[00:00] plugged the external cable from server A into the external network card in server B [00:00] and it works [00:00] this means there is something wrong with the gateway [00:00] right? [00:00] i wouldn't say "wrong" [00:00] something in the gateway is preventing you from configuring a second machine using the IP you did [00:01] yes [00:01] i'm gonna kill them [00:01] i told them its something wrong [00:01] because i configured and reconfigured and reconfigured [00:01] and all settings where ok and it didnt work [00:01] it's not "wrong" if it's by design ;) [00:01] :))) [00:01] the tv pc here wasn't working as the user was expecting, because i'd told iptables to drop all traffic to/from it [00:02] it wasn't wrong, it was intentional. running bittorrent on my tvpc. ass. [00:04] ii hope they made a mistake, or forgot to configure something, if they did it on purpose and i lost almost 3 hours its not good [00:04] are you sure the IP you were trying to use on server B wasn't in use by another machine already? [00:04] they said it isnt [00:05] i dont suppose you're newer to linux than they are? [00:05] or that you're a renegade linux user in a network full of windows supremists? [00:06] i use linux for a long time [00:06] i dont know to much about networks [00:06] i use linux for web development [00:06] i think i didnt use windows for like 7 years now [00:06] i dont use ubuntu on my home desktop box though [00:07] archlinux [00:07] cli network configuration is the same on all distros, same tools at hand [00:07] they should know more then me about networking for sure [00:07] yeah i know [00:07] i configured it ok from the start [00:07] is it possible that they might wanna.. "fuck with your shit" and play a prank on you? [00:07] it didnt work because of some problem on their part [00:07] no idea [00:07] :)) [00:07] possible [00:08] :)) [00:08] ok now the weird thing [00:08] i put the cable back in the server A and configured it to use .29 as the ip and it works [00:09] .29 being....? [00:09] A = xxx.xxx.xx.28 [00:09] B = xxx.xxx.xx.29 [00:10] ok [00:10] did you spoof the mac address on B? [00:10] to match that of A? [00:11] no [00:11] i just plugged the A external cable into B, changed the ip to .28 and it also works on B [00:11] i'm already getting to confusing [00:11] even for myself [00:12] ok, so As cable works on both machines [00:12] but Bs cable doesnt? [00:12] yes [00:12] B cable doesnt [00:12] and you're sure the switchport light for that port is blinking when the cable's plugged in? [00:13] try swapping switchports for A and B's cables, try plugging B's cable into a different switchport, fool around, the problem isn't at at the IP level then, it's either with your cable or your switch [00:14] shoulda remembered we swapped cables, sorry [00:26] entirely possible that the switch is configured for specific vlans on specific ports [00:26] (noting if it's a switch which supports vlans) [00:28] problem solved [00:28] the network cable from server B was the problem [00:28] :))) [00:29] so you get a link light now? [00:30] (that you weren't getting before) [00:40] everything works now [00:40] thank you very much for helping me [00:46] good afternoon [00:48] last night i installed ubuntu-server and had no problems getting onto the interent, i did run into a few proplems latter on and decided to reinstall now it does not seem to want to connect to the internet [01:35] hello ...an Http cache cleaner app starts running every 10 mins [01:35] but apache is turned off already [01:36] why is this happening? [01:36] what is the app? [01:37] Http cache cleaner [01:37] application [01:37] you must have installed it. apache doesnt have a cache cleaner 'by default' [01:38] hmm...maybe i don't need this one...are you saying to unistall it..? [01:39] yes. or work out what it is, and disable it [01:39] is it possible to use this app and other programs [01:39] ? [01:39] oops sorry [01:40] *without and [01:40] the Http is only for server right? [01:41] not sure what you mean [01:41] nevermind I'll google about it ...thanks [01:56] can anyone help me with Squid proxy? [01:58] does it run in SSL mode by defualt... is that why yahoo and irc only work when added to the SSL_ports acl? [02:01] also which entry allows the Safe_ports and SSL_ports acls? I dont see one at all, I thought it would need a "http_access allow Safe_ports [02:06] Or does there even need to be one or does it just know to allow any ACLs with the Safe_ports name? [02:11] by default irc/"yahoo" wont go through squid anyway [02:11] so it sounds like youve done something screwy with your firewalling [02:11] and re ssl by default, no it doesnt [02:11] my firewall allows the IRC and Yahoo ports, I also added them to the Safe_ports in squid [02:12] it wasent till I placed them in the SSL_ports that they worked [02:14] Im guessing the "http_access deny !Safe_ports", means any port not in the Safe_ports acl is allowed right? [02:14] i mean blocked [02:18] I see now its webmin it what is set to require ssl, so I did need to add it to ssl acl... [02:27] I don't see way 6667 has to be in the SSL acl... [02:29] Excuse my ignorance if this should be obvious, but I want to clarify: I know one of the main differences between Ubuntu and Ubuntu Server is the kernel, in particular the compile time options/flags. I read a comparison once that went through these. One difference I think had to do with the timer, one kernel set at 250 hz and the other at 1000 hz (something like this I think; these being ticks?). With the advent of the 'tickless' [03:02] can anyone point me in the right direction for having my server handle email from multiple domains please? I don't know anything at all about it, I've been looking at exim but I'm not sure if it's the right solution [05:30] i installed ubuntu server eduition and i was able to get the dhcp client up and working [05:30] however i have been un successful in getting my masquerading to work [05:31] i have tried several different tutorials/guids but... still unsuccessful [06:32] anyone know how i can enable more tty# screens? [06:33] what version? [06:33] ubuntu hardy [06:33] no i dont [06:33] any, it should be the same [06:33] from debian up to ubuntu hardy [06:33] /etc/inittab if your lucky [06:34] should be? lol [06:34] i am knew to cli [06:34] i tried screen, but it just froze one of my tty windows [06:34] *new [06:35] you scroll probably locked it or something [06:35] yeah, i tried to kill it with no luck [06:35] how? [06:36] screen -wipe name-of-screen [06:38] i guess there is no easy way to add tty screens besides ssh? [06:39] your on a remote host? [06:39] no [06:39] local [06:39] * Kamping_Kaiser wonders why ssh would be relevent [06:39] but if i had to use a remote host to get more tty screens [06:39] i would [06:39] learn some basics of screen, you only need 3/4 commands to get by. [06:40] do you know what they are (+) descriptions? [06:40] that would help me a ton [06:40] if there are only 3 - 4 [06:41] ^a (control a) == next character is a screen command. [06:41] d == detach [06:41] x == lock [06:42] esc (escape key) == copy mode (which can be used for scrolling up/down), or (iirc) shift+[ == scroll [06:42] thanks Kamping_Kaiser, i'll try that now (does x toggle?) [06:43] linux2464, when you use x it asks for a password before unlocking [06:43] oh, thats cool [06:43] very useful [06:43] the standard ^s and ^w for lock and unlock of scrolling apply as per normal [06:43] i'll have to play around with those commands [06:44] terminal is a very nice environment [06:44] nicely portable too === bbuuzz is now known as buzzsaw [08:59] Hi is there a way to list services on runlevels? update-rc.d add/remove only so far... [09:25] Hi, could anyone here help me with samba on Gutsy? [09:28] Two machines are connected via a netgear switch to an adsl-modem set up as router, file sharing via network suddenly stops working at some point. [09:31] And I can`t even access my shared folder on the local machine. [12:30] hey [12:31] does anyone know how i can transfer a file with a tftp client? [12:31] i seem to google for the wrong search expressions. :-( [12:35] <\sh> spiekey, tftp -> standard commands? :) [12:35] oh. [12:46] <\sh> spiekey, the magic part is to setup a tftpd so it can save your files [12:55] i got that working without any problems ;) [13:07] argh...any idea what i am doing wrong here? http://pastebin.ca/984566 [13:13] spiekey: do you have the directory /var/lib/ftp? [13:16] spiekey: By default, tftpd will only allow upload of files that already exist [13:18] mok0: yes the dir exists [13:18] spiekey: the file must also exist [13:20] yey! Thanks! [13:20] what a weird ftp server ;) [13:23] it's not called tiny for just any reason [13:23] s/tiny/trivial/ [13:27] <_ruben> the "file must exist" feature has bitten me in the arse as well in the past :) [14:33] * delcoyote hi === mdz_ is now known as mdz [15:45] MatthewMetzger: ping [15:45] hello kirkland [15:45] MatthewMetzger: hey there, sorry for the delay in getting back with you [15:45] MatthewMetzger: my inbox is stacked up [15:45] no problem. It was the weekend. :) [15:46] I took a little break. [15:46] MatthewMetzger: that it was ;-) [15:46] MatthewMetzger: so a couple of questions for you.... [15:46] MatthewMetzger: first, here's my memory information on my squid proxy at home: [15:46] total used free shared buffers cached [15:46] Mem: 3834 3794 39 0 112 3228 [15:46] -/+ buffers/cache: 454 3380 [15:46] Swap: 5999 42 5957 [15:46] so it caches a lot, too. [15:46] fairly high cache usage too [15:47] MatthewMetzger: yep, I agree [15:47] <`6og> !tell kirkland about pastebin [15:47] `6og: I understand, it was only 4 lines [15:47] <`6og> perhaps you need the !enter one then (that was almost 10 lines from you in a row) [15:47] MatthewMetzger: are you using swap? [15:48] It's all free right now: Swap: 2870 0 2870 [15:48] MatthewMetzger: hmm, that looks very similar to mine too [15:48] I haven't had problems over the weekend, but almost no one was using the machine. [15:49] I've been running the update as often as possible via aptitude. [15:50] okay, i'm going to talk to some kernel guys to find out if high cached usage is a bad thing [15:50] MatthewMetzger: i'm not convinced it is, yet [15:50] I'll be performing an upgrade of Koha library system software. I think a mysql search in Koha is what actually caused the machine to crash because it didn't have the memory it needed. [15:50] MatthewMetzger: except that you're saying that machine crashed === `6og is now known as Kamping_Kaiser [15:51] kirkland: I really appreciate your help. [15:52] MatthewMetzger: do you have that bug number handy? [15:52] MatthewMetzger: no problem [15:52] kirkland: we live in the same time zone. I'm in Iowa right now, I will be relocating to Wisconsin [15:52] https://bugs.launchpad.net/bugs/215998 [15:52] Launchpad bug 215998 in squid "possible memory leak in Hardy's squid" [Undecided,Incomplete] [15:53] MatthewMetzger: perfect, thanks, saved me a trip down the inbox [15:58] MatthewMetzger: http://gentoo-wiki.com/FAQ_Linux_Memory_Management#Overview_of_memory_management [15:58] checking it out... [16:01] MatthewMetzger: when your machine "crashes", can you describe that a bit more? [16:01] MatthewMetzger: is it a kernel oops? [16:02] MatthewMetzger: does it go unresponsive? [16:02] MatthewMetzger: does it just start killing processes? [16:03] well, it's only happened two times. It gets real sluggish, eventually it stops responding. Once, when I was able to run top, it showed a load of "22". It was so sluggish that I had to reboot. I saw squid "out of memory errors" on the screen, which initially made me think the problem was squid. [16:04] MatthewMetzger: okay, that might actually sound like *extreme* disk swapping [16:04] MatthewMetzger: the kernel is trying to dump all of memory to swap disk space [16:05] If I remember right, it was swapping at that point. I should have taken a picture of the screen when it happened. [16:05] MatthewMetzger: were you near the machine at the time? If so, you might have heard a *whole lot* of disk noise [16:05] It's a Mac mini. The fan was running hot. Can't hear much else (nice and quiet even under heavy load). [16:05] I was in the server room. [16:06] guys [16:06] one quick question: I'm seting up WIndows server 2003 in addition to my ubuntu server at home, should they both have the same domain names but different hostname? (2) Will they not confilct? Ubuntu is going to be used for my web development database server and other backups and windows is going to be used for my main back ups and antivirus scan for each file I back up on it. [16:06] a mac mini server.... kirkland snickers :-) [16:06] wanna ask [16:06] (in good nature, of course, MatthewMetzger ) [16:06] the std ubuntu server kernel is it hardened already ? [16:07] kirkland: isn't ubuntu wonderful :) The Mac mini was a perfect solution for the amount of traffic that our server actually handles. Takes less power to run than a light bulb. [16:07] MatthewMetzger: yes indeed, mac mini's are great, i have a powerpc one [16:08] :) [16:08] kirkland, how much does a mac mini retail for now a days? [16:08] So it looks like this might be a normal memory issue. [16:08] thesyko: around $600 [16:08] they raised the price for the intel due chip. [16:08] with 1gig of memory? [16:08] it used to be around $500 [16:08] thesyko: I GB, yes [16:09] and ubuntu runs smoothly on it? [16:09] the server edition? [16:09] you have to use the i386 or x64 edition? [16:09] thesyko: works great, except for my current problem which probably isn't related to hardware. [16:09] thesyko: craigs list, i got mine for $200 [16:09] server edition. [16:10] i386 [16:10] The one thing is that you have to use the Mac disk utility to format the drive before trying to install ubuntu. [16:10] that took me a few hours to figure out. [16:10] cool [16:10] i may also try and 1 one for myself [16:11] and get rid of my bulky intel dual core server [16:11] ghostnob: that sounds right [16:11] i have like 8 of them [16:11] its bloody hell noise and hot [16:11] they also make great mythfrontends [16:11] Mac minis are nice and quite. [16:12] MatthewMetzger: okay, i'm creating a virtual machine to mirror your environment right now [16:12] ok btw any of u guys know if the ubuntu server kernel are hardened ? [16:12] i mean i wanna run them for a router/firewall for my servers [16:13] ok... which one should I install first? I'm thinking of installing ubuntu first, but I want windows 2003 to be accessible by the public so I can link my ubuntu to it. [16:13] kirkland: thanks so much. mysql. apache, with webdav. squid. perl with Koha. I'm thinking that koha was the straw that broke the camel's back (caused it to crash). Like I said, I'll hopefully be upgrading from alpha to beta in a day or two. [16:14] MatthewMetzger: to summarize where we are, I think the Linux kernel is behaving properly, caching all memory, clearing the cache as necessary, allocating cached memory to Squid, swapping to disk when Mysql pounds it [16:14] MatthewMetzger: it's the swapping to disk that I *think* is what you perceived (or perhaps even caused) a full out system crash [16:14] kirkland: that sounds correct to me. [16:15] MatthewMetzger: that problem could be exacerbated or accelerated by a memory leak in Squid [16:15] MatthewMetzger: ie, imagine squid demanding more memory at the same time mysql is demanding more memory all the while you're swapping in and out of disk [16:15] kirkland: Yes, it seems to happen more quickly when squid is running and one time squid stopped working and I ran /etc/init.d/squid restart and it came back up. [16:16] MatthewMetzger: hang on a second... what's alpha? [16:16] I believe it stopped working because it ran out of memory. At that time, mysql would not have been seeing much use. [16:16] MatthewMetzger: is this Hardy alpha? [16:16] MatthewMetzger: I thought you were aptitude up-to-date? [16:17] kirkland: not that I know of. I am aptitude up to date. My Koha install (library server software) is alpha. Will be upgrading to beta2 soon. [16:17] ghostnob: I don't know which is better to install first.... Usually, if I buy a new machine, and it has Windows preinstalled, I just leave that there, and then install Ubuntu [16:17] thesyko: defined "hardened"? [16:18] thesyko: Hardy supports both Apparmor and SELinux, you can use either one [16:18] MatthewMetzger: gotcha, sorry. [16:18] kirkland: I have like 4 machines here and they are both on different machines [16:19] hardened [16:20] = something suitable to be run on a firewall/ router [16:21] thesyko: I wouldn't count on it. Build your own kernel if you're concerned about it. [16:21] and use apparmor for userland [16:21] thesyko: I love ubuntu, but I'm using pfsense as a firewall now and I like it a lot. [16:21] pfsense++ [16:22] thesyko: jdstrand is knowledgable on security and firewalls, he might be able to help answer your question [16:22] pr0le: I'm looking to get the time to compare pfsense with ubuntu + ebox. It looks like ebox has some router functions. [16:23] haven't heard of ebox [16:23] honestly ebox sucks [16:23] 1 reasons why it sucks [16:23] thesyko: It's touted by ubuntu, I haven't used it yet. [16:23] 1 ) never run a fileserver on the samebox as you firewall / router [16:23] its a big NO NO [16:23] looks like it's got lots of features [16:24] 2) it doesnt even have a PPPOE dialer for heaven sake [16:24] whats the purpose of a router if you cant even connect via PPPOE, not every 1 has static ip or DSL [16:24] thesyko: 1) Install 1 ebox just with a firewall as a router and another one with samba, it's easy to have them separately [16:25] yeah [16:25] i used to run a debian firewall before [16:25] with iptables and all [16:25] it was a sarge box on a old crap piece of hardware [16:26] pentium 166 with 256 ram [16:26] and for 2) you can access trough ssh and install PPPOE while it's done that feature ;) or you can do it for the project :D [16:26] pfSense is designed just for firewall/routing and uses OpenBSDs pf [16:26] for number 2) i tried that [16:26] the problem is ebox keeps overiding my setting with their default setting [16:26] thesyko: hardy actually has a lot of kernel and compiler hardening. ASLR, stack protection, heap protection, non-exec memory, kernel memory address protection and NULL address space protection [16:27] but best to get hardy in like 10days time :) [16:27] both my desktop and notebook are running hardy beta [16:27] thesyko: more on all of this will be on http://www.ubuntu.com/products/whatisubuntu/serveredition/features (when it is published, which should be very soon) [16:27] thesyko: Yes, fileserver and router are bad on the same machine, but it doesn't mean that you have to run it that way. You could just use the routing ebox modules on the router and the filesharing modules on another ebox machine. [16:28] jdstrand: Sorry, the page you are looking for was not found [16:28] i'm even finishing my apt-mirror for hardy :) [16:28] thesyko: it's always a real trade-off compiling your own kernel, cause it's no longer 'supported', and you will have to do it for all upgrades [16:28] thesyko: to "hack" ebox configuration is better to modify its templates instead the config files [16:28] MatthewMetzger: yes, hence the 'when it is published, which should be very soon [16:29] then, everytime the template is used your changes are kept [16:29] jdstrand: okay, thanks :) [16:29] yeah, i think i'll stick with the good ol's way of doing a firewall [16:29] btw any of u guys know how to get upnp working in a router / firewall [16:29] thesyko: then definitely check out pfsense. It's a good solution. [16:30] pfsense :) its BSD based right? [16:30] thesyko: yes. [16:30] cool [16:35] i'm downloading pfsense now [16:36] does pfsense have transparent smtp relaying and squid? [16:37] Squid is available as a package - I don't think transparent SMTP is supported [16:38] i need something that can do trasparent smtp relaying so that it'll capture all smtp trafic and forward it to my mail relay box [16:39] thesyko: you might be able to install something seperately [16:40] ok [16:40] let me see if pfsense has any add ons [16:44] nvm let me ask on the pfsense chat room and see :) [16:46] hi [16:47] do i have to manually grade unbuntu-server 7.04 [16:47] ? [16:47] im not getting an update option in aptitude [16:47] :S [16:47] etc/apt/sources.list is still showing 7.04 repos :S [16:50] wo0f: do you have a graphical desktop? [16:52] wo0f: if so, you should be able to run "update-manager -c -d" [16:52] wo0f: or use Synaptic to upgrade [16:53] MatthewMetzger: are you running the server kernel, or the generic kernel? [16:53] MatthewMetzger: uname -a [16:53] Linux document-server 2.6.24-16-server #1 SMP Thu Apr 10 13:58:00 UTC 2008 i686 GNU/Linux [16:53] wo0f: if you do not have a GUI: sudo aptitude install update-manager-core [16:53] wo0f: sudo do-release-upgrade --devel-release [16:55] kirkland: Yes, I'm running the server kernel. [16:55] MatthewMetzger: good, thanks. [16:56] MatthewMetzger: what's your memory-to-swap ratio again? [16:56] MatthewMetzger: memsize, swapsize? [16:56] 1 GB RAM, 3 GB swap [16:56] MatthewMetzger: wow, okay. [16:56] MatthewMetzger: plenty of swap ;-) [16:57] kirkland: I think I set it up a bit odd, but I thought extra swap wouldn't hurt. [16:57] Swap: 2870 0 2870 [16:57] from free -m [16:58] MatthewMetzger: should not hurt [16:58] MatthewMetzger: I tend to use swapfiles, myself [16:58] MatthewMetzger: much easier to adjust [16:58] MatthewMetzger: I'm hoping to help get the installer to support that in intrepid...we'll see.... [16:59] kirkland: that would be great. I've never played with swap files (probably because they weren't an installer option) :) [17:02] MatthewMetzger: it's trivially 3 steps: 1) create the file, 2) format it swap, 3) tell the kernel about it [17:03] MatthewMetzger: : 1) dd if=/dev/zero of=/path/to/swapfile bs=1M count=3000 [17:03] MatthewMetzger: 2) mkswap /path/to/swapfile [17:03] MatthewMetzger: 3) swapon /path/to/swapfile [17:04] I'm copying and pasting that to my notes right now. Thanks :) [17:05] kirkland: does that mean that if you already have a swap partition, there will be two swap locations? [17:05] or will it switch to the new one? [17:05] MatthewMetzger: yup [17:05] MatthewMetzger: cat /proc/swaps [17:06] MatthewMetzger: that'll show you all of the swap partitions the kernel knows about [17:06] MatthewMetzger: historically, swap partitions were faster than swap files [17:06] MatthewMetzger: but modern linux kernels, the performance difference isn't noticable [17:06] Excellent. Thanks for the tip. [17:06] MatthewMetzger: IMHO, swapfiles are far more flexible [17:11] kirkland, nijaba; cheers for you help (no i dont have gui) [17:16] MatthewMetzger: which apache? [17:17] wo0f: it seems that you're upgrading from 7.04 - then don't use the --devel-release option [17:17] wo0f: upgrade from 7.04 to 8.04 are *not* supported [17:18] wo0f: you need to upgrade to 7.10 first [17:18] ah cheers mathiaz [17:18] and omg 8.04 is out:O [17:18] wo0f: not yet [17:18] wo0f: if you use the --devel-release option you'll see it [17:18] wo0f: 8.04 is still the development release [17:19] ah [17:19] i only want to upgrade too the stable realease [17:19] with is still 7.10 right? [17:20] wo0f: yes [17:20] wo0f: sudo do-release-update will do the right thing [17:21] wo0f: s/do-release-update/do-release-upgrade/ [17:21] kirkland: Server version: Apache/2.2.8 (Ubuntu) [17:21] Server built: Feb 2 2008 04:03:01 [17:22] mathiaz: cheers mate =] [17:22] MatthewMetzger: and webdav? [17:23] kirkland: yes [17:23] MatthewMetzger: what package are you using for webdav? [17:23] MatthewMetzger: ie, what package provides webdav? [17:24] kirkland: mod-webdav is part of the apache2 package [17:24] kirkland: I just enabled the apache module. How would I find out? [17:25] kirkland: have look in /etc/apache2/mods-available/ [17:25] mathiaz is right. [17:25] kirkland: and the a2enmod command [17:27] soren: around? [17:27] mathiaz: MatthewMetzger: gotcha [17:27] soren: can you give a try: https://code.edge.launchpad.net/~nvalcarcel/+junk/qemu-dist [17:27] i need some testers [17:28] MatthewMetzger: fyi, "dpkg -S " will tell you what package provides a given file [17:28] kirkland: You should probably definitely keep testing this problem, but I think I found the bug that caused the crash. [17:29] MatthewMetzger: pray tell...... [17:29] kirkland: thanks of the dpkg -S thing.... [17:29] MatthewMetzger: mathiaz: so I don't have a mod-webdav included in the apache2 package I installed... [17:30] MatthewMetzger: would you run dpkg -S on the mod-webdav file? [17:30] a mysql query in Koha (the library software) that contains an "and" has the url formated as containing "+and+". This seemed to cause a loop. [17:30] kirkland: look under dav [17:31] mathiaz: thanks. [17:31] kirkland: apache2.2-common: /usr/lib/apache2/modules/mod_dav.so [17:32] regarding Koha: I'm talking on the koha IRC channel now. The devs there helped me isolate the problem. I'm not sure if an upgrade will help solve the problem yet or not. [17:33] MatthewMetzger: okay, i'm doubtful that there is a leak in hardy's squid [17:33] MatthewMetzger: shall we close 215998? [17:33] kirkland: I think you are right. I'm sorry to have sent you on a wild goose chase. [17:33] kirkland: yes. [17:33]