- luv-main - luv.asn.au

SSL on luv.asn.au website
by James Harper 10 Jul '15

10 Jul '15

What's with SSL on the luv.asn.au website? The login form doesn't have SSL, which means you can't be sure that someone isn't sniffing your credentials, and also the credentials are going over the wire plaintext. And then when you go to the "my account" area, you do get redirected to SSL but the certificate expired 2 years ago. James

4 3

Fail2ban activity.
by Daniel Jitnah 09 Jul '15

09 Jul '15

Hi Luvers, Just seeking an opinion from those using fail2ban. I am seeing a lot of fail2ban activity (ie banning of IP on ssh) on a particular server. This is far more than I am getting for other servers I am managing. What do people using fail2ban usually see on average. I am seeing new ips being banned pretty much every 10-15 mins on this server. Is this a lot or normal? Given that other servers may not see one for days. Cheers Daniel.

3 3

ansible
by Brian May 09 Jul '15

09 Jul '15

Hello, The talk on Ansible yesterday made it look like the rules are Debian specific. If you have a mix of Redhat / Debian systems, is it possible to use Ansible? Is it possible to do this without duplicating rules for Debian systems and for Redhat systems? e.g. if you want a rule that installs vim, regardless of if apt-get or yum is used, what would this rule look like? Thanks

5 6

NUMA swapping
by Tim Connors 08 Jul '15

08 Jul '15

I mentioned at the meeting that sometimes memory has to be shunted between NUMA nodes via swapping out to disk because.... brokenness. Stewart's post just handily came up and reminded me about this, and came with Citations Needed[TM]: https://www.flamingspork.com/blog/2015/07/08/the-sad-state-of-mysql-and-num… -- Tim Connors

2 1

iview
by Russell Coker 08 Jul '15

08 Jul '15

$ ./iview-cli -p Sorry, iview is no longer available on this device: Sorry, iview is no longer available on this device (_video/endofservice_audio_650000.mp4) The above is from the Python iview client. Does anyone know a way around this? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

4 4

Cisco VPN Client for Linux
by Peter Ross 06 Jul '15

06 Jul '15

Hi all, do you know a recent decent Cisco VPN client suitable for CentOS7? I assume it is anyconnect-linux-64-4.1.02011-k9.pkg found here https://software.cisco.com/download/release.html?mdfid=286281283&flowid=723… It asks for a contract. I want to connect to some Cisco firewalls with a valid support contract but I do not know whether it covers VPN client software. I try to figure out but look for alternatives to. I do not want to use the last free version (free as free in free beer) I found. The support for it ended in 2005.. Thanks for advice Peter

3 2

PostScript printer problems - Fedora 21
by Terry Duell 04 Jul '15

04 Jul '15

Hello All, I have a Kyocera FS-1200 PS printer, which has been excellent for donkey's years. For a while now, can't be sure how long, maybe a year or so...the printer isn't used very much, the printer sometimes throws errors. I have spent the last couple of days trying to track down what is going on. When printing some pdf files from 'Document Viewer' in Fedora, and most pdf sent from a Win7 laptop (the printer is networked) it throws an error "ERROR: rangecheck OFFENDING COMMAND: filter STACK 120585 --nostringval--..." Pdf files that fail to print, from either Fedora Document Viewer or Win7, can be printed without error from Fedora via Xpdf. All test pages sent from the printer-config on Fedora throw the same error, the stack number varies. I have looked at the on board printer setup, and fiddled with the emulation (it can use PCL 6, KPDL 2 and others). Changes to emulation have no effect, and it always reverts to KPDL. Fedora printer-config provides a number of printer drivers for this device, and I have had it set to the recommended, and tried a few others...nothing seems to change the behaviour. Anyone have any thoughts on this? PS I did post a question on Linux Questions a few days ago but had no response, so thought it OK to ask here. Cheers, -- Regards, Terry Duell

3 4

car dvr players with GPS
by Brian May 02 Jul '15

02 Jul '15

Hello, Just curious if there is anything like this software for Linux, that will play back not only the video, but show recorded GPS data too? http://www.registratorviewer.com/index_en.html As far as I can tell, maybe not. Or at least Google isn't telling me anything. However just wondering. Thanks

1 0

Host denied: sshd from 43.255.189.72(unknown)-43.255.189.72
by Jobst Schmalenbach 01 Jul '15

01 Jul '15

Hi This is a strange problem as it is on a machine behind a DMZ and "chained" FIREWALL (CentOS). I have a "/etc/hosts.deny" that has following line: ALL : ALL : spawn ( /usr/sbin/safe_finger -l @%h | /usr/bin/Mail -s "THE_HOSTNAME\: Host denied\: %d from %c(%u)-%h" some(a)domain.com) & which delivers following email every random minutes: THE_HOSTNAME: Host denied: sshd from 43.255.189.72(unknown)-43.255.189.72 Normally it would not bother me, but the fact this machine is behind a DMZ and a FIREWALL makes this "interesting". I, too, know the machine (and network) in question are quite wellknown ;-) Now the thing is that "hosts.deny" sits before I can see the traffic with tcpdump/ngrep/iptraf, so this makes it a little harder to debug. This is what I know: - only I have shell access (passwd file is full of /bin/false and /bin/nologin) and it's ONLY via keys. - rkhunter, chkrootkit and so on have no warnings - the machines sendmail has clamav attached - external firewall disallows access to that machine (only from internal network) - external firewall blocks the entire network of 43.0.0.0/24 - the machine is my Samba Server - the machine is fully up to date and rebooted - it is my webdevelopment server for some domains - it has some internal webserver tasks - I have turned off ALL internal devices that could be hacked (nas drives, wifi, etc) - the messages come up even if NO workstation is on - external ssh is firewalled I have tried all the standard utils (tcpump,lsof,fuser,netstat and so on) but this one has me baffled. Any ideas anyone? Jobst -- Howard's conjecture: The total dinner check of a party eating dutch will never equal the total of what each diner admits to having eaten. | |0| | Jobst Schmalenbach, jobst(a)barrett.com.au, General Manager | | |0| Barrett Consulting Group P/L & The Meditation Room P/L |0|0|0| +61 3 9532 7677, POBox 277, Caulfield South, 3162, Australia

2 2

ssh errors from cron jobs
by Russell Coker 30 Jun '15

30 Jun '15

Error1: ssh_exchange_identification: Connection closed by remote host Error2: ssh_exchange_identification: Connection closed by remote host rsync: connection unexpectedly closed (0 bytes received so far) [Receiver] rsync error: unexplained error (code 255) at io.c(605) [Receiver=3.0.9] I'm getting lots of errors like the above from cron jobs in situtions where running the same script from an interactive session works. The first error is from a cron job that rsync's files to a server and the second error is from rsyncing files from the server via ssh. On one of my systems I've seen a pair of cron jobs fail with that error every half hour for the past 4 hours but when I run both jobs from an interactive session they work every time. What can be different about the operation of ssh in this regard? It's a passwordless login with RSA key so there's no reason for it to need user input and in any case the error message doesn't indicate that as being a problem. I've compared the cron environment with the environment from the interactive session and apart from /bin/sh (DASH on Debian) vs /bin/bash I can't see anything of note. Any ideas? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

4 5