[gentoo-user] emerge --sync and iptables
I'm notsurewhat I have been doing wrong. I have a local sync server located at 10.1.10.37 and I'm running iptables on a web server. What port do I need to open when I run emerge --sync? I have tried port 873 like below and still no luck. I do not have a firewall running on the sync server. below is an example of my firewall rules on the web server ip=publicIP iptables -Fiptables -P INPUT DROPiptables -A INPUT -i eth0 -p tcp -d$ip --dport 443 -j ACCEPTiptables -A INPUT -i eth0 -p tcp -s 10.1.10.0/24 -d $ip --dport 22 -j ACCEPT iptables -A INPUT -i eth0 -p tcp -s 10.1.10.37 -d $ip --dport 873 -j ACCEPT Any help would greatly appreciated.
Re: [gentoo-user] emerge --sync and iptables
so port 873 is going out? my default policy for OUTPUT is accept with no rules. wich port should I accept as the INPUT? On 3/18/06, Benno Schulenberg [EMAIL PROTECTED] wrote: Dan Sheffner wrote: iptables -A INPUT -i eth0 -p tcp -d $ip --dport 443 -j ACCEPT iptables -A INPUT -i eth0 -p tcp -s 10.1.10.0/24 -d $ip --dport 22 -j ACCEPTThese two are incoming, so --dport is correct. iptables -A INPUT -i eth0 -p tcp -s 10.1.10.37 -d$ip --dport 873 -j ACCEPTRsync is outgoing, toward port 873, so the answer is coming backfrom that port: --sport.Benno--gentoo-user@gentoo.org mailing list
[gentoo-user] GOCR and Tif
Hello, I need to convert a folder of Tiff images into text files. I have tried to emerge --gocr but in the man it says that it only supports certain formats. Have anyone ever accomplished this?
Re: [gentoo-user] ways to update portage
emerge-webrsync should work fine over port 80. Can't you configure the firewall to accept this port. You could also write a script that opens the port calls emerge-webrsync and then locks it back down if you don't want that port open. Another safe way to do it is to run it through a proxy server. I'm not sure if this is the best way but certainly should work.On 2/24/06, Rick van Hattem [EMAIL PROTECTED] wrote: On Monday 13 February 2006 19:40, Daniel da Veiga wrote: I have this server at work, it has been running ok for a long time, but I'd like to install some new apps to it, but I have a strongly configured firewall (no rsync) and emerge-webrsync seems to fail every time. Is there another way to update portage tree? For my first update I downloaded the snapshot and decompressed it directly to the filesystem (but that requires a reboot and its kinda brute force). Is there a way to download the snapshot and make emerge or even emerge-webrsync to use the downloaded file instead of trying to download a new one? Thanks for any sugestion. -- Daniel da Veiga Computer Operator - RS - Brazil -BEGIN GEEK CODE BLOCK- Version: 3.1 GCM/IT/P/O d-? s:- a? C++$ UBLA++ P+ L++ E--- W+++$ N o+ K- w O M- V- PS PE Y PGP- t+ 5 X+++ R+* tv b+ DI+++ D+ G+ e h+ r+ y++ --END GEEK CODE BLOCK--And it isn't possible to enter the proxy data for emerge-webrsync (if there is any)Btw, just packing /usr/portage from another system and unpacking it againshouldn't need a reboot, after unpacking it should be able to run.--Rick van Hattem Rick.van.Hattem(at)Fawo.nl
[gentoo-user] dual nic cards
I'm trying to setup dual nics on my server but I seem to be doing something wrong. Below is my /etc/conf.d/net file. As you can see my public address pointing to the web is 70.88.74.105 and the local one is 10.1.10.5. As soon as I enamble eth1 eth0 won't ping out from another box. It may be something simple but I don't know what I'm doing wrong. Please help. This blank configuration will automatically use DHCP for any net.* # scripts in /etc/init.d. To create a more complete configuration, # please review /etc/conf.d/net.example and save your configuration # in /etc/conf.d/net (this file :]!). config_eth0=( 70.88.74.105 netmask 255.255.255.0 broadcast 70.255.255.255) config_eth1=( 10.1.10.5 netmask 255.255.255.0 broadcast 10.1.10.255) # Here's how todo routing if you need it - the below sets the default gateway routes_eth0=( default via 70.88.74.110 )
Re: [gentoo-user] http-replicator: error: invalid directory '/var/cache/http-replicator' [ ok ]
Can you please post your make.conf. Also I don't understand this?
Don't the [1] and [2] in the lines below invalidate them as URL's? They
don't work in a browser, maybe wget can use them?.
The error is happening when I execute /etc/init.d/http-replicator
start. Why would you use wget that is to just download files??
What do you mean also by invalidate?
On 1/27/06, Bill Roberts [EMAIL PROTECTED] wrote:
On 12:09 Fri 27 Jan , Dan Sheffner wrote:I'm trying to get the http replicator working. I'm not sure what I'm doingwrong.I assume you were using the howto:
http://gentoo-wiki.com/HOWTO_Download_Cache_for_LAN-Http-ReplicatorI noticed a couple of minor differences from my settings:Below is what my make.conf looks like on the server#
These settings were set by the catalyst build scrDon't the [1] and
[2] in the lines below invalidate them as URL's? They
don't work in a browser, maybe wget can use them?ipt that automaticallybuilt this stage# Please consult /etc/make.conf.example for a more detailed exampleCFLAGS=-O2 -march=pentium4
CHOST=i686-pc-linux-gnuCXXFLAGS=${CFLAGS}SYNC=rsync://rsync.namerica.gentoo.org/gentoo-portageDon't the [1] and [2] in the lines below invalidate them as URL's? They
don't work in a browser, maybe wget can use them?GENTOO_MIRRORS=[1]http://gentoo.osuosl.org/http_proxy=[2]http://10.1.10.37.com:8080RESUMECOMMAND= /usr/bin/wget -t 5 --passive-ftp \${URI} -O
\${DISTDIR}/\${FILE}Below is what my client make.conf# These settings were set by the catalyst build script that automaticallybuilt this stage# Please consult /etc/make.conf.example for a more detailed example
CFLAGS=-O2 -march=pentium3CHOST=i686-pc-linux-gnuCXXFLAGS=${CFLAGS}USE=mdadmSYNC=rsync://10.1.10.37/gentoo-portage
Same URL issue here:http_proxy=[3]http://10.1.10.37.com:8080RESUMECOMMAND= /usr/bin/wget -t 5 --passive-ftp \${URI} -O\${DISTDIR}/\${FILE}
Here is the proof that the rights are correctlocalhost ~ # ls -ld /var/cache/http-replicator/drwxrwxrwx 2 portage portage 8192 Jan 25 21:53 /var/cache/http-replicator/My permissions were a bit different:
drwxr-xr-x2 portage portage 36568 Jan 25 10:15 /var/cache/http-replicator/I run the command repcacheman and it works fine with the below outputFound 22746 ebuilds.
Extracting the checksumsDone!SUMMARY:Found 0 duplicate file(s).Deleted 0 dupe(s).Found 19 new file(s).Added 0 of those file(s) to the cache.
Rejected 0 corrupt or incomplete file(s).19 Unknown file(s) that are not listed in portageYou may want to delete them yourselfDone!When I go to start the server it says. And this is where I believe it
fails.I have also tried repcacheman --user portage --dir/var/cache/http-replicatorlocalhost / # /etc/init.d/http-replicator restart* Stopping Http-Replicator ...
No http-replicator found running; none killed. [ ok ]* Starting Http-Replicator ...usage: http-replicator [options]http-replicator: error: invalid directory '/var/cache/http-replicator' [
ok ]My /etc/conf.d/http-replicator looks identicalBelow is my /etc/conf.d/http-replicatorHope these notes help. It works great once in place.Good luckBill Roberts
[gentoo-user] http-replicator: error: invalid directory '/var/cache/http-replicator' [ ok ]
I'm trying to get the http replicator working.
I'm not sure what I'm doing wrong. Below are the steps I did to prep
the machine. I know that the user portage has write/read access as
specified in /etc/conf.d/http-replicator. I also went over step by step
with a user that has been using this before this package was put into
portage. ANY HELP WOULD BE GREATLY Appreciated.
echo net-proxy/http-replicator /etc/portage/packcage.keywords
emerge http-replicator
Below is what my make.conf looks like on the server
# These settings were set by the catalyst build script that automatically built this stage
# Please consult /etc/make.conf.example for a more detailed example
CFLAGS=-O2 -march=pentium4
CHOST=i686-pc-linux-gnu
CXXFLAGS=${CFLAGS}
SYNC=rsync://rsync.namerica.gentoo.org/gentoo-portage
GENTOO_MIRRORS=http://gentoo.osuosl.org/
http_proxy=http://10.1.10.37.com:8080
RESUMECOMMAND= /usr/bin/wget -t 5 --passive-ftp \${URI} -O \${DISTDIR}/\${FILE}
Below is what my client make.conf
# These settings were set by the catalyst build script that automatically built this stage
# Please consult /etc/make.conf.example for a more detailed example
CFLAGS=-O2 -march=pentium3
CHOST=i686-pc-linux-gnu
CXXFLAGS=${CFLAGS}
USE=mdadm
SYNC=rsync://10.1.10.37/gentoo-portage
http_proxy=http://10.1.10.37.com:8080
RESUMECOMMAND= /usr/bin/wget -t 5 --passive-ftp \${URI} -O \${DISTDIR}/\${FILE}
Here is the proof that the rights are correct
localhost ~ # ls -ld /var/cache/http-replicator/
drwxrwxrwx 2 portage portage 8192 Jan 25 21:53 /var/cache/http-replicator/
localhost ~ #
I run the command repcacheman and it works fine with the below output
Found 22746 ebuilds.
Extracting the checksums
Done!
SUMMARY:
Found 0 duplicate file(s).
Deleted 0 dupe(s).
Found 19 new file(s).
Added 0 of those file(s) to the cache.
Rejected 0 corrupt or incomplete file(s).
19 Unknown file(s) that are not listed in portage
You may want to delete them yourself
Done!
When I go to start the server it says. And this is where I believe it fails.
I have also tried repcacheman --user portage --dir /var/cache/http-replicator
localhost / # /etc/init.d/http-replicator restart
* Stopping Http-Replicator ...
No http-replicator found running; none killed. [ ok ]
* Starting Http-Replicator ...
usage: http-replicator [options]
http-replicator: error: invalid directory '/var/cache/http-replicator' [ ok ]
Below is my /etc/conf.d/http-replicator
## Config file for http-replicator
## sourced by init scripts automatically
## GENERAL_OPTS used by repcacheman
## DAEMON_OPTS used by http-replicator
## Set the cache dir
GENERAL_OPTS=--dir /var/cache/http-replicator
## Change UID/GID to user after opening the log and pid file.
## 'user' must have read/write access to cache dir:
GENERAL_OPTS=$GENERAL_OPTS --user portage
## Don't change or comment this out:
DAEMON_OPTS=$GENERAL_OPTS
## Do you need a proxy to reach the internet?
## This will forward requests to an external proxy server:
## Use one of the following, not both:
#DAEMON_OPTS=$DAEMON_OPTS --external somehost:1234
#DAEMON_OPTS=$DAEMON_OPTS --external username:[EMAIL PROTECTED]:port
## Local dir to serve clients. Great for serving binary packages
## See PKDIR and PORTAGE_BINHOST settings in 'man make.conf'
## --alias /path/to/serve:location will make /path/to/serve
## browsable at http://http-replicator.com:port/location
DAEMON_OPTS=$DAEMON_OPTS --alias /usr/portage/packages/All:All
## Dir to hold the log file:
DAEMON_OPTS=$DAEMON_OPTS --log /var/log/http-replicator.log
## Make the log messages less and less verbose.
## Up to four times to make it extremely quiet.
#DAEMON_OPTS=$DAEMON_OPTS --quiet
#DAEMON_OPTS=$DAEMON_OPTS --quiet
## Make the log messages extra verbose for debugging.
#DAEMON_OPTS=$DAEMON_OPTS --debug
## The ip addresses from which access is allowed. Can be used as many times
## as necessary. Access from localhost is allowed by default.
DAEMON_OPTS=$DAEMON_OPTS --ip 192.168.*.*
DAEMON_OPTS=$DAEMON_OPTS --ip 10.*.*.*
## The proxy port on which the server listens for http requests:
DAEMON_OPTS=$DAEMON_OPTS --port 8080
