Discuss June 2012

discuss@lists.centos.org

185 participants
178 discussions

What would cause dbus-daemon to fork() bomb?
by Robert Heller 19 Jun '12

19 Jun '12

For some reason, my system (64-bit, CentOS 5.8) has started to have a strange problem: dbus-daemon fork() bombing, typically overnight. The machine has been fine for months and months. What could cause this? This is my home desktop (it is also a server on my lan: dhcp, ldap, dns, web, etc.). -- Robert Heller -- 978-544-6933 / heller(a)deepsoft.com Deepwoods Software -- http://www.deepsoft.com/ () ascii ribbon campaign -- against html e-mail /\ www.asciiribbon.org -- against proprietary attachments

1 0

vlc?
by m.roth＠5-cent.us 19 Jun '12

19 Jun '12

Hey, folks, a co-worker raves that vlc is the bestestplaysthemostformats media player there is, including being able to resize videos. I see it's only over on repoforge for CentOS, but trying to install it at home (I'm running 5.8, 32-bit), it wants about 30 or more dependencies, and one or two of them, of course, have conflicts. Has anyone installed it in a 5.x environment? If so, what did you do? mark

4 5

replace string with sed but not the first one
by maverh＠telenet.be 19 Jun '12

19 Jun '12

Hi, We have a the following file [ip-map] # Unchanged IP addresses: # Please review default IP addresses mapping below: 192.168.1.10 shared -> 192.168.123.6 shared [namexx] 192.168.1.10 naam 192.168.1.10 We want to replace 192.168.1.10 to a other string but i don't want to change te first one.

2 2

Rhythmbox Replacement
by Mark LaPierre 19 Jun '12

19 Jun '12

Hey Y'all, What application replaces the functionality of Rhythmbox for Cent OS 6.2? In particular I am interested in handling podcast feeds. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004 www.counter.li.org ****

5 6

Firefox 10.0.5 will not run Java plugin
by James B. Byrne 19 Jun '12

19 Jun '12

How do I get Firefox 10.0.5 to run Java-1.7.0 on Cent)S-5.8? Firefox appears to have had Java deliberately disabled by Mozilla. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] Best way to duplicate a live Centos 5 server?
by Cal Sawyer 18 Jun '12

18 Jun '12

From: Les Mikesell <lesmikesell(a)gmail.com> Subject: Re: [CentOS] Best way to duplicate a live Centos 5 server? To: CentOS mailing list <centos(a)centos.org> On Fri, Jun 8, 2012 at 12:04 PM, Scott Silva <ssilva(a)sgvwater.com> wrote: >> Am I missing something glaringly obvious here, or is the only way I'm >> going be able to migrate is to shutdown the C5 server for a few hours >> while duping the old drives? Would greatly appreciate any pointers how >> best to do this. > You could always rsync the old server to the new one... a few runs will get > 99% of the files, and a quick run after the shutdown can get the rest... Have > a tar file ready of the needed config changes ready and untar it and start up > the new system... An interesting variation on this is to use 'ReaR' to back up and restore the machine, essentially cloning it but give the copy a different IP address as you bring it up. Then when the clone is close to ready to take over, shut down your apps for the time it takes a final rsync to fix up the differences (in the data areas only - avoid /etc/, (etc.), then switch the IP. ReaR is in active development now and is very usable. It is a set of shell scripts designed to run live backups that are capable of restoring to bare metal. It makes a new boot iso with tools from the running system to reconstruct the filesystem (including lvm/raid, etc.) and restore on top of that. Several backup methods are supported but tar to an nfs location is probably the easiest to set up. With a small amount of extra work you can tweak the filesystem layout, etc. if you don't want an exact clone. With hardware differences you might need to tweak modules and build a new initrd, too. ReaR is packaged in EPEL as rear. ReaR has suddenly become very interesting to me, probably explaining why it utterly fails to work properly (for me).I'm using 1.13 to pull a USB-based recovery image, but there's an error in the backup/NETFS/default/50_make_backup.sh script that doesn't mount the USB device after the mkrecovery step, so subsequent tar fails on write to the non-existent mountpoint. I fixed that, but on recovery it fails to mount the necessary directories on the restore drive as well, so "rear recover" quickly bombs out. Is anyone having any success actually using ReaR on CentOS 6.x? - csawyer

2 1

Nagios 3.4.1 on CentOS 5.8
by Kaushal Shriyan 18 Jun '12

18 Jun '12

Hi I am trying to build nagios rpm from nagios.spec file on CentOS 5.8. I am getting into issues. nagios.spec http://fpaste.org/crOs/ rpmbuild -ba nagios.spec Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.36485 + umask 022 + cd /usr/src/redhat/BUILD + cd /usr/src/redhat/BUILD + rm -rf nagios-3.4.1 + /bin/gzip -dc /usr/src/redhat/SOURCES/nagios-3.4.1.tar.gz + tar -xf - + STATUS=0 + '[' 0 -ne 0 ']' + cd nagios-3.4.1 /var/tmp/rpm-tmp.36485: line 31: cd: nagios-3.4.1: No such file or directory error: Bad exit status from /var/tmp/rpm-tmp.36485 (%prep) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.36485 (%prep) http://fpaste.org/IYHQ/ which mentions about /var/tmp/rpm-tmp.36485 Any clue? Regards Kaushal

3 6

CentOS-announce Digest, Vol 88, Issue 10
by centos-announce-request＠centos.org 18 Jun '12

18 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0745 Moderate CentOS 5 python Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 18 Jun 2012 13:11:45 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0745 Moderate CentOS 5 python Update To: centos-announce(a)centos.org Message-ID: <20120618131145.GA23757(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0745 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0745.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8732b6917bb703e83bcedba44db574bb5c08b6fdc6078b3cc85a2a2c8764ab1e python-2.4.3-46.el5_8.2.i386.rpm 686cf6c90f524d21a9ab6726d92a665728be79e405b0436d68c4ee1e7adfbb8e python-devel-2.4.3-46.el5_8.2.i386.rpm 5ac75df1c01468be5adb94dd75c1bc72ee899a2cf4f93a33b42bf90370bc9aca python-libs-2.4.3-46.el5_8.2.i386.rpm 64ab9d7cd165684ee8bace4ad12b3f2b44cc008760d8fdfb3a504f2335e8a18a python-tools-2.4.3-46.el5_8.2.i386.rpm c36a78764e6624defd97452951b957ec8c85177e340baa52ea74dcca15912987 tkinter-2.4.3-46.el5_8.2.i386.rpm x86_64: 75a516ec99cfb3bfbeb2ed6289b91aca405aee98225d68b7f4087445d1b734d5 python-2.4.3-46.el5_8.2.x86_64.rpm 686cf6c90f524d21a9ab6726d92a665728be79e405b0436d68c4ee1e7adfbb8e python-devel-2.4.3-46.el5_8.2.i386.rpm 4566def644dc427f74e946a767e11d2bed86cc9150a2b38a7234ab11eb599e29 python-devel-2.4.3-46.el5_8.2.x86_64.rpm a99ed59ad78084a5bbe6fbaf811a428618529df9cd391bfb5420b66a6d4b9752 python-libs-2.4.3-46.el5_8.2.x86_64.rpm 532ebf0691f63c3f835ed394928790b8aa2af6ad1227ae248a87736cf38ea443 python-tools-2.4.3-46.el5_8.2.x86_64.rpm 282c9c7a70c4bd1f9b9da1becc280784839852c464814fcd8c91e0606b23bab0 tkinter-2.4.3-46.el5_8.2.x86_64.rpm Source: c0a95526d16a245d9b0537d7ff7b09225c1709d892885ff3489b58dad4661280 python-2.4.3-46.el5_8.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 10 ***********************************************

1 0

Update on spam, postfix, fail2ban, centos 6
by Bob Hoffman 18 Jun '12

18 Jun '12

I have been using centos 6 in a virtualized system for a few months now. Took a while to batten down the hatches with postfix, rbls, and to use fail2ban correctly. The mailserver for my website(s) are located on the http server as well..an 'all in one' server. DNS servers are separated. My two sites, and their emails addresses (1 for each) have been around for 10 and 15 years respectively. One site was a business site, one was news and politics...both were very busy at one point, thus 'on the radar' of hackers and spammers. I decided to see what I could do with my system to prevent hacks and spams in regards to email and brute force attacks on all systems except for my web apps (which are down right now and in development). Fail2ban is really good at the brute force, assuming it is just one ip and not all attempts are at once. Thus it works on script kiddies but I do not think it would work well on a dedicated hack attempt by a serious individual or group. But I am using fail2ban to auto ban ips regarding spam. As far as spam, very little gets through now. A few a day. Between blacklists, my own blacklist of commercial spammers, stringent settings of postfix the actual spam that gets through is small. But it still gets through. I was using fail2ban on attempts that numbered 3 or more that ended in 5xx replies from my server. I would block for 10 minutes. I found I was blocking about 800 ips a day on one server, half that on the other. I did notice that there were a ton of attempts that were under 3. Lots of 2's and a ton of 1's. So a couple weeks ago (not sure when I started) I decided to try blocking any 5xx reply by IP. This is a private server and just my own mail comes to it, so I am not worried too much about false positives or other effects. ------------------------------------------------ So what happened? The ips jumped up considerably, to 1,500 to 1,700 a day banned on one server, about 1000 on the other. What is interesting in those numbers is they are constant. Every week day I can count on about 1500 banned ips on one, 1000 on the other, give or take. What really changed was the mail servers sending mail that got through the restrictions, but were sending to non existent addresses. A majority (like 80%) were from yahoo. This was a sudden change. It was not like this before. Yahoo spammed like crazy. And they got the mailserver ip banned. 10 to 20 emails a day from yahoo mail servers, going to non existent emails. Where before it would be one or two. The yahoo mails got bigger every day until they started waning (probably due to ip banning). The mail that actually got through all of this was 50% free mail (yahoo, msn/live, some aol, etc) Yahoo being the biggest. Another thing I noticed. When I started adding domains to my 'blacklist of commercial senders', legitimate or not, I started to get yahoo mails with references inside the mails to many of the illegitimate sites that were coming from the UCE's I had blocked. It is quite interesting to watch this process. More interesting that no matter how strict or lax I make the system there will be the same number of attempted mails sent to my server. (give or take a few hundred). If I unban all the ips, which I did once, there was a one day bump up, then it leveled off to the same amount of individual attemtps (not counting the same attempt being tried again). I have 35,000 ips blocked right now and nothing changed...except yahoo spam. Spamassassin I use, but only for level 10 or more spam...it is deleted. I found all of these over the last few months to be the kind with attachments, probably viruses. ------------------------------------------------------------------------- What Have I learned? I have learned a large number of attempts are from ISP's and not websites. I have learned that ISP's will not do anything at all, ever, about this. (someone trying to send 1 million mails a day might be suspicious, but they ignore it) I have learned a large majority of 'hosts' are technically challenged small business owners who have no sys admin knowledge. Those hosts spew spam bots I have learned the chinese have really taken a liking to play with my server, possibly for training purposes. My server is a hit in beijing and some other province I cannot spell. ---------------------------------------------------------- What can be done? Not much. If the isp's do nothing, and the technology is not available to datacenters and hosts, there is not much I can do at all. Complaining to an isp or host would take 24 hours a day of messages, 99% which would be ignored. There is a consideration for the scumbags that call themselves legitimate mailers, like vocus.com. They are in the US, as I am. I am considering going to small claims for some of these spam attempts. I cannot use the can-spam act, since they are technically not in violation. However, I could use the logs and attempts, copies of emails and phone calls telling them to stop, and sue them for a small dedicated denial of service attack, use of my bandwidth, harassment of my server and business. Would I win? Probably. Would I ever get money from them? Most likely not.

5 13

Cannot set alias IP address
by Nikolaos Milas 18 Jun '12

18 Jun '12

Hi, I have an eth0 interface (it's a CentOS 6 guest VM on a KVM host) which is configured as follows (see below) with a primary public IP address of xxx.xxx.xxx.130 (which works fine). I cannot set an alias IP address. I want eth0 to also use another IP address (xxx.xxx.xxx.131, so I create /etc/sysconfig/network-scripts/ifcfg-eth0:1. Then: # service network restart Shutting down interface eth0: Device state: 3 (disconnected) [ OK ] Shutting down loopback interface: [ OK ] Bringing up loopback interface: [ OK ] Bringing up interface eth0: Active connection state: activated Active connection path: /org/freedesktop/NetworkManager/ActiveConnection/2 [ OK ] # ping xxx.xxx.xxx.130 PING xxx.xxx.xxx.130 (xxx.xxx.xxx.130) 56(84) bytes of data. 64 bytes from xxx.xxx.xxx.130: icmp_seq=1 ttl=64 time=0.078 ms 64 bytes from xxx.xxx.xxx.130: icmp_seq=2 ttl=64 time=0.044 ms ^C --- xxx.xxx.xxx.130 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1767ms rtt min/avg/max/mdev = 0.044/0.061/0.078/0.017 ms # ping xxx.xxx.xxx.131 PING xxx.xxx.xxx.131 (xxx.xxx.xxx.131) 56(84) bytes of data. From xxx.xxx.xxx.130 icmp_seq=2 Destination Host Unreachable If I try: # ifup eth0:1 Active connection state: activating Active connection path: /org/freedesktop/NetworkManager/ActiveConnection/3 state: activated Connection activated then I totally lose network connectivity. What am I doing wrong? Please advise! -------------------------------------------------------------- eth0 -------------------------------------------------------------- DEVICE="eth0" NM_CONTROLLED="yes" ONBOOT="yes" HWADDR="DE:DB:EE:CD:8E:03" TYPE=Ethernet BOOTPROTO=static GATEWAY=xxx.xxx.xxx.129 NETWORK=xxx.xxx.xxx.128 IPADDR=xxx.xxx.xxx.130 NETMASK=255.255.255.248 BROADCAST=xxx.xxx.xxx.135 IPV6INIT=yes IPV6_AUTOCONF=no IPV6ADDR=2001:xxxx:xxxx:xxxx::130 IPV6_DEFAULTGW=2001:xxxx:xxxx:14::1 DNS1=xxx.xxx.xxx.211 DNS2=xxx.xxx.xxx.210 DNS3=2001:xxxx:xxxx:xxxx::210 IPV4_FAILURE_FATAL=no IPV6_FAILURE_FATAL=no DOMAIN="example.com example.com" -------------------------------------------------------------- I've tried: -------------------------------------------------------------- eth0:1 -------------------------------------------------------------- DEVICE="eth0:1" ONPARENT="yes" BOOTPROTO=none IPADDR=xxx.xxx.xxx.131 NETMASK=255.255.255.248 BROADCAST=xxx.xxx.xxx.135 -------------------------------------------------------------- and: -------------------------------------------------------------- eth0:1 -------------------------------------------------------------- DEVICE="eth0:1" NM_CONTROLLED="yes" ONBOOT="yes" HWADDR="DE:DB:EE:CD:8E:03" TYPE=Ethernet BOOTPROTO=static ONPARENT="yes" GATEWAY=xxx.xxx.xxx.129 NETWORK=xxx.xxx.xxx.128 IPADDR=xxx.xxx.xxx.131 NETMASK=255.255.255.248 BROADCAST=xxx.xxx.xxx.135 IPV6INIT=yes IPV6_AUTOCONF=no IPV6ADDR=2001:xxxx:xxxx:xxxx::131 IPV6_DEFAULTGW=2001:xxxx:xxxx:xxxx::1 DNS1=xxxx.xxxx.xxxx.211 DNS2=xxxx.xxxx.xxxx.210 DNS3=2001:xxxx:xxxx:xxxx::210 IPV4_FAILURE_FATAL=no IPV6_FAILURE_FATAL=no DOMAIN="example.com example.com" -------------------------------------------------------------- Thanks, Nick

2 6

← Newer
1
...
6
7
8
9
10
11
12
...
18
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss June 2012