| Leben | Does anyone have a clue why a stock (VPS) LAMP installation would download my index page when I view the site from the domain with the www prefix, but work fine if I leave the www off? (ex. www.test.com doesn't work, test.com does) | 00:06 |
|---|---|---|
| rewt | does www.test.com point to the same ip as test.com ? | 00:08 |
| rewt | or is it a cname to test.com ? | 00:08 |
| Leben | cname | 00:08 |
| rewt | name-based vhost? | 00:08 |
| Leben | I'm using Dyndns as a host for the domain | 00:08 |
| Leben | Not sure. I tried adding a ServerName line to the 000-default, but it didn't do anything. Not sure if there's more I need to tinker with or not. | 00:10 |
| Proz01d | anyone know some ways to test bandwidth speeds (sites as well)? | 02:18 |
| Proz01d | also how do i restore the default firewall settings | 02:20 |
| Delerium_ | speedtest.net for pure bandwith .. for your site, don't know of any online tools, only commercial product | 02:20 |
| Proz01d | i need to test from the command line | 02:21 |
| Delerium_ | do you have a browser (like lynx) on your server? | 02:23 |
| Proz01d | nope | 02:23 |
| Kiall | Delerium_, if you have two servers .. you can use iperf | 02:23 |
| Kiall | sorry - Proz01d | 02:23 |
| Delerium_ | ;) | 02:24 |
| Proz01d | np.. | 02:24 |
| Delerium_ | The following links seems to analyze your site from the Internet http://www.websiteoptimization.com/services/analyze/ | 02:24 |
| Proz01d | i tried wget and the xp sp2 download link from MS | 02:25 |
| Kiall | yea .. thats another method :) wget http://ubuntu/some.iso ;) | 02:25 |
| Delerium_ | Maybe you can check with your hosting / internet provider to see if they have a FTP speed test available or something like that | 02:26 |
| Kiall | if you have two servers - nothing beats iperf for proving the max BW between the two.. other than that .. wget is usually the best option sadly! | 02:26 |
| Delerium_ | Didn't knew about iperf thanks Kiall | 02:27 |
| Kiall | yea - its basically a command line speedtest.net .. but without the servers provided for you ;) | 02:28 |
| Delerium_ | So you need to have iperf installed on both server and then launch it? | 02:28 |
| Kiall | Yea .. One side acts as a client, the other as a server .. | 02:29 |
| Delerium_ | Cool... I should give this a try | 02:29 |
| Kiall | BTW If its under 50Mb/s your expecting .. I can launch a server for a few mins.. | 02:30 |
| Delerium_ | Kiall: I'm waiting for my dedicated server to be setup, I'll test with that ;) | 02:31 |
| Delerium_ | Thanks | 02:31 |
| Kiall | sure... | 02:31 |
| Kiall | [ 3] 0.0-10.1 sec 339 MBytes 283.8 Mbits/sec <-- Disappointing results ;) | 02:32 |
| Proz01d | what are you trynig? | 02:33 |
| Proz01d | kaill -> was that a wget? | 02:34 |
| Kiall | aha .. thats better :) "[ 3] 0.0-10.0 sec 1.09 GBytes 933 Mbits/sec" | 02:35 |
| Kiall | no - iperf | 02:35 |
| Proz01d | WHAT?! | 02:35 |
| Kiall | LAN ;) | 02:35 |
| Kiall | 283.8 Mb/s was internet | 02:36 |
| Proz01d | that's still crazy fast | 02:36 |
| Kiall | Its not exactly my home connection ;) | 02:36 |
| Proz01d | i'm guessing fiber...not ethernet | 02:36 |
| Kiall | we take it as ethernet, but yea .. pretty much all BW in and out of datacenters is fibre .. | 02:37 |
| Delerium_ | I should try to run this on our servers ... but not sure they will let me do it ;( | 02:37 |
| Proz01d | you guys know how to get the default firewall settings back? | 02:38 |
| Kiall | lol - call it a diagnostic test ;) | 02:38 |
| Kiall | `iptables -F` will empty the rules .. empty might not be your default tho | 02:39 |
| Delerium_ | Kiall: ;) Management will says it's up to the network guys... they are pretty strict when it comes to do modification on our servers | 02:39 |
| Delerium_ | Wondering about Proz question, does ubuntu-server use SELinux? | 02:39 |
| Kiall | not by default, it does use apparmor which is somewhat similar | 02:40 |
| Delerium_ | Ho okay... | 02:41 |
| Delerium_ | AppArmor is more on the "application level" if I'm not mistaken | 02:41 |
| Delerium_ | ? | 02:41 |
| Kiall | Yea .. http://paste.ubuntu.com/610893/ | 02:42 |
| Kiall | thats the mysql appa config... | 02:42 |
| Delerium_ | Thanks Kiall | 02:43 |
| uvirtbot | New bug: #786040 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/786040 | 02:46 |
| Delerium_ | Kiall, so basically, AppArmor restrict the files that a process can read / write !? | 02:49 |
| Kiall | yea .. when a program has an AA profile, it only has access to what's in the profile, and nothing else.. | 02:50 |
| Kiall | eg mysql's one has "network tcp" but not "network udp" .. so no UDP sockets ... | 02:51 |
| Delerium_ | k, make sense .. nice to know ... I've been using Linux for a while but never go in deep... | 02:51 |
| Delerium_ | Don't have much time with work (and we have only 2 olllddd Linux server) | 02:52 |
| fastveg | if I ssh into my server and run a python script, will the script stop when I close the ssh session? | 02:52 |
| Kiall | fastveg, yes .. unless you start it in the background .. | 02:52 |
| fastveg | or will it keep running even though I disconnect | 02:52 |
| Kiall | eg `python bla.py &` | 02:52 |
| Kiall | or `screen -dmS my_app python bla.py` | 02:52 |
| fastveg | ok thanks | 02:53 |
| Delerium_ | fastveg, ./myscript & | 02:53 |
| fastveg | even better | 02:53 |
| Kiall | if you think you'll want to "reattch" to see how its doing etc ... use screen.. otherwise pop at & at the end and it'll quit when it quits :) | 02:54 |
| Kiall | reattach* | 02:54 |
| Delerium_ | Having a log file is also a good idea ;) | 02:54 |
| Kiall | yea .. nothing worse than seeing a script die after a few hours of processing without logs ;) | 02:55 |
| Delerium_ | yup.. It kills! | 02:55 |
| Kiall | I had a 3 week long data import process that couldnt be paused, it had to start again from scratch if it died .. | 02:56 |
| Kiall | 2 weeks in .. bam. | 02:56 |
| Delerium_ | 3 weeks import!?!?!? Gossshh... that was a DB ? | 02:56 |
| Kiall | suffice to say heads rolled ;) | 02:56 |
| Delerium_ | lol | 02:57 |
| Kiall | yea - 3 weeks .. data was sourced from an API that was slow a hell .. and there was craploads of it | 02:57 |
| Kiall | slow as* | 02:57 |
| Delerium_ | Well... there is slow ... and SLLLOWWWWW | 02:59 |
| Kiall | ;) | 03:02 |
| Proz01d | just curious...what are you guys using for dns? | 03:06 |
| Delerium_ | My ISP DNS | 03:06 |
| Kiall | bind + the probind web UI .. | 03:06 |
| Delerium_ | ho.. . as a DNS server... sorry ;) | 03:06 |
| Proz01d | lol np | 03:06 |
| Delerium_ | bind too | 03:06 |
| Delerium_ | but I don't personnaly manage our DNS, so I suck at bind ;) | 03:07 |
| Proz01d | i'm setting up a vpn and i need to specify a dns... | 03:08 |
| Proz01d | so i'm pointing to one externally | 03:08 |
| Proz01d | but i'm trying to improve performance so i was wondering if I should use bind instead | 03:12 |
| Kiall | generally (ie unless your ISP's DNS servers are crap) .. you're better using them for recursive resolving... | 03:14 |
| Kiall | (ie for looking up google.com... rather than mydomain.com DNS hosting) .. | 03:15 |
| jmarsden | Proz01d: Unless you have measured current performance and are sure from that work that DNS is your bottleneck, switching DNS servers seems unlikely to "improve performance"... are you sure DNS is slowing things down, not something else? | 03:18 |
| Proz01d | nope... but right now i'm pushing some dns server ip from the base openvpn isntall (it was commented out originally) | 03:24 |
| Kiall | you probably dont need to be pushing a DNS server with the VPN, not unless you have your own internal DNS setup on the far side of the VPN, and it sounds like you don't :) | 03:27 |
| Proz01d | i guess i can try diabling it | 03:27 |
| m_tadeu | what is the best place to put setkeycodes command? | 03:37 |
| maxagaz | hi | 04:18 |
| maxagaz | I'm in China where many website are banned, but I have a server abroad on which I installed OpenVPN, from this, can you tell me the main lines on how to open some website using this VPN ? | 04:20 |
| === MTecknology is now known as EvilMTeck | ||
| jmarsden | maxagaz: Sounds like you want to run a proxy on the "abroad" server and the point your local web browser to that proxy. I have used tinyproxy for this sort of thing (well, not from China...!) | 05:00 |
| maxagaz | jmarsden, so, basically, what I need is a vpn (like openvpn), a proxy server (probably squid) and some iptables ? | 05:03 |
| jmarsden | squid would be very heavyweight for this kind of (single user) use, and since you already have the tunnel working, no real need for iptables changes that I can see... but other than that, yes. | 05:04 |
| jmarsden | If the authorities see your VPN tunnel and get suspicious of you, don't blame me :) | 05:05 |
| maxagaz | jmarsden, there's nothing wrong in making a tunnel, many companies do it | 05:06 |
| jmarsden | OK. If I were trying to prevent people seeing some websites, I'd sure be suspicions of people using VPNs... it's the #1 obvious way to get around the blocking :) Be glad I'm not the Chinese authorities :) :) | 05:07 |
| Kiall | maxagaz, you just need the VPN, so long as it sends a default route | 05:07 |
| Kiall | (and sends a DNS server from outside china) | 05:07 |
| jmarsden | Kiall: You can do that, but on a transcontinental link that could be pretty slow... | 05:07 |
| Kiall | a proxy will have the same issue + wont "hide" anything but HTTP (eg DNS ..) | 05:08 |
| maxagaz | Kiall, I already have the VPN working, how to redirect the traffic through it ? | 05:09 |
| jmarsden | A proxy inside the tunnel is more about bandwidth than hiding, IMO. Better to only move the web traffic for the sites you need to use over the tunnel that way, leave the rest of your traffic out in the open locally. But... theres more than one way to do it. | 05:09 |
| Kiall | maxagaz, if you add `push "redirect-gateway def1"` to the config .. it should move all traffic over then VPN | 05:10 |
| maxagaz | Kiall, where to add it ? | 05:10 |
| maxagaz | oh I see | 05:10 |
| Kiall | Anywhere in the server config file | 05:10 |
| Kiall | jmarsden, yea being selective about what you tunnel will obv make it faster.. but leaves you wide open to making a mistake :) | 05:11 |
| maxagaz | Kiall, but then all the traffic would be redirected, I just want the forbidden addresses to be redirected | 05:11 |
| Kiall | thats a tad harder to do - since your browser doesn't let you say "use proxy X for bla.com and bla2.com" .. | 05:12 |
| jmarsden | maxagaz: Use proxying and set your browser to selectively proxy ... firefox has addings like foxyproxy for that | 05:12 |
| jmarsden | Kiall: It does, with foxyproxy :) | 05:12 |
| Kiall | jmarsden, ah nice :) | 05:12 |
| maxagaz | that sounds a good idea | 05:13 |
| jmarsden | actually I hope it still does, not sure I have used that addon in Firefox 4.0 yet :) | 05:13 |
| Kiall | anyway - as jmarsden said, a proxy is better for selective traffic .. bear in mind that DNS may be blocked so try google's DNS servers (8.8.8.8 and 8.8.4.4) .. if "they" prevent you using 3rd party DNS, you have to push DNS over the VPN aswell | 05:14 |
| maxagaz | I can change it manually to my resolv.conf | 05:14 |
| jmarsden | Kiall: Now that could get interesting... I wonder if you could set up a local DNS server and use bind views to do selective DNS forwarding :) | 05:15 |
| Kiall | sure - but they can catch all port 53 (DNS) traffic, and hijack it :) | 05:15 |
| Kiall | jmarsden, yea .. thats certainly possible | 05:15 |
| Kiall | you could do the same with a hosts file aswell tho :) | 05:16 |
| jmarsden | Kiall: well, harder to add every host *.microsoft.com to your hosts file than to tell a view to forward dns for *.microsoft.com through the VPN, I would think :) | 05:17 |
| jmarsden | or *.facebook.com, or *.google.com ... | 05:17 |
| Kiall | yup - I didn't think of that! | 05:18 |
| maxagaz | how to allow my vpn to make redirections ? | 05:23 |
| maxagaz | in foxyproxy, I have put the address of my vpn, but which port should I set ? | 05:27 |
| jmarsden | The port that your proxy is listening on :) | 05:30 |
| maxagaz | jmarsden, ah, so I still have to install a proxy | 05:30 |
| jmarsden | If you want to do this the "selective" way, then I think so. | 05:31 |
| jmarsden | foxyproxy is for using proxies... hence its name :) | 05:31 |
| maxagaz | jmarsden, and how to link the proxy to the vpn ? | 05:32 |
| maxagaz | jmarsden, else, anybody could use my server as a proxy... | 05:32 |
| jmarsden | Hmmm? Run the proxy server on the remote server at the 'abroad' end of the VPN tunnel. You can configure proxies to only accept request from specific IPs, etc... read the docs that come with whatever proxy server software you choose. | 05:33 |
| maxagaz | jmarsden, ok, I see | 05:33 |
| jmarsden | You may be able to only bind the proxy listener to the vpn tunnel interface on that server, so it is invisible to anyone else, too. | 05:33 |
| * Kiall would still just go the "want to visit something restricted? start VPN, all traffic goes via it.. done? disconnect" route.. much simplier :) | 05:36 | |
| maxagaz | Kiall, how would you do that ? | 05:37 |
| Kiall | with the default route .. then you can just start and stop the VPN as you want to use it .. | 05:38 |
| Kiall | pretty much the same enabling disabling the proxy .. and safter/easier than creating a list of hosts for foxyproxy to selectively route over the VPN+Proxy combo | 05:39 |
| maxagaz | Kiall, you mean, by doing route del default gw, route add default gw my_vpn_ip ? | 05:39 |
| Kiall | no - with `push "redirect-gateway def1"` in the VPN servers config, and then you start/stop the VPN as you need to use it | 05:40 |
| maxagaz | Kiall, okay | 05:41 |
| Kiall | Its defiantly easier to manage that way :) | 05:41 |
| maxagaz | Kiall, okay, I'll try it right now | 05:43 |
| maxagaz | Kiall, do I also need a 'push "route..." ' ? | 05:48 |
| Kiall | nope - just the gateway | 05:49 |
| Kiall | maybe a `push "dhcp-option DNS 8.8.8.8"` line aswell | 05:49 |
| maxagaz | Kiall, it didn't work | 06:34 |
| Kiall | humm what happened? | 06:35 |
| maxagaz | Kiall, when i restart the vpn client, i can't ping anything | 06:35 |
| maxagaz | Kiall, and even lost this chat room | 06:35 |
| Kiall | did you setup NAT on the server? | 06:36 |
| maxagaz | Kiall, no | 06:36 |
| maxagaz | Kiall, perhaps there are some default rules... | 06:36 |
| maxagaz | Kiall, i only have fail2ban in my iptables | 06:37 |
| Kiall | aha :) I thought that was mentioned earlier .. whoops .. | 06:37 |
| maxagaz | Kiall, ah... :) | 06:38 |
| Kiall | `iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE` - assuming eth0 is the servers internet connection | 06:38 |
| Kiall | BUT | 06:38 |
| Kiall | be careful with this part! | 06:38 |
| Kiall | (you have console access to the server? or the ability to reboot it?) | 06:38 |
| maxagaz | why ? | 06:38 |
| maxagaz | Kiall, yes | 06:38 |
| Kiall | then no worries :) | 06:38 |
| maxagaz | Kiall, perhaps I sould just try it fo a few seconds | 06:39 |
| Kiall | Make a mistake with the rule and you could loose SSH access until you reboot / remove it (and that could be wrong .. its late!) | 06:39 |
| Kiall | once its added, it either works, or you need to reboot / remove the rule via the server | 06:39 |
| maxagaz | Kiall, I'll do it and pray | 06:40 |
| Kiall | ;) | 06:40 |
| Kiall | also `iptables -t filter -A FORWARD -i vtun0 -o eth0 -j ACCEPT` | 06:40 |
| maxagaz | oh, i need both... | 06:40 |
| Kiall | (assuming vtun0 == vpn interface, and eth0 == servers internet) | 06:40 |
| maxagaz | that was okay for the first one :) | 06:40 |
| maxagaz | it's just tun0 for me | 06:41 |
| Kiall | yea - tun0 instead of vtun0 then | 06:41 |
| maxagaz | okay, now let's restart the client to see if it works... | 06:42 |
| maxagaz | I might lose the chat again... | 06:42 |
| Kiall | you most likely will as it connects | 06:42 |
| Kiall | it should connect right back again tho - if it wored ;) | 06:42 |
| Kiall | worked* | 06:42 |
| maxagaz | I was disconnected | 06:51 |
| maxagaz | Kiall, those to rules were for the server, right ? | 06:51 |
| Kiall | yea | 06:51 |
| maxagaz | ok | 06:52 |
| Kiall | any idea what part failed? | 06:52 |
| Kiall | This might be worth a read :) http://alestic.com/2009/05/openvpn-ec2 | 06:53 |
| Kiall | Skip the ec2 parts and see if there is anything in there you havent already done | 06:53 |
| maxagaz | Kiall, with the two open vpn settings you gave me, I should get 8.8.8.8 in my resolv.conf and some changes in my routes, right ? | 06:54 |
| Kiall | 8.8.8.8 resolv.conf doesnt always work (depends on the client settings...) .. but the default route should have swapped | 06:54 |
| maxagaz | Kiall, it didn't swap... | 06:55 |
| Kiall | see anything in that link you've missed? | 06:56 |
| maxagaz | firefox is still trying to open it | 06:56 |
| maxagaz | I hope this website isn't banned | 06:56 |
| maxagaz | so many websites are banned here | 06:56 |
| maxagaz | i'll have to use proxy4free to open it... | 06:57 |
| Kiall | or http://i.imgur.com/WvKFN.png | 06:58 |
| maxagaz | that one works :) | 06:58 |
| maxagaz | thanks a lot :) | 06:59 |
| Kiall | anyway - gotta run .. good luck | 06:59 |
| maxagaz | I have to go out to eat too, i'll try again once back, thanks a lot for your help | 07:00 |
| Zaclnxnewb | hi | 08:19 |
| Zaclnxnewb | Could someone help me get ddclient working? | 08:20 |
| Zaclnxnewb | or any DNS updater that will update multiple DNS servers with the dynamic IP? | 08:20 |
| Zaclnxnewb | What I've tried to work out isn't working | 08:20 |
| Zaclnxnewb | I would like it to update every 15 minutes | 08:20 |
| === nickmoeck_ is now known as nickmoeck | ||
| === NG_ is now known as ng_ | ||
| xperia | hello to all. i have very big problems with web server session handling. for some strange reason session data disapear when i go from one page to other inside my site. i have tryed last 24 hours all what i can think off but nothing helped till yet. need really help with this problem. | 11:55 |
| === ng_ is now known as NG_ | ||
| === NG_ is now known as ng_ | ||
| dkn | i'm trying to access a samba smb share from a mac, i'm trying to use force user & guest so anyone can write & delete files on this share, but i can only seem to create folders, not files | 13:22 |
| === ng_ is now known as NG_ | ||
| === NG_ is now known as ng_ | ||
| uvirtbot | New bug: #786188 in openssh (main) "package openssh-server 1:5.8p1-1ubuntu3 failed to install/upgrade: le sous-processus nouveau script pre-installation a retourné une erreur de sortie d'état 1" [Undecided,New] https://launchpad.net/bugs/786188 | 15:26 |
| === ng_ is now known as NG_ | ||
| uvirtbot | New bug: #777855 in glibc "resolver failures without even sending queries, break Postfix" [High,Confirmed] https://launchpad.net/bugs/777855 | 16:07 |
| bluethundr_ | hello... what is the ubuntu equivalent of chkconfig under red hat? | 16:28 |
| RoyK | anyone that can see wtf is wrong with this regex? it's meant to mach a mac address, but fails /[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}:[0-9a-f]{2}/ | 16:41 |
| bencc | how do I know if I need tcp tuning? http://fasterdata.es.net/fasterdata/host-tuning/linux/ | 17:06 |
| bencc | will I see errors? | 17:06 |
| jmarsden | bluethundr_: sudo service --status-all # for a basic status list. For run level details, you can try installing and using sysv-rc-conf | 17:17 |
| Proz01d | royk: did you get it qworking?\ | 17:49 |
| Proz01d | where are you trying to run this? | 17:49 |
| uvirtbot | New bug: #786250 in backuppc (main) "Remove dependency on perl-suid for Perl 5.12" [Undecided,New] https://launchpad.net/bugs/786250 | 19:02 |
| uuser123 | i am using ubuntu 10.04 ,how do i update my kvm to latest version | 19:14 |
| jmarsden | Is qemu-kvm | 0.12.3+noroms-0ubuntu9.6 | lucid-updates | source, amd64, i386 recent enough for your needs? That is in lucid-updates. | 19:16 |
| RoyK | Proz01d: yeah | 19:41 |
| divansantana | anyone know the current state of kolab with ubuntu server? There is a wiki page talking about it being included with 10.10 server, but not sure if it's working, don't see any release news? | 20:47 |
| divansantana | anyone? | 20:54 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!
