Discuss August 2010

discuss@lists.centos.org

250 participants
191 discussions

Automated Reply from Dieter Thiel <centos-announce@centos.org>
by Dieter Thiel 11 Aug '10

11 Aug '10

Abwesenheitsnotiz: Vielen Dank für Ihre Nachricht. Ich bin ab dem 16.08. wieder im Büro erreichbar. In dringenden Fällen wenden Sie sich bitte an Herrn Ostermann, Email <ostermann(a)dimast.de>. Vielen Dank!

1 0

sshd bug?
by Matt Keating 11 Aug '10

11 Aug '10

Hi, I've found a bug/problem with my centos 5.5 server. Any users who have a password of 9 characters or more, only the first 9 characters are used by the OS... eg. i set my password to "123456789" and i try logon via ssh with password "123456789ofgjdfuh" - it lets me in. and if i set my password to "qwertasdfGHJB" and i enter "qwertasdfSDWQWSDS" - it lets me in... The 'passwd' command only recognises the first 9 characters too... Has anyone seen this before, or know how to fix it? I feel its a major security risk and would like it fixed ASAP. Thanks, Matt

3 4

good centos/rhel source for latest spamassassin?
by Eero Volotinen 11 Aug '10

11 Aug '10

Is there any good rpm source for latest spamassassin for centos/rhel ? Currently using from dag's, but is is a bit old version nowdays. -- Eero

7 9

Re: [CentOS] Iptables questions
by Bob Hoffman 11 Aug '10

11 Aug '10

Forgive me if this does not go with the right topic, I am on digest and responding to a topic sometimes makes it start a new one. My reason for the iptables questions is to not follow the practice of putting up a wall and ignoring hackers. I want to be more proactive. If I have set my ssh port to 55994 and am not using port 22, but hackers are pounding on my port 22 looking for Ssh, then I want to not only know about it, I want to log them and prevent them access to my server and web applications. At least temporarily. I see now that many of the programs are log users and not real time. And many like fail2ban actually add chains to iptables that I Could do myself. It looks like getting some books on netfilter may be the way to go. I would rather stop stuff at the firewall then trust apache, php, sendmail, vsftp, etc. I would rather use them as back up failsafes while I work on hack proofing the single point of entry. I have a server sitting right on the net and the constant barrage of 100s of Ips trying thousands of times at port 22 is insane. I examine my logs and see so much in the way of dns posion attacks, ssh-mail-ftp, etc attacks that I do not want to just sit back and Think I am fine because I have a firewall and centos will send me bug fixes. That firewall seems like the 100% way of going at stopping and preventing issues. If an IP is doing something it should not be doing, most likely you do not want it probing anything else either. That's why I ask.

8 7

Iptables questions
by Bob Hoffman 11 Aug '10

11 Aug '10

Hello, I have read and seen many options for additions to Iptables as a firewall and security system. All seem to react to logs and not to incoming packets (as far as I have seen) I am interested in doing a number of security ideas to the firewall, iptables, on my webserver. If you have a program you would suggest or believe iptables is the proper solution, please feel free to post that. Here are some of the things I would like to do 1) I have switched my SSH to a different port. I would like to still check for anyone trying to hit the old port 22 and log them. At the same time add them to a reject/ban for a certain period of time, lets say 1 day. 2) there are certain apache hacks (like things that include ../) that I would prefer to stop at the firewall. I would also like to log these attempts and begin a reject/ban for a certain period of time. Or just log until I figure out the best way to safely ban. 3) There are common script kiddie hacks that look for certain files 1 million times a day. I would like to either look for them in the incoming packets, log, and ban. Or I would like to be able to use my own php program to route them out and then add to a ban list that iptables can use. These are just some of the things I am looking at doing. I also want to start a ban list for mail packets too, why bog down sendmail when I know what they are? I realize some things might be done via programs like fail2ban (like my php program making a list) but others would be better at the firewall as active reaction security measures. Any input kindly accepted. Thank you for any help or ideas. Bob

8 7

CentOS 5, gnome-screensaver and password amnesia?
by Scott Ehrlich 11 Aug '10

11 Aug '10

I've built some CentOS 5.5 64-bit systems straight off the DVD, full installs, and the Gnome screen lock (manually invoked or automatically via the gnome-screensaver) does not allow the user to unlock the screen. The only fix appears to be ctrl-alt-F<1 - 5> then have the user log into the tty session, type pkill -f gnome-screensaver, log out, then ctrl-alt-f7 to return to X. These systems are standalone, so there is no option to remote in, and the display is never unplugged from the system as some of the RedHat bugzilla reports show. I did try a yum update but the problem persists, so I suspect the issue has not been fixed, or if it has, has not been released via the yum default locations. The screensaver and manual screenlock options must be enabled, so disabling them is not an option. I've also developed a cron job to restart gnome-screensaver every few minutes. I've got other systems, built back when CentOS 5.0 was out, that do not experience this problem. I've built newer systems with CentOS 5.4 and 5.5, yum updates, and I don't think they have experienced the problem either. I _think_ the issue, thus far, appears to be a full install of all packages from the DVD, which is how I build various standalones. Does anyone have an update on when this will officially be fixed? Thanks for any insights. Scott

2 1

KTorrent on CentOS 5.5 does not exist
by MGW-Discussions 11 Aug '10

11 Aug '10

Greetings guys. What repo do I need to install to be able to install ktorrent? I have CentOS 5.5 however, when attempting to download a distro for use on a virtual machine, which only seems to provide a torrent, I am unable to locate any torrent clients, and yum installation fails for ktorrent. I thought that ktorrent was associated with kde so why isn't it installed by default? Thanks. -- Respectfully, Martes G Wigglesworth M. G. Wigglesworth Holdings, LLC www.mgwigglesworth.com

3 2

CentOS IRC logs
by didi 10 Aug '10

10 Aug '10

Hey It seams like loads of people have their own personal CentOS IRC logs, but is there a website where I can look at them? Cheers Didi -- Hoffmann Geerd-Dietger http://contact.ribalba.de

2 2

Automounter problem in C5.5?
by Mark 10 Aug '10

10 Aug '10

Last night I was having some bizarre problems with my USB ports. I couldn't access one of my scanners, and when I started moving plugs around, it seemed as though I lost more peripherals. For some reason, I did NOT lose the laser printer, but my one scanner and my scan/fax/printer disappeared and wouldn't come back. I figured it might be the automounter, so I tried plugging in a USB flash drive, and it did not get mounted either. I rebooted and the problem disappeared (duh). Questions: 1) I'm suspected this was an automounter failure - is that the most likely culprit? 2) How do I restart the automounter when it dies, or can I? I've hit this issue before once or twice and only rebooting seems to make it right again. Thanks. Mark

3 3

Stuttering sound
by Eduardo Grosclaude 10 Aug '10

10 Aug '10

Dear List, After some googling around without any results, I'm quite puzzled. Since some past update I can't precise, kernel 2.6.164 works fine, however 2.6.194 has some sound problem in my somewhat old and beaten Toshiba laptop. -Audacious plays OK but other applications have problems. -For instance, mplayer acts quirky: when I pause a playing video, sound keeps stuttering endlessly. The same happens sometimes when I close mplayer window. -system-config-soundcard detects the card and starts to play sample but stuttering all the way, repeating every 4th of a second or so some 16 times, at about a 1/2 second rate. -Youtube has no sound! -Software volume control has been lost long ago, unrelated to this problem but interested in recovery anyway System is fully up to date. Any hints will be appreciated! Some relevant lines in my /etc/modprobe.conf as is now, with some scars left after unfruitful battles: alias snd-card-0 snd-hda-intel #options snd-card-0 index=0 #options snd-hda-intel index=0 remove snd-hda-intel { /usr/sbin/alsactl store 0 >/dev/null 2>&1 || : ; }; /sbin/modprobe -r --ignore-remove snd-hda-intel options snd-hda-intel model=auto options snd-hda-intel probe_mask=1 options snd cards_limit=8 getinfo.sh output: == BEGIN uname -rmi == 2.6.18-194.8.1.el5 i686 i386 == END uname -rmi == == BEGIN rpm -q centos-release == centos-release-5-5.el5.centos == END rpm -q centos-release == == BEGIN getenforce == Disabled == END getenforce == == BEGIN rpm -qa kernel\* | sort == kernel-2.6.18-164.15.1.el5 kernel-2.6.18-194.3.1.el5 kernel-2.6.18-194.8.1.el5 kernel-devel-2.6.18-164.15.1.el5 kernel-devel-2.6.18-194.3.1.el5 kernel-devel-2.6.18-194.8.1.el5 kernel-headers-2.6.18-194.8.1.el5 == END rpm -qa kernel\* | sort == == BEGIN lspci == 00:00.0 Host bridge: Intel Corporation Mobile 915GM/PM/GMS/910GML Express Proces sor to DRAM Controller (rev 03) 00:01.0 PCI bridge: Intel Corporation Mobile 915GM/PM Express PCI Express Root P ort (rev 03) 00:1b.0 Audio device: Intel Corporation 82801FB/FBM/FR/FW/FRW (ICH6 Family) High Definition Audio Controller (rev 04) 00:1c.0 PCI bridge: Intel Corporation 82801FB/FBM/FR/FW/FRW (ICH6 Family) PCI Ex press Port 1 (rev 04) 00:1c.1 PCI bridge: Intel Corporation 82801FB/FBM/FR/FW/FRW (ICH6 Family) PCI Ex press Port 2 (rev 04) 00:1d.0 USB Controller: Intel Corporation 82801FB/FBM/FR/FW/FRW (ICH6 Family) US B UHCI #1 (rev 04) 00:1d.1 USB Controller: Intel Corporation 82801FB/FBM/FR/FW/FRW (ICH6 Family) US B UHCI #2 (rev 04) 00:1d.2 USB Controller: Intel Corporation 82801FB/FBM/FR/FW/FRW (ICH6 Family) US B UHCI #3 (rev 04) 00:1d.3 USB Controller: Intel Corporation 82801FB/FBM/FR/FW/FRW (ICH6 Family) US B UHCI #4 (rev 04) 00:1d.7 USB Controller: Intel Corporation 82801FB/FBM/FR/FW/FRW (ICH6 Family) US B2 EHCI Controller (rev 04) 00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev d4) 00:1f.0 ISA bridge: Intel Corporation 82801FBM (ICH6M) LPC Interface Bridge (rev 04) 00:1f.2 IDE interface: Intel Corporation 82801FBM (ICH6M) SATA Controller (rev 0 4) 01:00.0 VGA compatible controller: ATI Technologies Inc M24 [Radeon Mobility X60 0] 02:00.0 Ethernet controller: Marvell Technology Group Ltd. 88E8036 PCI-E Fast Et hernet Controller (rev 10) 06:04.0 Network controller: Intel Corporation PRO/Wireless 2200BG [Calexico2] Ne twork Connection (rev 05) 06:06.0 CardBus bridge: Texas Instruments PCIxx12 Cardbus Controller 06:06.1 FireWire (IEEE 1394): Texas Instruments PCIxx12 OHCI Compliant IEEE 1394 Host Controller 06:06.2 Mass storage controller: Texas Instruments 5-in-1 Multimedia Card Reader (SD/MMC/MS/MS PRO/xD) 06:06.3 SD Host controller: Texas Instruments PCIxx12 SDA Standard Compliant SD Host Controller == END lspci == == BEGIN lspci -n == 00:00.0 0600: 8086:2590 (rev 03) 00:01.0 0604: 8086:2591 (rev 03) 00:1b.0 0403: 8086:2668 (rev 04) 00:1c.0 0604: 8086:2660 (rev 04) 00:1c.1 0604: 8086:2662 (rev 04) 00:1d.0 0c03: 8086:2658 (rev 04) 00:1d.1 0c03: 8086:2659 (rev 04) 00:1d.2 0c03: 8086:265a (rev 04) 00:1d.3 0c03: 8086:265b (rev 04) 00:1d.7 0c03: 8086:265c (rev 04) 00:1e.0 0604: 8086:2448 (rev d4) 00:1f.0 0601: 8086:2641 (rev 04) 00:1f.2 0101: 8086:2653 (rev 04) 01:00.0 0300: 1002:5462 02:00.0 0200: 11ab:4351 (rev 10) 06:04.0 0280: 8086:4220 (rev 05) 06:06.0 0607: 104c:8039 06:06.1 0c00: 104c:803a 06:06.2 0180: 104c:803b 06:06.3 0805: 104c:803c == END lspci -n == -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina

4 6

← Newer
1
...
11
12
13
14
15
16
17
...
20
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2010