Discuss March 2015

discuss@lists.centos.org

172 participants
170 discussions

Fail2Ban Centos 7 is there a trick to making it work?
by John Plemons 09 Mar '15

09 Mar '15

Been working on fail2ban, and trying to make it work with plain Jane install of Centos 7 Machine is a HP running 2 Quad core Xeons, 16 gig or ram and 1 plus TB of disk space. Very generic and vanilla. Current available epel repo version is fail2ban-0.9.1 Looking at the log file, fail2ban starts and stops fine, there isn't output though showing any login attempts being restricted. 2015-03-09 12:54:37,930 fail2ban.server [14805]: INFO Stopping all jails 2015-03-09 12:54:37,931 fail2ban.server [14805]: INFO Exiting Fail2ban 2015-03-09 12:54:38,338 fail2ban.server [16678]: INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.9.1 2015-03-09 12:54:38,341 fail2ban.database [16678]: INFO Connected to fail2ban persistent database '/var/lib/fail2ban/fail2ban.sqlite3' I copied jail.conf and added the edited jail.local to the directory /etc/fail2ban/ This is about as far as I have gotten with searches on how to configure with Centos 7. Any help would be welcome. What am I missing? john

2 1

mod_clamav, apache and centos6?
by James Pearson 09 Mar '15

09 Mar '15

I'm trying to get mod_clamav working with Apache on a CentOS 6.6 box - without much luck ... I'm using httpd 2.2.15-39.el6.centos.x86_64 with clamav 0.98.6-1.el6.x86_64 (from EPEL) and mod_clamav 0.23 compiled from source via http://software.othello.ch/mod_clamav/ The mod_clamav source hasn't been updated in nearly 6 years - so may well no longer work with more recent versions of Apache or Clamav ... Before I spend too much time on this - I was wondering if anyone has this set up working, or should I give up and try something else? Thanks James Pearson

1 0

Problem with ntp
by C.L. Martinez 09 Mar '15

09 Mar '15

Hi all, I have a problem with ntpd daemon in my CentOS7 vm. When I try to list peers, command fails: [root@c7tst ntpstats]# ntpq ntpq> pe ntpq: read: Connection refused ntpq> My actual ntp.conf: # For more information about this file, see the man pages # ntp.conf(5), ntp_acc(5), ntp_auth(5), ntp_clock(5), ntp_misc(5), ntp_mon(5). driftfile /var/lib/ntp/drift # Permit time synchronization with our time source, but do not # permit the source to query or modify the service on this system. restrict default nomodify notrap nopeer noquery # Permit all access over the loopback interface. This could # be tightened as well, but to do so would effect some of # the administrative functions. restrict 127.0.0.1 #restrict ::1 # Hosts on local network are less restricted. #restrict 192.168.1.0 mask 255.255.255.0 nomodify notrap # Use public servers from the pool.ntp.org project. # Please consider joining the pool (http://www.pool.ntp.org/join.html) server 0.europe.pool.ntp.org iburst server 1.europe.pool.ntp.org iburst server 2.europe.pool.ntp.org iburst server 3.europe.pool.ntp.org iburst #broadcast 192.168.1.255 autokey # broadcast server #broadcastclient # broadcast client #broadcast 224.0.1.1 autokey # multicast server #multicastclient 224.0.1.1 # multicast client #manycastserver 239.255.254.254 # manycast server #manycastclient 239.255.254.254 autokey # manycast client # Enable public key cryptography. #crypto includefile /etc/ntp/crypto/pw # Key file containing the keys and key identifiers used when operating # with symmetric key cryptography. keys /etc/ntp/keys # Specify the key identifiers which are trusted. #trustedkey 4 8 42 # Specify the key identifier to use with the ntpdc utility. #requestkey 8 # Specify the key identifier to use with the ntpq utility. #controlkey 8 # Enable writing of statistics records. statistics clockstats cryptostats loopstats peerstats # Disable the monitoring facility to prevent amplification attacks using ntpdc # monlist command when default restrict does not include the noquery flag. See # CVE-2013-5211 for more details. # Note: Monitoring will not be disabled with the limited restriction flag. #disable monitor I have tried to disable all "restrict" statements without luck. Same ntp.conf works in my CentOS6.x hosts ... Any idea why?? (SELinux is disabled) Thanks.

3 5

LVM encryption and new volume group
by Tim 09 Mar '15

09 Mar '15

Hello list, I bought a Thinkpad T420 and installed CentOS 7 recently. I choosed to use lvm encryption for the entire volume group. It works so far. But now I am planning to install a second hard disk. My thought is to create a new volume group on this additional disk. But how can I integrate/do this according to the existing encryption so that it will be decrypted by the same passphrase I use at startup? Regards and thanks in advance Tim

3 8

mariadb driver for named-sdb (CentOS 7)
by Jim Holmes 08 Mar '15

08 Mar '15

I've looked high and low and I cannot a package that has the mariadb driver to go with bind-sdb-9.9.4-14.el7_0.1.x86_64. Everything I'm finding is how to build from source, which for this project will not be maintainable. Is there a yum repo with this driver anywhere? Thanks much, Jim

3 2

which uuid to specify a raid in fstab
by Negative 08 Mar '15

08 Mar '15

I'm confused about which UUID to use to identify a software RAID in fstab. lsblk -fs shows: md127p1 ext4 c43af789-82aa-49e9-a8ed-acd52b1cdd58 /y --- md127 ext4 39c20575-4257-4fd7-b5c8-8a15757e9e8e --- sdb1 linux_r hostname:0 af77830e-8cfd-9012-62ce-e57105c3bf6c --- sdb --- sdc1 linux_r hostname:0 af77830e-8cfd-9012-62ce-e57105c3bf6c --- sdc linux_r hostname:0 af77830e-8cfd-9012-62ce-e57105c3bf6c mdadm --detail gives for both md127p1 and md127 UUID : af77830e:8cfd9012:62cee571:05c3bf6c I want to add some disks to the server, not to the raid and I wanted to avoid trouble with the names. Any help would be appreciated. Barry

3 4

Squid on CentOS 7: few questions
by Niki Kovacs 07 Mar '15

07 Mar '15

Hi, I recently migrated my office's server from Slackware64 14.1 to CentOS 7. Right now I'm in the process of configuring the Squid web proxy. I edited the default /etc/squid/squid.conf, and here's what I have so far: --8<-------------------------------------------------- # /etc/squid/squid.conf # Nom d'hôte du serveur Squid visible_hostname amandine.microlinux.lan # Définitions acl localnet src 192.168.2.0/24 # RFC1918 possible internal network acl SSL_ports port 443 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # https acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT # Règles d'accès http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localnet # Port du proxy http_port 3128 # Taille du cache dans la RAM cache_mem 256 MB # Vidage système coredump_dir /var/spool/squid # Durée de vie des fichiers sans date d'expiration refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 refresh_pattern . 0 --8<-------------------------------------------------- The proxy is working as expected. I have a few questions for fine-tuning though. 1. Squid's main logs are stored in /var/log/squid/access.log. I'd like to setup logfile rotation for that, since it can become quite big. How do you handle this? With Squid's intern 'logfile_rotate' directive or with logrotate? What I'd like to do is rotate this logfile about once a week. 2. Which user is Squid supposed to run as under CentOS? On my Slackware server I had the following: cache_effective_user nobody cache_effective_group nobody What's an orthodox setting for CentOS? 3. The access rules are a bit minimal. Do they seem OK to you for a LAN? Any suggestions? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

3 3

How to install tp_smapi and acpi_call kernel modules
by Tim 07 Mar '15

07 Mar '15

Hello, I've got a Thinkpad T420 and would like to use full tlp functionality. Therefore I need the kernel module tp_smapi and acpi_call. Have a look right here: http://linrunner.de/en/tlp/docs/tlp-linux-advanced-power-management.html#in… There are only fedora related packages but none for RHEL/CentOS. Should I install that repo and hardcode the mirror to the fc21 repo? Regards Tim

3 3

Something like apt-cacher for CentOS/RHEL?
by Niki Kovacs 07 Mar '15

07 Mar '15

Hi, For some time I've fiddled with Debian and Ubuntu LTS. There's one really nice feature for local networks: apt-cacher, a package proxy for APT. My company is in the remote South French countryside, and more often than not, schools and public libraries only have some very limited Internet access with relatively low bandwidth, which can make the updating process very tedious. A package cache comes in very handy in such situation. Do you know if something like this exists for RPM-based distributions? Cheers, Niki -- Microlinux - Solutions informatiques 100% Linux et logiciels libres 7, place de l'église - 30730 Montpezat Web : http://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32

6 6

Sieve Filter: All email not from friendly name?
by Benjamin Smith 06 Mar '15

06 Mar '15

I'm using Dovecot and Sieve under postfix on CentOS 6. Sieve filters are working great for a number of addresses. I'm trying to set up a sieve filter that catches all email NOT from Cron Daemon. Nearly all Admin messages come from "Cron Daemon <username@servername>" so I want a Sieve Filter that will catch all addresses NOT from this address and stick it into a folder under INBOX/ProbablySpam but while other filters seem to work fine, this one does not. My best guess so far: if anyof (not address :all :contains ["From"] "Cron Daemon") { fileinto "INBOX.ProbablySpam"; } ... It passes validation checking in KMail, but seems to catch all inbound messages. What am I missing? Thanks, Ben

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss March 2015