Re: OT: Help with Damaged data on a hard drive

2010-07-10 Thread Volker Kuhlmann
On Sat 10 Jul 2010 12:37:22 NZST +1200, Daniel Hill wrote:

Sounds to me like the disk is dead because it's got read error, not
because the sata plug broke. No amount of data damage you can do with a
broken plug would affect read performance with dd once you connect it up
properly. You don't even need ddrescue. If you haven't yet done so, do
that now and start again.

If the disk had read errors (average 1MB/s sounds rather like it) then
technically you run rescue operations on a copy of a ddrescue copy. If
you don't have the space you get only 2 goes (one on the first copy, one
on the bad disk). Buy another disk if it's important.

You can find out if the disk has surface errors by running the smartctl
command of the smartmontools package. Note that if you connect the disk
through anything involving USB then you need an adapter which is
designed properly, and a rather recent version of smartmontools.

Volker

-- 
Volker Kuhlmann
http://volker.dnsalias.net/ Please do not CC list postings to me.


Re: OT: Help with Damaged data on a hard drive

2010-07-10 Thread Daniel Hill

 On 11/07/10 10:31, Volker Kuhlmann wrote:

On Sat 10 Jul 2010 12:37:22 NZST +1200, Daniel Hill wrote:

Sounds to me like the disk is dead because it's got read error,
do you reckon the USB-SATA adapter will be fine I couldn't use a direct 
connection to my computer because I didn't have a spare SATA cable, so I 
had to use the USB-SATA adapter once we fixed the SATA plug on it

  not
because the sata plug broke. No amount of data damage you can do with a
broken plug would affect read performance with dd once you connect it up
properly.
  You don't even need ddrescue. If you haven't yet done so, do
that now and start again.
I Used ddrescue because it seems better for the job of data recovery, dd 
would just error about read errors, and I found ddrescue while looking 
for a way of skipping read errors

If the disk had read errors (average 1MB/s sounds rather like it) then
technically you run rescue operations on a copy of a ddrescue copy. If
you don't have the space you get only 2 goes (one on the first copy, one
on the bad disk). Buy another disk if it's important.
OK I've fixed the Image of the disk with testdisk, seems to work OK, 
able to mount it using an offset loopback device
and play music off of it, I'll recommend another disk too my friend 
(it's his)

You can find out if the disk has surface errors by running the smartctl
command of the smartmontools package. Note that if you connect the disk
through anything involving USB then you need an adapter which is
designed properly, and a rather recent version of smartmontools.

Volker

I tried smartctl and it seemed to pass with no errors :/ maybe I'm using 
the wrong arguments? (sorry I can't remember which ones I used)


thanks for the advice

Daniel


OT: Help with Damaged data on a hard drive

2010-07-09 Thread Daniel Hill
 my friend had a external hard (250GB) and the SATA plug broke he 
didn't know this for a while, so there is now corrupt data on the drive 
(broken partition table and some other stuff)


I've finally backed up the data (69h copy time) with GNU ddrescue

here's the problem, the best option is to make a copy of the backup and 
work on that but I don't have the space
the other two options are to work on the hard drive, or work on the 
backup image


the other problem is that I've already tried fixing the partition table 
(with testdisk) on the drive but I got read errors later on


I'm thinking the best approach would be to erase the hard drive (get a 
ride of all the errors) and dd on the backup image and work on the drive 
from there


any ideas?


Fwd: [nznog] NZRS asks for help testing a DNS feature

2010-05-24 Thread Jim Cheetham
NZRS are testing the ability of your DNS to work with names in
māori.nz (i.e. spelt correctly with the macron on the a) -- please
read the message below  visit http://www.te-reo.maori.dns.net.nz to
enable them to test.


-- Forwarded message --
From: Sebastian Castro sebast...@nzrs.net.nz
Date: Mon, May 24, 2010 at 5:49 PM
Subject: [nznog] NZRS asks for help testing a DNS feature
To: nznog nz...@list.waikato.ac.nz


Greetings NZNOG Community:

Within the context of the IDN Project, that adds five new characters
(the macronised vowels) to the set of characters valid for .nz domain
name registration, a new SLD will be created: māori.nz

All existing and future names registered under .maori.nz will be
duplicated in the DNS to be available under .māori.nz as well.  We will
use a DNS record called a DNAME to implement this functionality.

Although the DNAME record has been standard for more than 10 years, we
want to make sure domains under māori.nz will work properly. To do so,
we have prepared a test page that will let us find out the level of
DNAME support among cache resolvers.

Please visit http://www.te-reo.maori.dns.net.nz to help us with the
testing process. We will collect visits to the page and DNS queries for
particular names and correlate them to identify the number of resolvers
supporting the DNAME record. Feel free to share this link with anybody,
including other suitable mailing lists.

If you find any issue, have comments or suggestions, please let us know.

Cheers
--
Sebastian Castro
DNS Specialist
.nz Registry Services (New Zealand Domain Name Registry Limited)
desk: +64 4 495 2337
mobile: +64 21 400535


___
NZNOG mailing list
nz...@list.waikato.ac.nz
http://list.waikato.ac.nz/mailman/listinfo/nznog


Help please (Nooby) Headless Ubuntu - SHH VNC

2009-11-20 Thread Karl Fimm
Hi,

I'm a complete noob when it comes to Linux (I've been using Microsoft
operating systems since 1983).

I've got a media server box and I managed to install Ubuntu and Samba (using
http://ubuntuforums.org/showthread.php?t=202605 HOWTO: Setup Samba
peer-to-peer with Windows).

I set up VNC via SSH (mostly using
http://ubuntuswitch.wordpress.com/2007/07/01/securely-remote-control-your-ubuntu-via-putty-from-a-windows-host-vncssh/)
which works, almost, ok.

My problem is that after a reboot, I need to login using the local keyboard,
before I can remote in. I've found a variety of posts about this but (a) I'm
confused, and (b) I'm worried that I'll break what is working ok and my
family will attack me for stopping them watching videos. It's been working
fine for many months but it's stuck in my study instead of off in the
garage.

Some posts also mention problems with getting error messages on boot if
there is no monitor (error messages which require a local keyboard or mouse
OK to get rid off) which will also cause problems when I shift it to the
garage.

Any suggestions or offers of help greatfully accepted (or pointers to
linux-nerds-r-us services in Christchurch).

Thanks

Charles Finn (aka Karl Fimm) the Confused


-
The solution is as simple as ABC: Arach, Brass Man, Cormac - what was the
question?


Re: Help please (Nooby) Headless Ubuntu - SHH VNC

2009-11-20 Thread Eliot Blennerhassett
 I set up VNC via SSH (mostly using
 http://ubuntuswitch.wordpress.com/2007/07/01/securely-remote-control-your-ubuntu-via-putty-from-a-windows-host-vncssh/)
 which works, almost, ok.

 My problem is that after a reboot, I need to login using the local keyboard,
 before I can remote in.

Can you clarify.  Is the problem not getting a commandline via putty,
or not being able to get a vnc connection until you have logged in to
your desktop?

If you are just running on your local network (as opposed to accessing
from elsewhere on the internet, which the article you refer to is
about), SSH tunnelling the VNC session is overkill.

If you are running headless, you probably don't want 'remote desktop
sharing',  you want ordinary VNC service, which creates a standalone
VNC (though there is an option to automatically log one user in on
startup which might work for you)

Install an ordinary vnc server sudo apt-get install tightvncserver

Run the server, follow the prompts it gives you.
tightvncserver

It will say something like
New 'X' desktop is mymachine:1

Now you should be able to connect from VNC to mymachine:1
Note the :1, different from :0 if you are doing desktop sharing.

 Some posts also mention problems with getting error messages on boot if
 there is no monitor (error messages which require a local keyboard or mouse
 OK to get rid off) which will also cause problems when I shift it to the
 garage.

Easy enough to test before you move it.  Unplug monitor/kb/mouse,
boot, replug monitor, see where it got to.
If it works, no need to ask for more help...

--
Eliot


Re: Help please (Nooby) Headless Ubuntu - SHH VNC

2009-11-20 Thread Eliot Blennerhassett
This talks about getting a login window via vnc without desktop sharing.
http://ubuntuforums.org/showthread.php?t=795036

I said
 Run the server, follow the prompts it gives you.
 tightvncserver
you will need to do this via a SSH console once every time the server
is rebooted.  I'm not sure how to run it as a service... see the above
forum thread.

--
Eliot


Re: Help please (Nooby) Headless Ubuntu - SHH VNC

2009-11-20 Thread Karl Fimm
Hi Eliot,

Duh, I hadn't separated the two issues (putty vs VNC). I will experiment!

Thanks for the help.

Charles


On Sat, Nov 21, 2009 at 8:44 AM, Eliot Blennerhassett ewb...@gmail.comwrote:

  I set up VNC via SSH (mostly using
 
 http://ubuntuswitch.wordpress.com/2007/07/01/securely-remote-control-your-ubuntu-via-putty-from-a-windows-host-vncssh/
 )
  which works, almost, ok.
 
  My problem is that after a reboot, I need to login using the local
 keyboard,
  before I can remote in.

 Can you clarify.  Is the problem not getting a commandline via putty,
 or not being able to get a vnc connection until you have logged in to
 your desktop?

 If you are just running on your local network (as opposed to accessing
 from elsewhere on the internet, which the article you refer to is
 about), SSH tunnelling the VNC session is overkill.

 If you are running headless, you probably don't want 'remote desktop
 sharing',  you want ordinary VNC service, which creates a standalone
 VNC (though there is an option to automatically log one user in on
 startup which might work for you)

 Install an ordinary vnc server sudo apt-get install tightvncserver

 Run the server, follow the prompts it gives you.
 tightvncserver

 It will say something like
 New 'X' desktop is mymachine:1

 Now you should be able to connect from VNC to mymachine:1
 Note the :1, different from :0 if you are doing desktop sharing.

  Some posts also mention problems with getting error messages on boot if
  there is no monitor (error messages which require a local keyboard or
 mouse
  OK to get rid off) which will also cause problems when I shift it to the
  garage.

 Easy enough to test before you move it.  Unplug monitor/kb/mouse,
 boot, replug monitor, see where it got to.
 If it works, no need to ask for more help...

 --
 Eliot



Re: Help please (Nooby) Headless Ubuntu - SHH VNC

2009-11-20 Thread Derek Smithies

On Sat, 21 Nov 2009, Karl Fimm wrote:


Hi,

I'm a complete noob when it comes to Linux (I've been using Microsoft
operating systems since 1983).

No worries there - we all started at that point.



Any suggestions or offers of help greatfully accepted (or pointers to
linux-nerds-r-us services in Christchurch).


The problem is that the network interface is being established when you 
log in as a user with the keyboard on your headless box.


Inside the network configuration gui, there is a tickbox at the bottom of 
the screen which says (or something like),

  make interface available to all users.

Make sure this box is ticked, so the interface is created at boot time.

--
I found that the package
libpam-smbpass

was not installed by default. This should be installed - adding it helped 
samba work for me. (along with gvfs).


---

Hope this helps - any questions, please ask.

Derek.
--
Derek Smithies Ph.D.
IndraNet Technologies Ltd.
Email: de...@indranet.co.nz
ph +64 3 365 6485
Web: http://www.indranet-technologies.com/



Re: Help please (Nooby) Headless Ubuntu - SHH VNC

2009-11-20 Thread Hadley Rich
On Sat, 2009-11-21 at 07:45 +1300, Karl Fimm wrote:
 My problem is that after a reboot, I need to login using the local
 keyboard, before I can remote in.

Probably the easiest way around this is to make your user automatically
log in at boot.

You can do this through the dialog on the top menu;

System - Administraion - Login Screen

hads

-- 
http://nicegear.co.nz
New Zealand's Open Source Hardware Supplier



Re: Help please (Nooby) Headless Ubuntu - SHH VNC

2009-11-20 Thread Derek Smithies

Hi,
 I suggest you add to the box the package ssh, which is a metapackage for 
the ssh server and ssh client.


Then test if you can use ssh to connect to the box in question.


End gobbledy gook linux commands.

as a user on the box you are setting up to run headless, do
sudo apt-get install ssh
Ok.. From the instructions you have followed, you already have ssh 
installed on your media box.


Similar command on a different linux box, or install a ssh client on a 
windows box.
 You should now be able to open a terminal on the remote box and establish 
a ssh (secure shell) connection to the box you are running headless. This 
verifies that the network interface is established and running.


===
Now reboot the box you are setting up as headless.

From earlier reports, you said that you could not do vnc to it. ok.

Can you use ssh to connect to the box you are settng up as headless?

If not, then the box does not have an active network interface, and the 
problem is not vnc.



Derek.
===
On Sat, 21 Nov 2009, Karl Fimm wrote:



Hi Eliot,

After a reboot, I can get a command line via putty, I just can't VNC.

Thanks

Charles

On Sat, Nov 21, 2009 at 8:44 AM, Eliot Blennerhassett ewb...@gmail.com
wrote:
   My problem is that after a reboot, I need to login using the
  local keyboard,
   before I can remote in.

Can you clarify.  Is the problem not getting a commandline via putty,
or not being able to get a vnc connection until you have logged in to
your desktop?






--
Derek Smithies Ph.D.
IndraNet Technologies Ltd.
Email: de...@indranet.co.nz
ph +64 3 365 6485
Web: http://www.indranet-technologies.com/


Re: Help please (Nooby) Headless Ubuntu - SHH VNC

2009-11-20 Thread Christopher Sawtell
2009/11/21 Karl Fimm karlf...@gmail.com


 Hi Eliot,

 After a reboot, I can get a command line via putty, I just can't VNC.

 Does the bootup sequence start the VNC server running?

You can check this with the one liner on the terminal after the boot-up
sequence has completed:-

ps aux | grep vnc | grep -v grep

If you get a line of text it's running, if not, not.


If not you can add the name of the VNC executable file to the file
/etc/rc.local before, i.e. above, the line which is the one containing the
command 'exit 0'

That will start the VNC server during the boot up process.

I am  deliberately vague about the actual name of the executable file
because there are several versions of VNC available for Ubuntu, and I do not
know their precise names. Probably something like 'vnc-server'. However it
will have the letters vnc in the name, and the command:-

find /bin /sbin /usr/bin /usr/sbin -iname '*vnc*'

( include the asterisks and single quotes on the command line ) will
definitely find it for you.

HTH

-- 
Sincerely etc.
Christopher Sawtell


Help convert a Mac user to Linux

2009-06-03 Thread Gauland, Michael
Due to a combination of factors, such as the age of her Mac, the cost of
a new Mac, and the constant presence of two Linux die-hards in the
house, my partner is willing to at least consider replacing her iMac
with a Linux system.

 

We household geeks have been, if not happy, at least willing to play and
tweak and nurse our designed-for-Windows machines as necessary, but this
new system will need to be pretty robust. So, the first task is to find
a moderately-priced (cheaper than a recent-vintage Mac), moderately
capable system which we can be confident is fully Linux-compatible. Any
idea where we can find such a beast?  Reliable suspend would be a big
plus, though perhaps not essential if cold-booting is zippy enough. Any
advice on shops in Christchurch that do this sort of thing, or just
general advice on determining how well a given machine (or component)
will play with Linux?

 

This doesn't need to be a flash system.  Mostly, it will be used for web
browsing, e-mail, light word processing, and photo cataloguing (any
recommendations that an iPhoto user would be happy with?), though a key
requirement is a replacement for Quicken (I believe gnucash will be
suitable, though other recommendations are welcome).

 

Anyone have any experiences to share on migrating a Mac user?

 

Thanks,

Mike

 


**
This electronic message together with any attachments is confidential. If
you receive it in error: (i) you must not use, disclose, copy or retain
it; (ii) please contact the sender immediately by reply email and then
delete the emails. Views expressed in this email may not be those of the
Airways Corporation of New Zealand Limited
**



Re: Help convert a Mac user to Linux

2009-06-03 Thread David Lowe
On Wed, Jun 3, 2009 at 6:43 PM, Gauland, Michael 
michael.gaul...@airways.co.nz wrote:

  This doesn’t need to be a flash system.  Mostly, it will be used for web
 browsing, e-mail, light word processing, and photo cataloguing (any
 recommendations that an iPhoto user would be happy with?), though a key
 requirement is a replacement for Quicken (I believe gnucash will be
 suitable, though other recommendations are welcome).



 I'll leave it to others to comment on hardware.. I have tried both gnucash
and kmymoney. The latter wins hands down in my book. The UI will be familar
coming from Quicken, and it imports NZ bank statements happily.
Good luck on the convert.
- David


Re: Help convert a Mac user to Linux

2009-06-03 Thread Andrew Packer
On Wed, 2009-06-03 at 18:43 +1200, Gauland, Michael wrote:
 Due to a combination of factors, such as the age of her Mac, the cost
 of a new Mac, and the constant presence of two Linux die-hards in the
 house, my partner is willing to at least consider replacing her iMac
 with a Linux system.

snip
 
 This doesn’t need to be a flash system.  Mostly, it will be used for
 web browsing, e-mail, light word processing, and photo cataloguing
 (any recommendations that an iPhoto user would be happy with?), though
 a key requirement is a replacement for Quicken (I believe gnucash will
 be suitable, though other recommendations are welcome).
 
If you don't object to proprietary software, look at Moneydance
(www.moneydance.com) as a replacement for Quicken.  It's written in
Java, runs on Linux, Mac and Windows platforms at least, is inexpensive
and has an active online users' board.  I've been using it for seven
years (first on RedHat and later on Ubuntu systems) and haven't missed
Quicken at all.  My wife finds Moneydance easy enough to use, too.

=Andrew
 




Re: Help convert a Mac user to Linux

2009-06-03 Thread Andrew Errington
On Wed, June 3, 2009 15:43, Gauland, Michael wrote:
snip
 This doesn't need to be a flash system.  Mostly, it will be used for web
 browsing, e-mail, light word processing, and photo cataloguing (any
 recommendations that an iPhoto user would be happy with?), though a key
 requirement is a replacement for Quicken (I believe gnucash will be
 suitable, though other recommendations are welcome).

Is it to be a laptop or desktop?  I am very happy with my Acer Aspire One
netbook running Mepis 8.0.

For your requirements:

Web Browsing - Firefox, natch.
email- KMail or Thunderbird
Wordprocessing - OpenOffice (or KOffice, or AbiWord for just wordprocessing)
PhotoCataloguing - I use Kimdaba, now KPhotoAlbum, but I think Picasa runs
on Linux (maybe with Wine)
Chequebook - I use MS Money 2001 on a Windows PC.  This has bothered me
for some time, but it really is a fantastic piece of software.  I recently
tried KMyMoney, but it doesn't grab me (it's close, and looks like Money
or Quicken).  I am following up on Andrew Packer's suggestion of
MoneyDance, as that always crops up in discussions like these.  I don't
mind paying for good software.

 Anyone have any experiences to share on migrating a Mac user?

I had a friend who was a die-hard Mac user, and he went to Oz.  I could
ask him which removal company he used.

A



Re: text sizing - Ekiga Help

2009-05-24 Thread Barry Marchant

To change the display font in ekiga Help..

1.  open ekiga
2.  select Help -- Contents
3.  select Edit -- Preferences
4.  unselect 'Use System Fonts'
5.  make your choice

Barry


Nick Rout wrote:

For posterity you should tell us how.

On Sun, May 24, 2009 at 10:54 PM, Barry Marchant
barr...@paradise.net.nz wrote:


Replying to myself . I have now solved the problem!!!


Barry Marchant wrote:


Hi All,

I am playing with kde and ekiga but am having trouble reading the
miniscule serif text of the ekiga help file. I have looked at text sizes set
by kcontrol to no avail, and anyway all text is set up as sans-serif fonts
so it does not follow kcontrol fonts.

Any idea how I can change the font size used by ekiga help?

TIA

Barry











Re: Help

2009-05-19 Thread Christopher Sawtell
2009/5/19 Andrew Errington a.erring...@lancaster.ac.uk

 On Tue, May 19, 2009 10:30, Julian Warwick Bethell wrote:
  Do have a video  setting up DMZ

 I can haz cheezburger?


Not until you have completed your adult literacy course.

http://www.tec.govt.nz/templates/StandardSummary.aspx?id=1171
or
http://www.cpit.ac.nz/subjects/community_studies/programmes?a=24897
or, more to the point
0800 24 24 76

-- 
Sincerely etc.
Christopher Sawtell


Re: Help

2009-05-19 Thread Phill Coxon
On Tue, 2009-05-19 at 16:55 +1200, Robert Fisher wrote:

 All of the above.

+ showing a little appreciation for help already received would go a
long way. 




Re: Help

2009-05-19 Thread David Lowe
On Tue, May 19, 2009 at 8:39 PM, Phill Coxon phi...@xtra.co.nz wrote:

 On Tue, 2009-05-19 at 16:55 +1200, Robert Fisher wrote:

  All of the above.

 + showing a little appreciation for help already received would go a
 long way.


 I just wanted to say that the value of these threads far outweighs any
response to the OP. I follow them all closely and learn a lot. I even save
some of them for future reference (like for the day I decide to tackle web
servers). So, even if the OP cannot express his gratitude, let me say a
hearty thanks to you all. I especially enjoyed the recent thread about
underground wiring, having just done some (and managed not to bugger up too
much). I has a cheezburger for you all next time we meet in the real
world

- David


Re: Help

2009-05-19 Thread Jim Cheetham
On Wed, May 20, 2009 at 4:56 PM, David Lowe da...@thistledown.co.nz wrote:
 I just wanted to say that the value of these threads far outweighs any
 response to the OP.

Excellent to hear -- in many ways that is the whole reason we have a
mailing list in the first place, and why even a badly-presented
question is worth a best-guess answer ...

-jim


Re: Help

2009-05-19 Thread chris
I also would like to endorse these remarks.
many thanks as I too appreciate the experience and answers given. 
Chris Thomas
On Wed, 2009-05-20 at 16:56 +1200, David Lowe wrote:
 On Tue, May 19, 2009 at 8:39 PM, Phill Coxon phi...@xtra.co.nz
 wrote:
 On Tue, 2009-05-19 at 16:55 +1200, Robert Fisher wrote:
 
  All of the above.
 
 + showing a little appreciation for help already received
 would go a
 long way.
 
 
 I just wanted to say that the value of these threads far outweighs any
 response to the OP. I follow them all closely and learn a lot. I even
 save some of them for future reference (like for the day I decide to
 tackle web servers). So, even if the OP cannot express his gratitude,
 let me say a hearty thanks to you all. I especially enjoyed the recent
 thread about underground wiring, having just done some (and managed
 not to bugger up too much). I has a cheezburger for you all next time
 we meet in the real world
 
 - David



Help

2009-05-18 Thread Julian Warwick Bethell
Can you help me setting up a DMZ 


  

Julian Bethell
PC Technician

2/96 Wainui Street
Riccarton
Christchurch
New Zealand
tel: (03) 348-5875
mobile: 0211643666
computert...@paradise.net.nz


-Original Message-
From: Craig Falconer [mailto:cfalco...@totalteam.co.nz] 
Sent: Monday, May 18, 2009 12:58 PM
To: linux-users@it.canterbury.ac.nz
Subject: Re: USB to VGA

Leif Keane wrote, On 18/05/09 12:46:
 Hi.
 I have a small scale laptop with a 23cm (just about) screen.
 It is capable of resolutions up to 1024 X 600.
 The devise, however doesn't have a VGA out and I want to plug the thing
 into a data projector.
 
 There are USB to VGA adapters, but I'm having a bit of trouble finding one
 that works with Linux (EdUbuntu  8.04).
 
 Any thoughts or suggestions?


https://www.aquilatech.co.nz/productDetail.asp?idProduct=USB-VGA060
You need a ballsy CPU to run them thought.

There's an in-kernel module called sisusb, which supports Net2280-based 
USB dongles. 
http://gd.tuwien.ac.at/hci/x.org/X11R7.0/doc/html/sisusb.4.html or
man sisusb
for more info.



-- 
Craig Falconer
   The Total Team - Managed Systems
   Office: 0800 888 326 / +643 974 9128
   Email: workor...@totalteam.co.nz
   Web: http://www.totalteam.co.nz/



Re: Help

2009-05-18 Thread Jim Cheetham
On Mon, May 18, 2009 at 8:02 PM, Julian Warwick Bethell
jwbeth...@paradise.net.nz wrote:
 Can you help me setting up a DMZ

Is this still not working for you? You're thread-jumping, too.

Please read http://catb.org/esr/faqs/smart-questions.html and possibly
http://www.wikihow.com/Ask-a-Question-Intelligently

Then start a new message to the list (not a reply to a previous one)
and tell us what equipment you have, what the configuration is, and
what new thing you want it to do.

It's quite possible that a DMZ is not what you need, but we won't know
until you explain what you're trying to do.

-jim


Re: Help

2009-05-18 Thread Steve Holdoway
On Mon, 2009-05-18 at 20:02 +1200, Julian Warwick Bethell wrote:
 Can you help me setting up a DMZ 

yes, but don't jump all over Leif when asking!

-- 
http://www.greengecko.co.nz



RE: Help

2009-05-18 Thread Julian Warwick Bethell
I am running a web server to do some web Hosting and I want to setup a DMZ 
Orange zone on my IpCop firewall.

My web server machines IP is 192.168.0.60 and my Orange zone card is 
192.168.0.59


  

Julian Bethell
PC Technician

2/96 Wainui Street
Riccarton
Christchurch
New Zealand
tel: (03) 348-5875
mobile: 0211643666
computert...@paradise.net.nz


-Original Message-
From: jim.cheet...@gmail.com [mailto:jim.cheet...@gmail.com] On Behalf Of Jim 
Cheetham
Sent: Monday, May 18, 2009 8:15 PM
To: linux-users@it.canterbury.ac.nz
Subject: Re: Help

On Mon, May 18, 2009 at 8:02 PM, Julian Warwick Bethell
jwbeth...@paradise.net.nz wrote:
 Can you help me setting up a DMZ

Is this still not working for you? You're thread-jumping, too.

Please read http://catb.org/esr/faqs/smart-questions.html and possibly
http://www.wikihow.com/Ask-a-Question-Intelligently

Then start a new message to the list (not a reply to a previous one)
and tell us what equipment you have, what the configuration is, and
what new thing you want it to do.

It's quite possible that a DMZ is not what you need, but we won't know
until you explain what you're trying to do.

-jim



Re: Help

2009-05-18 Thread Steve Holdoway
Where do you want to see this website from ( ie intranet, office ), and what 
software are you using to host it?

On Tue, 19 May 2009 10:22:00 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

 I am running a web server to do some web Hosting and I want to setup a DMZ 
 Orange zone on my IpCop firewall.
 
 My web server machines IP is 192.168.0.60 and my Orange zone card is 
 192.168.0.59
 
 
   
 
 Julian Bethell
 PC Technician
 
 2/96 Wainui Street
 Riccarton
 Christchurch
 New Zealand
 tel: (03) 348-5875
 mobile: 0211643666
 computert...@paradise.net.nz
 
 
 -Original Message-
 From: jim.cheet...@gmail.com [mailto:jim.cheet...@gmail.com] On Behalf Of Jim 
 Cheetham
 Sent: Monday, May 18, 2009 8:15 PM
 To: linux-users@it.canterbury.ac.nz
 Subject: Re: Help
 
 On Mon, May 18, 2009 at 8:02 PM, Julian Warwick Bethell
 jwbeth...@paradise.net.nz wrote:
  Can you help me setting up a DMZ
 
 Is this still not working for you? You're thread-jumping, too.
 
 Please read http://catb.org/esr/faqs/smart-questions.html and possibly
 http://www.wikihow.com/Ask-a-Question-Intelligently
 
 Then start a new message to the list (not a reply to a previous one)
 and tell us what equipment you have, what the configuration is, and
 what new thing you want it to do.
 
 It's quite possible that a DMZ is not what you need, but we won't know
 until you explain what you're trying to do.
 
 -jim
 


-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz


RE: Help

2009-05-18 Thread Julian Warwick Bethell
I want to see this website from the intranet and the outside I am using
Linux host it 


  

Julian Bethell
PC Technician

2/96 Wainui Street
Riccarton
Christchurch
New Zealand
tel: (03) 348-5875
mobile: 0211643666
computert...@paradise.net.nz



-Original Message-
From: Steve Holdoway [mailto:st...@greengecko.co.nz] 
Sent: Tuesday, May 19, 2009 10:30 AM
To: linux-users@it.canterbury.ac.nz
Subject: Re: Help

Where do you want to see this website from ( ie intranet, office ), and what
software are you using to host it?

On Tue, 19 May 2009 10:22:00 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

 I am running a web server to do some web Hosting and I want to setup a DMZ
Orange zone on my IpCop firewall.
 
 My web server machines IP is 192.168.0.60 and my Orange zone card is
192.168.0.59
 
 
   
 
 Julian Bethell
 PC Technician
 
 2/96 Wainui Street
 Riccarton
 Christchurch
 New Zealand
 tel: (03) 348-5875
 mobile: 0211643666
 computert...@paradise.net.nz
 
 
 -Original Message-
 From: jim.cheet...@gmail.com [mailto:jim.cheet...@gmail.com] On Behalf Of
Jim Cheetham
 Sent: Monday, May 18, 2009 8:15 PM
 To: linux-users@it.canterbury.ac.nz
 Subject: Re: Help
 
 On Mon, May 18, 2009 at 8:02 PM, Julian Warwick Bethell
 jwbeth...@paradise.net.nz wrote:
  Can you help me setting up a DMZ
 
 Is this still not working for you? You're thread-jumping, too.
 
 Please read http://catb.org/esr/faqs/smart-questions.html and possibly
 http://www.wikihow.com/Ask-a-Question-Intelligently
 
 Then start a new message to the list (not a reply to a previous one)
 and tell us what equipment you have, what the configuration is, and
 what new thing you want it to do.
 
 It's quite possible that a DMZ is not what you need, but we won't know
 until you explain what you're trying to do.
 
 -jim
 


-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz



RE: Help

2009-05-18 Thread Julian Warwick Bethell

DO YOU HAVE A DMZ ORANGE networks. SETUP YOURSETF I don't know want you
meant 

  

Julian Bethell
PC Technician

2/96 Wainui Street
Riccarton
Christchurch
New Zealand
tel: (03) 348-5875
mobile: 0211643666
computert...@paradise.net.nz



-Original Message-
From: Steve Holdoway [mailto:st...@greengecko.co.nz] 
Sent: Tuesday, May 19, 2009 11:08 AM
To: linux-users@it.canterbury.ac.nz
Subject: Re: Help

From the intranet:

1. Set up apache and host the website on 192.168.0.59
2. Check it's working by pointing your browser from a machine on the Green
network to 192.168.0.59.
3. Set up DNS to resolve the website name internally to 192.168.0.59

From the internet:

1. Set up your external DNS to point to the IP address of your adsl port (
you may need to use a service like no-ip or dyndns if you have a dynamic IP
address ).
2. Using the port forwarding menus on IpCop, Forward ports 80 and 443 from
DEFAULT IP to 192.168.0.59

...
profit.


Steve

On Tue, 19 May 2009 10:56:33 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

 I want to see this website from the intranet and the outside I am using
 Linux host it 
 
 
   
 
 Julian Bethell
 PC Technician
 
 2/96 Wainui Street
 Riccarton
 Christchurch
 New Zealand
 tel: (03) 348-5875
 mobile: 0211643666
 computert...@paradise.net.nz
 
 
 
 -Original Message-
 From: Steve Holdoway [mailto:st...@greengecko.co.nz] 
 Sent: Tuesday, May 19, 2009 10:30 AM
 To: linux-users@it.canterbury.ac.nz
 Subject: Re: Help
 
 Where do you want to see this website from ( ie intranet, office ), and
what
 software are you using to host it?
 
 On Tue, 19 May 2009 10:22:00 +1200
 Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:
 
  I am running a web server to do some web Hosting and I want to setup a
DMZ
 Orange zone on my IpCop firewall.
  
  My web server machines IP is 192.168.0.60 and my Orange zone card is
 192.168.0.59
  
  

  
  Julian Bethell
  PC Technician
  
  2/96 Wainui Street
  Riccarton
  Christchurch
  New Zealand
  tel: (03) 348-5875
  mobile: 0211643666
  computert...@paradise.net.nz
  
  
  -Original Message-
  From: jim.cheet...@gmail.com [mailto:jim.cheet...@gmail.com] On Behalf
Of
 Jim Cheetham
  Sent: Monday, May 18, 2009 8:15 PM
  To: linux-users@it.canterbury.ac.nz
  Subject: Re: Help
  
  On Mon, May 18, 2009 at 8:02 PM, Julian Warwick Bethell
  jwbeth...@paradise.net.nz wrote:
   Can you help me setting up a DMZ
  
  Is this still not working for you? You're thread-jumping, too.
  
  Please read http://catb.org/esr/faqs/smart-questions.html and possibly
  http://www.wikihow.com/Ask-a-Question-Intelligently
  
  Then start a new message to the list (not a reply to a previous one)
  and tell us what equipment you have, what the configuration is, and
  what new thing you want it to do.
  
  It's quite possible that a DMZ is not what you need, but we won't know
  until you explain what you're trying to do.
  
  -jim
  
 
 
 -- 
 Steve Holdoway st...@greengecko.co.nz
 http://www.greengecko.co.nz
 


-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz



RE: Help

2009-05-18 Thread Payne, Owen
http://www.ipcop.org/index.php?module=pnWikkatag=IPCopDocumentation 

-Original Message-
From: Julian Warwick Bethell [mailto:jwbeth...@paradise.net.nz] 
Sent: Tuesday, 19 May 2009 11:49 am
To: linux-users@it.canterbury.ac.nz
Subject: RE: Help


DO YOU HAVE A DMZ ORANGE networks. SETUP YOURSETF I don't know want you
meant 

  

Julian Bethell
PC Technician

2/96 Wainui Street
Riccarton
Christchurch
New Zealand
tel: (03) 348-5875
mobile: 0211643666
computert...@paradise.net.nz



-Original Message-
From: Steve Holdoway [mailto:st...@greengecko.co.nz]
Sent: Tuesday, May 19, 2009 11:08 AM
To: linux-users@it.canterbury.ac.nz
Subject: Re: Help

From the intranet:

1. Set up apache and host the website on 192.168.0.59 2. Check it's
working by pointing your browser from a machine on the Green network to
192.168.0.59.
3. Set up DNS to resolve the website name internally to 192.168.0.59

From the internet:

1. Set up your external DNS to point to the IP address of your adsl port
( you may need to use a service like no-ip or dyndns if you have a
dynamic IP address ).
2. Using the port forwarding menus on IpCop, Forward ports 80 and 443
from DEFAULT IP to 192.168.0.59

...
profit.


Steve

On Tue, 19 May 2009 10:56:33 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

 I want to see this website from the intranet and the outside I am 
 using Linux host it
 
 
   
 
 Julian Bethell
 PC Technician
 
 2/96 Wainui Street
 Riccarton
 Christchurch
 New Zealand
 tel: (03) 348-5875
 mobile: 0211643666
 computert...@paradise.net.nz
 
 
 
 -Original Message-
 From: Steve Holdoway [mailto:st...@greengecko.co.nz]
 Sent: Tuesday, May 19, 2009 10:30 AM
 To: linux-users@it.canterbury.ac.nz
 Subject: Re: Help
 
 Where do you want to see this website from ( ie intranet, office ), 
 and
what
 software are you using to host it?
 
 On Tue, 19 May 2009 10:22:00 +1200
 Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:
 
  I am running a web server to do some web Hosting and I want to setup

  a
DMZ
 Orange zone on my IpCop firewall.
  
  My web server machines IP is 192.168.0.60 and my Orange zone card is
 192.168.0.59
  
  

  
  Julian Bethell
  PC Technician
  
  2/96 Wainui Street
  Riccarton
  Christchurch
  New Zealand
  tel: (03) 348-5875
  mobile: 0211643666
  computert...@paradise.net.nz
  
  
  -Original Message-
  From: jim.cheet...@gmail.com [mailto:jim.cheet...@gmail.com] On 
  Behalf
Of
 Jim Cheetham
  Sent: Monday, May 18, 2009 8:15 PM
  To: linux-users@it.canterbury.ac.nz
  Subject: Re: Help
  
  On Mon, May 18, 2009 at 8:02 PM, Julian Warwick Bethell 
  jwbeth...@paradise.net.nz wrote:
   Can you help me setting up a DMZ
  
  Is this still not working for you? You're thread-jumping, too.
  
  Please read http://catb.org/esr/faqs/smart-questions.html and 
  possibly http://www.wikihow.com/Ask-a-Question-Intelligently
  
  Then start a new message to the list (not a reply to a previous one)

  and tell us what equipment you have, what the configuration is, and 
  what new thing you want it to do.
  
  It's quite possible that a DMZ is not what you need, but we won't 
  know until you explain what you're trying to do.
  
  -jim
  
 
 
 --
 Steve Holdoway st...@greengecko.co.nz http://www.greengecko.co.nz
 


--
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz


**
This electronic email and any files transmitted with it are intended
solely for the use of the individual or entity to whom they are
addressed.

The views expressed in this message are those of the individual
sender and may not necessarily reflect the views of the Christchurch
City Council.

If you are not the correct recipient of this email please advise the
sender and delete.

Christchurch City Council
http://www.ccc.govt.nz
**




Re: Help

2009-05-18 Thread Nick Rout
On Tue, May 19, 2009 at 10:56 AM, Julian Warwick Bethell
jwbeth...@paradise.net.nz wrote:
 I want to see this website from the intranet and the outside I am using
 Linux host it



Do the instructions help?

http://www.ipcop.org/1.4.0/en/admin/html/section-firewall.html#section-dmz-pinholes



 Julian Bethell
 PC Technician

 2/96 Wainui Street
 Riccarton
 Christchurch
 New Zealand
 tel: (03) 348-5875
 mobile: 0211643666
 computert...@paradise.net.nz



 -Original Message-
 From: Steve Holdoway [mailto:st...@greengecko.co.nz]
 Sent: Tuesday, May 19, 2009 10:30 AM
 To: linux-users@it.canterbury.ac.nz
 Subject: Re: Help

 Where do you want to see this website from ( ie intranet, office ), and what
 software are you using to host it?

 On Tue, 19 May 2009 10:22:00 +1200
 Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

 I am running a web server to do some web Hosting and I want to setup a DMZ
 Orange zone on my IpCop firewall.

 My web server machines IP is 192.168.0.60 and my Orange zone card is
 192.168.0.59




 Julian Bethell
 PC Technician

 2/96 Wainui Street
 Riccarton
 Christchurch
 New Zealand
 tel: (03) 348-5875
 mobile: 0211643666
 computert...@paradise.net.nz


 -Original Message-
 From: jim.cheet...@gmail.com [mailto:jim.cheet...@gmail.com] On Behalf Of
 Jim Cheetham
 Sent: Monday, May 18, 2009 8:15 PM
 To: linux-users@it.canterbury.ac.nz
 Subject: Re: Help

 On Mon, May 18, 2009 at 8:02 PM, Julian Warwick Bethell
 jwbeth...@paradise.net.nz wrote:
  Can you help me setting up a DMZ

 Is this still not working for you? You're thread-jumping, too.

 Please read http://catb.org/esr/faqs/smart-questions.html and possibly
 http://www.wikihow.com/Ask-a-Question-Intelligently

 Then start a new message to the list (not a reply to a previous one)
 and tell us what equipment you have, what the configuration is, and
 what new thing you want it to do.

 It's quite possible that a DMZ is not what you need, but we won't know
 until you explain what you're trying to do.

 -jim



 --
 Steve Holdoway st...@greengecko.co.nz
 http://www.greengecko.co.nz




RE: Help

2009-05-18 Thread steve

On Tue, 2009-05-19 at 11:48 +1200, Julian Warwick Bethell wrote:
 DO YOU HAVE A DMZ ORANGE networks. SETUP YOURSETF I don't know want you
 meant 
 
Yes I do. That's how I managed to copy and paste info from a working
IpCop Server as explanation of the steps you need to go through to get a
firewall up and running with DMZ enabled in your previous thread.

Once again...

1. run setup and properly configure your hardware.
2. Ensure connectivity from the green network - this will be automatic
if set up properly: you should be able to ssh to your web server from
any ( ssh enabled ) machine.

will prove your firewall / hardware configuration.

Steve
-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz



RE: Help

2009-05-18 Thread Julian Warwick Bethell
Do have a video  setting up DMZ 


  

Julian Bethell
PC Technician

2/96 Wainui Street
Riccarton
Christchurch
New Zealand
tel: (03) 348-5875
mobile: 0211643666
computert...@paradise.net.nz



-Original Message-
From: Steve Holdoway [mailto:st...@greengecko.co.nz] 
Sent: Tuesday, May 19, 2009 11:08 AM
To: linux-users@it.canterbury.ac.nz
Subject: Re: Help

From the intranet:

1. Set up apache and host the website on 192.168.0.59
2. Check it's working by pointing your browser from a machine on the Green
network to 192.168.0.59.
3. Set up DNS to resolve the website name internally to 192.168.0.59

From the internet:

1. Set up your external DNS to point to the IP address of your adsl port (
you may need to use a service like no-ip or dyndns if you have a dynamic IP
address ).
2. Using the port forwarding menus on IpCop, Forward ports 80 and 443 from
DEFAULT IP to 192.168.0.59

...
profit.


Steve

On Tue, 19 May 2009 10:56:33 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

 I want to see this website from the intranet and the outside I am using
 Linux host it 
 
 
   
 
 Julian Bethell
 PC Technician
 
 2/96 Wainui Street
 Riccarton
 Christchurch
 New Zealand
 tel: (03) 348-5875
 mobile: 0211643666
 computert...@paradise.net.nz
 
 
 
 -Original Message-
 From: Steve Holdoway [mailto:st...@greengecko.co.nz] 
 Sent: Tuesday, May 19, 2009 10:30 AM
 To: linux-users@it.canterbury.ac.nz
 Subject: Re: Help
 
 Where do you want to see this website from ( ie intranet, office ), and
what
 software are you using to host it?
 
 On Tue, 19 May 2009 10:22:00 +1200
 Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:
 
  I am running a web server to do some web Hosting and I want to setup a
DMZ
 Orange zone on my IpCop firewall.
  
  My web server machines IP is 192.168.0.60 and my Orange zone card is
 192.168.0.59
  
  

  
  Julian Bethell
  PC Technician
  
  2/96 Wainui Street
  Riccarton
  Christchurch
  New Zealand
  tel: (03) 348-5875
  mobile: 0211643666
  computert...@paradise.net.nz
  
  
  -Original Message-
  From: jim.cheet...@gmail.com [mailto:jim.cheet...@gmail.com] On Behalf
Of
 Jim Cheetham
  Sent: Monday, May 18, 2009 8:15 PM
  To: linux-users@it.canterbury.ac.nz
  Subject: Re: Help
  
  On Mon, May 18, 2009 at 8:02 PM, Julian Warwick Bethell
  jwbeth...@paradise.net.nz wrote:
   Can you help me setting up a DMZ
  
  Is this still not working for you? You're thread-jumping, too.
  
  Please read http://catb.org/esr/faqs/smart-questions.html and possibly
  http://www.wikihow.com/Ask-a-Question-Intelligently
  
  Then start a new message to the list (not a reply to a previous one)
  and tell us what equipment you have, what the configuration is, and
  what new thing you want it to do.
  
  It's quite possible that a DMZ is not what you need, but we won't know
  until you explain what you're trying to do.
  
  -jim
  
 
 
 -- 
 Steve Holdoway st...@greengecko.co.nz
 http://www.greengecko.co.nz
 


-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz



Re: Help

2009-05-18 Thread Nick Rout
On Tue, May 19, 2009 at 1:30 PM, Julian Warwick Bethell
jwbeth...@paradise.net.nz wrote:
 Do have a video  setting up DMZ

Try speaking English please.

Trim your reples please

Don't top post please.

You have been referred to the ipcop instructions several times, have
you followed them?

What errors are you getting?


RE: Help

2009-05-18 Thread Andrew Errington
On Tue, May 19, 2009 10:30, Julian Warwick Bethell wrote:
 Do have a video  setting up DMZ

I can haz cheezburger?

Please read your email yourself before posting it, and make sure it is
clear.  Everyone here is keen to help, but it's a little difficult to
parse your meaning.

Let me reiterate Jim's excellent suggestion.  I, too, recommend that you
read the following article:

http://catb.org/esr/faqs/smart-questions.html

It will help you ask better questions, and more importantly will get you
better answers more quickly.

Best wishes,

Andrew



Re: Help

2009-05-18 Thread Robert Fisher
On Tuesday 19 May 2009 14:54:30 Nick Rout wrote:
 On Tue, May 19, 2009 at 1:30 PM, Julian Warwick Bethell

 jwbeth...@paradise.net.nz wrote:
  Do have a video  setting up DMZ

 Try speaking English please.

 Trim your reples please

 Don't top post please.

 You have been referred to the ipcop instructions several times, have
 you followed them?

 What errors are you getting?

All of the above.

Rob


Re: Kubuntu help please

2009-05-17 Thread Don Robertson
2009/5/17 Christopher Sawtell csawt...@gmail.com:
 My Kubuntu PPC 8.10 - 9.04 upgrade locked me out of my Mac G4.

 Have you any idea why?

I did not investigate. I only use it to check email and browse the
web, and OS X is still on it, so it is not something I want to spend
much time on, no data I need to save.

I would get a KDE login screen but could not login. Also the screen
locks and slowly goes white when I try to switch to another console,
or log into a text session.


 I am very interested to hear this because it is quite a possibility
 that I will be asked to install a KDE based application on a PPC Mac
 portable.

This is a PowerBook Ti 500 - and it seems to differ from other
PowerBook Ti's - most posts on the Ubuntu PPC forum about PB Ti's
refer to different video cards and some other hardware. Installing was
a pain - mainly because of the graphics. I had to install a text
system then install X and KDE (using the alternate CD). Should not
have set it up to boot into a graphical login. I never got suspend to
disk to work correctly.

I would check for problems with the specific hardware. I always
thought that there was not that much variation with Macs - not as much
as there is in the x86 world, anyway - but there seems to be more than
I thought.

You should really ask if it is worth it. I have been trying 9.04 - and
as soon as I work out one problem, I hit another one. Can't find the
CD I booted off - can't find repositories - can download but not
install software ... etc

All similar - but not quite the same as 8.10 :-(


 --
 Sincerely etc.
 Christopher Sawtell



Kubuntu help please

2009-05-16 Thread Volker Kuhlmann
The installation was pretty smooth, but running the system leaves me
singularly unimpresssed. Where are the system config tools please? All I
see is system- settings. Looks good, until I click on it - then it has
all the headlines but silch content. Maybe that's just the state of KDE4
for now, but making a whole distro on that is insane. There's got to be
something useful. systemsettings network interfaces-wired doesn't even
bother to ask me which interface I want to configure, let alone what the
root password is. Doh.

After installation there was a note telling me where to find the Kubuntu
system documentation. After login that note goes poof (doh), and I can't
find anything poking around.

The primary job at hand: what's the gui tool to configure eth0? Manual
configuration, static IP, DNS, gateway, and all in a way I can teach a
non-techie. Plus saving it as a profile, then handling multiple
profiles for traveling.

Any kubuntu users able to point me in the right direction?

Thanks,

Volker

Oh yeah, trivial in openSUSE, and I don't even have to start hunting for
any docs let alone read those docs.

-- 
Volker Kuhlmann is list0570 with the domain in header
http://volker.dnsalias.net/ Please do not CC list postings to me.


Re: Kubuntu help please

2009-05-16 Thread Christopher Sawtell
 The primary job at hand: what's the gui tool to configure eth0?

Knetworkmanager.

It puts a little representation of the world in the panel, click on it
for a config.  pop up. For some insane reason it's not in the menu
system.

I start it from ALT-F2

Yes I agree it seems to be nuts to have the network configuration at
the user level, but it's very useful to be able to choose the network
to join manually.

-- 
Sincerely etc.
Christopher Sawtell


Re: Kubuntu help please

2009-05-16 Thread Volker Kuhlmann
On Sat 16 May 2009 23:49:13 NZST +1200, Christopher Sawtell wrote:

  The primary job at hand: what's the gui tool to configure eth0?
 
 Knetworkmanager.

NOEXIST

Kubuntu 9.04, KDE 4.x(--)

I guess the bottom line is KDE 4 isn't quite there yet. As (K?)ubuntu
doesn't offer anything beyond vanilla in terms of system config, Kubuntu
9.04 is sort of also not quite there yet and a few years behind in
places.

There is a systemsettings tool, but the network part is borked and
totally useless.

 Yes I agree it seems to be nuts to have the network configuration at
 the user level, but it's very useful to be able to choose the network
 to join manually.

No, not nuts, some network settings are only really useful under user
control, but that's after root has marked them as such (typically for
wireless, but not eth0).

Thanks,

Volker

-- 
Volker Kuhlmann is list0570 with the domain in header
http://volker.dnsalias.net/ Please do not CC list postings to me.


Re: Kubuntu help please

2009-05-16 Thread Andrew Errington
On Sat, May 16, 2009 20:01, Volker Kuhlmann wrote:
 The primary job at hand: what's the gui tool to configure eth0? Manual
 configuration, static IP, DNS, gateway, and all in a way I can teach a
 non-techie. Plus saving it as a profile, then handling multiple profiles
 for traveling.

 Any kubuntu users able to point me in the right direction?

Not a Kubuntu user (tried it once, but it seemed to be Ubuntu's bastard
sibling that no-one talks about).  I use Mepis, which is also KDE-based. 
Mepis has a bunch of Mepis-written tools for user management and system
management (including networks) that fill in the blanks that are *still*
present.

So why didn't you just install openSUSE?

Anyway, I can recommend wicd for networking.   It seems to Just Work.  I
assume it's on a laptop (you mentioned travelling).  You  can set up
different profiles for the wired and wireless interfaces, with different
parameters for different named wireless networks.

To install it you might need to add or edit sources.list for apt, or just
try apt-get install wicd, or find it with Google (I can't remember how I
installed it).

It does seem to expose flakiness already present in certain wireless
drivers.  I have noticed the following problems:

1) Connecting to a particular 3Com AP- can only do it when Skype is not
running.  If Skype is running the network is reported as connected and
working, but it's not.  Solution: stop Skype, disconnect and reconnect
wifi, start Skype.
2) Certain APs with certain settings will freeze the PC.  Not sure about
this one, but nothing changes from one physical location to the other but
the AP box.
3) Some OpenGL screen savers seem to freeze the PC when coming back from
sleep now that I have wicd.  Too many seemingly unrelated items to
troubleshoot.  Solution (for now) select a simple screen saver.

Aside from that, wicd is the Right Way to solve this problem.

HTH,

A



Re: Kubuntu help please

2009-05-16 Thread Vik Olliver
On Sun, 2009-05-17 at 01:09 +1200, Volker Kuhlmann wrote:
 I guess the bottom line is KDE 4 isn't quite there yet. As (K?)ubuntu
 doesn't offer anything beyond vanilla in terms of system config,
 Kubuntu 9.04 is sort of also not quite there yet and a few years
 behind in places.

Kubuntu 8.10 wasn't there either. It took me a month and a half to get
8.10 going. Now I'm having almost exactly the same problems with 9.04:
The shipped nvidia closed driver crashes my laptop and knetwork manager
just doesn't work.

File bugs on launchpad. Lots of them.

Vik :v)



Re: Kubuntu help please

2009-05-16 Thread Nick Rout
On Sun, May 17, 2009 at 11:02 AM, Vik Olliver v...@olliver.family.gen.nz 
wrote:
 On Sun, 2009-05-17 at 01:09 +1200, Volker Kuhlmann wrote:
 I guess the bottom line is KDE 4 isn't quite there yet. As (K?)ubuntu
 doesn't offer anything beyond vanilla in terms of system config,
 Kubuntu 9.04 is sort of also not quite there yet and a few years
 behind in places.

 Kubuntu 8.10 wasn't there either. It took me a month and a half to get
 8.10 going. Now I'm having almost exactly the same problems with 9.04:
 The shipped nvidia closed driver crashes my laptop and knetwork manager
 just doesn't work.

 File bugs on launchpad. Lots of them.

 Vik :v)



Or take the easy (mepis) way.

Or go to ubuntu and suck up gnome. Its really not as bad as many kde
users think - and this from an ex kde user.

I think Andrew is right about kubuntu being the bastard sibling. The
main effort goes into ubuntu, stuff just seems to get missed in
kubuntu, plus theres the hassle of kde's 4 branch still seeming to be
unfinished.


Re: Kubuntu help please

2009-05-16 Thread Phill Coxon
On Sun, 2009-05-17 at 11:09 +1200, Nick Rout wrote:

 I think Andrew is right about kubuntu being the bastard sibling. The
 main effort goes into ubuntu, stuff just seems to get missed in
 kubuntu, plus theres the hassle of kde's 4 branch still seeming to be
 unfinished.

Unfortunately true. I've been testing KUbuntu 9.04 on my laptop to see
if I want to upgrade my Desktop and things are still crashing at random
or are completely unusable (kde network manager and a mobile wireless
card for example).

I think it's time to try Ubuntu again. 

The main reason I've been using KUbuntu is for sftp: access in konqueror
so I can copy and edit files on remote sites live.  

I'm guessing Nautalis must do the same thing these days - can anyone
confirm? 

Thanks!




Re: Kubuntu help please

2009-05-16 Thread Rex Johnston

Phill Coxon wrote:


The main reason I've been using KUbuntu is for sftp: access in konqueror
so I can copy and edit files on remote sites live.  


I'm guessing Nautalis must do the same thing these days - can anyone
confirm? 


Yep.

Cheers, Rex


Re: Kubuntu help please

2009-05-16 Thread Volker Kuhlmann
On Sun 17 May 2009 01:09:27 NZST +1200, Andrew Errington wrote:

 Not a Kubuntu user (tried it once, but it seemed to be Ubuntu's bastard
 sibling that no-one talks about).

ROTFL... great way to put it. I always called it an afterthought.

 So why didn't you just install openSUSE?

Not my decision, it's for someone else. I view it as a good opportunity
to see what the competition is up to. Other than the network config
(impossible for beginners) I didn't have any major problems, though I'm
still short on system maintenance.

Oh yes, what's the gui tool for managing system services?

 Anyway, I can recommend wicd for networking.

Thanks! apt-get works, I'll see if I can get it to work. Nope. wicd
daemon doesn't start, googling shows dbus must be restarted, but then
wicd-client just crashes with a different error.

Volker

-- 
Volker Kuhlmann is list0570 with the domain in header
http://volker.dnsalias.net/ Please do not CC list postings to me.


Re: Kubuntu help please

2009-05-16 Thread Volker Kuhlmann
 I think it's time to try Ubuntu again.

The gnome file requester drives me bananas each time I run a gnome app.
It's also different with each app. Gnome never managed to achieve KDE's
consistency.

 The main reason I've been using KUbuntu is for sftp: access in konqueror
 so I can copy and edit files on remote sites live.

Run konqueror under gnome. Those methods available from konqueror is
something gnome is short on too.
  
Volker

-- 
Volker Kuhlmann is list0570 with the domain in header
http://volker.dnsalias.net/ Please do not CC list postings to me.


Re: Kubuntu help please

2009-05-16 Thread Don Robertson
I had KDE4 installed on Ubuntu 8.10, and recently installed Kubuntu
9.04 on my x86 desktop and have had none of the problems you describe.
System Settings all work fine - but I have never had much joy with
Network manager.

My Kubuntu PPC 8.10 - 9.04 upgrade locked me out of my Mac G4. If
Kubuntu is the bastard sibling, Kubuntu PPC is disowned bastard
sibling :-(


Re: Kubuntu help please

2009-05-16 Thread Andrew Errington
On Sun, May 17, 2009 09:00, Phill Coxon wrote:
 On Sun, 2009-05-17 at 11:09 +1200, Nick Rout wrote:

snip
 plus theres the hassle of kde's 4 branch still seeming to be unfinished.


 Unfortunately true. I've been testing KUbuntu 9.04 on my laptop to see
 if I want to upgrade my Desktop and things are still crashing at random or
 are completely unusable (kde network manager and a mobile wireless card
 for example).

snip

 The main reason I've been using KUbuntu is for sftp: access in konqueror
 so I can copy and edit files on remote sites live.

Well, Mepis is a nice KDE-based distro.  They've added a couple of extra
things to make it usable, and they've avoided the KDE 4.x headaches by
sticking with KDE 3.5.  I am running Mepis 8 on my Acer Aspire One and
it's great.

Adding wicd fixed a lot of pain for me.  I take the netbook to a bunch of
different places, and each one has different network settings.  Some are
DHCP, but some are fixed parameters (and of course they differ from each
other).  The way wicd presents and configures these is intuitive and
obvious.

A



Re: Kubuntu help please

2009-05-16 Thread Andrew Errington
On Sun, May 17, 2009 10:01, Volker Kuhlmann wrote:
 On Sun 17 May 2009 01:09:27 NZST +1200, Andrew Errington wrote:
snip
 Anyway, I can recommend wicd for networking.


 Thanks! apt-get works, I'll see if I can get it to work. Nope. wicd
 daemon doesn't start, googling shows dbus must be restarted, but then
 wicd-client just crashes with a different error.

Sorry.  That's too bad.

A



Re: Kubuntu help please

2009-05-16 Thread Christopher Sawtell
 My Kubuntu PPC 8.10 - 9.04 upgrade locked me out of my Mac G4.

Have you any idea why?

I am very interested to hear this because it is quite a possibility
that I will be asked to install a KDE based application on a PPC Mac
portable.

-- 
Sincerely etc.
Christopher Sawtell


Re: Kubuntu help please

2009-05-16 Thread Volker Kuhlmann
On Sun 17 May 2009 13:48:18 NZST +1200, Andrew Errington wrote:

 Sorry.  That's too bad.

Yeah, sounds otherwise exactly what I'm looking for. I need profiles
too.

Volker

-- 
Volker Kuhlmann is list0570 with the domain in header
http://volker.dnsalias.net/ Please do not CC list postings to me.


Re: Kubuntu help please

2009-05-16 Thread Andrew Errington
On Sun, May 17, 2009 11:24, Volker Kuhlmann wrote:
 On Sun 17 May 2009 13:48:18 NZST +1200, Andrew Errington wrote:


 Sorry.  That's too bad.


 Yeah, sounds otherwise exactly what I'm looking for. I need profiles
 too.

Well, if you have the time I'd suggest it would be worthwhile persevering.

One thing is that wicd does not play nice with network-manager.  The
install script is supposed to remove that for you, but maybe you have to
do it by hand (sudo apt-get remove network-manager).  Also, you have to
clear everything from /etc/network/interfaces except the loopback
interface:

http://wicd.sourceforge.net/download.php

Again, this should be done automagically, but worth checking.

A




RE: Help

2009-05-16 Thread Julian Warwick Bethell
No I am not using a DNS with port forwarding do you point it orange network
card or my web server


  

Julian Bethell
PC Technician

2/96 Wainui Street
Riccarton
Christchurch
New Zealand
tel: (03) 348-5875
mobile: 0211643666
computert...@paradise.net.nz


-Original Message-
From: Steve Holdoway [mailto:st...@greengecko.co.nz] 
Sent: Saturday, May 16, 2009 2:11 PM
To: linux-users@it.canterbury.ac.nz
Subject: Re: Help

On Fri, 15 May 2009 19:11:20 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

 Ok I can ping the web server from the firewall and vice versa but went I
 plug my web server
 In to my DMZ orange network In my firewall I can't get my web page up? 

Have you set the port forwarding ( pinholing ) up to allow thae necessary
access?
Are you using DNS and have you set it to point to the new machine location?

-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz



Re: Kubuntu help please

2009-05-16 Thread Volker Kuhlmann
On Sun 17 May 2009 15:01:50 NZST +1200, Andrew Errington wrote:

 Well, if you have the time I'd suggest it would be worthwhile persevering.

Ok, after I'd already decided I don't have time for cr*p, and that's the
adjective to use for describing software which poos its pants on startup
with screenfuls of python barf, instead of saying that the wicd default
config has access protection enabled and therefore the user runing
wicd-client needs to be a member of the netdev group.

Googling for the error msg has only one answer, and that's in a Polish
blog. Fortunately my Polish was good enough to understand the one
important word, being /etc/dbus-1/system.d/wicd.conf ;)

At first glance it does what I need to do. Thanks Andrew!

Now some similar program for screen sizes would be good too, as
xorg.conf is empty and no obvious tool is readily apparent. vmware
starting up 800x600 gets a tad annoying after a while. I also need to
config an old TNT 64 Pro card where kubuntu throws the same trick.

 One thing is that wicd does not play nice with network-manager.

Sounds like a turf fight to me :)

Thanks,

Volker

-- 
Volker Kuhlmann is list0570 with the domain in header
http://volker.dnsalias.net/ Please do not CC list postings to me.


RE: Help

2009-05-15 Thread Julian Warwick Bethell
Ok I can ping the web server from the firewall and vice versa but went I
plug my web server
In to my DMZ orange network In my firewall I can't get my web page up? 


  



-Original Message-
From: Steve Holdoway [mailto:st...@greengecko.co.nz] 
Sent: Friday, May 15, 2009 4:10 PM
To: linux-users@it.canterbury.ac.nz
Subject: Re: Help

Well, what *does* work?

can ifconfig see the 3 interfaces, and do they have ip addresses in separate
subnets assigned?

[here's one I set up a few years ago: eth0 is green, eth1 = orange, and eth2
= red]
eth0  Link encap:Ethernet  HWaddr 00:30:BD:09:50:A4  
  inet addr:192.168.1.254  Bcast:192.168.1.255  Mask:255.255.255.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:20525179 errors:0 dropped:0 overruns:0 frame:0
  TX packets:33707951 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:2092449118 (1995.5 MB)  TX bytes:544257391 (519.0 MB)
  Interrupt:10 Base address:0xb000 

eth1  Link encap:Ethernet  HWaddr 00:0F:3D:88:9E:C9  
  inet addr:192.168.3.254  Bcast:192.168.3.255  Mask:255.255.255.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:13278777 errors:0 dropped:0 overruns:0 frame:0
  TX packets:2488178 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:2462410620 (2348.3 MB)  TX bytes:221028399 (210.7 MB)
  Interrupt:5 Memory:d480-0 

eth2  Link encap:Ethernet  HWaddr 00:0D:88:CA:D1:E3  
  inet addr:10.1.1.2  Bcast:10.1.1.255  Mask:255.255.255.0
  UP BROADCAST RUNNING  MTU:1500  Metric:1
  RX packets:20363669 errors:0 dropped:0 overruns:0 frame:0
  TX packets:17851862 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:2350652270 (2241.7 MB)  TX bytes:1842739446 (1757.3 MB)
  Interrupt:5 Base address:0x9400 


can you ping the web server from the firewall and / or vice versa?

PING 192.168.3.4 (192.168.3.4): 56 data bytes
64 bytes from 192.168.3.4: icmp_seq=0 ttl=64 time=0.579 ms
64 bytes from 192.168.3.4: icmp_seq=1 ttl=64 time=0.330 ms

If so, where are you trying to visit the web server from, and have you set
up port forwarding from red/green to it?

[excerpts fromm iptables -t nat --list -n ( 10.1.1.2 is the next hop towards
the internet)]

Chain PORTFW (1 references)
target prot opt source   destination 
DNAT   tcp  --  0.0.0.0/010.1.1.2tcp dpt:25
to:192.168.3.4:25 
DNAT   tcp  --  0.0.0.0/010.1.1.2tcp dpt:80
to:192.168.3.4:80 
DNAT   tcp  --  0.0.0.0/010.1.1.2tcp dpt:443
to:192.168.3.4:443 


[setup-networking]
Current config: GREEN + ORANGE + RED  

hth,

Steve


On Fri, 15 May 2009 15:55:29 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

 I did those steps and they did not get my DMZ to work 
 
 
   
 
 
 -Original Message-
 From: Steve Holdoway [mailto:st...@greengecko.co.nz] 
 Sent: Friday, May 15, 2009 3:34 PM
 To: linux-users@it.canterbury.ac.nz
 Subject: Re: Help
 
 On Fri, 15 May 2009 15:22:10 +1200
 Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:
 
   
  
   
  
   
  

  
   
  
  I need Help setting up a DMZ on my firewall Ipcop so I use my apache
web
  server.
 
 
 You need an extra dedicated network card, and to set it up from the system
 console to be on an unique subnet - this is the orange network in a
 red/orange/green ( or red /orange/blue/green if you've got wireless too )
 configuration.
 
 Once that's done, plug your web server on to it, assign it an IP address
in
 the new subnet, and forward requests on port 80/443 to that IP address.
 
 Very brief, but those are the steps that need to be done!
 
 Steve.
 -- 
 Steve Holdoway st...@greengecko.co.nz
 http://www.greengecko.co.nz
 


-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz



Re: Help

2009-05-15 Thread Andrew Sands
On Fri, 15 May 2009 15:22:10 Julian Warwick Bethell wrote:
 I need Help setting up a DMZ on my firewall Ipcop so I use my apache  web
 server.

Location?


Re: Help

2009-05-15 Thread Steve Holdoway
On Fri, 15 May 2009 19:11:20 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

 Ok I can ping the web server from the firewall and vice versa but went I
 plug my web server
 In to my DMZ orange network In my firewall I can't get my web page up? 

Have you set the port forwarding ( pinholing ) up to allow thae necessary 
access?
Are you using DNS and have you set it to point to the new machine location?

-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz


Help

2009-05-14 Thread Julian Warwick Bethell
 

 

 

  

 

I need Help setting up a DMZ on my firewall Ipcop so I use my apache  web
server.



Re: Help

2009-05-14 Thread Steve Holdoway
On Fri, 15 May 2009 15:22:10 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

  
 
  
 
  
 
   
 
  
 
 I need Help setting up a DMZ on my firewall Ipcop so I use my apache  web
 server.


You need an extra dedicated network card, and to set it up from the system 
console to be on an unique subnet - this is the orange network in a 
red/orange/green ( or red /orange/blue/green if you've got wireless too ) 
configuration.

Once that's done, plug your web server on to it, assign it an IP address in the 
new subnet, and forward requests on port 80/443 to that IP address.

Very brief, but those are the steps that need to be done!

Steve.
-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz


RE: Help

2009-05-14 Thread Julian Warwick Bethell
I did those steps and they did not get my DMZ to work 


  


-Original Message-
From: Steve Holdoway [mailto:st...@greengecko.co.nz] 
Sent: Friday, May 15, 2009 3:34 PM
To: linux-users@it.canterbury.ac.nz
Subject: Re: Help

On Fri, 15 May 2009 15:22:10 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

  
 
  
 
  
 
   
 
  
 
 I need Help setting up a DMZ on my firewall Ipcop so I use my apache  web
 server.


You need an extra dedicated network card, and to set it up from the system
console to be on an unique subnet - this is the orange network in a
red/orange/green ( or red /orange/blue/green if you've got wireless too )
configuration.

Once that's done, plug your web server on to it, assign it an IP address in
the new subnet, and forward requests on port 80/443 to that IP address.

Very brief, but those are the steps that need to be done!

Steve.
-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz



Re: Help

2009-05-14 Thread Steve Holdoway
Well, what *does* work?

can ifconfig see the 3 interfaces, and do they have ip addresses in separate 
subnets assigned?

[here's one I set up a few years ago: eth0 is green, eth1 = orange, and eth2 = 
red]
eth0  Link encap:Ethernet  HWaddr 00:30:BD:09:50:A4  
  inet addr:192.168.1.254  Bcast:192.168.1.255  Mask:255.255.255.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:20525179 errors:0 dropped:0 overruns:0 frame:0
  TX packets:33707951 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:2092449118 (1995.5 MB)  TX bytes:544257391 (519.0 MB)
  Interrupt:10 Base address:0xb000 

eth1  Link encap:Ethernet  HWaddr 00:0F:3D:88:9E:C9  
  inet addr:192.168.3.254  Bcast:192.168.3.255  Mask:255.255.255.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:13278777 errors:0 dropped:0 overruns:0 frame:0
  TX packets:2488178 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:2462410620 (2348.3 MB)  TX bytes:221028399 (210.7 MB)
  Interrupt:5 Memory:d480-0 

eth2  Link encap:Ethernet  HWaddr 00:0D:88:CA:D1:E3  
  inet addr:10.1.1.2  Bcast:10.1.1.255  Mask:255.255.255.0
  UP BROADCAST RUNNING  MTU:1500  Metric:1
  RX packets:20363669 errors:0 dropped:0 overruns:0 frame:0
  TX packets:17851862 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:2350652270 (2241.7 MB)  TX bytes:1842739446 (1757.3 MB)
  Interrupt:5 Base address:0x9400 


can you ping the web server from the firewall and / or vice versa?

PING 192.168.3.4 (192.168.3.4): 56 data bytes
64 bytes from 192.168.3.4: icmp_seq=0 ttl=64 time=0.579 ms
64 bytes from 192.168.3.4: icmp_seq=1 ttl=64 time=0.330 ms

If so, where are you trying to visit the web server from, and have you set up 
port forwarding from red/green to it?

[excerpts fromm iptables -t nat --list -n ( 10.1.1.2 is the next hop towards 
the internet)]

Chain PORTFW (1 references)
target prot opt source   destination 
DNAT   tcp  --  0.0.0.0/010.1.1.2tcp dpt:25 
to:192.168.3.4:25 
DNAT   tcp  --  0.0.0.0/010.1.1.2tcp dpt:80 
to:192.168.3.4:80 
DNAT   tcp  --  0.0.0.0/010.1.1.2tcp dpt:443 
to:192.168.3.4:443 


[setup-networking]
Current config: GREEN + ORANGE + RED  

hth,

Steve


On Fri, 15 May 2009 15:55:29 +1200
Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:

 I did those steps and they did not get my DMZ to work 
 
 
   
 
 
 -Original Message-
 From: Steve Holdoway [mailto:st...@greengecko.co.nz] 
 Sent: Friday, May 15, 2009 3:34 PM
 To: linux-users@it.canterbury.ac.nz
 Subject: Re: Help
 
 On Fri, 15 May 2009 15:22:10 +1200
 Julian Warwick Bethell jwbeth...@paradise.net.nz wrote:
 
   
  
   
  
   
  

  
   
  
  I need Help setting up a DMZ on my firewall Ipcop so I use my apache  web
  server.
 
 
 You need an extra dedicated network card, and to set it up from the system
 console to be on an unique subnet - this is the orange network in a
 red/orange/green ( or red /orange/blue/green if you've got wireless too )
 configuration.
 
 Once that's done, plug your web server on to it, assign it an IP address in
 the new subnet, and forward requests on port 80/443 to that IP address.
 
 Very brief, but those are the steps that need to be done!
 
 Steve.
 -- 
 Steve Holdoway st...@greengecko.co.nz
 http://www.greengecko.co.nz
 


-- 
Steve Holdoway st...@greengecko.co.nz
http://www.greengecko.co.nz


Re: Help

2009-05-14 Thread Christopher Sawtell
You might care to look and evaluate pfSense [1] instead of IPCop.

imho, it's far easier to set up than IPCop and people who know far
more than I tell me that the filter is considerably superior.

Worked well for me for several years on an old 400MHz P/2.

[1] http://pfsense.org/

-- 
Sincerely etc.
Christopher Sawtell


help with mencoder/kino

2009-01-13 Thread Barry Marchant

Hi all,
I wish to create an avi file which kino will fully recognise. the 
following code


mencoder -o ./intro2.avi -noidx -ovc copy -oac copy -audiofile 
./trambell5sec.wav ./intro002.avi


creates intro2.avi which plays correctly with mplayer and xine but the 
sound portion does not reproduce in kino. Both the avi and wave files 
are 5 seconds long


mencoder reports
Video stream: 28800.000 kbit/s  (360 B/s)  size: 1800 bytes 
5.000 secs  125 frames

Audio stream:  352.800 kbit/s  (44100 B/s)  size: 220500 bytes  5.000 secs

Kino reports
Impossible frequency??
Impossible frequency??
Impossible frequency??

Any ideas welcome

TIA

Barry



Re: help with mencoder/kino

2009-01-13 Thread Lee Begg
On Tue, 13 Jan 2009 22:42:16 Barry Marchant wrote:

 mencoder reports
 Video stream: 28800.000 kbit/s  (360 B/s)  size: 1800 bytes
 5.000 secs  125 frames
 Audio stream:  352.800 kbit/s  (44100 B/s)  size: 220500 bytes  5.000 secs

 Kino reports
 Impossible frequency??
 Impossible frequency??
 Impossible frequency??

 Any ideas welcome

Kino is fairly specific to DV video (ie, video from Digital Video Cameras). 
One thing about the audio in DV is that it is not 44100 Hz, but is 48000 Hz 
(16bit @ 48kHz). Try using a higher sampling rate for the audio.

 Barry

Hope this helps.

Regards
Lee Begg


Re: help with mencoder/kino

2009-01-13 Thread Nick Rout
On Tue, Jan 13, 2009 at 11:31 PM, Lee Begg l...@paradise.net.nz wrote:
 On Tue, 13 Jan 2009 22:42:16 Barry Marchant wrote:

 mencoder reports
 Video stream: 28800.000 kbit/s  (360 B/s)  size: 1800 bytes
 5.000 secs  125 frames
 Audio stream:  352.800 kbit/s  (44100 B/s)  size: 220500 bytes  5.000 secs

 Kino reports
 Impossible frequency??
 Impossible frequency??
 Impossible frequency??

 Any ideas welcome

 Kino is fairly specific to DV video (ie, video from Digital Video Cameras).
 One thing about the audio in DV is that it is not 44100 Hz, but is 48000 Hz
 (16bit @ 48kHz). Try using a higher sampling rate for the audio.

 Barry

 Hope this helps.

 Regards
 Lee Begg


What he said, but also kino converts on import of .avi file.

How about importing the original avi into kino and then adding the
sound file as soudtrack, and let kino do the muxing?




Re: help with mencoder/kino

2009-01-13 Thread dave lilley
Have you tried Avidmux or mix?

this will take AVI, DVD, CD video, SCD video and reencode it
to another format.
No Sorry i tell a lie it's DeeVeeDee.

Avidmux or mix allows you to edit the video clip.

HTH.

dave.


- Original Message Follows -
 On Tue, Jan 13, 2009 at 11:31 PM, Lee Begg
  l...@paradise.net.nz wrote: On Tue, 13 Jan 2009
 22:42:16 Barry Marchant wrote: 
  mencoder reports
  Video stream: 28800.000 kbit/s  (360 B/s)  size:
 1800 bytes  5.000 secs  125 frames
  Audio stream:  352.800 kbit/s  (44100 B/s)  size:
 220500 bytes  5.000 secs 
  Kino reports
  Impossible frequency??
  Impossible frequency??
  Impossible frequency??
 
  Any ideas welcome
 
  Kino is fairly specific to DV video (ie, video from
  Digital Video Cameras). One thing about the audio in DV
  is that it is not 44100 Hz, but is 48000 Hz (16bit @
 48kHz). Try using a higher sampling rate for the audio. 
  Barry
 
  Hope this helps.
 
  Regards
  Lee Begg
 
 
 What he said, but also kino converts on import of .avi
 file.
 
 How about importing the original avi into kino and then
 adding the sound file as soudtrack, and let kino do the
 muxing?
 
 


Re: help with mencoder/kino

2009-01-13 Thread Barry Marchant



Nick Rout wrote:

On Tue, Jan 13, 2009 at 11:31 PM, Lee Begg l...@paradise.net.nz wrote:


On Tue, 13 Jan 2009 22:42:16 Barry Marchant wrote:



mencoder reports
Video stream: 28800.000 kbit/s  (360 B/s)  size: 1800 bytes
5.000 secs  125 frames
Audio stream:  352.800 kbit/s  (44100 B/s)  size: 220500 bytes  5.000 secs

Kino reports
Impossible frequency??
Impossible frequency??
Impossible frequency??

Any ideas welcome


Kino is fairly specific to DV video (ie, video from Digital Video Cameras).
One thing about the audio in DV is that it is not 44100 Hz, but is 48000 Hz
(16bit @ 48kHz). Try using a higher sampling rate for the audio.



Barry


Hope this helps.

Regards
Lee Begg




What he said, but also kino converts on import of .avi file.

How about importing the original avi into kino and then adding the
sound file as soudtrack, and let kino do the muxing?


Thanks Nick, problem solved, I have now learnt a lot more about the 
ability of kino


Barry



Re: CLUG problems...please help

2008-11-20 Thread Zane Gilmore
You should get to the correct person with 
linux-users-ownerat blahblah
However that kind of relies on the fact that the person looking after
the list is reading the 
list emails. (they can get pretty hefty in number if they are left for
too long)

Mike's problem is almost certainly some variant of what you suggested
with sender header different to 
subscribed or similar.
That was almost always what the problem was when I was looking after
it.

I think there may have been another problem once where there was
something else flaky in
the composition of the email headers but can't remember what it was
now.






-- 

-
Zane Gilmore
Development and Web Infrastructure Team Leader
DDI: 325 9631 Cell:0276 319 206
Crop  Food Research : Mana Kai Rangahau
http://www.crop.cri.nz
--

 On 20/11/2008 at 4:24 p.m., in message
[EMAIL PROTECTED], Nick
Rout
[EMAIL PROTECTED] wrote:
 Mike, are you posting from a different email address to the
subscribed one?
 
 Damned if I know who the list admin is these days!
 
 On Thu, Nov 20, 2008 at 4:00 PM, Roger Searle
[EMAIL PROTECTED] wrote:
  Original Message 
 Subject:CLUG problems...please help
 Date:   Thu, 20 Nov 2008 15:56:45 +1300
 From:   Gauland, Michael [EMAIL PROTECTED]


 Roger,

 Sorry to trouble you, but I've been unable to post to the CLUG list,
though
 I seem to be receiving messages just fine. When I try to post (for
the first
 time with an urgent problem!), I'm not allowed to use the list.
 Unfortunately, http://clug.org.nz/ seems to be down, so I can't use
that to
 help me figure out who to contact.

 I've contacted you because you've just posted. If know who I should
contact,
 great; if not, could you post a query on my behalf?

 Thanks,

 Mike Gauland





Visit our website at http://www.crop.cri.nz 
__
CAUTION: The information contained in this email is privileged 
and confidential.  If you read this message and you are not the 
intended recipient, you are hereby notified that any use, 
dissemination, distribution or reproduction of all or part of the 
contents is prohibited. If you receive this message in error, 
please notify the sender immediately.

Any opinions or views expressed in this message are those of the 
individual sender and may not represent those of their employer.



Fwd: CLUG problems...please help

2008-11-19 Thread Roger Searle

 Original Message 
Subject:CLUG problems...please help
Date:   Thu, 20 Nov 2008 15:56:45 +1300
From:   Gauland, Michael [EMAIL PROTECTED]


Roger,

Sorry to trouble you, but I’ve been unable to post to the CLUG list, 
though I seem to be receiving messages just fine. When I try to post 
(for the first time with an urgent problem!), I’m not allowed to use the 
list. Unfortunately, http://clug.org.nz/ seems to be down, so I can’t 
use that to help me figure out who to contact.


I’ve contacted you because you’ve just posted. If know who I should 
contact, great; if not, could you post a query on my behalf?


Thanks,

Mike Gauland




Re: CLUG problems...please help

2008-11-19 Thread Nick Rout
Mike, are you posting from a different email address to the subscribed one?

Damned if I know who the list admin is these days!

On Thu, Nov 20, 2008 at 4:00 PM, Roger Searle [EMAIL PROTECTED] wrote:
  Original Message 
 Subject:CLUG problems...please help
 Date:   Thu, 20 Nov 2008 15:56:45 +1300
 From:   Gauland, Michael [EMAIL PROTECTED]


 Roger,

 Sorry to trouble you, but I've been unable to post to the CLUG list, though
 I seem to be receiving messages just fine. When I try to post (for the first
 time with an urgent problem!), I'm not allowed to use the list.
 Unfortunately, http://clug.org.nz/ seems to be down, so I can't use that to
 help me figure out who to contact.

 I've contacted you because you've just posted. If know who I should contact,
 great; if not, could you post a query on my behalf?

 Thanks,

 Mike Gauland





Re: The Gooey Kbuntu Mess... - EAK - Help NOT needed on this bit :)

2008-10-21 Thread don

Steve Holdoway wrote:

On Tue, 21 Oct 2008 19:50:27 +1300
[EMAIL PROTECTED] wrote:


Christopher Sawtell wrote:

PS Remember that CLI stands for Clean, Lean, and Immediate.

Don't get stuck in the gooey mess.


GUI = fail today.


Sorry guy...  I think ppl missed the point that I was just agreeing with 
CS's comments about CLI v's 'the gooey mess'.


My post was only to illustrate that CS is right on the mark...  CIL is 
just Cleaner, Leaner and more Immediate! :)




I recommend you spend some time at howtoforge and use their instructions to 
build this server. IMO your current appreoch will end in tears... unless you're 
making copious notes and are going to start again from scratch using them.


So far my server build is going just fine.

I didn't waste much time (2 minutes) with the GUI for the networking 
before I decided that editing the interfaces file manually would be quicker.


I used apt-get to install openssh-server then went back to my laptop to 
apt-get apache2, followed by all the other bits I wanted.


By default apache2 seems to like index.html and not index.php, so that 
took me about an hour to figure out what value to set up to fix that and 
get it in the right place.


%% stuffed me up till I remembered where to turn on the asp style tags.

display_errors = Off and log_errors = On in php.ini being On and Off, 
rather than Off and On, showed up a few warnings in my php code that I 
need to sort out.


mysql5 has a few more features than mysql4, so that kept me busy for 
another hour while I looked about at what other things I could get in to 
trouble with! :)


user/host rights caught me out for about half an hour.  I'd used the 
webmin interface to set it up in CC.  This time I used phpmyadmin.



All in all...  I'm quite happy that the machine is getting there fast 
enough...  I was just having a rant at GUI following CS's comments :)



Cheers Don


SFD install help needed

2008-09-19 Thread Rik Tindall

Hello *nix people of CLUG and GNUz,

Tomorrow there is Software Freedom Day 2008 - http://softwarefreedomday.org

A couple of beginner users have indicated they could use some install 
assistance, and I've put the details on 
http://clug.net.nz/index.php/MeetingSchedule (woops, it's down again 
now) - Whoosh wireless on Kubuntu, and 'something kiosk' setup please.


Anybody willing to help out in any way, or just to say hi, is welcome @ 
South Learning Centre http://www.library.christchurch.org.nz/South/ 
SFD between 10am to 4pm. I've suggested 1pm to these two guys, to start 
their jobs. A kiosk-capable install CD would be needed.


Demo box space is available, for gaming especially, and liveCDs can be 
run on the lab PCs to show off your favorite distro/s. CD burning isn't 
organised as yet (volunteer?), but there's 100+ Ubuntu 8.04 to give away 
(one at a time). Revolution OS etc videos will screen as usual.


All assistance appreciated, hot drinks served. Welcome to SFD8. Any 
questions?


Cheers, Rik
http://www.library.christchurch.org.nz/South/


Re: Help needed recovering a lost directory structure

2008-07-17 Thread Kerry Mayes
If your disk is dying then you should replace it.  It's only going to
get worse.  So I assume you're just trying to get some important data
off it?

If the physical problem with the disk is related to the mechanism
rather than the surface of the disks, then you could try putting the
disk in the freezer.

Sounds bizarre I know.  But I have successfully used this technique to
recover important data off a stuffed hard disk.

You need to put the drive in a plastic bag to limit the condensation
then a few hours in the freezer and the previously locked up disk runs
for quite some time.

However, this is only useful for getting data off the disk - it
doesn't repair the disk so it will die again sooner rather than later.

YMMV
Kerry

2008/7/17 David Merriman [EMAIL PROTECTED]:
 Hi there,

 A few days ago, a message popped up on my screen, saying that the BIOS's
 S.M.A.R.T. program had decided that one of my hard disks was dying (I don't
 recall the exact wording), and sure enough, I could no longer access one of
 my partitions.


Re: Help needed recovering a lost directory structure

2008-07-17 Thread david merriman

Yes, I intend to dump the disk once I get everything I can off it.

I've heard of putting disks in the freezer, never tried it though.  I 
did consider turning the pc off overnight (I usually leave it running), 
and trying again when it was cold, but at the moment it's running a 
SpinRite scan over all the drives (when I checked it this morning, it 
had been stuck on one block all night, hadn't moved...).


The ironic thing is that I'd recently had a tidyup of all the various 
bits and pieces, documents, photos, files, directories etc, lying around 
the various drives and partitions I have, and consolidated them all onto 
this one partition before wiping all the other copies...  Hmm, that's a 
thought, maybe I can recover some of the stuff from those other 
partitions...


David
--
Office Automation: The use of computers to improve efficiency in the 
office by removing anyone you would want to talk with over coffee.



Kerry Mayes wrote:

If your disk is dying then you should replace it.  It's only going to
get worse.  So I assume you're just trying to get some important data
off it?

If the physical problem with the disk is related to the mechanism
rather than the surface of the disks, then you could try putting the
disk in the freezer.

Sounds bizarre I know.  But I have successfully used this technique to
recover important data off a stuffed hard disk.

You need to put the drive in a plastic bag to limit the condensation
then a few hours in the freezer and the previously locked up disk runs
for quite some time.

However, this is only useful for getting data off the disk - it
doesn't repair the disk so it will die again sooner rather than later.

YMMV
Kerry

2008/7/17 David Merriman [EMAIL PROTECTED]:
  

Hi there,

A few days ago, a message popped up on my screen, saying that the BIOS's
S.M.A.R.T. program had decided that one of my hard disks was dying (I don't
recall the exact wording), and sure enough, I could no longer access one of
my partitions.



  


Re: Help needed recovering a lost directory structure

2008-07-17 Thread Steve Holdoway
On Fri, 18 Jul 2008 12:54:51 +1200
david merriman [EMAIL PROTECTED] wrote:

 Yes, I intend to dump the disk once I get everything I can off it.
 
 I've heard of putting disks in the freezer, never tried it though.  I 
 did consider turning the pc off overnight (I usually leave it running), 
 and trying again when it was cold, but at the moment it's running a 
 SpinRite scan over all the drives (when I checked it this morning, it 
 had been stuck on one block all night, hadn't moved...).
 

1. Stop everything you're doing on it
2. Put in freezer.
3. On Sunday, connect it to a linux box with at least as much spare storage as 
the capacity of the disk.
4. dd the complete disk, partition by partition to iso images on the live disk.
5. Work on those images.

The situation that you're now in is that everything you try lessens the chance 
of recovering anything, so it's imperative to work on a copy, not the original 
- it won't degrade... and you do nothing to the original, leave it to recover a 
bit, then go for it.

Also, if the head's stuck, remember that these modern, newfangled disks can 
take shock of hundreds of G's - not like the old days when we had to shut down 
for a week while they were installing pilings next door...

And you try telling that to the kids of today (:

Steve


pgpKg8NB0oUO8.pgp
Description: PGP signature


Re: Help needed recovering a lost directory structure

2008-07-17 Thread Christopher Sawtell
On Fri, Jul 18, 2008 at 1:41 PM, Steve Holdoway [EMAIL PROTECTED] wrote:
 On Fri, 18 Jul 2008 12:54:51 +1200
 david merriman [EMAIL PROTECTED] wrote:


 4. dd the complete disk, partition by partition to iso images on the live 
 disk.
Use the dd_rescue version.
http://www.gnu.org/software/ddrescue/ddrescue.html

It's on the System Rescue Disk.

http://www.sysresccd.org/Main_Page

 I used the  systemrescuecd-x86-1.1.0-beta7.iso version for the help
messages below.


You might also find the gpart testdisk and photorec utilities useful:-

[EMAIL PROTECTED] /root % gpart
Usage: gpart [options] device
Options: [-b backup MBR][-C c,h,s][-c][-d][-E][-e][-f][-g][-h][-i]
 [-K last sector][-k # of sectors][-L][-l log file]
 [-n increment][-q][-s sector-size][-t module-name]
 [-V][-v][-W device][-w module-name,weight]
gpart v0.1h (c) 1999-2001 Michail Brzitwa [EMAIL PROTECTED].
Guess PC-type hard disk partitions.

-

[EMAIL PROTECTED] /root % testdisk --help
TestDisk 6.9, Data Recovery Utility, February 2008
Christophe GRENIER [EMAIL PROTECTED]
http://www.cgsecurity.org

Usage: testdisk [/log] [/debug] [file or device]
   testdisk /list  [/log]   [file or device]

/log  : create a testdisk.log file
/debug: add debug information
/list : display current partitions

TestDisk checks and recovers lost partitions
It works with :
- BeFS (BeOS)   - BSD disklabel (Free/Open/Net BSD)
- CramFS, Compressed File System- DOS/Windows FAT12, FAT16 and FAT32
- HFS, HFS+, Hierarchical File System   - JFS, IBM's Journaled File System
- Linux Ext2 and Ext3   - Linux Raid
- Linux Swap- LVM, LVM2, Logical Volume Manager
- Netware NSS   - NTFS (Windows NT/2K/XP/2003)
- ReiserFS 3.5, 3.6 and 4   - Sun Solaris i386 disklabel
- UFS and UFS2 (Sun/BSD/...)- XFS, SGI's Journaled File System

If you have problems with TestDisk or bug reports, please contact me.

--

[EMAIL PROTECTED] /root % photorec --help
PhotoRec 6.9, Data Recovery Utility, February 2008
Christophe GRENIER [EMAIL PROTECTED]
http://www.cgsecurity.org

Usage: photorec [/log] [/debug] [/d recup_dir] [file or device]

/log  : create a photorec.log file
/debug: add debug information

PhotoRec searches various file formats (JPEG, Office...), it stores them
in recup_dir directory.

If you have problems with PhotoRec or bug reports, please contact me.
--

I have an .iso file of the system rescue cd and could easily make a
copy for you if you are now not able to boot your machine and thus
unable to get it.

I think I'm correct in saying that said utilities are also on Knoppix.

Do note Steve's first point. It really is important.
The more you futz and faff around with a faulty disk, the more
difficult it becomes to recover anything.

-- 
Sincerely etc.
Christopher Sawtell


Cisco questions.. any help .. please..

2008-05-18 Thread Charles Beneby
I am a novice to the cisco world, and have run into my first issue. I have a 
cisco 871 router and a dlink DIR-615 router. I am attempting to seperate my 
network into two networks by vlaning them. Vlan 1 is 172.16.1.0 and Vlan 2 is 
10.168.1.0. The C871 has 5 ports on the back, one of them being a WAN. I have 
setup FE0 - FE2 to be VLAN 1, I setup FE3 for Vlan 2. I have assigned an IP 
address to Vlan 2 as 10.168.1.1 and connected it (FE3/Vlan 2) to the Dlink 615 
router. I connected it (10.168.1.1)  into the switch side of the dlink not the 
wan port. I can ping 10.168.1.1 from my 172.16.10 network, but I cannot ping 
the device attached to the Vlan 2 from the 172.16.1.0 network. Can anyone give 
me some suggestions. This is also ADVIPSERVICESK9-M version  12.4
 
This is my config:

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname GW871
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
resource policy
!
clock timezone EST -5
clock summer-time EDT recurring 1 Sun Mar 2:00 2 Sun Nov 2:00
ip cef
!
!
no ip domain lookup
ip domain name marben.com
ip name-server 172.16.1.5
!
!
crypto pki trustpoint TP-self-signed-2919889876
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2919889876
revocation-check none
rsakeypair TP-self-signed-2919889876
!
!
crypto pki certificate chain TP-self-signed-2919889876
certificate self-signed 01
30820248 308201B1 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32393139 38383938 3736301E 170D3037 31303331 31313437
32395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 39313938
38393837 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100CE89 2FA3C94B 9171269A B7E37BC5 4DB6682F 84B83C6E 6F113AC8 05C22AD2
D6F16DB9 707A4900 9547BCFE 7CB03B97 CB720AAB 45A1784E 7CCC8881 9702760D
623FFB61 D47D523C D9046A35 992B416A 8C288276 ED2CA981 51A27AFC DF06A12F
BEED20AC A1E657A8 8F1A70D5 CD9770AB 802BE4A2 DA10C3D8 62A2C3C4 1C455162
87410203 010001A3 70306E30 0F060355 1D130101 FF040530 030101FF 301B0603
551D1104 14301282 10475738 37312E6D 61726265 6E2E636F 6D301F06 03551D23
04183016 801461BB 62AADF69 9199B8E4 284F600C 8FA846FA 10B3301D 0603551D
0E041604 1461BB62 AADF6991 99B8E428 4F600C8F A846FA10 B3300D06 092A8648
86F70D01 01040500 03818100 C86048BE 9E81585B A8BEB018 0B3F1D83 A906A492
E3C6AAA2 F7A06CA9 4E11F0FA 24F0B9EE 59B7BF6D E5594E15 F0536439 6FA19506
C4141322 2CFC2A94 479A65D4 C4284BEE 36774A95 ED1BA00A AE3C698C D5F8A52E
D9851687 25DC74CE 01185F03 784A2C91 30F709B0 406AFF97 BE20F4BB 9409BA67
344A5AF3 1B4C33B6 2F8C5AB8
quit
username *** privilege 15 secret 5 $1*.
username *** privilege 15 secret 5 $1.
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
switchport access vlan 2
!
interface FastEthernet4
description connected to comcast$ETH-LAN$
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Vlan1
description interface connected to local lan
ip address 172.16.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Vlan2
description Wireless Network
ip address 10.168.1.1 255.255.255.0
ip helper-address 172.16.1.5
ip nat inside
ip virtual-reassembly
!
ip route 192.168.1.0 255.255.255.0 172.16.1.10
ip route 192.168.1.0 255.255.255.0 192.168.1.25
ip route 0.0.0.0 0.0.0.0 dhcp
!
!
ip http server
ip http authentication local
ip http secure-server
ip nat inside source list 10 interface FastEthernet4 overload
ip nat inside source static tcp 172.16.1.10 1723 interface FastEthernet4 1723
ip nat inside source static tcp 172.16.1.15 21 interface FastEthernet4 21
ip nat inside source static tcp 172.16.1.15 80 interface FastEthernet4 80
ip nat inside source static tcp 172.16.1.15 8080 interface FastEthernet4 8080
!
access-list 10 permit 172.16.1.0 0.0.0.255
access-list 10 permit 10.168.1.0 0.0.0.255
access-list 20 permit ** log
access-list 20 permit **
access-list 20 permit 172.16.1.0 0.0.0.255
access-list 20 deny any
!
!
!
!
control-plane
!
banner motd ^C
I hope your authorized for this... Incursion
^C
!
line con 0
exec-timeout 0 0
logging synchronous
login local
no modem enable
line aux 0
line vty 0 4
access-class 20 in
privilege level 15
logging synchronous
login local
transport input telnet ssh
!
scheduler max-task-time 5000
sntp logging
sntp server 172.16.1.5
!
webvpn context Default_context
ssl authenticate verify all
!
no inservice
!
end





Re: Cisco questions.. any help .. please..

2008-05-18 Thread Dave van Leeuwen
Hi Charles,
its been a long time since I configured a CISCO, but I think that you
have to add the physical interfaces to the vlans. Sorry, don't remember
the command.

Dave.


On Sun, 2008-05-18 at 16:03 -0400, Charles Beneby wrote:
 I am a novice to the cisco world, and have run into my first issue. I have a 
 cisco 871 router and a dlink DIR-615 router. I am attempting to seperate my 
 network into two networks by vlaning them. Vlan 1 is 172.16.1.0 and Vlan 2 is 
 10.168.1.0. The C871 has 5 ports on the back, one of them being a WAN. I have 
 setup FE0 - FE2 to be VLAN 1, I setup FE3 for Vlan 2. I have assigned an IP 
 address to Vlan 2 as 10.168.1.1 and connected it (FE3/Vlan 2) to the Dlink 
 615 router. I connected it (10.168.1.1)  into the switch side of the dlink 
 not the wan port. I can ping 10.168.1.1 from my 172.16.10 network, but I 
 cannot ping the device attached to the Vlan 2 from the 172.16.1.0 network. 
 Can anyone give me some suggestions. This is also ADVIPSERVICESK9-M version  
 12.4
  
 This is my config:
 
 version 12.4
 no service pad
 service timestamps debug datetime msec
 service timestamps log datetime msec
 service password-encryption
 !
 hostname GW871
 !
 boot-start-marker
 boot-end-marker
 !
 logging buffered 51200 warnings
 !
 no aaa new-model
 !
 resource policy
 !
 clock timezone EST -5
 clock summer-time EDT recurring 1 Sun Mar 2:00 2 Sun Nov 2:00
 ip cef
 !
 !
 no ip domain lookup
 ip domain name marben.com
 ip name-server 172.16.1.5
 !
 !
 crypto pki trustpoint TP-self-signed-2919889876
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2919889876
 revocation-check none
 rsakeypair TP-self-signed-2919889876
 !
 !
 crypto pki certificate chain TP-self-signed-2919889876
 certificate self-signed 01
 30820248 308201B1 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
 69666963 6174652D 32393139 38383938 3736301E 170D3037 31303331 31313437
 32395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 39313938
 38393837 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
 8100CE89 2FA3C94B 9171269A B7E37BC5 4DB6682F 84B83C6E 6F113AC8 05C22AD2
 D6F16DB9 707A4900 9547BCFE 7CB03B97 CB720AAB 45A1784E 7CCC8881 9702760D
 623FFB61 D47D523C D9046A35 992B416A 8C288276 ED2CA981 51A27AFC DF06A12F
 BEED20AC A1E657A8 8F1A70D5 CD9770AB 802BE4A2 DA10C3D8 62A2C3C4 1C455162
 87410203 010001A3 70306E30 0F060355 1D130101 FF040530 030101FF 301B0603
 551D1104 14301282 10475738 37312E6D 61726265 6E2E636F 6D301F06 03551D23
 04183016 801461BB 62AADF69 9199B8E4 284F600C 8FA846FA 10B3301D 0603551D
 0E041604 1461BB62 AADF6991 99B8E428 4F600C8F A846FA10 B3300D06 092A8648
 86F70D01 01040500 03818100 C86048BE 9E81585B A8BEB018 0B3F1D83 A906A492
 E3C6AAA2 F7A06CA9 4E11F0FA 24F0B9EE 59B7BF6D E5594E15 F0536439 6FA19506
 C4141322 2CFC2A94 479A65D4 C4284BEE 36774A95 ED1BA00A AE3C698C D5F8A52E
 D9851687 25DC74CE 01185F03 784A2C91 30F709B0 406AFF97 BE20F4BB 9409BA67
 344A5AF3 1B4C33B6 2F8C5AB8
 quit
 username *** privilege 15 secret 5 $1*.
 username *** privilege 15 secret 5 $1.
 !
 !
 interface FastEthernet0
 !
 interface FastEthernet1
 !
 interface FastEthernet2
 !
 interface FastEthernet3
 switchport access vlan 2
 !
 interface FastEthernet4
 description connected to comcast$ETH-LAN$
 ip address dhcp
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 !
 interface Vlan1
 description interface connected to local lan
 ip address 172.16.1.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 !
 interface Vlan2
 description Wireless Network
 ip address 10.168.1.1 255.255.255.0
 ip helper-address 172.16.1.5
 ip nat inside
 ip virtual-reassembly
 !
 ip route 192.168.1.0 255.255.255.0 172.16.1.10
 ip route 192.168.1.0 255.255.255.0 192.168.1.25
 ip route 0.0.0.0 0.0.0.0 dhcp
 !
 !
 ip http server
 ip http authentication local
 ip http secure-server
 ip nat inside source list 10 interface FastEthernet4 overload
 ip nat inside source static tcp 172.16.1.10 1723 interface FastEthernet4 1723
 ip nat inside source static tcp 172.16.1.15 21 interface FastEthernet4 21
 ip nat inside source static tcp 172.16.1.15 80 interface FastEthernet4 80
 ip nat inside source static tcp 172.16.1.15 8080 interface FastEthernet4 8080
 !
 access-list 10 permit 172.16.1.0 0.0.0.255
 access-list 10 permit 10.168.1.0 0.0.0.255
 access-list 20 permit ** log
 access-list 20 permit **
 access-list 20 permit 172.16.1.0 0.0.0.255
 access-list 20 deny any
 !
 !
 !
 !
 control-plane
 !
 banner motd ^C
 I hope your authorized for this... Incursion
 ^C
 !
 line con 0
 exec-timeout 0 0
 logging synchronous
 login local
 no modem enable
 line aux 0
 line vty 0 4
 access-class 20 in
 privilege level 15
 logging synchronous
 login local
 transport input telnet ssh
 !
 scheduler 

Re: Cisco questions.. any help .. please..

2008-05-18 Thread Charles Beneby
Sweet thanks I'm okay now. Added a static route. Thanks. 

-Original Message-
From: Dave van Leeuwen [EMAIL PROTECTED]
To: linux-users@it.canterbury.ac.nz linux-users@it.canterbury.ac.nz
Sent: Sun May 18 17:24:14 2008
Subject: Re: Cisco questions.. any help .. please..

Hi Charles,
its been a long time since I configured a CISCO, but I think that you
have to add the physical interfaces to the vlans. Sorry, don't remember
the command.

Dave.


On Sun, 2008-05-18 at 16:03 -0400, Charles Beneby wrote:
 I am a novice to the cisco world, and have run into my first issue. I have a 
 cisco 871 router and a dlink DIR-615 router. I am attempting to seperate my 
 network into two networks by vlaning them. Vlan 1 is 172.16.1.0 and Vlan 2 is 
 10.168.1.0. The C871 has 5 ports on the back, one of them being a WAN. I have 
 setup FE0 - FE2 to be VLAN 1, I setup FE3 for Vlan 2. I have assigned an IP 
 address to Vlan 2 as 10.168.1.1 and connected it (FE3/Vlan 2) to the Dlink 
 615 router. I connected it (10.168.1.1)  into the switch side of the dlink 
 not the wan port. I can ping 10.168.1.1 from my 172.16.10 network, but I 
 cannot ping the device attached to the Vlan 2 from the 172.16.1.0 network. 
 Can anyone give me some suggestions. This is also ADVIPSERVICESK9-M version  
 12.4
  
 This is my config:
 
 version 12.4
 no service pad
 service timestamps debug datetime msec
 service timestamps log datetime msec
 service password-encryption
 !
 hostname GW871
 !
 boot-start-marker
 boot-end-marker
 !
 logging buffered 51200 warnings
 !
 no aaa new-model
 !
 resource policy
 !
 clock timezone EST -5
 clock summer-time EDT recurring 1 Sun Mar 2:00 2 Sun Nov 2:00
 ip cef
 !
 !
 no ip domain lookup
 ip domain name marben.com
 ip name-server 172.16.1.5
 !
 !
 crypto pki trustpoint TP-self-signed-2919889876
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2919889876
 revocation-check none
 rsakeypair TP-self-signed-2919889876
 !
 !
 crypto pki certificate chain TP-self-signed-2919889876
 certificate self-signed 01
 30820248 308201B1 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
 69666963 6174652D 32393139 38383938 3736301E 170D3037 31303331 31313437
 32395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 39313938
 38393837 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
 8100CE89 2FA3C94B 9171269A B7E37BC5 4DB6682F 84B83C6E 6F113AC8 05C22AD2
 D6F16DB9 707A4900 9547BCFE 7CB03B97 CB720AAB 45A1784E 7CCC8881 9702760D
 623FFB61 D47D523C D9046A35 992B416A 8C288276 ED2CA981 51A27AFC DF06A12F
 BEED20AC A1E657A8 8F1A70D5 CD9770AB 802BE4A2 DA10C3D8 62A2C3C4 1C455162
 87410203 010001A3 70306E30 0F060355 1D130101 FF040530 030101FF 301B0603
 551D1104 14301282 10475738 37312E6D 61726265 6E2E636F 6D301F06 03551D23
 04183016 801461BB 62AADF69 9199B8E4 284F600C 8FA846FA 10B3301D 0603551D
 0E041604 1461BB62 AADF6991 99B8E428 4F600C8F A846FA10 B3300D06 092A8648
 86F70D01 01040500 03818100 C86048BE 9E81585B A8BEB018 0B3F1D83 A906A492
 E3C6AAA2 F7A06CA9 4E11F0FA 24F0B9EE 59B7BF6D E5594E15 F0536439 6FA19506
 C4141322 2CFC2A94 479A65D4 C4284BEE 36774A95 ED1BA00A AE3C698C D5F8A52E
 D9851687 25DC74CE 01185F03 784A2C91 30F709B0 406AFF97 BE20F4BB 9409BA67
 344A5AF3 1B4C33B6 2F8C5AB8
 quit
 username *** privilege 15 secret 5 $1*.
 username *** privilege 15 secret 5 $1.
 !
 !
 interface FastEthernet0
 !
 interface FastEthernet1
 !
 interface FastEthernet2
 !
 interface FastEthernet3
 switchport access vlan 2
 !
 interface FastEthernet4
 description connected to comcast$ETH-LAN$
 ip address dhcp
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 !
 interface Vlan1
 description interface connected to local lan
 ip address 172.16.1.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 !
 interface Vlan2
 description Wireless Network
 ip address 10.168.1.1 255.255.255.0
 ip helper-address 172.16.1.5
 ip nat inside
 ip virtual-reassembly
 !
 ip route 192.168.1.0 255.255.255.0 172.16.1.10
 ip route 192.168.1.0 255.255.255.0 192.168.1.25
 ip route 0.0.0.0 0.0.0.0 dhcp
 !
 !
 ip http server
 ip http authentication local
 ip http secure-server
 ip nat inside source list 10 interface FastEthernet4 overload
 ip nat inside source static tcp 172.16.1.10 1723 interface FastEthernet4 1723
 ip nat inside source static tcp 172.16.1.15 21 interface FastEthernet4 21
 ip nat inside source static tcp 172.16.1.15 80 interface FastEthernet4 80
 ip nat inside source static tcp 172.16.1.15 8080 interface FastEthernet4 8080
 !
 access-list 10 permit 172.16.1.0 0.0.0.255
 access-list 10 permit 10.168.1.0 0.0.0.255
 access-list 20 permit ** log
 access-list 20 permit **
 access-list 20 permit 172.16.1.0 0.0.0.255
 access-list 20 deny any
 !
 !
 !
 !
 control-plane
 !
 banner motd ^C
 I

Re: Help with shell scripting

2008-04-17 Thread Volker Kuhlmann
On Thu 17 Apr 2008 12:31:08 NZST +1200, Steve Holdoway wrote:

 Looks like something I never learnt when transferring from sh to bash.

I think you knew, but just got temporarily confused. None of the
examples in this thread used any bash-specific features and would have
equally worked under sh and bash. Your suggestion wouldn't have worked
on any historic version of sh if my understanding of matters is correct.

Volker

-- 
Volker Kuhlmann is list0570 with the domain in header
http://volker.dnsalias.net/ Please do not CC list postings to me.


Re: Help with shell scripting

2008-04-17 Thread Steve Holdoway
On Thu, 17 Apr 2008 20:25:52 +1200
Volker Kuhlmann [EMAIL PROTECTED] wrote:

 On Thu 17 Apr 2008 12:31:08 NZST +1200, Steve Holdoway wrote:
 
  Looks like something I never learnt when transferring from sh to bash.
 
 I think you knew, but just got temporarily confused. None of the
 examples in this thread used any bash-specific features and would have
 equally worked under sh and bash. Your suggestion wouldn't have worked
 on any historic version of sh if my understanding of matters is correct.
 
 Volker
 
 -- 
 Volker Kuhlmann   is list0570 with the domain in header
 http://volker.dnsalias.net/   Please do not CC list postings to me.

Not too sure. I started writing that [ and test were just links to the same 
program, and then luckily checked before posting! They certainly used to be, 
under the commercial versions of unix that I used to use. I think it's more 
that you end up using a subset of the available functionality when you switch 
between similar operating systems - the bits that work the same on all/most of 
them. I got bitten by the globbing rules on FreeBSD today - different to linux 
bash when wildcarding with ssh - csh by default... yeuch!

Steve
-- 
Steve Holdoway [EMAIL PROTECTED]


Help with shell scripting

2008-04-16 Thread Kerry Mayes
I'm having difficulty with the following script:

SYNHOST=caalt04

if echo `ping -c 1 $SYNHOST` | grep -q 1 received; then

   echo 'Synergy connected';

   ssh -2 -f -N -L 24800:$SYNHOST:24800 [EMAIL PROTECTED];

   synergyc localhost;

else

   echo 'Synergy NOT connected';

fi


I'm getting the error that then is not being found.

This script was working before I pulled caalt04 out as a variable.
But I tidied up things at the same time, so may have messed it up
somewhere else.

Background: I learn languages by pinching other people's code.  This
is based on some stuff I pinched from someone and I sometime leave
options in that don't need to be there.

Any help appreciated.


Re: Help with shell scripting

2008-04-16 Thread Rex Johnston

You are better off doing this...

ping -c 1 $SYNHOST
if [ $? -eq 0 ] ; then
...
fi

Cheers, Rex

Kerry Mayes wrote:

I'm having difficulty with the following script:

SYNHOST=caalt04

if echo `ping -c 1 $SYNHOST` | grep -q 1 received; then

   echo 'Synergy connected';

   ssh -2 -f -N -L 24800:$SYNHOST:24800 [EMAIL PROTECTED];

   synergyc localhost;

else

   echo 'Synergy NOT connected';

fi


I'm getting the error that then is not being found.

This script was working before I pulled caalt04 out as a variable.
But I tidied up things at the same time, so may have messed it up
somewhere else.

Background: I learn languages by pinching other people's code.  This
is based on some stuff I pinched from someone and I sometime leave
options in that don't need to be there.

Any help appreciated.





Re: Help with shell scripting

2008-04-16 Thread Ross Drummond
On Thu, 17 Apr 2008, Kerry Mayes wrote:

stuff about if error.

My recommendation is to simplify your if structure to test it;

if echo `ping -c 1 127.0.0.1` | grep -q 1 received; then
echo it-works;
else
echo it-doesnt-work;
fi

If the simplified if test works then you know the problem is in the test 
command or consequent commands.

Cheers Ross Drummond





Re: Help with shell scripting

2008-04-16 Thread Steve Holdoway
On Thu, 17 Apr 2008 11:16:22 +1200
Kerry Mayes [EMAIL PROTECTED] wrote:

 I'm having difficulty with the following script:
 
 SYNHOST=caalt04
 
 if echo `ping -c 1 $SYNHOST` | grep -q 1 received; then
 
echo 'Synergy connected';
 
ssh -2 -f -N -L 24800:$SYNHOST:24800 [EMAIL PROTECTED];
 
synergyc localhost;
 
 else
 
echo 'Synergy NOT connected';
 
 fi

Your syntax is wrong. 

if [ echo `ping -c 1 $SYNHOST` | grep -q 1 received ]; then

or 

if test echo `ping -c 1 $SYNHOST` | grep -q 1 received; then

will get you further. [ and test are synonymous.

Steve


pgp1xqJI9fM52.pgp
Description: PGP signature


Re: Help with shell scripting

2008-04-16 Thread Volker Kuhlmann
  I'm having difficulty with the following script:

I'm having difficulty with the problem.

  SYNHOST=caalt04
  
  if echo `ping -c 1 $SYNHOST` | grep -q 1 received; then

Works fine:

sh -c 'if echo `ping -c 1 localhost` | grep -q 1 received ; then echo Y;
else echo N; fi'
Y

The variable substitution is of no consequence.

 sh --version
GNU bash, version 3.1.17(1)-release (i586-suse-linux-gnu)

 Your syntax is wrong. 
 
 if [ echo `ping -c 1 $SYNHOST` | grep -q 1 received ]; then

Oops. You need another coffee ;)))

After if follows a command to execute. echo is fine, as is test and [.
If you do put [ or test, you are subject to the argument syntax of those
commands, and echo is not part of that.

Volker

-- 
Volker Kuhlmann is list0570 with the domain in header
http://volker.dnsalias.net/ Please do not CC list postings to me.


Re: Help with shell scripting

2008-04-16 Thread Kerry Mayes
Thanks Rex, yes that's a much better way of doing it.

Still having difficulty though - I think its either with quotes or
semi-colons now...

As I understand it, ; are required between statements that are in
places where only one statement is expected.  So, keeping it to it's
simplest form:

SYNHOST=caalt04
ping -c 1 $SYNHOST
if [ $? -eq 0 ] ; then
   echo Synergy connected

else

   echo Synergy NOT connected

fi

Returns:

PING caalt04.caa.local (192.168.0.183) 56(84) bytes of data.
64 bytes from caalt04.caa.local (192.168.0.183): icmp_seq=1 ttl=64 time=0.172 ms

--- caalt04.caa.local ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.172/0.172/0.172/0.000 ms
Synergy connected
: not founddefault: 11: else
Synergy NOT connected

So the ping command works but the if statement doesn't - the else
isn't recognised so it's doing both commands.


Re: Help with shell scripting

2008-04-16 Thread Steve Holdoway
# SYNHOST=caalt04
# ping -c 1 $SYNHOST
ping: unknown host caalt04
# if [ $? -eq 0 ] ; then
echo Synergy connected
 
 else
 
echo Synergy NOT connected
 
 fi

Synergy NOT connected

cut and pasted. Works fine, although you probably need to expand SYNHOST to a 
fqdn

I'm using
# echo $SHELL
/bin/bash

Are you??? If not, add the line

#!/bin/bash

( or wherever it is ) to the top of the script and see if this improves things.

Steve


On Thu, 17 Apr 2008 12:16:17 +1200
Kerry Mayes [EMAIL PROTECTED] wrote:

 Thanks Rex, yes that's a much better way of doing it.
 
 Still having difficulty though - I think its either with quotes or
 semi-colons now...
 
 As I understand it, ; are required between statements that are in
 places where only one statement is expected.  So, keeping it to it's
 simplest form:
 
 SYNHOST=caalt04
 ping -c 1 $SYNHOST
 if [ $? -eq 0 ] ; then
echo Synergy connected
 
 else
 
echo Synergy NOT connected
 
 fi
 
 Returns:
 
 PING caalt04.caa.local (192.168.0.183) 56(84) bytes of data.
 64 bytes from caalt04.caa.local (192.168.0.183): icmp_seq=1 ttl=64 time=0.172 
 ms
 
 --- caalt04.caa.local ping statistics ---
 1 packets transmitted, 1 received, 0% packet loss, time 0ms
 rtt min/avg/max/mdev = 0.172/0.172/0.172/0.000 ms
 Synergy connected
 : not founddefault: 11: else
 Synergy NOT connected
 
 So the ping command works but the if statement doesn't - the else
 isn't recognised so it's doing both commands.


pgpKp1lXd8aNw.pgp
Description: PGP signature


Re: Help with shell scripting

2008-04-16 Thread Steve Holdoway
On Thu, 17 Apr 2008 12:15:13 +1200
Volker Kuhlmann [EMAIL PROTECTED] wrote:
[snip]

Always a good day when you learn something new. Looks like something I never 
learnt when transferring from sh to bash. Thanks for that.

Steve


pgpgCtkOGV0uP.pgp
Description: PGP signature


Re: Help with shell scripting

2008-04-16 Thread Kerry Mayes
Apparently, copying code snippets around the place is fraught with
little gotchas.  The problem with that last example was that the line
breaks were stuffed up.

I noticed that the example in the email had blank lines in it, gedit
didn't show those.  I deleted the line breaks, added new ones and it
works fine.

(I was also using /sh not /bash, but that just changed the error message.)

Thanks everyone for your help.

Kerry

On 17/04/2008, Steve Holdoway [EMAIL PROTECTED] wrote:
  Always a good day when you learn something new.

Yes indeed!


Re: Help with shell scripting

2008-04-16 Thread Kerry Mayes
Aargh

One final question.  I was trying to add this scriptlet into an
existing ubuntu script.  The existing one uses /sh (which is why I was
using that).

Should I try to convert it to /sh (shudder), or should I call the
/bash script from within the /sh script?

Kerry.


Re: Help with shell scripting

2008-04-16 Thread John Hyde
Kerry,

The 'if' construct needs spaces in the right places...


if [ $?   -eq0] ; then




this is exaggerated, but those square brackets need a space on each side or
it don't work.





- Original Message -
From: Kerry Mayes [EMAIL PROTECTED]
To: linux-users@it.canterbury.ac.nz
Sent: Thursday, April 17, 2008 12:16 PM
Subject: Re: Help with shell scripting


 Thanks Rex, yes that's a much better way of doing it.

 Still having difficulty though - I think its either with quotes or
 semi-colons now...

 As I understand it, ; are required between statements that are in
 places where only one statement is expected.  So, keeping it to it's
 simplest form:

 SYNHOST=caalt04
 ping -c 1 $SYNHOST
 if [ $? -eq 0 ] ; then
echo Synergy connected

 else

echo Synergy NOT connected

 fi

 Returns:

 PING caalt04.caa.local (192.168.0.183) 56(84) bytes of data.
 64 bytes from caalt04.caa.local (192.168.0.183): icmp_seq=1 ttl=64
time=0.172 ms

 --- caalt04.caa.local ping statistics ---
 1 packets transmitted, 1 received, 0% packet loss, time 0ms
 rtt min/avg/max/mdev = 0.172/0.172/0.172/0.000 ms
 Synergy connected
 : not founddefault: 11: else
 Synergy NOT connected

 So the ping command works but the if statement doesn't - the else
 isn't recognised so it's doing both commands.



Re: Help with shell scripting

2008-04-16 Thread John Hyde
Kerry,

When you write a shell script you can specify which scripting language you
want in the first line of the file.

This is often called the hash bang line because it could be:

#!/bin/sh
# this line is a comment unlike the previous line
echo blah
exit

So there is no need to call one script from another - in fact you may find
other problems.


Maybe the CLUG could have a preso about scripts one Tuesday evening ?

Ciao,

John


- Original Message -
From: Kerry Mayes [EMAIL PROTECTED]
To: linux-users@it.canterbury.ac.nz
Sent: Thursday, April 17, 2008 12:44 PM
Subject: Re: Help with shell scripting


 Aargh

 One final question.  I was trying to add this scriptlet into an
 existing ubuntu script.  The existing one uses /sh (which is why I was
 using that).

 Should I try to convert it to /sh (shudder), or should I call the
 /bash script from within the /sh script?

 Kerry.



Re: Help with shell scripting

2008-04-16 Thread Kerry Mayes
Sorry, I wasn't clear.

I now have a working scriptlet written in /bash that I want to include
in a script written in /sh.

(The /sh script is one that starts as X starts /etc/gdm/Init/Default
- it's supposed to get synergy working before login so I can login
with a real keyboard.)

I am trying to execute the /bash scriptlet from within the /sh script
with the line:

/etc/gdm/Init/adds_for_Default

It's not working quite as expected, but that could be a ssh
authentication issue.

On 17/04/2008, John Hyde [EMAIL PROTECTED] wrote:
 Kerry,

  When you write a shell script you can specify which scripting language you
  want in the first line of the file.


Re: Help with shell scripting

2008-04-16 Thread Christopher Sawtell
man ping
Note that ping sets the return code according to what it discovers.
vis: 0 machine responds; 1 machine in the DNS, but not responding; 2
unknown machine;

Also note that recent versions of ping now have lots of new, and very
useful, options.

and for the very best in-depth exploration of the art of shell scripting see:-
http://www.tldp.org/LDP/abs/html/
pick the format you prefer from:-
http://www.tldp.org/LDP/abs/

There are lots and _lots_ of example scripts from which you can crib ideas.

Also note that there are many sites, and routers, which don't respond
to, or forward, ping messages, because it can be used as an DoS attack
vector. i.e. unless you have personal knowledge about the net you are
testing with ping, don't rely on it.

ping is one of the IP utilities in the archives:-
iputils-s20071127.tar.bz2
iputils-s20071127-manpages.tar.bz2


On 4/17/08, Kerry Mayes [EMAIL PROTECTED] wrote:
 Sorry, I wasn't clear.

 I now have a working scriptlet written in /bash that I want to include
 in a script written in /sh.

 (The /sh script is one that starts as X starts /etc/gdm/Init/Default
 - it's supposed to get synergy working before login so I can login
 with a real keyboard.)

 I am trying to execute the /bash scriptlet from within the /sh script
 with the line:

 /etc/gdm/Init/adds_for_Default

 It's not working quite as expected, but that could be a ssh
 authentication issue.

 On 17/04/2008, John Hyde [EMAIL PROTECTED] wrote:
  Kerry,
 
   When you write a shell script you can specify which scripting language
 you
   want in the first line of the file.



-- 
Sincerely etc.
Christopher Sawtell


IPTABLES brain fade... help!

2008-02-15 Thread Steve Holdoway
I'm trying to set up a basic firewall - as a start, I'm just trying to have ssh 
traffic and nothing else running. However, this just doesn't work. What am I 
doing wrong?

Script... ( eth0 *is* internet facing, and nothing upstream is interfering )

# Default policy drop everything
$IPTables -P INPUT DROP
$IPTables -P FORWARD DROP
$IPTables -P OUTPUT DROP

# Initialise the firewalling
# 1. Flush tables
$IPTables -F INPUT
$IPTables -F OUTPUT
$IPTables -F FORWARD

# 2. Set up input stuff. 
# Loopback's good.
$IPTables -A INPUT -i lo -j ACCEPT
$IPTables -A OUTPUT -s 127.0.0.0/24 -j ACCEPT

$IPTables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT

# No non-routable IP address sources
$IPTables -A INPUT -p tcp -i eth0 -s 192.168.0.0/16 -j DROP
$IPTables -A INPUT -p tcp -i eth0 -s 172.16.0.0/12 -j DROP
$IPTables -A INPUT -p tcp -i eth0 -s 10.0.0.0/8 -j DROP

# Allowed services - just ssh atm.
$IPTables -A INPUT -p tcp -i eth0 --dport 22 -m state --state NEW,ESTABLISHED 
-j ACCEPT

# 3. Set up output stuff.
$IPTables -A OUTPUT -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT




# iptables --list -n -v
Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target prot opt in out source   destination 

0 0 ACCEPT 0--  lo *   0.0.0.0/00.0.0.0/0   

0 0 ACCEPT 0--  eth0   *   0.0.0.0/00.0.0.0/0   
state RELATED,ESTABLISHED 
0 0 DROP   tcp  --  eth0   *   192.168.0.0/16   0.0.0.0/0   

0 0 DROP   tcp  --  eth0   *   172.16.0.0/120.0.0.0/0   

0 0 DROP   tcp  --  eth0   *   10.0.0.0/8   0.0.0.0/0   

0 0 ACCEPT tcp  --  eth0   *   0.0.0.0/00.0.0.0/0   
tcp dpt:22 state NEW,ESTABLISHED 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target prot opt in out source   destination 


Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target prot opt in out source   destination 

0 0 ACCEPT 0--  *  *   127.0.0.0/24 0.0.0.0/0   

0 0 ACCEPT tcp  --  *  *   0.0.0.0/00.0.0.0/0   
tcp spt:22 state ESTABLISHED 


-- 
Steve Holdoway [EMAIL PROTECTED]


Re: IPTABLES brain fade... help!

2008-02-15 Thread Michael
What's not working?  Everything? 


Just SSh?  This is all you really need:
- iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT

If you must use your fancy pants SSh rule, I would suggest inserting (-I) it 
before your drop rules:
$IPTables -I INPUT -p tcp -i eth0 --dport 22 -m state --state NEW,ESTABLISHED 
-j ACCEPT

I don't think you need the SSh OUPUT rule because iptables is a stateful 
firewall.


Clients can't connect to the internet?  You have no MASQ rule.
- iptables -A POSTROUTING -t nat -o eth0 -j MASQUERADE

Cheers,
Michael.

Steve Holdoway wrote:

I'm trying to set up a basic firewall - as a start, I'm just trying to have ssh 
traffic and nothing else running. However, this just doesn't work. What am I 
doing wrong?

Script... ( eth0 *is* internet facing, and nothing upstream is interfering )

# Default policy drop everything
$IPTables -P INPUT DROP
$IPTables -P FORWARD DROP
$IPTables -P OUTPUT DROP

# Initialise the firewalling
# 1. Flush tables
$IPTables -F INPUT
$IPTables -F OUTPUT
$IPTables -F FORWARD

# 2. Set up input stuff. 
# Loopback's good.

$IPTables -A INPUT -i lo -j ACCEPT
$IPTables -A OUTPUT -s 127.0.0.0/24 -j ACCEPT

$IPTables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT

# No non-routable IP address sources
$IPTables -A INPUT -p tcp -i eth0 -s 192.168.0.0/16 -j DROP
$IPTables -A INPUT -p tcp -i eth0 -s 172.16.0.0/12 -j DROP
$IPTables -A INPUT -p tcp -i eth0 -s 10.0.0.0/8 -j DROP

# Allowed services - just ssh atm.
$IPTables -A INPUT -p tcp -i eth0 --dport 22 -m state --state NEW,ESTABLISHED 
-j ACCEPT

# 3. Set up output stuff.
$IPTables -A OUTPUT -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT




# iptables --list -n -v
Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target prot opt in out source   destination 
0 0 ACCEPT 0--  lo *   0.0.0.0/00.0.0.0/0   
0 0 ACCEPT 0--  eth0   *   0.0.0.0/00.0.0.0/0   state RELATED,ESTABLISHED 
0 0 DROP   tcp  --  eth0   *   192.168.0.0/16   0.0.0.0/0   
0 0 DROP   tcp  --  eth0   *   172.16.0.0/120.0.0.0/0   
0 0 DROP   tcp  --  eth0   *   10.0.0.0/8   0.0.0.0/0   
0 0 ACCEPT tcp  --  eth0   *   0.0.0.0/00.0.0.0/0   tcp dpt:22 state NEW,ESTABLISHED 


Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target prot opt in out source   destination 


Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target prot opt in out source   destination 
0 0 ACCEPT 0--  *  *   127.0.0.0/24 0.0.0.0/0   
0 0 ACCEPT tcp  --  *  *   0.0.0.0/00.0.0.0/0   tcp spt:22 state ESTABLISHED 



  




Re: IPTABLES brain fade... help!

2008-02-15 Thread Steve Holdoway

On Sat, 16 Feb 2008 14:58:32 +1300
Michael [EMAIL PROTECTED] wrote:

 What's not working?  Everything? 
 
 Just SSh?  This is all you really need:
 - iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
 
 If you must use your fancy pants SSh rule, I would suggest inserting (-I) it 
 before your drop rules:
 $IPTables -I INPUT -p tcp -i eth0 --dport 22 -m state --state NEW,ESTABLISHED 
 -j ACCEPT
 
 I don't think you need the SSh OUPUT rule because iptables is a stateful 
 firewall.
 
 Clients can't connect to the internet?  You have no MASQ rule.
 - iptables -A POSTROUTING -t nat -o eth0 -j MASQUERADE
 
 Cheers,
 Michael.

Hi Michael,

The problem is that nobody can connect to this server via ssh, and existing 
connections lock up! I don't think I need any nat services, as the primary 
function is to tunnel services from remote clients to this server ( and onwards 
) via ssh. 

I do need the OUTPUT stuff, as I will be limiting both services and servers 
that the users can use ):

Cheers,

Steve
-- 
Steve Holdoway [EMAIL PROTECTED]


Can anyone help me understand how the Debian package repository system is arranged?

2008-01-21 Thread Brett Davidson
I am trying to point some servers at both old and new Debian 4 
repositories but don't know how these are defined :-(


Cheers,
Brett.



  1   2   3   4   5   6   7   8   9   10   >