[00:01] I'm still using lucid. it's still supported! [00:01] yeah but with le packages du ancient [00:01] pffft. I prefer to think of them as "tried and trusted" [00:01] ^ [00:02] i'm typing from a lucid VM for irssi alone [00:02] precise is tried and trusted [00:02] aaand my local web server is still lucid [00:02] lucid is like le old [00:02] however [00:02] i might skip precise and go straight to trusty, but i know it's gonna be constant upgrades galore =/ [00:02] i'm not deliberately slagging lucid for the sake of it [00:02] i just prefer my "cluster" to have release parity [00:05] I've just been putting off upgrading because I tend to spawn a new VM, get everything up and going, and then kill the old one [00:05] which means an IP change, and this machine is my dns server [00:06] at some point i'm going to migrate my external-facing name servers to route53 [00:07] I like to keep them under my control because if I stop doing things myself, I completely forget how to and turn into an apple user [00:20] well, that seemed to go swimmingl [00:20] y [00:20] shauno: once you learn how to work with bind zone files, you never forget [01:17] the uk has a eurovision entry: http://www.bbc.co.uk/iplayer/episode/b03y10yq/Eurovision_Song_Contest_2014_The_UK_Launch/ [02:44] \o/ [02:44] iplayer says I'm not allowed to see it. I assume it's a state secret for now [06:55] shauno: or maybe just that bad that yyour computer is trying to protect you... :P [07:06] I am trying to do exact same thing and I am facing exact same problem. any solution for this ? http://ubuntuforums.org/showthread.php?t=1998543 [07:07] jennie: you want to preserve the whole disk, right ? [07:07] !info dd [07:07] Package dd does not exist in saucy [07:08] bah [07:08] jussi: I want to copy my C drive to other drive in the same PC for backup [07:13] jennie: I havent time to explain it properly, but if you are on linux, you can use dd. (dd if=path/to/cdrive of backup.img) [07:13] google some [07:13] err [07:13] dd if=path/to/cdrive of=backup.img [07:14] jussi: I have to copy all directories and files in C : except " windows " directory. [07:15] jennie: sorry, I cant help more right now, got to run [07:27] morning all [07:30] hey [07:30] whays up [07:31] time to watch the following [08:09] hmm strange [08:09] my crontab entry didnt run [08:17] mapps: check /var/log/auth.log and /var/log/syslog [08:17] mapps: crontab syntax might be incorrect, or file permissions [08:26] ah it did run but the file my script create went into a diff dir than expected [08:27] MartijnVdS, what do you use to stop bruce force ssh i was reading up on it and there's a few options..just ive got quite a lot of attempts in auth.log [08:29] mapps: I use denyhosts. [08:31] thanks is it easy to configure? [08:36] yeah only issue is that if you block your own IP it causes grief ;) [08:37] thanks will look into that later:) [08:43] Morning all [08:44] morning diplo [08:45] mapps: I use fail2ban [08:46] mapps: you can also configure it to block IPs that are h4x0ring your apache server, or anything that logs failed login attempts [08:46] aha thats handy [08:46] i was going to say i should probably look at doing somethig for apache [08:49] +1 for Fail2Ban [08:50] ok apt-cache finds fail2ban - ban hosts that cause multiple authentication errors [08:50] might give that a try too [08:51] By default it does ssh I believe, need to enable the others, lots of info on the net though and configs are fairly straight forward [08:55] yeah, you have to configure the others [08:55] but the config file is easy to read/expand [08:55] and you can write your own log filters for finding unauthorized logins if you want [09:05] Good morning all; happy Grammar Day! :-D [09:08] JamesTait: no no no, it's Pancake Day! [09:09] MartijnVdS: +1 [09:10] sadly, polar bear day is over [09:10] MooDoo: A day to eat pancakes sounds a lot saner than the whole "carnaval" thing they have in the south of the Netherlands.. 4 days of binge drinking and partying.. *shudder* [09:11] carnival of pancakes? [09:12] bashrc: http://en.wikipedia.org/wiki/Carnival_in_the_Netherlands [09:12] MartijnVdS, carnival of pancakes sprinkled with apostrophes? [09:13] installed MartijnVdS and setup for ssh that was easy [09:13] JamesTait: Just the pancakes please. I like them alot. :P [09:14] mapps: How did you install MartijnVdS, was it just a straight sudo apt-get install MartijnVdS :) [09:15] MaaS.. MartijnVdS as a Service? [09:15] DJones: you can't sudo apt-get install MartijnVdS as there are dependancy failures [09:15] :) [09:15] ;) [09:15] MooDoo: :) [09:15] DJones, I think it was a git clone. ;) [09:15] JamesTait: oi! [09:15] ;) [09:16] :D [09:16] heh DJones :D [09:17] now these pesky people will be blocked [09:17] china/brazil/france trying all kinds of usernames [09:17] guest/staff/a and of course root lol [09:18] You could if you're having issues block Russia/china etc if you're not expecting areas like that to access [10:43] morning boys and girls. [10:43] brobostigon: good morning sir [10:44] morning Mr MooDoo [10:45] Will somebody please go out and shoot the plonker that developed mysearchdial crapware, preferably using a time machine to go back 10-15 years and then do the shooting to make sure the bugger doesn'tr release the junk into the wild [10:55] DJones: not condoning murder by time travel, but perhaps going back and killing the grandfather to be certain. [10:55] or just providing him with contraception at the right moment. [10:55] IdleOne: GingerDog: Either of those would be a suitable solution [11:00] Morning all [11:01] anyone still use solaris sparc here? [11:01] spun up a t1000 hoping the single threads would run a lot faster than a 280R, seem *much* slower [11:04] foobarry: you spun up a T-1000?! http://www.sideshowtoy.com/mas_assets/jpg/900996_press01-001.jpg [11:06] JamesTait: http://www.reddit.com/r/britishproblems/comments/1zil2e/i_just_overheard_someone_wishing_someone_else_a/ [11:06] MartijnVdS, St Pancakes! [11:09] crashing LO-draw, also crashes LO-calc...:( [11:22] the iptables MASQUERADE is only apply to private IP address range right? when I want to route IP traffic from internal network with computers on non-private IP range I don't have to use it, do i? [11:22] cocoa117: it applies to anything you set it to apply to :) [11:23] cocoa117: you need it to connect from a private address to a public one [11:23] cocoa117: you don't need it for priv->priv or pub->pub, as long as you have routing set up [11:23] MartijnVdS, so that means by appling the iptables MASQUERADE, the traffic will be showing coming from firewall rather then from internal client? [11:23] cocoa117: indeed [11:23] also called "NAT", or "network address translation", or SNAT (source NAT) [11:24] (as it mangles at the source of the (outgoing) connection) [11:24] MartijnVdS, got it, the NAT in my mind always associated with private IP addresses. Never thought about the non-private IP ranges [11:25] cocoa117: not many people NAT connections from public addresses, as that would be silly :) [11:26] MartijnVdS, I do, in this case. by the way, 1.8.32.11/13 is public IP range right? [11:26] MartijnVdS, yes it is from China [11:26] cocoa117: it is. [11:27] descr: KNET Techonlogy (BeiJing) Co.,Ltd. [11:27] MartijnVdS, got it, yes i got same results [11:27] they can't spell Technology 8-) [11:27] ha, :) [11:33] Morning all [11:41] hey everyone :) [11:42] hello all [11:55] long time no see smittix :p [12:06] heh [12:06] Yeah in and out ;) [12:08] pebble android beta11, lets see if things have been fixed. [12:08] app-2-beta11 [12:09] brobostigon: beach robot and alpha.....are we playing word association? [12:09] MooDoo: no. [12:10] brobostigon: sorry just trying to make people smile [12:10] i do wonder why software companies release update after update without fixing any of the glaring bugs [12:10] MooDoo: ah, i see. [12:10] ali1234: quite normal to be honest [12:10] but why do they even bother? [12:11] actually, it has improved an awful lot, and lots been fixed. [12:11] ali1234: releasing new features makes it more attractive so they'll do that first [12:11] they never release new features though [12:11] router firmwares are great examples of this [12:12] they'll release maybe 10 updates in the course of a router's lifetime [12:12] none will add any features or fix any bugs [12:12] if you look at the source changes they are trivial [12:13] seems fairly normal for firmware in anything really [12:14] i had a bug fixed in router firmware [12:14] adsl router [12:14] resolved issues with adsl2 [12:17] i had the opposite experience actually [12:19] the update broke adsl and also made qos useless [12:23] no wacking great bugs yet, all is good, [12:30] curious to if anyone has any preferences or recommendations to open source CMDB's I've got an oppertunity to do something different from my normal prefernce and wondered if anyone had one they recommend and why [12:36] ikonia: CMDB? [12:40] Config Management DB [12:40] THink ICT Asset Management + [12:41] ah.. not like chef/puppet [12:42] /ansible/cfengine/etc. [12:46] nah, although that's what I was actually using, a puppet extension [12:46] but I need something a bit stand alone [12:47] just wondered if there was any people would say "yeah, that's good" as I'm just reading now [12:47] vim inventory.txt ;) [12:47] ikonia: for pcs or servers [12:47] not the best suggestion..... [12:47] foobarry: for "everything" [12:47] good luck [12:47] agentless? [12:47] pc,server,switch,router,firewall, etc [12:47] agent or agentless, doesn't matter really [12:48] if < 100 desktops then invetory.xls [12:48] just looking for food for thought really [12:48] if > 100 then spiceworks etc [12:48] or office junior [12:48] spiceworks....what's that [12:48] if only servers and switches then netdisco+racktables [12:50] basically "all infrastructure" [12:50] or use facter from puppet to pump into mysql and use php to manage via web page [12:51] openerp has asset management stuff, (not sure how that suits what you are after) [12:51] (because Ive no idea what a cmdb was until I googled it) === alan_g is now known as alan_g|lunch [12:53] foobarry: don't want to write anything, off the shelf, and as I said don't want to use puppet as it will be for things not controlled/managed by puppet too [12:57] as i say, good luck [12:57] hire a teenager and deploy inventory.xls [12:57] or use the asset db [12:57] that the finance dept will give u [13:01] Afternoon [13:02] hi popey [13:04] client texts me saying their 'system is slow' [13:04] so i connect in, sure enough having some serious latency issues [13:04] http://pastebin.com/GApCEbvZ [13:04] get that pinging their first hop out [13:09] foobarry: can't be that tough, there appear to be quite a few off the shelf cmdb's [13:10] whoever sent me a moderator invite on reddit needs to look at my posting history. i am a massive troll on reddit. [13:10] :) [13:10] * daftykins looks shocked [13:11] ;) [13:11] moderator invite to what? [13:11] I rarely use reddit [13:17] Good morning peeps :) [13:17] morning [13:17] Are opendns' dns servers being pants for anybody today? [13:18] Lookups are taking an age [13:18] I use googles. so no idea :p [13:18] I've never investigated it, but I wonder if it's possible to run your own dns server [13:20] It is [13:20] of course it is.... [13:20] But it would still have to perform lookups against other DNS servers [13:20] exactly [13:20] yes I expect so [13:21] it's more for when you want to control the DNS of your own domain [13:21] ubuntu runs a local caching dns server anyway [13:21] * bigcalm moves over to google's DNS servers [13:22] i use google's, they're much better than opendns [13:22] yeah mee to [13:22] I don't really know how dns works, but I'd guess that it has to automatically synchronise with other dns servers [13:22] there's no synchronization as such [13:22] 8.8.8.8 [13:23] oh [13:23] records are cached [13:23] Is the 2nd 8.8.4.4 or 4.4.4.4? [13:23] record propogation [13:24] so what if a domain name stays the same but the underlying IP address changes? [13:24] records have a ttl [13:24] That's where TTL comes into play [13:24] is that a sort of synchronisation? [13:24] no [13:25] it's a value in seconds of how long to keep a record for before requerying it [13:25] ah [13:25] synchronization implies pushing [13:25] thus anyone holding the IP for a domain in cache gets instructed to ask for an update [13:25] the cached dns records aren't updated until someone asks for it [13:26] Time To Live [13:26] bashrc: think of it like requesting your phone number gets changed in the phone book, it's correct at source but everyone else needs to go get the latest directory print to know ;) [13:26] yes [13:26] 8.8.8.8 is Google's DNS, no? [13:26] it is [13:26] * awilkins reads further up [13:27] it's one of theirs yes [13:27] Apparently my router just proxies whatever it gets told by DHCP [13:28] my /etc/resolv.conf says 127.0.1.1 [13:28] Hmm, that's a local address innit? [13:28] yep loopback [13:28] wow my cat is in a serious playful mood today [13:29] Probably got hold of some black market catnip [13:29] quick spot of tail-chase breakdancing followed by attacking a key on a window sill upstairs [13:29] awilkins: because ubuntu runs dnsmasq locally as a caching proxy [13:29] resolvconv daemon [13:29] or scripts [13:29] or whatever [13:29] by default it's dnsmasq [13:31] yeah but resolvconf manages /etc/resolv.conf and points it at dnsmasq afaik? [13:31] Yus [13:32] Router is also running dnsmasq [13:32] yes they often do [13:32] Router is running OpenWRT [13:32] (rather old build of it) [13:33] Having sshd on your router 4tw [13:33] ssh is really slow on those things :/ [13:33] All I use it for is tunnelling traffic mostly [13:33] Can peg my upstream bandwidth, so it's fast enough [13:37] bandwidth isn't the issue... the slooooow cpu in most routers is [13:37] unless you have a x86 routerboard or something [13:37] ali1234, No, it's a Broadcom [13:37] It's ancient [13:38] so MIPS then... and not even a good one [13:38] Has crappy WIFI but it all still works well enough that I haven't desired the pain of changing it [13:38] my router just patched a major flaw in it sigh! [13:38] i have a MIPS NAS somewhere, it can't even sustain 10mb and that's without encryption [13:39] speaking of NAS, should i get a kirkwood one that can run debian or red sleeve, or just get a HP microserver? [13:40] i'm going to put it in a cupboard so it should be low power/ low heat [13:40] I suppose I could use my ISPs router instead and stick a Pi in the loop to do my current routing [13:40] meh, Pi isn't exactly fast either [13:41] I've got an RB2011 box doing my routing [13:41] Tried to use my laptop as a bridge for my Pi but bridging wlan0 to eth0 is fiddly [13:42] http://routerboard.com/RB2011L [13:42] nah, it's easy [13:42] ali1234, Fiddlier than typing two commands :-) [13:42] well yeah [13:42] You need to install some packages and configure them [13:42] it's three commands [13:44] three-finger-salute [13:44] "Level4 RouterOS license. " [13:44] I presume you can run something non-commercial on it? [13:44] no you can only run routeros afaik [13:45] Splitter! [13:45] :-P [13:45] Does anyone know if there is a version of ubuntu to install on a samsung galaxy tab 8"? [13:45] if you had the time it would be possible to run a linux-derivative on there [13:46] I think it uses uboot which is open to the world [13:46] I need to look into it then. [13:46] smittix: don't know [13:47] smittix: there are many ports available/in-progress by "the community" [13:47] smittix: its "likely" but it probably isnt complete [13:47] smittix: whether anyone is doing one for the tab 8, though I don't know [13:49] Ok, thank you both. [14:00] Is there some new fashionable replacement for dpkg --get-selections for getting the same packages on one machine installed on another? === alan_g|lunch is now known as alan_g [14:03] lol http://esolangs.org/wiki/IRP [14:06] is there a way to give google my dropbox password and have them suck everything into drive? [14:09] ali1234: not used it https://mover.io [14:09] meh, i dont want a third party service [14:11] ali1234: how about http://www.lbreda.com/grive/start [14:11] you can just sync the dropbox folder to drive [14:11] the thing is, i don't want to deal with dropbox [14:12] well do it once, then delete db [14:12] i can't [14:12] people insist on using it to share files with me [14:12] oh you dont have dropbox already [14:12] I see... [14:12] i have dropbox [14:12] i don't want to install their software [14:12] i don't want to log in to their website [14:13] i just want a copy of the files people shared with me on dropbox inside my drive [14:13] ali1234: Synology's 5.0 firmware beta has an app that can connect to both.. I guess if you select the same directory, it'll sync them of for you [14:13] well both drive and dropbox have an api so it would be possible to write a script and run it on a cron [14:13] though you'd need a NAS from them 8-) [14:14] i don't want to sync the files over my broadband either [14:14] server? [14:15] yay nas [14:16] YayNAS? [14:16] :-p [14:16] :p [14:16] is that a new product? [14:16] if not, it should be [14:16] do it! [14:23] lol I meant yay nas :) I love nas [14:25] http://www.youtube.com/watch?v=qh9TIYXKSFk [14:43] ali1234: Heh, strange. I have just been looking how to migrate all of my stuff from onedrive to dropbox. [14:43] dropbox are really pushy. they keep emailing me to "finish setting up dropbox" with a link for their installer [14:44] I'm sure you can stop those coming through. [14:44] sure, i can just filter them on gmail [14:44] No I mean I'm sure you can stop them as in unsubscribe. [14:44] i know :) [14:45] heh [14:45] Ubuntu looks lovely on my new laptop. What a difference better resolution makes. [14:46] smittix: 14.04? [14:46] 13.10 [14:46] smittix: even better of 14.04 as they have corner smoothing etc :) looks wicked [14:46] :) [14:51] MooDoo: Just submitted a photograph for the Wallpapers in 14.04 [14:53] http://www.flickr.com/photos/smittix/10742521275/in/pool-2535978@N21 [14:54] Don't know how well it will do but it's worth a try. [15:06] I doubt they'll be able to use it - all rights reversed [15:07] I will change the licencing to open [15:07] Forgot about that [15:08] :-) if it's your photo then obviously you'll be able to assign rights willy-nilly. I was assuming you'd just linked a random photo :-p [15:08] No heh, it's my photo. [15:10] Harg ! [15:10] I never new starting your own company would be that intesive [15:10] knightwise: own company?! [15:10] what are you selling? [15:10] Freelance consultant [15:11] Whore for Hire :) [15:11] :O [15:11] Hired gun [15:11] that's what i'm trying to setup [15:11] Still a little bit of a secret. Will tell the folks at work tomorrow [15:11] :) indeed "guns for hire" :) [15:11] are they shiny? [15:11] * diddledan tries to flex his guns [15:11] knightwise: What do you consult on? [15:11] The have a STAR :) [15:11] hmm, flabby [15:12] TheOpenSourcerer: IT architecture, change management , service delivery , infra design [15:12] and dragging companies into the 21st century (kicking and screaming if I have to) [15:12] OK thanks. Don't need any of that right now but will keep you in mind. [15:13] TheOpenSourcerer: where are you located ? [15:13] Farnham, Surrey. [15:13] But that is not really important [15:13] not far from me [15:13] we have customers all over the place, many we never actually visit [15:14] Like the ones in the USA :-( [15:14] concord ftw [15:14] oh wait, it lost [15:14] dammit >.< [15:14] Yeah - I missed that one. Went to the F1 grand Prix in Monaco instead. [15:15] the world got slightly larger when the concord died [15:15] Had the choice to go to NY and watch a boxing match and come back on Concorde or go to Monaco for 4 days and party hard... [15:15] up until that point it was gradually shrinking [15:15] Guess which one won ;-) [15:16] I should eat lunch [15:16] I should think about heading off to parent's evening [15:20] otherwise you will get a bad report [15:22] My kids are perfect :-D [15:22] everyones kids are perfect and everyones wife is the most beautiful in the world [15:22] Their reports are always *way* better than mine ever were... [15:29] TheOpenSourcerer: sounds like they're secretly Stewey from family guy, covering their world domination antics [15:31] What's a decent RDP client these days? I normally use Remmina but I heard it's not actively developed? [15:32] vinagre? [15:32] with rdesktop integration? [15:32] I will have a look, thanks [15:45] Hmm, keyboard is US layout despite UK being chosen. [15:47] how rude [15:47] heh [16:09] That physically happened to me [16:09] Ordered a UK layout keyboard from the USA. They shipped a US layout [16:10] Still have it under my bed. Anybody want a US layout keyboard? :D [16:18] chiclet or big keys? [16:18] lawd no [16:18] they put pipe in an obscene place! [16:18] and that single height enter! *shudder* [16:30] If you bought a decent keyboard then you'd just be able to remove and swap the keys around [16:30] i.e. removable keycaps [16:32] 12345678/98/*-+ [16:37] bashrc: er, you know that doesn't work for a US layout right? [16:37] their actual style is different [16:37] wow, the DPS are stupid, they refuse to accept evidence through dropbox, they want me to attach 100+mb videos to an email [16:37] >.< [16:37] do it [16:38] can't, gmail limits 25mb [16:38] split it [16:38]