Discuss October 2005

discuss@lists.centos.org

266 participants
334 discussions

vsftp passive mode / iptables issue
by John Hinton 26 Oct '05

26 Oct '05

I've been struggling with my firewall and getting vsftp to work in passive mode. It seems that everything on this hosting server works just fine without the eth0 entry in my iptables except for vsftp in passive. Am I opening up too much by adding the eth0 line? -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -i eth0 -j ACCEPT <---- THIS ENTRY -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT -A RH-Firewall-1-INPUT -p 50 -j ACCEPT -A RH-Firewall-1-INPUT -p 51 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 20 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 21 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 22 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 25 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state -m tcp --dport 80 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 110 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 443 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 465 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 587 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 995 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m tcp -m state --dport 5561 --state NEW -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited TIA! John Hinton

2 1

Re: [CentOS] Problem SSH
by minichaz 26 Oct '05

26 Oct '05

On Tue Oct 25 17:54 , Mauricio Merlin <mauricio(a)cimed.ind.br> sent: >My Centos 4.1 only accept connections from localhost, my file conf is >default. >error: ssh: connect to host 192.168.1.78 port 22: No route to host > > >thanks >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos > This isn't an SSH problem and it's not a firewall problem either as that would produce a "connection refused" message or similar. You will need to allow incoming SSH connections on the machine to which you are connecting but you don't appear to have got to that stage yet. "No route to host" would indicate that there's a basic network connectivity problem between the two machines in question. Check you can ping the machines from each other, I suspect you can't. Most likely you've got a typo in a netmask or something similar. Charlie

2 2

PostgeSQL 8.0.4 on CentOS4.2
by James B. Byrne 26 Oct '05

26 Oct '05

In case anyone besides me is interested, installing these packages on CentOS4.2 seems to work. You can determine the correct mirror to use from: http://www.postgresql.org/ftp/binary/v8.0.4/linux/rpms/redhat/rhel- es-4/ The rpm command that I used was: rpm --upgrade --nodeps --hash -v <package url> Packages in order of installation: ftp://ftp3.ca.postgresql.org/pub/binary/v8.0.4/linux/rpms/redhat/rhe l-es-4/postgresql-libs-8.0.4-2PGDG.i686.rpm ftp://ftp3.ca.postgresql.org/pub/binary/v8.0.4/linux/rpms/redhat/rhe l-es-4/postgresql-contrib-8.0.4-2PGDG.i686.rpm ftp://ftp3.ca.postgresql.org/pub/binary/v8.0.4/linux/rpms/redhat/rhe l-es-4/postgresql-docs-8.0.4-2PGDG.i686.rpm ftp://ftp3.ca.postgresql.org/pub/binary/v8.0.4/linux/rpms/redhat/rhe l-es-4/postgresql-pl-8.0.4-2PGDG.i686.rpm ftp://ftp3.ca.postgresql.org/pub/binary/v8.0.4/linux/rpms/redhat/rhe l-es-4/postgresql-8.0.4-2PGDG.i686.rpm ftp://ftp3.ca.postgresql.org/pub/binary/v8.0.4/linux/rpms/redhat/rhe l-es-4/postgresql-server-8.0.4-2PGDG.i686.rpm ftp://ftp3.ca.postgresql.org/pub/binary/v8.0.4/linux/rpms/redhat/rhe l-es-4/postgresql-test-8.0.4-2PGDG.i686.rpm We are using 8.0.4 for development of a new application on a dedicated development server so stability and data conversion issues do not concern us for the moment. You are nonetheless advised not to install 8.0.4 over a 7.4.8 installation without first unloading all of the postgreSQL databases that you wish to preserve under 8.0.4. Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

5 4

Re: PostgeSQL 8.0.4 on CentOS4.2
by James B. Byrne 26 Oct '05

26 Oct '05

On Tue, 25 Oct 2005 15:11:56 -0600, Michael Best <mbest(a)pendragon.org> wrote: > 1. DON'T USE nodeps > > It's because the binaries don't have libpq.so.3 (if I remember > correctly). Installing it this way will just break those things > that need that library. > > Instead.... install the compat-postgresql-libs That would have been really useful information to have, back on October 17 when I first asked the question about PostgreSQL 8 and CentOS 4 on this list. Lamar Owan provided a lot of help in his reply but I either missed any reference to the compatibility libraries or he failed to mention them. It is too bad that I was not aware of this when I carried out my procedure. However, as my recent post stated, this update was carried out on a dedicated development server. The each postgresql-8.0.4 package was first rpm -U --test installed with dependencies on to see what would break and determine if anything critical was in that list. The packages dependent upon libpq.so.3 on our server were: mod_auth_pgsql-2.0.1-6 dovecot-0.99.11-2.EL4.1 perl-DBD-Pg-1.31-6 postgresql-tcl-7.4.8-1.RHEL4.1 postgresql-python-7.4.8-1.RHEL4.1 Now the postgresql-*-7.4.8 stuff is not used on the development server, or anywhere else in our operation so far as we can determine. Those were deleted. Ditto for dovecot. Ditto for perl- DBD. Finally, the development machine does not provide httpd service so mod_auth_pgsql-2.0.1-6 is also redundant. Linux OS distributions are not religious dogma. Sometimes you just have to get something working and accept that fact that this choice will render less important things useless. This may not be the most elegant approach, but there is always a limit to the amount of time available to solve these kinds of problems. I appreciate that moving from postgres 7.x to 8.x is a far more involved issue for applications running against that dbms than simply loading the software. But all I needed was get a particular version of a particular package running on a tabula rasa server dedicated to development of a new application. The point being to avoid converting from pg 7.4 to 8.x in the future. At least all this information is now on the list for future reference. Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

2 1

PAM Errors in proftpd
by William J.A. Brillinger 26 Oct '05

26 Oct '05

Logwatch on my NU-BQ+CentOS box has been giving me these errors for the last week or so. Any ideas on what is causing this? --------------------- proftpd-messages Begin ------------------------ **Unmatched Entries** secure2.pdcweb.net (localhost[127.0.0.1]) - PAM(setcred): System error secure2.pdcweb.net (localhost[127.0.0.1]) - PAM(close_session): System error secure2.pdcweb.net (localhost[127.0.0.1]) - PAM(setcred): System error secure2.pdcweb.net (localhost[127.0.0.1]) - PAM(close_session): System error secure2.pdcweb.net (localhost[127.0.0.1]) - PAM(setcred): System error secure2.pdcweb.net (localhost[127.0.0.1]) - PAM(close_session): System error secure2.pdcweb.net (localhost[127.0.0.1]) - PAM(setcred): System error ... many more. Thanks! - Bill --------------------------------- William J.A. Brillinger Precision Design Co. E-Mail: mailto:billy@pdcweb.net Web site: http://www.pdcweb.net

1 0

About yum..
by Sam Drinkard 26 Oct '05

26 Oct '05

CentOS specificly, is there any rule of thumb about package names when searching for and installing things using yum? I ask, after I finally found the perl/Tk package I needed, but only after trying several incantations of the package name, from the full blown alpha/numeric name to simply perl/Tk. Is it safe to assume when searching or yum'ing a package that just the package name and perhaps up to the release version would apply in a majority of cases? Many thanks... -- Snowman

4 4

Re: [CentOS] Problem SSH
by James B. Byrne 26 Oct '05

26 Oct '05

On Tue, 25 Oct 2005 10:54:16 -0700, Benjamin Smith <lists(a)benjamindsmith.com> wrote: > Based on your question, I'll consider that you're pretty much > using a standard iptables config. > > edit /etc/sysconfig/iptables > > Add the following line, somewhere in the middle - it allows > inbound connections to TCP port 22: > > -A RH-Firewall-1-INPUT -p tcp --dport 22 -j ACCEPT > > If you want to restrict access to a single IP address try this, > it allows inbound connections to port 22 from ip address 1.2.3.4: > > -A RH-Firewall-1-INPUT -p tcp -s 1.2.3.4/32 --dport 22 -j ACCEPT > > Then restart iptables > /etc/rc.d/init.d/iptables restart; If you also wish to throttle new connections to the sshd daemon (a most useful security measure in my opinion) then you can add this to the top of your INPUT chain as well: # sshd new connection attempts throttled to 4/min./IP addr. -A INPUT -p tcp -m tcp -m state -m recent -i eth0 --dport 22 -- state NEW -j DROP --update --seconds 60 --hitcount 4 --name DEFAULT --rsource # Add new sshd connection attempt to recent ip list -A INPUT -p tcp -m tcp -m state -m recent -i eth0 --dport 22 -- state NEW --set --name DEFAULT --rsource You can alter the comparison period and connection rate values by altering the arguments for --seconds and --hitcount appropriately. For example, to permit no more than twelve connections from a single IP address within any five minute period then use --seconds 300 --hitcount 12. Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

1 0

CentOS SETI@Home team
by Magnus Hedemark 26 Oct '05

26 Oct '05

http://setiathome.berkeley.edu/team_display.php?teamid=120195 If anyone here is participating in SETI@Home, consider switching teams to boost CentOS. :-) -Magnus

1 0

centos 4.2 with reiserfs
by Lim Wee Cheong 26 Oct '05

26 Oct '05

Hi, I tried to compile the 2.6.9-22.EL kernel with reiserfs enabled. make fails as follows. anyone managed to compile with reiserfs successfully? CC [M] fs/reiserfs/stree.o fs/reiserfs/stree.c: In function `get_lkey': fs/reiserfs/stree.c:322: warning: return from incompatible pointer type fs/reiserfs/stree.c:325: warning: return from incompatible pointer type fs/reiserfs/stree.c:329: warning: return from incompatible pointer type fs/reiserfs/stree.c:332: warning: return from incompatible pointer type fs/reiserfs/stree.c:337: warning: return from incompatible pointer type fs/reiserfs/stree.c:338: warning: return from incompatible pointer type fs/reiserfs/stree.c: At top level: fs/reiserfs/stree.c:346: error: conflicting types for 'get_rkey' include/linux/reiserfs_fs.h:1886: error: previous declaration of 'get_rkey' was here fs/reiserfs/stree.c:346: error: conflicting types for 'get_rkey' include/linux/reiserfs_fs.h:1886: error: previous declaration of 'get_rkey' was here fs/reiserfs/stree.c: In function `get_rkey': fs/reiserfs/stree.c:361: warning: return from incompatible pointer type fs/reiserfs/stree.c:364: warning: return from incompatible pointer type fs/reiserfs/stree.c:368: warning: return from incompatible pointer type fs/reiserfs/stree.c:371: warning: return from incompatible pointer type fs/reiserfs/stree.c:376: warning: return from incompatible pointer type fs/reiserfs/stree.c:377: warning: return from incompatible pointer type fs/reiserfs/stree.c: In function `key_in_buffer': fs/reiserfs/stree.c:399: warning: passing arg 1 of `comp_keys' from incompatible pointer type fs/reiserfs/stree.c:403: warning: passing arg 1 of `comp_keys' from incompatible pointer type make[2]: *** [fs/reiserfs/stree.o] Error 1 make[1]: *** [fs/reiserfs] Error 2 make: *** [fs] Error 2

5 5

CentOS-announce Digest, Vol 8, Issue 9
by centos-announce-request＠centos.org 26 Oct '05

26 Oct '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:809 Moderate CentOS 3 ia64 ethereal - security update (Pasi Pirhonen) 2. CESA-2005:809 Moderate CentOS 4 ia64 ethereal - security update (Pasi Pirhonen) 3. CESA-2005:809 Moderate CentOS 4 x86_64 ethereal - security update (Johnny Hughes) 4. CESA-2005:809 Moderate CentOS 4 i386 ethereal - security update (Johnny Hughes) 5. CESA-2005:809 Moderate CentOS 4 axp ethereal - security update (Pasi Pirhonen) 6. CESA-2005:809 Moderate CentOS 3 s390(x) ethereal - security update (Pasi Pirhonen) 7. CESA-2005:809 Moderate CentOS 4 s390(x) ethereal - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Wed, 26 Oct 2005 00:48:05 +0300 From: Pasi Pirhonen <upi(a)papat.org> Subject: [CentOS-announce] CESA-2005:809 Moderate CentOS 3 ia64 ethereal - security update To: centos-announce(a)centos.org Message-ID: <20051025214805.GG1352(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:809 https://rhn.redhat.com/errata/RHSA-2005-809.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/ethereal-0.10.13-1.EL3.1.ia64.rpm updates/ia64/RPMS/ethereal-gnome-0.10.13-1.EL3.1.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

← Newer
1
...
6
7
8
9
10
11
12
...
34
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2005