[00:51] hi all [00:51] i have installed ubuntu 8.04 on a server, can i fxp on port 22? i've tried it and it doesn't work, do i need to config something? or do i need to install like glftpd? [01:44] xiownthisplacex: can you what on 22? [01:53] i want to fxp from 2 servers that i have [01:54] fxp? [01:55] yea, you know like, flashfxp [01:55] site-to-site transfer [01:59] nope, never heard of it before. (might hae heard of it actually, certainly never used it) [02:01] vk5foss it is ftp between two ftp servers not having the data pass thru the controller machine [02:04] PanzerMKZ: ah [02:05] xiownthisplacex: dare i ask why you want to run it on port 22? [02:05] so i dont have to install a ftp server like proftd or glftpd [02:06] ... is your question "can i copy files between two hosts directly over ssh" ? === vk5foss is now known as kgoetz [03:42] Hi: WHere can I suggest something to be added to Ubuntu server? [03:45] Level15: the mailing list, or here during the week. [04:10] someone want to do a quick favor? [05:47] We changed the server IP of an ubuntu server install. ssh'ed into the machine, no problem. But now it's locking out ssh attempts when it worked fine minutes ago. [05:48] Someone just got in, ran an ls and it disconnected them. [05:49] Any ideas? [05:49] reboot it and see if you can get back in? [05:50] it's at a data center. [05:50] Emmett: are you using firewalling? [05:51] no [05:58] Emmett: check if you have ufw blocking stuff [05:58] Emmett: it might be the problem [05:59] nope. [06:02] Emmett: are you sure? it's installed by default [06:03] really? [06:03] since I only have a minute on it, what are the chances that I could just [06:03] sudo ufw disable [06:04] and hit enter? [06:04] would that kill it all immediately? [06:06] Emmett, it's supposed to [06:06] you can do "ssh $host $command" [06:07] can I ps -ef | grep ufw to see if it's running anywhere? [06:07] like, what daemon does it run? [06:08] ufw status [06:09] I only have a second, I don't have time for that [06:09] * ajmitch_ wonders if it's as simple as an address collision [06:09] ssh $host sudo ufw status [06:21] Is it a bad idea (or even impossible) to include masquerading and other NAT chains and rules in /var/lib/ufw? [06:21] Hi, I'm trying to setup a Postfix service on my server, for sending out notifications from PHP. How do I configure it in the menus? [06:22] RudyValencia: if it's just going to send mail to a "real" mail server, you want the "satellite" option [06:22] twb: I'm setting it up to send out things like password reset, confirm account creation, etc. mails. [06:23] PHP mail(), basically. [06:23] I realize that. [06:23] It's basically going to send it directly to the other MX for delivery to the user. [06:24] Would it be a "Satellite system" then? [06:24] RudyValencia: that's what I said. [06:24] OK [06:26] I think I may have it === PanzerMKZ_ is now known as PanzerMKZ [07:33] NCommander: hm? [08:08] hello, I'm trying to get freeradius source, I get this problem E: Could not open file /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_hardy-security_main_source_Sources - open (2 No such file or directory) [08:13] hi all, I'm using ubuntu 8.04 and installed kerberos according to this tutorial http://doc.ubuntu.com/ubuntu/serverguide/C/kerberos.html, but when I type kinit I receive no tickets, can anyone help me with that ? [08:32] hi all, does this message mean that I have a ticket or not http://paste.ubuntu.com/49208/ ? [08:38] krbtgt/SC.BIBALEX.ORG@SC.BIBALEX.ORG is your ticket [08:38] Try #kerberos (#krb?) [08:38] scuser: so you have a TGT, but no other tickets (e.g. an NFS-specific ticket) [08:40] twb: I'm new to kerberos, so what does this mean ? [08:41] scuser: #kerberos is an IRC channel. [08:41] twb: ok thanks :) [09:42] scuser: first thing you have to check when you have problems with kerberos is, like btw any document on kerberos will tell you, if you have a working DNS setup, both forward and reverse DNS [10:11] New bug: #273043 in apache2 (main) "/etc/init.d/apache2 routinely prints to stderr if few modules are enabled, causing logrotate to spam in cron" [Undecided,New] https://launchpad.net/bugs/273043 [10:23] hello, is there an alternative for freeradius in for EAP wireless authentication ? [10:38] Is there a way to list existing ufw rules in "ufw format", as opposed to the raw iptables-save format? [10:41] moin [10:42] twb: sudo ufw status [10:43] henkjan: oh! That outputs useful information only if the thing is actually enabled [10:43] henkjan: thanks [10:44] How does it decide whether to be -p tcp, -p udp or both? [10:44] Does it just say "well, for 'ufw add www' there's a www entry for both in /etc/services" ? [10:47] hmm, don't know if it gets the names from /etc/services [10:49] looks like it does [10:49] hi all, can anyone tell me how to use .k5login to login without password ? [10:50] twb: newer ufw in intrepid add support for application profiles [10:51] twb: see http://ubuntuserver.wordpress.com/ and search for ufw package integration [10:52] twb: also check http://doc.ubuntu.com/ubuntu/serverguide/C/firewall.html for the updated ufw documentation [10:52] henkjan: I asked because on Hardy I did "ufw add smtp" and "ufw add www"; and I got the following rules: [10:53] tcp 25; tcp 80; udp 80 [10:53] twb: [10:53] ...I was weirded out that it added UDP only for www. [10:53] If the port you want to open or close is defined in /etc/services, you can use the port name instead of the number. In the above examples, replace 22 with ssh. [10:53] henkjan: yeah, I realize that. [10:54] henkjan: I'm trying to understand how it decides which protocol(s) to add if you don't specify any. [10:55] Ooh, a bug. [10:55] http://hpaste.org/10596 [10:56] Yeah, it does a different thing if you "add 25" to if you "add smtp". [10:56] The latter only adds TCP, not UDP. [10:57] It also doesn't understand "ufw add 25/icmp", which I just tried for kicks. [11:21] hi all, can anyone tell me how to use .k5login to login without password ? [12:13] I've gone through the goog and the book, but I'm having trouble getting outside network access to this samba share (local subnet access is great) there's no firewall installed (it think) on this (ubuntu) system, router is setup to DMZ to this server. I can ssh from client to server and vice versa. I try the 'echo "hello" telnet xxx.xxx.xxx.xxx 139' to the server from the client and get "telnet: Unable to connect to remote host: Connection tim [12:19] papyromancer: Are you sure your ISP is allowing 139 through? I know a lot of residential ISPs will block it for security reasons [12:19] I wouldn't be surprised if business class ones do too. I can't see any immediate reason why one would want an Internet available samba share [12:20] ropetin: I am business class... Let me call them up [12:21] hang on ;) [12:21] OK :D === ogra_ is now known as ogra [13:07] ropetin: comcast blocks those ports system wide at the request of homeland security and cannot unblock them... LOL .... time to build an ssh tunnel from my ec2 instance :D [13:11] might i recommend a vpn instead [13:11] papyromancer: yeah, as I thought. I'd go with Deeps suggestion if it really has to be a samba share [13:12] or infact, anything not tcp based unless you absolutely have to [13:12] Deeps: I'm going with the tunnel :) [13:13] OpenVPN is so easy (relatively) to get running, I'd highly recommend it [13:13] papyromancer: up to you, but tunnelling anything over tcp is best avoided unless absolutely necessary [13:13] Deeps: Why do you say so? [13:13] due to the nature of how tcp works - it's a "reliable" protocol [13:14] if a packet gets lost, it rerequests it [13:14] Deeps: So service will be spotty? [13:14] and slow? [13:14] in the mean time, your protocol that your tunnelling might also have error handling too, at which point that also rerequests over the tunnel [13:15] so you get a fair bit of duplication and unnecessary slowdown [13:17] Deeps: I'm still gonna go for it, I'm stubborn [13:17] Started a forum thread: http://ubuntuforums.org/showthread.php?p=5833814#post5833814 [13:18] I'll let you know how it goes. And thanks for the advice :) [13:18] alrighty [13:18] gl, enjoy [13:26] New bug: #273099 in net-snmp (main) "No debug symbols package for net-snmp" [Undecided,New] https://launchpad.net/bugs/273099 [13:30] soren, you are now running pinkie if your fully up to date [13:31] I believe I am. [13:32] -> #xubuntu-devel [14:03] hey [14:03] how do I compile newer 2.6.2x kernels on ubuntu 6.06lts if it's even possible, last time I tried it broke the system [14:10] psufan: why do you want to compile your own kernel? [14:11] because 2.6.15 has a nfs crash and burn bug and the nit wit developers don't feel it warrents a patch [14:18] psufan: any option to upgrade to the next lts (8.04) ? [14:18] not unless vmware server 1.x is supported on top [14:18] or I woul dhave dumped 6.66 already [14:50] how do i add a superuser (on the cli)? is there a special command? or just useradd and then add that user to a bunch of groups? [14:50] slicslak__: Just the "admin" grop. [14:50] group, even. [14:51] soren, great thanks [14:53] henkjan: just ignore psufan - iirc, he came insulting the developers on #ubuntu-dev a couple of weeks ago [14:54] * soren greps irclogs [14:54] soren: not 100% sure, but the name rings a bell and his behaviour matches [14:55] also the "6.66" was something I recall from then [14:55] or something along those lines [14:57] Chipzz: Yeah, just found it. *shrug* [14:58] Chipzz: ah, okay [14:58] morging [15:04] soren, if i want the user to have their own group, do i need to create that group first? useradd doesn't seem to have that option. [15:04] right now i have: useradd -G admin -m name [15:04] Use adduser instead. [15:05] I'm not sure about useradd, but I know that adduser creates a group for each user. [15:10] soren, right, thanks [15:18] kirkland: ping [15:22] hi. I'm experiencing some trouble with libpam-chroot. I'm experiencing the same kind of problem than https://answers.launchpad.net/ubuntu/+question/33707 [15:22] nxvl: pong [15:22] must I use the patch proposed ? why there isn't an update on the package ? [15:23] kirkland: is it normal that my desktop show a "Private" icon? [15:23] kirkland: i mean, i have an icon of a mounted drive called "Private" that calls to my Private crypted forlder [15:23] kirkland: as if it were a flash drive or something [15:23] nxvl: right, that's because "Private" is mounted [15:24] nxvl: from a command line, run "mount" [15:24] yup, that i know, but /home is also mounted and doesn't appear in there [15:25] kirkland: because to have such an icon will be the first things people ask "why you have that, what you have inthere" and such stuff [15:26] kirkland: so it will only raise and interest of other people (maybe system users) on try to break it [15:30] nxvl: okay. [16:30] mathiaz: does the patch to #273043 look reasonable to you it does to me [16:30] bug #273043 [16:30] Launchpad bug 273043 in apache2 "/etc/init.d/apache2 routinely prints to stderr if few modules are enabled, causing logrotate to spam in cron" [Undecided,New] https://launchpad.net/bugs/273043 [16:34] zul: seems like a good patch [16:36] thats what I thought but I can see why you want those error messages to cron [16:38] Hi I'm experimenting a trouble with libpam_chroot : I want to chroot someone from ssh, but when I login, I have the welcome message, but imediatly put me out. on the log side, I founded : http://pastebin.com/m7b33ccfb , and possibly a bugreport which may be linked (https://answers.launchpad.net/ubuntu/+question/33707 ) [16:38] the same config worked with gutsy, but no longer with hardy. is it a regression ? [16:40] how do I find out if a kernel update for 6.06lts includes the nfs crash and burn bug and root hole fix [16:41] mathiaz: its for hardy by the looks of it [16:41] psufan: do you have a CVE number ? [16:42] zul: hm - it's probably won't qualify for a SRU. [16:42] hang on [16:42] this is what I have [16:42] https://lists.ubuntu.com/archives/dapper-changes/2008-June/012713.html [16:43] mathiaz: probably not [16:46] hmm [16:46] box is still only at -51 [16:49] piti: it looks like it to me [16:50] also [16:50] what the HELL is with nano in 6.06.2 lts [16:50] if you hit enter to start a new blank line it suddentely smashes all the lines together [16:50] this has almost driven me to sucide [16:51] psufan: Nano hasn't been touched in dapper. [16:52] zul: I also found a package on that page : https://bugs.launchpad.net/ubuntu/hardy/+source/libpam-chroot/+bug/237308 . I'm trying it, but shouldn't it be on a repository ? (like -update or -security) [16:52] Launchpad bug 237308 in libpam-chroot "libpam-chroot broken" [Undecided,Confirmed] [16:52] It's the exact same as it was when Dapper was first released. [16:52] hello [16:52] is it reasonable to ask about caching dns server stuff here? [16:53] piti: its definently a SRU imho [16:53] superdump: Probably :) [16:54] i'm looking to set up caching dns on a server on my lan and use that for internet dns lookups [16:54] rather than always using my isp/opendns [16:54] especially as sometimes they seem intermittent [16:54] zul: what do you mean by SRU ? [16:54] firstly, what dns server would people recommend for a caching dns server? [16:54] i saw something about pdnsd but i was expecting that bind would do it [16:55] piti: it should be in -updates [16:55] i haven't used a dns server before, but once i know what is recommended, i'll have a look around and try to get it working [16:55] bind would do the job, and could happily bypass your isp's dns too [16:55] piti: ill have a look [16:55] superdump: If all you're ever going to do is simply dns caching, it doesn't really matter much. I think both bind and dnsmasq come preconfigured to do caching. [16:55] ok [16:55] then i just have to figure out how to get bind working :) [16:56] apt-get install bind? heh [16:56] Well, bind9, actually :) [16:56] out of the box it pretty much does what you need [16:56] well, yeah, i always forget that 9 [16:57] yes, i read that it's supposed to [16:57] what should i have in resolv.conf on the server? just "nameserver 127.0.0.1"? [16:58] or also some public nameservers? [16:59] zul: soren: I posted a pretty trivial debdiff that closes a KVM bug, https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/225260 [16:59] Launchpad bug 225260 in kvm "control file description miss-leading" [Low,Confirmed] [16:59] zul: soren: if one of you could sponsor that, i'd appreciate it [17:00] I don't agree with the change, FWIW. [17:00] The x86 architecture includes both x86 and x86-64. [17:02] well something is causing nano to spaz [17:03] dunno if it has to do with being over telnet to a virtual serial port on the blade or not [17:03] soren: i understand that x86 includes x86_64, but it seems some users are confused [17:03] kirkland: Also, kvm works on powerpc, s390 and ia64 now as well. [17:03] soren: mark the bug as "Invalid" then, with your reason [17:03] soren: that's a good point, i was wondering about [17:03] kirkland: Well, we can certainly clarify the description somehow. [17:03] Perhaps change it to "i386 and amd64" or "x86 (both 32 and 64 bit)" [17:03] soren: shall i rework the text more generically? [17:04] I think that's probably the best choice. [17:04] I never liked the original description. [17:04] soren: should i bother mentioning ppc or s390, since we don't really support those? [17:06] kirkland: I don't think leaving them out and explicitly mentioning i386 and amd64 seems right. If you could come up with something more generic, that would be cool. [17:06] soren: uno momento [17:09] Greetings and Salutations [17:09] I have a ufw question and legacy iptable rules [17:10] I'm going to add some prerouting rules to before.rules [17:10] I'm looking at the server guide but have a question [17:10] they show :POSTROUTING ACCEPT [0:0] then have their postrouting rules [17:11] would I use :PREROUTING ACCEPT [0:0] before placing my prerouting rules? [17:12] Fenix|work: just put :PREROUTING ACCEPT [0:0] and :POSTROUTING ACCEPT [0:0] right next to each other, and first in the *nat table, then you can have the rules in any order after those two [17:12] s/right next to each other/one after the other/ [17:13] soren: http://pastebin.ubuntu.com/49347/ [17:13] soren: see if that looks any better to you [17:13] jdstrand, thanks [17:13] :) [17:13] np [17:17] kirkland: Hmm... I kind of see your point about not mentioning the ones we don't support. We don't actually currently build the s390, ia64 and powerpc versions right now. [17:17] soren: yeah, that's awkward, IMHO [17:17] Yes, "currently right now". [17:17] jdstrand, you wouldn't happen to know which protocols/ports that squid can actively and safely cache would ya? :) [17:18] soren: another option: http://pastebin.ubuntu.com/49349/ [17:18] kirkland: editing the 8.10 server guide kvm section? [17:18] lukehasnoname: no, kvm package description [17:19] Fenix|work: it listens on 3128, by default IIRC it can cache for 80, 443 and ftp, but you'll likely need to check the docs for that (or at least squid.conf) [17:19] kirkland: That works. Only problem is that we have to change it when we add the new architectures. meh, that's probably fine. Let's go with that. [17:19] jdstrand, yeah, I'm looking at the docs now [17:19] kirkland: How about I give you a day or so to come up with more patches, so that we can batch them together? [17:19] soren: Okay. I think that control file will be the least of our changes if/when we add s390 :-P [17:19] http/https, ftp, rsync, gopher, wais, http-mgmt, gss-http, filemaker, multiling http, cups, rsync, SWAT [17:20] soren: that's perfectly fine [17:26] jdstrand, where does ufw log to? [17:26] kern.log [17:27] (it's just iptables logging) [17:27] sudo ufw logging on [17:27] that's already on [17:27] see 'man ufw' for details [17:27] any way to fine tune what gets logged? [17:28] my network generages a tonne of broadcast traffic, and it's a waste of log file to see it [17:28] Fenix|work: not via the ufw command, no [17:28] Fenix|work: you can add rules to /etc/ufw/after.rules if that makes sense for your environment [17:36] jdstrand, would -A ufw-after-input -m pkttype --pkt-type broadcast -j RETURN sufficient? [17:36] ... perhaps adding multicast in there as well [17:38] Fenix|work: there are example of using BROADCAST and MULTICAST in after.rules and before.rules [17:38] you might check there and 'man iptables' for what will be most appropriate for your environment [17:39] jdstrand, I didn't see any examples in my after.rules ... so I went IPTables style instead... I noticed the "don't log noisy services by default" used RETURN instead of DROP [17:40] soren: I'm closing https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/89399 as "Wont Fix" [17:40] Launchpad bug 89399 in kvm "kvm update fails, if group "kvm" already exists and has non-system ID" [Undecided,Won't fix] [17:40] soren: i added a note as to why... let me know if you disagree [17:41] but adding -A ufw-after-input -m pkttype --pkt-type broadcast -j RETURN eliminated broadcast from my log file [17:41] so I'll settle with that [17:41] Fenix|work: that is simply to get out of the ufw-not-local chain and back into ufw-before-input for processing [17:42] Fenix|work: that is likely what you want to do, as IIRC, you are using default ACCEPT [17:42] correct [17:42] so you avoid the 'BLOCK NOT-TO-ME' logging [17:44] so far working as expected [17:44] otherwide I'd drop it [17:46] time to test out my new gateway / proxy server [17:46] thanks jdstrand [17:47] kirkland: Looks fine. Thanks. [17:48] soren: zul was about to sponsor that description debdiff... did you want him to hold off on that? [17:50] kirkland: I'm not really insistant either way. [17:50] soren: regarding https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/193531, you were suggesting a README.PXE-boot since we don't have the source to a working PXE bios for an emulated card? [17:50] Launchpad bug 193531 in kvm "pxe booting not supported" [Undecided,Confirmed] [17:51] soren: I can try to hack up that README and add it too, to close that bug, if you think that's sufficient [17:51] kirkland: Oh, since then, I've added a new package called kvm-pxe which solves the problem. [17:51] soren: ah, nice [17:51] soren: i'll close that bug pointing to that package [17:55] kirkland: soren gave his blessings on that bug? [17:55] zul: he blessed the text, said he'd sponsor a stack of kvm changes in a few days, if i wanted, or you can do them incrementally [17:56] zul: personally, i'd rather my changes sponsored incrementally if possible [17:56] zul: i'm trying to reduce the kvm queue [17:56] kirkland: okies [17:59] soren: looking at https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/188878, do you mind if I add liw's kvm-ok shell script? [17:59] Launchpad bug 188878 in kvm "Utility to see if kvm acceleration can be used" [Undecided,New] [18:20] jdstrand, how do I open up ufw to allow everything [18:20] I appied ufw default accept and still it blocks [18:20] err allow [18:20] Fenix|work: yes, you need to follow that with 'sudo ufw disable ; sudo ufw enable' [18:20] still is blocking [18:21] do I have to clean up the before and after rules? [18:22] Fenix|work: you shouldn't with the defaults [18:22] of course you'll need to check anything added [18:22] by you [18:22] I only added *nat prerouting rules [18:22] I have a single homed box so I didn't add any forwarding/masquerading rules [18:23] kirkland: lemme know which ones you want uploaded [18:23] (there's a COMMIT right after my prerouting rules... and *nat is before *filter [18:23] Fenix|work: can you paste it somewhere? [18:24] zul: the last debdiff in https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/225260 [18:24] most definately [18:24] Launchpad bug 225260 in kvm "control file description miss-leading" [Low,In progress] [18:27] jdstrand, http://rafb.net/p/frMr8C26.html [18:28] kirkland: done [18:28] nothing like deleting one's /bin dir, eh? [18:28] zul: sweet [18:28] zul: i might have a few more coming today [18:28] kirkland: lemme know so I can queue them up [18:28] zul: no problemo! [18:29] Fenix|work: the format looks fine (though you probably don't need the POSTROUTING line since you aren't doing that [18:30] jdstrand, my kern.log has the following for all gateway operations... [18:30] Sep 22 13:09:11 proxy kernel: [ 1213.921916] [UFW BLOCK INPUT]: IN=eth0 OUT= MAC=00:1f:29:0e:e9:48:00:0c:29:0c:75:ea:08:00 SRC=172.16.0.223 DST=172.16.0.4 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=762 DF PROTO=TCP SPT=49251 DPT=8000 WINDOW=8192 RES=0x00 SYN URGP=0 [18:31] Fenix|work: one word of caution. because ufw doesn't manage these rules, it won't actually flush them when doing 'ufw disable' and the like [18:31] Fenix|work: so if you want to start fresh, do 'iptables -F -t nat' [18:32] Fenix|work: and you disabled and enabled? [18:32] yes [18:32] and rebooted a couple of times :) [18:33] I see the ufw-not-local DROPS all [18:34] Fenix|work: can you access port 8000 directly? eg 'telnet proxy 8000' [18:34] where do I go [18:34] to browse updates released for a ubuntu version [18:34] Fenix|work: or nmap -Po -p 8000 proxy [18:34] so I can check changelogs etc [18:34] jdstrand, the proxy works fine [18:34] it's when acting as gateway that doesn't [18:34] so bypassing the proxy [18:35] although kern.log says that all traffic destined to 8000 is blocked as well [18:35] UFW BLOCK INPUT [18:36] Fenix|work: can you paste 'iptables -L -n -v' somewhere? [18:37] http://rafb.net/p/nw41S616.html [18:37] jdstrand, nmap says 8000 is http-alt [18:37] and it's open [18:39] Fenix|work: and iptables -L -n -v -t nat [18:40] http://rafb.net/p/pCjaOf41.html [18:43] Fenix|work: I feel silly. what you are seeing is from an unfinished item on the TODO list: "Default allow logging messages aren't correct in after*.rules" [18:43] Fenix|work: is it actually blocking or just saying it is blocking, but everything works fine? [18:44] going to gmail.com fails [18:44] zul: I just attached a debdiff to solve https://bugs.launchpad.net/ubuntu/+source/kvm/+bug/188878 ... i'd be interested to know if soren is strongly against it [18:44] Launchpad bug 188878 in kvm "Utility to see if kvm acceleration can be used" [Wishlist,In progress] [18:44] zul: assuming soren isn't -1 on it, i think it's ready to sponsor [18:45] jdstrand, and windows update isn't working either [18:47] Fenix|work: so does this work: [18:48] http_proxy="http://proxy:8000" elinks -dump http://www.google.com [18:48] (assuming http://proxy:8000 is correct [18:48] kirkland: cool [18:48] lemme go check [18:48] Fenix|work: you can check /var/log/squid/access.log on proxy to see if it is connected there [18:49] jdstrand, the proxy is working... [18:49] the box as a gateway isn't working properly [18:49] Fenix|work: ok, then it is a problem with the redirection [18:49] what redirection? [18:49] kirkland: little overkill me thinks but we'll see what soren says [18:49] if it isn't squid, it should go straight through [18:49] Fenix|work: you are redirecting ports [18:49] no, only have one adapter [18:49] zul: how so? [18:50] * jdstrand is confused [18:50] just redirecting 80/443 and 21 [18:50] ok [18:50] I'm redirecting 80/443 and 21 [18:50] they're fine [18:50] but when it's a non-squid port (ie, no redirection) its is failing [18:50] (like windows update for instance) [18:50] kirkland: its just easier to put it in the init script I agree with soren on that one [18:51] jdstrand, I've tried to set up this box as a transparent proxy [18:51] Fenix|work: what is the network topology for the affected systems? [18:52] I'm replacing my default gateway with this box [18:52] Hello [18:52] jdstrand, star [18:52] zul: okay, if you think so, then close the bug as a "Wont Fix" with your justification. i thought the binary was small, simple, and correct enough to just drop in place for anyone who might find it useful. [18:52] 1000-BaseT [18:53] kirkland: i think soren should have the last word though [18:53] I have a problem, my server was working fine until today when i rebooted it using the command reboot, when it came back up i couldnt connect to it through the outside and i couldnt connect to it any way and now i try to type ifconfig but nothing shows up [18:53] zul: true. [18:53] kirkland: soren will turn green with rage if we did that ;) [18:54] hulk...smash.. [18:54] zul: did what? applied that patch? or closed "Wont Fix"? [18:54] applied the patch [18:54] zul: k [18:54] zul: well, i kinda noted that soren should probably look at that one first ;-) [18:54] yep I agreee :) [18:55] zul: i mean, the patch "solves the bug", but soren should probably decide if the bug is valid or not [18:55] Kapli, did u try enabling the device? [18:55] kirkland: of course [18:55] enabling what device? [18:55] Fenix|work: so the ufw firewall that I have been looking at is on a different machine than the squid proxy? [18:56] Kapli, liek ifconfig eth0 up [18:56] or whatever its labeled as [18:56] i dont really understand whats going on now because i type ifconfig and nothign shows up usually it would show up loads of info [18:56] no loopback? [18:56] no it doesnt say the ip and the mac address and stuff [18:57] it just goes back to the stuff [18:57]