[CentOS] How to setup both Transpaent Proxy and firewall on the same Machine.
Hi ALL, I want to setup Transpaent Proxy on the box running iptables Firewall. With iptables, I have given below rules. iptables -F INPUT iptables -F OUTPUT iptables -F FORWARD iptables -F -t nat iptables -F -t mangle #Enabling ip forwarding echo "1" > /proc/sys/net/ipv4/ip_forward #enable syn cookies (prevent against the common 'syn flood attack') echo "1" > /proc/sys/net/ipv4/tcp_syncookies #do source validation by reversed path echo "1" > /proc/sys/net/ipv4/conf/all/rp_filter #Enable tracking mechanism /sbin/modprobe -a ip_conntrack_ftp ip_nat_ftp iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT DROP iptables -A FORWARD DROP iptables -A OUTPUT DROP in addition to that, There are many rules , ALL work fine. in squid.conf file, I have added below rules, http_port 3128 cache_mem 64 MB cache_dir ufs /var/spool/squid 100 16 256 cache_access_log /var/log/squid/access.log cache_log /var/log/squid/cache.log cache_store_log /var/log/squid/store.log httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on And, Then, I did below command. iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128 But, When I browse Internet , request will not get ridirected to 3128 port. So I can not use squid as a Transpaent Proxy. Where have I gone wrong? I reffered to below URL. http://www.tldp.org/HOWTO/TransparentProxy.html#toc2 Pls help me. -- Thank you Indunil Jayasooriya ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] is CentOS stable enough ?
On 6/12/07, DamianS <[EMAIL PROTECTED]> wrote: ROFL. You admit to being a noob and then trying to tell us Fedora is a buggy distro? Sorry dude, but you're just plain wrong - Fedora does NOT suck. i used Fedora 2,3,4, & 6. it is OT so i will keep it short: FC-2 - year 2005, my 1st *NIX distro for a long time Windows user. it ran fine, except i was too much buried into details of "can not find shared library" "XMMS" etc BUT that is not Fedora-bug, that is my newbish-ness :-) FC-3: could not install it on my friends PC. installation broke in the middle. i put FC-2 on the same PC and it ran fine FC-4: i tried it on 4 PCs and it only installed on my PC and not on other 3 PCs, same like FC-3 installation broke in the middle or just after formatting the filesystem.. FC-6: i could install it but X does not display. i tried to change to another terminal using C-M-F3 (or F4,5 6 etc). but i could not change because Fedora FREEZES on using C-M-F(x). then i changed "/etc/X11/xorg.conf" as per my hardware but problem was not solved. then i tried FC-6 on my friend's PC and it installed only 2 CDs, it simply refused to install other CDs even though i have 2 backup CDs ready and those same CDs installed on my system. on 2nd install, it installed 6 CDs but then it did not start any X, like my problem. on 3rd install, it installed 3 CDs only and refused others automatically. i tried FC-6 on my 2nd friend's computer and it said something like this: "not enough RAM, this system has not at least 256 MB of RAM and hence will only do text-based install" and what the heck, that computer had 256 MB DDR RAM. I do a yum update every day or two, and nothing has broken for the past few months at least. i used Fedora because it had 6 CDs and all those compilers, GIMP and other stuff built-in. i needed that as i and my friends, being poor, did not have any internet connection. i got a new connection now from my Father's salary :-(, i am still jobless. 1 friend refused and said WindowsXP installs better because it does not refuse to install. other has got a job as "C lecturer" :-). since we never had any internet so we never used Yum or update our system. The difference between a stable system and an unstable one is quite often the person sitting in front of the keyboard and monitor. Please dont embarrass yourself in future by making public announcements like this until you have some reasonable experience under your belt. i think that has do to do something with the "hidden secrets". on GUI based GNU distros "/etc/network/interfaces/ifcfg-eth0" and "ifconfig" are the "hidden-secrets". you try to make your system as easy as possible and hide system configuration behind GUIs and that leads to poor-managed system, my opinion only. i am Gentoo user now and find it is quite good as it does not try to hide anything behind GUIs like Sysconfig/WindowsXP and hence i do not have any major problems. some minor bugs are there but that is software, nothing is perfect. i am not talking of Desktops, i still use Window Manager for my work. i am talking of system-configuration. when something breaks on Fedora then Fedora *promotes* using sysconfig "point and click" and gives you text-file as a choice. on Gentoo/Arch/CRUX you have text-files as only choices and it is much simpler to understand the system and reason of any breakage/problem with text-files. i am the only one GNU user in my town. *no* one in my town used *NIX. i am the only one. whatever my friends or other people say about UNIX/Linux/GNU, GNU distro is the best thing that ever happened to me. well, i am no longer a newbie, using Linux from last 1.5 years and at least know what is "the UNIX effect" -> http://arnuld.blogspot.com/2007/02/sf-experience.html -- http://arnuld.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] is CentOS stable enough ?
On 6/12/07, Feizhou <[EMAIL PROTECTED]> wrote: arnuld wrote: > i have used Fedora, the base of RHEL and CentOS. Fedora is the one of > the most buggy *NIX distro i have ever seen. since Fedora is the base > of RHEL which is the base of CentOS, i just want to know whether > CentOS is stable and reliable enough to work with. i will use CentOS > primarily for > developing softwares and also for watching Bruce Lee's movies ;-) So RHEL is your fixed platform/environment? to be *exact*, i want to have a job as "C++ and OOAD expert" specialized on UNIX or Linux platform and i was told in my posts on Linuxqestions.org and justlinuxforums.org that RHEL will look good on my resume rather than other distros because Red Hat is the biggest commercial vendor of Linux and most companies use it.i looked for RHEL alternative and found 2 to be better than others: CetnOS and Scientifc Linux. hence both will be an edge for me on my Resume as compared to, say, Gentoo/Arch or Debian. the primary reason of using CentOS is only to get a better Resume as it i will say: "I am using Red Hat Enterprise Linux/CentOS as my primary development platform" i was also suggested Suse but you know the M$-Novell deal, can not use that. > NOTE: please do not take my email is as offense, to be true to you, > Fedora just sucks :-( Depends on what parts of it you are using imho. that says you are an experienced man and that reply swept above my head :-( -- http://arnuld.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] is CentOS stable enough ?
On 6/12/07, Miguel Medalha <[EMAIL PROTECTED]> wrote: You shoudn't have misplaced expectations about something and then say that it "sucks"... (By the way, that expression "sucks"!) OK. i apologize if my sentence had hurt your feelings.from next time i will say "but i found Fedora unstable as compared to distros i have used" will that be better? -- http://arnuld.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] is CentOS stable enough ?
On 6/12/07, Feizhou <[EMAIL PROTECTED]> wrote: > FWIW, I use FC6 as my primary desktop. It's quite stable. I wouldn't > use it for a server however -- too fast of a moving target. Why not? Fedora as a server is not a problem... Fedora as a desktop however...I don't know...the few times I have seen Fedora Core 5/6 desktops in action, Firefox froze, keyboard input would not work all of a sudden... YES..YES.. i had those problems too but they were what i say minor problems. i have posted the major problems in some other reply. -- http://arnuld.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Re: is CentOS stable enough ?
On 6/12/07, Les Mikesell <[EMAIL PROTECTED]> wrote: If you are working on a project to be released in the future, you might want to develop on fedora to have a head start on the next version of RHEL/Centos. Les, WOW, i just never thought of that... thanks for that tip -- http://arnuld.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] is CentOS stable enough ?
On 6/12/07, Feizhou <[EMAIL PROTECTED]> wrote: Yeah...but it leaves a rather lasting impression when it happens in the Linux class you are teaching and the only recourse was to reboot the stupid box and you have a completely identical boxes that do not share the same phenomenon. DITTO -- http://arnuld.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] is CentOS stable enough ?
arnuld wrote: On 6/12/07, Feizhou <[EMAIL PROTECTED]> wrote: arnuld wrote: > i have used Fedora, the base of RHEL and CentOS. Fedora is the one of > the most buggy *NIX distro i have ever seen. since Fedora is the base > of RHEL which is the base of CentOS, i just want to know whether > CentOS is stable and reliable enough to work with. i will use CentOS > primarily for > developing softwares and also for watching Bruce Lee's movies ;-) So RHEL is your fixed platform/environment? to be *exact*, i want to have a job as "C++ and OOAD expert" specialized on UNIX or Linux platform and i was told in my posts on Linuxqestions.org and justlinuxforums.org that RHEL will look good on my resume rather than other distros because Red Hat is the biggest commercial vendor of Linux and most companies use it.i looked for RHEL alternative and found 2 to be better than others: CetnOS and Scientifc Linux. hence both will be an edge for me on my Resume as compared to, say, Gentoo/Arch or Debian. C++ eh? Did you know that g++ has ABI issues even within minor versions? If you want to specialize on a UNIX platform, I suggest that you look elsewhere such as OpenSolaris. NOTHING in Linux space will meet UNIX because we use GNU tools and GNU = GNU is NOT UNIX. Solaris will be much more similar to other UNIX OS like AIX, HP-Unix, Irix... If you want to specialize on Linux...whichever distro you use would be very much the same for development except for perhaps packaging and system administration and the latter is not really that important now for developers... the primary reason of using CentOS is only to get a better Resume as it i will say: "I am using Red Hat Enterprise Linux/CentOS as my primary development platform" Hmm...I do not know...I personally do not see how this is a particular benefit. I hold a RHCE certificate. Would you say that this would make my resume better? > NOTE: please do not take my email is as offense, to be true to you, > Fedora just sucks :-( Depends on what parts of it you are using imho. that says you are an experienced man and that reply swept above my head :-( That is just to say you cannot make a blanket statement about Fedora or any other Linux distro. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Re: is CentOS stable enough ?
On 6/12/07, Tom Diehl <[EMAIL PROTECTED]> wrote: Welcome to the world of computers! Do you really think this type of problem is limited to Fedora? NO, i have seen this problems in 2 distros: Fedora and Arch... and both are bleeding edge. I have seen this type of behavior on various operating systems, including windoze. Fortunately my experience has been that Fedora specifically and *nix in general is less prone to this type of thing than say windoze. you can not compare Windows with UNIX.. the DragonFlyBSD i used, never froze/hung for even single time... no bugs.. and even my 7 day friendship with OpenBSD was excellent. -- http://arnuld.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] is CentOS stable enough ?
arnuld wrote: On 6/12/07, Feizhou <[EMAIL PROTECTED]> wrote: > FWIW, I use FC6 as my primary desktop. It's quite stable. I wouldn't > use it for a server however -- too fast of a moving target. Why not? Fedora as a server is not a problem... Fedora as a desktop however...I don't know...the few times I have seen Fedora Core 5/6 desktops in action, Firefox froze, keyboard input would not work all of a sudden... YES..YES.. i had those problems too but they were what i say minor problems. i have posted the major problems in some other reply. Well, desktop related problems aside, Fedora can be very useful in a server environment. Weird that others find Fedora great on the desktop but would never touch it with a ten foot pole for a server :P. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] is CentOS stable enough ?
Around 09:21am on Tuesday, June 12, 2007 (UK time), Feizhou scrawled: > Well, desktop related problems aside, Fedora can be very useful in a > server environment. Weird that others find Fedora great on the desktop > but would never touch it with a ten foot pole for a server :P. Although I find Fedora stable enough to use as a server, the frequency of having to upgrade to a new version means I find Centos a better choice. As others have said, upgrading every 4 years or so is much better than upgrading every year. I use Fedora on all my workstations, however. Steve -- A: Because it messes up the order in which people normally read text. Q: Why is top-posting a bad thing? 09:27:34 up 14:06, 0 users, load average: 0.02, 0.01, 0.00 pgp3dhSa1djRX.pgp Description: PGP signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] is CentOS stable enough ?
Steve Searle wrote: Around 09:21am on Tuesday, June 12, 2007 (UK time), Feizhou scrawled: Well, desktop related problems aside, Fedora can be very useful in a server environment. Weird that others find Fedora great on the desktop but would never touch it with a ten foot pole for a server :P. Although I find Fedora stable enough to use as a server, the frequency of having to upgrade to a new version means I find Centos a better choice. As others have said, upgrading every 4 years or so is much better than upgrading every year. It is certainly less of a headache. No need to build a system just to handle deployment (not that this is a bad thing...) once a year along with whatever you need if you do not have that many servers and therefore such a system would be overkill. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] NFSv4 hangs on file open
Hi, I have a relatively loaded CentOS5 server (64-bit, dual core) and a mixed bag of Fedora 6/CentOS4, 32-, and 64-bit clients. NFSv3 works without problem. References over NFSv4 hang occasionally, in particular on file opening. I wonder whether there is anybody here who can help to trace it, or can suggest a more appropriate forum? The one hang that I have been able to trace involved only CentOS5/2.6.18-8.1.4.el5. The server is 64-bit, client: 32-bit. Hang happened when a program was about to be executed from NFSv4 share. LD_LIBRARY_PATH included a directory on this share. gdb backtrace revealed that the process was being loaded in memory, and an attempt to open (non-existing) library file never completed. /Pawel strace -p 19289 Process 19289 attached - interrupt to quit open("/pkg/pgi/5.2-4//linux86/5.2/lib/libg2c.so.0", O_RDONLY ...> gdb program.x 19289 0x0063cb04 in open () from /lib/ld-linux.so.2 (gdb) where 0 0x0063cb04 in open () from /lib/ld-linux.so.2 1 0x0062d6c5 in open_verify () from /lib/ld-linux.so.2 2 0x0062dc6a in open_path () from /lib/ld-linux.so.2 3 0x0063055f in _dl_map_object () from /lib/ld-linux.so.2 4 0x006340d6 in openaux () from /lib/ld-linux.so.2 5 0x00635b46 in _dl_catch_error () from /lib/ld-linux.so.2 6 0x0063469a in _dl_map_object_deps () from /lib/ld-linux.so.2 7 0x0062b40e in dl_main () from /lib/ld-linux.so.2 8 0x0063b8bb in _dl_sysdep_start () from /lib/ld-linux.so.2 9 0x006292b8 in _dl_start () from /lib/ld-linux.so.2 10 0x00628817 in _start () from /lib/ld-linux.so.2 The NFSv4 is automounted (direct mount): cat /etc/auto.pkg /pkg-fstype=nfs4server:/i32 For what is worth, I tried NFSv4 with CentOS4 server but it was hopeless (server would stop responding or panic). Older kernel releases of Fedora6 (2.6.19?) were hopeless too, with similar symptoms. Anybody knows who may be interested in some detailed bug report, or help debugging the problem? Pawel PS. The server logs plenty of messages: NFSD: setclientid: string in use by client(clientid 46604ac4/0016) but my rpc.idmapd configuration is correct as far as I can tell.. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Re: is CentOS stable enough ?
Feizhou wrote: If you understand 'automated deployment' to mean just merely clobbering an installation with another Linux distro then I cannot help you. You're right, we are not using the same terms. I understand "automated deployment" to include things like yum. one does not leave out staging the deployment to a staging box/farm You're restricting yourself to a subset of the real world here. Staging systems do not make sense everywhere. I cannot justify creating a staging system for my tax accountant client, where I installed a file server. There's only the one server. For your idea to work, before doing an OS upgrade, I'd have to have an identical spare machine just sitting around idle for me to test on. Tax accountants are CHEAP. I had a hard time talking the accountant into RAID. A duplicate testing box, too? Please ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] ip_conntrack table filling up, dropping packets
Hi, my ip_conntrack table is filling up and now my server is dropping packets. I'm running CentOS release 4.4 (Final) on a fairly busy webserver. The table is full of various connections, including a lot of "ESTABLISHED" tcp connections from my webserver (the src is my webserver ip), and some other random connections to my webserver, and many "ASSURED" connections. So why is it filling up? I changed the default timeout value like so: echo 36000 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_established but I don't think that's had any effect. any thoughts? what additional info can I provide that would be helpful?I did find a script that clears out some of the stale connections using hping2, but I don't know if that's really a great solution to this problem. cat /proc/sys/net/ipv4/ip_conntrack_max # 34576 after cleaning out the ip_conntrack table using an hping2 script: cat /proc/net/ip_conntrack | wc -l # 3702 -- this number was around 34000 before I cleared it out because it was dropping packets. rebooting the machine, of course, clears it out. I've spent many hours banging my head against the wall trying to figure this out, reading in google groups and in various forums, to no avail. My webserver does send out emails to a few thousand registered users (if they opt it for the email) every day. Thank you for your time! I hope I sent this to the right list. This looked like the right one. Sorry in advance if I made a mistake. Michelson ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] CentOS-announce Digest, Vol 28, Issue 9
-signature Size: 189 bytes Desc: Digital signature Url : http://lists.centos.org/pipermail/centos-announce/attachments/20070611/3835c96f/attachment-0001.bin -- Message: 7 Date: Mon, 11 Jun 2007 23:58:34 +0300 From: Pasi Pirhonen <[EMAIL PROTECTED]> Subject: [CentOS-announce] CESA-2007:0403 Moderate CentOS 4 s390(x) freetype- security update To: [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0403 https://rhn.redhat.com/errata/RHSA-2007-0403.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/freetype-2.1.9-6.el4.s390.rpm updates/s390/RPMS/freetype-demos-2.1.9-6.el4.s390.rpm updates/s390/RPMS/freetype-devel-2.1.9-6.el4.s390.rpm updates/s390/RPMS/freetype-utils-2.1.9-6.el4.s390.rpm s390x: updates/s390x/RPMS/freetype-2.1.9-6.el4.s390x.rpm updates/s390x/RPMS/freetype-demos-2.1.9-6.el4.s390x.rpm updates/s390x/RPMS/freetype-devel-2.1.9-6.el4.s390x.rpm updates/s390x/RPMS/freetype-utils-2.1.9-6.el4.s390x.rpm -- Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/ Top-postings silently ignored -- next part -- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.centos.org/pipermail/centos-announce/attachments/20070611/d8b624c5/attachment-0001.bin -- Message: 8 Date: Tue, 12 Jun 2007 00:01:11 +0300 From: Pasi Pirhonen <[EMAIL PROTECTED]> Subject: [CentOS-announce] CESA-2007:0465 Moderate CentOS 3 s390(x) pam - security update To: [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0465 https://rhn.redhat.com/errata/RHSA-2007-0465.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/pam-0.75-72.s390.rpm updates/s390/RPMS/pam-devel-0.75-72.s390.rpm s390x: updates/s390x/RPMS/pam-0.75-72.s390x.rpm updates/s390x/RPMS/pam-devel-0.75-72.s390x.rpm -- Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/ Top-postings silently ignored -- next part -- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.centos.org/pipermail/centos-announce/attachments/20070612/e7c41e77/attachment-0001.bin -- Message: 9 Date: Tue, 12 Jun 2007 00:04:57 +0300 From: Pasi Pirhonen <[EMAIL PROTECTED]> Subject: [CentOS-announce] CESA-2007:0469 Low CentOS 3 ia64 gdb - securityupdate To: [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0469 https://rhn.redhat.com/errata/RHSA-2007-0469.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/gdb-6.3.0.0-1.138.el3.ia64.rpm -- Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/ Top-postings silently ignored -- next part -- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.centos.org/pipermail/centos-announce/attachments/20070612/391e51fa/attachment-0001.bin -- Message: 10 Date: Tue, 12 Jun 2007 00:07:22 +0300 From: Pasi Pirhonen <[EMAIL PROTECTED]> Subject: [CentOS-announce] CESA-2007:0430 Low CentOS 3 ia64 openldap - security update To: [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0430 https://rhn.redhat.com/errata/RHSA-2007-0430.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/openldap-2.0.27-23.ia64.rpm updates/ia64/RPMS/openldap-clients-2.0.27-23.ia64.rpm updates/ia64/RPMS/openldap-devel-2.0.27-23.ia64.rpm updates/ia64/RPMS/openldap-servers-2.0.27-23.ia64.rpm -- Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/ Top-postings silently ignored -- next part -- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.centos.org/pipermail/centos-announce/attachments/20070612/42d63e9b/attachment-0001.bin -- Message: 11 Date: Tue, 12 Jun 2007 00:08:22 +0300 From: Pasi Pirhonen <[EMAIL PROTECTED]> Subject: [CentOS-announce] CESA-2007:0431 Low CentOS 3 ia64 shadow-utils - security update To: [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; ch
Re: [CentOS] ARP Problem ???
Craig Van Ham wrote: Does any one know if this is normal operating of ARP… Or where to start looking… I am seeing a lot of ARP requests for my router IP from the same IP within seconds. 21:04:41.112929 arp who-has IP tell MY ROUTERS IP Get us the MAC address that is asking. This will give us the card manufacturer, which will then, perhaps tell you which system on your network is the culprit. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ARP Problem ???
Robert Moskowitz wrote: Craig Van Ham wrote: Does any one know if this is normal operating of ARP… Or where to start looking… I am seeing a lot of ARP requests for my router IP from the same IP within seconds. 21:04:41.112929 arp who-has IP tell MY ROUTERS IP Get us the MAC address that is asking. This will give us the card manufacturer, which will then, perhaps tell you which system on your network is the culprit. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos It looks like it's his router that is asking and the requested device is not responding. Is the "who-has IP" address up and valid? Bob... ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ARP Problem ???
Bob Chiodini wrote: Robert Moskowitz wrote: Craig Van Ham wrote: Does any one know if this is normal operating of ARP… Or where to start looking… I am seeing a lot of ARP requests for my router IP from the same IP within seconds. 21:04:41.112929 arp who-has IP tell MY ROUTERS IP Get us the MAC address that is asking. This will give us the card manufacturer, which will then, perhaps tell you which system on your network is the culprit. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos It looks like it's his router that is asking and the requested device is not responding. Is the "who-has IP" address up and valid? It would be interesting to know what IP address is being asked for. For example, this is the router asking, and of course the router's interface is statically configured, and the address it is looking for is either its: The DNS server The NTP server The SYSLOG server The COPS policy server (yeah, like anyone has implemented COPS and if they did, this would be an anycast) The SYSLOG server has my bet, as a router, configured for remote syslogging will always have something to send to its syslog... ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] ARP Problem ???
My router is 139.142.16.1. It does this to a couple IP's 8:18:08.684747 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.713629 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.713994 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.714001 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.714800 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.717638 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.719260 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.720477 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.721289 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.724126 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.725343 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.729802 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.732665 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.733863 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.736291 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.738724 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.744828 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.750894 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.750903 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.750910 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.752520 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.756164 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.761842 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.761850 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.761856 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.764687 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.768735 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.771586 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.772785 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.774406 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.778064 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.778071 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.780488 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.782526 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.782533 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.783736 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.791437 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.792658 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.792665 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.793064 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.795086 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.798736 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.799546 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.800358 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.803198 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.806449 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.809684 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.817398 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.817406 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.820235 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.820637 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.820644 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.825504 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.831175 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.835640 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.837666 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.840096 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.845778 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.846583 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.847400 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.850233 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.854696 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.857133 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.860376 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.863621 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.868893 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.871723 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.873751 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.877406 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.880257 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.887551 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.888353 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.900118 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.900130 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.903363 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.905379 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.905792 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.908622 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.910650 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.913894 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.919975 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.926875 arp who-has 139.142.16.57 tell 139.142.16.1 08:18:08.927276 arp
RE: [CentOS] ARP Problem ???
It's multiple IPs of clients on the network. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Moskowitz Sent: Tuesday, June 12, 2007 8:19 AM To: CentOS mailing list Subject: Re: [CentOS] ARP Problem ??? Bob Chiodini wrote: > > > Robert Moskowitz wrote: >> Craig Van Ham wrote: >>> >>> Does any one know if this is normal operating of ARP. Or where to >>> start looking. >>> >>> I am seeing a lot of ARP requests for my router IP from the same IP >>> within seconds. >>> >>> >>> 21:04:41.112929 arp who-has IP tell MY ROUTERS IP >>> >> Get us the MAC address that is asking. This will give us the card >> manufacturer, which will then, perhaps tell you which system on your >> network is the culprit. >> >> ___ >> CentOS mailing list >> CentOS@centos.org >> http://lists.centos.org/mailman/listinfo/centos > It looks like it's his router that is asking and the requested device > is not responding. Is the "who-has IP" address up and valid? It would be interesting to know what IP address is being asked for. For example, this is the router asking, and of course the router's interface is statically configured, and the address it is looking for is either its: The DNS server The NTP server The SYSLOG server The COPS policy server (yeah, like anyone has implemented COPS and if they did, this would be an anycast) The SYSLOG server has my bet, as a router, configured for remote syslogging will always have something to send to its syslog... ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ARP Problem ???
Craig Van Ham wrote: It's multiple IPs of clients on the network. Can you look at the ARP table in your router? In your pervious note you only had one client address, but I believe you in your statement about multiple addresses. If the ARP requests match what is in the ARP table then perhaps: We are seeing keep-alives. Do you see any traffic to the addresses from outside after an ARP response? This COULD be Bell Canada (I did a look up on your address range at dnsstuff.com) checking out what your addresses are being used for. If the addresses being ARPed are NOT in the ARP cache (and not addresses of clients systems) then perhaps: Your router is being hit with attacks across your allocation range, and it is doing nothing more than trying to forward those attack packets inward. So you want some information from your router. Is this just something your router is doing on its own, or is this due to an external event. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Moskowitz Sent: Tuesday, June 12, 2007 8:19 AM To: CentOS mailing list Subject: Re: [CentOS] ARP Problem ??? Bob Chiodini wrote: Robert Moskowitz wrote: Craig Van Ham wrote: Does any one know if this is normal operating of ARP. Or where to start looking. I am seeing a lot of ARP requests for my router IP from the same IP within seconds. 21:04:41.112929 arp who-has IP tell MY ROUTERS IP Get us the MAC address that is asking. This will give us the card manufacturer, which will then, perhaps tell you which system on your network is the culprit. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos It looks like it's his router that is asking and the requested device is not responding. Is the "who-has IP" address up and valid? It would be interesting to know what IP address is being asked for. For example, this is the router asking, and of course the router's interface is statically configured, and the address it is looking for is either its: The DNS server The NTP server The SYSLOG server The COPS policy server (yeah, like anyone has implemented COPS and if they did, this would be an anycast) The SYSLOG server has my bet, as a router, configured for remote syslogging will always have something to send to its syslog... ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Recommendation/pointers please - Need to brush up on CentOS/Linux command line tools
I can recommend the book A Practical Guide to Linux Commands, Editors and Shell Programming. http://www.amazon.com/Practical-Guide-Commands-Editors-Programming/dp/0131478230/ref=pd_bbs_sr_1/104-4412880-2983136?ie=UTF8&s=books&qid=1181662084&sr=8-1 It can be had for $30 and it is a big book. It has lots of demos and examples. While it will not necessarily tell you what tool would be best for a particular job it will tell you how to use the tool well. The first chapter is a bit basic and they go into a lot (maybe too much) detail on the different editors it has good information. They also have a quick list of the main command line utilities with a single line of what they do. It is like having simplified man pages with some extra examples but in book form. Rob On 6/12/07, Daniel de Kok <[EMAIL PROTECTED]> wrote: On Mon, 2007-06-11 at 16:51 -0500, Dale wrote: > I would very much appreciate any suggestions on any online resources, or > even a decent book to purchase with the focus of brushing up on Linux > command line tools. The focus is on troubleshooting type commands, > adding users from command line > and so forth. Still very much work in progress: http://www.taickim.com/books/unixsystems/html/ -- Daniel ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] conga, ricci and luci updates missing?
According to this link, https://rhn.redhat.com/errata/RHBA-2007-0331.html conga, ricci and luci have updates available. I can't find these updates on the mirrors I checked. They are in: http://mirror.centos.org/centos/5/os/x86_64/CentOS/ but not in: http://mirror.centos.org/centos/5/updates/x86_64/RPMS/ Anyone have any ideas about this? TIA Dave ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] conga, ricci and luci updates missing?
Dave Augustus wrote: According to this link, https://rhn.redhat.com/errata/RHBA-2007-0331.html conga, ricci and luci have updates available. I can't find these updates on the mirrors I checked. They are in: http://mirror.centos.org/centos/5/os/x86_64/CentOS/ but not in: http://mirror.centos.org/centos/5/updates/x86_64/RPMS/ Anyone have any ideas about this? I am looking at this issue right now. - KB -- Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] conga, ricci and luci updates missing?
On Tue, 12 Jun 2007, Dave Augustus wrote: According to this link, https://rhn.redhat.com/errata/RHBA-2007-0331.html conga, ricci and luci have updates available. Well, not exactly, or at least not generally. This is in an advisory for product "RHEL Clustering (v. 5 server)": Fromt eh advistor: "(The unlinked packages above are only available from the Red Hat Network)" and conga-0.9.2-6.el5.src.rpm is so unlinked == I think you may wish to consider asking that the sources be released on upstream products. -- Russ Herrold ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] conga, ricci and luci updates missing?
On Tue, 12 Jun 2007, R P Herrold wrote: I think you may wish to consider asking that the sources be released on upstream products. dang it -- I was reading too fast. Yup this is a problem that stuff is dropping into the mirrors without advisories being seen by centos team members on non mainline products; I assume we'll have to move to some sort of daily backstol diff on mirroring with a 'find -type f' process, to pick these up. -- Russ Herrold ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Re: kernel-smp not upgrading
Ugo Bellavance spake the following on 6/11/2007 9:44 PM: > Hi, > > Box is a dual-dual core opteron. Centos4. Just upgraded t the > latest kernel (2.6.9-55). > > The UP kernel installed fine, but the smp kernel didn't install. > What should I do? Is that normal? Original kernel was a smp. > > Regards, > > Ugo I had that problem when the updates came out on one of my servers. Manually installing the kernel again seemed to fix it. It actually started the install, and the rpm database said it was installed, but the kernel file and the initrd weren't anywhere to be found. But the rest of the kernel related files were there in boot. -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] ext3 and acls
Hello, I've got a centos5 box with raided ext3 partitions mp* devices. I'm wondering if ext3 supports acls out of the box or if there's something i have to do to enable them? Thanks. Dave. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] conga, ricci and luci updates missing?
R P Herrold wrote: Yup this is a problem that stuff is dropping into the mirrors without advisories being seen by centos team members on non mainline products; I assume we'll have to move to some sort of daily backstol diff on mirroring with a 'find -type f' process, to pick these up. Actually there is something like this running already, the 'issue' was me blocking the cluster stuff on a few bug reports in > release version stuff. Clearing it all out today. Apologies for the delay. - KB -- Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ext3 and acls
Dave wrote: Hello, I've got a centos5 box with raided ext3 partitions mp* devices. I'm wondering if ext3 supports acls out of the box or if there's something i have to do to enable them? You could try to add ",acl" to options in your /etc/fstab for the partitions you want to run acl on. On a FC3 system I have: /dev/md3/home ext3defaults,acl1 2 Mogens -- Mogens Kjaer, Carlsberg A/S, Computer Department Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark Phone: +45 33 27 53 25, Fax: +45 33 27 47 08 Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] ext3 and acls
On Tue, 12 Jun 2007, Dave wrote: I've got a centos5 box with raided ext3 partitions mp* devices. I'm wondering if ext3 supports acls out of the box or if there's something i have to do to enable them? Yes, CentOS/ext3 supports ACLs by default. Make sure the acl package in installed, then take at peek at the getfacl(1) and setfacl(1) man pages. -- Paul Heinlein <> [EMAIL PROTECTED] <> http://www.madboa.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] CentOS 5 and Java
- "Daniel de Kok" <[EMAIL PROTECTED]> escreveu: > On Mon, 2007-06-11 at 16:32 -0300, Antonio da Silva Martins Junior > wrote: > > sun.misc.InvalidJarIndexException: Invalid index > > at > sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:854) > [snip] > > Someone had an idea on what I can do? > > This was recently discussed on the list: > http://lists.centos.org/pipermail/centos/2007-May/081650.html > > Upstream has an update to fix the brp-java-repack-jars script: > http://rhn.redhat.com/errata/RHBA-2007-0365.html > > To fix this problem, we'd need that update, and rebuild the tomcat > (and possibly some other packages). You could also try tomcat from > JPackage, which was already fixed. Thanks Daniel, I had downloaded and installed the patch from upstream (redhat-rpm-config-8.0.45-17.0.1), then setup (RPM_BUILD_ROOT=/usr/share/java/tomcat5/) and run /usr/lib/rpm/redhat/brp-java-repack-jars, after that tomcat5 starts (with a lot of messages in catalina.out), but it's executing the demos at least :) Now it's time to give this machine to his users and wait for the bugs :) Thanks, Antonio. -- +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Antonio S. Martins Jr. - Support Analist | "Only The Shadow Knows | | Universidade Estadual de Maringá - Brasil| what evil lurks in the | | NPD - Núcleo de Processamento de Dados | Heart of Men!" | | E-Mail: [EMAIL PROTECTED] / [EMAIL PROTECTED] | !!! Linux User: 52392 !!! | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ -- Esta mensagem foi verificada pelo sistema de antiv�rus e acredita-se estar livre de perigo. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] PGP On Centos
Hey I need to run some pgp commands, -what's the name of the package supported by Centos that will allow me to work with pgp? I need to run pgp --fingerprint key.name or it's equivalent. Pro question. Google searches didn't show much, tried to search for pgp, gnupg, openpgp, pgp on centos, openpgp on centos, centos/pgp. No worthy results came back. Any advice? -karlski ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] PGP On Centos
Karl R. Balsmeier schrieb am 12.06.2007 20:28: > Hey I need to run some pgp commands, -what's the name of the package > supported by Centos that will allow me to work with pgp? > > I need to run pgp --fingerprint key.name > > or it's equivalent. > > Pro question. Google searches didn't show much, tried to search for > pgp, gnupg, openpgp, pgp on centos, openpgp on centos, centos/pgp. No > worthy results came back. > > Any advice? > I think you searching for gpg. Greets René -- GEEKCODE: GIT$ d- s+: a- C+++ UL$ P+ L++ E--- W+++ N+ !o K- w+ O- M-- V- PS+ PE Y+ PGP++ t++ 5++ X+ R tv+ b DI D++ G e+ h--- r++ y+++ PGP-Key and more available at http://www.standfest.net My Blog is at http://www.gaudidiecher.de ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] PGP On Centos
On Tue, Jun 12, 2007 at 11:28:37AM -0700, Karl R. Balsmeier wrote: > Hey I need to run some pgp commands, -what's the name of the package > supported by Centos that will allow me to work with pgp? > > I need to run pgp --fingerprint key.name gnupg, and the command is gpg. It should be already installed, otherwise, yum install gnupg. -- lfr 0/0 pgpbxCHoVyYwr.pgp Description: PGP signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] PGP On Centos + fixed/understood
Thanks for that, I was now able to man gpg and: paste the contents of a public key my co-worker had stored in a web screen with vi, called public.key and do: gpg --import public.key [to get it onto the keyring of the centos server I was using] gpg --fingerprint [listed all the fingerprint for all the keys created on the machine] thanks! -karlski Luciano Rocha wrote: On Tue, Jun 12, 2007 at 11:28:37AM -0700, Karl R. Balsmeier wrote: Hey I need to run some pgp commands, -what's the name of the package supported by Centos that will allow me to work with pgp? I need to run pgp --fingerprint key.name gnupg, and the command is gpg. It should be already installed, otherwise, yum install gnupg. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Re: kernel-smp not upgrading
Scott Silva wrote: Ugo Bellavance spake the following on 6/11/2007 9:44 PM: Hi, Box is a dual-dual core opteron. Centos4. Just upgraded t the latest kernel (2.6.9-55). The UP kernel installed fine, but the smp kernel didn't install. What should I do? Is that normal? Original kernel was a smp. Regards, Ugo I had that problem when the updates came out on one of my servers. Manually installing the kernel again seemed to fix it. It actually started the install, and the rpm database said it was installed, but the kernel file and the initrd weren't anywhere to be found. But the rest of the kernel related files were there in boot. Same thing here, fixed the same way :). Ugo ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Selinux custom policy issue - Centos 5
> On Tue, 2007-06-12 at 12:24 +1200, Miskell, Craig wrote: > > Where file_upload_store_t is one of my custom types. My > local.fc looks > > like this: > > /data/spool/blastreq(/.*)?system_u:object_r:blast_req_t > > /data/spool/blastres(/.*)?system_u:object_r:blast_res_t > > /data/upload(/.*)? > > system_u:object_r:file_upload_store_t > > /data/bfiles(/.*)?system_u:object_r:bfiles_t > > /var/www/possumbase/html/imagetemp(/.*)? > > system_u:object_r:http_image_temp_t > > /var/www/sheep/html/imagetemp(/.*)? > > system_u:object_r:http_image_temp_t > > > > And my local.te contains (selected portions only for now): > > module local 1.1; > > > > require { > > ... > > > > ... > > } > > type blast_req_t,file_type; > > allow httpd_sys_script_t blast_req_t:file { create getattr write}; > > allow httpd_sys_script_t blast_req_t:dir { read getattr lock search > > ioctl add_name write }; > > ...etc > > Is file_upload_store_t defined in your local policy? E.g.: > > type file_upload_store_t, file_type; Yes (sorry, that would have been the sensible bit to selectively extract; I don't know what I was thinking): *** type file_upload_store_t,file_type; allow httpd_sys_script_t file_upload_store_t:dir { read getattr create search write add_name }; allow httpd_sys_script_t file_upload_store_t:file { create getattr write read }; *** Craig === Attention: The information contained in this message and/or attachments from AgResearch Limited is intended only for the persons or entities to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipients is prohibited by AgResearch Limited. If you have received this message in error, please notify the sender immediately. === ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Dual boot in CentOS 4.4
I've recently upgraded from RedHat 9 to CentOS 4.4. With RH9 I had a dual boot system with Windows XP (RH9 as the default of course!), which was automatically set up when I installed RH9 in the remaining partition after I'd installed XP. However, I appear to have lost my dual boot with CentOS 4.4 (no option to boot into DOS now), even though I still have the Windows XP partition, so how can I (re-) set up the dual boot? Thanks, Andy ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos openssl-devel
Well, it does the trick for openssl-devel.. But there are other packages which still require openssl i386. What should i do? It really depends if you need 32 bit compatibility. I tend to do "yum remove glibc.i686" to get rid of it entirely. I did that and yet it getting the same error. Transaction Check Error: file /usr/share/man/man1/asn1parse.1ssl.gz from install of openssl-0.9.8b-8.3.el5 conflicts with file from package openssl-0.9.8b-8.3.el5 file /usr/share/man/man1/nseq.1ssl.gz from install of openssl-0.9.8b-8.3.el5 conflicts with file from package openssl-0.9.8b-8.3.el5 file /usr/share/man/man1/ocsp.1ssl.gz from install of openssl-0.9.8b-8.3.el5 conflicts with file from package openssl-0.9.8b-8.3.el5 file /usr/share/man/man1/smime.1ssl.gz from install of openssl-0.9.8b-8.3.el5 conflicts with file from package openssl-0.9.8b-8.3.el5 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Centos 5, X dies, I cry
I just installed Centos 5 for my notebook (HP compaq nc4010) on a separate drive (than this one that has Centos 4.5). When I first booted after all the setup, X did not start. hmm. Rebooted, and X came up fine. I did a bunch of customizing and upgraded the kernel Rebooted, X did not start. Rebooted X started fine. I checked some things out then tried the Suspend feature. Not supprisingly, the system would not come back properly out of suspend. So I pulled the battery and rebooted. Now no X. I looked at the Xorg.0.log and did see one error (but did not write it down, grrr). I have tried to mount that drive via a USB connector, but automount is not handling it, and I don't know how to start working out mounting it manually. SO What happened? Oh, not nVidea (or whatever those threads on a video problem is). My video card is the: "ATI Technologies Inc PCI Bridge [IGP 340M]" Is something still wrong becuase of the attempt to try Suspend? Where do I look and what do I change? Possiblely I messed up in customizing? But I did run system-config-display and set things as they are here in Centos 4.5, and rebooted. No change please help! ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Dual boot in CentOS 4.4
On 6/12/07, Andrew Allen <[EMAIL PROTECTED]> wrote: I've recently upgraded from RedHat 9 to CentOS 4.4. With RH9 I had a dual boot system with Windows XP (RH9 as the default of course!), which was automatically set up when I installed RH9 in the remaining partition after I'd installed XP. However, I appear to have lost my dual boot with CentOS 4.4 (no option to boot into DOS now), even though I still have the Windows XP partition, so how can I (re-) set up the dual boot? Thanks, Andy Check your /boot/grub/grub.conf file. Does it have lines like these? title winXP rootnoverify (hd0,1) chainloader +1 (This is just an example, yours may be different) Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] SSH remote port forward
Hi, I'm trying to do a remote port forward, and the remote hosts only listens to 127.0.0.1 on the forwarded port. [EMAIL PROTECTED] ~]$ netstat -ln Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp0 0 127.0.0.1:5500 0.0.0.0:* LISTEN tcp0 0 0.0.0.0:56660.0.0.0:* LISTEN tcp0 0 ::1:5500:::* LISTEN tcp0 0 :::22 :::* LISTEN (I'm trying to tunnel a vnc client connection. From putty's logs, you can see that the tunnel is requested: 2007-06-12 17:34:15 Opened channel for session 2007-06-12 17:34:15 Requesting remote port 5500 forward to 10.0.0.1:5500 2007-06-12 17:34:15 Remote port forwarding from 5500 enabled (I changed the real IP address to 10.0.0.1). In putty, the "Local ports accept connections from other hosts" and "Remote ports do the same" are checked. Any ideas? Regards, ugo ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Re: SSH remote port forward
In article <[EMAIL PROTECTED]>, Ugo Bellavance <[EMAIL PROTECTED]> wrote: > Hi, > > I'm trying to do a remote port forward, and the remote hosts only > listens to 127.0.0.1 on the forwarded port. You can't control that from the client end, as it could be a security risk for the remote installation. If the remote host is under your control and is running sshd from OpenSSH, you can add the following directive to /etc/ssh/sshd_config on that system: GatewayPorts yes That will tell the sshd to make forwarded ports listen on 0.0.0.0 instead of on 127.0.0.1 Don't forget "service sshd restart" after making the change. Cheers Tony -- Tony Mountifield Work: [EMAIL PROTECTED] - http://www.softins.co.uk Play: [EMAIL PROTECTED] - http://tony.mountifield.org ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] centos 5 iptables
Hi, I applied a set of iptables rules and started iptables without any trouble. But after i edited the rules and restarting it, it gives me "Applying iptables firewall rules: iptables-restore: line 35 failed". I looked into /etc/sysconfig/ for the mentioned file and it was not found. I did a quick check and locate only found /sbin/iptables-restore. I had done updatedb before using locate. Any ideas? thanks ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5 iptables
On 13/06/2007, at 8:59 AM, CentOS List wrote: I applied a set of iptables rules and started iptables without any trouble. But after i edited the rules and restarting it, it gives me "Applying iptables firewall rules: iptables-restore: line 35 failed". I looked into /etc/sysconfig/ for the mentioned file and it was not found. I did a quick check and locate only found /sbin/ iptables-restore. I had done updatedb before using locate. All your firewall rules are in the file: /etc/sysconfig/iptables. Check on line 35 of that file. -- Steven Haigh Email: [EMAIL PROTECTED] Web: http://www.crc.id.au Phone: (03) 9017 0597 - 0404 087 474 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5 iptables
Around 11:59pm on Tuesday, June 12, 2007 (UK time), CentOS List scrawled: > Hi, > > I applied a set of iptables rules and started iptables without any trouble. > But after i edited the rules and restarting it, it gives me "Applying > iptables firewall rules: iptables-restore: line 35 failed". I looked into > /etc/sysconfig/ for the mentioned file and it was not found. I did a quick > check and locate only found /sbin/iptables-restore. I had done updatedb > before using locate. > > Any ideas? What is line 35 of /etc/sysconfig/iptables? Steve -- A: Because it messes up the order in which people normally read text. Q: Why is top-posting a bad thing? pgpSi8y9CHG4T.pgp Description: PGP signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5 iptables
I applied a set of iptables rules and started iptables without any trouble. But after i edited the rules and restarting it, it gives me "Applying iptables firewall rules: iptables-restore: line 35 failed". I looked into /etc/sysconfig/ for the mentioned file and it was not found. I did a quick check and locate only found /sbin/ iptables-restore. I had done updatedb before using locate. All your firewall rules are in the file: /etc/sysconfig/iptables. Check on line 35 of that file. Line 35 COMMIT regards ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] centos 5 GFS/Cluster - configure fence using NIC?
How does one configure a fence device in the form of a NIC card in centos 5? Is the gnbd item relevant to this? I have posted the question to linux-cluster also, but they are much less active overall, -so if you have info, massively appreciated... -karl ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5 iptables
Around 12:22am on Wednesday, June 13, 2007 (UK time), CentOS List scrawled: > Line 35 > COMMIT What are the few lines before that? Steve -- A: Because it messes up the order in which people normally read text. Q: Why is top-posting a bad thing? 00:39:16 up 26 min, 0 users, load average: 0.00, 0.00, 0.00 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5 iptables
Line 35 COMMIT What are the few lines before that? -A RH-Firewall-1-INPUT -p tcp -m tcp -i eth0 -m state --dport 139 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m udp -i eth0 -m state --dport 139 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp -i eth1 -m state --dport 139 --state NEW -j DROP -A RH-Firewall-1-INPUT -p tcp -m udp -i eth1 -m state --dport 139 --state NEW -j DROP -A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 6000:6010 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p udp --dport 6277 -d 204.152.184.184 -j ACCEPT -A RH-Firewall-1-INPUT -p udp --dport 6277 -d 192.188.61.3 -j ACCEPT -A RH-Firewall-1-INPUT -p udp -m udp --dport 24441 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5 GFS/Cluster - configure fence using NIC?
Karl R. Balsmeier wrote: How does one configure a fence device in the form of a NIC card in centos 5? Is the gnbd item relevant to this? I'm not sure what 'a fence device in the form of a NIC card' is. the fence devices I'm familiar with include SCSI fence switches, fiberchannel SAN switches, and APC SmartPlug power switches. in my test cluster, I used a Qlogic SANbox fiber switch to connect the cluster nodes to the shared storage.the fencing was done by sending the Qlogic the commands to enable/disable the ports of the two nodes so only the active node could access the shared storage. I suppose an Ethernet analog in an ISCSI SAN environment would be to send commands to a layer-2 or layer-3 managed switch to manipulate the VLANs to disable the standby nodes from accessing the ISCSI target device. These systems would need separate dedicated NICs for LAN connectivity and cluster heartbeats. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Centos 5
Why isn't there a server ISO for Centos 5.0 Craig ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5 GFS/Cluster - configure fence using NIC?
John R Pierce wrote: Karl R. Balsmeier wrote: How does one configure a fence device in the form of a NIC card in centos 5? Is the gnbd item relevant to this? I'm not sure what 'a fence device in the form of a NIC card' is. the fence devices I'm familiar with include SCSI fence switches, fiberchannel SAN switches, and APC SmartPlug power switches. in my test cluster, I used a Qlogic SANbox fiber switch to connect the cluster nodes to the shared storage.the fencing was done by sending the Qlogic the commands to enable/disable the ports of the two nodes so only the active node could access the shared storage. I suppose an Ethernet analog in an ISCSI SAN environment would be to send commands to a layer-2 or layer-3 managed switch to manipulate the VLANs to disable the standby nodes from accessing the ISCSI target device. These systems would need separate dedicated NICs for LAN connectivity and cluster heartbeats. OK, so it sounds like I have enough ethernet devices, and your notes help me to understand the purpose and nature of fencing a lot more. I just need to isolate the potential on the iSCSI side of the equation as far as sending those signals to the managed switch. Right now I run on extreme summit switches which should suffice, and broadcomm GBNICs. The iSCSI device we are using is a PromiseRAID M300i or M500i. It sounds on the surface like we might need a more solid fencing device... Anyone agree or disagree? -karl ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] lvm
Hello, I have a physical volume with no volume group. # /sbin/pvscan -n WARNING: only considering physical volumes in no volume group PV /dev/sdg2 lvm2 [148.95 GB] Total: 1 [148.95 GB] / in use: 0 [0 ] / in no VG: 1 [148.95 GB] Can I just create a volume group -- for example: # vgcreate my_volume_group /dev/sdg2 and then activate it: # vgchange -a y my_volume_group I don't wish to reformat it or otherwise lose data stored on the volume if possible. Other suggestions? Shawn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Centos 5
> Why isn’t there a server ISO for Centos 5.0 > > > > Craig > The ISO contains all the software needed for workstation or a server. *You* determine what the end result of your installation of Centos is by what software you install on the computer. Dave ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] SMART errors Hardware_ECC_Recovered and Raw_Read_Error_Rate
Hi All, Im seeing these errors (below) between 2 and 40 times a day, for the last year (or more if i had the older logs) in /var/log/messages. The values consistently toggle between 4 or so values, drifting up and down but never outside the mean +-2 /dev/hda sits around 21 to 38 degrees (according to smartctl) Does anyone know *how* serious they are? I cant find much on the web other than the theory that any error is bad, so replace the disk. Thanks for your time, MrKiwi. Jun 13 04:45:03 myserver smartd[3047]: Device: /dev/hda, SMART Prefailure Attribute: 1 Raw_Read_Error_Rate changed from 60 to 61 Jun 13 04:45:03 myserver smartd[3047]: Device: /dev/hda, SMART Usage Attribute: 195 Hardware_ECC_Recovered changed from 60 to 61 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] BIND Help
I just installed CentOS5 on my server and I have to get everything working on it. I chose to clean load it upgrading from RHEL3 to CentOS5. I'm having trouble understanding the way bind works now and was wondering if anyone has a bit of time to help me with it. I am starting from scratch and I only have my primary domain and one additional domain I host. Thanks. -- -=/>Thom ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] BIND Help
Thom Paine wrote: I just installed CentOS5 on my server and I have to get everything working on it. I chose to clean load it upgrading from RHEL3 to CentOS5. IMNSHO they really 'altered' BIND setup from 4.x. After much kicking around, I actually reinstalled Centos 5 and started anew. I'm having trouble understanding the way bind works now and was wondering if anyone has a bit of time to help me with it. Do you understand BIND 9.x? Do you want to implement DNS 'views'? Do you need dDNS? I am starting from scratch and I only have my primary domain and one additional domain I host. Are you handling your reverse lookup (arpa.in)? Quick recommendation: INSTALL EVERYTHING for BIND. This includes for a caching server and system-config-bind. Then install Webmin (www.webmin.com) and use Webmin to set yourself up. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Re: is CentOS stable enough ?
Warren Young wrote: Feizhou wrote: If you understand 'automated deployment' to mean just merely clobbering an installation with another Linux distro then I cannot help you. You're right, we are not using the same terms. I understand "automated deployment" to include things like yum. yum upgrade or apt distupgrade? ;) one does not leave out staging the deployment to a staging box/farm You're restricting yourself to a subset of the real world here. Of course. Tom said 'servers'. Of course, that does not necessarily mean a farm of servers but hey, if you have enough of them, you don't want to have to fight fires due to human error. Staging systems do not make sense everywhere. I cannot justify creating a staging system for my tax accountant client, where I installed a file server. There's only the one server. For your idea to work, before doing an OS upgrade, I'd have to have an identical spare machine just sitting around idle for me to test on. Tax accountants are CHEAP. I had a hard time talking the accountant into RAID. A duplicate testing box, too? Please Single point of failure boxes need not apply. In this case, I don't even think you worry about security updates so whether it runs Centos or Fedora is not even an issue unless one of them proves to be unstable. Unless you like to have your accounts available on the Net... ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Pinging Static IPs on Lan
For some reason I can't ping or communicate with two of my machines that have static IP's on my lan. My mythbe and mythfe are both set to have static ip's in the event of some sort of power problem the wife can stillwatch tv. After installing CentOS5, I can't communicate with those two machines. I read through the release notes and the docs on dhcp, but I can't seem to see why no machines will communicate with those two computers. Thanks. -- -=/>Thom ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Re: SSH remote port forward
Tony Mountifield wrote: In article <[EMAIL PROTECTED]>, Ugo Bellavance <[EMAIL PROTECTED]> wrote: Hi, I'm trying to do a remote port forward, and the remote hosts only listens to 127.0.0.1 on the forwarded port. You can't control that from the client end, as it could be a security risk for the remote installation. Makes sense. If the remote host is under your control and is running sshd from OpenSSH, you can add the following directive to /etc/ssh/sshd_config on that system: GatewayPorts yes That will tell the sshd to make forwarded ports listen on 0.0.0.0 instead of on 127.0.0.1 Excellent, thanks for the help it now works ! :). Ugo ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Pinging Static IPs on Lan
Is iptables running? -matt On 6/12/07, Thom Paine <[EMAIL PROTECTED]> wrote: For some reason I can't ping or communicate with two of my machines that have static IP's on my lan. My mythbe and mythfe are both set to have static ip's in the event of some sort of power problem the wife can stillwatch tv. After installing CentOS5, I can't communicate with those two machines. I read through the release notes and the docs on dhcp, but I can't seem to see why no machines will communicate with those two computers. Thanks. -- -=/>Thom ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] lvm
On Wednesday 13 June 2007, Shawn wrote: > Hello, > > I have a physical volume with no volume group. > > # /sbin/pvscan -n > WARNING: only considering physical volumes in no volume group > PV /dev/sdg2 lvm2 [148.95 GB] > Total: 1 [148.95 GB] / in use: 0 [0 ] / in no VG: 1 [148.95 GB] > > Can I just create a volume group -- for example: > # vgcreate my_volume_group /dev/sdg2 Yes, this how you create a _new_ volume group using a _unused_ physical volume. If, as you say below, you have data on this device then this is most likely _not_ what you want. Maybe you should look into vgimport/vgscan/etc. /Peter > and then activate it: > > # vgchange -a y my_volume_group > > I don't wish to reformat it or otherwise lose data stored on the volume > if possible. > > Other suggestions? > > Shawn pgp2N6PiTOsPL.pgp Description: PGP signature ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5 iptables
Around 12:22am on Wednesday, June 13, 2007 (UK time), CentOS List scrawled: Line 35 COMMIT What are the few lines before that? Thanks, I saw the error on my iptables and fixed it up. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] gcc 4.x on centOS 5
i did Google and also searched CentOS web-site and CentOS 5 Release Notes but i did not find what GCC CentOS 5 uses. i need GCC 4.x for my C++ based project work. what GCC version CentOS 5 uses as default ? -- http://arnuld.blogspot.com/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] gcc 4.x on centOS 5
On Wed, 13 Jun 2007, arnuld wrote: > Date: Wed, 13 Jun 2007 11:59:13 +0530 > From: arnuld <[EMAIL PROTECTED]> > Reply-To: CentOS mailing list > To: CentOS mailing list > Subject: [CentOS] gcc 4.x on centOS 5 > > i did Google and also searched CentOS web-site and CentOS 5 Release > Notes but i did not find what GCC CentOS 5 uses. i need GCC 4.x for my > C++ based project work. what GCC version CentOS 5 uses as default ? > Just look at any CentOS mirror file list and you will see W. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] gcc 4.x on centOS 5
> i did Google and also searched CentOS web-site and CentOS 5 Release > Notes but i did not find what GCC CentOS 5 uses. i need GCC 4.x for my > C++ based project work. what GCC version CentOS 5 uses as default ? Distrowatch is a good site to find a distribution main component's versions: http://distrowatch.com/table.php?distribution=centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos