Discuss September 2010

discuss@lists.centos.org

225 participants
167 discussions

CentOS or other Linux Internet Router/Gateway
by Ron Blizzard 02 Sep '10

02 Sep '10

Hi Everyone, I've got kids who are growing older and I want to build a Linux box to filter Internet access. I've got six computers on the Internet, plus the laptops -- most run Windows. I'm not sure if it's called a router or gateway or...? I don't mind doing the leg work, I just don't know where to start. I'm pretty sure I'm *not* looking for a web server (though it might be fun to have a local web) -- I might also use the computer for a file server, but I mostly want a... proxy server? Not sure what tool I need to use. I seem to remember there were specialty Linux distributions for this purpose. Once I do figure out what kind of box I'm building, would I still be able to put my Linksys router behind it, or would the Linux box *be* the router? -- and would I have to get a wireless switch instead? Would a Pentium III handle this duty, or would it gum up the works and make the Internet too slow? Sorry for stupid questions. At some point I'm going to have to learn about Linux servers. I'm hoping this project will help me get started on that. Thanks for any pointers. -- RonB -- Using CentOS 5.5

12 14

Issue with Perl and rpmforge - advice?
by Mark 02 Sep '10

02 Sep '10

I have an old version of rkhunter installed on my CentOS 5 machine, one I got from rpmforge. In my most recent attempts to update this, I get the following errors in yum: Resolving Dependencies --> Running transaction check ---> Package perl-AnyEvent.noarch 0:5.240-1.el5.rf set to be updated --> Processing Dependency: perl(JSON::XS) >= 2.2 for package: perl-AnyEvent --> Processing Dependency: perl(JSON) >= 2.09 for package: perl-AnyEvent --> Processing Dependency: perl(EV) >= 3.05 for package: perl-AnyEvent --> Processing Dependency: perl(Guard) >= 1.02 for package: perl-AnyEvent --> Processing Dependency: perl(Net::SSLeay) >= 1.33 for package: perl-AnyEvent ---> Package perl-Compress-Raw-Bzip2.x86_64 0:2.024-1.el5.rf set to be updated ---> Package perl-Compress-Raw-Zlib.x86_64 0:2.024-1.el5.rf set to be updated ---> Package perl-Error.noarch 0:0.17016-1.el5.rf set to be updated ---> Package perl-Event.x86_64 0:1.13-1.el5.rf set to be updated ---> Package perl-Event-ExecFlow.x86_64 0:0.64-1.el5.rf set to be updated ---> Package perl-IO-AIO.x86_64 0:3.310-1.el5.rf set to be updated ---> Package perl-IO-Compress.noarch 0:2.024-1.el5.rf set to be updated ---> Package perl-common-sense.x86_64 0:3.0-1.el5.rf set to be updated ---> Package rkhunter.noarch 0:1.3.6-1.el5.rf set to be updated --> Processing Dependency: perl(Digest::SHA256) for package: rkhunter --> Processing Dependency: perl(Digest::SHA::PurePerl) for package: rkhunter --> Running transaction check ---> Package perl-AnyEvent.noarch 0:5.240-1.el5.rf set to be updated --> Processing Dependency: perl(Net::SSLeay) >= 1.33 for package: perl-AnyEvent ---> Package perl-Digest-SHA-PurePerl.noarch 0:5.48-1.el5.rf set to be updated ---> Package perl-EV.x86_64 0:3.9-1.el5.rf set to be updated ---> Package perl-Guard.x86_64 0:1.021-1.el5.rf set to be updated ---> Package perl-JSON.noarch 0:2.17-1.el5.rf set to be updated ---> Package perl-JSON-XS.x86_64 0:2.27-1.el5.rf set to be updated ---> Package perl-SHA256.x86_64 0:0.01b-1.2.el5.rf set to be updated --> Finished Dependency Resolution perl-AnyEvent-5.240-1.el5.rf.noarch from rpmforge has depsolving problems --> Missing Dependency: perl(Net::SSLeay) >= 1.33 is needed by package perl-AnyEvent-5.240-1.el5.rf.noarch (rpmforge) Error: Missing Dependency: perl(Net::SSLeay) >= 1.33 is needed by package perl-AnyEvent-5.240-1.el5.rf.noarch (rpmforge) You could try using --skip-broken to work around the problem You could try running: package-cleanup --problems package-cleanup --dupes rpm -Va --nofiles --nodigest This seems to be because my current perl installation has the following: perl-Net-SSLeay.x86_64 1.30-4.fc6 installed IIRC, this is part of the base perl package, which repo has higher priority than the rpmforge repo (of course), which in turn makes the rpmforge perl packages invisible. Questions: 1) Are the newer perl packages from rpmforge compatible with the installed base perl packages? 2) What other implications should I be looking for if I try this (other than the obvious caveat about other rpmforge rpms breaking other base rpms)? There's a fair amount of perl support in the installed base, I just want to be sure I'm not likely to break it. Thanks. Mark

3 2

statd random port - sysconfig/nfs not taking effect
by Carlos S 02 Sep '10

02 Sep '10

I have changed /etc/sysconfig/nfs to specify port numbers for NFS daemons. Somehow statd is still starting up at random port number. Other damons are starting at properly at specified port numbers Any clues on what might be wrong? Any other location/setting that takes precedence over sysconfig/nfs ? It's CentOS 5.5 64bit with nfs-utils 1.0.9-44.el5. -- Thanks, CS

2 2

CentOS-announce Digest, Vol 67, Issue 1
by centos-announce-request＠centos.org 01 Sep '10

01 Sep '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2010:0659 Moderate CentOS 5 i386 httpd Update (Tru Huynh) 2. CESA-2010:0659 Moderate CentOS 5 x86_64 httpd Update (Tru Huynh) 3. CESA-2010:0661 Important CentOS 5 i386 kernel Update (Tru Huynh) 4. CESA-2010:0661 Important CentOS 5 x86_64 kernel Update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Tue, 31 Aug 2010 23:00:21 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2010:0659 Moderate CentOS 5 i386 httpd Update To: centos-announce(a)centos.org Message-ID: <20100831210021.GA10702(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2010:0659 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2010-0659.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 9b99fcca26df8063d08aba563b24d861 httpd-2.2.3-43.el5.centos.3.i386.rpm 73770d0645a9f2564c71f008366e72dd httpd-devel-2.2.3-43.el5.centos.3.i386.rpm 3b2aca895c8b923b30704a8996e5aff2 httpd-manual-2.2.3-43.el5.centos.3.i386.rpm bde6ce974f3fc2aac28c7ac4cf8bbb5b mod_ssl-2.2.3-43.el5.centos.3.i386.rpm source: 914f75cbabbf004efa4085a1fada84b0 httpd-2.2.3-43.el5.centos.3.src.rpm Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

PAM_shield locking me out?
by Rob Kampen 01 Sep '10

01 Sep '10

Yesterday I installed pam_shield and followed the testing suggested and thought all was well. today I find that I cannot get to my email account, I can login via ssh okay (uses keys) but su and sudo give segmentation faults. I am guessing due to the pam module causing a problem. As I cannot do remote login as root and sudo and su use pam I appear to have locked myself out. Any words of wisdom from those a little more knowledgeable? Why do I keep trying new things - I like to improve my system and harden it against constant script kiddies (many different triers per day), but despite reading all the instructions I fall into a hole I cannot climb out of. Hopefully someone has an idea BTW - the console also fails to allow login TIA Rob

5 12

Automatically detecting LUNs without a reboot
by Gabriel Tabares 01 Sep '10

01 Sep '10

Hi everybody. I have an HP StorageWorks array connected to one of my servers, connected via an LSI controller (lspci reports: SCSI storage controller: LSI Logic / Symbios Logic SAS1068E PCI-Express Fusion-MPT SAS (rev 08)) on an HP DL385 running CentOS 5.5 x86_64. I have set up multipath and all is working but, when I create a snaphost and export it as a new LUN from the HP web interface, it does not appear as a new disk. If I reboot, I get the LUN to appear as a new SCSI device (sd[a-z]). Is there any way I can force automatic detection? One of the reasons to use snapshots is to be able to back up the system without downtime, so not being able to detect the LUNs makes the whole set up a bit pointless. I have tried kudzu, the rescan-scsi-bus.sh script and everything else I have found online, with no luck. The LSI tools only seem to be available for i386, and I would like to avoid adding the 32bit environment, if I can. Any help would be greatly appreciated. Thanks, Gabriel Tabares

4 6

iptables for PostgreSQL not working
by Carlos S 01 Sep '10

01 Sep '10

Hi, I am having problem in configuring iptables for PostgreSQL server. I added following rule to iptables to allow connections to default PostgreSQL port (5432): {{{ sudo /sbin/iptables -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 10.0.0.0/24 --dport 5432 -j ACCEPT }}} After this I can't connect using telnet or psql (postgres client). Following error is received from telnet on MacOS and CentOS: {{{ MacOS$ telnet 10.0.0.12 5432 Trying 10.0.0.12… telnet: connect to address 10.0.0.12: Connection refused telnet: Unable to connect to remote host }}} {{{ CentOS$ telnet 10.0.0.12 5432 Trying 10.0.0.12... telnet: connect to address 10.0.0.12: No route to host }}} I tried removing source address constraint and to allow connections from all hosts, however that didn't make any difference. * The connection works fine when I stop iptables firewall. I am sure there is no rule before this 5432 rule which is refusing connections. The PostgreSQL server is running and accepting localhost connections. Also, hosts.allow and hosts.deny file are not refusing connections. Any help on what might be wrong? -- Thanks, CS

1 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss September 2010