[00:00] lol ofc [00:00] is it possible that many pcs access the same nfs share withou;side effects? [00:00] but those ntp servers are accurate. [00:00] aliverius, that's sort of the entire point of nfs [00:01] great cause i need to share data between a kvm host and guest [00:09] qman__: I just dont understand why ntpd listen at UDP port 123 [00:10] to get time (duh)? [00:10] I dont to run it as a server [00:10] dont want === smoser` is now known as smoser [00:11] ntpd serves time on that port [00:11] if you don't want others accessing it, block it in your firewall [00:11] but i dont want to serve [00:11] I did. [00:12] qman__: so I can use my machine as server even that i get that time from other sv? [00:12] that's how ntp works [00:12] you get time from class 2, 3, 4 servers depending on your configuration [00:13] your ntpd then becomes one class above that [00:13] nice :) [00:14] but there should be an option to listen [00:14] and each link in the daisy chain is one class higher, until 16 [00:14] :x [00:14] 16 is considered totally unreliable [00:14] to close listen port [00:14] i meant [00:14] yeh [00:15] most people who run ntpd run it to provide network time [00:15] as ntpdate is good enough for 99% [00:15] i run it to get time [00:15] :p [00:15] the other 1% can block it in the firewall [00:15] k [00:18] hmm, the default ntp config doesn't serve time [00:19] IIRC, it doesn't serve time, but it still listens on the port [00:19] and simply rejects any requests [00:19] ya, cause port 123 is much more than just receive/send time [00:19] it's also the control interface and stuff [00:20] if your paranoid about it listening on port 123, use ntpdate [00:20] Patrickdk: :D [00:20] just make sure you script it properly [00:20] no im paranoid [00:20] i just block 123 port [00:20] * Patrickdk runs a pool server :) [00:21] Patrickdk: if default ntp config doesnt act as server there's not secutiry risk then [00:21] I dunno what happened, but been getting flooded with ntp requests from china for the last month [00:21] there is always a security risk [00:21] and it does act as a server [00:21] ddos [00:21] just cause it doesn't respond [00:21] doesn't mean someone won't find a vaunerability [00:21] ok [00:22] it's just the likelyhood is even less [00:22] thanks for clarifying my doubts [00:23] * Patrickdk has never been scared though of it [00:23] config shows [00:23] # By default, exchange time with everybody, but don't allow configuration. === justin__ is now known as jMyles [00:24] hmm? [00:24] restrict -4 default kod notrap nomodify nopeer noquery [00:24] ./etc/ntp.conf [00:24] noquery makes it not let other people request time [00:24] restrict 127.0.0.1 [00:24] only at localhsot right [00:24] allow everything on localhost [00:24] oh [00:25] # Local users may interrogate the ntp server more closely. [00:25] and how I do that? [00:25] http://support.ntp.org/bin/view/Support/AccessRestrictions [00:25] you want to allow local access? [00:25] no just get time [00:25] restrict 192.168.0.0/16 default nomodify notrap nopeer [00:26] Patrickdk: ok it means that i can access it from subnet [00:26] oh that isn't right [00:26] # If you want to provide time to your local subnet, change the next line. # (Again, the address is an example only.) #broadcast 192.168.123.255 [00:26] restrict 192.168.0.0 mask 255.255.0.0 notrap nopeer nomodify [00:26] is what I'm using [00:27] 0.0? [00:27] hmm, ya [00:28] should I disable restrict 127.0.0.1 restrict ::1 [00:28] ? [00:28] with # [00:28] why? [00:28] i dont want anyone to access it [00:28] you don't trust your own machine it's running on? [00:28] :) [00:28] if you do, ntpq and stuff won't work [00:28] ah k [00:29] you could always password restrict it [00:29] Patrickdk: restrict -4 default kod [00:30] -4 is for ipv4? [00:30] ya [00:30] and default and kod? [00:30] kiss of death [00:30] it won't do really anything, without the limit option [00:30] not sure about default :) [00:30] never really use it myself [00:30] default is to listen all adresses maybe [00:31] no [00:31] OH [00:31] By default, exchange time with everybody, but don't allow configuration. [00:31] so if i want to configure need to remove default [00:31] Patrickdk: so i just need restrict 192.168.0.0 mask 255.255.0.0 notrap nopeer nomodify [00:32] and to open 123 port in router? [00:32] if your subnet uses 192.160.x.x [00:32] and soft firewall [00:32] 192.168.x.x [00:32] yea [00:32] got it [00:33] Patrickdk: and i only want the router [00:33] I put its IP? [00:33] Hey how do you select multiple software packages to install when installing ubu server? [00:33] restrict 192.168.1.69 mask 255.255.0.0 notrap nopeer nomodify [00:34] for example [00:34] ? [00:36] why the odd restrict ip? [00:37] Patrickdk: if router is 192.168.0.1 [00:37] I use that IP? [00:38] why did u use 0.0 as example? [00:38] is it like wildcard? [00:38] cause anything that is a 0 in the netmask is pointness to define in the ip [00:38] and lots of programs will bomb out if you do [00:38] bomb out? [00:38] cause mine was *correct* and yours is, odd :) [00:39] crash, syntax error, fail, ... [00:39] Patrickdk: i just want the router to access the sv [00:39] so i just put router ip [00:39] is that correct? [00:39] NO [00:39] or i use my local ip [00:39] ? [00:40] NO [00:40] NO [00:40] learn how ip subnets work [00:40] tell me teacher [00:40] google, ip subnet [00:40] :D [00:41] * old_keyboard reading in is native language [00:43] Class C [00:44] B in that case [00:44] ignore anything talking about classes [00:44] B 10 128.0.0.1 191.255.255.254 255.255.0.0 /16 [00:45] it's kinda advanced [00:48] Patrickdk: I found this config on a site http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1301185010084+28353475&threadId=1357094 [00:48] restrict default ignore restrict 127.0.0.1 restrict your.ntp.server [00:51] and in here http://www.debianadmin.com/ntp-server-and-client-configuration-in-debian.html they say to use restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap [00:52] man, you really can't be bothered to learn what anything does? [00:52] just blindly follow whatever anything tell you to do? [00:53] i am learning [00:53] you say something other ppl say something different [00:53] :) [00:53] I told you exactly what you wanted [00:54] those are generic [00:54] and the first one has nothing to do with anything you want [00:54] ok [00:54] restrict 192.168.0.0 mask 255.255.0.0 notrap nopeer nomodify [00:54] you could remove the nopeer if you want [00:54] gonna get hacked :( [00:55] why? [00:55] what is the nopeer [00:55] option [00:55] no connections? [00:55] you shouldn't allow anyone using a 192.168.x.x network range on your network [00:55] it's for when two ntp servers agree to talk to each other [00:55] they can use each other as clients or servers [00:55] so i remove that I could mess it up [00:56] no [00:56] hm [00:56] ok [00:56] it means another ntp server on your network could become the source of time [00:56] and if that person is screwing with you [00:56] could theoredically cause your server to get bad time [00:57] nice [00:58] Patrickdk: and restrict 127.0.0.1 is for unlimited access [00:58] ? [02:00] ya [02:00] see i've learned something new today [02:01] then sudo service ntp restart [02:02] Patrickdk: what about the -4 and -6 should I remove it? [02:02] doubt it matters, dunno [02:02] doesnt make a difference since i only use ipv4 [02:02] I haven't bothered [02:02] k [02:03] the ORDER in the file matters a LOT though [02:03] k [02:03] i comment out those 2 lines and add restrict 192.168.0.0 mask 255.255.0.0 notrap nomodify [02:04] so now your open to everyone? [02:04] not yet [02:04] well, if you commented out the restrict default lines [02:04] but added restrict 192.168.0.0 mask 255.255.0.0 notrap nomodify [02:04] just add the restrict 192.168.0.0 line AFTER those [02:04] #restrict -4 default kod notrap nomodify nopeer noquery #restrict -6 default kod notrap nomodify nopeer noquery [02:05] ya, so now since no one is restricted by default :) [02:06] gonna get hax00red [02:07] or maybe it doesn't [02:07] but that never opened it up for me [02:07] probably have lots of other things going on with my config, cause it's a few hundred lines long [02:08] so im open to my subnet [02:08] and the rest of the world if i forward port in router [02:08] ? [02:12] all the options here http://www.eecis.udel.edu/~mills/ntp/html/accopt.html [02:35] hello people. I need assistance with changing the IP addess of my ubuntu server, I have obtained a seet of ip's from my isp and have them running on the network, I just checked the ip of the server and it's still runing the old one, how to I change it? [02:36] that is a google-able question [02:36] the current ip is 192.168.0.8 and I need to change it to *.*.*.139 (the * rep the puplic ip) [02:36] * patdk-lap still doesn't get why people bother hiding ip addresses [02:36] they are *public* knowledge, and of a small enough space to *guess* [02:37] so I can't help on this item in the ubuntu-server HELP channel? [02:37] use a VPN [02:37] technically, the answer is simple, edit /etc/network/interfaces [02:37] last time i sent a public ip here I ended up with DOS attacks [02:37] but the question you didn't ask, and can't do much about really is [02:37] you have to change the config of all your programs also [02:38] that I can get help from the program website, as it's one master program that changes everything, just wont do the eth ip [02:38] they overloaded your internet connection? [02:39] yes [02:40] ok it seems that the ip address is obtained automaticly, how do I do a release renew in ubuntu-serer? [02:40] the interface is eth1 [02:41] you run a server via dhcp? [02:41] I set static via the router. but I need to get the ip on the server first [02:41] it hasn't failed me yet [02:42] ifconfig -a will show you its address [02:42] does the router have a public ip? [02:42] and it's going route that public ip into the same network your mixing private ip? [02:42] and you have no issue with that? [02:43] i don't know if he realizes the issue.... [02:43] all devs on my network will be running the public ip addresses [02:43] I have firewalls on all systems [02:44] *facepalms hard* [02:44] are firewalls not good enough [02:44] no, you want to subnet public from private [02:45] how do I do that? [02:45] what type of routers do you have? [02:45] netgear [02:45] model numbers :) [02:45] dg834g [02:45] but it will be changing [02:45] serial numbers... [02:46] u need that for? [02:46] oh, home system crap [02:46] you cant get the info on the model? [02:46] nvm.... I didn't realize that was model... [02:46] yea... your need more commerical system... I'm using a home system netgear... so wish i could stick a different firmware on it [02:46] I can get the serial number if you need it [02:47] no need [02:47] ok recomend? [02:49] something you can flash pfsense onto... [02:52] yeah I can't recommend somethign... I'm only a security student atm... [02:52] oh ok. sorry guys I am new to this type of networking [02:53] get shoved into a sys admin role? [02:54] not really, I am starting a hosting company, so learning on the fly BEFORE I get customers [02:55] ooohhh... erm... whats your computer knowledge? [02:55] shaggy2: how are you connected to your isp? dedicated line? [02:55] 2 decicated lines [02:55] ok [02:56] Just configure each machine on your network with a different ip from the range you have been assigned [02:56] I have 2 ADSL2+ connections atm, first in line when fiber comes into my town (if your from australia then you'll know what I am on about if not the lookup the Australian NBN) [02:57] haha i live in Arkansas, we just retired the tin can and string [02:57] I assume you have a router on each line [02:57] so on a system that I don't want on the public network, I just set for eg 192.168.0.3 on the same subnet as the public systems? [02:57] i live in south dakota... we still have pony express [02:57] router---->main box----->switch---->rest of the boxes [02:58] the main box can do your firewalls and nat [02:58] *cough* pfsense [02:58] hehe ok [02:58] i will be quiet now [02:59] oh hey... keep going :_ [02:59] I was just suggesting using pfsense [02:59] both modem are going into a linux box that goes to a router all in the main room, then in my server room trunk cable (5 line) into a switch then into 3 systems and a server [03:00] sounds like you know what your doing, I will be quiet [03:00] everything runs from the main modem, the 2nd only kicks on on reduncy [03:01] make sure to test that it'll kick in aka unplug the main, so you don't discover its not working [03:01] already done, I do a weekly test [03:02] the router after the linux box in the dg834g [03:02] I run my network as i showed above [03:02] i'll be quite now too... look up some linux sys admin/network admin books if you need to look into subnetting and stuff [03:02] my main box has the public ip the rest are private [03:02] main box does firewall, nat, web and mail but mostly just tosses packets around [03:02] well thats how I had it before, but had to make changes so I can run a DNS server [03:02] mine is schools network -> crapy router -> switch -> boxes [03:02] that is what got me unstuck [03:02] just put the dns server on the main box also [03:03] I could view all domians on my network, but the people that was outside couldn't get to see them cause it was directing to local address's [03:03] 123/tcp closed ntp [03:04] shouldn't it respond as open [03:04] ? [03:04] if you are hosting other folks then i would assume you would have those boxes with public ip's also [03:04] so that they can get to them [03:04] well I only had 1 pub ip untill today [03:04] still the configuration i gave you will do that too [03:04] nod [03:05] so anyways back to changing the ip on the ubuntu server [03:05] I can manualy set it [03:05] sure [03:05] just need someone to tell me how [03:05] this is much more of an issue than that [03:06] you need to resign your whole network [03:06] http://www.howtogeek.com/howto/ubuntu/change-ubuntu-server-from-dhcp-to-a-static-ip-address/ [03:06] and I don't think that *router* you have will let you do it [03:06] well this is the only thing that "NEEDS Static" [03:07] it's allready done, I was on the phone with netgear support for 3 hours having them telling me that it wont do it, and then after 3 hours saying do this and this and this and now it works [03:07] dont forget to make a backup before you edit the file [03:07] paid them $89.95 for them to tell me to buy a new mobem, only to then turn around after abusing them then it now works [03:08] my advice is worth what you paid for it [03:08] hehe [03:08] take a look at that artice, it should fix you up [03:08] sweet thank you, but how do I make a backup of that file? [03:09] hey how can i see if my raid is mounted or not? [03:09] cp filename filename.original [03:09] also make sure you look at the comment from [03:10] Nickname007 and do that too [03:10] could also set static dhcp per mac [03:10] otherwise you wont have any name resolution [03:10] hope that helps [03:11] * patdk-lap still wonders how using a static ip inside the nat part of that router will work [03:16] shaggy2 you hosting webservers? [03:19] shaggy2: if your changes dont work you can always cp filename.original filename and be back where you started [03:23] formatting my server's 1.5tb raid... zeroing... omg... so much time... [04:58] What does the automatic generation of /etc/ssl/private/dovecot.pem? [05:10] hi [05:11] Do you know a good website to search mother board model? [05:17] New bug: #683591 in sensors-applet (universe) "sensors-applet randomly picks up duplicates" [Undecided,Invalid] https://launchpad.net/bugs/683591 [05:17] hm [05:35] tonyyarusso: The postinst maintainer script in the dovecot-common package [05:37] jmarsden: Ah. Is there an easy way to re-run it (to change the hostname), or do I have to walk through things manually? (The primary system hostname is johnmarty.org, but I want Dovecot's certificate for mail.johnmarty.org) [05:37] I'm not sure. Look at /var/lib/dpkg/info/.dovecot-common.postinst and maybe you can copy it somewhere, edit that script to do just the certificate generation, and run your modified copy? [05:38] seems reasonable [05:38] Make that /var/lib/dpkg/info/dovecot-common.postinst [06:33] jmarsden: I ended up having to do a bit more than that, but got it now. [07:42] New bug: #743484 in nut (main) "libupsclient.pc contains unresolved symbols" [High,Confirmed] https://launchpad.net/bugs/743484 [09:46] hello [09:46] anyone know anything about frame routes. or where I can get help [10:08] Atomhunter: are you there? [10:09] shaggy2: how did changing to a fixed ip go? [10:10] not goot [10:10] all ips are done [10:10] why? [10:10] but my router dun support framed routes [10:10] fucken netgear [10:10] ah [10:10] lookin for a decent router that will do it, was pointed at cisco [10:11] it's a shame [10:11] the netgear dg834g has been in use for about 4 years now across heaps of different isp's, and this is the first time it hasn't been able to do something [10:12] sorry to hear that [10:12] it is gunna be a sad day to see it go [10:12] never missed a beat [10:13] no matter how good it was, it's no good once it fails to keep up. :) [10:13] had a problem connecting once my ISP said I need a new modem, I said no check everything else first, thats when they found out the my line was pulled from the ADSL socket in the exchange [10:14] how dodgy is that [10:16] so can anyone recomend a router for me [10:17] cant your isp recommed what you should be using? [10:18] shaggy2: so, you'r looking at an adsl modem + router combined? [10:18] yeah [10:18] I've never liked that combo, rather have a bridged adsl modem than wont messup + standalone router. [10:19] dun have to be, I do have a dlink adsl2+ that I can use [10:19] currently I use a bridged zyxel + apple's time capsule, howeverm the timecapsule is not that great. [10:20] the bridged zyxel on the other hand doesn't fuck up. it just does it's thing. :) [10:20] cool [10:21] I just need something that supports framed routes... I have never played with this before so it's all new to me [10:21] (this is the cheapest basic version of the zyxel adsl modem, just one port in, one out, and in bridged mode, basically all it's features are disabled and can't break) [10:22] but I know nothing about framed routes, so can't recommend anything there. :/ [10:22] lol same with my ISP who sell them [10:24] afk. gott go get my house built. :) [10:24] lol [10:24] seriously. [10:24] it ain't gonna build itself. :) [10:31] lol [10:38] hey guys, i am having a bit of a problem with apache displaying php errors in browser, I have set my my php.ini varialbles to display errors [10:56] what's the problem kickar ? [10:56] lenios, hi, I can't get php error message displayed in browser [10:56] if there is an php error i get either plain white screen either [10:56] "The page you are trying to view cannot be shown because it uses an invalid or unsupported form of compression." [10:59] kickar what browser [11:00] KMFrog, every well know browser [11:00] IE, Mozilla, CHrome [11:00] they all say that exact thing? [11:00] yes error 330 Error content decoding failed [11:01] on my gentoo machine displayes mysql conn. error [11:01] i believe it is php/apache related issue [11:01] can you wget / telnet it to see the raw output? [11:02] KMFrog, yes I can [11:02] it says "Warning: mysql_connect(): Unknown MySQL server host 'http' (1) in /var/www/qa-db.php on line 50" [11:02] you doing your own compression? [11:03] in php [11:03] i have tried to install a cms [11:04] have you seen that before [11:04] ah, ok, CMS is maybe trying to do its own gzip compression and its all failing because of the error [11:04] you will need to remove the http:// from your config i would guess by that message [11:04] if its http://localhost it needs to be localhost [11:04] for the db address [11:05] KMFrog, i am not trying to fix this particular issue, I am trying to get apacge to show [11:05] the error in browser [11:05] the CMS probably says its a compressed page, but then the error is in plaintext so the browser dies [11:07] it is the same on the test script that i wrote [11:08] KMFrog, do you have any idea? [11:09] fixing the mysql error [11:09] I mean at all [11:09] check http://otgovorimi.com [11:09] this is the ubuntu server [11:10] this is the gentoo machine [11:10] http://dhwebservices.com/web/ [11:11] it is the same script [11:12] oh that's odd. your first url has something in the first four bytes which kills my browser [11:13] shauno, they are the same script [11:13] the first is ubuntu server [11:13] the second one is gento [11:13] gentoo* [11:13] the good page starts ef bb bf .. and then into the html. the bad one has an extra byte, ef bb bf 0a ... [11:14] shauno, maybe I have miskaten something in php / apache configuration [11:15]