[00:01] well, the devices there are created by dmraid AFAIK (so they are what is known as "fake raid", really some sort of "hardware-assisted raid") [00:01] X8DTL-iF - this is model of motherboard. I have read in manual that it only supports fake rade, so I decided to do not use it at all and to setup soft rade at all [00:02] google indicates that this might be some "Intel Matrix Storage" thing? [00:03] maybe it was activated by ubuntu live cd by default? hovewer when installing ubuntu in expert mode I selected to NOT activate onboard raid control , and then partioned and RAIDed everything manually in "manual partioning" installation setp [00:03] step [00:04] so it is disabled in the BIOS too? [00:05] yes I think so. In IDE menu in bios. let me check in my motherboard instruction and show you this menu - it's little difficult to me. === dendrobates is now known as dendro-afk [00:07] JanC, here it is: http://i49.tinypic.com/2j41sih.png [00:12] JanC, currently IDE#1 configured to Enhanced, IDE - so no RAID selected at all. === unreal_ is now known as unreal [00:27] Hey [00:28] I'm trying to install ubuntu desktop on a really old machine, it's frozen at 5%, how do I terminate the install application? [00:32] JanC, I now reconfigured it in bios and here is what ls /dev shows, is it better now? http://i50.tinypic.com/5obnrm.png [00:38] ubuntu server installer is FLYING on my mini-itx [00:38] and it's a first generation one [00:38] bcsllc: [00:38] which isn't know for speed === unreal_ is now known as unreal [00:53] flyback: 20s from "boot" to "login:" on vmware fusion running on my macbook pro 15" [00:53] uh [00:53] this is a low power mini-itx system === unreal_ is now known as unreal [00:53] cf card [00:58] flyback: yeah its cool. :) [00:58] flyback: just saying, 10.04 boots fast [00:59] i'm happy with 30s up and 10s down [00:59] it's just a box that monitors a ups then executes about 30 ssh logins [00:59] and fires off a script to shutdown vm's then the hosts and nas's [01:15] who knew.. let 4 small nodes hit 4 small nodes with 200 connections requesting phpsysinfo and the load shoots to 135.. :-P [01:23] I get this error whenever I install a perl module. http://www.pastie.org/968649 [01:38] Hey all. I've got a machine here that I'm trying to set up as a PXE server... it has two interfaces and I want it to be a DHCP client on eth0 and a DHCP server on eth1. Not... real sure how to do this, my skill level is medium-low in the area. :) [01:38] I've installed atftpd and the bsd inetd and that much works, I've installed dhcp3-server, but not sure what to do with the conf. [01:39] Particularly as it doesn't mention the interface in the conf file anywhere that I can see. A howto I found on linuxhomenetworking.org mentioned something to do with routes, but this is getting to be over my skill level. [01:46] smoser: is /etc/hosts regenerated by cloud-config when an instance boots in UEC/EC2? [01:48] smoser: yes - thanks :) [01:56] New bug: #241119 in qemu-kvm (main) "usb_add of a Creative ZEN unrecognized in guest" [Low,Confirmed] https://launchpad.net/bugs/241119 [02:07] I get this error whenever I install a perl module. http://www.pastie.org/968649 [02:08] Nonpython: hmmm.. did you maybe remove some packages or files on accident? [02:09] No. [02:10] Nonpython: when you stay install, do you mean via cpan? [02:11] CPAN and apt. [02:11] Nevermind, solved it m'self. :) Thanks anyway! === jjohansen is now known as jj-afk === dendro-afk is now known as dendrobates [02:36] smoser: UT by any chance? === dendrobates is now known as dendro-afk [03:01] Nonpython, still working on the Perl module Locale issue? [03:02] yes [03:03] Nonpython, what is the ubuntu release? and is it infact server? [03:04] 8.04. [03:04] I've seen that plenty of times [03:04] I did not install it, how do I check? [03:04] you need to install the language pack for your locale [03:05] What is it for en_US? [03:06] language-pack-en [03:06] dpkg -l language-pack-en-base [03:07] it usually happens when someone botches a custom install [03:07] no language pack gets selected [03:07] installing that package should fix it [03:07] Ok. [03:09] Nonpython, not sure is this works on 8.04: sudo tasksel --list-tasks [03:09] Nonpython, that will tell you what package groups are installed [03:11] ello all [03:12] looking for an issue i'm having with Postbox [03:12] if anyone feels like helping me out [03:12] my postbox is horking whenever i am trying to configure it, but works fine with the vanilla conf file [03:12] tis weird... because i'm not really configuring anything exotic... and i'm using Webmin... so its strange that i'm having this problem [03:31] NightDragon neither ebox or webmin works for me on ubuntu 10.04 lst [03:41] is there a way I can connect to a wifi router with ubuntu server? [03:48] Brando753: Yes. You have to manually configure it in /etc/network/interfaces [03:49] anyone know how to control fan speed on an x345 running ubuntu server? [03:49] anyone know how to control fan speed on an x345 running ubuntu server? [03:49] whoops sorry double post [03:51] how would one do that? [03:52] i was copy-pasting to ubuntu channel as well and didnt switch the tab on my irc client :-/ [03:52] Brando753: man interfaces will get you started. Unfortunately I really don't have time to provide detailed assistance. [03:53] You'll probably need additional help from Google and maybe the Ubuntu Server Guide (I don't recall if it's covered) [04:25] Hello [04:26] Any 1 there ? [04:27] !anyone | Ian__ [04:27] Ian__: A large amount of the first questions asked in this channel start with "Does anyone/anybody..." Why not ask your next question (the real one) and find out? [04:28] Has any 1 used Ubuntu 10.04 and setup IMAP ? [04:29] sorry havent used IRC before today [04:33] I installed 10.04, setup ssh, transfered mail, user names/ passwords, could access the mail from a thunderbird client, could received mail locally, but not externally (in other words no mail is coming in) [04:33] I have checked the routing etc. but no improvement === {shade} is now known as \shade\ === lifeless_ is now known as lifeless [05:01] Emails I send from Postfix don't get received. [05:06] Hi people, I installed exim on my Karmic computer about 2 months ago, wen lucid arrived, i did a network upgrade, and from now on, exim starts very very slowly. How do I prevent exim4 from starting on boot? I want it to start when I invoke the init.d file manually. [05:12] billybigrigger: update-rc.d can modifiy your rc (startup) scripts [05:12] oops sorry wrong tab [05:13] bilalakhtar: that was meant for you [05:13] lol [05:13] thanks [05:13] bilalakhtar: update-rc.d -f remove exim [05:13] let me check what -f does [05:14] jturek: man page says its for System-V style scripts. Will it work with Upstart? [05:17] yes, exim is still a sysv script [05:18] lifeless: so will it have problems with upstart? [05:18] ok, sorry, misinterpreted that [05:19] I had to delete the ureadahead pack files. restarting now [05:20] robert, thanks for assisting i was away for a second when he asked about the sysv [05:27] bilalakhtar: welcome back [05:27] jturek: It didn;t work [05:28] Exim still starts on boot [05:28] let me google [05:30] bilalakhtar: look for exim in your /etc/init/ directory [05:30] if it truely is an upstart [05:30] thats where each upstart conf file is, youc an edit the conf file disabling that service for each runlevel [05:30] jturek: its not in etc/init.d but in /etc/init.d/ [05:31] jturek: no exim4.conf or exim.conf is there [05:31] Maybe some other part of the system is envoking it? [05:32] i'll install it here on my box, one moment [05:32] jturek: leave it, its not a mjor problem [05:33] Emails I send from Postfix don't get received by outside accounts. [05:33] For the various problems with sendmail and postfix. I used exim [05:36] ls [05:36] I removed links to sendmail, will restart [05:37] Any help? [05:38] odd, the update-rc.d worked for me on my lucid box... [05:38] oh he's gone [05:38] ;( [05:38] goodnight all [05:39] Didn't work, jturek [05:40] When I run sudo /etc/init.d/exim4 status I get Running [05:45] I think it worked. Even after stopping, status shows it as runnign [06:15] On account of the quietude, I'll venture to make a small ammount of noise, not exactly Ubuntu server related, though they are going to be used in Ubuntu servers...does anyone have any experiece with 2tb caviar blacks vs. greens? [06:18] ,anyone [06:18] !anyone [06:18] A large amount of the first questions asked in this channel start with "Does anyone/anybody..." Why not ask your next question (the real one) and find out? [06:18] Emails I send from Postfix don't get received by outside accounts, can I get help? [06:19] Did you configure postfix? [06:20] Yes, by the USG. [06:20] As a satellite, or a hub? [06:21] Spluh? [06:21] Huh? [06:21] There are two kinds of MTAs [06:21] In all fairness, on account of the fairly off topic nature of the question, I wanted to make it easy to ignore. However, you inadvertly answered some subset of the question. [06:21] There are the ones that run on your laptop and workstation, which just send all mail to mail.example.net. [06:21] Then there are the ones that run on mail.example.net (the hubs/smarthosts). [06:21] It is a hub. [06:22] I don't know enough about smarthosts to help you [06:22] Other than the usual of looking at the logs, checking postconf, asking #postfix, etc. [06:22] I've suddenly realized that the "does anyone" thing wasn't aimed at me. I'm going to go hide under a car. [06:38] kozmund: er, it was. [06:39] kozmund: "experience" is vague as all hell. What do you ACTUALLY want to know? [06:45] What I was going for was whether anyone had had any experience with greens vs. black that violated the general narritive. As in, people with specific usage scenarios that had no performance hit from going blacks to greens, or horror stories about the 2tb blacks. [06:46] jturek: thanks, IT WORKED! The init.d script has a bug, which shows the wrong status. But I can confirm through other ways that exim is NOT running. [06:50] Which is to say, I was looking to see if there was a person that would jump at the chance to disabuse me of the prevaling notion with their horror story. But yes. Since no one jumped up to tar the name of caviar blacks, I'll take that as the very, very, very last bit of my due diligence before buying a couple dozen. [06:52] kozmund: you could always buy just one to begin with, and throw bonnie++ at it [07:02] Hello .. I have a mail loops back to myself error - Does any 1 know anything about that ?? [07:02] Ian__: Yes. [07:03] I am running dovecot, IMAP on Ubuntu 10.04 [07:03] 'Mail loops back to myself' means that your Postfix wanted to send out the mail to the internet but then discovered that the DNS says your mail server should be responsible. Most likely you forgot to list your domain in mydestination or virtual_(alias|mailbox)_domains [07:04] In what file .. the postfix.conf [07:05] main.cf [07:07] MrPancake: nice catch [07:07] Yup. :-) [07:09] Do I alter this line ?? alias_maps = hash:/etc/aliases or something else [07:11] mydestination has my domain name ... eg domain.com.au [08:10] hello .. Im getting a mail loops back to myself error ... dont know Y .. everythign else works except cannot get mail from external to the server [08:17] Ian__: did you try #postfix? [08:21] not sure .. I checked the configuration file .. but I may have to download it .. dont really know what Im doing .. just been doing alot of reading [08:21] I just downloaded nmap to see what I had open [08:25] <_ruben> grmbl .. quagga advertizes my ipv6 prefix just fine, but somehow decided to stop advertizing my ipv4 prefix, yet nothing changed that i know of and i dont see any weird stuff [08:37] morning [08:38] one of our servers here crashed yesterday morning, after looking at the stats it appears an application used a vast amount of memory (all of it, forcing into swap) and resulted in a restart. Is there anyway to find out what application this may have been? === unreal_ is now known as unreal [08:46] New bug: #583192 in dbconfig-common (main) "package dbconfig-common 1.8.44ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 10" [Undecided,New] https://launchpad.net/bugs/583192 === unreal_ is now known as unreal [08:54] Hi, whats you thougts about LVM on VMware guests? [08:55] You mean using an LV as the block device for the VM? [08:57] twb: Yes, it would be nice to resize disks online. [08:58] I don't think vmware supports that. [08:58] hi sh1ny! [08:58] twb: Ah sorry.. Not a block device, I meant on the vm's filesystem [08:59] LVM doesn't allow you to resize *disks* online. [08:59] hey binBASH ! :) [08:59] my virtual server provider tells me that there are problems with upstart and xen and they cannot offer 10.04 because of that. anyone can confirm that? [08:59] You probably want virtio, but I doubt vmware supports that, either. [09:00] narfnarfnarf: certainly they'll fight, but I expect someone has solved the problem already [09:01] twb: Humm, ok.. Perhaps I mixing apples and pears here :) [09:03] The disks is resized in vmware, and then it's possible to resize (extend) the vg and lv. And at the other end extend ext4? [09:04] Without lvm it's possible, but you need to force a resync of scsci devices.. (not the most fun way to go on a live system) :) [09:05] <_ruben> a scsi rescan would be needed in either case [09:06] folke: how would the guest know that vmware has resized the underlying block device? [09:07] twb: as _ruben said.. A scsi rescan.. [09:07] Hi, I try to clone a virtual machine using virt-manager, however it doesn't let me create a new disk. It says it has no write access. However I connected to the server as root. Someone knows what could be wrong? [09:07] But, it was only an Idea :) [09:08] You can initiate one while the root filesystem is *on* that scsi bus? [09:08] I mean, if you can, great. I had no idea you could. [09:09] I think you can force one.. We messed with it for some time ago, just for phun... [09:10] It was on 8.04, and then I decided to not use lvm beq I am no big fan of lilo anymore.. But I just started to install a 10.04 so I thougt about it again :) [09:11] Shrug. [09:11] Seems to me like a better solution would be to use jails instead of VMs [09:11] Unless you actually need a different kernel in the guests [09:12] twb: There is no actual need to do it online. But it would be pretty nifty to have the possible :) === unreal_ is now known as unreal [09:31] New bug: #583216 in postfix (main) "inet_protocols can't be preseeded" [Undecided,New] https://launchpad.net/bugs/583216 [09:36] New bug: #583217 in spamassassin (main) "/etc/init.d/spamassassin reload fails" [Undecided,New] https://launchpad.net/bugs/583217 [09:56] mornin [09:57] New bug: #551097 in mysql-dfsg-5.1 "start & stop hang on mysql-server (10.0.4 upgrade from 8.04)" [Undecided,New] https://launchpad.net/bugs/551097 [10:39] twb: Now, with blacklisting vga16fb 1440x900 is working fine :) [10:40] Excellent [10:40] mwd: did you also unblacklist vesafb? [10:40] Yes [10:41] Thanks :) [10:41] mwd: please cat /sys/class/graphics/fb0/virtual_size, and tell me what's there [10:54] twb: 1440,900 [10:55] I'm impressed. [10:55] And /sys/class/graphics/fb0/name says "vesafb"? [10:56] twb: No, VESA VGA [10:56] OK [11:34] Hi [11:34] is there a set of rules I should follow before asking questions related to ubuntu server [11:37] !guidelines | kulinshah [11:37] kulinshah: The guidelines for using the Ubuntu channels can be found here: http://wiki.ubuntu.com/IRC/Guidelines [11:37] I am setting up a mail server using ubuntu 9.10 karmic koala for the first time ever, what I have done so far is I have installed the server, installed gnome desktop on it, installed webmin on it and installed postfix [11:38] I am stuck now, I dont have a static IP address and dont want to purchase one till I can fully check the functionality of the server [11:38] !guidelines [11:38] The guidelines for using the Ubuntu channels can be found here: http://wiki.ubuntu.com/IRC/Guidelines [11:39] o.o [11:40] gnome desktop on a server... D: [11:41] kulinshah: I'd go with postfixadmin rather than webmin [11:41] it helps me because then I can browse and use commands at the same time instead of running between two pcs [11:41] Morning [11:42] screen-x.. I tried installig postfixadmin but I was not able to do so successfully [11:42] if I edit /etc/bash.bashrc file, what happens when Bash package is upgraded? Will it overwrite my changes, merges in changes (if so, what if the merge conflicts), not touch it? [11:43] AlexC_: it should ask you AFAIK [11:43] kulinshah: no-ip or dyndns may be able to help your testing without a static ip [11:43] cemc: ok [11:44] AlexC_: I'm keeping my changes at the bottom of the file, and when it asks I say install the package maintainers version then edit it and put my changes back [11:45] screen-x: thanks, is no-ip or dyndns a website ? [11:45] cemc: I shall do the same then :) [11:47] kulinshah: yes and a service. They allow a dns entry to point to a machine that doesn't have a satic ip [11:47] thanks [11:52] hello to all i have a nasyt problem. have a external usbdisk with a ext2 partition mounted on /dev/sdb2.. for some strange reason i get this error here "Stale NFS file handle" how can i fix it ? any solutions ? === klaas- is now known as klaas [12:07] screen-x: I am a little confused, I went over and created an account with no-ip, now it wants me to setup a dns host, how will I use that host to setup my postfix / ubuntu mail server [12:10] also should I use DNS Host, or DNS Host round robin or DNS Alias as an option [12:24] kulinshah: create a dns host with no-ip, then install the noip2 package [12:26] mailserver on a dynamic IP? [12:27] JanC: just for testing :) [12:27] screen-x: I did just that thanks, I was wondering about the next steps [12:27] JanC: yes I am installing a mailserver for the first time [12:32] kulinshah: you need to follow a mail server guide/tutorial, maybe one of these links.. [12:32] !mailserver > kulinshah [12:32] kulinshah, please see my private message [12:33] screen-x: thanks, I will try them [12:52] screen-x: I have postfix installed now, where should I use my no-ip address in the configuration part [12:53] off the top of my head, myhostname and mydestination [12:55] remember you'll need mx records [13:10] screen-x: can i setup mx records using no-ip ? [13:13] kulinshah: yes, in the "add a host" form from no-ip, there is an option for mx-records [13:13] actually mx record, as the free version only lets you specify one [13:14] so in that field should i use my no-ip address which I have created for e.g. iastron.sytes.net [13:14] You don't need an mx record for email if your mailserver is on the same ip as your domain. [13:15] ok [13:15] mx is so you can say 'mail for domain.com should be sent to mail.domain.com' [13:16] if the domain.com mailserver is sat on the domain.com ip, no mx is needed. [13:17] cloakable: you mean to say that since I am using a no-ip address which is pointing to myhostname I dont need mx records [13:17] you should always have an MX record if you intend on having email [13:17] hmm [13:18] AlexC_: Never needed one, and it's optional. [13:19] AlexC_: It's good practice for larger domains, where you have multiple mailservers sure. But this is a home email server. how many mailservers is he going to run? :P [13:20] it's good practice for all domains, you're saving another DNS lookup and relying on software implementing RFC5321 correctly to fall back to A record if there is no MX [13:21] And most of it does. I don't get any spam though. Isn't that odd? [13:21] cloakable: actually none, this is just a test mail server to clear my fundamentals, I am new to linux and am trying to learn things the practical way, however, if I consider AlexC_'s point of view I feel it would be best to know how to setup mx records as it would come in handy if I were to grow this to a full scale server [13:21] Perhaps spammers don't implement RFC5321 :D [13:23] cloakable: do you actually use that domain for public mail? ;) [13:24] JanC: Yup [13:24] cloakable: Relying on the A record fallback is not considered a best practice. It may work, but it's not the best way to do it. [13:24] JanC: I reliably get mail from other mailservers including gmail, hotmail, and yahoo. [13:24] It actually came very close to being removed from 5321 and the IETF never like to deprecate anything. [13:25] Mmmm. [13:26] let's say it's something you SHOULD but not MUST use (yet) [13:26] Mmmm. [13:26] Still, it works, and keeps my DNS simple :) [13:26] One A record and a CNAME [13:27] as long as your mail domain isn't the CNAME... ;) [13:28] Nope :) [13:29] kulinshah: yes I would do it the correct way and an MX, learn how it works etc [13:29] cname is for *.domain.com :) [13:29] To domain.com :D [13:29] why? [13:30] Apache2 virtualhosts. [13:30] I don't need to touch my domain, and can easily setup a new site at .domain.com :) [13:31] lazy admin is lazy [13:32] Hell yes :D [13:32] http://xkcd.com/742/ lol [13:32] Why do you think I use Linux? :P [13:32] cloakable: Sounds like that would be... slow. [13:32] AlexC_: should I reconfigure postfix with the new no-ip subdomain, since it is not the actual domain I intend to use but to test this server I have to use the no-ip domain [13:33] AlexC_: If I wanted to babysit a server I'd install windows on it ;) [13:33] cloakable: Considering you have to do two DNS queries instead of one. [13:34] jpds: I have 1.75Mbit/s up. You think DNS is the bottleneck? :P [13:34] cloakable: then you're doing server admin wrong [13:34] kulinshah: depends how you mean by reconfigure. I'm at work currently but I'd suggest #postfix [13:35] AlexC_: And yet, the server is not broken :P [13:35] cloakable: learn the difference between latency & speed ;) [13:35] transmission speed [13:36] JanC: I'm hosting on a home broadband connection :P [13:36] And now I'm going for lunch :) [13:37] DNS packets are so small it might be as fast (or sometimes faster) on a PSTN dial-up account as on your home broadband... [13:43] cybrocop, here now [13:46] JanC: The performance impact of multiple DNS queries in this case is generally driven by latency, not bandwidth. [13:47] ScottK: that's what I mean, and as dial-up often has lower latency than e.g. cable internet... (at least here in .be ;) ) [13:48] Ah. [13:48] ttx, ping [13:48] hi guys [13:48] smoser: yo [13:48] someone can help me with ubuntu enterprise cloud??? [13:48] https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/566792 [13:48] Launchpad bug 566792 in eucalyptus "metadata service returns empty data with 200 OK" [High,Confirmed] [13:48] !ask | tyska_ [13:48] tyska_: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) [13:48] i'd like to have some Euca attention to that. [13:49] (ie, the call today) [13:49] smoser: planning to attend the call today ? [13:49] i can [13:49] ok sorry [13:49] smoser: wfm [13:49] smoser: ask jpugh to add it to the agenda [13:49] s!topic [13:49] my instances dont have Internet access, my cloud is configured in MANAGED-NOVLAN [13:50] !topic [13:50] Please read the channel topic whenever you enter, as it contains important information. To view it at any time after joining, simply type /topic [13:50] what is wrong? [13:50] tyska_: does the CC/CLC have access to Internet ? [13:50] yeah [13:51] in fact, i already saw what's the problem, if i change the order of some rules on the IPTABLE of cc, the instances reach the Internet [13:52] but i need to reorder the rules for each created instance, i think something is not right, but dont know what! [13:52] tyska_: you should file a bug, there might be a general issue there [13:52] is it using a 10.04 UEC/Eucalyptus ? [13:53] no, 9.10 [13:53] tyska_: Any chance you could try on 10.04 ? Lots of bugs have been fixed there [13:54] ttx: then, there is no another way =( I will do this. Thanks! ;) [14:16] SpamapS_: ping when you are awake [14:20] http://ubuntu-smoser.blogspot.com/2010/05/easily-test-or-demo-ubuntu-enterprise.html === dendro-afk is now known as dendrobates [15:16] OMG, it took me days to find this darn page https://wiki.ubuntu.com/EC2Vmbuilder [15:20] zul: awake, wassup [15:20] SpamapS_: i reviewed th patch and got some nitpicking for you [15:20] zul: you don't like me fixing 2 bugs in 1 do you? ;) === SpamapS_ is now known as SpamapS [15:21] SpamapS: nope its not that...gimme a sec [15:21] oh, excellent. [15:33] https://wiki.ubuntu.com/CloudLoadbalancingSpec as my first ubuntu spec, I fully expect it will be ripped to shreds. Criticisms please. :) [15:44] Hi, under ubuntu server 10.04, my USB-Stick does not show up under /media/Corsair [15:45] Where can I find it? [15:49] mwd: mount will show you where its mounted (if it is) blkid will tell you it's device name, so you can mount it if necessary. [15:50] I found the problem; By default, disk drives do not automount in Ubuntu Server Edition [15:51] screen-x: Thanks === mathiaz_ is now known as mathiaz [16:11] New bug: #583372 in openldap (main) "Using default schemas included with slapd installation does not work." [Undecided,New] https://launchpad.net/bugs/583372 [16:14] ttx: 3.5.3 should be up today [16:35] i'm a little confused about the duplicity backup program...when you do a full backup rather than the default incremental, it deletes the existing backup in the target location, right? so what's the difference between a full backup every week and incrementals in between, and just incrementals forever? [16:37] this helped: http://serverfault.com/questions/120520/duplicity-full-backup-lifetime-and-efficiency [16:45] hello all [16:46] "ufw allow 69/upd" allows connection from "any" to UDP Port 69. I want to add "from 192.168.255.0/24" but ufw says "wrong numbers of arguments" [16:48] mwd: from http://ubuntuforums.org/showthread.php?t=823741 sudo ufw deny from 10.0.0.1/24 to any port 22 [16:48] just add /udp after the port [16:49] also, http://lmgtfy.com/?q=http%3A%2F%2Fubuntuforums.org%2Fshowthread.php%3Ft%3D823741 is nice [16:49] erm - wrong lmgfy :þ === jj-afk is now known as jjohansen [16:56] I need some help [16:56] i need the C compiler. [16:57] gcc? [16:57] shouldn't be too hard to install that === RoyK^ is now known as RoyK [16:57] i try to install build-essential, which will give me C, but my server says: Couldn't find any package whose name or description matched "build-essential" [16:58] which distro version? [16:58] RoyK: I want to allow Port 69/UDP on the ubuntu-server from the ip-range 192.168.255.0/24 [16:58] 10.04 LTS [16:59] ufw allow 69/udp does work, but it allows from "any" not a specific range [16:59] So, I have tried: ufw allow from 192.168.255.0/24 to 69/upd [17:00] mwd: are you trying to use a ubuntu server as a firewall? [17:00] Then: ufw allow proto udp from 192.168.255.0/24 to port 69 [17:00] And: ufw allow 69/upd from 192.168.255.0/24 [17:00] No success [17:00] MrChris: No [17:00] mwd: are you trying to use a ubuntu server as a firewall? [17:01] My default ri [17:01] well are you trying to forward ports? [17:01] MrVhris: No [17:01] RoyK: what do you think about my issue? [17:01] mwd: ufw allow to 0.0.0.0 from 81.191.180.0/24 port 69 proto udp [17:02] Hello [17:02] MrChris: I have 'build-essential' installed on my 10.04 box === unreal_ is now known as unreal [17:03] how do i change the repo addresses? [17:03] MrChris: see /etc/apt/sources.list [17:04] I am contemplating using Amazon EC2 with Ubuntu machine images. before I do that, I was going to test a setup in a local virtual machine. the question is: do I install normal Ubuntu Server, or do I install Ubuntu Enterprise Cloud? [17:04] Can somebody explain to me where to put my ssl certs? I ask only because in the postfix setup its certs are kept in /etc/postfix/sasl. As I use the same certs for both apache I seem to constantly overwiting them. [17:05] UnderSampled: Ubuntu Server [17:05] MrChris: ok. Thanks [17:05] RoyK: "from 81.191.180.0/24 port 69 proto udp" does not work [17:06] add 'to 0.0.0.0' as I said [17:06] before from [17:06] it should be there implicitly, but there might be some bugs around === unreal_ is now known as unreal [17:10] JohnA: in my postfix conf, my cert is stored where this variable points: smtpd_tls_cert_file [17:12] JohnA: /etc/ssl iirc [17:13] One step further: "ufw allow from 192.168.255.0/24 to any port 69" allows connections from the correct ip-range to any port 69. But I only want to allow udp, not any [17:14] mwd: ...allow proto udp from... [17:14] proto udp [17:14] mwd: it shouldn't matter much, though, unless you have some cheesy things running on 69/tcp [17:15] mwd: not to be "that guy", but the syntax is laid out in the ufw manpage [17:15] step one in securing a server: stop unneeded services [17:15] That where I was expecting, but taking a look at the init script for postfix it copies certs from /etc/postfix/sasl to /etc/ssl I am not sure what will happen if the certs are not in sasl? [17:15] and anything <= 1024 will need to be started as root anyway, so don't worry [17:16] JohnA: not sure what you're talking about but my /etc/postfix/sasl is empty and i have no trouble [17:17] celeborn999: Ok, thats a little reassuring. [17:18] JohnA: on the other hand, i can't find "sasl" anywhere in /etc/init.d/postfix so maybe your postfix is old or weird or customized [17:20] If you want to reliable set up postfix with smtp auth, the Ubuntu Server Guide has good documentation. [17:20] "ufw allow proto upd from 192.168.255.0/24 to port 69" does not work [17:21]