05:11] <mralphabet> ssh
[05:11] <chandu_> is there any debian server cd like ubuntu server cd .. I dint get anyone
[05:11] <chandu_> mralphabet,ok
[05:11] <mralphabet> chandu_: to install ssh on ubuntu server -- sudo apt-get install openssh
[05:12] <mralphabet> to install apache -- sudo apt-get install apache2
[05:12] <Nafallo> how hard is it to do sudo apt-get install openssh-server after it's installed? :-)
[05:13] <chandu_> mralphabet, yup I know this ..
[05:13] <jsgotangco> like sabdfl said in his email, even a monkey can install it lol
[05:13] <chandu_> mralphabet, I want to know ..how the user comes to know that he wants to install all these components t osetup a server
[05:14] <Nafallo> chandu_: if he DOESN'T KNOW what ssh is he would probably not need it :-)
[05:14] <mralphabet> chandu_: if you want to serve web pages in linux, what software do you need?
[05:15] <chandu_> mralphabet, its httpd or apache
[05:15] <mralphabet> chandu_: and how do *you* know this?
[05:15] <chandu_> mralphabet, you mean the same way the user will do 
[05:16] <Nafallo> anyway. we have a serverguide! :-D
[05:16] <mralphabet> you asked "how does the user come to know what he wants to install"
[05:16] <chandu_> mralphabet, yup
[05:16] <Nafallo> so help.ubuntu.com ;-)
[05:16] <chandu_> mralphabet, I meant the way I know abt the package ..the other users will also have to know abt pkgs needed and then install right
[05:16] <ivoks> CoC, people, CoC :)
[05:17] <mralphabet> The answer is "you start with what you want to accomplish, then research for the best software to use for what you want to accomplish"
[05:17] <jsgotangco> chandu_: you mean "how will a user know the name of the package?"
[05:17] <chandu_> mralphabet, ok fine ...I got it 
[05:17] <chandu_> jsgotangco, No I got the answer from mralphabet 
[05:17] <jsgotangco> cool
[05:17] <chandu_> Thank you Guys 
[05:17] <Nafallo> chandu_: I can really recommend help.ubuntu.com for users :-)
[05:17] <ivoks> i agree
[05:17] <jsgotangco> yes
[05:18] <chandu_> Nafallo, ok ..let me go through that 
[05:18] <Nafallo> even for me
[05:18] <Nafallo> and I'm not exactly "user" anymore :-)
[05:18] <chandu_> But I have a question ..I have seen Redhat Enterprise and Advanced server
[05:18] <jsgotangco> chandu_: the server CD provides you a good base to customize on how you want your server to function, hence there are no default services enabled
[05:18] <chandu_> where you get all services get isntalled by default
[05:18] <mralphabet> chandu_: I don't mean to be difficult, sorry if I come across that way
[05:19] <chandu_> jsgotangco, ok ..you mean the Ubuntu policy tells that .. User comes to know what is ther e in his server only when he himself installs the server components over the base sysettm
[05:19] <ivoks> chandu_: you don't
[05:19] <jsgotangco> chandu_: because RHEL caters to a different market and uses this approach while ubuntu server assumes a level of proficiency with regards to the services
[05:20] <chandu_> jsgotangco, ok .. I got it ..
[05:20] <ivoks> chandu_: as a RHCE, I guarantee you that RHAS and RHES don't come with all services preinstalled
[05:20] <jsgotangco> yeah you got nice graphical tools though if you opt to
[05:20] <chandu_> jsgotangco, ok fine
[05:20] <chandu_> Thank you Guys ..
[05:21] <chandu_> I got some information 
[05:21] <Nafallo> jsgotangco: do they work over serial? ;-)
[05:21] <chandu_> I have to leave now ..
[05:21] <jsgotangco> :D
[05:21] <chandu_> Will catch you with few more questions tomorrow 
[05:21] <chandu_> bye
[05:21] <ivoks> bye
[05:21] <Nafallo> chandu_: see ya
[05:23] <jsgotangco> ciao
[06:29] <andel7> i'm looking for any kind of bruteforce protection - some mechanism that will block the IP that failed to authenitcate more then 6 times? is there anything like that ?
[06:31] <ivoks> for ssh?
[06:32] <ivoks> anyway, iptables
[06:34] <ivoks> iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 30 --hitcount 6 --rttl --name SSH -j DROP
[06:34] <ivoks> or something like that...
[06:41] <andel7> thanks ivoks
[06:41] <andel7> and yes i need it for ssh....
[06:41] <ivoks> np
[07:27] <dballester> nos vemos!
[11:11] <h4wk0> Im looking in getting a dedicated server and having ubuntu installed - Just wondered how stable is is proven to be
[11:12] <mralphabet> h4wk0: it works for lots of people
[11:12] <h4wk0> And i take it - you would advise me to use 6.06lts
[11:19] <mralphabet> I would advise you to use whatever you want, LTS offers package stability and security
[11:20] <Nafallo> so does 6.10 and 7.04 ;-)
[11:20] <mralphabet> 7.04 offers latest greatest packages
[11:20] <mralphabet> Nafallo: so LTS offers nothing over 6.10 / 7.04?
[11:21] <Nafallo> yes it does. 60 months instead of 18 :-)
[11:21] <Nafallo> if I calculated that correclty ;-)
[11:33] <h4wk0> All i need to find is a cheap us dedicated server place :)
[11:33] <h4wk0> Accpets paypal and allows irc
[11:37] <theacolyte> LOL
[11:37] <theacolyte> good luck
[11:37] <theacolyte> no network will allow IRC for cheap
[11:38] <theacolyte> if you decide to do IRC though, I'd suggest http://www.sharktech.net/
[11:47] <h4wk0> Well at the min - ive found corenetworks.net
[11:47] <h4wk0> But dont accept paypal, but sales team say they might be able to do it
[11:47] <h4wk0> But dont like the "may be able to"