[07:14] <inetpro> ai!
[07:15] <inetpro> good mornings everyone
[07:38] <thatgraemeguy> hello hello
[07:53] <Kilos> hi thatgraemeguy and all others
[07:57]  * thatgraemeguy waves
[09:02] <_shaun_> hi guys i have a massive image that ubuntu insists on printing to one page, how do i print this image to multiple pages?
[09:35] <MaNI> to span a large image over multiple pages you can use something like posterazor or similar
[09:36] <_shaun_> hi mani im looking for something native to ubuntu the default print tool is basic, but ill check out posterazor
[09:58] <inetpro> _shaun_: http://askubuntu.com/questions/18698/printing-a-poster-over-several-sheets-of-paper
[11:24] <Kilos> hi inetpro MaNI andrewlsd _shaun_ 
[11:24] <MaNI> hi
[11:26] <inetpro> .
[11:29] <andrewlsd> hi Kilos 
[12:58] <_shaun_> thanks guys posterazor isnt half bad
[13:30] <Kilos> rahter warm outside today
[13:35] <Kilos> rather
[13:58] <_shaun_> yep in in ct too
[13:58] <_shaun_> and u?
[15:24] <Kilos> Maaz forecast pretoria
[15:24] <Maaz> Kilos: Monday: Clear. High: 38° C., Monday Night: Partly Cloudy. Low: 21° C., Tuesday: Chance of a Thunderstorm. High: 36° C., Tuesday Night: Partly Cloudy. Low: 19° C., Wednesday: Partly Cloudy. High: 36° C., Wednesday Night: Partly Cloudy. Low: 20° C., Thursday: Clear. High: 35° C., Thursday Night: Partly Cloudy. Low: 19° C., Friday: Chance of a
[15:24] <Maaz> Thunderstorm. High: 35° C., Friday Night: Chance of a Thunderstorm. Low: 19° C., Saturday: Partl…
[15:44] <Kilos> was more than 38°c today. news said 39°c but felt like more
[17:39] <Kilos> maybe one day when it storms it will actually rain as well
[17:59] <inetpro> good evening
[18:04] <inetpro> Kilos: my scooter's break levers felt heated when I used them as if the scooter was standing in the sun when in fact it was just from hot air while driving
[18:04] <Kilos> whew
[18:05] <Kilos> it was very hot today
[18:05] <Kilos> hi there inetpro 
[18:06] <inetpro> eh, how are you oom Kilos?
[18:06] <Kilos> im good ty young man and you?
[18:07] <inetpro> feeling quite young today :-)
[18:07] <Kilos> hahahaha
[18:08] <inetpro> been a long time since someone called me a young man
[18:08] <Kilos> hahahaha
[18:08] <Kilos> you need to mix with more ballies
[18:08] <inetpro> lol
[18:14] <inetpro> yikes!
[18:14] <Kilos> what
[18:14] <inetpro> just got an SMS: "OUTsurance advises you to move your vehicle undercover as a storm, with the possibility of hail, is imminent in Karenpark. Visit http://www.africaweather.com/storm/SA"
[18:14] <Kilos> sjoe
[18:17] <Kilos> we are also in that red area i think
[18:17] <Kilos> i think wed even be happy with hail
[18:18] <inetpro> first time I get an SMS like that
[18:19] <Kilos> well just make sure your car is undercover anyway
[18:24] <inetpro> sure
[18:31] <Guest27170> Good evening everyone
[18:31] <Kilos> hi boy
[18:31] <Guest27170> wolfeyes_is <--- here
[18:31] <Kilos> chnage your nick
[18:31] <Kilos> change
[18:31] <Guest27170> hey dad :-)
[18:39] <Wolfeyes_is> hello theblazehen
[18:40] <theblazehen> Hi Wolfeyes_is 
[18:40] <theblazehen> How're you doing?
[18:40] <Wolfeyes_is> Bit tired from the days work, been trying to catch up with work. End of year rush.
[18:40] <Wolfeyes_is> Ane yourself?
[18:40] <Wolfeyes_is> And*
[18:41] <theblazehen> Yeah, I'm pretty great at the moment
[18:42] <Wolfeyes_is> Awesome - just wish it would rain a bit, storming all around but nothing falling as yet.
[18:42] <Kilos> hi theblazehen 
[18:42] <theblazehen> Hi Kilos 
[18:42] <Kilos> sort ians stupid server woes for him
[18:42] <Wolfeyes_is> lol
[18:42] <theblazehen> Kilos: heh, what's been happening?
[18:43] <Wolfeyes_is> Still setting it up ----
[18:44] <Kilos> hve you installed server Wolfeyes_is ?
[18:45] <Wolfeyes_is> No, not yet, just putting power and such on it for now,inbetween talking to you...
[18:46] <Kilos> has it still got kde on?
[18:47] <Wolfeyes_is> yes
[18:47] <Wolfeyes_is> Haven't changed a thing yet.
[18:47] <Kilos> try fix that first
[18:48] <Kilos> its only connection that broke
[18:48] <Kilos> you gonna have to catch andrewlsd during the day
[18:48] <Wolfeyes_is> Yes.
[18:49] <Kilos> maybe inetpro can follow what you guys did
[18:49] <Wolfeyes_is> Which is cool. Just wanted to set it up first. 
[18:49] <Wolfeyes_is> Or that.... lol
[18:49] <Kilos> but he is sitting outside looking at the sky hoping for rain
[18:50] <Kilos> but now you want to set it up at home with 3g and then take it to an adsl place
[18:50] <Kilos> ai!
[18:50] <theblazehen> Wolfeyes_is: need any help?
[18:50] <Kilos> Wolfeyes_is tell him what broke
[18:51] <Wolfeyes_is> Just switching it on right now. Meeeeeeee I'm a n00b, I need lots of help lol.
[18:52] <Kilos> theblazehen it was a struggle with a network card and onboard networking
[18:52] <Wolfeyes_is> Well, it's more than 40 km's away (the site) so I had to do something.
[18:52] <Kilos> andrew sorted it but after reboot it lost connection
[18:52] <theblazehen> 3G connection?
[18:52] <Kilos> adsl at client
[18:52] <Kilos> but now at his home
[18:53] <Wolfeyes_is> Okay, if I can explain the setup, the setup is a router with internet connection, which has 3g connection from the router, linked to onboard network port.
[18:54] <Wolfeyes_is> this runs through the computer and out a pci network card, and to the computers on the network.
[18:55] <theblazehen> Hmm, okay. So the computer is like a router then?
[18:55] <Wolfeyes_is> yeah if you can call it that
[18:55] <Wolfeyes_is> just getting you other info
[18:55] <theblazehen> And it doesn't route when you start it then?
[18:56] <Kilos> after the reboot all the network pcs saw the server but server lost internet connection
[18:56] <Wolfeyes_is> well it worked until I thought I had to see if it regains connection after rebooting the computer just in case the client does this and can't reconnect.
[18:57] <theblazehen> Wolfeyes_is: server is running ubuntu based distribution?
[18:57] <Wolfeyes_is> kde 14.04
[18:57] <theblazehen> What's the output of ip ad when you boot it up?
[18:59] <Wolfeyes_is> I think what could have happened was when the server was cut, it blocked the router access, and there was a printer on another Ip range and all the computers changed to that ip range but that wasn't the problem, the kde server which is connected directly to the internet router, no longer had internet!
[19:00] <theblazehen> Hmm, okay.. I think andrewlsd would know the background better, so he may be able to help you better
[19:01] <Kilos> Maaz seen andrewlsd
[19:01] <Maaz> Kilos: andrewlsd was last seen 7 hours, 32 minutes and 22 seconds ago in #ubuntu-za on freenode [2015-12-07 03:29:18 PST], and has been offline on freenode since 2015-12-07 04:10:51 PST
[19:01] <Kilos> Maaz call hm
[19:01] <Maaz> Kilos: Excuse me?
[19:01] <Kilos> nm
[19:01] <Wolfeyes_is> Eth0 = 192.168.1.254 (Onboard network port) Eth1 = 192.168.2.254 (PCI Network card) 
[19:02] <theblazehen> Wolfeyes_is: ip ro?
[19:02] <Wolfeyes_is> I will give you more info now theblazehen
[19:02] <Wolfeyes_is> ro?
[19:02] <theblazehen> The server itself can't connect to the internet right?
[19:02] <theblazehen> route
[19:03] <Wolfeyes_is> 192.168.1.1. =Router
[19:03] <Wolfeyes_is> Correct
[19:03] <theblazehen> So default is with the router then?
[19:03] <Wolfeyes_is> I am just getting you more info
[19:03] <Wolfeyes_is> correct.
[19:04] <theblazehen> Hmm, not sure. Sorry
[19:04] <Wolfeyes_is> http://bin.snyman.info/vycwg
[19:06] <Kilos> ohi superfly 
[19:06] <superfly> ohi
[19:06] <theblazehen> Ok, yeah, I got a broad overview of what's done. Did same thing a year or 2 ago back myself, when I didn't have neough ports on my switch.. But that's a story for another time. You gonna need to talk to him about that
[19:06] <Wolfeyes_is> http://bin.snyman.info/8hxvx
[19:06] <Wolfeyes_is> hey superfly
[19:07] <superfly> hi
[19:08] <theblazehen> Yeah, I see. Better to just wait for him though. Hi superfly 
[19:08] <Wolfeyes_is> http://bin.snyman.info/zrz28
[19:08] <Wolfeyes_is> There.... that's all the info I have. Thank you for looking theblazehen
[19:09] <theblazehen> Wolfeyes_is: Yeah, haven't done it on ubuntu before, only arch. And not too sure about the specifics, sorry I couldn't help
[19:09] <Wolfeyes_is> no problem, you tried :-) thank you.
[19:11] <superfly> Wolfeyes_is: you still trying to set up a server as a router?
[19:11] <theblazehen> Wolfeyes_is: Are you speciffically attached to using ubuntu for it? Does it also need to server other server roles?
[19:12] <Wolfeyes_is> yes superfly
[19:12] <theblazehen> I've found that pfsense is a lot easier to use as a router, and runs on nearly anything.. I've ran it on an old pc with 128MB RAM beofre
[19:12] <Wolfeyes_is> 2nd question, not sure
[19:12] <superfly> Wolfeyes_is: arno's ip tables firewall
[19:13] <superfly> *really* simple to set up
[19:13] <superfly> it's in the repos I think
[19:13] <Wolfeyes_is> I will go have a look
[19:13] <superfly> arno-iptables-firewall
[19:13] <superfly> you'll probably need to uninstall any other firewall system you've installed
[19:14] <Wolfeyes_is> There is none currently, I would have worked on that afterwards.
[19:14] <theblazehen> Doesn't ubuntu these days also come with ufw built in? Might need to disable that
[19:14] <Wolfeyes_is> it was using the pc as a firewall as far as I could understand.
[19:15] <Wolfeyes_is> and my understanding is very limited with this knowledge...
[19:17] <Kilos> Wolfeyes_is if you do ctrl+rit lines up to where you have read
[19:17] <Wolfeyes_is> As far as I know the server is only acting as a firewall superfly, it has no information stored on it, this is stored on another server within the network.
[19:17] <Kilos> ctrl+r
[19:17] <theblazehen> Wolfeyes_is: Not exactly addressing the question you are asking, but you can try out live pfSense perhaps. Works well here
[19:18] <theblazehen> No need to install to get it running, runs just fine live
[19:18] <Wolfeyes_is> if I can just ask a question though..... and explain a little on the history of the server.
[19:19] <theblazehen> Wolfeyes_is: sure
[19:21] <Wolfeyes_is> the server admin left 5 years ago and the computer run from then until now with no problems, it was using lucid, and the computer crashed, due to overheating, my understanding is the client sent it to the computer shop in order to get it repaired, ( I believe it was just a dirty heat sink from listening to all the info- I did not get a chance to inspect the pc)
[19:22] <Wolfeyes_is> they replaced the whole pc, tried to clone the drive and tried to make it work, no one understood linux within the computer shop and started calling around, upon landing on me, I do other work for them, upon which I told them I would look at it.
[19:23] <Wolfeyes_is> Everything of lucid was outdated and didn't want to connect to the internet to do any updates or upgrades, with the help of Kilos.
[19:25] <superfly> Wolfeyes_is: firewall and router? does it hand out ip addresses to the network?
[19:25] <Wolfeyes_is> We opted to do a clean install of an ubuntu server and then add a kde display to it, the client is in the middle of no where, and I had to do an install from a cd/dvd as it would install it from a flash disk that I put serer on with Unetbootin. And ended up installing kde 14.04
[19:26] <Wolfeyes_is> it got the ip from the router and changed it to another range, which all the computers connected to superfly.
[19:27] <Wolfeyes_is> what I did see but I am not sure, I think it was using squid before, I saw that in the download packages of lucid.
[19:28] <Wolfeyes_is> Now to get to my question, the client also wanted something to block internet to other computers, with username and password, can this be done with Arno's IP tables firewall superfly?
[19:28] <superfly> Wolfeyes_is: yes and no
[19:29] <superfly> Wolfeyes_is: you'd use squid, which arno's supports
[19:29] <Wolfeyes_is> or maybe a better question is would it be better to reinstall server edition now that I have the computer with me?
[19:29] <superfly> Wolfeyes_is: what you want is to force all traffic through arno's firewall, which you can set up to use squid, which has all sorts of access management features
[19:30] <Wolfeyes_is> ahhhhhhh
[19:30] <superfly> Wolfeyes_is: yes, you have no need for a gui
[19:30] <Wolfeyes_is> Okay so new install it is then.
[19:30] <theblazehen> Can also be done easily with pfSense. Just leaving it as an option.. Also, with squid you should be able to use it as a transparent proxy with authentication. Might even be able to do SSO if you have the computers connected to a domain
[19:31] <Kilos> but imo tha should be done at the client so install can see router 3g connection
[19:31] <Kilos> not so
[19:31] <Wolfeyes_is> Waits for an answer....
[19:32] <Kilos> if you do server install then go to new site there are not popups to show new connection
[19:33] <Kilos> unlees you do it now then ssh to it from lappy and do same at the client
[19:33] <Kilos> lets hear superfly comment
[19:34] <superfly> theblazehen: ever used a mikrotik?
[19:35] <theblazehen> superfly: Nope, have been wanting to though
[19:35] <superfly> Wolfeyes_is: your network topology is unclear, where is the Internet connection and where is the DHCP server?
[19:35] <theblazehen> superfly: Wanting to get a managed 1gbit or 10gbit switch perhaps, would you recommend them?
[19:35] <superfly> theblazehen: you'll never want to go back to anything else
[19:36] <theblazehen> superfly: ty for the recommendation. Right now an old pc is still the cheaper option for me...
[19:36] <superfly> theblazehen: yeah, me too.
[19:36] <theblazehen> Just stuck with 1gbit, and no bonding :(
[19:36] <superfly> the mikrotiks are expensive :-(
[19:39] <Wolfeyes_is> It was previously set up with the Router (internet connection going to the onboard network port of the linux server, inbound, then outbound from the pci network card of the linux server to all the other computers on the network. All traffic ran through the linux server! Does this help superfy?
[19:41] <Wolfeyes_is> All computers used the linux server to get an IP address.
[19:42] <Kilos> night all sleep tight
[19:42] <Wolfeyes_is> Nighrt Kilos
[19:48] <superfly> Wolfeyes_is: ah, yes.
[19:52] <Wolfeyes_is> So with this information and the fact that the client wants to have designated username and password details for the internet, you would still set it up with  ubuntu server, and put Arno's firewall on with Squid superfly?
[19:52] <superfly> Wolfeyes_is: username per person?
[19:53] <superfly> and why a username and password?
[19:53] <Wolfeyes_is> on about 8 people, the rest are restricted from inertnet, maybe about 15 computers in total.
[19:54] <superfly> do those people move around between computers, or are they always on the same computer?
[19:55] <superfly> *s
[19:57] <Wolfeyes_is> I would say, 2 - 3 of the computers have different people superfly, the rest stay on their own computer. It is the reception computers and they mostly to restrict the staff when no one is their at night, the other offices are all locked at night.
[19:57] <superfly> Wolfeyes_is: the people who have unrestricted access to the internet, do they have their own PCs?
[19:57] <Wolfeyes_is> yes
[19:58] <superfly> so then you can lock things down to particular computers on the network.
[19:58] <Wolfeyes_is> Okayyyyyy
[19:59] <Wolfeyes_is> Anything else I need to know.....superfly? Or ask further?
[20:00] <superfly> what do they mean by "restricted internet access"? is it off completely? is it available after hours? are certain sites allowed? or certain sites not allowed?
[20:01] <Wolfeyes_is> they cannot access it because the username and password comes up, denying them access even though their network cables are on the same network!
[20:03] <superfly> Wolfeyes_is: the username and password is a red herring
[20:03] <Wolfeyes_is> so if they punched in the accessible username and password they could get access, if they had that information, or were added to the accessible list.
[20:03] <Wolfeyes_is> Red herring? in the sense of?
[20:03] <superfly> Wolfeyes_is: you don't need it to restrict internet access
[20:03] <superfly> it's distracting you from answering my question
 what do they mean by "restricted internet access"? is it off completely? is it available after hours? are certain sites allowed? or certain sites not allowed?
[20:05] <Wolfeyes_is> it always on, they just can't use it if they don't have username and passwords, all people with the correct username and passwords can access it at an given time.
[20:06] <Wolfeyes_is> I wasn't told to block certain sites in particular! Only allow certain people access. (all the time)
[20:07] <Wolfeyes_is> All managment. From the information I was told.
[20:10] <Wolfeyes_is> Does this help you a bit more superfly?
[20:10] <superfly> yeah
[20:11] <superfly> so you basically have two groups: those with access and those without
[20:11] <Wolfeyes_is> yes
[20:11] <superfly> how does their e-mail work?
[20:12] <Wolfeyes_is> seperate, to the linux server, they collect it from an online client. Similar to what we would google or hetzner.
[20:12] <Wolfeyes_is> but it runs through the server to fetch it.
[20:12] <Wolfeyes_is> I think I described that backwards lol
[20:13] <Wolfeyes_is> anyways...
[20:27] <Wolfeyes_is> Do you think I should do the server install at the site superfly? So it can see the internet connection? Or can I do it aheead of time? Which would be easier for the setup you have just mentioned?
[20:28] <superfly> Wolfeyes_is: I think either way would be easy enough. But you say they get their mail from an online mail client? that means that they have *some* internet access?
[20:29] <Wolfeyes_is> They would through the sever.
[20:29] <Wolfeyes_is> I see now what you mean.....
[20:29] <Wolfeyes_is> restricting the broswers but not mails.
[20:43] <superfly> Wolfeyes_is: that's not how internet connectivity works
[20:44] <superfly> internet doesn't care if you're using a browser or a mail client or a python script, or even if you're making HTTP requests via butterflies
[20:44] <Wolfeyes_is> lol I see.
[20:45] <Wolfeyes_is> Okay.
[20:45] <Wolfeyes_is> so then it would mind the mail client on the computer connecting to the mail server on the net then.
[20:46] <Wolfeyes_is> but if the person opened the browser and a program like squid stopped them, from using that, would it restrict the email as well?
[20:46] <superfly> yes
[20:47] <superfly> because it's all Internet access
[20:47] <superfly> you'd have to configure squid to allow their e-mail domain
[20:47] <Wolfeyes_is> okay, that makes sense.
[20:47] <superfly> well, I'm not being entirely accurate.
[20:47] <superfly> protocols use different ports
[20:48] <superfly> so SSL is 443, regular HTTP is 80
[20:48] <Wolfeyes_is> okay
[20:48] <superfly> but if their e-mail is web-based, then it's all on 80 or 443
[20:48] <superfly> which squid handles out of the box
[20:50] <Wolfeyes_is> I think they use gmail
[20:50] <superfly> Wolfeyes_is: ignoring the "authentication" part (which I think is pointless), here's how to tell squid that certain domains are OK: http://www.webdnstools.com/articles/squid-proxy-whitelist
[20:50] <Wolfeyes_is> goes to look
[20:52] <superfly> Wolfeyes_is: there's usually a fair amount of documentation in the config files themselves. read read read :-)
[20:53] <superfly> Wolfeyes_is: also, try to implement the same system yourself if you can, practice makes perfect
[20:54] <Wolfeyes_is> I was thinking to do that, it would help me a lot on a learning curve.
[20:54] <superfly> Wolfeyes_is: pro tip: those managers, get their MAC addresses and get the DHCP service to hand out the same IP addresses to their computers every time. then tell squid that those IP addresses are OK
[20:55] <Wolfeyes_is> if I give them dynamic ips i could do it like that.
[20:55] <superfly> Wolfeyes_is: http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch32_:_Controlling_Web_Access_with_Squid#.VmXyN2_v2es
[20:56] <superfly> Wolfeyes_is: don't say "if". you always do that
[20:57] <Wolfeyes_is> All the computers are winsucks and they had them on automatic configure, Great, I will do that!!!! Dynamic IP it is.
[20:57] <superfly> some more good info: http://wiki.squid-cache.org/SquidFaq/ConfiguringSquid
[20:58] <Wolfeyes_is> Ty superfly I will read this so long....  Just a question....
[20:58] <superfly> Wolfeyes_is: basically, set up squid the way you want, then set up Arno's, and when it configures itself it'll ask you about a proxy server, and you give it squid's details
[20:59] <Wolfeyes_is> Would a person have to coinfigure the squid and arnos programs by adjusting the scripts etc through the server cli? Am I understanding this correctly?
[20:59] <superfly> yes
[20:59] <superfly> it's not difficult
[20:59] <Wolfeyes_is> okay - got that.
[20:59] <superfly> anyway, I have to go
[21:00] <Wolfeyes_is> I understand it basically, just not always sure what to look for
[21:00] <Wolfeyes_is> Ty so much for your help
[21:00] <Wolfeyes_is> Have a good evening superfly
[21:10] <Wolfeyes_is> Night everyone. Thank you all for any input.