Discuss November 2008

discuss@lists.centos.org

252 participants
254 discussions

iptables starts blocking outbound http traffic
by Neil Aggarwal 12 Nov '08

12 Nov '08

Hello: I have a machine running CentOS 5 x86_64. It is running apache httpd and tomcat. For some reason, after running for a few days, web requests stop responding. It happened again this morning. I check the syslog and see a HUGE number of logs like this: OUTPUT IN= OUT=eth0 SRC=[MyIP] DST=[OutsideIP] LEN=532 TOS=0x00 PREC=0x00 TTL=64 ID=52669 DF PROTO=TCP SPT=80 DPT=54697 WINDOW=61 RES=0x00 ACK PSH FIN URGP=0 Here are my iptables commands for http connections (I have the default policy set to drop): # Allow http connections from the outside world /sbin/iptables -A INPUT -i eth0 -d $ETH0_IP -p tcp --sport 1024: --dport http -m state --state NEW,ESTABLISHED -j ACCEPT /sbin/iptables -A OUTPUT -o eth0 -s $ETH0_IP -p tcp --sport http --dport 1024: -m state --state ESTABLISHED -j ACCEPT Here are some strange things: 1. I have the exact same rules running on two other servers which do not give me any trouble. 2. If I stop and restart httpd and tomcat, the problem goes away. This suggests the firewall is not a problem. Any ideas what is going on? Thanks, Neil -- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details.

4 8

Missing freeradius update
by Alain RICHARD 12 Nov '08

12 Nov '08

The following errata on freeradius package was issued by redhat on october 15 and is not yet available under Centos 5 : http://rhn.redhat.com/errata/RHBA-2008-0845.html Is there any particular reason ? Regards, -- Alain RICHARD <mailto:alain.richard@equation.fr> EQUATION SA <http://www.equation.fr/> Tel : +33 477 79 48 00 Fax : +33 477 79 48 01 E-Liance, Opérateur des entreprises et collectivités, Liaisons Fibre optique, SDSL et ADSL <http://www.e-liance.fr>

2 1

rpmforge i386 and x86_64?
by Marcelo M. Garcia 12 Nov '08

12 Nov '08

Hi Is it possible to have rpmforge for both architectures? Currently is only for 64bit, but I need some libraries 32bit (rrdtool) to install ganglia. But if I try to install rpmforge i386, I got the message: [root@kitten01 mgarcia]# rpm -ivh rpmforge-release-0.3.6-1.el5.rf.i386.rpm Preparing... ########################################### [100%] file /etc/smart/channels/rpmforge.channel from install of rpmforge-release-0.3.6-1.el5.rf conflicts with file from package rpmforge-release-0.3.6-1.el5.rf file /etc/sysconfig/rhn/sources.rpmforge.txt from install of rpmforge-release-0.3.6-1.el5.rf conflicts with file from package rpmforge-release-0.3.6-1.el5.rf [root@kitten01 mgarcia]# Thanks Marcelo

2 2

Re: [CentOS] Running From Live DVD & Keeping Settings Between Boots
by Brent L. Bates 12 Nov '08

12 Nov '08

Scientific Linux is one of the groups I read, in addition to CentOS, and that is why I couldn't find the email in the CentOS group. Also instead of saving the email, I saved the link to the information, only one of hundreds saved. I didn't think to look in my SL list of links, only CentOS. Sorry for the confusion everyone. Akemi, thanks for the pointer/reminder.

1 0

Re: [CentOS] Running From Live DVD & Keeping Settings Between Boots
by Brent L. Bates 12 Nov '08

12 Nov '08

I remember someone saying one had to include some options on the boot command line for this to work. Nothing was automated for this to work. It took a little bit of work and that is why I saved the email or at least meant to save it. I was almost positive it was the CentOS list that I saw the post(s). I know it wasn't Fedora, because I don't read any groups for that. It wasn't Knoppix. It was definitely a LiveCD/DVD.

1 0

CentOS-announce Digest, Vol 45, Issue 6
by centos-announce-request＠centos.org 12 Nov '08

12 Nov '08

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2008:0967 Moderate CentOS 5 i386 httpd Update (Karanbir Singh) 2. CESA-2008:0967 Moderate CentOS 5 x86_64 httpd Update (Karanbir Singh) 3. CESA-2008:0982 Moderate CentOS 5 x86_64 gnutls Update (Karanbir Singh) 4. CESA-2008:0982 Moderate CentOS 5 i386 gnutls Update (Karanbir Singh) 5. CESA-2008:0967 Moderate CentOS 3 i386 httpd - security and bug fix update (Tru Huynh) 6. CESA-2008:0967 Moderate CentOS 3 x86_64 httpd - security and bug fix update (Tru Huynh) 7. CESA-2008:0967 Moderate CentOS 3 i386 httpd - security and bug fix update (Tru Huynh) 8. CESA-2008:0967 Moderate CentOS 3 x86_64 httpd - security and bug fix update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 11 Nov 2008 20:45:50 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0967 Moderate CentOS 5 i386 httpd Update To: centos-announce(a)centos.org Message-ID: <20081111204550.GA4091(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0967 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0967.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 2d0f8e04f56bbc5dcb3a0fb64a74e89a httpd-2.2.3-11.el5.centos.4.i386.rpm 4785cfd30d6cb160beb48199382fb241 httpd-devel-2.2.3-11.el5.centos.4.i386.rpm 88ab400348f64912df4a144f32576b5d httpd-manual-2.2.3-11.el5.centos.4.i386.rpm 97768d26a5b23d69c377d33f9b834a4a mod_ssl-2.2.3-11.el5.centos.4.i386.rpm Source: fb6b6bc4efe9a4bfed473045bd49f12c httpd-2.2.3-11.el5.centos.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Tue, 11 Nov 2008 20:45:51 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0967 Moderate CentOS 5 x86_64 httpd Update To: centos-announce(a)centos.org Message-ID: <20081111204551.GA4106(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0967 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0967.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 6501c1e582d31facd53dd63391f5e86f httpd-2.2.3-11.el5.centos.4.x86_64.rpm 31fb222701a58a20254d4db035fcd873 httpd-devel-2.2.3-11.el5.centos.4.i386.rpm 30f6c5240bd2d1060d788693c41de854 httpd-devel-2.2.3-11.el5.centos.4.x86_64.rpm 979b862a64c137def0bf98fde7f3cdaa httpd-manual-2.2.3-11.el5.centos.4.x86_64.rpm 83afcd18cc3bbd446d5bd753bb2ae3c4 mod_ssl-2.2.3-11.el5.centos.4.x86_64.rpm Source: fb6b6bc4efe9a4bfed473045bd49f12c httpd-2.2.3-11.el5.centos.4.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Tue, 11 Nov 2008 21:05:19 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0982 Moderate CentOS 5 x86_64 gnutls Update To: centos-announce(a)centos.org Message-ID: <20081111210519.GA4366(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0982 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0982.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 92aec7e24f7f5f1e23e9a020fd9f2c8d gnutls-1.4.1-3.el5_2.1.i386.rpm 82490ed14bda2e4705d7526b3eaaf9d2 gnutls-1.4.1-3.el5_2.1.x86_64.rpm d2220c9b8c8bbb1d4f2751f9b0a3b7f4 gnutls-devel-1.4.1-3.el5_2.1.i386.rpm 76907ccd298c2f5b1968f13e79f0b220 gnutls-devel-1.4.1-3.el5_2.1.x86_64.rpm f42ce7fe5a6d2967f50e4ce01bf84539 gnutls-utils-1.4.1-3.el5_2.1.x86_64.rpm Source: 6fa3a0ca3ff4dab13b327e249946770d gnutls-1.4.1-3.el5_2.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Tue, 11 Nov 2008 21:05:18 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CESA-2008:0982 Moderate CentOS 5 i386 gnutls Update To: centos-announce(a)centos.org Message-ID: <20081111210518.GA4351(a)vkalu.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2008:0982 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0982.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 05630decb003e9474658fda91945eebe gnutls-1.4.1-3.el5_2.1.i386.rpm 46d7ad1c0460b8923112aeee68c9f1b9 gnutls-devel-1.4.1-3.el5_2.1.i386.rpm d15ab3ab7dcd8df12f27008f39354248 gnutls-utils-1.4.1-3.el5_2.1.i386.rpm Source: 6fa3a0ca3ff4dab13b327e249946770d gnutls-1.4.1-3.el5_2.1.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Tue, 11 Nov 2008 22:30:03 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2008:0967 Moderate CentOS 3 i386 httpd - security and bug fix update To: centos-announce(a)centos.org Message-ID: <20081111213003.GA25740(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2008:0967 httpd security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2008-0967.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/httpd-2.0.46-71.ent.i386.rpm updates/i386/RPMS/httpd-devel-2.0.46-71.ent.i386.rpm updates/i386/RPMS/mod_ssl-2.0.46-71.ent.i386.rpm source: updates/SRPMS/httpd-2.0.46-71.ent.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update httpd Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Re:[CentOS] xen save/restore causes cron to hang
by Vladislav Rusanov 12 Nov '08

12 Nov '08

Joe Pruett wrote: > i haven't found anything online to talk about this, so maybe i've got > something odd going on here. i have my xen set up to save/restore on dom0 > reboot. almost everything works fine, but cron on the guest os'es > (everything is centos 5 x86_64) stop processing jobs. i'm guessing it is > missing an alarm or something like that. anyone else see this? I have the same problem. Anybody solved it? Regards!

1 0

bonding theory question
by Mag Gam 12 Nov '08

12 Nov '08

Hello All, I am currently using bonding with 2 NICs (using mode 0). Its been working well, but I am trying to understand how it works (I am a total newbie). mode=0 (balance-rr) Round-robin policy: Transmit packets in sequential order from the first available slave through the last. This mode provides load balancing and fault tolerance. So I have 2 NICs (1 NIC attached to switch A, 2nd NIC attached to switch B). I have 1 virtual interface. bon0. Suppose data is being pushed out, it will go with 1st NIC and when it gets overloaded it will use 2nd NIC. The bonding driver will be responsible for it. Similar to the push, the pull will be very similar. The data gets pulled and the bonding driver will assemble the packets together? Does this sound right? Sorry for a newbie question... TIA

3 5

Autodetecing RAID members upon boot... need to update initrd?
by Tim Nelson 12 Nov '08

12 Nov '08

Hello fellow CentOS'ers- I've got a system running CentOS 5.0. The motherboard has two onboard SATA ports with two drives attached. I installed the system on a RAID1 setup. However, I'd like to add a hotspare disk to the array. Since there are no additional SATA ports, I've installed an additional controller. After partitioning, the additional drive was easily and successfully added to the existing array as a spare. However, the problem is when the system boots. The hotspare disk is never detected and added to the array. I believe it could be due to the driver for the addon card not being in the initrd? If I run 'fdisk -l', I see this: ---BEGIN--- Disk /dev/sda: 500.1 GB, 500107862016 bytes 255 heads, 63 sectors/track, 60801 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sda1 * 1 13 104391 fd Linux raid autodetect /dev/sda2 14 523 4096575 fd Linux raid autodetect /dev/sda3 524 60801 484183035 fd Linux raid autodetect Disk /dev/sdb: 500.1 GB, 500107862016 bytes 255 heads, 63 sectors/track, 60801 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sdb1 * 1 13 104391 fd Linux raid autodetect /dev/sdb2 14 523 4096575 fd Linux raid autodetect /dev/sdb3 524 60801 484183035 fd Linux raid autodetect Disk /dev/md2: 495.8 GB, 495803301888 bytes 2 heads, 4 sectors/track, 121045728 cylinders Units = cylinders of 8 * 512 = 4096 bytes Disk /dev/md2 doesn't contain a valid partition table Disk /dev/md1: 12.5 GB, 12584288256 bytes 2 heads, 4 sectors/track, 3072336 cylinders Units = cylinders of 8 * 512 = 4096 bytes Disk /dev/md1 doesn't contain a valid partition table Disk /dev/md0: 106 MB, 106823680 bytes 2 heads, 4 sectors/track, 26080 cylinders Units = cylinders of 8 * 512 = 4096 bytes Disk /dev/md0 doesn't contain a valid partition table Disk /dev/sdc: 500.1 GB, 500107862016 bytes 255 heads, 63 sectors/track, 60801 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sdc1 * 1 13 104391 fd Linux raid autodetect /dev/sdc2 14 523 4096575 fd Linux raid autodetect /dev/sdc3 524 60801 484183035 fd Linux raid autodetect ---END--- If my assumptions are correct, the onboard drives are detected first, then the arrays assembled, and after the system has passed control from the initrd to boot, THEN the addon controller is detected and hence the third drive (sdc). If I am correct, then I need to update my initrd for the system to see and use that third drive during the boot process. Can anyone lend a few tips or pointers on how to proceed? I essentially need the sata_sil driver to be included in the initrd. All tips welcome. Thank you! Tim Nelson Systems/Network Support Rockbochs Inc. (218)727-4332 x105

4 4

Can expect do this?
by Fajar Priyanto 11 Nov '08

11 Nov '08

Hi all, I'm trying to scp some files from machine1 to machine2. But, I'm in an environment where PubKeyAuthentication is not allowed in ssh :( So, I'm confused how to automate it as cronjob. However, I read somewhere that we can write a little bash script that will utilize 'expect' to answer for the ssh password prompt? Can we do this? Any examples are great help. Thank you.

6 8

← Newer
1
...
14
15
16
17
18
19
20
...
26
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss November 2008