Rajkumar S's questions

I am using Debian 6.0.6, My ISP is IPv6 enabled and gave me one /64 ip address for my server, say, 24XX:XXXX::41/64. I have configured this IP address, netmask and want to statically set the router address. I have the Link Local address of the router (as advertised by the router). I have configured the address, netmask and gateway as follows in /etc/network/interfaces

iface eth0 inet6 static
    address  24XX:XXXX::53
    netmask 64
    gateway fe80::42XX:XXff:feXX:XXcb

I want to disable autoconfig of Global address and disable the server learning routes from router advertisements. From the docs if the following two procs entries are set as zero, autoconfig and routes learning should be disabled

net.ipv6.conf.all.accept_ra=0
net.ipv6.conf.all.autoconf=0

But ifconfig still shows an auto configured ip address and learns routes from the router advertisements.

eth0      Link encap:Ethernet  HWaddr 00:AB:CD:EF:GH:IJ  
          inet addr:202.88.xx.xx  Bcast:202.88.xx.xx  Mask:255.255.255.192
          inet6 addr: 24XX:XXXX::2AB:CDff:feEF:GHIJ/64 Scope:Global
          inet6 addr: fe80::2AB:CDff:feEF:GHIJ/64 Scope:Link
          inet6 addr: 24XX:XXXX::53/64 Scope:Global

route -A inet6 
::/0                           fe80::42XX:XXff:feXX:XXcb  UG   1   0    59 eth0
::/0                           fe80::42XX:XXff:feXX:XXcb  UGDAe 1024 0     0 eth0
::/0                           fe80::222:YYff:feYY:YY1b   UGDAe 1024 0     0 eth0

The last two entries were auto learned from router advertisement.

My expectation was that after setting accept_ra and autoconf as 0, the autoconfigured Global scope IP address and learned routes should not have appeared.

I am trying to disable autoconfigured Global Scope IP address as I do not want my MAC address to leak to the Internet. I also do not want any learned routes as I presume a rouge router with a wrong advertisement can cause my host to send packets to wrong place.

How do I measure IOPS of a running Linux server? I know that the theoretical IOPS of a SATA drive is around 90 and enterprise 10k SAS/FC disk is 180. I want to know how much my running system is using currently?

Currently I am using iotop and iostat. But both utilities do not give the IOPS number.

btw, this question is not a duplicate of this. I am not looking for benchmarking my storage system, but figure out how much IOPS is being used by my current system.

Linux kernel is hit with 2 remote dos vulnerabilities and like all good admins the kernel should be upgraded. But is there any immediate steps we can take (eg: disable SCTP) which can mitigate the effect of this kernel vulnerabilities, till the time we upgrade and reboot all servers? Also how can we check if our kernel is really vulnerable?

with regards,

raj

Just checknig out if any one's RT setup is sending RT notifications via Jabber to either users or to conference rooms.

This is a pretty useful feature to have, but could not find any reference in the net.

Thanks and regards,

raj

I am using openbgpd in freeBSD with 2 ISP connections. I have my own AS number and a /22 network. Currently I am advertising entire /22 to both networks. Inbound traffic comes in But my outbound traffic goes via a single link.

I would like to either distribute my outbound traffic via both links so that outbound traffic is also load balanced.

How to configure this using openbgpd in freebsd?

My current openbgpd config is attached for reference.

AS 00my-as
listen on xx.xx.xx.x
router-id xx.xx.xx.x
network aa.aa.aa.0/22
group "ISP1" {
  remote-as 11remoteas-1
  neighbor bb.bb.bb.1 {
   descr "ISP1"
   announce all  
  }
}
group "ISP2" {
  remote-as 22remoteas-2
  neighbor cc.cc.cc.37 {
   descr "ISP2"
   announce all  
  }
}
deny from any
deny to any
allow from bb.bb.bb.1
allow to bb.bb.bb.1
allow from cc.cc.cc.37
allow to cc.cc.cc.37

I have a debian etch server running php+apache. I am using php5-cli, php5-common, php5-mysql and php5-sybase. I want to use APD to profile my php code, but a php5-apd package is not available in debian. Even pear package is missing (only php4-pear is available). I do not want to downgrade to php4 for fear of breaking some thing. What would be the safe way to install apd for php5 in Debian Etch?

with regards,

raj

I have couple of windows clients which connect to freebsd pptp vpn (using mpd). windows clients gets ip address and dhcp servers from pptp connection. The pptp adapter properties are as follows.

PPP adapter vpn:
    Connection-specific DNS Suffix  . :
    Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
    Physical Address. . . . . . . . . : 00-53-45-00-00-00
    Dhcp Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 192.168.10.16
    Subnet Mask . . . . . . . . . . . : 255.255.255.255
    Default Gateway . . . . . . . . . : 192.168.10.16
    DNS Servers . . . . . . . . . . . : 192.168.1.1
                                        203.xx.xx.xx

I can ping from my windows client to another machine in the lan if I give it's fqdn.

C:\Documents and Settings\Sankar>ping nas.xx.ac.in
Pinging nas.xx.ac.in [192.168.2.3] with 32 bytes of data:
Reply from 192.168.2.3: bytes=32 time=871ms TTL=63
Reply from 192.168.2.3: bytes=32 time=1056ms TTL=63
Reply from 192.168.2.3: bytes=32 time=148ms TTL=63
Reply from 192.168.2.3: bytes=32 time=136ms TTL=63

Ping statistics for 192.168.2.3:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 136ms, Maximum = 1056ms, Average = 552ms

But by default, the dns server is not the one specefied from pptp server, but if I use the server specefied in dhcp it can resolve the name nas. (with out any domain part)

C:\Documents and Settings\Sankar>nslookup
Default Server:  agni.xx.blah.com
Address:  192.168.3.100

> server 192.168.1.1
Default Server:  [192.168.1.1]
Address:  192.168.1.1

> nas
Server:  [192.168.1.1]
Address:  192.168.1.1

Name:    nas
Address:  192.168.2.3

> exit

So my dns server is able to resolve domain less names. When I type

C:\Documents and Settings\Sankar>ping nas
Ping request could not find host nas. Please check the name and try again.

The query is not getting resolved. Running wireshark along showd that windows client is sending wins request which is obviously not getting answered.

77  23.928754   192.168.3.28    192.168.3.255   NBNS    Name query NB NAS<00>

My question is how can I get "ping nas" work with minimum effort (ie with out touching client) ? A sub problem is how to make it use the dns server sent to it via pptp rather than the one configured on lan interface when connected to pptp network.

with regards,

raj