Re: Blocking POODLE

2015-01-17 Thread Andre Speelmans
> Thanks for the suggestion. Changing the min (and fallback-limit, > because I didn't know what that did) to 10 does not cause a failure to > connect. So either (a) the server change didn't take or (b) the browser > change didn't take or (c) I need to do something else in the browser to > force S

Re: Blocking POODLE

2015-01-16 Thread Andre Speelmans
On Fri, Jan 16, 2015 at 3:45 AM, Matthew Saltzman wrote: > On Thu, 2015-01-15 at 19:09 +0100, Andre Speelmans wrote: >> On Thu, Jan 15, 2015 at 3:40 AM, Matthew Saltzman wrote: >> > SSLLabs reports a couple of servers of mine have SSL v3 enabled and are >> > vulner

Re: Blocking POODLE

2015-01-15 Thread Andre Speelmans
On Thu, Jan 15, 2015 at 3:40 AM, Matthew Saltzman wrote: > SSLLabs reports a couple of servers of mine have SSL v3 enabled and are > vulnerable to POODLE. I followed instructions for Apache httpd at > https://scotthelme.co.uk/sslv3-goes-to-the-dogs-poodle-kills-off-protocol/, > but that does not

Re: 2nd IP address on an interface

2014-08-28 Thread Andre Speelmans
On Thu, Aug 28, 2014 at 10:35 PM, Lars E. Pettersson wrote: > > On 08/28/14 22:16, Robert Moskowitz wrote: >> >> # cat /etc/sysconfig/network-scripts/ifcfg-eth0:0 >> [snipped] >> ONBOOT="yes" > I think you need to add > ONPARENT=yes > to make it start when its parent does. ONPARENT=yes is indeed

Re: LIST-MODERATION ... Re: Purge old eth1, add new nic as eth0

2012-10-29 Thread Andre Speelmans
>> On 10/16/2012 07:52 AM, David wrote: >>> I find it odd that moderators feel the need to have to apologize to >>> someone that complains about being moderated that violated the rules on >>> a fairly open list badly enough to be moderated. > On 10/16/2012 1:43 PM, Joe Zeff wrote: >> Actually, the

Re: Cannot find valid baseurl for rpmfusion repo

2012-06-30 Thread Andre Speelmans
On Fri, Jun 29, 2012 at 10:51 PM, n2xssvv.g02gfr12930 wrote: > This is futile, I'm no longer interested in understanding your position, > whatever it maybe. It might on the other hand be worthwhile to see and understand your own position. You are the one thinking Reindl has a problem, while in f

Re: RPM creation

2012-01-19 Thread Andre Speelmans
> Does anyone know of a tutorial on creating a simple rpm package that > basically just copies a few files into specified locations? Make a tarball, let that be extracted as explained in the examples in the setup phase, leave the build phase empty and than in the install phase copy the files to th

Re: OT: bash script - unexpected exit

2012-01-16 Thread Andre Speelmans
On Mon, Jan 16, 2012 at 8:55 PM, JD wrote: > What exactly were you trying to accomplish using cat? I was not trying, the OP had a script that did a: cat file | while read line; do something done Matthew commented that you should not rely on cat for reading a file line by line and I was curious a

Re: OT: bash script - unexpected exit

2012-01-16 Thread Andre Speelmans
> You shouldn't rely on cat or for to read a file line by line, but instead do > this: > > while read line; do >   commands > done < hosts I would pick this form myself, but why should one not rely on cat? It seems to me a viable (even if useless use of cat) option. Is there something totally wron

Re: Network route problem

2012-01-07 Thread Andre Speelmans
Hello, > Here is the output of : route -n : > > 0.0.0.0                192.168.50.2        0.0.0.0         UG    0      0 >      0 eth0 > 169.254.0.0        0.0.0.0                 255.255.0.0     U     1002   0 >      0 eth0 > 172.16.2.6          192.168.50.184  255.255.255.255 UGH   0      0    

Re: fail2ban vs. logrotate

2011-10-25 Thread Andre Speelmans
> It looks like you would have to modify the syslog logrotate script > and add a second command in the postrotate section after it restarts > syslogd. Does fail2ban accept a SIGHUP to close and reopen the log file? Or make it do copy-truncate, which is meant just for these cases where a daemon kee

Re: fail2ban vs. logrotate

2011-10-25 Thread Andre Speelmans
> I was referring to the fail2ban RPM. This has to be a problem for > just about any installation that uses logrotate. Most daemons seem to use their own logfile and therefore can use their own logrotate configuration script in /etc/logrotate.d. But /var/log/secure is not handled by a specific da

Re: fail2ban vs. logrotate

2011-10-24 Thread Andre Speelmans
> It sounds like fail2ban still has the old log file open. You need to > have logrotate tell fail2ban that the log file has changed. Change the config file for logrotate so that it does not create a new file, but that it uses copy-and-truncate. The exact syntax is easily found in the man-page. >

Re: How does one run yum on a non working system ?

2011-08-28 Thread Andre Speelmans
On Sun, Aug 28, 2011 at 9:04 PM, linux guy wrote: > Is there a way to run yum to update the files on a non working system when > booting from a live or rescue iso ? I would say depends on what and how much is broken. But you can try a chroot to the mounted system and then run yum. -- Regards,

Re: What tool shows /proc/net/nf_conntrack

2011-08-27 Thread Andre Speelmans
> Sam Varshavchik wrote: >> I forwarded a port, using system-config-firewall. >> >> The destination machine, not surprisingly, shows the IP address of >> the firewall as the source of the connection. The goal is obtaining >> the connection's real source IP. However, on the firewall the >> forwarde

Re: telnet on local LAN question

2011-08-18 Thread Andre Speelmans
Hi Paul, > Part of trying to get mail / mailx running on my Linux boxes to send > mail to pnew...@cs.cmu.edu involved using telnet as a test. They wanted > me to use port 587 per their online docs. To get mail to work, I had to > edit sendmail.mc to understand port 587. I understand, and using th

Re: telnet on local LAN question

2011-08-17 Thread Andre Speelmans
>> An additional thing to check is if you are listening on port 23 (or 25). >> Try "netstat -tnlp" and search ":23" (or ":25"). You will find the >> name of the process listening. Check if it is listening on 0:0:0.0 or >> just on 127.0.0.1. The 127.0.0.1 would be wrong, and should be fixed >> in th

Re: telnet on local LAN question

2011-08-17 Thread Andre Speelmans
On Thu, Aug 18, 2011 at 7:21 AM, Paul Allen Newell wrote: > partial answers to two replies ... > > On 8/17/2011 6:07 AM, Rick Sewill wrote: >> May I suggest inserting an entry, at this spot, for mail, something like the >> following. >> -A INPUT -p tcp -m state --state NEW -m tcp --dport 25 -j ACC

Re: telnet on local LAN question

2011-08-16 Thread Andre Speelmans
Hi Tim, > That's a rather complex explanation, which sounds like you're giving > each machine a unique hosts file, where their own hostnames are written > differently than the other machines on the LAN.  I wouldn't do that. It sounds to me quite normal what he says. Every host has a hosts-file wh

Re: telnet on local LAN question

2011-08-16 Thread Andre Speelmans
You say you tried telnet to port 25 at , have you tried it to the IP-address as well? It seems unlikely this will work, as ping to resolves fine, but just to be sure. On other, is there actually a mailserver listening on port 25? Is there a firewall on or on ? If needed you can always use tcpdum

Re: sudo a graphical app?

2011-08-09 Thread Andre Speelmans
Hi Jeol, > sudo -u user9-boxed -- /usr/bin/firefox %u & > > gives a "sorry, you must have a tty to run sudo" error in > /var/log/secure . So does using the firebox command. If I recall correctly, there is a line "requiretty" in the /etc/sudoers file (or can be added). The default value is true, y

Re: OT: allow ordinary user to read /var/log/audit/audit.log

2011-06-12 Thread Andre Speelmans
> Surely I can. I just thought there should be the other way. Say, thru > sudo. Well, it seems that changing file attributes is the only way > here. Add this to the Cmnd_alias: less /var/log/audit/audit.log -- Kind regards, André -- users mailing list users@lists.fedoraproject.org To unsubsc

Re: Routing not working

2011-06-02 Thread Andre Speelmans
> If you blacklist ipv6 (which I tried) then some installed software, > and some interfaces will belch out error messages, such as: > > May 26 21:13:19 localhost kernel: bridge: Unknown symbol > ipv6_dev_get_saddr (err 0) > > > You might want to look at > > /etc/sysconfig/network-scripts/ifdown-ipv