Discuss July 2009

discuss@lists.centos.org

301 participants
276 discussions

Iptables issues again
by Bo Lynch 13 Jul '09

13 Jul '09

I know that I have asked this before of the list. However we just changed ISP and ip's and I'm having this issue again. I have a linux firewall using iptables with the following config eth0 = WAN 1 eth1 = LAN 1 eth2 = WAN 2 I'm trying to forward all traffic that makes a request from eth2 to an internal IP on eth1. These are the folloing rules that I have set up. iptables -t nat -A PREROUTING -p tcp -i eth2 -d 69.21.103.132 --dport 80 -j DNAT --to-destination 192.168.1.3:80 iptables -t nat -A PREROUTING -p tcp -i eth2 -d 69.21.103.132 --dport 5071 -j DNAT --to-destination 192.168.1.3:5071 iptables -t nat -A PREROUTING -p tcp -i eth2 -d 69.21.103.132 --dport 407 -j DNAT --to-destination 192.168.1.3:407 iptables -t nat -A PREROUTING -p tcp -i eth2 -d 69.21.103.132 --dport 1417 -j DNAT --to-destination 192.168.1.3:1417 iptables -t nat -A PREROUTING -p tcp -i eth2 -d 69.21.103.132 --dport 1418 -j DNAT --to-destination 192.168.1.3:1418 iptables -t nat -A PREROUTING -p tcp -i eth2 -d 69.21.103.132 --dport 1419 -j DNAT --to-destination 192.168.1.3:1419 iptables -t nat -A PREROUTING -p tcp -i eth2 -d 69.21.103.132 --dport 1420 -j DNAT --to-destination 192.168.1.3:1420 iptables -t nat -A PREROUTING -p tcp -i eth2 -d 69.21.103.132 --dport 7880 -j DNAT --to-destination 192.168.1.3:7880 iptables -t nat -A PREROUTING -p tcp -i eth2 -d 69.21.103.132 --dport 443 -j DNAT --to-destination 192.168.1.3:443 iptables -t nat -A PREROUTING -p udp -i eth2 -d 69.21.103.132 --dport 407 -j DNAT --to-destination 192.168.1.3:407 iptables -t nat -A PREROUTING -p udp -i eth2 -d 69.21.103.132 --dport 1417 -j DNAT --to-destination 192.168.1.3:1417 iptables -t nat -A PREROUTING -p udp -i eth2 -d 69.21.103.132 --dport 1418 -j DNAT --to-destination 192.168.1.3:1418 iptables -t nat -A PREROUTING -p udp -i eth2 -d 69.21.103.132 --dport 1419 -j DNAT --to-destination 192.168.1.3:1419 iptables -t nat -A PREROUTING -p udp -i eth2 -d 69.21.103.132 --dport 1420 -j DNAT --to-destination 192.168.1.3:1420 iptables -t nat -A PREROUTING -p udp -i eth2 -d 69.21.103.132 --dport 7880 -j DNAT --to-destination 192.168.1.3:7880 iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 80 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 5071 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 407 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 1417 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 1418 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 1419 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 1420 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 7880 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 443 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 407 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 1417 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 1418 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 1419 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 1420 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 7880 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 5071 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 407 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 1417 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 1418 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 1419 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 1420 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 7880 -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -d 192.168.1.3 --dport 443 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 407 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 1417 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 1418 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 1419 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 1420 -j ACCEPT iptables -A FORWARD -p udp -i eth2 -d 192.168.1.3 --dport 7880 -j ACCEPT iptables -A FORWARD -i eth1 -o eth2 -s 192.168.1.3 -j ACCEPT iptables -t nat -A POSTROUTING -s 192.168.1.3 -j SNAT -o eth2 --to-source 69.21.103.132 iptables -A FORWARD -t filter -o eth2 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -o eth2 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -t filter -i eth2 -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -i eth2 -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -p tcp -i eth2 -o eth1 -d 192.168.1.3 -m multiport --dports 80,443 -m state --state NEW -j ACCEPT I'm sure its something I'm doing wrong. Any help would be greatly appreciated. Thanks -- Bo Lynch

1 0

Question about optimal filesystem with many small files.
by oooooooooooo ooooooooooooo 13 Jul '09

13 Jul '09

Hi, I have a program that writes lots of files to a directory tree (around 15 Million fo files), and a node can have up to 400000 files (and I don't have any way to split this ammount in smaller ones). As the number of files grows, my application gets slower and slower (the app is works something like a cache for another app and I can't redesign the way it distributes files into disk due to the other app requirements). The filesystem I use is ext3 with teh following options enabled: Filesystem features: has_journal resize_inode dir_index filetype needs_recovery sparse_super large_file Is there any way to improve performance in ext3? Would you suggest another FS for this situation (this is a prodution server, so I need a stable one) ? Thanks in advance (and please excuse my bad english). _________________________________________________________________ Connect to the next generation of MSN Messenger http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=…

11 38

raid 1 disks upgrade
by Coert Waagmeester 13 Jul '09

13 Jul '09

Hello all, I have a machine with 2 SATA 250GB disks which I want to upgrade to 1TB SATAs This is the partition structure on both disks: Disk /dev/sda: 250.0 GB, 250059350016 bytes 255 heads, 63 sectors/track, 30401 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sda1 * 1 25 200781 fd Linux raid autodetect /dev/sda2 26 1971 15631245 fd Linux raid autodetect /dev/sda3 1972 30401 228363975 fd Linux raid autodetect there are 3x RAID1 arrays. First is for /boot Second if for swap Third is for LVM (contains / and other filesystems) What is the easiest way to get this upgraded? I thought that I could maybe dd all the LVM volumes and /boot into files, setup the new RAID1 arrays on the 1TB disks, and dd everything back? or is there an easier way? Regards, Coert

3 3

sFTP (client) RPM for CentOS 5.3 (32 bit) and/or putty-tools
by Lanny Marcus 13 Jul '09

13 Jul '09

I installed gFTP but apparently it does not handle the sFTP protocol. I also installed the FireFTP Add On for the Firefox browser, but when I tried to connect to the server, it says that I need putty-tools. I have the rpmforge and epel repositories configured but yum did not find putty-tools. Is there an RPM for a client program for gFTP or putty-tools? If so, in which repository? TIA! 1443 packages excluded due to repository priority protections Setting up Install Process Parsing package install arguments No package putty-tools available. Nothing to do

9 14

lyris list manager
by mattias 13 Jul '09

13 Jul '09

anyone run the lyris list manager on centos?

2 3

Cluster Related Question
by jeff＠bofus.org 12 Jul '09

12 Jul '09

I am not sure this is the proper forum for this question, feel free to redirect me if you like to the correct place. I have the following setup: vmware esxi 2 CentOS 5.3 servers (vmware virtual hosts) these 2 servers are running conga(luci, ricci) and the rest of the cluster suite with a simple IP address setup to failover for testing. My problem comes in when I need to setup fencing for the vmware servers. I have downloaded the fence_vmware_ng agent, and can manually fence using it on the command line. How can I add this agent to the conga or even the system-config-cluster interface for use in the agent list dropdown? If I add the fencing configuration to the cluster.conf manually, conga does not see it, and system-config-cluster refuses to load the configuration file, and says it is invalid... Thanks in advance for any help! -- *#-------------------------------* *Jeffery P. Humes* _______________________________________ No viruses found in this outgoing message Scanned by iolo AntiVirus 1.5.7.1 http://www.iolo.com

2 1

Is there an openssh security problem?
by Olaf Mueller 12 Jul '09

12 Jul '09

Hello, is there a security issue on CentOS 5.3 with openssh 4.3? I ask that cause of http://www.h-online.com/security/Rumours-of-critical-vulnerability-in-OpenS… and http://secer.org/hacktools/0day-openssh-remote-exploit.html. Should ssh login from internet on CentOS better be disabled? regards Olaf

13 14

Update Issue
by Ron Blizzard 11 Jul '09

11 Jul '09

I come to you "hat in hand" again. For the first time in a long while I got a "Update Notification" at the bottom of my screen -- so I decided to click on it and run the update. Unfortunately I got a couple dependency errors and am not sure how to solve them. (Not even sure why I got them.) They are as follows: Missing Dependency: libavcodec.so.51 is needed by package transcode-1.0.5-1.el5.rf.i386 (installed) Missing Dependency: libx264.so.55 is needed by package transcode-1.0.5-1.el5.rf.i386 (installed) The only non-CentOS repositories I have enabled are Adobe and RPMForge. (I have, however, downloaded files individually from PBone.) This is the first time I have had any problems for a while. Have I broken something? (I did find libavcodec.so.51 at PBone, but it won't install because it wants the libx264.so.55, which I haven't been able to find.) Is transcode what I use to convert CDs to MP3 files? I did recently add MP3 codecs to Juicer, so I could convert my CD collection. And I did try to update via yum after running 'yum clean all' and I got the same dependency issues. Thanks for any pointers. -- RonB -- Using CentOS 5.3

3 7

vsftpd not able to log in
by Eugene Vilensky 11 Jul '09

11 Jul '09

Hi folks, I can't seem to log into my system via vsftpd. All other services using PAM are fine...Am I missing something simple? ftp> user (username) user 331 Please specify the password. Password: 530 Login incorrect. # getenforce Permissive here is the event in /var/log/audit/audit.log: type=USER_AUTH msg=audit(1247235151.569:9781): user pid=21052 uid=0 auid=0 subj=root:system_r:ftpd_t:s0 msg='PAM: authentication acct="user" : exe="/usr/sbin/vsftpd" (hostname=hostname, addr=1.2.3.4, terminal=ftp res=failed)' cat /etc/pam.d/vsftpd #%PAM-1.0 session optional pam_keyinit.so force revoke auth required pam_listfile.so item=user sense=deny file=/etc/vsftpd/ftpusers onerr=succeed auth required pam_shells.so auth include system-auth account include system-auth session include system-auth session required pam_loginuid.so # grep local /etc/vsftpd/vsftpd.conf local_enable=YES local_umask=022 chroot_local_user=YES # getsebool -a | grep ftp allow_ftpd_anon_write --> off allow_ftpd_full_access --> off allow_ftpd_use_cifs --> off allow_ftpd_use_nfs --> off allow_tftp_anon_write --> off ftp_home_dir --> on ftpd_disable_trans --> off ftpd_is_daemon --> on httpd_enable_ftp_server --> off tftpd_disable_trans --> off

2 1

Regarding LARGE number of files in a folder in linux
by Bob Hoffman 10 Jul '09

10 Jul '09

This goes out to you admins who manage servers with a heavy load of information. I would like to know what you do about the number of files in a folder, or if that is a concern. I think there is a limitation or a slow down if it gets to big, but what is optimal (if necessary) Example- running a website that allows a user to upload some photos (small ones). You get lets say 300,000 users each uploading 10 photos. That's 3 million files. Storing that in one folder would seem like it would cause an issue when using that folder, is that right? If it does, what do you do about that? How do you handle things? If you have 300,000 clients you could give them their own folder each and then the folders would have only 10 photos, but one folder would contain 300,000 folders. SO what is best for file management and system resources? -Thanks Bob

4 4

← Newer
1
...
15
16
17
18
19
20
21
...
28
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2009