[00:00] my ifconfig eth0: www.pastebin.com/f13cc0177 [00:01] hmmm. the link says: " * Unknown post id, it may have expired or been deleted " [00:01] which one? [00:02] both [00:02] links* [00:02] hm, they work in here in links [00:03] weird [00:04] sending you through dcc [00:05] SFauconnier: well, i guess i'm still an IRC newbie. how do i receive/view the sent files through dcc? what is dcc? [00:05] what irc client do you use? === mac9416 is now known as macBusy [00:06] irssi [00:07] type in /dcc get sfauconnier eth0 [00:07] and /dcc get sfauconnier dhcpd.conf [00:09] ok, done. where do i find them? [00:09] good question [00:09] aah. in my home dir [00:09] I suppose somewhere in ~/.irssi [00:09] or in your home dir [00:09] have no idea [00:11] you can set it with /set dcc_download_path [00:11] yeah, default is ~ [00:11] ok, hang on. let me have a look [00:11] k, thanks [00:11] what command do i append to a cli command to pipe output to a file? [00:12] captainkirk: ">" to write to a file overwriting it, ">>" to append to a file [00:13] SFauconnier: is that your complete dhcpd.conf file? [00:13] yes [00:14] heguru: ok, good, is it possible to add a variable in the command like 'todaysdate' so each time command is run it autocreates a new filename to output to? [00:16] heguru: like command > uniquefilename.log [00:17] SFauconnier: what did u set your eth1 to? what IP do u see when u type ifconfig eth1 ? [00:18] 192.168.1.1 [00:18] that's odd. what does ifconfig eth0 give u? [00:19] ow [00:19] that was eth0 [00:19] eth1 gives me my fixed IP [00:19] captainkirk: yourcommand > `date +%Y%m%d%H%M%S`.txt [00:19] so eth1 is still connected to your modem, then? [00:20] yes [00:20] captainkirk: this would give you a filename of YEARmonthDateHourMinSecond.txt [00:20] arrgh. [00:21] ok, in your /etc/default/dhcp3-server file change INTERFACES="eth1" to "INTERFACES="eth0" [00:21] SFauconnier: then try to restart your dhcp [00:22] k, it started [00:22] has an 'ok'! :o) [00:22] cool. on your client type: sudo dhclient [00:22] k [00:23] done [00:23] SFauconnier: it should spit out an IP at the end of the output. 192.168-something [00:23] right? [00:24] "bound to 192.168.1.10 -- renewal in 248 seconds" you mean that? [00:24] awesome. so dhcp's working [00:24] yeah [00:24] now try pinging google from your client [00:24] ping www.google.com [00:24] heguru !! thanks..!! [00:25] doesnt output anything, just hangs [00:25] wait [00:25] I shall restart my switch, had trouble with that earlier [00:25] ok [00:26] it hangs for about a minute and then says: "ping: unknown host www.google.com" [00:26] also, what does ifconfig eth1 give u? [00:26] on my client? [00:26] no, server [00:26] can anyone suggest a good webstats app? like webalizer, but something that outputs more info and looks better than webalizer? [00:27] dayo: my fixed IP [00:27] SFauconnier: what is it? [00:27] 81.82.203.26 [00:28] heguru. it seems to taking the text literally and creating file name exactly as typed instead of converting to Y m d etc [00:29] billybigrigger: have u tried awstats [00:30] captainkirk: did you use ` instead of ' ? [00:30] SFauconnier: sudo /sbin/route add -net 192.168.1.0/24 gw 81.82.203.26 [00:30] captainkirk: not a single quotation mark, but ` (usually located before number 1 key) [00:30] heguru... i used ' not `, so which is correct? [00:30] SFauconnier: and then /etc/init.d/networking restart [00:30] heguru. ok trying that now [00:30] captainkirk: use ` [00:30] dayo: done [00:31] SFauconnier: try pinging [00:31] captainkirk, nope, but i will [00:31] still hangs [00:31] should I restart services first? [00:31] yeah [00:31] heguru: the ` has fixed it... thanks, [00:32] captainkirk, installed awstats from repos, anything i have to configure or where does it spit the index.html out? [00:32] still hangs [00:33] brb [00:33] which is strange btw, it didnt before [00:34] billybigrigger: i have not used awstats on linux, only under apache on windows... 'eeeek' anyway.. the output and info was good. [00:36] before it could find the domain's ip but had 100% packet loss [00:38] can anyone explain this entry in the syslog file ---- May 5 06:50:13 emerald2 syslogd 1.5.0#1ubuntu1: restart. [00:53] this server is killing me, have to get up in 5 hours [00:57] anyone able to tell me why there is no tab-completion for apt-get on my ubuntu-server? [00:58] I have it on this lappy running desktop [00:59] reid: what ubuntu version are you using? [01:00] 8.10 [01:01] OemConfigServer seems nice. Has anyone here actually tried it? [01:02] SFauconnier: I have bash-completion installed as well, tab-completion works for everything that isn't apt-get [01:02] reid: what output does "cat /etc/bash_completion | grep apt-get" give you? [01:04] SFauconnier: turns out fine.. I think the reason why is because I was trying to tab-complete as root [01:06] yes, won't work in root [01:07] reid: is there a reason why you're logged in as root? [01:07] giovani: because its a server, and I'm doing stuff over sh, and rather than typing sudo over and over again, I'm just sudo su'd [01:08] giovani: but its ok, I fixed it, I just needed to do ". /etc/bash_completion" as root [01:08] heh [01:08] sh = ssh =P [01:08] yeah, sudo allows for much more accountability [01:09] not doing anything dangerous, just moving files around in directories that I'd rather not chmod to 777 [01:09] ... why would you ever chmod 777? [01:09] sounds like you don't have a proper group setup [01:10] because torrentflux requires its download folder to be 777 [01:10] yet I like to keep them in places that are not 777 [01:10] for obvious reasons [01:10] why would it require that? [01:10] that doesn't make any sense [01:11] because it has users that are not actual users on the server, they are only torrentflux webclient users [01:11] uh [01:11] but the process is running as a single user on the system [01:11] nobody cares about torrentflux users [01:11] that's not a permissions issue [01:12] for some reason or another, it is required to put files in a directory that is 777, it will not work if you don't. In this file it creates its web-user directories [01:13] sounds like there's a lack of understanding on someone's part here [01:13] this is often how insecurity comes to be [01:13] sounds like torrentflux specifically says "This directory MUST be chmodded to 777" [01:13] =/ [01:13] sounds like there's a lack of understanding on their part ... :) [01:13] oh = [01:13] =P [01:13] where does it say that, btw? [01:14] on the admin page where you set the download dir [01:14] if you try to set a 755 or something to it, then it doesn't let you save settings [01:14] right ... [01:14] because your groups haven't been set up properly [01:15] Define the PATH where the downloads will go [01:15] (make sure it ends with a / [slash]). It must be chmod'd to 777: [01:15] thats the exact wording on the page [01:15] ok [01:15] I believe you [01:15] it's just probably what they feel is the easiest way to get it set up [01:15] albeit insecure, and stupid [01:15] I'd really advise you to look at alternatives to torrentflux though [01:15] rtorrent and its guis are nice [01:16] torrentflux just has some features that I really like, since I have about 20 people who use it [01:17] but yeah, I would love to use rtorrent =P I'm just lazy i suppose [01:17] what features? [01:18] multi-user support, multiple admins, .tar http download, built-in tracker searches [01:18] not saying rtorrent doesn't have them [01:18] hmm, ok [01:18] just that I haven't done so much research on it [01:18] and this is very friendly right out of the repos >.< (lazy again) [01:20] giovani: the only problem I really have with torrentflux is the fact that it uses bittornado as a backend =P [01:21] uh ... no kidding [01:21] it's crap [01:21] soon I'll probably be switching to torrentflux-b4rt though and using transmission or something [01:21] something at least better than bittornado [01:23] haha [01:29] Why not rtorrent? [01:29] explained a few lines up [01:30] Righto. [01:31] I just wish I could find a easy, clean way to just patch Torrentflux up to b4rt === ejat is now known as e-jat [02:22] anyone can tell me how to use BD RE disc on linux ? [02:22] to backup data on it [02:22] like normal hardisk :) [02:23] what is BD RE? [02:23] Bluray Rewriteable === macBusy is now known as mac9416 [02:57] i think this problem is simpler than i am making it. i want to scp files from one machine to another, to a similar named dir, NOT overwriting. I just want the files that are not already there. i do not see anything in the man page that will accomplish this [03:01] i'll just scp them all to a sae dir and us cp onthe dest machine === ssd7 is now known as Guest64414 [03:34] when i run a sudo command in ubuntu i see "sudo: unable to resolve host MYHOST" [03:39] how to configure mysql ? [03:46] i cant set up root password [03:46] I'm currently running a server with 8.04 installed. Not really clean anymore since I've been messing around with configuration files trying to get my interfaces setup, but it's giving me trouble. Can someone guide me through the process of setting my server up to where it's both accessible from WAN, and LAN? [03:51] http://pastebin.com/m7971f713 [03:51] try sudo apt-get update [03:52] then try it again [03:54] I did. [03:54] also a sudo apt-get install -f ufw [03:55] http://pastebin.ca/1412952 My interfaces and hosts config files. I don't think they are configured proper. Can someone check them out? [03:55] And, some advice too, please. :) [03:56] http://pastebin.com/m7971f713 [03:56] J-_: looks fine to me. [03:56] J-_: I think "network" is not needed anymore, though [03:57] twb: What's weird is I can't ping google. I can ping 192.168.1.100, and 192.168.1.1. [03:57] I'll remove network [03:57] J-_: fix your resolv.conf, then [03:57] J-_: you'll also need to fix your routing table. [04:00] where's resolv.conf? I can't seem to find, or locate it. [04:01] i cant make password for root [04:01] in mysql [04:01] /etc/resolv.conf :) [04:02] twb: http://pastebin.ca/1412960 Does that look alright? [04:03] No, that looks utterly stupid. [04:03] err, okay. [04:03] How do you expect to resolve the nameserver's name without a nameserver? [04:04] my nameserver is 192.168.1.1 lol [04:05] hey... anyone feel like helping a noob with iptables configuration? [04:06] what I [04:06] ^I'm trying to do [04:06] Sarnuial: Error: "I'm" is not a valid command. [04:06] is basically looping a gateway through itself [04:06] twb: How would I configure the file? [04:06] I have a gateway which connects to the Internet, then my router connects to it, and all my other computers connect to the router [04:07] J-_: you need to identify name servers by IP, not by name. [04:07] so u got modem ,router and PCs [04:08] I'd like to have any outgoing stuff on the gateway that didn't originate on the internal side of the router to loop back through the router and then go out the gateway, so I can track bandwidth statistics on the router [04:08] http://91.121.193.183/torrentflux/ [04:08] help! [04:08] i.e., have iptables set up so that [04:09] if ($origin != 192.168.0.10) { $traffic->send('192.168.0.10'); } else { $traffic->accept(); } [04:10] @storrgie: you modified the configuration php file? [04:10] yes i did [04:11] Does freedns.afraid.org give you IPs? I don't think they do. And do I put their DNS nameservers in resolv.conf? [04:11] J-_: I have no idea. [04:12] @storrgie: are you trying to use MySQL or PostgreSQL? [04:12] Sarnuial: mysql [04:12] For a typical domestic setup, resolv.conf is populated with the IP(s) of your ISP's name servers, by dhclient. [04:12] @storrgie: ./adodb/drivers/adodb-mysql.inc.php exists? [04:13] Sarnuial: i think its an issue with adodb [04:13] ./? [04:13] php5-mysql is installed [04:13] @storrgie: assuming you're in the main torrentflux directory; /var/www/torrentflux/adodb/drivers/adodb-mysql.inc.php is probably the full path [04:13] im not sure how to check for adodb [04:14] i installed torrentflux from repos [04:14] the main dir is now /usr/share/torrentflux/www [04:14] :( not sure why [04:14] should I just apt-get remove torrentflux [04:14] and download it? [04:14] probably [04:15] but first [04:15] the DB is ok, i know that much [04:15] open config.php and make sure $cfg["db_type"] is mysql, not blank [04:15] should be line... 31 [04:15] it is [04:16] mkay... [04:16] rip it out? [04:16] probably a good place to start [04:16] how can i rip it out and remove the files [04:16] remove --full or something? [04:17] apt-get remove torrentflux and then dpkg --purge torrentflux [04:17] that should do it [04:17] (nobody can help with my iptables issue? :( ) [04:18] Sarnuial: i also have this :( http://pastebin.com/m7971f713 [04:19] hrm... [04:19] that's... weird [04:19] try apt-get install -f [04:20] tried that [04:20] same thing [04:21] and if you do apt-get install python it says it's already there? [04:21] yep [04:21] i did it for python2.5 [04:21] try apt-get check [04:22] that fail too? [04:22] http://pastebin.com/m286fbd02 [04:22] all kinds of things messed up [04:22] anyone here use awstats? [04:23] apt-get check worked fine [04:23] I'm not sure if I want to ask what you've done to this poor machine ;) [04:23] i installed from repos, and edited the awstats.conf to my liking and i can't see any .html or .png's or anything in my webroot, is it supposed to spit out a stats page to my web dir or how do i run it, or what? [04:24] its an OVH server [04:24] @storrgie: I shouldn't have come on IRC this late... I've got to head off. I hope you can get it sorted. [04:24] im not sure whats going on [04:24] thanks [04:42] Does anyone know of any good tutorials for making a Home server on ubuntu, probably with just samba and preferably some method of easily adding users and allowing the users to change their own passwords? Also I'd like if it told me what exactly I was doing instead of just having me blindly follow steps. [04:43] sounds like you just need to install a normal desktop? [04:43] billybigrigger: http:///cgi-bin/awstats.pl [04:45] my /var/www doesn't have a cgi-bin [04:45] i saw that in the config, was i supposed to make one with proper perms? === BlackKnight is now known as UdontKnow [05:01] hmm [05:01] awstats seems to be off a bit === MTeck is now known as MTecknology [05:01] webalizer is showing 700+ hits since i had the webserver running and awstats shows 0 [05:02] im highly doubtful all 700+ hits came from my local machine in the last week or 2 [05:26] does anyone know how to get rid of Virtual timer expired error? [05:31] hi all, if I have ALSA working properly on my server, and would like to install pulseaudio. what is the correct way to do this? (I have already googled..) =P [05:43] Can I use ddclient with freedns.afraid.org? [06:33] hi [06:44] I can ping google's IP, but not the domain. Any ideas? [06:57] J-_: your name resolution is still fucked. [06:57] You can test this by attempting to resolve google.com instead of attempting to ping it, e.g. "host google.com" or "dig -x google.com" or "nslookup google.com" [06:59] twb: dig -x is a reverse lookup... just plain dig google.com does normal name resolution. [07:00] jmarsden: oops, thanks [07:00] (I'm not a dig weenie, but my cow-orkers are.) [07:05] Meh I dunno [07:06] * J-_ shuts his server off [07:26] hi [07:26] where does mysql server logs error ? [07:26] I can not see it in syslog ? [07:52] how do I disallow access to openssh server from a specific user? [07:54] mixed_drink: "DenyUsers username" in your sshd_config [07:54] thank you soren [07:54] mixed_drink: More info in "man sshd_config" [07:54] much thanks :) [08:30] New bug: #371728 in tomcat6 (main) "Please merge tomcat6 6.0.18-3 (main) from Debian unstable (main)" [Wishlist,In progress] https://launchpad.net/bugs/371728 === kwork is now known as kinnaz [08:49] IMO it'd be better to whitelist specific users === scfh_ is now known as scfh [09:21] checking again for my query ? [09:44] can someone take a look at https://answers.launchpad.net/ubuntu/+source/samba/+question/70002 please? [10:43] New bug: #353529 in samba (main) "winbind crashes (dup-of: 286119)" [Undecided,New] https://launchpad.net/bugs/353529 [12:08] hey, how can I have my gateway box give out opendns addresses? [12:09] so that I don't have to configure the dns addresses on every client? [12:09] I've installed ubuntu server 8.04. I wanna make sure logrotate is working. I can't find it anywhere in cronjobs ... how do i make sure it works? [12:13] :( [12:14] /etc/cron.daily/logrotate ? [12:17] ogra, the file exists ... it means it would run daily for sure? [12:17] <_ruben> no, it will only run when the server's powered on at the time cron.daily's scheduled [12:17] <_ruben> and crond's running, etc [12:18] _ruben, could you please elaborate? [12:19] <_ruben> cron.daily usualy gets scheduled at about 6:25am or so .. if the server or any important software part it depends on isnt running, the daily jobs wont either .. which is just stating the (very) obvious [12:20] well, if it isnt run at 6:25 because the system was powered down, "atd" should care iirc [12:20] on power up [12:22] righto :) === dmesg is now known as edsoncanto [13:32] hello [13:33] morning [13:34] * Malteser is searching for someone who can help him with postfix-virtual-users on a Ubuntu-Server 8.04 [13:40] hello [13:41] <_ruben> Malteser: might wanna ask some more specific questions [13:43] _ruben: the problem is: the postfix smtpd receives and stores eMails but the smtp and pop login doesn't work [13:43] _ruben: i tried to solve it via berkeley-DB files [13:46] <_ruben> smtp auth i havent played with yet .. pop login has nothing to do with postfix [13:47] both doesnt work with my virtual users [13:49] are there any plans to have a version of 8.04 amd64 that will work with core i7? [13:50] _ruben: some idea where i could find something to fix my prob ... found nothing matching my prob all over the web ... also not in the postfix manpages [13:51] <_ruben> Malteser: cant help with the smtp part, as for the pop part, you need to check your dovecot/cyrus/courier setup to see if it has virtual user support [13:55] _ruben: k thanks ... i keep on searching [13:57] <_ruben> i only started playing with virtual users (postfix+dovecot) recently .. got my first setup up and running yesterday :) .. now to migrate from local hashes to mysql [13:58] _ruben: that sounds interesting ... can dovecot work with the smtpd_sender_login_maps hashes from postfix [14:00] _ruben: or do i need an extra conf for that [14:29] quit [14:41] has anyone had many problems with ext4? [14:41] no [14:42] now I speak for me not anyone [14:43] so as ubuntu 8.04 amd64 won't run with the new core i7 xeon's should i just simply go to jaunty and start treating the OS as disposable ? [14:44] incorrect: ext4 is not enabled by default in jaunty anyway [14:44] blue-frog, depends how you install it ;) [14:44] you have to call for it [14:45] i can see see ext4 as an FS option [14:45] that's what I say: option [14:45] not default [14:45] the way i install nothing is default [14:45] good [14:46] i am just irritated that i can't keep my platform on the same OS version [14:48] i had backported everything i need to hardy and now i need to build the netboot with a new revision of the kernel, sigh [14:49] i think going with making the OS disposable is the best way really [15:34] hello i just upgraded from ubuntu server 8.10 9.04 [15:34] this broke my ldap database [15:34] db4.7_recover was processed without errors [15:34] but it didn't work [15:35] slapd -d 5 exited with the following error: [15:35] bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found [15:36] im kind of stuck now but cannot find any solution [15:37] i have the bdb database files [15:37] but not the ldif files [15:37] any help is appreciated [15:37] could anyone help me install pulseaudio on ubuntu-server? [15:37] 8.10 [15:40] g_man: maybe try db4.7_recover -c in /var/lib/ldap [15:42] didn't work :( [15:43] maybe db4.6_recover? [15:43] db4.6_recover: Unacceptable log file log.0000000001: unsupported log version 14 [15:44] g_man: what if you move the log files to another directory then try the recovery [15:46] db4.6_recover: Program version 4.6 doesn't match environment version 4.7 [15:46] but thiout the -c fag worked now [15:46] thiout=without sorry.. [15:47] so it's working? [15:47] but I still cannot access it [15:47] db4.6_recover went without errors but no change in the symptomps [15:48] so is slapd running? [15:49] im trying it seems to be stuck [15:49] no it crashed again with the same bdb_dn2id error [15:50] g_man: you might try sudo slapd -F /etc/ldap/slapd.d -h ldap:/// -d -1 [15:54] it didn't work i'm now looking for the error message there is much more output [15:54] g_man: ya, that puts slapd into debug mode [15:56] => access_allowed: auth access to "cn=admin,dc=cifi,dc=local" "userPassword" requested [15:56] => acl_get: [1] attr userPassword [15:56] => slap_access_allowed: result not in cache (userPassword) [15:56] this occurs over and over again is this an error? === roaksoax_ is now known as RoAk [16:00] i think the server is running but i cannot access it via phpldapadmi [16:00] g_man: what about a simple ldapsearch [16:01] New bug: #372233 in tomcat6 (main) "tomcat6 fails to start: "cd: 216: can't cd to /var/lib/tomcat6/temp"" [Undecided,New] https://launchpad.net/bugs/372233 [16:04] ldap_sasl_interactive_bind_s: Invalid credentials [16:07] SASL [conn=22] Error: unable to open Berkeley db /etc/sasldb2: No such file or directory [16:08] this appears on the slapd console when i try ldapsearch [16:09] SASL Canonicalize [conn=22]: slapAuthcDN="uid=sysadmin,cn=digest-md5,cn=auth" [16:09] these cn's don't exist [16:13] ok i was able to connect as anonymous and all my ou's are gone! [16:14] i think it recovered the wrong version [16:36] ok i think we should ditch this [16:37] i fuond an older ldif-backup but upon phpldapadmin imoprt it reports a constraint violation [16:37] i think the problemn is that the samba.schema is not added [16:38] but i don't know/understand the new slapd.conf folder [16:39] g_man: there's instructions for adding the samba schema in the serverguide [16:39] !serverguide [16:39] The Ubuntu server guide may be found at http://help.ubuntu.com/8.04/serverguide/C/ [16:39] http://help.ubuntu.com/9.04/serverguide/C/ rather [16:42] sorry :s im starting to get tired [16:48] mmh. [16:48] May 3 08:39:20 bladon kernel: [4619889.937303] BUG: soft lockup - CPU#0 stuck for 11s! [swapper:0] [16:48] that one surely doesnt look good. [16:48] anyone ever had this before? [16:49] yann2: Yes. [16:49] what can it be related to? [16:49] it s a fairly normal ubuntu server - munin, bacula, backuppc, mothing fancy [16:50] In my case it was a lost interrupt to the I/O thread in a kvm-61. [16:50] Err.. 62, it must have been. [16:51] yeah - but that one isnt using kvm :( [16:52] It can be literally a million different things. [16:52] hardware or software? [16:53] cause it basically crashed the server :D [16:54] yann2: Single CPU system? [16:54] dual dual core [16:55] And you only see these messages for CPU#0? [16:55] ...or are the similar ones for #[123] ? [16:56] Weird. my whois previously worked. Now I'm getting "unknown host rejected x.x.x.x" (where x.x.x.x is my actual static IP) [16:57] yhamon@bladon:/var/log$ cat kern.log | fgrep bladon | fgrep lockup [16:57] May 3 08:39:19 bladon kernel: [4619878.147617] BUG: soft lockup - CPU#0 stuck for 11s! [swapper:0] [16:57] May 3 08:39:20 bladon kernel: [4619889.937303] BUG: soft lockup - CPU#0 stuck for 11s! [swapper:0] [16:57] same cpu but twice [16:57] actually its weird that it sayd its blocked for 11seconds at 1 second interval :) [16:58] nvm, seems it's that specific whois server (for proxad.net) [16:59] yann2: Yes, it'll keep doing that forever, probably. [16:59] "forever" as in "until you reboot". [17:00] yann2: 4619878.147617 and 4619889.937303 are 11 seconds apart, though. It's just the syslog that's lagging (for some reason). [17:00] Do things exist after a reboot? [17:00] took me two days to notice as its my nagios box :( [17:00] * cybersplice lapses into existentialism. [17:00] yann2: Well, it can't be completely hung. It's still logging stuff. [17:00] soren > no it is not [17:00] it stopped logging just after that [17:01] worth a support ticket? [17:02] If it hasn't happened before nor since, there's not much to be done. [17:02] kees: I wonder if it would be helpful to add some more examples to https://wiki.ubuntu.com/UbuntuMainInclusionRequirements in the " Check for security relevant binaries" section. E.g. "Add-ons and plugins for server software. E.g. web applications, mail filters, etc." [17:02] take care [17:03] nealmcb: hmm [17:03] it is of course obvious to those who think about such things, but.... [17:04] or perhaps a separate section for non-root server stuff... [17:05] nealmcb: I think it's a good idea to add more examples. [17:05] kees: we were just talking about webmail systems in the server team meeting [17:06] https://wiki.ubuntu.com/ServerTeam/MailServer [17:06] nealmcb: "* Add-ons and plugins that perform additional tasks (filters, scanners, UI skins, etc)" ? [17:08] kees: The main point seems to be that it hooks into other security-sensitive things, like servers or privileged desktop software [17:08] nealmcb: hrm, perhaps I'm not understanding. [17:09] and I think adding "web applications" in particular (a very common and problematic class) would help [17:09] nealmcb: that's a pretty giant class of software [17:10] Add-ons and plugins to security-sensitive software (web applications, mail server filters, UI skins, etc) [17:10] ah! gotcha. adjusting... [17:33] jdstrand: does Ubuntu shadow need to continue to carry the passwd.postinst that cleans up the vmbuilder password glitch? [17:38] kees: no, I don't think so. it is only in vmbuilder created images, and vmbuilder in the affected version of vmbuilder (intrepid) can't build karmic images [17:38] (without hacking anyway) [17:39] from the USN: [17:39] This vulnerability only affects virtual machines created with vm-builder under Ubuntu 8.10, and does not affect native Ubuntu installations. [17:40] jdstrand: okay, I'll drop it from the merge. [17:52] how much would a dedicated server, 250gig, 2gig ram, unlimited 100mbit line cost [18:24] mathiaz: do you still use bzr to take care of dovecot? [18:25] zul: yes [18:26] zul: let me update the branch in lp [18:26] mathiaz: okies [18:32] zul: lp:~ubuntu-core-dev/dovecot/ubuntu has been updated [18:32] thanks [18:35] zul: this branch is actually based on the svn branch from the debian svn repostiory [18:35] zul: however I can't mirror the debian svn branch in LP - so it's a local branch [18:35] mathiaz: do you want to upload it to the archive? [18:35] zul: and to add to the matter the svn branch has changed in debian [18:35] zul: yeah - I'll give it a try [18:36] zul: I've been using dovecot as playground for bzr-builddeb and getting used to a bzr based workflow for packages. [18:36] how is it going so far? [19:26] hello people [19:26] do you know any free domain name rgistration service? === fevel is now known as fevel-away [19:31] wizardslovak: hello...no more free domain registrars exist [19:35] lol [19:35] good to know [19:35] i got couple questions [19:35] i am noob with ubuntu server [19:35] and i would like to host my own web site [19:35] is my 30mbit isp connection enought?? [19:36] wizardslovak: co.cc [19:36] haha [19:37] ?? [19:37] wizardslovak: you can register free domain @ co.cc, i meant :-) [19:38] lol === jimmy51__ is now known as jimmy51_ [19:40] was thinking of using ubuntu server for a postfix box. how can i find out, what version of bind and postfix, the server addition would be using? [19:40] gpled: @ packages.ubuntu.com [19:41] there's also aptitude command by i forgot it :-p [19:41] *but [19:46] is 250gb traffic on web host enought? [19:47] wizardslovak: for static pages but not for warez movies [19:47] for regular web site [19:48] wizardslovak: i would say yes if regular is less then 87381 views of 100KiB page per day [19:49] ^ is for 250GB/month [19:49] is better to get hosting or use my server do host site? [19:49] beawesomeinstead: Error: "is" is not a valid command. [19:50] wizardslovak: depends: for a relatively small site (<1000 visitors per day) i would use either my home server or shared host [19:50] wizardslovak: for a bigger one i would get a linode (linode.com) or a slice (slicehost.com) [19:51] *i prefer linode [19:51] **if you know how to manage vps of course [19:55] what about godaddy hosting? [19:58] beawesomeinstead: thanks [19:59] wizardslovak: i personally hate their support, i wouldn't use godaddy (IMHO) [19:59] gple: np [19:59] ditto on godaddy [19:59] well i will use godaddy as domain register [20:00] so far 8.99/year for .us [20:01] good deal lol [20:01] ?? [20:01] my current stack is: Linode+Slicehost (both) / Moniker for domains / DNSMadeEasy for DNS hosting. Both Linode and Slicehost are reputable companies with awesome support === fevel-away is now known as fevel [20:02] what is "dns made easy" for? [20:03] been happy with DNSEXIT.COM [20:04] wizardslovak: DNS hosting -- they provide ip anycast, DNS failover with system monitoring, etc, etc, but you don't need it for regular site [20:04] gpled: i wish i could afford dynect [20:05] beawesomeinstead: thank you [20:05] i am noob with all this lol thats why i ask [20:05] oo i see that moniker has 7.29/year for .us [20:05] np, glad if i was helpful [20:05] wonder what distro dynect runs [20:06] gpled: Apache/2.2.11 (FreeBSD) mod_ssl/2.2.11 OpenSSL/0.9.8e DAV/2 PHP/5.2.9 with Suhosin-Patch [20:06] i got ubuntu server up and running but still i want to learn it more lol [20:07] so i decided to get web site and try it on my LAN untill ill learn how to make server be visible to WAN [20:07] lol [20:07] wizardslovak: this is called "staging environment" :-p [20:07] lol [20:08] ok another question [20:09] where can i find cheapest domain name reg? [20:09] i am looking for .us only [20:09] wizardslovak: 7.29/year is a pretty good deal [20:10] wizardslovak, I usually do mine through godaddy.com [20:10] yea i found it on moniker [20:10] godaddy is 8.99 [20:10] wizardslovak, yeah...they can be a little more [20:10] I just have had good luck with the support and such [20:10] which kernel is used in 9.04 ? [20:11] wizardslovak: want to careful on just looking at price. iv seen places just fall off the world, when you against a time line. cant get ahold of them sometimes [20:11] orudie, 2.6.28 [20:11] i used to have godaddy , but when my domain expired , and wanted to get it again i couldnt get no reply from customer support [20:13] well i think i will go for godaddy for domain registration [20:14] can i pay on moniker with paypal? === jes__ is now known as XiXaQ [20:20] ok so i got .us for 3 years for $22.74 [20:21] beawesomeinstead: how long will it take with moniker for my domain to be registered? i see payment has been cleared out [20:29] wizardslovak: like 5-10 minutes [20:29] ok so lets wait [20:29] check this , should i folow it to make web server ?? http://net.tutsplus.com/tutorials/php/how-to-setup-a-dedicated-web-server-for-free/ [20:31] wizardslovak-> are you going to host it from home ? [20:31] well not now [20:31] wizardslovak: it's pretty standard configuration that works out-of-the-box with minimal config requirements, i bit disagree with partitioning section [20:32] wizardslovak: if you don't have physical access this tutorial is pretty useless [20:32] *to server [20:32] physical access?? [20:32] its right next to me , running [20:32] lol [20:33] i got router and server , how will other PCs from WAN see my server? [20:33] with port forward [20:33] oh, i thought "are you going to host it from home ? well not now" means that you don't :-) [20:33] i would use DMZ option [20:34] *demilitarized zone [20:34] beawesomeinstead: first i want to learn server , when i will be comfortable enought with it i will host it [20:34] i have 30mbit isp with static ip [20:34] my router is dd-wrt [20:35] * beawesomeinstead is jealous [20:35] wizardslovak-> which isp ? [20:35] optonline? [20:35] yes [20:35] i have the same thing, but home package [20:35] that bussiness package [20:36] yeah a friend of mine uses it, they restrict access to mail from overseas :-p [20:36] its really not worth to pay opt online to have a server at home [20:36] i learned that over the years [20:36] oruwork: for now its good, and still its for learning purposes [20:36] well i kinda dont pay it lol [20:37] my friends needed internet for wireless so i carge him $10 a month [20:37] lol [20:37] make sure you have a UPS connected to the box [20:37] uninterupted power source [20:38] ok so lets talk about that DMZ [20:38] dont use it [20:38] do you have the server installed ? [20:38] yes i do with openssh and LAMP [20:39] oruwork: why not? [20:39] ok so forward port 80 to the server box [20:39] cause DMZ disables the firewall, all ports are open [20:39] so if i will forward it to server , will other PCs on LAN be able to browse internet? [20:39] oruwork: then he could use iptables/ufw to learn how to firewall [20:39] yes beawesomeinstead [20:40] can i forward other port? or it has to be 80 only? [20:40] which other port? [20:40] well i am just curious [20:41] wizardslovak: you'll probably need 22 -- ssh, if you want to control your box from outside [20:41] for now you only need port 80 [20:41] yes 22 also [20:41] ok so if you can guide me i will appreciate it [20:41] lets do 22 first [20:42] wizardslovak: something like http://www.dd-wrt.com/wiki/index.php/Port_Forwarding [20:42] lol i know how to forward port in ddwrt [20:42] i though you got to do something in server [20:43] no [20:43] ah, no, you do not [20:43] just forward port 80 and 22 [20:43] you know the ip of the server right ? [20:43] yes [20:43] thats how you log to server via ssh [20:43] ssh xxx.xxx.xxx.xxx [20:44] sorry guys, i'm too sleepy, gotta go to bed ... [20:44] which box do you ssh from ? [20:44] later beawesomeinstead [20:44] from laptop [20:44] which OS ? [20:44] beawesomeinstead: good night [20:45] oruwork: kubuntu [20:45] uhu nice [20:45] ok port 22 is forwarded to server [20:45] ok [20:45] now port 80 [20:45] well laptop is dualboot , but i couldnt make openssh work in xp [20:45] and give me the ip or domain to try ti [20:46] you can use putty.exe in xp [20:46] ok but as i said will other computers be able to browse internet?? [20:46] yes [20:47] ok port is open [20:47] ok do you have a domain set up [20:47] well i bought domain but its not showing up yet [20:48] ok whats your ip [20:48] alhough i have there test site on server [20:48] i sent it to you in PM [20:48] there is sentence on that site [20:48] sent me what it says and i tell you if it is [20:49] right [20:49] it works here [20:50] it works on lan ? [20:50] yes [20:50] it shows it works right ? [20:50] yes i see the site [20:50] i cant access it [20:50] i ussume if you did the port forward correctly, your isp is blocking it [20:50] wait [20:50] blocking port 80 [20:51] you can go to optimum online control panel and open it since you have the business package [20:51] i forgot to unblock it [20:51] optimum boost [20:52] :) [20:52] give me a sec [20:54] damn i forgot my optimum id [20:55] lol [20:55] call them have them unlblock it for you [20:55] call the business number, this way you'll get in touch with someone much quicker [20:55] even if you dont have a business account, they'll still help you out [20:56] problem is my phone is broken lol [20:56] i am trying to get them on live chat but it says "your os isnt supported" lol [20:56] wait ill use my bros xp [20:56] brb [21:05] ok i got it [21:05] i didnt have account created lol [21:05] i see that ports 80 and 25 are off [21:07] oruwork: still here?? [21:07] yup [21:07] port 25 is for mail [21:07] email [21:07] ok i see [21:07] so unless you plan on setting an email server, leave that alone for now [21:08] for your own protection [21:08] so i will open 80 [21:08] yup [21:09] ok it says i have to restart modem [21:09] but try now [21:09] i will restart my modem [21:09] brb [21:09] yup [21:09] it works [21:10] ok now it should work [21:10] try it [21:12] it works [21:12] baran ? [21:12] hehe so it works [21:12] baran as in sheep ? [21:12] male sheep ? [21:13] yes [21:13] ok [21:13] russian ? [21:14] polish [21:14] so my server works heheh [21:14] yup [21:14] set up vhosts [21:15] you can run multiple domains on one server [21:15] separate websites [21:15] all on one server [21:15] now what should i do so when people will type my web.us it will redirect them to my server [21:16] so web.us is your domain ? [21:16] nah domain is wizzy.us [21:16] ok, who did you buy the domain from ? [21:16] moniker.com [21:17] but it still doesnt show [21:17] what do you mean doesnt show ? [21:18] the nameservers are set up [21:18] now you need to set up DNS records [21:18] not in your server, but in their control panel [21:18] when i log into account and i click on "my domains" i dont see wizzy.us [21:18] hmm [21:19] wizardslovak, it might now show up for 24-48 hours [21:19] ooo so i gotta still wait [21:19] s/now/not [21:20] well ok if i will see it there [21:20] how do i know which name servers i myne? [21:20] dig wizzy.us NS [21:20] in dd-wrt i see dns 1,2,3 [21:21] not in your router [21:21] i think those are my nameservers???! [21:22] the nameservers of your domain will show if you type 'dig wizzy.us NS' [21:22] where should i type it? [21:22] in the terminal window [21:22] of server? [21:23] you can [21:23] anyone can type it [21:23] ok i see ns1.domainservice.com [21:23] yup [21:24] so now you have to point your domain to the ip adderss [21:24] the one you gave me [21:24] so when my domain will show in moniker i should change their nameservers , to myne?! [21:24] but you say that your control panel is not ready yet [21:24] no dont change the nameservers [21:26] well its not yet, but i iwant to know what should i do later when it will be [21:28] if your package includes DNS services they should give you the ability to point your domain to your server's ip [21:28] it has "manage DNS" [21:28] ok go in there [21:29] there you add ip addresses [21:30] well still shows error [21:30] i really dont know how long its gonna take for them to get it set up [21:30] try contacting them and find out [21:30] well some said 10 minutes some 48 hours [21:31] ok so basically i made my own server (with your help) [21:32] yeah there is much more on your journey though [21:32] well i am happy aNYWAYS [21:32] ok do you still have time? [21:32] yup [21:33] funny think i got server and domain but dont have web site lol [21:33] all of files which are coming with website should go to /var/www??? [21:34] yeah, but you should set up vhosts [21:34] virtualhost? [21:34] so you'll have [21:34] separate websties [21:34] yup [21:34] like [21:34] but i will have only one [21:34] /var/www/site1.com /var/www/site2.net /var/www/site3.org [21:35] set it up its not gonna hurt for the future [21:35] Lets say I have 3 dd images ... sda.img sdb.img sdc.img and they are of the drives which compose a raid5. Any way to make for instance an md device using just the images? (without copying them back to 3 actual drives) [21:35] ok so make only folders? [21:36] ok my domain name is active [21:39] well i see my domain [21:41] i see all dns for my domain and they are same as in my server [21:41] where should i change ip to my servers ip [21:43] i should change host name in my server? [21:44] no [21:44] http://pastebin.com/m176e6558 [21:45] this is an example from my DNS manager === ahe_ is now known as ahe [21:45] ok cause over here it asks me for host name , ip and record type [21:46] lets change my domain name on server [21:46] type 'hostname' [21:46] it should give you your host name [21:46] ok i got it [21:46] UbuntuServer [21:46] ok [21:47] i can use it [21:47] right [21:47] what are the choices for record type ? [21:47] adress,cname,ms,txt [21:47] i selected adress [21:48] ok [21:48] and now my ip,right? [21:48] yup [21:48] the external ip [21:48] ok done [21:49] you have to wait for it to propagate [21:49] well i typed wizzy.us but it doesnt show [21:49] gotta give it time [21:50] could take upto 1 hour [21:50] ok [21:50] so when someone will type wizzy.us , dns will convert it to ip and send it to my server , server will then open index.html [21:50] right? [21:51] yup [21:51] ok [21:51] how to make those vhosts? [21:51] mkdir /var/www/wizzy.us [21:51] ?? [21:52] wait [21:52] wizardslovak, google apache vhost, they are conf files in /etc/apache2/sites-enabled/ [21:52] foxbuntu thank you [21:53] although i prefer when someone actually guide me thru process [21:53] what is good about have vhosts? [21:54] wizardslovak, the reason I told you to goolge for it was because a vhost is a custom config file based on your needs, the documentation will explain the different pieces of the vhost so you can make an educated decision [21:54] oooo [21:54] thank you [21:56] New bug: #372399 in samba4 (universe) "tevent packaging problems in samba4" [Undecided,Fix committed] https://launchpad.net/bugs/372399 [21:56] oruwork: maybe i should do firewall in server?! [21:56] no [21:56] oruwork, why? [21:57] y not? [21:58] for what ? [21:58] not getting vruses or stupid adds [21:58] its an external facing apache server correct? [21:58] wizardslovak, firewalls are not web content filters [21:59] but he only has like 2 ports open on his server [21:59] yes 22 and 80 [21:59] oruwork guided me , thankk you [21:59] how are they filtered now? [21:59] with his router [22:00] lol, filling up mpd's database is taking so long [22:00] so there is already a firewall/NAT device in place? [22:00] ...then no ufw is not needed [22:01] yes i got ddwrt router [22:01] k [22:01] then you should be fie [22:01] s/fin/fine [22:02] ok oruwork , site still doesnt work [22:02] ok i'm out now, so maybe foxbuntu can take over ? [22:02] lol thank you for your help [22:02] oruwork, we'll see I have run soon too [22:02] lol [22:02] well everything is done [22:02] wizardslovak-> if you have done everything correctly and i think you have, you should give some time for the domain to propagate and update its domain records [22:03] ok [22:03] one more think [22:03] so i will make folder /var/www/wizzy.us [22:03] wizardslovak, internet root servers take anywhere from 6-48 hours to update domain names [22:04] wizardslovak, no [22:04] then put index.html and files to that folder [22:04] and change apache conf [22:04] change /etc/apache2/sites-enabled/default [22:05] ok [22:05] open it with text editor [22:05] yup [22:05] nothing is in there [22:06] i am using nano [22:06] perhaps its 000-default [22:06] change /etc/apache2/sites-enabled/00-default [22:06] er [22:06] change /etc/apache2/sites-enabled/000-default [22:07] ok i see it [22:07] what should i change there [22:07] anything that refers to the path /var/www make it /var/www/wizzy.us [22:08] document root, directory [22:08] shouldnt i make flder first? [22:09] you can change it then add the dir [22:09] you will need to have apache re-read the conf before it takes effect [22:10] ok [22:10] use this to add the dir: sudo mkdir /var/www/wizzy.us && sudo chown root:www-data /var/www/wizzy.us [22:10] done [22:10] then do this: sudo /etc/init.d/apache2 force-reload [22:10] then you should be set [22:12] ok it says done but i got also this "Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName" [22:12] wizardslovak, thats ok, it wont effect the server [22:13] wizardslovak, you can google it to learn more about it and why it happens [22:13] wizardslovak, I don't have enough time remaining to explain it sorry [22:14] ok thank you for help [22:18] wizardslovak, I do want to point something out, although I, and most of the people here are generally willing to help answer questions, if someone asks you to google it it usually because its easily found and well documented. As everyone here is helping on a voluteer basis, documented answers are commonly pointed out. [22:18] ok sorry about it [22:19] wizardslovak, its ok, I am pretty easy going about stuff, but some aren't and I don't want you to get discouraged by that. Google is an Ubuntu User's best friend [22:19] hehe [22:19] thnks for warning [22:20] np [22:20] I have to go now. [22:20] gl with the server. [22:20] ok thank you for your help [22:20] have a nice day then [22:30] if my isp has port 25 blocked, is there any possible way i can run a mailserver? i found not problems in recieving mail, but outbound on 25 is blocked...any known workarounds for this? [22:30] sure [22:30] in postfix's master.cf enable port 587 [22:30] ivoks, heya master, I've been working on other 2 packages already :) [22:31] RoAkSoAx: great [22:31] ivoks, what is port 587? [22:31] billybigrigger: also called submission [22:32] #submission inet n - - - - smtpd [22:32] uncomment that line? [22:33] thats the only entry for "submission" i found [22:33] yes [22:33] should i comment out the above line for smtp? [22:33] or just leave everything as it is [22:34] leave it [22:36] i dont think its defaulting to port 25 [22:36] err 587 [22:36] did you restart postfix? [22:36] May 5 15:35:32 alixandria postfix/smtpd[4884]: disconnect from alixandria[127.0.0.1] [22:36] May 5 15:36:02 alixandria postfix/smtp[5037]: connect to mx3.hotmail.com[65.55.37.72]:25: Connection timed out [22:36] May 5 15:36:32 alixandria postfix/smtp[5037]: connect to mx3.hotmail.com[65.55.37.120]:25: Connection timed out [22:37] still using port 25 [22:37] yes i did a sudo postfix reload [22:37] that's outbound traffic [22:37] or is a init.d/postfix restart required? [22:37] yeah [22:37] thats my problem [22:37] i can't send mail on port 25 [22:37] well, nothing much you can do there [22:37] haha [22:37] k [22:37] thats what i was asking, if my isp has port 25 blocked is there any workarounds? [22:38] what isp you got? [22:38] shaw [22:38] im in canada [22:38] lol my isp allows to use 25 and 80 [22:38] 80 is no problem here [22:38] 25 is the only port i've had a problem with [22:39] i thought your isp is blocking incomming traffic on port 25 [22:39] and it must have just been recently, cause i remember when i first setup a mailserver a few years ago with the same isp it worked, i just didnt have a decent domain [22:39] billybigrigger: you have to use isp's relay host [22:39] call them and ask them [22:39] nope, i can recieve mail to billybigrigger@thefrozencanuck.ca (my domain) and mailserver [22:39] but i can't send out [22:40] wizardslovak, it says on the website for unblocked port 25 access i need a business account, which is gay, like a 7/1 line, for about what im paying now for a 15/1 line [22:40] maybe even 7/512 iirc [22:41] ivoks, how do i use my isp's relay host? [22:41] billybigrigger: you add relayhost=relay.host.com [22:41] to my postfix master.cf [22:41] main.cf [22:41] or, even better [22:41] dpkg-reconfigure postfic [22:41] dpkg-reconfigure postfix [22:43] which config type should i select? i had internet site chosen before [22:43] read, it's in english [22:43] well i don't know why your asking me to reconfigure postfix in the first place [22:47] k my sending works [22:47] now recieving doesnt haha [22:47] can someone send a test message to me billybigrigger@thefrozencanuck.ca [22:47] ivoks, ok, i setup the relay, thanks [22:48] ivoks, i take it i can comment that submission line [22:48] yes, that doesn't have anything with sending mail to other mail servers [22:49] does anyone know what port 2000 is? i think i have way too many ports open, a bunch opened up when i installed dovecot-postfix for some reason [22:50] 2000/tcp open callbook [22:50] netstat -natp [22:50] netstat -natp | grep 2000 [22:50] dovecot-imapd opened imap, imaps, pop3, pop3s, smtp and managesieve [22:50] dovecot-postfix, that is [22:51] hmm, port 2000 isnt listening on any hosts... [22:51] tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN - [22:51] it's listening on all ips [22:51] oooh [22:51] how do i find what service is running on a specific port? [22:52] put sudo in front of netstat [22:52] tcp 0 0 0.0.0.0:2000 0.0.0.0:* LISTEN 3367/dovecot [22:52] mail [22:52] hmm [22:52] that's managesieve [22:52] can i paste my nmap output here or pastebin it? [22:53] no [22:53] i told you [22:53] that's managesieve [22:53] don't know if thats safe to do...but i think i have too many ports open [22:53] alright then [22:54] billybigrigger: well i pay $65/month for 30mbit with static ip and 80/25 ports [22:54] where? [22:54] canada or us? [22:55] us [22:55] there ya go [22:57] billybigrigger: if you installed dovecot-postfix, you should have 6 open ports [22:57] maybe 7 if we include ssh [22:57] yes 6 [22:58] pop3, pop3s, imap, imaps, smtp and managesieve [22:58] yes [22:58] so, that's not too many [22:59] and i'm not sure other will be able to send you an email [22:59] there's no MX record for thefrozencanuck.ca [22:59] there was [23:00] anyway, i have work to do [23:00] take care [23:00] thanks [23:00] later [23:00] What might cause SSHD to restart like 10 seconds after it got started upon boot? === p_quarles is now known as p8quarles