Discuss February 2011

discuss@lists.centos.org

267 participants
208 discussions

Logwatch reporting spamassassin messages as unmatched entries
by Steve Searle 28 Feb '11

28 Feb '11

I've recently switched to using spamassassin via a sendmail milter, rather than using procmail to invoke it. This means that I get a number of messages appearing in my maillog, and then being reported by logwatch as unmatched entries. An example of such a messages is: Feb 27 04:33:09 quail sendmail[24780]: p1R4X46P024780[2]: URIBL blacklist\n\t* [URIs: tablettoxicspillsrx.ru]\n\t* 1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist\n\t* [URIs: tablettoxicspillsrx.ru]\n\t* 1.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist\n\t* [URIs: tablettoxicspillsrx.ru]\n\t* 1.5 URIBL_SBL Contains an URL listed in the SBL blocklist\n\t* [URIs: tablettoxicspillsrx.ru]\n\t* 0.3 DRUGS_ERECTILE Refers to an erectile drug to \n\t* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%\n\t* [score: 1.0000]\n\t* 0.3 DRUG_ED_CAPS BODY: Mentions an E.D. drug\n\t* 1.6 DRUG_ED_GENERIC BODY: Mentions Generic Viagra\n\t* 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net\n\t* [Blocked - see <http://www.spamcop.net/bl.shtml?93.159.243.52>]\n\t* 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL\n\t* [93.159.243.52 listed in zen.spamhaus.org]\n\t* 3.0 RCVD_IN_XBL RBL: Received via a ... Is there a "best" approach to dealing with this; for instance stopping spamassassin reporting these to the maillog, or changing logwatch to recognise the messages. And how do I change it. Thanks Steve -- Website: www.stevesearle.com Twitter: @ReddishShift Facebook: www.facebook.com/steve.searle 09:11:55 up 6 days, 10:39, 1 user, load average: 0.08, 0.02, 0.01

2 1

Re: [CentOS] IP6 Anyone?
by Always Learning 28 Feb '11

28 Feb '11

On Sun, 2011-02-27 at 00:38 -0600, Larry Vaden wrote: > On Sat, Feb 26, 2011 at 2:12 PM, Always Learning <centos(a)g7.u22.net> wrote: > > > > Today I received an allocation of IP6 addresses for some servers. I can > > 'play' with the last 2 of the 8 IP6 address segments. > > I guess Will Rogers was correct after all :) > > You can label yourself as "special" since others get assignments of > IPv4 and IPv6 addresses. > > <https://www.arin.net/policy/archive/ipv6_policy.html#25> says, in part: > > 2.5. Allocate > > To allocate means to distribute address space to IRs for the purpose > of subsequent distribution by them. > > 2.6. Assign > > To assign means to delegate address space to an ISP or end-user, for > specific use within the Internet infrastructure they operate. > Assignments must only be made for specific purposes documented by > specific organizations and are not to be sub-assigned to other > parties. I was actually wrong. I can 'play' with not 2 but 4 groups of the IP6 allocation. Golly, what can I do with 64 x 64 x 64 x 64 address combinations? Hire then out? Have a different IP6 address for every hour of the year? Put the IP4 address in the last 4 groups? (2001::10.2.2.191) That vast surplus of IP6 addresses is just for one server - I have several. -- With best regards, Paul. England, EU.

7 8

php53 and Fileinfo
by Alexander Farber 28 Feb '11

28 Feb '11

Hello, for drupal 7 installation at CentOS 5.5 (I have 32 bit and 64 bit machines) I have to upgrade PHP to 5.3. I've followed the CentOS wiki: 1) Created this file - grep -v ^# /etc/yum.repos.d/CentOS-Testing.repo [c5-testing] name=CentOS-5 Testing baseurl=http://dev.centos.org/centos/$releasever/testing/$basearch/ enabled=1 gpgcheck=1 gpgkey=http://dev.centos.org/centos/RPM-GPG-KEY-CentOS-testing includepkgs=php* 2) Uninstalled the old PHP - rpm -qa|grep php| xargs sudo yum -y erase 3) Installed new php53: # rpm -qa |grep php php53-pgsql-5.3.3-1.el5 php53-gd-5.3.3-1.el5 php53-pdo-5.3.3-1.el5 php53-xml-5.3.3-1.el5 php53-cli-5.3.3-1.el5 php53-common-5.3.3-1.el5 php53-mbstring-5.3.3-1.el5 4) Verified php works: php -v PHP 5.3.3 (cli) (built: Jan 20 2011 23:02:42) Copyright (c) 1997-2010 The PHP Group Zend Engine v2.3.0, Copyright (c) 1998-2010 Zend Technologies Unfortunately I need Fileinfo module too, for my script. I do not see "pecl" though and also "yum install php-pecl-Fileinfo" fails with "wrong version" error. Any help please on how to install Fileinfo? Thank you Alex

1 1

Centos Project : STEM
by Always Learning 28 Feb '11

28 Feb '11

On https://projects.centos.org/trac/stem/ there is a brief mention of Stem and VOIP with a request for dial-in numbers. However there are no links on the page describing STEM. Stem sounds a bit like the Dutch word for 'voice'. What type of dialing-in, from the PSTN, numbers are required and how can they be used to benefit Centos? -- With best regards, Paul. England, EU.

1 0

log time formats - where is this defined
by Rob Kampen 28 Feb '11

28 Feb '11

One of my servers is using ISO datetime formats (2011-02-27T15:22:15.519857-05:00) in the logs the rest use the default redhat/CentOS format (Feb 27 15:10:21). After a couple of hours searching google I cannot find where this is defined. I know I changed it some months ago as an experiment but forgotten where this was done. the ISO format breaks logwatch - thus I need to revert. TIA

3 4

opened OpenSSL port
by erikmccaskey64 28 Feb '11

28 Feb '11

Main question: is it safe, to open a port for an openssl server? e.g.: server side - generate a self-signed cert. time openssl req -x509 -nodes -days 365 -newkey rsa:8192 -keyout mycert.pem -out mycert.pem openssl s_server -accept 52310 -cert mycert.pem Is it secure? - it could be DOSed' [DenialofService] or could it be attacked in any way? Are there any iptables rule for restricting connections to dyndns names? e.g.: only allow connection from "asdfasdf.dyndns.com" and "asdfasdf2.dyndns.com" and "asdfasdf3.dyndns.com"? How could i restrict the openssl server to only accept traffic from given clients? Please help me "think".. Or are there any "production ready" methods, that can do authentication too? [+using ssl]. "openssl s_server" and "openssl s_client" would be perfect, but the problem is it doesn't has username/password auth :\ Thank you for any help.

4 3

Recover botched drdb gfs2 setup .
by Machin, Greg 28 Feb '11

28 Feb '11

Hi. The short story... Rush job, never done clustered file systems before, vlan didn't support multicast. Thus I ended up with drbd working ok between the two servers but cman / gfs2 not working, resulting in what was meant to be a drbd primary/primary cluster being a primary/secondary cluster until the vlan could be fixed with gfs only mounted on the one server. I got the single server working and left to for the contractor to do there bit. Two months down the line and a few other hiccups in the mix I have a server that wont mount the gfs partition.. assuming that drbd hasn't gotten confused and lost the data on the drive.. If I can how do I fix this. Drbd is currently as follows: [root@mcvpsam01 init.d]# drbd-overview 1:r0 WFConnection Primary/Unknown UpToDate/DUnknown C r---- Cman: [root@mcvpsam01 init.d]# /etc/init.d/cman status groupd is stopped gfs2 mount [root@mcvpsam01 init.d]# ./gfsmount.sh start Mounting gfs2 partition /sbin/mount.gfs2: can't connect to gfs_controld: Connection refused /sbin/mount.gfs2: can't connect to gfs_controld: Connection refused /sbin/mount.gfs2: can't connect to gfs_controld: Connection refused /sbin/mount.gfs2: can't connect to gfs_controld: Connection refused /sbin/mount.gfs2: can't connect to gfs_controld: Connection refused /sbin/mount.gfs2: can't connect to gfs_controld: Connection refused /sbin/mount.gfs2: can't connect to gfs_controld: Connection refused /sbin/mount.gfs2: can't connect to gfs_controld: Connection refused /sbin/mount.gfs2: can't connect to gfs_controld: Connection refused /sbin/mount.gfs2: can't connect to gfs_controld: Connection refused /sbin/mount.gfs2: gfs_controld not running /sbin/mount.gfs2: error mounting lockproto lock_dlm [root@mcvpsam01 init.d]# And log/messages Feb 28 09:20:39 mcvpsam01 openais[3328]: [TOTEM] The consensus timeout expired. Feb 28 09:20:39 mcvpsam01 openais[3328]: [TOTEM] entering GATHER state from 3. Feb 28 09:20:54 mcvpsam01 openais[3328]: [TOTEM] The consensus timeout expired. Feb 28 09:20:54 mcvpsam01 openais[3328]: [TOTEM] entering GATHER state from 3. Feb 28 09:21:09 mcvpsam01 openais[3328]: [TOTEM] The consensus timeout expired. Feb 28 09:21:09 mcvpsam01 openais[3328]: [TOTEM] entering GATHER state from 3. cluster.conf [root@mcvpsam01 init.d]# cat /etc/cluster/cluster.conf <?xml version="1.0"?> <cluster alias="cluster-setup" config_version="1" name="cluster-setup"> <rm log_level="4"/> <fence_daemon clean_start="1" post_fail_delay="0" post_join_delay="3"/> <clusternodes> <clusternode name="mcvpsam01" nodeid="1" votes="1"> <fence> <method name="2"> <device name="LastResortNode01"/> </method> </fence> </clusternode> <clusternode name="drvpsam01" nodeid="2" votes="1"> <fence> <method name="2"> <device name="LastResortNode02"/> </method> </fence> </clusternode> </clusternodes> <cman expected_votes="1" two_node="1"/> <fencedevices> <fencedevice agent="fence_manual" name="LastResortNode01" nodename="mcvpsam01"/> <fencedevice agent="fence_manual" name="LastResortNode02" nodename="drvpsam01"/> </fencedevices> <rm/> <totem consensus="4800" join="60" token="10000" token_retransmits_before_loss_const="20"/> </cluster> [root@mcvpsam01 init.d]# Drbd.conf [root@mcvpsam01 init.d]# cat /etc/drbd.conf resource r0 { protocol C; syncer { rate 1000M; } startup { wfc-timeout 120; # wait 2min for other peers degr-wfc-timeout 120; # wait 2min if peer was already # down before this node was rebooted become-primary-on both; } net { allow-two-primaries; # cram-hmac-alg "sha1"; # algo to enable peer authentication # shared-secret "123456"; # handle split-brain situations after-sb-0pri discard-least-changes;# if no primary auto sync from the # node that touched more blocks during # the split brain situation. after-sb-1pri discard-secondary; # if one primary after-sb-2pri disconnect; # if two primaries # solve the cases when the outcome # of the resync decision is incompatible # with the current role assignment in # the cluster rr-conflict disconnect; # no automatic resynchronization # simply disconnect } disk { on-io-error detach; # detach the device from its # backing storage if the driver of # the lower_device reports an error # to DRBD # fencing resource-and-stonith; } on mcvpsam01 { device /dev/drbd1; disk /dev/sdb1; address 202.37.1.133:7789; meta-disk internal; } on drvpsam01 { device /dev/drbd1; disk /dev/sdb1; address 202.37.1.134:7789; meta-disk internal; } } [root@mcvpsam01 init.d]# [root@mcvpsam01 init.d]# cat /etc/drbd.d/global_common.conf global { usage-count yes; # minor-count dialog-refresh disable-ip-verification } common { protocol C; handlers { pri-on-incon-degr "/usr/lib/drbd/notify-pri-on-incon-degr.sh; /usr/lib/drbd/notify-emergency-reboot.sh; echo b > /proc/sysrq-trigger ; reboot -f"; pri-lost-after-sb "/usr/lib/drbd/notify-pri-lost-after-sb.sh; /usr/lib/drbd/notify-emergency-reboot.sh; echo b > /proc/sysrq-trigger ; reboot -f"; local-io-error "/usr/lib/drbd/notify-io-error.sh; /usr/lib/drbd/notify-emergency-shutdown.sh; echo o > /proc/sysrq-trigger ; halt -f"; # fence-peer "/usr/lib/drbd/crm-fence-peer.sh"; # split-brain "/usr/lib/drbd/notify-split-brain.sh root"; # out-of-sync "/usr/lib/drbd/notify-out-of-sync.sh root"; # before-resync-target "/usr/lib/drbd/snapshot-resync-target-lvm.sh -p 15 -- -c 16k"; # after-resync-target /usr/lib/drbd/unsnapshot-resync-target-lvm.sh; } startup { # wfc-timeout degr-wfc-timeout outdated-wfc-timeout wait-after-sb } disk { # on-io-error fencing use-bmbv no-disk-barrier no-disk-flushes # no-disk-drain no-md-flushes max-bio-bvecs } net { # sndbuf-size rcvbuf-size timeout connect-int ping-int ping-timeout max-buffers # max-epoch-size ko-count allow-two-primaries cram-hmac-alg shared-secret # after-sb-0pri after-sb-1pri after-sb-2pri data-integrity-alg no-tcp-cork } syncer { # rate after al-extents use-rle cpu-mask verify-alg csums-alg } } [root@mcvpsam01 init.d]# Any ideas how I can get the file system mounted to recover the data. Thanks Greg Machin Systems Administrator - Linux Infrastructure Group, Information Services

1 1

Standard location for hotplug-time hdparm invocation
by Kenneth Porter 27 Feb '11

27 Feb '11

I need to disable the spin-down on an external USB drive because it spins down spontaneously while in use. The drive forgets the spindown-disable state across power outage so I need to reissue the hdparm command with each boot or hotplug. Where should I put the hdparm command to do this?

2 3

Could CentOS 5.5 on newer hardware make it freeze or shutdown?
by cwlists 27 Feb '11

27 Feb '11

Hi, I have built a new PC on which I've installed CentOS 5.5 64-bit (with updates) which after some hours of running suddenly either hard freeze or instant power off. The /var/log/messages log doesn't reveal anything of what has happened. The load has been either just idling or with moderate disc activities (transfers over 100GBit). Below is the hardware spec: Motherboard: Gigabyte GA-H55N-USB3 CPU: Intel Core i5 650 RAM: CORSAIR 8 GB RAM HDD1: Intel X25-M 80GB HDD2-7: Samsung ECHOGREEN 500GB ST LABS SATA/300 4-PORT PCI-E PSU: Corsair CX 430W I've also been running memtest86 for more than 24 hours without any errors. I was on my way to return either the motherboard or the PSU when I thought of installing Fedora 14 and give it a try. The PC has now been running for over 48 hours without any glitch, with varying load. I should also mention another problem that strangely disappeared with F14, and that was that the Samsung HDDs, which I have in a soft RAID6, now and then timed out (only one at a time). The message log showed a dump of NCQ queued commands, before it reconnected that disk. In F14 I haven't seen any errors at all in the log. Could those problems only relate to C5, or do you think I also have hardware problems and only been lucky so far with F14? Best Regards, Christian

2 3

PCI ethernet card for CentOS
by Timothy Murphy 27 Feb '11

27 Feb '11

I need to get a second ethernet card for my HP Proliant CentOS server, to attach a LinkSys WRT54GL router to. I see that there are many Realtek RTL8169S gigabit cards going for a song on eBay. Is anyone using one of these under CentOS? Do they work OK? (I used to have a couple of Realtek cards - not gigabit - and they worked fine.) Or does anyone have a strong recommendation for other cards? Any advice or suggestions gratefully received. -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

4 7

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2011