[SLUG] Reducing Postmaster Notify msgs from sendmail

[Matt Hyne]

Folks, each day I get about 300+ "Postmaster Notify" emails from my mail
server.  These are generally because an external email could not be
delivered to one of my users because the user did not exist (and thus
postmaster gets copied on the warning msg).

Now, most of the time, these undeliverable messages are SPAM which have
been sent to random names at random domains.  Thus these notifications
are of no value to me and all they do is fill up my mailbox.

Is there anyway to turn off these notifications to the postmaster within
sendmail ?  

We only have a relatively small domain and I would love to know how
folks on larger sites manage all these postmaster notifications.

Regards 
Matt

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Getting sendmail to use nullclient

[Matt Hyne]

Folks, I need help with a sendmail config.

I am trying to get my machine to forward ALL mail through a central mail
server.   I do not want anything delivered locally (we have a central
mail server for all mail).

I have configured the sendmail.mc (cf) file to be a nullclient however
it still wants to deliver mail locally (eg if I do a "mail matth").

Here is my nullclient.mc file (which I build into sendmail.cf)

divert(-1)
dnl This is the sendmail macro config file. If you make changes to this
file,
dnl you need the sendmail-cf rpm installed and then have to generate a
dnl new /etc/sendmail.cf by running the following command:
dnl
dnlm4 /etc/mail/nullclient.mc > /etc/sendmail.cf
dnl
include(`/usr/share/sendmail-cf/m4/cf.m4')
VERSIONID(`linux setup for Red Hat Linux')dnl
OSTYPE(`linux')
DOMAIN(`generic')dnl
FEATURE(`nullclient',`panda.xx.com.au')dnl  
undefine(`ALIAS_FILE')dnl  

Here is the log of sending an email to 'matth':

Jan 16 14:32:36 wormhole sendmail[9464]: i0G3Wa809461: to=matth,
ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=local,
pri=30030, dsn=2.0.0, stat=Sent

As you can see, sendmail still delivers this mail locally rather than
forwarding onto my mail hub.   

I've tried removing the include() above, but then sendmail complains
when I restart it:

Starting sendmail: 
No local mailer defined
QueueDirectory (Q) option must be set  [FAILED]   

Has anyone got a Redhat machine (this is 7.3) to actually work as a
nullclient ?? 

Matt

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

[SLUG] Installing linux on Sun Blade 100 - firmware password ??

[Matt Hyne]

Folks, we inherited a Sun Blade 100 which we are going to "linux" but
because it has an existing FW password we cannot get bay further.  

Does anyone know how to reset the FW password on this box.  I don't care
about any of the existing settings.

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

[SLUG] Using SAMBA/Linux to push Windows Group Policies

[Matt Hyne]

Folks, I'd love to chuck out a Windows 2000 server however it is used to
push group policies down to windows clients.  This includes such things
as the default proxy, default settings, what the user can/cannot change
and other admin things.

I was wondering if there is anyway I can do this from a Samba box - or
alternatively another way that I can do it without using a W2k server.

I'm interested in comments from people who have tackled this.

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

[SLUG] Email -> SMS

[Matt Hyne]

Folks, rather than not try and reinvent the wheel I was hoping someone
here might have done this before.

I am trying to set up an email->SMS gateway.  Users should be able to
send an SMS by sending an email to [EMAIL PROTECTED]

I would therefore like to get sendmail to forward all mail for
sms.mydomain.com.au to an external program which will do the following.

1. Extract the sender and recipients name/userid.
2. Look up the recipient's mobile number (simple looking).
3. Translate this into an SMS using an attached serial GSM modem.

Now, if someone has done it before, then all is good.  If not, then I
will code up the helper application however I would like to know what
method people suggest for getting sendmail to forward all mail for
sms.mydomain.com.au to an external program without loosing the original
envelope (ie with recipient's userid).

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

[SLUG] Network printing problem on RH 6.1

[Matt Hyne]

Folks, we have an old RH 6.1 server which we use as a database server.
For compatibility reasons, we need to stay with RH6.1.

However, I had to reload the machine the other night and now network
printing will not work.  I keep getting the following errors in
/var/log/messages when I try to print as any user except root (root
prints fine).

Jul 14 17:45:07 panda lpd[11257]: lpd: couldn't open spool file
dfA014panda as mhyne
Jul 14 17:45:07 panda lpd[11257]: PRINTER1: job could not be sent to
remote host (cfA014panda)

I cant see to work out what the issue is.  Everything appears ok and if
I print as root it works.  The spooler directory appears to be owned by
lp.lp.

Anyone have any suggestions ?

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

[SLUG] Win2k Server and Linux - Active Directory and BIND

[Matt Hyne]

Folks, I have a question on adding a W2K server into a Linux
environment.  I don't know a lot about W2KS, but I do have a lot of
Linux experience so I am hoping someone has already done this.

We have been forced to upgrade our old 1998 NT 4.0 server to a W2K
server.  Now the new server will run Active Directory (whereas the old
NT 4.0 machine ran as a single NT domain) and I would like to know how I
can integrate this into our current DNS which is BIND running on a linux
box.

I do not want to have to create a new subdomain and run the MS DNS
service (such as ad.mydom.com.au).  I would prefer to have W2K use the
BIND DNS server and have everything under our top level domain
(mydom.com.au).  

Has anyone done this or something like it and can offer some advice ?

Also, we use a lot of Samba and our Samba boxes authenticate using our
NT4.0 server.  Now, I want to convert this to using the W2K server.
Will I have any problem since the new server runs AD ?

Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

[SLUG] SSH idle timeouts

[Matt Hyne]

Folks, 

I've been trying to find a way to stop linux from disconnecting my ssh
sessions after some idle timeout period.  I can't find any setting in
sshd_config to stop this idle timeout from occuring.  Could it be somewhere
else (such as login or in the securetty settings ?).

I only seem to get this connecting to later SSH servers.  I have a RHL7.0
box and I can stay SSHed into this for days.  For RHL7.3 and up, I get
thrown off after about 10 mins.

I don't really want to set anything on the client side - as I would have to
go and change every client I use.  I am looking for a solution on the server
side.

Thanks
Matt

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

[SLUG] Problem accessing POP server remotely

[Matt Hyne]

Guys, I asked this problem before but did not get a solution.

Basically, I am running a home POP server and when I access this POP server 
remotely, it takes some 20secs before POP starts to transfer mail 
(internally it is immediate).

If I telnet to the POP port directly, I see that indeed the following occurs:

 > telnet  pop
Trying www.xxx.yyy.zzz...
Connected to .
Escape character is '^]'.
+OK POP3 panda v2001.78rh server ready

And it takes a good 20s before the +OK POP3 ... line is displayed.  It is 
not latency on the link - telnet/ssh is immediate.

I though it might be because of the auth/ident protocol so I check I can 
access this remotely, which I can.

So I am at a bit of a loss to explain why this problem persists.  Anyone 
else seeing this problem too (machine is a RH7.0 box) ?

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Problem accessing POP server remotely

[Matt Hyne]

The reverse lookups are fine, but tcpdump reveils something interesting:

12:34:04.960358 jumbuck.46901 > panda.pop3: S 1209979088:1209979088(0) win 
8760 
12:34:04.960440 panda.pop3 > jumbuck.46901: S 432051502:432051502(0) ack 
1209979089 win 32430  (DF)
12:34:05.007550 jumbuck.46901 > panda.pop3: . ack 1 win 9870
12:34:05.013684 panda.4888 > jumbuck.auth: S 441368347:441368347(0) win 
32430  (DF)
12:34:08.005563 panda.4888 > jumbuck.auth: S 441368347:441368347(0) win 
32430  (DF)
12:34:14.005821 panda.4888 > jumbuck.auth: S 441368347:441368347(0) win 
32430  (DF)
12:34:26.006299 panda.4888 > jumbuck.auth: S 441368347:441368347(0) win 
32430  (DF)
12:34:35.015067 jumbuck.auth > panda.4888: R 0:0(0) win 32430
12:34:35.029509 panda.pop3 > jumbuck.46901: P 1:41(40) ack 1 win 32430 (DF)
12:34:35.063977 jumbuck.46901 > panda.pop3: . ack 41 win 9870
12:35:57.713150 jumbuck.46901 > panda.pop3: P 1:6(5) ack 41 win 9870
12:35:57.713225 panda.pop3 > jumbuck.46901: . ack 6 win 32430 (DF)
12:36:00.672225 jumbuck.46901 > panda.pop3: F 6:6(0) ack 41 win 9870
12:36:00.672281 panda.pop3 > jumbuck.46901: . ack 7 win 32430 (DF)
12:36:00.672435 panda.pop3 > jumbuck.46901: P 41:69(28) ack 7 win 32430 (DF)
12:36:00.676562 panda.pop3 > jumbuck.46901: F 69:69(0) ack 7 win 32430 (DF)
12:36:00.715324 jumbuck.46901 > panda.pop3: R 1209979095:1209979095(0) win 9870
12:36:00.716028 jumbuck.46901 > panda.pop3: R 1209979095:1209979095(0) win 
0 (DF)

It appears to be sending a request to the auth protocol of the external 
machine - which it does  4 times before getting a response (the reason for 
the 30s delay).  The problem with this is that there is no guarantee than 
an external machine does not block inbound access to the auth protocol 
(with many stateful firewalls this is normally the case - only open a port 
if there was an outbound connection first).

Is there anyway to tell the pop daemon NOT to try to reconnect on the auth 
port ?

Matt

At Sunday, 08-09-02 12:16 (+1000), Martin wrote:
>$author = "Matt Hyne" ;
> >
> > If I telnet to the POP port directly, I see that indeed the following
> > occurs:
> >
> > > telnet  pop
> > Trying www.xxx.yyy.zzz...
> > Connected to .
> > Escape character is '^]'.
> > +OK POP3 panda v2001.78rh server ready
> >
> > And it takes a good 20s before the +OK POP3 ... line is displayed.  It is
> > not latency on the link - telnet/ssh is immediate.
> >
> > I though it might be because of the auth/ident protocol so I check I can
> > access this remotely, which I can.
> >
> > So I am at a bit of a loss to explain why this problem persists.  Anyone
> > else seeing this problem too (machine is a RH7.0 box) ?
>
>my guess is it is doing a reverse lookup on the IP you are connecting from
>and it is timing out. try 'dig -x AAA.BBB.CCC.DDD' on the redhat box,
>substituting in the IP of the machine you usually connect from...
>
>marty
>
>--
>You need only two tools. WD-40 and duct tape. If it doesn't move and
>it should, use WD-40. If it moves and shouldn't, use the tape.
>--
>SLUG - Sydney Linux User's Group - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Document management system

[Matt Hyne]

I am looking for a free/GPL document management system that runs under linux.

Basically, we have a number of project files that we want users to be able 
to check in and out when they make changes (word docs mainly).  I would 
like them to be able to do this via a web interface.

Ideally I am looking for some sort of PHP based system (ie, so I can change 
it).

Anyone got any suggestions ?

Matt

PS: CVS is a little hardcore for some of our users - so that is not really 
an option.

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Samba and Linux Help - I need a refresher

[Matt Hyne]

Folks,

It has been some time since I played with Samba and I wanted to find out 
what the current status is with regards to setting up a Samba box as a 
Network Attached Storage box.

Basically, I want to use a Linux box as a storage server on a Win2K 
domain.  I have it set up to do server authentication from a PDC (seems to 
work).  Do I also have to create local userids in /etc/passwd for all the 
users that will be using this via windows (what about smbpasswd) ?

I know there are a lot of organisations selling Linux boxes as storage 
servers (throw on a HTML GUI and you're done).  They claim they can just be 
plugged-in and configured - and that there is no need to configure local 
usernames or passwords.

What happens when users save files - how does the win2k username of the 
user get translated to a linux UID if there is no local userid ?

Has anyone used winbind to authenticate Linux users from an NT/2k Server 
?  It would be good if I can do all the userid/password maintenance on one 
machine without having to add a local userid to a linux box.

Lastly, anyone had any success using Samba as a PDC or BDC with Windows 
2000 clients yet - I would love to replace a Win2k server we have here ?

M


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Billion ADSL Modem/Router

[Matt Hyne]

At Friday, 11-10-02 11:55 (+1000), Patrick Kelso wrote:
>On Fri, 2002-10-11 at 07:10, Peter Faulks wrote:
> > G'day
> >
> > Looking at going down the adsl road
> >
> > Does anyone have good/bad experience with the Billion modem?
> > http://maitec.statustech.com.au/main.php?s=products&pid=1000497
> >
> > Seems a bit cheaper than the D-link equivalent (DSL-300???)
>
>Overclockers Australia recently reviewed it.
>
>http://www.overclockers.com.au/article.php?id=91075
>
>Patrick

I've got one which I have already returned once - it keeps locking up 
requiring a power-cycle to fix.  I am probably going to return it for a 
refund, it has some serious bugs.

Matt



> >
> > Regards
> > --
> > SLUG - Sydney Linux User's Group - http://slug.org.au/
> > More Info: http://lists.slug.org.au/listinfo/slug
>
>
>--
>SLUG - Sydney Linux User's Group - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Printing Problems with CUPs

[Matt Hyne]

Folks, I have been wading through the confusing world of linux printing and 
CUPS and I am hoping someone can help.

I have a linux box that is connected to a couple of LPD line printers 
(dot-matrix, no graphics). Now if I configure these as raw printers under 
CUPS then I can print fine however I need them to issue a From Feed at the 
end of each job.

I used to be able to do this with LPRng, but CUPs does not seem to allow me 
to do this.

I was wondering if anyone has any ideas or suggestions ?  I was looking at 
foomatic and cupsomatic and their PPD files but this all sounds 
over-complicated as they are printing output to Postscript and then 
converting it back to raw text.  I dont really want to do this just to add 
a FF to the end of the job.

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Repair shop?

[Matt Hyne]

At Wednesday, 16-10-02 13:32 (+), Voytek Eymont wrote:
>** Reply to note from Adam Hewitt <[EMAIL PROTECTED]> 16 Oct 2002 
>12:18:14 +1000
>
>
> > And I have been doing computer technician work for about 8 years now and
> > I have always placed the CD ROM on the secondary IDE channel. The reason
> > for this (and I admit I have never done any testing myself to find out
> > if this is true) is that the IDE channel will default to the slowest
> > speed on the ribbon cable, so if you have a hard drive and a cd drive
> > located on the same IDE ribbon cable it will slow your hard drive speed
> > down.
> >
> > If you think this is incorrect or have actually run tests regarding this
> > please let me know.
>
>Adam,
>
>on a perhaps related issue, I have been told it's a 'bad idea' to have a
>slow device such as a scanner on one SCSI buss, as, it will bring the whole
>SCSI chain to the lowest common speed.

Yes and no.  The SCSI bus will default to the slowest speed only when doing 
transfer to that device.  If you are using the HDD and not the scanner, the 
bus will run at the highest speed supported by the HDD and host adaptor.


>I have a single AHA2940UWP running three chains:
>external narrow: HP scanner and Yamaha CDRW
>internal wide: 2 UW HDs ,
>internal narrow: two narrow devices: CDROM, DAT.
>
>I was told 'bad idea, get a second SCSI controller for scanner'
>
>so, one day, I run some HD benchmarks, as is, with all stuff working;
>then, progressively, I removed everything down to the single HD.
>
>interestingly, the HD benchmarks didn't vary, regardless
>
>so, I still only use a single SCSI controller.
>
>of course, IDE isn't SCSI, and, YMMV, etc
>
>
>
>
>
>Voytek Eymont
>SBT Information Systems Pty Ltd
>http://www.sbt.net.au/links/
>phone +61-2 9310-1144 fax +61-2 9310-1118
>--
>SLUG - Sydney Linux User's Group - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] rsync question

[Matt Hyne]

rsync guru's

I am trying to write a backup script that will run each night to mirror 
some of my directories on another machine (the backup machine).

Basically I have a script that produces the following (it is actually a 
shell script that gets the source directories from another file).

rsync -acz -e ssh /usr/local backup:/backup/hostname
rsync -acz -e ssh /local backup:/backup/hostname

So I am attempting to rsync /usr/local and /local and clone these as 
backup:/backup/hostname/usr/local and backup:/backup/hostname/local

The problem is that rsync puts BOTH of these in 
backup:/backup/hostname/usr/local which is not what I want.  Does anyone 
know how I can tell rsync to use the full path in the destination, rather 
than the last directory.  I do not really want to have to specify the 
entire dest directory as this will stuff my automagic scripts.

Matt

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] rsync question

[Matt Hyne]

At Monday, 04-11-02 20:07 (+1100), Christopher Vance wrote:

On Mon, Nov 04, 2002 at 07:53:34PM +1100, Matt Hyne wrote:
: rsync -acz -e ssh /usr/local backup:/backup/hostname
: rsync -acz -e ssh /local backup:/backup/hostname
:
: So I am attempting to rsync /usr/local and /local and clone these as
: backup:/backup/hostname/usr/local and backup:/backup/hostname/local

That's not what you asked it to do.  Try

rsync -aczessh /usr/local/ backup:/backup/hostname/usr/local/
rsync -aczessh /local/ backup:/backup/hostname/local/

Note the full pathnames on the right side and all the extra '/'s.


The biggest problem with this is that it expects the remote machine to 
already have those destination directories created - which I cannot do 
since the script will run non-interactively and only allows rsync to be 
executed from the source machine.

Are you sure you need the 'c' option?


Just another check to make sure that the file was copied without 
error.  Any good reason not to use it ?


--
Christopher Vance



--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] tftp service was deactivated because of looping

[Matt Hyne]

Guys, I am trying to use the tftp-server to load images onto a router, but 
whenever I access the tftpboot machine, tftp dies with the following error 
in the /var/log/messages file.

	tftp service was deactivated because of looping

I updated tftp and tftp-server to 0.28, but it did not seem to make any 
difference.
I am running RH7.0.

Anyone got an ideas ?

Matt

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] tftp service was deactivated because of looping

[Matt Hyne]

Ok, this is what seems to die, god knows why ?

18238 socket(PF_UNIX, SOCK_STREAM, 0)   = 13
18238 connect(13, {sin_family=AF_UNIX, 
path="
   /var/run/.nscd_socket"}, 110) = -1 
ECONNREFUSED (Connection refused)
18238 close(13) = 0

At Monday, 09-12-02 17:27 (+), Chris Samuel wrote:
> Guys, I am trying to use the tftp-server to load images onto a router, but
> whenever I access the tftpboot machine, tftp dies with the following error
> in the /var/log/messages file.
>
> tftp service was deactivated because of looping

OK, this is a message from inetd telling you that it keeps starting the
service up and it keeps dieing for some reason. If inetd needs to restart a
service over a certain number of times in a certain period (normally 1
minute) then it stops it assuming it's broken.

You should check:
1) Are the arguments and path to tftpd correct ?
2) Why is tftpd dieing ?

You could probably do both by using strace.

strace -f -p  -o trace.txt

That should log the system calls of inetd to a file and also trace any
children forked. You can then try the tftp from the router and see what
blows up.

good luck!
Chris



--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Postfix vs Qmail

[Matt Hyne]

To add my 2c worth.

I have actually done this painlessly with sendmail.

It is installed in the DMZ and filters mail for spam and viruses using the 
various blackhole lists and the amavis virus scanner.  It then forwards the 
emails onto in internal host for delivery.

It's been running nicely for months without a single problem.

Matt

At Friday, 31-01-03 15:25 (+1100), Kevin Saenz wrote:
Both programmers know what they are talking about, also have
very large egos, but postfix is less confusing in configuring.
> G'day...
>
> Basically, my biggest two factors for choice are:
> * How easy is it to set up in a DMZ and relay onto a host in the
> internal network?
> * How secure is it.
>
> Wow, qmail and postfix really seem to flame each other in regards to
> security. Some mutual chips on shoulders it would seem. :)
>
> Of course, spam filtering (using a variety of methods, including the
> statistical analysis talked of end of last  year) and integration with
> anti-virus software is also important.
>
> I've ruled out qmail due to its non-Open licensing.
>
> So I guess the main two contenders left would be postfix and exim... I'm
> leaning towards exim, but its only hunch based atm...
>
> Thanks for all help given so far, and for any further discussion.  (You've
> all been great so far!)
>
> Mike
> ---
> Michael S. E. Kraus
> Administration
> Capital Holdings Group (NSW) Pty Ltd
> [EMAIL PROTECTED]
> phone (02) 9955 8000 fax (02) 9955 8144
>
>
>
>
> Jeff Waugh <[EMAIL PROTECTED]>
> Sent by: [EMAIL PROTECTED]
> 31/01/2003 02:49 PM
>
>
> To: [EMAIL PROTECTED]
> cc:
> Subject:Re: [SLUG] Postfix vs Qmail
>
>
> 
>
> > What about Exim?
> >
> > http://www.exim.org/
> >
> > I've heard it's better than both postfix and qmail.
>
> "Different"... It's just another MTA. Whilst postfix is a drop-in
> replacement for sendmail, a lot of sendmail admins will find exim easier
> going, as it's a bit more hackable and flexible. You get used to that with
> sendmail. Exim documentation rocks way hard, and you can do some really
> funky stuff with it.
>
> If you're more anal-retentive, and like your systems clear-cut, ship-shape
> and so on, postfix is probably a better match. There are some things that
> are harder to do (wildly dynamic stuff isn't postfix's cup of tea), but
> it's
> well architected, and easy to understand.
>
> I personally prefer postfix for most tasks, but there are massive, million
> account systems running qmail, postfix, sendmail, exim, zmailer, courier,
> etc.
>
> Choosing the right one for your task is the cunning part.
>
> - Jeff
>
> --
>For a list of reasons why technology has failed to improve our lives,
>   please press 3.
> --
> SLUG - Sydney Linux User's Group - http://slug.org.au/
> More Info: http://lists.slug.org.au/listinfo/slug
--
Kevin Saenz <[EMAIL PROTECTED]>

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Postfix vs Qmail

[Matt Hyne]

Oh yeah, and sendmail is in a chrooted gaol for extra security.

M

At Friday, 31-01-03 21:17 (+1100), Matt Hyne wrote:


To add my 2c worth.

I have actually done this painlessly with sendmail.

It is installed in the DMZ and filters mail for spam and viruses using the 
various blackhole lists and the amavis virus scanner.  It then forwards 
the emails onto in internal host for delivery.

It's been running nicely for months without a single problem.

Matt

At Friday, 31-01-03 15:25 (+1100), Kevin Saenz wrote:
Both programmers know what they are talking about, also have
very large egos, but postfix is less confusing in configuring.
> G'day...
>
> Basically, my biggest two factors for choice are:
> * How easy is it to set up in a DMZ and relay onto a host in the
> internal network?
> * How secure is it.
>
> Wow, qmail and postfix really seem to flame each other in regards to
> security. Some mutual chips on shoulders it would seem. :)
>
> Of course, spam filtering (using a variety of methods, including the
> statistical analysis talked of end of last  year) and integration with
> anti-virus software is also important.
>
> I've ruled out qmail due to its non-Open licensing.
>
> So I guess the main two contenders left would be postfix and exim... I'm
> leaning towards exim, but its only hunch based atm...
>
> Thanks for all help given so far, and for any further discussion.  (You've
> all been great so far!)
>
> Mike
> ---
> Michael S. E. Kraus
> Administration
> Capital Holdings Group (NSW) Pty Ltd
> [EMAIL PROTECTED]
> phone (02) 9955 8000 fax (02) 9955 8144
>
>
>
>
> Jeff Waugh <[EMAIL PROTECTED]>
> Sent by: [EMAIL PROTECTED]
> 31/01/2003 02:49 PM
>
>
> To: [EMAIL PROTECTED]
> cc:
> Subject:Re: [SLUG] Postfix vs Qmail
>
>
> 
>
> > What about Exim?
> >
> > http://www.exim.org/
> >
> > I've heard it's better than both postfix and qmail.
>
> "Different"... It's just another MTA. Whilst postfix is a drop-in
> replacement for sendmail, a lot of sendmail admins will find exim easier
> going, as it's a bit more hackable and flexible. You get used to that with
> sendmail. Exim documentation rocks way hard, and you can do some really
> funky stuff with it.
>
> If you're more anal-retentive, and like your systems clear-cut, ship-shape
> and so on, postfix is probably a better match. There are some things that
> are harder to do (wildly dynamic stuff isn't postfix's cup of tea), but
> it's
> well architected, and easy to understand.
>
> I personally prefer postfix for most tasks, but there are massive, million
> account systems running qmail, postfix, sendmail, exim, zmailer, courier,
> etc.
>
> Choosing the right one for your task is the cunning part.
>
> - Jeff
>
> --
>For a list of reasons why technology has failed to improve our lives,
>   please press 3.
> --
> SLUG - Sydney Linux User's Group - http://slug.org.au/
> More Info: http://lists.slug.org.au/listinfo/slug
--
Kevin Saenz <[EMAIL PROTECTED]>

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Problems with virtual hosts on apache.

[Matt Hyne]

Folks, I have an apache problem that is probably quite simple to fix but
I cannot find the solution.

I have set up several virtual hosts on the box and these work fine,
however I cannot get the correct virtualhost page if I drop the
domainname from the URL.

Eg (these are examples, so don't try accessing them):

I have the following virtual domains:

http://domain1.hyne.com
http://domain2.hyne.com
http://domain3.hyne.com

Now, If I use the FQDN, I get the correct pages.  However if I just use
http://domain2 or http://domain3 then I will always get the webpage for
domain1.

I've played around with the options and searched google to no avail.

Anyone got an ideas ?

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

RE: [SLUG] Problems with virtual hosts on apache.

[Matt Hyne]

Thanks,

Looks like it needed 
   
ServerAlias domain1
 . . .
ServerAlias domain3

I would have though this would have been unnecessary.

Matt

> -Original Message-
> From: Colin Humphreys [mailto:[EMAIL PROTECTED]] 
> Sent: Tuesday, 18 February 2003 2:37 PM
> To: Matt Hyne
> Cc: slug
> Subject: Re: [SLUG] Problems with virtual hosts on apache.
> 
> 
> On Tue, Feb 18, 2003 at 02:33:35PM +1100, Matt Hyne wrote:
> > 
> > Folks, I have an apache problem that is probably quite 
> simple to fix but
> > I cannot find the solution.
> > 
> > I have set up several virtual hosts on the box and these work fine,
> > however I cannot get the correct virtualhost page if I drop the
> > domainname from the URL.
> > 
> > Eg (these are examples, so don't try accessing them):
> > 
> > I have the following virtual domains:
> > 
> > http://domain1.hyne.com
> > http://domain2.hyne.com
> > http://domain3.hyne.com
> > 
> > Now, If I use the FQDN, I get the correct pages.  However 
> if I just use
> > http://domain2 or http://domain3 then I will always get the 
> webpage for
> > domain1.
> > 
> > I've played around with the options and searched google to no avail.
> > 
> > Anyone got an ideas ?
> 
> NameVirtualHost *
> 
> 
>   ServerName domain1.hyne.com
>   ServerAlias domain1
>   DocumentRoot "/home/web/www.synorg.net"
>   CustomLog logs/www.synorg.net-access_log combined
>   ErrorLog logs/www.synorg.net-error_log
>   ServerAdmin [EMAIL PROTECTED]
> 
>   
> Options Indexes FollowSymLinks ExecCGI
> Order allow,deny
> Allow from all
>   
> 
> 
> > 
> > Matt
> > 
> > -- 
> > SLUG - Sydney Linux User's Group - http://slug.org.au/
> > More Info: http://lists.slug.org.au/listinfo/slug
> 
> -- 
> Colin Humphreys   |   <[EMAIL PROTECTED]>   |   http://www.encypher.net/
> PGP key: 0xB6037E5E (fprint: F0EA C979 C9E8 A5C9 EBA7  7C63 6F66 227B)
> 

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Printing problems

[Matt Hyne]

Folks, I have been having trouble printing a particular text file
(c-code) to a dot matrix line printer .

Instead of printing the document, I get the following:

No way to print this type of input files: L -channel Fasttracker 
"oktalyser" module sound

I am assuming this is the magic filter (RH7.0) trying to run the file
through a particular filter but I cannot find where it is doing it.
Anyone got any ideas ?

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

RE: [SLUG] Printing problems

[Matt Hyne]

Correction - it was to my PS laser, not the dot matrix.

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
> On Behalf Of Matt Hyne
> Sent: Thursday, 20 February 2003 10:48 AM
> To: slug
> Subject: [SLUG] Printing problems
> 
> 
> 
> Folks, I have been having trouble printing a particular text file
> (c-code) to a dot matrix line printer .
> 
> Instead of printing the document, I get the following:
> 
> No way to print this type of input files: L -channel Fasttracker 
> "oktalyser" module sound
> 
> I am assuming this is the magic filter (RH7.0) trying to run the file
> through a particular filter but I cannot find where it is doing it.
> Anyone got any ideas ?
> 
> Matt
> 
> -- 
> SLUG - Sydney Linux User's Group - http://slug.org.au/
> More Info: http://lists.slug.org.au/listinfo/slug
> 

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

RE: [SLUG] WORD (.doc) to PDF under Linux

[Matt Hyne]

I've played around with wvPS (and then ps2pdf) but wvPS pretty much
destroys the formatting of most of the word files.

Matt

[EMAIL PROTECTED] wrote:

> 
> 
>> Does anyone know of a reliable way to convert a directory containing
MS
>> Word files to PDF files under Linux.  There appears to be plenty of
>> Windows tools but I cannot find many for Linux.
> 
> You might care to try 'wvPDF' from the wv package
> (http://wvware.sourceforge.net)
> 
> It doesn't do very much by way of preserving formatting, but it might
> suffice as a scriptable solution.
> 
>> I want to write a script that will run a WORD->PDF conversion nightly
so
>> PDF files can be available from a website.
> 
> for dude in *.doc; do
>   OUTFILE=${dude/.doc/.pdf}
>   wvPDF $dude $OUTFILE
> done
> 
> --
> Jan Schmidt  [EMAIL PROTECTED]
> 
> Homer: "No TV and No Beer make Homer something something" Marge: "Go
Crazy?"
> Homer: "Don't mind if I do! rrrarrgghar!"

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] WORD (.doc) to PDF under Linux

[Matt Hyne]

Folks,

Does anyone know of a reliable way to convert a directory containing MS
Word files to PDF files under Linux.  There appears to be plenty of
Windows tools but I cannot find many for Linux.

I want to write a script that will run a WORD->PDF conversion nightly so
PDF files can be available from a website.

Matt

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Secondary MX record - To have or not

[Matt Hyne]

Folks, 

A little Linux unrelated (but I suppose it is since I am using a Linux
server) but I have been having some discussions with a number of vendors
around the place regarding secondary MX records.

There seems to be two camps here - those that do not believe that they
are needed (and thus don't provide them) and those that believe that
they are a mandatory part of a redundant mail system.

I am sitting on the fence (I can see some merits to both sides of the
argument) but I was wondering what the opinion of the sluggers out there
is - would you install one and why ?

Matt

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

RE: [SLUG] Secondary MX record - To have or not

[Matt Hyne]

Robert Tillsley wrote:

> Personally I wouldn't do without one unless email wasn't very
important to
> my organisation.
> 
> Having a secondary MX record (and of course a secondary mail server)
means
> that if your connection dies, or if you have to deal with a hardware
or
> major software failure you can take your mail server offline without
losing
> mail.

Yes but the argument is that in the modern internet we have today, all
SMTP servers will spool locally and retry to send mail for up to 5 days
before giving up - thus a seconary MX does not offer any advantage and
could even open up some bigger problems.

Matt

> 
> Having you're access provider act as the secondary is usually the
easiest
> way to go, and means if you're connection dies between you and your
isp,
> then the isp can still store your mail till your link is up.
> 
> Regards
> 
> Rob T
> 
>> -Original Message-
>> From: Matt Hyne [mailto:[EMAIL PROTECTED]
>> Sent: Friday, 20 June 2003 11:59 AM
>> To: 'slug'
>> Subject: [SLUG] Secondary MX record - To have or not
>> 
>> 
>> Folks,
>> 
>> A little Linux unrelated (but I suppose it is since I am using a
Linux
>> server) but I have been having some discussions with a number of
vendors
>> around the place regarding secondary MX records.
>> 
>> There seems to be two camps here - those that do not believe that
they
>> are needed (and thus don't provide them) and those that believe that
>> they are a mandatory part of a redundant mail system.
>> 
>> I am sitting on the fence (I can see some merits to both sides of the
>> argument) but I was wondering what the opinion of the sluggers out
there
>> is - would you install one and why ?
>> 
>> Matt
>> 
>> --
>> SLUG - Sydney Linux User's Group - http://slug.org.au/
>> More Info: http://lists.slug.org.au/listinfo/slug
>> 
> 
> *
> This mail, including any attached files may contain
> confidential and privileged information for the sole
> use of the intended recipient(s). Any review, use,
> distribution or disclosure by others is strictly prohibited.
> If you are not the intended receipient (or authorised to
> receive information for the recipient), please contact
> the sender by reply e-mail and delete all copies of this message.
> *

--
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Q: Using SQUID to authenticate internet users ?

[Matt Hyne]

Folks,

My father has a small business network with about 12-15 users and a dial-on-demand 
internet connection running from a Linux box to his local ISP.

What he would like to try and do is require PC users wanting to use the web to have to 
authenticate before they can access any external webpages.  This is because he only 
wants a select number of staff to have web access as it is expensive and uses 
bandwidth.

Now, the first thing someone is going to say is "why don't you block the ip addresses 
of the un-authorised users' PCs" - well the staff do a lot of hot-desk work where they 
will not be using the same PC every day.  Also, in other areas, 5 or 6 people use the 
same PC.

My question is - can this be done with squid (and transparently) and does anyone have 
an example config that I can take a look at and try to build my own.

I've seen commercial products that do this - but I would prefer a Linux solution.

Thanks
Matt





--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

RE: [SLUG] Q: Using SQUID to authenticate internet users ?

[Matt Hyne]

We probably do, but why should I buy something when I have a Linux box I can do it on 
already !!!

Matt

At Wednesday, 6/09/2000 03:07 PM (+1000), Stephen Mills wrote:
>Cisco run their printing system on Samba/Linux - we shouldnt complain, they
>arent ;)
>
>--Steve
>
>
>-Original Message-
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, September 06, 2000 1:50 PM
>To: Matt Hyne
>Cc: [EMAIL PROTECTED]
>Subject: Re: [SLUG] Q: Using SQUID to authenticate internet users ?
>
>
>Quoting Matt Hyne <[EMAIL PROTECTED]>:
>
>
>H... 
>
>Surely CISCO have a product to do this ???..:p)
>
>
>--
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug
>
>
>--
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug




--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

RE: [SLUG] Q: Using SQUID to authenticate internet users ?

[Matt Hyne]

I don't know why this topic has to be connected to Cisco.  Basically I am trying to do 
something with Linux - why, because I want to and I can - end of story.  It doesn't 
matter that I can buy something from Cisco - internally or not.

M

At Wednesday, 6/09/2000 08:47 PM (+1100), Jon Biddell wrote:
>On Wed, 06 Sep 2000, Matt Hyne wrote:
>> We probably do, but why should I buy something when I have a Linux box I can do it 
>on already !!!
>
>Staff prices ???.:-)
>
>Note-^^^
>
>
>-- 
>Regards,
>
>Jon
>
>--
>"It is irresponsible to connect a Windows machine
> to the Internet" ... John Wiltshire (SLUG)




--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] disk duplication

[Matt Hyne]

If it is IDENTICAL then yes, otherwise set up the partitions on the target disk, mount 
them and use cpio to copy the files across, then install lilo and that should be it.

I would suggest however that you be booted from a floppy and not have /dev/hda mounted 
so you don't get anything writing while you are copying.

I have used ghost (www.ghost.com) to do some duplicating too - although lately I've 
been having big problems trying to ghost a Win98 box - windows seems to complain when 
I boot the target disk - otherwise it works well and 'supports' Linux.

Matt

At Tuesday, 26/09/2000 03:33 PM (+1000), Michael wrote:
>I have two identical hard drives. One has live OS on it, and the other is
>completely empty. No partitations at all, and no data.
>
>Would the following work;
>
>dd if=/dev/hda of=/dev/hdb bs=64k
>
>To duplicate the entire disk of /dev/hda to the disk /dev/hdb
>
>And once it is done.. would the 2nd disk be bootable? and would the first
>disk be intact?
>
>Thanks
>Michael
>
>
>
>--
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug




--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] disk duplication

[Matt Hyne]

I think the later versions support linux disk resizing.

Matt

At Tuesday, 26/09/2000 04:03 PM (+1000), Bernhard Lüder wrote:
>I have used ghost, but (unlike windows partitions) the Linux partitions do not see, 
>if you increase their size. Or is thier a trick to that, so Linux sees the rest of 
>the partition?
>
>Bernhard
>
>>
>>If it is IDENTICAL then yes, otherwise set up the partitions on the target disk, 
>mount them and use cpio to copy the files across, then install lilo and that should 
>be it.
>>
>>I would suggest however that you be booted from a floppy and not have /dev/hda 
>mounted so you don't get anything writing while you are copying.
>>
>>I have used ghost (www.ghost.com) to do some duplicating too - although lately I've 
>been having big problems trying to ghost a Win98 box - windows seems to complain when 
>I boot the target disk - otherwise it works well and 'supports' Linux.
>>
>>Matt
>>
>
>
>
>--
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug




--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Any Modem Gurus?

[Matt Hyne]

If you can connect and ping, there is nothing wrong with your modem.

Can you ping the DNS addresses in /etc/resolv.conf  - if you can, then it is probably 
a problem with your config.

If you cannot, then I suspect these are the problem.

Matt

At Thursday, 28/09/2000 11:15 AM (+1000), Gregg wrote:
>Dear Slug,
>
>I've got RH6.0 running a server at my house. It's been going great guns for more
>than a year now with no problems. I use masquerade so that I can link on my
>laptop and two other computers and use the server as a gateway to my ISP.
>
>Two nights ago we had a lightning storm (but not actually near us). Since then,
>my modem connects fine to my  ISP but DNS doesn't seem to work. I can ping IP
>addresses but not domain names. I've checked /etc/resolv.conf and all looks
>reasonable (as it has been for a long time).
>
>I rang my ISP's tech support thinking it was probably a fault at their server
>(they fall over frequently during lightning) but they said I was the only one
>reporting a problem from Gosford. They suggested that my modem was damaged (by
>lightning or other reason). I'm sceptacle - is it reasonable that a modem would
>be only partially broken? Could the modem affect the way domain names are
>processed?  I'd guess that domain name processing was a software task.
>
>My laptop has a different (Win)modem and can connect fine to the server (ruling
>out the telephone line) with DNS support.
>
>The modem on the linux box has been very reliable so I'd rather not mess with a
>new one (although its running only at 28.8kbps). Could anyone shed some light on
>what could be going on?
>
>Thanks,
>
>Gregg
>
>
>
>--
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug




--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Re: ADSL

[Matt Hyne]

At Friday, 29/09/2000 05:49 PM (+1100), Angus Lees wrote:
>On Fri, Sep 29, 2000 at 12:06:52PM +1100, Bernhard Lüder wrote:
>> No definite;y not. They would be jeapordies their ISDN product.
>> 
>> If you want a fixed IP go to IPRIMUS or ONE.NET.
>> 
>
>telstra certainly intend to offer static ips
>
>its listed under their "corporate" pricing on their web page as (from
>memory) $20/month. i presume they will also offer it for other
>(business) plans.
>
>when i asked the telstra rep about it i got something about "these
>will be handled through bigpond direct" and the impression that that
>isn't happening yet. (currently its all "bigpond access", and
>apparently they're different companies - i can't keep track)

I've been trying to find out from Telstra whether they plan to offer routed subnets on 
their ADSL service but it seems like no one knows a thing.  I've seen more of the 
Telstra switchboard than I have of their customer service folks.

>anyone know whats become of optus and xyzed.com.au ?

xyx.com.au are only going to sell to ISPs - who will then sell it to the end users.


Matt



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] New RH 7.0 Respin ISO images

[Matt Hyne]

Can anyone tell me what the RedHat 7.0 RESPIN ISO images have that the old ones didn't 
?

ie: 7.0-i386-respin-disc1.iso, 7.0-i386-respin-disc2.iso

Further, there now also seems to be a file called 7.0-i386-upgrade.iso.  
Anyone know what the hell this is ??

As usual, there are no docs to go with them.

Matt



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Running Linux headless

[Matt Hyne]

On Wed, 25 Oct 2000, Peter Faulks wrote:

> 
> I know this subject was discussed recently, but I have a new twist..
> 
> I need to demonstrate a cgi programme to a client. (So I can ask them
> 'whaddya want to happen here')
> 
> I've got a spare box I can stick Linux on, but it's not got enuf grunt for
> X / Netscrape.
> 
> So, I want to run the box as an appache server without X, and plug in a
> mate's notebook to demo the cgi app.
> 
> The box won't boot without a monitor. If I stick a monitor in (without
> turning it on), it boots fine.

When you say it wont boot - what do you mean.  Do you get a BIOS message
if you plug the monitor back in.

Most BIOSes allow you to turn off the BIOS video support, so it
doesn't need a monitor.  

You can even re-direct lilo and the kernel message output to the serial
port and make it really headless like most other unix machines.

I've been running a headless box for ages.

Matt


> 
> There is a card - http://www.realweasel.com/intro.html - that looks pretty
> neat, (but sounds expensive), but all I really want at this stage is to be
> able to boot the box with or without a monitor...
> 
> So, does anyone know of a dongle that plugs into a monitor jack and says
> 'hey I'm a monitor'?, or could one be knocked up by bunging a few resistors
> on an old monitor cable? (and if so how?)
> 
> 
> 
> -- 
> SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> More Info: http://slug.org.au/lists/listinfo/slug
> 



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] Backup solutions

[Matt Hyne]

I am looking at a way of doing a SIMPLE bare metal recovery plan for my development 
linux box.

What I am interested in hearing is people's comments on using 'tar' or 'dump' as the 
backup program and why I would use one over the other. (ie restrictions, advantages 
etc).

My main requirement is that I be able to restore the tape on a totally new machine 
should my old machine go up in smoke.  This would mean that such things as 'dd' cannot 
be used since the new hard drive probably won't be the same size as the old one.

I am currently using "tar" to backup to a QIC tape.  I also have a bootable 
crash-recovery CDROM that I can use to boot a new machine and then restore the tape 
from.

Comments ?

Matt


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Dummy phone line for installfests?

[Matt Hyne]

At Monday, 26/11/2001 10:27 PM (+1100), Ken Foskey wrote:
>Ken Caldwell wrote:
>
>>Perhaps the SLUG committee could consider the purchase of a RingMaster
>>PRO for use at installfests.  That way a "dummy ISP" could be simulated
>>and Newbies could set up ppp. Later they would probably have only to
>>change their username, password and the ISP's phone number to get
>>connected.
>This is a great idea...One more thing sorted out, modem setup etc.

Even better - I may even be able to dig up a router (on loan) with a FXO/FXS interface 
you can use.  

You can then play VoIP and mini-ISP.

Matt




-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] GPS as a time source

[Matt Hyne]

I have a GPS received that I would like to try and use as a time source for NTP.  It 
is a Magellan GPS with a serial data interface.

Anyone know if there is any linux software support to use a (this) GPS as a time 
source for an NTP box ?

Matt


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Network To Network

[Matt Hyne]

At Wednesday, 28/11/2001 11:59 AM (+1100), Lyle Chapman wrote:
>To whomever can help.
>
>I want to connect 2 internal networks together across the internet using 
>ipchains from 2 Linux routers. Is it possible to do this and have it 
>tranparent to the internal networks.
>
>I have tried everything I can think of and have read the HOWTO but cannot 
>get through. If I am inside network 1 I get as far as the router at 
>network 2 but cannot see or ping their internal network.
>
>PLEASE HELP - As I am trying to learn Linux but unfortunately 
>documentation is not aimed at the newbie sometimes!!!
>
>Linux Box 1 is...
>eth0 (internal) 192.168.100.130/255.255.255.0
>eth1 (external) 202.44.164.38/255.255.255.240
>
>Linux Box 2 is...
>eth0 (internal) 192.168.100.131/255.255.255.0
>eth1 (external) 202.44.164.39/255.255.255.240

Two different subnets makes life hard.  I am also suprised that the external network 
addresses are on the same subnet - is this on the same ISP ?

If the two networks are truly connected on the same external subnet then life is 
pretty easy however since you are running your traffic over a public network it is 
well recommended that you use IPSec for security.

To get basic routing working, you could divy your 192.x.x.x network into two smaller 
subnets, or renumber the one at the other site.  Then all you would really have to do 
is add some static routes into the linux box at each end pointing to the other 
router's gateway (external) address.

Matt




>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

RE: [SLUG] Network To Network

[Matt Hyne]

At Wednesday, 28/11/2001 12:14 PM (+1100), George Vieira wrote:
>You can't route internal IPs over the internet... you MUST use a tunnel or
>some kind...

Well, that depends.  From his config, both external IPs were on the same subnet so the 
ISPs router probably could be bypassed using a static route.

We need to know more about the public side of the network.

>You could use vpnd which uses blowfish I think... haven't used it much
>before but I have used it..

The only VPN solution I would recommend would be IPSec - ie FreeS/Wan.  Others have a 
number of significant holes.

Matt



>thanks,
>George Vieira
>Systems Manager
>Citadel Computer Systems P/L
>
>
>-Original Message-
>From: DaZZa [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, 28 November 2001 12:12 PM
>To: Lyle Chapman
>Cc: [EMAIL PROTECTED]
>Subject: Re: [SLUG] Network To Network
>
>
>On Wed, 28 Nov 2001, Lyle Chapman wrote:
>
>> To whomever can help.
>>
>> I want to connect 2 internal networks together across the internet using
>> ipchains from 2 Linux routers. Is it possible to do this and have it
>> tranparent to the internal networks.
>>
>> I have tried everything I can think of and have read the HOWTO but cannot
>> get through. If I am inside network 1 I get as far as the router at
>> network 2 but cannot see or ping their internal network.
>>
>> PLEASE HELP - As I am trying to learn Linux but unfortunately
>> documentation is not aimed at the newbie sometimes!!!
>
>As far as I know, you can't do this with just ipchains - and if you could,
>it'd be hideously insecure. I could be wrong about the first statement.
>I'm not wrong about the second.
>
>You can, however, do it via FreeS/WAN. Check out http://www.freeswan.org
>for details and software.
>
>Basically, you need to run a secure VPN encrypted across the internet. If
>you don't do this, your commercial data is toast - it can be collected by
>anyone with enough nouse to run a sniffer or data capture device on your
>networks. Your network can also be compromised from outside much more
>easily.
>
>DaZZa
>
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] can I run 2 apache website in the same linux server

[Matt Hyne]

At Tuesday, 4/12/2001 03:06 PM (+1100), Xiaolu Zhang wrote:

>can I run 2 apache website in the same linux server,  if yes, how can I ?

Yes: 

http://httpd.apache.org/docs/vhosts/

Matt



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] redhet crash after power cut

[Matt Hyne]

At Tuesday, 4/12/2001 10:13 PM (+1100), Tony Green wrote:
>* This one time, at band camp, Craige McWhirter said:
>> On Tue, 2001-12-04 at 09:04, Xiaolu Zhang wrote:
>> > Last night due to the power cut the redhat linux 6.2 webserver was switch
>> > off without showdown. Now I got a error saying that one of the patition "
>> > has system file error ,  please run fsck manually "  . what should I do ?
>> 
>> While not an immediate solution but something well worth looking at if you 
>> are at the stage of building your kernels, is the XFS journalling file 
>> systems. Implementing a journalling file system will make recovery from 
>> unexpected outages a whole lot more pleasant.
>>   
>
>And since you are running a redhat 6.2 system (unless you have kept VERY
>up to date with patches) - an update may well be in order.
>
>(I was going to suggest this in my first post - but felt a 'this
>wouldn't happen if you had [xfs|ext3|reiser]' wouldn't go down well)

It was my impression that none of the Journalling fs are recommended for production 
environments just yet.

If no so - correct me - I am interested to know.

Matt

>;-)
>
>Greeno
>-- 
>Greeno <[EMAIL PROTECTED]>
>GnuPG Key :  1024D/B5657C8B 
>Key fingerprint = 9ED8 59CC C161 B857 462E  51E6 7DFB 465B B565 7C8B
>
>Imagine working in a secure environment and finding the string 
>_NSAKEY in the OS binaries without a good explanation
>-Alan Cox 04/05/2001
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Distributed passwords

[Matt Hyne]

Guys, I have number of linux boxes here and I want to only have one place that 
username/passwords are stored (for admin reasons).  Rather than go the full overkill 
and set up NIS, is LDAP (or something else) a better alternative.

Anyone with experience - any interesting links ?

Matt

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Problems migrating to LDAP passwords

[Matt Hyne]

I have been trying to migrate a linux box over to LDAP passwords but I have been 
running into a few problems with the migration stuff.

I am using RH Linux 7.0 and I have the LDAP database up and running ok.  The problem 
is when I use the migration scripts (in /usr/share/openldap/migration or the latest 
from www.padl.com) they attempt to use attribute types or object classes that are not 
supported by my ldap schema.

If I get the name of afailed attribute (eg objectClass 'mailRecipient') and search the 
schemas for this I get no result - so it looks like RH have packaged the migration 
tools without including the proper schemas.

Anyone had any luck with using the (padl) migration tools and can offer their advice ?

Matt

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Problems migrating to LDAP passwords

[Matt Hyne]

At Wednesday, 27-03-02 13:13 (+1100), Matthew Palmer wrote:
>Argh!  Newlines were invented for a reason, dammit!
>
>On Wed, 27 Mar 2002, Matt Hyne wrote:
>
>> If I get the name of afailed attribute (eg objectClass 'mailRecipient')
>> and search the schemas for this I get no result - so it looks like RH have
>> packaged the migration tools without including the proper schemas.
>
>Schemas are defined by your LDAP server, not the application.
>
>> Anyone had any luck with using the (padl) migration tools and can offer
>> their advice ?
>
>Either turn off schema checking or include the files which define the
>appropriate schemas.  Files containing schemas (is the correct plural
>schema?) usually end in .schema (and are in /etc/ldap/schema on my Debian
>system, but YMMV).

Yep - except that the schema files for the attribute types used by the PADL migration 
tools are not included in the RH LDAP distribution - doh !

Anyway, I have hacked the migration scripts to remove the unknown attributes and the 
database build ok. 

The only problem I have now is getting pam_ldap to access the LDAP database. It tells 
me it cannot connect when I try to authenticate via LDAP.  I believe this must be 
something to do with /etc/ldap.conf or /etc/openldap/ldap.conf but I don't know which 
one yet.

Matt


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Problems migrating to LDAP passwords

[Matt Hyne]

At Wednesday, 27-03-02 14:12 (+1100), Matthew Palmer wrote:
>Newlines!!!

Newlines what ?  Does your mailer have problems wrapping text ?
I've never had a complaint from anyone else.

>> The only problem I have now is getting pam_ldap to access the LDAP
>> database. It tells me it cannot connect when I try to authenticate via
>> LDAP.  I believe this must be something to do with /etc/ldap.conf or
>> /etc/openldap/ldap.conf but I don't know which one yet.
>
>You're not using a 1.2.x OpenLDAP server are you?

No, I am using 2.0.21 but I finally did get it to work by reverting 
to unencrypted transactions on port 389.  I cannot seem to get the 
LDAP over SSL stuff to work.  Must be something to do with certs. 

I will have to get the security sorted out as I am not to happy about
leaving it open.  I also want to tie squid, apache and radius into
using the LDAP database for authentication and finally find something
that I can use to nicely manage the users and groups now in LDAP.

One other question.  From memory, in NIS we can control what groups of 
users can log into a machine using netgroups and by prefixing the 
username/group with +.  Is there a way of doing this with LDAP ?  Ie, all
users are in the ldap directory and I have two machines which I would like
to restrict a subset of users to.

Matt

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] NFS mounting between RH7.0 and RH7.2

[Matt Hyne]

I am trying to mount a filesystem from a RH7.2 system on a RH7.0 
machine.  However mount fails with the following errors:

[root@panda /mnt]# mount -t nfs wormhole:/export/backup /mnt/misc
mount: wrong fs type, bad option, bad superblock on wormhole:/export/backup,
or too many mounted file systems

and -

Mar 30 17:50:07 panda kernel: NFS: NFSv3 not supported.
Mar 30 17:50:07 panda kernel: NFS: cannot create RPC transport.
Mar 30 17:50:07 panda kernel: nfs warning: mount version older than kernel
Mar 30 17:50:08 panda kernel: nfs: too small RPC reply size (0 bytes)
Mar 30 17:50:08 panda kernel: nfs_get_root: getattr error = 5
Mar 30 17:50:08 panda kernel: NFS: cannot create RPC transport.

Now, the blindly obvious is that the RH7.2 machine supports NFSv3 and RH7.0 
does not.

Is there a way to make the RH7.2 machine support the same version of NFS as 
is on RH7.0 - ie backwards compatibility ?

Matt


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Redhat 7.2 crashes my computer

[Matt Hyne]

Are you using the default Redhat kernel ?

I was having lots of freezes/crashes until I upgraded the kernel and now it 
has been running for 4 weeks without a problem.

I was pretty sure it was not the machine (P90) since it had been running 
RedHat 5.2 since it was released and had general uptimes of approximately 
200+ days.

Matt

At Monday, 08-04-02 12:01 (+1000), Karl Bowden wrote:
>I have a P3-1Ghz with a GeForce2 MX400 and 512Mb PC133 ram.
>I have her configured as follows:
>hda1 : 6gb : Redhat Linux 7.2 with Ximian Gnome
>hda2 : 1gb : Linux Swap
>hda3 : 16.5gb : Windows XP
>hda4 : 16.5gb : Windows 98SE
>
>My /home and /var/cache/redcarpet are mounted by nfs from my server, and I
>use NIS for account managment. And all of the OS's start nicely now thanks
>to grub :-). But my prob is that after putting linux under some load, (eg,
>open 10 or so mozilla windows as well as evolution) it will crash. The
>cursor freezes, and the computer does not respond to a telnet session or
>ping or anything. There are no enteries in the log to explain it. I know
>that it is not my ram because I swapped it with my other computer (2 x 128mb
>PC133) and she still does it (it also swapped my vid card with another vid
>card the same but it made no dif either). I have also tried recompiling the
>kernel, and putting back on RH7.1 but she still crashes. Yet she rock solid
>under winxp and 98, even when editing 600mb photos in photoshop.
>
>Any suggestions? I dont mind having to reformat because all of my home data
>is on the server.
>
>Regards,
>Karl Bowden
>
>
>
>--
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Redhat 7.2 crashes my computer

[Matt Hyne]

I would not suggest upgrading RH kernels using RPM.

Honestly, I would download the latest kernel source from 
mirror.aarnet.edu.au (I am using 2.4.18 at the moment) and build my own - 
at least then you know what you are building into it.

If you have not built a kernel before, it is pretty easy and there are many 
docs around (including the docs included with the kernel source).

Email me if you need a hand.

Matt.

At Monday, 08-04-02 15:17 (+1000), Karl Bowden wrote:
>I am using the default kernel at the mo. If I were to upgrade the kernel is
>there an rpm from redhat for the latest kernel or do I just have to wing it?
>
> >
> > Are you using the default Redhat kernel ?
> >
> > I was having lots of freezes/crashes until I upgraded the kernel and now
>it
> > has been running for 4 weeks without a problem.
> >
> > I was pretty sure it was not the machine (P90) since it had been running
> > RedHat 5.2 since it was released and had general uptimes of approximately
> > 200+ days.
> >
> > Matt
> >
> > At Monday, 08-04-02 12:01 (+1000), Karl Bowden wrote:
> > >I have a P3-1Ghz with a GeForce2 MX400 and 512Mb PC133 ram.
> > >I have her configured as follows:
> > >hda1 : 6gb : Redhat Linux 7.2 with Ximian Gnome
> > >hda2 : 1gb : Linux Swap
> > >hda3 : 16.5gb : Windows XP
> > >hda4 : 16.5gb : Windows 98SE
> > >
> > >My /home and /var/cache/redcarpet are mounted by nfs from my server, and
>I
> > >use NIS for account managment. And all of the OS's start nicely now
>thanks
> > >to grub :-). But my prob is that after putting linux under some load,
>(eg,
> > >open 10 or so mozilla windows as well as evolution) it will crash. The
> > >cursor freezes, and the computer does not respond to a telnet session or
> > >ping or anything. There are no enteries in the log to explain it. I know
> > >that it is not my ram because I swapped it with my other computer (2 x
>128mb
> > >PC133) and she still does it (it also swapped my vid card with another
>vid
> > >card the same but it made no dif either). I have also tried recompiling
>the
> > >kernel, and putting back on RH7.1 but she still crashes. Yet she rock
>solid
> > >under winxp and 98, even when editing 600mb photos in photoshop.
> > >
> > >Any suggestions? I dont mind having to reformat because all of my home
>data
> > >is on the server.
> > >
> > >Regards,
> > >Karl Bowden
> > >
> > >
> > >
> > >--
> > >SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> > >More Info: http://lists.slug.org.au/listinfo/slug
> >
> >
> > --
> > SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> > More Info: http://lists.slug.org.au/listinfo/slug
> >


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] tar backups to tape

[Matt Hyne]

Generally, tapes are streaming, so it is possible that if the transfer rate 
across the network is slow then more tape may be required for the same 
amount of data.

Really - you need to determine the bottleneck - can you tar from one 
machine to the HDD on another and see how long it takes - and then locally 
tar this data to the tape drive.  That should give you some good ideas of 
where the performance bottleneck is.

At Tuesday, 09-04-02 16:42 (+1000), Gonzalo Servat wrote:
>Hi All
>
>I was performing backups across the network using Arkeia until one day
>the wrong tape was inserted and the whole tape cycle went haywire (as it
>requires you enter the right tape with the right label or you get a nice
>email in the morning asking you to insert the right tape - when infact,
>I DID enter the right tape) and so I got pretty p@#@ed off at Arkeia and
>decided to switch to using tar (as I can insert any tape and it will
>write, plus tar is pretty universal accross *nix systems so I can
>restore on any system)
>
>Aaaanyway, the point of my story is... it would normally take ~2.5hours
>to backup 33GB across the network using Arkeia to tape.
>With tar, it takes over 8 hours at which point it gives me a nice "no
>space left on device" message on the screen.
>
>I'm not using gzip compression. I've tried this and it doesn't help the
>speed problem (or capacity problem)
>
>The backup unit is an Ecrix VXA-1 using V17 tapes.
>
>Any ideas??
>
>Thanks in advance!
>
>Regards,
>
>Gonzalo.
>
>
>--
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] tar backups to tape

[Matt Hyne]

If Arkeia is backing up at 180Mb/min then this is equivalent to 3Mb/s, 2-3x 
faster than tar.

Is Arkeia using compression ???  It is possible, and that may be why it is 
reporting faster transfer times to tape than tar is.

You can also play with the tar blocking factor - it will depend on the 
network transfer speed.

The other thing is, what sort of tape drive are you using, what sort of 
controller ?  What is the maximum rated transfer rate for the tape drive ?

Another stupid question - is Arkeia doing a FULL backup or an incremental ?

 From the look of this, you network is probably not the bottleneck.  I 
would also suggest you take a look at ctar (do a google search).  It costs 
money but you can install a trial version and compare that.

Matt

At Wednesday, 10-04-02 09:43 (+1000), Gonzalo Servat wrote:
>Hi Matt
>
>I took your advice and tried backing up / on the backup server
>(excluding /dev and /proc of course) to tape and tar reported:
>
>Total bytes written: 1427005440 (1.3GB, 1.2MB/s)
>
>It took about 15 minutes to complete this. My fileserver has about 30GB
>worth of data. So, it would take approximately 6 hours to complete using
>tar. This is just for the fileserver. It's actually taking a lot longer
>than 6 hours (since it has to come over through the network) but
>anyway... using Arkeia, I can backup the fileserver AND mail server
>(which is only an extra 3 or so gigs) in 2 hours and 20 minutes. Arkeia
>reports the speed was 180MB/min.
>
>There's something I'm doing wrong here and Arkeia is doing right because
>I don't understand how Arkeia can backup ~160 faster than tar.
>
>Any further ideas??
>
>
>
>On Tue, 2002-04-09 at 17:56, Matt Hyne wrote:
> >
> > Generally, tapes are streaming, so it is possible that if the transfer 
> rate
> > across the network is slow then more tape may be required for the same
> > amount of data.
> >
> > Really - you need to determine the bottleneck - can you tar from one
> > machine to the HDD on another and see how long it takes - and then locally
> > tar this data to the tape drive.  That should give you some good ideas of
> > where the performance bottleneck is.
> >
> > At Tuesday, 09-04-02 16:42 (+1000), Gonzalo Servat wrote:
> > >Hi All
> > >
> > >I was performing backups across the network using Arkeia until one day
> > >the wrong tape was inserted and the whole tape cycle went haywire (as it
> > >requires you enter the right tape with the right label or you get a nice
> > >email in the morning asking you to insert the right tape - when infact,
> > >I DID enter the right tape) and so I got pretty p@#@ed off at Arkeia and
> > >decided to switch to using tar (as I can insert any tape and it will
> > >write, plus tar is pretty universal accross *nix systems so I can
> > >restore on any system)
> > >
> > >Aaaanyway, the point of my story is... it would normally take ~2.5hours
> > >to backup 33GB across the network using Arkeia to tape.
> > >With tar, it takes over 8 hours at which point it gives me a nice "no
> > >space left on device" message on the screen.
> > >
> > >I'm not using gzip compression. I've tried this and it doesn't help the
> > >speed problem (or capacity problem)
> > >
> > >The backup unit is an Ecrix VXA-1 using V17 tapes.
> > >
> > >Any ideas??
> > >
> > >Thanks in advance!
> > >
> > >Regards,
> > >
> > >Gonzalo.
> > >
> > >
> > >--
> > >SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> > >More Info: http://lists.slug.org.au/listinfo/slug
> >
> >
> > --
> > SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> > More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] tar backups to tape

[Matt Hyne]

You can try using tar with the I flag - that will use bzip2 compression.

However, if you value your data - NEVER use compression on a backup - 
should part (ie one bit) of the backup be corrupted (common with tapes) the 
whole archive is useless.

Matt

At Wednesday, 10-04-02 12:13 (+1000), Gonzalo Servat wrote:
>Yes, Arkeia claims it's using 1.2 compression (with LZ1 I think). What
>sort of compression could I use with tar to achieve similar results to
>Arkeia? I tried compress & gzip and it went just as slow
>
>What's the switch to play with the blocking factor?
>
>Also, I tried setting the block size to 2048 to see if it speeds it up
>and it didn't help at all..
>
>It's an Ecrix VXA-1 Tape Drive on a Adaptec 2940 SCSI Card.
> From dmesg:
>
>scsi0 : Adaptec AIC7XXX EISA/VLB/PCI SCSI HBA DRIVER, Rev 6.2.4
> 
> aic7870: Single Channel A, SCSI Id=7, 16/253 SCBs
>
>   Vendor: ECRIX Model: VXA-1 Rev: 2848
>   Type:   Sequential-Access  ANSI SCSI revision: 02
>(scsi0:A:4): 10.000MB/s transfers (10.000MHz, offset 15)
>st: Version 20011103, bufsize 32768, wrt 30720, max init. bufs 4, s/g
>segs 16
>Attached scsi tape st0 at scsi0, channel 0, id 4, lun 0
>
>Arkeia *is* doing a full backup.
>
>I'll give ctar a go. Maybe tar can't compress as well as Arkeia can?
>
>Thanks again Matt.
>
>
>On Wed, 2002-04-10 at 10:47, Matt Hyne wrote:
> >
> > If Arkeia is backing up at 180Mb/min then this is equivalent to 3Mb/s, 
> 2-3x
> > faster than tar.
> >
> > Is Arkeia using compression ???  It is possible, and that may be why it is
> > reporting faster transfer times to tape than tar is.
> >
> > You can also play with the tar blocking factor - it will depend on the
> > network transfer speed.
> >
> > The other thing is, what sort of tape drive are you using, what sort of
> > controller ?  What is the maximum rated transfer rate for the tape drive ?
> >
> > Another stupid question - is Arkeia doing a FULL backup or an incremental ?
> >
> >  From the look of this, you network is probably not the bottleneck.  I
> > would also suggest you take a look at ctar (do a google search).  It costs
> > money but you can install a trial version and compare that.
> >
> > Matt
> >
> > At Wednesday, 10-04-02 09:43 (+1000), Gonzalo Servat wrote:
> > >Hi Matt
> > >
> > >I took your advice and tried backing up / on the backup server
> > >(excluding /dev and /proc of course) to tape and tar reported:
> > >
> > >Total bytes written: 1427005440 (1.3GB, 1.2MB/s)
> > >
> > >It took about 15 minutes to complete this. My fileserver has about 30GB
> > >worth of data. So, it would take approximately 6 hours to complete using
> > >tar. This is just for the fileserver. It's actually taking a lot longer
> > >than 6 hours (since it has to come over through the network) but
> > >anyway... using Arkeia, I can backup the fileserver AND mail server
> > >(which is only an extra 3 or so gigs) in 2 hours and 20 minutes. Arkeia
> > >reports the speed was 180MB/min.
> > >
> > >There's something I'm doing wrong here and Arkeia is doing right because
> > >I don't understand how Arkeia can backup ~160 faster than tar.
> > >
> > >Any further ideas??
> > >
> > >
> > >
> > >On Tue, 2002-04-09 at 17:56, Matt Hyne wrote:
> > > >
> > > > Generally, tapes are streaming, so it is possible that if the transfer
> > > rate
> > > > across the network is slow then more tape may be required for the same
> > > > amount of data.
> > > >
> > > > Really - you need to determine the bottleneck - can you tar from one
> > > > machine to the HDD on another and see how long it takes - and then 
> locally
> > > > tar this data to the tape drive.  That should give you some good 
> ideas of
> > > > where the performance bottleneck is.
> > > >
> > > > At Tuesday, 09-04-02 16:42 (+1000), Gonzalo Servat wrote:
> > > > >Hi All
> > > > >
> > > > >I was performing backups across the network using Arkeia until one day
> > > > >the wrong tape was inserted and the whole tape cycle went haywire 
> (as it
> > > > >requires you enter the right tape with the right label or you get 
> a nice
> > > > >email in the morning asking you to insert the right tape - when 
> infact,
> > > > >I DID enter the right tape) and so I got

Re: [SLUG] Sendmail giving 553 rejection errors.

[Matt Hyne]

The problem was that I missed the full-stop on the end of the MX record in 
the DNS records.  IT is fixed now.

The only question I have is:  With this feature enabled, won't sendmail 
refuse to accept mail if the internet connection goes down, and thus it 
cannot reach external DNS servers ?

Matt

At Thursday, 11-04-02 10:58 (+1000), Jobst Schmalenbach wrote:
>On Tue, Apr 09, 2002 at 05:46:44PM +1000, Matt Hyne ([EMAIL PROTECTED]) wrote:
> >
> > Folks, when I turn _OFF_ the sendmail feature
> >
> > FEATURE('accept_unresolvable_domains')dnl
>
>Well if it works without this than sendmail will accept domains
>it cannot resolve and thus send them, meaning that you can become
>a relay for something you might not want 
>
>If you seitch this on and sendmail refuses to send, its actually good.
>
>try to do:
>
>  nslookup mydomain.com.au
>
>ON the machine you running sendmail on. If this
>cant get resolved you found your problem, and I bet you will.
>
>
>
>jobst
>
>
>--
>The future isn't what it used to be (it never was).
>
>  __, Jobst Schmalenbach, [EMAIL PROTECTED], Technical Director
>_ _.--'-n_/   Barrett Consulting Group P/L & The Meditation Room P/L
>  -(_)--(_)=  +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia
>--
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Backup Mail servers (OT)

[Matt Hyne]

Folks, finally got my old man's business online and everything except the 
desktops is running linux (database, gateway, servers).

I'm setting up the mail and DNS.  The ISP says they cannot give us a backup 
mail server to host a secondary MX.

Does anyone know of any (reliable) groups, ISPs or other organisations that 
will provide backup/secondary mail servers and secondary DNS services ?

Does anyone do any reciprocal agreements (you backup me and I will do you) ?
My next resort is one of the 'free' services.

Matt

-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Problems with LDAP authentication

[Matt Hyne]

I have been having a problem with Red Hat 7.2 configured for LDAP 
authentication.

The authentication works.  However, if the LDAP server is down, I cant even 
log in as root.

root and other users are listed in the /etc/passwd and /etc/shadow files, 
however these do not seem to be read if LDAP is down (even though the LDAP 
server does not even contain root or these other users).

Here is (part of) my nsswitch.conf file:

# The following is required to make the system
# check the local passwd files for netgroups then
# the LDAP server...
#
passwd: files ldap
passwd_compat: ldap
shadow: files ldap
group:  files ldap

and the pam stuff is:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
authsufficient/lib/security/pam_unix.so likeauth nullok md5 shadow
authsufficient/lib/security/pam_ldap.so use_first_pass
authrequired  /lib/security/pam_deny.so

account sufficient/lib/security/pam_unix.so
account sufficient/lib/security/pam_ldap.so
account required  /lib/security/pam_deny.so

passwordrequired  /lib/security/pam_cracklib.so retry=3
passwordsufficient/lib/security/pam_unix.so nullok use_authtok md5 
shadow
passwordsufficient/lib/security/pam_ldap.so use_authtok
passwordrequired  /lib/security/pam_deny.so

session required  /lib/security/pam_limits.so
session required  /lib/security/pam_unix.so
session optional  /lib/security/pam_ldap.so

Anyone had any experience that can help.

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Problems with Telstra Cable that have been happening over the last 3 days

[Matt Hyne]

Do Telstra still use this ugly heartbeat - thought they were going to scrap 
it because it stops people using VPN software.

Matt

At Sunday, 05-05-02 09:20 (+1000), Paul Robinson wrote:
>Hi Sluggers,
> I was wondering if anyone else has been having trouble connecting to 
> Bigpond cable lately. Since about Thursday I've barely been able to 
> connect. I'm running RedHat 7.1 with the default kernel and I've had 
> cable working since January with the service being down only a couple of 
> times during that time and each of those times I've been able to check 
> the web and see that there was a problem with the network.
>
>Now though there is no problem with their network and if I use my win2k 
>box to connect with their software everything works fine (hence how I am 
>sending this message). One thing of note, and I believe this may be the 
>problem, is that I have had the same IP address since I joined BPC and set 
>it up for linux. From what I've read about dhcpcd this is entirely 
>possible as it tries to use the same IP in cache whenever it query's the 
>server. With the win2k box though each time I connect I get a new IP and 
>this has been over a period of the 4 days of no Linux.
>
>I've tried getting dhcpcd to get a new ip by using the -k option to get it 
>to release the current ip and start it up with the -n option but all it 
>does is make the current ip work for maybe 6hrs then the whole thing dies 
>again. It says it's receiving heartbeats too quickly and that it's 
>discarding and then directly after that it says it's receiving a bandly 
>structured packet and discarding that. At this point, if I was connected, 
>I no longer am and I'm cannot get back on for up to 12 hrs.
>
>I have all my services blocked from the outside yet I still notice 
>multiple attempts to port 80 by telstra cable ip's. n.b. icmp is still 
>allowed since that would muck up heartbeats. The only port allowed to 
>connect from outside is the ip of my dce-server on port 5050 to any port 
>on my box. Of note though, even if I shut down the firewall completely 
>nothing changes.
>
>So after explaining my plight, 2 questions.
>
>1) Is anyone else having issues with bpalogin and telstra cable or is it 
>just me.
>
>2) Is there any way to force dhcpcd to get a new IP? I have read the man 
>page for it and the -k -n two options seem to be the only way but that 
>doesn't work for me.
>
>Any help is greatly appreciated.
>
>Cheers,
>Paul


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Problems with Telstra Cable that have been happening over the last 3 days

[Matt Hyne]

There are a number of ways around it - but it is not the nicest way to do 
it.  Split-horizon will work (different routes for secure and Internet 
traffic) - but like mine, many orgs don't allow this for security reasons.

It would be much better if Telstra just scrapped it.

I've thought about adding support for this into Cisco's IOS - but getting 
time is the problem.

Matt

At Tuesday, 07-05-02 20:32 (+1000), Craige McWhirter wrote:
>On Tue, 2002-05-07 at 14:48, Matt Hyne wrote:
> >
> > Do Telstra still use this ugly heartbeat - thought they were going to 
> scrap
> > it because it stops people using VPN software.
>
>Matt, yes they do still use the far king heart beat (imbeciles) but we
>have found a way around it that suits us nicely. It involves cap ex
>though and I don't wont to give the manufacturer free advertising by
>talking about them on list (a wanabee Cisco competitor at that).
>
>Drop me a line and I'll spec out how our VPN users go about there thing
>and why it suits us. You'll probably just end up using your employers
>equivalent device ;)
>
>--
>
>Cheers,
>   Craige.
>
>GPG Key fingerprint = C206 904F 5231 2F2E 8DAA  F094 5879 71B5 0960 CF37
>
>Babcock & Brown - http://babcockbrown.com.au/


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Pacific Internet ADSL

[Matt Hyne]

Is anyone running Pacific Internet ADSL ?

I am tossing around a few ADSL providers looking for the ones with good 
rates vs good performance.

So far, Pacific Internet and Netspace are my preferred, however when I 
ping/traceroute Pacific's servers (a week or so ago), I get very long 
response times (>100ms) whereas Netspace are a lot less (<30ms).

I would like to try a ping and traceroute test to a Pacific Internet ADSL 
endpoint to test their network performance prior to ordering a service.

If anyone can spare a couple of pings on their gateway, could you please 
let me know the IP address.

I would also welcome any feedback either carrier's network, support, 
performance.

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Sendmail question

[Matt Hyne]

mailertable is probably overkill - I would suggest the MAIL_HUB stuff if 
you only have a single machine you want to forward it to.

At Friday, 17-05-02 13:49 (+1000), Jobst Schmalenbach wrote:
>On Tue, May 14, 2002 at 12:02:46PM +1000, Peter McCarthy 
>([EMAIL PROTECTED]) wrote:
> > Howdy all
> >
> > How do I go about configuing Sendmail to forward all mail it is currently
> > receiving to another mailserver that is behind our Linux proxy server ?
> > I am running RH 7.1
> > I have checked the sendmail.org website, and the closest thing I could 
> find was
> > define(`MAIL_HUB', `mailer:hostname')
> > But I am unsure if this is going to do what I need.
>
>
>
>use FEATURE(mailertable) -> http://www.sendmail.org/m4/mailertables.html
>
>1) mailertable entry
>mailertable file:
># where to send messages for the.domain
>the.domainesmtp:[aaa.bbb.ccc.ddd]
>
>2) access file entries [ syntax for sendmail 8.10+]
>access file:
># accept messages for the.domain
>to:the.domainRELAY
># relay messages from internal server ip address
>aaa.bbb.ccc.ddd   RELAY
>
>
>
>jobst
>
>
>
>
>
>--
>Bowman: Open the pod bay doors, HAL.
>
>  __, Jobst Schmalenbach, [EMAIL PROTECTED], Technical Director
>_ _.--'-n_/   Barrett Consulting Group P/L & The Meditation Room P/L
>  -(_)--(_)=  +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia
>--
>SLUG - Sydney Linux User's Group - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] BPB ADSL & PPPoA

[Matt Hyne]

 From what I understand, these are the Speedtouch Pro models which can do 
the authentication themselves - so you do not need to do anything on the 
client side. For PPPoA, you need an ATM connection which is your modem's 
DSL port.

Matt


At Monday, 27-05-02 14:15 (+1000), Howard Lowndes wrote:
>Has anyone had any joy getting Linux to talk to the Telstra ADSL 4 port
>modem in PPPoA mode.  From what I am reading on their web site it _has_ to
>be that other OS and they dont even list Mac.
>
>--
>Howard.
>LANNet Computing Associates - Your Linux people
>Contact detail at http://www.lannetlinux.com
>"Life is like a hot bath - it's great when you're in it,
>  but the longer you stay the more wrinkled you become."
>   - Garfield
>
>--
>SLUG - Sydney Linux User's Group - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Tsk tsk Cisco...gpl breach..

[Matt Hyne]

You will probably find it is actually RH Linux as Cisco has a partnership 
agreement with RedHat.

At Thursday, 30-05-02 21:58 (+1000), Ben Buxton wrote:

>Cisco seems to be breaching the GPL by using a Linux distribution
>in one of their devices and not mentioning GPL, Linux or source
>anywhere:
>
>http://www.theinquirer.net/29050203.htm
>
>I have access to Cisco downloads and confirmed that this is indeed
>true. Excepts from 'strings' on their (source-less) binary is here:
>
>http://www.cactii.net/~bb/cisco-nam-strings.txt
>
>It contains insteresting stuff..
>
>--
>Ben Buxton - Random Network Person
>
>--
>SLUG - Sydney Linux User's Group - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Booting problem with SCSI machine

[Matt Hyne]

I have been having trouble getting a machine to boot lilo (or anything from 
HDD) after an install of RH7.3.

Lilo is installed (and I ran it again for good measure) but the only way I 
can get linux to boot is to use the boot floppy I created at install time.

The machine is a PII-400 with an Intel MB, NCR SCSI adaptor (sym53c8xx) and 
a 4.3Gb HDD.

I also tried recreating the initrd (and it is in lilo) but still it tells 
me that there is no operating system found when it try to boot the disk.

Any ideas ?

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] CDRW on Linux as a backup medium.

[Matt Hyne]

Has anyone successfully used a CDRW on linux for backups ?

I am looking to buy one of the cheap LG (IDE) ones now on offer.  However 
the drive docs state that it is only capable of reading CDs under Linux and 
you need Windows XX to record or rewrite.

Can a CDRW be formatted under Linux ?

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Booting problem with SCSI machine

[Matt Hyne]

At Tuesday, 25-06-02 18:20 (+1000), Terry Collins wrote:
>Matt Hyne wrote:
>
> > The machine is a PII-400 with an Intel MB, NCR SCSI adaptor (sym53c8xx) and
> > a 4.3Gb HDD.
>
>Does the kernel specifically recognise the sym53c8xx ?
>either it doesn't and/or this particular SCSI card is not bootable.

Well, the kernel does have the support - since it is also on the boot floppy.

I know the SCSI card is bootable as before linux it was running BSD and 
booting this from the HDD.

(The SCSI controller is on board the Intel motherboard)

Matt


>--
>Terry Collins {:-)}}} Ph(02) 4627 2186 Fax(02) 4628 7861
>email: [EMAIL PROTECTED]  www: http://www.woa.com.au
>Wombat Outdoor Adventures 
>
>  "People without trees are like fish without clean water"


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Booting problem with SCSI machine

[Matt Hyne]

Thanks Glen for the in-depth description.

All make sense, but I am still at a loss.

1. The boot bios is enabled.
2. SCSI device is on ID0.
3. SCSI runs fine once linux is loaded from a floppy.

So it is damb weird.  The is detected ok, but the BIOS fails to see an OS.

Matt

At Wednesday, 26-06-02 15:18 (+0930), Glen Turner wrote:
>Matt Hyne wrote:
>>I have been having trouble getting a machine to boot lilo (or anything 
>>from HDD) after an install of RH7.3.
>>Lilo is installed (and I ran it again for good measure) but the only way 
>>I can get linux to boot is to use the boot floppy I created at install time.
>
>LILO is a 16-bit program which only uses BIOS services.  So issues
>like Linux support for the SCSI driver don't enter into the picture
>at that stage of the boot process.
>
>Your SCSI card should contain a boot BIOS, this is detected by the
>motherboard's BIOS when the machine boots.  The motherboard BIOS will
>call the SCSI card's BIOS to spin up the drive as the machine boots.
>You should see the disk lights flash.
>
>Later the motherboard BIOS will go looking for a bootable drive,
>it will start with the motherboard (IDE) drives and, if there is
>no bootable drive on that controller, try each of the controllers
>on the ISA/PCI bus.  The SCSI controller's BIOS will provide the
>motherboard BIOS with facilities to di disk I/O -- in this case
>to read the partition table and the boot block.
>
>LILO should be loaded from that boot block.  LILO will use calls
>to the motherboard BIOS to do disk I/O.  If the LILO's I/O request
>refers to the SCSI drive then the motherboard BIOS will call the
>SCSI controller BIOS to satisfy that I/O request.
>
>LILO will load the Linux image, and then jump to a particular
>address in that image.  Linux will then be running in 16-bit
>mode.  It will move to 32-bit mode, at which stage the 16-bit
>BIOS calls are no longer accessible and Linux had better have
>a 32-bit device driver 'module' for your SCSI controler handy
>(usually in initrd, a initial RAM drive loaded by LILO along
>with the Linux image).
>
>   ---
>
>Since when Linux boots from the floppy and can access the SCSI
>disk we can assume that the SCSI controllr device driver module
>exists and works.
>
>So the most likely cause of failures from your description are:
>
>  - The SCSI controller's BIOS is not activated.  You usually
>do this by pressing a magic key chord during the boot process,
>which enters a configuration dialogue.  The option might
>be called "boot BIOS" or "boot ROM".  You want it on.  You
>can only turn this on for one SCSI controller in your system.
>
>  - Your controller actually has a DIP socket for a boot ROM,
>but no boot ROM is in the socket.  This is only likely
>if your controller is old.
>
>  - You have exceeded the BIOS limitations on searching for
>a bootable drive.  You can only boot from the first two
>motherboard devices or the first two controller devices.
>So if you have a SCSI bus with 3 disks, the bootable disk
>had better not be the last SCSI disk discovered by the
>SCSI controller -- you influence the disk discover order
>by using the SCSI ID.
>
>All this assumes that you have no SCSI issues.  Note the SCSI
>bus settings from the running Linux system.  Configure the SCSI
>controller BIOS to have the same settings.
>
>Regards,
>Glen
>


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] LDAP address book - anyone got any suggestions

[Matt Hyne]

I am looking for an LDAP addressbook application that has a web front end, 
and it easy to maintain and configure (linux of course).

I looked at http://ldap-users.sourceforge.net/ but it does not support past 
RH7.0.

I have played around with creating my own - but to write the tools so that 
it can be updated easily would be a reasonable amount of work - and I would 
prefer a tool, than having to hand modify the database everytime I want to 
make a change.

Suggestions ?

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] mail problems - MX records.

[Matt Hyne]

Guys, I have noticed a mail problem on my mail server (my private one :-) ).

External mail to [EMAIL PROTECTED] works file, however, if someone sends mail 
to [EMAIL PROTECTED] it never makes it to my SMTP server.

I checked the MX records and it correctly shows my MX record for hyne.com 
pointing to my SMTP server.

The server is working - because mail to hyne.com is received fine.  The 
logs don't even show any delivery attempts to host.hyne.com.

Do I need a separate MX record for host.hyne.com - or should the domain MX 
catch all ?

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] New windows virus?

[Matt Hyne]

Speaking of which - can anyone recommend a good sendmail virus scanner ?
I'm looking for one that can scan email attachments for actual viruses - 
not text "signatures".

I did look into AMAVIS but I could not get the perl libraries to install on 
RH7.3. :-(

Matt

At Tuesday, 16-07-02 07:08 (+1000), Erik de Castro Lopo wrote:
>Hi all,
>
>I received three emails this morning titled "Re: Your Password" which
>contained a 63k win32 executable named decrypt-password.exe and the
>text:
>
> > ATTENTION!
> >
> > You can access
> > very important
> > information by
> > this password
> >
> > DO NOT SAVE
> > password to disk
> > use your mind
> >
> > now press
> > cancel
>
>Anybody else seeing this?
>
>People wanting to upgrade their Spam/Virus filter should have a look at this
>received line from the three separate spams and figure out how to filter
>for it :-).
>
> Received: from AFRICA ([193.1.1.62])
> by mail.europe-technologies.com (8.11.0/8.11.0) with SMTP id 
> g6FEocJ24150
>
> Received: from AFRICA (bud.ltas.ulg.ac.be [139.165.121.32])
> by aix10.segi.ulg.ac.be (8.9.1a/8.9.1a) with SMTP id PAA38522
>
>Received: from AFRICA (barlop09.site.uottawa.ca [137.122.90.45])
> by mail.site.uottawa.ca (8.9.3/8.9.3) with SMTP id KAA95005
>
>Cheers,
>Erik
>--
>+---+
>   Erik de Castro Lopo  [EMAIL PROTECTED] (Yes it's valid)
>+---+
>"Even in the area of anticompetitive conduct, Microsoft is mainly an
>imitator." -- Ralph Nader (1998/11/11)
>--
>SLUG - Sydney Linux User's Group - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Perl CPAN module install problem - any experts

[Matt Hyne]

Ok, now I have no idea what I am doing, but I am trying to install some 
CPAN perl modules (for another project) and I hit a snag, so I am hoping 
there is a perl expert out there that can put me back on the rails.

I used the command line:

perl -MCPAN -e shell

to try and install the following library -

Compress::Zlib

but I get the following error:

cpan> install Compress::Zlib
Running install for module Compress::Zlib
Running make for P/PM/PMQS/Compress-Zlib-1.16.tar.gz
   Is already unwrapped into directory /root/.cpan/build/Compress-Zlib-1.16

   CPAN.pm: Going to build P/PM/PMQS/Compress-Zlib-1.16.tar.gz

Parsing config.in...
Looks Good.
Up/Downgrade complete.
Checking if your kit is complete...
Looks good
Writing Makefile for Compress::Zlib
cp Zlib.pm blib/lib/Compress/Zlib.pm
AutoSplitting blib/lib/Compress/Zlib.pm (blib/lib/auto/Compress/Zlib)
/usr/bin/perl -I/usr/lib/perl5/5.6.1/i386-linux -I/usr/lib/perl5/5.6.1 
/usr/lib/perl5/5.6.1/ExtUtils/xsubpp  -typemap 
/usr/lib/perl5/5.6.1/ExtUtils/typemap -typemap typemap Zlib.xs > Zlib.xsc 
&& mv Zlib.xsc Zlib.c
gcc -c -I/usr/local/include -fno-strict-aliasing -I/usr/local/include -O2 
-march=i386 -mcpu=i686   -DVERSION=\"1.16\" -DXS_VERSION=\"1.16\" -fPIC 
-I/usr/lib/perl5/5.6.1/i386-linux/CORE  Zlib.c
Zlib.xs:25:19: zlib.h: No such file or directory
make: *** [Zlib.o] Error 1
   /usr/bin/make  -- NOT OK
Running make test
   Can't test without successful make
Running make install
   make had returned bad status, install seems impossible

It tells me it is missing zlib.h, which I would expect to be part of the 
archive.

Has anyone else had any experience with this and can offer some advice.  I 
am not a perl expert and this is the first time I have used the CPAN stuff 
- so go easy on me.


Matt


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Perl CPAN module install problem - any experts

[Matt Hyne]

Ok - I worked it out.  I had to install zlib-devel  if only the rest 
were that easy.

Matt

At Tuesday, 16-07-02 11:21 (+1000), Matt Hyne wrote:

>Ok, now I have no idea what I am doing, but I am trying to install some 
>CPAN perl modules (for another project) and I hit a snag, so I am hoping 
>there is a perl expert out there that can put me back on the rails.
>
>I used the command line:
>
> perl -MCPAN -e shell
>
>to try and install the following library -
>
> Compress::Zlib
>
>but I get the following error:
>
>cpan> install Compress::Zlib
>Running install for module Compress::Zlib
>Running make for P/PM/PMQS/Compress-Zlib-1.16.tar.gz
>   Is already unwrapped into directory /root/.cpan/build/Compress-Zlib-1.16
>
>   CPAN.pm: Going to build P/PM/PMQS/Compress-Zlib-1.16.tar.gz
>
>Parsing config.in...
>Looks Good.
>Up/Downgrade complete.
>Checking if your kit is complete...
>Looks good
>Writing Makefile for Compress::Zlib
>cp Zlib.pm blib/lib/Compress/Zlib.pm
>AutoSplitting blib/lib/Compress/Zlib.pm (blib/lib/auto/Compress/Zlib)
>/usr/bin/perl -I/usr/lib/perl5/5.6.1/i386-linux -I/usr/lib/perl5/5.6.1 
>/usr/lib/perl5/5.6.1/ExtUtils/xsubpp  -typemap 
>/usr/lib/perl5/5.6.1/ExtUtils/typemap -typemap typemap Zlib.xs > Zlib.xsc 
>&& mv Zlib.xsc Zlib.c
>gcc -c -I/usr/local/include -fno-strict-aliasing -I/usr/local/include -O2 
>-march=i386 -mcpu=i686   -DVERSION=\"1.16\" -DXS_VERSION=\"1.16\" -fPIC 
>-I/usr/lib/perl5/5.6.1/i386-linux/CORE  Zlib.c
>Zlib.xs:25:19: zlib.h: No such file or directory
>make: *** [Zlib.o] Error 1
>   /usr/bin/make  -- NOT OK
>Running make test
>   Can't test without successful make
>Running make install
>   make had returned bad status, install seems impossible
>
>It tells me it is missing zlib.h, which I would expect to be part of the 
>archive.
>
>Has anyone else had any experience with this and can offer some advice.  I 
>am not a perl expert and this is the first time I have used the CPAN stuff 
>- so go easy on me.
>
>
>Matt
>
>
>--
>SLUG - Sydney Linux User's Group - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] New windows virus?

[Matt Hyne]

http://www.amavis.org

At Tuesday, 16-07-02 13:12 (+1000), Intelligent Dynamic wrote:
>G'day...
>
>For those of us that are even less in the know, can you please provide a
>reference for AMAVIS.
>
>Thanks...
>
>Mike
>
>----- Original Message -
>From: "Matt Hyne" <[EMAIL PROTECTED]>
>To: "Erik de Castro Lopo" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
>Sent: Tuesday, July 16, 2002 10:57 AM
>Subject: Re: [SLUG] New windows virus?
>
>
> >
> > Speaking of which - can anyone recommend a good sendmail virus scanner ?
> > I'm looking for one that can scan email attachments for actual viruses -
> > not text "signatures".
> >
> > I did look into AMAVIS but I could not get the perl libraries to install
>on
> > RH7.3. :-(
> >
> > Matt


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] POP problem

[Matt Hyne]

I have noticed that if I attempt to POP mail off my home machine (Redhat 
7.0), from work, it takes a long time for eudora to connect to the machine.

So I did some testing and I did a 'telnet  110'.  The tcp connection is 
set up immediately, however it can take up to 30 seconds for POPD to give 
the 'POP3  server ready' message.  It looks like it is taking this long 
for xinetd to start /usr/bin/ipop3d.

However, connecting to it from the local LAN or localhost gives it instantly.

Doing an SSH, www or any other protocol also works instantly.

Anyone got any ideas ?

Matt

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Kernel 2.4.0 compilation warnings.

[Matt Hyne]

folks, I am getting stacks of the following warning messages when trying to build the 
2.4.0 kernel sources.  Anyone got any suggestions ?

warning: pasting would not give a valid preprocessing token

Matt



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] Fetching mail from a remote mail server

[Matt Hyne]

Folks, I've been asked by a family member if I can help them with their email system.

They are running a Linux server + database which is connected to the net via a 
dial-on-demand modem.
What we want to do, is have all the mail for the domain (ie all mail to 
mydomain.com.au) downloaded by the linux box and then redistributed to the users' 
mailboxes.

Now I have looked at this in the past and I found that there are problems with using a 
central mailbox and a single POP client such as fetchmail to do the job.  In 
particular, if the destination email address is contained in a bcc: field (ie from a 
list or alias), there is no way of the local system knowing who the email is destined 
for.  This also applies to email sent from a forwarder.

Does anyone know of any other methods that would be appropriate.  The mail volume is 
quite low - < 30 emails a day.  

I have also thought that UUCP over IP (and then pipe this to sendmail) might me 
appropriate - are there any ISPs that can handle this (cheaply) ?

Outbound mail works fine via sendmail - anyone know how to make sendmail queue, rather 
than bring the link up for each message ?

Matt



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Private ADSL connection possible?

[Matt Hyne]

At Wednesday, 24/01/2001 06:05 PM (+1100), Jobst Schmalenbach wrote:
>All,
>
>Is it possible to setup a private ADSL connection from
>my home computer to our company?
>
> * What do I need?
> * Can I just set that up or does Telstra need to get involved?
> * Any URLS for this particular matter?

You can set up a GRE tunnel from your DSL router to your company's router and only use 
the telstra network to forward traffic across this tunnel.

>jobst
>
>
>-- 
>It took the power of 3 Commodore 64's to go to the moon, but it takes a 486 to run 
>Windows... Something is desperately wrong here.
>
>|__, Jobst Schmalenbach, [EMAIL PROTECTED], Technical Director|
>|  _ _.--'-n_/   Barrett Consulting Group P/L & The Meditation Room P/L  |
>|-(_)--(_)=  +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia|
>
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug




-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Private ADSL connection possible?

[Matt Hyne]

>
>I'm not sure if you can just plug two ADSL modems into a each end of a
>phone connection and have it work. It is certainly an interesting idea.


No this will not work - you need a DSLAM at the end of the copper, and then something 
to authenticate and forward your traffic to the ISP that you use.



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] Telstra ADSL offerings.

[Matt Hyne]

I've been trying to get some sense out of Telstra for weeks but just hit a brick wall.

Does anyone know whether Telstra offer a STATIC ip address for ADSL users.  I have a 
NAT-ed network that I would like to be able to set up PAT on so I can receive an SMTP 
and SSH feed.

Does anyone know what brand/model of ADSL modem/router Telstra offers ?  Does it have 
only an single ethernet port or is there a ATM25 interface as well ?

Is their PPPoEoA authentication client a Windows based thing or can I just get the 
router to authenticate and treat it like a DDR link ?  I have linux boxes on the 
network, but I would prefer not to have to run a DSL client on these - I just want to 
treat the DSL router like a gateway to the internet.

Matt



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Re: Telstra ADSL and recurrent recurrent lost connections.

[Matt Hyne]

At Tuesday, 30/01/2001 11:54 PM (+1100), Alan Lee wrote:
>You know why it was out?  If you dont know why something like this is out, I
>dont think you have any reason to scream and yell about it.  A few major
>bits of their equipment was fried, in a storm in VICT.

In my opinion that is a poorly designed network if there is no redundancy or backup.  
For a carrier that screams for 99.999% reliability, they only have their selves to 
blame.

>(And no, I DONT WORK FOR TELSTRA!!!)
>
>Regards, Alan Lee
>
>
>- Original Message -
>From: "Angus Lees" <[EMAIL PROTECTED]>
>To: "SLUG Mailing List" <[EMAIL PROTECTED]>
>Sent: Tuesday, January 30, 2001 11:24 PM
>Subject: [SLUG] Re: Telstra ADSL and recurrent recurrent lost connections.
>
>
>> \begin{Richard Piper}
>> > > It's been hopeless for the last few days, up and down all the time,
>terrible
>> > > speed and latency.
>> >
>> > I would have to agree.
>>
>> i think its time we all had a chat with our friendly ombudsman..
>>
>>
>> late last week adsl was down for at least 5 hours (from logs
>> overnight, i think it was more like 17 hours!) which is pretty
>> horrific service, considering what everyone is paying.
>>
>> --
>>  - Gus
>>
>>
>> --
>> SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>> More Info: http://slug.org.au/lists/listinfo/slug
>>
>
>
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug





-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Cisco 827 ADSL Router

[Matt Hyne]

Have it running nicely - even with a dynamic DNS service and NAT+PAT to pipe certain 
ports through to a linux server.

I will post the config here later today.

Matt

At Tuesday, 3/04/2001 03:01 PM (+1000), [EMAIL PROTECTED] wrote:

>Hi Everyone,
>
>Perhaps not the right place to post this, but there's a chance some techs
>out there may have come across this.
>
>I have a Cisco 827 ADSL router with the intention of replacing the alcatel
>modem supplied by Telstra. It's certifed to work by Telstra but so far I'm
>getting 1st level supports "we don't support that". Has anyone else had any
>experiences with setting one of these routers up?
>
>Cheers,
>
>-- 
>
>-Paul de Kievit
>
>NetOptions
>Ph:  (07) 3844 1888
>Fax: (07) 3844 4155
>
>
>This email contains confidential information intended for the use of the
>addressee named above.
>
>If you are not the intended recipient you are hereby notified that any
>use, dissemination, distribution or reproduction of this email or the
>contained information is strictly prohibited by law.
>
>If you have received this email in error, please delete and destroy all
>copies and telephone NetOptions Pty Ltd on (07) 3844 1888.
>
>Except as required by law, NetOptions Pty Ltd does not represent,
>warrant and/or guarantee that the integrity of this email has been
>maintained nor that the communication is free of errors, virus,
>interception or interference.
>
>
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] Cisco ADSL router config for Telstra ADSL network

[Matt Hyne]

For those that requested it, here is the config I have successfully used on the 
Telstra ADSL network.

This configuration has been tested on the 827 series but should also work on any 
router with an ADSL WIC card.  

Ensure that you set up the enable and secret passwords and I also suggest username 
security.

I have also added PAT translations to show you how to get your Web server and SSH 
server to respond to the Telstra allocated IP address.

I have been using a dynamic DNS service (dns2go) on a Linux box inside so I can telnet 
to the router's public dynamic IP address using a FQDN.  

Using the PAT translations in the config, this should also work for setting up your 
own mail server too since Telstra don't plan to offer private IP addresses on their 
ADSL network for some time and they will be expensive when they do.

Hope this helps.

Matt


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Cisco ADSL router config for Telstra ADSL network

[Matt Hyne]

 This time I'll add the attachment 

At Tuesday, 3/04/2001 04:10 PM (+1000), Matt Hyne wrote:

>For those that requested it, here is the config I have successfully used on the 
>Telstra ADSL network.
>
>This configuration has been tested on the 827 series but should also work on any 
>router with an ADSL WIC card.  
>
>Ensure that you set up the enable and secret passwords and I also suggest username 
>security.
>
>I have also added PAT translations to show you how to get your Web server and SSH 
>server to respond to the Telstra allocated IP address.
>
>I have been using a dynamic DNS service (dns2go) on a Linux box inside so I can 
>telnet to the router's public dynamic IP address using a FQDN.  
>
>Using the PAT translations in the config, this should also work for setting up your 
>own mail server too since Telstra don't plan to offer private IP addresses on their 
>ADSL network for some time and they will be expensive when they do.
>
>Hope this helps.
>
>Matt
>
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug


!
! Cisco DSL router configuration for the TELSTRA BIGPOND ADSL NETWORK.
!
! Should work for 827, 1700, 2600 and 3600 series with ADSL WIC cards.
!
! This assumes your inside network is using addresses 10.1.1.0/24 and
! that these addresses are either assigned by a local DHCP server (ie linux)
! or they are static.  You can also run the DHCP service on IOS.
!
! While for sites within Sydney the PVC settings on the ATM interface will
! work, I am not sure about other states or cities - you may need to talk to
! your local exchange (they are the only ones that will know for sure).
!
! [EMAIL PROTECTED]
!
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname adsl-gw
!
! 
clock timezone AEST 10
ip subnet-zero
!
!
interface Ethernet0
 ip address 10.1.1.2 255.255.255.0
 ip nat inside
 no ip mroute-cache
!
!
! See notes above about the correct VPI/VCI numbers (PVC)
! 
interface ATM0
 no ip address
 no ip mroute-cache
 no atm ilmi-keepalive
 pvc 8/35 
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
 bundle-enable
 dsl operating-mode auto
 hold-queue 208 in
! 
! Enter your Telstra assigned username and password
! in the fields below.
!
interface Dialer0
 ip address negotiated
 ip nat outside
 encapsulation ppp
 dialer pool 1
 no cdp enable
 ppp authentication chap callin
 ppp chap hostname USERNAME@bigpond
 ppp chap password PASSWORD
!
ip nat inside source list 8 interface Dialer0 overload
!
! These fancy PAT translations allow internal machines to appear
! as the Telstra assigned IP address - it is not a good idea to open
! telnet/ftp - better using SSH.
!
ip nat inside source static tcp 10.1.1.11 80 interface Dialer0 80
ip nat inside source static tcp 10.1.1.11 22 interface Dialer0 22
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
!
access-list 8 permit 10.1.1.0 0.0.0.255
!
line con 0
 exec-timeout 120 0
 login local
 transport input none
 stopbits 1
line vty 0 4
 exec-timeout 0 0
 password 7 SUPRESSED
 login local
!
scheduler max-task-time 5000
end

Re: help me plz,,,,, Re: [SLUG] Cisco 827 ADSL Router

[Matt Hyne]

You need to add the nameserver address to your windows networking config.



At Tuesday, 3/04/2001 04:45 PM (+1000), Munreik wrote:
>hi,
>
>my freind jason told me u guys can help me cos i got problemz..
>
>anywayz on windows 2000 profess edition sp1a i cannot not connect to 
>web sites or anything,, but i can ping ip but not ping hostname it says 
>bad unknjown host,, but nslookup ok and find website okays so i dont 
>not know what doing...
>
>thkz
>Munreik
>
>
>Powered by telstra.com
>
>
>
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] Using SSH server with Netscape.

[Matt Hyne]

I am trying to setup SSH so I can use a windows based SSH client to tunnel netscape 
(http) traffic through the SSH connection.

I have the client side set up and all http requests are going out over the SSH 
connection as required but the linux box that is the SSH server is not forwarding this 
traffic.

In my client browser I get a reply from apache (running on the SSH server) telling me 
the following:


Forbidden

You don't have permission to access http://203.21.94.11/ on this server.

Apache/1.3.14 Server at panda-new.cleveland.com.au Port 80
-

Why is it going through apache on the SSH server ?  Shouldn't this have nothing to do 
with apache?

Does anyone know if I have to do anything special in the SSH server config so that I 
can get netscape to use the SSH connection as a tunnel.  I know the client side is 
configured ok because the SSH server is seeing all the http traffic ?

Matt

Matt


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Using SSH server with Netscape.

[Matt Hyne]

Yeah - I just threw squid on the box and changed the port to 8080 - now everything is 
hunky dory.

Matt

At Tuesday, 17/04/2001 04:54 PM (+1000), Martin wrote:
>Matt Hyne wrote:
>> 
>> I am trying to setup SSH so I can use a windows based SSH client to tunnel netscape 
>(http) traffic through the SSH connection.
>
>what is the windows client app?
>
>it sounds like it is forwarding the connection to port 80 on the linux
>box, which is a hassle if you are trying to run a webserver... it
>probably should forward it to something you can put squid behind or
>route to the internet using masquerading...
>
>later
>marty
>
>-- 
>Network Engineer
>Redback IT
>Ph: 02 9874 8331
>www.redback.com.au



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] using rcp as root

[Matt Hyne]

I'm trying to work out what permissions I have to change on two machines to allow me 
to 'rcp' as root from one machine to another.

I have added both machines to /etc/hosts.allow and /etc/hosts.equiv but I still get 
permission denied messages -

[root@panda /etc]# rcp /etc/smb.conf panda-new:/etc/
Permission denied.

Anyone know what else I need to change to get this to work ?

Matt


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Telstra ADSL & Debian vs RedHat

[Matt Hyne]

I've seen minimal problems with ADSL reliability however the advertised performance vs 
their actual performance does vary. (Actually, redundancy is something that Telstra 
have yet to discover - when they do the outages should go to almost 0).

I've run some tests between two Sydney connected ADSL sites running various traffic 
streams with different packet sizes and find that the best throughput I can get is 
60kbps (on 512/128 -> 512/128 services).  I contacted Telstra about this and they 
advised that they only advertise the physical capability of the service not what you 
will actually get (what crap).

If I designed an ISDN router that promised 128kbps throughput and only gave customers 
60kbps I'd be out of a job.

I'm not finished with them yet.

Matt

At Wednesday, 2/05/2001 10:23 AM (+1000), Crossfire wrote:
>Michael X Haynes was once rumoured to have said:
>> Hi there,
>> 
>> Well I've been using Linux for the past 4 years for uni work and
>> havent looked back. I now plan to go broadband which is just great
>> for the linux box (linux without internet is not that great
>> right?). So I wanted to see if anyone has got ADSL running
>> effectively, and get a judgement of its service. My first preference
>> would be Optus Cable, but this building has a poor management and
>> the network is reluctant too ):
>
>Yes.  I've been running a 512/128 ADSL for about 5 or 6 months now.
>
>The service in North Sydney is fairly reliable - I only loose my PPPoE
>session once every 4 or 5 days, and it usually comes back straight
>away.  Telstra themselves hiccup, as does their performance.  Given
>that I mostly use my link for reading web comics, IRC and a bit of
>development work it suits me fine.
>
>Given you've mentioned building management, it sounds like you're in a
>apartment block, and consequentially wouldn't be able to get
>Optus@Home anyway.
>
>> Lastly I have a friend who swears by the virtues of Debian over
>> mainstream Linux e.g RedHat, my current setup. Who will argue his
>> case? I may just change if someone can convince me. ;)
>
>Debian is good - apt-get will rock your world in terms of package
>maintenance, and when you get used to its differences, you'll find
>that its easily more sane than RedHat in many regards.
>
>And finally, if you do get ADSL, read the archives.  We've detailed
>how to set up ADSL a number of times before.
>
>C.
>-- 
>--==--
>  Crossfire  | This email was brought to you
>  [EMAIL PROTECTED] | on 100% Recycled Electrons
>--==--
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

[SLUG] PPTP or IPSec Windows Client to Linux Server

[Matt Hyne]

Has anyone had any success connecting a Windows client machine to a Linux VPN server 
using PPTP or a IPSec.  I am also looking for a FREE Windows IPSec client.

I've read some HOWTO's but they don't really go into this all that much.  I want to 
use an existing windows VPN client or one that is free, secure (lets not talk about 
PPTP and secure - I know) and able to talk to a Linux VPN server.

SSH is currently being used but does not give me the features that I want to play with.

Matt


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] PPTP or IPSec Windows Client to Linux Server

[Matt Hyne]

At Wednesday, 2/05/2001 01:35 PM (+1000), Del wrote:
>> 
>> 
>> Has anyone had any success connecting a Windows client machine to a Linux VPN 
>server using PPTP or a IPSec.
>
>Yes, using the Linux PPTP server.  I don't have the URL for it at the
>moment but you can check my home page under Linux Security Central, scroll
>down for the VPN stuff:
>
>http://.babel.com.au/del/linux-security.shtml

This domain-name fails to resolve - problems ?



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] PPTP or IPSec Windows Client to Linux Server

[Matt Hyne]

At Wednesday, 2/05/2001 01:35 PM (+1000), Del wrote:
>> 
>> 
>> Has anyone had any success connecting a Windows client machine to a Linux VPN 
>server using PPTP or a IPSec.
>
>Yes, using the Linux PPTP server.  I don't have the URL for it at the
>moment but you can check my home page under Linux Security Central, scroll
>down for the VPN stuff:
>
>http://.babel.com.au/del/linux-security.shtml

Arh - the secret extra w - all is ok now.

:-)



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] Getting a dial in up to speed

[Matt Hyne]

Yeah - I've never been able to get my 33k6 modem to connect past 28k8,
just put it down to bad phone line or crap netcom modem.

M

On Wed, 16 May 2001, Michael wrote:

> 
> 56K is only done when your dialing a digital modem rack that has such
> sup[port.
> 
> So if your 2 systems in question are just standard 56K modems, then the
> most you should get over analog lines between them is 33.6k.
> 
> 
> 
> On Wed, 16 May 2001, Howard Lowndes wrote:
> 
> > I have a Linux box with a dial in 56K modem.  The dial in is being handled
> > by mgetty and works OK, EXCEPT that it will not connect at faster than
> > 28K.  The remote end is definitely capable of 56K.
> > 
> > In mgetty.config I have speed 115200 in the global section but to no
> > apparent avail.
> > 
> > What else should I be looking for?
> > 
> > -- 
> > Howard.
> > 
> > LANNet Computing Associates 
> >"...well, it worked before _you_ touched it!"
> > 
> > 
> > -- 
> > SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> > More Info: http://lists.slug.org.au/listinfo/slug
> > 
> 
> 
> -- 
> SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
> More Info: http://lists.slug.org.au/listinfo/slug
> 


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Proxy Filtering

[Matt Hyne]

junkbuster works really well - www.junkbuster.com (I think).

M.

At Wednesday, 23/05/2001 09:28 AM (+1000), John Ferlito wrote:
>Does anyone know of any proxy filtering products that integrate
>well with squid. The only product I currently know about is a thing
>called smartfilter sold by open systems. Basically you pay a monthly
>license fee and for that you get the privelige to download there latest
>list of banned sites in a whole heap of categories (Please lets not
>start a thread about censorship etc :). 
>
>Anyone heard of anything similar? $60/user/month is a little bit
>steep. Or maybe it's not but it seems to be more than most people want
>to pay.
>
>-- 
>John Ferlito
>Senior Engineer - Bulletproof Networks
>ph: +61 (0) 410 519 382
>http://www.bulletproof.net.au/
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] Apache serving .doc files

[Matt Hyne]

I am trying to get my Linux based apache web server to serve some .DOC MS Word files.  
However I am having the following problems.

1. When I click on the link, the file starts downloading as (garbled) text into the 
netscape window.
2. If I shift-select the link, I can download the file but then WORD cannot read it.

I've checked the file in Apache's directory and it is fine - I can ftp or scp it and 
read it just fine, just not when I try to fetch it from a link on a webpage.

I have the following link set up in my webpage:

FAX Coversheet (Word)

Anyone got any ideas - have a got Apache configured wrongly.

Matt


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Apache serving .doc files

[Matt Hyne]

Could you be a little more specific ?

Matt

At Tuesday, 12/06/2001 10:22 AM (+0200), Artur Hefczyc wrote:
>>
>> I am trying to get my Linux based apache web server to serve some .DOC MS
>Word files.  However I am having the following problems.
>>
>> 1. When I click on the link, the file starts downloading as (garbled) text
>into the netscape window.
>> 2. If I shift-select the link, I can download the file but then WORD
>cannot read it.
>>
>> I've checked the file in Apache's directory and it is fine - I can ftp or
>scp it and read it just fine, just not when I try to fetch it from a link on
>a webpage.
>>
>> I have the following link set up in my webpage:
>>
>> FAX Coversheet (Word)
>>
>> Anyone got any ideas - have a got Apache configured wrongly.
>You should set mime-type for such documents.
>
>Artur
>--
>Artur Hefczyc
>[EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] own domainname with non-permanent connection?

[Matt Hyne]

I know with www.dns2go.com that you can tell it to set your IP address to 0.0.0.0 
when/if you go offline (regularly if you use Telstra ADSL).

Generally, a static IP addr on Telstra's ADSL network will set you back a considerable 
amount for little more gain - they consider this a bigpond direct service and thus 
charge the big bucks for the same speed etc as the standard dynamic ADSL service.

Another option is to config sendmail to fetch you mail using the ETRN (??) command - 
that way, the mail will be stored on a secondary server and you initiate the transfer 
to the primary when you are up - and list mail (non TO: addressed mail) will work too.

MAtt

(comments are mine - not Cisco's)

At Saturday, 23/06/2001 11:04 PM (+1000), Graeme Robinson wrote:
>At 12:57 PM 25/06/2001 +1000, Paul Robinson wrote:
>>This might be ugly.. well actually it would be way ugly but it's an answer
>>from left field. how about setting up a (free) dynamic dns account
>>(http://www.dyndns.org) and point your mail to that which in turn points to
>>your ip (there are scripts u can download and run which update the dns
>>automatically when you connect to the net (run script from /etc/ppp/ip-up).
>>
>>I don't know how well this would work in practice,
>
>I have a server on adsl dynamic dns using dyndns.org.  It's extremely reliable.  
>After much thought I rejected the idea of making my dynamic host my primary MX host 
>for 1 reason: I don't want any mail to bounce.
>
>There is the chance, though small, that if your server is down for some reason that 
>your last IP will be allocated to another network user who runs a mail server - if 
>mail goes to that IP before you can get your server online again it will bounce or 
>even be lost - not an acceptable risk for business mail IMO.   I'm lobbying Telstra 
>for a fixed IP but in the meantime another ISP hosts my domain and my mailserver is 
>configured for pop collection and multidrop distribution of my domain mail.  It works 
>pretty well but I've heard multidrop can get into trouble when delivering listmail.
>
>
>
>
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

[SLUG] RedHat Network 'up2date -u' fails with RPM conflict.

[Matt Hyne]

Using the redhat network to update my RH box, I am not getting the following failure 
when attempting an 'up2date -u'

Testing package set / solving RPM inter-dependencies...

RPM conflict error.  The message was:
Test install failed because of package conflicts:
file /usr/X11R6/lib/modules/pex5.so from install of XFree86-3DLabs-3.3.6-38 conflicts 
with file from package XFree86-I128-3.3.6-33

Q: Basically it is saying that pex5.so is in both these packages - but how do I fix 
it, without stuffing the RH Network config/database ?

Overall, I've been pretty happy with the RHN - works well at upgrading.

Matt


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Lost C class ip range

[Matt Hyne]

Try:
http://www.apnic.net/search/index.html

but I have already put your name / company in it and there is no record.  You will 
need to know who allocated them to you have a good chance.

M

At Friday, 14/09/2001 01:08 PM (+1000), Richard Hayes wrote:
>Dear list,
>
>I purchased a C class network (255 IP addresses) but never used them.
>
>I have lost the no. range and  can't find a command in whois or dig to locate 
>them. 
>
>Would some point me to a faq / docs on how to locate them?
>
>-- 
>Richard Hayes
>Nada Marketing - 113-115 Oxford St Darlinghurst Australia
>Phone: +(61-2) 9360  Fax +(61-2) 9361 0094 0414 618 425
>http://www.nada.com.au
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] TV tuner card: "TV Excel". Also, stereo?

[Matt Hyne]

I've got this card working at home - if you still have problems let me know and I will 
get the settings for you.

I don't use the stereo sound.

At Saturday, 15/09/2001 06:49 PM (+0800), Mike Holland wrote:
>On Sat, 15 Sep 2001, Terry Collins wrote:
>
>> Grep for excel and see if it is listed. You will need to work out which
>> number card it is.
>
>Thanks Terry, but I've been there too. Since all web hits on the
>"tv-excel" were in oz, but there is nothing australia-specific about the
>hardware, I'm guessing its marketed under other names. If no-one has heard
>of this card with Linux, I'll just give up and return it.
>   BTW, I just took another look at the source and found a "98 /
>2000" reference for the flyview, so that one should do.
>
>Further question : has anyone managed to get stereo sound from Australian
>TV on a BT878 card?  The philips tuner does FM stero, but not TV stereo
>here.
>
>-- 
>Mike Holland  <[EMAIL PROTECTED]>
>--==--
>"Everybody is talking about the weather but nobody does anything
>about it."  -- Mark Twain
>
>
>
>-- 
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://lists.slug.org.au/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug