[CentOS] Running SSH on a different port

2009-10-24 Thread ML
HI All, With my new firewall in place, it has opened my eyes to how much traffic gets blocked in a single day and also what are the most active rules. I get *a lot* of requests for port 22. How does one switch ssh ports? What is a good port to use? What ramifications does it have when I nee

[CentOS] Turning off X-Windows

2009-10-24 Thread ML
Hi All, How does one best turn of X-Windows? I dont need it, ssh works just fine for me. I seem to recall it was complicated and since I know enough to do my stuf and not well versed yet in fixing things I break, I dont want to blow this up. Best, -ML _

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Craig White
On Sat, 2009-10-24 at 05:56 -0700, ML wrote: > HI All, > > With my new firewall in place, it has opened my eyes to how much > traffic gets blocked in a single day and also what are the most active > rules. I get *a lot* of requests for port 22. > > How does one switch ssh ports? What is a goo

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Miguel Medalha
> How does one switch ssh ports? What is a good port to use? What > ramifications does it have when I need to ssh in? Is it as simple as > ssh u...@hots:port? > In /etc/ssh/sshd_config replace "port 22" with "port 1024) you like>" Then configure your ssh clients accordingly. I was havin

Re: [CentOS] 5.4 DVD

2009-10-24 Thread Robert Nichols
David Suhendrik wrote: > Still waiting for DVD 5.4 64 bit > Have you been looking, or just expecting a DVD to show up in your mailbox?? Go to the CentOS homepage, http://www.centos.org/ . At the top of the page you'll see CentOS Download Information. Click on "CentOS-5 ISOs", then on "x86_64".

Re: [CentOS] Turning off X-Windows

2009-10-24 Thread Timo Schoeler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 thus ML spake: > Hi All, > > How does one best turn of X-Windows? I dont need it, ssh works just > fine for me. > > I seem to recall it was complicated and since I know enough to do my > stuf and not well versed yet in fixing things I break, I do

Re: [CentOS] Turning off X-Windows

2009-10-24 Thread Miguel Medalha
> How does one best turn of X-Windows? I dont need it, ssh works just > fine for me. > Just boot the computer into runlevel 3. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Oliver Ransom
On 24/10/2009, at 11:26 PM, ML wrote: > HI All, > > With my new firewall in place, it has opened my eyes to how much > traffic gets blocked in a single day and also what are the most active > rules. I get *a lot* of requests for port 22. Look in /etc/ssh/sshd_config You can specify the port the

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Oliver Ransom
On 24/10/2009, at 11:40 PM, Miguel Medalha wrote: > >> How does one switch ssh ports? What is a good port to use? What >> ramifications does it have when I need to ssh in? Is it as simple as >> ssh u...@hots:port? >> > > In /etc/ssh/sshd_config replace "port 22" with "port port > (> 1024) you li

Re: [CentOS] 5.4 DVD

2009-10-24 Thread Majian
There has something useful for you: The CentOS 5.4 ISO DVD path is: DVD: http://mirror.centos.org/centos/5.4/isos/i386/CentOS-5.4-i386-bin-DVD.torrent http://mirror.centos.org/centos/5.4/isos/x86_64/CentOS-5.4-x86_64-bin-DVD.torrent Hope it would help you~~~ On Fri, Oct 23, 2009 at 11:07 PM

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Stephen Wong
Change the port statement in /etc/ssh/sshd_config and restart sshd Alternatively, you can make a port direction on your firewall, say, from TCP port 1234 to internal IP 22. Then, you don't need to change the server config. My 2 cents. Stephen WONG @ Hong Kong On Sat, Oct 24, 2009 at 9:23 PM,

Re: [CentOS] 5.4 DVD

2009-10-24 Thread mark
David Suhendrik wrote: > Still waiting for DVD 5.4 64 bit There's a couple of mirrors that have it. I looked through several .edu site - I think RIT had one. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinf

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Ned Slider
ML wrote: > HI All, > > With my new firewall in place, it has opened my eyes to how much > traffic gets blocked in a single day and also what are the most active > rules. I get *a lot* of requests for port 22. > > How does one switch ssh ports? What is a good port to use? What > ramificatio

Re: [CentOS] Turning off X-Windows

2009-10-24 Thread mark
ML wrote: > Hi All, > > How does one best turn of X-Windows? I dont need it, ssh works just > fine for me. Not sure what you mean. You could edit /etc/inittab, and have your system run at runlevel 3, rather than 5. Or you could uninstall Xorg. mark ___

Re: [CentOS] Upgrading CentOS 5.3 from local mirror

2009-10-24 Thread Majian
Do you mean upgrade the CentOS from the ISO? On Fri, Oct 23, 2009 at 5:24 AM, Jonathan Moore wrote: > Good afternoon folks. > > Earlier today, I started upgrading a few of our servers to 5.4 based > on input from the list. So far, all has gone well. I have about 6 > servers (not very many, bu

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread ML
>> How does one switch ssh ports? What is a good port to use? What >> ramifications does it have when I need to ssh in? Is it as simple as >> ssh u...@hots:port? >> > > In /etc/ssh/sshd_config replace "port 22" with "port port > (> 1024) you like>" > > Then configure your ssh clients accordingly.

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread ML
> Pretty much everything you need to know about SSH is on the Wiki here: > > http://wiki.centos.org/HowTos/Network/SecuringSSH > > Why don't people use the Wiki? These same topics come up over and over > again, and no one ever refers to the resources available on the Wiki? I dont think it is well

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread mark
Stephen Wong wrote: > Change the port statement in /etc/ssh/sshd_config and restart sshd > > Alternatively, you can make a port direction on your firewall, say, > from TCP port 1234 to internal IP 22. Then, you don't need to change > the server config. One thing to consider: an attacker with a c

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread mark
One more thing - you might want to look at authfail. After a number of attempts to log in, it will add firewall rules to block that IP address. mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread ML
Ned, > Pretty much everything you need to know about SSH is on the Wiki here: > > http://wiki.centos.org/HowTos/Network/SecuringSSH > > Why don't people use the Wiki? These same topics come up over and over > again, and no one ever refers to the resources available on the Wiki? Thanks for the lin

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread ML
Mark, > One more thing - you might want to look at authfail. After a number > of attempts > to log in, it will add firewall rules to block that IP address. Thanks for the advice! I will google it. -ML ___ CentOS mailing list CentOS@centos.org http:/

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread mark
ML wrote: >>> How does one switch ssh ports? What is a good port to use? What >>> ramifications does it have when I need to ssh in? Is it as simple as >>> ssh u...@hots:port? >>> >> In /etc/ssh/sshd_config replace "port 22" with "port > port >> (> 1024) you like>" >> >> Then configure your ssh clie

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Oliver Ransom
On 25/10/2009, at 12:10 AM, ML wrote: > >>> How does one switch ssh ports? What is a good port to use? What >>> ramifications does it have when I need to ssh in? Is it as simple as >>> ssh u...@hots:port? >>> >> >> In /etc/ssh/sshd_config replace "port 22" with "port > port >> (> 1024) you like>"

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread ML
>>> In /etc/ssh/sshd_config replace "port 22" with "port >> port >>> (> 1024) you like>" >>> >>> Then configure your ssh clients accordingly. >> >> So I added Port 2977 Under Host * >> >> So I have: >> Host * >> Port 2977 >> >> I rebooted and I get a connection refused now when I try to connect. >

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Kevin Krieser
As mentioned previously, requiring certificates, and not allowing interactive logins, is safest. But even if you decide to allow interactive logins, there are things you SHOULD do. Disable admin/root login. Update sshd so that only named users can login via SSH, all other users that might

[CentOS] FYI: centos 5.4 and xen not working

2009-10-24 Thread Farkas Levente
hi, i just let you know that xen not working properly in centos 5.4 there are upstream fix for this, but for those who use xen it's better to wait until centos release updates for 5.4 otherwise xen's domU won't start. -- Levente "Si vis pacem para bellum!"

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Tait Clarridge
On Sat, 2009-10-24 at 07:17 -0700, ML wrote: > >>> In /etc/ssh/sshd_config replace "port 22" with "port >>> port > >>> (> 1024) you like>" > >>> > >>> Then configure your ssh clients accordingly. > >> > >> So I added Port 2977 Under Host * > >> > >> So I have: > >> Host * > >> Port 2977 > >> > >>

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Tait Clarridge
> > > > I then did: service sshd restart > > > > > > Have you restarted the ssh daemon after changing the config file? > Ooops, I really need to not post to the mailing list when I am tired. My second question still stands, Also, have you run nmap on your host to verify that the port is

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread ML
>>> I then did: service sshd restart >>> >>> >> > > >> Have you restarted the ssh daemon after changing the config file? >> > > Ooops, I really need to not post to the mailing list when I am tired. > > My second question still stands, Also, have you run nmap on your > host to > verify that the

Re: [CentOS] FYI: centos 5.4 and xen not working

2009-10-24 Thread Gordon Messmer
On 10/24/2009 07:43 AM, Farkas Levente wrote: > i just let you know that xen not working properly in centos 5.4 there > are upstream fix for this, but for those who use xen it's better to wait > until centos release updates for 5.4 otherwise xen's domU won't start. > I think I saw the issue yo

Re: [CentOS] FYI: centos 5.4 and xen not working

2009-10-24 Thread Farkas Levente
On 10/24/2009 06:55 PM, Gordon Messmer wrote: > On 10/24/2009 07:43 AM, Farkas Levente wrote: >> i just let you know that xen not working properly in centos 5.4 there >> are upstream fix for this, but for those who use xen it's better to wait >> until centos release updates for 5.4 otherwise xen's

Re: [CentOS] FYI: centos 5.4 and xen not working

2009-10-24 Thread Alan Sparks
Gordon Messmer wrote: > On 10/24/2009 07:43 AM, Farkas Levente wrote: > >> i just let you know that xen not working properly in centos 5.4 there >> are upstream fix for this, but for those who use xen it's better to wait >> until centos release updates for 5.4 otherwise xen's domU won't start. >

[CentOS] kvm package difference - v36 via yum, v83 via DVD

2009-10-24 Thread Brian Schueler
Hi! As far as I can see there is no kvm in the base repository but the older version 36 in CentOS-Extras. Version 83 that belongs to 5.4 is only found on the install DVD and CD-Set. So it's different when installing kvm later with yum which results in kvm-36 than choosing 'Virtualization' on DVD i

Re: [CentOS] kvm package difference - v36 via yum, v83 via DVD

2009-10-24 Thread Akemi Yagi
On Sat, Oct 24, 2009 at 11:22 AM, Brian Schueler wrote: > Hi! > > As far as I can see there is no kvm in the base repository but > the older version 36 in CentOS-Extras. Version 83 that belongs > to 5.4 is only found on the install DVD and CD-Set. > So it's different when installing kvm later with

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Philip Gwyn
On 24-Oct-2009 Oliver Ransom wrote: > I don't think there are any ramifications/disadvantages of running the > SSH daemon on a non standard port. Running sshd on a non-standard port is highly useful ; I always have 2 seperate sshd instances. One on 22 and one on 222. This way, if I muck up a

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Gilbert Sebenste
On Sat, 24 Oct 2009, Philip Gwyn wrote: > On 24-Oct-2009 Oliver Ransom wrote: >> I don't think there are any ramifications/disadvantages of running the >> SSH daemon on a non standard port. Unless I want to sftp. It always looks for port 22; if I do: sftp SERVER It will deny me if SERVER is any

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Benjamin Donnachie
2009/10/24 Gilbert Sebenste : > It will deny me if SERVER is anything but port 22. Doing a man sftp yields > no help on how to solve that. Any ideas? >From memory, try -o Port=222 Ben ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mai

[CentOS] Upgrading CentOS 5.3 to 5.4 errors

2009-10-24 Thread Rohan Gilchrist
Hello, I thought I'd wait a little while before upgrading to 5.4, but am running into the following errors: -> Finished Dependency Resolution lvm2-2.02.46-8.el5.i386 from base has depsolving problems --> Missing Dependency: device-mapper >= 1.02.32-1 is needed by package lvm2-2.02.46-8.el5.i3

Re: [CentOS] Running SSH on a different port

2009-10-24 Thread Gilbert Sebenste
On Sat, 24 Oct 2009, Benjamin Donnachie wrote: > 2009/10/24 Gilbert Sebenste : >> It will deny me if SERVER is anything but port 22. Doing a man sftp yields >> no help on how to solve that. Any ideas? > >> From memory, try -o Port=222 > > Ben Thanks to all who responded. That's what I was looking

Re: [CentOS] Upgrading CentOS 5.3 from local mirror

2009-10-24 Thread Gordon Messmer
On 10/23/2009 06:10 PM, Jonathan Moore wrote: > > What I was really looking for was a little more detail on exactly what > I *must* have from the mirror to successfully upgrade. > If you want to download the minimum number of packages, the easiest answer is: use a proxy server. export http_p

Re: [CentOS] Upgrading CentOS 5.3 to 5.4 errors

2009-10-24 Thread Robert
Rohan Gilchrist wrote: > Hello, > > I thought I'd wait a little while before upgrading to 5.4, but am > running into the following errors: > > -> Finished Dependency Resolution > lvm2-2.02.46-8.el5.i386 from base has depsolving problems > --> Missing Dependency: device-mapper >= 1.02.32-1 is n

Re: [CentOS] Upgrading CentOS 5.3 to 5.4 errors

2009-10-24 Thread John R Pierce
Robert wrote: > 1. Did you follow the procedure in the 5.4 Release Notes (repeated in > the release announcement)? See, this is a problem I shouldn't have to know about special procedures in release notes to be able to do `yum update` at any arbitrary time what about users who aren't