LinuxQuestions.org latest posts

LinuxQuestions.org offers a free Linux forum where Linux newbies can ask questions and Linux experts can offer advice. Topics include security, installation, networking and much more.
Updated: 1 hour 11 min ago
LXer: Review - Chakra Jaz (0.2.1)
Published at LXer:
Chakra Linux is a new distribution based on Arch Linux. Chakra Linux comes from the people behind the KDEmod(Modularized KDE). Arch Linux is one of my favorite distribution as it offered a fast, stable distribution with the latest packages(rolling release)
Read More...
Chakra Linux is a new distribution based on Arch Linux. Chakra Linux comes from the people behind the KDEmod(Modularized KDE). Arch Linux is one of my favorite distribution as it offered a fast, stable distribution with the latest packages(rolling release)
Read More...
Virtual Private Network - A couple questions please for a work project please
Hello Everyone,
Just a little background to my questions. I work for a privately owned retail company selling luxury products. Although it is not my primary responsibility, I have always been the person to handle any IT projects we have had and know our POS software inside and out to fix problems. This has slowly over time become a big part of what I have to do. But, I am NOT an IT trained technician; just a hobbyist who loves to work with computers.
Recently, the owner has started to overhaul large parts of the business, which includes replacing our POS system with a new one and opening two additional stores in the same town. The new POS system is large an expensive piece of software, and I have had the responsibilty of making sure the data transfer to the new system goes smoothly before we go live with it. But, the reason for my post is that this will be the first time that the company has operated multiple locations. The systems will now have to be networked. This where I find myself in very unfamiliar territory. I was told by the software vendor that "hardware virtual private network" is how they recommend setting up the operation. Now, having used Linux for years now, I am familiar with what VPN's are, but I have never set one up.
But those reading this might want to abandon it now because the machines I have to work with are Windows operating systems. So, I will understand if no one wants to offer any advice on a Linux forumo about Windows networking. But I know there are a lot well trained experts here, so hopefully some kind soul will answer my questions.
The setup at work is as follows:
One computer is the data server and back office (stock, administration, etc.) running Windows XP
Three computers at the main location with be POS clients
The other two locations will have new computers running POS client software.
The network connection is an "always on" connection (24/7)
Windows is pretty easy to setup a Virtual Private Network (according to the tutorials I have read), and I am assuming that "Hardware" VPN's have dedicated routers or something. I will have to learn more about that. My biggest problem is that this is Windows, and I know very little about Windows (I haven't used it full time since 2000, I have always used Linux).
I really have only two main questions if someone could help.
1. What kind of pitfalls am I going to run into trying to set this up and what kind of special "router" is required?
2. This is Windows. Is there any way to secure this VPN so that it is totally locked down (aside from the obvious virus protection.)?
Obviously, I am really only talking about two of the client computers because the three on-site computers will be wired.
I would really appreciate any help or thoughts about this.
Bob
Just a little background to my questions. I work for a privately owned retail company selling luxury products. Although it is not my primary responsibility, I have always been the person to handle any IT projects we have had and know our POS software inside and out to fix problems. This has slowly over time become a big part of what I have to do. But, I am NOT an IT trained technician; just a hobbyist who loves to work with computers.
Recently, the owner has started to overhaul large parts of the business, which includes replacing our POS system with a new one and opening two additional stores in the same town. The new POS system is large an expensive piece of software, and I have had the responsibilty of making sure the data transfer to the new system goes smoothly before we go live with it. But, the reason for my post is that this will be the first time that the company has operated multiple locations. The systems will now have to be networked. This where I find myself in very unfamiliar territory. I was told by the software vendor that "hardware virtual private network" is how they recommend setting up the operation. Now, having used Linux for years now, I am familiar with what VPN's are, but I have never set one up.
But those reading this might want to abandon it now because the machines I have to work with are Windows operating systems. So, I will understand if no one wants to offer any advice on a Linux forumo about Windows networking. But I know there are a lot well trained experts here, so hopefully some kind soul will answer my questions.
The setup at work is as follows:
One computer is the data server and back office (stock, administration, etc.) running Windows XP
Three computers at the main location with be POS clients
The other two locations will have new computers running POS client software.
The network connection is an "always on" connection (24/7)
Windows is pretty easy to setup a Virtual Private Network (according to the tutorials I have read), and I am assuming that "Hardware" VPN's have dedicated routers or something. I will have to learn more about that. My biggest problem is that this is Windows, and I know very little about Windows (I haven't used it full time since 2000, I have always used Linux).
I really have only two main questions if someone could help.
1. What kind of pitfalls am I going to run into trying to set this up and what kind of special "router" is required?
2. This is Windows. Is there any way to secure this VPN so that it is totally locked down (aside from the obvious virus protection.)?
Obviously, I am really only talking about two of the client computers because the three on-site computers will be wired.
I would really appreciate any help or thoughts about this.
Bob
syslog-ng
Hello everyone!
I'm in the process of creating centralized logging system.
Modified syslog-ng.cong.in file. When running SuSEconfig --module syslog-ng I receive pursing error saying that I have syntax error at line 196. Went through the script many times, couldnt find it.
Here is my syslog-ng.cong.in file:
Code: #@SuSEconfig@
#@SuSEconfig@ This is a template file used by SuSEconfig
#@SuSEconfig@ to generate the final syslog-ng.conf.
#@SuSEconfig@
#@SuSEconfig@ SuSEconfig adds additional log sockets from
#@SuSEconfig@ /etc/sysconfig/syslog to the source bellow.
#@SuSEconfig@
#
# File format description can be found in syslog-ng.conf(5)
# and /usr/share/doc/packages/syslog-ng/syslog-ng.txt.
#
#
# Global options.
#
options { long_hostnames(off); sync(0); perm(0640); stats(3600); };
#
# 'src' is our main source definition. you can add
# more sources driver definitions to it, or define
# your own sources, i.e.:
#
#source my_src { .... };
#
source src {
#
# include internal syslog-ng messages
# note: the internal() soure is required!
#
internal();
#
# the following line will be replaced by the
# socket list generated by SuSEconfig using
# variables from /etc/sysconfig/syslog:
#
@SuSEconfig_SOCKETS@
#
# uncomment to process log messages from network:
#
udp(port(514));
tcp(ip("192.168.50.23") port(5140) keep-alive(yes));
};
#
# Filter definitions
#
filter f_iptables { facility(kern) and match("IN=") and match("OUT="); };
filter f_console { level(warn) and facility(kern) and not filter(f_iptables)
or level(err) and not facility(authpriv); };
filter f_newsnotice { level(notice) and facility(news); };
filter f_newscrit { level(crit) and facility(news); };
filter f_newserr { level(err) and facility(news); };
filter f_news { facility(news); };
filter f_mailinfo { level(info) and facility(mail); };
filter f_mailwarn { level(warn) and facility(mail); };
filter f_mailerr { level(err, crit) and facility(mail); };
filter f_mail { facility(mail); };
filter f_cron { facility(cron); };
filter f_local { facility(local0, local1, local2, local3,
local4, local5, local6, local7); };
filter f_acpid { match('^\[acpid\]:'); };
filter f_netmgm { match('^NetworkManager:'); };
filter f_messages { not facility(news, mail) and not filter(f_iptables); };
filter f_warn { level(warn, err, crit) and not filter(f_iptables); };
filter f_alert { level(alert); };
#
# Most warning and errors on tty10 and on the xconsole pipe:
#
destination console { pipe("/dev/tty10" group(tty) perm(0620)); };
log { source(src); filter(f_console); destination(console); };
destination xconsole { pipe("/dev/xconsole" group(tty) perm(0400)); };
log { source(src); filter(f_console); destination(xconsole); };
# Enable this, if you want that root is informed immediately,
# e.g. of logins:
#
#destination root { usertty("root"); };
#log { source(src); filter(f_alert); destination(root); };
#
# News-messages in separate files:
#
destination newscrit { file("/var/log/news/news.crit"
owner(news) group(news)); };
log { source(src); filter(f_newscrit); destination(newscrit); };
destination newserr { file("/var/log/news/news.err"
owner(news) group(news)); };
log { source(src); filter(f_newserr); destination(newserr); };
destination newsnotice { file("/var/log/news/news.notice"
owner(news) group(news)); };
log { source(src); filter(f_newsnotice); destination(newsnotice); };
#
# and optionally also all in one file:
# (don't forget to provide logrotation config)
#
#destination news { file("/var/log/news.all"); };
#log { source(src); filter(f_news); destination(news); };
#
# Mail-messages in separate files:
#
destination mailinfo { file("/var/log/mail.info"); };
log { source(src); filter(f_mailinfo); destination(mailinfo); };
destination mailwarn { file("/var/log/mail.warn"); };
log { source(src); filter(f_mailwarn); destination(mailwarn); };
destination mailerr { file("/var/log/mail.err" fsync(yes)); };
log { source(src); filter(f_mailerr); destination(mailerr); };
#
# and also all in one file:
#
destination mail { file("/var/log/mail"); };
log { source(src); filter(f_mail); destination(mail); };
#
# acpid messages in one file:
#
destination acpid { file("/var/log/acpid"); };
log { source(src); filter(f_acpid); destination(acpid); flags(final); };
#
# NetworkManager messages in one file:
#
destination netmgm { file("/var/log/NetworkManager"); };
log { source(src); filter(f_netmgm); destination(netmgm); flags(final); };
#
# Cron-messages in one file:
# (don't forget to provide logrotation config)
#
#destination cron { file("/var/log/cron"); };
#log { source(src); filter(f_cron); destination(cron); };
#
# Some boot scripts use/require local[1-7]:
#
destination localmessages { file("/var/log/localmessages"); };
log { source(src); filter(f_local); destination(localmessages); };
#
# All messages except iptables and the facilities news and mail:
#
destination messages { file("/var/log/messages"); };
log { source(src); filter(f_messages); destination(messages); };
#
# Firewall (iptables) messages in one file:
#
destination firewall { file("/var/log/firewall"); };
log { source(src); filter(f_iptables); destination(firewall); };
#
# Warnings (except iptables) in one file:
#
destination warn { file("/var/log/warn" fsync(yes)); };
log { source(src); filter(f_warn); destination(warn); };
#
# Enable this, if you want to keep all messages in one file:
# (don't forget to provide logrotation config)
#
#destination allmessages { file("/var/log/allmessages"); };
#log { source(src); destination(allmessages); };
# this is for separating out network hosts into individual log files.
destination std {
file ("/var/log/HOSTS/$YEAR-$MONTH/$HOST/$FACILITY-$YEAR-$MONTH-$DAY"
owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(y\es)
);
};
log {
source(src);
destination(std);
};
Any help will be appreciated.
I'm in the process of creating centralized logging system.
Modified syslog-ng.cong.in file. When running SuSEconfig --module syslog-ng I receive pursing error saying that I have syntax error at line 196. Went through the script many times, couldnt find it.
Here is my syslog-ng.cong.in file:
Code: #@SuSEconfig@
#@SuSEconfig@ This is a template file used by SuSEconfig
#@SuSEconfig@ to generate the final syslog-ng.conf.
#@SuSEconfig@
#@SuSEconfig@ SuSEconfig adds additional log sockets from
#@SuSEconfig@ /etc/sysconfig/syslog to the source bellow.
#@SuSEconfig@
#
# File format description can be found in syslog-ng.conf(5)
# and /usr/share/doc/packages/syslog-ng/syslog-ng.txt.
#
#
# Global options.
#
options { long_hostnames(off); sync(0); perm(0640); stats(3600); };
#
# 'src' is our main source definition. you can add
# more sources driver definitions to it, or define
# your own sources, i.e.:
#
#source my_src { .... };
#
source src {
#
# include internal syslog-ng messages
# note: the internal() soure is required!
#
internal();
#
# the following line will be replaced by the
# socket list generated by SuSEconfig using
# variables from /etc/sysconfig/syslog:
#
@SuSEconfig_SOCKETS@
#
# uncomment to process log messages from network:
#
udp(port(514));
tcp(ip("192.168.50.23") port(5140) keep-alive(yes));
};
#
# Filter definitions
#
filter f_iptables { facility(kern) and match("IN=") and match("OUT="); };
filter f_console { level(warn) and facility(kern) and not filter(f_iptables)
or level(err) and not facility(authpriv); };
filter f_newsnotice { level(notice) and facility(news); };
filter f_newscrit { level(crit) and facility(news); };
filter f_newserr { level(err) and facility(news); };
filter f_news { facility(news); };
filter f_mailinfo { level(info) and facility(mail); };
filter f_mailwarn { level(warn) and facility(mail); };
filter f_mailerr { level(err, crit) and facility(mail); };
filter f_mail { facility(mail); };
filter f_cron { facility(cron); };
filter f_local { facility(local0, local1, local2, local3,
local4, local5, local6, local7); };
filter f_acpid { match('^\[acpid\]:'); };
filter f_netmgm { match('^NetworkManager:'); };
filter f_messages { not facility(news, mail) and not filter(f_iptables); };
filter f_warn { level(warn, err, crit) and not filter(f_iptables); };
filter f_alert { level(alert); };
#
# Most warning and errors on tty10 and on the xconsole pipe:
#
destination console { pipe("/dev/tty10" group(tty) perm(0620)); };
log { source(src); filter(f_console); destination(console); };
destination xconsole { pipe("/dev/xconsole" group(tty) perm(0400)); };
log { source(src); filter(f_console); destination(xconsole); };
# Enable this, if you want that root is informed immediately,
# e.g. of logins:
#
#destination root { usertty("root"); };
#log { source(src); filter(f_alert); destination(root); };
#
# News-messages in separate files:
#
destination newscrit { file("/var/log/news/news.crit"
owner(news) group(news)); };
log { source(src); filter(f_newscrit); destination(newscrit); };
destination newserr { file("/var/log/news/news.err"
owner(news) group(news)); };
log { source(src); filter(f_newserr); destination(newserr); };
destination newsnotice { file("/var/log/news/news.notice"
owner(news) group(news)); };
log { source(src); filter(f_newsnotice); destination(newsnotice); };
#
# and optionally also all in one file:
# (don't forget to provide logrotation config)
#
#destination news { file("/var/log/news.all"); };
#log { source(src); filter(f_news); destination(news); };
#
# Mail-messages in separate files:
#
destination mailinfo { file("/var/log/mail.info"); };
log { source(src); filter(f_mailinfo); destination(mailinfo); };
destination mailwarn { file("/var/log/mail.warn"); };
log { source(src); filter(f_mailwarn); destination(mailwarn); };
destination mailerr { file("/var/log/mail.err" fsync(yes)); };
log { source(src); filter(f_mailerr); destination(mailerr); };
#
# and also all in one file:
#
destination mail { file("/var/log/mail"); };
log { source(src); filter(f_mail); destination(mail); };
#
# acpid messages in one file:
#
destination acpid { file("/var/log/acpid"); };
log { source(src); filter(f_acpid); destination(acpid); flags(final); };
#
# NetworkManager messages in one file:
#
destination netmgm { file("/var/log/NetworkManager"); };
log { source(src); filter(f_netmgm); destination(netmgm); flags(final); };
#
# Cron-messages in one file:
# (don't forget to provide logrotation config)
#
#destination cron { file("/var/log/cron"); };
#log { source(src); filter(f_cron); destination(cron); };
#
# Some boot scripts use/require local[1-7]:
#
destination localmessages { file("/var/log/localmessages"); };
log { source(src); filter(f_local); destination(localmessages); };
#
# All messages except iptables and the facilities news and mail:
#
destination messages { file("/var/log/messages"); };
log { source(src); filter(f_messages); destination(messages); };
#
# Firewall (iptables) messages in one file:
#
destination firewall { file("/var/log/firewall"); };
log { source(src); filter(f_iptables); destination(firewall); };
#
# Warnings (except iptables) in one file:
#
destination warn { file("/var/log/warn" fsync(yes)); };
log { source(src); filter(f_warn); destination(warn); };
#
# Enable this, if you want to keep all messages in one file:
# (don't forget to provide logrotation config)
#
#destination allmessages { file("/var/log/allmessages"); };
#log { source(src); destination(allmessages); };
# this is for separating out network hosts into individual log files.
destination std {
file ("/var/log/HOSTS/$YEAR-$MONTH/$HOST/$FACILITY-$YEAR-$MONTH-$DAY"
owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(y\es)
);
};
log {
source(src);
destination(std);
};
Any help will be appreciated.
Error code: ssl_error_ssl2_disabled on https load
Hi all,
I am trying to configure test site with https mod_ssl for a few days with no success. Now I got this message
Error code: ssl_error_ssl2_disabled
and this is second day I can't move on. I try to config https site on my localhost in order to test functionality and etc.
I get this as output in curl
Code: debian:/home/kode# curl https://localhost
curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol Any help is appreciated.
I am trying to configure test site with https mod_ssl for a few days with no success. Now I got this message
Error code: ssl_error_ssl2_disabled
and this is second day I can't move on. I try to config https site on my localhost in order to test functionality and etc.
I get this as output in curl
Code: debian:/home/kode# curl https://localhost
curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol Any help is appreciated.
Setting up a simple, LAN-to-LAN router
Hey all,
As the subject says, I'm trying to set up a simple router on a system running CentOS 5.5. The systems has 2 NICs installed, both of which are on private segments, those being 192.168.108.x (eth0) and 192.168.109.x (eth2). The system can communicate with other systems on their respective segments.
So, I need this system to route traffic between the 108 and 109 segments. No firewalls needed, no NAT, nothing fancy. I can set up the router system as the default gateway for all other systems, or add a static route. Should be simple.
Trouble is, there is so much conflicting information on how to actually do this. Some say all that's needed is to enable IP forwarding (by way of the /etc/sysctl.conf file). Others say that iptables is needed and that NAT and masquerading are required. I have already enabled IP forwarding, but simply doing that isn't enough of course, and I'm unsure where to go next.
What's the easiest way to get this working?
As the subject says, I'm trying to set up a simple router on a system running CentOS 5.5. The systems has 2 NICs installed, both of which are on private segments, those being 192.168.108.x (eth0) and 192.168.109.x (eth2). The system can communicate with other systems on their respective segments.
So, I need this system to route traffic between the 108 and 109 segments. No firewalls needed, no NAT, nothing fancy. I can set up the router system as the default gateway for all other systems, or add a static route. Should be simple.
Trouble is, there is so much conflicting information on how to actually do this. Some say all that's needed is to enable IP forwarding (by way of the /etc/sysctl.conf file). Others say that iptables is needed and that NAT and masquerading are required. I have already enabled IP forwarding, but simply doing that isn't enough of course, and I'm unsure where to go next.
What's the easiest way to get this working?
ATI Video Card Drivers/ 3d Graphics issues
So i just recently installed the ATI catalyst driver from ati's website.
rebooted and i had black screens upon loading Fedora.
Uninstalled the catalyst drivers and am now back to normal.
Im using Gnome and fedora 12, when i try and activate "Desktop Effects" it states that i do not have 3d accelerated graphics installed.
My video card is a radeon 4650. and i am using dual monitors.
Is this a simple driver issue??? or something else?
If it is driver issues, what driver can i install that will work???
Thank you in advance
rebooted and i had black screens upon loading Fedora.
Uninstalled the catalyst drivers and am now back to normal.
Im using Gnome and fedora 12, when i try and activate "Desktop Effects" it states that i do not have 3d accelerated graphics installed.
My video card is a radeon 4650. and i am using dual monitors.
Is this a simple driver issue??? or something else?
If it is driver issues, what driver can i install that will work???
Thank you in advance
Syslog configuration
I have a syslog server which is logging locally and also receiving syslogs from another device.
The other device doesnt allow you to change the facility.
The facility it is using is "4 - security/authorization messages".
Is there anyway to configure syslog so that it writes the sec/auth logs in different places for both the local machine and the remote machine?
Thanks in advance.
The other device doesnt allow you to change the facility.
The facility it is using is "4 - security/authorization messages".
Is there anyway to configure syslog so that it writes the sec/auth logs in different places for both the local machine and the remote machine?
Thanks in advance.
LXer: How to fix fglrx error after upgrading to 2.6.35 kernel in Ubuntu lucid
Published at LXer:
This tutorial will explain How to fix fglrx error after upgrading to 2.6.35 kernel in Ubuntu lucid
Read More...
This tutorial will explain How to fix fglrx error after upgrading to 2.6.35 kernel in Ubuntu lucid
Read More...
what debian iso should i download?
i'm thinking on trying debian, i searched through their website and i went to the download site and i see there are 5 dvds torrent files?
which one should i download? i mean is debian that heavy that i need 5 dvds to get everything installed?? wt...
please help.
by the way is there a kde version? i want kde
which one should i download? i mean is debian that heavy that i need 5 dvds to get everything installed?? wt...
please help.
by the way is there a kde version? i want kde
The fastest distro for a toshiba nb205?
Intel AtomTM processor N280 1.66GHz, 512KB L2 Cache, 667MHz FSB Mobile Intel 945GSE Express Chipset
1GB DDR2 533MHz (max 2GB)
160GB (5400 RPM) Serial ATA hard disk drive
10.1 diagonal widescreen display at 1024 x 600 native resolution (WSVGA)
Intel Graphics Media Accelerator GMA950 with 64MB-251MB
Webcam and microphone
10/100 Ethernet
Atheros 802.11b/g wireless LAN
Bluetooth version 2.1 plus Enhanced Data Rate (EDR)
and its blue color
1GB DDR2 533MHz (max 2GB)
160GB (5400 RPM) Serial ATA hard disk drive
10.1 diagonal widescreen display at 1024 x 600 native resolution (WSVGA)
Intel Graphics Media Accelerator GMA950 with 64MB-251MB
Webcam and microphone
10/100 Ethernet
Atheros 802.11b/g wireless LAN
Bluetooth version 2.1 plus Enhanced Data Rate (EDR)
and its blue color
System Clock keeps drifting forward
the time on system clock given with 'date' command keeps moving forward about 1 minute for every hour of realtime. The box is up all the time so this is not an issue with motherboard battery. An equivalent box with the same hardwre/OS and applications doesn't have the same level of drift. I'm not sure what else this could be.
Both boxes are Centos 5.2 64-bit.
thanks for any suggestions
Both boxes are Centos 5.2 64-bit.
thanks for any suggestions
