[CentOS] How to setup both Transpaent Proxy and firewall on the same Machine.

2007-06-12 Thread Indunil Jayasooriya

Hi ALL,

I want to setup Transpaent Proxy on the box running iptables Firewall.

With iptables,  I have given below rules.

iptables -F INPUT
iptables -F OUTPUT
iptables -F FORWARD
iptables -F -t nat
iptables -F -t mangle

#Enabling ip forwarding
echo "1" > /proc/sys/net/ipv4/ip_forward

#enable syn cookies (prevent against the common 'syn flood attack')
echo "1" > /proc/sys/net/ipv4/tcp_syncookies

#do source validation by reversed path
echo "1" > /proc/sys/net/ipv4/conf/all/rp_filter

#Enable tracking mechanism
/sbin/modprobe -a ip_conntrack_ftp ip_nat_ftp

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A INPUT DROP
iptables -A FORWARD DROP
iptables -A OUTPUT DROP

in addition to that, There are many rules , ALL work fine.

in squid.conf file, I have added below rules,

http_port 3128
cache_mem 64 MB
cache_dir ufs /var/spool/squid 100 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

And, Then, I did below command.

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT
--to-port 3128

But, When I browse Internet , request will not get ridirected to 3128 port.
So I can not use squid as a Transpaent Proxy.

Where have I gone wrong?

I reffered to below URL.
http://www.tldp.org/HOWTO/TransparentProxy.html#toc2

Pls help me.

--
Thank you
Indunil Jayasooriya
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is CentOS stable enough ?

2007-06-12 Thread arnuld

On 6/12/07, DamianS <[EMAIL PROTECTED]> wrote:



ROFL. You admit to being a noob and then trying to tell us Fedora is a
buggy distro?
Sorry dude, but you're just plain wrong - Fedora does NOT suck.


i used Fedora 2,3,4, & 6. it is OT so i will keep it short:

FC-2 - year 2005, my 1st *NIX distro for a long time Windows user. it
ran fine, except i was too much buried into details of "can not find
shared library" "XMMS" etc BUT that is not  Fedora-bug,  that is my
newbish-ness :-)

FC-3:  could not install it on my friends PC. installation broke in
the middle. i put FC-2 on the same PC and it ran fine
FC-4:  i tried it on 4 PCs and it only installed on my PC and not on
other 3 PCs, same like FC-3 installation broke in the middle or just
after formatting the filesystem..

FC-6:  i could install it but X does not display. i tried to change to
another terminal using C-M-F3 (or F4,5 6 etc). but i could not change
because Fedora FREEZES on using C-M-F(x). then i changed
"/etc/X11/xorg.conf" as per my hardware but problem was not solved.
then i tried FC-6 on my friend's PC and it installed only 2 CDs, it
simply refused to install other CDs even though i have 2 backup CDs
ready and those same CDs installed on my system.

on 2nd install, it installed 6 CDs  but then it did not start any X,
like my problem.
on 3rd install, it installed 3 CDs only and refused others automatically.

i tried FC-6 on my 2nd friend's computer and it said something like
this: "not enough RAM, this system has not at least 256 MB of RAM and
hence will only do text-based install" and what the heck, that
computer had 256 MB DDR RAM.



I do a yum update every day or two, and nothing has broken for the past
few months at least.


i used Fedora because it had 6 CDs and all those compilers, GIMP and
other stuff built-in. i needed that as i and my friends, being poor,
did not have any internet connection. i got a new connection now from
my Father's salary :-(, i am still jobless. 1 friend refused and said
WindowsXP installs better because it does not refuse to install. other
has got a job as "C lecturer"  :-).

since we never had any internet so we never used Yum or update our system.


The difference between a stable system and an unstable one is quite
often the person sitting in front of the keyboard and monitor.
Please dont embarrass yourself in future by making public announcements
like this until you have some reasonable experience under your belt.


i think that has do to do something with the "hidden secrets". on GUI
based GNU distros "/etc/network/interfaces/ifcfg-eth0" and "ifconfig"
are the "hidden-secrets". you try to make your system as easy as
possible and hide system configuration behind GUIs and that leads to
poor-managed system, my opinion only. i am Gentoo user now and find it
is quite good as it does not try to hide anything behind GUIs like
Sysconfig/WindowsXP and hence i do not have any major problems. some
minor bugs are there but that is software, nothing is perfect.

i am not talking of Desktops, i still use Window Manager for my work.
i am talking of system-configuration. when something breaks on Fedora
then Fedora *promotes* using sysconfig "point and click" and gives you
text-file as a choice. on Gentoo/Arch/CRUX you have text-files as only
choices and it is much simpler to understand the system and reason of
any breakage/problem with text-files.

i am the only one GNU user in my town. *no* one in my town used *NIX.
i am the only one. whatever my friends or other people say about
UNIX/Linux/GNU,  GNU distro is the best thing that ever happened to
me. well, i am no longer  a newbie, using Linux from last 1.5 years
and at least know what is "the UNIX effect" ->
http://arnuld.blogspot.com/2007/02/sf-experience.html



--
http://arnuld.blogspot.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is CentOS stable enough ?

2007-06-12 Thread arnuld

On 6/12/07, Feizhou <[EMAIL PROTECTED]> wrote:



arnuld wrote:
> i have used Fedora, the base of RHEL and CentOS. Fedora is the one of
> the most buggy *NIX distro i have ever seen. since Fedora is the base
> of RHEL which is the base of CentOS, i just want to know whether
> CentOS is stable and reliable enough to work with. i will use CentOS
> primarily for
> developing softwares and also for watching Bruce Lee's movies ;-)



So RHEL is your fixed platform/environment?


to be *exact*, i want to have a job as "C++ and OOAD expert"
specialized on UNIX or Linux platform and i was told in my posts on
Linuxqestions.org and justlinuxforums.org that RHEL will look good on
my resume rather than other distros because Red Hat is the biggest
commercial vendor of Linux and most companies use it.i looked for RHEL
alternative and found 2 to be better than others:  CetnOS and
Scientifc Linux. hence both will be an edge for me on my Resume as
compared to, say, Gentoo/Arch or Debian.

the primary reason of using CentOS is only to get a better Resume as
it i will say:

"I am using Red Hat Enterprise Linux/CentOS as my primary development platform"


i was also suggested Suse but you know the M$-Novell deal, can not use that.



> NOTE: please do not take my email is as offense, to be true to you,
> Fedora just sucks :-(



Depends on what parts of it you are using imho.


that says you are an experienced man and that reply swept above my head :-(



--
http://arnuld.blogspot.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is CentOS stable enough ?

2007-06-12 Thread arnuld

On 6/12/07, Miguel Medalha <[EMAIL PROTECTED]> wrote:



You shoudn't have misplaced expectations about something and then say that
it "sucks"...

(By the way, that expression "sucks"!)



OK. i apologize if my sentence had hurt your feelings.from next
time i will say "but i found Fedora unstable as compared to distros i
have used"


will that be better?



--
http://arnuld.blogspot.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is CentOS stable enough ?

2007-06-12 Thread arnuld

On 6/12/07, Feizhou <[EMAIL PROTECTED]> wrote:

> FWIW, I use FC6 as my primary desktop.  It's quite stable.  I wouldn't
> use it for a server however -- too fast of a moving target.

Why not? Fedora as a server is not a problem...

Fedora as a desktop however...I don't know...the few times I have seen
Fedora Core 5/6 desktops in action, Firefox froze, keyboard input would
not work all of a sudden...



YES..YES.. i had those problems too but they were what i say minor
problems. i have posted the major problems in some other reply.


--
http://arnuld.blogspot.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: is CentOS stable enough ?

2007-06-12 Thread arnuld

On 6/12/07, Les Mikesell <[EMAIL PROTECTED]> wrote:



If you are working on a project to be released in the future, you might
want to develop on fedora to have a head start on the next version of
RHEL/Centos.



Les, WOW, i just never thought of that...

thanks for that tip



--
http://arnuld.blogspot.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is CentOS stable enough ?

2007-06-12 Thread arnuld

On 6/12/07, Feizhou <[EMAIL PROTECTED]> wrote:



Yeah...but it leaves a rather lasting impression when it happens in the
Linux class you are teaching and the only recourse was to reboot the
stupid box and you have a completely identical boxes that do not share
the same phenomenon.



DITTO


--
http://arnuld.blogspot.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is CentOS stable enough ?

2007-06-12 Thread Feizhou

arnuld wrote:

On 6/12/07, Feizhou <[EMAIL PROTECTED]> wrote:



arnuld wrote:
> i have used Fedora, the base of RHEL and CentOS. Fedora is the one of
> the most buggy *NIX distro i have ever seen. since Fedora is the base
> of RHEL which is the base of CentOS, i just want to know whether
> CentOS is stable and reliable enough to work with. i will use CentOS
> primarily for
> developing softwares and also for watching Bruce Lee's movies ;-)



So RHEL is your fixed platform/environment?


to be *exact*, i want to have a job as "C++ and OOAD expert"
specialized on UNIX or Linux platform and i was told in my posts on
Linuxqestions.org and justlinuxforums.org that RHEL will look good on
my resume rather than other distros because Red Hat is the biggest
commercial vendor of Linux and most companies use it.i looked for RHEL
alternative and found 2 to be better than others:  CetnOS and
Scientifc Linux. hence both will be an edge for me on my Resume as
compared to, say, Gentoo/Arch or Debian.


C++ eh? Did you know that g++ has ABI issues even within minor versions?

If you want to specialize on a UNIX platform, I suggest that you look 
elsewhere such as OpenSolaris. NOTHING in Linux space will meet UNIX 
because we use GNU tools and GNU = GNU is NOT UNIX. Solaris will be much 
more similar to other UNIX OS like AIX, HP-Unix, Irix...


If you want to specialize on Linux...whichever distro you use would be 
very much the same for development except for perhaps packaging and 
system administration and the latter is not really that important now 
for developers...




the primary reason of using CentOS is only to get a better Resume as
it i will say:

"I am using Red Hat Enterprise Linux/CentOS as my primary development 
platform"


Hmm...I do not know...I personally do not see how this is a particular 
benefit. I hold a RHCE certificate. Would you say that this would make 
my resume better?



> NOTE: please do not take my email is as offense, to be true to you,
> Fedora just sucks :-(



Depends on what parts of it you are using imho.


that says you are an experienced man and that reply swept above my head :-(




That is just to say you cannot make a blanket statement about Fedora or 
any other Linux distro.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: is CentOS stable enough ?

2007-06-12 Thread arnuld

On 6/12/07, Tom Diehl <[EMAIL PROTECTED]> wrote:



Welcome to the world of computers!

Do you really think this type of problem is limited to Fedora?


NO, i have seen this problems in 2 distros: Fedora and Arch...

and both are bleeding edge.


I have seen this type of behavior on various operating systems,
including windoze. Fortunately



my experience has been that Fedora specifically and *nix in general is less
prone to this type of thing than say windoze.


you can not compare Windows with UNIX.. the DragonFlyBSD i used, never
froze/hung for even single time... no bugs.. and even my 7 day
friendship with OpenBSD was excellent.


--
http://arnuld.blogspot.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is CentOS stable enough ?

2007-06-12 Thread Feizhou

arnuld wrote:

On 6/12/07, Feizhou <[EMAIL PROTECTED]> wrote:

> FWIW, I use FC6 as my primary desktop.  It's quite stable.  I wouldn't
> use it for a server however -- too fast of a moving target.

Why not? Fedora as a server is not a problem...

Fedora as a desktop however...I don't know...the few times I have seen
Fedora Core 5/6 desktops in action, Firefox froze, keyboard input would
not work all of a sudden...



YES..YES.. i had those problems too but they were what i say minor
problems. i have posted the major problems in some other reply.




Well, desktop related problems aside, Fedora can be very useful in a 
server environment. Weird that others find Fedora great on the desktop 
but would never touch it with a ten foot pole for a server :P.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is CentOS stable enough ?

2007-06-12 Thread Steve Searle
Around 09:21am on Tuesday, June 12, 2007 (UK time), Feizhou scrawled:

> Well, desktop related problems aside, Fedora can be very useful in a 
> server environment. Weird that others find Fedora great on the desktop 
> but would never touch it with a ten foot pole for a server :P.

Although I find Fedora stable enough to use as a server, the frequency
of having to upgrade to a new version means I find Centos a better
choice.  As others have said, upgrading every 4 years or so is much
better than upgrading every year.

I use Fedora on all my workstations, however.

Steve

-- 

A:  Because it messes up the order in which people normally read text.
Q:  Why is top-posting a bad thing?

 09:27:34 up 14:06,  0 users,  load average: 0.02, 0.01, 0.00


pgp3dhSa1djRX.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is CentOS stable enough ?

2007-06-12 Thread Feizhou

Steve Searle wrote:

Around 09:21am on Tuesday, June 12, 2007 (UK time), Feizhou scrawled:

Well, desktop related problems aside, Fedora can be very useful in a 
server environment. Weird that others find Fedora great on the desktop 
but would never touch it with a ten foot pole for a server :P.


Although I find Fedora stable enough to use as a server, the frequency
of having to upgrade to a new version means I find Centos a better
choice.  As others have said, upgrading every 4 years or so is much
better than upgrading every year.


It is certainly less of a headache. No need to build a system just to 
handle deployment (not that this is a bad thing...) once a year along 
with whatever you need if you do not have that many servers and 
therefore such a system would be overkill.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] NFSv4 hangs on file open

2007-06-12 Thread Pawel Salek

Hi,

I have a relatively loaded CentOS5 server (64-bit, dual core) and a mixed  
bag of Fedora 6/CentOS4, 32-, and 64-bit clients. NFSv3 works without  
problem. References over NFSv4 hang occasionally, in particular on file  
opening. I wonder whether there is anybody here who can help to trace it,  
or can suggest a more appropriate forum?


The one hang that I have been able to trace involved only  
CentOS5/2.6.18-8.1.4.el5. The server is 64-bit, client: 32-bit. Hang  
happened when a program was about to be executed from NFSv4 share.  
LD_LIBRARY_PATH included a directory on this share. gdb backtrace  
revealed that the process was being loaded in memory, and an attempt to  
open (non-existing) library file never completed.

/Pawel

strace -p 19289
Process 19289 attached - interrupt to quit
open("/pkg/pgi/5.2-4//linux86/5.2/lib/libg2c.so.0", O_RDONLY ...>


gdb program.x 19289

0x0063cb04 in open () from /lib/ld-linux.so.2
(gdb) where
0  0x0063cb04 in open () from /lib/ld-linux.so.2
1  0x0062d6c5 in open_verify () from /lib/ld-linux.so.2
2  0x0062dc6a in open_path () from /lib/ld-linux.so.2
3  0x0063055f in _dl_map_object () from /lib/ld-linux.so.2
4  0x006340d6 in openaux () from /lib/ld-linux.so.2
5  0x00635b46 in _dl_catch_error () from /lib/ld-linux.so.2
6  0x0063469a in _dl_map_object_deps () from /lib/ld-linux.so.2
7  0x0062b40e in dl_main () from /lib/ld-linux.so.2
8  0x0063b8bb in _dl_sysdep_start () from /lib/ld-linux.so.2
9  0x006292b8 in _dl_start () from /lib/ld-linux.so.2
10 0x00628817 in _start () from /lib/ld-linux.so.2

The NFSv4 is automounted (direct mount):

cat /etc/auto.pkg
/pkg-fstype=nfs4server:/i32

For what is worth, I tried NFSv4 with CentOS4 server but it was hopeless  
(server would stop responding or panic). Older kernel releases of Fedora6  
(2.6.19?) were hopeless too, with similar symptoms.


Anybody knows who may be interested in some detailed bug report, or help  
debugging the problem?


Pawel
PS.
The server logs plenty of messages:
NFSD: setclientid: string in use by client(clientid 46604ac4/0016)
but my rpc.idmapd configuration is correct as far as I can tell..
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: is CentOS stable enough ?

2007-06-12 Thread Warren Young

Feizhou wrote:


If you understand 'automated deployment' to mean just merely clobbering 
an installation with another Linux distro then I cannot help you. 


You're right, we are not using the same terms.  I understand "automated 
deployment" to include things like yum.


one does not leave out staging the deployment to a staging box/farm 


You're restricting yourself to a subset of the real world here.

Staging systems do not make sense everywhere.  I cannot justify creating 
a staging system for my tax accountant client, where I installed a file 
server.  There's only the one server.  For your idea to work, before 
doing an OS upgrade, I'd have to have an identical spare machine just 
sitting around idle for me to test on.  Tax accountants are CHEAP.  I 
had a hard time talking the accountant into RAID.  A duplicate testing 
box, too?  Please

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] ip_conntrack table filling up, dropping packets

2007-06-12 Thread yossarian1

Hi, my ip_conntrack table is filling up and now my server is dropping
packets. I'm running CentOS release 4.4 (Final) on a fairly busy
webserver.  The table is full of various connections, including a lot
of "ESTABLISHED" tcp connections from my webserver (the src is my
webserver ip), and some other random connections to my webserver, and
many "ASSURED" connections.  So why is it filling up? I changed the
default timeout value like so:

echo 36000 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_established

but I don't think that's had any effect. any thoughts? what additional
info can I provide that would be helpful?I did find a script that
clears out some of the stale connections using hping2, but I don't
know if that's really a great solution to this problem.

cat  /proc/sys/net/ipv4/ip_conntrack_max # 34576

after cleaning out the ip_conntrack table using an hping2 script:
cat /proc/net/ip_conntrack | wc -l # 3702 --  this number
was around 34000 before I cleared it out because it was dropping
packets. rebooting the machine, of course, clears it out.


I've spent many hours banging my head against the wall trying to
figure this out, reading in google groups and in various forums, to no
avail.   My webserver does send out emails to a few thousand
registered users (if they opt it for the email) every day.

Thank you for your time!  I hope I sent this to the right list.  This
looked like the right one.  Sorry in advance if I made a mistake.

Michelson
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 28, Issue 9

2007-06-12 Thread centos-announce-request
-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20070611/3835c96f/attachment-0001.bin

--

Message: 7
Date: Mon, 11 Jun 2007 23:58:34 +0300
From: Pasi Pirhonen <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2007:0403 Moderate CentOS 4 s390(x)
freetype- security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2007:0403

https://rhn.redhat.com/errata/RHSA-2007-0403.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

s390:
updates/s390/RPMS/freetype-2.1.9-6.el4.s390.rpm
updates/s390/RPMS/freetype-demos-2.1.9-6.el4.s390.rpm
updates/s390/RPMS/freetype-devel-2.1.9-6.el4.s390.rpm
updates/s390/RPMS/freetype-utils-2.1.9-6.el4.s390.rpm

s390x:
updates/s390x/RPMS/freetype-2.1.9-6.el4.s390x.rpm
updates/s390x/RPMS/freetype-demos-2.1.9-6.el4.s390x.rpm
updates/s390x/RPMS/freetype-devel-2.1.9-6.el4.s390x.rpm
updates/s390x/RPMS/freetype-utils-2.1.9-6.el4.s390x.rpm


-- 
Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/
Top-postings silently ignored
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20070611/d8b624c5/attachment-0001.bin

--

Message: 8
Date: Tue, 12 Jun 2007 00:01:11 +0300
From: Pasi Pirhonen <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2007:0465 Moderate CentOS 3 s390(x)
pam -   security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2007:0465

https://rhn.redhat.com/errata/RHSA-2007-0465.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

s390:
updates/s390/RPMS/pam-0.75-72.s390.rpm
updates/s390/RPMS/pam-devel-0.75-72.s390.rpm

s390x:
updates/s390x/RPMS/pam-0.75-72.s390x.rpm
updates/s390x/RPMS/pam-devel-0.75-72.s390x.rpm


-- 
Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/
Top-postings silently ignored
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20070612/e7c41e77/attachment-0001.bin

--

Message: 9
Date: Tue, 12 Jun 2007 00:04:57 +0300
From: Pasi Pirhonen <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2007:0469 Low CentOS 3 ia64 gdb -
securityupdate
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2007:0469

https://rhn.redhat.com/errata/RHSA-2007-0469.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

ia64:
updates/ia64/RPMS/gdb-6.3.0.0-1.138.el3.ia64.rpm


-- 
Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/
Top-postings silently ignored
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20070612/391e51fa/attachment-0001.bin

--

Message: 10
Date: Tue, 12 Jun 2007 00:07:22 +0300
From: Pasi Pirhonen <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2007:0430 Low CentOS 3 ia64 openldap -
security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2007:0430

https://rhn.redhat.com/errata/RHSA-2007-0430.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

ia64:
updates/ia64/RPMS/openldap-2.0.27-23.ia64.rpm
updates/ia64/RPMS/openldap-clients-2.0.27-23.ia64.rpm
updates/ia64/RPMS/openldap-devel-2.0.27-23.ia64.rpm
updates/ia64/RPMS/openldap-servers-2.0.27-23.ia64.rpm


-- 
Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/
Top-postings silently ignored
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20070612/42d63e9b/attachment-0001.bin

--

Message: 11
Date: Tue, 12 Jun 2007 00:08:22 +0300
From: Pasi Pirhonen <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2007:0431 Low CentOS 3 ia64
shadow-utils -  security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; ch

Re: [CentOS] ARP Problem ???

2007-06-12 Thread Robert Moskowitz

Craig Van Ham wrote:


Does any one know if this is normal operating of ARP… Or where to 
start looking…


I am seeing a lot of ARP requests for my router IP from the same IP 
within seconds.



21:04:41.112929 arp who-has IP tell MY ROUTERS IP

Get us the MAC address that is asking. This will give us the card 
manufacturer, which will then, perhaps tell you which system on your 
network is the culprit.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ARP Problem ???

2007-06-12 Thread Bob Chiodini



Robert Moskowitz wrote:

Craig Van Ham wrote:


Does any one know if this is normal operating of ARP… Or where to 
start looking…


I am seeing a lot of ARP requests for my router IP from the same IP 
within seconds.



21:04:41.112929 arp who-has IP tell MY ROUTERS IP

Get us the MAC address that is asking. This will give us the card 
manufacturer, which will then, perhaps tell you which system on your 
network is the culprit.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
It looks like it's his router that is asking and the requested device is 
not responding.  Is the "who-has IP" address up and valid?


Bob...

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ARP Problem ???

2007-06-12 Thread Robert Moskowitz

Bob Chiodini wrote:



Robert Moskowitz wrote:

Craig Van Ham wrote:


Does any one know if this is normal operating of ARP… Or where to 
start looking…


I am seeing a lot of ARP requests for my router IP from the same IP 
within seconds.



21:04:41.112929 arp who-has IP tell MY ROUTERS IP

Get us the MAC address that is asking. This will give us the card 
manufacturer, which will then, perhaps tell you which system on your 
network is the culprit.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
It looks like it's his router that is asking and the requested device 
is not responding.  Is the "who-has IP" address up and valid?
It would be interesting to know what IP address is being asked for. 

For example, this is the router asking, and of course the router's 
interface is statically configured, and the address it is looking for is 
either its:


The DNS server
The NTP server
The SYSLOG server
The COPS policy server (yeah, like anyone has implemented COPS and if 
they did, this would be an anycast)



The SYSLOG server has my bet, as a router, configured for remote 
syslogging will always have something to send to its syslog...



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] ARP Problem ???

2007-06-12 Thread Craig Van Ham
My router is 139.142.16.1.

It does this to a couple IP's 

8:18:08.684747 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.713629 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.713994 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.714001 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.714800 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.717638 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.719260 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.720477 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.721289 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.724126 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.725343 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.729802 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.732665 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.733863 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.736291 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.738724 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.744828 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.750894 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.750903 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.750910 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.752520 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.756164 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.761842 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.761850 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.761856 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.764687 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.768735 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.771586 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.772785 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.774406 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.778064 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.778071 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.780488 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.782526 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.782533 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.783736 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.791437 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.792658 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.792665 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.793064 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.795086 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.798736 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.799546 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.800358 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.803198 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.806449 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.809684 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.817398 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.817406 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.820235 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.820637 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.820644 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.825504 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.831175 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.835640 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.837666 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.840096 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.845778 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.846583 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.847400 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.850233 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.854696 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.857133 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.860376 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.863621 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.868893 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.871723 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.873751 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.877406 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.880257 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.887551 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.888353 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.900118 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.900130 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.903363 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.905379 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.905792 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.908622 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.910650 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.913894 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.919975 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.926875 arp who-has 139.142.16.57 tell 139.142.16.1
08:18:08.927276 arp 

RE: [CentOS] ARP Problem ???

2007-06-12 Thread Craig Van Ham
It's multiple IPs of clients on the network.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Robert Moskowitz
Sent: Tuesday, June 12, 2007 8:19 AM
To: CentOS mailing list
Subject: Re: [CentOS] ARP Problem ???

Bob Chiodini wrote:
>
>
> Robert Moskowitz wrote:
>> Craig Van Ham wrote:
>>>
>>> Does any one know if this is normal operating of ARP. Or where to 
>>> start looking.
>>>
>>> I am seeing a lot of ARP requests for my router IP from the same IP 
>>> within seconds.
>>>
>>>
>>> 21:04:41.112929 arp who-has IP tell MY ROUTERS IP
>>>
>> Get us the MAC address that is asking. This will give us the card 
>> manufacturer, which will then, perhaps tell you which system on your 
>> network is the culprit.
>>
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
> It looks like it's his router that is asking and the requested device 
> is not responding.  Is the "who-has IP" address up and valid?
It would be interesting to know what IP address is being asked for. 

For example, this is the router asking, and of course the router's 
interface is statically configured, and the address it is looking for is 
either its:

The DNS server
The NTP server
The SYSLOG server
The COPS policy server (yeah, like anyone has implemented COPS and if 
they did, this would be an anycast)


The SYSLOG server has my bet, as a router, configured for remote 
syslogging will always have something to send to its syslog...


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ARP Problem ???

2007-06-12 Thread Robert Moskowitz

Craig Van Ham wrote:

It's multiple IPs of clients on the network.
  

Can you look at the ARP table in your router?
In your pervious note you only had one client address, but I believe you 
in your statement about multiple addresses.

If the ARP requests match what is in the ARP table then perhaps:

We are seeing keep-alives.
Do you see any traffic to the addresses from outside after an ARP response?
This COULD be Bell Canada (I did a look up on your address range at 
dnsstuff.com) checking out what your addresses are being used for.


If the addresses being ARPed are NOT in the ARP cache (and not addresses 
of clients systems) then perhaps:


Your router is being hit with attacks across your allocation range, and 
it is doing nothing more than trying to forward those attack packets inward.


So you want some information from your router. Is this just something 
your router is doing on its own, or is this due to an external event.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Robert Moskowitz
Sent: Tuesday, June 12, 2007 8:19 AM
To: CentOS mailing list
Subject: Re: [CentOS] ARP Problem ???

Bob Chiodini wrote:
  

Robert Moskowitz wrote:


Craig Van Ham wrote:
  
Does any one know if this is normal operating of ARP. Or where to 
start looking.


I am seeing a lot of ARP requests for my router IP from the same IP 
within seconds.



21:04:41.112929 arp who-has IP tell MY ROUTERS IP


Get us the MAC address that is asking. This will give us the card 
manufacturer, which will then, perhaps tell you which system on your 
network is the culprit.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
It looks like it's his router that is asking and the requested device 
is not responding.  Is the "who-has IP" address up and valid?

It would be interesting to know what IP address is being asked for. 

For example, this is the router asking, and of course the router's 
interface is statically configured, and the address it is looking for is 
either its:


The DNS server
The NTP server
The SYSLOG server
The COPS policy server (yeah, like anyone has implemented COPS and if 
they did, this would be an anycast)



The SYSLOG server has my bet, as a router, configured for remote 
syslogging will always have something to send to its syslog...



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

  

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Recommendation/pointers please - Need to brush up on CentOS/Linux command line tools

2007-06-12 Thread Rob Lines

I can recommend the book A Practical Guide to Linux Commands, Editors and
Shell Programming.

http://www.amazon.com/Practical-Guide-Commands-Editors-Programming/dp/0131478230/ref=pd_bbs_sr_1/104-4412880-2983136?ie=UTF8&s=books&qid=1181662084&sr=8-1

It can be had for $30 and it is a big book.  It has lots of demos and
examples.  While it will not necessarily tell you what tool would be best
for a particular job it will tell you how to use the tool well.

The first chapter is a bit basic and they go into a lot (maybe too much)
detail on the different editors it has good information.  They also have a
quick list of the main command line utilities with a single line of what
they do.

It is like having simplified man pages with some extra examples but in book
form.

Rob

On 6/12/07, Daniel de Kok <[EMAIL PROTECTED]> wrote:


On Mon, 2007-06-11 at 16:51 -0500, Dale wrote:
> I would very much appreciate any suggestions on any online resources, or
> even a decent book to purchase with the focus of brushing up on Linux
> command line tools. The focus is on troubleshooting type commands,
> adding users from command line
>  and so forth.


Still very much work in progress:
http://www.taickim.com/books/unixsystems/html/


-- Daniel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] conga, ricci and luci updates missing?

2007-06-12 Thread Dave Augustus
According to this link,
https://rhn.redhat.com/errata/RHBA-2007-0331.html

conga, ricci and luci have updates available.

I can't find these updates on the mirrors I checked.

They are in:
http://mirror.centos.org/centos/5/os/x86_64/CentOS/

but not in:
http://mirror.centos.org/centos/5/updates/x86_64/RPMS/


Anyone have any ideas about this?

TIA
Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] conga, ricci and luci updates missing?

2007-06-12 Thread Karanbir Singh

Dave Augustus wrote:

According to this link,
https://rhn.redhat.com/errata/RHBA-2007-0331.html

conga, ricci and luci have updates available.

I can't find these updates on the mirrors I checked.

They are in:
http://mirror.centos.org/centos/5/os/x86_64/CentOS/

but not in:
http://mirror.centos.org/centos/5/updates/x86_64/RPMS/


Anyone have any ideas about this?



I am looking at this issue right now.

- KB

--
Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] conga, ricci and luci updates missing?

2007-06-12 Thread R P Herrold

On Tue, 12 Jun 2007, Dave Augustus wrote:


According to this link,
https://rhn.redhat.com/errata/RHBA-2007-0331.html



conga, ricci and luci have updates available.


Well, not exactly, or at least not generally.  This is in an 
advisory for product "RHEL Clustering (v. 5 server)":


Fromt eh advistor: "(The unlinked packages above are only 
available from the Red Hat Network)"


and conga-0.9.2-6.el5.src.rpm is so unlinked

==

I think you may wish to consider asking that the sources be 
released on upstream products.


-- Russ Herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] conga, ricci and luci updates missing?

2007-06-12 Thread R P Herrold

On Tue, 12 Jun 2007, R P Herrold wrote:

I think you may wish to consider asking that the sources be released on 
upstream products.


dang it -- I was reading too fast.

Yup this is a problem that stuff is dropping into the mirrors 
without advisories being seen by centos team members on non 
mainline products;  I assume we'll have to move to some sort 
of daily backstol diff on mirroring with a 'find -type f' 
process, to pick these up.


-- Russ Herrold
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: kernel-smp not upgrading

2007-06-12 Thread Scott Silva
Ugo Bellavance spake the following on 6/11/2007 9:44 PM:
> Hi,
> 
> Box is a dual-dual core opteron.  Centos4.  Just upgraded t the
> latest kernel (2.6.9-55).
> 
> The UP kernel installed fine, but the smp kernel didn't install. 
> What should I do?  Is that normal? Original kernel was a smp.
> 
> Regards,
> 
> Ugo
I had that problem when the updates came out on one of my servers. Manually
installing the kernel again seemed to fix it. It actually started the install,
and the rpm database said it was installed, but the kernel file and the initrd
weren't anywhere to be found. But the rest of the kernel related files were
there in boot.
-- 

MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] ext3 and acls

2007-06-12 Thread Dave

Hello,
   I've got a centos5 box with raided ext3 partitions mp* devices. I'm 
wondering if ext3 supports acls out of the box or if there's something i 
have to do to enable them?

Thanks.
Dave.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] conga, ricci and luci updates missing?

2007-06-12 Thread Karanbir Singh

R P Herrold wrote:
Yup this is a problem that stuff is dropping into the mirrors without 
advisories being seen by centos team members on non mainline products;  
I assume we'll have to move to some sort of daily backstol diff on 
mirroring with a 'find -type f' process, to pick these up.


Actually there is something like this running already, the 'issue' was me 
blocking the cluster stuff on a few bug reports in > release version stuff. 
Clearing it all out today.


Apologies for the delay.

- KB
--
Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ext3 and acls

2007-06-12 Thread Mogens Kjaer

Dave wrote:

Hello,
   I've got a centos5 box with raided ext3 partitions mp* devices. I'm 
wondering if ext3 supports acls out of the box or if there's something i 
have to do to enable them?


You could try to add ",acl" to options in your /etc/fstab
for the partitions you want to run acl on.

On a FC3 system I have:

/dev/md3/home   ext3defaults,acl1 2

Mogens

--
Mogens Kjaer, Carlsberg A/S, Computer Department
Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] ext3 and acls

2007-06-12 Thread Paul Heinlein

On Tue, 12 Jun 2007, Dave wrote:

  I've got a centos5 box with raided ext3 partitions mp* devices. 
I'm wondering if ext3 supports acls out of the box or if there's 
something i have to do to enable them?


Yes, CentOS/ext3 supports ACLs by default. Make sure the acl package 
in installed, then take at peek at the getfacl(1) and setfacl(1) man 
pages.


--
Paul Heinlein <> [EMAIL PROTECTED] <> http://www.madboa.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5 and Java

2007-06-12 Thread Antonio da Silva Martins Junior

- "Daniel de Kok" <[EMAIL PROTECTED]> escreveu:
> On Mon, 2007-06-11 at 16:32 -0300, Antonio da Silva Martins Junior
> wrote:
> > sun.misc.InvalidJarIndexException: Invalid index
> > at
> sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:854)
> [snip]
> >   Someone had an idea on what I can do?
> 
> This was recently discussed on the list:
> http://lists.centos.org/pipermail/centos/2007-May/081650.html
> 
> Upstream has an update to fix the brp-java-repack-jars script:
> http://rhn.redhat.com/errata/RHBA-2007-0365.html
> 
> To fix this problem, we'd need that update, and rebuild the tomcat
> (and possibly some other packages). You could also try tomcat from
> JPackage, which was already fixed.

 Thanks Daniel,

I had downloaded and installed the patch from upstream 
(redhat-rpm-config-8.0.45-17.0.1), then setup 
(RPM_BUILD_ROOT=/usr/share/java/tomcat5/) and run 
/usr/lib/rpm/redhat/brp-java-repack-jars, after that tomcat5 starts
(with a lot of messages in catalina.out), but it's executing the demos at least 
:)

Now it's time to give this machine to his users and wait for the bugs :)


Thanks,

 Antonio.
-- 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
| Antonio S. Martins Jr. - Support Analist | "Only The Shadow Knows |
| Universidade Estadual de Maringá - Brasil|   what evil lurks in the   |
| NPD - Núcleo de Processamento de Dados   |   Heart of Men!"   |
| E-Mail: [EMAIL PROTECTED] / [EMAIL PROTECTED] | !!! Linux User: 52392 !!!  |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+


-- 
Esta mensagem foi verificada pelo sistema de antiv�rus e
 acredita-se estar livre de perigo.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] PGP On Centos

2007-06-12 Thread Karl R. Balsmeier
Hey I need to run some pgp commands, -what's the name of the package 
supported by Centos that will allow me to work with pgp?


I need to run pgp --fingerprint key.name

or it's equivalent.

Pro question.  Google searches didn't show much, tried to search for 
pgp, gnupg, openpgp, pgp on centos, openpgp on centos, centos/pgp.  No 
worthy results came back.


Any advice?

-karlski
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PGP On Centos

2007-06-12 Thread René Standfest
Karl R. Balsmeier schrieb am 12.06.2007 20:28:
> Hey I need to run some pgp commands, -what's the name of the package 
> supported by Centos that will allow me to work with pgp?
>
> I need to run pgp --fingerprint key.name
>
> or it's equivalent.
>
> Pro question.  Google searches didn't show much, tried to search for 
> pgp, gnupg, openpgp, pgp on centos, openpgp on centos, centos/pgp.  No 
> worthy results came back.
>
> Any advice?
>   
I think you searching for gpg.

Greets
René

-- 
GEEKCODE: GIT$ d- s+: a- C+++ UL$ P+ L++ E--- W+++ N+ !o K- w+ O-
 M-- V- PS+ PE Y+ PGP++ t++ 5++ X+ R tv+ b DI D++ G e+ h--- r++ y+++
  PGP-Key and more available at http://www.standfest.net
   My Blog is at http://www.gaudidiecher.de

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PGP On Centos

2007-06-12 Thread Luciano Rocha
On Tue, Jun 12, 2007 at 11:28:37AM -0700, Karl R. Balsmeier wrote:
>  Hey I need to run some pgp commands, -what's the name of the package 
>  supported by Centos that will allow me to work with pgp?
> 
>  I need to run pgp --fingerprint key.name

gnupg, and the command is gpg. It should be already installed,
otherwise, yum install gnupg.

-- 
lfr
0/0


pgpbxCHoVyYwr.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PGP On Centos + fixed/understood

2007-06-12 Thread Karl R. Balsmeier

Thanks for that, I was now able to man gpg and:

paste the contents of a public key my co-worker had stored in a web 
screen with vi, called public.key and do:


gpg --import public.key  [to get it onto the keyring of the centos 
server I was using]


gpg --fingerprint  [listed all the fingerprint for all the keys created 
on the machine]


thanks!

-karlski

Luciano Rocha wrote:

On Tue, Jun 12, 2007 at 11:28:37AM -0700, Karl R. Balsmeier wrote:
  
 Hey I need to run some pgp commands, -what's the name of the package 
 supported by Centos that will allow me to work with pgp?


 I need to run pgp --fingerprint key.name



gnupg, and the command is gpg. It should be already installed,
otherwise, yum install gnupg.

  



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: kernel-smp not upgrading

2007-06-12 Thread Ugo Bellavance

Scott Silva wrote:

Ugo Bellavance spake the following on 6/11/2007 9:44 PM:

Hi,

Box is a dual-dual core opteron.  Centos4.  Just upgraded t the
latest kernel (2.6.9-55).

The UP kernel installed fine, but the smp kernel didn't install. 
What should I do?  Is that normal? Original kernel was a smp.


Regards,

Ugo

I had that problem when the updates came out on one of my servers. Manually
installing the kernel again seemed to fix it. It actually started the install,
and the rpm database said it was installed, but the kernel file and the initrd
weren't anywhere to be found. But the rest of the kernel related files were
there in boot.


Same thing here,  fixed the same way :).

Ugo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Selinux custom policy issue - Centos 5

2007-06-12 Thread Miskell, Craig

> On Tue, 2007-06-12 at 12:24 +1200, Miskell, Craig wrote:
> > Where file_upload_store_t is one of my custom types.  My 
> local.fc looks
> > like this:
> > /data/spool/blastreq(/.*)?system_u:object_r:blast_req_t
> > /data/spool/blastres(/.*)?system_u:object_r:blast_res_t
> > /data/upload(/.*)?
> > system_u:object_r:file_upload_store_t
> > /data/bfiles(/.*)?system_u:object_r:bfiles_t
> > /var/www/possumbase/html/imagetemp(/.*)?
> > system_u:object_r:http_image_temp_t
> > /var/www/sheep/html/imagetemp(/.*)?
> > system_u:object_r:http_image_temp_t
> > 
> > And my local.te contains (selected portions only for now):
> > module local 1.1;
> > 
> > require {
> > ...
> >  
> > ...
> > }
> > type blast_req_t,file_type;
> > allow httpd_sys_script_t blast_req_t:file { create getattr write};
> > allow httpd_sys_script_t blast_req_t:dir { read getattr lock search
> > ioctl add_name write };
> > ...etc
> 
> Is file_upload_store_t defined in your local policy? E.g.:
> 
> type file_upload_store_t, file_type;
Yes (sorry, that would have been the sensible bit to selectively
extract; I don't know what I was thinking): 
***
type file_upload_store_t,file_type;
allow httpd_sys_script_t file_upload_store_t:dir { read getattr create
search write add_name };
allow httpd_sys_script_t file_upload_store_t:file { create getattr write
read };
***

Craig
===
Attention: The information contained in this message and/or attachments
from AgResearch Limited is intended only for the persons or entities
to which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipients is prohibited by AgResearch
Limited. If you have received this message in error, please notify the
sender immediately.
===
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Dual boot in CentOS 4.4

2007-06-12 Thread Andrew Allen
I've recently upgraded from RedHat 9 to CentOS 4.4. With RH9 I had a
dual boot system with Windows XP (RH9 as the default of course!), which
was automatically set up when I installed RH9 in the remaining partition
after I'd installed XP. However, I appear to have lost my dual boot with
CentOS 4.4 (no option to boot into DOS now), even though I still have
the Windows XP partition, so how can I (re-) set up the dual boot?

Thanks,
Andy

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos openssl-devel

2007-06-12 Thread CentOS List

Well, it does the trick for openssl-devel.. But there are other
packages which still require openssl i386. What should i do?


It really depends if you need 32 bit compatibility. I tend to do "yum
remove glibc.i686" to get rid of it entirely.


I did that and yet it getting the same error.

Transaction Check Error:
 file /usr/share/man/man1/asn1parse.1ssl.gz from install of 
openssl-0.9.8b-8.3.el5 conflicts with file from package 
openssl-0.9.8b-8.3.el5
 file /usr/share/man/man1/nseq.1ssl.gz from install of 
openssl-0.9.8b-8.3.el5 conflicts with file from package 
openssl-0.9.8b-8.3.el5
 file /usr/share/man/man1/ocsp.1ssl.gz from install of 
openssl-0.9.8b-8.3.el5 conflicts with file from package 
openssl-0.9.8b-8.3.el5
 file /usr/share/man/man1/smime.1ssl.gz from install of 
openssl-0.9.8b-8.3.el5 conflicts with file from package 
openssl-0.9.8b-8.3.el5





___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Centos 5, X dies, I cry

2007-06-12 Thread Robert Moskowitz
I just installed Centos 5 for my notebook (HP compaq nc4010) on a 
separate drive (than this one that has Centos 4.5).


When I first booted after all the setup, X did not start.  hmm.

Rebooted, and X came up fine.  I did a bunch of customizing and upgraded 
the kernel


Rebooted, X did not start.

Rebooted X started fine.  I checked some things out then tried the 
Suspend feature.  Not supprisingly, the system would not come back 
properly out of suspend.  So I pulled the battery and rebooted.  Now no X.


I looked at the Xorg.0.log and did see one error (but did not write it 
down, grrr).


I have tried to mount that drive via a USB connector, but automount is 
not handling it, and I don't know how to start working out mounting it 
manually.


SO

What happened?  Oh, not nVidea (or whatever those threads on a video 
problem is).  My video card is the:

"ATI Technologies Inc PCI Bridge [IGP 340M]"

Is something still wrong becuase of the attempt to try Suspend?  Where 
do I look and what do I change?


Possiblely I messed up in customizing?  But I did run 
system-config-display and set things as they are here in Centos 4.5, and 
rebooted.  No change


please help!


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Dual boot in CentOS 4.4

2007-06-12 Thread Akemi Yagi

On 6/12/07, Andrew Allen <[EMAIL PROTECTED]> wrote:

I've recently upgraded from RedHat 9 to CentOS 4.4. With RH9 I had a
dual boot system with Windows XP (RH9 as the default of course!), which
was automatically set up when I installed RH9 in the remaining partition
after I'd installed XP. However, I appear to have lost my dual boot with
CentOS 4.4 (no option to boot into DOS now), even though I still have
the Windows XP partition, so how can I (re-) set up the dual boot?

Thanks,
Andy


Check your /boot/grub/grub.conf file.  Does it have lines like these?

title winXP
   rootnoverify (hd0,1)
   chainloader +1

(This is just an example, yours may be different)

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] SSH remote port forward

2007-06-12 Thread Ugo Bellavance

Hi,

	I'm trying to do a remote port forward, and the remote hosts only 
listens to 127.0.0.1 on the forwarded port.


[EMAIL PROTECTED] ~]$ netstat -ln
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address   Foreign Address 
State
tcp0  0 127.0.0.1:5500  0.0.0.0:* 
LISTEN
tcp0  0 0.0.0.0:56660.0.0.0:* 
LISTEN
tcp0  0 ::1:5500:::* 
LISTEN
tcp0  0 :::22   :::* 
LISTEN


(I'm trying to tunnel a vnc client connection.

From putty's logs, you can see that the tunnel is requested:

2007-06-12 17:34:15 Opened channel for session
2007-06-12 17:34:15 Requesting remote port 5500 forward to 10.0.0.1:5500
2007-06-12 17:34:15 Remote port forwarding from 5500 enabled

(I changed the real IP address to 10.0.0.1).

In putty, the "Local ports accept connections from other hosts" and 
"Remote ports do the same" are checked.


Any ideas?

Regards,

ugo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: SSH remote port forward

2007-06-12 Thread Tony Mountifield
In article <[EMAIL PROTECTED]>, Ugo Bellavance <[EMAIL PROTECTED]> wrote:
> Hi,
> 
>   I'm trying to do a remote port forward, and the remote hosts only 
> listens to 127.0.0.1 on the forwarded port.

You can't control that from the client end, as it could be a security risk
for the remote installation.

If the remote host is under your control and is running sshd from OpenSSH,
you can add the following directive to /etc/ssh/sshd_config on that system:

GatewayPorts yes

That will tell the sshd to make forwarded ports listen on 0.0.0.0 instead
of on 127.0.0.1

Don't forget "service sshd restart" after making the change.

Cheers
Tony
-- 
Tony Mountifield
Work: [EMAIL PROTECTED] - http://www.softins.co.uk
Play: [EMAIL PROTECTED] - http://tony.mountifield.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] centos 5 iptables

2007-06-12 Thread CentOS List

Hi,

I applied a set of iptables rules and started iptables without any trouble. 
But after i edited the rules and restarting it, it gives me "Applying 
iptables firewall rules: iptables-restore: line 35 failed". I looked into 
/etc/sysconfig/ for the mentioned file and it was not found. I did a quick 
check and locate only found /sbin/iptables-restore. I had done updatedb 
before using locate.


Any ideas?

thanks 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] centos 5 iptables

2007-06-12 Thread Steven Haigh

On 13/06/2007, at 8:59 AM, CentOS List wrote:
I applied a set of iptables rules and started iptables without any  
trouble. But after i edited the rules and restarting it, it gives  
me "Applying iptables firewall rules: iptables-restore: line 35  
failed". I looked into /etc/sysconfig/ for the mentioned file and  
it was not found. I did a quick check and locate only found /sbin/ 
iptables-restore. I had done updatedb before using locate.


All your firewall rules are in the file: /etc/sysconfig/iptables.  
Check on line 35 of that file.


--
Steven Haigh

Email: [EMAIL PROTECTED]
Web: http://www.crc.id.au
Phone: (03) 9017 0597 - 0404 087 474




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] centos 5 iptables

2007-06-12 Thread Steve Searle
Around 11:59pm on Tuesday, June 12, 2007 (UK time), CentOS List scrawled:

> Hi,
> 
> I applied a set of iptables rules and started iptables without any trouble. 
> But after i edited the rules and restarting it, it gives me "Applying 
> iptables firewall rules: iptables-restore: line 35 failed". I looked into 
> /etc/sysconfig/ for the mentioned file and it was not found. I did a quick 
> check and locate only found /sbin/iptables-restore. I had done updatedb 
> before using locate.
> 
> Any ideas?

What is line 35 of /etc/sysconfig/iptables?

Steve

-- 

A:  Because it messes up the order in which people normally read text.
Q:  Why is top-posting a bad thing?



pgpSi8y9CHG4T.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] centos 5 iptables

2007-06-12 Thread CentOS List
I applied a set of iptables rules and started iptables without any  
trouble. But after i edited the rules and restarting it, it gives  
me "Applying iptables firewall rules: iptables-restore: line 35  
failed". I looked into /etc/sysconfig/ for the mentioned file and  
it was not found. I did a quick check and locate only found /sbin/ 
iptables-restore. I had done updatedb before using locate.


All your firewall rules are in the file: /etc/sysconfig/iptables.  
Check on line 35 of that file.


Line 35
COMMIT

regards
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] centos 5 GFS/Cluster - configure fence using NIC?

2007-06-12 Thread Karl R. Balsmeier
How does one configure a fence device in the form of a NIC card in 
centos 5?  Is the gnbd item relevant to this?


I have posted the question to linux-cluster also, but they are much less 
active overall, -so if you have info, massively appreciated...


-karl


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] centos 5 iptables

2007-06-12 Thread Steve Searle
Around 12:22am on Wednesday, June 13, 2007 (UK time), CentOS List scrawled:

> Line 35
> COMMIT

What are the few lines before that?

Steve

-- 

A:  Because it messes up the order in which people normally read text.
Q:  Why is top-posting a bad thing?

 00:39:16 up 26 min,  0 users,  load average: 0.00, 0.00, 0.00
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] centos 5 iptables

2007-06-12 Thread CentOS List

Line 35
COMMIT


What are the few lines before that?


-A RH-Firewall-1-INPUT -p tcp -m tcp -i eth0 -m state --dport 139 --state 
NEW -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m udp -i eth0 -m state --dport 139 --state 
NEW -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp -i eth1 -m state --dport 139 --state 
NEW -j DROP
-A RH-Firewall-1-INPUT -p tcp -m udp -i eth1 -m state --dport 139 --state 
NEW -j DROP
-A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 6000:6010 --state 
NEW -j ACCEPT

-A RH-Firewall-1-INPUT -p udp --dport 6277 -d 204.152.184.184  -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 6277 -d 192.188.61.3  -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 24441 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] centos 5 GFS/Cluster - configure fence using NIC?

2007-06-12 Thread John R Pierce

Karl R. Balsmeier wrote:
How does one configure a fence device in the form of a NIC card in 
centos 5?  Is the gnbd item relevant to this?


I'm not sure what 'a fence device in the form of a NIC card' is.   the 
fence devices I'm familiar with include SCSI fence switches, 
fiberchannel SAN switches, and APC SmartPlug power switches.


in my test cluster, I used a Qlogic SANbox fiber switch to connect the 
cluster nodes to the shared storage.the fencing was done by sending 
the Qlogic the commands to enable/disable the ports of the two nodes so 
only the active node could access the shared storage.


I suppose an Ethernet analog in an ISCSI SAN environment would be to 
send commands to a layer-2 or layer-3 managed switch to manipulate the 
VLANs to disable the standby nodes from accessing the ISCSI target 
device.   These systems would need separate dedicated NICs for LAN 
connectivity and cluster heartbeats.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Centos 5

2007-06-12 Thread Craig Van Ham
Why isn't there a server ISO for Centos 5.0 

 

Craig

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] centos 5 GFS/Cluster - configure fence using NIC?

2007-06-12 Thread Karl R. Balsmeier

John R Pierce wrote:

Karl R. Balsmeier wrote:
How does one configure a fence device in the form of a NIC card in 
centos 5?  Is the gnbd item relevant to this?


I'm not sure what 'a fence device in the form of a NIC card' is.   the 
fence devices I'm familiar with include SCSI fence switches, 
fiberchannel SAN switches, and APC SmartPlug power switches.


in my test cluster, I used a Qlogic SANbox fiber switch to connect the 
cluster nodes to the shared storage.the fencing was done by 
sending the Qlogic the commands to enable/disable the ports of the two 
nodes so only the active node could access the shared storage.


I suppose an Ethernet analog in an ISCSI SAN environment would be to 
send commands to a layer-2 or layer-3 managed switch to manipulate the 
VLANs to disable the standby nodes from accessing the ISCSI target 
device.   These systems would need separate dedicated NICs for LAN 
connectivity and cluster heartbeats.



OK, so it sounds like I have enough ethernet devices, and your notes 
help me to understand the purpose and nature of fencing a lot more.   I 
just need to isolate the potential on the iSCSI side of the equation as 
far as sending those signals to  the managed switch.


Right now I run on extreme summit switches which should suffice, and 
broadcomm GBNICs.


The iSCSI device we are using is a PromiseRAID M300i or M500i. 

It sounds on the surface like we might need a more solid fencing 
device...  Anyone agree or disagree?


-karl


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] lvm

2007-06-12 Thread Shawn
Hello,

I have a physical volume with no volume group.

# /sbin/pvscan -n
  WARNING: only considering physical volumes in no volume group
  PV /dev/sdg2 lvm2 [148.95 GB]
  Total: 1 [148.95 GB] / in use: 0 [0   ] / in no VG: 1 [148.95 GB]

Can I just create a volume group -- for example:
# vgcreate my_volume_group /dev/sdg2

and then activate it:

# vgchange -a y my_volume_group

I don't wish to reformat it or otherwise lose data stored on the volume
if possible.

Other suggestions?

Shawn


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 5

2007-06-12 Thread Dave Augustus
> Why isn’t there a server ISO for Centos 5.0 
> 
>  
> 
> Craig
> 


The ISO contains all the software needed for workstation or a server.
*You* determine what the end result of your installation of Centos is by
what software you install on the computer.

Dave
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] SMART errors Hardware_ECC_Recovered and Raw_Read_Error_Rate

2007-06-12 Thread MrKiwi

Hi All,

Im seeing these errors (below) between 2 and 40 times a day, 
for the last year (or more if i had the older logs) in 
/var/log/messages.
The values consistently toggle between 4 or so values, 
drifting up and down but never outside the mean +-2

/dev/hda sits around 21 to 38 degrees (according to smartctl)

Does anyone know *how* serious they are? I cant find much on 
the web other than the theory that any error is bad, so 
replace the disk.


Thanks for your time,

MrKiwi.

Jun 13 04:45:03 myserver smartd[3047]: Device: /dev/hda, 
SMART Prefailure Attribute: 1 Raw_Read_Error_Rate changed 
from 60 to 61
Jun 13 04:45:03 myserver smartd[3047]: Device: /dev/hda, 
SMART Usage Attribute: 195 Hardware_ECC_Recovered changed 
from 60 to 61


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] BIND Help

2007-06-12 Thread Thom Paine

I just installed CentOS5 on my server and I have to get everything
working on it. I chose to clean load it upgrading from RHEL3 to
CentOS5.

I'm having trouble understanding the way bind works now and was
wondering if anyone has a bit of time to help me with it.

I am starting from scratch and I only have my primary domain and one
additional domain I host.

Thanks.

--
-=/>Thom
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] BIND Help

2007-06-12 Thread Robert Moskowitz

Thom Paine wrote:

I just installed CentOS5 on my server and I have to get everything
working on it. I chose to clean load it upgrading from RHEL3 to
CentOS5.
IMNSHO they really 'altered' BIND setup from 4.x.  After much kicking 
around, I actually reinstalled Centos 5 and started anew.

I'm having trouble understanding the way bind works now and was
wondering if anyone has a bit of time to help me with it.
Do you understand BIND 9.x?  Do you want to implement DNS 'views'?  Do 
you need dDNS?




I am starting from scratch and I only have my primary domain and one
additional domain I host. 

Are you handling your reverse lookup (arpa.in)?

Quick recommendation:

INSTALL EVERYTHING for BIND.  This includes for a caching server and 
system-config-bind.


Then install Webmin (www.webmin.com)  and use Webmin to set yourself up.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: is CentOS stable enough ?

2007-06-12 Thread Feizhou

Warren Young wrote:

Feizhou wrote:


If you understand 'automated deployment' to mean just merely 
clobbering an installation with another Linux distro then I cannot 
help you. 


You're right, we are not using the same terms.  I understand "automated 
deployment" to include things like yum.


yum upgrade or apt distupgrade? ;)



one does not leave out staging the deployment to a staging box/farm 


You're restricting yourself to a subset of the real world here.


Of course. Tom said 'servers'. Of course, that does not necessarily mean 
a farm of servers but hey, if you have enough of them, you don't want to 
have to fight fires due to human error.




Staging systems do not make sense everywhere.  I cannot justify creating 
a staging system for my tax accountant client, where I installed a file 
server.  There's only the one server.  For your idea to work, before 
doing an OS upgrade, I'd have to have an identical spare machine just 
sitting around idle for me to test on.  Tax accountants are CHEAP.  I 
had a hard time talking the accountant into RAID.  A duplicate testing 
box, too?  Please


Single point of failure boxes need not apply. In this case, I don't even 
think you worry about security updates so whether it runs Centos or 
Fedora is not even an issue unless one of them proves to be unstable. 
Unless you like to have your accounts available on the Net...

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Pinging Static IPs on Lan

2007-06-12 Thread Thom Paine

For some reason I can't ping or communicate with two of my machines
that have static IP's on my lan.

My mythbe and mythfe are both set to have static ip's in the event of
some sort of power problem the wife can stillwatch tv.

After installing CentOS5, I can't communicate with those two machines.

I read through the release notes and the docs on dhcp, but I can't
seem to see why no machines will communicate with those two computers.

Thanks.

--
-=/>Thom
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: SSH remote port forward

2007-06-12 Thread Ugo Bellavance

Tony Mountifield wrote:

In article <[EMAIL PROTECTED]>, Ugo Bellavance <[EMAIL PROTECTED]> wrote:

Hi,

	I'm trying to do a remote port forward, and the remote hosts only 
listens to 127.0.0.1 on the forwarded port.


You can't control that from the client end, as it could be a security risk
for the remote installation.


Makes sense.


If the remote host is under your control and is running sshd from OpenSSH,
you can add the following directive to /etc/ssh/sshd_config on that system:

GatewayPorts yes

That will tell the sshd to make forwarded ports listen on 0.0.0.0 instead
of on 127.0.0.1


Excellent, thanks for the help it now works ! :).

Ugo

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Pinging Static IPs on Lan

2007-06-12 Thread Matt Shields

Is iptables running?

-matt

On 6/12/07, Thom Paine <[EMAIL PROTECTED]> wrote:

For some reason I can't ping or communicate with two of my machines
that have static IP's on my lan.

My mythbe and mythfe are both set to have static ip's in the event of
some sort of power problem the wife can stillwatch tv.

After installing CentOS5, I can't communicate with those two machines.

I read through the release notes and the docs on dhcp, but I can't
seem to see why no machines will communicate with those two computers.

Thanks.

--
-=/>Thom
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] lvm

2007-06-12 Thread Peter Kjellstrom
On Wednesday 13 June 2007, Shawn wrote:
> Hello,
>
> I have a physical volume with no volume group.
>
> # /sbin/pvscan -n
>   WARNING: only considering physical volumes in no volume group
>   PV /dev/sdg2 lvm2 [148.95 GB]
>   Total: 1 [148.95 GB] / in use: 0 [0   ] / in no VG: 1 [148.95 GB]
>
> Can I just create a volume group -- for example:
> # vgcreate my_volume_group /dev/sdg2

Yes, this how you create a _new_ volume group using a _unused_ physical 
volume. If, as you say below, you have data on this device then this is most 
likely _not_ what you want. Maybe you should look into vgimport/vgscan/etc.

/Peter

> and then activate it:
>
> # vgchange -a y my_volume_group
>
> I don't wish to reformat it or otherwise lose data stored on the volume
> if possible.
>
> Other suggestions?
>
> Shawn


pgp2N6PiTOsPL.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] centos 5 iptables

2007-06-12 Thread CentOS List
Around 12:22am on Wednesday, June 13, 2007 (UK time), CentOS List 
scrawled:



Line 35
COMMIT


What are the few lines before that?



Thanks, I saw the error on my iptables and fixed it up. 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] gcc 4.x on centOS 5

2007-06-12 Thread arnuld

i did Google and also searched CentOS web-site and CentOS 5 Release
Notes but i did not find what GCC CentOS 5 uses. i need GCC 4.x for my
C++ based project work. what GCC version CentOS 5 uses as default ?



--
http://arnuld.blogspot.com/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] gcc 4.x on centOS 5

2007-06-12 Thread Wojtek.Pilorz
On Wed, 13 Jun 2007, arnuld wrote:

> Date: Wed, 13 Jun 2007 11:59:13 +0530
> From: arnuld <[EMAIL PROTECTED]>
> Reply-To: CentOS mailing list 
> To: CentOS mailing list 
> Subject: [CentOS] gcc 4.x on centOS 5
> 
> i did Google and also searched CentOS web-site and CentOS 5 Release
> Notes but i did not find what GCC CentOS 5 uses. i need GCC 4.x for my
> C++ based project work. what GCC version CentOS 5 uses as default ?
> 
Just look at any CentOS mirror file list and you will see

W.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] gcc 4.x on centOS 5

2007-06-12 Thread Vincent Knecht
> i did Google and also searched CentOS web-site and CentOS 5 Release
> Notes but i did not find what GCC CentOS 5 uses. i need GCC 4.x for my
> C++ based project work. what GCC version CentOS 5 uses as default ?

Distrowatch is a good site to find a distribution main component's versions:
http://distrowatch.com/table.php?distribution=centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos