Re: Open File Limit

2003-05-10 Thread German Gutierrez
* Cuenta la leyenda que Donovan Baarda ([EMAIL PROTECTED]) escribió:
> On Fri, 2003-05-09 at 03:43, Russell Coker wrote:
> > On Fri, 9 May 2003 02:55, Matthew Walkup wrote:
> > > 2) Is there a way to see what the current number of real open files are?
> > > lsof reports all open sockets, etc, so I'm not sure how.
> > 
> > cat /proc/sys/fs/inode-nr
> 
> 10:19:33 [EMAIL PROTECTED]:~
> $ cat /proc/sys/fs/inode-nr 
> 32189 20527
> 
> I'm guessing this means my system has 20527 files open out of a maximum
> allowed 32189.
> 
> That's quite a bit more than I expected, given that it's a server with
> only 2 clients currently using it. However, it is running squid, samba,
> slapd, inn2, etc.
> 



Maybe I'm wrong, but I don't think that /proc/sys/fs/inode-nr means so,
looks like /proc/sys/fs/file-nr is the one you are looking for.

I've found this:
http://www.cs.tau.ac.il/~didi/file-nr.html



-- 
Regards,

Germán O. Gutiérrez




Re: radius server choice

2003-03-04 Thread German Gutierrez
* Cuenta la leyenda que Emile van Bergen ([EMAIL PROTECTED]) escribió:
(..)
> The disadvantage here is that your external script is spawned for every
> request (read: a full Perl/Python interpreter is started and
> initialised). 

You're right, that's the con of xtradius.

> 
> OpenRADIUS also allows you to use external scripts in any language, but
> keeps them running - fully supervised - as long as the server runs.
> 
I don't know a thing about OpenRADIUS, so maybe this question is silly:
If you change the external script, do you have to restart the radius
server?

In another mail you wrote:

> If you need more flexibility and stability than FreeRADIUS and can live
> with the limited choice of modules (ASCII files, LDAP or Unix password
> db), go for OpenRADIUS.

I think you ment "as long as you don't write your own module", right?

BTW, I'm not arguing with you or trying to flame, I just want to know
about openradius, sorry if I sound rude, my english is just that bad.

-- 
Regards,

Germán




Re: radius server choice

2003-03-04 Thread German Gutierrez
* Cuenta la leyenda que Emile van Bergen ([EMAIL PROTECTED]) escribió:
(..)
> The disadvantage here is that your external script is spawned for every
> request (read: a full Perl/Python interpreter is started and
> initialised). 

You're right, that's the con of xtradius.

> 
> OpenRADIUS also allows you to use external scripts in any language, but
> keeps them running - fully supervised - as long as the server runs.
> 
I don't know a thing about OpenRADIUS, so maybe this question is silly:
If you change the external script, do you have to restart the radius
server?

In another mail you wrote:

> If you need more flexibility and stability than FreeRADIUS and can live
> with the limited choice of modules (ASCII files, LDAP or Unix password
> db), go for OpenRADIUS.

I think you ment "as long as you don't write your own module", right?

BTW, I'm not arguing with you or trying to flame, I just want to know
about openradius, sorry if I sound rude, my english is just that bad.

-- 
Regards,

Germán


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: radius server choice

2003-03-04 Thread German Gutierrez
* Cuenta la leyenda que Francois Chenais ([EMAIL PROTECTED]) escribió:
> Thanks a lot for those informations.
> 
> In fact, I need a stable radiusd BUT I have to extend the authentification to 
> access a private (protocol) database.
> 
> Then, I need to extend a web proxy/contexte manager to access this radius 
> server so I need to easily developpe a radius client.
> 
> I seems that OpenRadius is what I !:-)
> Is there any debian package for OpenRADIUS ?
> Is the client can make specifics requests : accounting/start/stop ?
> 
> 
>   François
> 
> 

Hi,
   You should take a look at xtradius, it'll let you use your own
   program (perl, python, C, your choice!). It's based on Cistron
   Radius.
   http://xtradius.sourceforge.net/

-- 
Regards,

Germán




Re: radius server choice

2003-03-04 Thread German Gutierrez
* Cuenta la leyenda que Francois Chenais ([EMAIL PROTECTED]) escribió:
> Thanks a lot for those informations.
> 
> In fact, I need a stable radiusd BUT I have to extend the authentification to access 
> a private (protocol) database.
> 
> Then, I need to extend a web proxy/contexte manager to access this radius server so 
> I need to easily developpe a radius client.
> 
> I seems that OpenRadius is what I !:-)
> Is there any debian package for OpenRADIUS ?
> Is the client can make specifics requests : accounting/start/stop ?
> 
> 
>   François
> 
> 

Hi,
   You should take a look at xtradius, it'll let you use your own
   program (perl, python, C, your choice!). It's based on Cistron
   Radius.
   http://xtradius.sourceforge.net/

-- 
Regards,

Germán


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: understanding Routing Cisco vs. Linux

2002-09-27 Thread German Gutierrez
* Cuenta la leyenda que Thedore Knab ([EMAIL PROTECTED]) escribió:
> (I hope he ISNT annoucing them as /24s! into the BGP).

Maybe announing them as /24 makes sense if he is doing some "balancing"
through different connections...

-- 
Saludos,

Germán O. Gutiérrez
Departamento Operaciones
Desarrollos Digitales S.A.




Re: understanding Routing Cisco vs. Linux

2002-09-27 Thread German Gutierrez

* Cuenta la leyenda que Thedore Knab ([EMAIL PROTECTED]) escribió:
> (I hope he ISNT annoucing them as /24s! into the BGP).

Maybe announing them as /24 makes sense if he is doing some "balancing"
through different connections...

-- 
Saludos,

Germán O. Gutiérrez
Departamento Operaciones
Desarrollos Digitales S.A.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: [postfix] virtual domains, filter users

2002-09-19 Thread German Gutierrez
* Cuenta la leyenda que Davi Leal ([EMAIL PROTECTED]) escribió:
> Hi,
> 
> I have two domains. One the real 'ene.es' and the second the virtual 
> 'gesida.com'.
> 
> Both [EMAIL PROTECTED] and [EMAIL PROTECTED] are allowed recipients.  I want 
> reject 
> [EMAIL PROTECTED];  as in sendmail, with "error:nouser No such user here" in 
> the 
> file /etc/mail/virtusertable.  So, I will get only the [EMAIL PROTECTED]
> 
> Reference: http://www.sendmail.org/virtual-hosting.html
> 
Davi,

 Is this what are you looking for?

main.cf:

smtpd_recipient_restrictions =
  (..)
  check_recipient_access hash:/etc/postfix/recipient_access
  (..)

recipient_access:

[EMAIL PROTECTED]   550 message

-- 
Regards,

Germán




Re: [postfix] virtual domains, filter users

2002-09-19 Thread German Gutierrez

* Cuenta la leyenda que Davi Leal ([EMAIL PROTECTED]) escribió:
> Hi,
> 
> I have two domains. One the real 'ene.es' and the second the virtual 
> 'gesida.com'.
> 
> Both [EMAIL PROTECTED] and [EMAIL PROTECTED] are allowed recipients.  I want reject 
> [EMAIL PROTECTED];  as in sendmail, with "error:nouser No such user here" in the 
> file /etc/mail/virtusertable.  So, I will get only the [EMAIL PROTECTED]
> 
> Reference: http://www.sendmail.org/virtual-hosting.html
> 
Davi,

 Is this what are you looking for?

main.cf:

smtpd_recipient_restrictions =
  (..)
  check_recipient_access hash:/etc/postfix/recipient_access
  (..)

recipient_access:

user@domain   550 message

-- 
Regards,

Germán


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: failure notice (about relays.osirusoft.com)

2002-08-20 Thread German Gutierrez
Jason,
  I'm a sysadmin in a small ISP here in Argentina, and I'm not using 
osirusoft rbl, why? fibertel. What's that? A big cable-ISP (in .ar, obviously) 
who gives BOTH dinamic and static IP address for their customers, the
mails coming from the static one are (mostly) legit mails from real and
well configured mail servers, OTOH the mails coming from dinamic
addresses are (mostly) spam. The IPs are all (aparently) mixed so you
can't blacklist the entire block, if I do (as osirusoft does) the
tsunami of complaints goes directly to my boss, and guess who is the bad
guy?
Is the mixed IP addresses issue osirusoft blame? I don't think so.

Another example: infomail.infovia.com.ar, it is listed as an open relay
in ORDB.org (well done), but I had to manually whitelist in my access
file because they are one of the "big guys" and don't bother to
configure the mail servers right...

On both cases I've sent tons of mails to postmaster/root/abuse/info...

What is my point?
Strength.

We don't have the enough human resources (We are just 6 for sysadmin/helpdesk/
php programming/cisco config/html design) and customer base to make them
change their policy. 
If, for example, AOL starts using osirusoft/orbl, they surely start
worrying about that. Until that moment arrives I have to indirectly
support them.

--
Regards,
  Germán Gutiérrez




Apache + FP Extensions (+ mod_vhost_alias?)

2002-02-28 Thread German Gutierrez
Hi,
   I'm trying to get the M$ FrontPage Extensions (2000/2002) working in a 
   Debian/Woody with no luck. I tried to do it the "debian" way, I mean,
   downloading the sources with apt-get source, putting the patch in 
   upstream/patches, modifiyng the debian/control file adding:

   --fpexec-caller=www-data \
   --fpexec-uidmin=33 \
   --fpexec-gidmin=33 \
   --server-uid=33 \
   --server-gid=33 \
   --fpexec-fpuser=root \
   --fpexec-fpgroup=root \
   --enable-module=frontpage

   Does anyone have any experience with this? 
  
Regards,
-- 

 German O. Gutierrez
   Departamento Operaciones
  Desarrollos Digitales S.A.

- End forwarded message -

-- 

 German O. Gutierrez
   Departamento Operaciones
  Desarrollos Digitales S.A.




Apache + FP Extensions (+ mod_vhost_alias?)

2002-02-28 Thread German Gutierrez
Hi,
   I'm trying to get the M$ FrontPage Extensions (2000/2002) working in a 
   Debian/Woody with no luck. I tried to do it the "debian" way, I mean,
   downloading the sources with apt-get source, putting the patch in 
   upstream/patches, modifiyng the debian/control file adding:

   --fpexec-caller=www-data \
   --fpexec-uidmin=33 \
   --fpexec-gidmin=33 \
   --server-uid=33 \
   --server-gid=33 \
   --fpexec-fpuser=root \
   --fpexec-fpgroup=root \
   --enable-module=frontpage

   Does anyone have any experience with this? 
  
Regards,
-- 

 German O. Gutierrez
   Departamento Operaciones
  Desarrollos Digitales S.A.




Apache + FP Extensions (+ mod_vhost_alias?)

2002-02-28 Thread German Gutierrez

Hi,
   I'm trying to get the M$ FrontPage Extensions (2000/2002) working in a 
   Debian/Woody with no luck. I tried to do it the "debian" way, I mean,
   downloading the sources with apt-get source, putting the patch in 
   upstream/patches, modifiyng the debian/control file adding:

   --fpexec-caller=www-data \
   --fpexec-uidmin=33 \
   --fpexec-gidmin=33 \
   --server-uid=33 \
   --server-gid=33 \
   --fpexec-fpuser=root \
   --fpexec-fpgroup=root \
   --enable-module=frontpage

   Does anyone have any experience with this? 
  
Regards,
-- 

 German O. Gutierrez
   Departamento Operaciones
  Desarrollos Digitales S.A.

- End forwarded message -

-- 

 German O. Gutierrez
   Departamento Operaciones
  Desarrollos Digitales S.A.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Apache + FP Extensions (+ mod_vhost_alias?)

2002-02-28 Thread German Gutierrez

Hi,
   I'm trying to get the M$ FrontPage Extensions (2000/2002) working in a 
   Debian/Woody with no luck. I tried to do it the "debian" way, I mean,
   downloading the sources with apt-get source, putting the patch in 
   upstream/patches, modifiyng the debian/control file adding:

   --fpexec-caller=www-data \
   --fpexec-uidmin=33 \
   --fpexec-gidmin=33 \
   --server-uid=33 \
   --server-gid=33 \
   --fpexec-fpuser=root \
   --fpexec-fpgroup=root \
   --enable-module=frontpage

   Does anyone have any experience with this? 
  
Regards,
-- 

 German O. Gutierrez
   Departamento Operaciones
  Desarrollos Digitales S.A.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: dns to ldap

2002-02-05 Thread German Gutierrez
* [20020204 23:51] Thedore Knab ([EMAIL PROTECTED]) escribió:
> I was wondering if anyone has their DNS in an LDAP directory.
> 
> For the people that have, does this cut down on adminstration time ?
> 
> Are there any books, how-tos, or projects that you could recommend for
> this ?
> 
> -Ted
Take a look to:
http://www.linuxdoc.org/HOWTO/LDAP-Implementation-HOWTO/dns.html

Regards,

 German O. Gutierrez
   Departamento Operaciones
  Desarrollos Digitales S.A.




Re: dns to ldap

2002-02-05 Thread German Gutierrez

* [20020204 23:51] Thedore Knab ([EMAIL PROTECTED]) escribió:
> I was wondering if anyone has their DNS in an LDAP directory.
> 
> For the people that have, does this cut down on adminstration time ?
> 
> Are there any books, how-tos, or projects that you could recommend for
> this ?
> 
> -Ted
Take a look to:
http://www.linuxdoc.org/HOWTO/LDAP-Implementation-HOWTO/dns.html

Regards,

 German O. Gutierrez
   Departamento Operaciones
  Desarrollos Digitales S.A.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]