Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Michael Schumacher
> Are you a dog lover ? I like dogs too. They usually bark at strangers. > Paul. PLONK see also http://en.wikipedia.org/wiki/Plonk_%28Usenet%29 best regards --- Michael ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/li

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread wwp
Hello R, On Tue, 30 Aug 2011 21:46:53 -0700 "R - elists" wrote: > > we need to filter out various peoples posts on this list > > would some kind soul(s) please direct us in locating the best email list > reading programs w/ the best features to read the centos and other lists. > > the CentOS

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Luigi Rosa
m.r...@5-cent.us said the following on 25/08/11 18:33: > Anyone have any idea how soon RHEL and CentOS will be releasing the patch > package? Apparently Apache just released a patch: https://www.apache.org/dist/httpd/Announcement2.2.html Source: http://nakedsecurity.sophos.com/2011/08/31/apache-2

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-31 Thread Alexander Dalloz
Am 31.08.2011 01:58, schrieb Always Learning: > I also notice our servers successfully contacting official time > references centres which are not those sites trying to connect to us. I > notice too the installed time software is listening on every available > IP. I can not identity any options in

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Tru Huynh
On Wed, Aug 31, 2011 at 04:43:46AM +0100, Always Learning wrote: > That you for the useful enlightenment. I was unaware it was an OpenVZ. I > thought is was XEN on Ubuntu. Next time, try posting more usefull information stating that you are indeed running CentOS on a CentOS support mailing list an

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Tom H
On Tue, Aug 30, 2011 at 10:24 PM, Always Learning wrote: > > On a VPS I wanted to add to IP tables:- > > iptables -A -p tcp -m string --algo bm --string 'login' -j DROP > > I got: > >        iptables: Unknown error 18446744073709551615 > > uname -a =  2.6.35.4 #2  (don't know how this got ins

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Karanbir Singh
On 08/30/2011 11:33 PM, Thomas Harold wrote: > Someday, perhaps we'll end up back on an authenticated version of NNTP, > with support for bbcode, images, and the front end reader of your choice... Thats quite a good idea - and something that we explored at length when looking for a replacement so

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Timo Schoeler
thus Karanbir Singh spake: > On 08/30/2011 11:33 PM, Thomas Harold wrote: >> Someday, perhaps we'll end up back on an authenticated version of NNTP, >> with support for bbcode, images, and the front end reader of your choice... > > Thats quite a good idea - and something that we explored at length

[CentOS] xendomains not starting at boot

2011-08-31 Thread Theo Band
On one of my xen hosts a virtual machine does not start at boot. I can see that xendomains gives an error: service xendomains start Starting auto Xen domains: fszeleNo handlers could be found for logger "xend" Error: Disk isn't accessible No handlers could be found for logger "xend" Error: Disk is

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Walter Haidinger
Am 31.08.2011 04:24, schrieb Always Learning: > > On a VPS I wanted to add to IP tables:- > iptables -A -p tcp -m string --algo bm --string 'login' -j DROP > > I got: > iptables: Unknown error 18446744073709551615 > > uname -a = 2.6.35.4 #2 (don't know how this got installed) > lsmod

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 10:13 +0200, Alexander Dalloz wrote: > ntpd shipping with CentOS 6 has an option "-I iface"; see "man 8 ntpd". > Edit "/etc/sysconfig/ntpd" accordingly. ntpd shipping with CentOS 5 does > not have that and thus always binds to all available interfaces. That explains why I c

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-31 Thread Lamar Owen
On Tuesday, August 30, 2011 08:15:28 PM brian wrote: >...to your rule list will allow the specified net address(es) to contact > you on port 123. the above, of course, assumes your > input port is eth0 (change that, if different on your system), and that the > NTP server uses TCP protocol (

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Lamar Owen
On Tuesday, August 30, 2011 10:24:41 PM Always Learning wrote: > On a VPS I wanted to add to IP tables:- > iptables -A -p tcp -m string --algo bm --string 'login' -j DROP > iptables: Unknown error 18446744073709551615 > uname -a = 2.6.35.4 #2 (don't know how this got installed) This

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 12:46:53 AM R - elists wrote: > we need to filter out various peoples posts on this list > would some kind soul(s) please direct us in locating the best email list > reading programs w/ the best features to read the centos and other lists. While I use Kmail (which ca

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 09:01 -0400, Lamar Owen wrote: > On Tuesday, August 30, 2011 10:24:41 PM Always Learning wrote: > > uname -a = 2.6.35.4 #2 (don't know how this got installed) > This is not a CentOS-provided kernel; as has been said elsewhere > in the thread, this is likely an OpenVZ ke

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread m . roth
Lamar Owen wrote: > On Wednesday, August 31, 2011 12:46:53 AM R - elists wrote: > While I use Kmail (which can do very powerful filtering based on a number So how is kmail these days? I jumped ship to t-bird about '03 or '05, when I got tired of kmail munging my mbox (I tend to have thousands of

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 09:25 -0400, m.r...@5-cent.us wrote: > So how is kmail these days? I jumped ship to t-bird about '03 or '05, when > I got tired of kmail munging my mbox (I tend to have thousands of emails > stored there, before I get around to moving them to a dated folder...). Why not sto

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Karanbir Singh
On 08/31/2011 12:10 PM, Walter Haidinger wrote: > PS: To install iptables from source is pretty straightforward: > get the tarball from netfilter.org, unpack and run: > ./configure --prefix=/opt/iptables&& make&& make install And at that point you lose. All management capability or the

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Karanbir Singh
Hi, On 08/31/2011 10:56 AM, Timo Schoeler wrote: > Just released: > https://www.apache.org/dist/httpd/Announcement2.2.html thanks. I guess we should wait on a fix from upstream, make sure its tested etc. If there is interest in doing a local fix/build for c4/5/6 testing repo's, please submit a

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 09:25:06 AM m.r...@5-cent.us wrote: > Lamar Owen wrote: > > On Wednesday, August 31, 2011 12:46:53 AM R - elists wrote: > > > While I use Kmail (which can do very powerful filtering based on a number > > So how is kmail these days? Kmail beats the Dickens out of me

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 09:34:48 AM Always Learning wrote: > Why not store them in a correspondence database ? Kmail is working towards full Akonadi integration, and the full 'semantic desktop' paradigm is (or will be) available. So it's already being done, to a degree, and in a very f

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 09:18:26 AM Always Learning wrote: > A very helpful and knowledgeable poster, Walter Haidinger, in his email > dated Wed, 31 Aug 2011 13:10:16 +0200 (12:10 BST), gave what appears to > be an ideal solution. > * get a more recent iptables from netfilter.org It's

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Mike
Perhaps the most important point here is that the script kiddies and/or bots usually make sure the target string, 'login' in your example is *not* contained within a single packet. You can verify this with wireshark. In any case just be aware that your solution will likely not have the desired

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 09:54 -0400, Lamar Owen wrote: > It's less than ideal to install anything from source, as Karanbir > has so correctly pointed out downthread. > > Sometimes it is necessary; but it is never ideal, for the reasons KB > stated The service provider has suggested it needs the x

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
Hi Mike, > Perhaps the most important point here is that the script kiddies and/or > bots usually make sure the target string, 'login' in your example is *not* > contained within a single packet. You can verify this with wireshark. In > any case just be aware that your solution will likely n

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Les Mikesell
On Tue, Aug 30, 2011 at 11:46 PM, R - elists wrote: > > we need to filter out various peoples posts on this list > > would some kind soul(s) please direct us in locating the best email list > reading programs w/ the best features to read the centos and other lists. > > the CentOS list signal/noise

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 7:22 AM, Always Learning wrote: > In the current 4,000 to 6,000 daily hits, the lunatic uses > > login.php > contact.php > forgotten_password.php your 'lunatic' aka 'hacker' is undoubtably a blind script ('bot') running on distributed previously hacked hosts, and pro

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 08:07 -0700, John R Pierce wrote: > On 08/31/11 7:22 AM, Always Learning wrote: > > In the current 4,000 to 6,000 daily hits, the lunatic uses > > > > login.php > > contact.php > > forgotten_password.php > > your 'lunatic' aka 'hacker' is undoubtably a blind scr

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread R - elists
Christopher, > > It's not an email program but I think it has the best > filtering capabilities of all - the brain. > umm, yeah, exactly, i want to use my brain to program certain peoples posts from never reaching my eyeballs arent they called threaded email readers? i really didnt find m

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread m . roth
John R Pierce wrote: > On 08/31/11 7:22 AM, Always Learning wrote: >> In the current 4,000 to 6,000 daily hits, the lunatic uses >> >> login.php >> contact.php >> forgotten_password.php > > your 'lunatic' aka 'hacker' is undoubtably a blind script ('bot') > running on distributed pre

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Les Mikesell
On Wed, Aug 31, 2011 at 4:32 AM, Karanbir Singh wrote: > On 08/30/2011 11:33 PM, Thomas Harold wrote: >> Someday, perhaps we'll end up back on an authenticated version of NNTP, >> with support for bbcode, images, and the front end reader of your choice... > > Thats quite a good idea - and somethin

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 11:16 -0400, m.r...@5-cent.us wrote: > Maybe not, for a small website. However, let me re-suggest fail2ban, with > three lines from one of our config files: > failregex = -.*"GET .*(php|pma|PMA|p/m/a|db|sql|admin).*/(config/c > onfig\.inc|main)\.php.*".*404.* >

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Bowie Bailey
On 8/31/2011 11:22 AM, Always Learning wrote: > On Wed, 2011-08-31 at 11:16 -0400, m.r...@5-cent.us wrote: > >> Maybe not, for a small website. However, let me re-suggest fail2ban, with >> three lines from one of our config files: >> failregex = -.*"GET .*(php|pma|PMA|p/m/a|db|sql|admin).*/(config

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 11:29 -0400, Bowie Bailey wrote: > I assume this is an Apache server. Have you looked at mod_security > (http://www.modsecurity.org/)? It is available from the epel > repository. There is a bit of a learning curve to get it running, but > it protects against a ton of hack

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread m . roth
Always Learning wrote: > > On Wed, 2011-08-31 at 11:16 -0400, m.r...@5-cent.us wrote: > >> Maybe not, for a small website. However, let me re-suggest fail2ban, >> with >> three lines from one of our config files: >> failregex = -.*"GET >> .*(php|pma|PMA|p/m/a|db|sql|admin).*/(config/c >> onf

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Les Mikesell
On Wed, Aug 31, 2011 at 10:15 AM, R - elists wrote: > > sometimes people on the list just get beligerant, drunk, and/or stupid and > need to be filtered. But filters tend to be stupid as well. And once you are involved in a conversation you should have a certain responsibility to follow it to t

Re: [CentOS] new memory not getting regonized

2011-08-31 Thread Pasi Kärkkäinen
On Tue, Aug 30, 2011 at 03:30:46PM +0200, Dennis Jacobfeuerborn wrote: > On 08/27/2011 09:12 PM, sylvan.dcu...@gmail.com wrote: > > Dear Dennis, > > > > Thanks a lot for the wise reply.. really did boost my knowledge.. > > honestly was unware of the fact that dom0 is just like another VM ... > > An

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 8:22 AM, Always Learning wrote: > Looking at your example seems to suggest Fail2Ban is an 'after the > event' response. I would like to implement 'before the event' filtering > which prevents, even on the first detected hacking attempt, anything > reaching HTTPD. so you want another pi

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread R - elists
> > But filters tend to be stupid as well. And once you are involved in > a conversation you should have a certain responsibility to > follow it to the bitter end. Filters mostly don't understand > that (but gmail will push a reply to your own message into > the 'important' view). > i h

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Bowie Bailey
On 8/31/2011 11:32 AM, Always Learning wrote: > On Wed, 2011-08-31 at 11:29 -0400, Bowie Bailey wrote: > >> I assume this is an Apache server. Have you looked at mod_security >> (http://www.modsecurity.org/)? It is available from the epel >> repository. There is a bit of a learning curve to get

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 08:41 -0700, John R Pierce wrote: > On 08/31/11 8:22 AM, Always Learning wrote: > > Looking at your example seems to suggest Fail2Ban is an 'after the > > event' response. I would like to implement 'before the event' filtering > > which prevents, even on the first detected h

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 11:51 -0400, Bowie Bailey wrote: > On 8/31/2011 11:32 AM, Always Learning wrote: > > On Wed, 2011-08-31 at 11:29 -0400, Bowie Bailey wrote: > > > >> I assume this is an Apache server. Have you looked at mod_security > >> (http://www.modsecurity.org/)? It is available from t

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 9:00 AM, Always Learning wrote: > No I do not want "another piece of software to parse the http protocol > and analyze the traffic". > > IT Tables, in which I have great confidence and trust, can do it. iptables will filter on packet headers and such at layer 3, it can't and won't an

[CentOS] Error installing latest CentOS kernel from %post section of kickstart

2011-08-31 Thread Alfred von Campe
I'm running the command "yum -y update" from a script called from the the post section of my kickstart config file, and I get the following error: Installing : kernel-2.6.32-71.29.1.el6.i686 185/378 grubby fatal error: unable to find a suitable template After the i

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
UPDATE: I started with kernel 2.6.35.4 #2 and lsmod | grep ipt = ipt_LOG 5419 2. My service provider produced a replacement kernel 2.6.24-28-xen #1. Now lsmod | grep ipt reveals .. ipt_LOG 8192 2 iptable_filter 4608 1 ip_tables 24232 1 iptable_f

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Les Mikesell
On Wed, Aug 31, 2011 at 10:48 AM, R - elists wrote: > >> But filters tend to be stupid as well.   And once you are involved in >> a conversation you should have a certain responsibility to >> follow it to the bitter end.  Filters mostly don't understand >> that (but gmail will push a reply to your

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 09:11 -0700, John R Pierce wrote: > iptables will filter on packet headers and such at layer 3, it can't > and won't analyze the content of packets, regardless of your emotional > attachments. I believe IP Tables '-m string' will. If you think the custodians and maintainers

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 11:15:20 AM Always Learning wrote: > Dangerous to ignore any background noise - far better to > firmly shut the door and fill-in all known holes. The unknown holes are the ones that will get you. You are also setting yourself up for a denial-of-service vector. Refr

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 9:32 AM, Always Learning wrote: > Wrong. Some can be determined by machine searching for 'known' invalid > URL strings which are not remotely similar to valid web page names. there's an infinite number of invalid strings, and only a finite number of valid ones. anyways, your webserve

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 10:17 -0700, John R Pierce wrote: > anyways, your webserver already filters these out, its not going to > respond to an invalid URL with anything other than '404'. thats its > job. The 'error' is trapped; a PHP routine examines the URL for known (in a list) hacker strings

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Les Mikesell
On Wed, Aug 31, 2011 at 12:17 PM, John R Pierce wrote: >> Wrong. Some can be determined by machine searching for 'known' invalid >> URL strings which are not remotely similar to valid web page names. > > there's an infinite number of invalid strings, and only a finite number > of valid ones. > > a

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 13:01 -0400, Lamar Owen wrote: > On today's Internet you are simply not going to catch 100% of the > attacks, full stop. Rather than being a willing or passive victim to 100% of the attacks, I aim to reduce the penetrability of most of them. Paul. __

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 10:33 AM, Always Learning wrote: > Rather than being a willing or passive victim to 100% of the attacks, I > aim to reduce the penetrability of most of them. an attempted access of a non-vunerability won't be any more effective the millionth time its run than the first time. its the

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 10:38 -0700, John R Pierce wrote: > On 08/31/11 10:33 AM, Always Learning wrote: > > Rather than being a willing or passive victim to 100% of the attacks, I > > aim to reduce the penetrability of most of them. > > an attempted access of a non-vunerability won't be any more e

Re: [CentOS] Question re: CentOS-6.0, KVM, and /dev/sr0

2011-08-31 Thread James B. Byrne
On Tue, August 30, 2011 18:57, psprojectplann...@gmail.com wrote: > On 29/08/2011 15:46, James B. Byrne wrote: >> I am experimenting with KVM and I wish to create a >> virtual machine image in a logical volume. I can >> create the new lv without problem but when I go to >> format its file system

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 01:33:31 PM Always Learning wrote: > Rather than being a willing or passive victim to 100% of the attacks, I > aim to reduce the penetrability of most of them. Getting the last 10% will cost you 90% of your time. ___ CentOS

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 13:55 -0400, Lamar Owen wrote: > On Wednesday, August 31, 2011 01:33:31 PM Always Learning wrote: > > Rather than being a willing or passive victim to 100% of the attacks, I > > aim to reduce the penetrability of most of them. > Getting the last 10% will cost you 90% of you

[CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread Michael D. Berger
On my new CentOS 6, KDE 4, running WireShark I see what appears to be frequent nonsensical DNS queries, for example: "settings-personal.desktop" and "settings-system.desktop". The DNS response is always:"No such name". Do tell! These appear especially when I click on things on the KDE menus. O

Re: [CentOS] Error installing latest CentOS kernel from %post section of kickstart

2011-08-31 Thread Ned Slider
On 31/08/11 17:12, Alfred von Campe wrote: > I'm running the command "yum -y update" from a script called from the the > post section of my kickstart config file, and I get the following error: > > Installing : kernel-2.6.32-71.29.1.el6.i686 > 185/378 > grubby fatal

Re: [CentOS] new memory not getting regonized

2011-08-31 Thread Dennis Jacobfeuerborn
On 08/31/2011 05:38 PM, Pasi Kärkkäinen wrote: > On Tue, Aug 30, 2011 at 03:30:46PM +0200, Dennis Jacobfeuerborn wrote: >> On 08/27/2011 09:12 PM, sylvan.dcu...@gmail.com wrote: >>> Dear Dennis, >>> >>> Thanks a lot for the wise reply.. really did boost my knowledge.. >>> honestly was unware of the

Re: [CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread John Hodrien
On Wed, 31 Aug 2011, Michael D. Berger wrote: > On my new CentOS 6, KDE 4, running WireShark I see what appears > to be frequent nonsensical DNS queries, for example: > "settings-personal.desktop" and "settings-system.desktop". > The DNS response is always:"No such name". Do tell! > These appea

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Louis Lagendijk
On Wed, 2011-08-31 at 19:00 +0100, Always Learning wrote: > On Wed, 2011-08-31 at 13:55 -0400, Lamar Owen wrote: > > > On Wednesday, August 31, 2011 01:33:31 PM Always Learning wrote: > > > Rather than being a willing or passive victim to 100% of the attacks, I > > > aim to reduce the penetrabilit

Re: [CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread Michael D. Berger
On Wed, 31 Aug 2011 20:02:09 +0100, John Hodrien wrote: > On Wed, 31 Aug 2011, Michael D. Berger wrote: > >> On my new CentOS 6, KDE 4, running WireShark I see what appears to be >> frequent nonsensical DNS queries, for example: >> "settings-personal.desktop" and "settings-system.desktop". >> T

[CentOS] dealing with spoofing

2011-08-31 Thread m . roth
Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is using it in the Reply-To: in its spamming efforts. Now, I realize that some mails go out from noreply, but other than that, is there a good reason why a mailserver would not be configured t

Re: [CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread m . roth
Michael D. Berger wrote: > On Wed, 31 Aug 2011 20:02:09 +0100, John Hodrien wrote: >> On Wed, 31 Aug 2011, Michael D. Berger wrote: >> >>> On my new CentOS 6, KDE 4, running WireShark I see what appears to be >>> frequent nonsensical DNS queries, for example: >>> "settings-personal.desktop" and "

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:16 PM, m.r...@5-cent.us wrote: > Here's a thought I just thunk, folks: some scum, apparently in eastern > Europe, has harvested my email, and is using it in the Reply-To: in its > spamming efforts. Now, I realize that some mails go out from noreply, but > other than that, is there

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Stephen Harris
> Here's a thought I just thunk, folks: some scum, apparently in eastern > Europe, has harvested my email, and is using it in the Reply-To: in its > spamming efforts. Now, I realize that some mails go out from noreply, but > other than that, is there a good reason why a mailserver would not be > co

Re: [CentOS] dealing with spoofing

2011-08-31 Thread m . roth
Stephen Harris wrote: >> Here's a thought I just thunk, folks: some scum, apparently in eastern >> Europe, has harvested my email, and is using it in the Reply-To: in its >> spamming efforts. Now, I realize that some mails go out from noreply, >> but >> other than that, is there a good reason why a

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Mailing Lists
Spam filter that'll authorize the sending before receiving? Just a thought to stop the hundreds of emails... On Wed, Aug 31, 2011 at 4:27 PM, wrote: > Stephen Harris wrote: > >> Here's a thought I just thunk, folks: some scum, apparently in eastern > >> Europe, has harvested my email, and is us

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: > Stephen Harris wrote: >>> Here's a thought I just thunk, folks: some scum, apparently in eastern >>> Europe, has harvested my email, and is using it in the Reply-To: in its >>> spamming efforts. Now, I realize that some mails go out from noreply, >>

Re: [CentOS] dealing with spoofing

2011-08-31 Thread m . roth
Josh Miller wrote: > On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: >> Stephen Harris wrote: Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is using it in the Reply-To: in its spamming efforts. Now, I realize that some mail

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: > Josh Miller wrote: >> On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: >>> Stephen Harris wrote: > Here's a thought I just thunk, folks: some scum, apparently in eastern > Europe, has harvested my email, and is using it in the Reply-To: in >>

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:37 PM, Josh Miller wrote: > On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: >> Josh Miller wrote: >>> On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: Stephen Harris wrote: >> Here's a thought I just thunk, folks: some scum, apparently in eastern >> Europe, has harveste

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Stephen Harris
On Wed, Aug 31, 2011 at 04:27:00PM -0400, m.r...@5-cent.us wrote: > Stephen Harris wrote: > > Anyway, the SMTP server should send the delivery failure to the envelope > > address, which may be different to both the From and Reply-To addresses. > > > That would be lovely. Unfortunately, a high perce

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Bowie Bailey
On 8/31/2011 4:37 PM, Josh Miller wrote: > On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: >> You're saying it uses the envelope, not if exists Reply-To, else From? The >> problem I have with that is that a few of them have returned the email, >> with full headers, and I see the *only* reference to

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Mailing Lists
http://www.openspf.org/Introduction - SPF FTW On Wed, Aug 31, 2011 at 4:47 PM, Stephen Harris wrote: > On Wed, Aug 31, 2011 at 04:27:00PM -0400, m.r...@5-cent.us wrote: > > Stephen Harris wrote: > > > Anyway, the SMTP server should send the delivery failure to the > envelope > > > address, which

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:48 PM, Bowie Bailey wrote: > On 8/31/2011 4:37 PM, Josh Miller wrote: >> On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: >>> You're saying it uses the envelope, not if exists Reply-To, else From? The >>> problem I have with that is that a few of them have returned the email, >>> wi

Re: [CentOS] dealing with spoofing

2011-08-31 Thread m . roth
Josh Miller wrote: > On 08/31/2011 01:37 PM, Josh Miller wrote: >> On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: >>> Josh Miller wrote: On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: > Stephen Harris wrote: >>> Here's a thought I just thunk, folks: some scum, apparently in >>> e

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:57 PM, m.r...@5-cent.us wrote: > Josh Miller wrote: >> On 08/31/2011 01:37 PM, Josh Miller wrote: >>> On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: Josh Miller wrote: > On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: >> Stephen Harris wrote: Here's a thought

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Bowie Bailey
On 8/31/2011 4:50 PM, Josh Miller wrote: > On 08/31/2011 01:48 PM, Bowie Bailey wrote: >> On 8/31/2011 4:37 PM, Josh Miller wrote: >>> On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: You're saying it uses the envelope, not if exists Reply-To, else From? The problem I have with that is tha

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 22:08 +0200, Louis Lagendijk wrote: > On Wed, 2011-08-31 at 19:00 +0100, Always Learning wrote: > > On Wed, 2011-08-31 at 13:55 -0400, Lamar Owen wrote: > > > > > On Wednesday, August 31, 2011 01:33:31 PM Always Learning wrote: > > > > Rather than being a willing or passive v

Re: [CentOS] Error installing latest CentOS kernel from %post section of kickstart

2011-08-31 Thread Alfred von Campe
On Aug 31, 2011, at 14:58, Ned Slider wrote: > Yes, it's a known issue: > > https://www.redhat.com/archives/rhelv6-list/2011-January/msg6.html > > https://bugzilla.redhat.com/show_bug.cgi?id=625216 > https://bugzilla.redhat.com/show_bug.cgi?id=657257 Thanks, the workarounds described in the

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 16:16 -0400, m.r...@5-cent.us wrote: > Here's a thought I just thunk, folks: some scum, apparently in eastern > Europe, has harvested my email, and is using it in the Reply-To: in its > spamming efforts. Now, I realize that some mails go out from noreply, but > other than th

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 16:33 -0400, m.r...@5-cent.us wrote: > You're saying it uses the envelope, not if exists Reply-To, else From? The > problem I have with that is that a few of them have returned the email, > with full headers, and I see the *only* reference to my email address is > in the Rep

[CentOS] Unable to run yum update

2011-08-31 Thread david
Folks The system involved is a 32-bit system, installed via the net about a week ago. The command yum update encountered the following diagonstic Error: Package: yaf-1.3.2-1.el6.rf.x86_64 (@rpmforge) Requires: libfixbuf-0.9.0.so.8()(64bit) Removing: libfixbuf-0.9.0-

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 13:50 -0700, Josh Miller wrote: > That is not true as the remote server will present the envelope header > to your mail server upon connection. Surely the FROM is <> ? Paul ___ CentOS mailing list CentOS@centos.org http://list

Re: [CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread Michael D. Berger
On Wed, 31 Aug 2011 16:19:05 -0400, m.roth-x6lchVBUigD1P9xLtpHBDw wrote: > Michael D. Berger wrote: >> On Wed, 31 Aug 2011 20:02:09 +0100, John Hodrien wrote: >>> On Wed, 31 Aug 2011, Michael D. Berger wrote: >>> On my new CentOS 6, KDE 4, running WireShark I see what appears to be frequ

[CentOS] CentOS 6 packages

2011-08-31 Thread CS DBA
Hi all; does anyone know if the following packages are available (via yum) for CentOS 6 and if so which repo they come from? Thanks in advance... kmymoney darktable digiKam -- - Kevin Kempter - Constent State A PostgreSQL Professional

Re: [CentOS] Unable to run yum update

2011-08-31 Thread Jim Perrin
On Wed, Aug 31, 2011 at 4:37 PM, david wrote: > Folks > > The system involved is a 32-bit system... > > If the system really is 32bit, then I'd question how you installed the rpmforge repo, as it's looking for 64bit packages. It's entirely possible that you installed the 64bit rpmforge-release p

Re: [CentOS] CentOS 6 packages

2011-08-31 Thread b.j. mcclure
On Wed, 2011-08-31 at 16:30 -0600, CS DBA wrote: > Hi all; > > does anyone know if the following packages are available (via yum) for > CentOS 6 and if so which repo they come from? > > Thanks in advance... > > > kmymoney > darktable > digiKam > You might try #yum --enablerepo= search kmymone

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Bill Campbell
On Wed, Aug 31, 2011, m.r...@5-cent.us wrote: >Here's a thought I just thunk, folks: some scum, apparently in eastern >Europe, has harvested my email, and is using it in the Reply-To: in its >spamming efforts. Now, I realize that some mails go out from noreply, but >other than that, is there a good

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Craig White
On Aug 31, 2011, at 1:08 PM, Louis Lagendijk wrote: > On Wed, 2011-08-31 at 19:00 +0100, Always Learning wrote: >> On Wed, 2011-08-31 at 13:55 -0400, Lamar Owen wrote: >> >>> On Wednesday, August 31, 2011 01:33:31 PM Always Learning wrote: Rather than being a willing or passive victim to 10

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 16:11 -0700, Craig White wrote: > More to the point, he disables SELinux and then spends hours trying to > improve security. Tell the world the ENTIRE story. Disabled it because things would not run. Said publicly in the last 7 days will find time to learn about Selinux an

Re: [CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread Michael D. Berger
On Wed, 31 Aug 2011 18:22:42 +, Michael D. Berger wrote: > On my new CentOS 6, KDE 4, running WireShark I see what appears to be > frequent nonsensical DNS queries, for example: >"settings-personal.desktop" and "settings-system.desktop". > The DNS response is always:"No such name". Do tel

Re: [CentOS] CentOS 6 packages

2011-08-31 Thread Greg Bailey
On 8/31/2011 3:30 PM, CS DBA wrote: > Hi all; > > does anyone know if the following packages are available (via yum) for > CentOS 6 and if so which repo they come from? > > Thanks in advance... > > > kmymoney > darktable > digiKam > You could try the search page at: http://pkgs.org/search/ I di

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread John R. Dennison
On Thu, Sep 01, 2011 at 12:28:01AM +0100, Always Learning wrote: > > Tell the world the ENTIRE story. That you never listen to anyone but yourself? I'm confident that this is a known fact. > I am trying to filter-out some web page access attepts in IP Tables. > When will you accept that has no

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Tom Lanyon
On 31/08/2011, at 11:07 PM, Karanbir Singh wrote: > On 08/31/2011 10:56 AM, Timo Schoeler wrote: >> Just released: >> https://www.apache.org/dist/httpd/Announcement2.2.html > > thanks. I guess we should wait on a fix from upstream, make sure its > tested etc. If there is interest in doing a local

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 4:28 PM, Always Learning wrote: > Disabled it because things would not run. Always Talking. Never Learning. -- john r pierceN 37, W 122 santa cruz ca mid-left coast ___ CentOS mailing

Re: [CentOS] Centos VPS Kernel 2.6.35.4 & 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 18:06 -0700, John R Pierce wrote: > On 08/31/11 4:28 PM, Always Learning wrote: > > Disabled it because things would not run. > > Always Talking. Never Learning. Always Learning despite the taunts ! Paul. ___ CentOS mailing li

[CentOS] CentOS 6 Partitioning Map/Schema

2011-08-31 Thread Jonathan Vomacka
Good Evening All, I have a question regarding CentOS 6 server partitioning. Now I know there are a lot of different ways to partition the system and different opinions depending on the use of the server. I currently have a quad core intel system running 8GB of RAM with 1 TB hard drive (single).

  1   2   >