IP change and IP redirection
Hi all, One of our servers is co-located at an ISP. The ISP would like us to change its IP address. They are going to set up IP redirection to help in the transition. If someone has experience of this, I would appreciate the benefit of that experience. By the way, the server is a registered name server. According to the ISP, the IP redirection is completely transparent. All I need to do for now is change my /etc/network/interfaces (and /etc/hosts and /etc/resolv.conf) and reboot. I don't need to have eth0 configured for both the old and new IP addresses and services that are bound to the old IP address function normally. This sounds a bit fishy to me. My feeling is that I should change every IP-related configuration on the machine to the new address when changing the eth0 configuration. This is not a big problem except for the DNS changes which will take time to propagate. I've set the TTLs to a small value in the zones for which this server is authoritative. Can anyone confirm my thoughts above and suggest the best order in which to do the DNS changes (including the IP address change of the name server with the registrar). Thanks, Liam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: security update
Timur, It's easier to just let apt do all the work for you. Check if you have the following in /etc/apt/sources.list: deb http://security.debian.org/ stable/updates main contrib non-free If not, add it. Then: apt-get update This updates the latest packages for you (including security fixes). Finally: apt-get dist-upgrade This will install whatever packages you need to get up to date. Use -s if you want to see what packages it will add/remove/upgrade before doing it for real. Good luck. Liam On 27 Sep 2002 at 14:20, Timur V. Irmatov wrote: Hi, people! I'm just install new Debian 3.0 and I'm happy with it.. Also, I subscribed to debian-security mailing list and today I've recieved recommendation to install new libc6_2.2.5_11.2_i386.deb I have downloaded package with wget url and installed it with dpkg -i libc6_2.2.5_11.2_i386.deb But some time later I tried to install some other package with apt-get install and got this message: locales: Depends: glibc-2.2.5-6 E: Unmet dependencies. Try 'apt-get -f install' with no packages (or specify a solution). If I try to run apt-get -f install it wants to remove two packages: locales and language-env... How can I fix it? Any suggestions or references to docs will be appreciated! Thanks! Timur. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
exim envelope-to and procmail
Hi all, All of my mail goes to one address and is forwarded by procmail to one of a set of mailboxes that I POP from. I have exim set to include the envelope-to header and this seems to work for other addresses on my system that don't go through procmail. However, the header seems to get removed in my e-mails and I'm assuming that procmail is removing the envelope-to header. I've found some vague mentions of this but no cures. Can anyone help? Thanks, Liam -- Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: exim envelope-to and procmail
Hi Miguel, Yes, it's in both the procmail_pipe and the local_delivery transports. I actually think it's something that procmail is doing. Regards, Liam On 31 May 2002 at 11:45, Miquel van Smoorenburg wrote: In article [EMAIL PROTECTED], Liam Ward [EMAIL PROTECTED] wrote: All of my mail goes to one address and is forwarded by procmail to one of a set of mailboxes that I POP from. I have exim set to include the envelope-to header and this seems to work for other addresses on my system that don't go through procmail. However, the header seems to get removed in my e-mails and I'm assuming that procmail is removing the envelope-to header. I've found some vague mentions of this but no cures. Did you set the add_envelope_to header on the transport that eventually calls procmail? I.e. the procmail_pipe transport and/or the address_pipe transport ? Mike. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
traceroute / netlink / net-pf-16
Hi all, This week I did my potato - woody upgrade. Pretty painless. Thanks to all concerned. A problem that I'm having though is when I traceroute, I get the following warnings: traceroute: Warning: findsaddr: cannot open netlink socket: Invalid argument traceroute: Warning: ip checksums disabled and an entry like this in my syslog: modprobe: modprobe: Can't locate module net-pf-16 Any ideas? Thanks, Liam -- Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: is openssh version (in potato) 1.2.3-9.4 vulnerable?
The new version of Nessus (in testing) is complaining about this too. I think, from looking at the bug reports etc., that in potato the offending versions of ssh and openssh have been patched so that, although your version number indicates that you have a problem, the truth is that you're safe. All of this is, of course, dependent on you being up to date with security.debian.org updates. Can someone confirm this please... Thanks, Liam On 22 Feb 2002 at 9:11, Walter Tautz wrote: the following reports: http://www.cert.org/incident_notes/IN-2001-12.html http://www.cert.org/advisories/CA-2001-35.html which apparently refers to ssh1 crc-32 compensation attack detector and some other problems? Judging from the page there openssh is fixed only in version 2.3.0 and later? Or has the one in potato been patched so that none of these vulnerabilities. -walter -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
Re: Ximian Gnome on Woody?
I put Ximian Gnome on a box I installed about a year ago because it seemed to me to be a much nicer desktop for a non-Unix user. However, since then, Debian Gnome has caught up and I prefer to stick with native Debian packages where possible. On that note, if anyone has backed out Ximian Gnome and could outline the steps, I'd appreciate it. Thanks, Liam On 25 Nov 2001 at 20:02, jennyw wrote: I've seen some posts here saying that people should not install Ximian Gnome if they use Woody. Is there a reason why? I currently have Potato on a system that I'm going to upgrade to Woody at one point. I was thinking of installing Ximian Gnome on it in the meantime ... is this going to cause huge problems? Should I just upgrade to Woody and not even bother with Ximian in the meantime? Thanks! Jen -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
LVM and Kernel 2.4.15
Hi, I'm using LVM with a 2.2.17 kernel to stripe across two SCSI disks. I'm going to upgrade to kernel 2.4.15. Are there are any known problems or should this be relatively smooth? Thanks, Liam -- Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
ssh-nonfree - ssh
Is the switch from ssh-nonfree to ssh (OpenSSH) seamless? Do they use the same config files? If I install ssh, ssh-nonfree will be removed and I'm wondering if doing this remotely will result in me being unable to connect to the machine remotely afterwards. Thanks, Liam -- Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
Updated packages in potato?
Hi all, My sources.list points at stable plus security. This morning I did an apt-get update which transferred new Packages as you see below. Get:1 http://non-us.debian.org stable/non-US/main Packages [14.5kB] Get:2 http://http.us.debian.org stable/main Packages [824kB] Get:3 http://http.us.debian.org stable/contrib Packages [30.3kB] Get:4 http://http.us.debian.org stable/non-free Packages [70.2kB] A dist-upgrade wants to upgrade: e2fsprogs libc6 libc6-dev locales The root of this seems to be locales which depends on libc6 2.1.3-19. It's unusal to see updates for stable, other than in security and I haven't seen anything about these updated packages. Just need a sanity check before I go and do the upgrade. But, while I'm at it, apart from security updates, is there a way to know _why_ other packages have been updated in a distribution? Thanks, Liam Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
PHP spell check
Hi all, I've got a requirement to do spell check in a web page with a HTML form. So far, the best solution seems to be to install pspell (from unstable) and hand craft something to check and make suggestions. My system is potato with Apache/MySQL/PHP4. Dipping into unstable for pspell is one thing but I think PHP also needs to be compiled with -- use-pspell and that's probably not the case for the PHP4 version in stable. If anyone has any pointers or tips before I go tying myself in knots I'd appreciate it. I'd even consider a commercial solution but if you know of something like that please mail me directly rather than via the list because people here probably don't want to be bothered with that stuff. Thanks, Liam Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
Re: nslookup equivalent?
Try dig, which I believe is in the dnsutils package. Liam On 15 May 2001, at 12:14, V.Suresh wrote: which package in debian is equivalent to nslookup in redhat/suse? nslookup gives the ip address of a given website. -V.Suresh. Sureshvatusersdotsourceforgedotnet Http://www16.brinkster.com/vsuresh -- --Powered by Debian--- 12:13pm up 2:24, 5 users, load average: 1.02, 1.12, 1.08 -- --This mail comes from a pure Debian GNU/LINUX System- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
samba + netatalk
I wonder if anyone has any experience of something like this... Our office has a mixture of Windows and MacOS desktops. Packages to allow the Macs to talk to the PCs are expensive ($150 per machine) so I'm thinking of getting an old PC, putting Debian on it and setting up shared disk space using Samba and Appletalk (netatalk) simultaneously. If anyone knows of any pitfalls before I start into this I'd appreciate some pointers. Thanks, Liam Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
Selective mail download (was Re: Mail client)
Do any of these mail readers allow selective download from a POP server? In other words, I want to view the message headers and choose the ones I wish to download. I access my work mail from home and sometimes get large attachments that I could choose not to download when I'm dialing in from home. Pegasus for Win32 (which is free but not open source) does this very nicely but I've switched to Debian at home now. Thanks, Liam On 24 Apr 2001, at 10:43, b3 wrote: I have to second this. mutt is OUTSTANDING. It does have a small learning curve, however, so be forewarned. If you need any help setting it up, there are PLENTY of mutt users on this list (including myself) who would be willing to help. -b3 On Tue, Apr 24, 2001 at 08:28:25AM -0600, ray p wrote: The same mail client I use everywhere mutt or course. On Tue, Apr 24, 2001 at 03:50:08PM +0200, Ales Jerman wrote: Which X Mail clent to use under FVWM2? Thanks! Bye, Ale? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- Random numbers are to computers what freewill is to humans. RAH I'm afraid it is you who are mistaken about a great many things. Palpatine -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
Envelope-To header in Exim
I'm thinking of turning on Exim's feature whereby it adds an Envelope-To header to indicate the local address that caused the delivery. I want to do this because I use several mail addresses and when someone sends me something (e.g. spam) using BCC, I want to know which address it was delivered to. The Exim documentation hints at possible problems but doesn't elaborate much. Is there anything to be worried about? Also, is it the case that Exim only adds this header when it is delivering to a local mailbox? Thanks, Liam -- Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
Re: how to get a list of updated packages after apt-get update
Nico, Just do: apt-get -s upgrade will show you which packages _would_ be upgraded (-s means don't actually do the upgrade, just tell me what would happen). The only thing you're missing is any updated packages that you haven't got installed (but then you probably don't care about these). I also think it would be nice if you could tell why a package wants to be upgraded... Liam On 30 Jan 2001, at 13:06, Nico De Ranter wrote: Howdy, how can I check which packages are new after doing a apt-get update? I don't want to upgrade all packages I just want to know whether a certain number of packages can be upgraded. I don't want to run dselect either since this will starting selecting lots of stuff automaticaly and I will end up with a big mess afterwards too. Where does apt-get keep track of the packages after a apt-get update? Nico - It has been said that there are only two businesses that refer to customers as users: illegal drug trade and the computer industry. - Nico De Ranter Sony Service Center (SDCE/NEE-B) Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne) 1130 Brussel (Bruxelles), Belgium, Europe, Earth Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86 e-mail: [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
Re: System.map irritation
A reboot usually solves this for me but maybe you've already tried that... Liam On 11 Jan 2001, at 16:30, Oki DZ wrote: Hi, I have the same problem after upgrading my (system's) kernel to 2.4.0. I put the 2.4.0 source to /usr/src2/linux directory, and when top executed, the System.map looked up is the one in /usr/src/linux (in which I put the 2.2.13 source). BTW, I have removed the System.map's in /usr/src/linux and /usr/src2/linux; surely enough, when top executed, there's no warning reported. The question is, what's the use of the System.map file? (My system working properly.) Oki --- To: debian-user@lists.debian.org Subject: Re: System.map irritation From: Pollywog [EMAIL PROTECTED] Date: Mon, 01 Jan 2001 20:22:52 + (UTC) On Mon, 1 Jan 2001 15:08:31 -0500, David B.Harris said: Hey there :) I'm new to the list(but I've actually subscribed ;), and I'm having a bit of an irritant considering an error I get often: {module_list} {module_list_R__ver_module_list} Warning: /usr/src/linux/System.map does not match kernel data. I am having the same problem with the latest test kernel (2.4.0-test12) and I believe the problem might be due to the fact that I need to upgrade some package, either modutils or kernel-package; I seem to recall reading something like that somewhere. I have upgraded to the latest Woody versions, but I still get that error. I do not have that problem with the test11 kernel. -- Andrew -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
Re: webcam support for linux?
Andreas, If you are looking for a dedicated webcam, have a look at www.axis.com. They have a webcam (that looks like a camera, not a computer) that runs Linux and has a built in web server and networking. I haven't used it but the review in Linux Journal impressed me. It costs $499. Also, try apt-get show webcam. I haven't used this either but the name suggests it might be what you're looking for :-) Liam On 10 Jan 2001, at 10:32, Andreas Fromm wrote: Hi, does anybody know about something on using webcams with linux? Please cc me any info about. Thanx Andreas Fromm [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
mt: /dev/nst0: Input/output error
Hope someone can help here... I've been testing out Arkeia as a backup system (it's free for small configurations - server plus two clients - now). I've got a SCSI DLT4000 (Quantum). I think my problem happened when a cron job tried to write to the tape at the same time as I was playing with Arkeia. Now I get: ns1:~ sudo mt -f /dev/nst0 status mt: /dev/nst0: Input/output error The machine is remote so I've tried a soft reboot but to no avail. I don't think it's Arkeia's fault because it happened once before and a poer down reboot did the trick. Is there any way I can clear the fault without physically visiting the machine? I've searched the WWW and, while there are quite a few reports of people havign similar problems, there doesn't seem to be any workable solutions. Thanks in advance. Liam Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
tob not restoring
Hi, Anyone out there using tob? My backups seem to work fine (very simple policy: full backup each Monday, differential every other day). I wanted to test restoring by deleting a file and trying to restore it. The file was /home/liam/addr1.txt and below are the commands I use plus the results. In summary, I can find the file in the backup list and tob seems happy enough about restoring but the file never gets written to the disk. Any hints appreciated. Liam === ns1:~ sudo tob -find '.*addr1.txt' No tape position known in advance. Position to what entry? 0 Ok, got resource /etc/tob/tob.rc. This is the tob script. VOLUME: root TYPE: Full DATE: Nov 19 06:57 /home/liam/addr1.txt VOLUME: root TYPE: differential DATE: Nov 24 04:34 Cleaning up. Bye. ns1:~ sudo tob -restore '.*addr1.txt' No tape position known in advance. Position to what entry? 0 Ok, got resource /etc/tob/tob.rc. This is the tob script. Restoring .*addr1.txt from /dev/nst0 relative to /home/liam. Cleaning up. Bye. ns1:~ sudo !! sudo find / -name addr1.txt -print ns1:~ == Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
System.map does not match kernel data
Hi all, I'm getting the following message when I run ps/top: Warning: /boot/System.map-2.2.17 does not match kernel data. I'm assuming (hoping :-) that this is because I did a security update yesterday and something's not quite right. Any hints on what to do here? Thanks, Liam Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
Re: Intel server box for NT, Linux
Rory, I don't think anyone answered this so I'll tell you what I use... I have a Dell PowerEdge 2400 with a dual power-supply and hot- swappable disks (3 x 18GB, in my case). My ISP's webfarm is full of Dells so that speaks for itself (I've seen one Mac in there :-) The only complaint I have is that they seem to be very much in bed with RedHat and don't care about other flavours of Linux. This got me when I couldn't get their RAID controller to work with Debian. They provide a driver for RedHat but not for Debian. What's worse is they won't release the source (yeah, they've really bought into the Linux principles - or at least their marketing dept. has :-) We ended up using software RAID. I would still recommend the machine but make sure you moan to them about only supporting RedHat. Mine cost me around IRĀ£6500 a few months ago. Hope that helps. Liam On 13 Nov 2000, at 13:44, Rory Campbell-Lange wrote: Hi. We've been running a Linux intranet server on an old Apple Mac. The use and content on the intranet is exceeding the capacity of our old 7200, and it looks like management will cough up for a new server to run Linux, with a tape-backup drive et al. I'd like a recommendation for a popular server Manufacturer/model for our relatively modest needs. Ideally it would have about 30Gb storage. We have up to 150 users on a 100baseT Ethernet network and more will be connecting through a VPN. We are looking for something very reliable and of standard construction - whatever that may be. We would like to be able to install NT on it in the future if necessary... As you can see I know nothing about servers, so I'd be really grateful for advice. Incidentally, we are based in the UK. Thanks Rory -- Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] /dev/null Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
Re: PHP4 Apache
Steve, On 11 Oct 2000, at 13:35, Steve Simons wrote: Could someone please explain, in idiot-level detail, how to get a .php file to display correctly in Netscape. I'm currently using PHP3 and my config files have similar stuff to yours (but without the PHP4 bits, obviously enough). (BTW, I'm thinking of upgrading to PHP4 so if anyone out there has a checklist or whatever of how to make it go smoothly, I'd love to hear about it.) When I open it in Netscape, it wants to save it as a .php file. I've tried running it from /var/www and I get the same result. I've tried setting Netscape to use php for types of application/x-httpd-php but it just says it can't find php. You're looking in the wrong place here. Netscape does not need to know anything special to process PHP. It's Apache that spots that the file is in fact a PHP script and processes it. Netscape just gets plain old HTML. I call my scripts scriptname.php3 (I've always done that and it's always worked). I just tried renaming a script to .php and it didn't work. So, my guess is that you should name your script .php4. Hope that helps. Liam Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
libc5 / libc6
Hi, I am having problems with mp3enc (not a Debian package - commercial product) which wants libc5 libraries: ldd mp3enc31 libm.so.5 = not found libc.so.5 = not found I am not mad enough to mess with libc versions lightly :-) I decided to see if asking APT to install the libc5 package in simulate mode would suggest the removal of libc6 and it doesn't, which suggests I could simply install the libc5 package. However, I'm too scared to do it without checking that I'm not going to break everything. Can anyone reassure me? Thanks, Liam Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com
MP3 streaming
Hi all, I'm just about to begin my quest for an MP3 streaming server to run on 2.2. I need to support on-demand plus continuous streaming. If anyone has blazed this particular trail already and has some pointers I'd be very grateful. Thanks, Liam Liam Ward DV4 t: +353 1 672 7250 e: [EMAIL PROTECTED] w: www.dv4.com