Re: [CentOS] Can one construct an IPTables rule to block on NS records?

--On Monday, October 05, 2015 10:46 AM -0400 "James B. Byrne" wrote: So, is there any convenient way to construct an IPTables rule to block all IPs associated with a given Domain Name server? Doing DNS queries within the kernel netfilter path would be bad. You could run a cron job to update

Re: [CentOS] Systemd spends 6 min. to startup a host

On 10/5/2015 11:53 PM, C. L. Martinez wrote: Uhmm ... but I need to startup openvswitches at boot ... I only see one option: start openvswitches when libvirtd starts ... my suggestion was to help isolate the cause of this boot delay. if removing the openvswitch from your network configuration

Re: [CentOS] Systemd spends 6 min. to startup a host

On Tue, Oct 6, 2015 at 7:45 AM, John R Pierce wrote: > On 10/5/2015 11:53 PM, C. L. Martinez wrote: >> >> Uhmm ... but I need to startup openvswitches at boot ... I only see >> one option: start openvswitches when libvirtd starts ... > > > my suggestion was to help isolate the cause of this boot d

Re: [CentOS] Can one construct an IPTables rule to block on NS records?

On 6 October 2015 at 00:46, James B. Byrne wrote: > So, is there any convenient way to construct an IPTables rule to block > all IPs associated with a given Domain Name server? > ​You can use ipsets to block a large collection of IP addresses with netfilter. I block various problematic countrie

Re: [CentOS] Can one construct an IPTables rule to block on NS records?

--On Monday, October 05, 2015 10:46 AM -0400 "James B. Byrne" wrote: > So, is there any convenient way to construct an IPTables rule to block > all IPs associated with a given Domain Name server? IPs have the reversed lookup "assosiated" with a NS. What do you mean with "associated"? Do mea

[CentOS] python setup.py ssl error

Hey guys, I'm trying to do a source install of s3cmd onto a centos 6.5 host. Because the version in the repo is a little old. So when I go to run the installer app with the command python2.7 setup.py install, I'm getting the following error: Installed /usr/local/lib/python2.7/site-packages/s3cmd

Re: [CentOS] Can one construct an IPTables rule to block on NS records?

On 10/6/2015 6:34 AM, Leon Fauster wrote: --On Monday, October 05, 2015 10:46 AM -0400 "James B. Byrne" wrote: >So, is there any convenient way to construct an IPTables rule to block >all IPs associated with a given Domain Name server? IPs have the reversed lookup "assosiated" with a NS. Wh

Re: [CentOS] Systemd spends 6 min. to startup a host

On 10/05/2015 11:58 PM, C. L. Martinez wrote: Yes, my problem is very similar as described in Debian's bugtracker. The problem might be a bug. Ask the openvswitch people. It looks like the problem is probably: /etc/sysconfig/network-scripts/ifup-ovs calls "systemctl start openvswitch-nonetwo

Re: [CentOS] Off Topic - SSL reverse proxy and Mixed Content

On Tue, Oct 6, 2015 at 7:46 PM, Gordon Messmer wrote: > On 09/30/2015 08:22 PM, Clint Dilks wrote: > >> I have a site that I want to work behind a reverse proxy (httpd) if using >> http:// everything works as expected. If using https:// some content is >> displayed but some content is blocked be

Re: [CentOS] Can one construct an IPTables rule to block on NS records?

Taking a stab at you meaning "block all IPs that reverse resolve to a name managed by secureserver.net" because their servers keep scanning you. You could craft a fail2ban recipe to reverse resolve the IP address (after a some threshold of rejected packets) then block that IP if it ' secureserver.

[CentOS] Any further developments on CentOS7 for i386?

Well I haven't tested out the CentOS 7 for i386 yet as sent in the message of 06/02-- https://lists.centos.org/pipermail/centos-devel/2015-June/013426.html Nor have I seen any additional information. So how is this going? I'm almost ready to jump in as I would really prefer to be on Gnome 3. --