[00:00] Like Obiwan :) [00:01] Pondering Aragorn freeze. [00:03] Yompa: So, what do you do here ? Talk about why servers arent updated and breaches are made ? [00:07] The US military wanted some coding so i did that, but didnt even get a lousy t-shirt in return. Sure it was cool, but come on! I spent 3 days on those changes, day and night wo sleep. [00:08] And all i asked for was a t-shirt to hang on my wall. [00:11] Ooh, i see a lack of empathy. [00:12] Ah, theusgas [00:14] Report: The only sign of intelligent life is called "Yompa" :) [00:18] how can I script a way of moving a file from the input directory to an output directory, however, leave a "touched" file with the same file name in the input directory? [00:20] mv PATH/oldfile PATH/newfile | [00:22] mv PATH/oldfile PATH/newfile | echo @1 ... if this -> @$1 or $1 gives the path/filename you can use $2 etc [00:22] Depends on what shell youre scripting it in.. [00:23] Spiritus, I'm guessing it's bash. it's the standard one [00:23] #!/bin/bash or #!/bin/sh -> tcsh etc [00:24] Spiritus, #!/bin/sh [00:24] Always let the runtime shell know what file its trying to compile. At top of the file give the origin: #!/bin/bash (Newline here) [00:25] * RoyK packs up to thaw up a little in Reykjavík [00:25] Use bash, the docs arent good for sh [00:25] RoyK: Rockinvik! /greetz [00:26] :) [00:28] jeeves_moss: stdout doesnt work well with #sh as with #bash if its for example a forked process in some cases. [00:28] On Gotland we have Rouks! :) [00:28] Im from the mainland though [00:29] Rauks [00:30] qbric ... thats a sucky network trying to keep the truth from the people, aka RealPlayer. [00:30] They also feed us with false information on a daily basis since 2003. [00:31] IE: The Swedish government tv garbage [00:33] 90% of what they show is disecting humans and or blowing them up (NCIS, some murering idiot and some doctor guy with a caine etc etc etc) [00:34] Or that fucking chef thats all about "JallaJalla/YallaYalla" or whatever stress they can put their young under. [00:34] the f-word idiot [00:37] I like Simpsons, Seinfeld, Absolutely Fabulous, SG and fishing programs. I hate opera, mtv and anything stressfull [00:37] -1l [00:37] Why hasnt mtv been cancelled yet ? [00:37] because it generates tons of revenue [00:37] Complete garbage. [00:38] So idiots watch that, really ? [00:38] there's some decent shows on it I suppose [00:38] but it doesn't matter [00:38] if the show can generate viewers [00:38] then the ads go from 40k to like 300k [00:38] for a single 30 second clip [00:38] or even higher [00:38] so if a show has what, 3 or 4 ads [00:38] per break [00:38] and 2-3 breaks [00:39] and gets rerun, what, 30 times a week? [00:39] tons of cash [00:39] you go tell mtv to shut the doors and they'd just laugh at you [00:39] because you don't get it :) [00:40] in the US when the whole late show problem occured with conan and jay leno [00:40] jay went to an earlier time slot [00:40] almost nobody watched it [00:40] I have watched it, couldnt find anything good on it "Oh i got a lipsucktion those balls" :) [00:40] MTV sucks arse! [00:40] I actually have to pay for it wether i want to or not. Thats the really odd part. [00:40] the ads STILL generated 40k per ad [00:40] per showing of the ad [00:40] with almost nobody watching [00:41] 90% of the money i pay for my tv license goes to needy people in the under developed countries. Why cant i just go there with some companies and build them some wells ? [00:41] you pay to watch tv? [00:41] MTV blows [00:41] woah, what? [00:41] you actually pay? [00:41] You do too, tv-license [00:41] that's hilarious [00:41] nope [00:41] there's no licensing in the US [00:42] and I live in the US [00:42] so I do not pay [00:42] Swedes pay billions each year to watch tv we ourselves made. [00:43] hey does anyone use byobu here? [00:43] silly swedes [00:43] Then again, we are the richest country on earth right now... i doubt it. [00:43] richest because you pay dumb taxes like that one [00:43] The_Tick: Wanna play with the fjords of doom ? :) /You make me so happyfied :) [00:44] !Entail ^^ [00:44] You have entered a database of doom, want to climb out ? [00:45] you hate mtv and yet consider this entertaining? [00:45] !Envicathiem est [00:45] You seem nice [00:47] The_Tick: Isnt chatting with people better then mindnumbing brainlessness ? [00:47] no [00:47] IF you think not, then why are you here ? [00:47] I think there's room for both [00:47] LOL [00:47] but I think bitching about it forever is annoying [00:47] Youre as fun as a sack of old potatoes [00:48] Youre rubber im glue... whatcha gonna do ? :) [00:48] We are fun to the onlooking crowd. Im liking it. [00:49] The_Tick: Dont you think IRC can also be fun, like it was before 2003 ? [00:50] I for one liked that betterwebs [00:51] Spiritus: I think it can't be like it was in 95, no [00:53] The_Tick: Ill settle for 2000, atleadt then crazy manicas didnt roam freely as ops (jokes where ok ans so where discussions). Then Idiots entered by governmet policy and removed all the fun, so we had to have fun with the evils. [00:53] And it was indeed fun. [00:54] So if i see anyone saying !ot again anywhere ill know its a microsoft employee amongst a few other tell tell signs. [00:55] Spiritus: but you're from sweden [00:55] We dont like those ;) [00:55] your opinions on irc do not matter [00:55] Explain ? [00:55] too close to norway [00:55] So then finland is crap as well ? [00:55] does anyone know how to add more hard drives to the status line in byobu? [00:56] To you ? [00:56] The_Tick: So Mrs tick :) ... Do you live in US ? [00:57] Doonz: they don't have good docs? [00:57] no actually [00:57] bla [00:57] Doonz: have you checked out 'man byobu' ? [00:57] any config file? [00:58] http://manpages.ubuntu.com/manpages/maverick/en/man1/byobu.1.html [00:58] this is what im reading [00:58] but what the man pages are saying the config file isnt really lining up [00:58] I miss the US inputs. I talk to my coders by phone instead. [00:59] it doesnt really say how to add more disk monitoring in it [00:59] Doonz: what kind of monitoring does it provide anyhow? [01:00] But talking to people on irc tells if people are good or not so i prefer hireing them here granted good test results or very good credentials. [01:00] basically on the status line it just shows free space of the drive [01:00] 106GB,3% [01:00] thats what it shows for my main drive but i have 3 others that i would like to monitor [01:00] df -hP / [01:01] Spiritus: unless you know what the hell he's asking [01:01] which you don't based on that answer [01:01] please be quiet [01:01] Doonz: so you want to monitor multiple drives? [01:01] Spiritus: yeah trying to avoid typing that [01:01] kirkland: yea [01:01] i have sd[a-d] [01:01] The_Tick: Yes sir! :) /rotfls [01:01] Doonz: why do you need to know that constantly? :) [01:01] Doonz: okay, do this ... "mkdir ~/.byobu/bin" [01:01] cause my wife has a habit of filling up the hdd's [01:01] heh [01:02] she loves photography [01:02] Doonz: besides this I'd add a cronjob to run every 15 minutes, and if you're at 10% email yourself [01:02] but 10Gb of pictures of our vase in the kitchen...... [01:02] 10% left [01:02] yeah i have that set up now [01:02] :) [01:02] Doonz: cp /usr/lib/byobu/disk ~/.byobu/bin/17_disk [01:02] Doonz: then edit ~/.byobu/bin/17_disk [01:02] Doonz: and have it monitor each of your disks [01:02] ok let me try [01:03] Doonz: that's how you create a "custom" byobu status script [01:03] Doonz: you could make that script do whatever you want [01:03] The_Tick: http://en.wikipedia.org/wiki/Brigadier_General .. :) [01:04] uuh [01:04] hmm [01:04] in the original if statment do i just change it to a 2 [01:05] and then set the mp to where ever that drive is mounted [01:05] The_Tick: By helping to specify and construct the GNU and in coding Linux i think i could possibly know what im doing sir :) .. It means Freedom! [01:06] Doonz: sounds like you'll have to play with it [01:06] yeah wish me luck woot [01:06] !!! [01:06] bbl [01:07] I think freedom can be whiffed. The freedom to know. [01:10] I like this new bounce vpn via wirelsss [01:12] Packets embedded via subnet broadcast PEBCAK's bounced from lands to seas. Its fairly cool. [01:14] Im on wireless atm, but the interchanging HUBs pass the traffic on via SO_LINGER and reconnects under the timeouts. Im loving it [01:15] Has anyone tried headerpassing ? [01:15] portknocking, but thats bound to fail at some point.. [01:17] Why... Consider a max amount of knocks=65535 (IANA registered port range) .. Hack the kernel and you have 0-infinite almost. [01:17] Hackers today are so confined [01:19] Same goes for subnetting and adressing. Otherwise youre playing ... on the fields of barley ... :) [01:19] Not to say Barley isnt cool, because it is my friends ;) [01:20] On the fields of barley! ... nananna! [01:20] Spiritus, move it to ubuntu-offtopic please [01:21] fluvvell: Would you say that barley is raw sugar, or stronger then raw sugar sir ? [01:22] Or did you wnt to ask a computer related question ? [01:25] Spiritus: Could you please try to stay on topic here. If you want to chat about randomness, there is #ubuntu-offtopic [01:26] char c = 'x'; [01:26] while((c = cin.get()) != '\n' && c != '\0'); ? [01:28] Pici: thank you. I think you were the 4th person to ask Spiritus to respect the channel topic. === jjohansen is now known as jj-afk [01:56] i'm trying to move a bunch of files from one folder to it's parent folder. I tried 'for f in *; do mv /path/to/directory/"$f"; done' and i get the error "mv: missing destination file operand after '/path/to/directory/filename.zip' what am i missing? [02:05] april__, mv * ../ ought to work [02:07] and you're missing a source or destination file [02:07] you only have one file listed after the mv command [02:15] That pici seems way gay. [03:00] has anyone configured honeyd on ubuntu server? i'm testing it out via 127.0.0.1 - my virtual honeypots respond to pings, but not TCP connections [03:14] trying to restart ssh but its not in /etc/init.d/ssh ? [03:17] Hi, I just installed Hibernate and rebooted my server know it is stuck @ the loading screen I tried recovery mode but it's the same. How do I get around this? [03:18] i0nic: in 10.04, /etc/init.d/ssh.conf provides sshd normally, so run "restart ssh". [03:18] Sorry, /etc/init/ssh.conf [03:18] i0nic: the sysvinit /etc/init.d/ssh is provided by disabled by default, because the upstart version can't handle some ssh configurations. [03:21] i0nic: I am not sure if I am getting this right (twb, correct me if I am wrong), but with many "init scrips" moving from sysvinit to upstart, there are changes happening. And right now some scripts are native upstart style and some still sysvinit. Sounds like SSH uses an upstart script, but supplies the sysvinit (in /etc/init.d/) as backup. [03:21] twb ahh thanks [03:22] hansin: openssh-server is unusual [03:22] NORMALLY when an upstart job is provided, a backwards compatibility symlink is placed in /etc/init.d [03:22] so im trying to setup a reverse dns between a tablet and my server and I keep getting [03:22] I'm just sort of figuring this all out, so if what I say is obvious, just ignore. Okay, I think I get it. [03:23] ssh_exchange_identification: Connection closed by remote host [03:23] ssh_exchange_identification: Connection closed by remote host [03:23] ssh_exchange_identification: Connection closed by remote host [03:23] ssh_exchange_identification: Connection closed by remote host [03:23] ssh_exchange_identification: connection closed by remote host [03:23] ouch, sorry for spamming [03:23] my keys look to be right.. would this be logged somewhere? [03:24] Most cases if there is a native upstart script, then /etc/init.d/ just contains a symlink to native upstart script. *But*, because SSH upstart script has limitations, a true native sysvinit script (not a symlink) is also included as well. This is what you are saying, right? [03:27] Anyknow any fast ways of troubleshooting a kernel loading prob? [04:11] is there a bandwdith monitoring program for the cli? [04:14] i0nic: ssh access issues are logged in auth.log *on the server side*. [04:14] i0nic: by design, the client is not told WHY it was refused access. [04:14] i0nic: I'm gonna guess that the problem is insecure permissions on ~/.ssh or ~/.ssh/authorized_keys [04:34] Doonz: I found this link; it might be close to what you are looking for. Both listed packages are in the Ubuntu repos: http://www.surlyjake.com/linux/linux-command-line-bandwidth-monitor/ [04:50] Hmm, free -m is reporting [04:50] -/+ buffers/cache: 680 7283 [04:51] But nothing in top has mem% above 0.0 [04:51] So what's using all that 680MiB? [05:25] hmm what does the mysql_secure_installation command actually do? I forgot to run it and would like to take the hardening steps myself [05:28] http://dev.mysql.com/doc/refman/5.1/en/mysql-secure-installation.html [05:29] http://dev.mysql.com/doc/refman/5.5/en/mysql-secure-installation.html [05:29] and that's just by using google [05:29] ah thanks I assumed that was an ubuntu thing for some reason [05:29] most things are not [05:30] seems I have already done that [05:30] some things are, but bleh === cmdshftn is now known as whatever === whatever is now known as calexico [06:11] New bug: #687681 in postfix (main) "package postfix 2.7.0-1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 75" [Undecided,New] https://launchpad.net/bugs/687681 === cmdshftn__ is now known as cmdshftn [09:16] hi [09:16] Can some one please suggest me about which Raid Controller Card is http://pastebin.ubuntu.com/541366/ [10:31] Hi anyone know where my php error logs are stored? Im using PHP5.3 [10:37] Hi [10:38] is there hpacucli available for 10.04 ? [10:48] kaushal: I believe you have to use the RPMs. [10:48] jpds: oh ok [10:48] jpds: Thanks [10:49] alien and all that jazz. [10:49] jpds: sure [10:49] will update you now [10:53] garymc, php errors are normally logged through the web server, which for apache would be /var/www/apache2/error.log by default [10:53] err [10:54] /var/log/apache2/error.log [10:54] not www [10:55] jpds: hi again [10:55] i get http://pastebin.ubuntu.com/541402/ [10:55] Please suggest further === ogra_ac is now known as ogra === ogra is now known as Guest42462 [11:15] jpds: got it now [11:15] it worked [11:15] fine === ogra_ is now known as ogra [11:51] New bug: #687985 in nut (main) "[FTBFS] package 'nut' (2.4.3-1ubuntu5) failed to build on natty" [Undecided,New] https://launchpad.net/bugs/687985 [11:52] New bug: #687977 in ibmasm-utils (main) "[FTBFS] package 'ibmasm-utils' (3.0-1ubuntu10) failed to build on natty" [Undecided,New] https://launchpad.net/bugs/687977 [11:52] New bug: #687979 in jug (main) "[FTBFS] package 'jug' (2.0.0-1) failed to build on natty" [Undecided,New] https://launchpad.net/bugs/687979 [11:52] New bug: #687983 in librdmacm (main) "[FTBFS] package 'librdmacm' (1.0.10-1) failed to build on natty" [Undecided,New] https://launchpad.net/bugs/687983 [11:53] New bug: #687968 in bacula (main) "[FTBFS] package 'bacula' (5.0.2-2ubuntu1) failed to build on natty" [Undecided,New] https://launchpad.net/bugs/687968 [11:53] New bug: #687971 in eucalyptus-commons-ext (main) "[FTBFS] package 'eucalyptus-commons-ext' (0.5.0-0ubuntu2) failed to build on natty" [Undecided,New] https://launchpad.net/bugs/687971 [11:53] New bug: #687974 in groovy (main) "[FTBFS] package 'groovy' (1.7.0-3ubuntu1) failed to build on natty" [Undecided,New] https://launchpad.net/bugs/687974 [11:56] New bug: #687988 in quagga (main) "[FTBFS] package 'quagga' (0.99.17-2) failed to build on natty" [Undecided,New] https://launchpad.net/bugs/687988 === oubiwann is now known as oubiwann_ [13:17] Hi! I just installed phpmyadmin on maverick, and it pulled in apache as a dependancy. But phpmyadmin works perfectly fine with other http servers like nginx or lighttpd. Is that dependancy really warranted? [13:28] heh, it depends on mod-php :) [13:29] that would be the bug I suppose [13:29] my server keeps getting password attack ssh root login [13:29] dozens of different ip's [13:29] install fail2ban :) [13:29] i have 10 login attemps per second [13:31] change ssh port [13:31] how [13:31] at the moment im manually doing iptables -s mofo'sip -j DROP [13:31] if you install fail2ban it will do the drops itself for you :) [13:31] no config needed [13:31] oh [13:31] i'll google it thx [13:31] unless you want to ban more than just craploads of failed ssh logins [13:32] it would be nice if instead of just deny or drop there was like a 'fuckYou+deny' option [13:32] tarpit :) [13:33] that would require editing how fail2ban adds rules, and compiled the xtables modules [13:34] patdk-lap: Best to raise a bug :) [13:34] (re apache with phpmyadmin, via mod-php) [13:34] daviey, heh, a quick look shows a crapload of packages require mod-php, some even mod-php4 [13:35] patdk-lap: eeeeeeek [13:35] what does this mean [13:35] Dec 9 08:34:14 vps1098 sshd[9525]: Did not receive identification string from UNKNOWN [13:35] only entry after i blocked the hacker [13:35] in my log [13:36] ilovegrolsc: Looks like you were probed. [13:36] (it's common) [13:36] yea im not panicking or anything [13:36] actually i dont care if ppl try to login they would never guess my password [13:36] but i care if that 10 attemps per second slow down my server [13:36] use resources [13:37] I had it overload a t1 line [13:37] must've been alot [13:39] i'll install fail2ban sounds good [13:40] iptables -L fail2ban-ssh -nv [13:40] ilovegrolsc: Remove the password and use SSH keys only? [13:40] that sounds good but i dont know how to do it [13:40] jpds, that still wouldn't help not overload a t1 with invalid requests [13:41] i dont even know how to change the ssh service port [13:41] patdk-wk: Set up an SSH TARPIT. [13:41] that is all editing /etc/ssh/sshd_config [13:41] patdk-wk: A la http://www.outflux.net/blog/archives/2010/11/10/tarpit-iptables-target/ [13:41] jpds, that is what I did, just fail2ban is esay and simple for the detection to manage the tarpit :) [13:41] in 24 hour period i have like 20 different ip's doing 10 logins per second [13:41] most from China [13:42] ilovegrolsc: Yeah, normal. [13:44] seems simple if i only need edit sshd config [13:45] ya, as much as changing the port helps and stuff, it's still only security through obscusion [13:45] main reason I don't bother [13:45] ilovegrolsc: https://help.ubuntu.com/community/SSH/OpenSSH/Keys [13:46] keys will make sure pretty much, you aren't brute forced via password [13:46] but they can still chew up bandwidth [13:46] yea im certain they would never guess my pass [13:46] i'll get fail2ban and stop them from trying [13:46] or login from a virus infected machine? [13:47] How do I make a bootable Ubuntu server installer from USB via ssh from another old ubuntu server? [13:48] pki might be wort it if i was assange and the gov wanted into my server ;) [13:48] worth* [13:48] with lucid 2.6.32-26-server on an Athlon64 X2 (AMD-based motherboard), I am experiencing frequent system hangs -- video goes dead, no kbd LEDs work, only hitting the restart button brings the machine back. This is a server box without X running. Nothing is logged. Any tips for troubleshooting? I have verified that RAM and cpu cooling are good, using memtest86+ and cpuburn. No SMART errors are reported by the drives. [13:49] I have also tried the 2.6.34 mainline kernel, with little luck. [13:49] it lasted longer before hanging up -- 10 hours, when run with clock_source=hpet, but it still hung up. [13:49] heh, I find pki logins nice, it's so fast :) [13:51] Daviey: Next time you do a mass bug file for FTBFS, you might review the logs first to see if the build failures are actual package problems. [13:51] just wondering what to type in console to download direct2ban [13:51] I just checked all your failures that weren't also in http://udd.debian.org/cgi-bin/ubuntu_ftbfs.cgi and a large fraction of them were artifacts of how you did the rebuild. [13:52] ScottK: If there is a next time i probably will... this was an experiment. [13:52] OK. [13:52] ilovegrolsc: I use pubkey authentication all over the place [13:52] ScottK: Are you interested in being more involved the standard daily triage of the package set? [13:52] it's tons better than password, even for low-security things [13:53] i'm already using it on my server for openvpn [13:53] Daviey: Not for "fun" in my free time, no. [13:53] I'm more interested in not getting bogus bugs landing in my inbox. [13:53] ScottK: Do you find investigating Invalid FTBFS bugs fun? [13:53] (seriously) [13:53] No. [13:53] with a beer on hand it might be fun [13:54] Daviey: No. I'm seriously annoyed you filed the bugs without even looking at the logs, thus wasting my time. [13:54] ScottK: I did look at that log actually, i mean't to pluck it out. [13:54] ScottK: However, i don't understand why you wasted time looking at them? [13:54] How do I make a bootable USB to isntall Ubuntu server? [13:55] Daviey: The first one I looked at because it landed in my inbox, was Python related, and we've got a Python transition going on. [13:55] ScottK: It would be really useful to know what part of the server you do find fun, it might be better use of the teams time as a whole - and allowing us to help present the stuff you do find fun. [13:56] Daviey: The rest I looked at after I saw your email to ubuntu-server and I didn't want new contributors getting discouraged when asked to look into crap bugs. [13:58] ilovegrolsc, apt-get install fail2ban [13:58] ScottK: I really don't want you to waste your time on these, if you feel that it's of no benefit. === oubiwann_ is now known as oubiwann [13:59] I think it would have been a fine effort to involve new people if the bugs had represented actual failures. IMO an unreasonable fraction of them didn't. [14:00] hallyn_, https://bugs.launchpad.net/ubuntu/+source/qemu-kvm/+bug/687997 is there a bug in qemu-kvm's apport-hooks ? there is no qemu-kvm package version there. [14:00] Launchpad bug 687997 in qemu-kvm "XP Pro SP2 refuses to initiate graphical install phase" [Undecided,New] [14:00] Personally I use lists like http://udd.debian.org/cgi-bin/ubuntu_ftbfs.cgi and http://qa.ubuntuwire.com/ftbfs/ to work on FTBFS and not bugs in general to work on build failures, but I can see there value for others. [14:01] never mind, hallyn_ i see it. [14:01] smoser: ok [14:02] its not in the blobs in the summary [14:02] but in related pacakges [14:02] 0.8.1 is latest version patdk? [14:02] ScottK: Initially, i wasn't going to share the results.. but some other members of the team were interested... I nearly sent them to the mailing list... but i had concerns with noise on there. [14:03] 0.8.4 on lucid [14:03] yeah, 'attach_related_packages' [14:03] anyone have any experience setting up 802.3ad bonding on Dell PowerConnect switches? [14:03] My problem isn't with the list or the sharing, just the lack of QA before doing so. [14:03] ScottK: Getting an extra 23 bugs in my Inbox, i didn't consider to be a big deal - perhaps i was wrong. [14:03] ninjix, lots of netgear and cisco :) [14:04] Daviey: If they are valid bugs it's not. [14:04] hi [14:04] is there any script to disable plymouth ? [14:04] ScottK: This was purely a first cut.. i don't know if i'll do it again [14:04] patdk-wk: I'm only seeing one interface getting used [14:05] how did you configure it? [14:05] dynamic or static? I found dynamic isn't very reliable [14:05] and you need to configure it on both ends [14:05] patdk-wk: I've setup LACP static [14:05] on both switchs? [14:06] or is this switch to computer? [14:06] switch to computer [14:06] how do you know it's only using one? [14:06] I'm running bmon [14:06] what is bmon? [14:07] handy interface monitoring tool for console [14:07] ok, but that isn't a test [14:07] I assume yo uattempt a file transfer or something while watching bmon? [14:07] i have written some utility scripts i want to make available to users on several servers. i've never made a .deb before and the scripts are just a few files in a directory that have historically just been added to $PATH for people to use them. what's the best way to get these more easily packaged/installable? [14:07] for test I'm running bonnie++ against NFS on 10g NAS [14:08] well, that will only use one interface, how 802.3ad works :) [14:08] how if you did a bonnie++ against 4 different nfs servers [14:08] then it should use both [14:09] ahh... [14:09] 2 is probably enough, but just incase :) [14:09] it's to solve the whole, tcp packets out of order thing [14:09] one wire might be longer or slow than the other [14:09] ok installed, in jail.conf i can put my static ip in the ignoreip list? just wanna make sure im not locked out [14:09] so all ip -> ip traffic uses the same interface [14:09] gotcha [14:10] it's less magical than I had hoped [14:10] well, it depends what you want [14:10] to access one very large nfs, kind of useless [14:10] that's how obeys ethernet standards [14:10] to serve to the internet, very useful :) [14:11] I see different hash methods L2,L3 and L4 [14:11] why does it want my email address in the jail.conf patdk? [14:11] am i gonna get an email every time it blocks an ip? [14:11] that would be bad [14:11] Ninjix, I forget, the hash methods might need to match the other side (the switchs) [14:11] is that negotiated by the kernel driver? [14:12] ilovegrolsc, it can email you each time it bans someone [14:14] patdk-wk: thanks for the quit explanation. Now I know what to look for in the IEEE docs and have found more information [14:15] now I just need to find better Linux docs covering the output of /proc/net/bonding/bond0 [14:16] heh? it looks pretty straight forward :) === jjohansen is now known as jj-afk [14:18] one last Q about it... i changed ssh-iptables to true, thats all? cuz i also see ssh-tcpwrapper [14:18] and ssh-ipfw [14:18] should the Aggregator ID equal the same integer I've assigned to the LAG on the switch? or is it internal to the server? [14:19] Ninjix, looks like the hash method doesn't matter much [14:19] but you would have to change it on the switch to affect your incoming hash method from other stuff to your machine [14:20] so using the later3+4 hash method would use more than one interface if you mounted the same nfs server more than once [14:20] ahh... so it has more to do with how the switch decides which line throw the packet down [14:20] but I think packets from nfs to your computer will still only use one interface :) [14:20]