Juddling's questions

I'm running debian

iostat -x
Linux 2.6.32-5-amd64 (server56856.uk2net.com)   27/04/13        _x86_64_        (4 CPU)

avg-cpu:  %user   %nice %system %iowait  %steal   %idle
           4.59    0.01    1.08    2.46    0.00   91.85

Device:         rrqm/s   wrqm/s     r/s     w/s   rsec/s   wsec/s avgrq-sz avgqu-sz   await  svctm  %util
sdb               4.63    67.90    2.05   14.91   750.81   654.14    82.80     0.05    2.66   6.91  11.72
sda               4.90    67.90    1.79   14.91   750.10   654.14    84.07     0.06    3.34   7.18  12.00
md0               0.00     0.00    0.12    0.07     1.00     0.57     8.00     0.00    0.00   0.00   0.00
md1               0.00     0.00    2.22   81.44    87.81   650.97     8.83     0.00    0.00   0.00   0.00

Which seems nice and low.

But then:

uptime 15:28:07 up 224 days,  3:53,  1 user,  
load average: 2.46, 2.50, 2.37

I have four cores

Why are the load averages so high?

My /var/log/apache2/error.log is filling up about 1GB per hour with PHP Notice errors.

I've tried adding this: /apache2.conf

php_value error_log none

And in my /cgi/php.ini:

error_reporting = E_ERROR
display_errors = On
display_startup_errors = Off
log_errors = Off

PHP is running through fcgi. Even though display errors is ON, it is NOT displaying errors.

Is there a seperate config file I should be editting?

OS: Ubuntu Linux 10.04 PHP: 5.3.2 Apache: 2.2.14

i've installed (as root)

aptitude install curl php5-curl libcurl3 libcurl3-dev

and added extension=curl.so to my php.ini (i assumed this wasn't done automatically because i'm using Lighty and not apache)

service lighttpd restart

But still no luck, there is nothing about cURL when I run phpinfo()

curl.so is located in /usr/lib/php5/20090626

My FTP(s) isn't working when my firewall is enabled. I have always had my iptables set up for me in the past, I learnt roughly how to set one up yesterday, but I've missed a rule that this requires. Here is my iptables.rules

# Generated by iptables-save v1.4.4 on Tue Nov 16 23:23:50 2010
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]

-A INPUT -i lo -j ACCEPT
-A INPUT -m state -i eth0 --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 20:21 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 989:990 -j ACCEPT
-A INPUT -p tcp -m tcp -i eth0 --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp -i eth0 --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp -i eth0 --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp -i eth0 --dport 10000 -j ACCEPT
-A INPUT -p icmp -i eth0 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-port-unreachable


COMMIT
# Completed on Tue Nov 16 23:23:50 2010
# Generated by iptables-save v1.4.4 on Tue Nov 16 23:23:50 2010
*mangle
:PREROUTING ACCEPT [95811:65665815]
:INPUT ACCEPT [92355:65212126]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [55795:22371752]
:POSTROUTING ACCEPT [55795:22371752]
COMMIT
# Completed on Tue Nov 16 23:23:50 2010
# Generated by iptables-save v1.4.4 on Tue Nov 16 23:23:50 2010
*nat
:PREROUTING ACCEPT [5132:543438]
:POSTROUTING ACCEPT [953:67517]
:OUTPUT ACCEPT [953:67517]
COMMIT
# Completed on Tue Nov 16 23:23:50 2010

So just to summarize, my FTP will connect but not show any files with the firewall enabled. with firewall disabled, everything is perfect.

EDIT: the only otherway I have got this to work with the firewall is disabling ipv6, disabling TLS and adding a rule to the firewall which allows connection from my home network (server is elsewhere)

My /var/log/btmp file is 1.3 GB in size. I've read that the file is "Used to store information about failed login".

What does this mean for my server? And can I delete this file?