Discuss February 2007

discuss@lists.centos.org

259 participants
310 discussions

What is the diffrence between port filtering and packet filtering ?
by Indunil Jayasooriya 09 Feb '07

09 Feb '07

Hi all, I want to set up a firewall on CentOS 4.4. I wnat to know the diiffrence between port filtering and packet filtering ? Can iptables do both? Is there another pkg better than this? if so, pls let me know. The purpose of this is to setup a firewall for production use. -- Thank you Indunil Jayasooriya

7 7

mod_perl and httpd2
by Peter Serwe 09 Feb '07

09 Feb '07

I've got httpd and mod_perl installed, but I seem to have an application that requires part of mod_perl that doesn't seem to be properly installed into perl, notably, the 'Apache' portion. To 'fix' this, cpan would like to install either mod_perl-1.29, or alternatively to install mod_perl-2.0.2. 1.29 doesn't seem smart, and 2.0.2 absolutely will not install over the top of 1.99-16. I've looked for a package using: yum list available | grep -i perl yum list available | grep -i apache And I don't get anything decent in terms of output. For repositories, I've got CentOS-Base, CentOS-Media, kbsingh-CentOS-Extras, rpmforge. # rpm -qa | grep httpd httpd-2.0.52-28.ent.centos4 httpd-suexec-2.0.52-28.ent.centos4 httpd-manual-2.0.52-28.ent.centos4 httpd-devel-2.0.52-28.ent.centos4 # rpm -qa | grep perl perl-HTML-Tagset-3.03-30 perl-DBI-1.40-8 perl-XML-Dumper-0.71-2 perl-5.8.5-36.RHEL4 perl-URI-1.30-4 perl-HTML-Parser-3.35-6 perl-XML-Parser-2.34-5 perl-Parse-Yapp-1.05-32 perl-XML-Encoding-1.01-26 perl-libxml-enno-1.02-31 perl-libxml-perl-0.07-30 mod_perl-1.99_16-4.centos4 mod_perl-devel-1.99_16-4.centos4 perl-Digest-SHA1-2.07-5 perl-Digest-HMAC-1.01-13 perl-CGI-Simple-0.077-5.el4.kb perl-Filter-1.30-6 newt-perl-1.08-7 perl-libwww-perl-5.79-5 perl-DateManip-5.42a-3 perl-DBD-MySQL-2.9004-3.1 perl-Net-DNS-0.48-1 perl-Apache-Session-1.6-1 # The behavior I'm experiencing that has me suspecting my mod_perl installation is that when I type I get this 'Can't locate blah blah blah blah' message. # perl use Apache2::Const; Can't locate Apache2/Const.pm in @INC (@INC contains: /usr/lib/perl5/5.8.5/i386-linux-thread-multi /usr/lib/perl5/5.8.5 /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl .) at - line 1. BEGIN failed--compilation aborted at - line 1. Where do I begin to fix this? Peter -- Peter Serwe <peter at infostreet dot com> http://www.infostreet.com "The only true sports are bullfighting, mountain climbing and auto racing." -Earnest Hemingway "Because everything else requires only one ball." -Unknown "Do you wanna go fast or suck?" -Mike Kojima "There are two things no man will admit he cannot do well: drive and make love." -Sir Stirling Moss

3 2

Is anybody else dealing with Security Metrics?
by John Hinton 08 Feb '07

08 Feb '07

Seems that some of the credit card processors demand the use of Security Metrics to test their web hosting for meeting a fairly good security standard. First, it doesn't matter if they do online credit card processing or not, just credit card processing period. This makes some sense, as someone could hack in a form pretending to ask for this information... so there is at least some risk.. and we all no credit card companies ultimately want to achieve 0 risk. ;) Anyway, the frustration is this and early on their reports even talked about it. Redhat doesn't follow the normal numbering system for a lot of their security updates for various packages. PHP is a great example of the time. Security Metrics says I must be running 5.1 due to exploits in earlier versions due to CANXXXX whereas Redhat has clearly addressed the issue, sent out a patch and generally we have it installed 2 to 6 months before SM starts a failing process. ---- The real question ---- Basically, I was wondering if there were many of you 'jumping through these same hoops'? If there are, perhaps we as a group could do something to get them to check for CentOS and then look for RHEL versions in hopes of ending these hassles. ---- end real question ---- I have found that by contacting SM, they will make a correction to a test once they know what you are running, but this seems to come up with each and every test. And the testing is done by domain, not by server, so you have to deal with each domain tested with the exact same crap.. which amounts to jumping through a hoop. Also, I've come to realize that some of what they ask that you do, equates to having your locked car in the driveway with the keys in your pocket.. this fails... But, if you put those keys in a different locked car beside it in the driveway and put the keys to that car in your pocket, it passes. Very sad...... And never once have they considered talking about the very basics like a good password policy. :( One other thing that bothers me about them is they 'sell appliances'. So, if your server/host can't pass or doesn't want to deal with it, we can 'sell' them something, making more money which to me seems like a conflict of interest for someone operating under the guise of security.

3 2

New Bind Update
by John Hinton 08 Feb '07

08 Feb '07

I was wondering if the new bind update is going smoothly for those who have done it? I've been a little hesitant to run it yet as the last time forced a bit of time fixing things. I'm trying to plan if I need to have some hours available for this or if it is like most of the time.. just do it and everything's ok. Best, John Hinton

7 7

CentOS-announce Digest, Vol 24, Issue 4
by centos-announce-request＠centos.org 08 Feb '07

08 Feb '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0064 Moderate CentOS 3 i386 postgresql - security update (Tru Huynh) 2. CESA-2007:0064 Moderate CentOS 3 x86_64 postgresql - security update (Tru Huynh) 3. CESA-2007:0044 Moderate CentOS 3 ia64 bind - security update (Pasi Pirhonen) 4. CESA-2007:0064 Moderate CentOS 3 ia64 postgresql - security update (Pasi Pirhonen) 5. CESA-2007:0044 Moderate CentOS 4 ia64 bind - security update (Pasi Pirhonen) 6. CESA-2007:0064 Moderate CentOS 4 ia64 postgresql - security update (Pasi Pirhonen) 7. CESA-2007:0044 Moderate CentOS 3 s390(x) bind - security update (Pasi Pirhonen) 8. CESA-2007:0044 Moderate CentOS 4 s390(x) bind - security update (Pasi Pirhonen) 9. CESA-2007:0064 Moderate CentOS 3 s390(x) postgresql - security update (Pasi Pirhonen) 10. CESA-2007:0064 Moderate CentOS 4 s390(x) postgresql - security update (Pasi Pirhonen) 11. CESA-2007:0064 Moderate CentOS 4 x86_64 postgresql - security update (Johnny Hughes) 12. CESA-2007:0064 Moderate CentOS 4 i386 postgresql - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 8 Feb 2007 00:16:48 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2007:0064 Moderate CentOS 3 i386 postgresql - security update To: centos-announce(a)centos.org Message-ID: <20070207231648.GB13796(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2007:0064 postgresql security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2007-0064.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/rh-postgresql-7.3.18-1.i386.rpm updates/i386/RPMS/rh-postgresql-contrib-7.3.18-1.i386.rpm updates/i386/RPMS/rh-postgresql-devel-7.3.18-1.i386.rpm updates/i386/RPMS/rh-postgresql-docs-7.3.18-1.i386.rpm updates/i386/RPMS/rh-postgresql-jdbc-7.3.18-1.i386.rpm updates/i386/RPMS/rh-postgresql-libs-7.3.18-1.i386.rpm updates/i386/RPMS/rh-postgresql-pl-7.3.18-1.i386.rpm updates/i386/RPMS/rh-postgresql-python-7.3.18-1.i386.rpm updates/i386/RPMS/rh-postgresql-server-7.3.18-1.i386.rpm updates/i386/RPMS/rh-postgresql-tcl-7.3.18-1.i386.rpm updates/i386/RPMS/rh-postgresql-test-7.3.18-1.i386.rpm source: updates/SRPMS/rh-postgresql-7.3.18-1.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update postgresql\* Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Re: tzdata - extra info.
by Steve Campbell 08 Feb '07

08 Feb '07

>> >> This was mostly a question about why yum provided a tzdata that was for a >> 2006a rpm instead of the 2006g or later when I did the yum. >> >> Thanks Still replying without digest turned off--- The yum update provided the 2006a-1 version of the tzdata file, and this apparently doesn't have the updates for the EST5EDT and America/New_York zoneinfo files. This occurred even after updating from Tao to CentOS. So, where is this fasttrack stuff, as I don't see it anywhere in my conf files. I also don't seem to be able to enable anything in the yum conf.d directory. These machines were almost all updated from Tao. Really sorry for the noise here. But thanks for the help provided. Steve Campbell campbell(a)cnpapers.com Charleston Newspapers

3 2

LDAP password
by Mário Gamito 08 Feb '07

08 Feb '07

Hi, I'm trying to access LDAP, but i don't know the password that is set by default. I'm running CentOS 4.4 Can someone help me, please ? Warm regards, Mário Gamito

2 1

Re: [CentOS] Problems with new kernels
by Jeff Stacey 08 Feb '07

08 Feb '07

On Thu, 2007-02-01 at 13:45 +0100, Sebastian Schubert wrote: > Hi there, > > we have the same problem here on IBM x305 (all other servers run > without problems). > Logging in throug ssh results in an "key exchange blah blah" failure. > Did anyone else notice this behaviour ? > > On Thu, 2007-02-01 at 07:05 -0500, Thomas Dukes wrote: > > Hello, > > > > I have been having problems using kernels since 2.6.9-34.0.2. After > > updating to a new kernel, my system runs, I'm guessing, 6 - 8 hours fine, > > then becomes unresponsive. For example, I installed the latest kernel the > > other evening, reboot for the changes and by morning, the system appears to > > be locked up. Typing 'yum update' takes about 10 minutes to execute. > > > > Not sure whats going on here but I'm stuck using 2.6.9-34.0.2. This is a > > centos 4.4 system on an IBM NetVista, 2.53 Ghz, 1GB RAM. I have noticed > > when there is a kernel update, it downloads the huge memeory and smp files. > > > > TIA > > > > Eddie > > -- > "In god we trust, the Rest we Monitor" > Sebastian Schubert - RHCE > Stadtsparkasse Munich > Network and IT Security > -------------------------- > basti-lists(a)sskm.de > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos We discovered that some IBM Netvistas (and other models) have a buggy APIC implimentation which seems to have problems with the APIC updates in recent kernel releases. Boot your system with the 'noapic' flag. It only seems to affect machines with IDE drives, if you have SATA, SCSI or FC drives then you are fine. -- Jeff Stacey UNIX Administrator James Richardson International

1 0

Slow clock on CentOS 4.4 in a VMware VM
by Alfred von Campe 08 Feb '07

08 Feb '07

I'm running a CentOS 4.4 VM on a Windows XP host with VMware Server, and have the problem that my clock runs too slow (it happens in VMware Workstation as well). It loses between 30 and 45 seconds every minute! This is a known problem and can be fixed by adding "nosmp noapic nolapic" to the boot command according to VMware tech note ID 1420. However, despite adding these options as well as some others (acpi=off pci=noacpi clock=pit) and turning off a bunch of daemons (cpuspeed, irqbalance, etc.) I still have a slow clock. Here are the daemons that are still enabled: anacron 0:off 1:off 2:on 3:on 4:on 5:on 6:off apmd 0:off 1:off 2:on 3:on 4:on 5:on 6:off atd 0:off 1:off 2:off 3:on 4:on 5:on 6:off autofs 0:off 1:off 2:off 3:on 4:on 5:on 6:off crond 0:off 1:off 2:on 3:on 4:on 5:on 6:off cups 0:off 1:off 2:on 3:on 4:on 5:on 6:off cups-config-daemon 0:off 1:off 2:off 3:on 4:on 5:on 6:off denyhosts 0:off 1:off 2:on 3:on 4:on 5:on 6:off gpm 0:off 1:off 2:on 3:on 4:on 5:on 6:off haldaemon 0:off 1:off 2:off 3:on 4:on 5:on 6:off iptables 0:off 1:off 2:on 3:on 4:on 5:on 6:off kudzu 0:off 1:off 2:off 3:on 4:on 5:on 6:off mdmonitor 0:off 1:off 2:on 3:on 4:on 5:on 6:off messagebus 0:off 1:off 2:off 3:on 4:on 5:on 6:off microcode_ctl 0:off 1:off 2:on 3:on 4:on 5:on 6:off netfs 0:off 1:off 2:off 3:on 4:on 5:on 6:off network 0:off 1:off 2:on 3:on 4:on 5:on 6:off ntpd 0:off 1:off 2:off 3:on 4:off 5:on 6:off portmap 0:off 1:off 2:on 3:on 4:on 5:on 6:off readahead 0:off 1:off 2:off 3:off 4:off 5:on 6:off readahead_early 0:off 1:off 2:off 3:off 4:off 5:on 6:off sendmail 0:off 1:off 2:on 3:on 4:on 5:on 6:off sshd 0:off 1:off 2:on 3:on 4:on 5:on 6:off syslog 0:off 1:off 2:on 3:on 4:on 5:on 6:off vmware-tools 0:off 1:off 2:on 3:on 4:off 5:on 6:off winbind 0:off 1:off 2:off 3:off 4:on 5:off 6:off xfs 0:off 1:off 2:on 3:on 4:on 5:on 6:off xinetd 0:off 1:off 2:off 3:on 4:on 5:on 6:off Has anyone else come across this problem and if so, did you find a way to fix it? This is the last issue that is preventing me from distributing this VM to users. Thanks, Alfred

4 5

libX11-devel
by CentOS List 08 Feb '07

08 Feb '07

Hi, What package provide libX11-devel ? Regards, Nic

2 1

← Newer
1
...
21
22
23
24
25
26
27
...
31
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2007