Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

debian-user-digest Digest V2007 #2706

From: <debian-user-digest-request(at)lists.debian.org>
Date: Tue Oct 30 2007 - 12:25:27 EDT


Content-Type: text/plain

debian-user-digest Digest Volume 2007 : Issue 2706

Today's Topics:

  Re: Problems with installing Debian   [ "Orestes Leal"  ]
  suexec policy violation: see suexec   [ schemelab  ]
  Re: getting sound to stick in Etch..  [ Florian Kulzer  ]
  Re: iptables and virtual hosts probl  [ Andrew Sackville-West 

Date: Mon, 29 Oct 2007 23:58:53 -0500 (CST) From: "Orestes Leal" <orestesleal13022@cha.jovenclub.cu> To: "Triskal" <stefan.ploch@gmx.de>
Cc: debian-user@lists.debian.org
Subject: Re: Problems with installing Debian Linux on a SATA hard disc

Message-ID: <62859.192.168.250.8.1193720333.squirrel@correo.ciudad.jovenclub.cu>
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: quoted-printable

With ETCH Everything will be OK!!

Greetings from Cuba.
olr
=3D=3D=3D

El Lun, 29 de Octubre de 2007, 12:30 pm, Triskal escribi=C3=B3:
> Hi there!
>
> I did a search for my problem, but couldn't find the answer. If I
> overlooked it, I apologize. Also, I'm quite new to Linux (I've used it
> for LaTeX, but not much else, and I'm an absolute novice at installing
> Linux.)
>
> About my system:
>
> 1. I have a Dell Dimension 5150 with a 320 GB SATA hard disc; on this
> disk, there is Windows XP (three partitions on the hard disc).
>
> 2. I bought a new internal hard disc (Samsung SATA2 160 GB
> (HD160/1HJ)) to install Debian Linux on it (Sarge 3.1r0a, which came
> on two DVDs which were part of one of the two main books in German on
> Debian Linux).
>
> The problem:
>
> The installation program didn't recognize either of my two hard discs
> (neither the one with Windows on it nor the new one): "no partitions
> found".
>
> Now, I'm currently downloading DVD iso images with Etch on it in the
> hope that Etch can handle SATA hard discs (since Sarge could not). Is
> there any point in doing this (i.e., does Etch still have the same
> problems with SATA discs)? Or what should I do?
>
> Please note that I'm still quite new to Linux. I have used it in the
> past to compile LaTeX documents, but that's about it. And I have only
> little experience with installing Linux.
>
> Any help would be greatly appreciated. Thanks!
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
>

Do you need help?X

love, peace and fuck the police ;-)

Date: Tue, 30 Oct 2007 01:58:38 -0700
From: "Todd A. Jacobs" <nospam@codegnome.org> To: Debian User List <debian-user@lists.debian.org> Subject: ssh into chroot

Message-ID: <20071030085838.GA29548@penguin.codegnome.org>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

I'm using schroot to run a sid chroot inside of etch, and have run into a problem. I googled around, and found the following:

  1. use bind to mount /proc inside the chroot
  2. run sshd inside the chroot
  3. connect

Only when I do these things, ssh seems to hang during the login process:

    debug1: Authentication succeeded (password).
    debug1: channel 0: new [client-session]
    debug1: Entering interactive session.
    debug1: Sending environment.
    debug1: Sending env LANG = en_US.UTF-8

Obviously, it doesn't like the chroot somehow. What am I missing?

-- 
"Oh, look: rocks!"
	-- Doctor Who, "Destiny of the Daleks"

Date: Tue, 30 Oct 2007 01:44:11 -0700 From: Rippit the Ogg Frog <rippit@oggfrog.com> To: debian-user@lists.debian.org Subject: Help with init script? Message-ID: <4726EEDB.2030705@oggfrog.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit I'm trying to control a BitTorrent seed from an init script. The original init script (that I wrote) is in /etc/init.d/btseed. It starts and stops a script that is in /usr/local/bin/btseed. This script just starts btlaunchmany, which is used to seed multiple .torrents. I couldn't get Debian Etch's btlaunchmany to work, so I installed the .deb for the current upstream BitTorrent that's found at http://download.bittorrent.com/dl/ When I run that version's btlaunchmany manually, it works fine. My problem is that btlaunchmany forks a couple child processes. When I try to stop my daemon, my script itself exits but the child processes don't. I think I could fix this by putting a signal handler in my script that will kill the child processes, but I don't know how to do that. I'm also not sure of what would be the best way to identify the child process' process ID numbers. Perhaps ps | grep would do. My btseed script takes no command line parameters. Here is the code to start the daemon from /etc/init.d/btseed: d_start() { echo -n "$NAME" start-stop-daemon --start --background --quiet \ --make-pidfile --pidfile "$PIDFILE" \ --chuid nobody \ --exec $DAEMON -- $DAEMONOPTS } Here is the code to stop it: d_stop() { start-stop-daemon --stop --oknodo --quiet --pidfile "$PIDFILE" } I have experimented with giving --signal to start-stop-daemon to try giving different signals to btseed, but nothing seemed to help. Here is the btseed script: #!/bin/sh /usr/bin/btlaunchmany.py --max_upload_rate 128 \ --save_in /var/bittorrent/torrentfiles \ --torrent_dir /var/bittorrent/active \ --minport 50000 \ --maxport 51000 \ --data_dir /var/bittorrent/data | /bin/bzip2 > /var/bittorrent/logs/bt.log.bz2 The reason I didn't just run btlaunchmany.py directly from the init script is that I need to pipe its output through bzip2 and redirect it to a file. I wasn't clear on how I could do that from the start-stop-daemon command line. Compressing the log is necessary because btlaunchmany.py's output is quite verbose, and will fill a filesystem quickly. The nonstandard port numbers are an effort to work around ISPs who filter BitTorrent traffic. This doesn't always work, but probably does in some cases. The BitTorrent protocol itself handles the nonstandard port numbers without any trouble. Thanks for any help you can give me. Rippit -- Rippit the Ogg Frog rippit@oggfrog.com http://www.oggfrog.com/ Software isn't the only thing that should be free. Music should be too, as it once was.

Date: Tue, 30 Oct 2007 10:18:02 +0100 From: "Mathieu Malaterre" <mathieu.malaterre@gmail.com> To: debian-user@lists.debian.org Subject: Re: tetex-base: Conflicts: jadetex (<= 3.13-6) but 3.13-6 is to be installed Message-ID: <bf0c3b3f0710300218k3bb7352s7cb7147c73528463@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline On 10/29/07, Florian Kulzer <florian.kulzer+debian@icfo.es> wrote:
> On Mon, Oct 29, 2007 at 15:24:00 +0100, Mathieu Malaterre wrote:
> > Could someone please let me know what this is supposed to mean:
> >
> > tetex-base: Conflicts: jadetex (<= 3.13-6) but 3.13-6 is to be installed
> >
> > Command:
> >
> > $ sudo apt-get install docbook-utils jadetex tetex-bin tetex-extra tetex-base
> >
> > on debian oldstable (sarge)
>
> It seems that you are trying to install Etch's version of tetex-base
> together with Sarge's version of jadetex. Please post the output of
>
> apt-cache policy jadetex tetex-base
Hi Florian, Here it is: jadetex: Installed: (none) Candidate: 3.13-6 Version table: 3.13-9 0 -10 http://ftp.debian.org testing/main Packages 3.13-6 0 500 http://debian.theralys.com sarge/main Packages tetex-base: Installed: (none) Candidate: 3.0.dfsg.3-5~bpo.1 Version table: 2007-12 0 -10 http://ftp.debian.org testing/main Packages 3.0.dfsg.3-5~bpo.1 0 900 http://debian.theralys.com sarge-backports/main Packages 100 /var/lib/dpkg/status 2.0.2c-8 0 500 http://debian.theralys.com sarge/main Packages Thanks, -- Mathieu

Do you need more help?X

Date: Tue, 30 Oct 2007 20:24:32 +1100 From: Owen Townend <bowbowbow@optushome.com.au> To: "Todd A. Jacobs" <nospam@codegnome.org> Cc: Debian User List <debian-user@lists.debian.org> Subject: Re: ssh into chroot Message-Id: <1193736272.6501.25.camel@mattimeo.aehgts.homeip.net> Content-Type: text/plain Content-Transfer-Encoding: 7bit Hey, I've had a similar problem in BSD jails, sshd on the host system defaulted to listen to all interfaces and hence began listening on the virtual device assigned to the jail (or in this case chroot?). This was fixed in a single line in the sshd config file. Perhaps a similar problem is occurring here. cheers, Owen. On Tue, 2007-10-30 at 01:58 -0700, Todd A. Jacobs wrote:
> I'm using schroot to run a sid chroot inside of etch, and have run into
> a problem. I googled around, and found the following:
>
> 1. use bind to mount /proc inside the chroot
> 2. run sshd inside the chroot
> 3. connect
>
> Only when I do these things, ssh seems to hang during the login process:
>
> debug1: Authentication succeeded (password).
> debug1: channel 0: new [client-session]
> debug1: Entering interactive session.
> debug1: Sending environment.
> debug1: Sending env LANG = en_US.UTF-8
>
> Obviously, it doesn't like the chroot somehow. What am I missing?
>
> --
> "Oh, look: rocks!"
> -- Doctor Who, "Destiny of the Daleks"
>
>

Date: Tue, 30 Oct 2007 11:50:37 +0100 From: Dal <mldal@linuxsystem.cz> To: debian-user@lists.debian.org Cc: Debian Users <debian-user@lists.debian.org> Subject: Re: Apt-Get or Aptitude Message-ID: <47270C7D.6050101@linuxsystem.cz> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Daniel Burrows wrote:
> On Mon, Oct 29, 2007 at 12:14:18AM -0600, Nate Duehr <nate@natetech.com> was heard to say:
>
>> On Oct 28, 2007, at 11:06 AM, Daniel Burrows wrote:
>>
>>> I'd say the main difference is that apt-get is a command-line tool,
>>> whereas aptitude is an interactive tool that can be driven from the
>>> command-line.
>>>
>> I would disagree. Aptitude supports command-line operation as well as
>> interactive.
>>
>
> What I meant by that is that the project's goals and focus have always
> been on interactivity. This isn't a matter of excluding particular
> lines of development, but most of the work that goes into aptitude is
> weighted towards its interactive features. That's one reason, for
> instance, that the "show" output from the command-line is prettier
> than in apt-get, but slower and less useful to scripts. These
> deficiencies could be corrected, but they are lower-priority than, say,
> improving interactive dependency handling and fixing UI glitches.
>
> Also, I was trying to gently point out that there's more to aptitude
> than the command-line. Excluding generic shared code, the rest of
> aptitude is about 6 times larger than the command-line interface, and it
> would be nice to think people occasionally use all that stuff. :-) I
> occasionally notice people writing that they just discovered aptitude's
> curses interface after using it for ages, so I know that this isn't
> universally known.
>
> Daniel
>
>
>
Aptitude user interface is really great. When I started with debian there was just dselect and I don't think that was user friendly. Just aptitude and synaptic too make debian easier for normal users. Anyway it's pity that aptitude doesn't (maybe I just can't find it) source download. Something like apt-get source package. Anyway it has really better problems-with-packages solving :)

Date: Tue, 30 Oct 2007 13:32:01 -0000 From: schemelab <schemelab.webmin@gmail.com> To: debian-user@lists.debian.org Subject: suexec policy violation: see suexec log for more details Message-ID: <1193751121.097425.115840@z9g2000hsf.googlegroups.com> Content-Type: text/plain; charset="iso-8859-1" I am running Debian/Etch 4.0 and I don't understand how to get rid of this error. Further, "locate" shows no suexec logfile: root@lhost:/var/log# locate suexec /etc/apache2/mods-available/suexec.load /etc/apache2/mods-available/suexec.load.lock /etc/apache2/mods-enabled/suexec.load /usr/lib/apache2/modules/mod_suexec.so /usr/lib/apache2/suexec /usr/share/man/man8/suexec2.8.gz /usr/share/webmin/apache/mod_suexec.pl The problem occurs when I make a request to a CGI script: [Tue Oct 30 08:26:26 2007] [error] [client 75.187.102.204] suexec policy violation: see suexec log for more details [Tue Oct 30 08:26:26 2007] [error] [client 75.187.102.204] Premature end of script headers: hgwebdir.cgi

Date: Wed, 31 Oct 2007 16:14:00 +0200 From: Bogdan Marian <mendingo84@gmail.com> To: MRH <misiek_spam@o2.pl> Cc: debian-user@lists.debian.org Subject: Re: intall nvidia driver on debian lenny Message-ID: <47288DA8.7000507@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable MRH wrote:
> Dnia 29/10/07 20:50,Nick Lidakis napisa=C5=82:
>> Bogdan Marian wrote:
>>
>>> Hello.
>>>
>>> Yes, it was running with the free version of the driver. I can=20
>>> successfully start if i change the Driver section to "nv" from=20
>>> "nvidia". In fact, that's how i'm able to send you this mail.
>>>
>>
>> I had a similar problem once; realized I forgot to do "apt-get=20
>> install nvidia-glx" which creates some necessary TLS links.
>
> This page should be helpful, it describes the whole process quite well=20
> (with different ways of installing the driver) and offers some=20
> troubleshooting:
> http://wiki.debian.org/NvidiaGraphicsDrivers
>
> Kind regards,
> Michal R. Hoffmann
>
>
Hello, Nick, I'm running Lenny, so nvidia-glx is not in the repos... Michal, I tried the methods on that page and it didn't work... Last=20 thing i tried was to install the NVIDIA way, using the Nvidia .bin=20 supplied from their home site...still no luck. Bogdan

Date: Tue, 30 Oct 2007 20:04:31 +0530 From: "Siju George" <sgeorge.ml@gmail.com> To: "Debian User" <debian-user@lists.debian.org> Subject: etch apt - Failed to fetch kernel, Size Mismatch error Message-ID: <b713df2c0710300734n40675cd1o278a1a79e5816e2f@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Hi I am unable to upgrade my Debian Etch System to the new kernel. Could some one please help me with this? Details below ====================================================== fsdc:~# cat /etc/apt/sources.list deb http://ftp.de.debian.org/debian/ etch main contrib deb http://security.debian.org etch/updates main contrib #for sun java #deb http://ftp.de.debian.org/debian/ unstable non-free fsdc:~# apt-get update Get:1 http://security.debian.org etch/updates Release.gpg [189B] Get:2 http://ftp.de.debian.org etch Release.gpg [378B] Hit http://security.debian.org etch/updates Release Hit http://ftp.de.debian.org etch Release Ign http://security.debian.org etch/updates/main Packages/DiffIndex Ign http://ftp.de.debian.org etch/main Packages/DiffIndex Ign http://security.debian.org etch/updates/contrib Packages/DiffIndex Ign http://ftp.de.debian.org etch/contrib Packages/DiffIndex Hit http://security.debian.org etch/updates/main Packages Hit http://ftp.de.debian.org etch/main Packages Hit http://security.debian.org etch/updates/contrib Packages Hit http://ftp.de.debian.org etch/contrib Packages Fetched 2B in 2s (1B/s) Reading package lists... Done fsdc:~# apt-get dist-upgrade Reading package lists... Done Building dependency tree... Done Calculating upgrade... Done The following packages will be upgraded: dhcp-client librpcsecgss3 linux-image-2.6.18-5-486 linux-image-2.6.18-5-686 4 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 32.5MB/32.6MB of archives. After unpacking 24.6kB disk space will be freed. Do you want to continue [Y/n]? y Get:1 http://security.debian.org etch/updates/main linux-image-2.6.18-5-486 2.6.18.dfsg.1-13etch4 [16.2MB] Get:2 http://security.debian.org etch/updates/main linux-image-2.6.18-5-686 2.6.18.dfsg.1-13etch4 [16.3MB] Fetched 652B in 1s (398B/s) Failed to fetch http://security.debian.org/pool/updates/main/l/linux-2.6/linux-image-2.6.18-5-486_2.6.18.dfsg.1-13etch4_i386.deb Size mismatch Failed to fetch http://security.debian.org/pool/updates/main/l/linux-2.6/linux-image-2.6.18-5-686_2.6.18.dfsg.1-13etch4_i386.deb Size mismatch E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing? fsdc:~# apt-get update --fix-missing Get:1 http://security.debian.org etch/updates Release.gpg [189B] Get:2 http://ftp.de.debian.org etch Release.gpg [378B] Hit http://security.debian.org etch/updates Release Hit http://ftp.de.debian.org etch Release Ign http://security.debian.org etch/updates/main Packages/DiffIndex Ign http://ftp.de.debian.org etch/main Packages/DiffIndex Ign http://security.debian.org etch/updates/contrib Packages/DiffIndex Ign http://ftp.de.debian.org etch/contrib Packages/DiffIndex Hit http://security.debian.org etch/updates/main Packages Hit http://ftp.de.debian.org etch/main Packages Hit http://security.debian.org etch/updates/contrib Packages Hit http://ftp.de.debian.org etch/contrib Packages Fetched 2B in 2s (1B/s) Reading package lists... Done fsdc:~# apt-get dist-upgrade Reading package lists... Done Building dependency tree... Done Calculating upgrade... Done The following packages will be upgraded: dhcp-client librpcsecgss3 linux-image-2.6.18-5-486 linux-image-2.6.18-5-686 4 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 32.5MB/32.6MB of archives. After unpacking 24.6kB disk space will be freed. Do you want to continue [Y/n]? y Get:1 http://security.debian.org etch/updates/main linux-image-2.6.18-5-486 2.6.18.dfsg.1-13etch4 [16.2MB] Get:2 http://security.debian.org etch/updates/main linux-image-2.6.18-5-686 2.6.18.dfsg.1-13etch4 [16.3MB] Fetched 652B in 1s (465B/s) Failed to fetch http://security.debian.org/pool/updates/main/l/linux-2.6/linux-image-2.6.18-5-486_2.6.18.dfsg.1-13etch4_i386.deb Size mismatch Failed to fetch http://security.debian.org/pool/updates/main/l/linux-2.6/linux-image-2.6.18-5-686_2.6.18.dfsg.1-13etch4_i386.deb Size mismatch E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing? fsdc:~# uname -a Linux fsdc 2.6.18-5-486 #1 Thu Aug 30 01:46:45 UTC 2007 i686 GNU/Linux fsdc:~# ===================================================== Thank you so much :-) Kind Regards Siju

Date: Tue, 30 Oct 2007 14:28:27 +0000 From: Digby Tarvin <digbyt@acm.org> To: debian-user@lists.debian.org Subject: getting sound to stick in Etch... Message-ID: <20071030142827.GG24042@skaro.cthulhu.dircon.co.uk> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline I am having a problem getting audio functionality to stick in a newly installed Etch system on a Dell precision 410 MT. There was no sound device immediately after install, so I ran alsaconf, selected: legacy Probe legacy ISA (non-PnP) chips told it to probe "cs4236 Cirrus Logic CS4235-9" then answered Y to Do you want to modify /etc/modprobe.d/sound And I get OK, sound driver is configured. ALSA CONFIGURATOR will prepare the card for playing now. Now I will load the ALSA sound driver and use amixer to raise the default volumes. This results in /etc/modprobe.d/sound containing: alias snd-card-0 snd-cs4236 options snd-cs4236 index=0 port=0x530 cport=0x538 isapnp=0 dma1=1 dma2=0 irq=5 and /proc/asound contains: dr-xr-xr-x 4 root root 0 2007-10-30 15:23 card0 -r--r--r-- 1 root root 0 2007-10-30 15:23 cards lrwxrwxrwx 1 root root 5 2007-10-30 15:23 CS4237B -> card0 -r--r--r-- 1 root root 0 2007-10-30 15:23 devices -r--r--r-- 1 root root 0 2007-10-30 15:23 hwdep -r--r--r-- 1 root root 0 2007-10-30 15:23 modules dr-xr-xr-x 2 root root 0 2007-10-30 15:23 oss -r--r--r-- 1 root root 0 2007-10-30 15:23 pcm dr-xr-xr-x 2 root root 0 2007-10-30 15:23 seq -r--r--r-- 1 root root 0 2007-10-30 15:23 timers -r--r--r-- 1 root root 0 2007-10-30 15:23 version Two problems... 1. after rebooting it is all gone and I have no sound again :( I assume the modprobe.d/sound file should be causing sound to be configured at boot time, but it appears not to be.. Any ideas what is going wrong or what I still need to do? 2. No /dev/dsp, so attempting to run esd for gnome fails... Could it be anything to do with the /etc/modprobe.d entry: lrwxrwxrwx 1 root root 41 2007-10-27 21:42 linux-sound-base_noOSS -> /lib/linux-sound-base/noOSS.modprobe.conf Thanks, DigbyT -- Digby R. S. Tarvin digbyt(at)digbyt.com http://www.digbyt.com

Date: Tue, 30 Oct 2007 15:59:25 +0100 From: Florian Kulzer <florian.kulzer+debian@icfo.es> To: debian-user@lists.debian.org Subject: Re: getting sound to stick in Etch... Message-ID: <20071030145925.GA11712@pc0197> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Tue, Oct 30, 2007 at 14:28:27 +0000, Digby Tarvin wrote:
> I am having a problem getting audio functionality to stick in a
> newly installed Etch system on a Dell precision 410 MT.
>
> There was no sound device immediately after install, so I ran
> alsaconf, selected:
> legacy Probe legacy ISA (non-PnP) chips
> told it to probe "cs4236 Cirrus Logic CS4235-9" then answered Y to
> Do you want to modify /etc/modprobe.d/sound
> And I get
> OK, sound driver is configured.
> ALSA CONFIGURATOR will prepare the card for playing now.
> Now I will load the ALSA sound driver and use
> amixer to raise the default volumes.
>
> This results in /etc/modprobe.d/sound containing:
> alias snd-card-0 snd-cs4236
> options snd-cs4236 index=0 port=0x530 cport=0x538 isapnp=0 dma1=1 dma2=0 irq=5
[...]
> Two problems...
> 1. after rebooting it is all gone and I have no sound again :(
> I assume the modprobe.d/sound file should be causing sound to be configured
> at boot time, but it appears not to be..
> Any ideas what is going wrong or what I still need to do?
>
> 2. No /dev/dsp, so attempting to run esd for gnome fails...
> Could it be anything to do with the /etc/modprobe.d entry:
> lrwxrwxrwx 1 root root 41 2007-10-27 21:42 linux-sound-base_noOSS -> /lib/linux-sound-base/noOSS.modprobe.conf
Adding the following two lines to /etc/modules might help: snd_cs4236 snd_pcm_oss -- Regards, | http://users.icfo.es/Florian.Kulzer Florian |

Date: Tue, 30 Oct 2007 09:20:48 -0600 From: Paul E Condon <pecondon@mesanetworks.net> To: debian-user@lists.debian.org Subject: /etc/host.conf questions Message-ID: <20071030152048.GA3954@big.lan.gnu> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline I'm running Etch. I'm involved in a project to understand how networking is set up on my home lan. I'm looking at /etc/host.conf . It contains a single line: multi on man host.conf says that a possible config-line in host.conf is 'order', and there is no such line in my copy. This line is supposed to determine whether BIND or /etc/hosts if searched first. Since there is no such line, resolver must be doing some default. What is the default order in Debian Etch? Or, is there some other place where the order is really set in Debian Etch? -- Paul E Condon pecondon@mesanetworks.net

Can we help you?X

Date: Tue, 30 Oct 2007 11:43:59 -0400 From: "Mike Kuhar" <mikewk147@oh.rr.com> To: <debian-user@lists.debian.org> Subject: RE: /etc/host.conf questions Message-ID: <003301c81b0b$b092f3b0$11b8db10$@rr.com> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Content-Language: en-us That would be /etc/nsswitch.conf on the line marked 'hosts' -mike -----Original Message----- From: Paul E Condon [mailto:pecondon@mesanetworks.net] Sent: Tuesday, October 30, 2007 11:21 AM To: debian-user@lists.debian.org Subject: /etc/host.conf questions I'm running Etch. I'm involved in a project to understand how networking is set up on my home lan. I'm looking at /etc/host.conf . It contains a single line: multi on man host.conf says that a possible config-line in host.conf is 'order', and there is no such line in my copy. This line is supposed to determine whether BIND or /etc/hosts if searched first. Since there is no such line, resolver must be doing some default. What is the default order in Debian Etch? Or, is there some other place where the order is really set in Debian Etch? -- Paul E Condon pecondon@mesanetworks.net -- To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Date: Tue, 30 Oct 2007 09:16:35 -0700 From: Andrew Sackville-West <andrew@farwestbilliards.com> To: debian-user@lists.debian.org Subject: Re: iptables and virtual hosts problem Message-ID: <20071030161635.GZ1761@localhost.localdomain> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="IchZQccUbQrk8obU" Content-Disposition: inline --IchZQccUbQrk8obU Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Oct 30, 2007 at 05:09:50PM +0100, Erik Persson wrote:
> Hello!
>
> I have a server which is running 2 different virtual hosts (vserver), let=
's=20
> call them S for the server, A and B for the virtual hosts A and B.
> S, A and B have different ip-addresses (say s.s.s.s, a.a.a.a and b.b.b.b).
>
> Since the server isn't really forwarding anything I haven't used the=20
> FORWARD chain for anything, and I use INPUT and OUTPUT to regulate the fl=
ow=20
> to the different servers, for example:
>
> iptables -P INPUT DROP
> iptables -P OUTPUT DROP
> iptables -P FORWARD DROP
> iptables -I INPUT -d a.a.a.a -p tcp --dport 80 -j ACCEPT
> on the server
> seems to do what I want. In the example above letting A and only A answer=
=20
> requests on port 80.
>
> However, when I try to regulate the flow of traffic between the different=
=20
> "machines" (S, A, and B) strange things happen.
>
> For example:
> iptables -I OUTPUT -d a.a.a.a -p tcp --dport 25 -j ACCEPT
> doesn't only allow any of the "machines" to try to contact port 25 on A,=
=20
> but it *also allows A to answer* !!!
if by answer, you mean respond to the same request, then that is appropriate, IIUC. The rules relate to *new* requests, not responses to existing ones. That's why when you block port 80 inbound, you can still recieve packets -- they match up to outbound requests your browser has made. I think that's right. A --IchZQccUbQrk8obU Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHJ1jjaIeIEqwil4YRAsv+AKDjpJqE6gyYAXMvuE7+GSXpT9IauACgs990 7lDKCFXCZMd77hruG6ZpfY8= =WzSj -----END PGP SIGNATURE----- --IchZQccUbQrk8obU-- End of debian-user-digest Digest V2007 Issue #2706 ************************************************** Received on Tue Oct 30 12:25:36 2007

This archive was generated by hypermail 2.1.8 : Wed Mar 19 2008 - 02:55:37 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library