Discuss February 2012

discuss@lists.centos.org

205 participants
193 discussions

Re: [CentOS] postfix - reject of incoming mail due to helo check??
by Les Mikesell 03 Feb '12

03 Feb '12

On Fri, Feb 3, 2012 at 8:14 AM, Reindl Harald <h.reindl(a)thelounge.net> wrote: > > on both sides of the NAt you need a DNS with the correct mapping > the host on the other side is not interested in your NAT > it sees a IP, a HELO and DNS-Records > > so it is YOUR job as admin to provide the correct HELO for your > outgoing IP and even configure the DNS behind the NAT correctly > if you like it really clean Your HELO has nothing to do with your source IP, and you can't possibly expect a multi-homed server to adjust its HELO to the interface it happens across. Expecting the reverse DNS of the source IP to give a name that has the same IP in an A record lookup is somewhat different, but still I don't think that is an actual requirement. As a mail admin, you are of course free to discard your users' mail for any whimsical reason you like, but if you want to say it is a requirement, please quote the MUST in an RFC. -- Les Mikesell lesmikesell(a)gmail.com

1 0

PHP updates for CVE-2012-0830 already in the pipeline?
by Leonard den Ottolander 03 Feb '12

03 Feb '12

Hello, The remote code execution issue that got introduced with 5.3.9 has me worried a bit. I was wondering if the upstream updates released about 14 hours ago are already being built. As this appears to be quite a serious issue I'm wondering if it's worth the trouble to downgrade php to a per January 11th version while waiting for the release of this update. Regards, Leonard. -- mount -t life -o ro /dev/dna /genetic/research

1 1

Bash scripting - Remotely ran commands break while loop
by Peter Blajev 03 Feb '12

03 Feb '12

I have two CentOS5 systems server1 and server2. There is user peter on server1 who can ssh to server2 using public ssh keys and no password is needed. What I noticed is that running remote ssh commands in bash script breaks while loops. ====== #!/bin/sh for i in server2 server2; do echo "--> Start" ssh peter@$i ls echo "--> END" done echo " server2 server2" | \ while read confLine; do echo "--> $confLine" ssh peter@$confLine ls echo "--> END $confLine" done ==== The "for" loop in the script above will run twice but the "while" loop below it will run only once. This is very simple to test and I've tried it on different systems including CentOS6 and OpenSolaris with the same result. Any idea what would cause the ssh command to break the while loop? Thanks Peter

5 7

LSi Logic SCSI controller driver
by Helmut Drodofsky 03 Feb '12

03 Feb '12

Hello, I have found a lot of discussions concerning the LSI Logic scsi driver. E.g.: https://lkml.org/lkml/2010/4/26/335 https://bugzilla.kernel.org/show_bug.cgi?id=16547 http://www.redhat.com/archives/rhl-list/2007-April/msg02661.html VMware ESXI was updated on 28. April 2011. Is this bug fixed in CentOS 6? RHEL 6 beta: the bug was included so far as I have read. -- Viele Grüße Helmut Drodofsky Internet XS Service GmbH Heßbrühlstraße 15 70565 Stuttgart Geschäftsführung Dr.-Ing. Roswitha Hahn-Drodofsky HRB 21091 Stuttgart USt.ID: DE190582774 Tel. 0711 781941 0 Fax: 0711 781941 79 Mail: info(a)internet-xs.de www.internet-xs.de

3 3

Load Balance between 2 NIC
by Roberto Cantalapiedra 03 Feb '12

03 Feb '12

Hi, I have a server with 2 NIC and 2 different ISP. The idea is configure a Load Balance with these 2 providers. I reviewed: http://lartc.org/lartc.html#LARTC.RPDB.MULTIPLE-LINKS but I would like to know if this is a good method to use with CentOS 6. Thanks in advance!

2 1

ip route and nexthop: the "CentOS" way
by Nick 03 Feb '12

03 Feb '12

Hi, I'm wanting to configure a CentOS 6 server to have a fall-back default route via a second network interface. Given: - eth0 with 192.168.0.10 on subnet 192.168.0.0/24 gateway 192.168.0.1 - eth1 with 192.168.1.10 on subnet 192.168.1.0/24 gateway 192.168.1.1 Where eth0's network is a "back door" to the internet, and eth1's is the "front door", I believe I can configure the routing table manually like this: ip route default scope global \ nexthop via 192.168.1.1 dev eth1 weight 1 \ nexthop via 192.168.0.1 dev eth0 weight 2 However, I've re-read the RHEL6 documents for configuring static routes here: http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Deploymen… This kind of thing doesn't seem to fit into the scheme of /etc/sysconfig/network-scripts/route-eth? described there, since the route isn't "for" any single interface. Is there a "RHEL/CentOS" way to do this, or do I need to resort to some sort of script containing the above ip route command inserted somewhere? And how do I stop CentOS from trying to pick its own default gateway settings (since /etc/sysconfig/network likely won't have a GATEWAY parameter)? Cheers, Nick ps. Hints about this obtained from http://lkml.indiana.edu/hypermail/linux/net/0201.0/0000.html http://lartc.org/lartc.html#AEN298

5 7

CentOS-announce Digest, Vol 84, Issue 2
by centos-announce-request＠centos.org 02 Feb '12

02 Feb '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2012:0088 CentOS 5 igb-kmod Update (Johnny Hughes) 2. CESA-2012:0086 Moderate CentOS 4 openssl Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 1 Feb 2012 21:11:48 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0088 CentOS 5 igb-kmod Update To: centos-announce(a)centos.org Message-ID: <20120201211148.GA14637(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0088 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0088.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 1e95d3b4772e0d6dfa54cdf005739f3734514d294ccf9d08a085af219089e581 kmod-igb-PAE-rhel5u7-3.0.6_k2_1.1-1.el5_7.i686.rpm 1a87f094a6ffcc5b2e43064ba008c24626135743b52111fdfac8de5ebdbc7ece kmod-igb-rhel5u7-3.0.6_k2_1.1-1.el5_7.i686.rpm c24ea761bec86b3c0ff07cfec83194b948f1394c4b3b4d8bbf61aee2d2016236 kmod-igb-xen-rhel5u7-3.0.6_k2_1.1-1.el5_7.i686.rpm x86_64: 677836da32eeb018599f6d2eba83d3065abda4dbcbe1e5a355c4196c0923cd0d kmod-igb-rhel5u7-3.0.6_k2_1.1-1.el5_7.x86_64.rpm 63fba780d87b7230c650f72498c3f12b4946d0825d6a8513ffb3668c379db43a kmod-igb-xen-rhel5u7-3.0.6_k2_1.1-1.el5_7.x86_64.rpm Source: 45aa12e16a42b59b026e84eb97697ac5ab3a1b20eb1c454af23844ea825cac1d igb-kmod-3.0.6_k2_1.1-1.el5_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 1 Feb 2012 22:15:00 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0086 Moderate CentOS 4 openssl Update To: centos-announce(a)centos.org Message-ID: <20120201221500.GA17681(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0086 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0086.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d4fa42294b698cd8aaa87f4ec25fddc7d0a5c2d73dce9359ad3dec7b0598679d openssl-0.9.7a-43.18.el4.i386.rpm 51f2bff72ebece544abce0b2f8011fd8ea06f6e6d2892ffc1338f8b0c6472d33 openssl-0.9.7a-43.18.el4.i586.rpm 7393bc427484b8193c15c29682c5a9310c06de2ea0659ed78d684c0390e2fe34 openssl-0.9.7a-43.18.el4.i686.rpm 8961d9591e4459caa351fd121072065b9daa8b5fe7627c4f82aa3dfdbeedd768 openssl-devel-0.9.7a-43.18.el4.i386.rpm 21ad59a320f9474a7e2a4cf66d757602c144336c3540f77a2e9135155e5088d3 openssl-devel-0.9.7a-43.18.el4.i586.rpm 4cc71135a0f70a225efa6a7ddbeda9077c6e17cf908b7268ed336e9e19170eff openssl-perl-0.9.7a-43.18.el4.i386.rpm 790224367954fb3a8372917b40629f8a818f2712b0608a0c6c585016250e6f23 openssl-perl-0.9.7a-43.18.el4.i586.rpm x86_64: 7393bc427484b8193c15c29682c5a9310c06de2ea0659ed78d684c0390e2fe34 openssl-0.9.7a-43.18.el4.i686.rpm ce06078bb4af51e619c9b79ef32c0e8123c25047ff745372f797f9778a739aa1 openssl-0.9.7a-43.18.el4.x86_64.rpm 8961d9591e4459caa351fd121072065b9daa8b5fe7627c4f82aa3dfdbeedd768 openssl-devel-0.9.7a-43.18.el4.i386.rpm 3e06f7b8628d216c10f17be7cf14a0f10cf40d71e72cf730529b3c9f0d2453b0 openssl-devel-0.9.7a-43.18.el4.x86_64.rpm 4cc71135a0f70a225efa6a7ddbeda9077c6e17cf908b7268ed336e9e19170eff openssl-perl-0.9.7a-43.18.el4.i386.rpm 9ea2118dc5a1b2ece627189dcdc42e3e5ed3f6428a13366d137a8ca90ef6bed2 openssl-perl-0.9.7a-43.18.el4.x86_64.rpm Source: d65c37417f26fc83627b9c997946baa91a3ba7cc09347e47f0349f2460358346 openssl-0.9.7a-43.18.el4.src.rpm -- Tru Huynh CentOS Project { http://www.centos.org/ } irc: tru_tru, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 84, Issue 2 **********************************************

1 0

tftp in 6.2
by Joseph L. Casale 02 Feb '12

02 Feb '12

Seems to only write the first block, or with some clients only a zero length file. Perms are obviously not an issue if at least one block can be written? Anyone know what might give? Thanks, jlc

2 2

confidence in partitioning tool (6.2)
by Larry Martell 02 Feb '12

02 Feb '12

I have a Windows 7 laptop that I want to make dual boot with CentOS 6.2. My plan was to use the Windows Disk Management tool to partition the disk, but I do not have the needed admin rights on the box to use that. Has anyone used the partitioning tool that comes with 6.2 to do this? Can I have some level of confidence that it will not mess things up so that I cannot boot into Windows? if it screws up and makes Windows unbootable that would be a Very Bad Thing. Thanks! -larry

12 36

some notes on setting up vsftp on centos6
by Bob Hoffman 02 Feb '12

02 Feb '12

I was not sure why vsftp (or any other ftp software) was installed as part of the webserver. some quick notes, hope it helps anyone else having an issue. So I yum installed it. I had a bear of a time. But I finally got it to work doing the following. I had to add ip_conntrack_ftp to my iptables-config file or it would not work IPTABLES_MODULES="ip_conntrack_ftp" I had to add this line to my iptables file -A INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT NOTE: I tried using other non standard ports, but this caused a problem upon connection with no way to fix it. I believe it has something to do with port 20 part of vsftp which short of rewriting source code seemed too much. So stick with the default port 21 to avoid any issues. in etc/vsftpd/vsftp.conf I left everything pretty much the way it was (after hours of fudging it around). I only changed anonymous_enable=YES to ' NO ' instead. ( I do not want anonymous users, just the few users on the system). This does not address virtual hosts as this is a virtual machine, thus just one website will be on it. The user/pass from a normal user was able to access the /var/www/html/ folder and modify it. That was all I wanted. I did not set up secure ftp yet (meaning I did not add a ssl cert of anything yet for it). I certainly hope this helps others. I was surprised I had to modify what I had to. I was surprised I was unable to change the port number and still want to give that a try. good luck.

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2012