Debian Configuration :: Configuring NTP SRV In Local Client?
Jan 5, 2011
I'd like configuring NTP service on my Lenny Debian client to retrieve time from my local NTP server, so I thought to configure /etc/ntp.conf and to insert into crontab this command 'ntpd -qg', which is indicated in man. Can I run ntpd service to synchronize time for my client, avoiding to listen on port 123, beacuse my scope is to alignment time on client and to not give service to others, for this scope there is ntp server !
I am *finally* getting around to rebuilding my file-sharing computer. I'll be sharing files with both Linux and Windoze machines. It's a home network, so there's nothing fancy needed. I know I have to tweak my smb.conf file until I'm satisfied with the features and security. I'm using SWAT and I'm starting with a bare-bones conf file. It's not secure but I can see the server and selected files/directories from my other Linux box.
My really dumb question is, do I have to reboot both the server and the client machines every time I change the SAMBA configuration? I thought I just had to stop and restart the SAMBA service in the SWAT software - but then the server disappears from my client. It looks like I need to reboot both machines for the client to see the server.
I am working on a Debian 2.6.26-19 Distribution with exim4 as MTA. After a system restart a problem occurred with delivering emails to local addresses. These local addresses use a 1and1 mailserver for email. The MX records for the local domain are set correctly but exim does not use a DNS lookup for these addresses because it identifies them as local addresses. I figured this out by executing the exim4 -d -bt command. The dns lookup part of the result looks like this (I replaced the actual address with placeholders):
The eventual result of the exim4 -d -bt command is: [user]@[domain.ext] is undeliverable: Unrouteable address How can I make sure, that exim4 makes a DNS lookup for the local addresses instead of skipping it? I know that I have to edit a exim4 configuration file, but I could not figure out which and how.
Today I decided to include again Debian Volatile and discovered that it doesn't exist anymore and that I can get the same packages using this line: deb [url] squeeze-updates main
And the first question is: is this the same than debian-security?
Then, I decided to use [url] to make things less confused, and this was the output:
The first line is Ok. The second line, I guest it's the same than my second line. But, the third, is something different. So, the main question is: what is the difference between squeeze-proposed-updates and squeeze-updates? Are those repos completely separated from squeeze/updates (in security.debian.org)? And, what else should I add to have an always up-to-date and secure system?
I'm having trouble with my keyboard functions on my netbook (eeePC 1005HA running squeeze/sid - specific build being the one available on December 23rd 2009 - hasn't been updated since installation) - specifically, some of the function keys seem to be off - i.e. when pressing Fn+key, only some actually work. The specific ones I'm having trouble with are: Fn+F10 (mute)Fn+F11 (vol. down)Fn+F12 (vol. up)
As far as I can remember, they've never worked; at first I thought it wouldn't be an issue for me, having the volume panel, but the more time goes on, the more annoying it's becoming. Also, as it was a M$ machine at purchase, it has a Windoze key on it, which I'd like to configure to actually do something useful - preferably to open the main menu, if possible - but have so far failed to find any guides on how to do it. (Have Googled on multiple occasions, to no avail.)
First off I am aware ureadahead isn't in the repos, but thought this forum would fit the best regardless. I installed upstart, then the deb package on packages.ubuntu.com and rebooted. The /var/lib/ureadahead folder exists but there are no .pack files in that folder. I tried running "service ureadahead start" but it said "Service failed to start". Anyone used ureadahead on Debian?
Alright, every time I boot or shutdown my routing box, it hangs at configuring and deconfiguring network interfaces. Below is my interfaces file. I see no errors or warnings in my log and I am running a pure kernel, not tainted with proprietary drivers. All of my hardware is 100% supported.
I've been following this guide for squeeze: [URL] After getting the wireless-tools and firmware-ralink packages installed with no internet, I managed to installthe driver using modprobe rt2870sta (the 4th step). With the module loaded and the device plugged in (a RangePlusWireless Network USB Adapter with the WUSB100v2 chipset), iwconfig returned something like
and then ifconfig wlan0 up returned ERROR while getting interface flags: no available device
What would be necessary to run an ftp server (or a web server) on my local PC so that other people I know could access it and download stuff from it? The idea is to share photos, videos etc with friends/family where the files are a bit too big for email. (All 100% legal, own-content, no copyright issues, needless to say). Security isn't that vital, I'd just put files in the ftp directory, email the link and let them download the files, then remove them again. No passwords are required, and no uploads.
Obviously there's the problem that both computers have to be on at the same time, and I assume I'd have to change my computer's firewall settings and my router's settings to allow the traffic through, but my question is more basic than that - is it even possible? My internet connection is through a router, and as I understand it, my router has the IP address, not my computer. So I can connect through my router using my computer's IP address, but only my router knows my computer's IP address, and all the rest of the internet just sees my router and its IP address. Which means (I think) that I can't just send my IP address for my family to connect to, because that only gets them as far as my router, and the router would have no idea what to do with such requests. Am I right so far?
So is there any way for my family's computers to contact an FTP server or a web server running on my computer? Or does it require some kind of intermediary server to act as a traffic-forwarder? Is there such a thing? I'm assuming that setting up little private torrents would be fiddly and inefficient. Or would it be better/simpler to use one of the free filesharing services and put up with the (sometimes not too family-friendly) adverts associated with them?
Two nights ago I decided to switch from testing to unstable. Since then I am able to connect to the internet, but not to anything on my local network. I am unable to ping this computer from another one on the network. This computer is connected through wireless. I thought that something might have changed with iptables that was blockinghe localnetwork. I tried to "flush the iptables settings with "iptables -F". Since that didn't work I uninstalled iptables (which didn't work and I reinstalled iptables). In my browser I tried to connect to my router and that doesn't work either.I connect to this computer daily through ssh and connect to a NAS. Without ssh and my NAS I feel kinda lost
I can't get past the "scp -p id_rsa.pub" step; ssh fails with "Could not resolve hostname" errors. Both machines are connected with a hub. I've also tried using the IP address in the place of hostnames with no avail. Both machines can ping eachother successfully.The server has the "openssh-server" package installed.
I'll have 2 routers: - ADSL-router (D-link DSL-2640U) + NAT on (needed as one static IP from ISP) + Server's IP as 192.168.X.xxx + router firewall port-forwards set for needed ports (21,22, 80 etc) to 192.168.0.xxx - 2nd LAN-router
Is there any setting/file on Debian-user-machine, where I could fix that abc.mydomainXYZ.com/defg is always in something to do with 192.168.X.xxx
My Debian workstation is on a predominantly Windows network. It is resolving internet addresses (i.e. www.google.com, etc) just fine. However it's not resolving any of the address of machines on the local network and the windows machines do not resolve the linux machines address either. All machines (linux and windows) can access each other just fine via direct IP reference.
My /etc/resolv.conf file has the following IP addresses listed:
127.0.0.1 10.1.1.111 10.1.3.4
10.1.1.111 is a netgear VPN/router that is the primary router for the LAN and maintains a VPN to a remote office 10.1.3.4 is the IP address of the Windows Primary Domain control on which the DNS server is running. That server is at the remote office. The system acts like it is completely ignoring anything I put in the resolv.conf file. From the linux X server I'm using "Network Setting" utility to make changes to the network configuration. This appears to work fine for things like switch between DHCP and static IP.
I'm trying to set up a *simple* MTA in my local network. The only thing it should be able to do is send system / daemon mails to admin@mylocaldomain. but at the moment I'm pretty much overwhelmed by everything i *should* know in order to set up this MTA
I configured exim to be in "internet"-mode. now i have a variety of errors I can choose from (and a variety of solutions that i don't like ).. my test is always an email from test01.mylocaldomain:
echo "Hello World" | mail -s Testmail admin@mylocaldomain
- after running the config, i get the error: admin@mylocaldomain: all relevant MX records point to non-existent hosts --> google says, edit and udpate update-exim4.conf.conf --> dc_relay_domains='mylocaldomain' --> but this exim installation should not be a relay at all. it should only be able to SEND (to this domain), not deliver it. or do i get something wrong?
- after i added dc_relay_domains='mylocaldomain', i get --> SMTP error from remote mail server after RCPT TO:<admin@mylocaldomain>: host mail.mylocaldomain [192.168.x.x]: 550 5.1.1 <root@mylocaldomain>: Sender address rejected: User unknown in virtual mailbox table --> but i don't want to create an account on the mailserver for the SENDER...
- ...so i thought, i'd config exim with the domain "test01.mylocaldomain" (including the server name), so that the sender is clearly from another domain than the mail server handles (e.g. email@example.com).. but then i get this --> SMTP error from remote mail server after RCPT TO:<admin@mylocaldomain>: host mail.mylocaldomain [192.168.x.x]: 450 4.1.8 <firstname.lastname@example.org>: Sender address rejected: Domain not found
I really just wanna send mails in my local network.
i rarely need my wireless, and i want it off by default, i am going to disable it during bootup with
echo 0 > /sys/devices/platform/acer-wmi/wireless
what would be the proper place for this? if i put it in rc.local it will be executed very late, i'd rather have it sooner. if add a new script to init.d, then run update-rc.d, i would have to adhere to the start|stop|reload structure of these scripts, right? or do i go a totally different way about this?
I have a new Debian 5.04/ppc install on a G5 tower and it's not able to browse the local network. The clean install could see the network, then I installed the Samba server, and it hasn't worked since. Samba server never really worked, and I'm guessing I messed something up. I've reinstalled network-manager, and removed / reinstalled samba.
I have a small home network (6 machines) running wired and/or wireless, pc/mac and linux.This machine can PING other machines by name and IP address.This machine can PING itself by name and IP address Other machines can PING this machine by IP address only, not by name.Nautilus network browser only shows the "Windows Network" icon, which, when clicked, shows an empty window.I've got networking up fine on all my other machines but this one is stumping me.
I have three Debian systems running, along with several XP laptops, PS3 and two DirecTV systems. I use two of the three Debian systems as media servers, and the third is an older system mostly for playing around with. My home network is running fine with the following nuisance. The two newer Debian (Lenny) systems are <barney> and <mitzi>, the older is named <oscar>, running Debian Sarge 3.1. From either locally or remote login to <barney> and <mitzi> I can ssh into either of the other two systems, however when logged into <oscar> I cannot ssh by name to either of the other systems. e.g. ssh: mitzi: Temporary failure in name resolution..However, from <oscar> I can ping outside my network (e.g. ping www.google.com) with no problems.I can also ssh to the other systems via IP address, just not by name.
I've compared the /etc/ssh/ssh_config, /etc/resolv.conf, /etc/ssh/sshd_config and other files between the two systems and not seeing anything peculiar. arp, route, etc., don't show different behavior between the systems either.
At home I have two computers running linux connected to the same router. I would like to be able to connect them so that I can move files between them and execute simple commands. What is the most simple way to access a prompt on the other computer or to mount a partition currently used by the other computer?Using the www it is possible to connect two computers using ssh, but it should be easier to do this over the LAN, right? I have been googling a lot but not found anything.
I am trying to create a local debian repo for 3rd party apps and my own deb's. I have done the following: dpkg-scanpackages debian | gzip -9c> debian/Packages.gz Which did create a file called Packages.gz in the directory However, when I do apt-get update on a client machine I get the following error: W: Failed to fetch [URL] Could not connect to 10.1.1.10:8080 (10.1.1.10). - connect (111: Connection refused) W: Failed to fetch [URL] Unable to connect to 10.1.1.10:8080: W: Some index files failed to download, they have been ignored, or old ones used instead.
I have Debian 7 running on RPi2 with Kodi. My NFS server is running on Slackware 14.1 which doesn't have full support for nfs4. I think this is causing some slowdowns/extra time when trying to stream video. Debian 7 by default mounts NFS as nfsv4, I would to like to disable this if possible. If so how?
I'm testing to log in using openldap authentication on jessie by following article from [URL] ..... and when I try to log in from ldap client (another debian 8 VM), it failed with
Code: Select allFeb 3 09:25:33 clt nscd: nss_ldap: could not connect to any LDAP server as cn=admin,dc=test,dc=lab - Can't contact LDAP server Feb 3 09:25:33 clt nscd: nss_ldap: failed to bind to LDAP server ldap:///192.168.191.120: Can't contact LDAP server Feb 3 09:25:33 clt nscd: nss_ldap: reconnecting to LDAP server... Feb 3 09:25:33 clt nscd: nss_ldap: could not connect to any LDAP server as cn=admin,dc=test,dc=lab - Can't contact LDAP server
I managed to set up an openvpn server, ip-forwarding and a nat iptable rule for that.
Almost everything works as expected, but my problem is:
Smartphone -> VPN -> Internet ==> works (by ip and hostname) Smartphone -> VPN -> machine in my local network by IP ==> works Smartphone -> VPN -> machine in my local network by its hostname => DOES NOT WORK Machine w/ VPN server -> ping to machine in local network by ip or hostname => works
So, i wonder why i cant access a local machine through the vpn by its hostname. I guess I'm missing a forwarding rule??
iptables dump: # Generated by iptables-save v1.4.21 on Sun Feb 7 20:56:52 2016 *nat :PREROUTING ACCEPT [786:59064] :INPUT ACCEPT [728:53047] :OUTPUT ACCEPT [19:1487] :POSTROUTING ACCEPT [20:1576] -A POSTROUTING -s 10.8.0.0/24 -j MASQUERADE COMMIT # Completed on Sun Feb 7 20:56:52 2016
I have a strange iptables issues. I have just built a new Debian install and starting adding some real basic rules (see below) the problem seems to be that the localhost itself can't get any returning traffic. That is, it seems to be allowed outgoing traffic but not the connected, returning traffic. Ordinarily allowing Established Connections would resolve this, see the rule below, but it hasn't. Why this doesn't work. Removing the last DROP in the INPUT chains obviously makes the traffic work!
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -j ACCEPT -p tcp --dport 22 iptables -A INPUT -j ACCEPT -s x.x.x.x iptables -A INPUT -j ACCEPT -s x.x.x.x iptables -A INPUT -j ACCEPT -s x.x.x.x -p tcp --dport 80 iptables -A INPUT -j ACCEPT -s x.x.x.x -p tcp --dport 8080 iptables -I INPUT 1 -i lo -j ACCEPT iptables -A INPUT -j DROP
I have used /etc/fonts/local.conf to control how the fonts looks like in my laptop, which runs a Gentoo. In particular, I don't want anti-aliasing. I copied the file to my Debian desktop, but it seems the file doesn't take effect, even after reboot. Do I need to do something else to make it take effect?
I have setup Postfix + Dovecot on my basic debian 5 server. If I send a message to a email@example.com from mutt, it delivers just fine and is visible when viewed through squirrelmail, I can also send just fine.
My issue is that irrespective of what options I set in main.cf, I cannot for the life of me get Postfix to stop erroring with "Recipient address rejected: User unknown in virtual alias table". I'm stumped.
My main.cf is as follows code...
I do not want to setup virtual hosting with MySQL or similar, I literally want to receive mail in local users mailboxes for a single domain. Any ideas on what's missing?
I have some beginner questions about DHCP, Avahi, and configuring a small home LAN.Suppose I have a dynamic IP address assigned by my ISP, which requires DHCP be enabled in my dsl modem/router/"firewall" [sic]. Suppose for simplicity I have just one PC behind the dsl modem.I think "enabling DHCP" in the modem/router means that a DHCP client runs on the router, which communicates with a DHCP server run by my ISP when I boot up a PC on my LAN. Is that guess correct? Can I get DHCP to assign a particular local IP, say 192.168.1.10 (which is not the one taken by the router--- for this discussion, let's say that is 192.168.1.0) to my PC each time I boot it up?
Now suppose I want to build a stand-alone firewall, so that my LAN will have the firewall and the first PC behind the modem, with the first PC virtually behind the firewall. By default, I think these will both have DHCP clients running which I need to configure properly. The firewall should also have a DHCP server which should control how local IP addresses are assigned, correct? I should try to arrange that the LAN has only DHCP server, only one NTP timeserver, only one DNS nameserver, correct?My first PC seems to have installed an autorun client called Avahi, which performs DNS multicast services and incorporates something called zeroconf which seems to have something to do with remote desktops, which I don't need and which is a potential security hazard. But it seems that Avahi is an intrinsic part of the KDE desktop and cannot be removed. Just want to be sure that Avahi can coexist comfortably with dhcp3-client, which is also installed on that PC. They perform different tasks, correct?If I can get the stand-alone firewall to work, I know I need to turn off the commercial firewall in the dslmodem/router/firewall device. Should I purchase a bridge and try to turn off the routing function also?