Home / user-98421

steveyang's questions

Martin Hope
steveyang
Asked: 2013-02-20 19:36:05 +0800 CST
  • 5

How to concatenate the rotated logs back together to make the original file?

huali-access.log     huali-access.log.15  huali-access.log.21  huali-access.log.28  huali-access.log.34  huali-access.log.40  huali-access.log.47  huali-access.log.6
huali-access.log.1   huali-access.log.16  huali-access.log.22  huali-access.log.29  huali-access.log.35  huali-access.log.41  huali-access.log.48  huali-access.log.7
huali-access.log.10  huali-access.log.17  huali-access.log.23  huali-access.log.3   huali-access.log.36  huali-access.log.42  huali-access.log.49  huali-access.log.8
huali-access.log.11  huali-access.log.18  huali-access.log.24  huali-access.log.30  huali-access.log.37  huali-access.log.43  huali-access.log.5   huali-access.log.9
huali-access.log.12  huali-access.log.19  huali-access.log.25  huali-access.log.31  huali-access.log.38  huali-access.log.44  huali-access.log.50
huali-access.log.13  huali-access.log.2   huali-access.log.26  huali-access.log.32  huali-access.log.39  huali-access.log.45  huali-access.log.51
huali-access.log.14  huali-access.log.20  huali-access.log.27  huali-access.log.33  huali-access.log.4   huali-access.log.46  huali-access.log.52
logging
Martin Hope
steveyang
Asked: 2012-08-24 11:30:28 +0800 CST
  • 0

I want to direct the users to different web services with nginx configuration.

The scenario is for the internal users with host name from 192.168.1.1 to 192.168.1.255 I want to serve them some web service but for the other external visitor I don't want this to be realised.

I know I could use IP_TABLES to enable this feature, but I use IP_TABLE rules mainly for firewall purpose, I don't want to mix it with this configuration.

Is there any configuration available to me in the nginx.conf?

nginx
Martin Hope
steveyang
Asked: 2012-04-04 22:53:41 +0800 CST
  • 1

I encountered a weird problem that the response time returned by ping is almost fixed at 98ms.

Either I ping the gateway, or I ping a local host or a internet host. The response time is always around 98ms although the actual delay is obvious.

However, the reverse ping (from a local machine to this host) works properly.

The following is my route table and the result:

route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.1.1     0.0.0.0         UG    100    0        0 eth1
60.194.136.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
169.254.0.0     0.0.0.0         255.255.0.0     U     1000   0        0 eth1
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1

# ping the gateway
ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_req=1 ttl=64 time=98.7 ms
64 bytes from 192.168.1.1: icmp_req=2 ttl=64 time=97.0 ms
64 bytes from 192.168.1.1: icmp_req=3 ttl=64 time=96.0 ms
64 bytes from 192.168.1.1: icmp_req=4 ttl=64 time=94.9 ms
64 bytes from 192.168.1.1: icmp_req=5 ttl=64 time=94.0 ms
^C
--- 192.168.1.1 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4004ms
rtt min/avg/max/mdev = 94.030/96.149/98.744/1.673 ms 

#ping a local machine
ping 192.168.1.88
PING 192.168.1.88 (192.168.1.88) 56(84) bytes of data.
64 bytes from 192.168.1.88: icmp_req=1 ttl=64 time=98.7 ms
64 bytes from 192.168.1.88: icmp_req=2 ttl=64 time=96.9 ms
64 bytes from 192.168.1.88: icmp_req=3 ttl=64 time=96.0 ms
64 bytes from 192.168.1.88: icmp_req=4 ttl=64 time=95.0 ms
^C
--- 192.168.1.88 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3003ms
rtt min/avg/max/mdev = 95.003/96.696/98.786/1.428 ms

#ping a internet host
 ping google.com
PING google.com (74.125.128.139) 56(84) bytes of data.
64 bytes from hg-in-f139.1e100.net (74.125.128.139): icmp_req=1 ttl=42 time=99.8 ms
64 bytes from hg-in-f139.1e100.net (74.125.128.139): icmp_req=2 ttl=42 time=99.9 ms
64 bytes from hg-in-f139.1e100.net (74.125.128.139): icmp_req=3 ttl=42 time=99.9 ms
64 bytes from hg-in-f139.1e100.net (74.125.128.139): icmp_req=4 ttl=42 time=99.9 ms
^C64 bytes from hg-in-f139.1e100.net (74.125.128.139): icmp_req=5 ttl=42 time=99.9 ms

--- google.com ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 32799ms
rtt min/avg/max/mdev = 99.862/99.925/99.944/0.284 ms

I am running iperf to test the bandwidth, the rate is quite low for a LAN connection. 

iperf -c 192.168.1.87 -t 50 -i 10 -f M
------------------------------------------------------------
Client connecting to 192.168.1.87, TCP port 5001
TCP window size: 0.06 MByte (default)
------------------------------------------------------------
[  4] local 192.168.1.139 port 54697 connected with 192.168.1.87 port 5001
[ ID] Interval       Transfer     Bandwidth
[  4]  0.0-10.0 sec  6.12 MBytes  0.61 MBytes/sec
[  4] 10.0-20.0 sec  6.38 MBytes  0.64 MBytes/sec
[  4] 20.0-30.0 sec  6.38 MBytes  0.64 MBytes/sec
[  4] 30.0-40.0 sec  6.25 MBytes  0.62 MBytes/sec
[  4] 40.0-50.0 sec  6.38 MBytes  0.64 MBytes/sec
[  4]  0.0-50.1 sec  31.6 MBytes  0.63 MBytes/sec
nat ping local-area-network route
Martin Hope
steveyang
Asked: 2012-04-04 09:03:16 +0800 CST
  • 0

I have edited the /etc/network/interfaces file and I use the sudo /etc/init.d/networking restart.

After restart, the eth1 interfaces don't setup properly. I need a hard reboot to enable this configuration. Meanwhile the command line hints: Running /etc/init.d/networking restart is deprecated because it may not enable again some interfaces.

Am I using the run command to restart network interfaces?

auto eth1
iface eth1 inet static
    address 192.168.1.87
    netmask 255.255.255.0
    gateway 192.168.1.1
networking service interface
Martin Hope
steveyang
Asked: 2012-04-04 05:18:59 +0800 CST
  • 5

Saying I have a linux server as a router from LAN to WAN. I don't want any incoming WAN request for safety issue. So how should I block all the incoming request through the WAN interface, but doesn't limit the LAN users' normal internet activity?

Which application should I use? (iptables?). Which service will be interrupted if I shut up all incoming traffic?

firewall networking iptables interface
Martin Hope
steveyang
Asked: 2012-03-07 07:42:34 +0800 CST
  • 0

There is a VM ubuntu server I am using which is named vm.

I used to remotely log into it through SSH public key.

But now I need to use ssh to other servers FROM vm, ex. pushing to heroku.

There is an unexpected results for that:

  1. When use my local console to remote control vm, use ssh push won't succeed, it complains about failed publickey.
  2. However, when I use the vm directly (from the linux terminal), I could push with ssh without error.

My first thought would be some mis-configuration of the ssh key forwarding, any clues for me to solve this problem?

ssh remote
Martin Hope
steveyang
Asked: 2012-02-15 23:53:45 +0800 CST
  • 5

I have a router with WAN and LAN setup and act as DHCP server/gateway on my local LAN. The IP address is 192.168.1.1.

Today, I was hit by an internet failure and I checked the ping and get this weird ping result. Why the router continues to look for himself?

From 192.168.1.88: icmp_seq=6 Redirect Host(New nexthop: 192.168.1.1)
From 192.168.1.88: icmp_seq=6 Redirect Host(New nexthop: 192.168.1.1)
...........
router ping
Martin Hope
steveyang
Asked: 2012-02-10 07:04:05 +0800 CST
  • 0

I use the authorized-key to log into my remote ubuntu server. I need to use scp frequently to cp files from my local machine to my remote machine. I want to enable the autocompletion as I did with my local machine by bash-autocompletion.

How could I do that?

Updated

I tried zsh(https://github.com/robbyrussell/oh-my-zsh), the scp works fine with auto-completion. How could I do it with my bash?

ssh scp
Martin Hope
steveyang
Asked: 2012-02-10 01:40:05 +0800 CST
  • 14

I want to setup a ftp for couple of ftp-only users with vsftpd. I configured the FTP to enable local user access. It works fine. But once I edit the users' shell to /usr/sbin/nologin, it couldn't log into the FTP with the following error:

Response:   220 Welcome to the Scent Library's File Service.
Command:    USER marketftp
Response:   331 Please specify the password.
Command:    PASS ******
Response:   530 Login incorrect.

Here is what I have done:

  • All ftp-only user will have /srv/ftp as their home directory.The directory information is

    /srv/ftp: drwxr-xr-x 3 root slftp 4.0K 2012-02-09 17:20 ftp/

  • All the ftp-only users will be in the group slftp;

    I created the user with adduser and ended up with this /etc/passwd entry: marketftp:x:1001:1001::/srv/ftp:/usr/sbin/nologin

    And this in /etc/group: slftp:x:1001:marketftp

  • The vsftpd is configured with the following to limit the user to their own home except local users in the vsftpd.chroot_list:

    chroot_local_user=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd.chroot_list

Where is my problem? As the FTP could be logged in by normal local users, the connection is fine. But why couldn't the ftp-only user login?

linux ftp vsftpd users