Re: [expert] Resolv.conf changing
Jack, Thank you for this tip (and also to Mark), switching off peerdns seems to have done the trick. Best regards, Graeme. -- Graeme J Hosking pgp0.pgp Description: PGP signature
[expert] Resolv.conf changing
Hi, I wonder if someone can tell me how to prevent the contents of my /etc/resolv.conf from being re-written every time my NIC is brought up? Or at least, allow me to keep entries in that file that I have put there manually. Basically, the NIC connected to my cable modem has to use DHCP to get its address, etc, etc. But I also run a caching DNS server on that machine. Every time the interface is brought up it will re-write /etc/resolv.conf with settings it gets from my ISP's DHCP server, overwriting my entry to point to the local instance of BIND for DNS lookups. This is frustrating, as the result is that all the machines on my network use my self-hosted DNS server except the machine hosting the DNS server. :) I've read about adding the -R switch to dhcpcd but I wondered if there is another solution? I'm using mdk9.1. Many thanks, Graeme. -- Graeme J Hosking pgp0.pgp Description: PGP signature
[expert] Syslog not logging in Madrake 9.1
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, I just noticed that syslod is failing on startup, but klogd is starting [OK]. As klogd uses syslogd so the result is absolutely no logging on my firewall machine. Strangely, however, the syslogd process is actually running. I can start it manually from a terminal with debugging switched on and it shows connections being opened and closed as other processes try to create log entries. All log files under /var/log/ have a timestamp of 4:02 AM this morning (June 8th) but contain 0 bytes. So I'm thinking maybe the logrotate has screwed things up somehow? The archive log files are all dated from 3 days ago (June 5th), even though I'm sure logrotate is supposed to run nightly (it's living in /etc/cron.daily on my system). I've also checked my /etc/syslog.conf file. I've not tinkered with anything in here since install but I thought I'd check and it all looks good to me. Any pointers would be appreciated as I've run out of ideas? Many thanks. - -- Graeme J Hosking [EMAIL PROTECTED] http://www.hosking-online.com/ -BEGIN PGP SIGNATURE- Version: 6.5.8ckt http://www.ipgpp.com/ iQA+AwUBPuN3smG9Y2LKTkbCEQLKIgCY2y42DfbKH80CKHzHJrGQWg9y5ACfXoP4 RHjwmv9ESh/9reKg2NUp2R8= =kPs8 -END PGP SIGNATURE- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [expert] Freeswan install
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Paul, When trying to start ipsec i get the complaint that ' The module you are trying to load (/lib/modules/2.4.21-0.13mdksecure/kernel/net/ipsec/ipsec.o.gz) is compiled with a gcc version 2 compiler, while the kernel you are running is compiled with a gcc version 3 compiler. '. This problem is well documented from early beta's of 9.1 onwards - sadly it was not addressed before 9.1 final. You can read the bug report for yourself here: http://qa.mandrakesoft.com/show_bug.cgi?id=1647 Fortunately, due to some great work by Marcel van Groenigen there is now a nice fix. Marcel has produced some re-compiled ipsec.o.gz files for various 9.1 kernels. You can find them here: http://projects.emenems.net/ipsec_modules_mdk/ Unfortunately it doesn't look like he has produced a new version for the secure kernel, but I got FreeSWAN running on the enterprise kernel in a snip using Marcus' fix. I guess if you *really* need to run secure than you could always e-mail Marcus and ask him to build one for you.. Regards, - -- Graeme J Hosking -BEGIN PGP SIGNATURE- Version: 6.5.8ckt http://www.ipgpp.com/ iQA/AwUBPtvlY2G9Y2LKTkbCEQIKRACfayjZ+FdikK3bZ3uz+2PlPAC/7RUAoMpc ody7rgix8zBIttxfb2bDD4Yj =3GTs -END PGP SIGNATURE- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
