=== erichammond1 is now known as erichammond === erichammond1 is now known as erichammond === erichammond1 is now known as erichammond === unreal_ is now known as unreal === medberry is now known as med_out === erichammond1 is now known as erichammond [02:31] does anyone know how to setup a networked update server for apt in ubuntu 10.04? would it be setup as an apt repository? [02:47] digitalstimulus, you can set up an apt repository, but I prefer a squid apt proxy [02:47] less maintenance, less disk space [02:47] easier to set up clients [02:47] no client setup if you do it transparent === Krypt0s_ is now known as Krypt0s [05:02] Hi Guys, I'm looking to install an IRC server for a new project, there is alot of them out there, anyone would have a suggestion of which one to use? === Captainkrtek1 is now known as Captainkrtek [05:44] i'm having an issue assinging a subdomain in apache2 on ubuntu, i set up a subdomain called showtogo in /etc/apache2/sites-available/ and ran 'a2ensite showtogo' and set up the A record for showtogo, but going to the subdomain showtogo just goes to the main site pointed at the www subdomain [05:45] is there a way to troubleshoot this using a utility on ubuntu? i have another subdomain and i pretty much copied the same sites-available file and changed it appropriately, but it doesn't seem to be working [05:45] i'm on linode if that makes any difference [05:50] dougb: the tag that a request gets assigned to is determined by the ServerName field. [05:50] dougb: so did you actually add a section with a ServerName of 'showtogo.whatever.domain.com' ? [05:51] i did [05:52] let me put it in a pastebin [05:53] dougb: sudo apache2ctl -S should get you a summary of currently configurede vhosts on your server... might be quicker? :) [05:53] thanks jmarsden and SpamapS , i got it working [05:53] idk how i got it working, but it's working now :) [09:52] New bug: #789484 in clamav (main) "package clamav-base 0.97 dfsg-2ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 128" [Undecided,New] https://launchpad.net/bugs/789484 [12:21] New bug: #789520 in mysql-5.1 (main) "package mysql-server-5.1 (not installed) failed to install/upgrade: subprocess new pre-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/789520 [12:26] hey hey hey [12:26] just bought a vps with ubuntu 10.04 LTS [12:26] is it possible that nano doesn't exist in it? [12:27] i tried installing it and package cannot be found [12:29] it certainly should be there [12:30] perhaps they're using stripped in-house repositories? [12:30] check /etc/apt/sources.list [12:33] with what? [12:33] with vi [12:34] damn i hate it but i guess i have no choice [12:34] vipw is a good command man [12:34] i can create a user right there! right? [12:38] i'm connected through ssh [12:38] it should be there right [12:40] you'll need to use vi to change it, yes [12:40] but you can view it with cat or less or more [12:42] or just wget the nano package and install it with dpkg -i [12:42] http://packages.ubuntu.com/lucid/nano [12:42] * RoyK is a vim addict, but can easily understand that some people might want to use nano [12:48] RoyK, i see [12:48] vi is vim? [12:48] man its complicated for us beginners :) [13:01] well it turns out i needed the argument [13:01] -y [13:01] with apt-get install (-y) [13:01] now adding a user [13:19] sw0rdfish: vim is "vi improved" [13:19] sw0rdfish: run vimtutor :) [13:20] sw0rdfish: thinkgeek.com even has a coffee cup with vim cheat sheet :) [13:21] http://www.thinkgeek.com/homeoffice/mugs/7bbe/ [13:25] "real sysadmins don't use nano" [13:26] oh! [13:27] * RoyK er en EKTE sysadmin :D === NG_ is now known as ng_ [14:02] hola, am attempting to prove WAN ports open with "Loopback" if anybody can assist por favor [14:03] the system uses a DSL modem & ufw & the modem & Firewall have already proven configured [14:04] i'm reading the user management chapter in a linux book to handle my 10.04 LTS vps :) [14:06] is there a Ubuntu 11.04 Server users manual? [14:06] or a Networking manual? [14:07] !guide [14:07] The Ubuntu server guide may be found at http://help.ubuntu.com/10.04/serverguide/C/ [14:08] change the url to 11.04 to get the one for your version [14:08] that doesn't contain everything about linux, though, and I doubt such a document exist [14:09] Refael: what sort of wan connection? [14:09] what do you mean exactly RoyK? [14:09] sw0rdfish: where did you get this VPS? [14:10] Refael: is it a DSL connection? [14:10] si senor [14:10] pppoe? pppoa? bridged? [14:10] ppoe [14:11] so, have you setup pppd to handle it, or does the modem have a router to do this? [14:11] pppd? [14:11] not certain [14:11] can you connect to the net from the server? [14:11] if so, never mind :) [14:12] it is a "Loopback" problem within the local network. the exterior IPAddress reflects the WAN is closed [14:13] loopback is alocal address and is pretty irrelevant to getting on the internet [14:13] maybe you want routeback? [14:14] !routeback [14:14] it is called "Loopback" according to OpenSim Grid developers [14:14] it pertains hosting a Server, not simply surfing the net [14:15] * RoyK has no idea what that might be [14:15] and it actually pertains connecting a local Server Instance to a Robust Server Instance [14:15] routeback is when you need to route traffic in from one interface, back out that same interface [14:15] it's usually used as a workaround for letting applications set for external use work internally [14:16] go to page http://www.osgrid.org/index.php/regionconnect & you shall see your personal exterior IPAddress [14:16] it is perhaps "Routeback" then [14:16] though they reference it to be called "Loopback" [14:17] for example, I have it set up so that when I ssh my external IP from inside my LAN, it gets routed back to my ssh server, instead of simply ignored [14:19] not exactly certain what you signify. that is kinda vague [14:20] can you describe what that is outside a private example? [14:20] ok [14:21] Refael: what's your IP address? [14:21] so, you have a LAN with hosts, some servers and some clients [14:21] 192.168.0.25 [14:21] and then you have a router to the internet, which forwards ports to those servers [14:21] New bug: #789543 in samba (main) "package smbclient 2:3.5.8~dfsg-1ubuntu2.1 failed to install/upgrade: corrupted filesystem tarfile - corrupted package archive" [Undecided,New] https://launchpad.net/bugs/789543 [14:21] Im curious, is there a way to install software in the install enviroemnt on ubuntu [14:21] Refael: heh - you're behind a NATing router, then [14:22] it is actually a modem, though ok [14:22] im setting up a SSD, heard that its best to use GPT because of partition alignment [14:22] and on the client from inside that same LAN, you want to connect to your website hosted on one of those servers [14:22] but you don't want to have to go to 192.168.x.x every time, you just want to go to mysite.com [14:22] Refael: what's the IP reported on the server? [14:22] by ifconfig [14:22] so you set up rules on the router which re-route the traffic from clients on the LAN back to servers on the LAN [14:22] http://www.osgrid.org/index.php/regionconnect? [14:23] Refael: just run 'ifconfig' on the server [14:23] your own server [14:23] 76.242.191.0 [14:23] ? [14:23] .0? [14:23] is what needs to report WAN [14:23] what netmask? [14:24] but then - I guess your server is doing the NAT magick - iptables or just ufw? btw, does ufw have nat these days? [14:24] I think it does [14:24] does it? [14:24] it doesn't on 10.04, that's for sure [14:24] perhaps the ufw needs to be configured [14:24] I have the routeback rule I use in iptables, but I don't know if/how you could do it in ufw [14:24] you have to hack that into iptables rules [14:25] Refael: it's simple port forwarding in iptables [14:25] how is that configured? [14:25] $CMD -A FORWARD -o eth1 -d $IP -j ACCEPT [14:25] $CMD -A FORWARD -i eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT [14:25] where $CMD is /sbin/iptables, $IP is your external IP, and eth1 is your LAN interface [14:26] iirc something like iptables -t nat -I POSTROUTING -d 1.2.3.4 --dport 22 --to 192.168.x.x:22 [14:26] qman__: yeah, that's basic NAT setup [14:26] erm - no - it's not :P [14:26] can you explain that with more clarity por favor? [14:26] yeah [14:26] it's a hack [14:26] but it gets the job done [14:27] qman__: it doesn't do any NATing [14:27] nope, just routes [14:27] because it already knows how to route from the external IP [14:27] you'll need something like -j MASQUERADE for that [14:27] it just needs to know to do it form inside [14:28] no... you'll need masquerading or some NAT rules [14:28] well, I have a standard masquerading setup already [14:28] as in http://billauer.co.il/ipmasq-html.html [14:28] that's just the part that enables routeback [14:28] ok [14:29] what exactly are you trying to achive with this "routeback"? [14:29] just allowing external machines to connect to your pc? [14:29] when I ssh qman.strangled.net from inside my LAN, it works [14:29] am attempting to connect a local to external [14:29] So.. anyone know how I can install something like PArted in the install enviroment? [14:29] just as it does from the rest of the internet [14:29] local server instance to external server instance [14:30] Slyboots, choose to drop to a shell, apt-get install parted [14:30] though the external server instance relates what the internal server instance displays & stores [14:30] Refael: so long the connection is initiated from the inside, it shouldn't be a problem [14:30] qman__, Aye I tried that but it doesnt see apt-get as a valid command [14:30] it needs to be "Routeback" [14:30] then wtf is routeback? [14:30] when doing a nmap to the external address, it returns "closed" [14:31] is it simply port forwarding? [14:31] no [14:31] no, it works with port forwarding [14:31] but I'm not sure that's what he needs [14:31] it is "looping" local to external to local to external [14:31] it is [14:31] masquerading router with port forwards, from the internet you can access the server from one address [14:31] the OpenSim personelle just call it "Loopback" [14:31] please elaborate [14:32] routeback allows accessing that server from inside with the same address [14:32] join OpenSim [14:32] something that doesn't normally work [14:32] :P [14:32] because the router drops the traffic, because it thinks the LAN should just pick it up [14:32] ok, a local Server Instance connects to a Exterior Robust Server [14:33] so RoyK doesn't comprehend the scenario though wishes to dispute the resolve? [14:33] >.< [14:33] Slyboots, that's probably a busybox, choose recovery mode to get a full shell [14:34] Refael: please, I would really like to help, but you haven't really explained how this is supposed to work [14:34] <, okay [14:34] 15:32 < Refael> ok, a local Server Instance connects to a Exterior Robust Server [14:35] can you research OpenSim a lil RoyK? [14:35] Refael: no, I have more interesting things to do, sorry [14:35] have already explained the scenario [14:35] what is it you do not quite comprehend par example? [14:36] New bug: #789548 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/789548 === ng_ is now known as NG_ [14:36] if it is routeback you need, it should work well, if not, there's a workaround with either the local hosts file or split-horizon dns [14:37] if "Routeback" has not proven configured & nmap results closed port, then why should it work? [14:38] if nmap results in a closed port, you probably need port forwarding at the router [14:38] yeah [14:38] already established actually [14:38] the port should be open from the internet whether or not routeback is configured [14:38] though am testing nmap on exterior address [14:38] Refael: pastebin the config - iptables-save is good [14:38] outgoing address [14:38] not internal address [14:39] Refael: so you nmap the external address from the internal network? [14:39] routeback is only a hack for internal access to internal resources from the external address [14:39] if so, you need routeback [14:39] yes, need routeback [14:39] si [14:39] *smiles* [14:40] well, the two lines I posted above work on top of a working masquerading, port forwarding firewall [14:40] not sure ufw is capable of it [14:40] what is a working masquerading? [14:40] masquerading is also known as NAT overloading, or just NAT to some [14:41] Refael: you probably have one already, since you can use the network like you do now [14:41] it is what allows you to share one internet IP with multiple devices [14:42] Refael: if 76.242.191.0 really is your IP address, then you're not running Linux on that box :P [14:42] ok so i want to add user sw0rdfish with admin privileges almost as root, i'd first do: groupadd admin [14:43] sw0rdfish: nope, group admin exists already [14:43] sw0rdfish: useradd -m sw0rdfish [14:43] etc [14:43] that is what the external shows for [14:43] and then go to /etc/group and make it: admin:x:1 [14:43] right? [14:43] then edit /etc/group and add sw0rdfish to that group [14:43] where else would external be displayed? [14:44] Refael: pastebin 'ifconfig -' [14:44] Refael: pastebin 'ifconfig -a' [14:44] royk? [14:44] sw0rdfish, or 'useradd sw0rdfish admin' [14:44] err [14:45] sw0rdfish: the group 'admin' exists already - installation created it. you just need to add your user to that group [14:45] 'adduser sw0rdfish admin' [14:46] http://pastebin.com/HEN2eSyq [14:46] qman__: man adduser [14:46] Refael: then you have a NAT router in the modem === NG_ is now known as ng_ [14:47] http://paste.ubuntu.com/614183/ [14:48] oh [14:52] RoyK, how come adm is set like this: adm:x:4 [14:52] level 4 is high enough? [14:52] 4 is the group id [14:52] what if i move it to group sys:x:3 [14:52] and adm is the wrong group, admin is right [14:52] oh right [14:52] i checked /etc/nano there is no "admin" [14:52] 22 hours to build the array.. jesus x.x [14:53] sw0rdfish: edit /etc/group and add tou username at the end - the syntax is groupname:x:groupid:user1,user2,... [14:53] sw0rdfish: pastebin /etc/sudoers [14:53] sw0rdfish, grep admin /etc/group [14:53] mine is 112 [14:54] you mean pastebinit [14:54] Slyboots_, that's nothing, my last array took three days to build [14:54] sw0rdfish: that works as well [14:54] !pastebin [14:54] For posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imagebin.org/?page=add | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic. [14:54] qman__, brutal [14:54] WEll the reshape would take 5 days.. [14:55] So its a speed-boost [14:55] did everybody get the pastebin post? [14:55] did you adjust the kernel settings? [14:55] Refael: which one? [14:56] http://pastebin.com/HEN2eSyq [14:56] ifconfig -a [14:56] Refael: yes, and as I told you, you're behind a NAT router [14:56] yes [14:56] that is veritable [14:56] Slyboots_, /proc/sys/dev/raid/speed_limit_min and /proc/sys/dev/raid/speed_limit_max [14:56] Refael: so you'll need to configure that to do forwarding for you [14:57] it already is supposedly [14:57] which port? [14:57] the port is closed, so either the router is not set, or your server isn't listening on the port [14:57] my nmap scan only shows port 113/tcp open [14:57] the forwarding is 9000 to 9010/tcp & /udp [14:58] then would not even be in IRC [14:58] Refael: http://paste.ubuntu.com/614191/ [14:58] qman__, ? [14:58] Refael: the IRC connection is initiated from the inside - no need for port forwarding to do that [14:59] root ALL=(ALL:admin) ALL [14:59] is that right? [14:59] in /etc/sudoers [14:59] Slyboots_, http://www.cyberciti.biz/tips/linux-raid-increase-resync-rebuild-speed.html [15:00] of course in ubuntu you'll have to do it a little different, echo 200000 | sudo tee /proc/sys/dev/raid/speed_limit_min [15:00] sw0rdfish: looks good, but then, grep ^admin /etc/group [15:00] ok mate [15:01] Roy, what does that signify then? [15:02] already ascertained the port is not open to the public for reasons not certain [15:02] Refael: possibly that (a) you need a TCP/IP 101, or (b) the router isn't configured to forward those ports to anything that listens [15:02] thought that was udp? [15:03] how did you configure the router? [15:03] heh i just added the group admin and added my user to it and to sudo and edited /etc/sudoers to have this: root ALL=(ALL:admin:sudo) ALL [15:03] does it have a fancy gui? [15:04] RoyK, yes, it is a guifoo that uses internal address to forward ports, though not external [15:04] sw0rdfish: the admin group should have been there in the first place - if not, add it, add your user to it, either in the file, or with 'usermod -G admin username' [15:05] Refael: try adding a forward to port 22 to your server - so that we can see if that works [15:05] :) [15:05] tcp, that is [15:05] the answer is right there. it does port forwarding to internal address, not the external [15:05] sw0rdfish: in sudoers, you will want something like this '%admin ALL=(ALL): ALL' [15:06] is the reason that routeback is necessary [15:06] Refael: if so, that's something you'll have to do on the router, which AFAICT, is running OpenBSD [15:07] ? [15:07] there really is no router [15:07] Refael: do you know anything about RFC1918 IPs? [15:08] http://en.wikipedia.org/wiki/Private_network [15:08] the modem suggests, "Turn NAT *off *on" & Port Forward "ports = ... to internal address" [15:08] RoyK, not yet [15:08] am willing to learn [15:08] Refael: read up about that [15:08] !rfc1918 [15:08] read the wikipeda article above [15:09] the wiki article references such? [15:11] Refael: or google for an introduction in IP addressing - with an address of 192.168.x.x, you will _never_ be able to reach the internet unless some router is doing NAT for you [15:11] beleive me on that === ng_ is now known as NG_ [15:14] RoyK, you are suggesting that the issue results from routing the internal IPAddress to .0.25 au lieu the .0.1 for the router? [15:14] thought the result would be a IPAddress "Squatting" effect [15:15] there is a Router doing NAT [15:17] Refael: it's just a NAT router doing its job [15:17] Refael: you'll need to configure that [15:17] Refael: and the NAT router is _not_ your linux machine [15:18] can you explain por favor? [15:18] sw0rdfish: did you figure it out? [15:18] Refael: I already did, several times [15:19] Refael: use google - learn a bit about how IP routing works and what private IP addresses are and how they are used [15:19] It is common for packets originating in private address spaces to be misrouted onto the Internet. Private networks often do not properly configure DNS services for addresses used internally and attempt reverse DNS lookups for these addresses, causing extra traffic to the Internet root nameservers. [15:19] Refael: so? [15:20] is that the problem wherein the situation might be resolved to reconfigure the DHCP to multiple addresses? [15:21] actually thought it would help to limit it to .0.25 [15:21] Refael: You have a NATing router in front of your server/pc. Also, keep in mind that you have a NATing router in front of your server/pc. Don't forget the NATing router, it's an OpenBSD thing. And no, you can't reach the internet from a private address, however hard you try [15:21] so used .0.25 for the address, then .0.1 for the Gateway [15:21] * RoyK gives up [15:22] am using the internet ahora [15:22] and that's a shame [15:23] por que? [15:24] sorry, kid, but I can't do an entire IP 101 on IRC - google for it - learn how addressing works - then - when you're done - read it again [15:27] soy hombre verdadero [15:32] what is RFC 1483? [15:32] could it potentially resolve the situation? [15:35] "Multiprotocol Encapsulation over ATM Adaptation Layer 5" - if that can help you get through an unknown NAT gateway, then go ahead :) [15:37] sw0rdfish: wb [15:37] thanks buddy [15:38] sw0rdfish: where did you get this VPS? [15:39] btw i'm not sure but i think i got hacked a few minutes ago [15:39] my laptop shut off by itself and didn't wanna start again, i removed ethernet cable and power and externall hdd cables and then it accepted to power up haha [15:39] RoyK, uhhh [15:40] xchat2 :P [15:40] :) [15:40] is my client version [15:40] you have to do something rather stupid to get a modern linux distro hacked [15:41] sw0rdfish: download a fresh copy of chkrootkit from http://www.chkrootkit.org/ and compile and run it - it should find irregularities... [15:42] if they exist, that is [15:43] :) [15:43] yes sir, [15:43] books like Beginning Linux Command Line [15:44] are good to get me started right? [15:44] to change passwd of a user i just go like passwd sw0rdfish? [15:44] while i'm logged in as root that is [15:45] passwd sw0rdfish [15:45] then it sais [15:45] Enter new UNIX password [15:45] yes [15:45] thats for sw0rdfish ? [15:45] :) [15:45] yes [15:45] thanks [15:45] it won't echo any characters while you type [15:47] sw0rdfish: the one-liner for downloading and running chkrootkit is [15:47] wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz ; tar xzf chkrootkit.tar.gz ; cd chkrootkit-0.49/ ; mkae ; sudo ./chkrootkit -q [15:47] wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz ; tar xzf chkrootkit.tar.gz ; cd chkrootkit-0.49/ ; make ; sudo ./chkrootkit -q [15:47] even [15:48] Question, does CUDA run on the new Amazon EC2 Ubuntu HVM image? [15:50] tohava: I don't see why not - but I guess the best would be to ask Amazon [15:50] HVMs suck, btw, i/o speeds are very low [15:50] RoyK, mmm... any recommended IRC channel where I can ask them? Or should I just use the forum? [15:51] dunno - I don't use Amazon, nor do I use Xen much anymore [15:51] someone at ##xen might know [15:52] heh? just select one of the gpu instance types [15:53] Patrickdk, we're already using the one with amazon linux [15:53] we are trying to find out if ubuntu works too or not [15:53] naturally, we will be running on GPU instance [15:53] should be no difference [15:53] besides attempting to get the version of cuda you want, installed [15:54] Patrickdk, that is it, the amazon linux comes with CUDA driver installed. [15:54] Patrickdk: it may be a difference - redhat etc runs as PVMs, whereas ubuntu runs as a HWM [15:54] I hope there won't be any problems with Xen when trying to install CUDA driver manually on ubuntu image [15:55] I dunno that you can do gpu with pvm [15:55] last I looked at it, wasn't possible [15:56] why not? [15:56] cause pvm doesn't emulate a full machine [15:56] where with hwm you do pci passthough for the gpu [15:56] you can easily do pci passthrough with PVMs [15:56] hmm? I thought xen didn't support at, atleast in 3.0 [15:57] sorry - I may be wrong - I don't know Xen that well [15:57] it's been awhile since I used xen, since I've been converting away from it [15:57] anyway - I/O with a Xen HWM, tested with Ubuntu, certainly sucks rather badly [15:57] but I thought it was hwm only for passthough, maybe changed these days, but dunno how *updated xen* ec2 uses, doubt it's horribly new [16:08] IMHO the HVM/PVM model is rather outdated [16:15] is should show like sw0rdfish@ip_address when i login to it right [16:16] frickin weird, what's the big deal with everyone saying [16:16] i shouldn't use it as root [16:18] Hola, can a "Loopback" or "Routeback" be configured locally per the Network Connections utility? [16:19] Am looking & referencing the ubuntu forum thread @ http://ubuntuforums.org/showthread.php?t=1429032 [16:19] Refael: did you read up about IP yet? how it works? [16:19] to a degree, yes [16:19] go on [16:19] you won't get anywhere without a router that can be configured [16:19] have not recieved a certificate for merit yet. Do you hand such out RoyK? [16:19] oh man [16:20] sw0rdfish, is using sh [16:20] i should've made it bash [16:20] right? [16:20] chsh -s [16:20] got no idea how to [16:20] or vi /etc/passwd [16:20] chsh -s /bin/bash sw0rdfish [16:20] and am considering that the solution could be managed via the Network Connections utility, because the router is configured correctly [16:21] it is the way the Router recieved the Static IPAddress manually configured for it [16:21]