Discuss January 2013

discuss@lists.centos.org

186 participants
156 discussions

Using postfix in CentOS 6 to relay mails to First.Last@gmail.com
by Alexander Farber 15 Jan '13

15 Jan '13

Hello fellow CentOS users, I'm using: # cat /etc/*release CentOS release 6.3 (Final) # rpm -qa | grep post postfix-2.6.6-2.2.el6_1.x86_64 on 2 servers: preferans.de and (yes, funny name) static.103.78.9.176.clients.your-server.de I own several domains and would like all incoming mails addressing those domains to be forwarded to my Gmail address. So I have setup the MX-records for my domains: # host videoskat.de videoskat.de has address 176.9.40.169 videoskat.de mail is handled by 100 static.103.78.9.176.clients.your-server.de. videoskat.de mail is handled by 10 preferans.de. # host balkan-preferans.de balkan-preferans.de has address 176.9.40.169 balkan-preferans.de mail is handled by 100 static.103.78.9.176.clients.your-server.de. balkan-preferans.de mail is handled by 10 preferans.de. And at the both servers I have added: # head /etc/postfix/virtual @balkan-preferans.de First.Last(a)gmail.com @videoskat.de First.Last(a)gmail.com # postmap /etc/postfix/virtual # postmap -q "@videoskat.de" /etc/postfix/virtual First.Last(a)gmail.com And have opened port 25 in the firewall: # grep -w 25 /etc/sysconfig/iptables -A INPUT -p tcp -m state --state NEW -m tcp -m multiport --dports 25,22 -j ACCEPT But now when I send a mail to spam(a)videoskat.de there is nothing to see in postfix logs: # sudo tail /var/log/maillog Jan 15 10:50:42 postfix/postfix-script[1401]: starting the Postfix mail system Jan 15 10:50:42 postfix/master[1402]: daemon started -- version 2.6.6, configuration /etc/postfix So I'm probably missing something? BTW the daily logwatch mails arrive from both servers just fine at my Gmail-mailbox First.Last(a)gmail.com Regards Alex

2 3

Is there a way to bypass the memory check for the cento6 x86 installer?
by Jason Pyeron 14 Jan '13

14 Jan '13

I am getting the "you do not have enough RAM to install CentOS on this machine." error. I could mannually kludge this system online, but I would prefer not to. -Jason -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00.

2 1

Quesstion on "remote password for maintenance"
by Jerry Geis 14 Jan '13

14 Jan '13

I have a remote "centos 5" box that has no errors on screen, has nothing saying anything is wrong, however at boot it says "give remote password for maintenance". I had my remote person login and issue "e2fsck -y /dev/sda1 and /dev/sda3" for my two partitions and reboot and it comes back with the same prompt. What maintenace is it wanting???? Thanks, jerry

2 1

wiping out data on a disk (no physical acess to the machine)
by Yungwei Chen 14 Jan '13

14 Jan '13

Hi, I need to securely wipe out a disk on a remote machine, but I don't have access to that machine. Therefore I cannot use the LiveCD+shred (or dd) combination. Besides manually shreding known data files, I am wondering if there is a (free) tool that can be used in my case. Thanks.

8 12

Re: [CentOS] evaluating backup systems: rsync
by Gordon Messmer 14 Jan '13

14 Jan '13

On 01/13/2013 02:59 AM, Reindl Harald wrote: >> There is no common >> >mechanism for making files and databases consistent and making a >> >snapshot for backups. Admins must do this on their own. If you aren't >> >actively taking steps to make your backups consistent, they aren't. > open-vm-tools 2012.12.26 changes: > * vmsync is not longer being compiled on newer (3.0+) Linux > kernels since they support FIFREEZE/FITHAW ioctls. That's only needed to make a filesystem consistent for a snapshot at a lower level (such as the raid controller or VM hypervisor). It doesn't integrate with higher level components to make files and databases consistent. So, like I said, Linux falls far short of Windows' backup infrastructure, and if you aren't actively making your files consistent for a backup, they won't be. All of the required components are present, but it's up to admins to do all of the integration work.

1 0

Upgrading Python with NumPy, SciPy and Mayavi on a CentOs 6.2 (Rocks 6.0) cluster
by Patrick Haley 13 Jan '13

13 Jan '13

Hi, We are looking for some guidance in installing an upgraded Python on our cluster. Our cluster was installed with Rocks 6.0, is running CentOs 6.2, and has python-2.6.6, gcc-4.4.6. We would like to install an upgraded version of Python along with the following modules NumPy Scipy (which will require a compatible version of the Atlas libraries) Mayavi (which will require a compatible version of vtk) We were wondering if anyone has experience in installing these packages, what are the best combinations of compatible versions, what other upgrades will be needed (e.g. will we need to upgrade the gnu compilers to install the latest versions) and where these should be installed (local disks, /share/apps, other?). A little more background, our students are currently working with a local installation using Python-2.7.1 numpy-1.5.1 scipy-0.9.0b1 Mayavi-3.4.0 ATLAS-3.8.3 vtk-5.4 We would like to install these packages in a more appropriate, cluster-wide area and upgrade these packages as appropriate. We are also aware of a Rocks python roll which contains python-2.7.2 and an upspecified version of NumPy (is it possible to find out which version, before installing the roll?). Thanks -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Pat Haley Email: phaley(a)mit.edu Center for Ocean Engineering Phone: (617) 253-6824 Dept. of Mechanical Engineering Fax: (617) 253-8125 MIT, Room 5-213 http://web.mit.edu/phaley/www/ 77 Massachusetts Avenue Cambridge, MA 02139-4301

1 0

gigantic memory leak in Clock Applet...
by fred smith 13 Jan '13

13 Jan '13

I've discovered recently that something on my Centos 5.8 box (up to date) is hogging a ton of RAM. so a little while ago I sat and watched top for a while. it showed (sorry, I didn't take screen shots or write this down, so the numbers are a bit rough) that out of 8 gigs of swap, around 2 1/2 was in use, and all the RAM (except for the little the kernel keeps for itself) was in use (it's got 4 gigs). this might not sound bad, but there's hardly ever anything big running on this box, it's just my home desktop machine used mostly for web browsing/music/email and similar. so, watching top run for a while I could eventually make out that something had "1.6g" flashing in the "RES" column. slowing the refresh a little I saw that it was "clock applet". so I killed the clock applet and restarted it, then clock applet showed "11m" in the "RES" column, and the unused RAM was suddenly like a gig and 3/4, or so, and the swap used slowly started dropping while the free ram began being used up, as it normally should. as I continue to watch it run (10-15 mins later) I can see that clock applet is now showing 14m in the RES column, so it's still growing. Is anyone else seeing the clock applet hogging (tons of tiny leaks, I assume) RAM needlessly? -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

12 37

luks and aes-ni
by Markus Falb 13 Jan '13

13 Jan '13

Hi, Short version: If I had a CPU with the aes-ni [1] feature would luks use it? I know that Upstream Vendors Security Guide [2] says: ...snip The default cipher used for LUKS (refer to cryptsetup --help) is aes-cbc-essiv:sha256 (ESSIV - Encrypted Salt-Sector Initialization Vector). Note that the installation program, Anaconda, uses by default XTS mode (aes-xts-plain64) snap... I also found a notion in the forums that maybe only aes-cbc is using aes-ni [3] and that could mean that after a install aes-ni is not used at all. Does anyone know about this or has experiences? [1] http://en.wikipedia.org/wiki/AES_instruction_set [2] https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/h… [3] http://forum.centos.org/modules/newbb/viewtopic.php?topic_id=38226&forum=56… -- Kind Regards, Markus Falb

1 0

Re: [CentOS] wiping out data on a disk (no physical acess to the machine)
by Gordon Messmer 13 Jan '13

13 Jan '13

On 01/12/2013 04:35 PM, Reindl Harald wrote: > Usually if no service is running "dd if=/dev/zero of=/dev/your-sysdisk" > does crash more or less very late and if you destory the datadisks before > there is nearly zero chance to recover any data If I care enough to wipe the disks in a server, "usually" and "late" is not going to cut it. Any attempt by the kernel to read any filesystem is likely to cause a panic before wiping is complete. If you want to completely wipe a disk, you need the root filesystem to be somewhere else.

1 0

Why is localhost self-signed cert a CA cert?
by Robert Moskowitz 13 Jan '13

13 Jan '13

I am building a mail server on Centos 6.3 and working with OpenSSL to create a self-signed certificate for mail use. Along the line of learning the 'best' options to use for OpenSSL and dealing with the default SSL virtual host for Apache, I discovered that the localhost cert created (I believe) during firstboot has the X509v3 extensions set as a CA cert (eg basicConstraint CA:TRUE). I was once very involved in PKIX and legal issues on certificate policy. Having the localhost cert being a CA cert, thus allowed to sign other certs, MAY have legal implications in the USofA and EU. Why was this chosen? Why is not -extensions v3_req used in the certificate creation? Oh you can see this for yourself with: openssl x509 -in /etc/pki/certs/localhost.crt -text -nameopt multiline -noout|more

3 11

← Newer
1
...
8
9
10
11
12
13
14
15
16
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss January 2013