[00:34] Hi! I can't get Postfix with Dovecot SASL working correctly. [00:34] I followed the server guide, but with no sucess. [00:35] When i telnet host 25. I'm not seeing the AUTH option [00:35] I've restarted postfix, dovecot & sasauthd & even reinstalled everything [00:35] Started postfix in -v mode. Checked logs. [00:35] Don't know what do next. Anyone ? [00:47] hallyn: thanks, now have a good weekend :) [04:26] Is there a way to sync packages/configs across multiple servers? [04:30] !clone | excalibr [04:30] excalibr: To replicate your packages selection on another machine (or restore it if re-installing), you can type « aptitude --display-format '%p' search '?installed!?automatic' > ~/my-packages », move the file "my-packages" to the other machine, and there type « sudo xargs aptitude --schedule-only install < my-packages ; sudo aptitude install » (this currently may cause problems with multiarch) - See also !automate === Lcawte|Away is now known as Lcawte === chu_ is now known as chu === Lcawte is now known as Lcawte|Away [07:27] Does ubuntu-zfs install anything to help me perform a weekly scrub of the zpool? There seem to be mentions of cronjobs in the changelog, but I have nothing in /etc/cron.*. [07:56] Oddly enough, my version of zfsutils is 0.6.0.65-0ubuntu1~precise1, despite the latest version online being 8.3~svn226546-6...maybe this is related to the problem. [07:57] Oh, that's just for kfreebsd. [12:23] May somone help me with my iptables setup? [12:23] iptables -P INPUT DROP [12:23] iptables -P OUTPUT DROP [12:23] iptables -P FORWARD DROP [12:23] iptables -A INPUT -i lo -j ACCEPT [12:23] (13:42:34) halvors: iptables -A OUTPUT -o lo -j ACCEPT [12:23] (13:42:36) halvors: iptables -A INPUT -i eth0 -j ACCEPT [12:23] (13:42:36) halvors: iptables -A OUTPUT -o eth0 -j ACCEPT [12:23] (13:43:28) halvors: iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE [12:23] (13:42:34) halvors: iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT [12:23] My current config- [12:24] use a pastebin... [12:25] halvors: what's the problem? [12:33] Well, my LAN hosts can't access the internet [12:35] The best way is to DROP anything and allow what i want, right? [12:37] remix_tj: You there? :) [12:38] yes [12:38] uhm [12:38] i think it's correct. Where are your lan devices connected? [12:39] on eth0 [12:40] And eth1 is WAN :) [12:44] remix_tj: Did you get that? I forgot to mention your nick :( [12:44] with this config [12:45] you can't go to the internet because incoming packets are dropped, so you're not able to open tcp connections [12:45] maybe you should add something like [12:45] iptables -A FORWARD -p tcp -m state --state RELATED, ESTABLISHED -j ACCEPT [12:46] and [12:47] you should insert something allowing icmp echo reply halvors [12:47] without that rule clients cannot get ping response [12:48] client can't get ping response from the Ubuntu Box or? [12:49] from host in the internet [12:49] Shouldn't i do something like: iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED, ESTABLISHED -j ACCEPT [12:49] You mean for remote hosts to be able to ping the Ubuntu box? [12:50] you should explicitely specify -p tcp [12:50] (afaik) [12:51] for icm reply i mean your LAN hosts cannot ping outside machines [12:51] *icmp [12:52] Why should i specify tcp? [12:53] With that i allow TCP, UDP and ICMP, right? [12:53] iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED, ESTABLISHED -j ACCEPT [12:54] -p tcp [12:54] Why? [12:55] Shouldn't i be able to use UDP and ICMP? [12:55] halvors: maybe do not work, i no not remember if iptables has a conntrack method for icmp and udp [12:55] *do not [12:55] hmm. [12:56] So you mean that this command won't work? [12:56] 148.122.169.23 [12:56] Obs [12:56] iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED, ESTABLISHED -j ACCEPT [12:56] That should be routing tcp... [12:57] halvors: try [12:57] if does not work you'll get an iptables error message [12:57] Ok. [12:57] Thanks you. [12:58] Maybe i'll loose connectivity now when trying this out. [13:07] remix_tj: When using the command "iptables -A FORWARD -p tcp -m state --state RELATED, ESTABLISHED -j ACCEPT" how gain udp and icmp too? [13:07] uhm [13:08] this depends on conntrack of the operating sistem, i do not know if there is something for conntracking udp and icmp, since they are stateless [13:57] halvors: afaik there is no real conntrack for udp and icmp, since those are stateless protocols === m_3_ is now known as m_3-backstage === PreciseOne is now known as IdleOne [15:57] anyone have a reference for installing juju on osx? [15:58] zookeeper keeps failing for me, figure others would have to solve that too [16:34] I get an error with isc-dhcp-server, this is the error i'm getting: [16:34] Jun 23 18:32:50 skymia-server dhcpd: /etc/dhcp/dhcpd.conf line 129: subnet 192.168.50.1 netmask 255.255.255.0: bad subnet number/mask combination. [16:34] Jun 23 18:32:50 skymia-server dhcpd: subnet 192.168.50.1 netmask 255.255.255.0 [16:34] Jun 23 18:32:50 skymia-server dhcpd: ^ [16:34] Why? [16:34] Isn't that right? [16:38] When i does: [16:39] "service isc-dhcp-server restart" get the error message, "Unknown instance"... [16:39] have you heard of patience before? [16:39] !Patience [16:39] Don't feel ignored and repeat your question quickly; if nobody knows your answer, nobody will answer you. While you wait, try searching https://help.ubuntu.com or http://ubuntuforums.org or http://askubuntu.com/ [16:39] sometimes it takes a bit to get an answer [16:39] just an FYI [16:40] * TheLordOfTime thinks you've got more than one issue going on though [16:40] Sorry, but i'm in a bit if a hurry here. [16:41] Is there any way to restore the startup script to default? Also the one from the dhcp3-server package. [16:42] halvors: I guess perhaps a bad character at the end [16:43] or perhaps a missing semicolon === Lcawte|Away is now known as Lcawte [16:47] wow, that was quite the drive by question. [16:47] off hand, 192.168.50.1 isn't a subnet [16:49] halvors: 192.168.50.1 isn't a subnet, pastebin your conf though [17:02] Solved it, thanks for help :D [17:02] halvors1: network problems? ;) [17:04] Yrah. [17:04] Yeah. [17:43] Daviey: ping === erichammond1 is now known as erichammond [19:27] a pci compliance require adding some awareness if someone delete a log file.. what is the least amount of work to acheive that with a security pkg may be? [19:28] we are sending the log file to splunk and arcsight.. but there might be another way to achieve locally.. bsm audit looks not verbose and open-audit does seems only look at hardware [19:29] s/not verbose/too verbose/ [19:29] did not see much discussion in https://help.ubuntu.com/12.04/serverguide/security.html [19:30] AppArmor profile does not look to be least amount of work.. [19:58] trying to rescue a crashed system, that had software raid [19:58] I believe raid5 on /dev/sda2, /dev/sdb2 and /dev/sdc2 [19:59] I'm now in "rescue mode" and I have no idea how to assemble them back === LordOfTime is now known as TheLordOfTime [20:03] Skaag: you could boot from a live cd and fix it that way as a easier route [20:03] I'm already in the shell, trying to use mdadm... [20:03] cat /proc/mdstat ? [20:04] oops.. i have to run.. [20:04] it shows me md127 with sda2 and sdc2 but not sdb2 [20:04] and md0 with sdc1 which is the /boot partition I believe [20:07] is the order important? [20:09] right now I have sdb2, sda2, sdc2 but i'm not sure that's the original order of physical devices in the array [20:15] the order is irrelevant [20:15] it can assemble in any order, the metadata says what's where [20:15] ok cool [20:15] so /proc/mdstat now says it's rebuilding [20:16] but I'm failing to mount it [20:16] despite having an active raid5 device [20:16] maybe now there's lvm on top..? [20:16] possibly [20:17] i'm lost. [20:18] how do I know what type of volume is on /dev/md127 … ? [20:18] you can fdisk -l [20:19] actually not [20:19] trying to remember what the right thing is [20:20] all frisk says is about the physical devices, they are all Linux raid autodetect [20:20] fdisk [20:20] damn autocorrect... [21:14] Good day, or evening .. how is everyone Im good my self lol [21:15] SpamapS: i hope you're around [21:17] chatty group aint ya lol [21:22] patience [21:22] :P [21:23] well, this is a support channel; if you have a question, !ask it [21:23] jkyle: hey [21:23] if you're just looking to chat, I think it's #ubuntu-social [21:23] qman__: isnt it -offtopic? [21:23] probably [21:24] jkyle: How are you doing? === Lcawte is now known as Lcawte|Away [23:42] Hello! [23:54] !ops [23:54] Help! Channel emergency! soren, lamont, mathiaz, Pici, Daviey, Tm_T or pmatulis [23:54] ban me [23:54] Yankees52: why do you keep doing this? [23:55] i am drunk right now ban me! [23:55] so what was your excuse for this morning? [23:55] hangover [23:56] I wonder if there is something more productive you could do with your time [23:56] drink booze! [23:56] I mean you seem like a half intelligent person. [23:56] ban me! [23:56] vodka babty [23:56] baby [23:57] not to fuel a fire, but high intelligence tends to lead to substance abuse rather than away from it [23:57] thought it leads to bordom [23:58] and then various other bad activities, like virus making [23:58] spam emails [23:58] ...