Re: [CentOS] DRBD very slow....

2009-07-24 Thread Coert Waagmeester
On Fri, 2009-07-24 at 10:21 +0400, Roman Savelyev wrote: > 1. You are hit by Nagel alghoritm (slow TCP response). You can build DRBD > 8.3. In 8.3 "TCP_NODELAY" and "QUICK_RESPONSE" implemented in place. > 2. You are hit by DRBD protocol. In most cases, "B" is enought. > 3. You are hit by triple

[CentOS] Named Assertion Failure

2009-07-24 Thread shprahi shprahi
Hi All, Recently I am getting the below error on my DNS caching server logs named[21177]: mem.c:1061: REQUIREctx) != ((void *)0)) && (((const isc__magic_t *)(ctx))->magic == ((('M') << 24 | ('e') << 16 | ('m') << 8 | ('C')) failed named[21177]: exiting (due to assertion failure) Does an

Re: [CentOS] SSH attacks from china

2009-07-24 Thread Andreas Rogge
Am Donnerstag, den 23.07.2009, 19:45 +0100 schrieb Miguel Medalha: > I moved the ssh port from the standard 22 to a high port. The attempts > to break into my servers disappeared. The logs are clean now. I would > advise you to do the same. Choose a high (> 1024) unused port and > configure the

Re: [CentOS] DRBD very slow....

2009-07-24 Thread Roman Savelyev
> I have googled the triple barriers thing but cant find that much > information. Please refer to drbdsetup(8) for detailed description of the parameters. no-disk-barrier, no-disk-flushes, no-disk-drain, no-md-flushes > Would it help if I used IPv6 instead of IPv4? No. And small transaction must

Re: [CentOS] iso from rpm's

2009-07-24 Thread Tom Brown
> I have downloaded from an ftp something like RHEL 5.3 ppc64 rpm's. Is there > any way to make from them an installation iso? > > > why not just download the iso's from redhat with the valid subscription details you have? ___ CentOS mailing list

Re: [CentOS] SSH attacks from china

2009-07-24 Thread Ralph Angenendt
Andreas Rogge wrote: > Am Donnerstag, den 23.07.2009, 19:45 +0100 schrieb Miguel Medalha: > > I moved the ssh port from the standard 22 to a high port. The attempts > > to break into my servers disappeared. The logs are clean now. I would > > advise you to do the same. Choose a high (> 1024) unus

Re: [CentOS] Named Assertion Failure

2009-07-24 Thread Ralph Angenendt
shprahi shprahi wrote: > Hi All, > > Recently I am getting the below error on my DNS caching server logs > > named[21177]: mem.c:1061: REQUIREctx) != ((void *)0)) && (((const > isc__magic_t *)(ctx))->magic == ((('M') << 24 | ('e') << 16 | ('m') << 8 | > ('C')) failed named[21177]: exitin

Re: [CentOS] iso from rpm's

2009-07-24 Thread Dmitry Zaletnev
> > > I have downloaded from an ftp something like RHEL 5.3 ppc64 rpm's. Is there > > any way to make from them an installation iso? > > why not just download the iso's from redhat with the valid subscription > details you have? Because the value of subscription is equal the value of my PlayS

Re: [CentOS] SSH attacks from china

2009-07-24 Thread John
Am Donnerstag, den 23.07.2009, 19:45 +0100 schrieb Miguel Medalha: > I moved the ssh port from the standard 22 to a high port. The attempts > to break into my servers disappeared. The logs are clean now. I would > advise you to do the same. Choose a high (> 1024) unused port and > configure the cli

Re: [CentOS] SSH attacks from china

2009-07-24 Thread Andreas Rehmer
Hi i am using the following way to dissallow ssh connects without having the Problem of specific IPs or something else. Before you get access to the machine you must visit a webpage protected by httpauth. This start a small script that put the Remote Adress into a list. Only if your ip is on t

Re: [CentOS] iso from rpm's

2009-07-24 Thread Karanbir Singh
On 07/24/2009 11:32 AM, Dmitry Zaletnev wrote: >>> I have downloaded from an ftp something like RHEL 5.3 ppc64 rpm's. Is there >>> any way to make from them an installation iso? >> why not just download the iso's from redhat with the valid subscription >> details you have? > Because the value of s

Re: [CentOS] SSH attacks from china

2009-07-24 Thread luc...@lastdot.org
On Fri, Jul 24, 2009 at 12:04 PM, Andreas Rehmer wrote: > Hi > > i am using the following way to dissallow ssh connects without having the > Problem of specific IPs or something else. > > Before you get access to the machine you must visit a webpage protected by > httpauth. This start a small scrip

Re: [CentOS] SSH attacks from china

2009-07-24 Thread Eduardo Silvestre
I'm using ssh port knocking. Regards, --- Eduardo Silvestre nfsi telecom, lda. eduardo.silves...@nfsi.pt Tel. (+351) 21 949 2300 - Fax (+351) 21 949 2301 http://www.nfsi.pt/ - Original Message - From: "Andreas Rehmer" To: "CentOS mailing list" Sent: Sexta-feira, 24 de Julho de 2009 12

Re: [CentOS] Drupal installation

2009-07-24 Thread Timothy Murphy
John Thomas wrote: >> Sorry, I should have made myself clearer. >> Drupal-5 is available on EPEL, >> so it can just be yum-installed. >> The question is, what to do after that? >> Eg is it a good idea to create a user drupal >> who will own the database one has to create? > > No need to create a

Re: [CentOS] iso from rpm's

2009-07-24 Thread Dmitry Zaletnev
> On 07/24/2009 11:32 AM, Dmitry Zaletnev wrote: > > > > I have downloaded from an ftp something like RHEL 5.3 ppc64 rpm's. Is > > > > there any way to make from them an installation iso? > > > why not just download the iso's from redhat with the valid subscription > > > details you have? > > Be

Re: [CentOS] iso from rpm's

2009-07-24 Thread Per Qvindesland
I guess that this one might work do I have never tried it my self http://psubuntu.com/ [1] Regards Per Qvindesland E-mail: p...@norhex.com [2] http://www.linkedin.com/in/perqvindesland [3] --- Original message follows --- SUBJECT: Re: [CentOS] iso from rpm's FROM:  Dmitry Zaletnev TO: "CentOS mai

Re: [CentOS] Named Assertion Failure

2009-07-24 Thread shprahi shprahi
Hi Ralph, Thanks a lot for the help, Find my Kernel details is kernel needs to be upgraded? (5.3) Linux cache1.com 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 i686 i386 GNU/Linux cat /etc/issue CentOS release 5.2 (Final) Kernel \r on an \m Thanks in advance, Shprahi On Fri, J

Re: [CentOS] SSH attacks from china

2009-07-24 Thread Ralph Angenendt
John wrote: > Using a non default port is not the solution, because history has learned > that security by obscurity never worked. It's not "security by obscurity", moving the default port is just to not see all that garbage in the log files - as the automated scripts don't check for ssh on d

Re: [CentOS] Named Assertion Failure

2009-07-24 Thread Ralph Angenendt
shprahi shprahi wrote: > Hi Ralph, > > Thanks a lot for the help, Find my Kernel details is kernel needs to be > upgraded? (5.3) > > Linux cache1.com 2.6.18-92.1.22.el5 #1 SMP Tue Dec 16 12:03:43 EST 2008 i686 > i686 i386 GNU/Linux Well, it's not only the kernel you should upgrade - you should k

Re: [CentOS] Drupal installation

2009-07-24 Thread John Thomas
Timothy Murphy wrote: > For example, I created a directory /etc/drupal/sites/www.gayleard.com > with my settings.php it in, as did several of the tutorials I visited. > But I get error messages in /var/log/messages telling me > that sites/default cannot be read. I was at your level when I did it

Re: [CentOS] DRBD very slow....

2009-07-24 Thread Ross Walker
On Jul 24, 2009, at 3:28 AM, Coert Waagmeester wrote: > > On Fri, 2009-07-24 at 10:21 +0400, Roman Savelyev wrote: >> 1. You are hit by Nagel alghoritm (slow TCP response). You can >> build DRBD >> 8.3. In 8.3 "TCP_NODELAY" and "QUICK_RESPONSE" implemented in place. >> 2. You are hit by DRBD pr

Re: [CentOS] SSH attacks from china

2009-07-24 Thread Kai Schaetzl
Bob Hoffman wrote on Thu, 23 Jul 2009 12:37:54 -0400: > Enjoy this..., 8000+ attempts. I did not enjoy this. Could you please consider next time putting such a log up under a link somewhere and refer to it instead of sending it all to the list? Thanks. Kai -- Kai Schätzl, Berlin, Germany Get

[CentOS] Self signed certs, openssl dovecot

2009-07-24 Thread Bob Hoffman
So, at wits end. Have gone back to plain text for pop3. I set up the ssl as per instructions but I always get a 'chain' error first time trying to receive mail with my mail client. Comes down I believe to the need to get a CA for dovecot's pem files or I will always get an error. Now I am thinki

[CentOS] rpm

2009-07-24 Thread David Leon
Hi folks I'm trying to install amavisd-new on Centos 5.3. There is a lot of failed dependencies errors when I try to install it. My question is, there is a way to automatically get all the rpm dependencies I need and get them saved somewhere in my hard drive for future installations? I'm behind a

Re: [CentOS] rpm

2009-07-24 Thread luc...@lastdot.org
On Fri, Jul 24, 2009 at 2:52 PM, David Leon wrote: > Hi folks > > I'm trying to install amavisd-new on Centos 5.3. There is a lot of > failed dependencies errors when I try to install it. My question is, > there is a way to automatically get all the rpm dependencies I need > and get them saved some

[CentOS] About NIDS software or hardware.

2009-07-24 Thread Semih Gokalp
Hi all CentOS users. I have used the Snort on server for NIDS.It is connected to switch's SPAN port and server ethernet mode is promiscuous and it is analysing all network traffic and alert me all status. But i am searching other alternative for NIDS that it connectable to network area like Snort

[CentOS] Dependency problems

2009-07-24 Thread Sam Drinkard
Below is output from yum update. Don't know when or what's caused the dependencies to go haywire with the apache or httpd stuff, but would appreciate pointers. The repos don't include rpmforge, only the standard CentOS repositories.# yum update Loaded plugins: fastestmirror, priorities, protec

Re: [CentOS] Dependency problems

2009-07-24 Thread Filipe Brandenburger
Hi, On Fri, Jul 24, 2009 at 10:07, Sam Drinkard wrote: > ---> Package httpd.x86_64 0:2.2.3-22.el5.centos.2 set to be updated > ---> Package httpd-devel.x86_64 0:2.2.3-22.el5.centos.2 set to be updated > [...] > Error: Missing Dependency: httpd = 2.2.3-22.el5.centos.1 is needed by > package httpd-d

[CentOS] A little more info

2009-07-24 Thread Sam Drinkard
I forgot to mention this is an x86_64 machine. Sometime somewhere back several months ago, the centos plus kernel got installed, and I didn't notice it until just recently. It's not in use. I understand there are some i386 packages already installed, and at one point, I thought I had set yum

Re: [CentOS] rpm

2009-07-24 Thread Kwan Lowe
On Fri, Jul 24, 2009 at 9:52 AM, David Leon wrote: > Hi folks > > I'm trying to install amavisd-new on Centos 5.3. There is a lot of > failed dependencies errors when I try to install it. My question is, > there is a way to automatically get all the rpm dependencies I need > and get them saved some

Re: [CentOS] rpm

2009-07-24 Thread David Leon
hi, thanks, but where should I add that repo and how can I use it? David On Fri, Jul 24, 2009 at 9:03 AM, luc...@lastdot.org wrote: > On Fri, Jul 24, 2009 at 2:52 PM, David Leon wrote: >> Hi folks >> >> I'm trying to install amavisd-new on Centos 5.3. There is a lot of >> failed dependencies erro

Re: [CentOS] UPDATE over REPO

2009-07-24 Thread Alberto García Gómez
OK, maybe I don't write the right word, what I really need is an upgrade (eg.: from PHP5.1.x to PHP5.2.x, and so on) and I don't know do that using yum. What I do until know is downloading the packages from rpmfind.net and when they request me some dependencies I download those packages again, a

Re: [CentOS] About NIDS software or hardware.

2009-07-24 Thread John R Pierce
Semih Gokalp wrote: > > Do you know which hardware can i use for NIDS ? I am waiting your > advice and suggestion. > my suggestion is, this question has nothing to do with CentOS. you might try google, http://www.google.com/search?hl=en&q=hardware+intrusion+detection+system or something

Re: [CentOS] Bacula Instalation - Dependencies problems

2009-07-24 Thread John Doe
From: Alejandro > The FSCHWARZ rpm work excellent! > You use some GUI for make the admin of the Jobs? I just used bacula monitor and console while building/testing my configuration files. But the graphic console is very close to an xterm where you would run a text console... The monitor is quit

Re: [CentOS] UPDATE over REPO

2009-07-24 Thread Ralph Angenendt
Alberto García Gómez wrote: > OK, maybe I don't write the right word, what I really need is an upgrade > (eg.: from PHP5.1.x to PHP5.2.x, and so on) and I don't know do that using > yum. What I do until know is downloading the packages from rpmfind.net and > when they request me some dependencie

Re: [CentOS] rpm

2009-07-24 Thread John Doe
From: David Leon > On Fri, Jul 24, 2009 at 9:03 AM, luc...@lastdot.org wrote: > > Yep, add Dag's repo. Latest amavisd-new is there, with all the dependencies: > > http://dag.wieers.com/rpm/ > hi, thanks, but where should I add that repo and how can I use it? If you go to the url, there is "Instal

Re: [CentOS] UPDATE over REPO

2009-07-24 Thread Kwan Lowe
2009/7/24 Alberto García Gómez : > OK, maybe I don't write the right word, what I really need is an upgrade > (eg.: from PHP5.1.x to PHP5.2.x, and so on) and I don't know do that using > yum. What I do until know is downloading the packages from rpmfind.net and > when they request me some dependenc

Re: [CentOS] rpm

2009-07-24 Thread Tom Brown
> > hi, thanks, but where should I add that repo and how can I use it? > > dont top post google yum ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] About NIDS software or hardware.

2009-07-24 Thread Semih Gokalp
Thanks for your reply but I have already know this is not CentOS question. I only wanted to know your suggestions and advice. Sorry my question.Everbody can ignore my question. 2009/7/24 John R Pierce : > Semih Gokalp wrote: >> >> Do you know which hardware can i use for NIDS ? I am waitin

Re: [CentOS] apache redirect rule

2009-07-24 Thread David Hláčik
Hi Jacob, thank you very much for your improvement! I did so. Best Regards, David Hlacik On Thu, Jul 23, 2009 at 5:46 PM, wrote: > put your check for extensions.polarion.com before the rule for > community.polarion.com and end it with a [L] on the rewriterule. > > -Original Message- >

Re: [CentOS] Self signed certs, openssl dovecot

2009-07-24 Thread Ned Slider
Bob Hoffman wrote: > So, at wits end. Have gone back to plain text for pop3. > > I set up the ssl as per instructions but I always get a 'chain' error first > time trying to receive mail with my mail client. > > Comes down I believe to the need to get a CA for dovecot's pem files or I > will alwa

Re: [CentOS] rpm

2009-07-24 Thread Ned Slider
luc...@lastdot.org wrote: > On Fri, Jul 24, 2009 at 2:52 PM, David Leon wrote: >> Hi folks >> >> I'm trying to install amavisd-new on Centos 5.3. There is a lot of >> failed dependencies errors when I try to install it. My question is, >> there is a way to automatically get all the rpm dependencies

Re: [CentOS] Self signed certs, openssl dovecot

2009-07-24 Thread Paul Heinlein
On Fri, 24 Jul 2009, Bob Hoffman wrote: > So, at wits end. Have gone back to plain text for pop3. > > I set up the ssl as per instructions but I always get a 'chain' > error first time trying to receive mail with my mail client. > > Comes down I believe to the need to get a CA for dovecot's pem f

Re: [CentOS] bizarre firefox/X11 problem on centos 5.3

2009-07-24 Thread fred smith
On Thu, Jul 23, 2009 at 05:05:36PM -0700, Akemi Yagi wrote: > On Thu, Jul 23, 2009 at 4:51 PM, fred > smith wrote: > > I set up a Centos5 box at work a week or two ago. Today I had this > > bizarre, repeatable problem: > > > > fire up firefox 3.5.1, browse to centos.org, go to the wiki, click the >

Re: [CentOS] SSH attacks from china

2009-07-24 Thread Miguel Medalha
>> Using a non default port is not the solution, because history has learned >> that security by obscurity never worked. >> > > It's not "security by obscurity", moving the default port is just to not > see all that garbage in the log files - as the automated scripts don't > check for ss

Re: [CentOS] Dependency problems

2009-07-24 Thread Sam Drinkard
Filipe Brandenburger wrote: > Hi, > > On Fri, Jul 24, 2009 at 10:07, Sam Drinkard wrote: > >> ---> Package httpd.x86_64 0:2.2.3-22.el5.centos.2 set to be updated >> ---> Package httpd-devel.x86_64 0:2.2.3-22.el5.centos.2 set to be updated >> [...] >> Error: Missing Dependency: httpd = 2.2.3-22.e

Re: [CentOS] A little more info

2009-07-24 Thread Kai Schaetzl
Sam Drinkard wrote on Fri, 24 Jul 2009 10:18:22 -0400: > I forgot You forgot to post that in the thread it belongs to. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com ___ CentOS mailing lis

Re: [CentOS] Drupal installation

2009-07-24 Thread David G . Miller
Timothy Murphy writes: > > Does anyone have experience of drupal installation under CentoOS-5.3 > with MySQL database preferably accessed through phpMyAdmin. > > I want to install drupal more or less as an experiment, > and I'm looking for a 1- or 2-page document > that just lists precisely wh

Re: [CentOS] Self signed certs, openssl dovecot

2009-07-24 Thread Bob Hoffman
> Did you try any of the advice you received when you asked a month ago? > > http://lists.centos.org/pipermail/centos/2009-June/078273.html > That was for the error with outlook, this is more about how to add that middle chain with dovecot to avoid the issue. None of those others will work wit

Re: [CentOS] Self signed certs, openssl dovecot

2009-07-24 Thread Bob Hoffman
> > Comes down I believe to the need to get a CA for dovecot's > pem files > > or I will always get an error. > > You've got to tell your mail client to trust either the > dovecot certificate or the CA cert that signed it. > > The procedure for doing so varies with your mail client. The >

Re: [CentOS] Self signed certs, openssl dovecot

2009-07-24 Thread Paul Heinlein
On Fri, 24 Jul 2009, Bob Hoffman wrote: >>> Comes down I believe to the need to get a CA for dovecot's pem >>> files or I will always get an error. >> >> You've got to tell your mail client to trust either the dovecot >> certificate or the CA cert that signed it. >> >> The procedure for doing so

Re: [CentOS] Self signed certs, openssl dovecot

2009-07-24 Thread Ned Slider
Bob Hoffman wrote: > >> Did you try any of the advice you received when you asked a month ago? >> >> http://lists.centos.org/pipermail/centos/2009-June/078273.html >> > > That was for the error with outlook, this is more about how to add that > middle chain with dovecot to avoid the issue. > Non

[CentOS] install DVD mounted -noexec by default == bad interpreter permission denied

2009-07-24 Thread Dave
Installing matlab on Centos5. command I typed: /media/MATHWORKS_R2009A/install & Error message I received: [1] 10759 [r...@taro matlab]# bash: /media/MATHWORKS_R2009A/install: /bin/sh: bad interpreter: Permission denied Google found no hits with this precise error message, but several similar h

Re: [CentOS] RAID problem when building new computer

2009-07-24 Thread fred smith
On Thu, Jul 23, 2009 at 12:19:20PM -0400, Bob Hoffman wrote: > > > > > > Hi all! > > > > I'm building up a new box and plan to use Centos 5 on it. > > > > i've got a pair of SATA 320 GB drives to make a RAID1. > > > > I'm trying to follow the "howto" on the centos wiki for > > making a "par

[CentOS] Updating kernel driver module questions

2009-07-24 Thread Robert Heller
I am running CentOS 4.7, presently on an older box (PIII slot 1 processor @ 500mhz with 384meg of RAM, using SCSI disks with an AHA-2940 host controller). I have built a new box: AMH Semporon 2. GHZ, 2gig of RAM. I put in a AHA-29160 host controller (uses same driver as the AHA-2940). The mother