profy's questions

I tried using nslookup but I'm unable to parse the result :

My current output :

nslookup -norecurse myip.opendns.com resolver1.opendns.com
Serveur :   resolver1.opendns.com
Address:  208.67.222.222

Réponse ne faisant pas autorité :
Nom :    myip.opendns.com
Address:  X.X.X.X

I just want the IP X.X.X.X

I tried using | select without any success, maybe the good way, or not ...

Thanks for your help, note that the goal is just to get my public ip in a easy way without any dependancies and quickly, an answer without nslookup or powershell can make the job.

Using AWS ELB, I want the folowing rewrite rule :

https://example.com/dl/toto.jpg should transform to https://dl.example.com/toto.jpg

I tried two ways to do this :

• matching path /dl/* and return a path deleting /dl/ somethink like #{path/dl//}.
• use a backward reference to the match with /dl/\(*\) and replacing with path \1

2 method return invalid path message :(

Is it possible to do this with AWS ELB ? And if yes, how can I do that ?

I need to stop a old server running with MySQL 4.1 with lots of database on it (MyISAM and InnoDB), and to migrate to a new one (5.1.63 installed on a fresh Squeeze). It's a shared hosting servers so I have lot's of users and databases (around 2000).

I don't want to migrate all databases at same time but one by one.

What is the best way to do this ?

Should I expect some problems to migrate ?

Since version 9.9, Bind supports inline signing, but I don't find any information on how to make it working with NSEC3. I cannot add NSEC3PARAM RR with nsupdate : I think it's normal because of inline signing, but I cannot parameter this for inline signing.

Has someone setup and tested it, or an idea ?

Thanks for answers.

I have a problem using view with MySQL server 5.0 (5.0.92)

I cannot use view with a user granted like that :

GRANT USAGE ON *.* TO 'testuser'@'' IDENTIFIED BY PASSWORD '**********';
GRANT ALL PRIVILEGES ON `testuser`.* TO 'testuser'@'';

Record in mysql db table :

mysql> select * from db where user='testuser'\G;
*************************** 1. row ***************************
             Host: 
               Db: testuser
             User: testuser
      Select_priv: Y
      Insert_priv: Y
      Update_priv: Y
      Delete_priv: Y
      Create_priv: Y
        Drop_priv: Y
       Grant_priv: N
  References_priv: Y
       Index_priv: Y
       Alter_priv: Y
Create_tmp_table_priv: Y
 Lock_tables_priv: Y
 Create_view_priv: Y
   Show_view_priv: Y
Create_routine_priv: Y
Alter_routine_priv: Y
     Execute_priv: Y
         max_size: 1024
  max_size_status: 0

I'm connected like this :

mysql> SELECT USER(),CURRENT_USER();
+-------------------------+-----------------+
| USER()                  | CURRENT_USER()  |
+-------------------------+-----------------+
| [email protected]      | testuser@       | 
+-------------------------+-----------------+

I can create view, but when I try to select in, I have this messages :

ERROR 1356 (HY000): View 'testuser.v' references invalid table(s) or column(s) or function(s) or definer/invoker of view lack rights to use them

I can show the view :

mysql> SHOW CREATE VIEW testuser.v;
| View | Create View
| v    | CREATE ALGORITHM=UNDEFINED DEFINER=`testuser`@`` SQL SECURITY DEFINER VIEW `testuser`.`v` AS select `testuser`.`t`.`qty` AS `qty`,`testuser`.`t`.`price` AS `price`,(`testuser`.`t`.`qty` * `testuser`.`t`.`price`) AS `value` from `testuser`.`t`

View refer only to table named "t" which is in the same database :

show create table testuser.t;
| t     | CREATE TABLE `t` (
`qty` int(11) default NULL,
`price` int(11) default NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1 | 

I need to GRANT SELECT ON *.* TO 'testuser'@'' to make select working on the view.

Why ?

Do you know a solution to use VIEW's without the select privileges on . ?

Thanks a lots for your answers.

I'm trying to use conntrack ftp with lvs (snat), documentations say that I need to echo "1" > /proc/sys/net/ipv4/vs/conntrack but this file doesn't exist on my system, do you know why ?

I already loaded nf_nat_ftp and ip_vs_ftp

# ls /proc/sys/net/ipv4/vs/

am_droprate amemthresh cache_bypass drop_entry drop_packet expire_nodest_conn expire_quiescent_template nat_icmp_send secure_tcp sync_threshold

Maybe because of this setting, my conntrack rule doesn't work :(

My system is a Debian Lenny with a 2.6.32 kernel (2.6.32-bpo.5-686).

Thanks for your help.

sysctl -a | grep conntrack output :

net.netfilter.nf_conntrack_generic_timeout = 600 net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120 net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60 net.netfilter.nf_conntrack_tcp_timeout_established = 432000 net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120 net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60 net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30 net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120 net.netfilter.nf_conntrack_tcp_timeout_close = 10 net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300 net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300 net.netfilter.nf_conntrack_tcp_loose = 1 net.netfilter.nf_conntrack_tcp_be_liberal = 0 net.netfilter.nf_conntrack_tcp_max_retrans = 3 net.netfilter.nf_conntrack_udp_timeout = 30 net.netfilter.nf_conntrack_udp_timeout_stream = 180 net.netfilter.nf_conntrack_icmp_timeout = 30 net.netfilter.nf_conntrack_acct = 1 net.netfilter.nf_conntrack_events = 1 net.netfilter.nf_conntrack_events_retry_timeout = 15 net.netfilter.nf_conntrack_max = 65536 net.netfilter.nf_conntrack_count = 129 net.netfilter.nf_conntrack_buckets = 16384 net.netfilter.nf_conntrack_checksum = 1 net.netfilter.nf_conntrack_log_invalid = 0 net.netfilter.nf_conntrack_expect_max = 256 net.ipv4.netfilter.ip_conntrack_generic_timeout = 600 net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_sent = 120 net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_sent2 = 120 net.ipv4.netfilter.ip_conntrack_tcp_timeout_syn_recv = 60 net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 432000 net.ipv4.netfilter.ip_conntrack_tcp_timeout_fin_wait = 120 net.ipv4.netfilter.ip_conntrack_tcp_timeout_close_wait = 60 net.ipv4.netfilter.ip_conntrack_tcp_timeout_last_ack = 30 net.ipv4.netfilter.ip_conntrack_tcp_timeout_time_wait = 120 net.ipv4.netfilter.ip_conntrack_tcp_timeout_close = 10 net.ipv4.netfilter.ip_conntrack_tcp_timeout_max_retrans = 300 net.ipv4.netfilter.ip_conntrack_tcp_loose = 1 net.ipv4.netfilter.ip_conntrack_tcp_be_liberal = 0 net.ipv4.netfilter.ip_conntrack_tcp_max_retrans = 3 net.ipv4.netfilter.ip_conntrack_udp_timeout = 30 net.ipv4.netfilter.ip_conntrack_udp_timeout_stream = 180 net.ipv4.netfilter.ip_conntrack_icmp_timeout = 30 net.ipv4.netfilter.ip_conntrack_max = 65536 net.ipv4.netfilter.ip_conntrack_count = 129 net.ipv4.netfilter.ip_conntrack_buckets = 16384 net.ipv4.netfilter.ip_conntrack_checksum = 1 net.ipv4.netfilter.ip_conntrack_log_invalid = 0 net.nf_conntrack_max = 65536

I have a server with a zfs file system (nexenta core), and I'm sharing files overs nfs with zfs share share_nfs.

When I mount the file system on my client (a ubuntu workstation) I can't have the original UID/GID :(

I mount my client with the following options : 192.168.1.4:/home /media/testnfs nfs rw,dev,noexec,nosuid,auto,nouser,noatime,rsize=8192,wsize=8192 0 0

If I configure idmapd I have nobody:nogroup and without idmapd I have 4294967294:4294967294, how can I get the original ID's ?

Is it a problem with the nfs server or the client ?

Thanks for answers.

I want to rewrite the recipient adress of a mail queued in a hold queue.

Is it possible to rewrite the mail by hand with the mail id in the postfix queue ?

Maybe a command like this :

postrewrite -I ETGH12DD [email protected]

Thanks for yours answers.

When I querie ns server on a .NET servers, answers are always in the same order :

dig ns google.net @F.GTLD-SERVERS.net +short
ns1.google.com.
ns2.google.com.
ns3.google.com.
ns4.google.com.

If I don't use .net server anwser is rotated :

dig ns google.net +short
ns4.google.com.
ns1.google.com.
ns2.google.com.
ns3.google.com.
dig ns google.net +short
ns2.google.com.
ns1.google.com.
ns4.google.com.
ns3.google.com.

com. servers seems to work like net. servers (no rotate), but org. servers and all other I tried seems to rotate answers.

Why net. and com. servers don't rotate their answers ?

Hy,

Why a chrooted bind need to mknod dev/null and dev/random ?

Howto say it's necessary but without explain reasons, I administrate chrooted bind servers without theses options, and all seems to work perfectly ...

Thanks for your answers.