Non-system wide DNS Lookups on RBL (i.e. logical groups supported)
Sun Java System Messaging Server documetation seems to state that RBL filtering can only exist in one of three files that are used for filtering based off of inbound connection IP address. My question is, can conditional execution occur for a section of one of these files based of destination e-mail address?
I'd like to have multipule levels of e-mail filtering using RBL and allow users to be assinged to the level of filtering they desire by joining a logical group which will enable a level of RBL filtering for that logical group.
Any help is greatly appreciated, as far as I can see, I can only have one system wide filtering set, so I can't possibly have one set of e-mail ids using 10 RBL (remote black lists) and another group e-mail ids using a smaller set of RBLs.
======= From the documentation =======
MAIL_ACCESS : Used to block incoming connections based on combined information found in SEND_ACCESS and PORT_ACCESS tables: that is, the channel and address information found in SEND_ACCESS combined with the IP address and port number information found in PORT_ACCESS.
ORIG_MAIL_ACCESS : Used to block incoming connections based on combined information found in ORIG_SEND_ACCESS and PORT_ACCESS tables: that is, the channel and address information found in ORIG_SEND_ACCESS combined with the IP address and port number information found in PORT_ACCESS.
PORT_ACCESS : Used to block incoming connections based on IP number.
====================================
Alas, the RBL stuff is done before iMS even knows who the message is addressd to. That stuff is done at the initial connection phase, as our philosophy is to reject a message just as soon as possible . . .
After the message is accepted, then you can opt-in/out for things like spamassassin, brightmail, etc.
Similar Messages
-
How to use non system-wide installed gtk engine?
Hello!
I want to use the new oxygen-gtk engine, but at work I have no root rights. Thats why I installed the engine into an directory on my home directory. Now I have to tell GTK where to find this new engine. I tried the following solutions, but nothing works:
gtkrc-2.0: module_path: GTK_WARNING: module path now ignored
"GTK_PATH=/home/user/.gtk2.0/engines": does not work
Everytime I get:
Gtk-WARNING **: Unable to locate theme engine in module_path: "oxygen-gtk"
Is there any way to tell GTK where to find my user installed engine?
Regards,
iggy
[edit]
changed title, hopefully someone answers now...
[/edit]
Last edited by iggy (2010-12-21 18:03:11)Well, we do blame you, as it happens.
Please read the Forum Etiquette, which will tell you why we blame you for bumping, and for many other things. -
Java doesn't pick up system's DNS settings change until restarted
Hello,
I have a service running on a few Linux computers. Those computers have a NIC, which is configured with a fixed IP address. So /etc/resolv.conf contains the IP address of the LAN's DNS server. But most of the time, the computers are not plugged into the LAN at all. Instead, they connect themselves periodically to the Internet by establishing a ppp connection. When it happens, the ISP's DHCP server assign them new IP parameters, including their DNS server's IP address. And /etc/resolv.conf gets updated with this address.
But it seems that java doesn't take care of DNS change taking place during a run. Which means that my program (started at boot with no connectivity at all) tries to connect to some host, and obviously trigger an "UnknownHostException" (at that point it does try to contact the LAN's DNS server). Quite logical. Later, the ppp link become active. But my program still try to contact the LAN's DNS server, despite the new configuration in /etc/resolv.conf. As such, it will forever trigger UnknowHostExceptions, until it gets restarted (it will then pick up the new settings) or it is plugged back into the LAN (it will finally reach the LAN's DNS server).
This is quite a problem as during one single execution, the machine may encounter several DNS configuration changes, and this problem basically means that it will be impossible for my application to resolve any name at all.
So is there a way to tell Java to re-read the system wide DNS configuration? Or is there some option to prevent Java to "cache" the DNS server to use?
To demonstrate my problem, I've written a simple test case, see below.
To get the problem:
1) Put a bogus DNS server into your /etc/resolv.conf
2) Start the test program. Wait for some time: it will trigger UnknownHostExceptions.
3) Fix the entry in /etc/resolv.conf, and check it actually works (eg ping www.google.be)
4) Test program will continue to trigger UnknownHostExceptions forever.
One interesting fact is that someone tried this test on Windows, and didn't suffer from this behaviour, eg the application reacts to DNS system settings changes dynamically. So it looks like a Linux-only problem.
Thanks in advance for your insight.
Pierre-Yves
package com.test.dnsresolver;
import java.net.InetAddress;
import java.net.UnknownHostException;
public class DnsResolver {
private static String urlString = "www.google.com";
public static void main(String[] args) {
* Specified in java.security to indicate the caching policy for successful
* name lookups from the name service. The value is specified as as integer
* to indicate the number of seconds to cache the successful lookup.
java.security.Security.setProperty("networkaddress.cache.ttl" , "10");
* Specified in java.security to indicate the caching policy for un-successful
* name lookups from the name service. The value is specified as as integer to
* indicate the number of seconds to cache the failure for un-successful lookups.
* A value of 0 indicates "never cache". A value of -1 indicates "cache forever".
java.security.Security.setProperty("networkaddress.cache.negative.ttl", "0");
int loopCounter = 0;
while (true) {
InetAddress resolved;
try {
resolved = InetAddress.getByName(urlString);
System.out.println("Loop " + loopCounter + ": resolved IP address: " + resolved);
} catch (UnknownHostException e) {
System.out.println("Loop " + loopCounter + ": UnknownHostException");
e.printStackTrace();
loopCounter++;
try {
Thread.sleep(1000);
} catch (InterruptedException e) {}
}Well, the nameservice property allowing to specify my DNS server of choice is interesting (I didn't know about those), but not very usable, as the DNS server to use is not known in advance (it may be whatever the ISP tells me to use at the time where the ppp link gets established). So no real solution there.
The fact that it caches /etc/resolv.conf content for 300s is very interesting, but having no possibility to impact on this duration really is a pity. There should be some kind of property to fix this behaviour. So as you say, a custom provider may be the only solution.
So far, the hack I use to get this working is based on code similar to this one (it is presented here in a similar form than my test case above). Obviously, reading the /etc/resolv.conf for each dns resolution is not an option in a real environment, but you get the idea.
package com.test.dnsresolver;
import java.io.BufferedReader;
public class DnsResolver {
private static final String urlString = "www.google.com";
private static final String resolvConf = "/etc/resolv.conf";
public static void main(String[] args) {
int loopCounter = 0;
while (true) {
loopCounter++;
try {
Thread.sleep(1000);
} catch (InterruptedException e) {}
// Parse the current DNS server to be used in the config
String nameserver = null;
try {
BufferedReader input = new BufferedReader(new FileReader(new File(resolvConf)));
String currentLine = null;
while (( currentLine = input.readLine()) != null){
// Take care of potential comments
currentLine = currentLine.substring(0, currentLine.indexOf("#") == -1
? currentLine.length() : currentLine.indexOf("#") );
if (currentLine.contains("nameserver")) {
// It is the line we are looking for
nameserver = currentLine;
break;
} catch (FileNotFoundException e) {
System.out.println("Loop " + loopCounter + ": FileNotFoundException");
} catch (IOException e) {
System.out.println("Loop " + loopCounter + ": IOException");
if (nameserver == null) {
// No "nameserver" line found
System.out.println("Loop " + loopCounter + ": No nameserver found in configration file!");
continue;
// Trim it to just contain the IP address
nameserver = (nameserver.replace("nameserver", "")).trim();
System.out.println("Loop " + loopCounter + ": Going to use DNS server " + nameserver);
// At this point, we know which server to use, now perform the resolution
Hashtable<String, String> env = new Hashtable<String, String>();
env.put("java.naming.factory.initial", "com.sun.jndi.dns.DnsContextFactory");
env.put("java.naming.provider.url", "dns://" + nameserver);
DirContext ictx;
try {
ictx = new InitialDirContext(env);
Attributes attrs1 = ictx.getAttributes(urlString, new String[] {"A"});
System.out.println("Loop " + loopCounter + ": Manual resolution: +" + attrs1.get("a").get() + "+");
} catch (NamingException e) {
System.out.println("Loop " + loopCounter + ": NamingException");
}So maybe I should adapt and package this into a proper provider and specify it for sun.net.spi.nameservice.provider. Any link, info or example about how a proper provider should look like?
Thanks for your advices! -
Change the background colour of windows system-wide? (non B/W)
I have difficulty reading on a white background, but find the White on Black theme doesn't work for me either. The background colour which works best for me is #F9EEE2;. I can work for nearly twice as long in a window with that background colour.
So I prefer apps which allow me to change the background colour of their windows (e.g. [PathFinder|http://www.cocoatech.com>, [iTerm|http://iterm.sourceforge.net>, [Journler|http://wiki.journler.com/index.php?title=Main_Page], [OmniOutliner|http://www.omnigroup.com/products/omnioutliner>, [BBEdit|http://www.barebones.com/index.shtml], [TranslateIt|http://mac.gettranslateit.com>). I'll pay for this feature.
However, I often don't have the choice. For example, [PoEdit|http://www.poedit.net/index.php] is the only OSX-native gettext .po editor (since Snow Leopard killed Cocoa-Java and thus [LocFactoryEditor|http://www.triplespin.com/en/products/locfactoryeditor.html]) , so I have to use it. I asked the developer if he could add a preference to change the background colour of the window (PoEdit is Carbon). He replied that this sort of preference should be system-wide, shouldn't it?
From the Linux POV, yes, it should. Do we have that sort of option in OSX Snow Leopard? Previous OSX theme apps ShapeShifter and Mystique are respectively not yet compatible with OSX, and not available any more. I had a look at [ThemePark|http://www.geekspiff.com/software/themepark> (which does support 10.6), but don't know where to start in editing resource files. So what are our options for changing window background colour system-wide? (Or is there a Carbon plugin or library the PoEdit developer could use to embed that preference for his app.?)
Thanks for any help you can offer with this.I asked a similar question before...as far as I know, there is no option to change this system-wide...short of creating a new color profile or using some hidden Terminal command.
-
Constant dns lookups for non-existent addresses
Hi. I'm connected to a large network and I've noticed
that there are constant dns lookups for addresses that
do not exist.
When i run tcpdump, almost every second
I see a few requests to the dns server from my IP. And all
of them get the response NXDOMAIN.
Is there a reason this should happen or is there something
not working properly on my computer?
Thanks
Last edited by m00nblade (2010-01-25 21:42:23)It all depends on your setup.
If you use only local mail domains, just make sure you do not have a catchall address (luser_relay) and messages to unknown users will not be accepted by Postfix in the first place.
If you use virtual mail domain, you will need to change your setup as Apple's default setup will always accept mail for unknown users and then bounce it back to sender. See here for a how to: Making Virtual Mail Users in OS X 10.4/10.5 Server
HTH,
Alex -
DNS lookups to VPN hijacked by WRVS4400N (fw v1.1.13)?
I have a WRVS4400N on the latest firmware offered by Cisco. After a whole run of problems with previous firmware, this one seems to be almost perfect except for this odd issue I've been encountering now (that I hadn't encountered on previous firmware).
It seems as though DNS lookups through the WRVS4400N are being redirected through a different DNS from the one set on the client (presumably, the router is taking all outbound UDP DNS queries and 'fixing' them to direct at the WAN DNS).
I've verified this by using the 'host' command in UNIX (where 192.168.2.140 is the DNS server on the remote VPN network):
1) Using a standard UDP DNS lookup from the LAN (192.168.1.0) to the VPN
$ host test.intranetdomain.com 192.168.2.140
Using domain server:
Name: 192.168.2.140
Address: 192.168.2.140#53
Aliases:
Host test.intranetdomain.com not found: 3(NXDOMAIN)
2) Using a TCP DNS lookup from the LAN to the VPN
$ host -T test.intranetdomain.com 192.168.2.140
Using domain server:
Name: 192.168.2.140
Address: 192.168.2.140#53
Aliases:
test.intranetdomain.com has address 192.168.2.5
3) Using a standard DNS lookup to an unassigned IP on the local LAN
$ host test.intranetdomain.com 192.168.1.250
;; connection timed out; no servers could be reached
4) Using a standard DNS lookup to a nonsense internet IP
$ host test.intranetdomain.com 254.254.254.254
Using domain server:
Name: 254.254.254.254
Address: 254.254.254.254#53
Aliases:
Host test.intranetdomain.com not found: 3(NXDOMAIN)
These tests are pretty revealing:
Test #1 shows a standard DNS query as a client system would typically perform it. It's querying the server and the server is returning that the address I've asked it for is not known. This is unexpected behaviour as the server at that IP address definitely knows test.intranetdomain.com exists.
Test #2 shows that if queried using TCP instead of UDP, the DNS does know test.intranet.domain.com exists. So, is the host command in Test #1 actually talking to my server? It doesn't seem so.
Test #3 is a demonstration of the expected response when host cannot talk to a remote DNS or that server doesn't exist. In this case, I'm using host to query an IP on my LAN that doesn't have anything on it. This should be the response I get when I try to query a nonexistent server on the internet as well.
Test #4 shows that in spite of the expected responses in Test #3, the WRVS4400N doesn't act as expected. It shows the same type of response we saw in Test #1 even when querying non-existent IPs.
In summary, the tests show that the WRVS4400N in firmware 1.1.13 is capturing all standard UDP DNS queries regardless of the IP they're directed to, and forwarding them to another DNS (I assume the WAN DNS).
This seems like it may have been thrown in as an unmentioned 'feature' and is behaviour I might expect from a 'home' routing solution but not a small office solution such as this. My company VPN requires DNS to be resolved by our servers inside the office network so this is not acceptible.
Configuration Details:
WAN: DHCP, dynamic IP, dyndns
LAN: defaults for everything, static DNS set to use servers across the VPN
VPN: IPSec tunnel to remote network 192.168.2.x
IPS: Disabled
Firewall: Defaults
Any assistance or commentary from someone in-the-know would be appreciated. Also, any comments from those also experiencing variations on this issue.
Message Edited by litui on 03-10-2009 06:25 PMI've experienced the same DNS hijacking unable to use OpenDNS features unless I set the outside interface to static which is really DHCP by my cable provider. Of course, this is only a temporary work-around. Linksys/Cisco could allow for selectable DNS on the outside interface to resolve this problem, but they won't even look at a code change... unless EVERYONE complains. I requested this almost a year ago via a TAC case & their reaction was development almost never update unless they get many requests.
-
For anyone who is experiencing slow DNS lookups...
I finally worked out what was wrong with my network config last night and thought I'd share it with everyone in a simgle post in the hope it'll help someone else.
I tried the BIND work around, but it wasn't all that much faster.
I tried disabling IPv6, but that didn't do much...
The solution?
In 'System Preferences' -> 'Network'
Go to configure the adaptor (Airport / Ethernet / etc)
In 'DNS Servers' where you'd normally specify the DNS servers given to you by your ISP... don't do this! As crazy as it sounds don't
Of course, if you're using newer routers you'd not be having this slow DNS lookup problem and specifying the ISPs DNS Servers would be appropriate... still
What you want to specify here is your ROUTER's IP:
eg. 192.168.0.1
With this simple modifcation you'll be fine. Why? You ask?
In Linux / OSX (I imagine in Unix as well) the way the lookups are carried out are different from Windows. I have other Windows computers on our network and they never had DNS lookup problems and they've been given the ISPs DNS IPs... anyway I think I'm talking out of my depth now heh.
This works!
Remember: Specify your router as the DNS Server!I've had this problem on a G4 PowerMac running Panther, and it still had it after a Tiger upgrade. I just replaced it with a Core Duo MacMini, 10.4.7, same problem of slow DNS lookups (i.e., slow initial start to loading a web page, then it goes quickly). Windows machines on the same subnet have no such problem. I've tried the various suggestions on various forums, none of which worked. I tried:
- turn off IPv6 (no help)
- directly enter my ISPs DNS servers (no help)
- manually configure both IP and DNS (no help, went back to DHCP)
- swear at the computer (a little help, mentally)
After some more reading, I tried resolving some addresses using the host command from the Terminal:
host -v www.apple.com 24.34.240.9
where the IP address is one of the DNS servers for my ISP (Comcast). I got a no server found message! I then tried the second DNS server in the Comcast list (found from my router), also no server found. Tried the third one in Comcast's list of DNS servers, and it worked. Entered it in System Preferences -> Network as a DNS server, and now web browsing is zippy! I verified that the two DNS servers that MacOS couldn't see are also down as far as Windows was concerned (using the nslookup command in windows).
What this tells me is that the OS X algorithm for handling unreachable or slow DNS servers is different from that in Windows. Maybe Windows remembers a bad experience with a DNS server and uses ones that it has success with, while OS X just keeps trying them in order, slowing timing them out until it finds one that works?
This could also explain many of the puzzling symptoms people have been seeing (things work some times, other times not; some people have luck specifying the DNS server manually, others don't). It all depends on what DNS servers got distributed to the Mac via DHCP, and how far down the list you have to go to find one that is responsive.
Anyone reading this forum with technical knowledge of both UNIX and Windows DNS lookup implementations? Is there some way to tweak in MacOS to make it perform more like Windows in this situation (like, maybe shortening the DNS server failure timeout)? -
9i app 9.0.2.01?Does the reverse DNS lookup have to be set up for a FQDN
HEy guys:
I'M ALWAYS GETTING STUCK IN THE SAME PLACE WHEN I AM TRYING TO INSTALL 9I APPSERVER 9.0.2.0.1 REL 2. ITS ALWATYS HAPPENING AT THE oRACLE db CONFIG assistant i have set up my host file and when i ping -a servername i get the full reply back ex. servername.domain.com but now when i ping -a 111.111.111.111 i do not get the host name back this is b/c i do not have the PTR record set up. Do i have to have a reverse dnslookup working for what oracle is stating is "FQDN" and not just the dns lookup working...how is oracle installer looking at this piece.
that is the only i see that i don't have when i look at my computer name (by the way this is a winnt environment)in properties it has the FQDN. i also have set up the host file correctly resembling 111.111.111.111 servername.domainname.com servername oracleinstall. What else am i missing here guys? thanks for the help in advance
regards,
robertActually, these issues were/are documented - see the addendum. Also, the install guide details which files need to be updated with the FQDN/IP.
Though it does not have to be setup in your DNS server (say if you are just doing it on a single tier to test), those machines which are looking to connect to it would need to have the proper additions to the hosts file as well.
As for why the 'non-default' http ports, this was a result of Unix security. Non-root users cannot start processes using ports below a specific range. As a result, oracle defaults them to a higher number allowing your oracle account whom lacks root access to start the http service.
As for non-oracle responses, this isn't really an official forumn. I believe those oracle peeps who do respond here are doing so on their own. If you need official/immediate responses, then i would recommend using metalink for an itar or the metalink forums.
Now on to Robert's second question. See metalink Note:209114.1: How to Change the Port used for Oracle 9iAS Portal 9.0.x. If you don't have access to metalink, let me know and I can forward the note or post it here.
Have fun! -
[SOLVED] Slow DNS lookup, I think
Hi
I have a really annoying problem. My DNS lookup in Arch is painfully slow. I know it's not a network problem, as I don't have any problems in my Ubuntu installation. I have tried to run two simple tests to show you what I mean. The first is a simple ping google.
########### Ubuntu ###########
carsten@carsten-laptop:~$ time ping -c 3 www.google.com
PING www.l.google.com (216.239.61.104) 56(84) bytes of data.
64 bytes from sn-in-f104.google.com (216.239.61.104): icmp_seq=1 ttl=245 time=17.4 ms
64 bytes from sn-in-f104.google.com (216.239.61.104): icmp_seq=2 ttl=245 time=20.6 ms
64 bytes from sn-in-f104.google.com (216.239.61.104): icmp_seq=3 ttl=245 time=11.4 ms
--- www.l.google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 11.465/16.529/20.641/3.809 ms
real 0m2.290s
user 0m0.000s
sys 0m0.004s
########### Arch ###########
carsten ~/Desktop $ time ping -c 3 www.google.com
PING www.l.google.com (216.239.61.104) 56(84) bytes of data.
64 bytes from sn-in-f104.google.com (216.239.61.104): icmp_seq=1 ttl=245 time=12.3 ms
64 bytes from sn-in-f104.google.com (216.239.61.104): icmp_seq=2 ttl=245 time=10.7 ms
64 bytes from sn-in-f104.google.com (216.239.61.104): icmp_seq=3 ttl=245 time=12.4 ms
--- www.l.google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2007ms
rtt min/avg/max/mdev = 10.776/11.867/12.476/0.778 ms
real 0m15.305s
user 0m0.013s
sys 0m0.007s
Ubuntu: 0m2.290s vs. Arch: 0m15.305s.
In the second test I tried to fake a pacman update by downloading the .db files from my primary server. On both Ubuntu and Arch I used this simple script
repos=( core extra community )
time for repo in ${repos[@]}
do
wget http://archlinux.unixheads.org/$repo/os/i686/$repo.db.tar.gz
done
When I run it in, I get this result
########### Ubuntu ###########
carsten@carsten-laptop:~/Desktop$ ./updatetest
--2008-11-10 07:58:23-- http://archlinux.unixheads.org/core/os/i686/core.db.tar.gz
Resolving archlinux.unixheads.org... 204.152.186.174
Connecting to archlinux.unixheads.org|204.152.186.174|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 32515 (32K) [application/x-gzip]
Saving to: `core.db.tar.gz'
100%[=============================================================>] 32.515 --.-K/s in 0,1s
2008-11-10 07:58:23 (331 KB/s) - `core.db.tar.gz' saved [32515/32515]
--2008-11-10 07:58:23-- http://archlinux.unixheads.org/extra/os/i686/extra.db.tar.gz
Resolving archlinux.unixheads.org... 204.152.186.174
Connecting to archlinux.unixheads.org|204.152.186.174|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 422622 (413K) [application/x-gzip]
Saving to: `extra.db.tar.gz'
100%[=============================================================>] 422.622 242K/s in 1,7s
2008-11-10 07:58:25 (242 KB/s) - `extra.db.tar.gz' saved [422622/422622]
--2008-11-10 07:58:25-- http://archlinux.unixheads.org/community/os/i686/community.db.tar.gz
Resolving archlinux.unixheads.org... 204.152.186.174
Connecting to archlinux.unixheads.org|204.152.186.174|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 369845 (361K) [application/x-gzip]
Saving to: `community.db.tar.gz'
100%[=============================================================>] 369.845 206K/s in 1,8s
2008-11-10 07:58:27 (206 KB/s) - `community.db.tar.gz' saved [369845/369845]
real 0m3.837s
user 0m0.016s
sys 0m0.036s
########### Arch ###########
carsten ~/Desktop $ ./updatetest
--2008-11-10 08:01:33-- http://archlinux.unixheads.org/core/os/i686/core.db.tar.gz
Resolving archlinux.unixheads.org... 204.152.186.174
Connecting to archlinux.unixheads.org|204.152.186.174|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 32515 (32K) [application/x-gzip]
Saving to: `core.db.tar.gz'
100%[==============================================================================>] 32,515 --.-K/s in 0.1s
2008-11-10 08:01:47 (303 KB/s) - `core.db.tar.gz' saved [32515/32515]
--2008-11-10 08:01:47-- http://archlinux.unixheads.org/extra/os/i686/extra.db.tar.gz
Resolving archlinux.unixheads.org... 204.152.186.174
Connecting to archlinux.unixheads.org|204.152.186.174|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 422622 (413K) [application/x-gzip]
Saving to: `extra.db.tar.gz'
100%[==============================================================================>] 422,622 253K/s in 1.6s
2008-11-10 08:02:02 (253 KB/s) - `extra.db.tar.gz' saved [422622/422622]
--2008-11-10 08:02:02-- http://archlinux.unixheads.org/community/os/i686/community.db.tar.gz
Resolving archlinux.unixheads.org... 204.152.186.174
Connecting to archlinux.unixheads.org|204.152.186.174|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 369845 (361K) [application/x-gzip]
Saving to: `community.db.tar.gz'
100%[==============================================================================>] 369,845 262K/s in 1.4s
2008-11-10 08:02:17 (262 KB/s) - `community.db.tar.gz' saved [369845/369845]
real 0m44.153s
user 0m0.047s
sys 0m0.017s
Ubuntu: 0m3.837s vs. Arch: 0m44.153s
I get the same update time whenever I update pacman normally.
I have googled a lot to figure out an answer, but nothing helps, so I was hoping somebody could help me figure this out, as it's very annoying. My hosts file looks like this
hosts:
# /etc/hosts: static lookup table for host names
#<ip-address> <hostname.domain.org> <hostname>
127.0.0.1 localhost.localdomain localhost arch
# End of file
rc.conf:
# /etc/rc.conf - Main Configuration for Arch Linux
# LOCALIZATION
# LOCALE: available languages can be listed with the 'locale -a' command
# HARDWARECLOCK: set to "UTC" or "localtime"
# USEDIRECTISA: use direct I/O requests instead of /dev/rtc for hwclock
# TIMEZONE: timezones are found in /usr/share/zoneinfo
# KEYMAP: keymaps are found in /usr/share/kbd/keymaps
# CONSOLEFONT: found in /usr/share/kbd/consolefonts (only needed for non-US)
# CONSOLEMAP: found in /usr/share/kbd/consoletrans
# USECOLOR: use ANSI color sequences in startup messages
LOCALE="en_US.utf8"
HARDWARECLOCK="UTC"
USEDIRECTISA="no"
TIMEZONE="Asia/Singapore"
KEYMAP="dk"
CONSOLEFONT=
CONSOLEMAP=
USECOLOR="yes"
# HARDWARE
# MOD_AUTOLOAD: Allow autoloading of modules at boot and when needed
# MOD_BLACKLIST: Prevent udev from loading these modules
# MODULES: Modules to load at boot-up. Prefix with a ! to blacklist.
# NOTE: Use of 'MOD_BLACKLIST' is deprecated. Please use ! in the MODULES array.
MOD_AUTOLOAD="yes"
#MOD_BLACKLIST=() #deprecated
MODULES=(e100 mii iwl3945 fuse acpi-cpufreq cpufreq_ondemand cpufreq_conservative cpufreq_powersave loop !pcspkr !snd_pcsp)
# Scan for LVM volume groups at startup, required if you use LVM
USELVM="no"
# NETWORKING
# HOSTNAME: Hostname of machine. Should also be put in /etc/hosts
HOSTNAME="arch"
# Use 'ifconfig -a' or 'ls /sys/class/net/' to see all available interfaces.
# Interfaces to start at boot-up (in this order)
# Declare each interface then list in INTERFACES
# - prefix an entry in INTERFACES with a ! to disable it
# - no hyphens in your interface names - Bash doesn't like it
# DHCP: Set your interface to "dhcp" (eth0="dhcp")
# Wireless: See network profiles below
#eth0="eth0 192.168.0.2 netmask 255.255.255.0 broadcast 192.168.0.255"
eth0="dhcp"
INTERFACES=(!eth0 !wlan0)
# Routes to start at boot-up (in this order)
# Declare each route then list in ROUTES
# - prefix an entry in ROUTES with a ! to disable it
gateway="default gw 192.168.0.1"
ROUTES=(!gateway)
# Enable these network profiles at boot-up. These are only useful
# if you happen to need multiple network configurations (ie, laptop users)
# - set to 'menu' to present a menu during boot-up (dialog package required)
# - prefix an entry with a ! to disable it
# Network profiles are found in /etc/network.d
# This now requires the netcfg package
#NETWORKS=(main)
# DAEMONS
# Daemons to start at boot-up (in this order)
# - prefix a daemon with a ! to disable it
# - prefix a daemon with a @ to start it up in the background
DAEMONS=(syslog-ng !network hal !netfs crond fam wicd cups laptop-mode oss gdm)
SPLASH="splashy"
Thanks in advance!
Last edited by Sharpeee (2008-11-15 10:39:42)Just tried to remove the "search..." line from my /etc/resolv.conf file, but nothing! It's okay if I remove the line after it connects right? Wicd overwrites the file anyways if I reconnect.
I don't really think changing to a different network-manager will help me. It works perfectly fine in Ubuntu with both network-manager and wicd, do don't think that's the problem. It must be a configuration file somewhere.
#### EDIT ####
I just tried to disable wicd and enable the wired network in /etc/rc.conf. After a reboot and it's still the same, even on the wired, so it's got be some other settings somewhere that's messing things up!
Also, for some reason my theme, in Gnome, isn't loaded after I disabled wicd? I have to manually run "gnome-appearance-manager"??
Last edited by Sharpeee (2008-11-11 05:01:46) -
Wireless Intermittent Super Slow DNS lookup bug in 10.6.4
I don't normally post things on forums these days, as usually I can find just about any solution by searching long enough, but this issue has perplexed me to the point I actually had to come on here.
Believe me, that's a big deal, I don't give up easily.
I have spent -countless- hours searching, on here, on google, on any "solutions" or "technical" sites I could find, and the closest I can find to a solution are countless people complaining about the EXACT SAME PROBLEM that I have observed and, repeatedly, reproduced again and again, which in every single case boil down to this:
You had 10.6.x (x being 3 or less) with a wireless connection on your home network and all is well.
You upgraded to 10.6.4 and all seemed fine for maybe 24 hours or so... then it happens. You go to load a website, and it's "looking for site" or "waiting for site" in your status bar... hmm, maybe it's just this site you say, so you try another, or a few others in other tabs, but they all have the same problem.
You try to ping the sites, but the network utility can't resolve the domain to even ping them.
Your roommate, all the while, is surfing and gaming just fine on the exact same router you are on, so no, it's not the network hardware, it's not your ISP, hmm, what could it be?
All of a sudden, ALL of the sites you had in like 20 tabs load up at screaming speeds, "WOW" you say, "guess there must have just been some gunk in the wires or something" (notice the irony of the situation: no wires)... anyway, all seems fine again suddenly, surfing is fine for a few minutes, you're back to normal... and it happens again, suddenly NO site will resolve, NO dns will resolve, you can't check email or ping any domain... and so the cycle begins. Of course, you can just plug an ethernet cable straight into the router, but doesn't that kind of defeat the purpose of having wireless networking in the first place?
It continues like this, indefinitely, and it all starts roughly 24 hours after 10.6.4 has been installed.
I have read reports of people on macbooks, people on imacs, people on all sorts of different wireless hardware, but the symptoms are the same.
I know the problem is with the OS update, it's purely software. I know that it has nothing to do with hardware because simply reverting to 10.6.3 solves the problem -every single time- and then "upgrading" to 10.6.4 causes the problem to come back within 24 hours -every single time- (have been reverting using Time Machine to simplify this testing process), so no, where the problem is isn't what perplexes me; what perplexes me is that there are posts that started almost a few days after 10.6.4 came out, and so far there's STILL no fix? Are you freaking serious? Does the Apple programming team not have access to anything other than Apple-Branded Airport Extreme Base Stations to perform wireless network QA testing on?
Get a Linksys guys, grab a D-Link, go get some of the hardware people actually USE and test it on that and see what happens, it doesn't take long to see what's happening.
I blame the programmers because I am one myself and know how easy it is to screw up a rock-solid system with one little typo. Heck, which patch was it, 10.5.7 or 10.5.8 I think? Can't remember exactly, but it was supposed to be such a great "bug fix" patch... and it came with the config file for Apache set to DENY ALL INCOMING EXTERNAL CONNECTIONS by default (in a hidden file that can only be modified by the root user mind you... so much for the average user running a personal web server on THAT version), so yeah, one tiny mistake and it has huge consequences, my question is: what's taking so long to track down what's going on in 10.6.4 and fix it? Can we at least get a patch or something?
I find it really lame and really such a cop-out to see so many irrelevant "solutions" offered, "try specifying different DNS servers" (doesn't matter, whatever causes this bug doesn't care which servers you have specified, it simply sits there and does NOTHING for 2-3 minutes, and THEN when it actually DOES do a dns lookup, it gets the results in the time expected: instantly), to more extreme matters, like resetting hardware, which again has absolutely nothing to do with this bug.
Here is why anyone can see this is an obvious bug that the programming team needs to admit, investigate and correct:
A. happens immediately after the software update
B. happens to EVERYONE who uses traditional wireless routers for internet use
C. is 100% repeatedly reproducible
D. occurs on all different models of computers and all different ISP's and with all different DNS servers specified.
E. has the same symptoms on every system (lightning fast internet for 2-3 minutes, then "waiting for site" for 1-3 minutes)
F. affects EVERY network-using program on the computer (email, network utility, firefox, safari) SIMULTANEOUSLY
G. does not affect surfing to or interacting with IP addresses directly, only with trying to perform DNS lookups from ANY program with ANY dns server (or no dns server) set in network preferences.
Come on guys, just read it through, think about it for a few minutes, for anyone that has worked with and knows the underlying source code, and what changes went in between 10.6.3 and 10.6.4 specifically to networking, should have a light bulb pop up over their head and say "oh YEAH, we never uncommented that one line..." or something to that effect.I see a very similar issue, but it's been occurring on my laptop for 4 or 5 months, which must be way before 10.6.4. My roommate and friend's laptops all work fine on my network. And my laptop works fine on anyone else's network. But MY laptop on MY network always gives the abysmal DNS performance as described in the original post: 40% of requests time out. Wireless or wired, it doesn't matter. Exact same behavior.
It also doesn't matter whether I use my Netgear router as DNS server, or my ISP, or OpenDNS, or Google. Exact same behavior.
When I do a network trace, it looks like most DNS requests my computer sends out simply never get responded to. (Could they be malformed when they hit the wire? I don't even see an error reply) A few make it through. And when there's a IPv6 (AAAA) record sent, my computer returns a "port unreachable" ICMP message. A screenshot of all of this dialogue is here:
http://img545.imageshack.us/i/screenshot20100913at114.png/
I recently had opportunity to cancel my cable service, and reinstate it for a lower price. They came out, tested the line (strong signal), gave me a new cable box. Yet the issue persists. Exact same behavior.
Firewall is disabled. I've deleted the network interfaces and added them back. Nothing helps.
(As I recall, this issue may even have been present before I reinstalled 10.6 over 10.5, so I'm not too confident a total reinstall would help.)
Any help? I'm about ready to buy a new laptop to fix this damned problem. Web browsing is nearly impossible, as is. -
I tried using FDM and i love it. However, I did a thorough Google search and this forum for a solution to my issue but could not find any answer. I hope someone will be able to assist me with a solution.
Am wondering if it is possible for FDM to fetch mails from an ISP Domain box (multidrop/catchall mailbox) that holds mails for several users , and then hand them to Postfix that has Dovecot LDA delivery configured. The mails will then be delivered (by Dovecot's LDA) to respective users. I use Fetchmail (that is able to do this), but there are some issues with it, (like sometimes it gets stuck on large mails, etc).
Here I illustrate my current Fetchmail System-wide setup's /etc/fetchmailrc file:
# /etc/fetchmailrc
set postmaster [email protected]
set no bouncemail
set daemon 300
set logfile = "/var/log/fetchmail.log"
poll isp.domain.com proto pop3
localdomains abc.net
no dns
no envelope
user domain_mbox_username
pass domain_mbox_passwd
is * here
In the above fetchmailrc, "is * here*, * is aliased to our catchall account in our local postfix server. The ISP domain mailbox is configured as a catch-all domain and it holds our users emails (several different email addresses but all "@abc.net")
I couldnt find a way to do this with FDM since I am limited to delivering to mbox/maildir directly, and the way I understand it is that I would have to create individual inbox references. This would be tedious if we have some hundreds pop3 local mailboxes, ( I might be wrong in my assumption).
With my current setup, aliasing to the catchall account automatically distributes to respective mailboxes by reading the mail headers. (and also am not very good in coding, please treat me like a newbie )
Looking forward to your assistance.
Thanks and regards,
Clemo
Last edited by wclemo (2013-07-24 17:28:45)Hi, this post is for 10g, bu I don't think much have changed (except the file location: \MWHOME\instances\instance1\bifoundation\OracleBIPresentationServicesComponent\coreapplication_obips1\catalog\YOUR_CATALOG\root\system\metadata)
http://oraclebi.blog.com/tip-of-the-day-data-format-file-in-obiee/
I didn't test it myself. -
Using /etc/bash.bashrc to set system-wide alias
Hi,
I would like to set some system-side aliases and from what I read /etc/bash.bashrc is the correct place to put them.
However, it seems that the root account doesn't load this file.
What is the correct way to define system-wide aliases?
Thanks.To be more specific, the aliases are not visible when I use a login shell i.e. 'su -'.
According this explanation http://stefaanlippens.net/bashrc_and_others this is correct.
So, do I need to duplicate the aliases in /etc/profile so they are visible from login shells? Or there is a way to define system-wide aliases for
login and non-login shells?
Thx. -
Hello guys, new member here.
I'd like you guys to help me out with something here.
I have a 13 inch, mid 2013 macbook pro with a 2.9 ghz i7, 8 gb RAM and a 750 gig HDD.
My problem is every now and then there is a system wide lag which freezes pretty much everything and audio playing from itunes also pauses during that time, it's quite frustrating as i've been searching for a fix since yesterday but havent found anything that can completely fix it. Usually there is only itunes, safari, mail and maybe one or two more things open at a time. I have checked my HDD for issues but there seem to be none. I suspect that this is related to the CPU since while I was using safari, a process called WindowServer would start using around 35% CPU, with nothing that intensive open on the browser
Note: This was ocurring much more frequently this morning but it has gotten a bit better now after I downloaded chrome and started using it instead of safari, I would, however, like to use safari instead.
Thanks in advance, I would be very thankful if someone could help me out with this, I have my exams coming up and I rely on my laptop for a lot of stuff.I've got this problem on Macbook pro (mid 2010, 2,4ghz i5, 8gb ram, nvidia gt330m)
I don't think it ever happened before upgrading to mavericks. But now it's horrible!
It seems to only happen to me when I'm running unity3D, but does happen every minute or even more often. And the system freezes for anywhere between a second and 15 seconds... -
I might not have the terminology quite right on this, I'm far from being an expert on the subject. That's why I'm turning to you guys !!!!!!!!!
I'm currently tethering my iPhone's connection via an app called PDANet which allows the computer to connect to a sort of 'wifi router' via an ad-hoc connection. While this doesn't quite work as they advertise it to (probably something I'm not doing that's getting auto 'automagically' in Windows/OS X), I am able to 'connect' to my iPhone and get offered an IP back when this app is running. I then launch the small socks server from the iPhone's term and voila I can use it to browse the tubes in firefox (with the proper settings).
Which is what brings me to my question: using this connection to my socks5 server running on my iPhone, I can resolve names and do http, at least. I'm just wondering, why this could be not set up as a 'system wide' service. In other words, all apps that want to connect to a certain IP/domain to a certain port, will do so as they always do. In other words why can't I set up a sort of service or daemon that uses this socks5 connection to the iPhone and sends back the data to the apps? As if my nameserver were the IP on the iPhone ? Or would I need something else running on the phone to provide that capability ?
Right now, when I dhcpcd, I get my IP from the iPhone, but nothing gets written in /etc/resolv.conf. I can only ping the iPhone's IP (which is the one I use to connect via proxy in firefox), and what I can only assume is my phone's IP on the 3G network, which starts with 10 (if that means anything to you experts.)....
Anyway, I'd like your thoughts on this..delta24 wrote:Try creating a script in /etc/profile.d named proxy.sh having all the proxy config.
The behavier I want to achieve is that I can hot swap proxy and non proxy networks without restarting the browser. This works under gnome because chromium reads the proxy config from gconf which gets updated on network change but this doesn't work without gnome.
Most of the time I'm on networks without proxies. Only in university I need them. A simple switch to activate them when needed would be nice. -
System wide freezes since 10.5.5
Ever since upgrading to 10.5.5 I've noticed the following sort of system-wide freeze on my iMac.
First, one application becomes unresponsive; you get the spinning beachball of death; you can still move the mouse around and click; every application becomes unresponsive, including the Finder. Only a hard restart works.
At first I noticed the problem in iChat, and looked into that. Hey presto, other users are experiencing the same problem with iChat, so I wrote to Apple/feedback and sat and waited. I stopped using iChat, and then found it happened in iTunes. Look at the iTunes discussion, and yes, there it is again, other users having the same problem.
I've repaired permissions, run Onyx, done everything I can think of.
Console doesn't have any useful (to me) messages. It says:
26/09/2008 18:47:48 mDNSResponder[17] Failed to obtain NAT port mapping 00048CF8 from router 192.168.1.254 external address 0.0.0.0 internal port 5353 error 0
26/09/2008 18:47:49 kernel jnl: disk1s3: journal replay done.
26/09/2008 18:47:49 fseventsd[40] event logs in /Volumes/Time Machine Backup destination/.fseventsd out of sync with volume. destroying old logs. (2414 4 2606)
26/09/2008 18:47:49 fseventsd[40] log dir: /Volumes/Time Machine Backup destination/.fseventsd getting new uuid: 4B7F4EF0-7E6D-4E02-80DC-4F9DD9FBDB89
26/09/2008 18:47:49 mds[34] (/Volumes/Time Machine Backup destination/.Spotlight-V100/Store-V1/Stores/E77C8009-6066-4242-A13D-CD5BAC0FB62 E)(Error) IndexCI in ContentIndexOpenBulk:Unclean shutdown of /Volumes/Time Machine Backup destination/.Spotlight-V100/Store-V1/Stores/E77C8009-6066-4242-A13D-CD5BAC0FB62 E/live.0.; needs recovery
26/09/2008 18:47:52 mDNSResponder[17] Failed to obtain NAT port mapping 0080A41C from router 192.168.1.254 external address 0.0.0.0 internal port 4500 error 0
26/09/2008 18:48:10 kernel BootCache: hit rate below threshold (10214 hits on 20429 lookups)
26/09/2008 18:48:39 mdworker[76] (Error) SyncInfo: Boot-cache avoidance timed out!
26/09/2008 18:48:51 mdworker[76] (Error) SyncInfo: Catalog changed during searchfs too many time. Falling back to fsw search /
That kernel bootcache looks ominous, but I have little idea what it means. I wonder whether it's something to do with Time Machine backing up. Of course, the above might just be totally unrelated to what's going wrong. (Looking at Console is I find rather like looking at a medical dictionary; it's truly frightening, but most of it never in practice seems to be a problem.)
Anyone else experiencing random system freezes only since 10.5.5? Anyone suggest what else I can try or look for in Console to pin things down a bit more?Hello all,
Let me chime in on this also... I also experienced freezes immediately after I updated to 10.5.5 from 10.5.4 about 10 days ago. I had never had my Mac (Black MacBook with 4GB or RAM) freeze that much, so I concluded that it had to do with the update.
After multiple freezes, I brought the Mac to the Apple Store where a Genius did a disk check, hardware check and everything checked out OK. However, the random freezes remained. They then did an archive and install *back to 10.5.4*, but same thing, freezes remained. At random intervals.
Around that time, I noticed that if I waited long enough, the machine would return from the freeze and everything would operate normally after that.
I seem to remember that the first ever time I noticed the freeze was when I was working in the Mail application.
After my fifth successive daily visit to the Genius Bar, where they offered to completely format my internal drive, install a fresh copy of 10.5.4 and re-load my data back in. On this, they completely failed me, they returned my computer with half of the applications missing (the iPhoto application was not even on the drive), and my data partially restored.
I then decided to re-format my drive once again, use the 10.5.2 Install Disk that came with my Mac to freshly install the OS. Then immediately thereafter I downloaded the 10.5.5 combo installer and used it to upgrade to 10.5.5. Then, I selectively copied files from my Time Machine backup hard drive back to my internal drive.
Time Machine did not work for me when trying to restore e-mail mailboxes. It only partially imported the mailboxes I needed. Instead I had to do an "import mailboxes" from the Mail application and point it to the mailbox location on my Time Machine backup.
So, now I have a system that is lean and clean, I didn't install any "major" other applications using installers, just a few applications I drag-copied to the Applications folder.
The machine ran fine for a day or two, until I tried to move some mail from my inbox into another mailbox. Boooom, spinning beach ball again. I let the machine sit for about 5 minutes, and it came back. But this indicates that there is still an issue.
Since I also experienced this problem after going back to 10.5.4, I am wondering whether the 10.5.5 install does affect firmware or other device 'hardware' functionality that remains, even after reverting to 10.5.4. This is the only reason I can come up with for why the problem still existed when I went to 10.5.4.
Anyway, this post does not provide a solution, but merely some other data points.
Oh and by the way, I had never even started iTunes before this problem showed up again this morning. So, not sure whether it is related to iTunes.
Maybe you are looking for
-
Adobe Premiere pro cs6 Crashing on Laucher. No error message
OHHH my head hurts, Adobe Premiere pro cs6 no longer works. I was working on a project and i accidentally shut off my computer, upon rebooting i found myself unable to turn on Adobe Premiere. It brings up the laucher, it does not load any codecs, f
-
hi, I have the latest iMac 21.5 inch, OS X 10.9 I have an evivo vhs to dvd usb stick that converts: red,white,yellow cable - mini usb - normal usb. it's made to play dvd's and output them to a computer and record them an your computer. My question
-
Leopard: Easy install, runs like a top
Here is how I did it... 0) Made a good backup 0.5) Let the DVD check run. 1) As soon as I get a menu on the installer, run Disk Utility. 2) Repartition my hard drive. I bought a bigger hard drive for Leopard, because I still need to test software wit
-
OTC business requirements gathered by FICO consultant
Hello Forum, I am fresher in SAP FICO and would appreciate it if anyone explain the business requirements gathered by FICO consultant for FI-SD integration during Blueprint phase and workshops? I know that Sales would give requirements on number of G
-
BW on HANA Trial - Using BEx Analyzer
Hello, is my assumption correct that it is not possible to use BEx Analyzer with the BW on HANA Trial? When I try to start BEx Analyzer via remote desktop of my instance nothing happened. Also I found a comment that there is a license problem with mi