Discuss

discuss@lists.centos.org

34758 discussions

Re: [CentOS] preventing apache from being a mail relay
by James B. Byrne 04 Mar '13

04 Mar '13

On Sun, March 3, 2013 18:57, Eddie G. O'Connor Jr. wrote: > If / when I get the guts to build my own Apache web server...I would > think that the ONLY way to do it would be to document > EVERYTHING....sort > of as a "Just-In-Case" policy?....or is it only after you've built > it?...and when you make CHANGES to your server....THAT'S when you > document everything?.... > The workflow I have adopted with respect to system administration is to use a project management application, such as Trac (originally) or Redmine/ChileProject (currently), and to open an issue for each activity that I perform on any of my servers. Therein I record the motivation for the activity, the desired and intended result, and log my time. I also record each problem that is encountered, solutions as they are found, and insights as they are revealed. I attach configuration files, copies of related email messages, and make any notes right on the issue. As Redmine allows full-text case-insensitive searches I can usually find in fairly short order the details about anything I have done that I can at least dimly recall doing. I add subsequent maintenance events either directly to the original issue or create a new issue and link that to the original. While hardly perfect this practice has saved my behind on several occasions. In fact I would recommend that one document each package install from the initial selection of the software and go on from there. I have had occasion where the question asked of me was "why was this package selected instead of that package?" Having the answer to hand along with the evidence has short-circuited the blame-game on at least one occasion. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Tomcat query from complete newbie
by Timothy Murphy 04 Mar '13

04 Mar '13

I'm a complete tomcat beginner - (I installed it on my CentOS-6.3 server this morning.) According to the web-interface on port 8080 tomcat is running fine. Basically, I want to allow a Java program I have written (which works well) to be run over the internet. This is to test students understanding of Turing machines. The student has to enter a short "program" (consisting of 20-80 "quadruples"). My program will then test if the program does what it is meant to do. So the student enters his program (about 1k), eg by pasting from a file - the program should then run, and the student should see what it outputs. I'm looking for advice on the best way to set this up. As I understand it, tomcat can either be run "standalone" or "behind apache". I am running httpd on the server, so either method should be available. It seems that the standalone option is simpler, so I would probably prefer that. Any and all suggestions gratefully received.

3 3

acrobat reader for x86_64?
by Fred Smith 04 Mar '13

04 Mar '13

Adobe doesn't seem to have acroread for x86_64 linux, or at least I don't see it anywhere. Anybody know otherwise? Evince and other tools work pretty well, but I have always liked having the "real thing" around for those occasions when they don't. -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

7 9

preventing apache from being a mail relay
by Robert Moskowitz 04 Mar '13

04 Mar '13

I am trying to recall back at least 2 years, and my notes are poor, and my searching appears to be worst... Seems I recall that last when I set up my apache server, the spammers were posting to it so it would send out the spam on port 25. There was some conf that I did to block this, but I did not document it, and I can't find any reference to this. I don't think my memory is that bad, but it IS sunday... I don't want to put up this new server and have it flooding the world with spam and then get the server blocked. So do I remember correctly that this was a problem? Is it still, and how is this prevented? Thanks. Am putting up better notes this time around.

5 7

Centos6.4 via CR-repo; boot problems
by jvermeulen 04 Mar '13

04 Mar '13

Dear All, after updating to Centos6.4 via cr-repo, my laptop hangs on: starting crond : ok I booted in single user mode but I'm not sure what to change .... The laptop is an older MSI, hardware details attached. what could be the issue here? greetings, J.

7 13

Re: [CentOS] preventing apache from being a mail relay
by Robert Moskowitz 03 Mar '13

03 Mar '13

On 03/03/2013 04:33 PM, Reindl Harald wrote: > > Am 03.03.2013 22:30, schrieb Robert Moskowitz: >> I am trying to recall back at least 2 years, and my notes are poor, and >> my searching appears to be worst... >> >> Seems I recall that last when I set up my apache server, the spammers >> were posting to it so it would send out the spam on port 25. There was >> some conf that I did to block this, but I did not document it, and I >> can't find any reference to this > what are you speaking about? > apache is a WEBSERVER and has NOTHING to do with email There was an attack, and if you search you will find references to it, where the spammers post to your web server in such a way that they relay out port 25. They send to your port 80, but you send out port 25. For example: http://forums.fedoraforum.org/archive/index.php/t-173601.html My old server has been running smoothly for over two years, but it is time to bring the software current. I did all the work on this back then, or maybe before and copied from my earlier server. This time I am trying to build everything clean and document every change I make.

4 5

Strange behavior from software RAID
by Harold Pritchett 03 Mar '13

03 Mar '13

Somewhere, mdadm is cacheing information. Here is my /etc/mdadm.conf file: more /etc/mdadm.conf # mdadm.conf written out by anaconda DEVICE partitions MAILADDR root ARRAY /dev/md0 level=raid1 num-devices=4 metadata=0.90 UUID=55ff58b2:0abb5bad:42911890:5950dfce ARRAY /dev/md1 level=raid1 num-devices=2 metadata=0.90 UUID=315eaf5c:776c85bd:5fa8189c:68a99382 ARRAY /dev/md2 level=raid1 num-devices=2 metadata=0.90 UUID=5b017f95:b7e266cc:f17a7611:8b752a02 ARRAY /dev/md3 level=raid1 num-devices=2 metadata=0.90 UUID=4cc310ee:60201e16:c7017bd4:9feea350 ARRAY /dev/md4 level=raid1 num-devices=2 metadata=0.90 UUID=ea205046:3c6e78c6:ab84faa4:0da53c7c After a system re-boot, here is the contents of /proc/mdstat # cat /proc/mdstat Personalities : [raid1] md125 : active raid1 sdc3[0] 455482816 blocks [2/1] [U_] md0 : active raid1 sdd1[3] sdc1[0] sdb1[1] sda1[2] 1000320 blocks [4/4] [UUUU] md127 : active raid1 sdd3[1] sdb3[0] 971747648 blocks [2/2] [UU] md3 : active raid1 sdf1[1] sde1[0] 1003904 blocks [2/2] [UU] md4 : active raid1 sdf3[1] sde3[0] 1948491648 blocks [2/2] [UU] md1 : active raid1 sda3[1] 455482816 blocks [2/1] [_U] unused devices: <none> There are six physical disks in this system: Disk /dev/sda: 500.1 GB, 500107862016 bytes Disk /dev/sdb: 1000.2 GB, 1000204886016 bytes Disk /dev/sdc: 500.1 GB, 500107862016 bytes Disk /dev/sdd: 1000.2 GB, 1000204886016 bytes Disk /dev/sde: 2000.3 GB, 2000398934016 bytes Disk /dev/sdf: 2000.3 GB, 2000398934016 bytes I used mdadm --examine /dev/sda1 to find the internal UUID for each of the physical volumes making up these volume groups /dev/sda1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sdb1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sdc1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sdd1: Magic : a92b4efc Version : 0.90.00 UUID : 55ff58b2:0abb5bad:42911890:5950dfce /dev/sda3: Magic : a92b4efc Version : 0.90.00 UUID : 315eaf5c:776c85bd:5fa8189c:68a99382 /dev/sdc3: Magic : a92b4efc Version : 0.90.00 UUID : 315eaf5c:776c85bd:5fa8189c:68a99382 /dev/sdb3: Magic : a92b4efc Version : 0.90.00 UUID : 5b017f95:b7e266cc:f17a7611:8b752a02 /dev/sdd3: Magic : a92b4efc Version : 0.90.00 UUID : 5b017f95:b7e266cc:f17a7611:8b752a02 /dev/sde1: Magic : a92b4efc Version : 0.90.00 UUID : 4cc310ee:60201e16:c7017bd4:9feea350 /dev/sdf1: Magic : a92b4efc Version : 0.90.00 UUID : 4cc310ee:60201e16:c7017bd4:9feea350 /dev/sde3: Magic : a92b4efc Version : 0.90.00 UUID : ea205046:3c6e78c6:ab84faa4:0da53c7c /dev/sdf3: Magic : a92b4efc Version : 0.90.00 UUID : ea205046:3c6e78c6:ab84faa4:0da53c7c As you can see, the UUID on the various PVs match the values in the /etc/mdadm.conf file. My question is What the heck is going on. When I boot the system, I end up with two unexpected, unconfigured volume groups. Where the heck are /dev/md125 and /dev/md127 coming from? They don't appear in /etc/mdadm.conf and if I re-boot they keep coming back. It appears that somewhere mdadm is keeping information. How can I get rid of it so the mdadm.conf file is used. Harold

3 2

Not installing avahi in a kickstart install
by Robert Moskowitz 03 Mar '13

03 Mar '13

In the packages section of my kickstart I have: -avahi and I am still getting avahi and all of its rpms installed. I don't want avahi on my servers, how do I specify in a kickstart to NOT install it?

1 0

Re: [CentOS] Strange behavior from software RAID
by Harold Pritchett 03 Mar '13

03 Mar '13

Here I am following up on my own post... It occurred to me that all of this stuff must be magic. How does it work when the mdadm.conf file is on a raid/LVM volume which is not available at boot time? I looked in the /boot filesystem, the only one which is available at boot time and there is nothing there, unless this data is actually saved in one of the kernel modules or other binary files... Harold

2 1

EDNS support
by Robert Moskowitz 03 Mar '13

03 Mar '13

I am having problems with EDNS support on a few Centos 6.3 bind servers. I am trying to determine if the problem is my Juniper SSG5 firewall of Centos. All the servers have firewall enabled, though I have tested with stopping iptables and ip6tables. I am using tests from: https://www.dns-oarc.net/oarc/services/replysizetest dig @localhost +short rs.dns-oarc.net txt gets: ;; Truncated, retrying in TCP mode. Is anyone here running bind on their server and can run this command from the server? If you are not getting this truncation, then my problem is the firewall. If you are, then either you have figured out the majic for Centos or something like that...

3 5

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss