/srv/irclogs.ubuntu.com/2014/03/23/#ubuntu-server.txt

=== Guest11740 is now known as jrgifford
=== peter is now known as Guest42490
lordievaderGood morning.08:58
=== olegb_ is now known as olegb
=== Zeus is now known as Guest10084
=== tom][ is now known as tom[]
=== Daviey_ is now known as Daviey
=== Smark[Gone] is now known as Smark
=== Malediction_ is now known as Malediction
=== hggdh_ is now known as hggdh
clyfemy apache does not serve any requests, I can't seem to debug it ..14:19
clyfetrying to set a local development env14:19
clyfeError code: ERR_CONNECTION_REFUSED14:20
=== kees_ is now known as kees
=== a1berto_ is now known as a1berto
|usefedoraHi, I changed my wlan0 to use a static IP by editing /etc/network/interfaces17:32
|usefedoraAnd now it's refusing to connect.17:32
|usefedoraAnyone have ideas on how to troubleshoot?17:33
ogra_|usefedora, https://wiki.debian.org/WiFi/HowToUse#WPA-PSK_and_WPA2-PSK17:34
ogra_see point 317:34
ogra_that should suffice17:34
|usefedoraogra_: thanks, i'll have a look.17:34
|usefedoraogra_: i'd been using http://www.thefanclub.co.za/how-to/how-add-wireless-lan-adaptor-static-ip-ubuntu-auto-connects-startup17:36
|usefedorashould i not use the hex encoded psk value that it says to?17:36
|usefedoraogra_: any more ideas?17:43
ac500help. my ubuntu server is churning file IO.18:10
ac500i think i have malware18:11
ac500iotop shows a process running "sendmail"18:11
ac500"sendmail: MTA: ./somehexstring from queue18:11
ac500and it just goes on like that indefinitely18:11
ac500i killed it18:11
ac500it came back in a few minutes18:11
ac500im pretty new to linux servers but i cant figure out what i must have done wrong to get malware18:12
ac500assuming this is malware18:13
ac500i dont know what to do though to remove it18:13
ac500i installed clamav and am going to try that18:13
ac500mostly though im wondering if this is a known problem (sendmail spinning all day long churning file IO)18:14
ac500because im new to linux and servers and it could be legitimate, but i cant figure out any legitmate reason to churn io and have "sendmail" running on a box i dont use mail on18:14
ac500nobody?18:22
ac500im seriously thinking of just reinstalling the os18:22
ac500though i hope i can learn something form this18:22
ac500from*18:22
bekkstl;dr18:24
ac500tldr: i think i have malware sending mail18:26
ac500tldr ubuntu security sucks if you want to get quippey :P18:26
ac500jk18:26
=== Havenstance_ is now known as Havenstance
bekksCan you please form a full support question on one line, and watch your language please?18:30
ac500what language?18:31
bekksImpolite language.18:32
ac500like "tldr"?18:32
bekksLike your opinion about ubuntu security.18:32
ac500question: is theres something wrong when iptop shows a "sendmail" process running perpetually, when I have none of my own mail use on this box?18:32
bekksNo, there is nothing wrong. If your server is idleing so much that even sendmail makes it up to the top ten, then every is alright.18:33
ac500the HD is churning heavily18:33
ac500when i kill it the audible churn stops18:33
ac500IO >90% from iotop18:34
ac500iirc (ill check again when it starts up again)18:34
bekksThe check the sendmail logs whats going on.18:34
ac500cat /var/log/mail.log | wc -l18:35
ac50059407518:35
ac500is that normal?18:35
ac500filled with stuff like:18:36
ac500Mar 23 08:21:19 computebox sm-mta[10463]: s2K6l55T009136: Warning: program /usr/sbin/sensible-mda unsafe: No such file or directory Mar 23 08:21:19 computebox sm-mta[10463]: s2K6l55T009136: SYSERR(root): Cannot exec /usr/sbin/sensible-mda: No such file or directory Mar 23 08:21:19 computebox sm-mta[5310]: s2K6l55T009136: to=root, delay=3+08:28:41, xdelay=00:00:00, mailer=local, pri=43500000, dsn=4.0.0, stat=Operating system error18:36
ac500.... and the disk noises have started up again18:36
bekksThen check your sendmail installation. Note the "no suche file..." messages.18:36
ac500hmm well its not 90% like i thought at least18:37
ac500you might be right, its jsut 0.27% IO but still making ht disk churn audibly until i kill it18:37
ac500i never installed sendmail myself unless i assume it comes with ubuntu server18:38
bekksYou'd better worry about the other 99.73% I/O.18:39
ac500oh yeah18:40
ac500it was some archive manager18:40
ac500or something about dfile system archiving i think18:40
ac500but yeah now that i killed it18:40
ac500the 99% io is gone18:40
ac500now that i killed the sendmail thing, that is18:40
ac500it'll come back in a few minutes like it always does18:40
bekksCan you please NOT use enter as a punctuation sign?18:40
bekksThank you.18:40
ac500are there rules for chat for this channel i can read somewhere?18:42
bekkshttps://wiki.ubuntu.com/IRC/Guidelines18:42
ac500i see no mention of punctuation.18:42
bekksAnd not using enter is just nettiquette, not a guideline.18:43
ac500depends on who you're talking to.18:43
bekksTo make it pretty easy for you: if you want to continue talking with me, dont use enter as a punctuation sign. Thank you.18:44
ac500i'd rather get my tech advise from someone who is mentally stable18:44
ac500you may want to see your doctor about OCD or something of that sort18:44
bekksac500: Ignore set. Good luck.18:44
ac500thanks you.18:44
ac500:P18:44
ac500wow i hope all of the ubuntu community isnt as abrasive and demanding (whining about punctuation, reacting with 'tldr' when nobody else is in the room, etc) as bekks18:46
ac500im going to go try the centos forums even though thats a different distro, and maybe move over if they're more friendly18:46
ac500i mean irc)18:46
shreddingI'm learning system administration and http://wiki.ubuntuusers.de/IP-Adresse_wechseln says that I can edit my ip address in  /etc/network/interfaces18:47
bekksshredding: Yes, it does.18:47
ac500i was able to do that18:47
ac500its only on a local level though18:47
shreddingDid I misunderstood something fundamentally on the internet or can everyone just say: This is my ip address?18:48
ac500(of course) so you cant change your public ip18:48
shreddingHow do I know if it's already in use.18:48
ac500no you cant do that18:48
ac500thats up to your ISP18:48
bekksshredding: you did misunderstand something fundamentally. :)18:48
ac500the IP address you assign is just local to your home router / network18:48
shreddingThat's what i thought ac50018:48
ac500but this helps though18:48
ac500so for example i set up a script that updates my DNS every 5 minutes to whatever my public IP is18:48
bekksshredding: you have to use the IP adress(es) assigned to you by your internet provider.18:48
shreddingso, if i have a server, which network is meant there?18:48
ac500then my router forwards the traffic to the static local IP i set for my linux box18:48
sheptardshredding: there's also reserved ranges that are used for internal networks18:49
bekksshredding: Ask your server provider.18:49
sheptardshredding: You can use any of those to your hearts content18:49
shreddingOkay, so it's a private network on behalf of my server provider.18:49
bekksNo.18:49
sheptardbekks: he might be nat'd you never know18:49
bekksIt is a public network which is devided into subnets which are administered by different providers.18:49
shreddingbekks: What is a public network?18:50
shreddingI'm referring to that network that hosts the ip in my  /etc/network/interfaces18:50
bekksshredding: the opposite of the "private" network you mentioned seconds ago.18:50
bekksshredding: You have to know which IP was assigned to you by your provider. This IP is to be setup in /etc/network/interfaces18:51
shreddingOkay, but the ip in  /etc/network/interfaces belongs to a private network.18:51
bekksshredding: Where is that server located?18:51
shreddingit's not a specific server, I want to understand how it works.18:51
shreddingbut for the sake of this discussion, say it's digitalocean18:51
shredding /etc/network/interfaces comes preconfigured there.18:51
bekksThen ask digitalocean which IP they assigned to you.18:51
shreddingAnd that's the one in  /etc/network/interfaces?18:52
bekksIf it is located in your home LAN, then assign an IP from the network you are using.18:52
shreddingOkay, i come to understand: The ip in  /etc/network/interfaces is not the ip that connects to "the internet" (e.g. is publicly available) but to the network of my server provider.18:52
shreddingAnd that network is connected to an isp.18:53
shreddingIs that close to the truth?18:53
bekksshredding: No.18:53
shreddingdamn18:53
bekksFar away actually.18:53
bekksshredding: Since this is far beyond ubuntu support, and since you are reading german actually, you're better of in #ubuntu-de-offtopic18:53
shreddingk18:54
shreddingthanks18:54

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!