[00:08] hey Plizzo, sorry to hear it's still happening :/ [00:09] Plizzo: it might be worth storing off the dmesg every ten minutes or something and see if you can find the issue in the logs before the whole thing hangs [00:09] Plizzo: it might be worth installing mcelog too, perhaps it's a machine check exception [00:09] sarnold: No worries, I’m just trying to get an understanding of why it’s doing that. If I can’t find a way to fix it it might be quicker to do a whole clean install. [00:11] Plizzo: it has the feeling of something that wouldn't go away with a clean install. :/ [00:11] sarnold: Here is my last syslog [00:11] http://paste.ubuntu.com/9290289/ [00:12] sarnold: Sorry, I meant to say dmesg [00:13] Plizzo: wow, that looks pretty clean. [00:14] sarnold: Yeah, from what I can see. All my logs are perfectly clean… [00:19] sarnold: I think a clean system install might be faster than to debug this.. [00:20] sarnold: I will never update my Ubuntu release again, this happens every time I upgrade, last year also.. [00:22] Still recovering from my last upgrade. Joined this discussion late. What is the problem [00:25] tarvid: I upgraded from 11.10 to 13.10 using ”do-release-upgrade”, and started experiencing seemingly random hogging/freezing of my entire machine and system. I then today tried to upgrade to 14.04 LTS to remedy this issue, but to no avail. The upgrade to 14.04 does seem to have had the opposite effect. The first freeze now occured after approx. 2 hours. Any ideas what could be causing this? [00:27] tarvid: Once it freezes, there are no records in the logs and it’s impossible to reach the server over SSH. It completes disappeares and becomes unreachable. I have to perform a hard restart in order to get it back on track. [00:28] tarvid: But I’m just waiting for it to freeze again.. [00:29] Haven't seen that issue. I upgraded from 12.04 to 14.04 and had many apache2 issues. I did have one halt on reboot [00:30] I am now looking for an inexpensive KVM over IP to avoid the 6 hour drive to press the reset button [00:31] tarvid: I also had some apache2 issues with htpasswd etc, but got most of them sorted out. === MeltedLux is now known as MeltedDed [00:48] tarvid: you might just want to look for e.g. a remote-control power switch, some PDUs have them, some UPS have them [00:48] Plizzo: oh, so e.g. 11.10 worked fine? I wonder if 12.04 LTS might work for you, that's still supported for another 2~3 years.. === Metacity is now known as lynchedasusual === lynchedasusual is now known as whyguyswhy === whyguyswhy is now known as Metacity [00:56] sarnold: Yeah, everything worked perfectly on 11.10 - but since it was an old release I figured I should upgrade. That’s when the freezing hell broke loose. === Lcawte is now known as Lcawte|Away [01:00] sarnold, I have an old APC PDU, that would do for a power bounce but I had the damnedest urge for a peek at the monitor. [01:02] Plizzo, I wonder if the grub boot options changed and you now have a feature enabled that is not stable. I had that happen years ago when ACPI was enabled [01:02] tarvid: Maybe so, what option could that be? [01:03] How old is the motherboard? [01:03] tarvid: oh you want to know -why- it doesn't come back from a reboot ;) picky picky :) [01:04] tarvid: The motherboard is about three years old. But this just happened after software update, and it’s happened before. Only way I’ve been able to fix it is with a clean install. === jvwjgames_ is now known as jvwjgames === inaddy is now known as tinoco === ivoks_ is now known as ivoks === MeltedDed is now known as MeltedLux === Lcawte|Away is now known as Lcawte === zz_DenBeiren is now known as DenBeiren === moonligh- is now known as moonlight === MeltedDed is now known as MeltedLux [11:21] Hi, can you please help me? My postfix server (with MySQL) is sending and recieving to one domain, but other domains can only send [12:59] Hello. [13:00] Is there possibility to set priority of usage on memcached clients? I have production server with 40% usage of RAM and other two VPSes with 40% and 6% usage of RAM. How to make my VPSes more encumbered? Generally, is there any point in doing it? [13:07] hello, I'm facing some problems with installation of oracle weblogic server, could some1 help with that ? pm pls, thanks :] [13:28] mirexx: firstly, paste your log [13:30] i want to setup a mail server in ubuntu 14.04 but i dont have a registered domain. does this prevent me from completing the task ? [13:32] Rather depends on what you mean by mail server (smtp, imap, pop3) and how you want mail to reach it [13:37] postfix and dovecot [13:37] and imap [13:37] http://www.krizna.com/ubuntu/setup-mail-server-ubuntu-14-04/ [13:38] here …i want to follow this guide. [13:59] do you know ? [14:00] John_John_: yes, you need your own domain === the_ktosiek is now known as ktosiek [14:00] OHHH [14:00] domains are cheapo [14:00] *cheap [14:00] is there a work around ? [14:00] i want it for educational purposes only!! [14:01] you could e-mail based on IP-address, or some crappy subdomain [14:01] but it's uncommon, and probably spamfilters will not like it [14:01] some kind of domain, with control over the DNS entries, is needed [14:01] at least to set MX records and such [14:01] A, MX, SPF, DKIM, DMARC, TLSA, whatever [14:02] all i want is just to send from myself to me [14:02] it can be accomplished without a domain, but also for educational purposes, it's better to do it the right way [14:02] which is, with a unique domain name [14:02] hi, i've installed ubuntu server using the netinstall and during install it detects and sets up wireless, but after restart I dont see the wireless configured, what's the simplest way to get it working and persistent across restarts? [14:02] i see your point [14:02] domains are cheap John_John_, i mean, $3 per year or so [14:02] of $5 [14:02] where can i get one cheap ? [14:02] *or [14:03] really ??? [14:03] that cheap ? [14:03] what do you want? a .com? .nl ? [14:03] i didnt know [14:03] sure [14:03] even .eu is only 7 euros a year or so [14:03] com, eu or gr or .net [14:03] i got my domains at www.transip.nl [14:03] or anything that is cheap i guess [14:03] they have .nl's for 2 euros a year [14:04] .com for 7 euro a year [14:04] or 6 [14:04] not sure [14:04] you should check [14:04] but remember, a domain, is just a domain [14:04] i ll check it out now and buy one i guess :)) [14:04] which is, a bunch of DNS records [14:04] which means what ? [14:04] to assign a particular name to particular IP-addresses [14:04] it's not a server, or a machine, in itself [14:04] it's just DNS registration [14:04] yes yes i know tah [14:05] good [14:05] that* [14:05] i built my own mailserver as well, with ubuntu and postfix [14:05] but then i can set up myserver like machinename.mydomain.com for example ? [14:05] multiple domains [14:05] yes, definitely [14:05] aha [14:06] that's just an A record [14:06] tell me more about your setup please ? [14:06] what do you use exactly ? [14:06] http://www.krizna.com/ubuntu/setup-mail-server-ubuntu-14-04/ [14:06] is this guide a good one to follow ? [14:06] i followed this guide [14:06] http://www.pixelinx.com/2013/09/creating-a-mail-server-on-ubuntu-postfix-courier-ssltls-spamassassin-clamav-amavis/ [14:06] long time ago [14:06] since that time i tweaked and improved on it [14:07] i am interested in imap too [14:07] is it easy to change between pop3 and ima ? [14:07] imap* [14:07] you can serve both [14:08] very nice!!! [14:08] but i would recommend just serving pop3-ssl and imap-ssl [14:08] not the unencrypted ones [14:08] if you wanna do it really properly, get an SSL certificate as well from a CA [14:08] set up a webmail as well, with RoundCube or squirrelmail [14:08] set up an SPF record, set up DKIM [14:09] are ssl certificates cheap ? [14:09] some of them are [14:09] Comodo PositiveSSL is like $10 a year [14:09] for a single domain [14:09] ok nice to know that [14:09] depends on the type of certificate [14:09] wildcard certs, or EV certs, can be very expensive [14:10] but for the moment i need the simplest setup possible [14:10] the guide i pasted the URL from, is a good way to get you started [14:10] it uses virtual users as well, in a mysql database [14:10] really thanks for the info :) [14:10] no need to create actual unix user accounts [14:10] aha [14:10] for the mail users [14:10] which is an advantage [14:11] yes thats what i am interested in actually !!! [14:12] it will take a moment to set up, but when it's working, you will be happy [14:12] and then you can expand it slowly [14:12] add more advanced features, better security, etc [14:12] another importan question [14:13] or, if you are REALLY lazy, you can check this out [14:13] https://mailinabox.email/ [14:13] it does everything for you [14:14] this is talking for the cloud yes ? [14:15] so i need to have linux on the cloud ? [14:15] not necessarily [14:15] just linux anywhere is good [14:15] i have 14.04 server installed locally [14:15] but, for a good mailserver, u want it to be online all the time [14:15] and fast [14:15] a nice VPS in a datacenter or something [14:15] not in my concern for now [14:16] but please tell me where can i buy a vps cheap from ? [14:16] hehe, i got mine from TransIP.nl as well [14:17] first month is half price, $5 instead of $10 [14:17] gives you 1 core, 50 GB HDD, and 1GB RAM [14:17] i run a medium one, with 2 cores, 4GB RAM, and 150GB HDD [14:17] i see [14:18] problem is i dont understand duch [14:18] so i need something in english or greek :) [14:18] it's better to get one geographically close to you [14:18] for better performance during control sessions, speed, etc [14:18] we are not far actually :) [14:19] but its ok i ll find one [14:19] http://www.pointer.gr/en/vps [14:19] seems a bit expensive this one [14:19] i am only interested in the domain name only right now i guess [14:19] we ll see about vps later [14:20] is my 14.04 server local machine enough for now ? [14:20] depends on your network setup [14:20] does your ISP block any ports? [14:20] nope [14:20] some ISPs block port 25 on consumer lines [14:20] then it should be sufficient [14:21] ok then [14:21] but for a "production" mailserver, you want more sense of security, uptime, etc [14:21] how can i learn if my isp blocks port 25 ? [14:21] i dont need any production right now [14:21] no idea, pbly only by testing it [14:21] i just need it for development server [14:22] by sending out mail [14:22] how can i test that now easily ?? [14:22] mail servers talk on port 25, outbound, but also inbound / amongst eachother [14:22] hmm, difficult [14:22] you need a mailserver to test it i think :P [14:22] lol ok [14:22] telnet to some remote mailserver on port 25 [14:23] ah yeah, indeed [14:23] telnet from inside ubuntu you mean ? [14:23] can you give me the shell command please ? [14:23] telnet smtp.yourmailprovider.gr 25 [14:24] wait a sec please [14:24] no, you want NOTyourmailprovider [14:24] ah yeah true [14:24] they should certainly allow you to connect to their server [14:24] ok i got it [14:24] i ll use my work’s email server [14:24] just a sec [14:25] is this command correct ? [14:26] ok it is sorry [14:26] after connecting, you need to identify yourself with HELO or EHLO [14:26] followed by your IP or domainname, of your internet line [14:27] if you can connect at all, it's enough to establish your ISP isn't blocking outbound on port 25, assuming the server tested isn't also allowed by them [14:28] Microsoft ESMTP MAIL Service ready…… [14:28] is this correct ? [14:28] for testing inbound, you would need a mailserver locally [14:28] uh huh [14:28] yes, it means it connected [14:28] so outbound port 25 is clear [14:28] ok nice one :))) [14:28] but i ididnt identified myself ok ? [14:29] not a problem, the connection is there [14:29] like mardraum said [14:29] thanks [14:29] how can i disconnet now :) [14:29] usually QUIT [14:29] or BYE [14:29] i thought [14:30] ok it wotrked [14:30] so i only have to buy my domain name right ? [14:30] correct, then you can set an A record in your DNS control panel [14:30] of the domainname [14:30] is the ubuntu server i just installed ok ? [14:30] A record should point to your IP [14:30] should i better install a desktop too ? [14:31] not necessary [14:31] ok [14:31] because i am on a mac and have the ubuntu server as a VM now [14:31] thats my setup already actually [14:31] ah, okay, that changes things [14:32] geeeee [14:32] the VM, how does it connect? [14:32] bridge [14:32] it uses a bridged adapter, or virtual NAT ? [14:32] ah bridge, nice [14:32] so it has an IP on the physical network? [14:32] then it should be okay [14:32] yes it is like that [14:34] how do i change the server name after i got my domain ? [14:35] what do you mean exactly? [14:35] ah, you want to give your server a domain name? [14:35] you create an A record, to point to your IP-adress [14:35] with some kind of name [14:35] lets say [14:36] yes [14:36] mail in A 1.2.3.4 [14:36] how do i create an A record ? [14:36] then you have mail.domain.name pointing to that IP-adress [14:36] in the DNS control panel, from the provider where u have the domain name [14:37] John_John_: you have to set it up in the DNS provider, whether its third party or wherever you have the domain. [14:37] after making the A record (name pointing to IP) [14:37] then u create the MX record [14:37] wow lagggggy here... [14:37] which will be pointing to the (full) name from the A record [14:37] aha so when i buy a domain i have a panel too ? [14:37] i didnt know that [14:37] at TransIP yes, you get a control panel for the DNS settings [14:38] so for example you have the domainname maestro.gr [14:38] you make an A record [14:38] mail in A 1.2.3.4 [14:38] so then mail.maestro.gr will point to 1.2.3.4 [14:38] ok please give me 5 minutes so i can find a domain provider in greece please and i ll get back to you ok ? [14:38] then after, you make an MX record [14:38] hold on [14:38] @ in MX mail.maestro.gr. [14:39] @ in MX 10 mail.maestro.gr. [14:39] i cant catch it all from the start [14:39] i am new to this :) [14:39] wait please ? [14:39] i cannot explain everything, you will need to learn and inform yourself as well :P [14:39] how DNS works etc [14:39] lol of course [14:39] what an A record is, what an MX record is, IP-adress, etc :P [14:39] i will follow the guide anyhow right ? [14:39] cool, good luck [14:40] thanks but maybe ill need your help for the first step if thats ok with you [14:40] if i'm around here i will try to answer [14:40] thanks :) [14:40] other ppl here should also know about it, i guess [14:41] i cannot be the only one to know about setting up mail [14:41] :PO [14:41] ;P [14:41] you will get there [14:43] setting up your own DNS server is harder than setting up your own mail server, with externally managed DNS [14:44] once you have mail up and running, it can be intriguing to host your own DNS as well [14:44] gives extra possibilities [14:44] like DNSSEC, TLSA and such [14:44] the options for setting different DNS records, with a managed DNS service, are more limited [14:44] of course setting those up isn't the most trivial task either [14:45] that is definitely true [14:45] if your ultimate goal is just to have a web server with a domain and a mail server the whole DNS setup process is likely overkill, and you can explore DNS setups in virtual environments at home in sandbox environments [14:46] case in point the 25 sandbox VMs I have for various purposes (IPSec VPN, mail server, Apache, nginx, DNS, the list goes on) [14:46] that's a good method for testing setups indeed [14:46] and you can break things allll you want and then fix em without nuking your servers in the process [14:46] granted, I have actual hardware for virtualization here, got a whole ESXi server sitting at home [14:47] and a new ESXi server in four days coming in ;) [14:47] indeed nice, i have some clusters in datacenters around holland i can play with [14:47] mhm. [14:47] not at home though [14:47] also vSphere based [14:48] true, but to some extent VMWare Workstation can manage the server a little, and since most of my VMs start in a Workstation environment, it's just a case of click and upload [14:48] anyways, that's going into the techie, paranoid level of crazy :P [14:48] (security on my network is equally intense) [14:48] but i digress :) [14:48] ah, being a bit paranoid is good [14:48] i'm very security-minded as well [14:48] s/a bit paranoid/overly crazy paranoid/ [14:48] big fan of security through obscurity [14:49] my home net has a whole firewall appliance at the edge - pfSense with Snort and IPSec VPN [14:49] waaaaaaay overkill for a typical home network [14:49] (VLAN'd out the wazoo too) [14:49] i assume you're already disabled SSL 3.0 everywhere [14:49] *you've [14:49] first thing i did when i ran updates :P [14:49] with the whole POODLE thing [14:49] hehe, cool [14:49] i use nginx, so it's as simple as putting an `ssl.conf` into /etc/nginx/conf.d/ [14:50] and set ssl rules across each server as a sort of global argument [14:50] i edited my apache's source code to include SPDY and NPN [14:51] and change the default EC params to something other than the prime256v1 curve [14:51] secp521r1 ftw [14:51] can't wait for a QUIC module @ apache [14:52] tried running nginx/apache compiled with LibreSSL already? [14:53] hope OpenSSL will implement the CHACHA20-POLY1305 cipher as well soon [15:01] hello, I just installed jboss server on my localmachine, I want to reach it from my virtualhost but I can't, what should I do pls? (I have installed apache and tomcat and both are reachable from virtual machine) thanks [15:05] can you please suggest me a domain registration provider with default language of english or greece which you know that a control panel is included in the price ? [15:10] www.europeregistry.com [15:10] i found this one [15:10] can you confirm please ? [15:11] John_John_: Do you only need a registrar or do you also need dns hosting to be included? [15:11] not sure if they provide a DNS control panel as well [15:11] i guess dns hosting too since its very hard to set up my own dns right ? [15:12] John_John_: Anyway, https://www.gandi.net/ is generally a good choice. [15:12] https://europeregistry.secure-admin.com/login?__utma=137147300.1225744559.1417273584.1417273584.1417273584.1&__utmb=137147300.6.9.1417273760872&__utmc=137147300&__utmx=-&__utmz=137147300.1417273584.1.1.utmgclid=CK3bq8KLoMICFYvItAodgWsAXQ|utmccn=(not%20set)|utmcmd=(not%20set)&__utmv=-&__utmk=71004752 [15:12] see this please [15:12] andol, i think John_John_ would also need a kind of DNS control panel for the domain name, does gandi provide that? [15:12] to make A and MX records etc [15:13] please follow the link above i think it has it all ? [15:13] like, a domain including some kind of managed DNS [15:13] SCHAAP137: Yepp. [15:13] seems useful John_John_, the suggestion from andol [15:13] ok i ll check that out now [15:15] hi all how to open port 3306? i try: sudo iptables -A INPUT -p tcp --dport 3306 -j ACCEPT and sudo ufw 3306 allow but can connect from other pc [15:16] it is probably a mysql server setting, jak3000 [15:16] to only allow connection from localhost [15:17] 3306 is mysql right? [15:17] yes mysql [15:17] probably server-side setting, to only allow connection from localhost [15:17] how to check? in my.ini right? [15:18] i think so, i am not a mysql expert [15:18] probably initial setup made this config [15:18] try to just allow non-root access from outside [15:18] keep root user access only on localhost [15:18] ok. [15:18] thanks [15:18] yw [15:18] good idea because i typed similar rules for port 22 and worked(cann connecT) [15:19] yes, but sshd is different [15:19] it is made for remote access [15:19] usually u want mysql database to only talk with local services [15:19] like webserver, or software running locally [15:20] you don't want SQL over the network, you want the applications to talk over the network, with encryption [15:20] and local databases to interpret the data locally [15:21] understand [15:23] SCHAAP137 friend. [15:23] ak3000: remove bind-address= and skip-networking from my.cnf and grant permission to the external 'user'@'host' and remove any firewall rules blocking port 3306 and make sure no overrides on the mysqld commandline. See http://hashmysql.org/index.php?title=Remote_Clients_Cannot_Connect [15:24] indeed, that should be it [15:24] but still, it is not common practice i think [15:24] it is 'unsafe' [15:25] maybe you can make some kind of VPN for the SQL traffic that traverses the network, or a VLAN [15:25] ye sunderstand [15:25] or just use iptables to limit the access [15:26] is not a perfect solution ofcourse [15:27] if the iptable rule breaks for a moment, it will allow access for someone, potential attack vector, and it is not encrypted by default [15:27] Thanks SCHAAP137 for your time, i tell you, if win or not win.. :) [15:27] hehe cool, let me know [15:35] commented the line bind-adress and worked [15:35] :) [15:35] okay [15:36] but still, remember that a different solution is nicer [15:36] to nót have SQL traffic over the network, just locally on the machine [15:36] let the applications talk something else, and SQL only locally in the machine from application to database [15:36] ok [15:36] ok thanks [15:37] yw [15:37] because it means, other machines can potentially access the SQL now as well [15:38] or you contain it with iptables? [15:38] if u allow external access, you should define the rules in iptables, for the IP's that should have access to the mysql service on port 3306 [15:38] and block others [15:38] ok [15:39] understand i am working now in this step: allow ips and block others [15:39] best firewall policy is the 'default-deny' idea [15:39] everything is disallowed, expect the things u define [15:39] *except [15:39] iptables is not perfect [15:39] pf, from OpenBSD, is nicest [15:40] a quesiton [15:40] iptables and uwf can work at same time, or need disable one? [15:41] i don't know uwf [15:41] ah [15:41] uwf is a method to make easier iptables configuration [15:42] so both is good i guess [15:42] https://help.ubuntu.com/community/UFW [15:43] jak3000: ufw will supersede the iptables rulesets, on its own [15:43] is there a specific room or person i should talk to about the certified images released for the joyent public cloud? [15:43] jak3000: you will need to use either ufw or iptables - ufw ultimately sets iptables rules, that's why [15:43] ok, then no problem if type any rules with iptables and others with uwf, thanks [15:44] does uwf 'replace' other custom iptables rules teward ? [15:44] SCHAAP137: haven't tested. [15:44] like, some iptables stuff in /etc/rc.local, and afterwards uwf commands [15:44] SCHAAP137: i know there's a way to add custom rulesets to ufw outside the bounds of ufw's commands, but as the uber techie I prefer iptables over ufw [15:44] good question indeed [15:45]