Discuss July 2009

discuss@lists.centos.org

301 participants
276 discussions

Re: [CentOS] DRBD on a xen host: crash on high I/O
by Ross Walker 29 Jul '09

29 Jul '09

On Jul 29, 2009, at 7:52 AM, "Andrea Dell'Amico" <adellam(a)sevenseas.org> wrote: > On Tue, 2009-07-28 at 14:31 -0400, William L. Maltby wrote: > >>> When the two hosts are in sync, if I activate more than a few (six >>> or >>> seven) xen guests, the master server crashes spectacularly and >>> reboots. >>> >>> I've seen a kernel dump over the serial console, but the machine >>> restarts immediately so I didn't write it down. >> >> If you have an available pc, hook it up in place of the serial >> console >> and start a terminal emulator, e.g. minicom or whatever you prefer, >> and >> turn on full logging. This should save everyting in a file that you >> can >> then review. > > Uhm. The console is on the DRAC5 card. I think I would need to > activate > some network kernel crash dump feature. > >> If it's a Windows based, just remember to get rid of the ^M with >> dos2unix, or equivalent, after you send it to a *IX box. >> >> I don't know anything about the rest of your problem, sorry. > > As I wrote, it's a production server. I cannot stop it when I want, I > need to reserve a weekend session. > In the meantime, I was asking if there's a known problem with a setup > like mine. I read on another forum how a user using iSCSI for domUs was experiencing network hangs due to the fact that dom0 didn't have enough scheduler credits to handle the network throughput. That might be related. http://lists.centos.org/pipermail/centos-virt/2009-June/001021.html -Ross

2 3

Re: [CentOS] SSH attacks from china
by Lucian＠lastdot.org 29 Jul '09

29 Jul '09

On Wed, Jul 29, 2009 at 9:10 PM, Sorin Srbu<sorin.srbu(a)orgfarm.uu.se> wrote: >>-----Original Message----- >>From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On >>Behalf Of Lucian(a)lastdot.org >>Sent: Sunday, July 26, 2009 11:27 PM >>To: CentOS mailing list >>Subject: Re: [CentOS] SSH attacks from china >> >>Vietnam and Indonezia are also suspects in my list. >>The biggest problem with this approach is that even tho I could ban >>whole Asia and Russia, a significant part of the attacks do not >>originate from there, but from countries like USA, UK, etc, controlled >>by hackers (also) from the aforementioned areas... >>The latest case of password breaking I had to deal with was from an >>USA IP address.. they managed to insert an iframe in all index.html >>and index.php files on the respective FTP account. The iframe however >>was pointing to a .ru website hosted in France.. Isn't globalization >>fun?! >>Anyway, just banning ranges of IP addresses may not enough, so to rely >>on this _only_ would be careless. > > Exactly, that was what I trying to get at! > > So you're not going to ban all ip addresses from the US I take it, since > most spam, crapware, attacks and whatnot originate from there, as you point > out? ;-) I might just do that, but of course, for a certain range of ports. Actually a better idea would be to just allow connections on the most sensitive services only from our country since we do no business with people abroad. It would be interesting to see which method is more performant, iptables+ipset or iptables-geoip. > -- > /Sorin > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > >

1 0

Re: [CentOS] SSH attacks from china
by Kai Schaetzl 29 Jul '09

29 Jul '09

Sorin Srbu wrote on Sat, 25 Jul 2009 19:40:28 +0200: > What if you have legit users from China and Korea trying to connect to your > server(s)? What if he does not? See, you always use the solution that fits you and your setup/environment/needs. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

3 3

Default PHP Build ! include Mysql Support?
by Chuck 29 Jul '09

29 Jul '09

Do you need to roll your own PHP build to support MySQL now? I don't see support built into the included libphp module.. Thx, CC

5 7

Grub fallback problem
by Matthias Blankenhaus 29 Jul '09

29 Jul '09

Hi ! I am running CentOS 5 using grub 0.97

1 0

mod_perl2 and DBD::SQLite
by Mark Hedges 29 Jul '09

29 Jul '09

On Thu, 23 Jul 2009, Fred Moyer wrote: > Looks like dev@httpd is aware of the issue and will be > releasing a fix. Haven't tried 5.3 centos but this sounds > like they shipped a version of apache that caused this. > > http://www.mail-archive.com/dev@httpd.apache.org/msg44177.html > Hello, it seems like httpd-devel 2.2.3 was patched with a bug from an upstream version. DBD::SQLite no longer works under mod_perl2, generating an error which is "not an error" upon any attempt to select something. (The same selects all work in a command-line script.) (https://rt.cpan.org/Ticket/Display.html?id=47983) I tried to sign up for a centos bug report username, but the signup form is buggy, the captcha never works.... Any chance someone can try to fix this? Mark

1 0

etc passwd and groups file
by Carlos Santana 29 Jul '09

29 Jul '09

Hi, I need to maintain a same user/group list on multiples systems. Can we just copy the same passwd and groups file on all machines? If we create a new user on one system then I will need to copy this to all other systems. This is quite cumbersome. Any suggestions? - CS.

7 11

Software RAID-1 partition constantly syncing
by Jeff Gregor 29 Jul '09

29 Jul '09

I have a partition set up as software RAID-1 on a CentOS 5.3 machine. Today, the system was rebooted, when it came back up I noticed that it had started to resync. It completes the sync, then immediately starts again. From the log: Jul 29 09:46:02 cbserver kernel: md: syncing RAID array md2 Jul 29 09:46:02 cbserver kernel: md: minimum _guaranteed_ reconstruction speed: 5000 KB/sec/disc. Jul 29 09:46:02 cbserver kernel: md: using maximum available idle IO bandwidth (but not more than 200000 KB/sec) for reconstruction. Jul 29 09:46:02 cbserver kernel: md: using 128k window, over a total of 239946752 blocks. Jul 29 11:02:01 cbserver kernel: md: md2: sync done. Jul 29 11:02:01 cbserver kernel: md: syncing RAID array md2 Jul 29 11:02:01 cbserver kernel: md: minimum _guaranteed_ reconstruction speed: 5000 KB/sec/disc. Jul 29 11:02:01 cbserver kernel: md: using maximum available idle IO bandwidth (but not more than 200000 KB/sec) for reconstruction. Jul 29 11:02:01 cbserver kernel: md: using 128k window, over a total of 239946752 blocks. Jul 29 11:56:36 cbserver kernel: md: md2: sync done. Jul 29 11:56:37 cbserver kernel: md: syncing RAID array md2 Jul 29 11:56:37 cbserver kernel: md: minimum _guaranteed_ reconstruction speed: 5000 KB/sec/disc. Jul 29 11:56:37 cbserver kernel: md: using maximum available idle IO bandwidth (but not more than 200000 KB/sec) for reconstruction. Jul 29 11:56:37 cbserver kernel: md: using 128k window, over a total of 239946752 blocks. Any idea what is causing this? And how to make it stop? Thanks!

1 0

limits.conf
by Eugene Vilensky 29 Jul '09

29 Jul '09

Hello, I understand the function and reason of limits.conf, and I have some limited experience configuring values for (essentially single-user) Oracle systems. How do I understand correctly what my limits should be for multiuser system system, are there best practice guidance? Are there some typical settings this list has had experience with for multiuser environments? Appreciated, Eugene

2 1

postfix and mail origin checks
by Karanbir Singh 29 Jul '09

29 Jul '09

hi, Whats the 'robust' way to make sure email to a specific destination is only accepted if it came over the localhost:25 or /usr/sbin/sendmail route ? anything else should get a 5xx error. Emails to other destinations should remain unaffected. Using postfix/c4. Had a look around, and header_checks might be one way to go. -- Karanbir Singh : http://www.karan.org/ : 2522219@icq

5 6

← Newer
1
2
3
4
5
6
7
8
9
...
28
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss July 2009