Discuss March 2012

discuss@lists.centos.org

217 participants
198 discussions

How to know if packet is dropped by kernel for udp checksum mismatch
by Arif Hossain 16 Mar '12

16 Mar '12

Hi all, I have a netfilter_queue app which de-obfuscates a already obfuscated udp packets. de-obfuscation process ends successfully but somehow packet is not reaching to the udp daemon. i'm suspecting this is happening because of a udp checksum mismatch. so i'm wondering how can i get logs of packets which are dropped because of udp checksum mismatch? i've heard linux by default dropps a packet if it does not have correct checksum if checksum is present, this behavior can be modified by recompiling the kernel. using a custom kernel is not in our agenda. my platform : Linux <hostname> 2.6.32-220.7.1.el6.x86_64 #1 SMP Wed Mar 7 00:52:02 GMT 2012 x86_64 x86_64 x86_64 GNU/Linux

1 0

postfix and spam, I am impressed
by Bob Hoffman 16 Mar '12

16 Mar '12

I have had the same email address since 1997 (when microsoft stole bob.com from me thanks to network solutions...) In the early days I of course was free with my email and used it everwhere. Fast forward to 2012, some 15 years later. woof..the amount of spam sent to me has always just kept getting worse and worse. On my centos 5 server I just used sendmail with spamassassin and it killed a lot. Still, 100s, sometimes more made it through. Then thunderbird would weed out more, learned as it went... Still, had an inbox with a lot of junk. Now I have set up a centos 6 box using postfix. Today I decided to try to add smtpd restrictions. After a lot of reading and testing I 'seem' to be doing incredible. I wanted to share my current working postfix smtpd restrictions area so that others who are interested can start with it. I just added the helo and sender restrictions and have noticed no problems yet. There were many things some sites said to add, but they killed some very legitimate mail. So...yesterday a few hundred mails in my box as usual. Plus I set up procmail to not delete spam so I could test. That gave me hundreds more.... 30 minutes since putting this up I went from 1 every few seconds to 1 in 30 minutes. And that was tagged by spamassassin as spam. 1. Not sure if this setup is perfect, but it is working quite well. Yes, the mail takes a few seconds longer and there is probably more I could do, but this ROCKS!!! smtpd_delay_reject = yes smtpd_helo_required = yes smtpd_client_restrictions = permit_mynetworks,permit smtpd_helo_restrictions = permit_mynetworks, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, permit smtpd_sender_restrictions = permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain, permit smtpd_recipient_restrictions = reject_non_fqdn_recipient, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_invalid_hostname, reject_unauth_pipelining, reject_rbl_client zen.spamhaus.org, reject_rbl_client truncate.gbudb.net, reject_rbl_client dnsbl.njabl.org reject_rbl_client cbl.abuseat.org reject_rbl_client bl.spamcop.net, reject_rbl_client dnsbl.sorbs.net, sleep 1, permit smtpd_data_restrictions = permit_mynetworks, reject_multi_recipient_bounce, permit

13 33

Re: [CentOS] CentOS Server Backup Options
by James B. Byrne 16 Mar '12

16 Mar '12

On Wed, March 14, 2012 00:26, Nataraj wrote: > I think the reality is that nothing lasts forever. > Optical media is probably much more likely to > survive ICBM's, but then you may not have a drive > to read them... > > Nataraj > About five years ago I was asked to recover data from a 2400' reel mag-tape of unknown provenance in an unknown format. The possessor was a university professor and the tape dated from the late 1970s. It contained data from social science research projects he had conducted at that time. I eventually managed to read the tape at 1600 bpi in raw block format and from the headers determined that the encoding was EBCDIC and that the tape had been created on a CDC machine. However, the entire tape after the headers was blank. Not corrupt, not zeroed, just blank. Apparently the operator had mounted, initialized and labelled an evidently new tape but never actually put any data on it. So the professor had been carefully storing a scratch tape for decades. Always restore from your backups on a regular basis just to ensure there is something there to restore from. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 6

CentOS-announce Digest, Vol 85, Issue 7
by centos-announce-request＠centos.org 15 Mar '12

15 Mar '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0387 Critical CentOS 6 firefox Update (Johnny Hughes) 2. CESA-2012:0388 Critical CentOS 6 thunderbird Update (Johnny Hughes) 3. CEBA-2012:0391 CentOS 6 file FASTTRACK Update (Johnny Hughes) 4. CEBA-2012:0392 CentOS 6 iok FASTTRACK Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 14 Mar 2012 19:04:51 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0387 Critical CentOS 6 firefox Update To: centos-announce(a)centos.org Message-ID: <20120314190451.GA10868(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0387 Critical Upstream details at : http://rhn.redhat.com/errata/RHSA-2012-0387.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 36736307316457a42efb0b22db3fefad9330b1591aac83061b214526e5752eb3 firefox-10.0.3-1.el6.centos.i686.rpm f52fe7170abd2f4302340aaa443210028e672dd420b91911478ff9d358ad543e xulrunner-10.0.3-1.el6.centos.i686.rpm d1890d5bead29fe6a6e80688b1a58d515cd4008b4c2898cbaf0e3754bc823f2e xulrunner-devel-10.0.3-1.el6.centos.i686.rpm x86_64: 36736307316457a42efb0b22db3fefad9330b1591aac83061b214526e5752eb3 firefox-10.0.3-1.el6.centos.i686.rpm be27df40644480983189ff2b6b11a361ebe4f709a73e4ff7464dd43564e957f7 firefox-10.0.3-1.el6.centos.x86_64.rpm f52fe7170abd2f4302340aaa443210028e672dd420b91911478ff9d358ad543e xulrunner-10.0.3-1.el6.centos.i686.rpm 742f3076f459dcdc1c56d2311abc802d3548f2200c4d2cd4f77e4df0892cc993 xulrunner-10.0.3-1.el6.centos.x86_64.rpm d1890d5bead29fe6a6e80688b1a58d515cd4008b4c2898cbaf0e3754bc823f2e xulrunner-devel-10.0.3-1.el6.centos.i686.rpm c718d3ba90f29e1aa7a74bfe710d8ccd1c64c0b8f146327ea2de786cf7fd10df xulrunner-devel-10.0.3-1.el6.centos.x86_64.rpm Source: 70a1ff1a366d5c6c09906a78c5cb8873fb7e6d18252a17b5d238c15fe56e27be firefox-10.0.3-1.el6.centos.src.rpm c61ff2e8a867a215dfc4d56b6d981a608db482f3372f7131f8d7853469c9a115 xulrunner-10.0.3-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 14 Mar 2012 19:06:15 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0388 Critical CentOS 6 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20120314190615.GA10919(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0388 Critical Upstream details at : http://rhn.redhat.com/errata/RHSA-2012-0388.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f99b82a21b8ac7dbe62c8d43dac359b04b619c8ad4d90ae88e07118c3553ffac thunderbird-10.0.3-1.el6.centos.i686.rpm x86_64: 375178387bd4957cb6e90fac666fd1b660bb3ebe80d49e091189f3524c2bfae2 thunderbird-10.0.3-1.el6.centos.x86_64.rpm Source: 1aecfbe4d10b416cba9c24414e1bafdd5ffbdf1893155cb3105899f638861762 thunderbird-10.0.3-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Thu, 15 Mar 2012 09:56:18 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0391 CentOS 6 file FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120315095618.GA18525(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0391 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0391.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: abffba0f34a2013ea66d87f2012e03aa0afae8c9d37bd5097e2b1c6c5c1de0bf file-5.04-13.el6.i686.rpm 731865b0099cf15690c2e302fd87fb0115f3730881e76f953baa8c447ed794b3 file-devel-5.04-13.el6.i686.rpm 8e1773a8edd3337b9050b771b247a68d60a464c37f1478cd0ee9fef75243f45b file-libs-5.04-13.el6.i686.rpm 7eb4736a26f58b03bb65ebcc2ec076bf92992940170f227bc526585223b0f055 file-static-5.04-13.el6.i686.rpm 44241195e95b652620238db68d89ababa92ceb2125272cf192ed06a87dcff698 python-magic-5.04-13.el6.i686.rpm x86_64: 908f543baed17fd3376f043ee8722ffb03863219beb6adc547f475c56a6a6b5b file-5.04-13.el6.x86_64.rpm 731865b0099cf15690c2e302fd87fb0115f3730881e76f953baa8c447ed794b3 file-devel-5.04-13.el6.i686.rpm 6f74de76e6113aa14cc45bc45f265972a44f24c64ae40ae1fc2fcb8ffdbd72b0 file-devel-5.04-13.el6.x86_64.rpm 8e1773a8edd3337b9050b771b247a68d60a464c37f1478cd0ee9fef75243f45b file-libs-5.04-13.el6.i686.rpm 697e80533391885898e3330799892aed1a7502bfda1ab2abce8bb67fbd3c3593 file-libs-5.04-13.el6.x86_64.rpm d38d39807051cff114e63777adcd1b63331706102366783bcd4d3db0f5cc2eee file-static-5.04-13.el6.x86_64.rpm 909d8e79b53a5284000e1ea69d335a68d9abc7e2ab3cced5ebf415e1a5515451 python-magic-5.04-13.el6.x86_64.rpm Source: 78e0f01fd7d37292b4ae6464fadecf865465398cb2454fa754ad71a640913ec3 file-5.04-13.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Thu, 15 Mar 2012 14:41:17 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0392 CentOS 6 iok FASTTRACK Update To: centos-announce(a)centos.org Message-ID: <20120315144117.GA32472(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0392 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0392.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: f84d2ce2f11a78822368e7468d415ef872694d2f59786e1e093eb00691cc75c8 iok-1.3.13-2.el6.i686.rpm x86_64: 97ddf56eef81f253f13d48048220b77d9052024749e111cc7b8d8c1be0de11bd iok-1.3.13-2.el6.x86_64.rpm Source: f70c0650d02fd1100b185a96f057b6fd66ac3431fee6e474200ec60353a832db iok-1.3.13-2.el6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 85, Issue 7 **********************************************

1 0

t-bird, followup
by m.roth＠5-cent.us 15 Mar '12

15 Mar '12

Well, I updated my system late last week, and just thought to look: yes, I'm on t-bird 10.0.1, and I pull up the search messages window, and click on the dropdown... and there is NO OPTION to search the content of the messages. Maybe kmail, or maybe mutt.... mark

6 21

mkswap, lvm and bootbits sectors
by Philippe Naudin 15 Mar '12

15 Mar '12

Hello, I am confused by a warning from mkswap : When making a swap on a LVM volume, I see the following warning : mkswap: /dev/vg_SDB1/swap_test6_64: warning: don't erase bootbits sectors on whole disk. Use -f to force. Setting up swapspace version 1, size = 1048572 KiB Is it safe to use mkswap -f in this case ? (If that matters, the swap is intended for a virtual machine, and the host where I am using mkswap is a CentOS-6 server.) Thanks, -- Philippe Naudin

3 6

postfix spam question for the gurus
by Bob Hoffman 15 Mar '12

15 Mar '12

Hello, I have a question about postfix. I have a few webservers, each with their own mailing system. Obviously manually adding items can be quite tedious going from one to another to another. I am in the process of making a list of domains (commercial spammers) that bother me. My idea is to use the access file to reject them. My question is this... Can I make a text page on one of my html servers that lists all these bums and reference that file in the postfix smtpd restrictions (probably as regex or prce instead of hash)? This way I only have to make one big page of them. And I can add a 'you be blocked m.f. because of spamming me on the page so they can learn how to get unlisted. can this be done or do I need to make my own rbl list (obvously limited to just my sites).? I would think I could just reference a remote file as easily as a local file? -thanks bob

2 1

rpm configuring /etc/hosts file
by Vinay Nagrik 15 Mar '12

15 Mar '12

Hello Group, I am having some problems in my /etd/hosts file, where unwanted matching appears between IP addresses and hostnames. Could someone please tell me, which is centos rpm, which configures /etc/hosts file. Thanks in advance nagrik

3 2

debugging RAM issues
by Alan McKay 14 Mar '12

14 Mar '12

Hey folks, I have 1 system ( Sunfire x2250 running 5.7 ) that is having issues with RAM, but I'm not sure how to debug it. And unfortunately it is not under support anymore. I started the job about 4 months ago and when I came aboard the guy who handed stuff over to me told me this issue was on his list of things he was unable to get to yet. He told me he'd seen errors in the past in the Sun ILOM message log, but unfortuantely he did not record exactly what the messages were. Fast forward a bit and I've had problems with this machine. Sometimes when I reboot it, it just won't come up. The console and everything just go completely dead no matter what I do. I unplug it for a while and try again, same thing. It seems to just randomly come back to life, and when it does I see something in the ILOM log like this : ID = f74 : 03/07/2012 : 19:17:42 : System Firmware Error : ACPI : No usable system memory So it seems to me that when it is having trouble, it is not seeing any RAM at all. And when it does come back up, Linux only sees half the RAM it is supposed to see. "lshw" sees all the RAM The only errors I see in the ILOM logs are above. I don't see anything in dmesg or /var/log/messages on the Linux side. Back about 3 months ago I took this system down and removed all the RAM, and stuck individual chips into it and booted it, testing each chip on its own. At that time every single one of them worked! But I'm about to try this again to see what happens. Back then I also ran memtest86 for some time and it seemed OK too. Other than that I'm a bit stumped on how to get to the bottom of this. Tips? I googled the error and got precisely 1 hit at a university high performance computing center in Utah, so I dug up a contact there and emailed them hoping they could tell me something, but I have not yet heard back. thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

6 11

mount NFS share over specific nic?
by Smithies, Russell 14 Mar '12

14 Mar '12

I have a new server with multiple nics running Centos 6.2 and I'd like to force all NFS traffic over one nic. We're using FreeNAS to dish out NFS shares and I have different IPs on my 2 nics but how can I get the server to mount the share over one particular nic? Or is there a better way to do it? Thanx, Russell Smithies ======================================================================= Attention: The information contained in this message and/or attachments from AgResearch Limited is intended only for the persons or entities to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipients is prohibited by AgResearch Limited. If you have received this message in error, please notify the sender immediately. =======================================================================

6 8

← Newer
1
...
8
9
10
11
12
13
14
...
20
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2012