[00:14] <nealmcb> soren: this should help - I rebooted in recovery mode (and with no silly splash screen), and got this:  alert! /dev/disk/by-uuid-ad2c6.......2a3 does not exist, dropping to a shell
[00:39]  * nijaba is going to bed
[00:42] <nealmcb> nijaba: sweet dreams - yet another virtual reality, much cheaper!
[03:42] <Innatech> Hello. Can anyone familiar with prevu and backporting have a look at this prevu output for me and help me understand the nature of the failure? http://rafb.net/p/Ns0NLR55.html
[03:56] <ScottK> Innatech: It looks like probably a bug in the package with debhelper level setting, but I'd have to review the code to be sure.
[03:56] <ScottK> Innatech: Additionally, that's pbuilder running in that part of PREVU, so anyone familiar with pbuilder (which is a lot more than PREVU) could have read that.
[03:59] <Innatech> ScottK: what should I read to try and familiarize myself with the tools enough to correct the problem?
[04:00] <Innatech> ScottK: debhelper and pbuilder man pages, I'm assuming.
[04:00] <ScottK> Innatech: If you look at the source of the package, there should be a file debian/compat that should have a number in it.
[04:01] <ScottK> If it does and the number is 5, then you need to whine to jdong to help you with prevu.
[04:01] <Innatech> Heh, OK.
[04:01] <ScottK> If it's not there or it's higher than 5, then you need to file a bug (and maybe try to fix it).
[04:02] <jdong> *popping in at ScottK's request*
[04:03] <ScottK> Innatech meet jdong.  jdong, meet Innatech
[04:03] <jdong> whee!
[04:03] <ScottK> jdong: http://rafb.net/p/Ns0NLR55.html is the issue in question.
[04:04]  * ScottK doesn't have time to look at it, but it seemed like an odd error to be in the actual package.
[04:04] <Innatech> Hello!
[04:04] <jdong> *waits for rafb to load*
[04:04] <Innatech> I'm looking through the package for the files ScottK indicated should be present.
[04:05] <ScottK> jdong: I told him to check debian/compat just to make sure it didn't say 6 for some odd reason.
[04:05] <jdong> I still can't get the pastebin to load... the connection seems to be timing out
[04:05] <Innatech> hmm. I'll use a different pastebin.
[04:05] <jdong> thanks
[04:06] <Innatech> http://paste.ubuntu-nl.org/46395/
[04:07] <jdong> ah yes, that's better
[04:07] <jdong> weird error indeed
[04:07] <jdong> *reproduces*
[04:08] <Innatech> OK, so I'm not crazy. I usually assume the problem is me.
[04:08] <jdong> ScottK: debian/compat says 6 for shorewall 3.4.4-1
[04:10] <Innatech> So, it wants a newer debhelper than prevu is using?
[04:10] <jdong> Innatech: it wants a newer debhelper than what Feisty has (prevu uses a stock feisty build environment)
[04:11] <jdong> Innatech: you can either try to introduce a newer debhelper, or figure out what part of the new shorewall packaging needs the new compat level and try to shave it back down to how it was.
[04:11] <Innatech> hrrrm. Well, I need to get a newer shorewall somehow. The version in the Feisty repos is too old to do multiple WAN connections.
[04:12] <Innatech> Would it be worth trying to create a new package for Feisty using a tarball of a newer version rather than trying to meddle with the Gutsy package? I'm not well acquainted with altering packages.
[04:12] <jdong> Innatech: ok, someone's gonna hurt me for saying this BUT......
[04:13] <jdong> Innatech: just set the debian/compat back down to 5 and see if the build fails
[04:13] <jdong> :)
[04:13] <Innatech> heh.
[04:13] <jdong> it's more sane than totally repackaging from scratch for sure
[04:14] <Innatech> OK. I'll see what I can figure out.
[04:15] <jdong> Innatech: in case you didn't know, running "prevu" in the source directory builds the modified source directory. It works similarly to pdebuild.
[04:15] <Hobbsee> jdong: debhelper 6 doesn't exist yet does it?
[04:15] <jdong> Hobbsee: *shrug* first time I've heard of it...
[04:15] <Hobbsee> if it does, it's not in ubuntu
[04:16] <Hobbsee> looks like a typo
[04:16] <Innatech> jdong: yes, I think I saw that on the wiki page. So I just grab the source, make the change and see if it builds.
[04:16] <jdong> but yet shorewall synced from debian sid wants it
[04:16] <jdong> Innatech: I'll test a build just to see what happens
[04:16] <jdong> Hobbsee: could very well be
[04:16] <Hobbsee> and we would have expected more packages coming thru and failing for it
[04:17] <jdong> Innatech: builds *perfectly* with debian/compat set to 5
[04:18] <Innatech> Cool. I'm still fumbling around, but I should have it in a minute.
[04:18] <jdong> yeah lemme know if you have trouble doing the build
[04:23] <Innatech> I'm just having trouble finding the correct file to alter. I grabbed the .dsc with dget, but it appears not to include the source.
[04:24] <jdong> Innatech: dgetting the .dsc should grab a .dsc, .diff.gz, and .orig.tar.gz
[04:24] <jdong> Innatech: alternatively, apt-get source shorewall
[04:25] <Innatech> Yeah, I have the orig.tar.gz, but there's no .debian/ in it.
[04:25] <jdong> Innatech: you need to run dpkg-source -x on the .dsc file
[04:25] <jdong> that will properly extract the source
[04:25] <Innatech> ah.
[04:25] <jdong> the debian dir is actually a patch in the .diff.gz file
[04:25] <jdong> dpkg-source -x correctly applies it
[04:25] <Innatech> gothca.
[04:25] <jdong> it's roughly the same as cd'ing into the .orig.tar.gz then running zcat ../*.diff.gz | patch -p1
[04:26] <jdong> but needless to say dpkg-source -x *.dsc is a bit easier :)
[04:28] <Innatech> OK, building now....
[04:28] <jdong> cool
[04:28] <Innatech> it's going to take a minute, this little box isn't the swiftest.
[04:32] <Innatech> still pulling additional packages for the build environment...
[04:34] <Innatech> Success!
[04:35] <Innatech> :)
[04:35]  * Innatech thanks jdong & scottk
[04:36] <Innatech> So, would attaching the generated .deb to a request for an addition to feisty-backports be a reasonable thing to do?
[04:44] <jdong> Innatech: well you can but it will likely not be immediately approved without more work
[04:44] <jdong> Innatech: first we need to figure out what's up with this DEBCOMPAT=6 ordeal in the package
[04:44] <jdong> then we need to evaluate backporting it to Gutsy too
[04:45] <jdong> finally, I'd like verification that this release is backwards compatible
[04:45] <jdong> i.e. Shorewall rules written in the Feisty version all run on the Hardy one
[04:45] <jdong> as long as these simple things can be done, the backport's a go.
[04:53] <Innatech> jdong: I grabbed this one from Gutsy, FWIW. I'll be using it on a fairly busy router, so I'll see how it goes.
[04:53] <jdong>  Innatech ok
[06:05] <joycetick> hello?
[06:14] <joycetick> anyone know how to autologin on gutsy server?
[06:31] <Innatech> Is modprobing xt_connmark.ko not enough to enable connmark target support? xt_connmark.ko appears in my lsmod, but shorewall is telling me that it isn't supported by the kernel.
[06:31] <Innatech> I want to make sure this functionality hasn't been made available as a module before I recompile the kernel.
[06:40] <Innatech> OK, this seems to say that I do need to recompile: http://permalink.gmane.org/gmane.comp.security.shorewall/17661
[06:46] <nealmcb> joycetick: so you want to boot to a console prompt as a particular user (i.e. not some sort of gdm autologin?)
[06:47] <joycetick> nealmcb: yeah
[06:47] <joycetick> then i was going to run startx
[06:48] <nealmcb> joycetick: I haven't seen a request for that before :-)
[06:48] <joycetick> theres always a first time :)
[06:48] <nealmcb> oh, so you do want a gui?  gnome?
[06:49] <joycetick> nah, ive got fluxbox atm
[06:49] <nealmcb> there might be a way in gnome/gdm or the like
[06:49] <joycetick> not enough resources for gnome :P
[06:50] <joycetick> otherwise, if its possible to run utorrent under wine without a gui or logged in
[06:52] <nealmcb> no specifics, but sounds like someone did it and got stuck: http://ubuntuforums.org/showthread.php?t=219863
[06:55] <joycetick> :(
[06:57] <joycetick> do you if i could run utorrent under wine as a service? so i dont need to login for it to start?
[06:59] <nealmcb> damn cntl-w key.....
[06:59] <nealmcb> joycetick: ask again about wine?
[07:00] <joycetick> do you if i could run utorrent under wine as a service? so i dont need to login for it to start
[07:00] <nealmcb> you want to seed something?
[07:01] <joycetick> and download freely distributable files of course :)
[07:01] <joycetick> i can manage the torrents through the web interface on another computer
[07:02]  * nealmcb now has evidence that it is time for bed :-/
[07:03] <nealmcb> I don't know about utorrent, but I wouldn't see why not - just set up a script in /etc/init.d and link it in to run on startup
[07:03] <nealmcb> assuming it can run without a terminal
[07:05] <nealmcb> configure it to run automatically with one of these: sysv-rc-conf, bum, rcconf and file-rc
[07:05] <joycetick> so, create a file eg /etc/init.d/utorrent, and include the command to run utorrent in there
[07:06] <nealmcb> and configure it with one of those tools so it is in /etc/rc2.d IIRC
[07:08] <joycetick> sorry, how would i do that?
[07:09] <joycetick> bash: sysv-rc-conf: command not found :(
[07:10] <nealmcb> joycetick: you'll have to read the man pages for that, or find howtos on the web - but it is pretty straightforward.  I'm headed off now - good luck!
[07:10] <joycetick> nealmcb: ok thanks for your help
[07:10] <nealmcb> :-)
[13:14] <Gargoyle> Greetings
[15:25] <kraut> moin
[15:31] <spiekey> hi
[16:03] <DM|> can i set up a domain when setting up a web server? im not sure how this works, Is there a way to do it where i dont have to PAY anyone
[16:04] <ivoks> you have to buy domain
[16:05] <zul> well you can get one of those freedomains as well like dyndns
[16:05] <ivoks> true...
[16:07] <Nafallo> you could have an internal only domain...
[16:07] <ivoks> you don't even need a domain :)
[16:08] <DM|> I have a dyndns, but i wanted my own @mydomainname
[16:08] <Nafallo> localhost.localdomain is included with the package ;-). a complete FQDN :-)
[16:08] <ivoks> Nafallo: for free :)
[16:08] <Nafallo> DM|: that. you'll have to pay for.
[16:08] <DM|> thatss gay
[16:08] <Nafallo> s/\./\,/
[16:08] <zul> DM|: then you have to pay for it
[16:08] <Nafallo> DM|: no. makes sense.
[16:09] <DM|> Nafallo only to one who knows about it, to the outsiders, it doesnt
[16:09] <Nafallo> DM|: you'll have to trust my word on it then.
[16:09] <DM|> Not questioning your word :)
[16:09] <Nafallo> :-)
[16:10] <ivoks> it would be great if i could just say, ok, from now 'cocacola.com' is mine
[16:10] <DM|> well i got dyndns working so i gues that will work
[16:10] <Nafallo> woha! 15 minutes until I can install my smurf! :-D
[16:10] <DM|> Can i set up ubuntu-server to be an FTP ?
[16:10] <zul> yes
[16:10] <Nafallo> DM|: dyndns has a nice service called mydyndns as well.
[16:10] <DM|> Nafallo paid ?
[16:10] <Nafallo> DM|: yes
[16:10] <DM|> see
[16:11] <DM|> im poor
[16:11] <DM|> so that doesnt work for me
[16:11] <Nafallo> DM|: they provide supreme services :-)
[16:11] <ivoks> hm... domains are cheap
[16:11] <Nafallo> ivoks: I buy their service to use them as slaves :-)
[16:12] <Nafallo> ivoks: so for me, domains scale depending on what service level I want ;-)
[16:12] <ivoks> i don't use dyndns
[16:12] <ivoks> i have one server with it's domain, and then i use bind to scale down domain1.mydomain.com, computer1.domain1.mydomain.com :)
[16:13] <Nafallo> not sure if this is the channel, but does the RaQ 4's need special memory modules?
[16:13] <Nafallo> ivoks: well, ns1.magicalforest.se has ns[2-5].mydyndns.org as slaves :-P
[16:14] <Nafallo> for the primary zone anyway.
[16:16] <DM|> anyone have a good guide for setting up FTP?
[16:16] <Nafallo> help.ubuntu.com probably has somewhere.
[16:21] <DM|> Yeah just to set up
[16:21] <DM|> well, install
[16:21] <DM|> but not how to access
[16:26] <Nafallo> ehhrm
[16:26] <Nafallo> how do you usually access ftp?
 ftp client  </hint>
[16:31] <DM|> well
[16:31] <DM|> from connect to server, or from map network drive if accessing from windows
[16:31] <ivoks> DM|: you do know you are asking us how to use computer?
[16:31] <DM|> ivoks .....
[16:32] <zylmak> hello
[16:32] <DM|> ivoks i seriously doubt ":how to i access the FTP server after i set it up" is a "how do I use a computer, don't be a jerk
[16:33] <zylmak> i have a problem when i use ls all file are in white except one who is in red, what does that mean?
[16:34] <zylmak> and how do i delete it
[16:35] <ivoks> red is broken link, probably
[16:37] <zylmak> is there a way to fix it?
[16:37] <ivoks> check with ls -dl filename
[16:37] <ivoks> it will show a destination file
[16:38] <ivoks> if there is no such file, create it, or erase that broken link
[16:38] <ivoks> that's called dangling symlink
[16:38] <ivoks> and is a big security issue
[16:38] <Nafallo> DM|:
[16:38] <Nafallo> DM|: http://www.dummies.com/WileyCDA/DummiesArticle/id-188,subcat-BUILDING.html
[16:38] <DM|> thanks
[16:38] <zylmak> ok how do i delete it and do an other one
[16:38] <ivoks> rm filename
[16:39] <zylmak> no i mean the link
[16:39] <zylmak> rm dosent work
[16:40] <ivoks> zylmak: do ls -dl filename
[16:40] <zylmak> 001-alboscn -> /etc/apache2/sites-available/default
[16:40] <ivoks> rm 001-alboscn
[16:41] <zylmak> the file default was renamed to 001-alboscn
[16:41] <ivoks> you need sudo if you aren't root
[16:41] <Nafallo> zylmak: no it was not.
[16:41] <zylmak> thats what i did
[16:41] <Nafallo> zylmak: the file /etc/apache2/sites-enabled/001-alboscn was linked to /etc/apache2/sites-available/default
[16:43] <Nafallo> or do you mean 001-default to 001-alboscn
[16:43] <Nafallo> ?
[16:44] <zylmak> ok that what i did : 1 rn 000-default 001-alboscn then rn default alboscn
[16:44] <ScottK> Do we now have a policy for the server team that suggests assigning bugs to the team is OK?  I got a couple yesterday and another just now.
[16:44] <DM|> im using gftp right now, is there a better ftp client for GTK?
[16:44] <Nafallo> zylmak: yea, so you're link points to the wrong file because fo that...
[16:45] <zylmak> but obviously i didnt understand the link, so the first thing witch one have to be the real one?
[16:45] <Nafallo> DM|: depends on personal taste.
[16:45] <DM|> i like simplicity, any suggestions?
[16:46] <ivoks> DM|: this is server channel - we don't use GUI
[16:46] <Nafallo> ivoks: speak for yourself ;-)
[16:46] <ivoks> :)
[16:46] <DM|> ivoks stop commenting please, you arent helping.
[16:47] <ivoks> Nafallo: we agreed on parsing questions around here
[16:47] <Nafallo> ivoks: GUI is good for having lots of terminals topened ;-)
[16:47] <ivoks> so we don't do GUI related questions
[16:47] <Nafallo> s/to/o/
[16:47] <ScottK> Really they belong in #ubuntu.
[16:47] <Nafallo> lftp fqdn
[16:47] <Nafallo> user user
[16:47] <Nafallo> ls
[16:47] <Nafallo> there ya go ;-)
[16:48] <ivoks> lftp is fine :) ncftp too :)
[16:49] <ivoks> conclusion was that we want to add 'support' to this channel, but only for server related stuff
[16:49] <ivoks> topic says all
[16:49] <Nafallo> yea
[16:49] <DM|> If you dont like what the question is, dont respond to it
[16:51] <ivoks> DM|: your question is exaplained in topic of the channel
[16:51] <ivoks> 'For general (not server specific) support visit #ubuntu'
[16:52] <DM|> ivoks i was having a CONVERSATION with Nafallo as a suggestion
[16:52] <ivoks> guys, we have to draw a line, otherwise we will have too much noise :/
[16:52] <Nafallo> DM|: no you wasn't. you asked me a question and I googled for you.
[16:52] <DM|> ivoks and you waste alot of time to be a DB about it.
[16:52] <DM|> Nafallo and i quote "any suggestions?"
[16:53] <Nafallo> DM|: anyway. stop it now. #ubuntu is the place.
[16:53] <DM|> Thanks for the help anyway
[16:55] <ivoks> nealmcb: hi there
[16:57] <nealmcb> ivoks: howdy!  I'm hanging out with some folks from boulder at the django sprint
[16:57] <nealmcb> http://code.djangoproject.com/wiki/Sprint1Dec2007
[16:57] <soren> nealmcb: Oh, cool!
[16:57] <ivoks> nice
[16:57] <ivoks> soren: you are here too :)
[16:57] <soren> ivoks: Sssh... don't tell anyone.
[16:58] <ivoks> Sore...who?
[16:58] <nealmcb> jim is working on the final push to get django working on jython
[16:59] <ivoks> soren: so, what now? i don't mind doing all mail related stuff by default
[16:59] <ivoks> do we have agreement on that, or should we discuss it at the meeting?
[17:00] <soren> ivoks: Well, as far as I could see, all the changes you wanted to make to dovecot could be applied on all systems with no downsides.
[17:00] <soren> ivoks: (apart from the maildir thing)
[17:00] <ivoks> and postfix support
[17:00] <soren> ivoks: ?
[17:00] <ivoks> some of changes are postfix-only changes
[17:00] <ivoks> authorization part is done inside postfix jail
[17:01] <ivoks> check out that patch, it requires having postfix installed
[17:01] <soren> Right. I was just talking about dovecot.
[17:01] <ivoks> soren: http://launchpadlibrarian.net/10629598/tasksel.diff
[17:01] <soren> Are you changing anything in dovecot's configuration that requires postfix to be around?
[17:01] <ivoks> yes
[17:01] <ivoks> we have to
[17:01] <soren> Aw, crap.
[17:01] <ivoks> cause postfix is jailed
[17:02] <soren> Right.
[17:03] <soren> Erm..
[17:03] <soren> Well, /var/run/dovecot/auth-client is really the proper place for the socket.
[17:03] <ivoks> but postfix doesn't see it then
[17:03] <soren> ...so some way to get postfix to be able to access it would be optimal, but I don't have any good suggestions for that right now.
[17:04] <ivoks> there is exaclty the same problem with all other sasl implementations
[17:04] <ivoks> that's why we are doing this trough default mail server install
[17:05] <soren> True.
[17:05] <ivoks> to provide super mail server without any need to do editing configuration, linking and stuff...
[17:05] <ivoks> and, for those that know what they are oding, they could always do it by hand
[17:06] <soren> got it.
[17:06] <ivoks> we could divide this patch in two pieces
[17:06] <ivoks> one would be general dovecot improvments
[17:06] <ivoks> and everything else would go in tasksel
[17:07]  * soren considers how bind mounts and unix sockets work together
[17:07] <ivoks> that corss my mind too
[17:07] <Nafallo> hmmm
[17:08] <Nafallo> 5pm...maybe I should get out of bed...
[17:08] <soren> That might actually work.
[17:08] <soren> google speaks of a few people who did it to access the X unix sockets.
[17:09] <soren> It's worth a try.
[17:09] <ivoks> we could try yes...
[17:09] <soren> Could you do that?
[17:09] <ivoks> yes
[17:09] <soren> That would be excellent.
[17:09] <soren> dovecot
[17:09] <soren> 's init script could check if /var/run/postfix exists and if so, bindmount /var/run/dovecot/auth-client into it somewhere.
[17:10] <ivoks> other way around
[17:10] <ivoks> postfix should check
[17:10] <lamont> we can force the ordering of the startup, you know
[17:10] <ivoks> of course we can
[17:10] <ivoks> dovecot should start first
[17:10] <Nafallo> what are you doing? :-)
[17:10] <soren> ivoks: Good point.
[17:10] <lamont> Nafallo: conspiring, of course.
[17:11]  * lamont is about to run out the door for the day
[17:11] <lamont> about 2 hours late, but ...
[17:11] <Nafallo> lamont: mails filed into postgresql? ;-)
[17:11] <soren> lamont: Have you tried the unix socket bind mount thing?
[17:11] <ivoks> umm...
[17:11] <lamont> soren: I believe that it works...
[17:11] <soren> lamont: Wicked.
[17:11] <ivoks> maybe dovecot could listen on localhost?
[17:11] <soren> we win.
[17:11] <lamont> dunno that I've ever tried. it...
[17:11] <ivoks> instead of socket :)
[17:12] <lamont> the easy one to check with is the syslog socket, and then syslog restart and see if postfix logging still works.. :)
[17:12] <lamont> or something like that
[17:13] <ivoks> i could also, really, look at possibility to get dovecot listen on localhost:someport
[17:13] <ivoks> i would really like to escape additional mounts in my 'mount' output :)
[17:13] <soren> ivoks: That would be good, too :)
[17:16] <soren> I've got to run..
[17:16]  * soren vanishes
[17:17]  * ScottK votes no on SQL mail storage and slaps Nafallo with a cold, dead, wet fish.
[17:17] <Nafallo> lol
[17:37] <ivoks> looks like listening on ip address doesn't work :/
[17:37] <ivoks> or... :)
[17:39] <ScottK> For stuff I've modified to be postfix chroot friendly, I've used TCP sockets.  Would that be an option with dovecot?
[17:40] <ivoks> that's what i'm looking at
[17:41] <ScottK> I did that for clamav-milter and dkim-milter.
[17:55] <ivoks> no way to get dovecot listen on tcp port
[17:56] <ivoks> ok, then binding during postfix startup is an option...
[17:58] <rrittenhouse> Im trying to set up a DNS server with the gutsy server cd and it doesnt seem to be working! I am however getting denied messages in the syslog
[17:59] <ivoks> you have to configure it
[17:59] <rrittenhouse> im a newbie at dns but i noticed when i install bind9 in a desktop install it just works
[17:59] <rrittenhouse> i figured it would be the same way
[18:00] <rrittenhouse> I dont need to specify any domains I just need it to look them all up with other dns servers
[18:00] <rrittenhouse> I cannot get to a group of clients that were on an old web server box I had
[18:00] <rrittenhouse> so I just need it to very basically look up IP's
[18:01] <ivoks> you need bind only if other machines are going to use that server for lookups
[18:02] <rrittenhouse> ah got it
[18:03] <ivoks> if your server is the only one that needs to search for IPs
[18:03] <rrittenhouse> the IP's were being denied - its basically an open dns server now
[18:03] <ivoks> right
[18:03] <rrittenhouse> but this is very temporary
[18:03] <rrittenhouse> so, awesome :)
[18:03] <ivoks> i don't see why you would need DNS service
[18:04] <ivoks> just add '192.168.0.1 my_server_1' to /etc/hosts
[18:04] <ivoks> replace 192.168.0.1 with real IP
[18:04] <rrittenhouse> no no see
[18:05] <rrittenhouse> i took over this IT department and for some reason the old admin had dns on the webserver
[18:05] <ivoks> ok
[18:05] <rrittenhouse> we switched the webserver to a new ISP last night and dns was on that box
[18:05] <ivoks> so you don't have DNS anymore?
[18:05] <rrittenhouse> we set up  apache to capture the web requests and to throw up a maintenance page
[18:06] <rrittenhouse> and the old admin had a group of people set up externally using that DNS
[18:06] <rrittenhouse> at another one of our businesses that we support
[18:06] <rrittenhouse> They just need DNS monday until we can get up there to change it
[18:06] <ivoks> then you need bind
[18:07] <ivoks> and you have to configure it
[18:07] <rrittenhouse> yeah
[18:07] <rrittenhouse> its done now
[18:07] <rrittenhouse> at least it appears to work :P
[18:07] <rrittenhouse> just had to allow anybody to access it (which is fine)
[18:07] <rrittenhouse> actually its cgillogly -- hes the one at work today.. im just trying to help him find answers
[18:08] <rrittenhouse> but it appears to work and im using it here from home
[18:09] <ivoks> so, you are open dns for all domains now? :)
[18:09] <rrittenhouse> is that a problem?
[18:11] <ivoks> well, anybody could ask your dns about any domain in the world
[18:11] <rrittenhouse> yeah
[18:11] <ivoks> if you are ok with that...
[18:11] <rrittenhouse> until monday
[18:11] <rrittenhouse> i think the old one was like that anyhow :)
[18:11] <ivoks> i keep my dns open only for domains it hosts
[18:12] <rrittenhouse> ah i see
[18:12] <ivoks> there are two 'directions' in DNS
[18:12] <ivoks> one is - world asking about your domain
[18:12] <ivoks> and the other is - your domain is asking about world domains
[18:12] <rrittenhouse> yeah...
[18:12] <ivoks> you need to enable whole world to resolv your hostnames
[18:12] <ivoks> but not anything else
[18:13] <ivoks> and then you have to enable your computers to use your DNS to resolve all domains in the world
[18:13] <rrittenhouse> hmm
[18:13] <ivoks> look at your clients as your domain
[18:13] <rrittenhouse> ok
[18:14] <ivoks> allow-query should be any
[18:14] <ivoks> and allow-recursion should be only clients you trust
[18:14] <ScottK> That one can be important.
[18:15] <rrittenhouse> I need to see if i even have the IP's for that business
[18:15] <rrittenhouse> hm
[18:15] <rrittenhouse> It actually might just be coming from one public IP
[18:15] <ivoks> if they are on a dynamic IP, they you are doomed :)
[18:16] <rrittenhouse> theres one public and the internals are all dhcp
[18:16] <rrittenhouse> usual natted setup i believe
[18:17] <ivoks> http://www.ip-plus.net/tools/dns_check_set.en.html
[18:17] <ivoks> use this tool to check your DNS
[18:17] <ivoks> your dns server should return results only for your domain
[18:18] <ivoks> but, if you have client on a dynamic IP, you will have to provide access to all on allow-recursion
[18:18] <ivoks> that's a bad thing, but hopefully till monday you won't have problems :D
[18:18] <rrittenhouse> lol
[18:19] <rrittenhouse> what could it enable someone to do?
[18:19] <ivoks> hopefully nothing
[18:19] <rrittenhouse> im just trying to see why its so bad
[18:19] <rrittenhouse> like i said im a noob at dns :P
[18:19] <ivoks> but you are providing usually private service to everybody
[18:19] <rrittenhouse> like opendns
[18:19] <rrittenhouse> :P
[18:20] <ivoks> there are some open dns
[18:20] <ivoks> right
[18:20] <rrittenhouse> thats fine though really
[18:20] <rrittenhouse> if someone really needs dns that bad they can use it lol
[18:20] <rrittenhouse> its only 2 t1's
[18:50] <atouk> xp box can access server with either server name or ip, but ubuntu box can only access it via ip.   any thoughts?
[19:32] <Burgundavia> atouk: is it part of an AD tree?
[19:35] <atouk> ??
[19:37] <atouk> ubuntu server setup with fixed ip.    i can put either ip or servername in address bar in xp and it finds it, but in ubuntu firefox,only ip will find it
[19:39] <Haesufin> G'day I have something weird going on, i am logged onto my server(ssh) and can ping my server but it cant ping anything or connect to the net
[19:40] <ScottK> atouk: If it's in firefox, it's not a server question.  Please ask in #ubuntu.
[19:41] <Haesufin> it's a new install (tonight) and have only installed ssh and samba
[19:42] <atouk> so it's a ff behaviour then
[19:42] <atouk> ok, that makes life easier
[19:51] <ScottK> atouk: I don't know what it is, but if you're running Firefox on it, it's not a server and this isn't the place to ask.
[19:53] <sommer> atouk: does the ubuntu server have an A record in DNS?
[19:53] <atouk> not running ON it, accesing it WITH on 7.10 box      accesing it with XP works by name or ip.     I was just making sure it wasn't some odd setting on the server box i missed that was causing it
[19:54] <atouk> not really an issue, just an annoyance
[19:55] <sommer> atouk: try adding "search your.domain" to /etc/resolv.conf
[19:55] <atouk> k
[19:56] <sommer> and just so I'm clear you're trying to access server.domain.name from another ubuntu client and it doesn't work by name?  but it works from XP?
[19:57] <atouk> server box is names 'server1'.      if i type server1 in url line in XP, it finds it.   if i type same thing from 7.10 (ff) url line, it doesn't
[19:57] <atouk> (named)
[19:58] <sommer> atouk: add "127.0.0.1       server1 your.domain" to /etc/hosts... or use localhost in the address bar
[19:58] <sommer> atouk: samba server?
[19:59] <atouk> apache
[19:59] <atouk> server is on it's own box
[19:59] <sommer> mmmMM... seems like a /etc/hosts issue to me...
[20:00] <atouk> 7.10 and xp are seperate boxes
[20:00] <sommer> atouk: okay, but the 7.10 you are talking about is the server? and you are typing server1 into ff on the server?
[20:01] <sommer> ff running on the server correct?
[20:01] <atouk> server1 ->   ubuntu-server install
[20:01] <atouk> 1.20  -->  seperate box with full 7.10 install
[20:02] <atouk> oops    7.10
[20:02] <sommer> so you're accessing server1 from the 1.20 box and it can't connect using the name server1?
[20:02] <Haesufin> Got it fixed with sudo-v, cheers for your help
[20:02] <atouk> gah   two conversations at once
[20:03] <sommer> atouk: basically for a linux machine to resolve by name you need an entry in /etc/hosts or an dns entry and the search domain.name in /etc/resolv.conf
[20:03] <atouk> if i tper server name into xp browser url line it finds it.    if i type name into ff url line on a 7.10 install, it doesn't
[20:04] <sommer> atouk: did you try adding the entry into /etc/resolv.conf?
[20:05] <atouk> not yet.      as long as i know it's not a fubar on server, i'm ok with it
[20:06] <sommer> atouk: more info on /etc/resolv.conf: http://users.ictp.it/~radionet/ghana1998/INSTALL/NODE214.HTM
[20:07] <sommer> atouk: you can use the "search" option or the "domain" option... to get the same results
[20:07] <sommer> atouk: you might also read up on /etc/hosts: http://www.faqs.org/docs/securing/chap9sec95.html
[20:08] <atouk> server is going into lan at work to feed sp boxes, so if it's not a server side problem, i'm just leaving it alone
[20:08] <rodneykk> whats the difference between the kernel.domainname in sysctl.conf and the dnsdomainname command
[20:08] <atouk> (xp boxes)
[20:11] <sommer> atouk: have you tried the fully qualified domain name in firefox?
[20:13] <atouk> yeah, still goes outside looking for page
[20:13] <atouk> but xp handles it ok, so not an issue
[20:14] <atouk> i'll not bother it anymore.        time for some wine
[20:15] <atouk> i'll just end up fixing it until it's REALLY broke
[20:16] <sommer> atouk: okay, well if you decide to look at it again, look into /etc/nsswitch.conf and /etc/hosts... my money says that will solve the issue.
[20:17] <atouk> since it's doing what it's needed to, i'll just drink moderately and pretend i never noticed it
[20:19] <sommer> party!
[22:02] <ganton516> Should a BIOS RAID array be set up when using dmraid, or should it be disabled ?
[22:14] <ganton516> Should a BIOS RAID array be set up when using dmraid, or should it be disabled ?
[22:31] <nealmcb> that's the second room ganton516 has entered and left - at least this time he asked the actual question - so the long topic might actually be helping
[23:07] <Omnius> anyone know much about bridge-utils??
[23:11] <Omnius> I can set it up alright but cannot assign a gateway address to the psudo interface