Re: Debian and LDAP

2000-07-30 Thread Christian Hammers
) --- Linux - the choice of the GNU generation. Join the Debian Project http://www.debian.org Christian Hammers * Oberer Heidweg 35 * D-52477 Alsdorf * Tel.: 02404-25624 0AA3 E879 1D82 F59E 77A4 0096 911F 4AE6 86A1

Re: Debian and LDAP

2000-08-02 Thread Christian Hammers
, Eyck bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 [EMAIL PROTECTED] Internet Security for ProfessionalsFax 0241/911879 WESTEND ist CISCO Systems Partner - Premium Certified -- To UNSUBSCRIBE, email to [EMAIL PROTECTED

Re: Routing

2000-08-29 Thread Christian Hammers
On Tue, 29.08.00 09:48 -0700, Kevin wrote: I've got my network on 10.0.0.0/24. The gateway is 10.0.0.1 and the bridge/router is on 10.0.0.1. I need to setup a static route in the gateway that says anything for 10.1.1.0/24 should use 10.0.0.1 as its next hop. From my view I can't do

Re: Which frontend for SNMP monitoring of server farms?

2000-11-05 Thread Christian Hammers
. This is more elegant as trying to restart them remotely via ssh. bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 [EMAIL PROTECTED] Internet Security for ProfessionalsFax 0241/911879 WESTEND ist CISCO Systems Partner - Premium Certified

SQL/LDAP Backend for DNS? (was: Web-Based DNS Frontend)

2001-03-22 Thread Christian Hammers
, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 [EMAIL PROTECTED] Internet Security for ProfessionalsFax 0241/911879 WESTEND ist CISCO Systems Partner - Premium Certified -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject

Re: disk partition schemes

2001-06-30 Thread Christian Hammers
On Fri, Jun 15, 2001 at 10:13:33AM -0400, Kevin J. Menard, Jr. wrote: Basically, I have 20 gigs of space to tinker with (well, there's really 40 there, but I run a hardware RAID 10). I also have half a gig of SDRAM (sure this would matter with swap space). Now, I have no problem

Re: disk partition schemes

2001-07-03 Thread Christian Hammers
On Mon, Jul 02, 2001 at 03:12:31PM +0200, Russell Coker wrote: If your root file system is at the start then it is unlikely to be large enough to break any boot loaders. Recent boot loaders are very capable... fill it up to more than 512MB (was it that number?) and then compile a new kernel

Re: IP Accounting and 2.4

2001-07-07 Thread Christian Hammers
On Tue, Jul 03, 2001 at 05:44:42PM -0500, Chad C. Walstrom wrote: I'm interested in finding out what others have done for IP accounting for a large number of customers. (Rate limiting and traffic shaping We use CISCO and now have moved our accounting to CISCO's Netflow, i.e. the routers export

Re: Failover with MySQL

2001-08-29 Thread Christian Hammers
Hi [a bit late but never tell a thread dead...] On Fri, Aug 17, 2001 at 11:01:26AM +, Buisson Olivier wrote: To be more understood: I would like to setup 2 mysql server. One is a master and would take all requests. When it failed, the other server takes the hand and respond to the

replicating, balanced web-server with *write* access?

2001-11-10 Thread Christian Hammers
to database. But tell that your customers.. The ideal solution would be a network filesystem like www.inter-mezzo.org but it does not appear to be really mature and tested in real life conditions. So any idea? bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel

Re: Traffic account in debian

2001-10-07 Thread Christian Hammers
On Wed, Oct 03, 2001 at 11:22:24AM +1000, Mario Zuppini wrote: Im desperately after an accounting / reporting tool for debian that shall report every bit of traffic per IP through Try nacct, gives very much details and has a mysql backend. bye, -christian- -- Very funny, Scotty. Now beam

Re: procmail

2001-12-17 Thread Christian Hammers
On Mon, Dec 17, 2001 at 09:46:33AM +1100, Craig Sanders wrote: PS: there's no such thing as a BCC header in incoming mail. it is stripped either by the user-agent when sending a message or, at the latest, by the MTA when it receives the message. it can't be used to sort mail because it

question regarding BIND and zero ttl

2002-01-27 Thread Christian Hammers
Hello One of our cron scripts regularily says !!! hostname-xyz.westend.com A record has zero ttl on stderr. A prepended killall -INT named in the crontab shows that at this time there is no entry in the bind cache for this host because the 86400s of the TTL are expired and bind cleared it.

Are partition tables device independant?

2002-01-30 Thread Christian Hammers
Hello Does anybody know if I can safely move a dd-dump from a whole disk to another including the partition table? Or is the internal representation using CHS information instead of just block numbers? bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241

booting from CompactFlash Cards

2002-03-14 Thread Christian Hammers
Hello I plan to replace a Cisco by a Linux router and would like to use a compact flash card instead of a hard drive to minimize hardware outages. Can anybody recommend me a CompactFlash solution that allowes booting? As far as I learned those cards have build-in IDE adapters and are

Re: Re-post, with additional questions/infomation: Traffic monitoring/logging question

2002-03-18 Thread Christian Hammers
with the netflow exports of cisco routers. bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 [EMAIL PROTECTED] Internet Security for ProfessionalsFax 0241/911879 WESTEND ist CISCO Systems Partner - Premier Certified -- To UNSUBSCRIBE

SNAT does wrong port mapping?

2002-04-04 Thread Christian Hammers
Hello I have a host with two ethernet addresses A and B. From another host I try to connect to B over the interface from A to make snmp queries: -- -- client --- AB--- ---- Not the packets successfully are forwarded from the A

/usr/lib/sendmail replacement for chroot and localhost:25

2002-07-09 Thread Christian Hammers
and a mail-transport-agent which would force me to have a daemon running that looks into (each!) chroot /var/spool/mta-queue for new mail. I tried a small sendmail replacement (ssmtp 2.50.6) but it seems to have some problems... bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und

Problems with sync NFSv3

2002-10-23 Thread Christian Hammers
316516 0 0 0 8660 3244 7449 0 9 91 0 0 2 26804 7752 187312 316516 0 0 0 8216 3090 7093 9 10 81 0 0 0 26804 9376 187312 316516 0 0 0 6780 2579 5907 0 9 91 0 0 0 26804 9400 187312 316516 0 0 0 0 11434 0 0 100 -- Christian

Bind patches are available at ISC

2002-11-14 Thread Christian Hammers
Hi For those of you who would not like to upgrade or wait for the DSA, here are the ISC patches for BIND 4 and 8: http://www.isc.org/products/BIND/patches/bind833.diff bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 [EMAIL PROTECTED

open source workflow management for ISP needs?

2002-12-02 Thread Christian Hammers
Hello Can anybody recommend me an open source (for money or not) workflow and problem tracking system for Linux? I guess most ISPs have roughly the same tasks so this might be of general interest here. The system should be capable of handling - workflows (prepare line, configure

MySQL 4.x is in experimental! (was: Re: experience with mysql 4.x)

2002-12-02 Thread Christian Hammers
Hi On Sun, Dec 01, 2002 at 07:38:20AM -0800, Jeremy Zawodny wrote: We've been using various builds of 4.0.x in production at work for a few months now. It has worked very well. It is quite stable. After users keept on asking me for it, I finally uploaded the first 4.x package to

Re: SCSI errors.

2002-12-10 Thread Christian Hammers
one scsi disk or you can remove one raid disk a time, run badblocks over each disk to find the faulty (each disk that is behind /dev/sdb because 08:31 is /dev/sdb15). bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 [EMAIL PROTECTED] Internet

Re: IDE Hard Drive maintenance

2003-01-10 Thread Christian Hammers
, logcheck to let it mail you any anomalies and the usual bigbrother/netsaint/mon to watch services. bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 [EMAIL PROTECTED] Internet Security for ProfessionalsFax 0241/911879 WESTEND ist CISCO

Re: lsof +L1 - mysql.err.1 unlinked ...

2003-01-10 Thread Christian Hammers
Hello On Tue, Jan 07, 2003 at 11:25:18PM +0100, Christian Jaeger wrote: I have always these mysql.err.1 files not unlinked in all my mysqlservers, and only a mysqld restart resolve these (nor reload neither mysqladmin refresh doesn't unlink them). The err file is created by safe_mysqld to

Re: monitoring load average

2003-01-12 Thread Christian Hammers
with everything else to a seperate host who has logcheck and some other monitoring stuff installed. The ps line is quite interesting if the server crashes, if e.g. a server starts eating up all memory no minutely (cron granularity) run check is able to detect it. bye, -christian- -- Christian Hammers

Re: Limit MySQL database sizes

2003-01-23 Thread Christian Hammers
for a user to get the actual used size the only thing you can do is limiting him manually by some sort of mail remainder and extra fees. bye, -christian- -- Christian Hammers WESTEND GmbH | Internet-Business-Provider Technik CISCO Systems Partner - Authorized

Re: Limit MySQL database sizes

2003-01-23 Thread Christian Hammers
of method they use? I would be very interested to know how to limit my users in a clean way. Or do you have an URL/email from them? Maybe they just tell it us :) bye, -christian- -- Christian Hammers WESTEND GmbH | Internet-Business-Provider Technik CISCO

Re: ntop with Imagestream WANic

2003-06-06 Thread Christian Hammers
- -- Christian Hammers WESTEND GmbH | Internet-Business-Provider Technik CISCO Systems Partner - Authorized Reseller Lütticher Straße 10 Tel 0241/701333-11 [EMAIL PROTECTED]D-52064 Aachen Fax 0241/911879

A user-mode-linux / virtual networking / zebra HOWTO!

2003-06-19 Thread Christian Hammers
Hello I've played around a lot with user mode linux and virtual networking under linux because I wanted to learn OSPF and BGP but had only a single computer to play with. What I came up with was a working setup consisting of three virtual hosts that are interconnected over three virtual

Re: Postfix and SMTP-AUTH once again

2003-08-04 Thread Christian Hammers
On Mon, Aug 04, 2003 at 04:42:15PM +0200, Richard Stevens wrote: I'm using debian testing and installed postfix and postfix-tls. I searched the net and tried just about any howto and any suggestion I could find but it just doesn't work. Hint: Run either unstable or stable. Testing has no

Re: Gated vs Zebra

2003-09-29 Thread Christian Hammers
On Mon, Sep 29, 2003 at 12:29:58AM +0300, kgb wrote: Which software is more good Gated or Zebra? Maybe Quagga (www.quagga.net, available as Debian package in unstable)? It's the forked successor of the quite unmaintained Zebra. Like Zebra, too, it has a Cisco like command line language which

Why is Linux sending icmp redirects...

2003-11-20 Thread Christian Hammers
Hello It seems that my linux router is sending icmp redirect messages to a host telling him that it should use a gateway which is not on the same ip subnet. According to http://www.faqs.org/rfcs/rfc792.html this is not valid and so I'm wondering. The problem occured when two hosts (.66.54 and

Re: spec-ing/dimensioning a server?

2003-11-25 Thread Christian Hammers
On Tue, Nov 25, 2003 at 09:13:48AM -0700, Nate Duehr wrote: Depending on how you're doing your backups, an inexpensive upgrade to a CD-RW drive vs. the CD-R that's on your list might be useful. I wouldn't fully trust CD-RW for backups, but it's handy to have to make quick images of the

Re: duplicating servers - remote backup to HD

2003-12-09 Thread Christian Hammers
On Sat, Dec 06, 2003 at 06:23:43PM -0500, George Georgalis wrote: Sure, here's what I use for taking an image of a system. If you plan rsync -av --progress --delete-excluded --numeric-ids \ --exclude=**/cdrom/* \ You delete only the excluded files? What about e.g. mail spool files that

kernel: svc: bad direction 65549, dropping request

2004-01-12 Thread Christian Hammers
. tcpdump on the external NIC shows no strange/spoofed traffic which would indicate wrong iptable rules. Any hints? bye, -christian- -- Christian Hammers WESTEND GmbH | Internet-Business-Provider Technik CISCO Systems Partner - Authorized Reseller

Re: CISCO netflow graphs on Linux

2004-01-27 Thread Christian Hammers
On Mon, Jan 26, 2004 at 11:46:39AM +0200, Craig Schneider wrote: Can anyone recommend software to graph Cisco's netflow traffic on Debian If you plan to do more than just graph it, you could give nprobe a try, very nice software to store netflow traffic into a sql database from where you can use

How to calculate the memory req's of N apache instances?

2004-03-01 Thread Christian Hammers
Hello What is the best way to estimate the memory requirements of say 1200 Apache Instances on a server when they currently look like this and I do not expect great variability due to PHP doing mallocs or similar? AFAIK those numbers are roughly the memory that the parent process uses (which is

Recommendations for redundant server esp. regarding shared storage?

2004-07-19 Thread Christian Hammers
Hello I'm looking for some good ideas how to design a redundant mail server (maily the POP3/IMAP and data storage and not the pure SMTP relay part). We already tried a combination of two server with mon, DRBD and NFS which was simply to complex and error prone i.e. we often had the case that

What is GreyListing (was: Re: Christian Hammers...)

2004-07-20 Thread Christian Hammers
Hello On 2004-07-20 Russell Coker wrote: (host mail3av.westend.com[212.117.79.67] said: 450 [EMAIL PROTECTED]: Recipient address rejected: Greylisted for 300 seconds... (in reply to RCPT TO command)) [EMAIL PROTECTED] Christian's mail server is broken. Err, no. It's not a bug it's a

Re: greylisting

2004-07-20 Thread Christian Hammers
Hi On 2004-07-20 Russell Coker wrote: Russel, if there are arguments against greylisting, I'd like to hear After the previous message explaining it I am all for greylisting! *grin* - server pools which don't send out the second try from the same IP. This will still work eventually, it

Re: Defining ISP?

2004-09-14 Thread Christian Hammers
Hello On 2004-09-14 shift wrote: Using an optimized distrib on an SR2200 (dual PIII 1.4GHz Tualatin-S), SCSI U160, I have better results on Mysql nemchmarks than with a non-optimized SR2300-SKU0 dual xeon 3.0 1MB L3 cache and SCSI U320!! Sounds very unrealistic. Are you sure that it wasn't

Re: mysterious MySQL-connect

2004-09-24 Thread Christian Hammers
Hi On 2004-09-24 Andreas Vent-Schmidt wrote: On the servers in questions are no customers - it's a dedicated system for only one customer. All the web programming an so on is done only by myself (well, I hope so ;-). But, there are some POP accounts and also an smtpd (no ftpd). Do a

Re: Wiki's

2004-09-30 Thread Christian Hammers
Hello Has anyone had BAD experiences with either of these two? or should I be using something completely different... (Am NOT a PHP fan.) If you're planning something big try MediaWiki, the one the wikipedia.org sites use. It it's just your online shopping list QWikiWiki is small enough.

Looking for a network sniffer that collects a used-ports list to help preparing a portfilter firewall script

2004-11-12 Thread Christian Hammers
Hello I remember a network sniffer that could be run e.g. over a week to collects a list of all used tcp/udp ports which could then be used as base for creating a firewall script for hosts. Does anybody know the name of this tool? bye, -christian- -- To UNSUBSCRIBE, email to [EMAIL

Re: Looking for a network sniffer that collects a used-ports list to help preparing a portfilter firewall script

2004-11-13 Thread Christian Hammers
Hello On 2004-11-12 martin f krafft wrote: also sprach Christian Hammers [EMAIL PROTECTED] [2004.11.12.1538 +0100]: I remember a network sniffer that could be run e.g. over a week to collects a list of all used tcp/udp ports which could then be used as base for creating a firewall script

Re: Legal aspects of greylisting in Europe

2004-12-06 Thread Christian Hammers
On 2004-12-05 David Schmitt wrote: On Sat, Dec 04, 2004 at 11:00:16PM +0100, Christian Storch wrote: After the first message would be accepted within(!) the open window of suggested 1 - 4 hours after initial trial it should be whitelisted for about one month. So the effect would be, that

Re: [OT] Backup on DLT (recommandation)

2005-01-08 Thread Christian Hammers
Hello Michelle On 2005-01-08 Michelle Konzack wrote: Because my old DAT is not more enough, I consider to buy a DLT with 80-160 GByte. Because I have no experience with it, I like to here some suggestions. My only problem is that my purse is very limited to =700 Euro. Why not take a couple

Re: 1 LAN, 2 IPs (Routing Problems)

2000-02-19 Thread Christian Hammers
- the choice of the GNU generation. Join the Debian Project http://www.debian.org Christian Hammers * Oberer Heidweg 35 * D-52477 Alsdorf * Tel: 02404-25624 50 3C 52 26 3E 52 E7 20 D2 A1 F5 16 C4 C9 D4 D3 1024/925BCB55 1997/11/01

Re: OK I should have asked for this earlier

2000-04-22 Thread Christian Hammers
administrable, and *not* as big as the debian ticket system. It's easy to write a nice web gui for it (I did). bye, -christian- -- Linux - the choice of the GNU generation. Join the Debian Project http://www.debian.org Christian

Re: LDAP on debian

2000-05-17 Thread Christian Hammers
automatically. If you have questions just ask. bye, -christian- -- Linux - the choice of the GNU generation. Join the Debian Project http://www.debian.org Christian Hammers * Oberer Heidweg 35 * D-52477 Alsdorf * Tel: 02404-25624

Re: secret data for php pages

2000-06-08 Thread Christian Hammers
to be called as cgi but it's ok from the security point of view. http://stein.cshl.org/software/sbox/ bye, -christian- -- Linux - the choice of the GNU generation. Join the Debian Project http://www.debian.org Christian Hammers

Re: Debian and LDAP

2000-07-30 Thread Christian Hammers
) --- Linux - the choice of the GNU generation. Join the Debian Project http://www.debian.org Christian Hammers * Oberer Heidweg 35 * D-52477 Alsdorf * Tel.: 02404-25624 0AA3 E879 1D82 F59E 77A4 0096 911F 4AE6 86A1

Re: Debian and LDAP

2000-08-02 Thread Christian Hammers
bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 ch@westend.com Internet Security for ProfessionalsFax 0241/911879 WESTEND ist CISCO Systems Partner - Premium Certified

Re: Routing

2000-08-29 Thread Christian Hammers
On Tue, 29.08.00 09:48 -0700, Kevin wrote: I've got my network on 10.0.0.0/24. The gateway is 10.0.0.1 and the bridge/router is on 10.0.0.1. I need to setup a static route in the gateway that says anything for 10.1.1.0/24 should use 10.0.0.1 as its next hop. From my view I can't do

Re: MySQL vs. Postgres

2000-08-30 Thread Christian Hammers
On Wed, 30.08.00 18:02 +0200, Dariush Pietrzak wrote: Hmm, if you need fast why use sql server? you could use databases in files. they're fast, simple etc. Which file based database system is faster than mysql? I tried Berkeley db3 (although with transaction code) and it was horrible slow! bye,

Re: MySQL search/replace. help please

2000-09-07 Thread Christian Hammers
On Thu, 07.09.00 18:59 +, t s a d i wrote: hello gang! yo man! what i need to do is to search out all occurences of the string www.olddomain.com and change it to www.mynewdomain.com. Well, I go the simple way for this problems: mysqldump --opt database table \ | sed

SQL/LDAP Backend for DNS? (was: Web-Based DNS Frontend)

2001-03-22 Thread Christian Hammers
, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 ch@westend.com Internet Security for ProfessionalsFax 0241/911879 WESTEND ist CISCO Systems Partner - Premium Certified

Re: disk partition schemes

2001-06-30 Thread Christian Hammers
On Fri, Jun 15, 2001 at 10:13:33AM -0400, Kevin J. Menard, Jr. wrote: Basically, I have 20 gigs of space to tinker with (well, there's really 40 there, but I run a hardware RAID 10). I also have half a gig of SDRAM (sure this would matter with swap space). Now, I have no problem

Re: disk partition schemes

2001-07-03 Thread Christian Hammers
On Mon, Jul 02, 2001 at 03:12:31PM +0200, Russell Coker wrote: If your root file system is at the start then it is unlikely to be large enough to break any boot loaders. Recent boot loaders are very capable... fill it up to more than 512MB (was it that number?) and then compile a new kernel

Re: IP Accounting and 2.4

2001-07-07 Thread Christian Hammers
On Tue, Jul 03, 2001 at 05:44:42PM -0500, Chad C. Walstrom wrote: I'm interested in finding out what others have done for IP accounting for a large number of customers. (Rate limiting and traffic shaping We use CISCO and now have moved our accounting to CISCO's Netflow, i.e. the routers export

Maildir with indixes

2001-10-10 Thread Christian Hammers
Hello Does anybody knows a Maildir variant that supports index databases to allow faster searching for e.g. subject/to/from headers? I'm looking for a way to store my old mail and archives and maildir seems to be the best fitting to search with grep/find but an index e.g. a berkeley db2 file

replicating, balanced web-server with *write* access?

2001-11-10 Thread Christian Hammers
to database. But tell that your customers.. The ideal solution would be a network filesystem like www.inter-mezzo.org but it does not appear to be really mature and tested in real life conditions. So any idea? bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel

Re: replicating, balanced web-server with *write* access?

2001-11-10 Thread Christian Hammers
On Sun, Nov 11, 2001 at 02:09:01PM +1100, Jeff Waugh wrote: RAID on Network Block Devices. You get the benefits of RAID, but over a number of different machines, perhaps even on different networks if the topology allows for the performance requirements. Does it really allow writing in *both*

Re: replicating, balanced web-server with *write* access?

2001-11-11 Thread Christian Hammers
On Sun, Nov 11, 2001 at 06:14:23PM +0100, Russell Coker wrote: 1) Use rsync to transfer files, and for writes have some sort of database push (EG use ssh to run a program on the primary server which does the update). Then of course the data you read won't be as new as the data you've

Re: procmail

2001-12-17 Thread Christian Hammers
On Mon, Dec 17, 2001 at 09:46:33AM +1100, Craig Sanders wrote: PS: there's no such thing as a BCC header in incoming mail. it is stripped either by the user-agent when sending a message or, at the latest, by the MTA when it receives the message. it can't be used to sort mail because it doesn't

BGP4/OSPF routing daemon for Linux?

2002-02-28 Thread Christian Hammers
Hello I would like to replace a Cisco router by a Linux box and therefore need a stable(!) BGP4/OSPF routing daemon. Has anybody here ever used Zebra/MRTd/gated in production environment? thanks, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 ch

Re: webmail

2002-06-16 Thread Christian Hammers
visiting your web page for their experiences to complete them... anyways, please don't remove this page, I will surely need it soon :-)) bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 ch@westend.com Internet Security for ProfessionalsFax 0241

/usr/lib/sendmail replacement for chroot and localhost:25

2002-07-09 Thread Christian Hammers
and a mail-transport-agent which would force me to have a daemon running that looks into (each!) chroot /var/spool/mta-queue for new mail. I tried a small sendmail replacement (ssmtp 2.50.6) but it seems to have some problems... bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und

New approach with removable IDE RAID Backup (was: Tape Question)

2002-08-27 Thread Christian Hammers
and easier when restoring. Obviously, just mount it. - More capacity per medium. Splitting up across several media makes things complicated. Any comments? bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 ch@westend.com Internet Security

Re: New approach with removable IDE RAID Backup (was: Tape Question)

2002-08-27 Thread Christian Hammers
(restoring from a tape is hard if you cannot boot anymore...) bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 ch@westend.com Internet Security for ProfessionalsFax 0241/911879 WESTEND ist CISCO Systems Partner - Authorized Reseller

UDP checksums fail with basic inetd services at high rates

2002-09-11 Thread Christian Hammers
but not incorrect packages?! I tried inetd and xinetd on 2.4 kernels and even using the echo service of a cisco router. (the router reported no problems, just my linux host) bye, -christian- [1]: iperf --interval=10 --port=7 --udp --bandwidth=1M --num=1200M -c host -- Christian HammersWESTEND

Problems with sync NFSv3

2002-10-23 Thread Christian Hammers
316516 0 0 0 8660 3244 7449 0 9 91 0 0 2 26804 7752 187312 316516 0 0 0 8216 3090 7093 9 10 81 0 0 0 26804 9376 187312 316516 0 0 0 6780 2579 5907 0 9 91 0 0 0 26804 9400 187312 316516 0 0 0 0 11434 0 0 100 -- Christian

Bind patches are available at ISC

2002-11-14 Thread Christian Hammers
Hi For those of you who would not like to upgrade or wait for the DSA, here are the ISC patches for BIND 4 and 8: http://www.isc.org/products/BIND/patches/bind833.diff bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 ch@westend.com Internet

Re: [d-security] Apache Virtual Hosts Chroot ?

2003-02-25 Thread Christian Hammers
Hello On Tue, Feb 25, 2003 at 10:15:15AM +0100, debian-isp wrote: - chrooting virtual hosts in apache ? We had great success with a tiny tool called sbox. All CGI/PHP requests are rewritten to /cgi-bin/sbox?... This sbox then looks to the files owner and changes it's uid to the one (if it's

Re: Redundant email servers

2003-03-11 Thread Christian Hammers
? You could use drbd, the distributed block device. Works fine here. (Also this makes the ip takeover a bit harder!) bye, -christian- -- Christian Hammers WESTEND GmbH | Internet-Business-Provider Technik CISCO Systems Partner - Authorized Reseller

Re: SASL on QPOPPER 4.0.4

2003-05-20 Thread Christian Hammers
On Mon, May 19, 2003 at 08:40:34PM -0400, Gene Grimm wrote: bad certificate TLS/SSL Handshake failed: -1 Any suggestions on where to look to solve this error? Look at www.openssl.org. Esp. try openssl x509 -text -in my-cert.pem and see if the data inside makes sense. You

Re: ntop with Imagestream WANic

2003-06-05 Thread Christian Hammers
- -- Christian Hammers WESTEND GmbH | Internet-Business-Provider Technik CISCO Systems Partner - Authorized Reseller Lütticher Straße 10 Tel 0241/701333-11 ch@westend.comD-52064 Aachen Fax 0241/911879

A user-mode-linux / virtual networking / zebra HOWTO!

2003-06-19 Thread Christian Hammers
Hello I've played around a lot with user mode linux and virtual networking under linux because I wanted to learn OSPF and BGP but had only a single computer to play with. What I came up with was a working setup consisting of three virtual hosts that are interconnected over three virtual

Why is Linux sending icmp redirects...

2003-11-20 Thread Christian Hammers
Hello It seems that my linux router is sending icmp redirect messages to a host telling him that it should use a gateway which is not on the same ip subnet. According to http://www.faqs.org/rfcs/rfc792.html this is not valid and so I'm wondering. The problem occured when two hosts (.66.54 and

Re: spec-ing/dimensioning a server?

2003-11-25 Thread Christian Hammers
On Tue, Nov 25, 2003 at 09:13:48AM -0700, Nate Duehr wrote: Depending on how you're doing your backups, an inexpensive upgrade to a CD-RW drive vs. the CD-R that's on your list might be useful. I wouldn't fully trust CD-RW for backups, but it's handy to have to make quick images of the

kernel: svc: bad direction 65549, dropping request

2004-01-12 Thread Christian Hammers
. tcpdump on the external NIC shows no strange/spoofed traffic which would indicate wrong iptable rules. Any hints? bye, -christian- -- Christian Hammers WESTEND GmbH | Internet-Business-Provider Technik CISCO Systems Partner - Authorized Reseller

Re: CISCO netflow graphs on Linux

2004-01-27 Thread Christian Hammers
On Mon, Jan 26, 2004 at 11:46:39AM +0200, Craig Schneider wrote: Can anyone recommend software to graph Cisco's netflow traffic on Debian If you plan to do more than just graph it, you could give nprobe a try, very nice software to store netflow traffic into a sql database from where you can use

How to calculate the memory req's of N apache instances?

2004-03-01 Thread Christian Hammers
Hello What is the best way to estimate the memory requirements of say 1200 Apache Instances on a server when they currently look like this and I do not expect great variability due to PHP doing mallocs or similar? AFAIK those numbers are roughly the memory that the parent process uses (which is

Re: [Fwd: Odd postfix behavior]

2004-04-23 Thread Christian Hammers
Hello Roberto Sanchez [EMAIL PROTECTED] wrote: I have postfix setup to only accept mail from my private subnet and clients that authenticate with SMTP AUTH. However, since I am on a Bellsouth dynamic IP, I have added a line to /etc/postfix/transport: aol.com