Re: [expert] w2k shutdown from mdk

2002-11-21 Thread Christian Jul Jensen
On Thu, 21 Nov 2002, Tony S. Sykes wrote:

 Does anybody know how to shut a w2k box down remotely from MDK9.0 (needs
 to be a clean shutdown).

Format c: ?

(that'll save you from a lot of future grief as well :) )

--
./mvh Christian Jul Jensen

I'm not quite sure what I'm participating in. I joined the conversation
because I wanted to type the word esperanto and email it to thousands of
people for no reason at all. :-)
 -- Allen Smith @ TYPO3-devel-list



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] cron / at

2002-11-20 Thread Christian Jul Jensen
On Tue, 19 Nov 2002, Sridhar wrote:

 I am using anacron straight out of an install from disk and have not
 configured anacron. anacrontab seems to contain default values. Should I
 do anything in anacrontab?

No. I think your problem might be that anacron is not started at all. Try
'chkconfig --list' is it in the list? Is it 'on' for your runlevel? If
not: 'chkconfig --add anacron' and 'chkconfig --level 2345 anacron on'
should do.

--
./mvh Christian Jul Jensen

I'm not quite sure what I'm participating in. I joined the conversation
because I wanted to type the word esperanto and email it to thousands of
people for no reason at all. :-)
 -- Allen Smith @ TYPO3-devel-list



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Firewalled packets are being filtered out

2002-11-19 Thread Christian Jul Jensen
Thanks for your help Toshiro and John

On 18 Nov 2002, Toshiro wrote:

I've configured a webserver, which runs perfectly on it's own net. The
problem is that it's behind a firewall and everything that comes through
that firewall are being ignored by the server.
   
Must be some kind of spoof-protection. Because the packets get trapped by
rp_filter.
   
So I've disabled rp_filter, I've set all iptables rules to ACCEPT, and
I've tried lowering the security level with msec. Nothing changed. I've
used tcpdump to see what's going on, and I can see that packets coming
from a machine on the internal net, gets answers. But packets arriving
through the firewall arrives at the interface, but no answer is sent. So I
know for sure that the problem is at this machine.
  
   Have you configured NAT?
 
  No, this machine is not the firewall itself, only a http-server. It's
  packets coming through another firewall that are being filtered out. In
  that case NAT shouldn't be necessary since it's not doing any
  gatewaying/routing. Or am I wrong here...?

 No, you're right, you don't have to do anything in the webserver, my question
 wasn't right :) what I wanted to ask you is whether the NAT in the firewall is
 configured OK.

 Also, your firewall should allow to pass all packets with a connection already
 established; for example, if your firewall were a Linux box with iptables you
 should have something like that:

   iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

Well, I'm not administering the firewall, and since there are a number of
other webservers (older RH's) running behind, I think it has to be some
kind of security om this webserver.

--
./mvh Christian Jul Jensen

  stud.scient.dat
  proff.scriptkiddie



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] changing permissions fails quietly

2002-11-19 Thread Christian Jul Jensen
On Tue, 19 Nov 2002, bascule wrote:

 i just made a link in cron.daily so that slocate gets run each morning, noting
 the permissions on the daily msec link i tried to set teh same for the
 slocate link but i can't, any ideas

man chmod says:
  chmod never changes the permissions of symbolic links; the
   chmod system call cannot change their  permissions.   This
   is  not  a problem since the permissions of symbolic links
   are never used.  However, for each symbolic link listed on
   the  command  line,  chmod  changes the permissions of the
   pointed-to file.   In  contrast,  chmod  ignores  symbolic
   links encountered during recursive directory traversals.

--
./mvh Christian Jul Jensen

  stud.scient.dat
  proff.scriptkiddie



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] cron / at

2002-11-19 Thread Christian Jul Jensen
On Mon, 18 Nov 2002, Sridhar wrote:

 I did not have anacron installed. I installed it from 9.0 disks. Now
 when I start anacron and check the status it tells it's dead.

It tells it's dead? What exactly happens?

Do you have a meaningful /etc/anacrontab ?

--
./mvh Christian Jul Jensen

  stud.scient.dat
  proff.scriptkiddie



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



[expert] Firewalled packets are being filtered out

2002-11-18 Thread Christian Jul Jensen
Hi List

I've configured a webserver, which runs perfectly on it's own net. The
problem is that it's behind a firewall and everything that comes through
that firewall are being ignored by the server.

Must be some kind of spoof-protection. Because the packets get trapped by
rp_filter.

So I've disabled rp_filter, I've set all iptables rules to ACCEPT, and
I've tried lowering the security level with msec. Nothing changed. I've
used tcpdump to see what's going on, and I can see that packets coming
from a machine on the internal net, gets answers. But packets arriving
through the firewall arrives at the interface, but no answer is sent. So I
know for sure that the problem is at this machine.

I'm totally stuck, any help or hint would be greatly appreciated.

--
./mvh Christian Jul Jensen

  stud.scient.dat
  proff.scriptkiddie




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] cron / at

2002-11-18 Thread Christian Jul Jensen
On 18 Nov 2002, SainTiss wrote:

 Hi,

 I'm trying to figure out how cron/at work/cooperate...

 How, for example, does cron determine that the scripts in
 /etc/cron.daily need to be executed? Does it just do that at midnight?
 Or does it know when 24 hours have passed since the last execution?


Cronjobs are specified by /etc/crontab. On mandrakesystems (and others as
well) crontab is initially configured to run the scripts in fx. cron.daily
once every day.

The format of the file is:

minute hour day_of_month month weekday user action

so

22 4 * * 0 root run-parts /etc/cron.weekly

runs run-parts /etc/cron.weekly as root every monday (0) at 4:22 (am)

 Also, I believe that, if the system is down when the execution should
 take place, at takes over... When does the execution of the
 /etc/cron.daily scripts take place in that case?

at simply runs a job at a specified time. Could be a script that checks
if cronjobs has been run. But usually if you have a system that is not up
all the time anacron takes care of the cronjobs

--
./mvh Christian Jul Jensen

  stud.scient.dat
  proff.scriptkiddie



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [expert] Firewalled packets are being filtered out

2002-11-18 Thread Christian Jul Jensen
Hallelujah! I Thought I would never get an answer.

On 18 Nov 2002, Toshiro wrote:

 El lun, 18-11-2002 a las 07:40, Christian Jul Jensen escribió:
  Hi List
 
  I've configured a webserver, which runs perfectly on it's own net. The
  problem is that it's behind a firewall and everything that comes through
  that firewall are being ignored by the server.
 
  Must be some kind of spoof-protection. Because the packets get trapped by
  rp_filter.
 
  So I've disabled rp_filter, I've set all iptables rules to ACCEPT, and
  I've tried lowering the security level with msec. Nothing changed. I've
  used tcpdump to see what's going on, and I can see that packets coming
  from a machine on the internal net, gets answers. But packets arriving
  through the firewall arrives at the interface, but no answer is sent. So I
  know for sure that the problem is at this machine.

 Have you configured NAT?

No, this machine is not the firewall itself, only a http-server. It's
packets coming through another firewall that are being filtered out. In
that case NAT shouldn't be necessary since it's not doing any
gatewaying/routing. Or am I wrong here...?

--
./mvh Christian Jul Jensen

  stud.scient.dat
  proff.scriptkiddie



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com