Discuss August 2009

discuss@lists.centos.org

282 participants
264 discussions

CentOS as a router
by James B. Byrne 10 Aug '09

10 Aug '09

I am setting up a small CentOS-5.3 host to act as a router. I have the device configured and working. What I am trying to accomplish now is configuring the firewall so as to protect both the router and the LAN. The host configuration has the WAN attached to eth0 (IP_ADDR = A) and the LAN attached to eth1 (IP_ADDR = B). The default gateway for B is A. The default gateway for B is B-1. There is a static route set for eth0 (A) to route traffic for B/24 to B. My understanding is that INCOMING packets, for the purposes of iptables, originate outside the host interfaces and that OUTGOING packets originate from, or are forwarded across, the host itself. So, as I understand things, traffic from network C/24 destined to B/24 comes IN eth0, is forwarded to eth1, and then goes OUT eth1. Similarly, traffic from B/24 to C/24 comes IN eth1 and goes OUT eth0. Is my understanding correct? I have set up four custom chains, one each for IN and OUT on each of the two eth i/f. Incoming packets for eth0 are sent to the WAN-IN-CHAIN, outgoing are sent to the WAN-OUT-CHAIN. In a similar fashion I have LAN-IN-CHAIN and LAN-OUT-CHAIN. My confusion arises from trying to setup an iptables filter on the WAN-In-CHAIN so that traffic arriving to eth0 cannot connect to either A or B, but can nonetheless pass through B to B/24. I cannot seem to discover an arrangement whereby I can do this and still maintain network connectivity to B/24 from a console session running on the router itself. Further, I wish to prevent any incoming connection from the WAN for any source address purporting to belong to the B/24 netblock (IP spoofing). Again, whatever arrangements that I try, whenever I enable such a rule I lose network connectivity from the console session to the LAN. I would appreciate some guidance and an explanation of what fundamental issue it is that I am missing. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

6 6

remot powerbar
by chloe K 10 Aug '09

10 Aug '09

Hi all Have you had any experience using linux to do the remotepower bar function? Thank you __________________________________________________________________ Connect with friends from any web browser - no download required. Try the new Yahoo! Canada Messenger for the Web BETA at http://ca.messenger.yahoo.com/webmessengerpromo.php

2 1

OT: Newest kernels much smaller in size
by Lanny Marcus 10 Aug '09

10 Aug '09

I'm updating my Desktop and curious as to the reason for the huge difference in size, between the oldest kernel, which will be removed, and the newest one that will be installed. Question: Did they remove a lot of things from the kernel or rewrite it much more efficiently? TIA. Installing: kernel i686 2.6.18-128.4.1.el5 updates 15 M Removing: kernel i686 2.6.18-128.1.6.el5 installed 40 M

2 2

Execution from ip-up.local
by Ed Warner 10 Aug '09

10 Aug '09

Hi, I'm using Firestarter as my firewall. If I restart the network or my DSL line goes down, I have to manually restart Firestarter. I have sh /etc/firestarter/firestarter.sh stop and then sh /etc/firestarter/firestarter.sh start in my ip-up.local file. I confirmed ip-up.local us being executed by placing an entry in the logs, but it appears firestarter is not or at least not correctly. Does anyone have a suggestion as how I could further troubleshoot this problem? Thanks for your help.

3 2

Current Infighting
by Cory Rainey 09 Aug '09

09 Aug '09

Most often, I sit here and read the posts because I don't feel I'm qualified yet to be of help to anyone posting in this mailing list. I chose CentOS for my work file server because I had always used RedHat and Fedora and felt comfortable with it. I feel blessed to be part of this community and would be sadly disappointed if it were to self destruct. I appreciate the developers and would not have a clue how they do what they do. I have a great product with support when I need it from the forums and help there when I can as well. That's all I ask. I would gladly donate to the project if there was anything left after paying the bills. I'm sure my boss would as well but, he couldn't even give me a raise this year and is concerned about the future given the economy. Cory

2 1

CentOS-announce Digest, Vol 54, Issue 2
by centos-announce-request＠centos.org 09 Aug '09

09 Aug '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:1201 Important CentOS 5 x86_64 java-1.6.0-openjdk Update (Johnny Hughes) 2. CESA-2009:1201 Important CentOS 5 i386 java-1.6.0-openjdk Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 08 Aug 2009 23:11:10 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2009:1201 Important CentOS 5 x86_64 java-1.6.0-openjdk Update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <4A7E4C5E.7040802(a)centos.org> Content-Type: text/plain; charset="iso-8859-1" CentOS Errata and Security Advisory 2009:1201 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2009-1201.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: java-1.6.0-openjdk-1.6.0.0-1.2.b09.el5.x86_64.rpm java-1.6.0-openjdk-demo-1.6.0.0-1.2.b09.el5.x86_64.rpm java-1.6.0-openjdk-devel-1.6.0.0-1.2.b09.el5.x86_64.rpm java-1.6.0-openjdk-javadoc-1.6.0.0-1.2.b09.el5.x86_64.rpm java-1.6.0-openjdk-src-1.6.0.0-1.2.b09.el5.x86_64.rpm src: java-1.6.0-openjdk-1.6.0.0-1.2.b09.el5.src.rpm

1 0

ledgersmb installation
by Frank Cox 09 Aug '09

09 Aug '09

I'm attempting to install ledgersmb on Centos 5 and I'm sure that I've missed something. After doing the initial installation, I get a 404 when I get to the part of the instructions that tell me to go to http://localhost/ledgersmb/admin.pl /etc/httpd/conf.d/ledgersmb.conf contains the following line: Alias /usr/share/ledgersmb WORKING_DIR /usr/share/ledgersmb exists and contains a file named admin.pl /etc/httpd/conf/httpd.conf contains the following line: Include conf.d/*.conf But when I go to http://localhost/ledgersmb/admin.pl I get this entry in the apache log: 127.0.0.1 - - [08/Aug/2009:15:47:30 -0600] "GET /ledgersmb/admin.pl HTTP/1.1" 40 4 291 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.12) Gecko/2009072711 CentOS/3.0.12-1.el5.centos Firefox/3.0.12" What have I missed here? -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

2 2

RPMs for vispan , spamstat, phplistadmin
by Linux Advocate 08 Aug '09

08 Aug '09

Guys, i have heard of vispan, phplistadmin, spamstat from the mailscanner manual and would like to experiment with them. 1. Any thoughts on them? ( i am trying to avoid mailwatch bcos i think vispan is better fit for reporting) 2. I have googled for their centos rpms but no luck? Any ideas where i can get their rpms? regards, marco.

1 1

Flow-Tools RPM for CentOS 5.3
by Camron W. Fox 08 Aug '09

08 Aug '09

Alle, Does anyone know if there is/where to get an rpm of flow-tools V0.66 or better for CentOS/RHEL 5.3? We've been trying to build from the SRPM @ http://cng.ateneo.net/cng/wyu/software/srpm/flow-tools-0.68-2.src.rpm with no luck. Best Regards, Camron -- Camron W. Fox Hilo Office High Performance Computing Group Fujitsu Management Services of America, Inc. E-mail: cwfox(a)us.fujitsu.com

5 6

Internet squid proxy for banner and add filtering and Nagios
by Dave 07 Aug '09

07 Aug '09

Hello, I've got a standalone internet server, it's a vps and i'd like to use it for proxy and add filtering. Since it's directly accessible from the internet i need to lock it down so only designated users can get to it, i'd prefer encrypted transmission of credentials. I've also wanted to get nagios going on this box so it can monitor other services and email/sms when they go down as in an unexpected reboot and don't come back up. That one i definitely want to secure the cgi interface. For both the squid and nagios only authorized users should be able to get to them, and only users on the machine itself, via ssh, ideally should be able to configure them. I'd appreciate any suggestions. Thanks. Dave.

1 0

← Newer
1
...
19
20
21
22
23
24
25
26
27
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2009