From awilliam at whitemice.org Wed Sep 4 12:46:38 2013 From: awilliam at whitemice.org (Adam Tauno Williams) Date: Wed, 04 Sep 2013 12:46:38 -0400 Subject: [GRLUG] #grlug, #grmakers In-Reply-To: References: <5220DADD.7000401@gmail.com> Message-ID: <1378313198.5038.1.camel@linux-22wg.site> On Fri, 2013-08-30 at 13:57 -0400, Jonathan Jesse wrote: > +1 > i've been a bit lost in the past about the conversation that has been > happening in #grlug and am glad there is a separate place to spin out > some of this converstaion Agree, I'll find my way back into #grlug again. From casey at grlug.org Wed Sep 4 12:55:23 2013 From: casey at grlug.org (Casey DuBois) Date: Wed, 4 Sep 2013 12:55:23 -0400 Subject: [GRLUG] Fwd: Call for Participation! 2013! In-Reply-To: <20130904161820.E23D62B8458@conference.linuxsymposium.org> References: <20130904161820.E23D62B8458@conference.linuxsymposium.org> Message-ID: Hey GRLUG, They are still looking for proposals: Casey we're still looking for more proposals for the 2013 Symposium and would like you to consider submitting something this week. Our focus has always been on good content and this depends on getting lots of good proposals to select from. I realize you're busy and this is why submitting a full paper is optional this year if you don't have time to write one. If you require some form of travel assistance to make it please let me know and I'll do what I can. We are also still looking for sponsors if you have any suggestions and sponsorships start as low as $999 and we'd be more than thrilled to get many at this level vs a few large ones. Happy to discuss in more detail at your convenience. -- Casey DuBois 616-808-6942 casey at grlug.org -------------- next part -------------- An HTML attachment was scrubbed... URL: From mfarver at mindbent.org Wed Sep 4 13:26:29 2013 From: mfarver at mindbent.org (Mark Farver) Date: Wed, 4 Sep 2013 13:26:29 -0400 Subject: [GRLUG] Fwd: Call for Participation! 2013! In-Reply-To: References: <20130904161820.E23D62B8458@conference.linuxsymposium.org> Message-ID: Who/what conference is this?? On Wed, Sep 4, 2013 at 12:55 PM, Casey DuBois wrote: > Hey GRLUG, > > They are still looking for proposals: > > > > Casey we're still looking for more proposals for the 2013 Symposium and > would like you to consider submitting something this week. Our focus has > always been on good content and this depends on getting lots of good > proposals to select from. I realize you're busy and this is why submitting > a full paper is optional this year if you don't have time to write one. If > you require some form of travel assistance to make it please let me know > and I'll do what I can. We are also still looking for sponsors if you have > any suggestions and sponsorships start as low as $999 and we'd be more than > thrilled to get many at this level vs a few large ones. Happy to discuss > in more detail at your convenience. > > > > > -- > Casey DuBois > 616-808-6942 > casey at grlug.org > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug From grlugcasey at gmail.com Wed Sep 4 13:31:47 2013 From: grlugcasey at gmail.com (Casey DuBois) Date: Wed, 4 Sep 2013 13:31:47 -0400 Subject: [GRLUG] Fwd: Call for Participation! 2013! In-Reply-To: References: <20130904161820.E23D62B8458@conference.linuxsymposium.org> Message-ID: linuxsymposium.org Regards, Casey DuBois 616-808-6942 On Sep 4, 2013, at 1:26 PM, Mark Farver wrote: > Who/what conference is this?? > > On Wed, Sep 4, 2013 at 12:55 PM, Casey DuBois wrote: >> Hey GRLUG, >> >> They are still looking for proposals: >> >> >> >> Casey we're still looking for more proposals for the 2013 Symposium and >> would like you to consider submitting something this week. Our focus has >> always been on good content and this depends on getting lots of good >> proposals to select from. I realize you're busy and this is why submitting >> a full paper is optional this year if you don't have time to write one. If >> you require some form of travel assistance to make it please let me know >> and I'll do what I can. We are also still looking for sponsors if you have >> any suggestions and sponsorships start as low as $999 and we'd be more than >> thrilled to get many at this level vs a few large ones. Happy to discuss >> in more detail at your convenience. >> >> >> >> >> -- >> Casey DuBois >> 616-808-6942 >> casey at grlug.org >> >> _______________________________________________ >> grlug mailing list >> grlug at grlug.org >> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug From ebever at researchintegration.org Wed Sep 4 19:12:27 2013 From: ebever at researchintegration.org (Eric Beversluis) Date: Wed, 04 Sep 2013 19:12:27 -0400 Subject: [GRLUG] problem with pkill/killall Message-ID: <1378336347.1566.8.camel@localhost.localdomain> My system has a problem in that its spawning multiple versions of a command and never ending the earlier versions. Why it's doing so is the next problem. But first I have to figure out how to kill them. As nearly as I can tell from the web and the man pages, I should be able to do that with 'pkill' or with 'killall', using part of the name. The processes are: root 27514 27508 0 18:20 ? 00:00:00 /bin/bash -c php -f /var/www/virtual/vtiger.cyberacc.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1 root 27517 27507 0 18:20 ? 00:00:00 /bin/bash -c php -f /var/www/virtual/vtiger.cyberacc.com/modules/CalendarSync/syncCalendarFromVT.php > /home/mundane/etc_cron_rept2.txt 2>&1 So it seems I should be able to do: pkill syncCalendarFrom or killall syncCalendarFrom and thus get rid of all of them. But neither seems to work. Some of my efforts: [root at server ~]# pkill syncCalendarFrom [root at server ~]# pkill "-c php -f /var/www/virtual/vtiger.server.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1" pkill: invalid option -- 'c' Usage: pkill [-SIGNAL] [-fvx] [-n|-o] [-P PPIDLIST] [-g PGRPLIST] [-s SIDLIST] [-u EUIDLIST] [-U UIDLIST] [-G GIDLIST] [-t TERMLIST] [PATTERN] [root at server ~]# pkill "php -f /var/www/virtual/vtiger.server.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1" ?? Thanks. From greg at gregfolkert.net Wed Sep 4 20:15:44 2013 From: greg at gregfolkert.net (Greg Folkert) Date: Wed, 04 Sep 2013 20:15:44 -0400 Subject: [GRLUG] problem with pkill/killall In-Reply-To: <1378336347.1566.8.camel@localhost.localdomain> References: <1378336347.1566.8.camel@localhost.localdomain> Message-ID: <1378340144.4016.8.camel@omg.gregfolkert.net> On Wed, 2013-09-04 at 19:12 -0400, Eric Beversluis wrote: > My system has a problem in that its spawning multiple versions of a > command and never ending the earlier versions. Why it's doing so is the > next problem. But first I have to figure out how to kill them. > > As nearly as I can tell from the web and the man pages, I should be able > to do that with 'pkill' or with 'killall', using part of the name. > > The processes are: > > root 27514 27508 0 18:20 ? 00:00:00 /bin/bash -c php > -f /var/www/virtual/vtiger.cyberacc.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1 > root 27517 27507 0 18:20 ? 00:00:00 /bin/bash -c php > -f /var/www/virtual/vtiger.cyberacc.com/modules/CalendarSync/syncCalendarFromVT.php > /home/mundane/etc_cron_rept2.txt 2>&1 > > So it seems I should be able to do: > > pkill syncCalendarFrom > > or killall syncCalendarFrom > > and thus get rid of all of them. But neither seems to work. > > Some of my efforts: > [root at server ~]# pkill syncCalendarFrom > [root at server ~]# pkill "-c php > -f /var/www/virtual/vtiger.server.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1" > pkill: invalid option -- 'c' > Usage: pkill [-SIGNAL] [-fvx] [-n|-o] [-P PPIDLIST] [-g PGRPLIST] [-s > SIDLIST] > [-u EUIDLIST] [-U UIDLIST] [-G GIDLIST] [-t TERMLIST] [PATTERN] > [root at server ~]# pkill "php > -f /var/www/virtual/vtiger.server.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1" > > ?? > > Thanks. Do you know the Parent Process ID? If so you can kill that and the pattern. Also try this if no dice: # pkill -9 -f syncCalendarFromGA.php ; \ pkill -9 -f syncCalendarFromGA.php ; \ pkill -9 -f syncCalendarFromGA.php ; \ pkill -9 -f syncCalendarFromGA.php ; \ pkill -9 -f syncCalendarFromGA.php ; \ pkill -9 -f syncCalendarFromGA.php If that doesn't do it... then add "-P $PPID" before the "-f" where you know the Parent ID in place of $PPID. You also have to use "-f" with pkill to get it to match anything other than "php" From the man page: -f, --full The pattern is normally only matched against the process name. When -f is set, the full command line is used. That is why I included it. -- greg at gregfolkert.net PGP key 1024D/B524687C 2003-08-05 Fingerprint: E1D3 E3D7 5850 957E FED0 2B3A ED66 6971 B524 687C "Wherever you go, go with all your heart." -- Confucius -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part URL: From ebever at researchintegration.org Wed Sep 4 22:08:09 2013 From: ebever at researchintegration.org (Eric Beversluis) Date: Wed, 04 Sep 2013 22:08:09 -0400 Subject: [GRLUG] problem with pkill/killall In-Reply-To: <1378340144.4016.8.camel@omg.gregfolkert.net> References: <1378336347.1566.8.camel@localhost.localdomain> <1378340144.4016.8.camel@omg.gregfolkert.net> Message-ID: <1378346889.1566.15.camel@localhost.localdomain> A. On Wed, 2013-09-04 at 20:15 -0400, Greg Folkert wrote: > On Wed, 2013-09-04 at 19:12 -0400, Eric Beversluis wrote: > > My system has a problem in that its spawning multiple versions of a > > command and never ending the earlier versions. Why it's doing so is the > > next problem. But first I have to figure out how to kill them. > > > > As nearly as I can tell from the web and the man pages, I should be able > > to do that with 'pkill' or with 'killall', using part of the name. > > > > The processes are: > > > > root 27514 27508 0 18:20 ? 00:00:00 /bin/bash -c php > > -f /var/www/virtual/vtiger.cyberacc.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1 > > root 27517 27507 0 18:20 ? 00:00:00 /bin/bash -c php > > -f /var/www/virtual/vtiger.cyberacc.com/modules/CalendarSync/syncCalendarFromVT.php > /home/mundane/etc_cron_rept2.txt 2>&1 > > > > So it seems I should be able to do: > > > > pkill syncCalendarFrom > > > > or killall syncCalendarFrom > > > > and thus get rid of all of them. But neither seems to work. > > > > Some of my efforts: > > [root at server ~]# pkill syncCalendarFrom > > [root at server ~]# pkill "-c php > > -f /var/www/virtual/vtiger.server.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1" > > pkill: invalid option -- 'c' > > Usage: pkill [-SIGNAL] [-fvx] [-n|-o] [-P PPIDLIST] [-g PGRPLIST] [-s > > SIDLIST] > > [-u EUIDLIST] [-U UIDLIST] [-G GIDLIST] [-t TERMLIST] [PATTERN] > > [root at server ~]# pkill "php > > -f /var/www/virtual/vtiger.server.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1" > > > > ?? > > > > Thanks. > > Do you know the Parent Process ID? If so you can kill that and the > pattern. Also try this if no dice: > > # pkill -9 -f syncCalendarFromGA.php ; \ > pkill -9 -f syncCalendarFromGA.php ; \ > pkill -9 -f syncCalendarFromGA.php ; \ > pkill -9 -f syncCalendarFromGA.php ; \ > pkill -9 -f syncCalendarFromGA.php ; \ > pkill -9 -f syncCalendarFromGA.php > > If that doesn't do it... then add "-P $PPID" before the "-f" where you > know the Parent ID in place of $PPID. > > You also have to use "-f" with pkill to get it to match anything other > than "php" > > From the man page: > > -f, --full > The pattern is normally only matched against the process > name. When -f is set, the full command line is used. > > That is why I included it. > ======== Thanks, Greg. --There seem to be many different parent processes, so that approach won't work here. --I didn't grasp the meaning of the -f option because I was thinking that the whole thing was the command--that's why I tried to put it in quotes. I gather, thinking about what you wrote, that only 'php' is the command. --also, the examples I saw didn't use the -9. Thanks again. From binki at gentoo.org Wed Sep 4 23:58:11 2013 From: binki at gentoo.org (Nathan Phillip Brink) Date: Thu, 5 Sep 2013 03:58:11 +0000 Subject: [GRLUG] problem with pkill/killall In-Reply-To: <1378346889.1566.15.camel@localhost.localdomain> References: <1378336347.1566.8.camel@localhost.localdomain> <1378340144.4016.8.camel@omg.gregfolkert.net> <1378346889.1566.15.camel@localhost.localdomain> Message-ID: <20130905035811.GO31099@ohnopublishing.net> On Wed, Sep 04, 2013 at 10:08:09PM -0400, Eric Beversluis wrote: > A. On Wed, 2013-09-04 at 20:15 -0400, Greg Folkert wrote: > > On Wed, 2013-09-04 at 19:12 -0400, Eric Beversluis wrote: > > > My system has a problem in that its spawning multiple versions of a > > > command and never ending the earlier versions. Why it's doing so is the > > > next problem. But first I have to figure out how to kill them. > > > > > > As nearly as I can tell from the web and the man pages, I should be able > > > to do that with 'pkill' or with 'killall', using part of the name. > > > > > > The processes are: > > > > > > root 27514 27508 0 18:20 ? 00:00:00 /bin/bash -c php > > > -f /var/www/virtual/vtiger.cyberacc.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1 > > > root 27517 27507 0 18:20 ? 00:00:00 /bin/bash -c php > > > -f /var/www/virtual/vtiger.cyberacc.com/modules/CalendarSync/syncCalendarFromVT.php > /home/mundane/etc_cron_rept2.txt 2>&1 > > > > > > So it seems I should be able to do: > > > > > > pkill syncCalendarFrom > > > > > > or killall syncCalendarFrom > > > > > > and thus get rid of all of them. But neither seems to work. > > > > > > Some of my efforts: > > > [root at server ~]# pkill syncCalendarFrom > > > [root at server ~]# pkill "-c php > > > -f /var/www/virtual/vtiger.server.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1" > > > pkill: invalid option -- 'c' > > > Usage: pkill [-SIGNAL] [-fvx] [-n|-o] [-P PPIDLIST] [-g PGRPLIST] [-s > > > SIDLIST] > > > [-u EUIDLIST] [-U UIDLIST] [-G GIDLIST] [-t TERMLIST] [PATTERN] > > > [root at server ~]# pkill "php > > > -f /var/www/virtual/vtiger.server.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1" > > > > > > ?? > > > > > > Thanks. > > > > Do you know the Parent Process ID? If so you can kill that and the > > pattern. Also try this if no dice: > > > > # pkill -9 -f syncCalendarFromGA.php ; \ > > pkill -9 -f syncCalendarFromGA.php ; \ > > pkill -9 -f syncCalendarFromGA.php ; \ > > pkill -9 -f syncCalendarFromGA.php ; \ > > pkill -9 -f syncCalendarFromGA.php ; \ > > pkill -9 -f syncCalendarFromGA.php > > > > If that doesn't do it... then add "-P $PPID" before the "-f" where you > > know the Parent ID in place of $PPID. > > > > You also have to use "-f" with pkill to get it to match anything other > > than "php" > > > > From the man page: > > > > -f, --full > > The pattern is normally only matched against the process > > name. When -f is set, the full command line is used. > > > > That is why I included it. > > > ======== > Thanks, Greg. > --There seem to be many different parent processes, so that approach > won't work here. > --I didn't grasp the meaning of the -f option because I was thinking > that the whole thing was the command--that's why I tried to put it in > quotes. I gather, thinking about what you wrote, that only 'php' is the > command. From the ps output you posted, if those are the particular procs you wanted to kill, only ?bash? is part of the command name itself. Which might lead you to run ?pkill bash? which would knock out the very shell you typed that into and, likely enough, even your X session. Now, I do wonder, are the procs in the ps output you showed actually the procs where the problem is happening? If this is so, then bash is somehow hung up weird. But I don?t immediately notice anything in those commands that would cause bash itself to hang up, so I am going to guess that different processes are actually hung up. I.e., I am going to guess that bash is doing fine and just waiting for other php procs to exit. Ideally, you would kill the process that is actually hung (php, not bash?) so that the others waiting on it can more gracefully exit (see the signal info below). > --also, the examples I saw didn't use the -9. -9 is equivalent to -KILL which means to send SIGKILL. If you don?t specify -9 or -KILL to killall or pkill, the default is -TERM which sends SIGTERM. Processes can catch and ?handle? (and, thus, ignore) SIGTERM. You should try using SIGTERM first because sometimes processes? SIGTERM handlers can do just a bit of cleanup and exit somewhat gracefully. For processes that are truly locked up, you may need to use SIGKILL which cannot be intercepted. > > Thanks again. > -- binki Look out for missing or extraneous apostrophes! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 836 bytes Desc: not available URL: From ebever at researchintegration.org Thu Sep 5 05:55:21 2013 From: ebever at researchintegration.org (Eric Beversluis) Date: Thu, 05 Sep 2013 05:55:21 -0400 Subject: [GRLUG] problem with pkill/killall In-Reply-To: <20130905035811.GO31099@ohnopublishing.net> References: <1378336347.1566.8.camel@localhost.localdomain> <1378340144.4016.8.camel@omg.gregfolkert.net> <1378346889.1566.15.camel@localhost.localdomain> <20130905035811.GO31099@ohnopublishing.net> Message-ID: <1378374921.1566.28.camel@localhost.localdomain> On Thu, 2013-09-05 at 03:58 +0000, Nathan Phillip Brink wrote: > On Wed, Sep 04, 2013 at 10:08:09PM -0400, Eric Beversluis wrote: > > A. On Wed, 2013-09-04 at 20:15 -0400, Greg Folkert wrote: > > > On Wed, 2013-09-04 at 19:12 -0400, Eric Beversluis wrote: > > > > My system has a problem in that its spawning multiple versions of a > > > > command and never ending the earlier versions. Why it's doing so is the > > > > next problem. But first I have to figure out how to kill them. > > > > > > > > As nearly as I can tell from the web and the man pages, I should be able > > > > to do that with 'pkill' or with 'killall', using part of the name. > > > > > > > > The processes are: > > > > > > > > root 27514 27508 0 18:20 ? 00:00:00 /bin/bash -c php > > > > -f /var/www/virtual/vtiger.cyberacc.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1 > > > > root 27517 27507 0 18:20 ? 00:00:00 /bin/bash -c php > > > > -f /var/www/virtual/vtiger.cyberacc.com/modules/CalendarSync/syncCalendarFromVT.php > /home/mundane/etc_cron_rept2.txt 2>&1 > > > > > > > > So it seems I should be able to do: > > > > > > > > pkill syncCalendarFrom > > > > > > > > or killall syncCalendarFrom > > > > > > > > and thus get rid of all of them. But neither seems to work. > > > > > > > > Some of my efforts: > > > > [root at server ~]# pkill syncCalendarFrom > > > > [root at server ~]# pkill "-c php > > > > -f /var/www/virtual/vtiger.server.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1" > > > > pkill: invalid option -- 'c' > > > > Usage: pkill [-SIGNAL] [-fvx] [-n|-o] [-P PPIDLIST] [-g PGRPLIST] [-s > > > > SIDLIST] > > > > [-u EUIDLIST] [-U UIDLIST] [-G GIDLIST] [-t TERMLIST] [PATTERN] > > > > [root at server ~]# pkill "php > > > > -f /var/www/virtual/vtiger.server.com/modules/CalendarSync/syncCalendarFromGA.php > /home/mundane/etc_cron_rept2.txt 2>&1" > > > > > > > > ?? > > > > > > > > Thanks. > > > > > > Do you know the Parent Process ID? If so you can kill that and the > > > pattern. Also try this if no dice: > > > > > > # pkill -9 -f syncCalendarFromGA.php ; \ > > > pkill -9 -f syncCalendarFromGA.php ; \ > > > pkill -9 -f syncCalendarFromGA.php ; \ > > > pkill -9 -f syncCalendarFromGA.php ; \ > > > pkill -9 -f syncCalendarFromGA.php ; \ > > > pkill -9 -f syncCalendarFromGA.php > > > > > > If that doesn't do it... then add "-P $PPID" before the "-f" where you > > > know the Parent ID in place of $PPID. > > > > > > You also have to use "-f" with pkill to get it to match anything other > > > than "php" > > > > > > From the man page: > > > > > > -f, --full > > > The pattern is normally only matched against the process > > > name. When -f is set, the full command line is used. > > > > > > That is why I included it. > > > > > ======== > > Thanks, Greg. > > --There seem to be many different parent processes, so that approach > > won't work here. > > --I didn't grasp the meaning of the -f option because I was thinking > > that the whole thing was the command--that's why I tried to put it in > > quotes. I gather, thinking about what you wrote, that only 'php' is the > > command. > > From the ps output you posted, if those are the particular procs you > wanted to kill, only ?bash? is part of the command name itself. Which > might lead you to run ?pkill bash? which would knock out the very > shell you typed that into and, likely enough, even your X session. > > Now, I do wonder, are the procs in the ps output you showed actually > the procs where the problem is happening? If this is so, then bash is > somehow hung up weird. But I don?t immediately notice anything in > those commands that would cause bash itself to hang up, so I am going > to guess that different processes are actually hung up. I.e., I am > going to guess that bash is doing fine and just waiting for other php > procs to exit. Ideally, you would kill the process that is actually > hung (php, not bash?) so that the others waiting on it can more > gracefully exit (see the signal info below). > The commands were generated by cron and have now been disabled: they ran every 10 minutes to sync vtiger calendar with Google calendar. I think the calendar in vtiger is somehow screwed up--it's showing 317000 events--probably a problem with calendar import, as many seem the same event entered over and over. My hypothesis is that the php sync processes weren't closing because they were never finishing with those 31700 events. So I have to clean those out before trying the sync process again. Hopefully we can clear that up with help from vtiger and from Boru corp. Regarding pkill: I ended up rebooting the server after disabling the cron commands. But now I understand better how I can use pkill in the future. Thanks to all. > > --also, the examples I saw didn't use the -9. > > -9 is equivalent to -KILL which means to send SIGKILL. If you don?t > specify -9 or -KILL to killall or pkill, the default is -TERM which > sends SIGTERM. Processes can catch and ?handle? (and, thus, ignore) > SIGTERM. You should try using SIGTERM first because sometimes > processes? SIGTERM handlers can do just a bit of cleanup and exit > somewhat gracefully. For processes that are truly locked up, you may > need to use SIGKILL which cannot be intercepted. > > > > > Thanks again. > > > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug From casey at grlug.org Sun Sep 8 14:55:57 2013 From: casey at grlug.org (Casey DuBois) Date: Sun, 8 Sep 2013 14:55:57 -0400 Subject: [GRLUG] I'll be out next week Message-ID: Hello Friends, I'm sad to inform you that Veronica's Mom Rosa Santos has passed and the kids and I are headed to SanDiego to be with Veronica and the rest of the Santos family. The Viewing is Thursday and funeral on Friday. I may be difficult to reach for a couple days but will have my phone and access to email. Casey DuBois 616-808-6942 casey at grlug.org -------------- next part -------------- An HTML attachment was scrubbed... URL: From geer at umich.edu Mon Sep 9 14:10:53 2013 From: geer at umich.edu (Rob Geer) Date: Mon, 9 Sep 2013 14:10:53 -0400 Subject: [GRLUG] Tech support position with Linux Message-ID: We have an opportunity open right now for the individual who is interested in tech support, likes open source technology, enjoys working with Linux and enjoys working on a small team where you can have a large impact. Our client is looking for an IT Support Technician in the West Michigan area for a contract position with possibility of going full time. *Description:* Provide technical assistance and support related to computer systems, hardware, and/or software. Provide back up support to IT Department Manager. Provide basic training of current system and/or software. Create documentation to assist with any basic training provided. Operational knowledge of server maintenance and builds. Troubleshoot problems and assist team members with problem resolution related to application use. Assist team members with problem solving related to current operating system. Be proficient in Microsoft Word, Excel & Access. Have working knowledge of Linux. *Requirements:* BS or BA in Information Systems, Computer Science, or related field is preferred. Must have excellent customer service skills. Good analytical, problem solving and organizational skills Ability to operate independently or as part of a team. Good oral and written communication skills. Please let me know if you are interested and I can forward your info to the recruiter. Thanks Rob Geer -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Tue Sep 10 11:32:05 2013 From: lvl at omnitec.net (L. V. Lammert) Date: Tue, 10 Sep 2013 10:32:05 -0500 (CDT) Subject: [GRLUG] Postfix Error info Message-ID: Occasionally we run across a misconfigured sending email server that throws errors [causing a reject here] such as "Hostname not found" [et al]. In trying to actually get the problem resolved at the sender, however, I have been unable to find any good explanations of such error, or where it occurs in the MTA handshake. IOW, "This might be the problem" is not very convincing to a chap that thinks their system IS configured properly, and they often ignore the problem entirely because so many OTHER email servers ignore such problems. Has anyone seen any good descriptions I can cite to help confince others to fix a problem with their mail server? (*Especially* Windoze, one of the most common offenders.) TIA! Lee From megadave at gmail.com Tue Sep 10 11:44:02 2013 From: megadave at gmail.com (megadave) Date: Tue, 10 Sep 2013 11:44:02 -0400 Subject: [GRLUG] Postfix Error info In-Reply-To: References: Message-ID: Does your receiver-SMTP not log the transactions, and provide specific details for cases where it rejects? It is certainly always better if you can specifically describe what the sending server is doing wrong. One issue that used to be common with windows based servers is the use of underscore in the "host name". Such names are illegal per RFC. Some receivers accept them, some reject, some can be configured. Ultimately, if the sender wishes to be able to send to you, it may come down to them demanding that their server operator identify and fix the problem. On Tue, Sep 10, 2013 at 11:32 AM, L. V. Lammert wrote: > Occasionally we run across a misconfigured sending email server that > throws errors [causing a reject here] such as "Hostname not found" [et > al]. > > In trying to actually get the problem resolved at the sender, however, I > have been unable to find any good explanations of such error, or where it > occurs in the MTA handshake. IOW, "This might be the problem" is not very > convincing to a chap that thinks their system IS configured properly, and > they often ignore the problem entirely because so many OTHER email servers > ignore such problems. > > Has anyone seen any good descriptions I can cite to help confince others > to fix a problem with their mail server? (*Especially* Windoze, one of the > most common offenders.) > > TIA! > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Tue Sep 10 11:56:06 2013 From: lvl at omnitec.net (L. V. Lammert) Date: Tue, 10 Sep 2013 10:56:06 -0500 (CDT) Subject: [GRLUG] Postfix Error info In-Reply-To: References: Message-ID: On Tue, 10 Sep 2013, megadave wrote: > Does your receiver-SMTP not log the transactions, and provide specific > details for cases where it rejects? > Sure, .. Postfix dutifully logs the error "Hostname not found"; *however* there is no definitive souce that I have been able to identify as to WHY Postfix identifies that error. > It is certainly always better if you can specifically describe what the > sending server is doing wrong. > Bingo! That's what I would like to do! Send a Postfix error to some dork that thinks THEIR email server is configured properly is useless; what I am looking for is a detailed explanation of the causes for such errors. > Ultimately, if the sender wishes to be able to send to you, it may come > down to them demanding that their server operator identify and fix the > problem. > Been there, tried that - the response is typically "we don't have a problem - it's YOUR problem because YOUR server is rejecting OUR email". Hence the discussion on a more definitive source of the problem. Lee From megadave at gmail.com Tue Sep 10 12:03:17 2013 From: megadave at gmail.com (megadave) Date: Tue, 10 Sep 2013 12:03:17 -0400 Subject: [GRLUG] Postfix Error info In-Reply-To: References: Message-ID: Well, I wouldnt say "send a postfix error" to the sender. I would use the error message to determine what the problem is. (eg, "your hostname has no DNS record", or "your hostname has an illegal character", etc) and then tell them THAT. Perhaps there is some documentation for postfix that might explain what that error means. I am used to SMTP servers that give specific information when they log an error that identifies exactly what the cause is. I also make it a point to know exactly what conditions under which a server I run does or does not accept mail from sender hosts. I'm assuming you've done the basics and verified that the sender is sending to the correct address, and that their email client is properly configured with their valid sender address. Do you know if your server rejects ALL mail from this sending server, or just from this one user? If you'd like to get more information about the SMTP transaction from this problematic sender, I could setup a temporary address on a server under my control, and you could have your sender attempt to email it. If mine rejects it, I would be able to tell you exactly why. If it accepts it, I may be able to provide details about the transaction that might help you identify why your server is rejecting it. On Tue, Sep 10, 2013 at 11:56 AM, L. V. Lammert wrote: > On Tue, 10 Sep 2013, megadave wrote: > > > Does your receiver-SMTP not log the transactions, and provide specific > > details for cases where it rejects? > > > Sure, .. Postfix dutifully logs the error "Hostname not found"; *however* > there is no definitive souce that I have been able to identify as to WHY > Postfix identifies that error. > > > It is certainly always better if you can specifically describe what the > > sending server is doing wrong. > > > Bingo! That's what I would like to do! Send a Postfix error to some dork > that thinks THEIR email server is configured properly is useless; what I > am looking for is a detailed explanation of the causes for such errors. > > > Ultimately, if the sender wishes to be able to send to you, it may come > > down to them demanding that their server operator identify and fix the > > problem. > > > Been there, tried that - the response is typically "we don't have a > problem - it's YOUR problem because YOUR server is rejecting OUR email". > > Hence the discussion on a more definitive source of the problem. > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Tue Sep 10 12:09:03 2013 From: lvl at omnitec.net (L. V. Lammert) Date: Tue, 10 Sep 2013 11:09:03 -0500 (CDT) Subject: [GRLUG] Postfix Error info In-Reply-To: References: Message-ID: On Tue, 10 Sep 2013, megadave wrote: > Well, I wouldnt say "send a postfix error" to the sender. I would use the > error message to determine what the problem is. (eg, "your hostname has no > DNS record", or "your hostname has an illegal character", etc) and then > tell them THAT. > "Invalid Hostname" or "Hostname not found" is tantamount to a Postfix error, .. "your hostname has no DNS record" may, or may not be a cause. It could be a "_", as mentioned, .. it could be no reverse DNS, ,.. it could be no MX record (!!), .. That's why I am looking for more definitive reasons FOR the erros that Postfix throws. > Perhaps there is some documentation for postfix that might explain what > that error means. I am used to SMTP servers that give specific information > when they log an error that identifies exactly what the cause is. > What sort of SMTP servers and sample errors? I have used Sendmail & Postfix, and the errors have always been similar to the ones mentioned. > I'm assuming you've done the basics and verified that the sender is sending > to the correct address, and that their email client is properly configured > with their valid sender address. Do you know if your server rejects ALL > mail from this sending server, or just from this one user? > The server is being rejected, .. > If you'd like to get more information about the SMTP transaction from this > problematic sender, I could setup a temporary address on a server under my > control, and you could have your sender attempt to email it. If mine > rejects it, I would be able to tell you exactly why. If it accepts it, I > may be able to provide details about the transaction that might help you > identify why your server is rejecting it. > As could I - what SMTP are you using that provides specific errors if not sendmail, Postfix, or perhaps smptd? Lee From megadave at gmail.com Tue Sep 10 12:42:51 2013 From: megadave at gmail.com (megadave) Date: Tue, 10 Sep 2013 12:42:51 -0400 Subject: [GRLUG] Postfix Error info In-Reply-To: References: Message-ID: Do you know the IP address of the sender host? Does it show in the logs? Have you checked to see if it has a PTR record, with a matching A record? Does postfix log the "HELO" argument sent by the sending server? What is it? Does it contain only valid characters? I use Exim. If it rejects a host, it clearly shows the IP address of the rejected server, as well as the specific configured reason it was rejected, wether thts based on IP address, remote hostname, sender address or domain, etc). It shows the HELO name given by the server. If it is configured to check matching forward/reverse DNS, if it finds a mismatch, it clearly logs the specific host name and IP address which it finds to mismatch. It can even be configured to log the individual lines of the SMTP connection (HELO/EHLO, MAIL FROM, RCPT TO) as well as its responses, as well as the full headers of messages rejected after "DATA", if desired (this can be per-sender-host, if needed for intensive debugging) I can even "fake" a connection from a specified IP address, and see what checks it is processing as it performs them, and see if/where it fails a check, based on what information. On Tue, Sep 10, 2013 at 12:09 PM, L. V. Lammert wrote: > On Tue, 10 Sep 2013, megadave wrote: > > > Well, I wouldnt say "send a postfix error" to the sender. I would use > the > > error message to determine what the problem is. (eg, "your hostname has > no > > DNS record", or "your hostname has an illegal character", etc) and then > > tell them THAT. > > > "Invalid Hostname" or "Hostname not found" is tantamount to a Postfix > error, .. "your hostname has no DNS record" may, or may not be a cause. It > could be a "_", as mentioned, .. it could be no reverse DNS, ,.. it could > be no MX record (!!), .. > > That's why I am looking for more definitive reasons FOR the erros that > Postfix throws. > > > Perhaps there is some documentation for postfix that might explain what > > that error means. I am used to SMTP servers that give specific > information > > when they log an error that identifies exactly what the cause is. > > > What sort of SMTP servers and sample errors? I have used Sendmail & > Postfix, and the errors have always been similar to the ones mentioned. > > > I'm assuming you've done the basics and verified that the sender is > sending > > to the correct address, and that their email client is properly > configured > > with their valid sender address. Do you know if your server rejects ALL > > mail from this sending server, or just from this one user? > > > The server is being rejected, .. > > > If you'd like to get more information about the SMTP transaction from > this > > problematic sender, I could setup a temporary address on a server under > my > > control, and you could have your sender attempt to email it. If mine > > rejects it, I would be able to tell you exactly why. If it accepts it, I > > may be able to provide details about the transaction that might help you > > identify why your server is rejecting it. > > > As could I - what SMTP are you using that provides specific errors if not > sendmail, Postfix, or perhaps smptd? > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From megadave at gmail.com Tue Sep 10 12:48:16 2013 From: megadave at gmail.com (megadave) Date: Tue, 10 Sep 2013 12:48:16 -0400 Subject: [GRLUG] Postfix Error info In-Reply-To: References: Message-ID: By the way, if you'd prefer to take this off-list feel free to email me directly. I'm happy to offer whatever help I can to get to the bottom of the problem, especially if it means proving some windows email admin wrong :) On Tue, Sep 10, 2013 at 12:09 PM, L. V. Lammert wrote: > On Tue, 10 Sep 2013, megadave wrote: > > > Well, I wouldnt say "send a postfix error" to the sender. I would use > the > > error message to determine what the problem is. (eg, "your hostname has > no > > DNS record", or "your hostname has an illegal character", etc) and then > > tell them THAT. > > > "Invalid Hostname" or "Hostname not found" is tantamount to a Postfix > error, .. "your hostname has no DNS record" may, or may not be a cause. It > could be a "_", as mentioned, .. it could be no reverse DNS, ,.. it could > be no MX record (!!), .. > > That's why I am looking for more definitive reasons FOR the erros that > Postfix throws. > > > Perhaps there is some documentation for postfix that might explain what > > that error means. I am used to SMTP servers that give specific > information > > when they log an error that identifies exactly what the cause is. > > > What sort of SMTP servers and sample errors? I have used Sendmail & > Postfix, and the errors have always been similar to the ones mentioned. > > > I'm assuming you've done the basics and verified that the sender is > sending > > to the correct address, and that their email client is properly > configured > > with their valid sender address. Do you know if your server rejects ALL > > mail from this sending server, or just from this one user? > > > The server is being rejected, .. > > > If you'd like to get more information about the SMTP transaction from > this > > problematic sender, I could setup a temporary address on a server under > my > > control, and you could have your sender attempt to email it. If mine > > rejects it, I would be able to tell you exactly why. If it accepts it, I > > may be able to provide details about the transaction that might help you > > identify why your server is rejecting it. > > > As could I - what SMTP are you using that provides specific errors if not > sendmail, Postfix, or perhaps smptd? > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Tue Sep 10 12:55:26 2013 From: lvl at omnitec.net (L. V. Lammert) Date: Tue, 10 Sep 2013 11:55:26 -0500 (CDT) Subject: [GRLUG] Postfix Error info In-Reply-To: References: Message-ID: On Tue, 10 Sep 2013, megadave wrote: > Do you know the IP address of the sender host? Does it show in the logs? > Have you checked to see if it has a PTR record, with a matching A record? > Of course, .. but that isn't the point, is it? We run Postfix on a lot of systems, .. what I need is some pointers to definitive reasons for the errors that Postfix logs. > I use Exim. If it rejects a host, it clearly shows the IP address of the > rejected server, as well as the specific configured reason it was rejected, > wether thts based on IP address, remote hostname, sender address or domain, > etc). It shows the HELO name given by the server. > Interesting, .. it would seem that Exim errors are pretty detailed: 2013-09-10 11:48:20 [26739] SMTP connection from (asp3.picsightly.com) [173.232.185.87]:31375 I=[198.46.86.21]:25 closed by DROP in ACL 2013-09-10 11:48:18 [26772] no MAIL in SMTP connection from localhost [127.0.0.1]:57599 I=[127.0.0.1]:25 D=0s A=courier_plain:__cpanel__service__auth__exim__qoSALPdhlekDjXf6ox3DgSooewwCBSmtPgeLB0LZnXVrGdNonddvnLPIuSnrEQEE C=EHLO,AUTH,QUIT I have also seen some benefits in Exim (rate limiting, for example), but none of the major distros use it. Interesting, however, that the link to New User documentation is nonfunctionsl? > I can even "fake" a connection from a specified IP address, and see what > checks it is processing as it performs them, and see if/where it fails a > check, based on what information. > How complicated is the config for Exim WRT SPAM/Virus/Blasklist? Will it do a 'milter' style process (i.e. reject SPAM before accepting)? Thanks! Lee From binki at gentoo.org Tue Sep 10 12:57:18 2013 From: binki at gentoo.org (Nathan Phillip Brink) Date: Tue, 10 Sep 2013 16:57:18 +0000 Subject: [GRLUG] Postfix Error info In-Reply-To: References: Message-ID: <20130910165718.GT31099@ohnopublishing.net> On Tue, Sep 10, 2013 at 11:09:03AM -0500, L. V. Lammert wrote: > On Tue, 10 Sep 2013, megadave wrote: > > > Well, I wouldnt say "send a postfix error" to the sender. I would use the > > error message to determine what the problem is. (eg, "your hostname has no > > DNS record", or "your hostname has an illegal character", etc) and then > > tell them THAT. > > > "Invalid Hostname" or "Hostname not found" is tantamount to a Postfix > error, .. "your hostname has no DNS record" may, or may not be a cause. It > could be a "_", as mentioned, .. it could be no reverse DNS, ,.. it could > be no MX record (!!), .. > > That's why I am looking for more definitive reasons FOR the erros that > Postfix throws. Have you tried looking postfix?s debug_peer_list configuration option? See the smtpd manpage. You can list hostnames/IPs that postfix should log extensively about. You can cause postfix to show the progress of the SMTP conversation, to some extent, depending on what you set debug_peer_level to. Maybe this information can reveal any root problems... > > Perhaps there is some documentation for postfix that might explain what > > that error means. I am used to SMTP servers that give specific information > > when they log an error that identifies exactly what the cause is. > > > What sort of SMTP servers and sample errors? I have used Sendmail & > Postfix, and the errors have always been similar to the ones mentioned. > > > I'm assuming you've done the basics and verified that the sender is sending > > to the correct address, and that their email client is properly configured > > with their valid sender address. Do you know if your server rejects ALL > > mail from this sending server, or just from this one user? > > > The server is being rejected, .. > > > If you'd like to get more information about the SMTP transaction from this > > problematic sender, I could setup a temporary address on a server under my > > control, and you could have your sender attempt to email it. If mine > > rejects it, I would be able to tell you exactly why. If it accepts it, I > > may be able to provide details about the transaction that might help you > > identify why your server is rejecting it. > > > As could I - what SMTP are you using that provides specific errors if not > sendmail, Postfix, or perhaps smptd? > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug -- binki Look out for missing or extraneous apostrophes! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 836 bytes Desc: not available URL: From megadave at gmail.com Tue Sep 10 13:04:11 2013 From: megadave at gmail.com (megadave) Date: Tue, 10 Sep 2013 13:04:11 -0400 Subject: [GRLUG] Postfix Error info In-Reply-To: References: Message-ID: Unfortunately some mail servers logs are quite useless. It is possible that Postfix simply does not provide useful information. It has been a long time since I have done any advanced exim configuration (I only run it on a personal server with a fairly basic setup now), but if you take the time to learn it, it can do damn near anything you want. You can write ACL's that can check pretty much anything at any step of the SMTP process, and take a variety of actions. You can have variables to count various "spammy" aspects of a message, and then reject based on the value of the resultant count. It can invoke SpamAssasin to perform all of its various checks. It can call ClamAV and incorporate its results into its processing. It can check any number of DNSBL's in whtever order you want, and take a configurable action based on the results of each. You can have local lists of blocked IP's. (or whitelists which override DNSBL results) And then it can be configured to deliver or relay mail in pretty much any manner you wish based on whatever routing information you want. static list of valid addresses.. query an sql for valid accounts or domains. check unix users, check existance of user directory.. Delivery to file? (Maildir, mbox, etc) sure. run a local MDA? sure. Deliver to smarthost? sure. Its config file is pretty much a programming language unto itself. On Tue, Sep 10, 2013 at 12:55 PM, L. V. Lammert wrote: > On Tue, 10 Sep 2013, megadave wrote: > > > Do you know the IP address of the sender host? Does it show in the logs? > > Have you checked to see if it has a PTR record, with a matching A record? > > > Of course, .. but that isn't the point, is it? > > We run Postfix on a lot of systems, .. what I need is some pointers to > definitive reasons for the errors that Postfix logs. > > > I use Exim. If it rejects a host, it clearly shows the IP address of the > > rejected server, as well as the specific configured reason it was > rejected, > > wether thts based on IP address, remote hostname, sender address or > domain, > > etc). It shows the HELO name given by the server. > > > Interesting, .. it would seem that Exim errors are pretty detailed: > > 2013-09-10 11:48:20 [26739] SMTP connection from (asp3.picsightly.com) > [173.232.185.87]:31375 I=[198.46.86.21]:25 closed by DROP in ACL > > 2013-09-10 11:48:18 [26772] no MAIL in SMTP connection from localhost > [127.0.0.1]:57599 I=[127.0.0.1]:25 D=0s > > A=courier_plain:__cpanel__service__auth__exim__qoSALPdhlekDjXf6ox3DgSooewwCBSmtPgeLB0LZnXVrGdNonddvnLPIuSnrEQEE > C=EHLO,AUTH,QUIT > > I have also seen some benefits in Exim (rate limiting, for example), but > none of the major distros use it. Interesting, however, that the link to > New User documentation is nonfunctionsl? > > > I can even "fake" a connection from a specified IP address, and see what > > checks it is processing as it performs them, and see if/where it fails a > > check, based on what information. > > > How complicated is the config for Exim WRT SPAM/Virus/Blasklist? Will it > do a 'milter' style process (i.e. reject SPAM before accepting)? > > Thanks! > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Mon Sep 23 19:01:31 2013 From: lvl at omnitec.net (L. V. Lammert) Date: Mon, 23 Sep 2013 18:01:31 -0500 (CDT) Subject: [GRLUG] Any Impress 'power users'? Message-ID: Trying to add some animations for a big presentation next week (Impress 3.5), .. and the slide transitions are workable. Unfortunately, the 'element' transitions do not seem to including anything like a 'reveal one item at a time' that I have seen in a number of other presentations. Don't suppose anyone has done that with Impress? Thanks! Lee From ebever at researchintegration.org Tue Sep 24 23:43:08 2013 From: ebever at researchintegration.org (Eric Beversluis) Date: Tue, 24 Sep 2013 23:43:08 -0400 Subject: [GRLUG] VPN access to website on LAN Message-ID: <1380080588.1593.6.camel@localhost.localdomain> I've got a website set up on our server at work (ClearOS); the website also has a production version at GoDaddy. I've got the local DNS on the server working so I can get to the local version from the LAN. But now I'm trying to do the same thing when connected via pptp from home, and all I can get is the GoDaddy version. I know the VPN connection is working, since I can connect to hosts at work with their private IP addresses and log into the ClearOS webconfig using 192.168.1.1. I can use RDP to connect to a Windows server on the LAN that has no public IP address. There's stuff online about how to set up Windows to either have the browser go through the VPN or not, but I haven't found anything about how to do it in Linux. I saw something that suggested that the browser should go through the VPN by default. But mine is clearly not doing that. I've tried clearing my browser cache and also rebooting the computer. What am I missing? Thanks. From megadave at gmail.com Wed Sep 25 03:13:49 2013 From: megadave at gmail.com (megadave) Date: Wed, 25 Sep 2013 03:13:49 -0400 Subject: [GRLUG] VPN access to website on LAN In-Reply-To: <1380080588.1593.6.camel@localhost.localdomain> References: <1380080588.1593.6.camel@localhost.localdomain> Message-ID: your local linux box isn't using the remote DNS. Easiest way to fix it is to add an entry in /etc/hosts on the local linux machine, with the name of the site and the IP of the "at work" server. On Tue, Sep 24, 2013 at 11:43 PM, Eric Beversluis wrote: > I've got a website set up on our server at work (ClearOS); the website > also has a production version at GoDaddy. I've got the local DNS on the > server working so I can get to the local version from the LAN. But now > I'm trying to do the same thing when connected via pptp from home, and > all I can get is the GoDaddy version. > > I know the VPN connection is working, since I can connect to hosts at > work with their private IP addresses and log into the ClearOS webconfig > using 192.168.1.1. I can use RDP to connect to a Windows server on the > LAN that has no public IP address. > > There's stuff online about how to set up Windows to either have the > browser go through the VPN or not, but I haven't found anything about > how to do it in Linux. I saw something that suggested that the browser > should go through the VPN by default. But mine is clearly not doing > that. I've tried clearing my browser cache and also rebooting the > computer. > > What am I missing? > > Thanks. > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug From ebever at researchintegration.org Wed Sep 25 07:57:33 2013 From: ebever at researchintegration.org (Eric Beversluis) Date: Wed, 25 Sep 2013 07:57:33 -0400 Subject: [GRLUG] VPN access to website on LAN In-Reply-To: References: <1380080588.1593.6.camel@localhost.localdomain> Message-ID: <1380110253.1593.12.camel@localhost.localdomain> Strange--it's working now without any addition to /etc/hosts. I don't know what did it. It seemed to start working after I went into Firefox to Edit>Preferences>Advanced>Network>Settings and changed "Use system proxy settings" to "No proxy." But when I changed FF back to "Use system proxy settings" it continued to work, even after clearing all Firefox history. I had earlier found that traceroute to the website URL worked correctly and that wget www.website.com correctly fetched the index page of the site. Whatever. Thanks. On Wed, 2013-09-25 at 03:13 -0400, megadave wrote: > your local linux box isn't using the remote DNS. > > Easiest way to fix it is to add an entry in /etc/hosts on the local > linux machine, with the name of the site and the IP of the "at work" > server. > > On Tue, Sep 24, 2013 at 11:43 PM, Eric Beversluis > wrote: > > I've got a website set up on our server at work (ClearOS); the website > > also has a production version at GoDaddy. I've got the local DNS on the > > server working so I can get to the local version from the LAN. But now > > I'm trying to do the same thing when connected via pptp from home, and > > all I can get is the GoDaddy version. > > > > I know the VPN connection is working, since I can connect to hosts at > > work with their private IP addresses and log into the ClearOS webconfig > > using 192.168.1.1. I can use RDP to connect to a Windows server on the > > LAN that has no public IP address. > > > > There's stuff online about how to set up Windows to either have the > > browser go through the VPN or not, but I haven't found anything about > > how to do it in Linux. I saw something that suggested that the browser > > should go through the VPN by default. But mine is clearly not doing > > that. I've tried clearing my browser cache and also rebooting the > > computer. > > > > What am I missing? > > > > Thanks. > > > > _______________________________________________ > > grlug mailing list > > grlug at grlug.org > > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug From awilliam at whitemice.org Wed Sep 25 08:09:01 2013 From: awilliam at whitemice.org (Adam Tauno Williams) Date: Wed, 25 Sep 2013 08:09:01 -0400 Subject: [GRLUG] VPN access to website on LAN In-Reply-To: <1380080588.1593.6.camel@localhost.localdomain> References: <1380080588.1593.6.camel@localhost.localdomain> Message-ID: <1380110941.2017.5.camel@linux-86wr.site> On Tue, 2013-09-24 at 23:43 -0400, Eric Beversluis wrote: > I've got a website set up on our server at work (ClearOS); the website > also has a production version at GoDaddy. I've got the local DNS on the > server working so I can get to the local version from the LAN. But now > I'm trying to do the same thing when connected via pptp from home, and > all I can get is the GoDaddy version. You need to use the VPN's remote DNS server, at least for the domain of the VPN's network. If you are hitting public DNS when connected to a private network then nothing will work as expected. DNS cache [local/application] can also be an issue when you start/stop VPN [or any] network connections with applications active. > I know the VPN connection is working, since I can connect to hosts at > work with their private IP addresses and log into the ClearOS webconfig > using 192.168.1.1. I can use RDP to connect to a Windows server on the > LAN that has no public IP address. > There's stuff online about how to set up Windows to either have the > browser go through the VPN or not, but I haven't found anything about > how to do it in Linux. There is dialog for VPN connection DNS settings in NetworkManager. -- Adam Tauno Williams GPG D95ED383 Systems Administrator, Python Developer, LPI / NCLA From ebever at researchintegration.org Wed Sep 25 10:30:49 2013 From: ebever at researchintegration.org (Eric Beversluis) Date: Wed, 25 Sep 2013 10:30:49 -0400 Subject: [GRLUG] VPN access to website on LAN In-Reply-To: <1380110941.2017.5.camel@linux-86wr.site> References: <1380080588.1593.6.camel@localhost.localdomain> <1380110941.2017.5.camel@linux-86wr.site> Message-ID: <1380119449.1593.17.camel@localhost.localdomain> On Wed, 2013-09-25 at 08:09 -0400, Adam Tauno Williams wrote: > On Tue, 2013-09-24 at 23:43 -0400, Eric Beversluis wrote: > > I've got a website set up on our server at work (ClearOS); the website > > also has a production version at GoDaddy. I've got the local DNS on the > > server working so I can get to the local version from the LAN. But now > > I'm trying to do the same thing when connected via pptp from home, and > > all I can get is the GoDaddy version. > > You need to use the VPN's remote DNS server, at least for the domain of > the VPN's network. If you are hitting public DNS when connected to a > private network then nothing will work as expected. > > DNS cache [local/application] can also be an issue when you start/stop > VPN [or any] network connections with applications active. > > > I know the VPN connection is working, since I can connect to hosts at > > work with their private IP addresses and log into the ClearOS webconfig > > using 192.168.1.1. I can use RDP to connect to a Windows server on the > > LAN that has no public IP address. > > > There's stuff online about how to set up Windows to either have the > > browser go through the VPN or not, but I haven't found anything about > > how to do it in Linux. > > There is dialog for VPN connection DNS settings in NetworkManager. I had entered 192.168.1.1 in Configure > Additional DNS servers. This didn't seem to override the DNS cache in FF. Clearing all recent history in FF also did not seem sufficient. In the end it seemed I had to reopen FF and then clear history, once the pptp connection was made. As I understand it, there's no OS DNS cache in Linux, unless nscd, bind, or dnsmasq are running (http://stackoverflow.com/questions/11020027/dns-caching-in-linux) Thanks. From mfarver at mindbent.org Wed Sep 25 10:52:42 2013 From: mfarver at mindbent.org (Mark Farver) Date: Wed, 25 Sep 2013 10:52:42 -0400 Subject: [GRLUG] VPN access to website on LAN In-Reply-To: <1380119449.1593.17.camel@localhost.localdomain> References: <1380080588.1593.6.camel@localhost.localdomain> <1380110941.2017.5.camel@linux-86wr.site> <1380119449.1593.17.camel@localhost.localdomain> Message-ID: On Sep 25, 2013 10:31 AM, "Eric Beversluis" wrote: > > As I understand it, there's no OS DNS cache in Linux, unless nscd, bind, > or dnsmasq are running Firefox has its own internal DNS cache, I think. http://en.kioskea.net/faq/555-disabling-the-dns-cache-in-mozilla-firefox -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Wed Sep 25 11:32:28 2013 From: lvl at omnitec.net (L. V. Lammert) Date: Wed, 25 Sep 2013 10:32:28 -0500 (CDT) Subject: [GRLUG] VPN access to website on LAN In-Reply-To: <1380119449.1593.17.camel@localhost.localdomain> References: <1380080588.1593.6.camel@localhost.localdomain> <1380110941.2017.5.camel@linux-86wr.site> <1380119449.1593.17.camel@localhost.localdomain> Message-ID: On Wed, 25 Sep 2013, Eric Beversluis wrote: > I had entered 192.168.1.1 in Configure > Additional DNS servers. This > didn't seem to override the DNS cache in FF. > Adding an *additional* DNS server will not solve the problem, as the system is just as likely to hit an external server. The best fix was already mentioned - a hosts entry. If you truly wish to run a local DNS server to handle the situation, you will need a split horizon tool such as dnsmasq. Lee From lvl at omnitec.net Wed Sep 25 11:43:29 2013 From: lvl at omnitec.net (L. V. Lammert) Date: Wed, 25 Sep 2013 10:43:29 -0500 (CDT) Subject: [GRLUG] VPN access to website on LAN In-Reply-To: <1380110253.1593.12.camel@localhost.localdomain> References: <1380080588.1593.6.camel@localhost.localdomain> <1380110253.1593.12.camel@localhost.localdomain> Message-ID: On Wed, 25 Sep 2013, Eric Beversluis wrote: > Strange--it's working now without any addition to /etc/hosts. > If you added the DNS server on the other end as an additional server, it could be that you just happened to use that server for these queries - which means it will exhibit the previous behavior when the remote system picks a different DNS server for queries.. Lee From lvl at omnitec.net Wed Sep 25 12:09:30 2013 From: lvl at omnitec.net (L. V. Lammert) Date: Wed, 25 Sep 2013 11:09:30 -0500 (CDT) Subject: [GRLUG] AirOS Expertise Message-ID: Have an interesting problem configuring an AirOS (Ubiquity) link as a replacement for a VPN (i.e. not a bridge), .. does anyone know the system well, or know someone that would like to consult to assist in building the config? The docs are very complete, but I almost bricked one side already and would prefer to have some direction on the configuration. Lee From greg at gregfolkert.net Wed Sep 25 12:47:32 2013 From: greg at gregfolkert.net (Greg Folkert) Date: Wed, 25 Sep 2013 12:47:32 -0400 Subject: [GRLUG] AirOS Expertise In-Reply-To: References: Message-ID: <1380127652.19030.84.camel@omg.gregfolkert.net> On Wed, 2013-09-25 at 11:09 -0500, L. V. Lammert wrote: > Have an interesting problem configuring an AirOS (Ubiquity) link as a > replacement for a VPN (i.e. not a bridge), .. does anyone know the system > well, or know someone that would like to consult to assist in building the > config? > > The docs are very complete, but I almost bricked one side already and > would prefer to have some direction on the configuration. > > Lee So, Lee, how is this any different than using OpenSwan? Other than the fact you've almost bricked a proprietary system and still can't get the link to work? I'm just asking, since, if you'd have used "a cobbled together POS" with some old POS linux machine and OpenSWAN... you might have already been done and up and running... because you know... it was cobbled together. I'm not mad or anything, so temper your answer here, please. I'm just wonder how AirOS is "better"... huh? -- greg at gregfolkert.net PGP key 1024D/B524687C 2003-08-05 Fingerprint: E1D3 E3D7 5850 957E FED0 2B3A ED66 6971 B524 687C "If I am what I have and if I lose what I have who then am I?" -- Erich Fromm -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part URL: From lvl at omnitec.net Wed Sep 25 12:57:17 2013 From: lvl at omnitec.net (L. V. Lammert) Date: Wed, 25 Sep 2013 11:57:17 -0500 Subject: [GRLUG] AirOS Expertise In-Reply-To: <1380127652.19030.84.camel@omg.gregfolkert.net> References: <1380127652.19030.84.camel@omg.gregfolkert.net> Message-ID: <201309251657.r8PGvFlG000027@Mail.omnitec.net> At 11:47 AM 9/25/2013, Greg Folkert wrote: >So, Lee, how is this any different than using OpenSwan? Other than the >fact you've almost bricked a proprietary system and still can't get the >link to work? Well, for one the HW is weather proof, the antenna includes all system HW, and runs on POE, .. sufficient ? Besides, at $500 it is cheaper than purchasing two machines, much less making them weatherproof. >I'm just asking, since, if you'd have used "a cobbled together POS" with >some old POS linux machine and OpenSWAN... you might have already been >done and up and running... because you know... it was cobbled together. See above! Lee From greg at gregfolkert.net Wed Sep 25 13:32:28 2013 From: greg at gregfolkert.net (Greg Folkert) Date: Wed, 25 Sep 2013 13:32:28 -0400 Subject: [GRLUG] AirOS Expertise In-Reply-To: <201309251657.r8PGvFlG000027@Mail.omnitec.net> References: <1380127652.19030.84.camel@omg.gregfolkert.net> <201309251657.r8PGvFlG000027@Mail.omnitec.net> Message-ID: <1380130348.19030.91.camel@omg.gregfolkert.net> On Wed, 2013-09-25 at 11:57 -0500, L. V. Lammert wrote: > At 11:47 AM 9/25/2013, Greg Folkert wrote: > >So, Lee, how is this any different than using OpenSwan? Other than the > >fact you've almost bricked a proprietary system and still can't get the > >link to work? > > Well, for one the HW is weather proof, the antenna includes all > system HW, and runs on POE, .. sufficient ? Besides, at $500 it is > cheaper than purchasing two machines, much less making them weatherproof. > > >I'm just asking, since, if you'd have used "a cobbled together POS" with > >some old POS linux machine and OpenSWAN... you might have already been > >done and up and running... because you know... it was cobbled together. > > See above! > > Lee Oh, I see... Much much better. Refurb'd ITX chassis machines use about 8W and can be had for $40. Another $20 for a weather proof enclosure... and those ITX machines typically can run on what POE can provides... and Antennas aren't that much. Plus I could ssh into the thing and update/fix it with more convenience. I see... AirOS truly much better, plus you get the bricking and complete documentation for free free. What a deal. No, now I'm getting into sarcasm. -- greg at gregfolkert.net PGP key 1024D/B524687C 2003-08-05 Fingerprint: E1D3 E3D7 5850 957E FED0 2B3A ED66 6971 B524 687C "If I am what I have and if I lose what I have who then am I?" -- Erich Fromm -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part URL: From matthew at threadlight.com Wed Sep 25 14:29:12 2013 From: matthew at threadlight.com (Matthew Seeley) Date: Wed, 25 Sep 2013 14:29:12 -0400 Subject: [GRLUG] AirOS Expertise In-Reply-To: <1380130348.19030.91.camel@omg.gregfolkert.net> References: <1380127652.19030.84.camel@omg.gregfolkert.net> <201309251657.r8PGvFlG000027@Mail.omnitec.net> <1380130348.19030.91.camel@omg.gregfolkert.net> Message-ID: I'm not an expert in AirOS by any means, but I'm using AirOS and Ubiquiti gear regularly. I don't believe AirOS has any built-in VPN capabilities out-of-the-box. I believe you need additional hardware (use the Ubiquiti gear for a PtP link, and then a second device for VPN). Alternatively, I could see it potentially working if you flash some sort of custom software to the devices (hacked AirOS, or some other custom stuff). I have no experience with that. = = = You mention you've "almost bricked" it once before. Do you mind explaining how? I've had zero problems with AirOS. I have at least 14 of these devices and never experienced a 'bricked' problem. (In fact, even when I mis-configure them, I've never seen a problem that couldn't be solved by clicking the reset button.) Are you flashing some sort of custom firmware / custom software to these devices? -- Matthew Seeley Threadlight Systems PO Box 2909 Grand Rapids, MI. 49501 (616) 328-5649 On Wed, Sep 25, 2013 at 1:32 PM, Greg Folkert wrote: > On Wed, 2013-09-25 at 11:57 -0500, L. V. Lammert wrote: > > At 11:47 AM 9/25/2013, Greg Folkert wrote: > > >So, Lee, how is this any different than using OpenSwan? Other than the > > >fact you've almost bricked a proprietary system and still can't get the > > >link to work? > > > > Well, for one the HW is weather proof, the antenna includes all > > system HW, and runs on POE, .. sufficient ? Besides, at $500 it is > > cheaper than purchasing two machines, much less making them weatherproof. > > > > >I'm just asking, since, if you'd have used "a cobbled together POS" with > > >some old POS linux machine and OpenSWAN... you might have already been > > >done and up and running... because you know... it was cobbled together. > > > > See above! > > > > Lee > > Oh, I see... Much much better. > > Refurb'd ITX chassis machines use about 8W and can be had for $40. > Another $20 for a weather proof enclosure... and those ITX machines > typically can run on what POE can provides... and Antennas aren't that > much. Plus I could ssh into the thing and update/fix it with more > convenience. > > I see... AirOS truly much better, plus you get the bricking and complete > documentation for free free. What a deal. > > No, now I'm getting into sarcasm. > -- > greg at gregfolkert.net > PGP key 1024D/B524687C 2003-08-05 > Fingerprint: E1D3 E3D7 5850 957E FED0 2B3A ED66 6971 B524 687C > "If I am what I have and if I lose what I have who then am I?" > -- Erich Fromm > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Wed Sep 25 14:43:33 2013 From: lvl at omnitec.net (L. V. Lammert) Date: Wed, 25 Sep 2013 13:43:33 -0500 (CDT) Subject: [GRLUG] AirOS Expertise In-Reply-To: References: <1380127652.19030.84.camel@omg.gregfolkert.net> <201309251657.r8PGvFlG000027@Mail.omnitec.net> <1380130348.19030.91.camel@omg.gregfolkert.net> Message-ID: On Wed, 25 Sep 2013, Matthew Seeley wrote: > I'm not an expert in AirOS by any means, but I'm using AirOS and Ubiquiti > gear regularly. > > I don't believe AirOS has any built-in VPN capabilities out-of-the-box. > Don't need a VPN, the wireless link *replaces* a VPN. 100Mbps wireless is a ***LOT*** better than a max of 4Mbps on Charter Upstream. > You mention you've "almost bricked" it once before. Do you mind explaining > how? > Trying to configure the unit as a router, it would not respond on the IP I had configured. Luckily, it was still responding on the alternate IP, so I could get back in. > I've had zero problems with AirOS. I have at least 14 of these devices and > never experienced a 'bricked' problem. (In fact, even when I mis-configure > them, I've never seen a problem that couldn't be solved by clicking the > reset button.) > When the rest button is 12' up in the air, it's a little hard to reach without a ladder ! > Are you flashing some sort of custom firmware / custom software to these > devices? > Nope. Just configuring as AP/Client to replace the VPN tunnel. It might just take testing some configs, as the most confusing part is that the docs *seem* to indicate that the management is the WAN configuration for a Router. Lee From matthew at threadlight.com Wed Sep 25 14:51:05 2013 From: matthew at threadlight.com (Matthew Seeley) Date: Wed, 25 Sep 2013 14:51:05 -0400 Subject: [GRLUG] AirOS Expertise In-Reply-To: References: <1380127652.19030.84.camel@omg.gregfolkert.net> <201309251657.r8PGvFlG000027@Mail.omnitec.net> <1380130348.19030.91.camel@omg.gregfolkert.net> Message-ID: Ah, I understand now. You should be able to use Ubiquiti to do that, no problem. For the reset, if your radio is in a hard-to-reach place, you can pay a few bucks extra for the POE adaptor with a built in reset switch. (It's model number 'POE-24' at http://www.ubnt.com/poe ) Then you can press and hold 'reset' on the POE adapter, without needing to climb all the way up to the radio. I mis-configure the radios by accident all the time. The reset switch saves me fairly often :) -- Matthew Seeley Threadlight Systems PO Box 2909 Grand Rapids, MI. 49501 (616) 328-5649 On Wed, Sep 25, 2013 at 2:43 PM, L. V. Lammert wrote: > On Wed, 25 Sep 2013, Matthew Seeley wrote: > > > I'm not an expert in AirOS by any means, but I'm using AirOS and Ubiquiti > > gear regularly. > > > > I don't believe AirOS has any built-in VPN capabilities out-of-the-box. > > > Don't need a VPN, the wireless link *replaces* a VPN. 100Mbps wireless is > a ***LOT*** better than a max of 4Mbps on Charter Upstream. > > > You mention you've "almost bricked" it once before. Do you mind > explaining > > how? > > > Trying to configure the unit as a router, it would not respond on the IP I > had configured. > > Luckily, it was still responding on the alternate IP, so I could get back > in. > > > I've had zero problems with AirOS. I have at least 14 of these devices > and > > never experienced a 'bricked' problem. (In fact, even when I > mis-configure > > them, I've never seen a problem that couldn't be solved by clicking the > > reset button.) > > > When the rest button is 12' up in the air, it's a little hard to reach > without a ladder ! > > > Are you flashing some sort of custom firmware / custom software to these > > devices? > > > Nope. Just configuring as AP/Client to replace the VPN tunnel. It might > just take testing some configs, as the most confusing part is that the > docs *seem* to indicate that the management is the WAN configuration for a > Router. > > Lee > -------------- next part -------------- An HTML attachment was scrubbed... URL: From grlugcasey at gmail.com Fri Sep 27 15:01:26 2013 From: grlugcasey at gmail.com (Casey DuBois) Date: Fri, 27 Sep 2013 15:01:26 -0400 Subject: [GRLUG] Fwd: GR's Future Entrepreneurial Culture In-Reply-To: References: Message-ID: Hey Makers and Linux Users, Please check out this FREE GR Current event and if you can attend PLEASE REGISTER at the bottom of the email! I'm looking forward to having a strong Maker and Linux crowd there. [image: Inline image 1] *Thirsty for something different? Join the guest list. * -- Casey DuBois 616-808-6942 casey at grlug.org -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: CETI Invite.jpg Type: image/jpeg Size: 91061 bytes Desc: not available URL: