[SLUG] Question about IP
I ran a security test via a website that checks my ADSL service for open ports etc and it reported that all was well except that they could determine that the IP address of the workstation on my LAN was 192.168.0.10. I was surprised that this was possible - can someone explain in simple terms the mechanism by which an IP packet can betray its origin. Thanks, Peter Vogel -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Question about IP
How does the IP address of my workstation get through my masquerading firewall? Is there something I should disable? On Mon, 11 Apr 2005 12:59:22 +1000 Michael Fox [EMAIL PROTECTED] wrote: On Apr 11, 2005 12:55 PM, Peter Vogel [EMAIL PROTECTED] wrote: I ran a security test via a website that checks my ADSL service for open ports etc and it reported that all was well except that they could determine that the IP address of the workstation on my LAN was 192.168.0.10. I was surprised that this was possible - can someone explain in simple terms the mechanism by which an IP packet can betray its origin. This is normal obtained via a proxy server. So if your ISP is using a http proxy or transparent proxy, then this info could of been passed to the script that checks your ports. etc. Peter Vogel CTO IceTV Personal Digital Television Level 2, 34 Chandos St St Leonards 2065 Tel: 1300 654 803 Direct tel: 02 4751 8735 Mobile: 0410 192 006 -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Question about IP
Thanks for all the information Dean. The firewall is inside a DLINK DSL504 adsl router. On Mon, 11 Apr 2005 13:39:55 +1000 (EST) Dean Hamstead [EMAIL PROTECTED] wrote: What is your firewall set up? the only way the other end knows is if somewhere in a protocol in use your computer is sending its local ip (192.168.x.x). When you use a http proxy (ie squid) it will send its ip and the ip of the host it is recieving data on behalf of (ie proxying). This option can be disabled in the squid config files making a truely anonymous proxy. Squid and most proxies will identify themselves during the http transaction. Variables derived from this are available to the web server and can be used in php, servlet, ssi, perl (everyone praise perl), python etc. If you are using some sort of firewall distribution and you havent got a proxy set in your browser then it most likely has invisible proxying going. Invisible proxying is fan diddly-tastic IMO. Or your firewall distribution might be proxying an environment for auto proxy discovery (seen that in the IE connections tab? it is infact an RFC feature i believe - its actually pretty damned cool. i read up on it for some random reason, i think curiosity finall got the best of me on a quiet day and i googled it. basically you just have a standard dns entry setup and you serve a standardly named file which provided a proxy set up script. something like that. hmm this bracet has gone on for a while) Other protocols like IM's etc will give away your local IP. I wouldnt be too worried about it. But dont sue me. Dean On Mon, April 11, 2005 1:07 pm, Peter Vogel said: How does the IP address of my workstation get through my masquerading firewall? Is there something I should disable? On Mon, 11 Apr 2005 12:59:22 +1000 Michael Fox [EMAIL PROTECTED] wrote: On Apr 11, 2005 12:55 PM, Peter Vogel [EMAIL PROTECTED] wrote: I ran a security test via a website that checks my ADSL service for open ports etc and it reported that all was well except that they could determine that the IP address of the workstation on my LAN was 192.168.0.10. I was surprised that this was possible - can someone explain in simple terms the mechanism by which an IP packet can betray its origin. This is normal obtained via a proxy server. So if your ISP is using a http proxy or transparent proxy, then this info could of been passed to the script that checks your ports. etc. Peter Vogel CTO IceTV Personal Digital Television Level 2, 34 Chandos St St Leonards 2065 Tel: 1300 654 803 Direct tel: 02 4751 8735 Mobile: 0410 192 006 -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html Peter Vogel CTO IceTV Personal Digital Television Level 2, 34 Chandos St St Leonards 2065 Tel: 1300 654 803 Direct tel: 02 4751 8735 Mobile: 0410 192 006 -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Still trying to copy a disk...
find ./ -xdev | cpio -p -d -m -v /mnt/hdc5/ returns cpio: invalid option --p I can't see why it's a problem...?? On Sat, 6 Dec 2003 10:18:01 +1100 (EST) Grant Parnell [EMAIL PROTECTED] wrote: I'm a bit concerned about running out of RAM whilst copying, maybe there's options for reducing the buffer sizes or something like that. Anyway, generally speaking there's no substitute for understanding the PC boot sequence and partitioning. In a nutshell if you have /dev/hda as the master and /dev/hdc as the backup. I would manually partition /dev/hdc and try to ensure the /boot partition is the same. This may involve convincing the BIOS of the 'correct' disk geometry. Sometimes the BIOS will look at the partition table first! IE I've had the same model drive come up with 2 different cylinder/head/sector counts on the same machine. To fix use fdisk and go into extended mode and set the C/H/S sizes and create a couple of partitions from scratch, then reboot, you might have several goes at this. The X86 linux kernels need to be re-started when the partition tables change, particularly if the size/order of the partitions change. Anyway, back on track. You can now format the target partitions, EG mkswap /dev/hdc2 mke2fs /dev/hdc1 mke2fs /dev/hdc5 /boot on /dev/hda1 can be directly copied with dd if=/dev/hda1 of=/dev/hdc1 Other partitions could be copied the same way but you're going to be copying the empty space too which will take a while. I prefer to use cpio instead. For this the relevant partitions will need to be mounted somewhere. mkdir /mnt/hdc1 mkdir /mnt/hdc2 mkdir /mnt/hdc5 mount -t ext3 /dev/hdc1 /mnt/hdc1 mount -t ext3 /dev/hdc2 /mnt/hdc2 mount -t ext3 /dev/hdc5 /mnt/hdc5 Now the copy, assuming hda5 is /home for example cd /home find ./ -xdev | cpio -p -d -m -v /mnt/hdc5/ The only thing left to do which gives me the shits is to write the boot sector on the /dev/hdc device. Theoretically you could dd the data but I don't know where to start and how much to copy. As a precaution, make a boot floppy disk mkbootdisk --device /dev/fd0 2.4.20-8 Now shutdown and disconnect /dev/hda, plug the backup drive into primary IDE controller so it's now /dev/hda and boot off the boot disk. If your boot system uses lilo just run lilo to fix. Otherwise use grub-install /dev/hda Ensure your system boots off the backup drive. Now you could write a backup script to just mke2fs /dev/hdcN find | cpio . on a semi-regular basis. I've got a client that had 3 backup drives. One kept at home, one kept at the office, one in the machine for next backup. These are then rotated weekly. On Sat, 6 Dec 2003, Peter Vogel wrote: Having wasted days trying to make GRUB work again after ghosting a disk, I bought Partition Commander today, as it was advertised as understanding GRUB when making copies. Then I tried to copy a whole disk of Redhat 8 Linux The procedure runs okay for a few minutes, then I get a message saying that the boot sector LILO or GRUB will need to be rebuilt if the boot is on this partition - how should I know if it is or not when it does not say which partition it's copying?? Then I tell it to continue and a few minutes later I get Problem: not enough RAM ... etc etc. I thought Partition Commander would work with GRUB seemlessly? is anyone familar with Partition Commander? Any suggestions much appreciated. And back to my original original question, what is the foolproof (i.e. me-proof) way of backing up a whole system for disaster recovery purposes? I can SAMBA all the files off the Linux box onto my Windows box, but then what? There must be an equivalent to Ghost that works with Linux... Thanks Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- ---GRiP--- Electronic Hobbyist, Former Arcadia BBS nut, Occasional nudist, Linux Guru, SLUG/AUUG/Linux Australia member, Sydney Flashmobber, BMX rider, Walker, Raver rave music lover, Big kid that refuses to grow up. I'd make a good family pet, take me home today! Do people actually read these things? Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
Re: [SLUG] Still trying to copy a disk...
Thanks for the pointer, but I don't think this will do what I need. It looks like I would need a working system to restore the partitions. I want to make an whole disk copy so I can put the drive in another computer, put the whole computer away, and pull it out if my server dies. Ghost theoretically allows me to put the second drive in teh computer, boot the Ghost floppy, it copies the disk and that;s that. But after doing this GRUB no longer works, and I have been unable to make it work, there are instructions for doing so but I get error messages which I don't understand. I need an idiot's version like Ghost but which works with Linux disks. On Sat, 6 Dec 2003 09:37:36 +1100 Graham Smith [EMAIL PROTECTED] wrote: On Sat, 6 Dec 2003 09:11, Peter Vogel wrote: I can SAMBA all the files off the Linux box onto my Windows box, but then what? There must be an equivalent to Ghost that works with Linux... Try looking at http://www.partimage.org/ Partition Image is a Linux/UNIX utility which saves partitions in many formats (see below) to an image file. The image file can be compressed in the GZIP/BZIP2 formats to save disk space, and split into multiple files to be copied on removable floppies (ZIP for example), ... Partitions can be saved across the network since version 0.6.0. -- Regards, Graham Smith - -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Ghost loses contents of /boot
Having cloned my Redhat 8 system using Ghost 2003 I find that the /boot directory is empty - what's happened? Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
Re: [SLUG] Weird GRUB thing
Recovering would normally be as simple as putting in manual boot details (the root, kernel and initrd commands), booting, and then running grub-install to update grub. Not so simple for me as I have only a vague idea of what I'm doing. From my grub boot floppy, I get as far as the first step grub root (hd0,0) and get: Filesystem type unknown, partition type 0x83 I presume this is an error report. Is there any other way of repairing grub? Or what else can I do?? Thanks Peter On Sat, 22 Nov 2003 19:15:13 +1100 Robert Collins [EMAIL PROTECTED] wrote: On Sat, 2003-11-22 at 18:37, Michael Kraus wrote: G'day... Ahh, well, afaik (this was true for LILO anyway), the boot loader doesn't actually reference a file by the filename, but rather the size and offset of the file on the drive. grub understands the file system. So grub can handle disk defragmentation, partition resizing etc all just fine - as long as partition order and #'s don't change. The break of grub on the origin drive is the key: it means that grub was already broken, or broken during the image process. Or, if the partition #'s changed (say a primary becoming an extended) it would break things, as grub references fields relative to the parition. As to what could break grub, if the /boot partition (the 'install location of grub') changes, then the installed info for grub will be incorrect, and grub won't be able to read menu.lst, which is the list of what to boot. Recovering would normally be as simple as putting in manual boot details (the root, kernel and initrd commands), booting, and then running grub-install to update grub. Rob -- GPG key available at: http://www.robertcollins.net/keys.txt. Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
Re: [SLUG] Weird GRUB thing
Recovering would normally be as simple as putting in manual boot details (the root, kernel and initrd commands), booting, and then running grub-install to update grub. Not so simple for me as I have only a vague idea of what I'm doing. From my grub boot floppy, I get as far as the first step grub root (hd0,0) and get: Filesystem type unknown, partition type 0x83 Is there any other way of repairing grub? Or what else can I do?? Thanks Peter On Sat, 22 Nov 2003 19:15:13 +1100 Robert Collins [EMAIL PROTECTED] wrote: On Sat, 2003-11-22 at 18:37, Michael Kraus wrote: G'day... Ahh, well, afaik (this was true for LILO anyway), the boot loader doesn't actually reference a file by the filename, but rather the size and offset of the file on the drive. grub understands the file system. So grub can handle disk defragmentation, partition resizing etc all just fine - as long as partition order and #'s don't change. The break of grub on the origin drive is the key: it means that grub was already broken, or broken during the image process. Or, if the partition #'s changed (say a primary becoming an extended) it would break things, as grub references fields relative to the parition. As to what could break grub, if the /boot partition (the 'install location of grub') changes, then the installed info for grub will be incorrect, and grub won't be able to read menu.lst, which is the list of what to boot. Recovering would normally be as simple as putting in manual boot details (the root, kernel and initrd commands), booting, and then running grub-install to update grub. Rob -- GPG key available at: http://www.robertcollins.net/keys.txt. Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Disk recovery software
I am having problems with Ghost doing strange things when trying to clone a disk for backup/recovery purposes. What products are out there that are an idiot-proof (i.e. safe from me) way of backing up a whole drive and restoring to a new one in case of disk failure? I'd even use something that runs on a second machine on the newtwork (Linux or Windows). Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Need Redhat 8 (Psyche) iso image disk 1
I have somehow lost this disk and need it to reinstall. Got disks 2 and 3. Does anyone know where i can download it from? Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Weird GRUB thing
My Redhat 8 system has been running happily for some months. Today I decided I'd better make a backup and used Ghost to copy the disk (10GB) to a bigger one(40GB). After doing the copy, I tried booting from the new disk and it just repeats GRUB forever. Now the weirdest part is that I put back the original drive and it now does the same thing. No, I did not do the ghost in the wrong direction. If I boot from a grub boot floppy everything boots fine and the hard disl seems fine. What's happened??? Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Teraterm and control-c
I'm using Teraterm under Windows as a terminal to a linux box. After much we searching I still can't figure out how to make Teraterm send a controlC (to break). Any pointers appreciated. Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
Re: [SLUG] Mondo restore problem
Thanks Grant and Robert - the problem was correctly diagnosed and now solved by erasing the partitions first. On Fri, 14 Nov 2003 09:03:12 +1100 (EST) Grant Parnell [EMAIL PROTECTED] wrote: Being faced with a similar prospect myself soon I'll be looking into manually partitioning and electing to skip the partitioning during the restore. One thing that's bitten me so far is the kernel written to the CDR is for the CPU of the machine you backed up. EG I backed up a PIII system and can't boot the CD on a PII system. A celeron works thankfully so obviously the CPU has to be comparable or better than the one backed up from. As for WHY this happened to you I don't know, maybe disk geometry was recognised differently and there happened to be something that looked like a partition table perhaps see what happens if you do this from a rescue disk first:- [For those trying this at home, this will effectively erase all partitions on the hard disk - not good if you don't have a backup] # dd if=/dev/zero of=/dev/hda bs=1024 count=1000 On Thu, 13 Nov 2003, Peter Vogel wrote: Knowing just enough about linux to get into trouble, I am trying to restore a linux installation from a CD made for Mondo restore. The CD boots okay, and whirs away for a while, then aborts with: Unable to mount some or all of your partitions. This is the mondo-restore log. One thing that looks odd is the partitions are very small, considering it's a 120GB drive. I trust that someone out there will immediately spot the problem :-) and give me a clue what to do. Thanks Peter first line - Successfully mounted dynamic /tmp ramdisk find-and-mount-cdrom --- starting Trying /dev/hda It's not in /dev/hda; I'll keep looking Trying /dev/hdb It's not in /dev/hdb; I'll keep looking Trying /dev/hdc It's not in /dev/hdc; I'll keep looking Trying /dev/hdd /dev/hdd has a CD-ROM in it CDROM found at hdd Wu-Tang Forever! Oh, um, that is, /dev/hdd is where the Mondo CD lives. CDROM found and mounted at /dev/hdd find-and-mount-cdrom --- leaving (0) OK, I am running on a CD-ROM. Good. Starting install-additional-tools Untarring and softlinking disk #1 Untarring and softlinking disk #2 Untarring and softlinking disk #3 lib/modules/2.4.12-xfs/kernel/fs/xfs/xfs.o (4348 KB) restored. 22 slices. /lib/libc-2.2.5.so (1132 KB) restored. 6 slices. /lib/libncurses.so.5.2 (248 KB) restored. 2 slices. /lib/libslang.so.1.4.4 (336 KB) restored. 2 slices. /usr/bin/gawk (220 KB) restored. 2 slices. Hacking softlinks (Zig and Zag style) Exiting install-additional-tools klogd and syslogd have been started. LVM's have been started. Running portmap Portmap started OK Calling post-init mondo-restore found; cool... Turning mondo-restore from a hyperlink into an executable ---NUKE MODE--- -- Mondo Restore v1.41 - Backup medium is CD-R[W] Loading mountlist... /dev/hda1 / ext3 4134932 /dev/hda5 /var ext3 2071416 /dev/hda6 /mnt/mythtv ext3 33309260 Mountlist loaded successfully. 3 entries in mountlist Raidtab is very small or non-existent. Ignoring it. cp -f /tmp/mountlist.txt /tmp/mountlist.txt.pre-resize end of output-- Expanding entries to suit drive /dev/hda (4110 MB) Disk was 38588 MB; is now 4110 MB; factor = 0.106510 Changing /dev/hda1 from 4134932 KB to 440410 KB Changing /dev/hda5 from 2071416 KB to 220626 KB Changing /dev/hda6 from 33309260 KB to 3547762 KB final_size = 4110 MB Mountlist adjusted to suit current hard drive(s) Restoring Automatically partition_everything() --- starting Partitioning hard drives Partitioning drive /dev/hda Wiping /dev/hda Zeroing drive /dev/hda Device successfully zeroed. Partitioning device /dev/hda1 (430 MB) Setting /dev/hda1's type to ext3 (83) Partition /dev/hda1 created+configured OK Partitioning device /dev/hda5 (215 MB) Setting /dev/hda5's type to ext3 (83) Partition /dev/hda5 created+configured OK Partitioning device /dev/hda6 (3464 MB) Vaccum-packing Partitioning device /dev/hda6 (max size) Setting /dev/hda6's type to ext3 (83) Returning from a successful vacuum-pack Setting /dev/hda6's type to ext3 (83) Partition /dev/hda6 created+configured OK Done. Formatting partitions sh -c 'echo -en y\ny\ny\n | mkfs -t ext2 -F -j -q /dev/hda1' mke2fs 1.27 (8-Mar-2002) end of output-- Formatting /dev/hda1 as ext3...OK sh -c 'echo -en y\ny\ny\n | mkfs -t ext2 -F -j -q /dev/hda5' mke2fs 1.27 (8-Mar-2002) end of output-- Formatting /dev/hda5 as ext3...OK sh -c 'echo -en y
[SLUG] Mondo restore problem
/mythtv /dev/hda5 213 4 198 2% /mnt/RESTORING/var end of output-- Failed. Unable to mount some or all of your partitions. - df -m - Filesystem 1M-blocks Used Available Use% Mounted on /dev/rd/0 241014 43% / /dev/shm34 034 0% /tmp /dev/hda6 340532 3200 1% /mnt/RESTORING/mnt/mythtv /dev/hda5 213 4 198 2% /mnt/RESTORING/var end of output-- - df -m - Filesystem 1M-blocks Used Available Use% Mounted on /dev/rd/0 241014 43% / /dev/shm34 034 0% /tmp /dev/hda6 340532 3200 1% /mnt/RESTORING/mnt/mythtv /dev/hda5 213 4 198 2% /mnt/RESTORING/var end of output-- Unmounting devices -- ps ax | grep buffer | grep -v grep buffer -- end of output-- ...ran with errors. --- umount /dev/hda5 --- end of output-- Unmounting device /dev/hda5 --- umount /dev/hda6 --- end of output-- Unmounting device /dev/hda6 Unmounting device /dev/hda1 ...not mounted anyway :-) OK Done. All partitions were unmounted OK. Run complete. Errors were reported. Please run 'bug-me'. Mondo-restore is exiting (retval=8192) Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
Re: [SLUG] Email hacking
With my limited knowledge of such things, it seems like a lot of spam could be prevented by blocking all mail that does not contain a simple keyword. This keyword could be included in the footer of all mail going to the list as a reminder. It could even change from time to time. Have I overlooked something? Peter -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Linux contractor wanted
I am looking for someone, preferably in Sydney area, to do some development work with Linux-based TV applications. Please contact me off-list for details. Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Sending copies of emails
I know about using the aliases file to cause emil to be redirected, but is there a way to configure my system (running sendmail ) to copy all incoming mail to another address, i.e. keep the messages on my server as well as sending them elsewhere? Thanks, Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] MythTV
Anyone got any experience with MythTV? Peter Vogel ZapTV Pty Ltd 30 Adeline St, Faulconbridge 2776 Australia Tel: 02 4751 8735 Fax: 02 4751 2601 email: [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Case sensitivity
How do I configure Apache to not be sensitive to case of urls/filenames? Or is that a bad idea? Thanks Peter -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Read errors when mailing
Any ideas what would make a particular mail server hard to contact? I frequently end up with messages like these in my sendmail mailq specifically when sending mail to aol (although works fine sometimes). h1PMW02k002053 98 Wed Feb 26 09:32 [EMAIL PROTECTED] (reply: read error from mailin-04.mx.aol.com.) [EMAIL PROTECTED] h1PMH32k002032 2213 Wed Feb 26 09:17 [EMAIL PROTECTED] (reply: read error from mailin-03.mx.aol.com.) [EMAIL PROTECTED] Thanks Peter -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] The Linux part works but the Windows part doesn't
My apologies in advance in that this is only half a Linux question, and the answer is probably a Microsoft issue. I am experimenting with a cgi script that sends a web broswers some data in return for a suitable request. For a strat, I juest want it to echo the query string, and a suitable content type. #!/bin/sh echo Content-type: x-application/vzap echo echo $QUERY_STRING This seems to be working fine, except I want Windows to launch an application on receipt of the response, but can't get my browser to recognise the file type (.vzap). I have set up a type in Windows Explorer, but when Internet Explorer receives the file, it always prompts me for what I want to do with it. If I select Open file from current location it does, but next time I do it it asks me again even if I uncheck the ask me box. I'm using Win2000 and IE5. I assume this is an IE issue? (The program is at www.wotzontv.com.) Thanks Peter -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Simple sendmail questions
After much web seraching I surrender and ask the experts these dumb questions: Which sendmail.cf variable determines how often the queue is processed? What command do I use to force the mail queue to be run? What might be causing: h1KLXOfJ021045 960 Fri Feb 21 08:33 [EMAIL PROTECTED] (reply: read error from mailin-02.mx.aol.com.) to happen frequently (but not always) when I al lother mail goes out just fine? Thanks Peter -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] How big is an http request?
Roughly how many byes of data would I expect to receive for each http request to my server? -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
Re: [SLUG] How big is an http request?
I am trying to figure out why my server receives about 20mb data a day, even when there's no-one here browsing the web etc. I can imagine a meg or two of emails, but the rest I can't account for. Looking at my Apache logs I see about 5,000 http requests a day for urls that are not on my server, mainly porn, gambling, advertsing etc. These return code 404 as expected. I was wondering if these failed reequests could account for 10-20mbytes a day. On Tue, 4 Feb 2003 19:02:54 +1100 Andrew Bennetts [EMAIL PROTECTED] wrote: On Tue, Feb 04, 2003 at 06:20:23PM +1100, Robert Collins wrote: On Tue, 2003-02-04 at 17:15, Peter Vogel wrote: Roughly how many byes of data would I expect to receive for each http request to my server? Thats very dependant on the url's you publish. You should expect a minimum of: 10 bytes + the URL to retrieve. But, will likely see much more: Cookie headers, accept and accept-language headers, host headers. As a rough guess completely off the top off my head, I'd guess roughly 500 bytes per request, considering the headers and whatnot your average HTTP clients (i.e. Moz and IE) send. It depends. How accurately do you need to know? :) -Andrew. -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Unexplained traffic
Thank you to those who provided useful suggestions for firewall configuration tools. I seem to have that sorted now. However I find that I receive about 20mb/day of traffic that I can't account for. I do get Possible syn flood messages a few times a day. Could that add up to megabytes? I also have unsucessful access attempts to apache every few seconds. Here is a typical couple of munites from my log: 217.84.6.34 - - [03/Feb/2003:08:20:38 +1100] GET http://www.freemobiletunes.com/cgi-bin/arp/rankem.cgi?action=inid=chartz HTTP/1.0 404 1341 http://www.8ung.at/smartlogo/ringtones.htm; Mozilla/4.0 (compatible; MSIE 4.01; Windows 95) 24.29.148.128 - - [03/Feb/2003:08:20:52 +1100] GET http://www.adpowerzone.com/scripts/diatok.js HTTP/1.0 404 1225 http://www.geocities.com/bassw20/index.html; Mozilla/4.0 (compatible; MSIE 5.02; Windows 98) 217.227.90.195 - - [03/Feb/2003:08:21:06 +1100] GET http://www.gsmsitez.net/cgi-bin/topsites/topsites.cgi?larsi HTTP/1.1 404 1286 http://www.logotown.de; Mozilla/4.5 [fr] (Win95; I) 217.227.90.195 - - [03/Feb/2003:08:21:33 +1100] GET http://utop.net/cgi-bin/utop.cgi?ID=/150 HTTP/1.1 404 1172 http://www.logotown.de; Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 62.195.81.215 - - [03/Feb/2003:08:22:55 +1100] GET http://www.leadhound.com/show2.php?id=9236bid=23967 HTTP/1.1 404 1181 http://www.mp3rock.com; Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 62.195.81.215 - - [03/Feb/2003:08:24:30 +1100] GET http://banners.webmasterplan.com/view.asp?site=2358ref=146341b=2 HTTP/1.1 404 1201 http://www.die-80er-jahre.de; Mozilla/4.0 (compatible; MSIE 4.01; Windows 95) 62.195.81.215 - - [03/Feb/2003:08:24:50 +1100] GET http://www.leadhound.com/show2.php?id=9449bid=24968 HTTP/1.1 404 1183 http://www.rapworld.com; Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 62.195.81.215 - - [03/Feb/2003:08:26:12 +1100] GET http://www.leadhound.com/show2.php?id=9236bid=23966 HTTP/1.0 404 1181 http://www.mp3rock.com; Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 62.131.12.251 - - [03/Feb/2003:08:26:50 +1100] GET http://www.1-click-clipart.com/bin/rankem.cgi?action=inid=1cool HTTP/1.1 404 1213 http://www.top20cool.com/index.html; Mozilla/4.0 (compatible; MSIE 5.5; Windows 98) 62.195.81.215 - - [03/Feb/2003:08:27:16 +1100] GET http://banners.webmasterplan.com/view.asp?site=2306ref=145686b=3 HTTP/1.0 404 1193 http://www.myownmusic.de; Mozilla/4.0 (compatible; MSIE 4.01; Windows 98) Any ideas what the cause of this is and can I stop it?? Thanks Peter -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] IP Traffic logging utilities?
Are there any analysis/logging applications that could give me a breakdown of the types of traffic in and out of my Linux internet gateway? e.g. breakdowns by port, protocol or whatevber may be useful for figuring out my unexplained incoming data totals. Thanks Peter -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
Re: [SLUG] Unexplained traffic
No, I have checked that Proxy Requests are not enabled in httpd.conf. Alsom the logs show that the requests are all returning 404 (not found). On Mon, 3 Feb 2003 11:24:05 +1100 Erik de Castro Lopo [EMAIL PROTECTED] wrote: On Mon, 03 Feb 2003 09:42:56 +1100 Peter Vogel [EMAIL PROTECTED] wrote: Thank you to those who provided useful suggestions for firewall configuration tools. I seem to have that sorted now. However I find that I receive about 20mb/day of traffic that I can't account for. I do get Possible syn flood messages a few times a day. Could that add up to megabytes? I also have unsucessful access attempts to apache every few seconds. This looks like you might have Apache set up as a web proxy and the web proxy is accessible from outside of you internal network. People are therefore using your server as an web proxy. Looks like you need to look at the access control configuration of Apache. Erik -- +---+ Erik de Castro Lopo [EMAIL PROTECTED] (Yes it's valid) +---+ Microsoft owns Hotmail. Hotmail runs Sun Solaris on their servers, not Windows NT. Does NT have problems? -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Wht the Modem traffic from pop3 requests??
When I connect to pop3 over my internal LAN, my modem light indicate something going out to the outside world, even though my mail client is set to use 192.168.0.1 as the pop3 server. Everything seems to work fine, but I can't understand what would need to be going out to the internet. Have I configured something wrong? Thanks Peter -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] IPTABLES/RH8
I am trying to configure a firewall for my new Reddhat 8 installation, operating as a masquerading internet gateway. I have tried various IPTABLES scripts I have found on the net, but they generate lots of errors when I try to run them; some examples: Unkown arg --sport --state Command not found -j Command not found DNAT command not found Iptables version is V1.2.6a Any suggeestions what I've done wrong? Can anyone direct me to a script that would be a suitable template (for an internet server/gateway connected to a lan)? Thanks Peter -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Fax to email service?
Does anyone know if there is a service whereby I get a phone number which behaves just like a fax machine for receiving faxes, but the fax is delivered to me via email as a pdf? -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
Re: [SLUG] What have I forgotten, setting up virtual Apache server
Further clues: If I browse for www.axisofevil.info/index.htm it works correctly. If I leave off the index.htm it tries to open another directory which does not exist. I can't see refence to this directory in httpd.conf - where does it get that idea from? -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] What have I forgotten, steeing up virtual Apache server
Running Linux 6.1 and I have minimal knowledge - I am running Apache with a number of virtual domains. I have just added a new one and when I try to browse it locally I get what looks like my domain's default site (different IP address). I can ping the server okay. I have set up a virtual server entry in httpd.conf and done httpd restart What might I have forgotten to do? The domain is www.axisofevil.info -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Need Linux help in the Blue Mountains
Anyone doing freelance Linux consultancy in the Blue Mountains Area? I need some small jobs done including setting up a simple VPN between two offices via internet. -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] Apache question: phantom porn site?
A strange thing has happened to my previously sleepy Apache server. Until this month, I would get a few hundred hits a month, now suddenly my log says 80,000 hits. Looking at the URLs requested, none of them relate to my site. Somehow my server is being asked to serve pages that have no relationship to me. The other thing that I don;t understand is that the response code in the log is generally 200 OK and 302 FOUND Typical extract from my log: 212.10.6.22 - - [14/Apr/2001:06:43:39 +1000] GET http://www.tjenester.dk/banner/blueestate/blueestate_ban01_468_60.gif HTTP/1.0 200 11371 61.10.96.54 - - [14/Apr/2001:06:44:28 +1000] GET http://leader.linkexchange.com/1/X1477645/showiframe? HTTP/1.0 200 204 24.202.176.63 - - [14/Apr/2001:06:44:35 +1000] GET http://www.teenagerwhore.com/join/?c=leegoon HTTP/1.0 302 0 24.202.176.63 - - [14/Apr/2001:06:44:38 +1000] GET http://www.teenagerwhore.com/ HTTP/1.0 200 1423 24.202.176.63 - - [14/Apr/2001:06:44:41 +1000] GET http://www.teenagerwhore.com/join/2.clk?url=../join.html HTTP/1.0 302 0 24.42.207.68 - - [14/Apr/2001:06:44:47 +1000] GET http://service.bfast.com/bfast/serve?bfmid=23276761siteid=38142702bfpage=superpagesauto HTTP/1.0 200 43 24.202.176.63 - - [14/Apr/2001:06:44:47 +1000] GET http://www.teenagerwhore.com/join.html HTTP/1.0 200 1903 24.40.77.244 - - [14/Apr/2001:06:46:34 +1000] GET http://service.bfast.com/bfast/serve?bfmid=253985bfsiteid=38139564bfpage=sibstc08 HTTP/1.0 200 43 195.19.45.144 - - [14/Apr/2001:06:47:09 +1000] GET http://ad.ir.ru/bb.cgi?cmd=adpubid=920802pg=1vbn=10001num=1w=468h=60nocache=4821991 HTTP/1.0 302 0 61.139.199.119 - - [14/Apr/2001:06:47:13 +1000] GET http://service.bfast.com/bfast/serve?bfmid=253985bfsiteid=38248077bfpage=homelink3 HTTP/1.0 200 43 I presume this is something to do with serach engine spidering, but I don't really understand. Can someone tell me what's going on? Thanks! -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] ppp dialup
How do I find out how long my ppp connection has been up? (or when was the last dialin) without looking backwards through the messages file? Thanks Peter -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] Easy questions (I hope)
How can I see what my modem is saying during the chat? e.g. it's meant to say "connect 33000", "PROTOCOL:LAPM" etc etc. But in the "messages" file I only get selected bits of this... Also, if I put "AT\2" in the modem commands in the chat script, it looks like something is interpreting the \2 as something else (@2 I think). Am I right, and if so, what;'s the protocol for getting the script to actually send \2? Thanks Peter -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
Re: [SLUG] Easy questions (I hope)
The debug statement I see is in ifcfg-ppp0 and the value is "yes". What are the other permissable values you refer to? On Thu, 4 Jan 2001, Peter Vogel wrote: How can I see what my modem is saying during the chat? e.g. it's meant to say "connect 33000", "PROTOCOL:LAPM" etc etc. But in the "messages" file I only get selected bits of this... use the debug option to set the level of messages you want. The highter the level the more information, IIRC. Also, if I put "AT\2" in the modem commands in the chat script, it looks like something is interpreting the \2 as something else (@2 I think). Am I right, and if so, what;'s the protocol for getting the script to actually send \2? escape the \ with another \ ie. \\2 Eric -- Eric Rose | Programming in C is like sacrificing [EMAIL PROTECTED]| chickens one feather at a time -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] Unsupported Protocol 0x8207 received??
Anyone know the measning of: "Unsupported Protocol 0x8207 received " message during ppp0 dialup negotiation (connecting to Bigpond Direct using a V90 modem)? Thanks Peter -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] How do I see what my modem reports?
How do I see what my modem reports during the ppp connection sequence? It doesn't seem to appear in the /var/log/messages file. -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
[SLUG] Modem problem with Bigpond Direct
Last Thursday a strange thing happened. My server which has been running happily for about 2 years decided that it could not talk to bigpond direct anymore, through its 56k dialup modem. The symptom was that it would sometimes connect but after a few seconds or minutes the ppp would die, although the moden still had the CD light on, and hence the server (RH5) did not notice anything wrong. I changed the computer and modem (same type) and phone line - same results. Telstra were puzzled, and gave me a new dial-in number and router port. Still the same. The only way I have been able to make it work is to plug in an old 33k modem, which has been working fine for a couple of days. Telstra's techs monitored the router when I was connected but unable to communicate and they said the retry counter was running wild. Which suggests a line problem or modem problem. But why would a new modem and a different phone line behave the same?? Any ideas? Peter -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug
