Re: subnet subset blocked

That was it, thanks everyone. On 25/09/2024 13:39, Erwan David wrote: It should be "netmask 255.255.252.0" or (I prefer) just set "address 192.168.4.12/22" without netmask (man says it is deprecated)

Re: subnet subset blocked

On 24/09/2024 22:29, Dan Ritter wrote: What does ip route show give you on the VM in question? ip route show default via 192.168.4.1 dev ens192 onlink 192.168.4.0/24 dev ens192 proto kernel scope link src 192.168.4.12 BINGO! 192.168.4.0/24 is wrong, should say 192.168.4.0/22 Do you know w

subnet subset blocked

Hi all, I've just launched a Debian 12 VM in VMware (ESXi 7.0.2) and installed apache2 / php / postgres stack on it + ssh access. Generally we have 3 subnets (IPv4 only): - 192.168.4.0/22 (Ethernet LAN) - which starts with 192.168.4.1 and ends with 192.168.7.254 - 10.10.10.0/24 (VPN1) - 1

Re: sendmail without DNS

Thanks for pointing that out. I've noticed that installing sendmail package was removing postfix and vice versa. That made me think these two were mutually exclusive. After reinstalling postfix, logwatch suddenly started sending emails so everything is now working as expected. --- Adam O

Re: sendmail without DNS

Let me rephrase my question, which should be easier to answer. What exactly shall I substitute: mailer = "/usr/sbin/sendmail -t" with in /usr/share/logwatch/default.conf/logwatch.conf to make logwatch use postfix (already working without DNS) instead of sendmail? On 21/07/2024 08:08, Jeff

sendmail without DNS

This is in a way a continuation of my recently "purely local DNS" thread. To recap: my objective is to send emails to a single domain with both DNS and any other email traffic being disabled. A simple working solution that I've found for Postfix is: /etc/hosts 1.2.3.4example.com /etc/pos

Re: purely local DNS

Thanks for the hint Todd. I've replaced it with: smtp_dns_support_level = disabled and it's still working as expected. --- Adam On 15/07/2024 18:49, Todd Zullinger wrote: It's probably worth noting that `disable_dns_lookups` has been deprecated for a long time. The postconf(5) man page sa

Re: purely local DNS

My intention was to send emails to a single domain with any other email traffic being disabled. In order to achieve this I considered smart host, dnsmasq and even bind9. The 3-liner solution that I've found seems the simplest, least intrusive and appears to be working fine. On 16/07/2024 01

Re: purely local DNS

I'm using Postfix and this all that was needed: /etc/hosts 1.2.3.4 example.com /etc/postfix/main.cf disable_dns_lookups = yes smtp_host_lookup = native

Re: purely local DNS

I want to achieve the first objective and the values are static. I just hoped there is a one liner hack (like A records in /etc/hosts) to achieve this vs reconfiguring my MTA. On 15/07/2024 14:33, Greg Wooledge wrote: On Mon, Jul 15, 2024 at 14:00:03 +0100, Adam Weremczuk wrote: What I need

Re: purely local DNS

d work for sending mail. Regards On 2024-07-15 21:00, Adam Weremczuk wrote: What I need to configure for my Debian 12 VM: - no public or LAN DNS whatsoever - ability to fetch a single MX record for a single domain I don't think I can add MX to /etc/hosts which only works for A record

purely local DNS

What I need to configure for my Debian 12 VM: - no public or LAN DNS whatsoever - ability to fetch a single MX record for a single domain I don't think I can add MX to /etc/hosts which only works for A records. I'm after a similarly simple, "one liner" solution. --- Adam

Re: cli64 CPU segfaults

Thanks everyone for useful feedback :) On 29/01/2024 21:05, Gremlin wrote: On 1/29/24 14:35, Michael Kjörling wrote: On 29 Jan 2024 19:20 +, from ad...@matrixscience.com (Adam Weremczuk): I have 2 bare metal Debian 12.4 servers with fairly new Intel CPUs and plenty of memory. On both

cli64 CPU segfaults

Hi all, I have 2 bare metal Debian 12.4 servers with fairly new Intel CPUs and plenty of memory. On both, dmesg continuously reports: (...) [Mon Jan 29 12:13:00 2024] cli64[1666090]: segfault at 0 ip 0040dd3b sp 7ffc2bfba630 error 4 in cli64[40+18a000] likely on CPU 41 (core

systemd-journald log location

Hi all, Is it a good idea to move it from /run/log/journal to e.g. /var/journal-log? I can't find a suitable option in /etc/systemd/journald.conf I recently increased SystemMaxUse and RuntimeMaxUse which quickly filled up all space. I didn't realise that our cloud provider decided to image t

logrotate failed state

Hi all, Debian 10.13 Is it normal for logrotate service to go from "inactive (dead)" to "failed (Result: exit-code)" state every time logrotate.timer (active-waiting) kicks in? E.g. "sudo systemctl restart logrotate" brings back "inactive (dead)" but only until the next logrotate.time trigg

unexplained crash

Hello, Yesterday SSH on my desktop PC running Ubuntu 20.04 became unresponsive. The machine was responding to ping and "telnet 22" was briefly connecting before connection closed. The graphical login prompt was visible, but when I tried to log in, it threw me to the text console. No login pr

LTFS in Debian 11

Hi, Has anybody had much success with it? This is the closest thing that I've managed to find: https://github.com/LinearTapeFileSystem/ Only Debian 10 version with no updates for almost 2 years :( My tape drive is Quantum LTO8 HH SAS External and works pretty well with WS 2019. Regards, A

permanently adding driver to Debian live USB stick

Hi all, My Deb 11.5 live bootable USB stick is missing a driver for Intel Wireless-AC 9560 adapter. Intel provides a link to the missing firmware: https://www.intel.com/content/www/us/en/support/articles/05511/wireless.html and instruct to copy files (iwlwifi-9000-pu-b0-jf-b0-34.ucode i

Re: apt-cacher internal error (died)

Thanks David, the server runs 9.2 and clients 9.1 so hopefully it will work ok. Another reason I kept changing sources.list in the client was in the aftermath of my recent attempts against apt-cacher. In apt-cacher you change every line to point to apt-cacher:3142. At least that's what I have

Re: apt-cacher internal error (died)

Thank you Darac, that was my problem indeed! What confused me was the fact that, despite being fundamentally misconfigured, it appeared to be almost working. Just complaining about one security mirror. On 21/09/2022 15:36, Darac Marjal wrote: I'm no expert in apt-cacher-ng, but the error here

Re: apt-cacher internal error (died)

Hi David, There is still something wrong with my /etc/apt/sources.list Perhaps caused by stretch reaching end of life on 30 June 2022. Can somebody provide me with a tested list of mirrors for stretch working in Sep 2022 for apt-cacher-ng server and clients? I've tried several different sets

Re: apt-cacher internal error (died)

ld imagine this is a typical scenario where you want to use apt-cacher. Regards, Adam On 12/09/2022 16:42, David Wright wrote: On Mon 12 Sep 2022 at 14:33:59 (+0100), Adam Weremczuk wrote: Switching to apt-cacher-ng brings no immediate joy :( CLIENT (192.168.100.243) sudo apt update Err:5 http:

Re: apt-cacher internal error (died)

le' to see them. ? Thanks, Adam On 08/09/2022 19:12, Adam Weremczuk wrote: Hi David, From SERVER:/etc/apt-cacher/apt-cacher.conf user = www-data group = www-data sudo chown -R www-data:www-data /var/cache/apt/archives/* Same error on the CLIENT :( I think I'll give apt-cacher-ng

Re: apt-cacher internal error (died)

ps failing. Regards, Adam On 08/09/2022 16:28, David Wright wrote: Disclaimer: I run apt-cacher-ng, and have never looked at apt-cacher. On Wed 07 Sep 2022 at 17:50:16 (+0100), Adam Weremczuk wrote: SERVER Wed Sep 7 17:06:40 2022|error [10088]: Failed to open/create /var/cache/apt-cacher/packages

apt-cacher internal error (died)

Hi all, The server runs Debian 9.2 and the client Debian 9.1 My errors: CLIENT $ sudo apt update Ign:1 http://192.168.1.100:3142/debian stretch InRelease Hit:2 http://192.168.1.100:3142/debian stretch-updates InRelease Hit:3 http://192.168.1.100:3142/debian stretch Release Reading package list

Re: swap maxed out when plenty of RAM available

-rss:0kB On 22/03/2022 14:55, Adam Weremczuk wrote: Hi all, I run a tiny and lightweight Debian 9.9 LXC container on Proxmox 6.2-6. It has 512 MB of memory and 512 MB of swap assigned and typically needs 50-100 MB to operate. Last year I started seeing about half of swap being used with very

swap maxed out when plenty of RAM available

Hi all, I run a tiny and lightweight Debian 9.9 LXC container on Proxmox 6.2-6. It has 512 MB of memory and 512 MB of swap assigned and typically needs 50-100 MB to operate. Last year I started seeing about half of swap being used with very little use of RAM. I then made the following chan

Re: deprecated options in openssh

On 10/09/2021 17:46, Greg Wooledge wrote: Depends on which syslog daemon implementation you're using, I think. My environment: Linux deb10 5.4.44-1-pve #1 SMP PVE 5.4.44-1 (Fri, 12 Jun 2020 08:18:46 +0200) x86_64 GNU/Linux Pretty minimalistic set up. Rsyslog 8.1901.0-1 out of the box, no c

Re: deprecated options in openssh

On 10/09/2021 17:51, David Wright wrote: When you commence your call, both you and the person at the other end probably exchange some pleasantries, which confirm that you're both who you say you are. These all get recorded too. Ssh is no different. Are you saying these entries could belong to a

Re: deprecated options in openssh

On 10/09/2021 13:11, Greg Wooledge wrote: Not matching what's in the file: awk 'NR==25' /etc/ssh/sshd_config awk 'NR==28' /etc/ssh/sshd_config awk 'NR==29' /etc/ssh/sshd_config # Lifetime and size of ephemeral version 1 server key OK, so "it" is in fact "The warnings in syslog contain line n

Re: deprecated options in openssh

the master host, but not! awk 'NR==25' /etc/ssh/sshd_config # Logging awk 'NR==28' /etc/ssh/sshd_config awk 'NR==29' /etc/ssh/sshd_config # Authentication: What's going on here? :) Regards, Adam On 16/08/2021 18:27, David Wright wrote: On Mon 16 Au

Re: deprecated options in openssh

f -exec grep -l UsePrivilegeSeparation {} \; Still puzzled... On 16/08/2021 15:34, Greg Wooledge wrote: On Mon, Aug 16, 2021 at 03:06:30PM +0100, Adam Weremczuk wrote: I run openssh 7.9p1-10+deb10u2 on Debian 10.10. Logwatch, which runs daily, occasionally (maybe 2-3 times per month) reports the following: So

deprecated options in openssh

Hi all, I run openssh 7.9p1-10+deb10u2 on Debian 10.10. Logwatch, which runs daily, occasionally (maybe 2-3 times per month) reports the following: - SSHD Begin  Deprecated options in SSH config:     KeyRegenerationInterval - line 28     RSAAuthen

chrome and chromium crashing every minute

Hi all, My environment: $ uname -a Linux ubuntu 4.4.0-170-generic #199-Ubuntu SMP Thu Nov 14 01:45:04 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux Ubuntu 16.04.6 LTS $ dpkg -l | grep -i chrome ii  chrome-gnome-shell 9-0ubuntu1~ubuntu16.04.3 all  GNOME Shell extensions integration for web

Re: clone ACL permissions

On 23/07/19 12:20, Thomas Schmitt wrote: Hi, consider this from man setfacl: --restore=file Restore a permission backup created by `getfacl -R' or similar. All permissions of a complete directory subtree are restored using this mechanism. If the input contains owner

clone ACL permissions

Hi all, I've just found out that my backups were missing ACL and the restore will not work until this is fixed. Luckily I have the luxury of checking what the permissions should look like on a running system, e.g: RESTORED: # file: samba/sysvol # owner: root # group: 300 user::rwx grou

Re: apt-cacher errors

Hi Greg, Thank you for taking the time to point out all the shortcomings. On 25/03/19 13:21, Greg Wooledge wrote: On Mon, Mar 25, 2019 at 12:11:21PM +, Adam Weremczuk wrote: I've found 30 entries referencing wheezy and removed them all: sudo find /var/cache/apt-cacher/ -type f

Re: apt-cacher errors

nchez wrote: On Mon, Mar 25, 2019 at 08:59:40AM +0000, Adam Weremczuk wrote: Hi all, On 24th March (last Sunday) I received the following (for the first time): Subject: Cron test -x /usr/share/apt-cacher/apt-cacher-cleanup.pl && /usr/share/apt-cacher/apt-cacher-cleanup.pl Error: cannot op

apt-cacher errors

Hi all, On 24th March (last Sunday) I received the following (for the first time): Subject: Cron test -x /usr/share/apt-cacher/apt-cacher-cleanup.pl && /usr/share/apt-cacher/apt-cacher-cleanup.pl Error: cannot open ../headers/debian_dists_wheezy_Release for locking: No such file or directory

Re: Please Recommend Affordable and Reliable Cloud Storage for 50 TB of Data

Has anybody tried: https://rclone.org ? I still think something like this combined with 5  x G Suite Business accounts would be the best value for money. I.e. $50 pm for unlimited storage. On 18/02/19 08:57, Curt wrote: No support for standard protocols that I can see and you need to instal

Re: P2V Debian 9 with VMware Converter

I've investigated a bit more and it actually has something to with EFI rather than Debian version. This Debian 9 clones fine: Model: IBM ServeRAID M5014 (scsi) Disk /dev/sda: 998GB Sector size (logical/physical): 512B/512B Partition Table: gpt Disk Flags: Number  Start   End Size    File

Re: P2V Debian 9 with VMware Converter

Hi Calbaza, I'm not surprised it works for Debian 8 (released in 2015) as the tool officially supports Ubuntu 16 (released in 2016). It also works like a charm for Debian 7 (2013) but not Debian 9 (2017). All my VMs run as version 11 too. It fails with the same error when tried against 3 dif

Re: Please Recommend Affordable and Reliable Cloud Storage for 50 TB of Data

fast internet connection to go much faster with any provider anyway. On 15/02/19 09:48, Adam Weremczuk wrote: Actually even a cheaper "Business" plan offers unlimited storage for 5 or more users. So you might spend as little as $50 per month: https://gsuite.google.com/intl/en_us/pr

Re: Please Recommend Affordable and Reliable Cloud Storage for 50 TB of Data

Actually even a cheaper "Business" plan offers unlimited storage for 5 or more users. So you might spend as little as $50 per month: https://gsuite.google.com/intl/en_us/pricing.html My links are for UK and US. Edit the URL to browse different regions. On 15/02/19 09:34, Adam

Re: Please Recommend Affordable and Reliable Cloud Storage for 50 TB of Data

Hi, It could make sense to sign up for Google Enterprise subscription: https://gsuite.google.co.uk/intl/en_uk/pricing.html 5 users will cost you 5 x £20 = £100 per month and give 5 accounts with unlimited storage in a trusted and reliable place. AFAIK there is upload speed cap in place so it

Re: P2V Debian 9 with VMware Converter

Forgot to mention the source server was up and running the entire time, no down time. On 13/02/19 14:06, Alexandre GRIVEAUX wrote: It's hard to beat 20-30 seconds it takes to click and type into VMware Converter and leave it running. It works well for Debian 7, probably 8 as well but not 9 :(

Re: P2V Debian 9 with VMware Converter

Short answer - because it will take significantly longer and potentially lead to more errors. Especially if I have a number of servers with different structures and purposes. It's hard to beat 20-30 seconds it takes to click and type into VMware Converter and leave it running. It works well f

P2V Debian 9 with VMware Converter

Hi all, I persistently get "The destination does not support EFI firmware" . Apparently the latest Converter doesn't support Debian 9 (yet?). More details on my issue here: https://communities.vmware.com/message/2837600 Has anybody had success tricking Converter to perform a migration? Any

Re: dd performance test differences

Hi Mike, Thanks for the suggestion. New test results with suggested parameters below: Slower server W: 1310720 bytes (13 GB, 12 GiB) copied, 97.5106 s, 134 MB/s R: 1310720 bytes (13 GB, 12 GiB) copied, 28.6353 s, 458 MB/s Faster server W: 1310720 bytes (13 GB) copied, 83.7368 s, 15

Re: dd performance test differences

Forgot to mention both run Debian (7.1 and 9.5) and filesystems are ext4 on both. On 02/11/18 11:58, Adam Weremczuk wrote: Hi all, Can somebody explain this huge difference between 2 (almost) identical servers

dd performance test differences

Hi all, Can somebody explain this huge difference between 2 (almost) identical servers: - dd if=/dev/zero of=test.bin bs=512 count=1024 oflag=sync 524288 bytes (524 kB) copied, 0.00133898 s, 392 MB/s vs 524

Re: Latest Thunderbird update breaks multiple plugins

Hi Martin, I suffered this pain earlier this morning on Ubuntu 16.04. For Lightning you might tried to substitute it with "xul-ext-lightning" but I ended up removing Thunderbird and rolled back to 52.9 (https://ubuntu.pkgs.org/16.04/ubuntu-updates-main-amd64/thunderbird_52.9.1+build3-0ubuntu0.

Re: DRBD sync speed

Hi Dan, Yes, I tried tweaking config following that link but for some reason the sync progress is not showing any more. I guess I need to fiddle with it more. I have 16 x 500 GB disks in each server and my layout is as below: 1-4: VD0: RAID10: 2 spans of 2 disks -> 1TB for Proxmox containers

DRBD sync speed

Hi all, I'm trying out DRBD Pacemaker HA Cluster on Debian 9.5 I have 2 identical servers connected with 2 x 1 Gbps links in bond_mode balance-rr. The bond is working fine; I get a transfer rate of 150 MB/s with scp. Following this guide: https://www.theurbanpenguin.com/drbd-pacemaker-ha-cl

[SOLVED] Re: dual port cross over cable bonding

A single dual port gigabit card on each server. I'm more concerned about performance than redundancy. The bond operates in 2 gigabit mode: ethtool bond1 (...)     Speed: 2000Mb/s     Duplex: Full (...) My working config (will play with it a bit more): auto bond1 iface bond1 inet static     sl

[SOLVED] Re: dual port cross over cable bonding

My config was ok and it's working like a charm after both servers have been rebooted. For some reason "systemctl restart networking" wasn't enough.

Re: dual port cross over cable bonding

Yes, 192.168.200.1 and 192.168.200.2 netmask 30 All ports and cables work when tested 1-1 but not with my 2-2 bonding config. Looks like your LACP is correct but your IP addressing is wrong. Do you have parentheses in it, or are you trying to suggest that one is .1 and the other is .2? -dsr-

dual port cross over cable bonding

Hello, I have 2 servers running Proxmox 5.2 (based on Debian 9). I've connected Ethernet ports between them with a pair of cross over cables. When only 1 port on each and 1 cable are used connectivity looks fine with the following config: -

Re: increasing size of /run

Thank you both for useful advice. For me the AIDE script is a bit too complex (700+ lines) to quickly analyse and experiment with. I've decided to take a lazy path which is simply increasing the size of /run and retrying AIDE job. No problem if it buzzes in the background for a couple of day

increasing size of /run

Hi all, I have a one off big job (full AIDE report on millions of files) which I'm trying to run on old Debian 7.1. The system uses 2 physical disks and physical volumes, no LVM. It has 8GB or RAM and 32GB of swap which appears to be just enough. After running for a couple of days the job faile

squid proxy fails to resolve LAN host names

Hi all, Steps to reproduce (query any LAN host running a web server): $wgethttp://lanhost 2>&1 | grep response HTTP request sent, awaiting response... 200 OK $export http_proxy=proxy:3128 $wgethttp://lanhost 2>&1 | grep response Proxy request sent, awaiting re

Re: password hash in shadow file

Quite possibly I changed it to the same password. Not sure now as it was almost a month ago but can't find any better explanation. Of course hashes are meant to be irreversible. I guess I'm trying to catch my own shadow ;) On 13/03/18 16:19, to...@tuxteam.de wrote: Still strange. Are you sure

Re: password hash in shadow file

I think it was me invoking "passwd" as root and aborting (ctrl+D) without making any changes. Would that be enough to update the shadow file? On 13/03/18 15:47, to...@tuxteam.de wrote: What I don't understand is how the system changed the hashing method without getting you involved. You don't

password hash in shadow file

Hi all, I've just spotted that on one of my old wheezy servers root entry in /etc/shadow was updated just over 3 weeks ago. The root password is still the same and the lastchanged count is much higher than 3 weeks. The difference I've noticed is the hashed password string being much longer.

Re: gnats user

Thanks, a useful read. But all it says regarding gnats is "." :) On 2018-03-06 16:57, Reco wrote: [1], chapter 12.1.12.1. Reco [1]https://www.debian.org/doc/manuals/securing-debian-howto/ch12.en.html

gnats user

Hi all, Can somebody explain why gnats user comes even with a minimalistic netinstall Debian? I briefly used Gnats Bug-Reporting System long time ago but AFAIR this project died in 2005. It just feels weird for me to see it in /etc/passwd all the time. Thanks Adam

Re: Dell Open Manage

Please keep me updated Dave. Especially if you discover something big :) I'm not desperate , happy to wait for another few weeks or so. Thanks Adam On 13/02/18 13:37, Dave Sherohman wrote: Coincidentally, earlier today I installed srvadmin-idracadm8 on stretch from debhttp://linux.dell.com/re

openssh-server change log

Hello, Just to let you know - the link on Debian website gives 404: https://packages.debian.org/wheezy/openssh-server http://metadata.ftp-master.debian.org/changelogs/main/o/openssh/openssh_6.0p1-4+deb7u7_changelog I got it from the tarball so it's not critical. Thanks Adam

end of security support for wheezy LTS

Hi all, Our PCI compliance scanner (probably falsely) claims it's 2018-05-01. The Wikipedia page: https://en.wikipedia.org/wiki/Debian_version_history just says "May 2018". Debian website: https://www.debian.org/releases/wheezy/ https://wiki.debian.org/LTS clearly states "end of May 2018".

Dell Open Manage

Hello, I'm referring to: http://linux.dell.com/repo/community/debian/ Does anybody know if jessie version works well on stretch? Or if an official release for stretch is going to be available soon? Thanks Adam

hostname issue

Hi all, Today when I logged into my Debian 9.2 VM I noticed that the hostname has changed to the first block of the IP address I was accessing this VM from last: root@83:~# "hostname" command was returning the full IP address 83.xxx.xxx.xxx Cat /etc/hostname was still showing the correct na