Discuss February 2015

discuss@lists.centos.org

153 participants
158 discussions

Re: [CentOS] Centos 6 Sendmail backup MX Config
by James B. Byrne 15 Feb '15

15 Feb '15

On Fri, February 13, 2015 12:52, Les Mikesell wrote: > On Fri, Feb 13, 2015 at 11:39 AM, Valeri Galtsev > <galtsev(a)kicp.uchicago.edu> wrote: >> >>> Otherwise it accept junk that your primary rejects >> >> Not exactly. If greylisting on primary is set, but on backup MX >> is not, still what is killed by greylisting by primary MX, >> almost never will come through backup MX. This is due to the >> same reason why greylisting is efficient: it trows off all that >> doesn't behave as mail server (thus never comes for re-delivery, >> and definitely doesn't try backup MX which real servers always >> do even before attempt of re-delivery). > > I'm not convinced. Spam is big business and trying a 2nd MX is cheap. > Much spam/ucem is deliberately sent directly to the lower priority MX host from the outset on the assumptions that: 1.) the secondaries will be less well configured to detect SPAM to begin with; and 2.) once mail is routed though an officially recognized secondary host then the primary is less likely to treat such traffic as SPAM. We run grey listing and amavisd (clamd/spamd) on all of our MX servers because of this practice. We also list several non-existent MX secondaries at the lowest priority to cheaply pick off the really stupid points of origin. Yes we do get rejects for real correspondents. A notable recent victim, if such is the right word to describe a self-inflicted injury, was ibm.com. Who, in contravention of rfcs 7208 and 7372, both configured eleven MX hosts for their domain AND enabled SPF. This causes an immediate permerr with anyone checking SPF as the maximum number of MX hosts allowed with an SPF enabled domain is ten. But, who am I to tell IBM how to configure a computer? On the other hand, we also have large organizations who use smtp pools and with these grey-listing simply does not work. Each subsequent attempt to connect can occur from any of the IPs in that pool and the mail either never gets through or is seriously delayed. For those cases we are constrained to use white-listing. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Re: [CentOS] Centos 6 Sendmail backup MX Config
by James B. Byrne 15 Feb '15

15 Feb '15

On Fri, February 13, 2015 10:57, Ken Smith wrote: > Hi All, > > I'm just wanting to check that my understanding of the settings is > correct as my web searches are finding a lot of dated information. > > If I want a Centos 6 sendmail system act as the secondary MX for > domain > bbbbb.co.uk do I just add a > > Connect:bbbbb.co.uk RELAY > > statement into /etc/mail/access and restart sendmail > > Obviously I have the DNS MX records for the domain are already > established. > > I've been getting "/config error/: /mail loops back to me/ " errors. > > I think I may be stumbling into a variant of cname problem where the > hostname as far as the sendmail machine is concerned is aaaaa.com but > the DNS setting for the secondary MX is smtp1.bbbbb.co.uk. > > They both resolve to the same IP but when sendmail looks up the MX > records for bbbbb.co.uk it will find smtp.bbbbb.co.uk and > smtp1.bbbbb.co.uk listed and it may relay the mail off to > smtp1.bbbbb.co.uk without recognising that aaaaa.com = > smtp1.bbbbb.co.uk. Am I on the right track here, as I then just need > to > change the secondary MX setting in DNS to aaaaa.com? When I set up secondary MX services in Sendmail (and Postfix) then I always use the direct address feature of the domain routing table and avoid looking up MX RRs altogether. After all, if the mail arrived here it is a good bet that the main MX is off-line (or this is SPAM/UCEM but that is another issue). So assuming that the primary MX host is mx10.example.com and the secondary is mx40.something.else then with Sendmail the file /etc/mail/mailertable on mx40.something.else should contain something like this: example.com. esmtp:[mx10.example.com] .example.com. esmtp:[mx10.example.com] The [] brackets prevent MX lookups and just routes the message traffic directly to mx10.example.com as soon as a connection can be made. This prevents the most common source of mail loops where the primary is off-line and so any mail is bounced back to the backup MX, which just happens to be the host that just sent it, thus causing the loop. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Updated Spam Assassin for CentOS 5...
by Robert Heller 15 Feb '15

15 Feb '15

I am wondering about updating the version of Spam Assassin on my CentOS 5 mail server. The current version, 3.3.1-4.el5 (stock RHEL version), has been 'leaking' recently. I suspect I need some newer match rules to detect some of the newer flavors of spam. I see that in rpmforge's extras repo is version 3.3.2-4.el5.rfx -- is this version worth installing? Are there even newer versions either available for CentOS 5 (or buildable under CentOS 5)? Or is there a collection of match rules available for the newer flavors of spam than can just be dropped into /etc/mail/spamassassin/local.cf? I am not ready just yet to migrate my server to CentOS 6 (but that is something I'll probably do at some point). -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

3 3

C5 BASH IF
by Always Learning 15 Feb '15

15 Feb '15

Being new to some aspects of BASH, I tried to reduce the quantity of scripts by introducing a comparison test into an existing working script. The script refused to work until I placed [ ] around the actual test. The second test, in the same script, misfunctioned until I removed the [ ] around the second test. ---------------------------- NON WORKING first comparison 5 if $dir="law" 6 then 7 www="law" 8 dir=${file:0:5} 9 else 10 www="www/s" 11 fi Error message = /root/bin/.us: line 5: law=law: command not found --------------------------------- WORKING first comparison 5 if [ $dir="law" ] 6 then 7 www="law" 8 dir=${file:0:5} 9 else 10 www="www/s" 11 fi ------------------------------------ NON-WORKING second comparison 15 if [ $file='law00.css' ] 16 then 17 file=$dir/$file 18 echo "css" 19 else 20 file=$dir/$file\.php 21 echo "no css" 22 fi 23 #---------------------------- Every comparison in the second test, including wrong comparisons, satisfy the test and caused the 'css' display. When line 15 was changed to 15 if [ $file='law00css' ] everything continued to match including items with no 'css' in the file name. Baffled. Are C5 BASH scripts restricted to only 1 IF comparison ? -- Regards, Paul. England, EU. Je suis Charlie.

6 13

list moderation transparency
by Jim Perrin 14 Feb '15

14 Feb '15

I've had a few people ask me privately "Why hasn't X been told", which seems a legitimate question on the surface. Here's what has happened thus far: I've sent a few people emails off-list with examples of what I feel to be inappropriate posts to the list since the announcement. I don't see any need yet for a 'public name and shame' style posting. I prefer to handle matters with a bit of discretion in a direct, and private manner out of respect for members on the list. tl;dr, just because you don't see it publicly doesn't mean we're not taking corrective action. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77

1 0

Securing SSH wiki article outdated
by Warren Young 14 Feb '15

14 Feb '15

Hi, just a quick note to whoever is maintaining this page: http://wiki.centos.org/HowTos/Network/SecuringSSH The procedure is missing the firewall-cmd calls necessary in EL7: firewall-cmd --add-port 2345/tcp firewall-cmd --add-port 2345/tcp --permanent Also, it may be worth mentioning that semanage is in the policycoreutils-python package, which isn’t installed by default in all stock configurations.

10 14

Thread moderation and list etiquette (Reference - Another Fedora Decision)
by Jim Perrin 14 Feb '15

14 Feb '15

Hi, The thread titled "Another Fedora Decision" is rapidly turning into a political and opinion driven flame fest that is unsuited for the CentOS mailing list. This list should try and remain focused on CentOS, what we have and keep the area sane for new users as well as old hands to participate in a fair and thoughtful conversation around the CentOS Linux platform and the CentOS project ecosystem. We are, from this point on, considering moderating all content posted to that thread. Furthermore, consider this to be a wider general request - specially to the list regulars - to be considerate and thoughtful in their responses. General 'me too' and 'yes' or 'no' type posts are not needed. Similarly, if you must correct someone, do it politely without making it into a personal attack. Finally, if content in a conversation changes from the original post - please change the thread and start a new one. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77

7 8

Centos 6 Sendmail backup MX Config
by Ken Smith 14 Feb '15

14 Feb '15

Hi All, I'm just wanting to check that my understanding of the settings is correct as my web searches are finding a lot of dated information. If I want a Centos 6 sendmail system act as the secondary MX for domain bbbbb.co.uk do I just add a Connect:bbbbb.co.uk RELAY statement into /etc/mail/access and restart sendmail Obviously I have the DNS MX records for the domain are already established. I've been getting "/config error/: /mail loops back to me/ " errors. I think I may be stumbling into a variant of cname problem where the hostname as far as the sendmail machine is concerned is aaaaa.com but the DNS setting for the secondary MX is smtp1.bbbbb.co.uk. They both resolve to the same IP but when sendmail looks up the MX records for bbbbb.co.uk it will find smtp.bbbbb.co.uk and smtp1.bbbbb.co.uk listed and it may relay the mail off to smtp1.bbbbb.co.uk without recognising that aaaaa.com = smtp1.bbbbb.co.uk. Am I on the right track here, as I then just need to change the secondary MX setting in DNS to aaaaa.com? Many thanks Ken -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

6 17

Getting strange message in terminal
by MOHD HOMAIDUR RAHMAN 13 Feb '15

13 Feb '15

Dear all when I am login in terminal I am getting following message. declare -x ALL_PROXY="socks://hproxy.iitm.ac.in:3128/" declare -x AMBERHOME="/sware/amber/amber12" declare -x COLORTERM="gnome-terminal" declare -x CPPFLAGS="-I/usr/local/bin/include" declare -x DBUS_SESSION_BUS_ADDRESS="unix:abstract=/tmp/dbus-adjIuc8A5l,guid=d2289573889e3cae1ac3908354de3192" declare -x DESKTOP_SESSION="gnome-classic" declare -x DISPLAY=":0" declare -x FTP_PROXY="http://hproxy.iitm.ac.in:3128/" declare -x G09BASIS="/usr/local/gaussian/g09/basis" declare -x GAUSS_ARCHDIR="/usr/local/gaussian/g09/arch" declare -x GAUSS_BSDDIR="/usr/local/gaussian/g09/bsd" declare -x GAUSS_EXEDIR="/usr/local/gaussian/g09/bsd:/usr/local/gaussian/g09/local:/usr/local/gaussian/g09/extras:/usr/local/gaussian/g09" declare -x GAUSS_LEXEDIR="/usr/local/gaussian/g09/linda-exe" declare -x GAUSS_SCRDIR="/scratch" declare -x GDMSESSION="gnome-classic" declare -x GDM_LANG="en_US.utf8" declare -x GNOME_DESKTOP_SESSION_ID="this-is-deprecated" declare -x GNOME_KEYRING_CONTROL="/run/user/1000/keyring-oPxj9T" declare -x GNOME_KEYRING_PID="2515" declare -x GNOME_SHELL_SESSION_MODE="classic" declare -x GPG_AGENT_INFO="/run/user/1000/keyring-oPxj9T/gpg:0:1" declare -x GV_DIR="/usr/local/gaussian/gv" declare -x HARDWARE_PLATFORM="x86_64" declare -x HISTCONTROL="ignoredups" declare -x HISTSIZE="1000" declare -x HOME="/home/rahman" declare -x HOSTNAME="localhost.btb.igloonet" declare -x HTTPS_PROXY="http://hproxy.iitm.ac.in:3128/" declare -x HTTP_PROXY="http://hproxy.iitm.ac.in:3128" declare -x IMSETTINGS_INTEGRATE_DESKTOP="yes" declare -x IMSETTINGS_MODULE="none" declare -x KDEDIRS="/usr" declare -x LANG="en_US.utf8" declare -x LC_MEASUREMENT="en_US.utf8" declare -x LC_MONETARY="en_US.utf8" declare -x LC_NUMERIC="en_US.utf8" declare -x LC_PAPER="en_US.utf8" declare -x LC_TIME="en_US.utf8" declare -x LDFLAGS="-L/usr/local/lib" declare -x LD_LIBRARY_PATH="/usr/local/gaussian/g09/bsd:/usr/local/gaussian/g09/local:/usr/local/gaussian/g09/extras:/usr/local/gaussian/g09:/usr/local/gaussian/g09/bsd:/usr/local/gaussian/g09/local:/usr/local/gaussian/g09/extras:/usr/local/gaussian/g09::/lib:/usr/local/gaussian/gv/lib:/usr/local/gaussian/gv/lib" declare -x LESSOPEN="||/usr/bin/lesspipe.sh %s" declare -x LOADEDMODULES="" declare -x LOGNAME="rahman" declare -x LS_COLORS="rs=0:di=38;5;27:ln=38;5;51:mh=44;38;5;15:pi=40;38;5;11:so=38;5;13:do=38;5;5:bd=48;5;232;38;5;11:cd=48;5;232;38;5;3:or=48;5;232;38;5;9:mi=05;48;5;232;38;5;15:su=48;5;196;38;5;15:sg=48;5;11;38;5;16:ca=48;5;196;38;5;226:tw=48;5;10;38;5;16:ow=48;5;10;38;5;21:st=48;5;21;38;5;15:ex=38;5;34:*.tar=38;5;9:*.tgz=38;5;9:*.arc=38;5;9:*.arj=38;5;9:*.taz=38;5;9:*.lha=38;5;9:*.lz4=38;5;9:*.lzh=38;5;9:*.lzma=38;5;9:*.tlz=38;5;9:*.txz=38;5;9:*.tzo=38;5;9:*.t7z=38;5;9:*.zip=38;5;9:*.z=38;5;9:*.Z=38;5;9:*.dz=38;5;9:*.gz=38;5;9:*.lrz=38;5;9:*.lz=38;5;9:*.lzo=38;5;9:*.xz=38;5;9:*.bz2=38;5;9:*.bz=38;5;9:*.tbz=38;5;9:*.tbz2=38;5;9:*.tz=38;5;9:*.deb=38;5;9:*.rpm=38;5;9:*.jar=38;5;9:*.war=38;5;9:*.ear=38;5;9:*.sar=38;5;9:*.rar=38;5;9:*.alz=38;5;9:*.ace=38;5;9:*.zoo=38;5;9:*.cpio=38;5;9:*.7z=38;5;9:*.rz=38;5;9:*.cab=38;5;9:*.jpg=38;5;13:*.jpeg=38;5;13:*.gif=38;5;13:*.bmp=38;5;13:*.pbm=38;5;13:*.pgm=38;5;13:*.ppm=38;5;13:*.tga=38;5;13:*.xbm=38;5;13:*.xpm=38;5;13:*.tif=38;5;13:*.tiff=38;5;13:*.png=38;5;13:*.svg=38;5;13:*.svgz=38;5;13:*.mng=38;5;13:*.pcx=38;5;13:*.mov=38;5;13:*.mpg=38;5;13:*.mpeg=38;5;13:*.m2v=38;5;13:*.mkv=38;5;13:*.webm=38;5;13:*.ogm=38;5;13:*.mp4=38;5;13:*.m4v=38;5;13:*.mp4v=38;5;13:*.vob=38;5;13:*.qt=38;5;13:*.nuv=38;5;13:*.wmv=38;5;13:*.asf=38;5;13:*.rm=38;5;13:*.rmvb=38;5;13:*.flc=38;5;13:*.avi=38;5;13:*.fli=38;5;13:*.flv=38;5;13:*.gl=38;5;13:*.dl=38;5;13:*.xcf=38;5;13:*.xwd=38;5;13:*.yuv=38;5;13:*.cgm=38;5;13:*.emf=38;5;13:*.axv=38;5;13:*.anx=38;5;13:*.ogv=38;5;13:*.ogx=38;5;13:*.aac=38;5;45:*.au=38;5;45:*.flac=38;5;45:*.mid=38;5;45:*.midi=38;5;45:*.mka=38;5;45:*.mp3=38;5;45:*.mpc=38;5;45:*.ogg=38;5;45:*.ra=38;5;45:*.wav=38;5;45:*.axa=38;5;45:*.oga=38;5;45:*.spx=38;5;45:*.xspf=38;5;45:" declare -x MAIL="/var/spool/mail/rahman" declare -x MODULEPATH="/usr/share/Modules/modulefiles:/etc/modulefiles" declare -x MODULESHOME="/usr/share/Modules" declare -x OLDPWD declare -x PATH="/home/rahman/Gabedit64:/usr/lib64/qt-3.3/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin:/sware/amber/amber12/bin::/usr/local/bin/vmd::/sware/packmol/packmol::/usr/local/gromacs/bin::/usr/bin/qmake-qt4/bin/qmake:/usr/local/gaussian/g09/bsd:/usr/local/gaussian/g09/local:/usr/local/gaussian/g09/extras:/usr/local/gaussian/g09:/home/rahman/.local/bin:/home/rahman/bin:/usr/local/gaussian/g09/bsd:/usr/local/gaussian/g09/local:/usr/local/gaussian/g09/extras:/usr/local/gaussian/g09" declare -x PGI_TERM="trace,abort" declare -x PWD="/home/rahman/learn4prog" declare -x QTDIR="/usr/bin/qmake-qt4" declare -x QTINC="/usr/lib64/qt-3.3/include" declare -x QTLIB="/usr/lib64/qt-3.3/lib" declare -x QT_GRAPHICSSYSTEM_CHECKED="1" declare -x QT_IM_MODULE="ibus" declare -x QT_PLUGIN_PATH="/usr/lib64/kde4/plugins:/usr/lib/kde4/plugins" declare -x SESSION_MANAGER="local/unix:@ /tmp/.ICE-unix/2517,unix/unix:/tmp/.ICE-unix/2517" declare -x SHELL="/bin/bash" declare -x SHLVL="2" declare -x SSH_AGENT_PID="2676" declare -x SSH_AUTH_SOCK="/run/user/1000/keyring-oPxj9T/ssh" declare -x TERM="xterm-256color" declare -x USER="rahman" declare -x USERNAME="rahman" declare -x VTE_VERSION="3406" declare -x WINDOWID="48234502" declare -x WINDOWPATH="1" declare -x XAUTHORITY="/run/gdm/auth-for-rahman-sjEjGp/database" declare -x XDG_MENU_PREFIX="gnome-" declare -x XDG_RUNTIME_DIR="/run/user/1000" declare -x XDG_SEAT="seat0" declare -x XDG_SESSION_ID="1" declare -x XDG_VTNR="1" declare -x XMODIFIERS="@im=ibus" declare -x _DSM_BARRIER="SHM" declare -x all_proxy="socks://hproxy.iitm.ac.in:3128/" declare -x g09root="/usr/local/gaussian" declare -x http_proxy="http://hproxy.iitm.ac.in:3128" declare -x https_proxy="http://hproxy.iitm.ac.in:3128/" declare -x no_proxy=".domain.com" This is not effecting my system performance but I want to know why this is showing this message and how to resolve this. I am using Centos 7, with version Linux version 3.10.0-123.20.1.el7.x86_64 (builder(a)kbuilder.dev.centos.org) (gcc version 4.8.2 20140120 (Red Hat 4.8.2-16) (GCC) ) #1 SMP Thu Jan 29 18:05:33 UTC 2015 Thank you in advance Regards Rahman ''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' *Md Homaidur Rahman* PhD Research Scholar Computational Biophysics Lab. Department of Biotechnology Indian Institute of Technology-Madras Chennai-600 036 *Mobile No = +91- 7845991785 <%2B91-%207845991785>* '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

2 1

xfs_quotas
by m.roth＠5-cent.us 13 Feb '15

13 Feb '15

Hi, folks, (The system I'm doing this on is actually RHEL 6.6, but that list is so quiet....) We've got a new RAID box attached to the server. Large. We'd like to implement xfs quotas... but one thing I can't find is information on this: we want to export the real directory to /project, and let automount bind it under there. (/project/hisproj). All I find shows creating a permanent mount point. Is this actually do-able? Can I set the quota on the real location? (/mnt/drive/project/hisproj, say), and have them work? mark

2 1

← Newer
1
...
7
8
9
10
11
12
13
...
16
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2015