Discuss January 2010

discuss@lists.centos.org

296 participants
322 discussions

Centos 5.4 and TYAN s4985 motherboard....
by Tom Bishop 05 Jan '10

05 Jan '10

Was wondering if anyone has any luck with the Tyan s4985 motherboard, I had loaded up the latest 5.4 release and in installed most everything that I wanted but when I loaded it up, as in processor wise it would lock up. Funny thing I could still ssh to it but not do a su - or anything from the console. I think it is kernel related and tried the previous kernel but it still exhibited the same symptom. The only thing I saw in the log was a message about a soft lockup on cpu0, there is a open bug for that but from the description doesn't appear to cause any issues. I am running 4 opteron 8356 just for clarification....

3 5

IPTABLEs and port scanning
by James B. Byrne 05 Jan '10

05 Jan '10

I see many entries in /var/log/secure similar to these: . . . /var/log/secure.1:Dec 31 08:00:55 gway01 sshd[7220]: Received disconnect from 93.89.144.31: 11: Bye Bye /var/log/secure.1:Dec 31 08:00:58 gway01 sshd[7221]: Failed password for root from 93.89.144.31 port 60100 ssh2 /var/log/secure.1:Dec 31 08:00:58 gway01 sshd[7222]: Received disconnect from 93.89.144.31: 11: Bye Bye /var/log/secure.1:Dec 31 08:01:02 gway01 sshd[7223]: Failed password for root from 93.89.144.31 port 60962 ssh2 /var/log/secure.1:Dec 31 08:01:02 gway01 sshd[7224]: Received disconnect from 93.89.144.31: 11: Bye Bye /var/log/secure.1:Dec 31 08:01:05 gway01 sshd[7227]: Failed password for root from 93.89.144.31 port 33612 ssh2 /var/log/secure.1:Dec 31 08:01:05 gway01 sshd[7228]: Received disconnect from 93.89.144.31: 11: Bye Bye /var/log/secure.1:Dec 31 08:01:09 gway01 sshd[7229]: Failed password for root from 93.89.144.31 port 34504 ssh2 . . . As you can see, the ports are not those associated with the service requested. SSHD is configured to listen on the standard port (22) and only on a single IP address that is supposed to be reachable only from the internal network (this is a multi-homed system configured as a gateway). These are getting through the brute force filters because the attempts are directed against unchecked ports. I suspect that these represent no immediate danger to our systems because there are no active services on any of the ports and because we have a guillotine rule at the end of our INPUT chain. The firewall is configured to only allow connections to specified ports and to drop any new connection attempts to all the others. My confusion is over why these things are making it into the logs at all when sshd does not listen on those ports and the ports themselves are supposed to inaccessible through the firewall. There presence inoculates a doubt in my mind that things are properly configured. I would appreciate any insight as to why these attempts are nonetheless logged by sshd. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 5

CentOS-announce Digest, Vol 59, Issue 1
by centos-announce-request＠centos.org 05 Jan '10

05 Jan '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0002 Moderate CentOS 4 i386 PyXML - security update (Tru Huynh) 2. CESA-2010:0002 Moderate CentOS 4 x86_64 PyXML - security update (Tru Huynh) 3. CESA-2010:0003 Moderate CentOS 4 i386 gd - security update (Tru Huynh) 4. CESA-2010:0003 Moderate CentOS 4 x86_64 gd - security update (Tru Huynh) 5. CESA-2010:0002 Moderate CentOS 5 x86_64 PyXML Update (Karanbir Singh) 6. CESA-2010:0002 Moderate CentOS 5 i386 PyXML Update (Karanbir Singh) 7. CESA-2010:0003 Moderate CentOS 5 x86_64 gd Update (Karanbir Singh) 8. CESA-2010:0003 Moderate CentOS 5 i386 gd Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 5 Jan 2010 00:32:13 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0002 Moderate CentOS 4 i386 PyXML - security update To: centos-announce(a)centos.org Message-ID: <20100104233213.GA25522(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2010:0002 PyXML security update for CentOS 4 i386: https://rhn.redhat.com/errata/RHSA-2010-0002.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/PyXML-0.8.3-6.el4_8.2.i386.rpm source: updates/SRPMS/PyXML-0.8.3-6.el4_8.2.src.rpm You may update your CentOS-4 i386 installations by running the command: yum update PyXML Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Weird update problem
by Anne Wilson 05 Jan '10

05 Jan '10

For some time now updates on my CentOS box had skipped exiv2. Yesterday I decided to do something about it, so I removed it - together with gwenview, digikam and, IIRC, libexiv2. That sounded reasonable, so I accepted the removal, then re-installed gwenview and digikam, which, of course, pulled in the two exiv2 packages. The version number of exiv2 sounded familiar, but I assumed that it would bring in the best-match version, and continued. This morning, seeing that more updates were announced, I ran update again. To my surprise, exiv2 was skipped, as before. I'm curious as to what could be happening here. Anne -- KDE Community Working Group New to KDE Software? - get help from http://userbase.kde.org

3 11

Installing over network
by Slack-Moehrle 05 Jan '10

05 Jan '10

Hi All, I see that sparc.centos.org does not contain any ISO's so that I can install from CD. How does one install over the internet? I have never done it before. I assume use the boot.iso and make sure that I have DHCP turned on so that I get an IP automatically from my router? Any advice? -Jason

6 11

PAM configuration?
by Roland Roland 05 Jan '10

05 Jan '10

Hello all, Can anyone please help out with configuring PAM? I've checked a couple of tutorials online.. though most of them are related to Login though I want to set PAM up for SSH logins... I've set the max erroneous logins to just THREE and even after trying to login with an error pass I still can get in... also is there a way I could enable the PAM module which uses crack library to check the strength of a users password? any help with this is truly appreciated... thanks in advance

4 5

James Matthews wants to connect on LinkedIn
by James Matthews 05 Jan '10

05 Jan '10

LinkedIn ------------ James Matthews requested to add you as a connection on LinkedIn: ------------------------------------------ Romeo, I'd like to add you to my professional network on LinkedIn. - James Matthews Accept invitation from James Matthews http://www.linkedin.com/e/c640Z0zoY42Hba6yQ6iWhZknxFvA/blk/I1698721392_2/pm… View invitation from James Matthews http://www.linkedin.com/e/c640Z0zoY42Hba6yQ6iWhZknxFvA/blk/I1698721392_2/39… ------------------------------------------ DID YOU KNOW your LinkedIn profile helps you control your public image when people search for you? Setting your profile as public means your LinkedIn profile will come up when people enter your name in leading search engines. Take control of your image! http://www.linkedin.com/e/ewp/inv-22/ ------ (c) 2009, LinkedIn Corporation

1 0

OT: piped greps with regex
by Mr. X 04 Jan '10

04 Jan '10

List, Happy NY. >From the bash command below, I'm trying to parse out the startsector value: $ sudo file mini_vusb.img mini_vusb.img: x86 boot sector, Microsoft Windows XP MBR, Serial 0x25d84; partition 1: ID=0xe, active, starthead 1, startsector 32, 390496 sectors First try was with grep/egrep but I wanted to capture 'startsector 32' as a group (). Nothing came close to working. Fail 1 Next attempt was with Perl file mini_vusb | perl -lane '$i=0 ;for (@F) {print substr($F[$i+1],0,-1) if ($_ eq "startsector"); $i++}' the above works, but it's too much fire power for the job :) Actually I came up with it in a minute or two once I remembered the special var @F. Success 1 Last effort led to this $ sudo file mini_vusb.img | grep -Po 'startsector\s+\d+'| grep -Po '\d+' 32 I like this best. Is there a way to shorten it up? -- Mark

3 2

Sendmail error: auxpropfunc error invalid parameter supplied
by Jussi Hirvi 04 Jan '10

04 Jan '10

I just noticed this error in my messages log after restarting sendmail. The only change I have made is 1) manual fix in /usr/share/spamassassin/72_active.conf 2) sa-update (several times) Now the mail is not running ok, my mail queue keeps growing. Regards, Jussi Hirvi

2 2

Extract Pax archive
by Per Qvindesland 03 Jan '10

03 Jan '10

Hi list Does anyone know how to extract a pax archive in Linux? I have been trying with the pax but with no joy perhaps I did not put in the correct switches. Regards Per Qvindesland

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss January 2010