[00:01] milligan_: sure it's not cutoff? [00:01] (the process name) [00:03] nope [00:03] How would I check that? :)( [00:03] uh ... you'd go into /usr/sbin/apache and look if any of the utilities start with "log"? [00:03] I'm having some trouble with uscan, I have squid 2.7 (on server) and I'm attempting to use uscan to update a source for another application. here is the error... http://paste.ubuntu.com/124058/ any clues as I've yet to find an answer on google! [00:04] giovani, ah, like that .. I don't even have a /usb/sbin/apache .. I have a /usr/sbin/apache2/ though [00:05] try using a process viewer like htop [00:05] it allows you to scroll over [00:05] ah [00:06] well some googling has turned up that this might be a trojan [00:06] http://apis.studio707.net.my/wp-content/log.txt [00:06] not a good sign, my friend [00:07] well, not a trojan, a worm of some kind [00:08] hmm [00:08] pretty bad news [00:08] that server should be quarantined immediately [00:08] if you do a packet capture, I'm sure it's actively attacking [00:08] I killed off the process, so it's not doing anything at the moment [00:09] it may respawn [00:09] depending on how it started [00:09] and there's probably other stuff installed already [00:09] question is .. how did the damn thing get in there.. All my users are jailed .. there are no accounts on there that I don't recognize .. [00:09] this script seems to have an irc c&c server [00:09] guess there might be a roundcube bug or something [00:09] well I'd be looking for this file [00:09] log.txt ? [00:09] there was a roundcube vuln a month or so ago [00:09] you patch that [00:10] milligan_: no, I'd be doing text searches to find the contents of the file, search on something unique [00:10] Nope, don't think so [00:10] doing a search for index.php?pg= ... [00:10] well don't run alpha code like roudcube [00:11] I'd do a text search on /usr/sbin/apache/log [00:11] because we KNOW that's in the file, the version on your server could be modified from the one I just found [00:11] searching for that as well [00:11] giovani: it doesn't have to be there literally [00:12] JanC: it is in the version we found, it's unlikely that that has been changed versus other parts of the file [00:12] I suppose the script could be included from a remote location... [00:13] this is why netflow, mod_security, and full packet capture logging is helpful [00:13] you also sifting through your access logs? [00:15] ah [00:15] there we go [00:16] phpshell in the roundcube logs dir. [00:16] hah [00:16] I'd highly recommend a more mature webmail platform [00:16] roundcube has had a lot of problems [00:17] what else is there that look as good to the end users? [00:17] well, a) security in this case has to trump pretty uis [00:17] but, there is atmail [00:17] or some creative themes for horde imp [00:18] any of them not written in php? :-) [00:19] not that I know of -- although php has nothing to do with these security problems [00:20] I've heard that before, and I do not agree. [00:20] way to late for me to defend that statement though. [00:21] these are not php vulns, these are pieces of shitty coding [00:21] anyway ... you're the one with a requirement for a pretty ui [00:21] hardly a security perspective [00:21] no. my mum is. [00:22] tell your "mum" to use gmail [00:22] no way what so ever. [00:22] haha [00:23] mum actually got more mail accounts on my server than I do. [00:23] o_O [00:24] sounds like she should be using something more robust than webmail [00:24] I totally win on aliases though :-) [00:25] she is. I'm not hosting webmail at the moment :-) [00:25] no problem then [00:25] she has requested it, and I'm rolling it into my new system. [00:36] giovani, thanks for helping out mate .. I believe I found their way in, and I've patched it :) [00:41] giovani, http://www.milw0rm.com/exploits/7553 <- There's what they used. [00:54] milligan_: yeah, that was patched at the end of december [00:54] not on my server,hehehe. [00:54] milligan_: I'd sign up for their RSS feed if I were you [00:54] 0.2 beta is also depricated now [00:54] 0.2 final is out [00:54] yeah [00:54] I'm running stable [00:55] the security vuln was fixed in stable iirc [00:55] http://sourceforge.net/forum/forum.php?forum_id=898542 === Bruce is now known as Brucey === Brucey is now known as Bruceee [01:09] when I insert my second sata disk in x2100 I get this message http://pastebin.com/f440500f0 [01:09] what is that mean? fdisk -l shows only one disk [01:09] i have two disks in there now [01:11] axisys: it means hotplugging may not be supporteD? [01:12] here is my lshw report http://pastebin.com/f4ab4d135 .. i see only one disk [01:12] giovani: so I need to reboot? [01:12] giovani: is there any way to enable hotplug btw ? [01:12] axisys: generically when you want to insert new hardware like a hard drive ... yes, you have to reboot [01:12] axisys: that would require a special drive for your card, afaik, and the card would have to support it [01:12] giovani: in solaris i just run devfsadm .. hoping somethin similar [01:13] well solaris probably has a driver for your sun box [01:13] google [01:13] for your specific hardware [01:13] giovani: ok .. thnx [01:13] http://docs.sun.com/source/819-3722-19/index.html#21924 [01:14] your own company's docs say it's not even supported in solaris [01:14] giovani: i dont work for sun [01:14] anyway, this is a common practice [01:14] yes, but this is #ubuntu-server, not #sun, so, I'd expect that you'd have looked at your hardware's docs first [01:15] I didn't mean that you worked for sun, I meant, this is not an ubuntu-specific issue [01:15] i usually get more help from ubuntu.. so decided to install that over solaris [01:16] giovani: ofcourse it is not ubuntu specific.. just learning.. :-) [01:16] IIRC there is a way to tell the kernel to rescan for disks [01:16] ok, well in general, if something hardware-related doesn't work, go to the source first [01:17] giovani: thnx [01:17] JanC: that would be nice.. [01:17] but IIRC there is no guarantee that it works, or that it doesn't blow up your server... :P [01:18] hehe [01:19] also, you should never use it while other disks are mounted, which makes it pretty useless in most cases [01:20] JanC: i am wondering if i could have use hardware raid instead of jbod like i am doing now [01:20] hardware raid? [01:21] JanC: i think this box, x2100 has hardware raid available [01:21] well, maybe Sun ships real hardware RAID, I don't know [01:21] checking [01:22] looking at the handbook [01:22] http://sunsolve.sun.com/handbook_private/validateUser.do?target=Systems/SunFireX2100/SunFireX2100 [01:23] I don't have Sun server (meaning i can't read that page) [01:32] Anyone, i installed an ubuntu mail server through the ubuntu guide. Using dovecot, I seem to get the messages (as they are sitting in /var/mail/) but i can't retrieve them using a GUI (like squirrelmail or evolution).. can anyone help me find out why (i've searched the internet with no help, and logs don't show any errors). [01:38] which guide? [01:39] https://help.ubuntu.com/community/MailServer [01:39] well did you configure dovecot? [01:39] yes [01:40] so it's running on imap/pop3 ports? [01:40] yup [01:40] and what happens when you try and log in? [01:40] http://www.zoneedit.com/smtp.html [01:40] that works great when i inser tinfo [01:40] i can log on fine [01:40] smtp != pop3/imap [01:41] they're deivered by separate programs [01:41] well that tests to see if mail servers working in the first place [01:41] it says smtp.html -- I presume it's testing smtp [01:41] not imap/pop [01:41] yes, sorry for that being confusing [01:41] that was more of a side note [01:41] i rebooted the x2100 and now I see both disks .. and fdisk -l shows this http://pastebin.com/d3b4626a9 [01:41] how do I mirror the second disk to the first? [01:41] axisys: mirror? you want to do software raid? [01:42] bcurtiswx: where does dovecot look for mails? [01:43] is tha tthe same place as where your MDA delivers them? [01:43] well first we need to see what happens when he tries to connect to dovecot [01:43] we don't even know if it's running [01:43] true [01:43] since he's just talked about checking smtp [01:43] giovani: yes please [01:44] Feb 27 20:34:38 weather dovecot: imap-login: Login: user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, TLS [01:44] axisys: you'll obviously need to start fresh -- as software raid has to be done before installation on top of that medium, unless you're raiding two non-OS disks [01:44] good enough proof its working?? [01:44] bcurtiswx: running, yes -- but clearly misconfigured if it's not giving you your mail [01:45] giovani: interesting! on solaris I could just mirror the second and a reboot would activate the metadisk [01:45] giovani: he can setup a degraded raid1 on the second disk, format it, copy everything over, fix fstab etc., then after rebooting and everthing works add the first disk to the raid too ;) [01:45] giovani: ok based on the guide listed above.. do i have to go in line by line of dovecot.conf to get it setup right.. [01:46] the guide doesn't go that in detail i guess is a more general question [01:46] JanC: that would be ideal for me [01:46] axisys: considering that your system is a new install, just start over again, it will be faster... [01:47] JanC: if i start over how would I do the mirror ? build with LVM option? [01:47] you don't need lvm [01:48] JanC: when i was installing i did not see any other option for raid [01:49] so do it manually from another virtual console than the installer runs on? [01:49] and carefully read the mdadm manual [01:49] JanC: would be nice if there is a guide somewhere.. [01:52] JanC: really? that sounds horribly messy [01:53] axisys: there are raid options in the installer [01:53] but JanC seems to know more about md than I do -- I stay away from software raid [01:55] giovani: yeah lspci shows that too.. i guess that would be simpler... even though need a fresh install [01:56] if that hardware raid is reliable (and a real hardware raid) it might be better to use that [01:57] JanC: it is nvidia nvraid .. not sure how reliable that is [01:57] 00:06.0 IDE interface: nVidia Corporation CK804 IDE (rev f2) [01:57] 00:07.0 IDE interface: nVidia Corporation CK804 Serial ATA Controller (rev f3) [01:57] 00:08.0 IDE interface: nVidia Corporation CK804 Serial ATA Controller (rev f3) [01:58] giovani: yes i am an idiot... i missed 3 settings in dovecot.conf... thanks for the help.. sorry for being.. "that guy" lol.. cheers [01:58] nvidia? that sounds like some sort of fakeraid, but I might be wrong ;) [01:59] are you sure that's the raid controller BTW? [02:00] JanC: yes [02:00] JanC: http://docs.sun.com/source/820-6350-10/chapter1.html#d0e1261 [02:01] JanC: http://docs.sun.com/source/820-6350-10/chapter1.html#d0e500 [02:09] I'm almost sure that's some sort of "fakeraid", so linux software raid (md) is probably the better choice [02:10] yeah, I'm pretty sure nvidia raid is fake [02:39] well then I should start looking for a software raid howto [02:40] i am glad i asked about the nvraid or i almost took the wrong path :-) [02:47] this might be useful reading: http://linux-raid.osdl.org/index.php/Linux_Raid [03:00] JanC: thnx [03:01] there is some info on mdadm on the Ubuntu wiki too, but not really a howto AFAICS [03:01] or maybe there is [03:02] https://help.ubuntu.com/community/Installation/SoftwareRAID === JanC_ is now known as JanC [03:05] bah, crappy ADSL connection [03:05] JanC: thnx a lot [03:06] I learned most of what I use from the man pages though ツ [03:08] well, man-pages + trial & error [03:08] JanC: so u use mdadm ? [03:11] yes, but I don't have a lot of experience with it really [03:14] except that it saved me a some work once (one of the 2 brand-new disks in my raid1 failed after a couple of weeks, before I'd set up backups ;) ) [03:15] (this is on a desktop) [03:17] well, s/desktop/low-end workstation/ [03:18] it has some cool features that you won't find on most desktop motherboard ツ [03:19] JanC: ok .. still reading this http://tldp.org/HOWTO/Software-RAID-HOWTO-5.html [03:20] JanC: pretty good writing.. then will read your two links [03:23] axisys: remember that you need "mdadm", not what they say about "raidtools"; that HOWTO seems a bit outdated [03:24] 'man mdadm' is probably more useful... [03:25] JanC: i am just trying to get an understanding.. your first link claims to be more up-to-date.. [03:25] ok [04:10] how can I tell from this X4100 's layout if I am using hardware raid or disk http://pastebin.com/d1df57f3c ? [04:17] i guess according to smartctl i am using the hardware raid http://pastebin.com/f2eb79df7 [04:18] I might be wrong, but AFAIK LSI MegaRAID is fakeraid too [04:19] MegaRAID is a whole range of devices, many of which are high end SCSI real RAID controllers. [04:19] JanC: lol [04:19] jmarsden: ah, okay [04:21] jmarsden: I wish manufacturers would not re-ab-use marketing names like that :-( [04:22] Yep... you just have to go down a level and use model numbers... but then you get Linksys and the "WRT54G" model, which has changed completely about 5 or 6 times by now...! [04:25] jmarsden: yeah, that's a really complicated case, because they also sell devices that are like older WRT54G revisions under a slightly other model number etc. ;) [04:27] JanC: this I can definitely follow http://kuparinen.org/martti/comp/ubuntu/en/raid.html :-) [04:54] are there tweaks for optimizing server connection? [04:55] Mal3ko: what do you mean? [04:57] tuning and optimizing vpn server with high network load [05:14] Mal3ko: sorry, no experience with that [05:19] Mal3ko: there are some hardware-based solutions for that, or you could try some load balancing over multiple servers === rdw200169_ is now known as rdw200169 [09:58] crontab is not running. any ideas? [09:59] ps aux | grep cron shows cron is running [09:59] and i am using a * * * * * * rule [10:07] in which file ? [10:08] pjsturgeon: in which file did you put that? [10:08] and you only have five stars, not six [10:08] crontab -e and that was off the top of my head to signify an all *'s rule [10:08] it seems to be running but no output, so i guess its another problem. [10:08] thanks anyhow :) [10:25] no one mentioned the newline thing to pjsturgeon, i suppose... that's one has burned me *many* times... [10:26] I have a machine with a P4 processor on it, [10:26] how could I enable hyperthreading ? [10:27] kernel param, or other kernel? [10:27] smp kernel? [10:27] it's an Ibex install === smarter is now known as smarter_ === smarter_ is now known as smarter [11:15] hello, im using ubuntu-server, i want to get the most updated packeges, how can i enter the "unstable" (debian like) apt tree? [12:44] please assist. using 2.6.27-11-server. I acquired an HP webcam (15b8:6002) that isn't detected. Dmesg shows a new HID ([HP HP WEBCAM])] on the bus, but seems to fail to use any drivers. To my understanding: they, as of intrepid, are in the kernal Help? [13:24] <|HSO|SadiQ> I get a warning like this in my server's log: Address 79.112.225.217 maps to 79-112-225-217.rdsnet.ro, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! ... that's my Ip ...should I worry??? [14:36] <|HSO|SadiQ> nobody can tell me?? === smarter_ is now known as smarter [15:38] anyone here? [15:38] Yep [15:39] hi, i need help setting up my ubuntu server box =/ [15:39] and so i figured after google this is the next best place to go. [15:39] What, exactly, do you need? [15:39] i amtrying to setup a host serve to hst adomain [15:39] host* [15:39] i bought a domain, i just need to setup the server part. [15:40] OK, so you trying to host a single site on a your server? [15:40] yep [15:40] OK, and what part are you having trouble with? [15:40] umm.... i tryed a tutorial but it wasnt very clear [15:41] so, like everything from installation of ubuntu server [15:41] What part? [15:41] This isn't like flipping a light switch, it's kind of a multi-part process... [15:41] getting the programs i need to host a server effectively [15:41] OK, let's start with the easiest part first [15:41] Do you have Apache installed? [15:42] we just started reinstalling ubuntu server 8.10 [15:42] the tutorial i tried sorta screwed the first install up [15:42] OK, let's go up a level then [15:42] :( [15:43] Do you have a working copy of Uubntu? [15:43] yep [15:43] OK, and now, do you have a copy of Apache running on the server? [15:43] we're installing the server on the box right now [15:44] So then you don't have a working copy of Ubuntu? [15:44] well, we have the cd, thats what i thought you meant [15:44] but we're reinstalling right now [15:44] OK, let's get that installed first [15:45] What problems are you having with the install? [15:45] none, i just need to know programs i need to host a domain on it [15:45] after i install [15:46] Well, that sort of depends on what you'e going to be doing with the domain... [15:46] getting a basic html/css website up [15:47] ok, that helps [15:48] :) [15:48] As far as programs I would use: [15:49] Apache - For actually serving the site [15:49] BIND9 - For DNS [15:49] Technically that's all you need to host the site [15:50] You'll probably want some additional features, so for reporting you might check out Webalizer [15:50] how about mail servers? [15:50] well. dan is now talking with his mother. [15:50] =P [15:50] so scratch the the mail part. [15:51] I'd guess that you're going to want some sort of FTP on that rascal so I'd stick ProFTPD on there too [15:51] okay [15:51] *writing this down* [15:51] As far as basic setup, getting those four on there will get you up and running. [15:52] alright. how do we actually get the domain to 'point' to our server [15:52] I'd recommend using someone else's HOWTOs on them since I'm not going to re-write one here in the channel. [15:52] DNS. [15:52] quite. [15:52] http://ubuntuforums.org/showthread.php?t=236093 [15:52] you rock. [15:53] Now, I don't think anyone in here is averse to helping if you run into problems [15:53] BUT [15:53] rtfm applies. [15:53] averse? [15:54] No one in here is against helping you. [15:54] In short - don't ask for help on that's something clearly covered in a HOWTO [15:54] alright. [15:54] But if you run into problems don't be a stranger. [15:54] so work with what i have until i really get stuck. then come running for help? [15:54] Pretty much. [15:54] Best way to learn is to get yourself unstuck. [15:54] alright. will do :P [15:55] If you come back and say "Well on line x of tutorial Y it says to replace IP address z.z.z.z with my IP, what do I put in" you're not going to learn anything [15:55] yeah i follow. [16:03] I have installed ebox on my ubuntu server 8.04. What modules are the best to use? [16:11] I have intalled ebox to manage my ubunut server. What modules are best to use? [16:17] !serverguide | Dan722 [16:17] Dan722: The Ubuntu server guide may be found at http://help.ubuntu.com/8.04/serverguide/C/ [16:41] whenever i change my ip address settings to static, we lose internet connection [16:42] any suggestions? [16:42] ubottu? [16:47] =[ [16:47] Dan722: sounds like the settings you're using are wrong [16:47] i have no idea. [16:47] if they were right, they'd work [16:47] i have no idea about any of this. [16:47] clearly. [16:47] well, this is not a place where we can tell you what your IP settings should be [16:47] you have to go to your ISP, or your Net Admin [16:47] yeah i know. [16:47] or whomever gave you that information [16:47] *back to google* [16:47] no [16:47] :P [16:47] google cannot tell you what your IP settings are [16:48] hey google is a diety! [16:48] it's either your ISP, or your Net Admin [16:48] whomever runs your network [16:48] don't question it's ability. [16:48] are you trolling? [16:48] i don't do drugs? [17:23] hi - what is easier to monitor and to extend (using lvm): a hardware-based raid5 or a software-based? === Guest26016 is now known as ircmaxell [17:57] Anyone have much luck with IBM serveRaid controllers? I can't get more than about 1MBps to a 1E0 6 drive array in anything but Centos/RHEL (I get about 80MBps on Centos) [17:57] well ... you probably want to look into what driver centos/rhel is using [17:57] clearly it's gonna be a driver issue [17:58] Fair enough, I was just shocked at such a big difference (FreeBSD couldn't exceed 128kbps) [17:58] well did you even go to IBM to talk about linux drivers? did they supply one? [17:58] They don't supply drivers except a binary driver for RHEL [17:59] some hardware out of the box will not play nicely with default drivers [17:59] well then it sounds like you either need to use RHEL or you need to get better hardware that doesn't limit support that way [17:59] quite fair enough... Too bad too, cause these boards are really nice... [17:59] If there is an rpm driver install file, conceivable to use alien to convert the package [18:00] I'll look into it... [18:00] Thanks for the direction... [18:04] gets messy if the kernel is much different [18:04] but yea === jcastro_ is now known as jcastro [18:50] just configured a server, i was going to use webmin... but if i remember right there is something new that works right with ubuntu from the repos [18:50] anyone know what it is? [18:50] ebox [18:50] webmin is icky [18:52] is it FOSS? [18:52] its broken in 8.10? [18:59] how would I add the key through command line? [19:01] i have two interfaces. so to avoid i turn off router option on dhcpclient.conf file .. now to add default gw I added this for one of the interface in interfaces file like this "post-up 'route add default gw 192.168.1.1 dev eth1'" but that did not add the gw.. is my syntax wrong? [19:01] to avoid two default gw that is [19:09] axisys: you don't put '' around the post-up command to run, afaik [19:10] it's just "post-up commandlinehere" [19:10] but read the manpage [19:10] man interfaces dont have quotes either.. thnx .. let me retry [19:13] cool! that worked.. thnx [19:14] how do I make a virtual interface out of two physical interface ? so I get increase bandwidth and redundancy .. in solaris i just say dladm create-aggr -d eth0 -d eth1 1 and the aggr1 is the my interface [19:15] it's called nic bonding [19:15] google [19:15] giovani: ok .. terminology is my first barrier :-) [19:16] it's called that on most OSes :) [19:16] bsd/linux/and I've seen it mentioned in solaris as well [19:16] or nic teaming sometimes [19:18] giovani: this looks really simple http://koo.fi/tech/2008/08/02/nic-bonding-with-ubuntu/ [19:18] yep, it's not complex [19:18] but you should understand the different bonding modes [19:18] so this is giving me redundancy only or increased bandwidth as well ? [19:18] read above [19:19] giovani: :-) [19:19] http://www.kernel.org/pub/linux/kernel/people/marcelo/linux-2.4/Documentation/networking/bonding.txt [19:19] good mini tutorial -- near the end it explains the different modes [19:20] wtf is wrong with this table [19:20] it randomly decides to not recognize the hard drive [19:20] tablet* [19:21] giovani: so ubuntu runs on tablet ? [19:21] ubuntu is just a distribution [19:22] a tablet is just a formfactor [19:22] so ... the answer is yes, but why wouldn't it? [19:23] giovani: i like that answer.. i am going to use that .. hehe [19:23] ? [19:23] the point being, other than a touchscreen, there's zero difference between a laptop and a tablet [19:25] giovani: so touchscreen works? [19:25] with some work, yes [19:26] but once again, because ubuntu is just a distribution, driver availability isn't specific to ubuntu, so, it's more of a linux question [19:27] giovani: did u need to install some specific driver after the initial install? hope my curiosity is not too annoying [19:28] yeah, but, I don't remember, it was a few years ago, and most of my tablet time is now in Windows 7, because of much better support for handwriting, etc [19:36] however, I'm sure ubuntu has been working on its tablet support with their MID/UMPC editio [19:36] edition* [19:51] giovani: hey i posted a question couple weeks ago on migrating my ubuntu on my laptop to a bigger disk .. https://lists.ubuntu.com/archives/ubuntu-users/2009-February/175206.html [19:51] giovani: can u comment on any of the steps ? [19:52] why not just image the drive? [19:52] and resize the partition [19:52] i received enough answers .. and so far i am going w/ original steps and may be archiving the /etc dir as well and restore from there.. [19:52] i have no space to save a 40gb disk image [19:52] haha [19:53] are you using 40GB? [19:53] giovani: nah ... http://pastebin.com/f3552b9ff [19:53] archiving the etc directory? oh boy, you just want to mess up your file structure [19:54] giovani: not restoring .. but pick stuff from there.. [19:54] yeah, this just sounds like a mess, but ok [19:55] giovani: :-( .. i guess i should then by a usb to ata cable and hang the new disk from my laptop ? [19:55] s/by/buy/ [19:55] how would that help? [19:55] giovani: that way push the whole disk content thru usb to new disk [19:55] but that's not the issue [19:55] new disk is 250gb [19:56] do you not have other computers or something? [19:56] giovani: i have another computer w/ about 25g avail [19:56] running ubuntu server [19:57] on same subnet w/ two network cards ;-) [19:57] yeah, do this however you like [19:57] this is why I keep a few TB available as a SAN all the time [19:57] just dd an image off [19:57] giovani: i have enough space at work.. i can dump the iso there [19:59] i have a question regarding bacula ... i'm wondering if it's possible to set up a backup system while my systems are getting dynamic addresses? (even the server gets a dynamic address... currently) [19:59] maDChoPR: sounds like a question for #bacula [19:59] yea, i asked earlier and no response. [19:59] i'll rephrase it though [19:59] thanks giovani [19:59] unlikely someone here will know more than there === smarter_ is now known as smarter [21:26] New bug: #336008 in dnsmasq (universe) "dnsmasq postinst fails due to wrong update-rc.d command" [Undecided,New] https://launchpad.net/bugs/336008 [22:44] How can I see what processes are using the most memory? [22:45] top [22:54] or even better ... htop === tuxlinux_ is now known as tuxlinux