[00:45] <Bo7> nvm Q. gsh
[03:24] <ejat> hi
[03:24] <ejat> error: failed to connect to the hypervisor
[03:24] <ejat> in hardy
[03:25] <ejat> i enabled the backport
[03:34] <Doorman352> Anybody use Kaspersky Enterprise?
[03:38] <twb> Doorman352: isn't that a Windows thing?
[03:38] <twb> !anybody
[03:40] <Doorman352> Kaspersky is for everyone, since Im adding Ubuntu servers I wanted to know if anyone has used it on linux.
[03:42] <twb> Since I don't have any Windows desktops, I don't bother with virus scanning.
[03:42] <twb> See also: http://linuxmafia.com/~rick/faq/index.php?page=virus
[03:44] <twb> I have seen widespread use of clamav for when you are providing, say, a Unix fileserver to a bunch of Windows desktops.
[03:45] <twb> For security of the server itself, you want to look at "intrusion detection" systems, rather than virus scanners.
[03:46] <Doorman352> Kaspersky runs on windows, Linux, etc so I figured I use it.
[03:59] <Bo7> Hi everyone!
[04:11] <ejat> virtual machine not booting from cdrom / iso ..
[04:11] <ejat> anyone can help me ?
[04:13] <ejat> the console came up .. but didnt booting the cdrom / iso
[04:13] <twb> ejat: what virtualization technology?
[04:13] <ejat> kvm
[04:14] <twb> Don't you just pass -boot d ?
[04:14] <ejat> im using the virtual machine manager
[04:14] <twb> I'm not familiar with virt-manager, sorry
[04:15] <twb> AFAIK the backend needs you to specify what to boot from BEFORE starting the VM
[04:15] <twb> And it defaults to the hard disks
[04:21] <ejat> ic
[04:22] <ball> I'm struggling to find the .torrent file for Ubuntu Server (amd64, iso)
[04:25] <ball> Aha!  Found it.
[04:25] <ball> Completely not where it should have been though.
[04:26] <Bo7> So I was reading about UncomplicatedFirewall and got a bit confused about this: http://paste.ubuntu.com/321252
[04:31] <Bo7> you guys know which page is correct, or if I got it wrong?
[04:54] <twb> Bo7: I can't answer your question, but I can teach you how to find out
[04:54] <twb> Bo7: first, put your ufw config back to however you found it.
[04:54] <twb> Bo7: then, run "iptables-save" and pastebin the output
[05:06] <billybigrigger> can someone help me out with mx records?
[05:09] <bogeyd6> yes billybigrigger
[05:09] <bogeyd6> !ask | billybigrigger
[05:10] <billybigrigger> ok, last time i setup my mailserver all the mail was to thefrozencanuck.ca, and this was my MX record
[05:10] <Bo7> twb, oh the firewall works allright for me,  I was just curious about what the default state of ufw was, the documentation says different things.
[05:10] <billybigrigger> now i want to be able to setup my mail clients to point to mail.thefrozencanuck.ca, and not the "sally" i had setup as a hostname
[05:10] <bogeyd6> so you are looking for
[05:11] <billybigrigger> so do i create a new AHOST for mail.thefrozencanuck.ca
[05:11] <billybigrigger> and then just make my MX record for mail.thefrozencanuck.ca?
[05:12] <bogeyd6> you create an A record for the mail.thefrozencanuk.co and the MX record changes to mail.thefrozencanuck.ca
[05:12] <billybigrigger> right on
[05:13] <bogeyd6> mail.thefrozencanuk.ca A ip.addy
[05:13] <bogeyd6> heh
[05:13] <bogeyd6> mail.thefrozencanuk.ca.
[05:14] <bogeyd6> thefrozencanuk.ca. IN MX 10 mail.thefrozencanuk.ca
[05:14] <bogeyd6> replace 10 with whatever priority system you want to use
[05:16] <bogeyd6> i keep forgettting to type the trailing .
[05:17] <billybigrigger> ok, now how do i confirm this is all setup?
[05:17] <billybigrigger> i need to use the dig command or something here?
[05:19] <bogeyd6> billybigrigger give it like 10 minutes and then check www.nwtools.com
[05:19] <bogeyd6> billybigrigger or http://www.mxtoolbox.com/
[05:20] <bogeyd6> billybigrigger you can also use "host -t MX thefrozencanuck.ca
[05:21] <billybigrigger> billybigrigger@cabo:/etc/default$ host -t MX thefrozencanuck.ca
[05:21] <billybigrigger> thefrozencanuck.ca mail is handled by 10 mail.thefrozencanuck.ca.
[05:21] <billybigrigger> :)
[05:22] <bogeyd6> :PPPP
[05:23] <bogeyd6> billybigrigger im just saying that you should also set an A record for just plain old thefrozencanuck.ca
[05:23] <billybigrigger> i have one
[05:23] <billybigrigger> Host  	Points To  	TTL  	Actions
[05:23] <billybigrigger> 	@ 	68.146.139.247 	1/2 Hour
[05:24] <billybigrigger> @ = thefrozencanuck.ca
[05:24] <billybigrigger> quick poll, what do you prefer Maildir or mbox?
[05:25] <billybigrigger> i have always setup Maildir, not too familiar with mbox, and was going to try it on this setup
[05:25] <billybigrigger> should i try out mbox or stick with Maildir?
[05:29] <billybigrigger> bogeyd6, ?
[05:37] <bogeyd6> billybigrigger i have no preference
[05:37] <bogeyd6> ive had a few scotches so im in and out
[05:38] <billybigrigger> of conciousness?
[05:38] <bogeyd6> !dovecot | billybigrigger
[05:38] <billybigrigger> yeah i have postfix and dovecot installed
[05:38] <billybigrigger> but obviously not configured
[05:38] <bogeyd6> i prefer using ZCS personally, i dont use dovecot, but dovecot is the official maildir package in ubuntu server
[05:39] <billybigrigger> jesus i hate evolution
[05:39] <bogeyd6> oh im watching Lock n Load with r leee ermey :)
[05:39] <billybigrigger> lock n load
[05:39] <billybigrigger> don't think i've seen it
[05:39] <bogeyd6> if you like military stuff it is highly recommended
[05:39] <billybigrigger> oh yeah
[05:39] <billybigrigger> who's in it?
[05:40] <bogeyd6> r lee ermey
[05:40] <billybigrigger> what year did it come out? 1990?
[05:41] <bogeyd6> 2009
[05:41] <bogeyd6> tv series
[05:41] <billybigrigger> oh its a tv series
[05:42] <bogeyd6> all of your stuff resolves but your www, blog, and smtp isnt responding
[05:44] <billybigrigger> smtp is handled by my ispo
[05:44] <billybigrigger> isp
[05:44] <billybigrigger> have to use shawmail.cg.shawcable.net as a relay for my outgoing mail
[05:45] <billybigrigger> isp blocks port 25 on me :(
[05:45] <bogeyd6> ok cool
[05:45] <billybigrigger> www. and blog. don't respond?
[05:45] <billybigrigger> oh
[05:45] <billybigrigger> duh, haha have not setup apache yet
[05:46] <bogeyd6> :P
[05:46] <billybigrigger> i have a full complete server setup, mail/ftp/web/mysql all that jazz already
[05:46] <billybigrigger> but its on a 40GB virtual hard disk
[05:46] <bogeyd6> time to put some work in
[05:46] <billybigrigger> so i decided i'd start fresh and do it on a dynamic hdd
[05:47] <billybigrigger> im bored and have nothing to do for a few days :) so i don't mind starting over
[05:47] <bogeyd6> i prefer to use VMware to run any server
[05:47] <billybigrigger> whats the difference between vmware or vbox?
[05:47] <bogeyd6> hosted on a san
[05:47] <billybigrigger> thought they were both pretty much the same
[05:47] <bogeyd6> stability and compatibility. vmware being the superior, vbox being simpler
[05:48] <twb> billybigrigger: a few letters
[05:49] <twb> Ubuntu recommends KVM for full virtualization.
[05:49] <bogeyd6> !kvm | billybigrigger
[05:49] <twb> Thaks.
[05:49] <bogeyd6> :)
[05:49] <twb> (Gah!  More coffee!)
[05:50] <bogeyd6> i still like vmware
[05:50] <twb> I have had countless bad experiences with VMware, and VMware 2's move of putting everything inside tomcat didn't impress me favourably.
[05:51] <twb> I daresay VMware is more attractive if you're running Windows guests in a Windows host.
[05:54] <twb> Likewise I suspect both VMware and Virtualbox are more attractive if you're wanting to run virtual machines on your overspecced laptop (rather than on a server in the rack), and you want AIGLX and USB and such to work.
[05:54] <billybigrigger> hmm hmm
[05:55] <billybigrigger> can't connect to mail.thefrozencanuck.ca
[05:55] <twb> As for me, qemu's features like -kernel/-initrd/-append and its raster-less tty emulation (i.e. -curses or PTYs) are killer features.
[05:55] <billybigrigger> in either thunderbird or evo...
[05:55] <twb> billybigrigger: you should try netcat/socat first, since that'll tell you if there's anything there at all.
[05:55] <billybigrigger> nmap shows 143 and 993 are open, and router is routing 143 and 993 to 192.168.1.111 which is correct....
[05:55] <twb> "nc mail.thefrozencanuck.ca submission" or whatever
[05:56] <billybigrigger> billybigrigger@cabo:/etc/default$ nc mail.thefrozencanuck.ca submission
[05:56] <billybigrigger> mail.thefrozencanuck.ca [68.146.139.247] 587 (submission) : Connection refused
[05:57] <twb> billybigrigger: I'm assuming you're actualy using submission for SMTP/SSL
[05:57] <twb> You seem to be talking about imap2 and imaps
[05:58]  * billybigrigger needs to look over postfix config
[05:58] <billybigrigger> setup postfix last night and dovecot today...so its not too fresh in my memory
[05:58] <billybigrigger> i haven't done anything for smtp
[05:59] <twb> billybigrigger: so you'd change "submission" to "imaps" or "993" then
[05:59] <twb> Not that it matters, since you indicated that nmap can see them.
[07:51] <ESEDU> How do I know is dns server working properly, or are my configurations right
[08:06] <ESEDU> How do I know that DNS is working properly
[08:07] <_ruben> uhh .. you ask the dns server a question and see if you get the right result?
[08:08] <_ruben> and "working properly" is about as vague as it can get
[08:08] <GammalSokk> mine \ NoPE
[08:08] <twb> _ruben: "how many roads must a man walk down?"
[08:15] <ESEDU> _ruben: I configured in named.conf zone for our school network "ele.local" and made a zone file "db.ele". Now what should some up anywhere to make me sure that I have actually configured a master server for the network "ele.local"
[08:15] <ESEDU> some=come
[08:16] <ESEDU> _ruben: its my thesis see, and i have to proof that I have now done a mster server for ele.local, so how do i know, i think ive done all the work, but wheres the trophy
[08:17] <ESEDU> u no
[08:27] <_ruben> ESEDU: assuming you have added some (bogus) records (for example: bogus.ele.local) to the db.ele zonefile and the ip address of the nameserver is 1.2.3.4, do: host bogus.ele.local. 1.2.3.4
[08:29] <ESEDU> _ruben: and what should I see
[08:29] <_ruben> the ip address you specified in the zonefile
[08:30] <ESEDU> _ruben: the address for the NS record?
[08:30] <ESEDU> in the zone file
[08:30] <_ruben> ESEDU: do you know how dns works?
[08:30] <ESEDU> somewhat
[08:31] <_ruben> lets start by putting your named.conf and db.ele on a pastebin
[08:31] <ESEDU> now pastebins are a totally diffrent thing
[08:32] <ESEDU> never heard
[08:32] <_ruben> !pastebin
[08:33] <ESEDU> u want me to give pictures
[08:35] <ESEDU> im so confused!
[08:35] <_ruben> forget about the screenshot part, the important part was: "pastebin is a service to post multiple-lined texts so you don't flood the channel. Ubuntu pastebin is at  http://paste.ubuntu.com" ... you copy/paste the contents of a file to that site so others can see/read it
[08:38] <ESEDU> _ruben: ok i put part of named.conf there.
[08:40] <alvin_> ESEDU: I'm no expert on DNS, but I've configured some easy servers (dnsmasq). Just a warning because you are using ele.local. The .local extension is used by Avahi! (http://avahi.org/wiki/AvahiAndUnicastDotLocal)
[08:42] <alvin> This can screw domain lookups if you are using avahi
[08:46] <ESEDU> _ruben: did u check out the pastebin
[08:47] <_ruben> ESEDU: no, because you didnt give us the url of your post
[08:48] <atomic_1> you need to paste named.conf.local & named.conf.options too
[08:48] <atomic_1> in whole
[08:48] <ESEDU> _ruben:http://paste.ubuntu.com/321349/
[08:48] <atomic_1> can't really see just from a named.conf snippet
[08:49] <xperia2> hello to all. i have a litlle a non specific ubuntu server question. need to register a .com domain name. can anybody say me what is the best registerer for that ? who has good experience with .com domains. thanks in advance for reply
[08:49] <ESEDU>  atomic_1: see whay
[08:49] <ESEDU> t
[08:50] <xperia2> ESEDU: i see that you have a bind9 specific question. what exectly do you want to have ?
[08:50] <atomic_1> you can also try #bind, but those guys are brutal :)
[08:50] <xperia2> yes i can confirm it :-)
[08:52] <ESEDU> xperia2: A master server for ele.local network
[08:52] <ESEDU> _ruben: http://paste.ubuntu.com/321357/
[08:52] <_ruben> snippet looks ok, your choice of filenames is uhm.. odd
[08:53] <_ruben> zonefile looks ok too
[08:53] <_ruben> host server.ele.local. 1.2.3.4 should return 10.130.140.241 (assuming your dns server is 1.2.3.4)
[08:53] <_ruben> on the box itself you could use 127.0.0.1
[09:01] <tangentcollision> how would I get php with my apache installation?
[09:06] <twb> tangentcollision: install it
[09:07] <tangentcollision> well, of course, how did I not see the blatantly obvious before?
[09:07] <tangentcollision> what package would I have to install
[09:07] <tangentcollision> that's more of what I was asking
[09:09] <tangentcollision> twb: if you answer that question, I'll forgive you for being a jackass
[09:09] <twb> I don't remember offhand.
[09:09] <xperia2> tangentcollision: in the wiki page of ubuntu is all described https://help.ubuntu.com/9.10/serverguide/C/php5.html
[09:09] <twb> apt-cache search apache.*php
[09:10] <twb> That finds libapache2-mod-php5
[09:10] <xperia2> https://help.ubuntu.com/9.10/serverguide/C/index.html
[09:12] <tangentcollision> you are quite forgiven good (sir/madame)
[09:13] <tangentcollision> oh crap, I forgot, ubuntu upgraded in the past year, hasn't it
[09:14] <tangentcollision> apt-get upgrade
[09:14] <tangentcollision> oops
[09:16] <_ruben> ubuntu "upgrades" twice a year
[09:16] <ESEDU> _ruben: http://paste.ubuntu.com/321371/
[09:16] <tangentcollision> I forget this
[09:16] <tangentcollision> anyways, I'm going to upgrade, good evening to all
[09:26] <Montjoie> hello i have a karmic server which has many udev --daemon and /lib/udev/watershed sh -c /sbin/lvm vgscan; /sbin/lvm vgchange -a y that appears
[09:27] <Montjoie> i saw similar bugs in bugzilla but there are too old for be for karmic
[09:27] <Montjoie> any idea ?
[09:41] <ESEDU> http://paste.ubuntu.com/321371/
[09:41] <ESEDU> does that look right?
[09:41] <ESEDU> for a reverse zone file
[09:46] <_ruben> yup
[10:12] <ESEDU> _ruben: how do I know that they work for sure then?
[10:40] <atomic_1> ESEDU: you can use the rndc command, check syslog
[10:41] <atomic_1> and dig offcourse
[10:42] <atomic_1> i like to setup separate log channels for query and named
[10:43] <atomic_1> you can do this by using logging in named.conf
[10:43] <atomic_1> keeps things clean
[10:44] <atomic_1> to test, add some entries by hand in the zones, reload them
[10:45] <atomic_1> and check forward and reverse lookup from another machine
[10:47] <Montjoie> i solved my problem with a dpkg-reconfigure udev, thanks for your help
[10:52] <eason> Hi all, could some gurus give me tips about setting PXE installer server for Ubuntu 9.10 desktop?
[10:55] <_ruben> eason: got any more specific questions? been a while since i set up my pxe environment (only using it for servers install currently though)
[10:55] <ESEDU> atomi c_1: ok, hypothetically lets say ive done this, now how am i reassured?
[10:59] <tangentcollision> odd, I didn't need to restart my server after apt-get upgrade
[10:59] <tangentcollision> is that normal?
[11:00] <eason> Ruben: I have installed Dhcp, tftp, Nfs, apache on server side,  and copied linux kernel and initrd in tftpboot. Client can boot from lan to choose install menu. But client is not able to install Ubuntu desktop from lan
[11:02] <_ruben> tangentcollision: yes, as only kernel upgrades require reboots generally
[11:02] <eason> in client side, it always yield that can't find mirro
[11:02] <ESEDU> _ruben: would it make any difference that the network allready has a main server
[11:02] <_ruben> eason: (where) do you specify the mirror?
[11:03] <eason> How can I configure to use my web server as mirro?
[11:04] <_ruben> by selecting it during the installation process?
[11:04] <_ruben> bbiab .. lunchtime
[11:05] <eason> Can I set it in preseed file as I hope it can be installed automatically?
[11:24] <X-Seti> hello
[11:25] <X-Seti> I have an odd problem, but i am sure you have heard this before, I have had my server attached all this week, I have ubuntu-server 9.10
[11:25] <X-Seti> attacked.. oops
[11:25] <X-Seti> I am not sure how there doing, it besides the box shutting down, or totally locking up
[11:26] <X-Seti> reading on google, i get the idea that its the ftp server their going after.
[11:26] <alvin> X-Seti: So, the attack was successful?
[11:26] <X-Seti> yeah, 3 times now, same time every day
[11:26] <X-Seti> i only noticed this today
[11:27] <alvin> What ftp server are you using?
[11:27] <X-Seti> proftpd
[11:27] <alvin> Is it anonymous?
[11:27] <X-Seti> no, just normal user and passworded accounts
[11:27] <X-Seti> i took off anon stuff
[11:28] <alvin> Are they doing a dictionary attack? (guessing passwords)
[11:28] <alvin> If not, it must be a vulnerability. Also, ftp passwords are easy to sniff.
[11:28] <X-Seti> not sure, i have bounce attacked in the logs, and what ever server is running, like they scanned anything that is running and tried their luck
[11:29] <X-Seti> well i cant really shut down the ftp server, change the passwords, they came onto the ircd i have running on there, and tried to send me a file too, which suggested that ftp wasnt all that successful
[11:30] <alvin> Automated attacks are normal. (This pc is currently under attack (ssh). The cracker tries to guess the password for 'root')
[11:31] <X-Seti> killing the server is a first, crashing it and making it usless till i reboot is another
[11:31] <alvin> That's weird, yes.
[11:32] <X-Seti> i use modified hardware, i wanted to go the eco way, the box itself uses 70watt, total
[11:32] <alvin> Im must admit that I'm not familiar with proftpd.
[11:32] <alvin> atom?
[11:32] <_ruben> eason: yeah, mirror can be preseeded just fine
[11:33] <X-Seti> old modded laptop with everything removed, even the screen
[11:33] <X-Seti> i took the motherboard out and put it in a desktop case.
[11:34] <X-Seti> i removed everything that used power, added more usb ports for the back of the case, and its but fine for 6 years now
[11:34] <X-Seti> till now
[11:34] <alvin> X-Seti: Now, that is a cool idea :-)
[11:34] <X-Seti> saved me alot of money hosting sites
[11:34] <eason> ruben: could you tell what is directory structure of mirror server?
[11:35] <X-Seti> i noticed that ubuntu 9.10 is heavier, 8.04 wasnt so resource depanding..
[11:35] <_ruben> eason: you shouldnt have to worry about that, assuming you're using a "supported" method of creating a local mirror, im using debmirror myself currently, but i might just switch to a full rsync someday
[11:35] <eason> as installer always yield can't find mirror, maybe some thing wrong in my mirror server
[11:36] <_ruben> eason: check your access logs to see what its failing on
[11:36] <eason> I just copied Ubuntu desktop cd into web directory
[11:36] <alvin> X-Seti: My slowest machine currently running karmic server is an atom. No speed problems, except when you use Qemu (no VT, so that's entirely normal)
[11:37] <alvin> But back to your crashes. I have no idea. Did you check /var/log/auth.log
[11:37] <X-Seti> i run 2 apache servers, tomcat, ircd (custom unrealircd), proftpd, sshd, gother and thats it
[11:37] <X-Seti> i never got email to work
[11:38] <X-Seti> but then, when i had email running on my older server (Amiga4000t) all i got was spam)
[11:38] <alvin> That's not only ftp. Do you know how they got in?
[11:39] <X-Seti> not sure, i could install firestarter
[11:39] <alvin> !firestarter
[11:39] <X-Seti> if these unknowns happen, does ubuntu log them anywhere
[11:39] <_ruben> eason: ah, that probably wouldnt work indeed, not sure how/if a cd can be turned into a webmirror
[11:39] <alvin> Hmm, that's a gui application. No need to install X. The damage is already done, so I would check existing logs
[11:40] <alvin> Yes, /var/log/auth.log is for security
[11:40] <X-Seti> i do have gnome running on there, i was working on porting an old amiga app to ubunut
[11:40] <X-Seti> lets have a look at that
[11:42] <X-Seti> holly hell
[11:42] <X-Seti> i have a dir full of stuff
[11:44] <alvin> Your log dir? Or do you mean a rather large auth.log?
[11:44] <X-Seti> the log dir is packed, but i am looking at auth.log now
[11:46] <X-Seti> same ip has been hammering root for days
[11:46] <X-Seti> none stop, even now
[11:48] <eason> Ruben: could you show me the directory structure of your mirror?
[11:49] <X-Seti> pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2031691$
[11:49] <X-Seti> Nov 15 07:55:19 events sshd[15070]: Failed password for invalid user tester from 203.169.139.171 port 52470 ssh2
[11:49] <X-Seti> thats weird
[11:49] <X-Seti> i have a 1gig log file
[11:49] <alvin> X-Seti: block it :-) I actually don't know how to do that. I'll look it up. If I'm not mistaken, there is a script for ssh to do stuff like that automatically.
[11:49] <alvin> lol, maybe the log file crashed your server? :-) Is the disk full?
[11:49] <X-Seti> checking
[11:50] <X-Seti> now i have a 1tb drive on there
[11:50] <X-Seti> it would be hard to full that :)
[11:51] <X-Seti> from what i can see, that got password the router firewall
[11:51] <X-Seti> there port scanning everything beyond that, hitting the server i had and this comp
[11:52] <alvin> A short search tells me to use /etc/hosts.deny if you want to manually block ip ranges
[11:52] <X-Seti> looking at all the ip addresses, thats alot of blocking
[11:52] <alvin> In my experience, a default ubuntu (without firewall) doesn't crash under those circumstances. (ssh active)
[11:53] <X-Seti> ive never had any problems till, now, panic when my server crashed, i couldnt log in or connect to any services
[11:54] <dei> My Server is not available via the Internet at its Hostname, NS1.LOYALRELIABLE.COM
[11:54] <dei> It is available by IP
[11:58] <dei> ; <<>> DiG 9.6.1-P1 <<>> @173.11.38.195 any loyalreliable.com
[11:58] <dei> ;; ANSWER SECTION:
[11:58] <dei> loyalreliable.com.      86400   IN      MX      10 mail.loyalreliable.com.
[11:58] <dei> loyalreliable.com.      86400   IN      SOA     ns1.loyalreliable.com. loyalreliable.com. 0 10800 3600 604800 3600
[11:58] <dei> loyalreliable.com.      86400   IN      A       173.11.38.195
[11:58] <dei> loyalreliable.com.      86400   IN      NS      ns1.loyalreliable.com.
[11:58] <dei> loyalreliable.com.      86400   IN      NS      ns5.loyalreliable.com.
[11:58] <dei> ;; ADDITIONAL SECTION:
[11:58] <dei> ns1.loyalreliable.com.  86400   IN      A       173.11.38.195
[11:58] <dei> mail.loyalreliable.com. 86400   IN      A       173.11.38.196
[11:58] <dei> ;; SERVER: 173.11.38.195#53(173.11.38.195)
[11:59] <_ruben> http://paste.ubuntu.com/321462/
[11:59] <X-Seti> 5 days worth, 5 ips
[11:59] <X-Seti> so it started 5 days ago
[11:59] <dei> hm?
[12:00] <dei> 5 days worth?
[12:01] <X-Seti> someone is hacking my server
[12:01] <dei> oh
[12:08] <_ruben> fail2ban is nice 'n simple method to "protect" yourself again bruteforce attacks (non-distributed ones)
[12:08] <eason> Ruben: now my client installer can find my mirror server, but yield 'The installer failed to download a file from the server', any tips for solving it?
[12:09] <_ruben> eason: check the access logs of your server, it probably requires a file that isnt avail on the cd, or in a different place
[12:13] <roytech> hi can anyone help probably a simple problem (learner)
[12:15] <roytech> im getting an error unable to resolve host  "name of server"
[12:15] <X-Seti> what service are you running
[12:16] <epinky> roytech: resolv.conf configured ?
[12:16] <alvin> roytech: when do you see this error?
[12:16] <X-Seti> apache?
[12:16] <eason> Ruben: I have checked the apache's error log file, nothing been shown there
[12:18] <_ruben> the installer log might show some hints too (virtual console 4 has that log)
[12:24] <bogeyd6> epinky opensuse prefers people use the yast2 tool to configure network settings
[12:24] <bogeyd6> !pastebin @ dei
[12:24] <bogeyd6> wrong channel
[12:24] <bogeyd6> im an idiot
[12:25] <epinky> bogeyd6: excuse me?
[12:25] <dei> no problem
[12:25] <dei> thank you
[12:25] <dei> i figured our my problem :)
[12:25] <bogeyd6> dei did you have to use the hostname tool at your registrar?
[12:25] <dei> i made a dumb mistake on my firewall...
[12:26] <dei> and that was blocking everything
[12:26] <dei> i just did not suspect such a simple change to cause this problem :)
[12:26] <bogeyd6> kk
[12:26] <bogeyd6> thats why i prefer firewall appliances
[12:29] <roytech> when just making any change to svr just after sudo
[12:29] <eason> Ruben: thank you very much, I found it
[12:35] <spirits-sight> I need help, I have setup LAMP for Ubuntu 9.10 setup 2 vitalhosting by name and when going to one of the domain it does not give me any thing?  in the /etc/hosts file I have "000.000.000.000 hostname-server.abc.org hostname-server" where 000.000.000.000 is the real IP address
[12:36] <epinky> spirits-sight: you mean VirtualHost?
[12:36] <spirits-sight> yes :-) epinky
[12:37] <epinky> spirits-sight:000.000.000.000 is another machine?
[12:38] <spirits-sight> I am using linode and it says to put the public IP address where the 000.000.000.000 is
[12:39] <spirits-sight> epinky: this is the line above that one 127.0.0.1       localhost.localdomain  localhost
[12:40] <epinky> spirits-sight: 000.000.000.000 is another machine?
[12:41] <spirits-sight> I don't think so, its the linode that was assigned it linode.com
[12:42] <epinky> spirits-sight: /etc/nsswitch.conf checked?
[12:44] <spirits-sight> one sec
[12:46] <spirits-sight> epinky: what should I be looking for, I don't see any thing in there that says domain
[12:46] <spirits-sight> hosts:          files dns
[12:46] <spirits-sight> networks:       files
[12:47] <epinky> files dns means check hosts first, if not found ther go to dns, it's ok then ...
[12:47] <spirits-sight> OK so I understood that then :-)
[12:50] <spirits-sight> when I go to the domain.org in brower it says "Oops! This link appears to be broken."
[12:52] <epinky> spirits-sight: try using nslookup with some external server, to check resolution
[12:53] <epinky> spirits-sight: I mean resolution of your server :)
[12:53] <spirits-sight> so in my destop term do mslookup domain.org
[12:54] <spirits-sight> it gave good respone it gave the ip address, so how do I know its from the server
[12:55] <epinky> i think it should be equal to 000.000.000.000.000
[12:56] <spirits-sight> Server:		192.168.1.1
[12:56] <spirits-sight> Address:	192.168.1.1#53
[12:56] <spirits-sight> Non-authoritative answer:
[12:56] <spirits-sight> Name:	domain.org
[12:56] <spirits-sight> Address: 00.000.000.000
[12:56] <spirits-sight> sorry for the mulite lines
[12:58] <epinky> spirits-sight: use pastebin , do you have a DNS server local?, i'd like to check Authorative-Answer
[12:58] <spirits-sight> no its hosted with linode.com
[12:59] <spirits-sight> I am using godaddy which point to the linode nameserver and then doing DNS control with linode
[13:00] <epinky> spirits-sight: can you reach the server using IP?
[13:01] <eix> hi there. I am running Ubuntu8.10 32bit on an "AMD Athlon(tm) 64 Processor 3500+", which is a K8 64bit processor. should i upgrade to a 64bit linux distro? will I pull all of my hair off for this?
[13:03] <spirits-sight> epinky: ok when I use nslookup ip address it give me ip.in-addr.arpa name = xxxxx-xxx.members.linode.com the ip address is backwards and where xxxxx-xxx is the linode marker I think
[13:05] <epinky> spirits-sight: ok, can you reach the server using IP(public)?
[13:07] <spirits-sight> ok, when using just IP address it gives me oops again, but I also am not telling it any vitiualhost site, how do I pass that along with the ip address of it know which one
[13:10] <epinky> that public IP address is already configured on your VPS, right?
[13:10] <spirits-sight> I believe so
[13:12] <epinky> spirits-sight: can you  ping that ip?
[13:12] <spirits-sight> Yes
[13:13] <epinky> spirits-sight: to administer your VPS you use SSH?
[13:17] <spirits-sight> correct
[13:18] <epinky> spirits-sight: you've installed LAMP on your VPS  or are you using DNS Manager to redirect to some local server?
[13:19] <spirits-sight> I have installed LAMP on the VPS using this guide http://library.linode.com/lamp-guides/ubuntu-9.10-karmic/
[13:20] <spirits-sight> I skipped over the area that says Configure for IP-based Virtual Hosting
[13:22] <epinky> ok, on your SSH session to VPS, check if apache2 is up with netstat
[13:23] <dip> Hi all. I'm newbie in cloud computing. I've configured mico-cloud using eucalyptus and running two instances in it. I would like to know how one can install some packages in running instance *persistently* so that I can use that package upon reboot. Any help ?
[13:25] <spirits-sight> epinky: OK I don't see the service apache2 there how ever I have a number of time say to reload it it say it did, is this different?
[13:25] <epinky> spirits-sight: reload is different from restart
[13:25] <spirits-sight> I have done restart also but will do again
[13:26] <epinky> spirits-sight: netstat has to indicate that port 80 is LISTENING
[13:26] <spirits-sight> /etc/init.d/apache2 restart is what I have run one sec see if see port 80 is LISTENING
[13:27] <spirits-sight> ok I don't see that either, that strange
[13:27] <epinky> spirits-sight: then check on your logs, there could be some error
[13:28] <spirits-sight> ok I did a restart and still not see any thing
[13:28] <epinky> spirits-sight: check your logs
[13:28] <spirits-sight> ok under etc/logs right
[13:28] <epinky> spirits-sight: /var/log/...
[13:29] <spirits-sight> yep yep :-( forgot type var not etc
[13:30] <roytech> when ever i try to do any restarting of say samba i get unable to resolve host "name of server"
[13:30] <spirits-sight> which log apache2 has nothing in it
[13:30] <spirits-sight> epinky: ^^
[13:31] <epinky> spirits-sight: error.log and access.log I guess
[13:32] <spirits-sight> epinky: in error.log it says unable to open log three times
[13:33] <spirits-sight> epinky: in access.log there is nothing
[13:33] <epinky> spirits-sight: "unable to open" or "unable to open log"?
[13:34] <epinky> spirits-sight: use "more"
[13:34] <spirits-sight> it says "Unable to open logs"  I am using nano to open them
[13:34] <roytech> hi can any one help with this?
[13:35] <epinky> spirits-sight: use "more"
[13:35] <spirits-sight> epinky:  also other_vhosts_access.log has nothing in it
[13:36] <roytech> when ever i try restart samba i get unable to resolve host "name of server"
[13:36] <spirits-sight> epinky:  http://pastebin.com/d7b08e3c1
[13:37] <spirits-sight> epinky: all the others are empty
[13:40] <spirits-sight> epinky: this is what it gave me for netstat http://pastebin.com/d65780373
[13:40] <epinky> spirits-sight: type "locate ports.conf"
[13:42] <spirits-sight> -bash: locate: command not found
[13:43] <epinky> spirits-sight: type "find /etc/apache2 -name ports.conf"
[13:44] <spirits-sight> ok found it its in /etc/apache2/ports.conf
[13:45] <RoyK> yes...
[13:45] <epinky> sudo nano /etc/apache2/ports.conf
[13:46] <spirits-sight> epinky: done
[13:46] <epinky> is there a line like "Listen XXX.XXX.XXX.XXX:80" ?
[13:47] <RoyK> yes
[13:47] <RoyK> well, there should be
[13:47] <RoyK> or Listen 80
[13:47] <RoyK> without the IP
[13:49] <spirits-sight> epinky: yes it says
[13:49] <spirits-sight> NameVirtualHost *:80
[13:49] <spirits-sight> Listen 80
[13:52] <epinky> spirits-sight: try changing to "Listen 127.0.0.1:80", save,  and restart to see if it opens 80
[13:55] <jester7> can anyone tell me where karmic's syslog server resides?
[13:55] <jester7> previously, it was /sbin/syslogd
[13:55] <spirits-sight> epinky: it did not change the netstat
[13:55] <epinky> spirits-sight: try changing to "Listen 127.0.0.1:8080", save,  and restart to see if it opens 8080
[13:55] <spirits-sight> epinky: brb
[13:56] <spirits-sight> ok
[13:57] <spirits-sight> epinky: nothing changed again, netstat
[13:57] <spirits-sight> brb
[14:03] <epinky> spirits-sight: "Listen your.linode.ip.address:80" also change "NameVirtualHost your.linode.ip.address:80" , save and restart, netstat a t the end
[14:15] <spirits-sight> epinky: it gave me some errors
[14:16] <epinky> spirits-sight: cat /proc/sys/fs/file-max
[14:17] <spirits-sight> 34992 epinky
[14:19] <spirits-sight> http://pastebin.com/d4a4d5275
[14:19] <spirits-sight> epinky: ^^^
[14:22] <epinky> spirits-sight: change "NameVirtualHost your.linode.ip.address:8080", to check use "/usr/sbin/apache2ctl restart" and post results
[14:27] <spirits-sight> http://pastebin.com/d6b2eb25
[14:28] <spirits-sight> I changed listen and name... to linode ip:8080
[14:28] <spirits-sight> will u be on later then evening USA Est time
[14:29] <epinky> spirits-sight: it says trying to start, did it finish?
[14:30] <spirits-sight> no
[14:30] <epinky> don't you have prompt then?
[14:30] <spirits-sight> I have prompt
[14:30] <epinky> netstat -an?
[14:31] <spirits-sight> just try again same issue
[14:31] <spirits-sight> its listening to mysql and otehr stuff but not apache2
[14:32] <epinky> maybe you'll need to change ulimit on /etc/init.d/apache2, not sure, however "Unable to open logs"  is your error and the reason why apache2 does not start :(
[14:32] <spirits-sight> OK I have to leave,  if any other stuff please PM me try when get home
[14:33] <spirits-sight> ok thank
[14:33] <epinky> spirits-sight: good luck and bye
[14:33] <spirits-sight> thanks alot for the help
[14:33] <epinky> spirits-sight: you're welcome
[14:37] <selinuxium> hi all any EC2 users about? I am just getting started using the command line tools... Wondering if I should install eucalyptus... Also how to bundle a instance...  Cheer
[14:37] <selinuxium> s
[14:40] <_ruben> ugh .. i really needa set me up a distcc environment .. compiling a kernel just takes to long
[14:40] <_ruben> s/to/too/
[14:41] <rip> hello
[14:42] <aubre> Good morning
[15:18] <_ruben> bah .. lvm breaks when backporting a karmic/jaunty kernel to hardy .. guess im doing something wrong :/
[15:22] <ivoks> maybe you need to backport lvm userspace?
[15:23] <maswan> Hm. So, with theew new fancy upstart init job scripts, how do I prevent a service from starting automatically at boot?
[15:31] <epinky> maswan: rcconf?
[15:32] <maswan> ooh, never heard of it
[15:32] <maswan> "It is a TUI(Text User Interface) frontend to the update-rc.d command." doesn't sound very useful though
[15:36] <acalvo> maswan: why not? it means you can manage all your services at the different run levels
[15:36] <epinky> "how do I prevent a service from starting automatically at boot?" doesn't sound very difficult though
[15:38] <maswan> As far as I can tell, there are no rc?.d/*-links to delete, for say portmap
[15:38] <acalvo> I've a VM with a virtual hard disk, and I want to make it bigger. So far so easy, but since the partition are made with LVM, is it difficult to expand the logical volumes? is it safer? is as easy as running the lvextend command?
[15:38] <alvin> If I'm not mistaken, There are no runlevels anymore
[15:38] <ScottK> ttx: Can we move https://blueprints.launchpad.net/ubuntu/+spec/server-lucid-more-mail-integration from the last session today to tomorrow or Friday?  There's another session that I absolutely have to attend at that time.
[15:39] <Fenix|work> Greetings and salutations
[15:39] <maswan> So I'm not sure what use update-rc.d or any interface to that will be for those services that don't use that legacy interface
[15:39] <alvin> acalvo: yes, it's that easy. You need to to 2 things. Want an example?
[15:39] <acalvo> alvin: yes, thank you
[15:40] <alvin> Suppose you have vg0/opt . t is 1G and you want to make it 2:
[15:40] <alvin> $ sudo lvextend -L 2G vg0/opt
[15:40] <alvin> $ sudo resize2fs /dev/vg0/opt
[15:40] <acalvo> alvin: ok, fine
[15:40] <acalvo> I guess for ext4 there is a similar utility
[15:40] <Fenix|work> Any admins here familiar with rsyslog?  I'm having a logging duplication issue after applying templates for remote hosts.
[15:41] <alvin> acalvo: this works perfectly for ext4
[15:41] <ttx> ScottK: we can
[15:41] <ScottK> ttx: Thanks.
[15:41] <acalvo> alvin: thank you so much then
[15:42] <maswan> epinky: That's what I thought, except all the documentation and help thingies I could find is just for the "legacy" sysv init stuff...
[15:42] <ttx> ScottK: tomorrow 10am ?
[15:42] <ScottK> ttx: Checking
[15:42] <ScottK> ttx: Yes, please.
[15:44] <ttx> ScottK: done
[15:44] <Fenix|work> Which filesystem is best for logs?
[15:45] <ttx> ivoks: ^
[15:45] <ScottK> Thank you.
[15:46] <_ruben> i tend to store /var/log on an ext3 partition with noatime
[15:46] <epinky> Fenix|work: NILFS :)
[15:48] <Fenix|work> epinky, meh, don't need continuous snapshotting
[15:49] <maswan> devnullfs? :)
[15:49]  * Fenix|work sighs
[15:49] <epinky> Fenix|work: sorry, it was a joke, "logs for your logs" :D
[15:49]  * Fenix|work wondered why he never changed his syslog rules to log to /dev/nul
[15:50] <Fenix|work> err /dev/null
[15:50] <Fenix|work> epinky, I thought it was funny actually :)
[15:50] <Fenix|work> I understand though that NILFS is pretty good with solid state drives
[15:51] <Fenix|work> at least that's what linux-mag told me a few months ago
[15:51] <Fenix|work> or I could be dreaming it.
[15:52] <Fenix|work> anyway ...
[15:52] <Fenix|work> between reiser and ext, which would handle system logs better?
[15:54] <epinky> Fenix|work: my two cents on ReiserFS , BUT it's only an opinion
[15:55] <Fenix|work> I'm leaning towards reiserfs myself...
[15:55] <Fenix|work> ... just internally debating 3 or 4
[15:55] <Fenix|work> ... but I somehow find myself drifting my thoughts to inventor and wondering how his new life is coming along.
[15:56] <acalvo> Fenix|work: why not the new ext4?
[15:56] <Jeeves_> Fenix|work: What he said ^^^ :)
[15:57] <Fenix|work> I have no problem with ext4... I just don't want a lost+found folder
[15:57] <Fenix|work> my drive is already formatted ext4
[15:57] <Fenix|work> and it's nice to know I can create 16TiB files :)
[15:58] <acalvo> Fenix|work: so afraid of l+f?
[15:59] <Fenix|work> not afraid no... I'm just a freak I guess who doesn't like something for the sake of something to be there... create the folder when you actually have files that are lost and found...
[15:59] <Fenix|work> but I have a drive for logging and there will be a folder for every device on my network logging to it... then there is lost+found
[16:00] <acalvo> I think that folder has been there since older versions
[16:00] <Fenix|work> acalvo, and hence why I moved to resierfs :)
[16:00] <Fenix|work> I keep my boot as ext2 though, for all you old-timers :)
[16:00] <acalvo> well, I guess is a matter of taste
[16:00] <acalvo> I like the new ext4
[16:01] <acalvo> I've played with reiser4 (in the gentoo old-times)
[16:01] <Fenix|work> gentoo still around, or have they compiled themselves to oblivion yet?
[16:01]  * Fenix|work laughs... used to be an ArchTester
[16:02] <acalvo> I'm curious, is not critical to have one device to log all your network systems? what happen if someone gets inside? or if you lose connectivity?
[16:02] <Fenix|work> I still have the tag in my whois.
[16:02] <acalvo> well, I know is still around, but I don't want a 24h installation
[16:02] <acalvo> moreover, I haven't seen a new release since the main progammer left (in 2006 I think)
[16:02] <Fenix|work> acalvo, I'll have two syslog servers as a central repository for all logs, and all machines are still going to log to themselves if something happened to both central servers.
[16:03] <Fenix|work> I just want a single point to browse all logs from all devices
[16:03] <Fenix|work> throw in some utils to send out email alerts on warnings and up, and some utils to parse through the logs... and it'll make life easier
[16:03] <acalvo> what do you suggest? (it seems pretty interesting)
[16:04] <Fenix|work> manually searching over 150 devices is a pain in the ass
[16:04] <Fenix|work> acalvo, I just started this project... I decided to use Karmic as the base because of the switch to rsyslogd from sysklogd
[16:05] <Fenix|work> I'm going to try logging to files first and see how that works out...
[16:05] <netrat> i'm using postfix with cyrus and an sasl database for users. is there a way to extract a list of users for local_recipient_maps from the sasldb?
[16:05] <Fenix|work> on the other box I'm going to experiment with logging to MySQL
[16:05] <Fenix|work> netrat, and hello to you as well.
[16:06] <Fenix|work> acalvo, I'm not sure on what I'm going to use for the actual log interface... whether it'll be Splunk, or PHPLogCon
[16:06] <netrat> Fenix|work, hello
[16:06] <acalvo> Fenix|work: I'm using nagios + cacti
[16:06] <acalvo> and I was planning to use splunk in a centralized syslog system
[16:06] <acalvo> Fenix|work: did you try SNMP?
[16:06] <Fenix|work> acalvo, right now I'm leaning nagios + splunk + rove.  rove for the mobile aspect
[16:07] <Fenix|work> acalvo, not yet.  although rsyslogd has a facility for outputting SNMP traps
[16:07] <acalvo> most of the network systems already have SNMP into it
[16:07] <acalvo> and it's pretty easy to set them up
[16:07] <acalvo> and to catch it all with nagios
[16:08] <Fenix|work> acalvo, yeah, I still want a central location for all logs, specifically for auditing purposes...
[16:08] <Fenix|work> SOx sucks.
[16:08] <acalvo> well, if you need any advise about SNMP, or examples to control routers,printers,etc... drop around and ask :)
[16:10] <Fenix|work> acalvo, send me a PM and tell me the pros and cons...
[16:10] <Fenix|work> don't want to bore everyone else with off topic ;)
[16:41] <axisys> how do I find out why scripts under cron.daily is not running ?
[16:45] <axisys> anacron is not running.. doh!
[16:45] <axisys> /usr/sbin/anacron is present.. interesting
[16:45] <axisys> is NOT present i meant
[16:47] <axisys> just installed it
[16:50] <axisys> wait.. i am reading it wrong.. anacron is not needed .. so how come cron.daily's scripts did not run ? which log would tell me why cron.daily's script not running
[17:40] <smcquay> i'm trying to use a eucalyptus insta-cloud. i followed the instructions on the Ubuntu site, but when I try to connect to the virtual machine, my keys get denied. Has any one run into this issue, and how does one fix/diagnose it?
[18:00] <smcquay> yeah, it's very odd. it takes much longer than I'd suspect trying to connect, and then just doesn't connect. I've searched online for eucalyptus and the error I see (Permission denied (publickey)), but to no avail. is there a way to have an image that doesn't require ssh keys?
[18:13] <ahasenack> 2.4.18-0ubuntu1 is hanging at 100% cpu in karmic when I try to add data to a database defined in cn=config, has anybody seen this recently?
[18:13] <ahasenack> 64bits
[18:13] <ahasenack> it just sits in pid 16635] futex(0x7ff5f8a57c48, FUTEX_WAIT_PRIVATE, 2, NULL
[18:14] <ahasenack> 16594 openldap  20   0  187m 8500 4128 S  185  0.2   2:52.14 slapd
[18:15] <baffle> Hmm, I think Ubuntu should have compiled clvm against corosync instead of cman.
[18:36] <Fenix|work> I've a question.  How do I go about making an image of my server configuration so in the event of a catastrophy I can re-apply that image to the same hardware and have the system up and running as if nothing ever were to have happened... without the need to reinstall and reconfigure everything?
[18:37] <Fenix|work> Hmm... server configuration is a little ambiguous... I mean the entire server
[18:38] <djveer> If I am setting up a small web server for a client using Ubuntu server... what are some things I should take into consideration to provide as much uptime as cheaply as possible. Any suggestions?
[18:38] <djveer> OBviously i've thought of mirrrored drives, back up to an off site location to tape.. etc
[19:26] <Fenix|work> How do I go about creating a bootable recovery CD/DVD of my server install?
[19:48] <GammalSokk> mine \ NoPE
[20:09] <Fenix|work> Anyone have a how-to to create an apt mirror for local use?
[20:14] <guntbert> Fenix|work: have a look at apt-mirror
[20:14] <Fenix|work> guntbert, ok, thanks.
[20:15] <guntbert> Fenix|work: there also is good tutorial - but I cannot remember where - sorry
[20:15] <Fenix|work> I will search for it.
[20:16] <Fenix|work> guntbert, you use nagios?
[20:16] <guntbert> Fenix|work: no
[20:16] <Fenix|work> bummer...
[20:18] <guntbert> Fenix|work: the tutorial I used: http://www.howtoforge.com/local_debian_ubuntu_mirror
[20:18] <Fenix|work> that's the one I'm looking at now.
[20:18] <Fenix|work> thanks :)
[20:19] <Fenix|work> guntbert, how big is the repo?
[20:20] <guntbert> Fenix|work: not sure, I don't have the disk with me right now - several 10GB I'd say
[20:21] <Fenix|work> can you mirror multiple releases?
[20:21] <Fenix|work> or multiple arches?
[20:21] <guntbert> Fenix|work: yes and yes
[20:22] <Fenix|work> sweet and sweeter.
[20:23] <cyphermox> guntbert, Fenix|work, last time I looked into it it was something of the 20G for a "quick and dirty mirror", where you get just the release stuff, and more like 200G or so for "everything"
[20:23] <cyphermox> not sure if this was per arch, but I guess (hope) not :)
[20:23] <Fenix|work> 20GB isn't too bad.
[20:24] <Fenix|work> most likely it would be per arch...
[20:24] <guntbert> cyphermox: I didn't count the src repos, but they do come only once :)
[20:24] <cyphermox> yeah :)
[20:24] <cyphermox> per arch, I don't know. It seems steep, even though there is a lot of stuff
[20:24] <Fenix|work> well, gcc for i686 and gcc for amd64 are two different beasts :)
[20:24] <cyphermox> note that these were numbers from the page about mirroring ubuntu...
[20:25] <Fenix|work> cyphermox, out of curiousity... do you use nagios?
[20:25] <Fenix|work> I'm debating about using a source install vs a package install
[20:27] <cyphermox> Fenix|work, no, i don't use nagios. The fact that it was text-based configs, changed manually, or having to install additional packages with weird deps annoyed me
[20:27] <cyphermox> http://www.ubuntu.com/getubuntu/mirror/2
[20:29] <Fenix|work> it appears nagios' quick-start guide suggests install from source
[20:29] <Fenix|work> so, that is what i'll do.
[20:30] <cyphermox> nagios from source gives you very much up-to-date stuff. on the other hand, installing it from a package might be more convenient
[20:34] <Fenix|work> cyphermox, until an update that could potentially break my config :)
[20:34] <Fenix|work> pros and cons
[20:34] <Fenix|work> packages vs. source
[20:34]  * Fenix|work sighs
[21:32] <ninjah>       -  Since a packet is assigned to a FEC when it enters the network,
[21:32] <ninjah>          the ingress router may use, in determining the assignment, any
[21:32] <ninjah>          information it has about the packet, even if that information
[21:32] <ninjah>          cannot be gleaned from the network layer header.  For example,
[21:32] <ninjah>          packets arriving on different ports may be assigned to
[21:32] <ninjah>          different FECs.  Conventional forwarding, on the other hand,
[21:32] <ninjah>          can only consider information which travels with the packet in
[21:32] <ninjah>          the packet header.
[21:33] <ninjah> Whoops! wrong irc room
[21:41] <occy> Hey guys... anyone here ever used cgiirc?  I'm trying to get it set up on my Ubuntu server.  I have the irc server already up and going
[21:41] <occy> I did apt-get install cgiirc
[21:42] <occy> and have googled trying to find some sort of howto... but :/  (and I've read the docs) but am still confused
[21:45] <occy> Better question.  Where can I find the Ubuntu cgiirc documentation?
[21:53] <mjeanson> For UDS folks, Community server team dinner tonight. Let's meet in the lobby by 6:30PM. Everyone welcome.
[21:54] <Daviey> grr.. i think i'm double booked.
[22:20] <Wallace> Can anybody recommend a VPN server to use?  Clients will be ubuntu, and windoze.
[22:26] <ahe> Wallace: http://openvpn.net/ ?
[22:26] <ahe> didn't have to setup a VPN but if i had to i would go with openvpn
[22:29] <Wallace> so better than pptpd, or any of the other options available?
[22:43] <Reepicheep> Wallace: I use both pptpd and openvpn.. pptp is great for simplicity.. it integrates natively with many clients including linux and ubuntu.. but
[22:44] <Reepicheep> when security is a concern I reach for openvpn.. I like the fact that it is based on SSL
[22:45] <Reepicheep> s/linux and ubuntu/linux and windows/ ^^
[23:56] <mjeanson> Community Server Team dinner postponned to 7:15PM in the lobby.