Some words for evms/lvm2

2004-07-08 Thread ea

Hello

Do someone who have experience with evms/lvm2 can say some words.
Impressions and etc. I think to setup one of them on machine under
extremely high load but  I think also this is not a good idea to use them
on high load servers.


--
SELLINET Internet Services Provider - http://www.sellinet.net/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: nat ipchains on debian woody

2004-07-08 Thread Kris Deugau
Francisco Castillo wrote:
 Then i do a apt-get install kernel-image-2.18.14-686, and this
 installations works fine. Then it puts me a entry on the lilo in
 order to load the new kernel (the old kernel is a 2.2 original woody,
 it has a 686 ) but the problem for me now is that when i reboot the
 kernel can´t load. It give me a kernel panic message , unable to load
 the boot.1006.  It seems like this new kernel dont works on my hard
 plataform, but it happens the same with the
 kernel-image.2.18-14-586tsc.
 
 This could be true?

I've heard of this happening (typically with Compaq servers, for some
reason), but I've yet to have it happen to me.

If you really want to run a 2.4 kernel, or you really want iptables,
you'll probably have to compile a custom kernel.  :/  IIRC you *can*
use iptables with a 2.2 kernel, but it's a pain to get up and running.

 How can i Knew what is the soft or version of kernel-image i must use
 in my hard system?

Anyone else?  I've found stock kernels work fine for me, but I've
occasionally run into hardware that doesn't run with them.

 Could be posible to has a kernel 2.2 of woody and a nat configuration
 (ipmasquerade) ?
 Could i do it with ipchanis?

It can be done;  it also has some very specific flaws and limitations
that make it less flexible than iptables.

 What could be this procedure to setup this configuration?

Here's a very trimmed-down version of a firewall script I used to use;
for a variety of reasons I no longer use this particular script or
anything like it on most of my systems.  (Among other reasons, all my
systems are running 2.4 kernels, and so I'm using iptables instead of
ipchains.)

You'll need to modify interface names and IPs to your setup, and decide
whether to use the kernel TCP tuning listed here (I've never seen
problems with it, but...)

=BEGIN rc.firewall=

#!/bin/sh

case $1 in start|stop|restart)

# Setting up firewall variables

#External Interface
EXT_IF=eth0
EXT_IP=10.10.10.24

#Internal Interface
INT_IF=eth1
INT_IP=192.168.2.1

#Network stuff
INT_NET=192.168.0.0/16
BROADCAST_SRC=0.0.0.0
BROADCAST_DEST=255.255.255.255

CWD=`pwd`

echo -n Doing assorted network shiznit...

#Disable TCP source routing
for f in /proc/sys/net/ipv4/conf/*/accept_source_route; do
echo 0  $f;
done
#Turn on source address verification
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1  $f;
done
#Disable ICMP redirection
for f in /proc/sys/net/ipv4/conf/*/accept_redirects; do
echo 0  $f;
done
#Turn on packet forwarding (for masquerading)
echo 1  /proc/sys/net/ipv4/ip_forward

#Turn OFF ICMP replies
#echo 1  /proc/sys/net/ipv4/icmp_echo_ignore_all

#Use TCP SYN cookies
echo 1  /proc/sys/net/ipv4/tcp_syncookies
#Assorted TCP/IP crap (turning off unused extensions, etc.)
echo 30  /proc/sys/net/ipv4/tcp_fin_timeout
echo 1800  /proc/sys/net/ipv4/tcp_keepalive_time
echo 0  /proc/sys/net/ipv4/tcp_window_scaling
echo 0  /proc/sys/net/ipv4/tcp_sack
echo 0  /proc/sys/net/ipv4/tcp_timestamps
echo done.

#Adding masquerading modules to make life easier.
echo -n Adding masquerading modules...
/sbin/modprobe ip_masq_ftp.o
/sbin/modprobe ip_masq_irc.o
/sbin/modprobe ip_masq_quake.o
/sbin/modprobe ip_masq_raudio.o
/sbin/modprobe ip_masq_vdolive.o
/sbin/modprobe ip_masq_portfw.o
/sbin/modprobe ip_masq_autofw.o
/sbin/modprobe ip_masq_user.o
echo done.

# Check to see how this script was called.

case $1 in
stop)
echo Stopping FIREWALL services.
echo -nFlushing chains...
/sbin/ipchains -F
echo done.
echo FIREWALL services stopped.
;;
start)
echo Starting FIREWALL services.

echo -nSetting forwarding rules...
/sbin/ipchains -A forward -j MASQ -s $INT_NET
echo done.

echoSetting input filter rules...
echo -n   regular input rules...
/sbin/ipchains -A input -j ACCEPT -s any/0 domain -p tcp -i $EXT_IF
/sbin/ipchains -A input -j ACCEPT -s any/0 domain -p udp -i $EXT_IF
/sbin/ipchains -A input -j ACCEPT -s any/0 time -p tcp -i $INT_IF
/sbin/ipchains -A input -j ACCEPT -s any/0 time -p udp -i $INT_IF
/sbin/ipchains -A input -j REJECT -d $EXT_IP tftp -p udp -i $EXT_IF -l
/sbin/ipchains -A input -j REJECT -d $EXT_IP sunrpc -p tcp -i $EXT_IF
-l
/sbin/ipchains -A input -j REJECT -d $EXT_IP auth -p tcp -i $EXT_IF -l
# Since we don't use nntp anyway...
/sbin/ipchains -A input -j REJECT -d $EXT_IP nntp -p tcp -i $EXT_IF -l
# Samba and friends;  we don't want to have anything to do with
# these over the public interface
/sbin/ipchains -A input -j REJECT -d $EXT_IP 134 -p tcp -i $EXT_IF -l
/sbin/ipchains -A input -j REJECT -d $EXT_IP 135 

Streaming Video Server

2004-07-08 Thread Rod Rodolico
I just talked myself into a corner. A client called and asked if we can do a streaming 
video
server and I said Yes, of course. He then asked if I'd have a bid ready by the end 
of the
week. So:

1. How do I do it. I am running a web server that is very under utilized (only about 
60 web
sites and a couple of hundred e-mail accounts). Do I just set up the site and the 
files the
client puts out there are MPG or something? Or, do I need another server.

2. Any special hints on how to bill for this? I charge $25/mo to host web sites so 
long as the
traffic is below a gig a month. I told the client I'd have to look into billing, but 
are there
any caveats I should look for.

3. Any other information would be very appreciated.

I'll be researching this myself, but hope some pointers will come from the mailing 
list also.

Thanks,

Rod



-- 
The only way to learn a new programming language is by writing programs in it.
- Brian Kernighan


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Streaming Video Server

2004-07-08 Thread px
Try  http://www.videolan.org/
Great streaming software, client and server, lots of features.  Not very 
CPU intensive from what I've found, 3-4 streams.
Come's in a Debian package too.

Rod Rodolico wrote:
I just talked myself into a corner. A client called and asked if we can do a streaming 
video
server and I said Yes, of course. He then asked if I'd have a bid ready by the end 
of the
week. So:
1. How do I do it. I am running a web server that is very under utilized (only about 
60 web
sites and a couple of hundred e-mail accounts). Do I just set up the site and the 
files the
client puts out there are MPG or something? Or, do I need another server.
2. Any special hints on how to bill for this? I charge $25/mo to host web sites so 
long as the
traffic is below a gig a month. I told the client I'd have to look into billing, but 
are there
any caveats I should look for.
3. Any other information would be very appreciated.
I'll be researching this myself, but hope some pointers will come from the mailing 
list also.
Thanks,
Rod

 


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Streaming Video Server

2004-07-08 Thread Michael Loftis
depends entirely on what the client means by video streaming.  there are 
many vague and widely varying ideas of this.

most types of 'live' streaming require a specific server software (like 
Real Player streams and windows media streams).

And for anything more than casual usage, they require a boatload of 
bw...most places charge based on peak concurrent users and 
quality/bandwidth multiplier metrics...  exactly the ratios depends on what 
it costs you for bandwidth.

--On Thursday, July 08, 2004 21:00 -0500 Rod Rodolico 
[EMAIL PROTECTED] wrote:

I just talked myself into a corner. A client called and asked if we can
do a streaming video server and I said Yes, of course. He then asked if
I'd have a bid ready by the end of the week. So:
1. How do I do it. I am running a web server that is very under utilized
(only about 60 web sites and a couple of hundred e-mail accounts). Do I
just set up the site and the files the client puts out there are MPG or
something? Or, do I need another server.
2. Any special hints on how to bill for this? I charge $25/mo to host web
sites so long as the traffic is below a gig a month. I told the client
I'd have to look into billing, but are there any caveats I should look
for.
3. Any other information would be very appreciated.
I'll be researching this myself, but hope some pointers will come from
the mailing list also.
Thanks,
Rod

--
The only way to learn a new programming language is by writing programs
in it. - Brian Kernighan
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]


--
Michael Loftis
Modwest Sr. Systems Administrator
Powerful, Affordable Web Hosting
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Some words for evms/lvm2

2004-07-08 Thread ea

Hello

Do someone who have experience with evms/lvm2 can say some words.
Impressions and etc. I think to setup one of them on machine under
extremely high load but  I think also this is not a good idea to use them
on high load servers.


--
SELLINET Internet Services Provider - http://www.sellinet.net/




Re: nat ipchains on debian woody

2004-07-08 Thread Kris Deugau
Francisco Castillo wrote:
 Then i do a apt-get install kernel-image-2.18.14-686, and this
 installations works fine. Then it puts me a entry on the lilo in
 order to load the new kernel (the old kernel is a 2.2 original woody,
 it has a 686 ) but the problem for me now is that when i reboot the
 kernel can´t load. It give me a kernel panic message , unable to load
 the boot.1006.  It seems like this new kernel dont works on my hard
 plataform, but it happens the same with the
 kernel-image.2.18-14-586tsc.
 
 This could be true?

I've heard of this happening (typically with Compaq servers, for some
reason), but I've yet to have it happen to me.

If you really want to run a 2.4 kernel, or you really want iptables,
you'll probably have to compile a custom kernel.  :/  IIRC you *can*
use iptables with a 2.2 kernel, but it's a pain to get up and running.

 How can i Knew what is the soft or version of kernel-image i must use
 in my hard system?

Anyone else?  I've found stock kernels work fine for me, but I've
occasionally run into hardware that doesn't run with them.

 Could be posible to has a kernel 2.2 of woody and a nat configuration
 (ipmasquerade) ?
 Could i do it with ipchanis?

It can be done;  it also has some very specific flaws and limitations
that make it less flexible than iptables.

 What could be this procedure to setup this configuration?

Here's a very trimmed-down version of a firewall script I used to use;
for a variety of reasons I no longer use this particular script or
anything like it on most of my systems.  (Among other reasons, all my
systems are running 2.4 kernels, and so I'm using iptables instead of
ipchains.)

You'll need to modify interface names and IPs to your setup, and decide
whether to use the kernel TCP tuning listed here (I've never seen
problems with it, but...)

=BEGIN rc.firewall=

#!/bin/sh

case $1 in start|stop|restart)

# Setting up firewall variables

#External Interface
EXT_IF=eth0
EXT_IP=10.10.10.24

#Internal Interface
INT_IF=eth1
INT_IP=192.168.2.1

#Network stuff
INT_NET=192.168.0.0/16
BROADCAST_SRC=0.0.0.0
BROADCAST_DEST=255.255.255.255

CWD=`pwd`

echo -n Doing assorted network shiznit...

#Disable TCP source routing
for f in /proc/sys/net/ipv4/conf/*/accept_source_route; do
echo 0  $f;
done
#Turn on source address verification
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1  $f;
done
#Disable ICMP redirection
for f in /proc/sys/net/ipv4/conf/*/accept_redirects; do
echo 0  $f;
done
#Turn on packet forwarding (for masquerading)
echo 1  /proc/sys/net/ipv4/ip_forward

#Turn OFF ICMP replies
#echo 1  /proc/sys/net/ipv4/icmp_echo_ignore_all

#Use TCP SYN cookies
echo 1  /proc/sys/net/ipv4/tcp_syncookies
#Assorted TCP/IP crap (turning off unused extensions, etc.)
echo 30  /proc/sys/net/ipv4/tcp_fin_timeout
echo 1800  /proc/sys/net/ipv4/tcp_keepalive_time
echo 0  /proc/sys/net/ipv4/tcp_window_scaling
echo 0  /proc/sys/net/ipv4/tcp_sack
echo 0  /proc/sys/net/ipv4/tcp_timestamps
echo done.

#Adding masquerading modules to make life easier.
echo -n Adding masquerading modules...
/sbin/modprobe ip_masq_ftp.o
/sbin/modprobe ip_masq_irc.o
/sbin/modprobe ip_masq_quake.o
/sbin/modprobe ip_masq_raudio.o
/sbin/modprobe ip_masq_vdolive.o
/sbin/modprobe ip_masq_portfw.o
/sbin/modprobe ip_masq_autofw.o
/sbin/modprobe ip_masq_user.o
echo done.

# Check to see how this script was called.

case $1 in
stop)
echo Stopping FIREWALL services.
echo -nFlushing chains...
/sbin/ipchains -F
echo done.
echo FIREWALL services stopped.
;;
start)
echo Starting FIREWALL services.

echo -nSetting forwarding rules...
/sbin/ipchains -A forward -j MASQ -s $INT_NET
echo done.

echoSetting input filter rules...
echo -n   regular input rules...
/sbin/ipchains -A input -j ACCEPT -s any/0 domain -p tcp -i 
$EXT_IF
/sbin/ipchains -A input -j ACCEPT -s any/0 domain -p udp -i 
$EXT_IF
/sbin/ipchains -A input -j ACCEPT -s any/0 time -p tcp -i 
$INT_IF
/sbin/ipchains -A input -j ACCEPT -s any/0 time -p udp -i 
$INT_IF
/sbin/ipchains -A input -j REJECT -d $EXT_IP tftp -p udp -i 
$EXT_IF -l
/sbin/ipchains -A input -j REJECT -d $EXT_IP sunrpc -p tcp -i 
$EXT_IF
-l
/sbin/ipchains -A input -j REJECT -d $EXT_IP auth -p tcp -i 
$EXT_IF -l
# Since we don't use nntp anyway...
/sbin/ipchains -A input -j REJECT -d $EXT_IP nntp -p tcp -i 
$EXT_IF -l
# Samba and friends;  we don't want to have anything to do with
# these over the public interface
/sbin/ipchains -A input -j REJECT -d $EXT_IP 134 -p tcp -i 
$EXT_IF -l
/sbin/ipchains -A input -j REJECT -d 

Streaming Video Server

2004-07-08 Thread Rod Rodolico
I just talked myself into a corner. A client called and asked if we can do a 
streaming video
server and I said Yes, of course. He then asked if I'd have a bid ready by 
the end of the
week. So:

1. How do I do it. I am running a web server that is very under utilized (only 
about 60 web
sites and a couple of hundred e-mail accounts). Do I just set up the site and 
the files the
client puts out there are MPG or something? Or, do I need another server.

2. Any special hints on how to bill for this? I charge $25/mo to host web sites 
so long as the
traffic is below a gig a month. I told the client I'd have to look into 
billing, but are there
any caveats I should look for.

3. Any other information would be very appreciated.

I'll be researching this myself, but hope some pointers will come from the 
mailing list also.

Thanks,

Rod



-- 
The only way to learn a new programming language is by writing programs in it.
- Brian Kernighan




Re: Streaming Video Server

2004-07-08 Thread px
Try  http://www.videolan.org/
Great streaming software, client and server, lots of features.  Not very 
CPU intensive from what I've found, 3-4 streams.
Come's in a Debian package too.

Rod Rodolico wrote:
I just talked myself into a corner. A client called and asked if we can do a 
streaming video
server and I said Yes, of course. He then asked if I'd have a bid ready by 
the end of the
week. So:
1. How do I do it. I am running a web server that is very under utilized (only 
about 60 web
sites and a couple of hundred e-mail accounts). Do I just set up the site and 
the files the
client puts out there are MPG or something? Or, do I need another server.
2. Any special hints on how to bill for this? I charge $25/mo to host web sites 
so long as the
traffic is below a gig a month. I told the client I'd have to look into 
billing, but are there
any caveats I should look for.
3. Any other information would be very appreciated.
I'll be researching this myself, but hope some pointers will come from the 
mailing list also.
Thanks,
Rod

 




Re: Streaming Video Server

2004-07-08 Thread Michael Loftis
depends entirely on what the client means by video streaming.  there are 
many vague and widely varying ideas of this.

most types of 'live' streaming require a specific server software (like 
Real Player streams and windows media streams).

And for anything more than casual usage, they require a boatload of 
bw...most places charge based on peak concurrent users and 
quality/bandwidth multiplier metrics...  exactly the ratios depends on what 
it costs you for bandwidth.

--On Thursday, July 08, 2004 21:00 -0500 Rod Rodolico 
[EMAIL PROTECTED] wrote:

I just talked myself into a corner. A client called and asked if we can
do a streaming video server and I said Yes, of course. He then asked if
I'd have a bid ready by the end of the week. So:
1. How do I do it. I am running a web server that is very under utilized
(only about 60 web sites and a couple of hundred e-mail accounts). Do I
just set up the site and the files the client puts out there are MPG or
something? Or, do I need another server.
2. Any special hints on how to bill for this? I charge $25/mo to host web
sites so long as the traffic is below a gig a month. I told the client
I'd have to look into billing, but are there any caveats I should look
for.
3. Any other information would be very appreciated.
I'll be researching this myself, but hope some pointers will come from
the mailing list also.
Thanks,
Rod

--
The only way to learn a new programming language is by writing programs
in it. - Brian Kernighan
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]


--
Michael Loftis
Modwest Sr. Systems Administrator
Powerful, Affordable Web Hosting