Re: [SLUG] Hardware recommendations

2010-06-29 Thread David Kempe
Asrock ion 330 is great as it accelerates video using an nvidia ion. I  
use one as my xbmc box

Dave

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] RAID and LVM

2010-02-19 Thread David Kempe



On 20/02/2010, at 11:53 AM, Brett Coady bc196...@yahoo.com.au wrote:




The trouble with Bonnie and IOzone is that they test the  
filesystem , for my example I was looking at the raw disk speed for  
raid results.




Well if you keep the kernel and filesystem identical between runs you  
end up benchmarking the hardware. Still useful for the purpose of  
comparision.






I have since that learnt that some Motherboard backup the BIOS to  
the end HDD and have a setting to do so. My motherboard has no  
option for this and has dual BIOS anyway but it still appears to do  
it!


The difference in drive size is not the dual bios at all. And leaving  
a buffer at the end of drives when using software raid is a good idea  
cos diffrences in drive geometry will always happen.


Dave




--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Any Active Directory LDAP gurus?

2009-03-18 Thread David Kempe

 What I really need to know sooner rather than later is what data I
 need 
 to store in our postgresql database. IE what the LDAP schema is. We
 can 
 work out the other bits later.

if you have an AD server you can point an LDAP browser at it and see the 
structure/schema

In terms of making your application an Active Directory server, you need to be 
on top of DNS, Kerberos and LDAP to have even a chance of getting it to work. 
Samba 4 has taken years, even with help from MS (eventually)

 
 Also would be interested in finding other products (open or not) that
 do 
 this running on Ubuntu Hardy preferably.

not sure exactly what you are trying to do... perhaps if Samba 4 does what you 
want, you don't need to worry. It should be able to be backended onto your 
database with some wrangling so perhaps you don't need to do anything - just 
store your auth info in the database and deal with getting samba 4 to auth to 
it.
If you want some other more detailed discussions, feel free to contact me off 
list or give me a call.

thanks
Dave
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Looking for a desktop PIM

2009-03-12 Thread David Kempe
I recently migrated our mail and stuff to Zimbra network edition. The nokia 
mail for exchange is a a great sync tool, and I get email synced in as well, 
crackberry style. This is using Zimbra mobile, which is a heavy handed and 
probably non-free solution to your problem. Just wanted to mention it, as I 
have found the Zimbra web interface and Zimbra mobile the only decent thing 
that syncs to my Nokia fully. Doesn't do tasks at all yet though.

dave



- Original Message -
From: Peter Chubb pet...@gelato.unsw.edu.au
To: slug@slug.org.au
Sent: Friday, 13 March, 2009 10:34:00 AM GMT +10:00 Canberra / Melbourne / 
Sydney
Subject: [SLUG] Looking for a desktop PIM


The quastion is, what do I use on my laptop?  What's light weight,
simple, can track appointments, contacts, TODOs, memos and keys, and
can sync with a Nokia?

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Looking for a desktop PIM

2009-03-12 Thread David Kempe
Well i didn't want to plug myself, but we have pricing on our site if you are 
interested in the hosted version. You can get started for like $15/month easy.
There are other Australian hosting providers linked off the Zimbra site as 
well, all with pretty similar pricing, so there is plenty of choice.

Thanks
Dave



-
That is the for-money Zimbra version, including extra money for the
Zimbra Mobile side.  Nice, but probably outside the budget of most home
users at ~ USB $500 for Zimbra Mobile alone.

Regards,
Daniel
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Calendar Server?

2008-10-28 Thread David Kempe

davical works ok, but the interface sucks to use.
zimbra is what we are using now for a caldav backend for lightning. 
lightning barfs when you have like over 10 caldav calendars. the backend 
for lightning could do with some work.


dave

Nigel Allen wrote:

Greetings

We are currently evaluating Calendar Servers for a backend to the 
Lightning plugin for Thunderbird.


Shortlisted so far are the Sun Java Calendar Server, Apple's Calendar 
Server, Bedework and DAViCal.


Anyone have any illumination, rumination or cogitation that might 
assist us?


Anyone got any been there - done that - it was easy stories to relate?

TIA

Nigel.


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [Fwd: Re: [SLUG] IOWait definition]

2008-10-08 Thread David Kempe

Grant Street wrote:



I have a machine with a good proportion of IOWait 20-30%. It does have
local disks and it performs operations on NFS mounts. I just wanted to
be sure if IOWait includes NFS activity or not. I also want a way if it
is NFS to be able to say for sure if it is a bottleneck on the nfs 
client or server. NFS is not a linux machine so visibility is not 
allways the best.



dstat might help you correlate stuff.
http://dag.wieers.com/home-made/dstat/

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] : Increasing filesystem reliability (was : Filesystem which allows online fsck?)

2008-06-11 Thread David Kempe

Erik de Castro Lopo wrote:

Another option I'm looking into is the possibility of running
the sync command at known idle times which follow a activity
which results in disk writes.

  

that should help.
how about just not loosing power? Ie, some sort of built-in UPS/battery etc?
It might be possible to keep the machine alive with a built in battery 
long enough for sync to finish.

I know its a work around, but this is a pretty tricky problem.

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] search engine for company network (OT)

2008-05-13 Thread David Kempe

Rev Simon Rumble wrote:
However, nothing beats Google Desktop.  It's changed my work life 
enormously!  I'm forced to use that other, horrible OS and its even 
worse mail client, but by indexing the whole lot everything is just a 
very quick search away.


Google Desktop can be pointed at network drives, so it'll index those 
for you too.
  


Google desktop does have a network web interface that people can search 
the files through a lan web page thingo.

Its an addin, can't remember the name. here we are: http://dnka.com/

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Minimal CentOS installation --- How?

2007-09-03 Thread David Kempe
Peter Chubb [EMAIL PROTECTED] wrote:
 
   How can I install the bare minimum --- something like the
 result of debootstrap --- just enough to run yum?  As it'll be in a
 chroot I don't need any network utilities, etc,

have you tried rpmstrap?


dave


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] WAN link optimisation

2007-07-26 Thread David Kempe

Visser, Martin wrote:

I think that the technology Gavin is thinking of is more about
economising on the content being sent rather than tweaking TCP
parameters. 
  
  


Hi,
I'm familiar with the Riverbed equipment and I have to say that its very 
protocol dependent.
SMB/CIFS is very chatty in general and the Riverbed stuff is great at 
reducing that chatter.
NCP (the Novell filesharing protocol) is not as chatty and as as such 
does not benefit much from the riverbed tech.


OpenVPN can do adaptive link level compression which may get you a fair 
way with speeding things up (I have used it to great success 
extensively). It uses LZO compression, so for certain types of data, you 
can get good results.


There is patent problems here, which is why the OpenSource world may not 
have tacked it seriously for a while.
check out: http://ozlabs.org/~rusty/rproxy.html (The Tragedy of the 
RProxy) and other searches for rproxy.


Overall, we get round the problems with a combination of OpenVPN, remote 
desktop solutions and fixing the protocols/applications that cause the 
problem in the first place.


Oh and at Glen Turner - how is bandwidth greater than 155Mbps considered 
low? :) (yes i know you work at aarnet! :)


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] ripping a window$ media stream?

2007-07-19 Thread David Kempe
Sonia Hamilton [EMAIL PROTECTED] wrote:
 This doesn't give any errors, but mplayer won't play the file. Is this
 the right way to rip using mplayer? Is there an easier way to do this
 (maybe using another program)?


vlc can rip streams like this and it supports windows media

dave


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] SLUG website down?

2007-03-22 Thread David Kempe

Hi,
yeah we lost a disk in array on the server that hosts the VM.
It kinda failed and un-failed and then finally died.

Its OK now, just not redundant until we replace the disk tomorrow so it 
might go down again :)


Sorry for any inconvience...


thanks

dave

Erik de Castro Lopo wrote:

Hi all,

I was doing some googling and followed a link to the list 
archive only to find the SLUG website completely AWOL.


Are people aware of this? Is there anything I can do to help?

Cheers,
Erik
  


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] data recovery specialists?

2007-03-07 Thread David Kempe

Jon Wilson wrote:

Hiya,

Can anyone recommend any data recovery specialists, preferably in 
Sydney? We have a several boxes of ten year old DLTIII tapes, but have 
only been able to read the data we need off about half of them.



Payam have been good for us

http://www.payam.com.au/

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Encrypted Filesystem

2007-03-04 Thread David Kempe

http://luks.endorphin.org/

this looks like being a step in the right direction.
check it out and let us know :)

dave

LUKS is the upcoming standard for Linux hard disk encryption. By 
providing a standard on-disk-format, it does not only facilitate 
compatibility among distributions, but also provide secure management of 
multiple user passwords. In contrast to existing solution, LUKS stores 
all setup necessary setup information in the partition header, enabling 
the user to transport or migrate his data seamlessly.


While LUKS is a standard on-disk format, there is also a reference 
implementation. LUKS for dm-crypt is implemented in an enhanced version 
of cryptsetup.




Trent Murray wrote:

Hi all,

Can anyone recommend an encrypted filesystem technology under linux?

the only one I have heard of is FUSE...does anyone have experience and/or
knowledge of other encrypted filesystem technologies that they would
recommend?


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Encrypted Filesystem

2007-03-03 Thread David Kempe
I would steer clear of them still. The FUSE ones have the best chance of 
support going forward, I suppose though if you really want one.

Truecrypt on loopback is a better option imho...
http://www.truecrypt.org/

at least its going to survive future kernel changes and is cross platform

dave

Trent Murray wrote:

Hi all,

Can anyone recommend an encrypted filesystem technology under linux?

the only one I have heard of is FUSE...does anyone have experience and/or
knowledge of other encrypted filesystem technologies that they would
recommend?



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Backup System - Any recommendations

2007-02-23 Thread David Kempe

Trent for this scenario backuppc is what you want.
http://backuppc.sourceforge.net/info.html

is not an imaging solution though - for that you will need to pay money. 
For about 1-2K acronis true image enterprise server does what you want 
and more - live imaging to central server, without shutting down the 
windows machine. There are free imaging solutions, but they all require 
shutting down the PC


dave

Trent Murray wrote:

Hi all,

Can anyone recommend a backup solution that can be run centrally from a
linux box and can also backup windows boxes on a  LAN

Apart from performing basic incremental data backups it will also need 
to be
able to perform disk imaging over the wire (e.g disk images of windows 
boxes
to be stored on the linux server to prevent me from having to 
reinstall XP

and every other application known to man when disks fail)

Compression is also a must have.

Thanks again for your thoughts and suggestions! =)



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] UUID / fstab

2007-02-05 Thread David Kempe

I don't think you need the UUID in order to put it in fstab.
If you are confident it will be in the same place each time, you can use 
the traditional /dev/sda1 or /dev/hdb2 or whatever it actually is. Edgy 
just does this to make sure devices are mounted in consistent places, 
inline with upstart becoming all event driven.


dave

david wrote:

Edgy generates UUID's for partitions when installing, but if a new
partition is created there is no UUID for it
  

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] e-mail content filter

2007-01-23 Thread David Kempe

Thats right John, amavis is the content_filter doing the filtering here.
You can edit something beneath /etc/amavis/conf.d/ to allow zips and or 
exe's temporarily, as amavis has no decent quarantine by itself. 
Something like Maia Mailguard does this, however this purpose Mailzu is 
the product I would recommend...

http://www.mailzu.net/
Its a quarantine release method for amavis. Setup would be similar for 
any php/mysql app, with the database being fed by amavis's sql 
injection, present in later release of amavis (I think yours would be 
late enough)


dave

John wrote:
I am not a good interpreter of log files but a search of the mail.log 
came

up with the following line which would appear to be relevant:

amavis[3692]: (03692-04) Blocked BANNED (multipart/mixed |
image/jpeg,.exe,.exe-ms,FTLINK40.jpg), [ip number] senders email 
address

- my email address, quarantine: banned-A53A50k3vlJk, Message-ID: 
[EMAIL PROTECTED], mail_id: A53A50k3vlJk, Hits: 
-, 3

9533 ms

which would tend to suggest that its amavis doing the rejecting but 
I'm not

much closer to objective.




--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] e-mail content filter

2007-01-23 Thread David Kempe

John wrote:

Yes, I know we tried that. Eventually we got round it by renaming the .exe
.jpg and gmail accepted it - amavis didn't though!

Dave, does mailzu require an SQL database? The documentation of mailzu 
would

seem to indicate that one isn't neccessary. I don't have one installed at
the moment so I'd prefer to avoid setting one up if I could.


yes I believe mailzu does require a database. Mysql would be the 
candidate, but if amavis uses a perl dbd abstraction layer, then you 
could use something like sqllite or similar to not chew ram as much.


amavis uses the file utility to find out the magic of the file, so 
renaming things doesn't always work.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] OLPC to consider trialling laptops in Australia

2007-01-12 Thread David Kempe

Thats awesome. I hope they let us buy two get 1

dave

elliott-brennan wrote:

The SMH had some very exciting news today.

http://www.smh.com.au/news/laptops--desktops/australia-trials-low-cost-laptop/2007/01/12/1168105153500.html 



The OLPC are looking at trialling the laptops in remote indigenous 
communities.


Whooo h!

My .2c worth.

Regards,

Patrick



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] NAS SCSI/SATA

2007-01-10 Thread David Kempe

Phil Scarratt wrote:

Hi esteemed ladies and gentleman...

I have a couple of questions which I am currently googling which I 
would value people's opinion on:


1. Never having used NAS before, I am looking to find out the relative 
performance benefits of NAS as opposed to the plain ole' linux box 
file server, and


Most NAS's are a plain ole' linux file server make up your own mind 
as to the performance of that :)


2. kinda related, are SATA drives now good enough to use instead of 
SCSI  (in a RAID)?


Yes, but I would recommend RAID6 in a decent CPU machine. Multiple 
concurrent failures are less and less common these days and really bite 
hard on RAID5..


The particular application I am looking to use it with is where I 
would guarantee 40-50 concurrent users accessing files of the storage 
unit at once.


Open sessions isn't a problem, size and frequency of file transfers is 
the only thing you need to optimise for. Shouldn't be a problem on a 
machine with 4 hdds in raid6 (linux software raid of course) and samba. 
should fly along.


FWIW, I have setup an HA version of this recently and recent with some 
hardware was giving me excellent throughput on Gigabit networks (haven't 
got numbers on hand) but I was very impressed. 750GB SATAs i used. try 
and get a board and drives that supports NCQ, with a recent kernel for 
drivers, and you will get decent performance too...


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] NAS SCSI/SATA

2007-01-10 Thread David Kempe

David Kempe wrote:
Yes, but I would recommend RAID6 in a decent CPU machine. Multiple 
concurrent failures are less and less common these days and really 
bite hard on RAID5..



I meant less and less rare :(

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] NAS SCSI/SATA

2007-01-10 Thread David Kempe

Hi Amos,
I have done something like that with shared storage and your classic 
linux heartbeat stuff a while ago. The setup I was referring to was 
actually the storage devices for Xen nodes, so we are doing raid1 over 
AoE (using vblade/LVM) across two whole machines. Kinda like a SAN AOE 
storage device with no single points of failure. The project is not 
quite finished yet, but should be as soon as I get some time. This sort 
of setup requires the actually Xen Dom0s to be different machines, 
bringing the machine count to at least 4. If you want just HA samba, you 
only need two machines, even if you use DRBD to keep the disks in sync. 
Samba is tcp though so if you want to keep the streams running you need 
to use LVS, or something like the approach we are doing above, which is 
Xen live migration for HA failover (this bit is not fully tested yet for 
me).


One of the things I have learned the hard way is that clustering is very 
much a word that can mean lots of things, kinda like content 
management... so it all depends on what you are trying to do...


dave


Amos Shapira wrote:

On 10/01/07, David Kempe [EMAIL PROTECTED] wrote:


FWIW, I have setup an HA version of this recently and recent with some
hardware was giving me excellent throughput on Gigabit networks (haven't



By HA you mean that multiple hosts are connected to the same 
disk-chain?

Care you give more pointers about such a setup?
Thanks,

--Amos

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] denyhosts feedback sought

2006-12-26 Thread David Kempe
I wouldn't bother with it. Just firewall off SSH to only your IPs or use 
portknocking. Makes the problem denyhosts tried to address go away.


dave

Voytek Eymont wrote:

Just looking at denyhosts.sourceforge.net:

seems like a good idea, is it ?
anyone here uses it, or, something like it ?
what other preventive counter measures should I look at for Centos 4.4
LAMP server ?



  

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] howto reverse ssh tunnel?

2006-12-15 Thread David Kempe
If they run windows, I find logmein.com as the best remote support 
thingo by far. penetrates nat etc pretty well.

https://secure.logmein.com/go.asp?page=support_faq#basics-04

client runs on linux, but server (on target PC) is windows only 
unfortunately.
I think that a decent (read simple to use) NAT penetrating solution for 
this problem is definitely needed on Linux.


thanks

dave


[EMAIL PROTECTED] wrote:
but we are talking about a system for our fathers. 
Mine is in the UK.
Trying to bootstap his system ie the modem-firewall allows VPN and you've 
setup a virtual server and you're running VPN in the first place so you can 
connect to his machine so you can setup for the gaffer ...
  

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] btlaunch...

2006-11-14 Thread David Kempe
You might want to consider Azureus, the overhead is a little big (java - 
hey its Free now!) but it will have all the features you need maybe with 
a plugin.


dave

Ken Foskey wrote:

OK so I want to use BT efficiently.  I want to keep seeding the files
that I download (Ubuntu anyone :-) but I also want to give priority to
my new downloads.


  

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] howto convert html to pdf?

2006-11-13 Thread David Kempe
Funnily enough we have had a project just recently with the exact same 
problem.

http://htmldoc.org/
htlmdoc is by the people who made CUPS and probably will do unless you 
have css up the wazoo or something more complex.
For the ultimate in rendering ability, embeded mozilla engine via 
http://michele.pupazzo.org/mozilla2ps/

then the run the output through ps2pdf.
moz2ps doesn't seem to work with stdin though (you should be ok).

those two choices are the easiest to use, though moz2ps seems to like a 
gui (gtk libraries) and sometimes it likes to run as root (tarball 
version) get ubuntu edgy or recent debian and you should be ok with that 
though.


dave

Sonia Hamilton wrote:

I (well my boss actually) want to convert several hundred html pages to
pdf - what's the easiest way to do this? Any pointers, ideas?

I guess I'm looking for a tool like pdf2html (but going in the reverse
direction).

I've found a php module called html2pdf [1] - just wondering if there's
a stand alone tool callable from the shell.

[1] http://directory.fsf.org/print/misc/html2pdf.html

  

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Multiple interfaces in iptables rules

2006-11-02 Thread David Kempe

Damn Pete,
just use shorewall :)

dave

Peter Hardy wrote:

Peter Hardy wrote:
But I'd like a rule to apply to my eth0 and eth1 interfaces while 
ignoring all other ethernet interfaces. Rusty's Packet Filtering 
HOWTO doesn't specify any syntax for it. It's not possible to give 
multiple -i or -o flags, and splitting it in to seperate rules for 
each interface is awkward at best.


I've tried comma separated interfaces by running `iptables -A INPUT 
-i eth0,eth1 -j LOG`, but it doesn't log any traffic to eth0, so I'm 
guessing iptables is looking for an interface named eth0,eth1. And, 
of course, space separating the interface names just gives a bad 
argument error.


So, is it possible to have iptables match two or more interfaces in a 
single rule?


For the benefit of the archives, I solved this by marking packets 
based on the interface criteria, and then matching on marks.


As an example, my multi-homed gateway previously had a number of rules 
like these to filter traffic routed between the local networks.
 $IPT -A FORWARD -m state --state NEW -m tcp -p tcp -i $OFFICE_IFACE 
-o ! $INET_IFACE -j tcp_local
 $IPT -A FORWARD -m state --state NEW -m tcp -p tcp -i ! $INET_IFACE 
-o $OFFICE_IFACE -j tcp_local


My question came up because I'm about to attach another Internet link 
to it, and wanted it excluded from the above rules just like 
$INET_IFACE is above.


The solution I'm trialling is to mark all incoming packets like so:
 # Packets arriving from external links are marked 1
 $IPT -t mangle -A PREROUTING -i $INET_IFACE1 -j MARK --set-mark 1
 $IPT -t mangle -A PREROUTING -i $INET_IFACE2 -j MARK --set-mark 1

 # Packets departing on an external link are marked 2
 $IPT -t mangle -A PREROUTING -o $INET_IFACE1 -j MARK --set-mark 2
 $IPT -t mangle -A PREROUTING -o $INET_IFACE2 -j MARK --set-mark 2

Then my jump rules become:
 $IPT -A FORWARD -m state --state NEW -m tcp -p tcp -m mark ! --mark 2 
-i $OFFICE_IFACE -j tcp_local
 $IPT -A FORWARD -m state --state NEW -m tcp -p tcp -m mark ! --mark 1 
-o $OFFICE_IFACE -j tcp_local



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] [OT Winders question] SFS filesystem

2006-10-30 Thread David Kempe
I think if you search for dynamic disks and linux you will get best 
information from google


dave

Howard Lowndes wrote:
Sorry, it's OT, but I should get some better sense from this list than 
a Winders list.


Does anyone have pointers to the SFS filesystem on Windows 2003 server?


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Anti-Spam/Anti-Virus Advice

2006-10-24 Thread David Kempe
Penedo [EMAIL PROTECTED] wrote:

 Does this setup also addresses image spam?
 (I'm asking because I see this subject raised on a parallel Linux mailing
 list, I'm getting the feeling that the entire net is now trying to tackle
 this problem right now).


anything spamassassin supports, amavis and or Maia support. You can load in
custom rules or use an auto-update rules service like rules-de-jour or plugin
anything you want spamassassin.
So yes it does support it, though I haven't implemented it anywhere yet. The
increased Bayesian learning from having a decent system to do it, means that
you find that the Bayesian is what gets the spam, and you don't need to sweat
the new rules so much. That being said, I agree that image spam is becoming a
real problem and no doubt I will need to do something about it soon for
someone, so I will probably just integrate the aforementioned SA plugin..

Dave


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Vodafone 3G/GPRS cards and Linux

2006-10-05 Thread David Kempe
I have a fair bit of experience with some of these things.
search the archives and google for lots of info.

also, if its just gprs you need, then you don't need the vodafone card, just
a gprs/gsm modem will be fine - one of the ones from Intercel with a standard
sim would work fine. 

dave

Cirilo Bernardo [EMAIL PROTECTED] wrote:

 A customer wants internet access to a remote monitoring station via 3G
 or GPRS (actually only GPRS is available in his area).
 Does anyone have experience with the Vodafone cards?  I only need to be
 able to dial into them.
  
 The Vodafone techs have been very helpful although the ones I have
 spoken to are not aware of anyone using the cards with Linux (except fot
 the long-retired Ericsson GC75).  The Digicall retail shops of course
 are absolutely clueless and not helpful; no one want to allow me to plug
 a card into a laptop to test it unless I buy it first.
  
 -
  
 



-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] How do you remove GRUB?

2006-07-20 Thread David Kempe

James Gray wrote:

I was going to say something like:

sudo dd if=/dev/urandom of=/dev/hda


warning for the archives... don't do this. ever.
(just in case someone isn't thinking one day :)

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: Linux compatible Sydney 3G for notebooks

2006-07-08 Thread David Kempe

Matthew Palmer wrote:

That page doesn't give exact model numbers, so it's hard to tell.  It
certainly looks more like the one I didn't get (Huawei brand, I think?); the
Merlin I got has the SIM slot toward the back of the card.  Both of them
work fine with Dapper, though -- they appear to the kernel as being little
more than an ACM modem.


our contact at vodafone said you can get a Merlin card if you tell em 
you are using a Mac


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] A comparison for fun ...

2006-07-08 Thread David Kempe

[EMAIL PROTECTED] wrote:

I've tried a few, settled on guidedog, guarddog.
I still see no way of adding these to my firewall rules:
iptables -A INPUT -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -j ACCEPT


for shorewall in /etc/shorewall/zones add a vpn zone
in /etc/shorewall/interfaces: (associate that zone with tun+)

tun+vpn

and in /etc/shorewall/policy
make policys for your vpn zone:
vpn lan ACCEPT
lan vpn ACCEPT

seriously, use shorewall.
anyway - unless you are routing openvpn tunnels to lots of different 
lans, you only need a tun0 interface (use the server-client mode).
if you want to route subnets behind the clients the ccd option is useful 
for this.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] ubuntu routing

2006-07-07 Thread David Kempe

If you want a good firewall, use shorewall. and have it do it for you

dave

[EMAIL PROTECTED] wrote:

Hi
I cant find anything that does the equivalent of
echo 1  /proc/sys/net/ipv4/ip_forward
on my newly installed ubuntu box. Before I invent a way, does anybody know if 
I'm missing something.

Thanks
James

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] shared internet folders

2006-07-05 Thread David Kempe

O Plameras wrote:

http://www.openafs.org

 O Plameras

ROFL!

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] How to set runlevel in Breezy

2006-06-07 Thread David Kempe

[EMAIL PROTECTED] wrote:
Jeff my wurry here is that a very elegant and clever system invented by 
Tompson Ritchie et al is disgarded because the no doubt clever ubuntu 
developers don't understand why it was done, and trashed it as useless.


Don't blame ubuntu devs for this. Its inherited from Debian. And its 
just a default. this thread on debian-policy discusses it:

http://lists.debian.org/debian-policy/2005/09/msg9.html

You are talking about a Redhat system or derivative that uses the 
different runlevels in different ways. You can setup your Debian 
derivative system to do that - there is plenty of Googlejuice about it.




I'm working on migrating as POS system (1000s systems, worldwide) from RH9 to 
ubuntu. Unless I can reverse the run level stuff, I can't use it!
Consider: a box boots as 1) a thin client 2) a thick client 3) a stand alone 
order taker 4) A manager PC. Elegantly handled by run levels, different 
services in different runlevels corresponding to the different roles. 

So don't use ubuntu, work around what they've done or put things back as they 
were.


They were that way on a Redhat derivative. Differences between distros 
are just that, differences. There are plenty of other differences 
between the distros, you just need to understand why they are there.



From my perspective it would be nice if they did stuff eg no root login
and you could put it back just as easily (sudo passwd root)


but you are not a normal user, and don't expect everything to be easy...

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] VPN server for Mac clients

2006-06-07 Thread David Kempe

Crossfire wrote:
Teach them how to use Fugu to copy from sftp. :)  I'm not sure if SMB 
works properly over openvpn.  I think it does.  Safari, however, does not 
for some strange reason.  Camino is not afflicted by this issue however.


I dunno about all these OSX things, but from memory OSX is just samba, 
and I know that works fine over openvpn. You need wins for reliable name 
resolution though - same as any vpn. (unless you bridge the connections, 
not route)


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] oracle ubuntu

2006-05-11 Thread David Kempe

ashley maher wrote:

I'm completing an install of oracle onto ubuntu.

I'm following the instructions from the oracle site:
http://www.oracle.com/technology/tech/linux/install/xe-on-kubuntu.html

These suggest that the .deb package should just work on kubuntu-ubuntu
breezy (Which is what I've got)

However I get this for my troubles:

/var/lib/dpkg/info/oracle-xe.postinst: line 57: bc: command not found

apt-cache search bc didn't come up with anything.

Regards,

Ashley



try apt-get install bc

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: A Sys Admin's worst nightmare

2006-04-21 Thread David Kempe

Simon Wong wrote:

I have used separate VLANs on the switch to segregate all the PCs.
Although, I think the VLAN may not be impenetrable but I think its
adequate?


vlans are fine. but seriously in an internet cafe, just rebuild the 
machines every day. imaging or scripted builds are possible. netbooting 
the whole os makes rebuilding pretty easy. just depends on how you set 
it up etc, but just don't consider the client oses worth keeping would 
be my strategy. scales better too.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] debian-31r1a-i386-netinst ubuntu equivalent

2006-04-03 Thread David Kempe

David wrote:

I'm having serious trouble installing ubuntu, but I've managed
to get a Debian net installation happening using debian-31r1a-i386-netinst

Is there an equivalent for Ubuntu?




dunno about that, but you should be able to upgrade from that to breezy 
without too much troubles, as long as you install ubuntu-standard first 
(after changing your sources.list)


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] debian-31r1a-i386-netinst ubuntu equivalent

2006-04-03 Thread David Kempe

David wrote:

I don't quite get that... do you mean change sources.list from debian stable
to ubuntu, then apt-get install ubuntu-standard, then ??? apt-get dist-upgrade?

Everything I've read says that Debian and Ubuntu are sufficiently different 
to create some problems if you install  one over the other.


I'd love you to be right.. would save me a lot of trouble.


we do it all the time. and you got it in one how. done lots of woody 
-hoary upgrades and some sarge-breezy upgrades. sarge-hoary doesn't 
really work


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: Heads Up - troubles with time zones

2006-03-26 Thread David Kempe

Scott Sinclair wrote:
I believe in Ubuntu, that /etc/localtime is a symlink, and thus why it 
probably didn't have this problem.




So, would there be any problem not recopying the file and mv 
/etc/localtime /etc/localtime.old and resymlinking the file:

ln -s (timezone) /etc/localtime ?
is that going to cause any problems? I tried it on a few rhel3 systems 
and it seemed to be fine hope it is :)


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: Throttling??? Re: [SLUG] bittorrent clients

2006-03-23 Thread David Kempe

[EMAIL PROTECTED] wrote:

What it really needs is a nice front-end compiler that builds all the nasty
kernel-level filter and queue discipline stacks when you describe in
more common language what you want to happen. Unfortunately, the necessary
description language doesn't currently exist and neither does a decent
front-end, neither does sensible documentation...

Mind you, the linux advanced routing utilities (ip and friends) still
haven't caught on in the mainstream and they aren't as hard to use.
These things take time...


I think shorewall is getting there.

http://shorewall.com.au/traffic_shaping.htm

You need a recent version, and everything else mentioned on that page, 
but the language should allow you to avoid tc fairly neatly.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] LVM problems

2006-03-23 Thread David Kempe

Daniel Pottumati wrote:

# vgremove storage
returns: 
Volume group storage not found or inconsistent.

  Consider vgreduce --removemissing if metadata is inconsistent.



had this problem just yesterday.
what about lvremove /dev/storage?

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Distribution with maintained 2.4 kernel

2006-03-14 Thread David Kempe

Simon Males wrote:
The closest thing to a maintained 2.4 kernel distribution I've found 
is Debian Sarge. Fedora 3 would be of being the preferred choice, but 
no luck in finding any prebuilt 2.4 kernels. Ubuntu has had nothing 
but 2.6 kernels, but I see Dapper has 2.4 kernel in its universe 
repository but I do not know if that is going to be available when it 
goes Gold.


I haven't had any further distribution experience of late, so treading 
on new ground.


stick with Debian Sarge. You will get old debian love and the upgrades 
to the new gui stuff you want will be fine (once KDE gets in nicely)


thanks

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Xscreensaver too advanced!

2006-03-14 Thread David Kempe

Simon Wong wrote:

It's Ubuntu but I've only done a bare bones installation by a seed file.

I'm learning how to do that so I've probably left off something there
too!

  


did you include ubuntu-base?

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] hylafax

2006-03-12 Thread David Kempe

Phill O'Flynn wrote:
Has anyone had experience with configuring hylafax with a windows client. 


Some help would be greatly appreciated right now
I've had a bit of experience, but you need to ask a more specific 
question... are you using whfc or one of the new ones?


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Iptables

2006-02-20 Thread David Kempe

tuxta2 wrote:

Hi sluggers,

Im quite ashamed to say it, but for a couple of years now all my 
firewalling and routing has been done using either webmin or 
firestarter. I have no idea how to  use iptables! I find I just dont 
feel totally in control when using gui front end and have now decided to 
learn how to use iptables. My question is, can anyone point me to  
either a good online tutorial, or a book that will show me step by step 
what to do and why?
I use debian stable for my server, and the tutorials that I have found 
(I have never been good with google) usually give redhat examples 
including config files that dont exist in debian (or are in a different 
location).


Don't use iptables. Use shorewall. You will still understand 
firewalling, but don't need to worry about the iptables syntax biting 
you. also you get dual net connections in a nicely integrated script


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Linux client and windows dhcp server

2006-01-16 Thread David Kempe

Erik de Castro Lopo wrote:

Does anyone know what I need to do to get the Linux machine to publish
its name to the windows dns?


nsupdate should work. probably need the win2k dns server to allow 
'non-secure' updates. not sure if you can get it to work with secure 
updates (probably need a kerberos ticket etc for that to work, ie be an 
AD member)

man nsupdate.
I haven't actually tried this, but some googling suggested it. if you 
figure out, post back :)

if you can't, I can actually try it tomorrow...

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Linux client and windows dhcp server

2006-01-16 Thread David Kempe

Morgan Storey wrote:
yep that works here with a win2k dhcp server and at work with a win2k3 
dhcp server.


yeah I just checked - the win2k and 2k3 dhcp servers have an option 
(default to on) that updates the A and PTR record if requested by DHCP 
clients. If you didn't want to change the client and had some control 
over the server, you could choose the other option to always dynamically 
update the zone.
I think you will need your domainname configured properly, probably in 
dhclient.conf or equiv (maybe resolv.conf might provide a setting).


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Moving o/s etc. (1.5gig) from 60gig ATA drive to 10gig scsi

2006-01-03 Thread David Kempe

Jamie Wilkinson wrote:


* reboot, boot off the scsi disk, voila.


before you do that, fix fstab so that root is /dev/sda instead of hda 
and like wise for any other partitions you might have...


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Timezone/Daylight savings query.

2005-12-31 Thread David Kempe

Christopher Vance wrote:

Not yet fixed in Ubuntu 5.10.



You can do the honors and lodge a bug here:

https://bugzilla.ubuntu.com/

thanks

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Linux music appliances?

2005-12-02 Thread David Kempe

Luke Kendall wrote:

Surely someone is putting together a small noiseless PC loaded up with
software to make a music appliance?  Surely?  I could build one myself
given time, but I'd rather take the quick way out if there was one.


does a bit more than what you asked, but its probably as close as you 
will get.

http://www.hmc.com.au/hmc/welcome.php
the d1 guys run mythtv on their linux stuff - not sure what distro

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Email Cascading?

2005-11-23 Thread David Kempe

Kevin Fitzgerald wrote:

I want to set it up so that scalix.company.dyndns.org periodically goes to
mail.company.com.au, gets the mail and puts it in the appropriate mailboxes.
I know that one way to do this would be set up forwarders at
mail.company.com.au but this does not actually clear the mailboxes there and
they will max out over time. 


I wouldn't do that.
I would simply have the server use postfix transport mapslike so:

company.com.au :company.dyndns.org:2525

that is, if port 25 is not reachable.

if port 25 is reachable and you use dyndns.org, then you can simply do 
it in DNS:

MX  10  mail.company.com.au
MX  20  your.server

mail.company.com.au CNAME company.dyndns.org

it does work. You do risk losing mail if their dyndns is particularly 
dynnamic, and whoever happens to get their IP next is an open relay. In 
the years I have been doing this for multiple customers, I haven't ever 
had that happen. Dyndns has been rock solid. They also have a few tricks 
to help out with hosting mail on a dyndns account - check out their 
pages for more info.
So basically, I am suggesting hosting their mail directly on their 
connection. Alot less dicking around with fetchmail and forwarding etc - 
basically, when you add a user to the scalix setup, it just works as an 
email address straight away.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Debugging init problems (on Debian) (fixed at last)

2005-11-06 Thread David Kempe

Erik de Castro Lopo wrote:
This machine is now under extreme suspicion. I'm going to 
pull the hard drive mount it on another machine and go over

it with a fine tooth comb.


Probably a good idea, but I would also consider NPTL - mv /lib/tls 
/lib/tls.disabled does wonders when your glibc and kernel disagree over 
NPTL - from bitter experience :)


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Debugging init problems (on Debian)

2005-11-05 Thread David Kempe

Erik de Castro Lopo wrote:

Anybody have any clues on how to get this working again?




is there a chance your init is trojaned?

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Help needed in transhorming a VirtualHost directive intoDirectory or Location

2005-10-28 Thread David Kempe

Michael Lake wrote:

The problem is that http://nsw.royalsoc.org.au:9090 does not work.
It eventually times out but there is no error in the error log to tell
me what I have wrong in the httpd config file.


Either you just fixed it, or you have an a firewall problem or 
something, because that URL seems to work for me



dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Kubuntu Hoary query

2005-10-07 Thread David Kempe

Michael Fox wrote:

As I noticed some stuff is missing and even when I uncomment the
existing lines for universe, I still cant find some items.



how do you know they are missing?
mirror.pacific.net.au and mirror.isp.net.au are both ok.

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Ibdriver for iBurst modem

2005-10-06 Thread David Kempe

Mark M Lambert wrote:
Hi guys, 


I'm running Ubuntu Hoary 5.04 (off the CD, no updates) and trying to
install the drivers for my iBurst PCMCIA modem.
I downloaded the lasted ibdriver source from sourceforge, and the
compile seems to go okay.
I can get make and make install to happen with no errors, the PCMCIA
card is recognised, but I can't get the modules to load (see below)


does that driver support 2.6 properly yet? I haven't checked in a while, 
but last time I tried it on 2.6 I got the same problem.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Dual PCI NIC?

2005-09-26 Thread David Kempe
 I'd steer clear of D-Link, at least the 580-TX. It caused us nothing but
 trouble.. we ended up buying quad intel cards instead and have had no
 problem
 with them.

 http://mailman.ds9a.nl/pipermail/lartc/2003q4/010847.html


I had problems with the old sundance driver which that post is reffering
too, but haven't had any problems with newer sundances or 2.6
I have one machine running 5 580TXs for a couple of years now without
problems. On debian.

dave

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] minimal live CD

2005-09-21 Thread David Kempe

David wrote:
I've looked at the Knoppix website, but that looks similar in concept to 
Ubuntu.


There are a million Knoppix variants, but if you want a Knoppix shell 
you can simply boot knoppix with knoppix 2 at the boot prompt. it boots 
runlevel 2 I think - all knoppix root shell, with all hardware and 
software available, except X.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Presentation Mind Control - 21st September 2005

2005-09-18 Thread David Kempe

QuantumG wrote:
Ok, I'll bite.  WTF.  If you have something worthwhile to say, geeks 
will listen to you.  We don't need this motivational speaking crap.  Or 
is this about making presentations to the mindless masses?


I talk to plenty of geeks who have something worthwhile to say, but 
can't make the words make sense. Its not motivational speaking, its 
effective communication. Entirely different. Geeks are just people, 
people listen to effective communicators, regardless of the worth of 
their speech.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] DHCP Client not working with unwired

2005-09-08 Thread David Kempe

Peter Rundle wrote:


Link Data Logger -- unWired modem (Failure)
  13:23:05 IP 0.0.0.0.bootpc  255.255.255.255.bootps: BOOTP/DHCP,
Request from 00:01:c0:00:f9:8e, length: 548
  13:23:06 IP 220.101.10.1.bootps  220.101.12.219.bootpc: BOOTP/DHCP,
Reply, length: 300


that looks like it works. 220.101.10.1 look slike an unwired dhcp server.
perhaps the data logger can't handle tne public ip.
i think the unwired addresses are tied to each modem statically, so 
perhaps you can just try the same static address on the logger and 
forget about dhcp? as long as you duplicate its affect you shouldn't 
need it.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Technical Help Required

2005-09-07 Thread David Kempe

Jobst Schmalenbach wrote:

Samba does not allow (from memory) larger transfer greater than some size.

When you mount a windows share to a linux box you must specify something like 
this:

   /bin/mount -t smbfs -o lfs,username=USER //MACHINE/SHARE /mnt/somedisk

The lfs stands for LaRGE FILE SYSTEM.

Maybe you have to do something the other way around


I doubt thats the problem.
a large file would be greater than 2GB in size for a start.
and this limitation is a limitation of smbfs, not samba.
and it was removed with version 3 or greater. nevertheless, LFS support 
in samba itself has been around for ages. 2gb files tho.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] DHCP Client not working with unwired

2005-09-07 Thread David Kempe

[EMAIL PROTECTED] wrote:

Does anyone know if the unwired modem is a router or a bridge? I'm assuming it's
a bridge and that the default gateway and the dhcp server is on the other end of
the unWired connection.


Its a bridge I think for all purposes. It probably can do some routing, 
but for your purposes, its a bridge. Therefore, ensure it has good 
reception if you are moving it around. Very directional those modems.


Martin Visser makes good suggestions, tho I would recommend tethereal 
over tcpdump these days. I find it easier to read I spose.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Nokia Mobile VPN client and Freeswan

2005-08-19 Thread David Kempe

Simon Wong wrote:

Afternoon all!

Probably a long shot but does anyone know if it's possible to setup
Freeswan so it will accept VPN connections from the Nokia Mobile VPN
client.


you probably want one of the new freeswans (superswan or openswan I think).
I don't use ipsec anymore - Openvpn all the way.
Anyway, I think you just need the ipsec stuff with the nat traversal 
patches which openswan integrated about the time it was created. So it 
should be nice and easy to get working. In an IPsec kinda way

good luck :)

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] postfix

2005-08-16 Thread David Kempe

ashley maher wrote:

I found some references on setting up postfix from postfix.org. However
some references are better than others. Does anybody know a good
reference for setting up a decent postfix server for a postfix newbe?
(decent Imean spam filter, virus et al)


there are a few guides around. search for howto postfix spamassasin 
clamav etc or amavisd-new.

depends on your distro choice

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Fw: Postfix, IMAP, Lotus Notes, Evolution OfflineIMAP

2005-08-09 Thread David Kempe

[EMAIL PROTECTED] wrote:
1.  At the moment I use an entry in the transport file for Postfix to 
direct all mail for our domain to the Notes server.  I need to be able to 
this by user but can't see how it is done.  Transport seems only to accept 
domains.  Can postfix do this,and if so, how?


Sure, just get a recent version of postfix.
can do crazy stuff like:
[EMAIL PROTECTED]   :[192.168.1.1]
[EMAIL PROTECTED]   :[192.168.9.1]
@thisdomain :[192.168.1.10]

all in the transport map.

I think I needed 2.1.5 or so from memory. I can dig futher to confirm if 
 you get stuck.


2.  With the Lotus Notes client running in IMAP mode I can create emails 
offline.  When I sync the client with the server the server will send out 
any unsent emails.  Copies of sent mails are thus filed in the main server 
sent folder or as directed by the user.  Evolution seems to insist on 
either an SMTP server or sendmail.  This will not create a sent mail 
copy in  the main server IMAP store but will store it on the machine the 
user happened to be using when they sent the email.  Is there a way round 
this?  If not, is there an OSS client that would allow me to do this?




I think Thunderbird will do this. I set it up just yesterday to do 
something similar for a client. Once he reconnects after being offline, 
the mail gets sent, sent items end up in his imap sent items, and new 
mail is downloaded. Seemed to work fine. Unless I misunderstand the 
problem, Thunderbird should be fine for this, with the included Offline 
Extension in recent versions.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Fw: Postfix, IMAP, Lotus Notes, Evolution OfflineIMAP

2005-08-09 Thread David Kempe

David Kempe wrote:

Sure, just get a recent version of postfix.
can do crazy stuff like:
[EMAIL PROTECTED] :[192.168.1.1]
[EMAIL PROTECTED]:[192.168.9.1]
@thisdomain:[192.168.1.10]

all in the transport map.


oh and another tip, if you want mail for users redirected outside, you 
need aliases, not transports.

so in transport you go:
[EMAIL PROTECTED]   local

then in your aliases db you:
[EMAIL PROTECTED]   [EMAIL PROTECTED]

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Monitoring postfix/sendmail

2005-08-01 Thread David Kempe

Carlo Sogono wrote:



It's to be sent to the email add of our 'monitoring employee'. I use
Perl to talk to /usr/sbin/sendmail -t like so:


Perhaps your organisation needs nagios.
I would be happy to provide some professional services around nagios for 
you if you like :)


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Open VPN.

2005-07-26 Thread David Kempe

Peter Hardy wrote:

From memory it was fairly simple to set up a routed network following

the directions in the HOWTO[1] and win32 install notes[2]. But we did
have a lot of problems using certificate authentication, and ended up
going with a shared key instead. It was a while ago though, and I didn't
do any of the work on the Windows end (that box lives in Poland..).


Tis pretty straight forward.
I have got certs working fine. The easy-rsa scripts that come with 
openvpn are a great starting point.
openvpn gui makes it easy for windows users to connect, change passwords 
and do other stuff.

http://openvpn.se I think.
There are guis for macOSX and linux as well.
I want to get it working with ifup-down sometime for debian.

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Ideas for linux internet server hardware.

2005-07-20 Thread David Kempe

Ben Donohue wrote:
Just wondering if there are any ideas out there about where to buy good 
compatible with Linux hardware.
Possibly building a custom machine. Or how about  3 years warranty on a 
name brand server? HP? IBM?


4G Might not get much with a brand name. I wouldn't bother with 
virtualisation - I reckon its overrated :)
also, I would save money on the hardware and go for decent bandwidth. 
Hosting on broadband (adsl certainly) is never a great idea. Knock off 
1G and spend it on colo for a year. much better off..


we do this sort of stuff for a living if you want to call me about it 
tomorrow.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] cfengine DNS

2005-07-19 Thread David Kempe

Richard Heycock wrote:

I'm trying to set cfengine to copy a file from one host to itself and I
keep getting the error  Server returned error:  Host authentication
failed. Did you forget the domain name. Which it seems is due to me not
having reverse mapping on my DNS server.



it seems the short answer is no.
google says:
http://cfwiki.org/cfwiki/index.php/Cfengine_Protocol

for a simple DNS solution, dnsmasq might give you pretty easy forward 
and reverse for your needs.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Telstra ADSL bridge mode on Linux

2005-07-10 Thread David Kempe

Peter Rundle wrote:
Is there any point in persuing this or should I try and work on ditching 
Telstra for one of the other vendors?


You probably have a siemens modem/router and hence are on a 10.0.0.0 
style subnet.

odds on the router is at 10.0.1.138 or something like that.
anyway, you can probably make that work, but your connection won't do 
the same as the other providers. It will be PPPoE, and you will only get 
a /30 routed to you if you are on Bigpond Direct (for a massive fee of 
course). At this stage, the other providers are looking like the best 
bet for the same network config. Of course, it all depends on what you 
are actually trying to achive.


dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Telstra ADSL bridge mode on Linux

2005-07-10 Thread David Kempe

Peter Rundle wrote:
I actually want the IP available to the Linux box so that I can do cool 
and groovy network thinks like Masquerade, proxy, reverse proxy etc. I 
could let the Modem hold the IP but then it's not available to the 
reverse proxy. Sounds like Roaring Penguin will have to be it.


then you do need to swtich the modem into bridged mode.
I would start with its web interface. Then goto google if its not helpful

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Problems with rsync

2005-06-01 Thread David Kempe

Howard Lowndes wrote:
Agreed, but in this case I manage the whole LAN (it's very basic) and it 
only has hubs, not switches.




Theres your problems.
get switches

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] This virus that's been going around.

2005-05-19 Thread David Kempe
James Gray wrote:
Which simply means someone with you and/or SLUG in their address book has been 
infected.  Doesn't really narrow it down much :-/  I agree with your 
sentiments though - it does increase the noise level.  I run a fairly 
Unfortunately, its not just address books that these worms target these 
days. Internet caches, temporary files and even trawl the web and try 
and make up addresses are some of the methods they use. So it makes 
finding the culprit even harder. About the only thing you can do it use 
the originating IP address.

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] pptp IP address assignment

2005-05-18 Thread David Kempe
Michael Fox wrote:
So openvpn is the way to go? I want to setup something similar to
Ryan, or atleast configure my linux machine thats currently serving
files out to my lan to also do some vpn server end point stuff (for
wireless and wan connected people).
I am still researching on what way to attempt on Debian Sarge install.
it sure is the way to go.
openvpn in bridged mode work great for wireless stuff. for 
endpoint/roadwarrior stuff put it in routed mode and go from there. its 
damn nice.
I even got it to work through an ssl proxy today, so now I can 
administer linux boxes that where previously stuck behind said proxy.

for debian:
apt-get install openvpn
answer - yes I want a tap device made for me.
grab sample config file from openvpn.net.
follow simple howto. too easy. get stuck, ask questions.
dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] pptp IP address assignment

2005-05-17 Thread David Kempe
Ryan Verner wrote:
I'm in the midst of moving it to a completely different solution right
now, actually, which probably is a bit more interesting :-)
I hope its openvpn :)
dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] WINE and Frontpage 2002.

2005-04-29 Thread David Kempe
John Gibbons wrote:
Has anyone tried using WINE to run FrontPage 2002?
John.
http://www.codeweavers.com/site/compatibility/browse/name?app_id=253;forum=1
crossover office might help you.
30 day free trial
dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Can anyone tell me what ns1.aztec.20.com is???

2005-04-25 Thread David Kempe
Kevin Saenz wrote:
I wouldn't suggest a port scan. It is illegal to port scan another
server without permission.
really? where does it say that?
what about if i telnet to each port in succession?
dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Someone's bruteforcing my debian box...should I worry?

2005-04-12 Thread David Kempe
Dean Hamstead wrote:
ahh script kiddies
might want to put ssh on a non standard port.

If you dig through the archives, you might find a suggestion i made 
about tcpwrappers only allowing australian subnets. this will cut this 
crap out pretty well. of course ideally, you only ssh from know ips

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Someone's bruteforcing my debian box...should I worry?

2005-04-12 Thread David Kempe
Nick Croft wrote:
They're from Russia, and can keep trying as long as they don't get in.
I had someone from Russia get into one of my boxes once. Someone added 
an admin user then later on changed the bloody password to admin. of 
course it was 'brute' forced. The only thing that saved the box was the 
grsec enabled kernel - PaX kicked in on everyone of the 8 different 
rootkits they tried. pretty impressive effort I must say.
grsec saved the box even though the attacker had a shell... seems to 
work better than afs and kerberos i must say ;)

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] SLUG BoF at LCA?

2005-04-12 Thread David Kempe
Peter Hardy wrote:
Anybody interested in having a SLUG dinner one night during LCA?
 

yeah. might be up for it. of course we could just meet up somewhere for 
a beer

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] external usb formatting

2005-03-20 Thread David Kempe
Ashley Maher wrote:
Mar 21 14:46:11 solo kernel: scsi: Device offlined - not ready after 
error recovery: host 0 channel 0 id 0 lun 0
Mar 21 14:46:11 solo kernel: sda : READ CAPACITY failed.
Mar 21 14:46:11 solo kernel: sda : status=0, message=00, host=5, driver=04
Mar 21 14:46:11 solo kernel: sda : sense not available.
Mar 21 14:46:11 solo kernel: sda: Write Protect is off
thats not meant to happen. seems like a dead disk. but could be cable, 
enclosure or something else.
once it gets that right you need to partition it before you format it.
cfdisk is probably most useful.
does cfdisk /dev/sda help at all?

thanks
dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] external usb formatting

2005-03-20 Thread David Kempe
Ashley Maher wrote:
The laptop is realley what I want this for. Working on the desktop is 
loely (it proves it works) but not what i was looking for.
the 2.6 kernel has some removable drive stuff broken if you ask me.
have you tried mucking around with different drivers for your usb 
chipset? usb-storage is all you get with usb-removable drives. I reckon 
firewire support which works pretty much the same is badly broken in 2.6 
so I stick to 2.4. You won't be able to get 2.4 to work nicely with 
Ubuntu (tho I am sure someone here might be able to help). maybe try 
debian testing on that laptop - you get debian anyway, just a bit more 
headache making it work.

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Editing a windows registry file through Linux

2005-03-09 Thread David Kempe
I've not used them, but it claims to be an almost fully functional
registry editor.
Cheers,
John
yes,
i happened to have need of that tool(ntpasswd) today and it does work well.
scripting it to do useful things to samba profiles might be a challenge 
for another day, but at least it can make the odd change or two offline.

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Range of Wifi

2005-03-05 Thread David Kempe
Howard Lowndes wrote:
I am trying to get a wifi signal working between two BV houses about 20
m apart separated by a colourbond fence.
I can get it to work but the signal is weak - typically less than 20%
and drop outs are frequent.
Am I asking too much of wifi?
no,
colourbond will destroy the signal. get them as high as possible.
dav
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] freeradius cisco aps mac authentication

2005-03-04 Thread David Kempe
[EMAIL PROTECTED] wrote:
I have a debian (sarge) server running free radius. I have a cisco 
wireless access point which is using mac authentication. I've gotten a 
test user being authenticated.
What I'm not sure how to handle its the assigning of IPs. If possible 
I'd like to use my normal dhcp server. If I'm not using ppp, the radius 
server isn't involved in the issuing of ips at all, right?
Doesnt the AP just talk radius for authentication, then allow 
association or not?
then you would just use straight dhcp for the client - if you want a 
static ip, just give them a static lease. the cisco might have some sort 
of partition and dhcp relay function - been a while since i used them.

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: Weird login behaviour

2005-02-28 Thread David Kempe
O Plameras wrote:
But it does not bother me to see that  discussions arise about trivial 
items on symantecs
which are not helpful as far as I am concerned. I'm more interested to 
learn what others
are doing in terms of security, etc., the things that matters most 
rather than trivialities.

well perhaps you might want to consider grsecurity, it can help prevent 
a bunch of rootkits that might like to take hold:

http://grsecurity.net/features.php
perhaps even prevent hostile modules from loading in some instances.
as for your compiling or not compiling modules support or not, I think 
the issue has beens sufficiently blurred to be useless. lets move on.

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] wireless pci card netgear wg311

2005-02-24 Thread David Kempe
Linley Caetan wrote:
has anyone had some luck with this one?
Running FC3 .
its shite even on windows.
take it back and get a linksys
dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Best document management system for small org

2005-02-20 Thread David Kempe
Howard Lowndes wrote:
Two  options might be Zope or some sort of wiki.
use plone - its in debian and will work fine.
requires a beefy box if you have lots of users.
dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Ghosting a disk

2005-02-11 Thread David Kempe
Howard Lowndes wrote:
I think it's there because, before I started, I tried:
fdisk /dev/hdc
and it came back that it couldn't read the device.  Now when I do fdisk
/dev/hdc it comes back with a correct looking partition table that
matches the master.
well it wasn't there to begin with.
what does ls -alh /dev/hdc say?
fdisk should not say 'can't read the device' when you try it on an empty 
disk. It should just have no partition table on it. Ie, when you go p 
for print, it has only free space.

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Priner compatability

2005-02-09 Thread David Kempe
Russell Hudson wrote:
Can you advise on a make of printer that is compatible with the Linux
operating system, or even a particular model of mono laser printer,
hopefully for less than $350?
Hi Russell,
You can find a database of compatible printers from www.linuxprinting.org.
I would tend to recommend the HP laserjets, I am pretty sure the 1015 
works with linux.
OK, I checked that myself and it only works partially due to some 
firmware bug. bugger. so maybe you are stuck with a kyocera fs1010.
they work ok as printers and will work fine in linux.

http://linuxprinting.org/show_printer.cgi?recnum=Kyocera-FS-1010
tho that would be $475 worth of printer. maybe with some digging and 
cross referencing to computer vendor sites you can do better...

cups would be the way to go.
dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Incremental Backup Script

2005-02-08 Thread David Kempe
Lyle Chapman wrote:
Can anyone point me to a good backup script or program that does 
incremental backups?

I have a particluar directory I want to backup to an external firewire 
drive every night.

cheers
I use rdiff-backup for this.
it works ok.
it uses librsync and stores reverse diffs in a special subdirectory.
if you check the wiki I have written a lame script that works for 
firewire. (i have since updated it inhouse, but not on the wiki - let me 
know if you need help)

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Exporting applications from windows?

2005-02-06 Thread David Kempe
Rowling, Jill wrote:
Hi all,
The way I have seen this done is pretty much the same as the way you do it
Windows server to Windows client. I use Citrix mainly, and sometimes
Rdesktop.
1) Citrix metaframe: the Linux client is free but the server costs. Exports
a whole desktop. Uses a more efficient protocol to transmit than does VNC,
so appears quicker. Requires a Windows Application server set up. Good
graphical display, limited only by the amount of memory you put in the
Windows server. I think in our case the license cost vs. Windows desktop
maintenance trade-off was something like 60 people. YMMV.
You can export just a single application with Citrix. Just 'publish' the 
app, and when people click the shortcut on their (linux) desktop, it 
authenticates, then opens the app. Works pretty well, shame you have to 
pay for citrix to get it

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Weird masquerading problem

2005-01-24 Thread David Kempe
Gavin Carr wrote:
Hi all,
I've got a very standard masquerading firewall between my internal 
network and the outside, done with smoothwall/iptables on Debian
Woody. Works beautifully, and has for a while.

is that shorewall or smoothwall?
dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Sendmail inexplicably slow to send mail

2005-01-17 Thread David Kempe
Paul Robinson wrote:
Anyone had any experience with this sort of problem? I've searched 
through the slug archives and google and checked the suggestions there 
(/etc/host entries and dns settings) to no avail.
have you checked the response time/quality from your dns servers?
use: #time host -t mx testmaildomain.com mydnsserver
It sounds very much like a DNS problem, or even a failing disk... but I 
use postfix, so I don't know much more about sendmail...

dave
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


  1   2   3   4   5   6   >