Re: Bandwidth limiting

2002-02-22 Thread Nick Jennings
Hi, I am running into the same problem and would like to know if you
could provide a reference URL to some documentation on the various
uses of 'tc' (or iproute in general).

On Wed, Feb 13, 2002 at 07:33:29PM -0500, Guillaume wrote:
> 
> Thank you all,
> iproute was what I was looking for so long.
> 
> just with this I reduce a little my outgoing bandwidth, but
> interactivity is greatly increased as well as my ping and DL bandwidth !
> 
> # tc qdisc add dev ppp0 root tbf rate 240kbit latency 30ms burst 1700
> 
> Raising the burst (=bucket) increases the outgoing bandwidth to the
> depends of interactivity. Also possible to do this by increasing the
> priority of the small packets.
> 
> Guillaume
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings




Re: Bandwidth limiting

2002-02-22 Thread Nick Jennings

Hi, I am running into the same problem and would like to know if you
could provide a reference URL to some documentation on the various
uses of 'tc' (or iproute in general).

On Wed, Feb 13, 2002 at 07:33:29PM -0500, Guillaume wrote:
> 
> Thank you all,
> iproute was what I was looking for so long.
> 
> just with this I reduce a little my outgoing bandwidth, but
> interactivity is greatly increased as well as my ping and DL bandwidth !
> 
> # tc qdisc add dev ppp0 root tbf rate 240kbit latency 30ms burst 1700
> 
> Raising the burst (=bucket) increases the outgoing bandwidth to the
> depends of interactivity. Also possible to do this by increasing the
> priority of the small packets.
> 
> Guillaume
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Building custom kernel based off stock debian kernel

2002-02-10 Thread Nick Jennings
On Sun, Feb 10, 2002 at 11:19:17AM -0500, Theodore Knab wrote:
> If you fully understand how to compile the kernel and know all the devices
> your system needs, it might be easier to get the source from kernel.org.
> This way you only need to deal with one package. 
> 
> linux-2.4.17.tar.gz 
> 
> I don't understand what the advantage of using the kernel-source from 
> the Debian Source is. For me, it simply adds in an extra unneeded layer 
> of complication.
> 
> -Ted
> 

 Well. I was under the assumption that the debian kernel source has
 several patches applied. Like other distributions kernels. So 
 using debian's /boot/config* file, I figured it'd be wise to also
 be using the same source tarball that was used for the debian kernel.

-- 
  Nick Jennings




Re: Building custom kernel based off stock debian kernel

2002-02-10 Thread Nick Jennings

On Sun, Feb 10, 2002 at 11:19:17AM -0500, Theodore Knab wrote:
> If you fully understand how to compile the kernel and know all the devices
> your system needs, it might be easier to get the source from kernel.org.
> This way you only need to deal with one package. 
> 
> linux-2.4.17.tar.gz 
> 
> I don't understand what the advantage of using the kernel-source from 
> the Debian Source is. For me, it simply adds in an extra unneeded layer 
> of complication.
> 
> -Ted
> 

 Well. I was under the assumption that the debian kernel source has
 several patches applied. Like other distributions kernels. So 
 using debian's /boot/config* file, I figured it'd be wise to also
 be using the same source tarball that was used for the debian kernel.

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Building custom kernel based off stock debian kernel

2002-02-07 Thread Nick Jennings
Hello.

 I'd like to make a slight customization to the debian kernel. I do not
 understand the debian packing scheme for getting the complete source
 to the DEBIAN linux kernel (i.e. all patches applied and the .config
 that is used for the debian kernel-images).

 I grabbed the kernel-source:

gateway:/usr/src/# apt-get install kernel-source-2.4.17

 After examining the source tree from this, I have found that it does
 not have a .config at all, and I do not this any of the debian patches
 have been applied. This looks like kernel.org source.

 So I tried:

gateway:/usr/src/deb-src# apt-get source kernel-image-2.4.17

 This created the following:

gateway:/usr/src/deb-src# ls
kernel-source-2.4.17-2.4.17kernel-source-2.4.17_2.4.17-1.dsc
kernel-source-2.4.17_2.4.17-1.diff.gz  kernel-source-2.4.17_2.4.17.orig.tar.gz
gateway:/usr/src/deb-src# 

 The directory 'kernel-source-2.4.17-2.4.17' is quite a strange name? I
 am confused by this behaviour and am not sure how I can use this source
 package to build a custom debian kernel. Why is it called 2.4.17-2.4.17?
 
 Is the 'source kernel-image-2.4.17' what I am supposed to be building
 from? If so, why is there no '.config' in there? Where do I get the
 '.config' from?


 Now assuming I get answers to these questions, can someone please verify
 the the following would be how I build this source into a kernel package?


patch kernel && 'make menuconfig' to customize kernel configuration.


gateway:/usr/src/linux# make-kpkg --revision=gateway.1 --initrd buildpackage

-- 
  Nick Jennings




Building custom kernel based off stock debian kernel

2002-02-07 Thread Nick Jennings

Hello.

 I'd like to make a slight customization to the debian kernel. I do not
 understand the debian packing scheme for getting the complete source
 to the DEBIAN linux kernel (i.e. all patches applied and the .config
 that is used for the debian kernel-images).

 I grabbed the kernel-source:

gateway:/usr/src/# apt-get install kernel-source-2.4.17

 After examining the source tree from this, I have found that it does
 not have a .config at all, and I do not this any of the debian patches
 have been applied. This looks like kernel.org source.

 So I tried:

gateway:/usr/src/deb-src# apt-get source kernel-image-2.4.17

 This created the following:

gateway:/usr/src/deb-src# ls
kernel-source-2.4.17-2.4.17kernel-source-2.4.17_2.4.17-1.dsc
kernel-source-2.4.17_2.4.17-1.diff.gz  kernel-source-2.4.17_2.4.17.orig.tar.gz
gateway:/usr/src/deb-src# 

 The directory 'kernel-source-2.4.17-2.4.17' is quite a strange name? I
 am confused by this behaviour and am not sure how I can use this source
 package to build a custom debian kernel. Why is it called 2.4.17-2.4.17?
 
 Is the 'source kernel-image-2.4.17' what I am supposed to be building
 from? If so, why is there no '.config' in there? Where do I get the
 '.config' from?


 Now assuming I get answers to these questions, can someone please verify
 the the following would be how I build this source into a kernel package?


patch kernel && 'make menuconfig' to customize kernel configuration.


gateway:/usr/src/linux# make-kpkg --revision=gateway.1 --initrd buildpackage

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Problems building FreeSWAN kernel package.

2002-02-06 Thread Nick Jennings
On Wed, Feb 06, 2002 at 04:36:38PM -0500, [EMAIL PROTECTED] wrote:
> 
> You don't really say what you did.  Did you run make menuconfig or equiv?
> Missing autoconf is probably not freeswan related unless the patcher got
> mangled.

 Well, the documentation in the README.Debian (for kernel-patch-freeswan)
 states:

<-snip->

If you want to use the freeswan utilities, you will need a patched kernel.
When you install the kernel-patch-freeswan package and use make-kpkg to build
your kernel, it should be patched automatically when you set the environment
variable PATCH_THE_KERNEL=YES
Usually you can then create a kernel package with
make-kpkg --config=menuconfig --revision= kernel_image
The "--config=menuconfig" parameter forces make-kpkg to call "make menuconfig"
after patching the kernel source, so that you have the possibility to
configure compile-time options for freeswan.

<-snip->

 So I assumed menuconfig would pop up, (which it never did).
 
 
> make-kpkg built freeswan flawlessly on several i86 machines here in 
> past couple of weeks.  All running current unstable.  Maybe a month
> ago I did have to tweak it but recent freeswan package fixed that.

 Well, below I describe my failed attempt at trying to apply the 
 kernel-patch-freeswan manually. Maybe you can provide some suggestions
 to either the above, or below attempts.


> > The documentation (README.Debian) is pretty sparse, and I don't know where 
> > else to go to get info on doing this. Any comments or suggestions greatly
> > appreciated. Thanks in advance.
> 
> Try applying patches by hand to see what happens.  Then just build kernel
> as usual.

 Ok, this is how the documentation describes applying the patch manually.

<-snip->

If you really want to compile your kernel without the help of kernel-package,
you can patch it by going to your kernel source tree directory and entering
'make -C /usr/src/kernel-patches/all/freeswan -f Makefile insert
KERNELSRC=
PATCHER=/usr/src/kernel-patches/all/freeswan/patcher'

<-snip->

gateway:/usr/src/linux# make -C /usr/src/kernel-patches/all/freeswan/ -f 
Makefile insert KERNELSRV=/usr/src/kernel-source-2.4.17 
PATCHER=/usr/src/kernel-patches/all/freeswan/patcher 
make: Entering directory `/usr/src/kernel-patches/all/freeswan'
echo "===" 
===
echo "`date` `cd /usr/src/linux ; pwd`" 
Wed Feb  6 06:56:52 PST 2002 /usr/src/linux
make _patches2.3 BINDIR=/usr/local/lib/ipsec PUBDIR=/usr/local/sbin 
PRIVDIR=/usr/local/lib/ipsec REALPRIVDIR=/usr/local/lib/ipsec 
MANTREE=/usr/local/man DESTDIR= INSTALL="install" 
make[1]: Entering directory `/usr/src/kernel-patches/all/freeswan'
* applying klips/patches2.2/Documentation.Configure.help to 
/usr/src/linux/Documentation/Configure.help...
patching file ./Documentation/Configure.help
Hunk #1 FAILED at 3530.
1 out of 1 hunk FAILED -- saving rejects to file 
./Documentation/Configure.help.rej
* /usr/src/linux/Documentation/Configure.help patch failed, restoring original
/usr/src/kernel-patches/all/freeswan/patcher: patch on 
/usr/src/linux/Documentation/Configure.help failed!
/usr/src/kernel-patches/all/freeswan/patcher: restoring original 
/usr/src/linux/Documentation/Configure.help,
/usr/src/kernel-patches/all/freeswan/patcher: leaving patch attempt in 
/usr/src/linux/Documentation/Configure.help.mangled
make[1]: *** [_patches2.3] Error 1
make[1]: Leaving directory `/usr/src/kernel-patches/all/freeswan'
make: *** [patches] Error 2
make: Leaving directory `/usr/src/kernel-patches/all/freeswan'
gateway:/usr/src/linux#



That's as far as I get. Any suggestions? I really want to avoid building
a stock kernel because I am trying to do this the "debian way" and 
get a debian kernel package out of it. (which I can use on other systems,
or at least learn what I need to do to make custom ones for other
architectures).

-- 
  Nick Jennings




Problems building FreeSWAN kernel package.

2002-02-06 Thread Nick Jennings
Hello,

  Getting a VPN set up on my gateway machine. Running woody (2.4.17).

Installed the packages:
freeswan, kernel-patch-freeswan, kernel-package, gawk

After reading /usr/share/doc/kerne-package-freeswan/README.Debian I 
also installed:
kernel-source-2.4.17, kernel-headers-2.4.17

gateway:/# /usr/src/kernel-source-2.4.17/
gateway:/usr/src/kernel-source-2.4.17# make-kpkg --config=menuconfig 
--revision=gateway.ipsec.1 buildpackage
<-snip->
<** goes on for a while, then errors out: **>
<-snip->
/usr/bin/make _sfdep_kernel _sfdep_drivers _sfdep_mm _sfdep_fs _sfdep_net 
_sfdep_ipc _sfdep_lib _sfdep_arch/i386/kernel _sfdep_arch/i386/mm 
_sfdep_arch/i386/lib _sfdep_arch/i386/math-emu _FASTDEP_ALL_SUB_DIRS="kernel 
drivers mm fs net ipc lib arch/i386/kernel arch/i386/mm arch/i386/lib 
arch/i386/math-emu"
make[3]: Entering directory `/usr/src/kernel-source-2.4.17'
/usr/bin/make -C kernel fastdep
make[4]: Entering directory `/usr/src/kernel-source-2.4.17/kernel'
make[4]: *** No rule to make target 
`/usr/src/kernel-source-2.4.17/include/linux/autoconf.h', needed by 
`/usr/src/kernel-source-2.4.17/include/linux/modules/signal.ver'.  Stop.
make[4]: Leaving directory `/usr/src/kernel-source-2.4.17/kernel'
make[3]: *** [_sfdep_kernel] Error 2
make[3]: Leaving directory `/usr/src/kernel-source-2.4.17'
make[2]: *** [dep-files] Error 2
make[2]: Leaving directory `/usr/src/kernel-source-2.4.17'
make[1]: *** [stamp-build] Error 2
make[1]: Leaving directory `/usr/src/kernel-source-2.4.17'
make: *** [stamp-buildpackage] Error 2
gateway:/usr/src/kernel-source-2.4.17#


The documentation (README.Debian) is pretty sparse, and I don't know where 
else to go to get info on doing this. Any comments or suggestions greatly
appreciated. Thanks in advance.

-- 
  Nick Jennings




Re: Problems building FreeSWAN kernel package.

2002-02-06 Thread Nick Jennings

On Wed, Feb 06, 2002 at 04:36:38PM -0500, [EMAIL PROTECTED] wrote:
> 
> You don't really say what you did.  Did you run make menuconfig or equiv?
> Missing autoconf is probably not freeswan related unless the patcher got
> mangled.

 Well, the documentation in the README.Debian (for kernel-patch-freeswan)
 states:

<-snip->

If you want to use the freeswan utilities, you will need a patched kernel.
When you install the kernel-patch-freeswan package and use make-kpkg to build
your kernel, it should be patched automatically when you set the environment
variable PATCH_THE_KERNEL=YES
Usually you can then create a kernel package with
make-kpkg --config=menuconfig --revision= kernel_image
The "--config=menuconfig" parameter forces make-kpkg to call "make menuconfig"
after patching the kernel source, so that you have the possibility to
configure compile-time options for freeswan.

<-snip->

 So I assumed menuconfig would pop up, (which it never did).
 
 
> make-kpkg built freeswan flawlessly on several i86 machines here in 
> past couple of weeks.  All running current unstable.  Maybe a month
> ago I did have to tweak it but recent freeswan package fixed that.

 Well, below I describe my failed attempt at trying to apply the 
 kernel-patch-freeswan manually. Maybe you can provide some suggestions
 to either the above, or below attempts.


> > The documentation (README.Debian) is pretty sparse, and I don't know where 
> > else to go to get info on doing this. Any comments or suggestions greatly
> > appreciated. Thanks in advance.
> 
> Try applying patches by hand to see what happens.  Then just build kernel
> as usual.

 Ok, this is how the documentation describes applying the patch manually.

<-snip->

If you really want to compile your kernel without the help of kernel-package,
you can patch it by going to your kernel source tree directory and entering
'make -C /usr/src/kernel-patches/all/freeswan -f Makefile insert
KERNELSRC=
PATCHER=/usr/src/kernel-patches/all/freeswan/patcher'

<-snip->

gateway:/usr/src/linux# make -C /usr/src/kernel-patches/all/freeswan/ -f Makefile 
insert KERNELSRV=/usr/src/kernel-source-2.4.17 
PATCHER=/usr/src/kernel-patches/all/freeswan/patcher 
make: Entering directory `/usr/src/kernel-patches/all/freeswan'
echo "===" 
===
echo "`date` `cd /usr/src/linux ; pwd`" 
Wed Feb  6 06:56:52 PST 2002 /usr/src/linux
make _patches2.3 BINDIR=/usr/local/lib/ipsec PUBDIR=/usr/local/sbin 
PRIVDIR=/usr/local/lib/ipsec REALPRIVDIR=/usr/local/lib/ipsec MANTREE=/usr/local/man 
DESTDIR= INSTALL="install" 
make[1]: Entering directory `/usr/src/kernel-patches/all/freeswan'
* applying klips/patches2.2/Documentation.Configure.help to 
/usr/src/linux/Documentation/Configure.help...
patching file ./Documentation/Configure.help
Hunk #1 FAILED at 3530.
1 out of 1 hunk FAILED -- saving rejects to file ./Documentation/Configure.help.rej
* /usr/src/linux/Documentation/Configure.help patch failed, restoring original
/usr/src/kernel-patches/all/freeswan/patcher: patch on 
/usr/src/linux/Documentation/Configure.help failed!
/usr/src/kernel-patches/all/freeswan/patcher: restoring original 
/usr/src/linux/Documentation/Configure.help,
/usr/src/kernel-patches/all/freeswan/patcher: leaving patch attempt in 
/usr/src/linux/Documentation/Configure.help.mangled
make[1]: *** [_patches2.3] Error 1
make[1]: Leaving directory `/usr/src/kernel-patches/all/freeswan'
make: *** [patches] Error 2
make: Leaving directory `/usr/src/kernel-patches/all/freeswan'
gateway:/usr/src/linux#



That's as far as I get. Any suggestions? I really want to avoid building
a stock kernel because I am trying to do this the "debian way" and 
get a debian kernel package out of it. (which I can use on other systems,
or at least learn what I need to do to make custom ones for other
architectures).

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Problems building FreeSWAN kernel package.

2002-02-06 Thread Nick Jennings

Hello,

  Getting a VPN set up on my gateway machine. Running woody (2.4.17).

Installed the packages:
freeswan, kernel-patch-freeswan, kernel-package, gawk

After reading /usr/share/doc/kerne-package-freeswan/README.Debian I 
also installed:
kernel-source-2.4.17, kernel-headers-2.4.17

gateway:/# /usr/src/kernel-source-2.4.17/
gateway:/usr/src/kernel-source-2.4.17# make-kpkg --config=menuconfig 
--revision=gateway.ipsec.1 buildpackage
<-snip->
<** goes on for a while, then errors out: **>
<-snip->
/usr/bin/make _sfdep_kernel _sfdep_drivers _sfdep_mm _sfdep_fs _sfdep_net _sfdep_ipc 
_sfdep_lib _sfdep_arch/i386/kernel _sfdep_arch/i386/mm _sfdep_arch/i386/lib 
_sfdep_arch/i386/math-emu _FASTDEP_ALL_SUB_DIRS="kernel drivers mm fs net ipc lib 
arch/i386/kernel arch/i386/mm arch/i386/lib arch/i386/math-emu"
make[3]: Entering directory `/usr/src/kernel-source-2.4.17'
/usr/bin/make -C kernel fastdep
make[4]: Entering directory `/usr/src/kernel-source-2.4.17/kernel'
make[4]: *** No rule to make target 
`/usr/src/kernel-source-2.4.17/include/linux/autoconf.h', needed by 
`/usr/src/kernel-source-2.4.17/include/linux/modules/signal.ver'.  Stop.
make[4]: Leaving directory `/usr/src/kernel-source-2.4.17/kernel'
make[3]: *** [_sfdep_kernel] Error 2
make[3]: Leaving directory `/usr/src/kernel-source-2.4.17'
make[2]: *** [dep-files] Error 2
make[2]: Leaving directory `/usr/src/kernel-source-2.4.17'
make[1]: *** [stamp-build] Error 2
make[1]: Leaving directory `/usr/src/kernel-source-2.4.17'
make: *** [stamp-buildpackage] Error 2
gateway:/usr/src/kernel-source-2.4.17#


The documentation (README.Debian) is pretty sparse, and I don't know where 
else to go to get info on doing this. Any comments or suggestions greatly
appreciated. Thanks in advance.

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Best way to duplicate HDs

2002-01-02 Thread Nick Jennings
On Tue, Jan 01, 2002 at 02:28:28PM +0800, Jason Lim wrote:
> Hi all,
> 
> What do you think would be the best way to duplicate a HD to another
> (similar sized) HD?
> 

 I've been using tar on my system. Works excellent. no downtime, and all
 permissions are maintained. 

-- 
  Nick Jennings




Re: Best way to duplicate HDs

2002-01-02 Thread Nick Jennings

On Tue, Jan 01, 2002 at 02:28:28PM +0800, Jason Lim wrote:
> Hi all,
> 
> What do you think would be the best way to duplicate a HD to another
> (similar sized) HD?
> 

 I've been using tar on my system. Works excellent. no downtime, and all
 permissions are maintained. 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: LinkWalker

2001-12-23 Thread Nick Jennings
On Sun, Dec 23, 2001 at 09:17:54PM +0100, Russell Coker wrote:
> 
> I wasn't aware that there was any format to robots.txt, I thought that the 
> mere presense of such a file would prevent robots from visiting.

Here is an example of my robots.txt

User-agent: *
Disallow: /webalizer/
Disallow: contacts.txt
Disallow: /dl/


> As for rule-abiding spiders, such programs will not download files ending in 
> .wav, .mp3, .gz, .tgz, or .zip so I won't even see them.
>
> That's why I usually don't even notice responsible web spiders such as google 
> when browsing my web logs!

 Hmm, I have had spiders grab .tgz's from me before, but not anymore.

 User-agent can be set to a specific spider agent-name, or * for all spiders.

-- 
  Nick Jennings




Re: LinkWalker

2001-12-23 Thread Nick Jennings
Why don't you just update your robots.txt to explicitly specify which
files you don't or do, allow spiders access to. If it's a rule-obiding
spider, that will be the end of it.

On Sun, Dec 23, 2001 at 05:41:47PM +0100, Russell Coker wrote:
> I have a nasty web spider with an agent name of "LinkWalker" downloading 
> everything on my site (including .tgz files).  Does anyone know anything 
> about it?
> 
> I've added the following to my firewall setup to stop further attacks...
> 
> # crappy LinkWalker - evil spider that downloads every file including .tgz on
> # the site
> iptables -A INPUT -j logitrej -p tcp -s 209.167.50.25 -d 0.0.0.0/0 --dport www
> 
> -- 
> http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
> http://www.coker.com.au/postal/   Postal SMTP/POP benchmark
> http://www.coker.com.au/projects.html Projects I am working on
> http://www.coker.com.au/~russell/ My home page
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings




Re: LinkWalker

2001-12-23 Thread Nick Jennings

On Sun, Dec 23, 2001 at 09:17:54PM +0100, Russell Coker wrote:
> 
> I wasn't aware that there was any format to robots.txt, I thought that the 
> mere presense of such a file would prevent robots from visiting.

Here is an example of my robots.txt

User-agent: *
Disallow: /webalizer/
Disallow: contacts.txt
Disallow: /dl/


> As for rule-abiding spiders, such programs will not download files ending in 
> .wav, .mp3, .gz, .tgz, or .zip so I won't even see them.
>
> That's why I usually don't even notice responsible web spiders such as google 
> when browsing my web logs!

 Hmm, I have had spiders grab .tgz's from me before, but not anymore.

 User-agent can be set to a specific spider agent-name, or * for all spiders.

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: LinkWalker

2001-12-23 Thread Nick Jennings

Why don't you just update your robots.txt to explicitly specify which
files you don't or do, allow spiders access to. If it's a rule-obiding
spider, that will be the end of it.

On Sun, Dec 23, 2001 at 05:41:47PM +0100, Russell Coker wrote:
> I have a nasty web spider with an agent name of "LinkWalker" downloading 
> everything on my site (including .tgz files).  Does anyone know anything 
> about it?
> 
> I've added the following to my firewall setup to stop further attacks...
> 
> # crappy LinkWalker - evil spider that downloads every file including .tgz on
> # the site
> iptables -A INPUT -j logitrej -p tcp -s 209.167.50.25 -d 0.0.0.0/0 --dport www
> 
> -- 
> http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
> http://www.coker.com.au/postal/   Postal SMTP/POP benchmark
> http://www.coker.com.au/projects.html Projects I am working on
> http://www.coker.com.au/~russell/ My home page
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: 2 ip`s on one interface

2001-12-10 Thread Nick Jennings
On Mon, Dec 10, 2001 at 05:47:48PM +0100, Marcin Sochacki wrote:
> On Mon, Dec 10, 2001 at 02:11:54PM -0200, Consultoria de Informatica 
> Cathedral wrote:
> > How do i put 2 ip`s on a singlenet board
> 
> ARGHHH, this is debian-isp list, not debian-newbie.
> I think people subscribed here are expected to know such things by default :)
> 

 This is debian-isp, puttin 2 ip's on a single interface is something
 that a small ISP might run into somewhere along the line. If I was
 this admin, and had never done it before, then I would ask here as
 well. 

 YOUR post is the only off-topic post in this thread.

 In response to the original post:

 You can you "ip aliases" to assign multiple IPs to the same network
 interface. For example:

# ifconfig eth0 192.168.1.5
# ifconfig eth0:1 192.168.1.6

# ifconfig
eth0  Link encap:Ethernet  HWaddr 00:20:78:16:D5:D6  
  inet addr:192.168.1.5  Bcast:192.168.1.255  Mask:255.255.255.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:20875 errors:0 dropped:0 overruns:0 frame:0
  TX packets:13365 errors:0 dropped:0 overruns:0 carrier:0
  collisions:3109 txqueuelen:100 
  RX bytes:24011076 (22.8 MiB)  TX bytes:1056273 (1.0 MiB)
  Interrupt:5 Base address:0x9800 

eth0:1Link encap:Ethernet  HWaddr 00:20:78:16:D5:D6  
  inet addr:192.168.1.6  Bcast:192.168.1.255  Mask:255.255.255.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  Interrupt:5 Base address:0x9800 

-- 
  Nick Jennings




Re: 2 ip`s on one interface

2001-12-10 Thread Nick Jennings

On Mon, Dec 10, 2001 at 05:47:48PM +0100, Marcin Sochacki wrote:
> On Mon, Dec 10, 2001 at 02:11:54PM -0200, Consultoria de Informatica Cathedral wrote:
> > How do i put 2 ip`s on a singlenet board
> 
> ARGHHH, this is debian-isp list, not debian-newbie.
> I think people subscribed here are expected to know such things by default :)
> 

 This is debian-isp, puttin 2 ip's on a single interface is something
 that a small ISP might run into somewhere along the line. If I was
 this admin, and had never done it before, then I would ask here as
 well. 

 YOUR post is the only off-topic post in this thread.

 In response to the original post:

 You can you "ip aliases" to assign multiple IPs to the same network
 interface. For example:

# ifconfig eth0 192.168.1.5
# ifconfig eth0:1 192.168.1.6

# ifconfig
eth0  Link encap:Ethernet  HWaddr 00:20:78:16:D5:D6  
  inet addr:192.168.1.5  Bcast:192.168.1.255  Mask:255.255.255.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:20875 errors:0 dropped:0 overruns:0 frame:0
  TX packets:13365 errors:0 dropped:0 overruns:0 carrier:0
  collisions:3109 txqueuelen:100 
  RX bytes:24011076 (22.8 MiB)  TX bytes:1056273 (1.0 MiB)
  Interrupt:5 Base address:0x9800 

eth0:1Link encap:Ethernet  HWaddr 00:20:78:16:D5:D6  
  inet addr:192.168.1.6  Bcast:192.168.1.255  Mask:255.255.255.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  Interrupt:5 Base address:0x9800 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: trouble ticket system

2001-12-06 Thread Nick Jennings
On Mon, Dec 03, 2001 at 11:40:08PM -0600, Matt Fair wrote:
> Would would be the best trouble ticket system to use?
> I took a rt, but it doesn't look as good people say it is (at least the
> one in the stable release).
> Thanks,
> Matt

PerlDesk, http://perldesk.org  looks pretty cool. Haven't had the opportunity
to incorporate it into existing systems yet though.

> 
> 
> 
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings




Re: trouble ticket system

2001-12-06 Thread Nick Jennings

On Mon, Dec 03, 2001 at 11:40:08PM -0600, Matt Fair wrote:
> Would would be the best trouble ticket system to use?
> I took a rt, but it doesn't look as good people say it is (at least the
> one in the stable release).
> Thanks,
> Matt

PerlDesk, http://perldesk.org  looks pretty cool. Haven't had the opportunity
to incorporate it into existing systems yet though.

> 
> 
> 
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: System Time Problems.

2001-11-27 Thread Nick Jennings
On Tue, Nov 27, 2001 at 06:59:01PM -0500, Bulent Murtezaoglu wrote:
> 
> But anyway, why not have the battery backed clock set to UTC?
> 

 Because I am a simple man.

-- 
  Nick Jennings




System Time Problems.

2001-11-27 Thread Nick Jennings
Hello,

  For some reason our Debain server thinks the BIOS clock is set to
  UTC, when it is really set to local time (PST). 

  So when I set the timezone to Pacific/US, it offsets, based on the BIOS time,
  -8, making the system 8 hours behind. 

  How do I change the settings that tell the system what the BIOS clock
  is set to. The only time i remember this question being asked is during
  the install process.

  All help appreciated.

-- 
  Nick Jennings




Re: System Time Problems.

2001-11-27 Thread Nick Jennings

On Tue, Nov 27, 2001 at 06:59:01PM -0500, Bulent Murtezaoglu wrote:
> 
> But anyway, why not have the battery backed clock set to UTC?
> 

 Because I am a simple man.

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




System Time Problems.

2001-11-27 Thread Nick Jennings

Hello,

  For some reason our Debain server thinks the BIOS clock is set to
  UTC, when it is really set to local time (PST). 

  So when I set the timezone to Pacific/US, it offsets, based on the BIOS time,
  -8, making the system 8 hours behind. 

  How do I change the settings that tell the system what the BIOS clock
  is set to. The only time i remember this question being asked is during
  the install process.

  All help appreciated.

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Mail

2001-11-19 Thread Nick Jennings
I use exim, which has ample documentation on how to do this. Basically,
I have a passwd. for several different domains, theres no need
for a matching shadow (unless I plan to have "real" accounts for the
people). 

Exim justmakes sure the user exists in the appropriate passwd file, and
we have a different spool dir for each domain. 

The term is "Virtual Domains" I believe, here a link to the exim docs:

http://www.exim.org/exim-html-3.30/doc/html/spec.html

Check out section 43.

Hope this helps.

On Mon, Nov 19, 2001 at 08:31:20PM -0600, Asher Densmore-Lynn wrote:
> Does anyone have the slightest clue how to host mail for multiple domains
> such that every domain has a unique namespace? Thinking about the matter, I
> realized I don't quite know how to accomplish this.
> 
> The smallest pointer will be appreciated -- I can figure it out, I think,
> once I know where to look.
> 
> --
> Asher Densmore-Lynn <[EMAIL PROTECTED]>
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings




Re: Mail

2001-11-19 Thread Nick Jennings

I use exim, which has ample documentation on how to do this. Basically,
I have a passwd. for several different domains, theres no need
for a matching shadow (unless I plan to have "real" accounts for the
people). 

Exim justmakes sure the user exists in the appropriate passwd file, and
we have a different spool dir for each domain. 

The term is "Virtual Domains" I believe, here a link to the exim docs:

http://www.exim.org/exim-html-3.30/doc/html/spec.html

Check out section 43.

Hope this helps.

On Mon, Nov 19, 2001 at 08:31:20PM -0600, Asher Densmore-Lynn wrote:
> Does anyone have the slightest clue how to host mail for multiple domains
> such that every domain has a unique namespace? Thinking about the matter, I
> realized I don't quite know how to accomplish this.
> 
> The smallest pointer will be appreciated -- I can figure it out, I think,
> once I know where to look.
> 
> --
> Asher Densmore-Lynn <[EMAIL PROTECTED]>
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




PPPOE setup problems

2001-11-19 Thread Nick Jennings
Hello,

  I'm using testing, and have installed the pppoe package.

  I have followed the debian specific instructions in: 
  /usr/share/doc/pppoe/README.Debain.gz

  I tried a:

# pon dsl-provider

  This was the output from plog:

# plog
Nov 19 09:18:49 gateway pppd[402]: Serial connection established.
Nov 19 09:18:49 gateway pppd[402]: Using interface ppp0
Nov 19 09:18:49 gateway pppd[402]: Connect: ppp0 <--> /dev/pts/0

  In the docs, it says a succesfull connection should be:
  ppp0 <--> eth0 (not /dev/pst/0)

  It doesn't seem to make a difference whether I load the pppoe module or
  not.

  Also, I'm not sure what I should have defined in my 
  /etc/networking/interfaces file for eth0 (the interface for the DSL),
  so I commented out it's entry so it does not come up otherwise. Is
  this correct?

  Any input will be appreciated, and let me know if I can provide any
  other information to help diagnosis. Thanks.

-- 
  Nick Jennings




PPPOE setup problems

2001-11-19 Thread Nick Jennings

Hello,

  I'm using testing, and have installed the pppoe package.

  I have followed the debian specific instructions in: 
  /usr/share/doc/pppoe/README.Debain.gz

  I tried a:

# pon dsl-provider

  This was the output from plog:

# plog
Nov 19 09:18:49 gateway pppd[402]: Serial connection established.
Nov 19 09:18:49 gateway pppd[402]: Using interface ppp0
Nov 19 09:18:49 gateway pppd[402]: Connect: ppp0 <--> /dev/pts/0

  In the docs, it says a succesfull connection should be:
  ppp0 <--> eth0 (not /dev/pst/0)

  It doesn't seem to make a difference whether I load the pppoe module or
  not.

  Also, I'm not sure what I should have defined in my 
  /etc/networking/interfaces file for eth0 (the interface for the DSL),
  so I commented out it's entry so it does not come up otherwise. Is
  this correct?

  Any input will be appreciated, and let me know if I can provide any
  other information to help diagnosis. Thanks.

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: stable vs testing

2001-11-16 Thread Nick Jennings
This brings up a question I have. Isn't testing technically the *last*
of stable/testing/unstable to get security fixes? 

security fixes for stable are packported immediately, and the fixes are
also incorporated into unstable asap. Now for testing, there would be
at least a delay of a week for it to pass through unstable correct?

This is annoying, because testing is acutally in most cases in a 
pretty stable state, and would be good for many production environments
except for the fact that security fixes take the longest to get
incorporated.

Can anyone verify this?

On Thu, Nov 08, 2001 at 11:37:08PM +1100, Glenn Hocking wrote:
> Hi All
> 
> I have a need for glibc2.2 so I may have to use the testing/unstable
> distribution. This will be in a ISP environment but not as a public
> host.
> 
> My question is what other experiences have others have running
> testing/unstable in a live environment with regards to both security and
> stability.
> 
> Thanks in advance.
> 
> Kind regards
> Glenn Hocking
> 
> 
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings




Re: stable vs testing

2001-11-16 Thread Nick Jennings

This brings up a question I have. Isn't testing technically the *last*
of stable/testing/unstable to get security fixes? 

security fixes for stable are packported immediately, and the fixes are
also incorporated into unstable asap. Now for testing, there would be
at least a delay of a week for it to pass through unstable correct?

This is annoying, because testing is acutally in most cases in a 
pretty stable state, and would be good for many production environments
except for the fact that security fixes take the longest to get
incorporated.

Can anyone verify this?

On Thu, Nov 08, 2001 at 11:37:08PM +1100, Glenn Hocking wrote:
> Hi All
> 
> I have a need for glibc2.2 so I may have to use the testing/unstable
> distribution. This will be in a ISP environment but not as a public
> host.
> 
> My question is what other experiences have others have running
> testing/unstable in a live environment with regards to both security and
> stability.
> 
> Thanks in advance.
> 
> Kind regards
> Glenn Hocking
> 
> 
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Journaling FS for Production Systems

2001-11-11 Thread Nick Jennings
On Wed, Nov 07, 2001 at 10:53:46AM +0200, I. Forbes wrote:
> 
> -   It seems, that at this point in time,  xfs is more stable than
> reiserfs.  However I am not sure if that is because fewer people
> have tried it, and hence fewer people have experienced problems. 
> Are there many xfs users our there?  Is the development active? 
> If not is it because the xfs is stable, or has the xfs initiative
> lost momentum? 


 Although XFS is cool in many ways, the port for linux is pretty much
 a hack. I work for a company that is doing alot of development with
 XFS on Linux, although we are forced to use it, because it works with
 LVM growing filesystems etc. ReiserFS supports fs growth, but not over
 an LVM.

 I suggest ext3, it's the most solid codebase, and provides the best
 overall performance. We use it (ext3) for all other  products except for
 this one that uses LVM (Can't really talk about the product, since
 it's still in development).

-- 
  Nick Jennings




Re: nameservers open to world - with test output

2001-11-03 Thread Nick Jennings
Well, it is a problem if your DNS server has zone files for lots of
internal network servers. 

You could have two seperate instances of BIND (if you need an external
dns server to be answering for your domain name etc). bind each to
theiir applicable interface.

On Sat, Nov 03, 2001 at 05:02:07PM -0500, James wrote:
> Well, if your company runs the DNS for your website on those servers and
> you block outside IPs from querying from, no one on the internet will be
> able to go to your website.  :)
> 
> Overall, I do not think it is a big problem, unless someone is pointing
> massive amounts of traffic to your DNS servers.  DNS traffic is usually
> very small UDP packets (I think like less than 512 bytes).  If it goes
> over that, it uses TCP.  
> 
> But generally, I think to go over 512 bytes in one request would mean a
> zone transfer attempt (bad).
> 
> So, IMO: Leave it open and monitor traffic.  Potentially block TCP to
> prevent zone transfers.
> 
> - James
> 
> -Original Message-
> From: Ted Knab [mailto:[EMAIL PROTECTED] On Behalf Of Thedore
> Knab
> Sent: Saturday, November 03, 2001 1:57 PM
> To: debian-isp@lists.debian.org
> Subject: nameservers open to world - with test output
> 
> It has recently came to my attention that anyone can use our company's
> nameservers.
> 
> I recently setup my home machine to use the company's nameserver to
> confirm this.
> 
> I was wondering if there was anyway to prevent people from using our
> company's NS for their personal servers ?
> 
> Would the extra traffic generated cause any problems on our network that
> I may not be aware of ?
> 
> 
> Test Confirmation that our NS is open to world: |
> 
> 
> ---
> Step one: lookup name |
> ---
> 
> mylinux machine$ whois ourdomain.com
> Whois Server Version 1.3
> 
> Domain names in the .com, .net, and .org domains can now be registered
> with many different competing registrars. Go to http://www.internic.net
> for detailed information.
> 
>  Domain Name: ournameserver.com
>  Registrar: NETWORK SOLUTIONS, INC.
>  Whois Server: whois.networksolutions.com
>  Referral URL: http://www.networksolutions.com
>  Name Server: NS1.ournameserver.net
>  Name Server: NS2.ournameserver.net
>  Updated Date: 27-oct-2001
> 
> 
> Step two: change /etc/resolv.conf to the following |
> 
> 
> search ournameserver.com
> nameserver 123.123.123.123 # nameserver1
> nameserver 123.123.123.134 # nameserver2
> 
> -
> Step three: sample run  |
> -
> 
> mylinux machine$ nslookup www.debian.org
> 
> Server: ournameserver.com
> Address: 123.123.123.123
> 
> Non-authoritative answer:
> Name:   www.debian.org
> Address: 198.186.203.20
> 
> mylinux machine$ 
> 
> --
> GNU PGP public key
> http://www.annapolislinux.org/docs/public_key/GnuPG.txt
> -
> Ted Knab
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings




Re: nameservers open to world - with test output

2001-11-03 Thread Nick Jennings

Well, it is a problem if your DNS server has zone files for lots of
internal network servers. 

You could have two seperate instances of BIND (if you need an external
dns server to be answering for your domain name etc). bind each to
theiir applicable interface.

On Sat, Nov 03, 2001 at 05:02:07PM -0500, James wrote:
> Well, if your company runs the DNS for your website on those servers and
> you block outside IPs from querying from, no one on the internet will be
> able to go to your website.  :)
> 
> Overall, I do not think it is a big problem, unless someone is pointing
> massive amounts of traffic to your DNS servers.  DNS traffic is usually
> very small UDP packets (I think like less than 512 bytes).  If it goes
> over that, it uses TCP.  
> 
> But generally, I think to go over 512 bytes in one request would mean a
> zone transfer attempt (bad).
> 
> So, IMO: Leave it open and monitor traffic.  Potentially block TCP to
> prevent zone transfers.
> 
> - James
> 
> -Original Message-
> From: Ted Knab [mailto:[EMAIL PROTECTED]] On Behalf Of Thedore
> Knab
> Sent: Saturday, November 03, 2001 1:57 PM
> To: [EMAIL PROTECTED]
> Subject: nameservers open to world - with test output
> 
> It has recently came to my attention that anyone can use our company's
> nameservers.
> 
> I recently setup my home machine to use the company's nameserver to
> confirm this.
> 
> I was wondering if there was anyway to prevent people from using our
> company's NS for their personal servers ?
> 
> Would the extra traffic generated cause any problems on our network that
> I may not be aware of ?
> 
> 
> Test Confirmation that our NS is open to world: |
> 
> 
> ---
> Step one: lookup name |
> ---
> 
> mylinux machine$ whois ourdomain.com
> Whois Server Version 1.3
> 
> Domain names in the .com, .net, and .org domains can now be registered
> with many different competing registrars. Go to http://www.internic.net
> for detailed information.
> 
>  Domain Name: ournameserver.com
>  Registrar: NETWORK SOLUTIONS, INC.
>  Whois Server: whois.networksolutions.com
>  Referral URL: http://www.networksolutions.com
>  Name Server: NS1.ournameserver.net
>  Name Server: NS2.ournameserver.net
>  Updated Date: 27-oct-2001
> 
> 
> Step two: change /etc/resolv.conf to the following |
> 
> 
> search ournameserver.com
> nameserver 123.123.123.123 # nameserver1
> nameserver 123.123.123.134 # nameserver2
> 
> -
> Step three: sample run  |
> -
> 
> mylinux machine$ nslookup www.debian.org
> 
> Server: ournameserver.com
> Address: 123.123.123.123
> 
> Non-authoritative answer:
> Name:   www.debian.org
> Address: 198.186.203.20
> 
> mylinux machine$ 
> 
> --
> GNU PGP public key
> http://www.annapolislinux.org/docs/public_key/GnuPG.txt
> -
> Ted Knab
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: nameservers open to world - with test output

2001-11-03 Thread Nick Jennings
You could always firewall out port 53 on your external interface.

On Sat, Nov 03, 2001 at 01:56:34PM -0500, Thedore Knab wrote:
> It has recently came to my attention that anyone can use our company's 
> nameservers.
> 
> I recently setup my home machine to use the company's nameserver to confirm 
> this.
> 
> I was wondering if there was anyway to prevent people from using our 
> company's NS for their personal servers ?
> 
> Would the extra traffic generated cause any problems on our network that I 
> may not be aware of ?
> 
> 
> Test Confirmation that our NS is open to world: |
> 
> 
> ---
> Step one: lookup name |
> ---
> 
> mylinux machine$ whois ourdomain.com
> Whois Server Version 1.3
> 
> Domain names in the .com, .net, and .org domains can now be registered
> with many different competing registrars. Go to http://www.internic.net
> for detailed information.
> 
>  Domain Name: ournameserver.com
>  Registrar: NETWORK SOLUTIONS, INC.
>  Whois Server: whois.networksolutions.com
>  Referral URL: http://www.networksolutions.com
>  Name Server: NS1.ournameserver.net
>  Name Server: NS2.ournameserver.net
>  Updated Date: 27-oct-2001
> 
> 
> Step two: change /etc/resolv.conf to the following |
> 
> 
> search ournameserver.com
> nameserver 123.123.123.123 # nameserver1
> nameserver 123.123.123.134 # nameserver2
> 
> -
> Step three: sample run  |
> -
> 
> mylinux machine$ nslookup www.debian.org
> 
> Server: ournameserver.com
> Address: 123.123.123.123
> 
> Non-authoritative answer:
> Name:   www.debian.org
> Address: 198.186.203.20
> 
> mylinux machine$ 
> 
> --
> GNU PGP public key
> http://www.annapolislinux.org/docs/public_key/GnuPG.txt
> -
> Ted Knab
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings




Re: nameservers open to world - with test output

2001-11-03 Thread Nick Jennings

You could always firewall out port 53 on your external interface.

On Sat, Nov 03, 2001 at 01:56:34PM -0500, Thedore Knab wrote:
> It has recently came to my attention that anyone can use our company's nameservers.
> 
> I recently setup my home machine to use the company's nameserver to confirm this.
> 
> I was wondering if there was anyway to prevent people from using our company's NS 
>for their personal servers ?
> 
> Would the extra traffic generated cause any problems on our network that I may not 
>be aware of ?
> 
> 
> Test Confirmation that our NS is open to world: |
> 
> 
> ---
> Step one: lookup name |
> ---
> 
> mylinux machine$ whois ourdomain.com
> Whois Server Version 1.3
> 
> Domain names in the .com, .net, and .org domains can now be registered
> with many different competing registrars. Go to http://www.internic.net
> for detailed information.
> 
>  Domain Name: ournameserver.com
>  Registrar: NETWORK SOLUTIONS, INC.
>  Whois Server: whois.networksolutions.com
>  Referral URL: http://www.networksolutions.com
>  Name Server: NS1.ournameserver.net
>  Name Server: NS2.ournameserver.net
>  Updated Date: 27-oct-2001
> 
> 
> Step two: change /etc/resolv.conf to the following |
> 
> 
> search ournameserver.com
> nameserver 123.123.123.123 # nameserver1
> nameserver 123.123.123.134 # nameserver2
> 
> -
> Step three: sample run  |
> -
> 
> mylinux machine$ nslookup www.debian.org
> 
> Server: ournameserver.com
> Address: 123.123.123.123
> 
> Non-authoritative answer:
> Name:   www.debian.org
> Address: 198.186.203.20
> 
> mylinux machine$ 
> 
> --
> GNU PGP public key
> http://www.annapolislinux.org/docs/public_key/GnuPG.txt
> -
> Ted Knab
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Project 2000 on Debian (under Wine) ?

2001-10-24 Thread Nick Jennings
On Wed, Oct 24, 2001 at 03:14:07PM -0400, Thedore Knab wrote:
> 
>  I am looking for a Linux based tool that is designed to help manage a 
> variety of projects. This tool needs to be able to schedule and track 
> tasks, and interface with Outlook clients. Anybody know one? 
> 

 I don't know of any linux based (and open source) program that interfaces
 with outlook.

-- 
  Nick Jennings




Re: Project 2000 on Debian (under Wine) ?

2001-10-24 Thread Nick Jennings

On Wed, Oct 24, 2001 at 03:14:07PM -0400, Thedore Knab wrote:
> 
>  I am looking for a Linux based tool that is designed to help manage a 
> variety of projects. This tool needs to be able to schedule and track 
> tasks, and interface with Outlook clients. Anybody know one? 
> 

 I don't know of any linux based (and open source) program that interfaces
 with outlook.

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




C questions

2001-10-16 Thread Nick Jennings
Hello,

  Sorry if this may seem off topic, I always appreciate the help I get
  on this (and other) debian lists. However since there doesn't appear
  to be any lists around C programming specifically, I wonder if anyone
  has any suggestions on a very good high quality c programming mailing
  list around?

-- 
  Nick Jennings




C questions

2001-10-16 Thread Nick Jennings

Hello,

  Sorry if this may seem off topic, I always appreciate the help I get
  on this (and other) debian lists. However since there doesn't appear
  to be any lists around C programming specifically, I wonder if anyone
  has any suggestions on a very good high quality c programming mailing
  list around?

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




building custom kernel package

2001-10-16 Thread Nick Jennings
Hello,

 I've successfully built a kernel image, however the initrd image
 is not installed with it, and I have to make one after installing
 the kernel on every system.

 How do I get the kernel deb package to create and install it's own
 initrd image automatically, like the debian packages do?

-- 
  Nick Jennings




building custom kernel package

2001-10-16 Thread Nick Jennings

Hello,

 I've successfully built a kernel image, however the initrd image
 is not installed with it, and I have to make one after installing
 the kernel on every system.

 How do I get the kernel deb package to create and install it's own
 initrd image automatically, like the debian packages do?

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Problems building custom kernel with make-kpkg

2001-10-12 Thread Nick Jennings
On Wed, Oct 10, 2001 at 06:41:41PM +0200, Dirk Niemeyer wrote:
> Dirk Niemeyer wrote:
> > 
> > 
> > apt-get install mkinitrd
> > 
> 
> Sorry. It must read
> 
> apt-get install initrd-tools
> 

 Thanks for your help, I will give your instructions a shot when I get the
 chance. 

 Now, in the future how can I get the initrd image to install from within the 
 custom kernel package, like the debian kernel packages do? 

-- 
  Nick Jennings




Re: Problems building custom kernel with make-kpkg

2001-10-12 Thread Nick Jennings

On Wed, Oct 10, 2001 at 06:41:41PM +0200, Dirk Niemeyer wrote:
> Dirk Niemeyer wrote:
> > 
> > 
> > apt-get install mkinitrd
> > 
> 
> Sorry. It must read
> 
> apt-get install initrd-tools
> 

 Thanks for your help, I will give your instructions a shot when I get the
 chance. 

 Now, in the future how can I get the initrd image to install from within the 
 custom kernel package, like the debian kernel packages do? 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Problems building custom kernel with make-kpkg

2001-10-10 Thread Nick Jennings

Sorry about that subject! (Changing)

-- 
  Nick Jennings




[Mailer-Daemon@lists.sourceforge.net: Mail delivery failed: returning message to sender]

2001-10-10 Thread Nick Jennings
Hello,

 I am trying to build my customized kernel package integrating the
 FreeSwan source.

 I am running Debian 2.2 (potato) with the 2.4.9 kernel (using bunk's
 updates). I am having trouble with (I believe) initrd (which I have
 limited knowledge of.

 The 2.4.9 kernel package that I am running, uses an initrd image,
 and I grabbed the kernel source, and the .config for the debian
 kernel. (from apt-get source ).

 I patched in the freeswan code, and did the following:

[wolf: /usr/src/linux]# make-kpkg kernel_image


 Everything went fine, the package was dropped in /usr/src, the problem
 is when I installed it (using dpkg -i), it did not put an initrd
 image in /boot/ but the System.map config and vmlinuz image were all
 there. 

 Crossing my fingers, I made an entry for my new image in the lilo.conf
 (removing the initrd reference) and rebooted, but no luck: heres
 the last few lines from my kernel panic:

Linux IP multicast router 0.06 plus PIM-SM
klips_info: ipsec_init: KLIPS startup, FreeS/WAN IPSec version: snap2001oct9b
request_module[block-major-3]: Root fs not mounted
vfs: Cannot open root device "301" or 03:01
Please append a correct "root=" boot option
kernel panic: VFS: Unable to mount root fs on 03:01


 Any help on what I might be doing wrong, My hunch is that it has to do with
 no initrd image (since that's what I noticed missing). But I guess it could
 also be the freeswan source, since it's a snapshot, the latest stable
 source (1.91) could not compile with my 2.4.9 kernel, and the freeswan
 people told me to grab a snapshot (apparently there are known issues with
 2.4.9 <-> 1.91.
  
-- 
  Nick Jennings





Problems building custom kernel with make-kpkg

2001-10-09 Thread Nick Jennings


Sorry about that subject! (Changing)

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




[Mailer-Daemon@lists.sourceforge.net: Mail delivery failed: returning message to sender]

2001-10-09 Thread Nick Jennings

Hello,

 I am trying to build my customized kernel package integrating the
 FreeSwan source.

 I am running Debian 2.2 (potato) with the 2.4.9 kernel (using bunk's
 updates). I am having trouble with (I believe) initrd (which I have
 limited knowledge of.

 The 2.4.9 kernel package that I am running, uses an initrd image,
 and I grabbed the kernel source, and the .config for the debian
 kernel. (from apt-get source ).

 I patched in the freeswan code, and did the following:

[wolf: /usr/src/linux]# make-kpkg kernel_image


 Everything went fine, the package was dropped in /usr/src, the problem
 is when I installed it (using dpkg -i), it did not put an initrd
 image in /boot/ but the System.map config and vmlinuz image were all
 there. 

 Crossing my fingers, I made an entry for my new image in the lilo.conf
 (removing the initrd reference) and rebooted, but no luck: heres
 the last few lines from my kernel panic:

Linux IP multicast router 0.06 plus PIM-SM
klips_info: ipsec_init: KLIPS startup, FreeS/WAN IPSec version: snap2001oct9b
request_module[block-major-3]: Root fs not mounted
vfs: Cannot open root device "301" or 03:01
Please append a correct "root=" boot option
kernel panic: VFS: Unable to mount root fs on 03:01


 Any help on what I might be doing wrong, My hunch is that it has to do with
 no initrd image (since that's what I noticed missing). But I guess it could
 also be the freeswan source, since it's a snapshot, the latest stable
 source (1.91) could not compile with my 2.4.9 kernel, and the freeswan
 people told me to grab a snapshot (apparently there are known issues with
 2.4.9 <-> 1.91.
  
-- 
  Nick Jennings



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




IPSec

2001-10-09 Thread Nick Jennings
Hello,

  I am new to IPSec and VPN's and I am trying to set up a VPN between my
  house, and my work. They already have a VPN in place (using FreeSwan).
  So I wanted to use my debian router and am wondering if there is a
  deb package for freeswan? I am using potato with 2.4 kernel updates
  (from bunk). I see the package pipsecd when searching for ipsec in
  dselect, but this does not appear to be freeswan, correct? Any
  help would be usefull, as I have been trying to build a freeswan
  kernel and am having trouble with compilation.

-- 
  Nick Jennings




IPSec

2001-10-09 Thread Nick Jennings

Hello,

  I am new to IPSec and VPN's and I am trying to set up a VPN between my
  house, and my work. They already have a VPN in place (using FreeSwan).
  So I wanted to use my debian router and am wondering if there is a
  deb package for freeswan? I am using potato with 2.4 kernel updates
  (from bunk). I see the package pipsecd when searching for ipsec in
  dselect, but this does not appear to be freeswan, correct? Any
  help would be usefull, as I have been trying to build a freeswan
  kernel and am having trouble with compilation.

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: ISP status monitoring.

2001-09-01 Thread Nick Jennings

I suggest penemo, http://www.penemo.org

On Thu, Aug 02, 2001 at 01:08:55PM -0400, Robb Kidd wrote:
>   I'm giving this a whirl on debian-isp as I figure its subscribers have
> the most experience with this. I'm looking into setuping up network
> monitoring on one of my home boxes to keep my cable ISP (Cox/Road
> Runner) honest.  I'd like to check basic connectivity and DNS service
> up/down/speed at a minimum and bandwidth if possible.
>   I've read a bit about Big Brother and Spong.  I was wondering if any of
> you have recommendations for either or others I'm not aware of.  Also,
> some advice on configuring this to monitor nicely.
> 
> 
> --  
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




mutt (! ssl)

2001-08-23 Thread Nick Jennings

Hey.

 Just wondering my mutt doesn't come packaged with SSL support? I don't
see why there is any reason NOT to compile this in when making the package.

Does it have to do with non-US? If so, why isn't there a mutt-ssl package
in non-US?

 How do I go about making a mutt-ssl deb package for my mail server?

 # apt-get source mutt

 then what? can;t I just rebuild it with an additional compiler option,
 andhave it auotmatically build into a deb named say: mutt-ssl ?

-- 
  Nick Jennings


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: disk partition schemes

2001-07-03 Thread Nick Jennings
On Wed, Jul 04, 2001 at 12:26:46AM +0200, Christian Hammers wrote:
> I use 2.4.6-pre7 and use LVM,reiserfs and ext3 without problems.
> (maybe my kernel is just too recent...)
> 

 ext3 has just recently been ported over to kernel 2.4, and you have no 
 problems you say? (when I say recent, I mean the task began about 4 weeks
 ago). From what I've heard It does run. but there are still many
 problems.

-- 
  Nick Jennings




Re: disk partition schemes

2001-07-03 Thread Nick Jennings

On Wed, Jul 04, 2001 at 12:26:46AM +0200, Christian Hammers wrote:
> I use 2.4.6-pre7 and use LVM,reiserfs and ext3 without problems.
> (maybe my kernel is just too recent...)
> 

 ext3 has just recently been ported over to kernel 2.4, and you have no 
 problems you say? (when I say recent, I mean the task began about 4 weeks
 ago). From what I've heard It does run. but there are still many
 problems.

-- 
  Nick Jennings


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Sendmail vs. ?

2001-06-27 Thread Nick Jennings
On Wed, Jun 27, 2001 at 01:18:41PM -0400, Richard A Nelson wrote:
>
> I guess my thoughts are:
>   1) Let me know what sendmail can do to help
>   2) If you want to switch, check to see if you've got anything tricky
>  in your rules - you *WILL* loose functionality with any other MTA
>  (turing complete control language).  If you've a fairly genereric
>  sendmail.mc - you're probably ok

 This is not true, Exim allows much more flexibility with configuration,
 sendmail cannot handle seperate virtual domains (i.e. [EMAIL PROTECTED] is
 not the same as [EMAIL PROTECTED]) which is very usefull when running, for
 instance, web-based email services, and you don't want the usernames
 for it to conflict with your shell accounts on another domain, same server.

>   3) I've heard (no experience) that Postfix is probably the easiest migration
> 

 It seems that you've had little experience with anything but sendmail,
 so you're opinion may be rather biased. 
 
  I have used sendmail, exim, postfix and qmail and I think that exim and 
 postfix are very good, high performance yet easily configurable and 
 maintainable mail servers. Qmail I here gives better performance, but 
 it's a hassle to maintain. 

 I migrated from sendmail to exim and it was extremely easy (thanks to
 exim's amble documentation). 

-- 
  Nick Jennings




Re: Sendmail vs. ?

2001-06-27 Thread Nick Jennings

On Wed, Jun 27, 2001 at 01:18:41PM -0400, Richard A Nelson wrote:
>
> I guess my thoughts are:
>   1) Let me know what sendmail can do to help
>   2) If you want to switch, check to see if you've got anything tricky
>  in your rules - you *WILL* loose functionality with any other MTA
>  (turing complete control language).  If you've a fairly genereric
>  sendmail.mc - you're probably ok

 This is not true, Exim allows much more flexibility with configuration,
 sendmail cannot handle seperate virtual domains (i.e. [EMAIL PROTECTED] is
 not the same as [EMAIL PROTECTED]) which is very usefull when running, for
 instance, web-based email services, and you don't want the usernames
 for it to conflict with your shell accounts on another domain, same server.

>   3) I've heard (no experience) that Postfix is probably the easiest migration
> 

 It seems that you've had little experience with anything but sendmail,
 so you're opinion may be rather biased. 
 
  I have used sendmail, exim, postfix and qmail and I think that exim and 
 postfix are very good, high performance yet easily configurable and 
 maintainable mail servers. Qmail I here gives better performance, but 
 it's a hassle to maintain. 

 I migrated from sendmail to exim and it was extremely easy (thanks to
 exim's amble documentation). 

-- 
  Nick Jennings


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: disk partition schemes

2001-06-23 Thread Nick Jennings
On Sat, Jun 23, 2001 at 10:19:31AM +0200, Russell Coker wrote:
> On Friday 22 June 2001 17:46, Duane Powers wrote:
> > on /. I _always_ use a seprarate /home, so I can keep data in case I
> > have to reinstall the OS, (successful intrustion attempt, etc.) and
> 
> Of course the re-installation could start with:
> rm -rf /etc /sbin /bin /var /usr /boot /lib
> 

 Well, generally if you're doing an install and have a partition you don't
 wan't the installer to mess with, not specifiying it as /home and just
 let it do the install with home on the / partition will ensure taht
 your data isn't damaged. Then afterward just edit the fstab and remount
 /home onto your old home partition.

-- 
  Nick Jennings




Re: disk partition schemes

2001-06-23 Thread Nick Jennings
On Sat, Jun 23, 2001 at 09:34:59AM +0200, Russell Coker wrote:
> On Saturday 23 June 2001 04:10, Nick Jennings wrote:
> >
> >  The main performance benefit to having directories reside on their own
> >  partition relates to file write/read access. It's very important to
> > have var on it's own seperate partition, specifically because it's
> > probably the most actively written to directory.
> 
> OK.  If you have a single physical hard drive or RAID array, the how will 
> having /var on a separate partition give any benefit?  Disk access still 
> goes to the same hardware and is still limited by head seek times and 
> rotational delays of the hardware.  Having two seeks on the same 
> partition or two seeks on separate partitions should not perform any 
> differently.

 I guess I was going by the same logic of the swap partition, having
 your partitions ordered by most usage. I also added into this having
 your system partitioned into logical segments to increase maintnence
 ease.

> 
> However if you have a single large partition then when you are writing 
> data the FS drivers can optimise things.

 I always thought that this was a performance hit, I know I've read it in
 places before, but I can't seem to find them as I look right now.
 
> 
> >  Another little performance gain is the order in which you partition
> > your disks (the closer to the 0'th cylinder the faster the access time.
> 
> This depends on the type of device.  This is a general rule that doesn't 
> always apply.  But when it does apply it's not so small.  50% extra 
> performance at the start of the disk is not uncommon.
> 
> AFAIK I'm the only person to publish a benchmark program to measure 
> this...
> 
> >  For instance, this is the order in which I usually go about
> > partitioning my drive (note: it varies depending on it i'm setting up a
> > workstation or a server, but they are similar).
> >
> >size: totalmem*2 (64mb = 128mb partition)
> >  /
> >  /tmp
> >  
> >  /usr
> >  /var
> >  /home
> 
> Swap is often the most used partition.  Root is probably the least.  /tmp 
> and /home are both candidates for the most used partition.  Having things 
> separate like this means that in many common usage situations you'll have 
> the heads seeking across the entire disk all the time.  Having a single 
> partition could increase performance...

 Good point, I've put / at the beginning just out of habit, put I think
 that, especially on a server, /var is much more used than home is. and
 /usr is where every application is executed from, that's gotta count for
 something. I would venture to say that, on a server thats not offering
 lots of shell accounts, /home is the least used.

> 
> >  If I run out of room on /var/www or /var/cvs or something, I can stick
> >  another disk in and mount that in its place instead. I used to get
> >  worried about wasted space, but if you just over estimate a bit, you
> > should be fine with most of the partitions that don't grow (like /,
> > /tmp, /usr). And you just give the most space the the ones that can
> > grow. Now I find a nice partitioning scheme to be much more manageable
> > and the performance is very noticable.
> 
> If sticking another disk in is so easy then why not just install lots of 
> disks in a RAID array from the start?  That'll get the best performance...
> 

 Well because a hardware RAID is more expensive than a scsi or ide drive.
 Also because I'm thinking of one disk, with the possible expansion onto
 another one, or two. not starting out with several.
 

-- 
  Nick Jennings




Re: disk partition schemes

2001-06-23 Thread Nick Jennings

On Sat, Jun 23, 2001 at 10:19:31AM +0200, Russell Coker wrote:
> On Friday 22 June 2001 17:46, Duane Powers wrote:
> > on /. I _always_ use a seprarate /home, so I can keep data in case I
> > have to reinstall the OS, (successful intrustion attempt, etc.) and
> 
> Of course the re-installation could start with:
> rm -rf /etc /sbin /bin /var /usr /boot /lib
> 

 Well, generally if you're doing an install and have a partition you don't
 wan't the installer to mess with, not specifiying it as /home and just
 let it do the install with home on the / partition will ensure taht
 your data isn't damaged. Then afterward just edit the fstab and remount
 /home onto your old home partition.

-- 
  Nick Jennings


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: disk partition schemes

2001-06-23 Thread Nick Jennings

On Sat, Jun 23, 2001 at 09:34:59AM +0200, Russell Coker wrote:
> On Saturday 23 June 2001 04:10, Nick Jennings wrote:
> >
> >  The main performance benefit to having directories reside on their own
> >  partition relates to file write/read access. It's very important to
> > have var on it's own seperate partition, specifically because it's
> > probably the most actively written to directory.
> 
> OK.  If you have a single physical hard drive or RAID array, the how will 
> having /var on a separate partition give any benefit?  Disk access still 
> goes to the same hardware and is still limited by head seek times and 
> rotational delays of the hardware.  Having two seeks on the same 
> partition or two seeks on separate partitions should not perform any 
> differently.

 I guess I was going by the same logic of the swap partition, having
 your partitions ordered by most usage. I also added into this having
 your system partitioned into logical segments to increase maintnence
 ease.

> 
> However if you have a single large partition then when you are writing 
> data the FS drivers can optimise things.

 I always thought that this was a performance hit, I know I've read it in
 places before, but I can't seem to find them as I look right now.
 
> 
> >  Another little performance gain is the order in which you partition
> > your disks (the closer to the 0'th cylinder the faster the access time.
> 
> This depends on the type of device.  This is a general rule that doesn't 
> always apply.  But when it does apply it's not so small.  50% extra 
> performance at the start of the disk is not uncommon.
> 
> AFAIK I'm the only person to publish a benchmark program to measure 
> this...
> 
> >  For instance, this is the order in which I usually go about
> > partitioning my drive (note: it varies depending on it i'm setting up a
> > workstation or a server, but they are similar).
> >
> >size: totalmem*2 (64mb = 128mb partition)
> >  /
> >  /tmp
> >  
> >  /usr
> >  /var
> >  /home
> 
> Swap is often the most used partition.  Root is probably the least.  /tmp 
> and /home are both candidates for the most used partition.  Having things 
> separate like this means that in many common usage situations you'll have 
> the heads seeking across the entire disk all the time.  Having a single 
> partition could increase performance...

 Good point, I've put / at the beginning just out of habit, put I think
 that, especially on a server, /var is much more used than home is. and
 /usr is where every application is executed from, that's gotta count for
 something. I would venture to say that, on a server thats not offering
 lots of shell accounts, /home is the least used.

> 
> >  If I run out of room on /var/www or /var/cvs or something, I can stick
> >  another disk in and mount that in its place instead. I used to get
> >  worried about wasted space, but if you just over estimate a bit, you
> > should be fine with most of the partitions that don't grow (like /,
> > /tmp, /usr). And you just give the most space the the ones that can
> > grow. Now I find a nice partitioning scheme to be much more manageable
> > and the performance is very noticable.
> 
> If sticking another disk in is so easy then why not just install lots of 
> disks in a RAID array from the start?  That'll get the best performance...
> 

 Well because a hardware RAID is more expensive than a scsi or ide drive.
 Also because I'm thinking of one disk, with the possible expansion onto
 another one, or two. not starting out with several.
 

-- 
  Nick Jennings


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: disk partition schemes

2001-06-22 Thread Nick Jennings
On Fri, Jun 22, 2001 at 03:17:12PM +0200, Russell Coker wrote:
> 
> > looking for help, it will be used as an IMAP/SMTP machine.  So, should
> > I create a separate /var partition?  I'm hesitant because I don't want
> > to a) not create a large enough partition, or b) create too large of
> 
> I suggest having your email stored on the same file system as /home.  
> Then you have all of your customer data on the same file system for easy 
> backup.  Also it saves juggling space.
> 
> > one and waste space.  Do the performance gains outweigh this?  (I'm not
> > terribly worried about the redundancy with the RAID 10 and all).
> 
> What performance gains are you referring to?
> 

 The main performance benefit to having directories reside on their own
 partition relates to file write/read access. It's very important to have
 var on it's own seperate partition, specifically because it's probably
 the most actively written to directory. 

 Another little performance gain is the order in which you partition your
 disks (the closer to the 0'th cylinder the faster the access time.

 For instance, this is the order in which I usually go about partitioning 
 my drive (note: it varies depending on it i'm setting up a workstation or 
 a server, but they are similar).

   size: totalmem*2 (64mb = 128mb partition)  
 / 
 /tmp 
 
 /usr
 /var
 /home  

 If i'm setting up a webserver i'll usualy make a /var/www, and if i'm setting
 up a mailserver, i'll add a /var/spool/mail, and for development servers
 i'll even throw in a /var/cvs

 Sometimes, with a server I like to make /usr just 1gig or so, and make a
 /usr/local/ for custom scripts & stuff I compile from source.

 If I run out of room on /var/www or /var/cvs or something, I can stick
 another disk in and mount that in its place instead. I used to get 
 worried about wasted space, but if you just over estimate a bit, you should
 be fine with most of the partitions that don't grow (like /, /tmp, /usr).
 And you just give the most space the the ones that can grow. Now I find
 a nice partitioning scheme to be much more manageable and the performance
 is very noticable.
 
-- 
  Nick Jennings




Re: disk partition schemes

2001-06-22 Thread Nick Jennings

On Fri, Jun 22, 2001 at 03:17:12PM +0200, Russell Coker wrote:
> 
> > looking for help, it will be used as an IMAP/SMTP machine.  So, should
> > I create a separate /var partition?  I'm hesitant because I don't want
> > to a) not create a large enough partition, or b) create too large of
> 
> I suggest having your email stored on the same file system as /home.  
> Then you have all of your customer data on the same file system for easy 
> backup.  Also it saves juggling space.
> 
> > one and waste space.  Do the performance gains outweigh this?  (I'm not
> > terribly worried about the redundancy with the RAID 10 and all).
> 
> What performance gains are you referring to?
> 

 The main performance benefit to having directories reside on their own
 partition relates to file write/read access. It's very important to have
 var on it's own seperate partition, specifically because it's probably
 the most actively written to directory. 

 Another little performance gain is the order in which you partition your
 disks (the closer to the 0'th cylinder the faster the access time.

 For instance, this is the order in which I usually go about partitioning 
 my drive (note: it varies depending on it i'm setting up a workstation or 
 a server, but they are similar).

   size: totalmem*2 (64mb = 128mb partition)  
 / 
 /tmp 
 
 /usr
 /var
 /home  

 If i'm setting up a webserver i'll usualy make a /var/www, and if i'm setting
 up a mailserver, i'll add a /var/spool/mail, and for development servers
 i'll even throw in a /var/cvs

 Sometimes, with a server I like to make /usr just 1gig or so, and make a
 /usr/local/ for custom scripts & stuff I compile from source.

 If I run out of room on /var/www or /var/cvs or something, I can stick
 another disk in and mount that in its place instead. I used to get 
 worried about wasted space, but if you just over estimate a bit, you should
 be fine with most of the partitions that don't grow (like /, /tmp, /usr).
 And you just give the most space the the ones that can grow. Now I find
 a nice partitioning scheme to be much more manageable and the performance
 is very noticable.
 
-- 
  Nick Jennings


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Hardware RAID

2000-09-04 Thread Nick Jennings

I know its been some time since this post, im primarily responding
for the archives, maybe someone will find the info usefulll..

i was looking for the exact same thing, an inexpensive hardware RAID
controller. (something in the hundreds of dollars as apposed to the
thousands). What i wfound was the AAA-13x card, its an adaptec hardware
raid. and i looked on the hardware compatability list and it was listed
etc. however...

I got the card working, booted up off its cmos disk to flash
  the cards rom with the settings, and set it up as a RAID-1 ( i had
 2 26 gig drives and just wanted mirroring). and the card was detected
 and all i had no problems as far as that was concerned and I even 
  saw as i was installing debian both drives were active when it was 
 installing to just the first drive "great" i thought. but the more i
 read the manual and stuff the more it seemed like in order to restore
 the secondary drive to use as a primary (if the original primary failed) was
 to use their proprietary windows software to rebuild the array. the disk
 they provide to setup the array (that you boot off) didnt have any
 rebuild features. so when it came down to it... i realized i could not
 use the hardware raid without the software program utilities. 

the cost was about the price of two adaptec 2940's and in the end. i ended
up removing the array completely, and using the controller as just a
scsi controller and wasting the RAID features. so now i have two drives.
and i dd'd the contents of th first to the second.. and run a script
that diffs the specified files that i want to back up and overwrites
the newer file onto the second hard drive whenever its been updated.
so if there is a problem with the first drive, i can just put the
secondary in the primary slot and boot right up on it no problem.
kind of a hacked raid-1 i guess. it works good and i dont have to worry
about rebuilding arrays or whatever.

hope this helps someone about to make the same mistake, or maybe someone
has had bette rluck with the same card, if so please tell me all about it!


On Sat, Apr 08, 2000 at 08:15:13AM -0600, elyograg wrote:
> I've been looking through kernel readme files, and trying to find a 
> hardware RAID solution that will run under Debian.  It seems that all of 
> the RAID hardware that is supported in the 2.2 kernel is either very very 
> expensive, or impossible to find.  The controllers that are affordable, 
> aren't supported.  I did briefly look at the 2.3 kernel, but there didn't 
> seem to be any additional support.
> 
> We're planning to go with 5-7 U2W drives in a level 5 array, probably 
> sticking with 7200 RPM.  The 160Mb standard on 10,000 RPM drives would be 
> very nice, but the price increases are staggering.  We'll try to find the 
> current pricing sweet spot and purchase drives at that capacity.  We don't 
> need the full redundant power, hot swappable setup - our concern is speed 
> and reliability.  If we have to take it down because of a hardware failure, 
> we're OK with that. :)
> 
> Does anyone have any recommendations for a hardware RAID controller with a 
> good combination of price and Linux support, and at least one supplier who 
> carries it?
> 
> I know I can do software RAID, and this idea hasn't been completely 
> discounted, but I'm very interested in the potential for just letting the 
> hardware take care of it.  The only case I know of with software RAID 
> (level 1) was difficult to work with, as it was extremely slow to 
> fsck/rebuild if there were any problems.  Anyone have any other horror or 
> success stories with either hardware or software RAID to share?
> 
> If we go the software route, would there be any issue with simply getting 
> something like the Adaptec 2940U2W?  Any other solid recommendations, and 
> reasoning to support the choice?
> 
> Thanks,
> Shawn
> 
> 
> --  
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
-  Nick Jennings
Email: [EMAIL PROTECTED]
Web  : http://nick.namodn.com
-




Re: Hardware RAID

2000-09-04 Thread Nick Jennings


I know its been some time since this post, im primarily responding
for the archives, maybe someone will find the info usefulll..

i was looking for the exact same thing, an inexpensive hardware RAID
controller. (something in the hundreds of dollars as apposed to the
thousands). What i wfound was the AAA-13x card, its an adaptec hardware
raid. and i looked on the hardware compatability list and it was listed
etc. however...

I got the card working, booted up off its cmos disk to flash
  the cards rom with the settings, and set it up as a RAID-1 ( i had
 2 26 gig drives and just wanted mirroring). and the card was detected
 and all i had no problems as far as that was concerned and I even 
  saw as i was installing debian both drives were active when it was 
 installing to just the first drive "great" i thought. but the more i
 read the manual and stuff the more it seemed like in order to restore
 the secondary drive to use as a primary (if the original primary failed) was
 to use their proprietary windows software to rebuild the array. the disk
 they provide to setup the array (that you boot off) didnt have any
 rebuild features. so when it came down to it... i realized i could not
 use the hardware raid without the software program utilities. 

the cost was about the price of two adaptec 2940's and in the end. i ended
up removing the array completely, and using the controller as just a
scsi controller and wasting the RAID features. so now i have two drives.
and i dd'd the contents of th first to the second.. and run a script
that diffs the specified files that i want to back up and overwrites
the newer file onto the second hard drive whenever its been updated.
so if there is a problem with the first drive, i can just put the
secondary in the primary slot and boot right up on it no problem.
kind of a hacked raid-1 i guess. it works good and i dont have to worry
about rebuilding arrays or whatever.

hope this helps someone about to make the same mistake, or maybe someone
has had bette rluck with the same card, if so please tell me all about it!


On Sat, Apr 08, 2000 at 08:15:13AM -0600, elyograg wrote:
> I've been looking through kernel readme files, and trying to find a 
> hardware RAID solution that will run under Debian.  It seems that all of 
> the RAID hardware that is supported in the 2.2 kernel is either very very 
> expensive, or impossible to find.  The controllers that are affordable, 
> aren't supported.  I did briefly look at the 2.3 kernel, but there didn't 
> seem to be any additional support.
> 
> We're planning to go with 5-7 U2W drives in a level 5 array, probably 
> sticking with 7200 RPM.  The 160Mb standard on 10,000 RPM drives would be 
> very nice, but the price increases are staggering.  We'll try to find the 
> current pricing sweet spot and purchase drives at that capacity.  We don't 
> need the full redundant power, hot swappable setup - our concern is speed 
> and reliability.  If we have to take it down because of a hardware failure, 
> we're OK with that. :)
> 
> Does anyone have any recommendations for a hardware RAID controller with a 
> good combination of price and Linux support, and at least one supplier who 
> carries it?
> 
> I know I can do software RAID, and this idea hasn't been completely 
> discounted, but I'm very interested in the potential for just letting the 
> hardware take care of it.  The only case I know of with software RAID 
> (level 1) was difficult to work with, as it was extremely slow to 
> fsck/rebuild if there were any problems.  Anyone have any other horror or 
> success stories with either hardware or software RAID to share?
> 
> If we go the software route, would there be any issue with simply getting 
> something like the Adaptec 2940U2W?  Any other solid recommendations, and 
> reasoning to support the choice?
> 
> Thanks,
> Shawn
> 
> 
> --  
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

-- 
-  Nick Jennings
Email: [EMAIL PROTECTED]
Web  : http://nick.namodn.com
-


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




1 LAN, 2 IPs (Routing Problems)

2000-02-18 Thread Nick Jennings

Hello,

I have a DSL connection with 2 IP's for example sake lets call them
1.1.1.20   and
1.1.1.21

I have 1 router, 1 HUB, and 4 linux workstations (Not including the router).

The DSL plugs into the router, which, on another NIC plugs into a HUB,
connected to all the workstations.

I want the network to be set up so that, requests to 1.1.1.20 go to the
router, and reuqests for 1.1.1.21 go to my primary workstation (suffix).

so that requests to the outside world from all workstations except suffix,
appear to be coming from 1.1.1.20, but requests to the outside world from
suffix, appear to come from 1.1.1.21 so that my primary workstation gets its
own IP, and all the others are sharing one (Masqueraded).

Is there a way to masquerade only a certain subnet, and with another ip,
just send all incoming and outgoing traffic through, only doing security
filtering but not blocking anything as if it was masqueraded and not a
direct link to suffix from its IP address.. 

let me know if im not making myself clear or if you need anymore
information.

thanks for any help.

-- 
    -  Nick Jennings
Email: [EMAIL PROTECTED]
Web  : http://nick.namodn.com
-



Re: Idle Time (ssh, or telnet)

2000-02-17 Thread Nick Jennings
On Mon, Feb 14, 2000 at 08:34:52PM -0600, Security wrote:
> 
> I believe that the /sbin/ipfwadm -M -s 10 10 10 is the
> pertinent line.
> 
> Note: this machine is a 2.0.37 kernel on Debian 2.1. I am not sure of the
> equivalent ipchains incantation.  Maybe someone else on the list can toss
> it out here.

It would be great if someone could post the ipchains equiv. to this
ipfwadm rule. 


-- 
-  Nick Jennings
Email: [EMAIL PROTECTED]
Web  : http://nick.namodn.com
-



Re: Idle Time (ssh, or telnet)

2000-02-14 Thread Nick Jennings

On Sat, Feb 12, 2000 at 08:33:24AM -0600, Security wrote:
>
> Are you using masquerading somewhere in the route for the box that drops
> the connections? If so that could be the cause. I disremember the details
> but I had this for awhile and that was fixed by tweaking the the ipmasq (or
> chains) script on my gateway macine. I can leave idle sessions open for
> literally months when set up this way. Before I got that figured out I
> would always run a ping or something to make the shell appear active which
> was a terrible hack but actually worked occasionally.
> 
> If you think this might be the cause send me an e and I'll dig out the info
> and get it to the list.
> 
> Tom

That sounds very possible, the network at home is masqueraded by a
little 486 router I have setup, (ipchains). and the workstation at work has
a real IP. It'd be great if you could dig out that info and let me know.

-- 
-  Nick Jennings
Email: [EMAIL PROTECTED]
Web  : http://nick.namodn.com
-