Pitto's questions

My old Debian firewall died and I'm migrating saved rules to Ubuntu this way:

iptables-restore < firewall_config

I get this error:

Bad argument `192.168.1.0/255.255.255.0'
Error occurred at line: 18

Opening the file here's line 18:

-A POSTROUTING -s ! 192.168.1.0/255.255.255.0 -j MASQUERADE

What is wrong?

Edit:

For a more complete question here's the firewall rule backup made with iptables-save on debian:

# Generated by iptables-save v1.3.6 on Tue Sep 14 11:21:30 2010
*mangle
:PREROUTING ACCEPT [11666894:3426002549]
:INPUT ACCEPT [3992541:2783596820]
:FORWARD ACCEPT [7601705:635682622]
:OUTPUT ACCEPT [3786217:2807778972]
:POSTROUTING ACCEPT [4294041:3102897533]
COMMIT
# Completed on Tue Sep 14 11:21:30 2010
# Generated by iptables-save v1.3.6 on Tue Sep 14 11:21:30 2010
*nat
:PREROUTING ACCEPT [7593900:393423684]
:POSTROUTING ACCEPT [27503:1709683]
:OUTPUT ACCEPT [92965:5762818]
-A PREROUTING -p tcp -m tcp --dport 23 -j DNAT --to-destination 172.0.0.1:23 
-A PREROUTING -s x.y.0.0/255.255.0.0 -p tcp -m tcp --dport 222 -j DNAT --to-destination 172.0.0.2:22 
-A POSTROUTING -s 172.0.0.2 -j ACCEPT 
-A POSTROUTING -s ! 192.168.1.0/255.255.255.0 -j MASQUERADE 
COMMIT
# Completed on Tue Sep 14 11:21:30 2010
# Generated by iptables-save v1.3.6 on Tue Sep 14 11:21:30 2010
*filter
:INPUT DROP [5448:597666]
:FORWARD DROP [175410:8444546]
:OUTPUT ACCEPT [3785918:2807753497]
-A INPUT -p icmp -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT 
-A INPUT -i lo -j ACCEPT 
-A INPUT -d 172.0.0.121 -j ACCEPT 
-A INPUT -s 172.0.0.121 -j ACCEPT 
-A INPUT -p tcp -m tcp --sport 22 -j ACCEPT 
-A INPUT -p tcp -m tcp --sport 53 -j ACCEPT 
-A INPUT -p udp -m udp --sport 53 -j ACCEPT 
-A INPUT -p tcp -m tcp --sport 80 -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT 
-A INPUT -p tcp -m tcp --sport 443 -j ACCEPT 
-A INPUT -p tcp -m tcp --sport 4445 -j ACCEPT 
-A INPUT -p tcp -m tcp --sport 21 -j ACCEPT 
-A INPUT -p tcp -m tcp --sport 20 -j ACCEPT 
-A INPUT -p tcp -m tcp --sport 8085 -j ACCEPT 
-A INPUT -p tcp -m tcp --sport 23 -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 10000 -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 8988 -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT 
-A INPUT -p tcp -m tcp --sport 25 -j ACCEPT 
-A FORWARD -p icmp -j ACCEPT 
-A FORWARD -d 172.0.0.121 -j ACCEPT 
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 110 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 143 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 20 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 21 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 25 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 53 -j ACCEPT 
-A FORWARD -p udp -m udp --dport 53 -j ACCEPT 
-A FORWARD -s 172.0.0.123 -p tcp -m tcp --dport 8999 -j ACCEPT 
-A FORWARD -s 172.0.0.123 -p tcp -m tcp --dport 12177 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 8085 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 23 -j ACCEPT 
-A FORWARD -s 172.0.0.187 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 5573 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 5574 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 5500 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 5540 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 5553 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 5557 -j ACCEPT 
-A FORWARD -p tcp -m tcp --dport 443 -j ACCEPT 
-A FORWARD -p tcp -m tcp --sport 443 -j ACCEPT 
-A FORWARD -s 192.168.2.0/255.255.255.0 -d 172.0.0.2 -j ACCEPT 
-A FORWARD -s 192.168.3.0/255.255.255.0 -d 172.0.0.2 -j ACCEPT 
-A FORWARD -s 192.168.4.0/255.255.255.0 -d 172.0.0.2 -j ACCEPT 
-A FORWARD -s 192.168.5.0/255.255.255.0 -d 172.0.0.2 -j ACCEPT 
-A FORWARD -s 192.168.6.0/255.255.255.0 -d 172.0.0.2 -j ACCEPT 
-A FORWARD -s 192.168.7.0/255.255.255.0 -d 172.0.0.2 -j ACCEPT 

COMMIT
# Completed on Tue Sep 14 11:21:30 2010

I need to share my pc with a friend of mine living in India.

His pc is a p4 and he needs a bit of horsepower for calculation.

Since I have an i5 I thought to let him vnc and use it but this would not allow me to use the computer at the same time.

Is there a way to use the computer at the same time with different users?

I've read Xorg is able to do this but I am not sure is the best solution nor I can implement it.

We have Ubuntu 12.04 64bit on the i5 side and Ubuntu 12.04 32bit on the p4 side.

Thank you for your kind help.

That's all I have to do: remove only 1st page from a LOT of pdf files...

Please tell me that magic exists.

That's it...

Brightness buttons are still working great but volume button simply won't do anything...

What can I do?

Thanks.

ps

I have an Asus 1215n and Ubuntu 12.04

We have a mysql server working on Ubuntu server.

Many clients (using a Windows Xp app) give us the "Lost connection to MySQL server during query".

How can I track down the problem?

The server is always fully functional and I don't have any diagnostic idea. The server is sitting on a VmWare ESXi and has always worked perfectly.

I have an Ubuntu 10.04 box that was once configured as Squid Transparent Proxy. Navigation was perfect: my windows clients had no troubles.

The problem I had was that users were not able send or receive mail using outlook (and outlook express). So I've googled here and there and found out a solution:

sudo iptables -t nat -A POSTROUTING -p TCP --dport 25 -j MASQUERADE

sudo iptables -t nat -A POSTROUTING -p TCP --dport 110 -j MASQUERADE

Everything went great.

Now I've enabled squid authentication (the simple one using a text file) and my outlook and outlook express stopped working again. I've read that the problem is not really squid related because it won't proxy smtp or pop... But I still need to solve it. NAT? Port forwarding?

What kind of commands should I use?

The squid server has a single NIC and can get on the internet and solve names using opendns servers witout problems.

configuration on server: ip 192.168.1.210 subnet 255.255.255.0 gateway 192.168.1.5

On clients I use: ip 192.168.1.x subnet 255.255.255.0 gateway 192.168.1.210

I can add further details so please ask but I don't know what could be needed to solve the problem.

EDIT:

sudo iptables -L

Chain INPUT (policy ACCEPT)

target prot opt source destination

fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh

Chain FORWARD (policy ACCEPT)

target prot opt source destination

Chain OUTPUT (policy ACCEPT)

target prot opt source destination

Chain fail2ban-ssh (1 references)

target prot opt source destination

RETURN all -- anywhere anywhere

sudo iptables -L -t nat

Chain PREROUTING (policy ACCEPT)

target prot opt source destination

REDIRECT tcp -- anywhere anywhere tcp dpt:www redir ports 3128

Chain POSTROUTING (policy ACCEPT)

target prot opt source destination

MASQUERADE tcp -- anywhere anywhere tcp dpt:smtp

MASQUERADE tcp -- anywhere anywhere tcp dpt:pop3

Chain OUTPUT (policy ACCEPT)

target prot opt source destination

I have an old proxy server

uname -a:

Linux proxy 2.6.18-6-686 SMP etc etc

I think it's Debian (I have apt-get).

I've read an interesting article to achieve the virtualization result: http://www.madgenius.com/blog/index....VM-server.html

But this server has different disks:

df -h:

Filesystem Dimens. Usati Disp. Uso% Montato su
/dev/sda1 28G 4,6G 22G 18% /
tmpfs 1015M 0 1015M 0% /lib/init/rw
udev 10M 96K 10M 1% /dev
tmpfs 1015M 0 1015M 0% /dev/shm
/dev/sda2 92M 12M 75M 14% /boot
/dev/sdb2 25G 5,9G 18G 26% /log
/dev/sdb1 9,2G 96M 8,7G 2% /squidcache

It acts mainly as proxy server but it has a LOT of iptables rules. I've tried to save and import in a new server I've prepared, getting only errors (iptables-save and then iptables-restore)

I would like to do a perfect cloning of it and, if possible, virtualize it in a vmware esxi server.

What path should I take?

I'd like to save my computer state in RAM and not on the HDD. How can I obtain this in 11.04?

I'm looking for some kind of (free or open source) document management application which should allow me to store paper documents in my personal computer allowing me to add fields of information with data entry to be able to get the digital copy back.

For example, if the document is a fine I can find it if I remember the date or the fact that is a fine or another custom field I could add to search.

OCR full text search would be a great plus but not mandatory.

I love Linux Mint's bash customization. It includes both a color prompt and a quote displayed with ASCII art.

Is it possible to have it in Ubuntu?

I hate the "normal way of browsing" in linux that forces you to triple click to select the whole navigation bar content. I can easily change this in Firefox's about:config changing the boolean to parameter "one click selects all" to true. What about Chromium - Google Chrome? Is there a trick or a workaround?

I have a Sony CX115 and I have a little footage I'd like to put on youtube. I've downloaded Arista from the Ubuntu Software Center and then I've downloaded its Youtube HD plugin. I've converted my video and uploaded it to youtube... The result is a flashy video with a lot of grey in it:

http://www.youtube.com/watch?v=1V08e5PkVDI

What could I do to publish it in high quality so it'll be viewable?

How can I change in Xbmc mouse speed? In Ubuntu is fine but when I start Xbmc it gets really much too fast...

I have the latest Puppy Linux (5.20, I think) but it has a problem with grub install at the end of the setup process.

How can I install grub (or grub2, the easiest one will be great) manually using my Ubuntu 10.04 CD?

#!/bin/bash
#
# list of synaptics device properties http://www.x.org/archive/X11R7.5/doc/man/man4/synaptics.4.html#sect4
# list  current synaptics device properties: xinput list-props '"SynPS/2 Synaptics TouchPad"'
#
sleep 5 #added delay...
xinput set-int-prop "SynPS/2 Synaptics TouchPad" "Device Enabled" 8 1
xinput --set-prop --type=int --format=32 "SynPS/2 Synaptics TouchPad" "Synaptics Two-Finger Pressure" 4
xinput --set-prop --type=int --format=32 "SynPS/2 Synaptics TouchPad" "Synaptics Two-Finger Width" 9         #  Below width 1 finger touch, above width simulate 2 finger touch. - value=pad-pixels
xinput --set-prop --type=int --format=8  "SynPS/2 Synaptics TouchPad" "Synaptics Edge Scrolling" 1 1 0       #  vertical, horizontal, corner - values: 0=disable  1=enable
xinput --set-prop --type=int --format=32 "SynPS/2 Synaptics TouchPad" "Synaptics Jumpy Cursor Threshold" 250 #  stabilize 2 finger actions - value=pad-pixels
#xinput --set-prop --type=int --format=8  "SynPS/2 Synaptics TouchPad" "Synaptics Tap Action" 0 0 0 0 1 2 3   # pad corners rt rb lt lb tap fingers 1 2 3 (can't simulate more then 2 tap fingers AFAIK) - values: 0=disable 1=left 2=middle 3=right etc. (in FF 8=back 9=forward)
xinput --set-prop --type=int --format=8  "SynPS/2 Synaptics TouchPad" "Synaptics Two-Finger Scrolling" 1 0   #  vertical scrolling, horizontal scrolling - values: 0=disable 1=enable
#xinput --set-prop --type=int --format=8  "SynPS/2 Synaptics TouchPad" "Synaptics Circular Scrolling" 1
#xinput --set-prop --type=int --format=8  "SynPS/2 Synaptics TouchPad" "Synaptics Circular Scrolling Trigger" 3

Hello everybody... The above script allowed me to use happily multitouch for a month... Now if I do a two fingers scrolling the mouse cursor just runs on the screen like possessed... Any hints?

Is there a way to stop ClamScan eating my server CPU?

Does anyone have experience with gambling games (roulette, poker and so on) on Ubuntu?

I would like to setup a touchscreen kiosk in my home with Ubuntu... Anything that works with coin and cash acceptors, reports payouts, lets the administrator set payout rates and so on

Any experiences/hints? I am interested in full statistics / pay tweakings / cash flow analysis..

I'd like to install Ubuntu on this little g4 I've found... I hope to get a better performance than Os X 10.4, is it possible?

I thought about using a server minimal install and then put on it gnome, xfce, lxde and fluxbox to find out the best user experience / performance ratio.

Any ideas or experiences about such kind of G4?

I have a mysql server, ubuntu server 10.04. It works great and we're really happy about it.

Time for updates has come and I am sincerely scared: can I do a sudo apt-get dist-upgrade with light heart? I thought that maybe using just security updates would be safer or I'm just preoccupied about nothing?

In one single question: can I cause problems to production by updating my ubuntu server?

I am trying to find a good asset management solution (gpl) for our hospital (we should take care of furniture, medical machines and personal computers), of course working on Ubuntu and web-based.

Any hints?