[00:03] kirkland: im not wild about it (php backport for hardy) [00:04] zul: too many changes? [00:04] New PHP versions always mean new bugs. And broken interfaces. [00:04] kirkland: gimme half an hour we can discuss I need to put liam to bed [00:04] Never a good candidate for a stable release. [00:20] kirkland: its seems like a flimsey excuse to backport 5.2.6 besides the security fixes will be applied eventually and he could always build it himself as well [00:21] zul: okey doke. [00:21] zul: let the security-fix-backporting begin ;-) [00:21] kirkland: yep [00:21] and what infinity mentioned as well [00:21] fyi, i chased those down for kees a few weeks back, i have them in my changelogs somewhere [00:21] s/changelogs/irclogs/ [00:22] soren has me thinking 'changelogs' at the moment ;-) [00:22] zul: cool, could you add comments to that bug to that effect? [00:22] kirkland: sure [00:22] zul: i'll add my irclog research as a comment to [00:23] zul: basically, a stack of urls to the precise php commit messages [00:23] zul: of those security issues [00:39] i'm running a small fileserver with two identical drives in raid 1... is it possible to copy data from a drive that was previously in a raid 1 array, for example if i formatted one of the two drives and wanted to copy some data from the second one? [00:40] yes [00:40] could i tell you how? no :) [00:40] but that's the point of mirror-raid, so i imagine it's doable... [00:40] i mean, imagine you had a drive crash and had to replace the drive... [00:41] the point of raid-1 is that there's no interruption and you lose no data... [00:41] i think it's called 'rebuilding the raid' [00:41] but [00:41] i couldn't tell you how... :( [00:41] okay [00:41] here's my situation [00:41] i am running the raid1 array and i would like to reinstall the OS without having to back up everything, as i don't have enough room anywhere else [00:42] is the os on your raids? [00:42] i want to install the OS on one drive, copy my data from the other mirrored drive, then format that drive as well and add it back to the array [00:42] well i imagine you could probably [00:42] de-raid and remove disk 2 [00:42] install os like normal [00:43] install second disk and say that it's part of a raid - and that it has the data [00:43] ...twiddle your thumbs... [00:43] you're done [00:43] basically my question is... is there a special procedure for mounting a drive that was once part of a raid1 array? [00:43] i don't think so [00:43] okay [00:43] but again, i've never even done a raid [00:43] so you shouldn't be listening to me [00:44] so in theory, in order to pull my data, (i'm guessing) i can just mount hdb1 as usual [00:44] okay, not listening :) [00:44] yeah [00:44] mount -o ro [00:44] to be safe [00:44] fantastic, that's a BIG help [00:44] but you're not listening to me === slimjim8094__ is now known as slimjim8094 [00:45] oh god damn [00:45] lol [00:45] you're not listening to me, right? [00:45] good [00:45] no sir. [00:45] very nice [00:45] Filefly: definitely mount -o ro [00:45] i'd say, mount it read-only [00:46] and see what happens [00:46] alright, i gotta go [00:46] see ya [00:46] thanks [00:46] kirkland: can i mount the partition as if it was never part of the array? [00:47] Filefly: is the partition marked "Linux RAID" ? [00:47] i'm afraid i'm a bit of a noob [00:47] how do i check? [00:47] Filefly: and is the md device formatted directly to a filesystem? ie, you're not running LVM on top of RAID, are you? [00:47] no, no LVM [00:47] Filefly: fdisk -l /dev/hd? [00:47] okay one moment [00:48] Filefly: okay, then, yeah, mounting the RAID1 is very straight-forward [00:48] Filefly: i can't stress enough, though, the importance of mounting it readonly -o ro [00:48] here's this, too [00:48] md0 : active raid1 sda2[0] sdb2[1] [00:48] 116238208 blocks [2/2] [UU] [00:48] i assume i can format and install the os, then mount sdb2 and pull my data from it [00:49] Filefly: right [00:49] can you explain why it needs to be ro? [00:49] i will do it of course.. just curious [00:49] Filefly: safety measure [00:49] okay [00:50] Filefly: in the case that you wanted to boot your old system, you could using sdb [00:50] okay [00:50] that's a big help [00:50] Filefly: if you (accidentally) muck with the meta-data on sdb, then it wouldn't be bootable [00:50] Filefly: i should say "might not be bootable" [00:50] right, that i get [00:51] i'm computer-savvy, but i only rudimentarily understand the workings of raid... that definitely answers my question [00:51] kirkland: http://pastebin.com/d25280947 [00:51] thanks very much for your help [00:52] zul: works for me [00:52] zul: i previously offered to put one in my PPA... i can do this if people really start griping (unsupported, of course) [00:53] kirkland: they could always ask for a backport from the backports team but I dont know what state that team is, but yeah thats a choice [00:54] zul: right, well, it might help the backports team if something is in my ppa, right? [00:54] kirkland: yep [00:54] zul: since I already did the work merging for intrepid, it seems incremental for me to just build the package for hardy, no? (supporting it, obviously, is a hugely different ordeal) [00:55] kirkland: its your ppa but it depends if the build-depends have changed [00:56] zul: those were minimal, i'll try a local build [00:56] but you already built it before for hardy so that doesn even matter :) [01:19] zul: ping [01:19] nxvl: yo [01:20] nxvl: whats up? [01:21] did you make any changes to my patch on the reload bug [01:21] on nagios? [01:21] nxvl: I believe I did [01:21] you remember what changes [01:21] just to know [01:22] yeah the init script [01:23] but i mean [01:23] and the maintainer field [01:23] to my patch [01:23] Bug #236373 [01:23] Launchpad bug 236373 in nagios2 "'/etc/init.d/nagios2 reload' causes nagios to exit (sends SIGTERM not SIGHUP)" [Low,Fix released] https://launchpad.net/bugs/236373 [01:23] nxvl: im not getting you and Im about to leave for tonight can you send me an email [01:23] i mean... [01:24] ok, doesn't matter [01:24] i can run debdiff later [01:24] when i get my ubuntu machine [01:24] :D [01:24] thnx [01:24] btw [01:24] zul: you haven't send me an e-mail of the SRU you wanted me to test [02:14] hey folks [02:14] I upgraded from 7.10 to 8.04 and am having some authentication issues ... I need to reconfigure libnss-LDAP but when I run dpkg-reconfigure libnss-ldap nothing happens [02:14] is just returns a bash prompt [02:17] SpaceBass: just to double check... are you doing sudo dpkg-reconfigure ? [02:17] sommer, i am [02:17] sorry for omitting that :) [02:18] hrmm, strange [02:18] i know, right? ... wonder if there is a verbose mode [02:20] SpaceBass: you can always edit the /etc/ldap.conf file by hand :) [02:20] sommer - no opposed ...but which one? /etc/ldap/ldap.conf or /etc/ldap.conf [02:21] s/no/not [02:22] SpaceBass: for authenticating to ldap /etc/ldap.conf is the main one... it replaced /etc/libnss-ldap.conf (or whatever the old file was) [02:22] and I believe the dpkg-reconfigure simply changes settings in that file [02:22] which I suspect is why broke my authentication to OpenDirectory in the first place [02:22] the replacement of those two files [02:23] SpaceBass: I could be wrong about that though [02:23] dpkg-reconfigure simply calls debconf rutines [02:23] maybe that package doesn't have any [02:23] SpaceBass: nope that's the file I was thinking of /etc/ldap.conf, heh [02:23] when its first installed, there are prompts [02:24] you can always apt-get remove --purge and reinstall :S [02:24] ahhh purge [02:24] didnt try it that way [02:24] but keep a backup of your files before [02:24] if you have make some changes [02:24] SpaceBass: ah, I think you're looking for sudo dpkg-reconfigure ldap-auth-config [02:25] oh yes, you need to use sudo [02:26] actually I'm using root - I know, I know...but until I can get auth working again, I cannot log in as anynone else...had to drop to recovery just to get a root shell [02:26] SpaceBass: yep, dpkg-reconfigure ldap-auth-config... will give you the prompts [02:27] sommer, thats it! thanks! [02:27] np [02:28] the packages were reconfigured so things are slightly different from 7.10 to 8.04, but hopefully better for the long run [02:29] seems like easier management, from what I've read [02:33] alright! at least getent passwd works [02:33] thanks guys [02:34] SpaceBass: party! [02:36] the new /etc/ldap.conf doesnt replace the pam.d/common-* files does it? [02:37] nope just the files needed to configure libnss-ldap [02:38] just double checking [02:38] you should still see an entry for ldap.so (or whatever) in those files [02:51] evening all. anyone want to work with me on file permissions issues? [02:51] Doesn't look like my last message went through [02:51] oh ther eit is [02:54] I have 3 directories set up to share on my server. Sharing is exported with nfs and Samba. the three directories are /public (completely open, any user can read write or execute. this includes windows users /ldap/users/or any unauthenticated client [02:56] the second directory is /business. also a nfs share and samba share. only persons from LDAP authentication can access this share and they must belong to the businness group. the should have complete control over anything in the share. anything they creat in the share can be controlled by anyone else that has access to the share. [02:56] the third share is /private. this is an nfs and samba share with only one user having access and no other user can do anything in the share. [02:57] can someone out there help me to get this set up correctly [03:23] does 8.04 not use /etc/fstab? [03:27] It does [03:32] appears my raid did not start after the upgrade to 8.04 [03:32] thinks theres only 2 devices [03:34] check what devices are being looked at in mdadm.conf? [03:35] thats what is odd...no devices listed ARRAY /dev/md0 level=raid5 num-devices=4 UUID=7b94174d:9827fba7:9d356db8:2532e22e [03:36] right, apparantly it defaults to looking at all partitions if no DEVICES line is there [03:36] (from a quick look at man mdadm.conf) [03:39] odd - all the partitions appear to be present [03:41] it's been awhile since I looked at it, but does mdadm --assemble /dev/md0 bring up the array now with all devices? [03:45] says theres only 2 (out of 4) devices [03:46] odd [03:46] yeah, b/c they are all there [03:46] trying to figure out how to manually sepcify them [03:46] I thought it ccould possibly have been that the devices weren't known in time for mdadm to run at bootup, not that it should possibly happen now [03:49] yeah, dmesg shows some errors like that might have been the case...but it should assemble now [03:49] * SpaceBass smells a downgrade [03:49] what sort of errors? [03:50] 484.709354] md: unbind [03:50] [ 484.709359] md: export_rdev(sdd1) [03:50] [ 484.709368] md: unbind [03:50] [ 484.709370] md: export_rdev(sdb1) [03:50] [ 484.709376] md: unbind [03:50] [ 484.709379] md: export_rdev(sde1) [03:50] [ 484.709383] md: unbind [03:50] [ 484.709386] md: export_rdev(sdc1) [03:50] [ 484.757276] md: bind [03:52] SpaceBass: When you upgraded how did you do it? [03:53] the built in distro upgrade command [03:55] SpaceBass: You mean do-release-upgrade or using apt? [03:57] do-release-upgrade [03:58] OK. There's one set of problems that can happen if you use apt (I know), so that's ruled out. [03:59] * ajmitch hasn't played around with raid problems for a year or so, so is rusty [03:59] i am too...b/c its just worked [03:59] since I was fortunate to have mdadm & lvm just work on upgrade [03:59] haven't had the need to play around [04:00] i guess I can re-create ...but that scares the crap out of me [04:00] and it really shouldn't be necessary [04:01] unless somehow the raid metadata disappeared from those other devices, or was corrupted [04:01] * ajmitch knows that you can use mdadm to examine each partition & print out what the metadata is [04:01] just can't recall the command [04:02] mdadm --examine [04:02] but I'm in "assemble" mode so it won't let me [04:03] ah, mdadm --misc --examine? [04:04] unsure if both are required [04:04] from what --help says, it's not [04:05] hummm...no subperblock detected [04:08] according to the verbose output...they all have the wrong uuid [04:09] strange, to say the least [04:09] yeah [04:10] I'm fairly concerned ...to say the least [04:10] * SpaceBass thinks he's lost 2TB of data [04:11] Na surely not. [04:12] how can I fund the uuids of each partition manually? then use them to update mdadm.conf? [04:12] ^^is googleing now [04:12] SpaceBass: Error: "^is" is not a valid command. [04:13] Have you tried assembling the array specifying the devices? [04:14] interesting ...each of the 4 partitions has the same uuid ... the same uuid that is in mdadm.conf [04:14] hads, I cannot find how to do that...that was my first instinct [04:15] hads, I tried simply listing them: [04:15] mdadm --assemble /dev/md0 /dev/sdb1 /dev/sdc1 /dev/sdd1 /dev/sde1 [04:15] but I get: mdadm: /dev/md0 assembled from 2 drives - not enough to start the array. [04:16] That looks right from memory, not that I know that much about mdadm [04:18] and since we're quiet tonight...here's the verbose output...even more strange [04:18] mdadm: looking for devices for /dev/md0 [04:18] mdadm: /dev/sdb1 is identified as a member of /dev/md0, slot 3. [04:18] mdadm: /dev/sdc1 is identified as a member of /dev/md0, slot 0. [04:18] mdadm: /dev/sdd1 is identified as a member of /dev/md0, slot 1. [04:18] mdadm: /dev/sde1 is identified as a member of /dev/md0, slot 2. [04:18] mdadm: added /dev/sdc1 to /dev/md0 as 0 [04:18] mdadm: added /dev/sde1 to /dev/md0 as 2 [04:18] mdadm: added /dev/sdb1 to /dev/md0 as 3 [04:18] mdadm: added /dev/sdd1 to /dev/md0 as 1 [04:18] mdadm: /dev/md0 assembled from 2 drives - not enough to start the array. [04:18] sorry for the flood [04:20] from what I see in the mdadm help, it looks at both UUID & superblock information [04:22] Does `mdadm --examine /dev/sd{b,c,d,e}1 | grep UUID` show the same UUID? [04:22] hads, duno...let me try that [04:24] yeah, all the same uuid (same result as vol_id /dev/sd.... ) [04:27] As I said, I don't know mdadm that well so don't know how much help I can be sorry. [04:27] you both have helped me troubleshoot - thats the most anyone can ask for...thanks! [04:30] interestingly ... the results for mdadm --examine /dev/sdd1 and sde1 are slightly different than sdb1 and sdc1 [04:30] Perhaps you could assemble with --update [04:31] how slightly different? superblock? [04:31] there is the --force option as well, but I don't know if that's safe [04:32] yeah...see that...but doesnt feel safe :) [04:32] guessing I have to recreate and hope the data is there [04:32] that's probably the least safe option :) === slimjim8094 is now known as Guest87625 === slimjim8094__ is now known as slimjim8094 [04:35] not sure what else to do :( [04:36] seems to think sdd1 and sde1 have no superbloks [04:36] Well update looks like it should fix that [04:47] well I gotta take a break and call it a night [04:47] thanks again for the help [04:48] bye, sorry we couldn't help enough [04:50] troubleshooting help is great [04:51] tried to recreate it (as some blogs suggest its non destructive) and sdd1 and sde1 report as "too small" ....very odd indeed [04:51] might run spinrite against them to make sure they are not damaged [04:51] but cannot fathom how the upgrade to 8.04 would have hosed physicial disks [04:51] anyway....night all! [05:08] <_CitizenKane_> Is it possible to change the size of the varrun filesystem? Mostly right now I have a server where it is completely full, and it's causing some problems [05:14] what is being stored on /var/run that is takin so much space? [05:19] <_CitizenKane_> ajmitch: it seems that mysql is storing binary logs there [05:20] That would be odd. [05:20] They should be in /var/log [05:21] <_CitizenKane_> well, maybe i'm incorrect with this, the filenames are like this, mysqld-relay-bin.000004 [05:24] Well nothing should be stored in /var/run except pid files and sockets etc. as it's tmpfs [05:25] <_CitizenKane_> hads: ya, i know that, this mysql server is just replicating from another one, but I don't know why there would be binary logs in /var/run [05:27] grep "/var/run" /etc/mysql/my.cnf [05:28] <_CitizenKane_> socket = /var/run/mysqld/mysqld.sock [05:28] <_CitizenKane_> socket = /var/run/mysqld/mysqld.sock [05:28] <_CitizenKane_> pid-file = /var/run/mysqld/mysqld.pid [05:28] <_CitizenKane_> socket = /var/run/mysqld/mysqld.sock [05:29] <_CitizenKane_> sorry, should have done a pastebin, i got a little lazy [05:30] Well I don't know that much about mysql replication but there should be a log_bin directive in my.cnf which it should honor [05:31] especially as /var/run is on a tmpfs usually [05:31] <_CitizenKane_> hads: turns out its a bug [05:32] <_CitizenKane_> http://arjen-lentz.livejournal.com/115899.html [05:33] though the linked bug says it's foxed in hardy [05:33] s/fox/fix/ [05:35] <_CitizenKane_> ajmitch: this server is on feisty, so no fix yet i guess [05:36] * ajmitch wonders if it'll be a candidate for fixing in earlier releases [05:37] <_CitizenKane_> ajmitch: I hope so, but at least there is a work around [05:37] thankfully so [05:38] <_CitizenKane_> because this bug is breaking nearly everything on this server =/ [05:38] with /var/run full, not much else is going to start if it fails on storing pid files [05:39] <_CitizenKane_> ajmitch: ya, that was the problem I was having, samba started acting up out of nowhere [05:40] Ah that's a bummer, at least you found info relating. [05:41] Easy workaround [05:42] <_CitizenKane_> hads: yep, and thanks for the help [05:42] No problem, didn't actually help :) [05:43] <_CitizenKane_> hads: it's the thought that counts ;) [05:43] * ajmitch thinks hard about beer & hopes it counts [05:43] getting closer to that time of day :) [05:44] It's nearly middle-of-the-week-beer-o'clock :) [05:44] heh [06:03] Are the Magic SysRq keys enabled for the server kernel? [08:43] moin [09:56] hi [09:56] does anyone know how i can get the refresh time with dig? [10:06] by refresh time, do you mean TTL? === fredrik is now known as frippz [11:02] Hi [11:03] I need some help [11:03] who can help me? [11:03] :) [11:03] !ask [11:03] Please don't ask to ask a question, ask the question (all on ONE line, so others can read and follow it easily). If anyone knows the answer they will most likely answer. :-) === fredrik is now known as frippz [11:05] ok, sorry :). I'm a school teacher and i'm configuring a ubuntu server with PDC - samba and Ldap, and I need to get redirect the "My Documents" to go direct to the home folder of my server [11:07] i have the netlogon script [11:08] and i have a file shortcut.vbs . I think maybe it's here where i have to put the code?? [11:08] I'm not english, sorry for my write === [gquit]bombadil is now known as gquit|bombadil [12:46] morning all. trying to resolve the following issue. when a authenticated network user writes a file to an exported NIS share the following permission and ownships result. -rw-r--r-- userxxx Domain Users. This is the default. how do I change the default save the file with -rwxrwxr-x Domain Users Domain Users [12:49] Change your umask [12:49] ...to 002. [12:49] /etc/login.defs [12:50] ok. I'm not familiar with umask what would the umask number be? [12:50] 11:49:37 < soren> ...to 002. [12:50] cjsstables, umask is the oposite to the file permissions numeric value you want to finish with [12:51] thanks soren, you have benn quite a help for me. I have an excellent server so far. and now just finishing it up with network shares.. [12:51] cjsstables: :) [12:51] soren, is the umask set on nfs server or client? [12:52] * Kamping_Kaiser found a rather nice way of setting umask via pam today (and was happy when it worked) [12:52] next question. do I modify the /etc/login.defs on the server side or client side? [12:52] Kamping_Kaiser: client. [12:53] cjsstables: client :) [12:53] nod. ta. :) [12:53] ok. next question. is it possible to only specify the umask for specific directories or will it apply to all directories [12:54] all dirs. you'd have to do seperate one differently [12:54] It's used by the open(2) and mkdir(2) system calls, which are invoked on the client. [12:55] my concern is that my /ldaphome directory would end up having files witten with the wrong permissions. that directory and the writes are working perfectly rite now and don't want to mess it up [13:05] soren: looks as though I may not want to do that. the login.defs narrative recommends not to use UMASK. Am I better off not using an nfs share and only use a samba share with samba configured to force the permissions and groups on writes? [13:06] It's an option, sure. [13:08] you can export nfs with a mask per export cant you? [13:08] annyway. night [13:09] ok. next question. all linux clients use an xfce desktop that doesn't have a means to browse smb shares. Also is there a way to automount those smb shares based on the user login? [13:09] cjsstables: look at nis maps ? [13:09] cjsstables: autmounter ? [13:09] kamping_keiser... can you explain that further [13:10] Kamping_Kaiser: sure, in the exports file under the options you can set mask [13:10] ahhh... thats it. thats what I needed. [13:12] ikonia. right now all clients have the export automounted through /etc/fstab. I was looking for a solution to do that with samba, but I have seen you have to have a user and password to get them mounted. That isn't convienient for me [13:12] cjsstables: well you can do it in the export section and use a mask, or look at tools like automount [13:13] ok. I'm going to go and research that. thanks for the help guys [13:14] bye [13:39] hey hey guys [13:39] quick question... i have just got a t2000 sparc back from storage and am playing about with it... when i got it originally i managed to put 6.06 on it... which is now obviously out of date... which version should I look at putting on it with a fresh install? I tried 8.04 last night but its giving problems... is it the officially supported version for these sparcs? [13:42] sparc is dead [13:42] it's a community distro now [13:43] the T2000 is also the latest Sun chip so generic sparc stuff doesn't work properly on it unless done through solaris (%100 binary compatability ) [13:44] which is why it is now in ports? [13:44] but there is still an 8.04 image... so someone must be still maintaining it [13:44] http://drwetter.org/coolthreads/t2000.Ubuntu_vs_Solaris10_3.html [13:45] Kelerion: sorry, didn't mean to miss-lead, most of it gets auto built from the repo, and there are "people" maintaining it [13:45] ah [13:45] ok..reading that page :) [13:45] Kelerion: its a tad dated, but does give you an idea [13:53] ok... [13:53] well hmph... lol [13:54] makes me wonder though... if the SAS controller driver was implemented in edgy... wouldn't it still be in hardy? [13:55] anyways... not important [13:55] doesn't seem to leave me with my options... mainly, go back to solaris... [13:56] opensolaris? [13:57] i don't know solaris *at all*.. to be honest... [13:57] might be a good time to learn a new OS.. lol [13:59] http://www.nexenta.org/os [13:59] kelerion check it [14:01] nvmd [14:01] not sparc [14:01] well damn...that was looking promising too.. lol [14:03] it's ok... i don't mind playing around with a new OS.. its all in the learning, right... === jjesse_ is now known as jjesse [14:59] OpenSolaris would be interesting to toy with [14:59] so would OpenBSD [15:02] <\sh> opensolaris is nice [15:03] <\sh> actually the zfs thing... [15:05] ya, that sounds really cool [15:05] not that I'm a filesystem guru [15:08] hello, I am new to ubuntu and want to setup a media server that can be accessed from my LAN and remotely. [15:08] would it be best to use standard ubuntu or the server edition [15:09] I have an old Proliant ML330 that I would like to use. Is this machine sufficient or??? [15:11] You probably wouldn't use standard ubuntu [15:12] Don't go on my word alone, but check out Ubuntu Studio, Mythbuntu, and Ubuntu Server. [15:38] Hm, new kernel today. [15:42] -18? [15:42] lukehasnoname: yes [15:44] Is the "-18" part an Ubuntu specific edition? [15:44] the 2.6.24-xx [15:46] lukehasnoname: yes, that's the build number [15:53] are there any good router guides that will show you how to prioritize traffic or apply bandwidth limits to certain machines(or both) by mac address?? [15:53] Isn't that called QoS (Quality of Service)? [15:53] maybe even with a gui? do I hear laughter? [15:53] lukehasnoname, yeah... [15:54] as far as by mac address, I don't kow [15:55] know [15:55] All I see so far is iptables [16:00] is it ebtables that uses MAC addys? [16:01] arakthor, don't know... but weren't you the guy that deleted his samba config files?? that was pretty funny. [16:02] arakthor, I'll look into ebtables... [16:03] What I'm trying to get is close to the same effect as this product http://www.softperfect.com/products/bandwidth/ [16:04] You can turn on/off, and limit bandwidth by mac and prioritize traffic. So I think the QOS is pretty well documented, but the other stuff it seems near impossible to find. [16:08] no, I didn't delete my samba config files :) [16:13] fbc: Greetings.. I'm interested in somethign like that as well. [16:15] pschulz01, hehehe,, you want the winning lotto numbers too? [16:15] fbc: Useful diagram.. http://ebtables.sourceforge.net/br_fw_ia/PacketFlow.png [16:16] fbc: Do you have them? [16:16] pschulz01, nope. sorry...:-P [16:16] fbc: I used to work for these guys.. http://netpriva.com/ [16:17] fbc: We worked on somethign that does exactly what you're after. I left 2 years ago, and was thinking that there should be a way to do exactly the same thing, but in the FOSS world. [16:18] pschulz01, cool, yeah I would like guide that would walk you through it. Maybe even throw a little squid config in there... [16:19] fbc: I was thinking of something along the lines of a 'config file' that then get's converted into the low level ip/eb tables commands. [16:19] fbc: one way of doing this is to set up traffic shaping using tc [16:19] danshearer: Howdy :-) [16:19] pschulz01, I figure that kind of setup is what 95% of businesses need.. somethign that can control and limit like that, and I'm trying to replace the windows server at my workplace with ubuntu, but the boss says it needs to do everything the old server did. [16:19] fbc: and then using iptables to stamp packets depending on the user or other criteria [16:20]