Re: [CentOS] xdgurl

2016-10-19 Thread Fred Smith
On Wed, Oct 19, 2016 at 10:25:43PM -0400, Mark LaPierre wrote: > Has anyone figured out how to make Firefox 45.4.0 on CentOS 6 use xdgurl > to handle xdg:// URLs? > > Google is full of suggestions that don't work. When I select a an > xdg:// link I don't get a dialog asking me what to do like Goo

[CentOS] xdgurl

2016-10-19 Thread Mark LaPierre
Has anyone figured out how to make Firefox 45.4.0 on CentOS 6 use xdgurl to handle xdg:// URLs? Google is full of suggestions that don't work. When I select a an xdg:// link I don't get a dialog asking me what to do like Google says I will. Instead I get a message that says Firefox doesn't have

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Alice Wonder
On 10/19/2016 01:54 PM, m.r...@5-cent.us wrote: Alice Wonder wrote: On 10/19/2016 11:34 AM, Leonard den Ottolander wrote: Hello Gordon, *snip* Personally I would be more concerned whether or not to enable ECDSA algorithms (https://blog.cr.yp.to/20140323-ecdsa.html). For web server ECDSA c

Re: [CentOS] port running but connection refused

2016-10-19 Thread Jack Bailey
On 10/19/16 2:03 PM, Jerry Geis wrote: Hi All, I have a process running on port 5070... I'm using CentOS 7. iptables is running firewalld should be stopped and disabled. When I telnet localhost 5070 I get connection refused. When I stop iptables I still get connection refused. netstat -tnlv

[CentOS] port running but connection refused

2016-10-19 Thread Jerry Geis
Hi All, I have a process running on port 5070... I'm using CentOS 7. iptables is running firewalld should be stopped and disabled. When I telnet localhost 5070 I get connection refused. When I stop iptables I still get connection refused. netstat -tnlv | grep 5070 tcp0 0 192.168.1.

Re: [CentOS] Bacula Restore

2016-10-19 Thread Jon LaBadie
On Wed, Oct 19, 2016 at 01:20:49PM +0200, Alessandro Baggi wrote: > Hi list, > another question about bacula, but this time about restoring backups. > > I've a server that I must backup every day. My plan is: > > from mon to sat incrimental backup > and on sunday full backup. > > When I will per

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread m . roth
Alice Wonder wrote: > On 10/19/2016 11:34 AM, Leonard den Ottolander wrote: >> Hello Gordon, >> > *snip* >> >> Personally I would be more concerned whether or not to enable ECDSA >> algorithms (https://blog.cr.yp.to/20140323-ecdsa.html). >> > For web server ECDSA certs is currently a concern becaus

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Alice Wonder
On 10/19/2016 11:34 AM, Leonard den Ottolander wrote: Hello Gordon, *snip* Personally I would be more concerned whether or not to enable ECDSA algorithms (https://blog.cr.yp.to/20140323-ecdsa.html). Regards, Leonard. For web server ECDSA certs is currently a concern because the only curv

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Clint Dilks
On Thu, Oct 20, 2016 at 4:30 AM, Leonard den Ottolander < leon...@den.ottolander.nl> wrote: > Hello Clint, > > On Wed, 2016-10-19 at 11:28 +1300, Clint Dilks wrote: > > The following weak client-to-server encryption algorithms are supported > by > > the remote service: > > rijndael-...@lysator.liu

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Leonard den Ottolander
Hello Gordon, On Wed, 2016-10-19 at 10:31 -0700, Gordon Messmer wrote: > On 10/19/2016 08:30 AM, Leonard den Ottolander wrote: > > Where did you get the idea that AES (~ Rijndael) is a weak cipher? > > > It's not the cipher, but the mode. CBC has several known weaknesses in > TLS, and is frequ

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Gordon Messmer
On 10/19/2016 08:30 AM, Leonard den Ottolander wrote: Where did you get the idea that AES (~ Rijndael) is a weak cipher? It's not the cipher, but the mode. CBC has several known weaknesses in TLS, and is frequently regarded as potentially insecure as a result. https://www.openssl.org/~bodo

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Leon Fauster
Am 19.10.2016 um 17:30 schrieb Leonard den Ottolander : > Hello Clint, > > On Wed, 2016-10-19 at 11:28 +1300, Clint Dilks wrote: >> The following weak client-to-server encryption algorithms are supported by >> the remote service: >> rijndael-...@lysator.liu.se >> arcfour256 >> arcfour128 >> aes25

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Leon Fauster
Am 19.10.2016 um 17:05 schrieb Chris Adams : > Once upon a time, Erik Laxdal said: >> The supported KexAlgorithms, Ciphers, and MACs are generally listed >> in the sshd_config man page. So 'man sshd_config' then look for the >> section of the item of interest. > > Note that the man page does not

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Leonard den Ottolander
Hello Clint, On Wed, 2016-10-19 at 11:28 +1300, Clint Dilks wrote: > The following weak client-to-server encryption algorithms are supported by > the remote service: > rijndael-...@lysator.liu.se > arcfour256 > arcfour128 > aes256-cbc > 3des-cbc > aes192-cbc > blowfish-cbc > cast128-cbc > arcfour

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Chris Adams
Once upon a time, Erik Laxdal said: > The supported KexAlgorithms, Ciphers, and MACs are generally listed > in the sshd_config man page. So 'man sshd_config' then look for the > section of the item of interest. Note that the man page does not always match the actual compiled binary (the build pr

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Erik Laxdal
On 2016-10-19 03:11, Leon Fauster wrote: Is there any command to find the supported list of KeyAlgos, MACs and Ciphers for the particular system (e.g. EL{5,6,7})? Similar to $ openssl ciphers -v ... The supported KexAlgorithms, Ciphers, and MACs are generally listed in the sshd_config man pa

Re: [CentOS] Bacula Restore

2016-10-19 Thread Alessandro Baggi
Il 19/10/2016 13:52, mark ha scritto: Hi, there, On 10/19/16 07:20, Alessandro Baggi wrote: Hi list, another question about bacula, but this time about restoring backups. I've a server that I must backup every day. My plan is: from mon to sat incrimental backup and on sunday full backup. Whe

Re: [CentOS] glxinfo problem

2016-10-19 Thread Jonathan Billings
On Tue, Oct 18, 2016 at 10:24:52PM +0200, Mahmoud A. A. Ibrahim wrote: > The weird thing is that when we use another desktop computer running the > same cygwin version and accessing with the same username, glxinfo works > fine. > Indeed, echo $DISPLAY on my desktop computer gives us localhost:10.0

Re: [CentOS] Bacula Restore

2016-10-19 Thread mark
Hi, there, On 10/19/16 07:20, Alessandro Baggi wrote: Hi list, another question about bacula, but this time about restoring backups. I've a server that I must backup every day. My plan is: from mon to sat incrimental backup and on sunday full backup. When I will perform a restore I must rest

[CentOS] Bacula Restore

2016-10-19 Thread Alessandro Baggi
Hi list, another question about bacula, but this time about restoring backups. I've a server that I must backup every day. My plan is: from mon to sat incrimental backup and on sunday full backup. When I will perform a restore I must restore from last valid full backup and then all valid incr

Re: [CentOS] SSH Weak Ciphers

2016-10-19 Thread Leon Fauster
Am 19.10.2016 um 00:58 schrieb Gordon Messmer : > On 10/18/2016 03:28 PM, Clint Dilks wrote: >> So first >> question is are people generally modifying the list of ciphers supported by >> the ssh client and sshd? > > I suspect that "generally" people are not. I do, because I can, and so that > I