Discuss October 2014

discuss@lists.centos.org

199 participants
220 discussions

Recommended way of handling iptables firewall in CentOS?
by Niki Kovacs 13 Oct '14

13 Oct '14

Hi, I'm planning to use CentOS 6.x on a handful of LAN servers. So far I've been using Slackware64 14.0 and 14.1 for the job. I wonder what's the orthodox/recommended way of configuring and iptables firewall with CentOS. I understand there's the system-config-securitylevel-tui NCurses interface which allows defining a basic set of rules. But what about the handful of more advanced rules I have to configure? Here's an example of an /etc/rc.d/rc.firewall script that I might use with Slackware. It contains mostly basic rules, and a couple of more advanced rules, one to limit SSH access, the other one to redirect HTTP traffic to Squid. If I want to copy my actual firewall configuration to CentOS, what would be the recommended way? I started from a bare bones minimal CentOS 6.5 installation, so system-config-securitylevel-tui is not even installed. Is it a good idea to try to configure /etc/sysconfig/iptables by hand? What do you suggest? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

1 0

Hi again & problem with minimal CentOS and Github
by Niki Kovacs 13 Oct '14

13 Oct '14

Hi everybody, I'm back to CentOS after a long period during which I've been using mainly Slackware. I still use Slackware for teaching and for my local clients (on servers and desktops), but right now, I'm planning to update my own documentation about CentOS, which is still based on version 5.x. First things first. For the moment I have a sandbox server in my office with a minimal installation of CentOS 6.5. It's a very stripped installation, and I want to keep it that way, installing things only as I need them. So I did *not* do a "yum groupinstall Base" after the initial installation. I installed Git and Vim and cloned my Github repository for CentOS. But when I make a modification and want to push it to Github, I get the following error: # git push error: The requested URL returned error: 403 Forbidden while accessing https://github.com/kikinovak/centos/info/refs fatal: HTTP request failed Now I think there must be some missing component in my CentOS installation, because my Slackware workstation in the same network can push things just fine. Any idea what's missing here? Cheers from the flooded South of France, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

systemd service configuration
by Igal ＠ getRailo.org 13 Oct '14

13 Oct '14

does adding a /lib/systemd/system/{unit}.service all I need in order to add a service? see example file for Tomcat that I plan to add at https://github.com/wichtounet/systemd-unit-files/blob/master/tomcat.service are any special permissions required for that file (execute)? TIA, Igal

3 2

drbd
by John R Pierce 12 Oct '14

12 Oct '14

so I've had a drbd replica running for a while of a 16TB raid thats used as a backuppc repository. when I have rebooted the backuppc server, the replica doesn't seem to auto-restart til I do it manually, and the backupc /data file system on this 16TB LUN doesn't seem to automount, either. I've rebooted this thing a few times in the 18 months or so its been running... not always cleanly... anyways, I'm started a drbd verify (from the slave) about 10 hours ago, it has 15 hours more to run, and so far it's logged... Oct 11 13:58:26 sg2 kernel: block drbd0: Starting Online Verify from sector 3534084704 Oct 11 14:00:23 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 14:00:29 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967294 Oct 11 14:00:35 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967293 Oct 11 14:00:41 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967292 Oct 11 14:01:16 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 14:02:05 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 14:02:11 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967294 Oct 11 14:02:17 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967293 Oct 11 14:33:41 sg2 kernel: block drbd0: Out of sync: start=3932979480, size=8 (sectors) Oct 11 14:34:46 sg2 kernel: block drbd0: Out of sync: start=3946056120, size=8 (sectors) Oct 11 15:37:07 sg2 kernel: block drbd0: Out of sync: start=4696809024, size=8 (sectors) Oct 11 17:08:15 sg2 kernel: block drbd0: Out of sync: start=6084949528, size=8 (sectors) Oct 11 17:30:53 sg2 kernel: block drbd0: Out of sync: start=6567543472, size=8 (sectors) Oct 11 17:59:04 sg2 kernel: block drbd0: Out of sync: start=7169767896, size=8 (sectors) Oct 11 20:00:50 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 20:01:09 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 20:01:15 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967294 Oct 11 20:01:29 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 20:29:18 sg2 kernel: block drbd0: Out of sync: start=10362907296, size=8 (sectors) Oct 11 20:29:54 sg2 kernel: block drbd0: Out of sync: start=10375790488, size=8 (sectors) Oct 11 21:01:51 sg2 kernel: block drbd0: [drbd0_worker/2197] sock_sendmsg time expired, ko = 4294967295 Oct 11 21:42:15 sg2 kernel: block drbd0: Out of sync: start=11907921096, size=8 (sectors) Oct 11 21:43:38 sg2 kernel: block drbd0: Out of sync: start=11937086248, size=8 (sectors) Oct 11 21:44:00 sg2 kernel: block drbd0: Out of sync: start=11944705032, size=8 (sectors) Oct 11 21:49:26 sg2 kernel: block drbd0: Out of sync: start=12062270432, size=8 (sectors) Oct 11 22:07:10 sg2 kernel: block drbd0: Out of sync: start=12440235128, size=8 (sectors) Oct 11 22:58:54 sg2 kernel: block drbd0: Out of sync: start=13548501984, size=8 (sectors) Oct 11 23:23:17 sg2 kernel: block drbd0: Out of sync: start=14072873320, size=8 (sectors) $ date Sat Oct 11 23:28:11 PDT 2014 its 35% done at this point... 15 4K blocks out wrong of 1/3rd of 16TB isn't a lot, but its still more than I like to see. $ cat /proc/drbd version: 8.3.15 (api:88/proto:86-97) GIT-hash: 0ce4d235fc02b5c53c1c52c53433d11a694eab8c build by phil@Build64R6, 2012-12-20 20:09:51 0: cs:VerifyS ro:Secondary/Primary ds:UpToDate/UpToDate C r----- ns:0 nr:105707 dw:187685496 dr:654444832 al:0 bm:1 lo:107 pe:2104 ua:435 ap:0 ep:1 wo:f oos:60 [=====>..............] verified: 34.6% (9846140/15051076)M finish: 14:55:27 speed: 187,648 (155,708) want: 204,800 K/sec really, if I let this complete, then disconnect/reconnect the replica, it will repair these glitches ? I'm gathering I shoudl schedule these verifies weekly or something. -- john r pierce 37N 122W somewhere on the middle of the left coast

2 8

install mp3gain
by Chris 12 Oct '14

12 Oct '14

Dear All, what's the easiest way to install mp3gain on CentOS 6? I've found it in the rpmforge repository only. I don't want to add it since there are many obsolete packages in. Is there any other way? TIA! -- Gruß, Christian

2 3

CentOS 7 does not pick up my atheros wireless
by Martes 12 Oct '14

12 Oct '14

Greetings everyone. My recently installed CentOS 7 instance does not enable wireless via Network Manager or otherwise. I have the following output from lspci: lspci |grep AR 08:05.0 Ethernet controller: Qualcomm Atheros AR5212/AR5213 Wireless Network Adapter (rev 01) uname -a Linux imaginationland 3.10.0-123.8.1.el7.x86_64 #1 SMP Mon Sep 22 19:06:58 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux iw --version iw version 3.10 iw -l reports that nl80211 is not found, which is probably the root cause of not having access to the pci device, however, I have no idea why I am unable to access this module. I am unable to get wireless working, however, just prior to uninstalling network manager, I did see it there. I use one of the vms as backup for my personal groupware server which needs to stay active, so I removed network manager, and made sure the configuration for the network and iptables was valid, prior to re-installing network manager. However, after re-installing, Network Manager never sees the wireless device at all. Any assistance would be appreciated. I have not had this type of trouble with linux in quite a few years, and usually if anything I just needed to install the 80211 kernel modules, etc... I am unable to even pull those from repos, on this new install. Respectfully, Martes G Wigglesworth

3 10

CentOS 7 User Manager Tool
by Igal ＠ getRailo.org 11 Oct '14

11 Oct '14

I have CentOS 7 installed with GUI (Gnome 3.8.4) and I'm trying to follow the guide at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… it speaks of "System > Administration" from the GUI or "system-config-users" from the command line, but I can't find either? I don't have a "System" top menu, only "Applications" and "Places", and when I try the command line option I get "command not found". any ideas? TIA! -- Igal Sapir Railo Core Developer http://getRailo.org/

6 9

Linux on an ancient Macintosh G5?
by dan stoicheff 11 Oct '14

11 Oct '14

Has anyone experienced the conversion of the aluminum chassis Mac G5 to a Linux box? Curious in Pennsylvania. I need to obtain the power cable somewhere to try it. It is a 64-bit monster, so seems like it is worth trying if I can find the weird cable it needs. No luck to date regarding the cable. Thanks. The Bears will never win until number six leaves.

3 2

Re: [CentOS] CentOS 7 docs, tutorials, etc...
by James B. Byrne 11 Oct '14

11 Oct '14

On Thu, October 9, 2014 21:11, John R Pierce wrote: > On 10/9/2014 6:07 PM, Valeri Galtsev wrote: >> BTW, the whole idea of "antivirus" is flawed. It is based on "enumerate >> bad". You can't, as one never knows what will be invented in a future. > > I agree, but I don't know what else you can put in the hands of the > novice, unless its the iPhone world of corporate approved apps only > purchased through a monopoly 'app store'. > Which simply means: Only 'Government Approved' viruses allowed. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

8 31

答复: CentOS 7 docs, tutorials, etc...
by 沈焕标 11 Oct '14

11 Oct '14

Perhaps RHEL/CentOS 7 are something different, however, they just change a little, their base used are similar. On a gnome desktop, if you want to add a shortcut to the desktop, you can reference xxx.desktop in /usr/share/application/ , than write some similar xxx. desktop which you prefer and cp to the desktop directory ， it's really useful.. ------------------------ Best wishes ----------- ---------------Bill Shen ------------------------ ________________________________ 发件人: Igal @ getRailo.org<mailto:igal@getrailo.org> 发送时间: ‎2014/‎10/‎11 2:52 收件人: CentOS mailing list<mailto:centos@centos.org> 主题: Re: [CentOS] CentOS 7 docs, tutorials, etc... On 10/10/2014 11:44 AM, James Hogarth wrote: > Keep in mind CentOS is a rebuild of RHEL so any resources for RHEL are > applicable to CentOS. > > I'm not sure if any EL7 books have been written yet (as it's fairly new and > the Red Hat certifications have only just started being updated). > > In the meanwhile one of the best resources is access.redhat.com ... read > the documentation there. it's very difficult to find up-to-date books on the subject, but yes, the docs on https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ are so far really good. it's all just very confusing for someone without Linux experience. all the docs/tutorials/examples out there are for previous versions so they are all out of date now that RHEL/CentOS 7 uses systemd. also, the relationship between the OS, Gnome, and KDE is confusing. I installed CentOS 7 with GUI so I have Gnome 3.8.4 which I expected, but how come I have KDE stuff there as well? and... I still haven't figured out how to add shortcuts to the desktop and/or task bar which should really be a context menu option so I'm not sure why Gnome is so un-intuitive in that case. Igal _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

← Newer
1
...
11
12
13
14
15
16
17
...
22
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss October 2014