[CentOS] Replacing gateway, is it bad idea?

2011-11-30 Thread Fajar Priyanto
Hi all, I have plan to replace my Centos5.7 VM with newer version. The VM works as our network gateway. I want to ask from your experience, will it be a bad decision? My concern is that since the Mac Address of the gateway will change, will it disrupt the network? How fast the Switches can recogni

Re: [CentOS] Replacing gateway, is it bad idea?

2011-11-30 Thread John R Pierce
On 11/30/11 12:59 AM, Fajar Priyanto wrote: > How fast the Switches can recognize the new mac? Any other pitfall? within seconds. or faster. and the client's ARP caches expire nearly as fast. its not the switches you care about as much as the DHCP leases for your clients. if you can copy the

Re: [CentOS] Replacing gateway, is it bad idea?

2011-11-30 Thread Fajar Priyanto
On Wed, Nov 30, 2011 at 5:09 PM, John R Pierce wrote: > On 11/30/11 12:59 AM, Fajar Priyanto wrote: >> How fast the Switches can recognize the new mac? Any other pitfall? > > within seconds.  or faster.  and the client's ARP caches expire nearly > as fast. > > its not the switches you care about a

Re: [CentOS] Replacing gateway, is it bad idea?

2011-11-30 Thread Ljubomir Ljubojevic
Vreme: 11/30/2011 10:13 AM, Fajar Priyanto piše: > On Wed, Nov 30, 2011 at 5:09 PM, John R Pierce wrote: >> On 11/30/11 12:59 AM, Fajar Priyanto wrote: >>> How fast the Switches can recognize the new mac? Any other pitfall? >> >> within seconds. or faster. and the client's ARP caches expire near

Re: [CentOS] hello

2011-11-30 Thread LinuxIsOne
On Tue, Nov 29, 2011 at 1:12 PM, Ljubomir Ljubojevic wrote: I am accustomed to give precise answers and directions and expect people > not to stray one bit so I can > follow you in my mind (professional deformation and defense system), so > as long as you follow what I suggest I will help you lan

[CentOS] Moving server

2011-11-30 Thread Timothy Murphy
I want to move my home server over to a new machine, both running CentOS. (The present server is running CentOS-5.7, the new one 6.0.) I'm thinking of moving things over one at a time, starting with email. I'm running IMAP on the server, with my email in ~/Maildir/ . I'm wondering what exactly I ne

Re: [CentOS] Replacing gateway, is it bad idea?

2011-11-30 Thread Dennis Jacobfeuerborn
On 11/30/2011 10:09 AM, John R Pierce wrote: > On 11/30/11 12:59 AM, Fajar Priyanto wrote: >> How fast the Switches can recognize the new mac? Any other pitfall? > > within seconds. or faster. and the client's ARP caches expire nearly > as fast. > > its not the switches you care about as much as

Re: [CentOS] Moving server

2011-11-30 Thread ken
On 11/30/2011 06:36 AM Timothy Murphy wrote: > I want to move my home server over to a new machine, > both running CentOS. > (The present server is running CentOS-5.7, the new one 6.0.) > I'm thinking of moving things over one at a time, > starting with email. > I'm running IMAP on the server, > wi

Re: [CentOS] Moving server

2011-11-30 Thread Johnny Hughes
On 11/30/2011 06:18 AM, ken wrote: > On 11/30/2011 06:36 AM Timothy Murphy wrote: >> I want to move my home server over to a new machine, >> both running CentOS. >> (The present server is running CentOS-5.7, the new one 6.0.) >> I'm thinking of moving things over one at a time, >> starting with ema

Re: [CentOS] Moving server

2011-11-30 Thread Reindl Harald
Am 30.11.2011 13:45, schrieb Johnny Hughes: > On 11/30/2011 06:18 AM, ken wrote: >> On 11/30/2011 06:36 AM Timothy Murphy wrote: >>> I want to move my home server over to a new machine, >>> both running CentOS. >>> (The present server is running CentOS-5.7, the new one 6.0.) >>> I'm thinking of m

Re: [CentOS] Replacing gateway, is it bad idea?

2011-11-30 Thread Les Mikesell
On Wed, Nov 30, 2011 at 2:59 AM, Fajar Priyanto wrote: > Hi all, > I have plan to replace my Centos5.7 VM with newer version. > The VM works as our network gateway. > > I want to ask from your experience, will it be a bad decision? My > concern is that since the Mac Address of the gateway will cha

Re: [CentOS] Moving server

2011-11-30 Thread Les Mikesell
On Wed, Nov 30, 2011 at 5:36 AM, Timothy Murphy wrote: > I want to move my home server over to a new machine, > both running CentOS. > (The present server is running CentOS-5.7, the new one 6.0.) > I'm thinking of moving things over one at a time, > starting with email. > I'm running IMAP on the s

Re: [CentOS] How to make nodes in my local LAN see each other's names

2011-11-30 Thread Timothy Madden
On 29.11.2011 20:00, Craig White wrote: > > On Nov 29, 2011, at 9:14 AM, Timothy Madden wrote: > >> Hello >> >> Sorry for the (I guess) simple question, but: >> >> I have 7 computers under one 8-port router (D-Link DIR-100, firmware >> v1.13EU) in my network (actually in a sub-network) and they do

Re: [CentOS] Moving server

2011-11-30 Thread Ljubomir Ljubojevic
Vreme: 11/30/2011 01:53 PM, Reindl Harald piše: > but since i upgraded> 20 servers since F9 to F14 and > currently stzart upgrade to F15 via yum this should also > work on CentOS and is mostly more painless than searching > every piece of configuraion on a new machine > > since this is a new machi

[CentOS] CentOS5 w winbind samba integrated w Win2k8 AD

2011-11-30 Thread james
Is anyone out there using CentOS5 integrated correctly with a Windows 2008 domain so that active directory authentication can be used for samba shares? I have tried the newer RPM's from SERNET up to 3.5 and 3.6 without any luck. The usual behavior is wbinfo returns the active directory users an

Re: [CentOS] Moving server

2011-11-30 Thread Johnny Hughes
On 11/30/2011 06:53 AM, Reindl Harald wrote: > > > Am 30.11.2011 13:45, schrieb Johnny Hughes: >> On 11/30/2011 06:18 AM, ken wrote: >>> On 11/30/2011 06:36 AM Timothy Murphy wrote: I want to move my home server over to a new machine, both running CentOS. (The present server is run

Re: [CentOS] megaraid/PERC

2011-11-30 Thread Ross Walker
On Nov 29, 2011, at 3:35 PM, m.r...@5-cent.us wrote: > I've got two drives from a now-dead server, they were RAIDed, a mirror, > I'd assume. I need to see if there's anything on them I need to transfer > to the replacement, so I just shoved them into another Dell server, with a > PERC 5 controller

Re: [CentOS] megaraid/PERC

2011-11-30 Thread m . roth
Ross Walker wrote: > On Nov 29, 2011, at 3:35 PM, m.r...@5-cent.us wrote: > >> I've got two drives from a now-dead server, they were RAIDed, a mirror, >> I'd assume. I need to see if there's anything on them I need to transfer >> to the replacement, so I just shoved them into another Dell server, w

Re: [CentOS] How to make nodes in my local LAN see each other's names

2011-11-30 Thread Lamar Owen
On Wednesday, November 30, 2011 08:54:04 AM Timothy Madden wrote: > Is there a way to get the name service switch to use wins, while the DNS > configuration is handled by DHCP client ? Yes, there is (or at least should be). While I know some will object strongly to doing it this way, here's how

Re: [CentOS] Replacing gateway, is it bad idea?

2011-11-30 Thread Lamar Owen
On Wednesday, November 30, 2011 03:59:58 AM Fajar Priyanto wrote: > How fast the Switches can recognize the new mac? Any other pitfall? There are a couple of things I've run into, mostly in failover situations or in situations where a machine was moved from one switch to another. ARP cache timeo

[CentOS] checking package versions in various releases

2011-11-30 Thread Alan McKay
Hey folks, I am sure there must be an easy way to do this. I am currently running 5.3 and "yum info db4" tells me that they have version 4.3.29. Is that telling me that this is the version in 5.3? Or that this is the latest version in the 5.x stream? If the former, then how do I find out what

Re: [CentOS] checking package versions in various releases

2011-11-30 Thread Fabien Archambault
On 11/30/2011 04:28 PM, Alan McKay wrote: > Hey folks, > > I am sure there must be an easy way to do this. > > I am currently running 5.3 and "yum info db4" tells me that they have > version 4.3.29. > > Is that telling me that this is the version in 5.3? Or that this is > the latest version in the

Re: [CentOS] Replacing gateway, is it bad idea?

2011-11-30 Thread Fajar Priyanto
On Wed, Nov 30, 2011 at 11:22 PM, Lamar Owen wrote: > So be prepared to clear ARP caches (since gratuitous ARP is sometimes seen as > an attack vector, although it works quite well for VMware vMotion, DRS, and > HA) and CAM/TCAM entries if things go awry. > > The RPMforge/repoforge repository in

Re: [CentOS] checking package versions in various releases

2011-11-30 Thread Bowie Bailey
On 11/30/2011 10:31 AM, Fabien Archambault wrote: > On 11/30/2011 04:28 PM, Alan McKay wrote: >> Hey folks, >> >> I am sure there must be an easy way to do this. >> >> I am currently running 5.3 and "yum info db4" tells me that they have >> version 4.3.29. >> >> Is that telling me that this is the

Re: [CentOS] How to make nodes in my local LAN see each other's names

2011-11-30 Thread Les Mikesell
On Wed, Nov 30, 2011 at 7:54 AM, Timothy Madden wrote: > > Thank you all for your answers. > > Indeed, my router (D-Link DIR-100) only does DNS relay and nothing more. Errr, unless I'm looking at the wrong online manual, DNS relay does _exactly_ what you want. You just have to give it a local do

Re: [CentOS] checking package versions in various releases

2011-11-30 Thread Ljubomir Ljubojevic
Vreme: 11/30/2011 04:28 PM, Alan McKay piše: > Is that telling me that this is the version in 5.3? Or that this is > the latest version in the 5.x stream? It's the latest version of the 5.x stream. It looks like it was last changed in 5.5. -- Ljubomir Ljubojevic (Love is in the Air) PL Comput

Re: [CentOS] checking package versions in various releases

2011-11-30 Thread John Broome
On Wed, Nov 30, 2011 at 09:28, Alan McKay wrote: > Hey folks, > > I am sure there must be an easy way to do this. > > I am currently running 5.3 and "yum info db4" tells me that they have > version 4.3.29. > > Is that telling me that this is the version in 5.3?  Or that this is > the latest versio

Re: [CentOS] checking package versions in various releases

2011-11-30 Thread John Broome
On Wed, Nov 30, 2011 at 09:37, Bowie Bailey wrote: > On 11/30/2011 10:31 AM, Fabien Archambault wrote: >> On 11/30/2011 04:28 PM, Alan McKay wrote: >>> Hey folks, >>> >>> I am sure there must be an easy way to do this. >>> >>> I am currently running 5.3 and "yum info db4" tells me that they have >

Re: [CentOS] checking package versions in various releases

2011-11-30 Thread Alan McKay
Normally I would have a VM for this sort of thing but I still do not have a machine available for that and I'm hesitant to put VMWare Server on one of my production machines. I'm new here and have already flagged that I need a box for VMs - hoping to have something in place by this time next week

Re: [CentOS] Replacing gateway, is it bad idea?

2011-11-30 Thread Lamar Owen
On Wednesday, November 30, 2011 10:32:24 AM Fajar Priyanto wrote: > Thanks all for all the insights from your experience. Much appreciated. You're quite welcome. Please let us know how it went. > I will do it during weekend when no users are working. > (this creates the saying about sysadmin: pe

Re: [CentOS] How to make nodes in my local LAN see each other's names

2011-11-30 Thread John Doe
On Wed, Nov 30, 2011 at 7:54 AM, Timothy Madden > Indeed, my router (D-Link DIR-100) only does DNS relay and nothing more. What about in "Network Setting / DHCP Client list & reservation"? It lists "Host Name" entries... http://www.scribd.com/doc/10073475/DIR100-Manual-En Page 26 JD _

Re: [CentOS] checking package versions in various releases

2011-11-30 Thread John Broome
On Wed, Nov 30, 2011 at 09:44, Alan McKay wrote: > Normally I would have a VM for this sort of thing but I still do not > have a machine available for that and I'm hesitant to put VMWare > Server on one of my production machines.   I'm new here and have > already flagged that I need a box for VMs

Re: [CentOS] checking package versions in various releases

2011-11-30 Thread Alan McKay
> I'd be hesitant to put an EOL product on my production machines as well. Let me rephrase that - I am hesitant to put ANY virtualization on these production machines. Mainly because I am very new here and do not know the environment very well yet. -- “Don't eat anything you've ever seen adver

Re: [CentOS] checking package versions in various releases

2011-11-30 Thread Johnny Hughes
On 11/30/2011 10:15 AM, Alan McKay wrote: >> I'd be hesitant to put an EOL product on my production machines as well. > > Let me rephrase that - I am hesitant to put ANY virtualization on > these production machines. Mainly because I am very new here and do > not know the environment very well ye

[CentOS] CentOS-announce Digest, Vol 81, Issue 14

2011-11-30 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ..

[CentOS] duqu

2011-11-30 Thread m . roth
There's an article on slashdot about the Duqu team wiping all their intermediary c&c servers on 20 Oct. Interestingly, the report says that they were all (?) not only linux, but CentOS. There's a suggestion of a zero-day exploit in openssh-4.3, but both the original article, and Kaspersky labs (who

Re: [CentOS] duqu

2011-11-30 Thread Les Mikesell
On Wed, Nov 30, 2011 at 12:05 PM, wrote: > > Are your root passwords strong? I've always wondered why something as complex as sshd doesn't do anything to protect you from the simplest form of attack - like rate-limiting failed attempts. -- Les Mikesell lesmikes...@gmail.com ___

Re: [CentOS] megaraid/PERC

2011-11-30 Thread m . roth
Ross Walker wrote: > On Nov 29, 2011, at 3:35 PM, m.r...@5-cent.us wrote: > >> I've got two drives from a now-dead server, they were RAIDed, a mirror, >> I'd assume. I need to see if there's anything on them I need to transfer >> to the replacement, so I just shoved them into another Dell server, w

Re: [CentOS] duqu

2011-11-30 Thread Johnny Hughes
On 11/30/2011 12:05 PM, m.r...@5-cent.us wrote: > There's an article on slashdot about the Duqu team wiping all their > intermediary c&c servers on 20 Oct. Interestingly, the report says that > they were all (?) not only linux, but CentOS. There's a suggestion of a > zero-day exploit in openssh-4.3

Re: [CentOS] duqu

2011-11-30 Thread m . roth
Les Mikesell wrote: > On Wed, Nov 30, 2011 at 12:05 PM, wrote: >> >> Are your root passwords strong? > > I've always wondered why something as complex as sshd doesn't do > anything to protect you from the simplest form of attack - like > rate-limiting failed attempts. Well, it does take time to

Re: [CentOS] duqu

2011-11-30 Thread Rob Kampen
Les Mikesell wrote: On Wed, Nov 30, 2011 at 12:05 PM, wrote: Are your root passwords strong? I've always wondered why something as complex as sshd doesn't do anything to protect you from the simplest form of attack - like rate-limiting failed attempts. Passwords?? Why? Remote ro

Re: [CentOS] duqu

2011-11-30 Thread Les Mikesell
On Wed, Nov 30, 2011 at 12:42 PM, Rob Kampen wrote: > >> I've always wondered why something as complex as sshd doesn't do >> anything to protect you from the simplest form of attack - like >> rate-limiting failed attempts. >> >> > > Passwords?? Why? Because they are there and enabled by default..

Re: [CentOS] duqu

2011-11-30 Thread Benjamin Donnachie
On 30 Nov 2011, at 18:51, Les Mikesell wrote: > Ssh is mostly about being able to log in. I've always adopted the policy of disabling root logins, making admins use a separate account with public/private key authentication and then requiring them to use su to elevate privileges. Has the advanta

Re: [CentOS] duqu

2011-11-30 Thread John Hinton
On 11/30/2011 1:55 PM, Benjamin Donnachie wrote: > On 30 Nov 2011, at 18:51, Les Mikesell wrote: > >> Ssh is mostly about being able to log in. > I've always adopted the policy of disabling root logins, making admins > use a separate account with public/private key authentication and then > requir

Re: [CentOS] duqu

2011-11-30 Thread Jim Perrin
On Wed, Nov 30, 2011 at 1:01 PM, John Hinton wrote: > > How would you automate daily logins from another server to do something > like rsync the entire /etc directory to a backup system? > Key restrictions in authorized_keys from="10.10.10.10" command="rsync -azv blah/blah/." ssh-key-info-here

Re: [CentOS] duqu

2011-11-30 Thread Les Mikesell
On Wed, Nov 30, 2011 at 1:01 PM, John Hinton wrote: > On 11/30/2011 1:55 PM, Benjamin Donnachie wrote: > >>> Ssh is mostly about being able to log in. >> I've always adopted the policy of disabling root logins, making admins >> use a separate account with public/private key authentication and the

Re: [CentOS] duqu

2011-11-30 Thread Patrick Lists
On 30-11-11 20:01, John Hinton wrote: > On 11/30/2011 1:55 PM, Benjamin Donnachie wrote: >> On 30 Nov 2011, at 18:51, Les Mikesell wrote: >> >>> Ssh is mostly about being able to log in. >> I've always adopted the policy of disabling root logins, making admins >> use a separate account with publi

[CentOS] ipa-server

2011-11-30 Thread Louis Lagendijk
hi I am a happy user of CentOS since Centos 4. I very much appreciate the effort you guys are putting into Centos 6. I am planning to play around with the ipa-server in Centos 6.1. Now I noticed that ipa-server is in the cr-repository. In order to install however the pki-ca and pki-silent packages

Re: [CentOS] duqu

2011-11-30 Thread Rob Kampen
Benjamin Donnachie wrote: On 30 Nov 2011, at 18:51, Les Mikesell wrote: Ssh is mostly about being able to log in. I've always adopted the policy of disabling root logins, making admins use a separate account with public/private key authentication and then requiring them to use su to

Re: [CentOS] megaraid/PERC

2011-11-30 Thread Ross Walker
On Nov 30, 2011, at 1:39 PM, m.r...@5-cent.us wrote: > Ross Walker wrote: >> On Nov 29, 2011, at 3:35 PM, m.r...@5-cent.us wrote: >> >>> I've got two drives from a now-dead server, they were RAIDed, a mirror, >>> I'd assume. I need to see if there's anything on them I need to transfer >>> to the