Re: [SLUG] raid 1 on linux

[John Ferlito]

On Tue, Mar 27, 2001 at 05:09:50PM +1000, Marty Richards wrote:

I forgot there where so many steps before I started writing this :)

OK Here's john's not so short guide to RAID 1 :)

I'm gogin to assume you have two drives you want to RADI 1
/dev/hda
/dev/hdc

/dev/hda has / which is on hda3
/dev/hdc3 is the same size as /dev/hda3 but is unsed yet

a) find the Software raid HOWTO and read it in totality before you do
anything.

b) find the Software raid HOWTO and read it in totality before you do
anything.

c) find the Software raid HOWTO and read it in totality before you do
anything.

d) Recompile you're kernel with raid support. This needs to be th newer
raid support as stated in the HOWTO
ie either use a 2.4 kernel
or patch a 2.2 kernel with the approproate patch from
ftp.kernel.org/pub/linux/people/mingo i think

d.5) OK I forgot something. Do you're equivelant of
apt-get install raidtools2

that's the newer raidtools

e) reboot with new kernel. Make sure you have a /proc/mdstat and if you
run dmesg it says something about looking for autoraid partitions

f) vi /etc/raidtab and add something like this

raiddev /dev/md0
raid-level 1
nr-raid-disks 2
nr-spare-disks 0
chunk-size 4
persistent-superblock 1
device /dev/hda3
failed-disk 0
device /dev/hdc3
raid-disk 1

This will tell the raid tools that you want raid 1 on two disks but that
currently hda3 is a failed disk so don't use it.

g) mkraid /dev/md0

h) mke2fs /dev/md0

i) mount /dev/md0 /mnt

You now have a mounted and working raid albeit with only 1 disk

j) cd /
   find . -xdev | cpio -pm /mnt

k) this copies / to the new riad partition



l) run lilo NB You need a newish version of lilo to be able to boot off
raid. I know you can;t do it with the lilo in debian stable for example
unstable is fine

l) vi /mnt/etc/lilo.conf
set root=/dev/md0

leave everything else as normal

m) run lilo -C /mnt/etc/lilo.conf

m.5) vi /mnt/etc/fstab
change 
/ /dev/hda3 etc etc
to
/ /dev/md0 etc etc

n) fdisk /dev/hdc
change the partition type of /dev/hdc3 to fd this is the raid autodetect
type.

o) Cross fingers and reboot.

p) If all went well your / should be /dev/md0
cat /proc/mdstat you shoud see something like 
root@kevlar:/export/customers/powwow# cat /proc/mdstat
Personalities : [raid1]
read_ahead 1024 sectors
md0 : active raid1 sdb1[1] sda1[0] 48064 blocks [1/2] [U_]
unused devices: 

If things went  wrong then at lilo type

lilo: linux root=/dev/hda3

this will boot back normally wothout raid

q) OK uptill this point you can put everything back how it was. This is
where we break things.

vi /etc/raidtab

change failed-disk to raid-disk

r) raidhotadd /dev/md0 /dev/hda3

s) cat /proc/mdstat 

You should see the raid rebuilding

t) fdisk /dev/hda
change type of /dev/hda3 to fd

u) Check /proc/mdstat when it says the rebuild is finished ie the line
looks like
md0 : active raid1 sdb1[1] sda1[0] 48064 blocks [2/2] [UU]

then reboot

v) You should now be fully raided

w) Read the HOWTO

x) READ the HOWTO

y) READ the HOWTO

z) OK I just wanted to use the whole alphabet



-- 
John Ferlito
Senior Engineer - Bulletproof Networks
ph: +61 (0) 410 519 382
http://www.bulletproof.net.au/

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] ADSL connection

[Crossfire]

Chris Stokes was once rumoured to have said:
> I am setting up a RH7 machine with 2 nic's one to a private address and one
> to a telstra ADSL. I have the ADSL working and can ping and browse external
> addresses as well as ping internal addresses. I then tried to set up masq
> and test connecting from another internal machine - no luck. After checking
> the RH7 machine I have noticed a few weird things.

[SNIP]

Gus, Rebecca Richards and myself have all commented upon the topic of
Linux + ADSL with Telstra.

Rebecca and myself have lightning guides to getting this all running:

Rebecca's PPPoE guide:
* http://www.becsta.net/adsl.html

My Linux 2.4 native PPPoE guide:
* http://kitsumi.xware.cx/tech/adsl-2.4.html


Neither of us cover routing or firewalling in any great deal, but the
important points with RH7 are:

* Have you enabled ip_forwarding in your /etc/sysctl.conf file?
  you should have a line that reads:
net.ipv4.ip_forward = 1

* [2.2] Are your ipchains rules correct?  Remember, -i (interface) applies
  to the outgoing interface in the forwarding chain.  Also remember that your
  MASQ rule should only apply to outgoing [local -> world] packets, not the
  reverse since they're automagically handled by MASQ.

* [2.4] Are your iptables rules correct?  your -j MASQUERADE rules should be
  on your POSTROUTING chain in the nat tablespace.  Does your FORWARD chain
  in filter permit packets to reach your local subnet post-nat?

* [RP PPPoE] Have you enabled MSS Clamping?

* [2.4 PPPoE] Have you compiled and installed TCPMSS for iptables?
  are you using it correctly?  Do your hosts behind your router support 
  PMTU discovery?  You need ICMP transmission for PMTU discovery to work.

This all just scrapes the surface of the iceberg, but hopefully should be enough to 
get you going.

C.
-- 
--==--
  Crossfire  | This email was brought to you
  [EMAIL PROTECTED] | on 100% Recycled Electrons
--==--

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

RE: [SLUG] raid 1 on linux

[Marty Richards]

Doh! Spoke too soon.
 
Yes, the mkraid finished happily.
 
Then the mdcreate raid1 /dev/md0 /dev/hda2 /dev/hdc2 finished happily.
 
But the mdadd -ar now returns:
/dev/hda2: no such device
/dev/hdc2: no such device
/dev/md0: no such device

Sigh. ;)  I think I'll make my own raid using cp hehe. It'll be faster.  

I haven't got as far as trying to boot from the raid yet, and from what I
see on the net thats the really fun part.

Cheers,
Marty

On Tuesday, March 27, 2001 4:54 PM, Marty Richards
[SMTP:[EMAIL PROTECTED]] wrote:
> Hi Howard,
> 
> Thanks for your mail (thanks Crossfire also). I was having problems with
> mdadd -ar returning "invalid argument". We could create raid0 easily, but
> raid1 was not happening.
> 
> I am using 2.2.16
>  
> I have since found some kernel patches that claim to help - these have
been
> installed and mkraid has just finished without lots of ugly errors... so
its
> looking good at the moment but not over yet...
> 
> Cheers,
> Marty
> 
> 
> On Tuesday, March 27, 2001 4:17 PM, Howard Lowndes
> [SMTP:[EMAIL PROTECTED]] wrote:
> > What's the problem.  I have a site in Melb that has been running
software
> > RAID1 under RH6.1 for around a year now and it has not given a skerrit
of
> > problem.
> > 
> > The original RAID was a disaster, so what kernel are you using?
> > 
> > -- 
> > Howard.
> > 
> > LANNet Computing Associates 
> >"...well, it worked before _you_ touched it!"
> 
> 
> -- 
> SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> More Info: http://slug.org.au/lists/listinfo/slug

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

RE: [SLUG] raid 1 on linux

[Marty Richards]

Hi Howard,

Thanks for your mail (thanks Crossfire also). I was having problems with
mdadd -ar returning "invalid argument". We could create raid0 easily, but
raid1 was not happening.

I am using 2.2.16
 
I have since found some kernel patches that claim to help - these have been
installed and mkraid has just finished without lots of ugly errors... so its
looking good at the moment but not over yet...

Cheers,
Marty


On Tuesday, March 27, 2001 4:17 PM, Howard Lowndes
[SMTP:[EMAIL PROTECTED]] wrote:
> What's the problem.  I have a site in Melb that has been running software
> RAID1 under RH6.1 for around a year now and it has not given a skerrit of
> problem.
> 
> The original RAID was a disaster, so what kernel are you using?
> 
> -- 
> Howard.
> 
> LANNet Computing Associates 
>"...well, it worked before _you_ touched it!"


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] decrypting MSWord8 files

[jimd]

Hi,
I've been sent a file which the owner wants me to be able to read.
Why he mightn't want me to write on my own copy is not clear.
However, when I try to open it, Word asks me for a password.
Presumably it is encrypted - at any rate strings(1) returns
garbage.

I understand that software exists to decrypt these things quickly.
Can anyone point me at some, please?

Any other suggestions, please? Star Office?

Cheers,
Jim Donovan

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] raid 1 on linux

[Howard Lowndes]

What's the problem.  I have a site in Melb that has been running software
RAID1 under RH6.1 for around a year now and it has not given a skerrit of
problem.

The original RAID was a disaster, so what kernel are you using?

-- 
Howard.

LANNet Computing Associates 
   "...well, it worked before _you_ touched it!"

On Tue, 27 Mar 2001, Marty Richards wrote:

> Hi All,
>  
> Is it just me or does the configuration of Raid 1 on Linux really suck?
> 
> Its a real pain to configure, and I dread the day I have to fix it after it
> breaks.
> 
> Even Netware 2.15 was better than this, and that was more than 10 years ago.
> 
> I haven't benchmarked it yet but I have a gut feeling that performance is
> not going to be anything to write home about...
> 
> Cheers,
> Marty
> 
> 


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Re: Ghosting HDD's..

[Howard Lowndes]

In fact you shouldn't be doing it at all unless you are running under
something like tomsrtbt or the Linuxcare CD.  Then you have no probs about
/proc or anything other than what is strictly on the HDD.

-- 
Howard.

LANNet Computing Associates 
   "...well, it worked before _you_ touched it!"

On 26 Mar 2001, Herbert Xu wrote:

> Angus Lees <[EMAIL PROTECTED]> wrote:
> 
> > it may be a little safer than cp -a (devices, not copying /proc, etc)
> > and it would even preserve access times on files ;)
> 
> cp -a should be safe for devices, but you do have to unmount /proc and the
> like.  It also preserves access times/modification times, but not the
> status change times.
> 


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] ADSL connection

[Chris Stokes]

I am setting up a RH7 machine with 2 nic's one to a private address and one
to a telstra ADSL. I have the ADSL working and can ping and browse external
addresses as well as ping internal addresses. I then tried to set up masq
and test connecting from another internal machine - no luck. After checking
the RH7 machine I have noticed a few weird things.

The default gateway is the P-t-P address of the ppp0 interface in ifconfig
yet I cannot ping this address. I can ping the inet address of ppp0. I can
ping external addresses but can not traceroute them.

If someone has a similar config could you send me your ifconfig list and
maybe an ipchains listing.

Regards,
* Chris Stokes
Senior Systems Consultant
Bass Software
[EMAIL PROTECTED]


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] OT PCRecyclers

[Simon Bryan]

I have had communication today with Steve Lagos of PCRecyclers on 
[EMAIL PROTECTED] with no problems and also sent an email straight from 
the web page. He asked me to pass on the message that they were unaware of 
the bouncing email problem and to pass on his email address (above) I guess 
if some more bounces it would be good to send the headers to them. I have 
also had contact on [EMAIL PROTECTED]

Cheers



Simon Bryan

IT Manager
OLMC Parramatta
http://www.olmc.nsw.edu.au



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] Proftpd and PAM

[Gareth Walters]

G'day all,

I am a bit stuck with this, I can't work out whats going on,
I hope someone can at least help me track down the problem .

I just installed Proftpd on a Redhat 6.2 box running kernel 2.4.2 and xinetd
when I try and login in I get this ...

# ftp servername
Connected to servername
220 servername server ready.
331 Password required for myusername.
Password:
421 Service not available, remote server has closed connection
Login failed.
No control connection for command: No such file or directory





All the log file says (with debug = 5 on proftpd)  is

FTP session opened.
received: USER myusername
received: PASS (hidden)
ProFTPD terminating (signal 11)


I tried setting a DefaultRoot to the users home directory but it didn't
change anything.

Is it a PAM problem perhaps (I have checked this and nothing seems to be
amiss)?

TIA for any suggestions.


---Gareth Walters


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] Re: Running pppd as non-root

[Angus Lees]

\begin{Greg Hosler}
> however, it is the case that any suid program that is compromised will
> almost certainly (and immediately, to the knowledgeably) be used as a
> root exploit.
> 
> It is for this reason that RH (circa 5.x releases I think) removed the suid
> bit on pppd (I think that the original package still installs it suid
> though).

doesn't it have to be run as root, in order to create/setup the ppp
devices?

how will a "normal" user be able to (eg) dial into your box and setup
a ppp link?

-- 
 - Gus

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] raid 1 on linux

[Crossfire]

Marty Richards was once rumoured to have said:
> Hi All,
>  
> Is it just me or does the configuration of Raid 1 on Linux really suck?

Pre2.4, yes - yes it does.

MD/RAID got cleaned up a lot in 2.4, but even then, its still not
perfect.  Oh, and I think devfs potentially breaks new-style raid too.

> Its a real pain to configure, and I dread the day I have to fix it after it
> breaks.

raidhotadd, raidhotremove.  not that hard.

> I haven't benchmarked it yet but I have a gut feeling that performance is
> not going to be anything to write home about...

software raid0 is *fast*.  raid1 & 5 give acceptible performance.

The *real* problem is a general problem with RAID on Linux in general.
[Hopefully somebody is listening to this thread]

Current bad things:
* Software and Hardware RAID have no unified management interface.
* Minimal [read: non existant] SCSI hotswap interface support.
  [How do I ask the controller to spin down a disk? Hrm?]

* Software Raid in 2.4 marks disk major and minors into the superblock.
  This is wrong.  Sorry guys, but for a while drive raid1, I should be
  able to swap disks 0 and 1 whilst the machine is off, reboot, and
  have it work.

These are my main two points of peave anyway.  Hopefully this will all
get addressed sometime in the future.

C.
-- 
--==--
  Crossfire  | This email was brought to you
  [EMAIL PROTECTED] | on 100% Recycled Electrons
--==--

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] raid 1 on linux

[Marty Richards]

Hi All,
 
Is it just me or does the configuration of Raid 1 on Linux really suck?

Its a real pain to configure, and I dread the day I have to fix it after it
breaks.

Even Netware 2.15 was better than this, and that was more than 10 years ago.

I haven't benchmarked it yet but I have a gut feeling that performance is
not going to be anything to write home about...

Cheers,
Marty

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] www.blueskyfrog.com.au

[ab]

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] Re: wu-ftpd debian

[Angus Lees]

\begin{David}
> test:/etc/init.d# /etc/init.d/wu-ftpd start
> test:/etc/init.d# ps ax | grep ftp
>  5085 pts/1S  0:00 grep ftp

> Nothing happened. What am I doing wrong?

anything in /var/log/daemon.log ?

strace -f it and see what/where its dying

-- 
 - Gus

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Uncompressing .tgz files

[DaZZa]

On Mon, 26 Mar 2001, David wrote:

> what does gunzip or gzip do that tar doesn't?
> 
> tar xzf works and is easier to relate to. 

GZIP compresses. Tar doesn't - it simply puts numerous paths/files into
one archive.

All tar xzf does is pipe the output through GZIP before running the TAR
command to dissolve the archive. It saves you some typing, is all. :-)

DaZZa


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Uncompressing .tgz files

[DaZZa]

On Mon, 26 Mar 2001, D.V.Rogers wrote:

> have readthe book, twice
> still having problems uncompressing .tgz files
> any command line suggestions?
> any utilities recommended?

.TGZ files are not just compressed files - they are compress TAR files.

You can do this one of two ways, depending on what *nix you use.

On Linux, you can do this

tar -xzvf 

This will uncompress _and_ un-tar the file in one command. However, this
only works for the GNU version of TAR, and requires GZIP be installed on
the system and in your path somewhere.

Alternately, you can do this.

gzip -d 
tar -xvf 

I'm not 100% certain the filename you'd get as a result of the gzip -d
process here - a simple LS will tell you - it may have a .tar extension,
it may not.

DaZZa


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] Using Freesco to connect to Bigpond direct

[james niland]

Hello there,
I am new to this,so be gentle :)

I have used the Freesco router (www.freesco.org) for
about 5 routers now, works fine. So far I have only
set up normal ISPs on it. But now I tried to set one
up for Bigpond Direct. Anyone tried that yet ? Or
anyone here setup a Linux for it and could give me
some hints. So far I can connect but somehow I can't
even ping their gateway
THanks in advance
James Niland

__
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] ftp attack perhaps?

[Howard Lowndes]

Do you have any interesting firewall logs that match these.  I find it
useful to log all incoming SYN only TCP packets whether they are accepted
or not; it tell me what is trying to connect.

-- 
Howard.

LANNet Computing Associates 
   "...well, it worked before _you_ touched it!"

On Tue, 27 Mar 2001, David wrote:

> 
> First symptom.. couldn't ftp to my webserver, connection refused.
> 
> Second symptom.. the following on the console when I checked the web
> server:
> 
> IP_MASQ:reverse ICMP: failed checksum from 164.138.225.122!
> IP_MASQ:reverse ICMP: failed checksum from 164.138.225.122!
> 
> Third symptom.. the following in my message log:
> 
> Mar 27 09:36:20 ns portmap[30661]: connect from 211.18.219.14 to
> getport(status): request from unauthorized host
> Mar 27 09:43:32 ns portmap[30684]: connect from 200.24.218.78 to
> getport(status): request from unauthorized host
> Mar 27 09:44:17 ns inetd[803]: ftp/tcp server failing (looping or being
> flooded), service terminated for 10 min
> Mar 27 09:51:39 ns named[17909]: ns_req: sendto([209.73.164.132].2985):
> Connection refused
> 
> The server failing log entry roughly coincides with when I was trying to
> ftp in myself, using a very standard bookmarked client on my lan.
> 
> 
> Fourth: this was in the secure log... possibly not related... paranoia?
> 
> Mar 26 22:53:39 ns in.ftpd[28962]: refused connect from 203.54.72.7
> Mar 26 22:53:50 ns in.ftpd[28963]: refused connect from 203.54.72.7
> Mar 26 22:54:54 ns in.ftpd[28964]: refused connect from 203.54.72.7
> Mar 26 22:55:05 ns in.ftpd[28965]: refused connect from 203.54.72.7
> Mar 26 22:55:18 ns in.ftpd[28966]: refused connect from 203.54.72.7
> Mar 27 09:54:39 ns in.ftpd[30744]: connect from 203.23.36.3
> 
> 
> any thoughts? The ftp server is now back in operation and working fine.
> The last entry above was me. So far I can't see any other problems.
> 
> 
> 
> 
> 
> 


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Re: Ghosting HDD's..

[Herbert Xu]

Angus Lees <[EMAIL PROTECTED]> wrote:

> it may be a little safer than cp -a (devices, not copying /proc, etc)
> and it would even preserve access times on files ;)

cp -a should be safe for devices, but you do have to unmount /proc and the
like.  It also preserves access times/modification times, but not the
status change times.
-- 
Debian GNU/Linux 2.2 is out! ( http://www.debian.org/ )
Email:  Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] ftp attack perhaps?

[David]

First symptom.. couldn't ftp to my webserver, connection refused.

Second symptom.. the following on the console when I checked the web
server:

IP_MASQ:reverse ICMP: failed checksum from 164.138.225.122!
IP_MASQ:reverse ICMP: failed checksum from 164.138.225.122!

Third symptom.. the following in my message log:

Mar 27 09:36:20 ns portmap[30661]: connect from 211.18.219.14 to
getport(status): request from unauthorized host
Mar 27 09:43:32 ns portmap[30684]: connect from 200.24.218.78 to
getport(status): request from unauthorized host
Mar 27 09:44:17 ns inetd[803]: ftp/tcp server failing (looping or being
flooded), service terminated for 10 min
Mar 27 09:51:39 ns named[17909]: ns_req: sendto([209.73.164.132].2985):
Connection refused

The server failing log entry roughly coincides with when I was trying to
ftp in myself, using a very standard bookmarked client on my lan.


Fourth: this was in the secure log... possibly not related... paranoia?

Mar 26 22:53:39 ns in.ftpd[28962]: refused connect from 203.54.72.7
Mar 26 22:53:50 ns in.ftpd[28963]: refused connect from 203.54.72.7
Mar 26 22:54:54 ns in.ftpd[28964]: refused connect from 203.54.72.7
Mar 26 22:55:05 ns in.ftpd[28965]: refused connect from 203.54.72.7
Mar 26 22:55:18 ns in.ftpd[28966]: refused connect from 203.54.72.7
Mar 27 09:54:39 ns in.ftpd[30744]: connect from 203.23.36.3


any thoughts? The ftp server is now back in operation and working fine.
The last entry above was me. So far I can't see any other problems.





-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] odd bit in apache access log

[Rick Welykochy]

Dave Fitch wrote:
> 
> On Tue, Mar 27, 2001 at 01:45:23AM +1000, Rick Welykochy wrote:
> > ...  - - [25/Mar/2001:22:15:56 +1000] "GET http://www.yahoo.com/ HTTP/1.1" 403 218
> > ...^
> >
> > Is the ^ bit above perhaps specified in a LogFormat specifier in
> > your httpd.conf file.
> >
> > This would do it:
> > LogFormat "%h %l %u %t \"%{Referer}i\" %>s %b" common
> 
> for LogFormat, my httpd.conf has:
> 
> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %T %v" full
> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
> LogFormat "%h %l %u %t \"%r\" %>s %b" common
> LogFormat "%{Referer}i -> %U" referer
> LogFormat "%{User-agent}i" agent
> 
> So what do you mean by "this would so it"?
> whatsit mean?

Each formatr has a name, found at the end of the format. The % bits are
pieces of each log entry.

The above look fine (standard distribution) so much hunch was wrong.
I has thought that perhaps the HTTP_REFERER (from the header) was being
recorded where the Request URI (%r) normally sits.

-rick

--
Rick Welykochy || Praxis Services Pty Limited

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] UPS serial cable

[Dave Fitch]

On Tue, Mar 27, 2001 at 08:09:48AM +1000, Simon Bryan wrote:
> I had a similar experience, I then typed in the address manually and it 
> worked! No reason for that, once contact was established it became quite 
> normal with no bounces, so perhaps something is screwy on the web page.

that wasn't it in my case cos I don't use
those mailto links, I always type the addresses into my
mail client.

Dave.

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] UPS serial cable

[Simon Bryan]

I had a similar experience, I then typed in the address manually and it 
worked! No reason for that, once contact was established it became quite 
normal with no bounces, so perhaps something is screwy on the web page.

At 07:35 27/03/2001, you wrote:
>On Tue, Mar 27, 2001 at 06:44:02AM +1000, Umar Goldeli wrote:
> > On another note, have you tried to email them yet? Every single address on
> > their contact list bounces.. :(
>
>except "sales" I think.
>I ended up ringing them though.
>
>Dave.
>
>--
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug



Simon Bryan

IT Manager
OLMC Parramatta
http://www.olmc.nsw.edu.au



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] odd bit in apache access log

[Dave Fitch]

On Tue, Mar 27, 2001 at 01:45:23AM +1000, Rick Welykochy wrote:
> ...  - - [25/Mar/2001:22:15:56 +1000] "GET http://www.yahoo.com/ HTTP/1.1" 403 218
> ...^
> 
> Is the ^ bit above perhaps specified in a LogFormat specifier in
> your httpd.conf file. 
> 
> This would do it:
> LogFormat "%h %l %u %t \"%{Referer}i\" %>s %b" common 

for LogFormat, my httpd.conf has:

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %T %v" full
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

So what do you mean by "this would so it"?
whatsit mean?

Dave.

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] UPS serial cable

[Dave Fitch]

On Tue, Mar 27, 2001 at 06:44:02AM +1000, Umar Goldeli wrote:
> On another note, have you tried to email them yet? Every single address on
> their contact list bounces.. :(

except "sales" I think.
I ended up ringing them though.

Dave.

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] odd bit in apache access log

[Dave Fitch]

On Mon, Mar 26, 2001 at 11:58:43PM +1000, Ian Tester wrote:
> attacks. You wouldn't happen to be on a cable modem or ADSL connection would
> you?

it's on a more or less permanent modem connection.

Dave.

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] UPS serial cable

[Umar Goldeli]

On another note, have you tried to email them yet? Every single address on
their contact list bounces.. :(


//umar.

On Mon, 26 Mar 2001, Michael Still wrote:

> On Thu, 22 Mar 2001, Dave Fitch wrote:
> 
> > I noticed second hand UPS' for sale at
> > www.pcrecyclers.net (checking out those HP machines
> > Simon was looking at).  They're Sola 510 600VA models
> > and look quite good for $149.  They'll add the serial
> > cable as well for an extra $18, so my question is:
> > are they special cables? (I remember hearing something
> > about UPS' taking special cables before?)
> > Cos if they're standard ones I can dig up an old one
> > off a modem and save $18.
> 
> They are not normally standard serial cables. The pinouts are weel dinfied
> (usually), so you could just make your own...
> 
> The batteries are quite heavy for a good UPS, so shipping might make the
> exercise a little expensive.
> 


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] UPS serial cable

[Howard Lowndes]

Try MRI in Melb.  They had these Sola 510's by the pallett full at $50
each only about 2 weeks ago.  They looked almost brand new.

I got a Sola 750wa for that price from them.

-- 
Howard.

LANNet Computing Associates 
   "...well, it worked before _you_ touched it!"

On Mon, 26 Mar 2001, Michael Still wrote:

> On Thu, 22 Mar 2001, Dave Fitch wrote:
> 
> > I noticed second hand UPS' for sale at
> > www.pcrecyclers.net (checking out those HP machines
> > Simon was looking at).  They're Sola 510 600VA models
> > and look quite good for $149.  They'll add the serial
> > cable as well for an extra $18, so my question is:
> > are they special cables? (I remember hearing something
> > about UPS' taking special cables before?)



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] odd bit in apache access log

[Rick Welykochy]

Dave Fitch wrote:
 
> Why do every so often I get bits like:
> 
> adlax3-110.dialup.optusnet.com.au - - [25/Mar/2001:22:15:56 +1000] "GET 
>http://www.yahoo.com/ HTTP/1.1" 403 218
> 
> in my apache access.log?
> 
> It's out of the blue, that person hasn't been looking at my
> website or anything they just appear to be requesting my
> apache to get that yahoo url.  Why?

...  - - [25/Mar/2001:22:15:56 +1000] "GET http://www.yahoo.com/ HTTP/1.1" 403 218
...^

Is the ^ bit above perhaps specified in a LogFormat specifier in
your httpd.conf file. 

This would do it:

LogFormat "%h %l %u %t \"%{Referer}i\" %>s %b" common 


--
Rick Welykochy || Praxis Services Pty Limited

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] odd bit in apache access log

[Ian Tester]

On Mon, 26 Mar 2001, Dave Fitch wrote:

> Why do every so often I get bits like:
> 
> adlax3-110.dialup.optusnet.com.au - - [25/Mar/2001:22:15:56 +1000] "GET 
>http://www.yahoo.com/ HTTP/1.1" 403 218
> 
> in my apache access.log?
> 
> It's out of the blue, that person hasn't been looking at my 
> website or anything they just appear to be requesting my
> apache to get that yahoo url.  Why?

Just a guess, but maybe someone is looking for open web proxies so they can
launch a Distributed Denial Of Service attack against a web site. At the last
place I worked, the M$ Proxy Server ran on port 80, just like a normal web
server. Maybe other products (which tend to be admin'd by MCSE monkeys and the
like) also put up a web proxy-like service on port 80. Winproxy perhaps? I heard
that product had/has a stupid default password and lots of skript kiddies were
finding cable modem users (using winproxy) easy hosts for their DDoS
attacks. You wouldn't happen to be on a cable modem or ADSL connection would
you?

Just a thought

-- 
8<8<8<8<8<8<8<
Ian Tester   *8)#  \7\LINUX: because geeks will find a way
[EMAIL PROTECTED]   \7\  http://www.zipworld.com.au/~imroy



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] odd bit in apache access log

[Dave Fitch]

Why do every so often I get bits like:

adlax3-110.dialup.optusnet.com.au - - [25/Mar/2001:22:15:56 +1000] "GET 
http://www.yahoo.com/ HTTP/1.1" 403 218

in my apache access.log?

It's out of the blue, that person hasn't been looking at my 
website or anything they just appear to be requesting my
apache to get that yahoo url.  Why?

Dave.

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Uncompressing .tgz files

[Steve Kowalik]

On Mon, Mar 26, 2001 at 05:33:44PM +1000, marty uttered:
> > have readthe book, twice
> > still having problems uncompressing .tgz files
> 
> .tgz is equivalent to .tar.gz
>
As noted before.

> tar -zxvf filename.tgz
>

Don't use the 'minus' in front of tar options as most, if not all newish tar's will 
complain. Well, I do remember seeing this error somewhere, saying something similar.
"Warning: using minus is deprecated" Or some such,
There is a Deprecated Shirt on ThinkGeek (with a stamp, too!)


If you think the above looks "wrong", read the DocBook specs.

> later
> marty
> 
> "I can't buy what I want because it's free. Can't be what they want
> because I'm me." - Corduroy, Pearl Jam
> 
> 
> -- 
> SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> More Info: http://slug.org.au/lists/listinfo/slug
> 

-- 
Steve
  "I'm a sysadmin because I couldn't beat a blind monkey in a coding contest."
--Me

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] .tgz uncompress FIX

[Peter Hardy]

On Mon, Mar 26, 2001 at 06:49:34PM +1000, D.V.Rogers wrote:
> the solution fix used was follwowing
> tar zxvf (filename)   --for .tgz files
> tar xvf (filename)-- for .tar files
> thanks again and hope to get to some REAL problems late

Remember that some browsers (mozilla) automatically decompress a file that
they're downloading.  So foo.tar.gz (or foo.tgz) will have the same name,
but gzip and tar z will complain and die.

Cheers,
Peter

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] UPS serial cable

[Michael Still]

On Thu, 22 Mar 2001, Dave Fitch wrote:

> I noticed second hand UPS' for sale at
> www.pcrecyclers.net (checking out those HP machines
> Simon was looking at).  They're Sola 510 600VA models
> and look quite good for $149.  They'll add the serial
> cable as well for an extra $18, so my question is:
> are they special cables? (I remember hearing something
> about UPS' taking special cables before?)
> Cos if they're standard ones I can dig up an old one
> off a modem and save $18.

They are not normally standard serial cables. The pinouts are weel dinfied
(usually), so you could just make your own...

The batteries are quite heavy for a good UPS, so shipping might make the
exercise a little expensive.

Cheers,
Mikal

-- 
Michael Still ([EMAIL PROTECTED])
  http://www.stillhq.com -- a whole bunch of Open Source stuff including PDF 
software...

"Grrr! I'm a volleyballing machine!"


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] wu-ftpd debian

[Michael F.]

Also, you might want to check that

cat /etc/inetd.conf | grep ftp

And make sure an existing ftp server is not already enabled, as this might
have the port already ;) so you'd need to # it out, and ps aux | grep inetd
; kill -1 pidof inetd

Then try running wu-ftpd again

- Original Message -
From: "David" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, March 26, 2001 5:02 PM
Subject: [SLUG] wu-ftpd debian


>
> I just apt-got wu-ftpd, and it appeared to install ok.
>
> When I tried to start it this is what i get. The first line was just me
> trying to see if the script was actually being invoked at all!
>
> test:/etc/init.d# /etc/init.d/wu-ftpd blob
> Usage: /etc/init.d/wu-ftpd {start|stop|restart|force-reload}
> test:/etc/init.d# /etc/init.d/wu-ftpd stop
> test:/etc/init.d# /etc/init.d/wu-ftpd start
> test:/etc/init.d# ps ax | grep ftp
>  5085 pts/1S  0:00 grep ftp
>
> Running from the command line:
>
> test:/etc/init.d# wu-ftpd -vla
>
> Nothing happened. What am I doing wrong?
>
> David.
>
>
> --
> SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> More Info: http://slug.org.au/lists/listinfo/slug
>


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] wu-ftpd debian

[Michael F.]

No idea :)

I tend to use proftpd, apt-get install proftpd...

- Original Message - 
From: "David" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, March 26, 2001 5:02 PM
Subject: [SLUG] wu-ftpd debian


> 
> I just apt-got wu-ftpd, and it appeared to install ok.
> 
> When I tried to start it this is what i get. The first line was just me
> trying to see if the script was actually being invoked at all! 
> 
> test:/etc/init.d# /etc/init.d/wu-ftpd blob
> Usage: /etc/init.d/wu-ftpd {start|stop|restart|force-reload}
> test:/etc/init.d# /etc/init.d/wu-ftpd stop
> test:/etc/init.d# /etc/init.d/wu-ftpd start
> test:/etc/init.d# ps ax | grep ftp
>  5085 pts/1S  0:00 grep ftp
> 
> Running from the command line:
> 
> test:/etc/init.d# wu-ftpd -vla
> 
> Nothing happened. What am I doing wrong?
> 
> David.
> 
> 
> -- 
> SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> More Info: http://slug.org.au/lists/listinfo/slug
> 


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] wu-ftpd debian

[David]

I just apt-got wu-ftpd, and it appeared to install ok.

When I tried to start it this is what i get. The first line was just me
trying to see if the script was actually being invoked at all! 

test:/etc/init.d# /etc/init.d/wu-ftpd blob
Usage: /etc/init.d/wu-ftpd {start|stop|restart|force-reload}
test:/etc/init.d# /etc/init.d/wu-ftpd stop
test:/etc/init.d# /etc/init.d/wu-ftpd start
test:/etc/init.d# ps ax | grep ftp
 5085 pts/1S  0:00 grep ftp

Running from the command line:

test:/etc/init.d# wu-ftpd -vla

Nothing happened. What am I doing wrong?

David.


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Can't compile 2.4.2 kernel - where is gas? - SOLVED

[David Fisher]

Astute readers with acute memories will remember my problems with compiling a 
2.4.2 kernel on a Debian sid box.

The answer to the problem for now was found by perusing some back numbers on 
the debian-user list.

In /usr/src/linux/arch/i386/boot/Makefile, you need to replace all instances
of -oformat with --oformat.   

Worked for me.  I have take crossfire's advice though and have only put in a 
2.4.1 job.  Hopefully 2.4.3 when it comes out of the oven might help my SCSI 
problems with its new, allegedly much improved aic7xxx driver.

--
David




-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug