[CentOS] yum-cron email notification doesn't appear

[1th]

Hi.

I'm installed yum-cron and set:

# by default MAILTO is unset, so crond mails the output by itself
# example:  MAILTO=root
MAILTO="r...@domain.org.ua"

I see in log that yum-cron done it's job:

# grep "yum" /var/log/cron
Aug 11 03:08:02 venti run-parts(/etc/cron.daily)[4516]: starting 
0yum.cron
Aug 11 03:49:30 venti run-parts(/etc/cron.daily)[4761]: finished 
0yum.cron


And I see that packages really updated, but - I don't see email 
notifications in my mail box... I got notification from spamd, for 
example, but nothing from yum-cron.

How can i find it in maillog? Some text from 'Subject'?

# grep "yum" /var/log/maillog

Doesn't give result.

Or - some other way to check?

Thanks for tips.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[Alexander Farber]

Hello fellow CentOS-users,

on the net there are lots of Spamassassin related HOWTOs - describing how
to create a shell script for Postfix and how to install Spamassassin and
start its spamd daemon - step by step. Additionally antivirus setups are
described...

But I have a strong feeling, that this is unneeded on CentOS 6 - because
there are already preconfigured stock packages for postfix and spamassassin.

So I have installed the both packages and I have configured postfix (it
works fine).

Also I have started the spamd (and can see it in "ps uawx") with:

# chkconfig spamassassin on
# service spamassassin start

So I'm just missing the connection between postfix and spamd.

Could anybody using these 2 programs on CentOS 6 please share it with me?

Should I add something (involving spamc?) into /etc/postfix/master.cf?

Thank you
Alex

P.S. Below is my "postconf -n". I accept mails (here I'd like to filter
spam) for 6 virtual domains and then forward them to different GMail
accounts:

alias_database = hash:/etc/aliases

alias_maps = hash:/etc/aliases

command_directory = /usr/sbin

config_directory = /etc/postfix

daemon_directory = /usr/libexec/postfix

data_directory = /var/lib/postfix

debug_peer_level = 2

header_checks = pcre:/etc/postfix/header_checks

html_directory = no

inet_interfaces = all

inet_protocols = ipv4

mail_owner = postfix

mailq_path = /usr/bin/mailq.postfix

manpage_directory = /usr/share/man

mydestination = $myhostname, localhost.$mydomain, localhost

myhostname = www.afarber.de

newaliases_path = /usr/bin/newaliases.postfix

queue_directory = /var/spool/postfix

readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES

sample_directory = /usr/share/doc/postfix-2.6.6/samples

sendmail_path = /usr/sbin/sendmail.postfix

setgid_group = postdrop

smtp_destination_concurrency_limit = 2

smtp_destination_rate_delay = 40s

smtp_generic_maps = hash:/etc/postfix/generic

unknown_local_recipient_reject_code = 550

virtual_alias_domains = videoskat.de balkan-preferans.de simplex.ru
larissa-farber.de bukvy.de slova.de

virtual_alias_maps = hash:/etc/postfix/virtual
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[Adam King]

whats your database user in spamd.conf?

Adam King 
IT Systems Administrator 
Skipton Girls High School 
01756 707600 
www.sghs.org.uk 

- Original Message -
From: "Alexander Farber" 
To: "CentOS mailing list" 
Sent: Monday, August 11, 2014 12:38:09 PM
Subject: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest
guide

Hello fellow CentOS-users,

on the net there are lots of Spamassassin related HOWTOs - describing how
to create a shell script for Postfix and how to install Spamassassin and
start its spamd daemon - step by step. Additionally antivirus setups are
described...

But I have a strong feeling, that this is unneeded on CentOS 6 - because
there are already preconfigured stock packages for postfix and spamassassin.

So I have installed the both packages and I have configured postfix (it
works fine).

Also I have started the spamd (and can see it in "ps uawx") with:

# chkconfig spamassassin on
# service spamassassin start

So I'm just missing the connection between postfix and spamd.

Could anybody using these 2 programs on CentOS 6 please share it with me?

Should I add something (involving spamc?) into /etc/postfix/master.cf?

Thank you
Alex

P.S. Below is my "postconf -n". I accept mails (here I'd like to filter
spam) for 6 virtual domains and then forward them to different GMail
accounts:

alias_database = hash:/etc/aliases

alias_maps = hash:/etc/aliases

command_directory = /usr/sbin

config_directory = /etc/postfix

daemon_directory = /usr/libexec/postfix

data_directory = /var/lib/postfix

debug_peer_level = 2

header_checks = pcre:/etc/postfix/header_checks

html_directory = no

inet_interfaces = all

inet_protocols = ipv4

mail_owner = postfix

mailq_path = /usr/bin/mailq.postfix

manpage_directory = /usr/share/man

mydestination = $myhostname, localhost.$mydomain, localhost

myhostname = www.afarber.de

newaliases_path = /usr/bin/newaliases.postfix

queue_directory = /var/spool/postfix

readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES

sample_directory = /usr/share/doc/postfix-2.6.6/samples

sendmail_path = /usr/sbin/sendmail.postfix

setgid_group = postdrop

smtp_destination_concurrency_limit = 2

smtp_destination_rate_delay = 40s

smtp_generic_maps = hash:/etc/postfix/generic

unknown_local_recipient_reject_code = 550

virtual_alias_domains = videoskat.de balkan-preferans.de simplex.ru
larissa-farber.de bukvy.de slova.de

virtual_alias_maps = hash:/etc/postfix/virtual
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[Alexander Farber]

Hi Adam,

there is no "spamd.conf" file in the spamassassin package for CentOS 6:

 # rpm -ql spamassassin|grep -i spamd.conf
 #

That's the point of my question: I am looking for advice for how to use the
"postfix" and "spamassassin" packages - i.e. not installing both programs
manually "from scratch".

(Unless I have misunderstood your question, then I am sorry).

Regards
Alex


On Mon, Aug 11, 2014 at 1:04 PM, Adam King  wrote:

> whats your database user in spamd.conf?
>
>
> - Original Message -
> From: "Alexander Farber" 
>
> So I have installed the both packages and I have configured postfix (it
> works fine).
>
> Also I have started the spamd (and can see it in "ps uawx") with:
>
> # chkconfig spamassassin on
> # service spamassassin start
>
> So I'm just missing the connection between postfix and spamd.
>
> Could anybody using these 2 programs on CentOS 6 please share it with me?
>
> Should I add something (involving spamc?) into /etc/postfix/master.cf?
> .
>
> P.S. Below is my "postconf -n". I accept mails (here I'd like to filter
> spam) for 6 virtual domains and then forward them to different GMail
> accounts:
>
> alias_database = hash:/etc/aliases
>
> alias_maps = hash:/etc/aliases
>
> command_directory = /usr/sbin
>
> config_directory = /etc/postfix
>
> daemon_directory = /usr/libexec/postfix
>
> data_directory = /var/lib/postfix
>
> debug_peer_level = 2
>
> header_checks = pcre:/etc/postfix/header_checks
>
> html_directory = no
>
> inet_interfaces = all
>
> inet_protocols = ipv4
>
> mail_owner = postfix
>
> mailq_path = /usr/bin/mailq.postfix
>
> manpage_directory = /usr/share/man
>
> mydestination = $myhostname, localhost.$mydomain, localhost
>
> myhostname = www.afarber.de
>
> newaliases_path = /usr/bin/newaliases.postfix
>
> queue_directory = /var/spool/postfix
>
> readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
>
> sample_directory = /usr/share/doc/postfix-2.6.6/samples
>
> sendmail_path = /usr/sbin/sendmail.postfix
>
> setgid_group = postdrop
>
> smtp_destination_concurrency_limit = 2
>
> smtp_destination_rate_delay = 40s
>
> smtp_generic_maps = hash:/etc/postfix/generic
>
> unknown_local_recipient_reject_code = 550
>
> virtual_alias_domains = videoskat.de balkan-preferans.de simplex.ru
> larissa-farber.de bukvy.de slova.de
>
> virtual_alias_maps = hash:/etc/postfix/virtual
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[Adam King]

We have our setup documented. I'll pull out the stuff for our environment and 
send over something more general. It may take a few hours before I get time 
though.


Adam King 
IT Systems Administrator 
Skipton Girls High School 
01756 707600 
www.sghs.org.uk 

- Original Message -
From: "Alexander Farber" 
To: "CentOS mailing list" 
Sent: Monday, August 11, 2014 12:47:21 PM
Subject: Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a 
shortest guide

Hi Adam,

there is no "spamd.conf" file in the spamassassin package for CentOS 6:

 # rpm -ql spamassassin|grep -i spamd.conf
 #

That's the point of my question: I am looking for advice for how to use the
"postfix" and "spamassassin" packages - i.e. not installing both programs
manually "from scratch".

(Unless I have misunderstood your question, then I am sorry).

Regards
Alex


On Mon, Aug 11, 2014 at 1:04 PM, Adam King  wrote:

> whats your database user in spamd.conf?
>
>
> - Original Message -
> From: "Alexander Farber" 
>
> So I have installed the both packages and I have configured postfix (it
> works fine).
>
> Also I have started the spamd (and can see it in "ps uawx") with:
>
> # chkconfig spamassassin on
> # service spamassassin start
>
> So I'm just missing the connection between postfix and spamd.
>
> Could anybody using these 2 programs on CentOS 6 please share it with me?
>
> Should I add something (involving spamc?) into /etc/postfix/master.cf?
> .
>
> P.S. Below is my "postconf -n". I accept mails (here I'd like to filter
> spam) for 6 virtual domains and then forward them to different GMail
> accounts:
>
> alias_database = hash:/etc/aliases
>
> alias_maps = hash:/etc/aliases
>
> command_directory = /usr/sbin
>
> config_directory = /etc/postfix
>
> daemon_directory = /usr/libexec/postfix
>
> data_directory = /var/lib/postfix
>
> debug_peer_level = 2
>
> header_checks = pcre:/etc/postfix/header_checks
>
> html_directory = no
>
> inet_interfaces = all
>
> inet_protocols = ipv4
>
> mail_owner = postfix
>
> mailq_path = /usr/bin/mailq.postfix
>
> manpage_directory = /usr/share/man
>
> mydestination = $myhostname, localhost.$mydomain, localhost
>
> myhostname = www.afarber.de
>
> newaliases_path = /usr/bin/newaliases.postfix
>
> queue_directory = /var/spool/postfix
>
> readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
>
> sample_directory = /usr/share/doc/postfix-2.6.6/samples
>
> sendmail_path = /usr/sbin/sendmail.postfix
>
> setgid_group = postdrop
>
> smtp_destination_concurrency_limit = 2
>
> smtp_destination_rate_delay = 40s
>
> smtp_generic_maps = hash:/etc/postfix/generic
>
> unknown_local_recipient_reject_code = 550
>
> virtual_alias_domains = videoskat.de balkan-preferans.de simplex.ru
> larissa-farber.de bukvy.de slova.de
>
> virtual_alias_maps = hash:/etc/postfix/virtual
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[David Beveridge]

Ha what a co-incidence, just did this an hour ago
I roughly followed this
http://www.rosehosting.com/blog/how-to-install-and-integrate-spamassassin-with-postfix-on-a-centos-6-vps/

my master.cf looks like this

spamassassin unix - n   n   -   -   pipe
  user=nobody argv=/usr/bin/spamc -f -e
  /usr/sbin/sendmail -oi -f ${sender} ${recipient}

I also have these

policy_spf  unix  -   n   n   -   9   spawn
  user=nobody argv=/usr/bin/perl /etc/postfix/policy_spf_d.pl
policy_grey  unix  -   n   n   -   9   spawn
  user=nobody argv=/usr/bin/perl /etc/postfix/policy_greylist_d.pl


In my case I only want to filter through spamassassin is spf doesn't pass
so I hacked the policy_spf_d

#  else   { return "DUNNO"; }
  else   { return "FILTER spamassassin:scanner"; }


Just watch out, if you filter all the mail using
content_filter=spamassassin
you will create a mail loop unless you use a content filter bypass on mail
coming back from spamassassin.

dave.



On Mon, Aug 11, 2014 at 9:38 PM, Alexander Farber <
alexander.far...@gmail.com> wrote:

> Hello fellow CentOS-users,
>
> on the net there are lots of Spamassassin related HOWTOs - describing how
> to create a shell script for Postfix and how to install Spamassassin and
> start its spamd daemon - step by step. Additionally antivirus setups are
> described...
>
> But I have a strong feeling, that this is unneeded on CentOS 6 - because
> there are already preconfigured stock packages for postfix and
> spamassassin.
>
> So I have installed the both packages and I have configured postfix (it
> works fine).
>
> Also I have started the spamd (and can see it in "ps uawx") with:
>
> # chkconfig spamassassin on
> # service spamassassin start
>
> So I'm just missing the connection between postfix and spamd.
>
> Could anybody using these 2 programs on CentOS 6 please share it with me?
>
> Should I add something (involving spamc?) into /etc/postfix/master.cf?
>
> Thank you
> Alex
>
> P.S. Below is my "postconf -n". I accept mails (here I'd like to filter
> spam) for 6 virtual domains and then forward them to different GMail
> accounts:
>
> alias_database = hash:/etc/aliases
>
> alias_maps = hash:/etc/aliases
>
> command_directory = /usr/sbin
>
> config_directory = /etc/postfix
>
> daemon_directory = /usr/libexec/postfix
>
> data_directory = /var/lib/postfix
>
> debug_peer_level = 2
>
> header_checks = pcre:/etc/postfix/header_checks
>
> html_directory = no
>
> inet_interfaces = all
>
> inet_protocols = ipv4
>
> mail_owner = postfix
>
> mailq_path = /usr/bin/mailq.postfix
>
> manpage_directory = /usr/share/man
>
> mydestination = $myhostname, localhost.$mydomain, localhost
>
> myhostname = www.afarber.de
>
> newaliases_path = /usr/bin/newaliases.postfix
>
> queue_directory = /var/spool/postfix
>
> readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
>
> sample_directory = /usr/share/doc/postfix-2.6.6/samples
>
> sendmail_path = /usr/sbin/sendmail.postfix
>
> setgid_group = postdrop
>
> smtp_destination_concurrency_limit = 2
>
> smtp_destination_rate_delay = 40s
>
> smtp_generic_maps = hash:/etc/postfix/generic
>
> unknown_local_recipient_reject_code = 550
>
> virtual_alias_domains = videoskat.de balkan-preferans.de simplex.ru
> larissa-farber.de bukvy.de slova.de
>
> virtual_alias_maps = hash:/etc/postfix/virtual
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] yum-cron email notification doesn't appear

[SilverTip257]

On Mon, Aug 11, 2014 at 7:30 AM, <1...@setevoy.kiev.ua> wrote:

> Hi.
>
> I'm installed yum-cron and set:
>
> # by default MAILTO is unset, so crond mails the output by itself
> # example:  MAILTO=root
> MAILTO="r...@domain.org.ua"
>
> I see in log that yum-cron done it's job:
>
> # grep "yum" /var/log/cron
> Aug 11 03:08:02 venti run-parts(/etc/cron.daily)[4516]: starting
> 0yum.cron
> Aug 11 03:49:30 venti run-parts(/etc/cron.daily)[4761]: finished
> 0yum.cron
>
>
> And I see that packages really updated, but - I don't see email
> notifications in my mail box... I got notification from spamd, for
> example, but nothing from yum-cron.
>

Anything run by cron.daily scripts result in _one_ email (unless of course
the script being run by cron.daily sends mail itself).

If you want a separate message, set up a cronjob separate from cron.daily
in cron.d


>
> How can i find it in maillog? Some text from 'Subject'?


> # grep "yum" /var/log/maillog
>

grep for "run-parts /etc/cron.daily"


>
> Doesn't give result.
>
> Or - some other way to check?
>
> Thanks for tips.
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
---~~.~~---
Mike
//  SilverTip257  //
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 6 : ClamAV out-of-date ???

[Always Learning]

On Sun, 2014-08-10 at 22:45 -0600, Jeremy Hoel wrote:

> could it be the mirror that the out dated one is hitting isn't to to
> date/in synch yet?

But on the server, the software states the latest version is installed.


> >  : freshclam -V
> > ClamAV 0.98.4/19275/Sun Aug 10 17:26:35 2014
> >
> >  : clamd -V
> > ClamAV 0.98.4/19275/Sun Aug 10 17:26:35 2014
> >
> >  : rpm -qa clam\*
> > clamd-0.98.4-1.el6.rf.x86_64
> > clamav-db-0.98.4-1.el6.rf.x86_64
> > clamav-0.98.4-1.el6.rf.x86_64




-- 
Regards,

Paul.
England, EU.

   Centos, Exim, Apache, Libre Office.
   Linux is the future. Micro$oft is the past.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 7 - iptables service failed to start

[Adam King]

Try systemctl stop firewalld, I had to disable that too

Adam King 
IT Systems Administrator 
Skipton Girls High School 
01756 707600 
www.sghs.org.uk 

- Original Message -
From: "Neil Aggarwal" 
To: centos@centos.org
Sent: Sunday, August 10, 2014 4:21:33 AM
Subject: [CentOS] Centos 7 - iptables service failed to start

Hello all:

I did a fresh install of CentOS 7 on a new machine.

I wrote /usr/local/bin/firewall.stop to remove all the firewall rules.
It contains this code:
# Flush the rules
/usr/sbin/iptables -F

# Set the default policies to accept
/usr/sbin/iptables -P INPUT ACCEPT
/usr/sbin/iptables -P OUTPUT ACCEPT
/usr/sbin/iptables -P FORWARD ACCEPT

I wrote /usr/local/bin/firewall.start to set the firewall rules.
It contains this code:
# IP definitions
ETH0_IP=a.b.c.d

# Load the FTP conntrak module
/usr/sbin/modprobe nf_conntrack_ftp 

# Set the default policies to drop all packets
/usr/sbin/iptables -P INPUT DROP
/usr/sbin/iptables -P OUTPUT DROP
/usr/sbin/iptables -P FORWARD DROP

# Flush any existing rules
/usr/sbin/iptables -F

# Allow loopback traffic
/usr/sbin/iptables -A INPUT -i lo -j ACCEPT
/usr/sbin/iptables -A OUTPUT -o lo -j ACCEPT

# Allow icmp protocol packets
/usr/sbin/iptables -A INPUT -i eth0 -d $ETH0_IP -p icmp -j ACCEPT
/usr/sbin/iptables -A OUTPUT -o eth0 -s $ETH0_IP -p icmp -j ACCEPT

[ Additional allow rules here ]

If I run the firewall.start script manually, it sets the iptables rules
correctly.
If I run the firewall.stop script manually, it removes the iptables rules
correctly.

The problem comes in when I am trying to execute this from systemd.

I wrote /etc/systemd/system/firewall.service with this content:

[Unit]
Description=Iptables firewall
Before=network.target
Wants=network.target

[Service]
Type=oneshot
ExecStart=/usr/local/bin/firewall.start
ExecStop=/usr/local/bin/firewall.stop
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target

Now, when I run systemctl start firewall.service, I get this output:
Job for firewall.service failed. See 'systemctl status firewall.service' and
'journalctl -xn' for details.

If I do systemctl status firewall.status, it gives me:
firewall.status.service
   Loaded: not-found (Reason: No such file or directory)
   Active: inactive (dead)

journalctl -xn gives me this output:
Aug 10 06:09:38 jamm23.jammconsulting.com systemd[1]: Starting Iptables
firewall...
-- Subject: Unit firewall.service has begun with start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit firewall.service has begun starting up.
Aug 10 06:09:38 jamm23.jammconsulting.com systemd[2268]: Failed at step EXEC
spawning /usr/local/bin/firewall.start: Exec format error
-- Subject: Process /usr/local/bin/firewall.start could not be executed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- The process /usr/local/bin/firewall.start could not be executed and
failed.
--
-- The error number returned while executing this process is 8.
Aug 10 06:09:38 jamm23.jammconsulting.com systemd[1]: firewall.service: main
process exited, code=exited, status=203/EXEC
Aug 10 06:09:38 jamm23.jammconsulting.com systemd[1]: Failed to start
Iptables firewall.
-- Subject: Unit firewall.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit firewall.service has failed.
--
-- The result is failed.
Aug 10 06:09:38 jamm23.jammconsulting.com systemd[1]: Unit firewall.service
entered failed state.

Any ideas what is happening here?

Thanks,
  Neil

--
Neil Aggarwal, (972) 834-1565
We lend money to investors to buy or refinance single family rent houses.
No origination fees, quick approval, no credit check.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 6 : ClamAV out-of-date ???

[Brian Miller]

On Mon, 2014-08-11 at 03:28 +0100, Always Learning wrote:
> On one Centos 6.5 server, but not on other C 6.5 servers, Logwatch daily
> tells me:-
> 
>  Last Status:
> WARNING: Your ClamAV installation is OUTDATED!
> WARNING: Local version: 0.98.3 Recommended version: 0.98.4
> 
> 
> 
>  : freshclam -V
> ClamAV 0.98.4/19275/Sun Aug 10 17:26:35 2014
> 
>  : clamd -V
> ClamAV 0.98.4/19275/Sun Aug 10 17:26:35 2014
> 
>  : rpm -qa clam\*
> clamd-0.98.4-1.el6.rf.x86_64
> clamav-db-0.98.4-1.el6.rf.x86_64
> clamav-0.98.4-1.el6.rf.x86_64
> 
> 
> I am puzzled and wonder how I can resolve this minor irritation.

Could it be that the package installed but the running daemon did not
get restarted?  I don't know if freshclam checks the on-disk image or
queries the running binary during the version check.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 6 : ClamAV out-of-date ???

[Always Learning]

On Mon, 2014-08-11 at 11:37 +, Richard wrote:

> > From: Always Learning 

> >  Last Status:
> > WARNING: Your ClamAV installation is OUTDATED!
> > WARNING: Local version: 0.98.3 Recommended version: 0.98.4
> > 
> >  : freshclam -V
> > ClamAV 0.98.4/19275/Sun Aug 10 17:26:35 2014
> > 
> >  : clamd -V
> > ClamAV 0.98.4/19275/Sun Aug 10 17:26:35 2014
> > 
> >  : rpm -qa clam\*
> > clamd-0.98.4-1.el6.rf.x86_64
> > clamav-db-0.98.4-1.el6.rf.x86_64
> > clamav-0.98.4-1.el6.rf.x86_64


> Make certain that your freshclam process has been restarted since
> being updated. In some environments freshclam runs from a cron.daily
> script, but it can also be set up to run as a "daemon" (I start mine
> with an @reboot crontab entry, but it is sometimes in rc.local). In
> the "daemon" case you have to explicitly stop and restart it as the
> rpm update process doesn't handle that.

Thank you. Your advice solved the riddle.

 : ps -A|grep fresh

showed Freshclam was running. Killed it. Stopped and restarted clamd.

 : logwatch --range today

shows the problem has been resolved.  Freshclam updates are run by CRON.

Many thanks Richard.



-- 
Regards,

Paul.
England, EU.

   Centos, Exim, Apache, Libre Office.
   Linux is the future. Micro$oft is the past.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Centos 6 : ClamAV out-of-date ???

[Always Learning]

On Mon, 2014-08-11 at 08:28 -0400, Brian Miller wrote:

> >  Last Status:
> > WARNING: Your ClamAV installation is OUTDATED!
> > WARNING: Local version: 0.98.3 Recommended version: 0.98.4

> Could it be that the package installed but the running daemon did not
> get restarted?  I don't know if freshclam checks the on-disk image or
> queries the running binary during the version check.

The package was installed, and re-installed. Freshclam was running as a
daemon. I killed it (because I did not know how to stop it nicely),
restarted clamd, did a Logwatch for today and saw the error message has
disappeared.

Freshclam is run by CRON.

Thanks.


Paul.
England, EU.

   Centos, Exim, Apache, Libre Office.
   Linux is the future. Micro$oft is the past.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Johnny Hughes]

On 08/09/2014 09:45 AM, Valeri Galtsev wrote:
> 
> On Sat, August 9, 2014 9:15 am, Neil Aggarwal wrote:
>> Tom:
>>
>>> I thought we were supposed to be moving forward
>>
>> That is my thought exactly.  This is a step backwards.
>>
>> I guess I will disable firewalld and go back to iptables.
> 
> Systemd, firewalld... Linux from what formerly was "UNIX-like" becomes "MS
> Windows-like". This is what you will hear from everybody fleeing Linux (I
> for one started gradually moving servers to FreeBSD a while back).

You and 4 other guys are moving things from Linux to FreeBSD.

The rest of the world is moving things from UNIX and Windows to Linux.

CentOS-7 rebuild RHEL sources and most all of the "important" Enterprise
Linux things are moving to RHEL.

RHEL runs the stock exchanges, the banks, etc.

Free BSD is fine and people can use it if they like ... but if you want
real Enterprise grade software, it needs to be RHEL based, that is just
the way it is.

Keep in mind that EL 7.0 is a 'dot zero release' and some of the
features need work.  It works for the majority of use cases, but some
features will need to be enhanced, and Red Hat will enhance it.  When
they do, we will build the source code and it will be in CentOS.




signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] when will docker 1.1.2 for rhel7 be released?

[彭勇]

there are some bugs in docker-0.11.1-22.el7, when will latest version
docker be relased for el7?


-- 
Peng Yong
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Tom Bishop]

> You and 4 other guys are moving things from Linux to FreeBSD.
>
> The rest of the world is moving things from UNIX and Windows to Linux.
>
> CentOS-7 rebuild RHEL sources and most all of the "important" Enterprise
> Linux things are moving to RHEL.
>
> RHEL runs the stock exchanges, the banks, etc.
>
> Free BSD is fine and people can use it if they like ... but if you want
> real Enterprise grade software, it needs to be RHEL based, that is just
> the way it is.
>
> Keep in mind that EL 7.0 is a 'dot zero release' and some of the
> features need work.  It works for the majority of use cases, but some
> features will need to be enhanced, and Red Hat will enhance it.  When
> they do, we will build the source code and it will be in CentOS.
>
>

I hear you Johnny, I'm a big RH fan, but there is several things that
they have shifted to in RHEL 7 that just chafes a little.

I am dual hat guy, network and IS and when iptables with firewalld, at
a minimum I would like the ability to be able to accomplish the same
things I accomplished with iptables. I read about firewalld the pros
and cons and I understand the shift and reason.

But I do have heartburn when they call something a "firewall" and you
cannot drop all the packets. It's not like they didn't know about it
since I read about it in fedora and it's not clear if it will be
addressed.  There are lots of use cases where I want to control all of
the packets coming and going from a box, I see this becoming more so
moving forward.

Hopefully this will be addressed in a future release, trying to figure
out where I can go to now and keep up to date with the latest
firewalld info, just to stay clued in.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[Alexander Farber]

Hello again, here is what I'm trying at my CentOS 6.5:

1) Installed postfix and spamassassin packages
2) Configured postfix - it works well (I omit details here)
3) Added "-x" to the SPAMDOPTIONS in /etc/sysconfig/spamassassin
4) Added the following 2 lines to the /etc/postfix/master.cf:

smtp inet n - n - - smtpd -o content_filter=spamassassin
spamassassin unix - n n - - pipe user=nobody argv=/usr/bin/spamc -f -e
/usr/sbin/sendmail -oi -f ${sender} ${recipient}

Unfortunately, when I send the test SPAM mail with the subject
XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

- it still comes through! (And the subject isn't rewritten).

I wonder, what have I missed? My /var/log/maillog is below.

I've also asked my question at
http://serverfault.com/questions/619537/use-postfix-and-spamassassin-packages-on-centos-6-to-reject-spam-without-custo

Regards
Alex

postfix/postfix-script[2546]: starting the Postfix mail system
postfix/master[2547]: daemon started -- version 2.6.6, configuration
/etc/postfix
postfix/qmgr[2550]: D5B19807033: from=, size=1843,
nrcpt=1 (queue active)
postfix/qmgr[2550]: 831CA809733: from=, size=41369,
nrcpt=1 (queue active)
postfix/qmgr[2550]: 42B7A80A312: from=,
size=4399, nrcpt=1 (queue active)
postfix/qmgr[2550]: AED94809D29: from=,
size=28035, nrcpt=1 (queue active)
postfix/qmgr[2550]: E69AA809D3C: from=<>, size=3487, nrcpt=1 (queue active)
postfix/qmgr[2550]: 2BDE980A61B: from=, size=4073,
nrcpt=1 (queue active)
postfix/qmgr[2550]: 0D37280A51F: from=, size=7888, nrcpt=1
(queue active)
postfix/smtp[2552]: D5B19807033: host gmail-smtp-in.l.google.com[74.125.136.27]
said: 421-4.7.0 [144.76.184.154  15] Our system has detected an unusual
rate of 421-4.7.0 unsolicited mail originating from your IP address. To
protect our 421-4.7.0 users from spam, mail sent from your IP address has
been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0
http://www.google.com/mail/help/bulk_mail.html to review our Bulk 421 4.7.0
Email Senders Guidelines. l16si23407549wjr.0 - gsmtp (in reply to end of
DATA command)
postfix/smtp[2552]: D5B19807033: to=, orig_to=<
simp...@simplex.ru>, relay=alt1.gmail-smtp-in.l.google.com[74.125.25.27]:25,
delay=6325, delays=6323/0/1.2/0.61, dsn=4.7.0, status=deferred (host
alt1.gmail-smtp-in.l.google.com[74.125.25.27] said: 421-4.7.0
[144.76.184.154  15] Our system has detected an unusual rate of
421-4.7.0 unsolicited mail originating from your IP address. To protect our
421-4.7.0 users from spam, mail sent from your IP address has been
temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0
http://www.google.com/mail/help/bulk_mail.html to review our Bulk 421 4.7.0
Email Senders Guidelines. f7si4794087pdm.22 - gsmtp (in reply to end of
DATA command))
postfix/smtpd[2557]: connect from mail-ie0-f180.google.com[209.85.223.180]
postfix/smtpd[2557]: B3FFF809367: client=mail-ie0-f180.google.com
[209.85.223.180]
postfix/cleanup[2561]: B3FFF809367:
message-id=
postfix/qmgr[2550]: B3FFF809367: from=, size=1767,
nrcpt=1 (queue active)
spamd[2034]: spamd: connection from localhost [127.0.0.1] at port 42928
spamd[2034]: spamd: setuid to nobody succeeded
spamd[2034]: spamd: processing message
 for
nobody:99
postfix/smtpd[2557]: disconnect from mail-ie0-f180.google.com
[209.85.223.180]
spamd[2034]: spamd: identified spam (999.9/5.0) for nobody:99 in 0.2
seconds, 1730 bytes.
spamd[2034]: spamd: result: Y 999 -
DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,GTUBE,HTML_MESSAGE,T_TO_NO_BRKTS_FREEMAIL
scantime=0.2,size=1730,user=nobody,uid=99,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=42928,mid=,autolearn=no
postfix/pickup[2549]: 3124F80A3DA: uid=99 from=
postfix/cleanup[2561]: 3124F80A3DA:
message-id=
postfix/pipe[2562]: B3FFF809367: to=, orig_to=<
webmas...@bukvy.de>, relay=spamassassin, delay=0.59,
delays=0.37/0.01/0/0.22, dsn=2.0.0, status=sent (delivered via spamassassin
service)
postfix/qmgr[2550]: B3FFF809367: removed
spamd[2032]: prefork: child states: II
postfix/qmgr[2550]: 3124F80A3DA: from=, size=2843,
nrcpt=1 (queue active)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Valeri Galtsev]

On Mon, August 11, 2014 8:28 am, Johnny Hughes wrote:
> On 08/09/2014 09:45 AM, Valeri Galtsev wrote:
>> On Sat, August 9, 2014 9:15 am, Neil Aggarwal wrote:
>>> Tom:
 I thought we were supposed to be moving forward
>>> That is my thought exactly.  This is a step backwards.
>>> I guess I will disable firewalld and go back to iptables.
>> Systemd, firewalld... Linux from what formerly was "UNIX-like" becomes "MS
>> Windows-like". This is what you will hear from everybody fleeing Linux (I
>> for one started gradually moving servers to FreeBSD a while back).
>
> You and 4 other guys are moving things from Linux to FreeBSD.

You only spotted 4 _last_ guys running away to UNIX. The rest fled quite a
while ago. Some 7 years ago the guy looking for new system to move his
servers from Linux to called Linux "Lindoze". Don't explode on me, I held
myself for several posts and didn't repeat that. But he was so much
cleverer than I am: already then he realized Linux is becoming "MS
Windows-like" system.

Again, I have to repeat: I was happy with Linux for over decade and a
half. However, the changes are such that at least my server are moving
(some of them have moved already) away from Linux.

>
> The rest of the world is moving things from UNIX and Windows to Linux.

It takes quite a self confidence to say "the whole world is doing..." and
then describe one's own opinion. Well, part of the World is doing good
thing: the ones who move away from Windows. Moving from UNIX... I better
hold my opinion about this.

>
> CentOS-7 rebuild RHEL sources and most all of the "important" Enterprise
Linux things are moving to RHEL.
>
> RHEL runs the stock exchanges, the banks, etc.

Which of the banks and stock exchanges are you working for? Never mind.
You may be quite right as some on them which for long time used M$, are
likely moving away, and Linux is definitely much better choice that M$,
and easier step than from M$ to, say, FreeBSD...

>
> Free BSD is fine and people can use it if they like ... but if you want
real Enterprise grade software, it needs to be RHEL based, that is just
the way it is.

This may be about the definition of what one calls "Enterprise" system.

1. The system that runs securely for multiple Months without need for
reboot, without kernel Oopses... Even if you need some effort to install
and configure what you need, and have be somewhat careful in choice of
hardware, but then you get ultimately reliable box. I may be off canonical
definition, but this would be my choice of servers I run for the
Departments I support.

2. The system that is nice replacement of M$ system, easy to install,
which runs millions of names of great software - without need to put much
effort in building or God forbid porting to your system. And even though I
do not call this "Enterprise" and do not prefer this for servers, I do
prefer this system for workstations for my users. That is why I'm still on
this mail list. Still maintaining public CentOS Linux and Ubuntu mirrors
(and will add Debian mirror as another sysadmin who was maintaining Debian
mirror left our University). So, this is why you still can hear me as one
of the 4 fleeing [servers] from Linux.

>
> Keep in mind that EL 7.0 is a 'dot zero release' and some of the
features need work.  It works for the majority of use cases, but some
features will need to be enhanced, and Red Hat will enhance it.  When
they do, we will build the source code and it will be in CentOS.

And it looks like finally I start realizing that if I take what you said
almost literally, you may be right. What I mean is: I'm sysadmin working
for a couple of hundreds of scientists. I chose UNIX for servers. One
person. My users - scientists - would chose Linux for their goals (they
mostly choose MacOS actually for their laptops...). 200 people. (They fled
M$ over 10 years ago...) In this statistics 200:1 you are right. Right?

In any case the "Enterprise" definition may be different depending on what
you do: run the server for 200+ users or the server for 3 users (yourself,
you spouse and a good friend next door). Sorry, I used hyperbole here, do
not take it literally ;-)

Valeri

>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247





___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[Alexander Dalloz]

Am 2014-08-11 13:38, schrieb Alexander Farber:
> Hello fellow CentOS-users,
> 
> on the net there are lots of Spamassassin related HOWTOs - describing 
> how
> to create a shell script for Postfix and how to install Spamassassin 
> and
> start its spamd daemon - step by step. Additionally antivirus setups 
> are
> described...
> 
> But I have a strong feeling, that this is unneeded on CentOS 6 - 
> because
> there are already preconfigured stock packages for postfix and 
> spamassassin.
> 
> So I have installed the both packages and I have configured postfix (it
> works fine).
> 
> Also I have started the spamd (and can see it in "ps uawx") with:
> 
> # chkconfig spamassassin on
> # service spamassassin start
> 
> So I'm just missing the connection between postfix and spamd.
> 
> Could anybody using these 2 programs on CentOS 6 please share it with 
> me?

[ ... ]

Do yourself a favour and use a milter instead of piping each single mail 
through spamassassin.

http://pkgs.org/centos-6/epel-x86_64/spamass-milter-0.3.2-3.el6.x86_64.rpm.html

Then add something like

smtpd_milters = unix:/var/run/spamass-milter/postfix/sock 
inet:127.0.0.1:8891
non_smtpd_milters = $smtpd_milters
milter_default_action = accept

to your Postfix' main.cf and configure the milter flags in 
/etc/sysconfig/spamass-milter.

> Thank you
> Alex

[ ... ]

Alexander

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[Adam King]

Can you explain why you'd use milter over spamassassin? Genuinely interested as 
we could certainly get better spam filtering... 

Adam King 
IT Systems Administrator 
Skipton Girls High School 
01756 707600 
www.sghs.org.uk 

- Original Message -
From: "Alexander Dalloz" 
To: "CentOS mailing list" 
Sent: Monday, 11 August, 2014 5:01:16 PM
Subject: Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a 
shortest guide

Am 2014-08-11 13:38, schrieb Alexander Farber:
> Hello fellow CentOS-users,
> 
> on the net there are lots of Spamassassin related HOWTOs - describing 
> how
> to create a shell script for Postfix and how to install Spamassassin 
> and
> start its spamd daemon - step by step. Additionally antivirus setups 
> are
> described...
> 
> But I have a strong feeling, that this is unneeded on CentOS 6 - 
> because
> there are already preconfigured stock packages for postfix and 
> spamassassin.
> 
> So I have installed the both packages and I have configured postfix (it
> works fine).
> 
> Also I have started the spamd (and can see it in "ps uawx") with:
> 
> # chkconfig spamassassin on
> # service spamassassin start
> 
> So I'm just missing the connection between postfix and spamd.
> 
> Could anybody using these 2 programs on CentOS 6 please share it with 
> me?

[ ... ]

Do yourself a favour and use a milter instead of piping each single mail 
through spamassassin.

http://pkgs.org/centos-6/epel-x86_64/spamass-milter-0.3.2-3.el6.x86_64.rpm.html

Then add something like

smtpd_milters = unix:/var/run/spamass-milter/postfix/sock 
inet:127.0.0.1:8891
non_smtpd_milters = $smtpd_milters
milter_default_action = accept

to your Postfix' main.cf and configure the milter flags in 
/etc/sysconfig/spamass-milter.

> Thank you
> Alex

[ ... ]

Alexander

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] when will docker 1.1.2 for rhel7 be released?

[Jim Perrin]

On 08/11/2014 08:42 AM, 彭勇 wrote:
> there are some bugs in docker-0.11.1-22.el7, when will latest version
> docker be relased for el7?

Shortly after upstream releases it, or an interested SIG picks it up for
development and deployment in a secondary repository.

-- 
Jim Perrin
The CentOS Project | http://www.centos.org
twitter: @BitIntegrity | GPG Key: FA09AD77
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[Valeri Galtsev]

while you haven't settled on anything you could consider amavisd as well...

http://www.amavis.org/

On Mon, August 11, 2014 11:43 am, Adam King wrote:
> Can you explain why you'd use milter over spamassassin? Genuinely
> interested as we could certainly get better spam filtering...
>
> Adam King
> IT Systems Administrator
> Skipton Girls High School
> 01756 707600
> www.sghs.org.uk
>
> - Original Message -
> From: "Alexander Dalloz" 
> To: "CentOS mailing list" 
> Sent: Monday, 11 August, 2014 5:01:16 PM
> Subject: Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a
> shortest guide
>
> Am 2014-08-11 13:38, schrieb Alexander Farber:
>> Hello fellow CentOS-users,
>>
>> on the net there are lots of Spamassassin related HOWTOs - describing
>> how
>> to create a shell script for Postfix and how to install Spamassassin
>> and
>> start its spamd daemon - step by step. Additionally antivirus setups
>> are
>> described...
>>
>> But I have a strong feeling, that this is unneeded on CentOS 6 -
>> because
>> there are already preconfigured stock packages for postfix and
>> spamassassin.
>>
>> So I have installed the both packages and I have configured postfix (it
>> works fine).
>>
>> Also I have started the spamd (and can see it in "ps uawx") with:
>>
>> # chkconfig spamassassin on
>> # service spamassassin start
>>
>> So I'm just missing the connection between postfix and spamd.
>>
>> Could anybody using these 2 programs on CentOS 6 please share it with
>> me?
>
> [ ... ]
>
> Do yourself a favour and use a milter instead of piping each single mail
> through spamassassin.
>
> http://pkgs.org/centos-6/epel-x86_64/spamass-milter-0.3.2-3.el6.x86_64.rpm.html
>
> Then add something like
>
> smtpd_milters = unix:/var/run/spamass-milter/postfix/sock
> inet:127.0.0.1:8891
> non_smtpd_milters = $smtpd_milters
> milter_default_action = accept
>
> to your Postfix' main.cf and configure the milter flags in
> /etc/sysconfig/spamass-milter.
>
>> Thank you
>> Alex
>
> [ ... ]
>
> Alexander
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[BC]

On Mon, Aug 11, 2014 at 11:23 AM, Valeri Galtsev 
wrote:

> You only spotted 4 _last_ guys running away to UNIX. The rest fled quite a
> while ago.
>

I wasn't aware that this was a forum for whining that upstream's vision of
a system didn't match one's own. You stated your dislike of firewalld.
Enough said. To go on trashing the OS wholesale is just juvenile. I
designed an infrastructure of 2500 servers that are all CentOS 6 and they
are managed by only 3 people. This is a decent OS for medium to large scale
rollouts, per my experience.

I am trying to schedule time to begin evaluation of CentOS 7, (which will
not be rolled out for at least a year) and if I decide that firewalld does
not suit our purposes, then I will continue to use iptables. If I decide
that firewalld does not provide any additional features, I will probably
also continue to use iptables just to save some engineering time. Either
way, my use of it is my own (and my company's) and no own should have to
listen to me whine about it over and over. Pick whatever OS you want. You
have that freedom.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Dennis Jacobfeuerborn]

On 11.08.2014 15:43, Tom Bishop wrote:
>> You and 4 other guys are moving things from Linux to FreeBSD.
>>
>> The rest of the world is moving things from UNIX and Windows to Linux.
>>
>> CentOS-7 rebuild RHEL sources and most all of the "important" Enterprise
>> Linux things are moving to RHEL.
>>
>> RHEL runs the stock exchanges, the banks, etc.
>>
>> Free BSD is fine and people can use it if they like ... but if you want
>> real Enterprise grade software, it needs to be RHEL based, that is just
>> the way it is.
>>
>> Keep in mind that EL 7.0 is a 'dot zero release' and some of the
>> features need work.  It works for the majority of use cases, but some
>> features will need to be enhanced, and Red Hat will enhance it.  When
>> they do, we will build the source code and it will be in CentOS.
>>
>>
> 
> I hear you Johnny, I'm a big RH fan, but there is several things that
> they have shifted to in RHEL 7 that just chafes a little.
> 
> I am dual hat guy, network and IS and when iptables with firewalld, at
> a minimum I would like the ability to be able to accomplish the same
> things I accomplished with iptables. I read about firewalld the pros
> and cons and I understand the shift and reason.
> 
> But I do have heartburn when they call something a "firewall" and you
> cannot drop all the packets. It's not like they didn't know about it
> since I read about it in fedora and it's not clear if it will be
> addressed.  There are lots of use cases where I want to control all of
> the packets coming and going from a box, I see this becoming more so
> moving forward.
> 
> Hopefully this will be addressed in a future release, trying to figure
> out where I can go to now and keep up to date with the latest
> firewalld info, just to stay clued in.

While I am also disappointed with firewalld I think the whole situation
is not as terrible as people claim it is after all you can easily go
back to iptables as it was in CentOS 6:

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/sec-Using_Firewalls.html#sec-Using_iptables

It's strange that people threaten to go FreeBSD simply because the
defaults are not to their liking. Not exactly a rational way to look at
things.

Regards,
  Dennis

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] when will docker 1.1.2 for rhel7 be released?

[Dennis Jacobfeuerborn]

On 11.08.2014 15:42, 彭勇 wrote:
> there are some bugs in docker-0.11.1-22.el7, when will latest version
> docker be relased for el7?

What bugs are you referring to? Since Red Hat backports patches these
bugs might already be fixed event though the version number might
suggest otherwise.

Regards,
  Dennis

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Always Learning]

> On Mon, Aug 11, 2014 at 11:23 AM, Valeri Galtsev 
> wrote:
> 
> > You only spotted 4 _last_ guys running away to UNIX. The rest fled quite a
> > while ago.

On Mon, 2014-08-11 at 12:53 -0400, BC wrote:

> I wasn't aware that this was a forum for whining that upstream's vision of
> a system didn't match one's own.

Stating one's dread of having imposed as a standard, a firewall that can
not control outgoing packets and has dumbed-down Micro$oft-like 'zones'
and the possible future removal of IP Tables from the very much admired
Centos version of RHEL, is probably a desperate call for sanity to
prevail at Red Hat.

The imposition of what appears to many of unfinished software rather
than a genuine finished improvement does suggests faulty reasoning
upstream.  Upstream's people take more notice of this list since the Red
Hat 'take-over' / 'intervention' / 'involvement' in Centos. The ordinary
Centos fan has little ability to reach any of the decision makers at Red
Hat. This list is probably the easiest and best method.

It is better if one articulates one's concerns on here rather than
ignoring what appear to be fundamental mistakes in the composition of
much appreciated software.

We care because we genuinely like Centos.


-- 
Regards,

Paul.
England, EU.

   Centos, Exim, Apache, Libre Office.
   Linux is the future. Micro$oft is the past.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[Adam King]

Thanks :) 

Adam King 
IT Systems Administrator 
Skipton Girls High School 
01756 707600 
www.sghs.org.uk 

- Original Message -
From: "Reindl Harald" 
To: "CentOS mailing list" , ki...@sghs.org.uk
Sent: Monday, 11 August, 2014 5:55:22 PM
Subject: Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a 
shortest guide


Am 11.08.2014 um 18:43 schrieb Adam King:
> Can you explain why you'd use milter over spamassassin? Genuinely interested 
> as we could certainly get better spam filtering... 

just becaus eit is the only way where you can
*block and reject* spam instead still deliver
it with a special subject

http://www.postfix.org/MILTER_README.html

without a milter your only choices are:

* deliver crap
* get a backscatter and get blacklisted
* drop messages while pretend you accepted them and go to jail

"-r 6" = reject with a score of 6 and bigger
spamass-milter -p /run/spamass-milter/spamass-milter.sock -g sa-milt -r 6

> - Original Message -
> From: "Alexander Dalloz" 
> To: "CentOS mailing list" 
> Sent: Monday, 11 August, 2014 5:01:16 PM
> Subject: Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a 
> shortest guide
> 
> Am 2014-08-11 13:38, schrieb Alexander Farber:
>> Hello fellow CentOS-users,
>>
>> on the net there are lots of Spamassassin related HOWTOs - describing 
>> how
>> to create a shell script for Postfix and how to install Spamassassin 
>> and
>> start its spamd daemon - step by step. Additionally antivirus setups 
>> are
>> described...
>>
>> But I have a strong feeling, that this is unneeded on CentOS 6 - 
>> because
>> there are already preconfigured stock packages for postfix and 
>> spamassassin.
>>
>> So I have installed the both packages and I have configured postfix (it
>> works fine).
>>
>> Also I have started the spamd (and can see it in "ps uawx") with:
>>
>> # chkconfig spamassassin on
>> # service spamassassin start
>>
>> So I'm just missing the connection between postfix and spamd.
>>
>> Could anybody using these 2 programs on CentOS 6 please share it with 
>> me?
> 
> [ ... ]
> 
> Do yourself a favour and use a milter instead of piping each single mail 
> through spamassassin.
> 
> http://pkgs.org/centos-6/epel-x86_64/spamass-milter-0.3.2-3.el6.x86_64.rpm.html
> 
> Then add something like
> 
> smtpd_milters = unix:/var/run/spamass-milter/postfix/sock 
> inet:127.0.0.1:8891
> non_smtpd_milters = $smtpd_milters
> milter_default_action = accept
> 
> to your Postfix' main.cf and configure the milter flags in 
> /etc/sysconfig/spamass-milter

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Always Learning]

On Mon, 2014-08-11 at 19:10 +0200, Dennis Jacobfeuerborn wrote:

> It's strange that people threaten to go FreeBSD simply because the
> defaults are not to their liking. Not exactly a rational way to look
> at things.

Leider nicht. 

1. firewalld is not a full firewall - at best it is half-finished but
released into the world as a genuine firewall.

2. All of us, including potential and actual defectors to *BSD's,
welcome good products. We like and appreciate IP Tables. To replace good
solid working software with a half-finished (and confusing) substitute
is not progress, not advancement and not an improvement. Some might
think it is not a good idea.

Please respect the fact that we really do like, appreciate and enjoy
Centos. Hence our desire that it is not degraded or Lindozed
(dumbed-down). 


-- 
Regards,

Paul.
England, EU.

   Centos, Exim, Apache, Libre Office.
   Linux is the future. Micro$oft is the past.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Jonathan Billings]

On Aug 11, 2014, at 1:16 PM, Always Learning  wrote:
> Stating one's dread of having imposed as a standard, a firewall that can
> not control outgoing packets and has dumbed-down Micro$oft-like 'zones'
> and the possible future removal of IP Tables from the very much admired
> Centos version of RHEL, is probably a desperate call for sanity to
> prevail at Red Hat.

'FirewallD' doesn't replace 'iptables' except in the sense of activated system 
services, not the core firewall functionality.  FirewallD just builds and 
modifies iptables rules.  If anything, FirewallD might make it easier to 
migrate to nftables (a potential replacement for iptables) when that becomes 
mature[1].  But that's nowhere on the radar right now.

If you don't like FirewallD, don't use it.  It's just a tool to make managing 
your firewall easier, and allowing the OS and user to dynamically load rules 
depending on certain logic.  It replaces the monolithic /etc/sysconfig/iptables 
file and the 'iptables' systemd unit.  No one is talking about removing the 
core netfilter technology behind 'iptables'.

Just reading this thread makes me wonder if people criticizing FirewallD 
actually even tried it or even read the documentation!


1.) http://netfilter.org/projects/nftables/

--
Jonathan Billings 




signature.asc
Description: Message signed with OpenPGP using GPGMail
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Kirk Bocek]

On 8/11/2014 11:36 AM, Jonathan Billings wrote:
> On Aug 11, 2014, at 1:16 PM, Always Learning  wrote:
>> Stating one's dread of having imposed as a standard, a firewall that can
>> not control outgoing packets and has dumbed-down Micro$oft-like 'zones'
>> and the possible future removal of IP Tables from the very much admired
>> Centos version of RHEL, is probably a desperate call for sanity to
>> prevail at Red Hat.
> 'FirewallD' doesn't replace 'iptables' except in the sense of activated 
> system services, not the core firewall functionality.  FirewallD just builds 
> and modifies iptables rules.  If anything, FirewallD might make it easier to 
> migrate to nftables (a potential replacement for iptables) when that becomes 
> mature[1].  But that's nowhere on the radar right now.
>
> If you don't like FirewallD, don't use it.  It's just a tool to make managing 
> your firewall easier, and allowing the OS and user to dynamically load rules 
> depending on certain logic.  It replaces the monolithic 
> /etc/sysconfig/iptables file and the 'iptables' systemd unit.  No one is 
> talking about removing the core netfilter technology behind 'iptables'.
>
> Just reading this thread makes me wonder if people criticizing FirewallD 
> actually even tried it or even read the documentation!
>
>
> 1.) http://netfilter.org/projects/nftables/
>
> --
> Jonathan Billings 
>
>

Thank you Jonathan for injecting a little sanity. What I was reading 
just wasn't making sense to me.

I have not even started to digest 7. What is the proper method of 
getting back to an industrial strength firewall under 7? Does one 
disable FirewallD and install iptables or does iptables install on top 
of FirewallD? You are making it sound like FirewallD can act as a 
management tool for iptables.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Kirk Bocek]

On 8/11/2014 11:56 AM, Reindl Harald wrote:
> Am 11.08.2014 um 20:47 schrieb Kirk Bocek:
>> I have not even started to digest 7. What is the proper method of
>> getting back to an industrial strength firewall under 7? Does one
>> disable FirewallD and install iptables or does iptables install on top
>> of FirewallD? You are making it sound like FirewallD can act as a
>> management tool for iptables
> jesus christ if you even not started then do it
>
>
  OMG if it's that important I will, I will!

What's your malfunction? How about gathering information and knowledge 
before starting a major upgrade?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Always Learning]

On Mon, 2014-08-11 at 14:36 -0400, Jonathan Billings wrote:


> 'FirewallD' doesn't replace 'iptables' except in the sense of
> activated system services

I just love using sv ipt ... (my abbreviations for service iptables).
Not keen on another 'service' duplicating my manual and automated
efforts.

> FirewallD just builds and modifies iptables rules.

Why do I need more complexity together with more learning time and more
effort and conversion of existing rules ?  IP Tables works fine.
Absolutely no complaints.

> If anything, FirewallD might make it easier to migrate to nftables
> (a potential replacement for iptables) when that becomes mature[1]. 

Think I would prefer to use the nftables without a Lindoze wrapper.


-- 
Regards,

Paul.
England, EU.

   Centos, Exim, Apache, Libre Office.
   Linux is the future. Micro$oft is the past.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Matthew Miller]

On Mon, Aug 11, 2014 at 08:25:46PM +0100, Always Learning wrote:
> > FirewallD just builds and modifies iptables rules.
> Why do I need more complexity together with more learning time and more
> effort and conversion of existing rules ?  IP Tables works fine.
> Absolutely no complaints.

Do you run virtual machines on any of your systems? The required dynamic
rules are the primary use case it solves very well. It also works as a
desktop firewall somewhat less ideally. Since it has an API, it may someday
be a full-featured dynamic server firewall. But, otherwise, it's probably
not what you want for anything complicated -- and mostly harmless for
anything simple.

-- 
Matthew Miller

Fedora Project Leader
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[John R Pierce]

On 8/11/2014 12:53 PM, Matthew Miller wrote:
> On Mon, Aug 11, 2014 at 08:25:46PM +0100, Always Learning wrote:
>>> > >FirewallD just builds and modifies iptables rules.
>> >Why do I need more complexity together with more learning time and more
>> >effort and conversion of existing rules ?  IP Tables works fine.
>> >Absolutely no complaints.
> Do you run virtual machines on any of your systems? The required dynamic
> rules are the primary use case it solves very well. It also works as a
> desktop firewall somewhat less ideally. Since it has an API, it may someday
> be a full-featured dynamic server firewall. But, otherwise, it's probably
> not what you want for anything complicated -- and mostly harmless for
> anything simple.

it could be argued that restrictive selinux rules are a better 
'outbound' firewall than anything port based.

-- 
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

[CentOS] Question about dump on MySQL

[Rodrigo Pichiñual Norin]

I need export an registers of a data base from command line.

It is possible with mysqldump?

for example:

mysqldump -u user -ppass db "select *from users where id=20" ???


thank
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Question about dump on MySQL

[Alan McRae]

echo "select * from users where id=20;" | mysql -u user -ppass -Ddb

Alan McRae

On 12/08/2014 08:10, Rodrigo Pichiñual Norin wrote:
> I need export an registers of a data base from command line.
>
> It is possible with mysqldump?
>
> for example:
>
> mysqldump -u user -ppass db "select *from users where id=20" ???
>
>
> thank
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Question about dump on MySQL

[Marc Deop Argemí]

On Tuesday 12 August 2014 08:15:16 Alan McRae wrote:
> echo "select * from users where id=20;" | mysql -u user -ppass -Ddb
> 
> Alan McRae
> 
> On 12/08/2014 08:10, Rodrigo Pichiñual Norin wrote:
> > I need export an registers of a data base from command line.
> > 
> > It is possible with mysqldump?
> > 
> > for example:
> > 
> > mysqldump -u user -ppass db "select *from users where id=20" ???
> > 
> > 
> > thank
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> 
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

No need for the pipe:

mysql -u user -p $DATABASE -e "select * from users where id=20"

NOTE: I did *not* type the password, the very fact that you can actually type 
the password in the command should be abolished from mysql cli

Regards
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Question about dump on MySQL

[Todor Petkov]

On 11/08/2014 11:10 PM, Rodrigo Pichiñual Norin wrote:
> I need export an registers of a data base from command line.
> 
> It is possible with mysqldump?
> 
> for example:
> 
> mysqldump -u user -ppass db "select *from users where id=20" ???
> 
> 
> thank


Hi,

as I understand, you need to apply a 'WHERE' clause? It can be done like 
this:

mysqldump database table_bame --where="date_column BETWEEN '2012-07-01 
00:00:00' and '2012-12-01 00:00:00'"



Keep in mind, that this clause is valid only for table. I am not sure if 
you can use JOIN.


Regards,


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Question about dump on MySQL

[Rodrigo Pichiñual Norin]

great!!

 thank for your answers, it is very useful for me

Regards


2014-08-11 17:33 GMT-04:00 Todor Petkov :

> On 11/08/2014 11:10 PM, Rodrigo Pichiñual Norin wrote:
> > I need export an registers of a data base from command line.
> >
> > It is possible with mysqldump?
> >
> > for example:
> >
> > mysqldump -u user -ppass db "select *from users where id=20" ???
> >
> >
> > thank
>
>
> Hi,
>
> as I understand, you need to apply a 'WHERE' clause? It can be done like
> this:
>
> mysqldump database table_bame --where="date_column BETWEEN '2012-07-01
> 00:00:00' and '2012-12-01 00:00:00'"
>
>
>
> Keep in mind, that this clause is valid only for table. I am not sure if
> you can use JOIN.
>
>
> Regards,
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

[David Beveridge]

On Tue, Aug 12, 2014 at 3:27 AM, Adam King  wrote:

> Thanks :)
>
> Am 11.08.2014 um 18:43 schrieb Adam King:
> > Can you explain why you'd use milter over spamassassin? Genuinely
> interested as we could certainly get better spam filtering...
>
> just becaus eit is the only way where you can
> *block and reject* spam instead still deliver
> it with a special subject
>
> http://www.postfix.org/MILTER_README.html
>
> without a milter your only choices are:
>
> * deliver crap
> * get a backscatter and get blacklisted
> * drop messages while pretend you accepted them and go to jail
>
> "-r 6" = reject with a score of 6 and bigger
> spamass-milter -p /run/spamass-milter/spamass-milter.sock -g sa-milt -r 6
>
>
Another alternative to milters is the postfix policy daemons.
The best one to use for block and reject is policyd-weight.
found here http://www.policyd-weight.org/

This gives spam a weight based on a number of factors.
I setup to do this
score <0 accept immediately
score <10 greylist then verify sender, then spf, then spamassassin if not
spf pass.
score >10 reject immediately

dave
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] when will docker 1.1.2 for rhel7 be released?

[彭勇]

*https://bugzilla.redhat.com/show_bug.cgi?id=1119042
*
*https://bugzilla.redhat.com/show_bug.cgi?id=1109039
*
*https://github.com/docker/docker/issues/6770
*
*https://access.redhat.com/solutions/964923
*


On Tue, Aug 12, 2014 at 1:13 AM, Dennis Jacobfeuerborn <
denni...@conversis.de> wrote:

> On 11.08.2014 15:42, 彭勇 wrote:
> > there are some bugs in docker-0.11.1-22.el7, when will latest version
> > docker be relased for el7?
>
> What bugs are you referring to? Since Red Hat backports patches these
> bugs might already be fixed event though the version number might
> suggest otherwise.
>
> Regards,
>   Dennis
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
Peng Yong
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] when will docker 1.1.2 for rhel7 be released?

[Dennis Jacobfeuerborn]

On 12.08.2014 01:51, 彭勇 wrote:
> *https://bugzilla.redhat.com/show_bug.cgi?id=1119042
> *
> *https://bugzilla.redhat.com/show_bug.cgi?id=1109039
> *
> *https://github.com/docker/docker/issues/6770
> *
> *https://access.redhat.com/solutions/964923
> *
> 
> 
> On Tue, Aug 12, 2014 at 1:13 AM, Dennis Jacobfeuerborn <
> denni...@conversis.de> wrote:
> 
>> On 11.08.2014 15:42, 彭勇 wrote:
>>> there are some bugs in docker-0.11.1-22.el7, when will latest version
>>> docker be relased for el7?
>>
>> What bugs are you referring to? Since Red Hat backports patches these
>> bugs might already be fixed event though the version number might
>> suggest otherwise.
>>

Looks like docker-io-1.0.0 is available in EPEL:
http://dl.fedoraproject.org/pub/epel/beta/7/x86_64/repoview/docker-io.html

If you really want to use the latest version of docker you cannot rely
on RHEL packages though as they only get updated with important fixes
and usually only with point releases (unless it's a security bug).

Regards,
  Dennis
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Rob Kampen]

On 08/12/2014 07:25 AM, Always Learning wrote:
> On Mon, 2014-08-11 at 14:36 -0400, Jonathan Billings wrote:
>
>
>> 'FirewallD' doesn't replace 'iptables' except in the sense of
>> activated system services
> I just love using sv ipt ... (my abbreviations for service iptables).
> Not keen on another 'service' duplicating my manual and automated
> efforts.
>
>> FirewallD just builds and modifies iptables rules.
> Why do I need more complexity together with more learning time and more
> effort and conversion of existing rules ?  IP Tables works fine.
> Absolutely no complaints.
>
>> If anything, FirewallD might make it easier to migrate to nftables
>> (a potential replacement for iptables) when that becomes mature[1].
> Think I would prefer to use the nftables without a Lindoze wrapper.
>
>
I think all the various folk that have learned to manage iptables have 
forgotten the pain and arcane syntax and gotchas that trap you when you 
first start.
So now you have your favourite script that "just works" and you do not 
want to change.

Fine, that is an option available to you - take the option and move on.
For others, those new to Linux, and many that use things like webmin the 
new firewalld may be an adequate solution. Sure it feels a little 
windoze like, but please give it a rest.

For better or otherwise the CentOS upstream provider has made a change 
and thus that is the new world for any that want CentOS-7. It is a done 
deal, perfect? unlikely, I for one have seldom needed or put in place an 
outgoing firewall, in fact cannot recall ever needing to.
I have set up dozens of servers on multiple continents and always have 
an incoming firewall in place, along with selinux enforcing (since 
CentOS-6).

Will shortly start installing CentOS-7, thus far, only done live boot of 
gnome and kde disks to have a look, and look forward to seeing how it plays.

Would appreciate more constructive posts on the list - please
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

[Kirk Bocek]

On 8/11/2014 12:07 PM, Kirk Bocek wrote:
>OMG if it's that important I will, I will!
>
> What's your malfunction? How about gathering information and knowledge
> before starting a major upgrade?
> ___
>

I have now been alerted by two list members to the behavior of the 
individual involved. I will not allow myself to be baited again.

I apologize to everyone for the off-topic, off-subject posting. We 
return you to our regular programming.

Kirk
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos