Re: Webalizer

2001-08-28 Thread Olivier MACCHIONI

At 08:23 28/08/01 +0100, Rob Woodward wrote:

>Hi,
>
>One method I used was to use a different config file for each vitual host
>I had on the box. Each vitual host has a different log file too.

My 2 cents :

for arf in `find /opt/web/web2/home/*/logs/access_log`
do
 $WEBALIZER -o /tmp -Q -N 5 -D $CACHE $arf
done

for arf in `find /opt/web/web2/home/*/logs/access_log`
do
 site=`echo $arf | sed "s/\/logs\/access_log//" | sed 
"s/\/opt\/web\/web2\/home\///"`
 infos=`echo $arf | sed "s/\/logs\/access_log/\/stats\//"`
 $WEBALIZER -p -r $site -s $site -Q -o "$infos" -D $CACHE -n 
"$site" -c $WEBALIZER_CONF
done


So webalizer will look by himself for all the web sites on 
/opt/web/web2/home and generate the stats... No config file to change when 
you add a new we site.

Of course each site stores his log files in 
/opt/web/web2/home/*/logs/access_log


Olivier




>Cheers,
>
>Rob
>
>On Tue, 28 Aug 2001, Craig wrote:
>
> > Hey debian community
> >
> > I have just install webalizer 1.30 on my web server box
> > so our web designers can analyze traffic to and from
> > their websites. I have a combined log for all our sites
> > but it doesn't look like webalizer is giving a statistical
> > by site break-down. Does anyone know if webalizer has this
> > ablility, or better yet enlighten me as to how I can do
> > this ?>
> >
> > Any help would be mostly appreciated :)
> >
> > Craig
> >
> >
> >
>
>
>Rob Woodward.
>http://www.funkymunkey.net
>
>No wonder you're tired!  You understood so much today.
>
>
>--
>To UNSUBSCRIBE, email to [EMAIL PROTECTED]
>with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




mailman & exim

2001-08-28 Thread Martin WHEELER

A recent upgrade has meant that I'm now using exim where before I was
using smail.

mailman worked beautifully under this setup; but today has begun sending
me messages as follows:


2001-08-28 12:14:52 15bhjt-SE-00 Neither the system_aliases director
nor the address_pipe transport set a uid for local delivery of
|/var/lib/mailman/mail/wrapper post -l

(where  can be any of my properly set up but very
infrequently-used lists.)


Now -- I have never needed to change my setup in /etc/aliases since the
day I installed mailman; it has always worked perfectly, through
upgrades of mailman and all.

So what am I now doing wrong; and what do I do to correct it?

Any help appreciated.
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[EMAIL PROTECTED]   http://www.startext.co.uk/

 www.gateway.gov.uk  --  the UK government's £18M Microsoft-only website
 -- "all your government database are belong to us" --





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Webalizer

2001-08-28 Thread Peter Kok

Hi all

Could you let me know where I can download the webalizer on the internet?

Tks

Regards
Peter

Rob Woodward wrote:

> Hi,
>
> One method I used was to use a different config file for each vitual host
> I had on the box. Each vitual host has a different log file too.
>
> Cheers,
>
> Rob
>
> On Tue, 28 Aug 2001, Craig wrote:
>
> > Hey debian community
> >
> > I have just install webalizer 1.30 on my web server box
> > so our web designers can analyze traffic to and from
> > their websites. I have a combined log for all our sites
> > but it doesn't look like webalizer is giving a statistical
> > by site break-down. Does anyone know if webalizer has this
> > ablility, or better yet enlighten me as to how I can do
> > this ?>
> >
> > Any help would be mostly appreciated :)
> >
> > Craig
> >
> >
> >
>
> 
> Rob Woodward.
> http://www.funkymunkey.net
>
> No wonder you're tired!  You understood so much today.
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




FTP thro' firewall

2001-08-28 Thread Martin WHEELER

Given a small local network, with nodes using a variety of OSes (Winx;
SuSE; Debian), and a firewall using Mandrake SNF, how does one FTP thro'
the firewall (safely) from one of the Debian (kernel 2.2.19) nodes?

Or is this a complete no-no?

Apparently the Win version of WS FTP has some sort of arrangement to
allow this -- I can't seem to find any documentation to allow it under
Debian 2.2r3+testing.

Any help appreciated.
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[EMAIL PROTECTED]   http://www.startext.co.uk/

 www.gateway.gov.uk  --  the UK government's £18M Microsoft-only website
 -- "all your government database are belong to us" --




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Webalizer

2001-08-28 Thread Jean Baptiste Lallement

Hi,

n Tue, Aug 28, 2001 at 08:55:24AM -0400, Peter Kok wrote:
> Hi all
> 
> Could you let me know where I can download the webalizer on the internet?


"I'm feeling lucky" with query "webalizer" on google.com gave me 
http://www.mrunix.net/webalizer/

O> 
> Tks
> 
> Regards
> Peter
> 
> Rob Woodward wrote:


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Webalizer

2001-08-28 Thread Martin WHEELER

On Tue, 28 Aug 2001, Jean Baptiste Lallement wrote:

> "I'm feeling lucky" with query "webalizer" on google.com gave me
> http://www.mrunix.net/webalizer/

So what's wrong with :  "apt-get install webalizer"  then?

-- 
Martin Wheeler



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




RE: Webalizer

2001-08-28 Thread Craig

Nothing, thats what i used, only thing is its version 1.30
whereas if you download the source its 2.01 >

..Craig

-Original Message-
From: Martin WHEELER [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 28, 2001 3:22 PM
To: Jean Baptiste Lallement
Cc: Peter Kok; [EMAIL PROTECTED]; [EMAIL PROTECTED]; Craig
Subject: Re: Webalizer


On Tue, 28 Aug 2001, Jean Baptiste Lallement wrote:

> "I'm feeling lucky" with query "webalizer" on google.com gave me
> http://www.mrunix.net/webalizer/

So what's wrong with :  "apt-get install webalizer"  then?

-- 
Martin Wheeler





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: mailman & exim

2001-08-28 Thread I. Forbes

Hello Martin 

On 28 Aug 2001, at 12:50, Martin WHEELER wrote:

> 2001-08-28 12:14:52 15bhjt-SE-00 Neither the system_aliases
> director nor the address_pipe transport set a uid for local
> delivery of |/var/lib/mailman/mail/wrapper post -l 

Look in exim.conf for a block similar to this  

system_aliases:  
  driver = aliasfile 
  file_transport = address_file
  pipe_transport = address_pipe
  file = /etc/aliases
  search_type = lsearch
  user = list 

and add the last line "user = list" or perhaps "user = mailman" and 
see if that helps.

Otherwise read the exim documentation.  The FAQ on 
www.exim.org can be very useful.

Have fun

Ian Forbes

-
Ian Forbes ZSD
http://www.zsd.co.za
Office: +27 +21 683-1388  Fax: +27 +21 64-1106
Snail Mail: P.O. Box 46827, Glosderry, 7702, South Africa
-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




RE: Webalizer

2001-08-28 Thread Martin WHEELER

On Tue, 28 Aug 2001, Craig wrote:

>  only thing is its version 1.30
> whereas if you download the source its 2.01 >

Ah -- OK.  Thanks for clueing me in -- I hadn't realised.

Is the difference worth it?  (I.e. what can't-possibly-do-without
goodies am I going to get that will persuade me to roll my own before
>= v2.01 makes it into testing?)

Martin
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[EMAIL PROTECTED]   http://www.startext.co.uk/

 www.gateway.gov.uk  --  the UK government's £18M Microsoft-only website
 -- "all your government database are belong to us" --




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Webalizer

2001-08-28 Thread Alisson Sellaro

On Tue, Aug 28, 2001 at 03:28:00PM +0200, Craig wrote:
> Nothing, thats what i used, only thing is its version 1.30
> whereas if you download the source its 2.01 >

You could also download the source from testing... in my box I've compiled it and it 
is 2.1.6.

Just my $2 cents.
-- 

:wq
--
Sellaro

Network Management Dept.
Lantech Mobile


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: FTP thro' firewall

2001-08-28 Thread Chris Wagner

The WS FTP thingy you're refering to is for going through proxies.  Some
folks just don't know the difference between firewalls and proxies. :)  To
do this just set up port forwarding on the firewall.  Use ipchains or
something and only allow ftp connections from your known boxes to pass
through.  Allow nothing from the jungle side.  You should then be able to
transparently connect to the outside world.


At 12:58 PM 8/28/01 +, Martin WHEELER wrote:
>Given a small local network, with nodes using a variety of OSes (Winx;
>SuSE; Debian), and a firewall using Mandrake SNF, how does one FTP thro'
>the firewall (safely) from one of the Debian (kernel 2.2.19) nodes?
>
>Or is this a complete no-no?
>
>Apparently the Win version of WS FTP has some sort of arrangement to
>allow this -- I can't seem to find any documentation to allow it under
>Debian 2.2r3+testing.
>
>Any help appreciated.
>-- 
>Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
>[EMAIL PROTECTED]   http://www.startext.co.uk/
>
> www.gateway.gov.uk  --  the UK government's £18M Microsoft-only website
> -- "all your government database are belong to us" --


Nice sig. :)  Er, I mean Zig.




---==---
___/``\___

0100


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: mailman & exim

2001-08-28 Thread Martin WHEELER

On Tue, 28 Aug 2001, I. Forbes wrote:

> Look in exim.conf for a block similar to this
 . . .
> and add the last line "user = list" or perhaps "user = mailman" and
> see if that helps.

Let that be a lesson to me not to adopt an "if in doubt, leave it out"
attitude to configuring newly-installed packages.

A quick hunt thro' /etc/exim/exim.conf finds:

 # user = list
 # Uncomment the above line if you are running smartlist

Ooops.

I now remember wondering at the time whether this referred to mailman as
well -- and leaving it commented out in the belief that I would remember
where to go if anything untoward happened in mailman.

Well it does; and I didn't.

Thanks for the help.
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[EMAIL PROTECTED]   http://www.startext.co.uk/

 www.gateway.gov.uk  --  the UK government's £18M Microsoft-only website
 -- "all your government database are belong to us" --




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




passwd file is locked

2001-08-28 Thread Gregory Wood



There is probably an easy answer for this -- but I don't know it.
 
I was operating remotely, changing a password for a user and got the 
message: segmentation fault. I went to the server and looked over the files and 
the processes and found nothing. So, I ran the passwd program again and this 
time I got: passwd is locked. Try again later. 
 
So what's the deal?
 
Thanks in advance.
 
Greg 



Re: FTP thro' firewall

2001-08-28 Thread Martin WHEELER

On Tue, 28 Aug 2001, Chris Wagner wrote:

> The WS FTP thingy you're refering to is for going through proxies.

 ... so much for Windows ...

>  just set up port forwarding on the firewall   ...
>  and only allow ftp connections from your known boxes to pass
> through.  Allow nothing from the jungle side.  You should then be able to
> transparently connect to the outside world.

Done.  (Difficult with Mandrake SNF sans manual, but done.)
Now I can ftp to my ISP; connect; authenticate; do a pwd and get the
right response -- then ls/get/put etc. just hang the connection -- which
eventually times out at the client end, saying:


230 User  logged in, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> pwd
257 "/u/x/x/x/" is current directory.
ftp> cd docs
250 CWD command successful.
ftp> ls
200 PORT command successful.
. . . . .
425 Can't build data connection: Operation timed out.
ftp>

Huh?

Any clueful hints; comments?

[ Interestingly, sftp gives:

root@ sftp .co.uk
Connecting to .co.uk...
Protocol major versions differ: 2 vs. 1
Connection closed
root@:~#

ISP (UK's biggest) now claims that Un*x is not supported by them; and on
being upbraided at supporting only Evil Empire boxen, responded : "At
the end of the day, all things said and done, it is _the_ standard,
isn't it?".
Gawdelpus. ]
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[EMAIL PROTECTED]   http://www.startext.co.uk/

 www.gateway.gov.uk  --  the UK government's £18M Microsoft-only website
 -- "all your government database are belong to us" --




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: passwd file is locked

2001-08-28 Thread Gregory Wood



Sorry about this -- answering my own question.
 
The problem was passwd.lock. Deleted and it works fine. However, in general 
it is better to:
rm *-    (passwd-, shadow-, 
etc)
rm ptmp
rm *.lock    (passwd.lock, etc)
 
Make sure before you do that you are only getting passwd, shadow, and 
group.
 
*** REPLY SEPARATOR 
***On 8/28/01 at 5:01 PM Gregory Wood wrote: 
There is probably an easy answer for this -- but I don't know it.
 
I was operating remotely, changing a password for a user and got the 
message: segmentation fault. I went to the server and looked over the files and 
the processes and found nothing. So, I ran the passwd program again and this 
time I got: passwd is locked. Try again later. 
 
So what's the deal?
 
Thanks in advance.
 
Greg 



RE: FTP thro' firewall

2001-08-28 Thread Simon Boulet

I believe you need to use PASSIVE mode/transfert.

-Original Message-
From:   Martin WHEELER [SMTP:[EMAIL PROTECTED]]
Sent:   Tuesday, August 28, 2001 6:33 PM
To: [EMAIL PROTECTED]
Cc: Alisson Sellaro; Chris Wagner
Subject:Re: FTP thro' firewall

On Tue, 28 Aug 2001, Chris Wagner wrote:

> The WS FTP thingy you're refering to is for going through proxies.

 ... so much for Windows ...

>  just set up port forwarding on the firewall   ...
>  and only allow ftp connections from your known boxes to pass
> through.  Allow nothing from the jungle side.  You should then be able to
> transparently connect to the outside world.

Done.  (Difficult with Mandrake SNF sans manual, but done.)
Now I can ftp to my ISP; connect; authenticate; do a pwd and get the
right response -- then ls/get/put etc. just hang the connection -- which
eventually times out at the client end, saying:


230 User  logged in, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> pwd
257 "/u/x/x/x/" is current directory.
ftp> cd docs
250 CWD command successful.
ftp> ls
200 PORT command successful.
. . . . .
425 Can't build data connection: Operation timed out.
ftp>

Huh?

Any clueful hints; comments?

[ Interestingly, sftp gives:

root@ sftp .co.uk
Connecting to .co.uk...
Protocol major versions differ: 2 vs. 1
Connection closed
root@:~#

ISP (UK's biggest) now claims that Un*x is not supported by them; and on
being upbraided at supporting only Evil Empire boxen, responded : "At
the end of the day, all things said and done, it is _the_ standard,
isn't it?".
Gawdelpus. ]
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[EMAIL PROTECTED]   http://www.startext.co.uk/

 www.gateway.gov.uk  --  the UK government's ?18M Microsoft-only website
 -- "all your government database are belong to us" --




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: FTP thro' firewall

2001-08-28 Thread Fraser Campbell

Martin WHEELER <[EMAIL PROTECTED]> writes:

> 200 PORT command successful.
> . . . . .
> 425 Can't build data connection: Operation timed out.
> ftp>
> 
> Huh?
> 
> Any clueful hints; comments?

Are you using passive mode?

-- 
Fraser Campbell <[EMAIL PROTECTED]>  Starnix Inc.
Telephone: (905) 771-0017   Thornhill, Ontario, Canada
http://www.starnix.com/ Professional Linux Services & Products


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: FTP thro' firewall

2001-08-28 Thread Martin WHEELER

On 28 Aug 2001, Fraser Campbell wrote:

> Are you using passive mode?

Thanks folks -- entering pftp at the command line now works a treat.

(I was busting a gut trying to use FileRunner to go thro' the firewall.)

Now -- anyone know how to persuade FileRunner to accept passive mode
FTP from the address box?
[Most unlikely; but, hey! -- I'm an optimist.]
-- 
Martin Wheeler   -StarTEXT - Glastonbury - BA6 9PH - England
[EMAIL PROTECTED]   http://www.startext.co.uk/

 www.gateway.gov.uk  --  the UK government's £18M Microsoft-only website
 -- "all your government database are belong to us" --



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: FTP thro' firewall

2001-08-28 Thread Chris Wagner

Are you also permitting the ftp-data port to go through?  Ftp is 21, and I
sorta forget the number for ftp-data. :)

At 10:32 PM 8/28/01 +, Martin WHEELER wrote:
>230 User  logged in, access restrictions apply.
>Remote system type is UNIX.
>Using binary mode to transfer files.
>ftp> pwd
>257 "/u/x/x/x/" is current directory.
>ftp> cd docs
>250 CWD command successful.
>ftp> ls
>200 PORT command successful.
>. . . . .
>425 Can't build data connection: Operation timed out.
>ftp>
>
>Huh?

[snip]



>ISP (UK's biggest) now claims that Un*x is not supported by them; and on
>being upbraided at supporting only Evil Empire boxen, responded : "At
>the end of the day, all things said and done, it is _the_ standard,
>isn't it?".
>Gawdelpus. ]


LOL!, Ya, "the" standard.  The standard for lamers who don't know what
they're doing.  Ever hear of the three monkeys?  Hear no evil see no evil
speak no evil.




---==---
___/``\___

0100


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




named

2001-08-28 Thread vijaya

hi all,
i ahve redhat 7.1 and the named is unable to shutdown

Any suggestions regarding this
but starting the named is successful

After loading the configuration from /etc/named.conf this is the next
message in /var/log/messages

named[735]:master.c:1172:unexpected error:
named[735]:dns_master_load:named.ca:1:no TTL specified. THIS ZNE WILL NO
LONGER WORK IN FUTURE VERSIONS.Add a TTL.
named[735] :dns_master_load:named.ca:1:unknown RR type 'This'
named[735]:zone configuration for '.' failed:unknown class/type
named[735] loading configuration:failure
named[735]:exiting (due to fatal error)
named[735]:named shutdown failed

But i am able to connect to the net and and dns is working fine

Could anyone tell me what all these messages infer in detail
Waiting for ur reply


Regards,

Vijaya


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Help: No Connect ppp

2001-08-28 Thread Dario Columbich



The pppconfig create two files en ../peers/provider and 
/chatscripts/provider, but the pon ../chatscripts/provider command come back the 
following error message : "call option value may not contain  .. or start 
with / ", I cannot find the right configuration and the error itself 
.
Thanks.
 
 


Re: Help: No Connect ppp

2001-08-28 Thread Tony Green

* This one time, at band camp, Dario Columbich said:
> The pppconfig create two files en ../peers/provider and /chatscripts/provider, but 
>the pon ../chatscripts/provider command come back the following error message : "call 
>option value may not contain  .. or start with / ", I cannot find the right 
>configuration and the error itself .
> Thanks.
> 
> 
try pon provider rather than pon ../chatscripts/provider

HTH

Greeno
-- 
Greeno <[EMAIL PROTECTED]>
GnuPG Key :  1024D/B5657C8B 
Key fingerprint = 9ED8 59CC C161 B857 462E  51E6 7DFB 465B B565 7C8B

Imagine working in a secure environment and finding the string 
_NSAKEY in the OS binaries without a good explanation
-Alan Cox 04/05/2001


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: named

2001-08-28 Thread Michael Wood

Hi

On Wed, Aug 29, 2001 at 04:21:27PM +1000, Tony Green wrote:
> * This one time, at band camp, vijaya said:
> > hi all,
> > i ahve redhat 7.1 and the named is unable to shutdown
> > 
> > Any suggestions regarding this
> > but starting the named is successful

Are you sure it actually starts?  But that's beside the point
really.  (You can check with "ps ax | grep named | grep -v grep"

> > After loading the configuration from /etc/named.conf this is the next
> > message in /var/log/messages
> > 
> > named[735]:master.c:1172:unexpected error:
> > named[735]:dns_master_load:named.ca:1:no TTL specified. THIS ZNE WILL NO
> > LONGER WORK IN FUTURE VERSIONS.Add a TTL.

This happens when you try to use old zone files from bind 8.2.x
with bind 9.  bind 9 requires a "$TTL blah" at the top of the
zone files (or it will in future.  That's what it's complaining
about here.)

> > named[735] :dns_master_load:named.ca:1:unknown RR type 'This'
> > named[735]:zone configuration for '.' failed:unknown class/type

This looks like you have a comment or something in your zone
file, but it's not "commented out."

Assuming you've just got a caching nameserver installed (i.e.
you aren't the primary/secondary nameserver for any domains) the
easiest would be to remove the zone files and the config files
and reinstall bind (and caching-nameserver.)

What probably happened is that your zone files (or your
named.root (or whatever you called it)) got corrupted, and when
you upgraded to bind9, the config wasn't overwritten because it
was modified.

> > named[735] loading configuration:failure
> > named[735]:exiting (due to fatal error)
> > named[735]:named shutdown failed
> > 
> > But i am able to connect to the net and and dns is working
> > fine
> > 
> > Could anyone tell me what all these messages infer in detail
> > Waiting for ur reply
> > 
> 
> Check what resolver you are using (look in /etc/resolv.conf).
> I'd wager that its not 127.0.0.1 (or the machines IP address)
> which means that you are not using the bind instance (which
> isn't running on that machine) as your resolver.

Indeed.

> As for the rest of the problem you are using redhat and
> posting to a debian list...

That too.  This is not the place to ask RedHat specific
questions, although, with a little bit of work, this could be
made a generic Linux/bind9 question that could apply to debian
or any other distribution.

> I suspect a problem with the zone file, looks like you are
> using an old format or have errors in it.

Both ;)

Hope that helps.

-- 
Michael Wood
<[EMAIL PROTECTED]>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Exim

2001-08-28 Thread Craig

Hello fellas

Wanted to know if there is a way of restricting message
sizes for different directors in exim ?> eg UUCP, local 
deliveries and smtp

..Craig


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: FTP thro' firewall

2001-08-28 Thread Michael Wood

On Tue, Aug 28, 2001 at 02:25:42PM -0400, Chris Wagner wrote:
> The WS FTP thingy you're refering to is for going through
> proxies.  Some folks just don't know the difference between
> firewalls and proxies. :)  To do this just set up port

Indeed.  That's partially because in WS_FTP/CuteFTP etc., the
proxy options are in the config section called "Firewall."

> forwarding on the firewall.  Use ipchains or something and
> only allow ftp connections from your known boxes to pass
> through.  Allow nothing from the jungle side.  You should then
> be able to transparently connect to the outside world.

You only need "portforwarding" on the firewall if you want to
have an FTP server on the inside of the firewall and you're
doing IP masquerading/NAT or something.

Also, the above config would only allow passive FTP.

I don't know what "Mandrake SNF" is, but if you can install a
2.4 kernel on it, you could use iptables instead of ipchains.
This means you can use the stateful inspection features to allow
active and passive FTP through the firewall.

The other option is to install an ftp proxy (no, not Squid) on
the firewall.  Two examples of ftp proxies are the one from the
SuSE proxy suite (which, last time I looked consisted only of
the ftp proxy) and ftp-gw from the TIS firewall toolkit.

Btw, I've just checked and there is a package in testing called
ftp-proxy (maybe in stable too?) which contains the SuSE proxy
suite ftp proxy.  It should be available for Mandrake too, or
just compile it from source.

If people are using WS_FTP to ftp through the firewall, there
may well be a proxy installed already.  Have a look in the
"Firewall" config of WS_FTP to see what they have there.

To use the above mentioned ftp proxies from the command line ftp
clients, use "[EMAIL PROTECTED]" as the "username"
and then the password of the real FTP server for the password:

$ ftp firewall.example.com
220 firewall FTP proxy ready
Name: [EMAIL PROTECTED]
331- Gatewaying to ftp.debian.org.
331 Guest login ok, send your complete e-mail address as password.
Password: blah
230 Guest login ok, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> 

or something like that :)

> At 12:58 PM 8/28/01 +, Martin WHEELER wrote:
> >Given a small local network, with nodes using a variety of
> >OSes (Winx; SuSE; Debian), and a firewall using Mandrake SNF,
> >how does one FTP thro' the firewall (safely) from one of the
> >Debian (kernel 2.2.19) nodes?
> >
> >Or is this a complete no-no?
> >
> >Apparently the Win version of WS FTP has some sort of
> >arrangement to allow this -- I can't seem to find any
> >documentation to allow it under Debian 2.2r3+testing.

-- 
Michael Wood
<[EMAIL PROTECTED]>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: named

2001-08-28 Thread Tony Green

* This one time, at band camp, vijaya said:
> hi all,
> i ahve redhat 7.1 and the named is unable to shutdown
> 
> Any suggestions regarding this
> but starting the named is successful
> 
> After loading the configuration from /etc/named.conf this is the next
> message in /var/log/messages
> 
> named[735]:master.c:1172:unexpected error:
> named[735]:dns_master_load:named.ca:1:no TTL specified. THIS ZNE WILL NO
> LONGER WORK IN FUTURE VERSIONS.Add a TTL.
> named[735] :dns_master_load:named.ca:1:unknown RR type 'This'
> named[735]:zone configuration for '.' failed:unknown class/type
> named[735] loading configuration:failure
> named[735]:exiting (due to fatal error)
> named[735]:named shutdown failed
> 
> But i am able to connect to the net and and dns is working fine
> 
> Could anyone tell me what all these messages infer in detail
> Waiting for ur reply
> 

Check what resolver you are using (look in /etc/resolv.conf).  I'd wager
that its not 127.0.0.1 (or the machines IP address) which means that you
are not using the bind instance (which isn't running on that machine) as
your resolver.

As for the rest of the problem you are using redhat and posting to a
debian list...

I suspect a problem with the zone file, looks like you are using an old
format or have errors in it.

HTH

Greeno
-- 
Greeno <[EMAIL PROTECTED]>
GnuPG Key :  1024D/B5657C8B 
Key fingerprint = 9ED8 59CC C161 B857 462E  51E6 7DFB 465B B565 7C8B

Imagine working in a secure environment and finding the string 
_NSAKEY in the OS binaries without a good explanation
-Alan Cox 04/05/2001


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]