Tie-fighter's questions

I am using owncloud and sometimes share links with people via Facebook.

I am concerned with automatic crawling, so I would like to deny facebook access to my owncloud.thomas-steinbrenner.net server (it visits all links in order to get preview pictures, preview texts, etc.)

Is there a way to do this in nginx? Like via hostname or agent? (I feel like using IPs is a game one cannot win).

If not: Is there some other way like a blacklist project with a list of gov-, FB-, etc. -IPs for iptables?

I installed a Debian 6 with the "use LVM and encrypt" option. Now I would like to add a second disk and also encrypt it.

This is what I did so far:

1. pvcreate /dev/sdb
2. vgextend [vgname] /dev/sdb
3. lvcreate -n [lvname] -l 100%FREE [vgname]
4. luksformat -t ext3 /dev/[vgname]/[lvname]
5. updated fstab

Unfortunately trying to mount /dev/mapper/[vgname]-[lvname] produces the following error under dmesg:

VFS: Can't find ext3 filesystem on dev dm-3

What am I doing wrong?

Update 1:

pvscan

PV /dev/dm-0   VG reactorblock01   lvm2 [49.76 GiB / 0    free]
PV /dev/dm-3   VG reactorblock01   lvm2 [100.00 GiB / 0    free]
Total: 2 [149.75 GiB] / in use: 2 [149.75 GiB] / in no VG: 0 [0   ]

lvs

LV     VG             Attr   LSize   Origin Snap%  Move Log Copy%  Convert
backup reactorblock01 -wi-a- 100.00g
root   reactorblock01 -wi-ao  48.80g
swap_1 reactorblock01 -wi-ao 984.00m

ls -l /dev/mapper/

total 0
crw------- 1 root root 10, 59 Jul  7 23:34 control
lrwxrwxrwx 1 root root      7 Jul  8 01:52 reactorblock01-backup -> ../dm-4
lrwxrwxrwx 1 root root      7 Jul  7 23:34 reactorblock01-root -> ../dm-1
lrwxrwxrwx 1 root root      7 Jul  7 23:34 reactorblock01-swap_1 -> ../dm-2
lrwxrwxrwx 1 root root      7 Jul  7 23:34 sda5_crypt -> ../dm-0
lrwxrwxrwx 1 root root      7 Jul  8 01:44 sdb1_crypt -> ../dm-3

cat /etc/crypttab

sda5_crypt UUID=d09c908f-0f3b-4f3e-b86b-87ef817732db none luks

Update 2:

Easy as pie with this guide: https://wiki.archlinux.org/index.php/System_Encryption_with_LUKS and some manpages

I have a table with a text field. I constructed a query that takes the datalength of those fields and basically returns a histogram.

SELECT TEXTFieldSize, COUNT(TEXTFieldSize) AS Count FROM (SELECT DATALENGTH(data) AS TEXTFieldSize FROM table) AS Fields GROUP BY TEXTFieldSize ORDER BY TEXTFieldSize;
 ________________
| Length | Count |
|      1 |     5 |
|      3 |     2 |
|      6 |    12 |
|________|_______|

My problem is, that in order to analyse this properly I also need rows for the values that have a count of zero.

SELECT ???
 ________________
| Length | Count |
|      1 |     5 |
|      2 |     0 |
|      3 |     2 |
|      4 |     0 |
|      5 |     0 |
|      6 |    12 |
|________|_______|

Thanks in advance!

I got a RV042 (v1.2) and tried flashing 4.0.0.07; After some research I found out that the current firmware version is only flashable on v3 hardware.

1. Does anybody know what the difference is/where to find the changelog?
2. Also what's the difference between Harware v1.2 and v3?
3. Is it wise to get v3 + 4.0.0.07 instead? (I can still return the current one.)

Please advise :/

I am trying get the number of unique ip_addresses (in this case '3'). The table looks like this:

Structure:

CREATE TABLE bandits (
  key text NOT NULL,
  ip_address inet,
  offence text,
  count bigint DEFAULT 1);

Data:

COPY bandits (key, ip_address, offence, count) FROM stdin;
127.0.0.1_testing   127.0.0.1  testing  1
127.0.0.2_testing   127.0.0.2  testing  3
127.0.0.2_testing2  127.0.0.2  testing2 1
127.0.0.3_testing   127.0.0.3  testing  1

I have set up a custom jail for a spambot that is giving me trouble. Using "bantime -1" I was trying to permanently ban the botnet. I thought it was working, but when the weekly logrotate occured fail2ban unbanned all IPs.

What is the best way to permanently and persistently ban an IP using fail2ban?

Is doing something like this + logging permanently banned IP to a seperate files (that does not get rotated) a good solution?

Cheers, Thomas

P.S.: I would like to do this without new cronjobs and scripts.
P.P.S.: I'm using Debian.

I'm trying to download two sites for inclusion on a CD:

http://boinc.berkeley.edu/trac/wiki
http://www.boinc-wiki.info

The problem I'm having is that these are both wikis. So when downloading with e.g.:

wget -r -k -np -nv -R jpg,jpeg,gif,png,tif http://www.boinc-wiki.info/

I do get a lot of files because it also follows links like ...?action=edit ...?action=diff&version=...

Does somebody know a way to get around this?

I just want the current pages, without images, and without diffs etc.

P.S.:

wget -r -k -np -nv -l 1 -R jpg,jpeg,png,gif,tif,pdf,ppt http://boinc.berkeley.edu/trac/wiki/TitleIndex

This worked for berkeley but boinc-wiki.info is still giving me trouble :/

P.P.S:

I got what appears to be the most relevant pages with:

wget -r -k -nv  -l 2 -R jpg,jpeg,png,gif,tif,pdf,ppt http://www.boinc-wiki.info

Is it possible to create an VPN connection while using site-to-site VPN?

Have you ever tried or done this?

What are possible problems, pitfalls, things of the impossible, etc. ?

Also see: Is it possible to use Microsoft's "Secure Connection Rules" (IPSec) with VPN?

Is it possible to use Microsoft's "Secure Connection Rules" to authenticate/encrypt connections while using VPN at the same time?
What are the configurations necessary?

It should look like this:

Client A <-- VPN --> VPN Gateway <-- LAN --> Client B
  FTPd   <------------- IPSec ------------->   FTP

(I know there are other ways to secure FTP, I just use it for testing)

Thanks

Update 1:

To clarify the objectives:

1. Traffic in the LAN should be authenticated and have integrity, but should not be encrypted (because of the IDS)
2. Traffic passing the internet or other strange networks should have confidentiality