[gentoo-user] Keyboard troubles and new baselayout
Hi, After upgrading to baselayout-1.11.13-r1 i can't login to my servers direct with the keyboard. After the upgrade i have used the new /etc/rc.conf and changed the /etc/conf.d/keymaps accourding to my Belgium keyboard KEYMAP=be-latin1, and rebooted the machine ! It seems that the @ button not work on the keyboard, on the otherhand if i login with ssh i can use the @ sign. Must i change something else ? TIA -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Bridge confusion
Hi, I hope that someone on this list can help me to clarify bridging. This is the setup i want: Lan 1 Lan 2 eth1---brigdeeth1 || 10.32.0.0/22 10.32.0.0/22 || eth0 (10.32.3.10)---eth0 (10.32.3.11) So the questing is, must i add eth0 and eth1 of the same machine to the same bridge device to get it working, or is eth1 enough ? -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Bridging problems with new baselayout
Hi,
I'm having trouble to get bridging working with the new baselayout
I followed a example of gentoo-wiki
config_eth0=( 10.32.3.52/22 )
config_eth1=( 10.32.100/28 )
config_eth2=( 10.32.100.18/28 )
config_eth3=( null )
config_tap0=( 0.0.0.0 promisc )
config_br0=( 10.32.100.99 )
bridge_br0=eth3 tap0
depend_br0 () {
need net.tap0 net.eth3
}
when i bring up the net.br0 i get this error:
* Please make sure that /etc/conf.d/net has $ifconfig_eth3 set
* (or $iface_eth3 for old-style configuration)
* ERROR: Problem starting needed services.
* net.br0 was not started.
If i run all the commands with ifconfig i get it working.
Whats wrong in my /etc/conf.d/net ?
TIA
Patrick
--
This is Unix-Land. In quiet nights, you can hear the Windows machines reboot.
--
gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Bridging problems with new baselayout - SOLVED
Is seems that my net.eth3 was a old script, when replacing it with a newer
version my ny /etc/conf.d/net if working perfect.
Hi,
I'm having trouble to get bridging working with the new baselayout
I followed a example of gentoo-wiki
config_eth0=( 10.32.3.52/22 )
config_eth1=( 10.32.100/28 )
config_eth2=( 10.32.100.18/28 )
config_eth3=( null )
config_tap0=( 0.0.0.0 promisc )
config_br0=( 10.32.100.99 )
bridge_br0=eth3 tap0
depend_br0 () {
need net.tap0 net.eth3
}
when i bring up the net.br0 i get this error:
* Please make sure that /etc/conf.d/net has $ifconfig_eth3 set
* (or $iface_eth3 for old-style configuration)
* ERROR: Problem starting needed services.
* net.br0 was not started.
If i run all the commands with ifconfig i get it working.
Whats wrong in my /etc/conf.d/net ?
TIA
Patrick
--
This is Unix-Land. In quiet nights, you can hear the Windows machines
reboot.
--
gentoo-user@gentoo.org mailing list
--
Arwen: Why do you fear the past? You are Isildur's heir, not Isildur
himself. You are not bound to his fate.
--
gentoo-user@gentoo.org mailing list
[gentoo-user] Automatic install script
Hi, I'm working on a automatic install script, so that i can start the install and the 'next' morning i have a working server system. The only problem i have is when i emerge fails where can i see this ? /var/log/emerge.log TIA Patrick -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Save cflags for Xeon
Hi,
i'm looking for good cflags for a PowerEdgeTM SC1425
The Gentoo wike site
Xeon w/EM64T (Intel)
vendor_id : GenuineIntel
cpu family : 15
model : 4
model name : Intel(R) Xeon(R) CPU 2.80MHz
CHOST=x86_64-pc-linux-gnu
CFLAGS=-march=nocona -O2 -fomit-frame-pointer -mmmx -msse2 -mfpmath=sse
-pipe
CXXFLAGS=${CFLAGS}
/proc/cpuinfo
Model name : Intel(R) Xeon(R) CPU 2.80MHz
cpu fam : 15
model : 4
For me it seems the same model but i got errors at bootstrap
anyone a idea
TIA
Patrick
--
This is Unix-Land. In quiet nights, you can hear the Windows machines reboot.
--
gentoo-user@gentoo.org mailing list
[gentoo-user] keeping hosts file in sync
Hi, Whats the best way to keep several /etc/host files in sync ? TIA Patrick -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] QOS setup advice
Hi, This is my situation internet (38mbit) | | | lan-1 (34mbit) lan-2 (4mbit) There is a 38mbit connection to the internet and lan-2 may use max 4mbit and lan-1 34mbit. Is it enough to create a root cbq queue of 4mbit on the lan-2 interface and a root cbq queue of 34 mbit for lan-1? The traffic of the two lans is compleet separate, and different. TIA Patrick -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] DSPAM + How to train?
Postfixz- amavisd-new(Clamav+spamassassin+dspam)-cyrus I'm wondering how to properly configure dspam. How do I train it? Right now, seems like spamassassin is working OK, but dspam is well, doesn't. I've got a bunch of ham and spam in my mailbox (mbox format) and I just want to use it to train it. How do I go about doing that? I've tried dspam_sa_trainer but it keeps complaining of errors. (Can't write to the /var/amavis/.dspam/ directory, even though I run it as root!!) Anyone? I'm not using dspam only spamassassin and i copy the ham and spam to their learning mail folders and have every night a script that uses sa-learn. HTH Patrick -- Ow Mun Heng Gentoo/Linux on DELL D600 1.4Ghz 1.5GB RAM 98% Microsoft(tm) Free!! Neuromancer 16:47:02 up 1 day, 21:33, 7 users, load average: 1.20, 1.02, 0.77 -- gentoo-user@gentoo.org mailing list -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Central syslog server and then
Hi, I'm going to setup a central syslog server for Linux and windows machines, but whats the best program to examin these logs, and send out email alerts to users ? It seems that there are not so many opensource solutions. TIA -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Central syslog server and then
Patrick Marquetecken wrote: I'm going to setup a central syslog server for Linux and windows machines, but whats the best program to examin these logs, and send out email alerts to users ? It seems that there are not so many opensource solutions. Which ones have you already checked out? The one mention at the syslog-ng site. At the moment i'm going true the internet with google Perhaps sys-apps/logwatch is what your looking for. http://www.logwatch.org/ Christoph -- echo mailto: NOSPAM !#$.'*'|sed 's. ..'|tr * !#:2 [EMAIL PROTECTED] -- gentoo-user@gentoo.org mailing list -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Encrypted NFS via ssh tunelling
Hi, I can do a nfs mount, but for security i would like to do it over ssh. I always get this error: mount: localhost:/usr/portage failed, reason given by server: Permission denied without the ssh tunnel i have no problems. There are no firewall between the two machines, ssh between both goes fine. My setup: Attach NFS port of Server (2049) to local port 2818 ssh -f -L 2818:10.32.3.172:2049 -l root 10.32.3.172 sleep 86400 Attach mountD port of Server (675) to local port 3818 ssh -f -L 3818:10.32.3.172:675 -l root 10.32.3.172 sleep 86400 Mount mount -t nfs -o tcp,port=2818,mountport=3818 localhost:/usr/portage /usr/portage ps -ef root 9165 1 0 10:22 ?00:00:00 ssh -f -L 2818:10.32.3.172:2049 -l root 10.32.3.172 root 9173 1 0 10:23 ?00:00:00 ssh -f -L 3818:10.32.3.172:675 -l root 10.32.3.172 whats wrong here ? TIA Patrick -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Routing problem
It's rather hard to help you here. You described only the sympthoms but didn't provide any basic details like IP-ranges on both sides, routes, ovpn config, OpenVPN versions used, etc. etc. SiteA 10.32.0.0/22 siteB 10.32.16.0/24 connection goes over 10.32.100.0 tunnels ip's are 10.32.101.3 for siteA and 10.32.101.4 for SiteB routing tables: siteA eth0 10.32.3.51 Destination Gateway Genmask Flags Metric RefUse Iface 10.32.101.6 0.0.0.0 255.255.255.255 UH0 00 tun2 10.32.101.4 0.0.0.0 255.255.255.255 UH0 00 tun1 10.32.101.2 0.0.0.0 255.255.255.255 UH0 00 tun0 10.32.16.16010.32.101.2 255.255.255.255 UGH 0 00 tun0 10.32.101.140.0.0.0 255.255.255.255 UH0 00 tun5 10.32.101.120.0.0.0 255.255.255.255 UH0 00 tun4 10.32.101.8 0.0.0.0 255.255.255.255 UH0 00 tun3 10.32.32.0 0.0.0.0 255.255.255.248 U 0 00 eth0 10.32.100.160.0.0.0 255.255.255.240 U 0 00 eth2 10.32.100.0 0.0.0.0 255.255.255.240 U 0 00 eth1 10.32.100.3210.32.0.20 255.255.255.240 UG0 00 eth0 10.35.0.0 10.32.101.8 255.255.255.0 UG0 00 tun3 10.32.24.0 10.32.101.6 255.255.255.0 UG0 00 tun2 10.35.1.0 10.32.100.17255.255.255.0 UG0 00 eth2 10.32.25.0 10.32.100.17255.255.255.0 UG0 00 eth2 10.32.66.0 10.32.101.4 255.255.255.0 UG0 00 tun1 10.32.16.0 10.32.101.4 255.255.255.0 UG0 00 tun1 10.32.67.0 10.32.101.4 255.255.255.0 UG0 00 tun1 10.32.0.0 0.0.0.0 255.255.252.0 U 0 00 eth0 127.0.0.0 127.0.0.1 255.0.0.0 UG0 00 lo 0.0.0.0 10.32.0.20 0.0.0.0 UG0 00 eth0 siteB eth0 10.32.16.52 Destination Gateway Genmask Flags Metric RefUse Iface 10.32.101.3 0.0.0.0 255.255.255.255 UH0 00 tun1 10.32.101.1 0.0.0.0 255.255.255.255 UH0 00 tun0 10.32.3.129 10.32.101.1 255.255.255.255 UGH 0 00 tun0 10.32.3.128 10.32.101.1 255.255.255.255 UGH 0 00 tun0 81.246.22.210 10.32.16.20 255.255.255.255 UGH 0 00 eth0 10.32.101.130.0.0.0 255.255.255.255 UH0 00 tun5 10.32.101.110.0.0.0 255.255.255.255 UH0 00 tun4 10.32.32.0 10.32.101.3 255.255.255.248 UG0 00 tun1 10.32.26.0 10.32.16.20 255.255.255.240 UG0 00 eth0 10.32.100.1610.32.16.20 255.255.255.240 UG0 00 eth0 10.32.100.0 0.0.0.0 255.255.255.240 U 0 00 eth1 10.32.100.320.0.0.0 255.255.255.240 U 0 00 eth2 10.35.0.0 10.32.101.3 255.255.255.0 UG0 00 tun1 10.32.24.0 10.32.101.3 255.255.255.0 UG0 00 tun1 10.32.16.0 0.0.0.0 255.255.255.0 U 0 00 eth0 10.33.10.0 10.32.101.3 255.255.255.0 UG0 00 tun1 10.32.64.0 10.32.101.3 255.255.255.0 UG0 00 tun1 10.32.65.0 10.32.101.3 255.255.255.0 UG0 00 tun1 10.32.0.0 10.32.101.3 255.255.252.0 UG0 00 tun1 127.0.0.0 127.0.0.1 255.0.0.0 UG0 00 lo 0.0.0.0 10.32.16.20 0.0.0.0 UG0 00 eth0 RR: 10.32.3.172 10.32.101.3 10.32.16.52 10.32.16.52 10.32.3.51 - should be 10.32.101.3 10.32.3.172 And what do you mean by I have connected two sites ? Are we talking Linux - Linux here, or is a Windoze box involved ? Firewalls in between Its Linux to Linux direct without any firewalls. the VPN tunnels are now working for more than 3 months, its only that the openVPN machines can't connect to other machines then theireselfs. Patrick Heinz Sporn -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Routing problem - Solved
After spending some hours watching tcpdumps, i saw that the openvpn at siteB comes with ip form the vpntunnel to the client, setting up a route on the client solved it all. I tought that i always would use the ip of eth0 ? Patrick -- Arwen: Why do you fear the past? You are Isildur's heir, not Isildur himself. You are not bound to his fate. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Routing problem - Solved
Am Donnerstag, den 08.09.2005, 11:37 +0200 schrieb Patrick Marquetecken: After spending some hours watching tcpdumps, i saw that the openvpn at siteB comes with ip form the vpntunnel to the client, setting up a route on the client solved it all. I tought that i always would use the ip of eth0 ? I have to say your network layout seems to be rather odd. Why on earth do you need so many tunnels and routes? If site A and B contain just a number of servers and clients I'd say you just need one tunnel at all and one route on each side of it that points to the correspondig LAN. We have two tunnels tun0 tun1 to siteB, but this is because we are using QOS, the tunnels contains different type of traffic. There are other tunnels to siteC and siteD Patrick Patrick -- Arwen: Why do you fear the past? You are Isildur's heir, not Isildur himself. You are not bound to his fate. -- Mit freundlichen Grüßen Heinz Sporn SPORN it-freelancing Mobile: ++43 (0)699 / 127 827 07 Email: [EMAIL PROTECTED] [EMAIL PROTECTED] Website: http://www.sporn-it.com Snail: Steyrer Str. 20 A-4540 Bad Hall Austria / Europe -- gentoo-user@gentoo.org mailing list -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Routing problem
Hi, I have connected two sites with openVPN, this works fine all traffic goes trought the tunnels, and i can ping machines from one site to another. But, i can't ping a machine from siteA from openVPN from siteB. to make it compleet bizar the machine on siteA can ping the openVPN on siteB. If i do a ping -R on the machine at siteA i see this: RR: 10.32.3.172 - machine siteA 10.32.101.3 - tunnel 10.32.16.52 - openVPN siteB 10.32.16.52 10.32.3.51 - must be 10.32.101.3 (openVPN siteA) 10.32.3.172 It seems that the answer goes direct between the two openVPN machines and not the tunnel (10.32.101.x) There is a route 10.32.0.0 netmask 255.255.252.0 gw 10.32.101.3 dev tun1. A ping from openVPN siteB to openVPN siteA RR: 10.32.101.4 10.32.3.51 10.32.3.51 10.32.101.4 My main portage server is in siteA and i would like to update my remore openVPN machines. This behaviour its not only with that machine but with all my other remote openVPN machines, all machines behind those does not have this kind of problems. Anyone know a solution TIA -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] MacOS 10.4 (Tiger) can't connect to smaba share
hi, One Mac with the new OS 10.4 (Tiger) can't connect to my Samba shares, Mac's with 10.3 have no problems. I have also emerged the latest version of Samba. This is what i see in the smaba logs: [2005/08/26 13:44:07, 0] rpc_parse/parse_prs.c:prs_mem_get(537) prs_mem_get: reading data of size 2 would overrun buffer. [2005/08/26 13:44:07, 0] rpc_server/srv_pipe.c:api_pipe_bind_req(919) api_pipe_bind_req: unable to unmarshall RPC_HDR_RB struct. Anyone a idea TIA Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] webcdwriter
Hi, Because my server is the only computer with a dvd writer i was thinking of installing webcdwriter. My server doesn't have Xorg installed on it, so when i do a emerge -pv i get a huge list, even with -X -gnome and so on in my use settings. Is there a way to install this without all these ? TIA PAtrick -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] IPtables statefull connection capable
Hi, On Tue, 5 Jul 2005 15:52:20 +0200 (CEST) Patrick Marquetecken [EMAIL PROTECTED] wrote: If Im correct then iptables is statefull connection capable, this means I should not use rules like: If state of connection is ESTABLISHED ... If state of connection is RELATED ... and i my use only: If protocol is TCP and source is bla bla and destination port is bla bla and state of connection is NEW All of the mentioned rules are related to stateful connection matching. You probably want all ESTABLISHED and RELATED traffic in both the incoming and outgoing direction, and NEW connections only outgoing. Additional you'll probably want NEW connections also in the incoming direction for the services you want to offer - that's how I interpret your last sentence. But you'll definately want ESTABLISHED and RELATED, too. Concept usually is: INPUT: - allow ESTABLISHED,RELATED - allow NEW for selected services FORWARD: - allow NEW,ESTABLISHED,RELATED from LAN to WAN - allow ESTABLISHED,RELATED from WAN to LAN OUTPUT: - allow NEW,ESTABLISHED,RELATED where OUTPUT rules are optional if OUTPUT's policy is set to ACCEPT. Current connections being monitored are listed and accessible in procfs. When playing with Linux as a router for UDP traffic, you may want to play with the state matching related sysctl's (also accessible via procfs) to adjust the timespan that the information is held. My VPN connections from LAN to WAN tend to time out otherwise. But that's just a side note. -hwh -- Thank you all, The explanation was very clear, I tough because its statefull its not necessary to add the ESTABLISHED,RELATED stuff. I was using a setup like you say above. Patrick -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] IPtables statefull connection capable
Hi, If Im correct then iptables is statefull connection capable, this means I should not use rules like: If state of connection is ESTABLISHED ... If state of connection is RELATED ... and i my use only: If protocol is TCP and source is bla bla and destination port is bla bla and state of connection is NEW TIA Patrick -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Connect to a remote server with a modem
Patrick Marquetecken wrote: Hi, I going to maintain a Gentoo server in another country, normal i'm going to connect with the internet, but if something is wrong i'm thinking to connect a modem to the machine. What do i need of software so i can connect with a another machine to this machine over a telephone line? The machine has no X installed. TIA Patrick Just connect a modems to serial ports on both sides and start one of getty proceses (agetty, mgetty ... the last is recommended) on server. To do that, put something like this to /etc/inittab: m1:12345:respawn:/usr/sbin/mgetty -x1 -n1 ttyS0 next notify init process about changes: # init q On client side start minicom, setup modem and dial servers number (using AT-commands). If everything done properly, u see login prompt on the screen. In next u can set up PPP demons, so u can do everythink in the same way as via internet. HTH noro -- gentoo-user@gentoo.org mailing list I have found this howto Linux dialin server setup guide that i'm installing now: http://www.swcp.com/~jgentry/pers-1.html -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] Connect to a remote server with a modem
Hi, I going to maintain a Gentoo server in another country, normal i'm going to connect with the internet, but if something is wrong i'm thinking to connect a modem to the machine. What do i need of software so i can connect with a another machine to this machine over a telephone line? The machine has no X installed. TIA Patrick -- This is Unix-Land. In quiet nights, you can hear the Windows machines reboot. -- gentoo-user@gentoo.org mailing list
[gentoo-user] OpenOffice 2 beta
Hi, With the latest bin version I can't open of save documents that are on a nfs volume, has anyone else the same problem? TIA Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] Routing strangeness
Hi, I'm facing something quite bizar, i have a static route on my firewall and with a tracepath i see that this firewall always takes another route. The static must use 10.32.16.50. Can someone explain me way this happens? I'm doing a tracepath from the FW to 10.32.32.2 with passes ucc-openvpn Result ucc-fw-01[admin]# traceroute -n 10.32.32.2 traceroute to 10.32.32.2 (10.32.32.2), 30 hops max, 40 byte packets 1 10.32.100.34 1.635 ms 0.310 ms 0.211 ms ^C If i bring down the interface 10.32.100.34 on the ucc-openvpn machine i get this result ucc-fw-01[admin]# traceroute -n 10.32.32.2 traceroute to 10.32.32.2 (10.32.32.2), 30 hops max, 40 byte packets 1 10.32.16.50 0.379 ms 0.279 ms 0.212 ms 2 * * * 10 * *^C from the open-vpn to 10.32.32.2 ucc-openvpn-01 root # tracepath -n 10.32.32.2 1: 10.32.101.4 0.131ms pmtu 1500 1: 10.32.101.3 4.900ms 2: 10.32.32.23.929ms reached Resume: pmtu 1500 hops 2 back 2 ucc-openvpn-01 root # netstat -nr Kernel IP routing table Destination Gateway Genmask Flags 10.32.101.3 0.0.0.0 255.255.255.255 UH 10.32.101.1 0.0.0.0 255.255.255.255 UH 10.32.3.129 10.32.101.1 255.255.255.255 UGH 10.32.3.128 10.32.101.1 255.255.255.255 UGH 10.32.101.130.0.0.0 255.255.255.255 UH 10.32.101.110.0.0.0 255.255.255.255 UH 10.32.32.0 10.32.101.3 255.255.255.248 UG 10.32.26.0 10.32.16.20 255.255.255.240 UG 10.32.100.1610.32.16.20 255.255.255.240 UG 10.32.100.0 0.0.0.0 255.255.255.240 U 10.32.100.320.0.0.0 255.255.255.240 U 10.32.16.0 0.0.0.0 255.255.255.0 U 10.32.64.0 10.32.101.3 255.255.255.0 UG 10.32.65.0 10.32.101.3 255.255.255.0 UG 10.32.0.0 10.32.101.3 255.255.252.0 UG 127.0.0.0 127.0.0.1 255.0.0.0 UG 0.0.0.0 10.32.16.20 0.0.0.0 UG FW DestinationGatewayFlags Refs UseNetif Expire default81.246.22.209 CU 00 eth-s1p1c0 0.0.0.0 CU 00 10.32.0/22 10.32.16.50CU 00 eth-s1p3c0 10.32.16/24 CGUX00 eth-s1p3c0 10.32.16.0 10.32.16.0 CGU 00 eth-s1p3c0 10.32.16.1 0:0:c:9:c1:df CGU 00 eth-s1p3c0 ucc-fw-01 ucc-fw-01 CGU 00 eth-s1p3c0 10.32.16.500:12:3f:20:17:fa CGU 00 eth-s1p3c0 10.32.16.253 0:1:30:bc:8:90 CGU 00 eth-s1p3c0 10.32.16.254 0:e0:2b:57:30:0CGU 00 eth-s1p3c0 10.32.16.255 10.32.16.255 CGU 00 eth-s1p3c0 10.32.26.0/28 CGUX00 eth-s1p4c0 10.32.26.0 10.32.26.0 CGU 00 eth-s1p4c0 10.32.26.1 0:f:24:7d:18:a0CGU 00 eth-s1p4c0 10.32.26.2 10.32.26.2 CGU 00 eth-s1p4c0 10.32.26.1510.32.26.15CGU 00 eth-s1p4c0 10.32.32.0/29 10.32.16.50CU 00 eth-s1p3c0 10.32.66/24 CGUX00 eth-s1p2c0 10.32.66.0 10.32.66.0 CGU 00 eth-s1p2c0 10.32.66.1 10.32.66.1 CGU 00 eth-s1p2c0 10.32.66.255 10.32.66.255 CGU 00 eth-s1p2c0 10.32.100.16/2810.32.26.1 CU 00 eth-s1p4c0 10.32.100.32/28 CGUX00 eth-s1p3c0 10.32.100.32 10.32.100.32 CGU 00 eth-s1p3c0 10.32.100.33 10.32.100.33 CGU 00 eth-s1p3c0 10.32.100.47 10.32.100.47 CGU 00 eth-s1p3c0 10.35/16 10.32.16.1 CU 00 eth-s1p3c0 81.246.22.208/28 CGUX00 eth-s1p1c0 81.246.22.208 81.246.22.208 CGU 00 eth-s1p1c0 81.246.22.209 0:12:0:9d:dc:60CGU 00 eth-s1p1c0 ucc-fw-01-extern ucc-fw-01-extern CGU 00 eth-s1p1c0 81.246.22.223 81.246.22.223 CGU 00 eth-s1p1c0 127/8 BCU 00 localhost localhost CG 00 224/4 RCU 00 224.0.0.1 CDU 00 240/4 BCU 00 -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Static routes
What is a standard way to add static routes at gentoo? I tried to google around and have found some refereneces to /etc/conf.d/routes, but nothing about its expected format. I place them in /etc/conf.d/local.start -- Leonid Podolny Montilio Inc. Phone: +972-9-9511944 ext.208 Mobile: +972-52-4781423 Fax:+972-9-9542430 EMail: [EMAIL PROTECTED] -- gentoo-user@gentoo.org mailing list -- a -- gentoo-user@gentoo.org mailing list
[gentoo-user] Routing problem
Hi, I'm having a bit trouble to get one computer force to use another route. this are the commands i'm using to create routes route add -net 10.32.16.0 netmask 255.255.255.0 gateway 10.32.101.4 dev tun1 route add -host 10.32.16.160 gateway 10.32.101.2 dev tun0 The routes on my gentoo router are: Kernel IP routing table Destination Gateway Genmask Flags Metric RefUse Iface 10.32.101.4 0.0.0.0 255.255.255.255 UH0 00 tun1 10.32.101.2 0.0.0.0 255.255.255.255 UH0 00 tun0 10.32.16.16010.32.101.2 255.255.255.255 UGH 0 00 tun0 10.32.100.0 0.0.0.0 255.255.255.240 U 0 00 eth1 10.32.26.0 10.32.100.2 255.255.255.0 UG0 00 eth1 10.32.16.0 10.32.101.4 255.255.255.0 UG0 00 tun1 10.32.16.0 10.32.100.2 255.255.255.0 UG0 00 eth1 10.32.0.0 0.0.0.0 255.255.252.0 U 0 00 eth0 127.0.0.0 127.0.0.1 255.0.0.0 UG0 00 lo and my tracepath: Tracing route to 10.32.16.160 over a maximum of 30 hops 11 ms1 ms1 ms 10.32.3.51 2 4 ms 3 ms 3 ms 10.32.101.4 3 5 ms 3 ms 3 ms 10.32.16.160 What must i do to change this? TIA Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] Module parameters
Hi, To keep a networkcard in 100mbit full duplex i have put a line in /etc/modules.conf. Now hte next time this machine is rebooted will it use this parameters or must i do something extra? TIA Patrick -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Scaning of outgoing email
On Sunday 05 June 2005 2:08 pm, Patrick wrote: Hi, I have setup a home mail server according to a how-to on the forum, now i would like to expand this setup with the scanning of outgoing emails and a footer after the scanning. Until now i didn't find a how-to for this, can anyone put me in the wright direction? TIA Patrick Scanning for what? What program do you want to use to scan? Scanning of virusses, with clamav John Drouhard -- gentoo-user@gentoo.org mailing list -- a -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Scaning of outgoing email
On Mon, 2005-06-06 at 09:12 +0200, Patrick Marquetecken wrote: On Sunday 05 June 2005 2:08 pm, Patrick wrote: Hi, I have setup a home mail server according to a how-to on the forum, now i would like to expand this setup with the scanning of outgoing emails and a footer after the scanning. Until now i didn't find a how-to for this, can anyone put me in the wright direction? Scanning for what? What program do you want to use to scan? Scanning of virusses, with clamav what email server? Oeps, iI forgot to mention that, its postfix. If sendmail try clamav-milter or you can search sendmail's site for all sort of milters to integrate into it -- Ow Mun Heng Gentoo/Linux on DELL D600 1.4Ghz 1.5GB RAM 98% Microsoft(tm) Free!! Neuromancer 16:36:00 up 2 days, 1:05, 5 users, load average: 1.49, 1.12, 0.91 -- gentoo-user@gentoo.org mailing list -- gentoo-user@gentoo.org mailing list
[gentoo-user] SPAM trouble
Hi, I have activated on my home server spamassin with rules only on server level not on users level. Now my daughter sends from school with her hotmail address emails at home with her school work, its always an empty body (only a fixed hotmail line, see content preview) and MS word attachments. Everytime its spam, so I have put her address to the white list but this does not help. How can i avoid that her emails are getting tagged as spam. Patrick Content preview: Bescherm je Inbox: Phishing - hoe te herkennen, rapporteren en voorkomen [...] Content analysis details: (7.7 points, 5.0 required) pts rule name description -- -- 4.2 X_MESSAGE_INFO Bulk email fingerprint (X-Message-Info) found 0.0 HTML_60_70 BODY: Bericht is 60% tot 70% HTML 0.0 HTML_MESSAGE BODY: HTML opgenomen in het bericht 1.2 MIME_HTML_ONLY BODY: Bericht bestaat enkel uit text/html MIME delen 1.6 MISSING_SUBJECTMissing Subject: header 0.0 MSGID_FROM_MTA_HEADER Message-Id was door een relay toegevoegd 0.1 MIME_BOUND_NEXTPARTSpam tool patroon in MIME grens 0.7 AWLAWL: From: address is in the auto white-list -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] SPAM trouble
Hi, Have you tried using, sa-learn --spam --mbox ~/mail/spam sa-learn --ham --mbox ~/mail/inbox to make SpamAssassin more accurate? It worked fine for me. Just mark your daughters mail as ham and SpamAssassin should leave it alone. Simon I'm using sa-learn only for spam, because it has only one line i never tought about ham, wil give it a try. Patrick On Mon, 2005-06-06 at 15:13 +0200, Patrick Marquetecken wrote: Hi, I have activated on my home server spamassin with rules only on server level not on users level. Now my daughter sends from school with her hotmail address emails at home with her school work, itÿs always an empty body (only a fixed hotmail line, see content preview) and MS word attachments. Everytime its spam, so I have put her address to the white list but this does not help. How can i avoid that her emails are getting tagged as spam. Patrick Content preview: Bescherm je Inbox: Phishing - hoe te herkennen, rapporteren en voorkomen [...] Content analysis details: (7.7 points, 5.0 required) pts rule name description -- -- 4.2 X_MESSAGE_INFO Bulk email fingerprint (X-Message-Info) found 0.0 HTML_60_70 BODY: Bericht is 60% tot 70% HTML 0.0 HTML_MESSAGE BODY: HTML opgenomen in het bericht 1.2 MIME_HTML_ONLY BODY: Bericht bestaat enkel uit text/html MIME delen 1.6 MISSING_SUBJECTMissing Subject: header 0.0 MSGID_FROM_MTA_HEADER Message-Id was door een relay toegevoegd 0.1 MIME_BOUND_NEXTPARTSpam tool patroon in MIME grens 0.7 AWLAWL: From: address is in the auto white-list -- gentoo-user@gentoo.org mailing list -- a -- gentoo-user@gentoo.org mailing list
[gentoo-user] raid messages at boot time
Hi, This is my first raid, i got it working without problems (i think) but my dmesg contains this: Is this a normal behaviour md: Autodetecting RAID arrays. md: autorun ... md: considering hdb13 ... md: adding hdb13 ... md: hdb12 has different UUID to hdb13 md: hdb11 has different UUID to hdb13 md: hdb10 has different UUID to hdb13 md: hdb9 has different UUID to hdb13 md: hdb8 has different UUID to hdb13 md: hdb7 has different UUID to hdb13 md: hdb6 has different UUID to hdb13 md: hdb5 has different UUID to hdb13 md: hdb1 has different UUID to hdb13 md: adding hda13 ... md: hda12 has different UUID to hdb13 md: hda11 has different UUID to hdb13 md: hda10 has different UUID to hdb13 md: hda9 has different UUID to hdb13 md: hda8 has different UUID to hdb13 md: hda7 has different UUID to hdb13 md: hda6 has different UUID to hdb13 md: hda5 has different UUID to hdb13 md: hda1 has different UUID to hdb13 md: created md9 md: bindhda13 md: bindhdb13 md: running: hdb13hda13 raid1: raid set md9 active with 2 out of 2 mirrors md: considering hdb12 ... md: adding hdb12 ... md: hdb11 has different UUID to hdb12 ... and so on until md: ... autorun DONE my /proc/mdstat Personalities : [raid1] md1 : active raid1 hdb5[1] hda5[0] 1003904 blocks [2/2] [UU] md2 : active raid1 hdb6[1] hda6[0] 1003904 blocks [2/2] [UU] md3 : active raid1 hdb7[1] hda7[0] 3004032 blocks [2/2] [UU] md4 : active raid1 hdb8[1] hda8[0] 3004032 blocks [2/2] [UU] md5 : active raid1 hdb9[1] hda9[0] 505920 blocks [2/2] [UU] md6 : active raid1 hdb10[1] hda10[0] 505920 blocks [2/2] [UU] md7 : active raid1 hdb11[1] hda11[0] 1003904 blocks [2/2] [UU] md8 : active raid1 hdb12[1] hda12[0] 1003904 blocks [2/2] [UU] md9 : active raid1 hdb13[1] hda13[0] 106125248 blocks [2/2] [UU] md0 : active raid1 hdb1[1] hda1[0] 56128 blocks [2/2] [UU] unused devices: none TIA Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] Best way to keep a networkcard into 100mbit full duplex
Hi, Whats the best way to keep my networkcards in 100mbit full duplex, now i have put the commands in the /etc/conf.d/local.start. TIA Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] SNMP
Ji, I have installed net-snmp to send snmp info to a snmp server the info it get is good but not enough, i need to send/see the index load also, this is the info i'm get until now: what elso must i configure ? TIA Patrick snmpd.conf rocommunity rwcommunity yyy trapsink 10.32.0.102 trap2sink 10.32.0.102 informsink 10.32.0.102 trapcommunity public Info i'm getting Device Status Name: email-out DNS Name: (Unknown) SysName: email-out Address: 10.32.3.171 Status: UP Protocol: SNMP - Host Resources (port 161) Up Time: 87 days, 2 hours, 36 minutes Location: Unknown Contact: [EMAIL PROTECTED] Availability: 100 % (of 31 days, 23 hours, 16 minutes) Packet Loss: 0.07 % (of 1005852 total attempts) Recent Loss: 1 pkts at May 23, 13:15:21 Round-trip time: 16 msec Host Resources General Information System Uptime: 8 days, 17 hrs, 2 mins, 44 secs System Date: 2005-05-23, 15:34:18.00, +2:00 Number of User Sessions: 0 Number of Processes Loaded/Running: 30 Installed Memory: 255584 KB Description: Linux email-out 2.4.25-gentoo-r1 #1 Tue Nov 9 14:14:25 CET 2004 i686 Host Resources Storage Table Information Index Used (KB) Size (KB) % Full Fail Descr. 3 0 505.856 0 0 Swap Space 4 1.138.688 7.081.984 16 0 / 5 0 987.136 0 0 /tmp 6 532.480 987.136 54 0 /var 7 0 0 0 0 /usr/portage/distfiles Host Resources Processor Table Information Index Load Last updated May 23, 15:34:37; interval: 30 seconds -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Smaller fonts at boot time
On Tue, May 10, 2005 at 07:04:47PM +0200, Patrick wrote Hi, I'm trying to get smaller fonts at boot time like the live cd Actually, you can do that on a plain ordinary text console. See my webpage http://www.waltdnes.org/tips_and_tricks/textmodes.html Here's a snippet from my make menuconfig Device drivers --- Graphics support --- [ ] Support for frame buffer devices Console display driver support --- --- VGA text console [*] Video mode selection support That's right, *NO* frame buffer support, but you can probably leave it enabled if you wish. But you must have Video mode selection support enabled. In lilo or grub, specify VGA=6 which gives a text console 640 pixels across by 480 scanlines. It uses the old CGA (8x8) font by default. This gives 80 columns X 60 rows, but is painfull to read, unless you have a honking big display. However, you can select any font in the directory /usr/share/consolefonts by invoking it in /etc/rc.conf. My /etc/rc.conf contains the line... CONSOLEFONT=lat1-10 That's 8 x 10 pixels on a 640 x 480 text console, giving 80 x 48 (YES!) text console mode. The 10-pixel-high font is much easier on the eyes than the 8 x 8 CGA font on 640 x 400 mode, which gives 80 x 50 text display (mode co80,50 in DOS). -- Walter Dnes [EMAIL PROTECTED] An infinite number of monkeys pounding away on keyboards will eventually produce a report showing that Windows is more secure, and has a lower TCO, than linux. -- gentoo-user@gentoo.org mailing list Workt perfect -- gentoo-user@gentoo.org mailing list
[gentoo-user] How to display documents
Hi, The only access to my server is with a browser on port 8080. Now from work i want to access read ... my documents/archive will zope we a solution for me, or schould i look for another. TIA Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] scsi tape support with live cd 2005
Hi, I can't get my scsi tape drive to work with the live cd 2005. I would like to backup my system to a tape for backup, now its to disk both way's would be nice. Patrick -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Backup /restore
On Friday 06 May 2005 12:25, [EMAIL PROTECTED] wrote: Hi, Om going to change my server to a raid 1 today. I will use the live cd for setting up the raid, but i'm going to backup it and when the miror is created then i will restore it. I have two options, backup with tar to my tape drive and tar to a disk, are there special things i must keep in mind ? I know two backups are always better. well, if it is a good tape drive, I would prefer it - I never saw a tape drive dying, but a handfull of hard disks... -- Well, it happend to me, we had to backup a server compleet to tapes about 500GB. Erased the disks and then saw that there was a problem whith the head of our tape drive. The day before we backup we have tested the drive and no problems, it broke down with on the last tape during the backup, a good thing was that that we had 3 days to find a new drive and restore it all. We managed to restore 98% So now i check always after the backup, its one of those lessons of life. Patrick -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Cups webinterface
On 5/4/05, Patrick Marquetecken [EMAIL PROTECTED] wrote: I'm trying to connect to our cups printserver with http://:631 but i always get: cups connection is refused. On the machine itself i have no problem with localhost:631 In cupsd.conf i've got allow from 10.32.0.0/22 our ip range and i have restarted cups. what have i missed? 'localhost' is mapped to 127.0.0.1, so probably the cups admin port is bound to 127.0.0.1 only. You can verify that with netstat -ta. There's likely a configuration option somewhere to ask it to bind to another address. Indeed its running only on 127.0.0.1 i have read the cups documentaion again, and for remote administration i just have to put: 'allow myIP' in the /admin section and it schould work, but it doesnt. will give the listen option a try Patrick -- a -- a -- a -- gentoo-user@gentoo.org mailing list
[gentoo-user] How to load charset 8859-15
Hi, I have charset ISO 8859-15 in my kernel as module , but how do i activate it TIA Patrick -- -- gentoo-user@gentoo.org mailing list
[gentoo-user] scripts that send emails
Hi, I'm looking for a smtp mail-client that can send emails from a script, from different from addresses and can use text files as body text, at this time i just looked at pine, but i don't thik thats possible. What are othe posibilities ? TIa Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] PAM error messsages
with my last computer i have these error when i login, it doens't matter if its with ssh or local. The machine has no gui installed. Apr 27 09:05:47 localhost PAM-env[18418]: Unknown PAM_ITEM: DISPLAY Apr 27 09:05:47 localhost sshd[18418]: PAM pam_putenv: delete non-existent entry; DISPLAY Apr 27 09:05:47 localhost PAM-env[18418]: Unknown PAM_ITEM: XAUTHORITY Apr 27 09:05:47 localhost sshd[18418]: PAM pam_putenv: delete non-existent entry; XAUTHORITY where can i change this, without problems? TIA Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] Nothing but trouble with Gnome-light
Hi, After i have installed Gnome-light 2.8.1 on a new computer i have only troubles, it started out with than new nenu items are not visible, but now if i rename a existing one it disapears also. On top of that Rhythmbox is as buggy as can be, removing or adding a single item causes a crash and Rhythmbox shuts down. I have Gnome (full) working on a other machines and there with the same software i have no problems, it started from gnome 2.6.x and upgrades during several months. There is no diference between Gnome-light and Gnome exept that there are less packages ? Is the someone on the list who has a explenation for this behaviour. I can't work that way, and must take some action and probely switch to Fluxbox. TIA Patrick -- gentoo-user@gentoo.org mailing list
RE: [gentoo-user] OT - Help with partitioning
snip almost like mine To that end, I usually have around 10 different partitions: 1. / - large enough to hold the basic root entities (/etc, /bin, /sbin, and /lib). 1 GB 2. /boot - 100M because I like to keep working kernels around for awhile. 50MB just 2 kernels 3. /usr - Large enough to hold the /usr contents minus /usr/portage. 3 GB 4. /usr/local - Separated to ensure that local installs don't kill the /usr partition. 5. /usr/portage - Keeps portage out of the /usr tree and simplifies 5GB /usr/portage partition resize when needed. 6. /opt 1GB 7. /var 512 Mb 8. /tmp 512Mb 9. /var/tmp - Separated from /var so that temp space usage doesn't interfere with the spool (etc.) contents normally in /var. 3GB 10. /home enough .. Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] Gnome-light menu problems
Hi, I have installed gnome-light 2.8.1 on a new laptop, the result, i can't create a new item in the menu, its there if i see in the .gnome2/vfolders I have delete the vfolder. I can create starters on the desktop, but thats not so easy like the menu. I hate working like this. The contains of applications: 1113682878-iPod.desktop 1114462656-sound-properties.desktop If i check the contains of applications.vfolder-info is see all the new created items: ?xml version=1.0? VFolderInfo WriteDir/home/patrick/.gnome2/vfolders/applications/WriteDir Folder NameRoot/Name Parentapplications-all-users:Parent Folder NameMultimedia/Name Parentapplications-all-users:///Multimedia/Parent Include/home/patrick/.gnome2/vfolders/applications/1113682878-iPod.deskt op/Include Include/home/patrick/.gnome2/vfolders/applications/1114462656-sound-prop erties.desktop/Include Excludesound-properties.desktop/Exclude /Folder /Folder /VFolderInfo TIA PAtrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] OT - hardware problems
Hi, Yesterday arround midday i have lost contact with my home server, when i came home i saw that on the front the light (power) was red instead of green. I have rebooted with the power button and all is fine until now. The machine is a old Compaq deskpro AP prof desktop PIII, does anyone know what the red light could be ? Its the first time this happens. TIA Patrick -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] OT - hardware problems
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Patrick Marquetecken schrieb: Hi, Yesterday arround midday i have lost contact with my home server, when i came home i saw that on the front the light (power) was red instead of green. I have rebooted with the power button and all is fine until now. The machine is a old Compaq deskpro AP prof desktop PIII, does anyone know what the red light could be ? Its the first time this happens. TIA Patrick Maybe Suspend is on in the BIOS? Should be in the Power Saving Section. no, it up and running for months now without funny lights, its must be a hardware problem/warning but i can't find out what. Patrick - -- E-Mail: [EMAIL PROTECTED] Internet: http://www.KarstenRBecker.de -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCaL9iZ7JZitcquM0RAkQWAJ9ENa7CQ+PC0K+5EEXyTEGYKgbYdQCgnKZh ZHqpTezt9SEN/QIcMuTsbbM= =So+Q -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list -- a -- gentoo-user@gentoo.org mailing list
[gentoo-user] Automatic process restarter
Hi, I need to monitor some processes on a server and if they die, they must be restarted. Before reinventing the wheel again (create my ons script) i search the internet and the most intresting soft i found was: procautostart http://www.yolinux.com/HOWTO/Process-Monitor-HOWTO.html Are some of you using other programs that are in the portage ? Patrick -- I can only please one person per day. Today is not your day. Tomorrow is not looking good either. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Mplayer looks always blue
* Patrick Marquetecken Whatever skin i uses the mplayer gui always looks bue. Is this normal ? I had this problem a while ago (http://bugs.gentoo.org/show_bug.cgi?id=6) and my solution was to emerge it with USE=mmx mmx2. However, that won't do it for the amd64-folks :/ It'd be interesting if someone was able to close this bug properly, i.e. find out what the real cause is. -- Steingrim Dovland. Oslo, Norway. This behaviour is by design. Well the solution was good enough for me Thanks Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] Mplayer looks always blue
Hi, Whatever skin i uses the mplayer gui always looks bue. Is this normal ? http://users.pandora.be/delta_quadrant/Schermafdruk.png TIA Patrick -- gentoo-user@gentoo.org mailing list
[gentoo-user] rpc time outs
hi, I have a central distfile server, and time after time i get on my clients this error when they try to connect: mount: RPC: Timed out The same with new gentoo installes when i try to connect with the live cd 2004.3 to the disftfile server. portmap version:5b-r9 nfs-utils:1.0.7 Kernel: 2.4.26-gentoo-r9 I have tried with this options on the client side: mount -t nfs -o rw,intr,hard TIA Patrick -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] rpc time outs
On Tue, 12 Apr 2005 13:51:21 +0200 (CEST), Patrick Marquetecken wrote: I have a central distfile server, and time after time i get on my clients this error when they try to connect: mount: RPC: Timed out You need to start portmap. /etc/init.d/portmap start Its of cource started on both sides, this makes it zo strange yesterday i connected 3 times and today i can't. Patrick -- Neil Bothwick new oxymoron: final beta -- a -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Apache vulnerability warning
Have you installed mod_proxy on your server? If so you may be vulnerable. But I do not know how to reconfigure the proxy. You should scan your web logs after connect attempts. If they return HTTP 400, there is no problem you have to care about. But there might be other opinions on that issue. :) /Uwe Indeed, the machine is a reverse proxy to protect our Exchange. I will check the logs more carefully. Patrick Patrick Marquetecken wrote: Hi, After a security scan of some machines i got this vulnerability warning on our apache 2.5x. I seem not to find the solution/ THREAT: The HTTP server or the HTTP proxy server accepts the CONNECT method. IMPACT: By exploiting this vulnerability, unauthorized Internet users may be able to connect to your entire internal network using the CONNECT method. This can also be used by attackers to create tunnels through proxies which support this method since such hops are difficult to traceback. SOLUTION: Reconfigure your server to disable this method or restrict its access. TIA Patrick -- gentoo-user@gentoo.org mailing list -- a -- a -- gentoo-user@gentoo.org mailing list
