Discuss

discuss@lists.centos.org

34753 discussions

30 Sep '12

Dear all, Dear support and users: Sorry to trouble you! I configure the shorewall firewall to forward ftp and ssh port to another server, but failed. Can you help me check? I cannot login both SSH 2222 and ftp! Below is my environment: (attachment is shorewall dump) 1. Gateway (FC6) 1.1) eth0: lan static IP: 192.168.1.20 1.2) eth1: external public static IP: 113.89.142.80 2.3) Shorewall-3.2.8 is running 2. FTP Server: (Centos63, iptables and selinux are off) 2.1) eth0: lan static IP: 192.168.1.231 2.2) Open SSH port 22 and FTP port 20, 21 already (tested) 2.3) vsftp.conf : use default settings and it works for internal users 3. I want to forward internet access FTP and SSH to FTP Server: 3.1) 113.89.142.80: 20 -> 192.168.1.231:20 udp (FTP) 3.2) 113.89.142.80: 21 -> 192.168.1.231:21 tcp (FTP) 3.3) 113.89.142.80: 2222 -> 192.168.1.231:22 tcp (SSH) 4. Shorewall settings: 4.1 interfaces #ZONE INTERFACE BROADCAST OPTIONS net eth1 113.89.142.255 norfc1918,arp_filte lan eth0 detect arp_filter ovpn tun0 - #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE 4.2 zones #ZONE TYPE OPTIONS IN OUT # OPTIONS OPTIONS fw firewall net ipv4 lan ipv4 ovpn ipv4 #LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE 4.3 policy #SOURCE DEST POLICY LOG LIMIT:BURST # LEVEL fw all ACCEPT lan net ACCEPT lan fw ACCEPT lan ovpn ACCEPT ovpn lan ACCEPT net all DROP all all REJECT #LAST LINE -- DO NOT REMOVE 4.4 rules #SECTION RELATED SECTION NEW ACCEPT all fw tcp ftp <<< it works for local FTP service (tested) ACCEPT all fw udp ftp <<< it works for local FTP service ACCEPT all fw tcp 2222 ACCEPT all fw tcp ssh,domain Ping/ACCEPT net fw ACCEPT all fw tcp 5222 ACCEPT all fw udp 5222 ACCEPT:info all $FW tcp 22 DNAT net lan:192.168.1.231 tcp 21 DNAT net lan:192.168.1.231 udp 20 DNAT net lan:192.168.1.231:22 tcp 2222 #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE 5. # cat /proc/sys/net/ipv4/ip_forward 1 6. more /etc/sysconfig/iptables-config IPTABLES_MODULES="ip_conntrack_netbios_ns ip_nat_ftp ip_conntrack_ftp" Chain net_dnat (1 references) pkts bytes target prot opt in out source destination 3 156 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:21 to:192.168.1.231 0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:20 to:192.168.1.231 5 260 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:2222 to:192.168.1.231:22 do you know what's wrong? Thanks and best regards! Muiz

5 5

11TB ext4 filesystem - filesystem alternatives?
by Rafał Radecki 29 Sep '12

29 Sep '12

Hi All. I have a CentOS server: CentOS 5.6 x86_64 2.6.18-238.12.1.el5.centos.plus e4fsprogs-1.41.12-2.el5.x86_64 which has a 11TB ext4 filesystem. I have problems with running fsck on it and would like to change the filesystem because I do not like the possibility of running long fsck on it, it's a production machine. Also I have some problems with running fsck (not enough RAM, problem with scratch_files option) and if the filesystem will need intervention I will be in a problematic situation. Which other mature and stable filesystem can you recommend for such large storage? Best regards, Rafal Radecki.

13 24

kernel 2.6.32-279.9.1.el6.x86_64 does not build from the source rpm's
by Seth Bardash 28 Sep '12

28 Sep '12

kernel 2.6.32-279.9.1.el6.x86_64 does not build from the source rpm's using the UNmodified config file and following the directions explicitly. Previous kernels build fine from the same directions. A little help from the developers would be greatly appreciated. while building I get this output: c1: warnings being treated as errors drivers/base/platform.c:621: error: 'platform_legacy_suspend' defined but not used drivers/base/platform.c:633: error: 'platform_legacy_resume' defined but not used make[2]: *** [drivers/base/platform.o] Error 1 make[1]: *** [drivers/base] Error 2 make[1]: *** Waiting for unfinished jobs.... make: *** [drivers] Error 2 make: *** Waiting for unfinished jobs.... error: Bad exit status from /var/tmp/rpm-tmp.wfx1kU (%build) Bad exit status from /var/tmp/rpm-tmp.wfx1kU (%build) The first line is what troubles me as there are usually warning when building a kernel. Thanks in advance for some help. Seth Bardash Integrated Solutions and Systems LLC Colorado Springs, CO 80921 seth(a)integratedsolutions.org Failure cannot survive knowledge and perseverance!

2 2

Re: [CentOS] Apache : Listen on ports other than 80
by adekunleadekoya＠gmail.com 28 Sep '12

28 Sep '12

What is 'selinux ?' and selinux policy ? Are there commands I need to access these ? I wld b glad to know this. ------Original Message------ From: John R Pierce Sender: centos-bounces(a)centos.org To: centos(a)centos.org ReplyTo: CentOS mailing list Subject: Re: [CentOS] Apache : Listen on ports other than 80 Sent: Sep 28, 2012 9:50 PM On 09/28/12 1:47 PM, adekunleadekoya(a)gmail.com wrote: > I v run d netstat and no result(i.e no process is listening on port 1010). Also I telnet 127.0.0.1 1010 just 2 confirm that no process is using the port. I can't figure out why the port(and any other except 80) would not work! selinux ? try setting it to 'permissive' if its in 'enforcing', and see if it works. if so, you'll need to adjust the selinux policy to allow apache to listen on more ports. -- john r pierce N 37, W 122 santa cruz ca mid-left coast _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Sent from my BlackBerry wireless device from MTN

2 2

Re: [CentOS] Apache : Listen on ports other than 80
by adekunleadekoya＠gmail.com 28 Sep '12

28 Sep '12

I am running as a root user. I am very much aware that a non-privileged user can't access some functions. But again, I am running centos from my oracle virtualbox. I hope the virtual machine is not a factor? ------Original Message------ From: lists-centos To: adekunleadekoya(a)gmail.com Subject: Re: [CentOS] Apache : Listen on ports other than 80 Sent: Sep 28, 2012 9:45 PM ------------ Original Message ------------ > Date: Friday, September 28, 2012 01:41:46 PM -0700 > From: John R Pierce <pierce(a)hogranch.com> > To: centos(a)centos.org > Subject: Re: [CentOS] Apache : Listen on ports other than 80 > > On 09/28/12 1:30 PM, adekunleadekoya(a)gmail.com wrote: >> I saw this error msg : 'permission denied:make_sock : could not >> bind to address 0.0.0.0:1010. No listening sockets >> available,shutting down' . > > is another process listening on 1010 ? > > netstat -an |grep :1010 > > look for lines with LISTEN on the end ... or, are you trying to start apache from a non-privileged user? ports through 1024 are reserved and only root can bind processes to them. - Richard Sent from my BlackBerry wireless device from MTN

1 0

Re: [CentOS] Apache : Listen on ports other than 80
by adekunleadekoya＠gmail.com 28 Sep '12

28 Sep '12

I saw this error msg : 'permission denied:make_sock : could not bind to address 0.0.0.0:1010. No listening sockets available,shutting down' . ------Original Message------ From: lists-centos To: adekunleadekoya(a)gmail.com Subject: Re: [CentOS] Apache : Listen on ports other than 80 Sent: Sep 28, 2012 8:26 PM > -----Original Message----- > From: adekunleadekoya(a)gmail.com > Date: Fri, 28 Sep 2012 18:49:33 > To: <CentOS(a)mailing.list> > Reply-To: adekunleadekoya(a)gmail.com > Subject: Apache : Listen on ports other than 80 > > Hi, > I just install centos 6.3 on my oracle virtualbox. I tried 2 > configure apache 2 listen on port say 1010 but after adding a > 'Listen 1010' to the httpd.conf file and then try 2 restart d > httpd service, I found that d service failed to start. If I remove > the 'Listen 1010' line then d httpd service restarts successfully. > What do I need to do so I could instruct d web server to use other > ports (besides 80) ? > > Are there default settings in centos that are causing this prob ? > I have done same experiment successfully wit apache on windows. I > need to setup virtualhost with my apache on centos. I need help > now. Pls help! > > Regards > > Kunle Start by looking in the apache error log. I think you'll get hints there on what the problem is. - Richard Sent from my BlackBerry wireless device from MTN

2 1

hi
by Andrei Rolando León Salas 28 Sep '12

28 Sep '12

Hello how are u, im having a little problem. i use the webmin to install automatly postfix, in the other server works, but in this now says. Error while checking current Postfix configuration. Please manually fix Postfix configuration. postfix: fatal: file /etc/postfix/main.cf: parameter mail_owner: unknown user name value: postfix Manually edit the Postfix configuration file.<https://mercadeoeficaz-cr.com:10000/postfix/edit_manual.cgi> i dont know what to do, can u help me please

3 2

Apache : Listen on ports other than 80
by adekunleadekoya＠gmail.com 28 Sep '12

28 Sep '12

Sent from my BlackBerry wireless device from MTN -----Original Message----- From: adekunleadekoya(a)gmail.com Date: Fri, 28 Sep 2012 18:49:33 To: <CentOS(a)mailing.list> Reply-To: adekunleadekoya(a)gmail.com Subject: Apache : Listen on ports other than 80 Hi, I just install centos 6.3 on my oracle virtualbox. I tried 2 configure apache 2 listen on port say 1010 but after adding a 'Listen 1010' to the httpd.conf file and then try 2 restart d httpd service, I found that d service failed to start. If I remove the 'Listen 1010' line then d httpd service restarts successfully. What do I need to do so I could instruct d web server to use other ports (besides 80) ? Are there default settings in centos that are causing this prob ? I have done same experiment successfully wit apache on windows. I need to setup virtualhost with my apache on centos. I need help now. Pls help! Regards Kunle Sent from my BlackBerry wireless device from MTN

2 1

OT: forwarding SNMP traps
by James Pifer 28 Sep '12

28 Sep '12

Can anyone here give me a hand with forwarding snmp traps? I'm looking at Zenoss and I want to see how it handles snmp traps. We currently have snmp traps getting sent to two servers. One of them is basically ignoring the traps, but I can't just change the ip address (to give to Zenoss) because of other things the host is doing. So instead I'd like to simply forward the snmp traps to the new zenoss system. I've tried a couple different forwarding programs, like jredirect and a python script I found while searching. I use jredirect to forward some other things, but I'm guessing it doesn't like udp. I've also tried figuring out snmptrapd and snmpd without any success at all. Last, I tried simply using iptables with something like: # iptables -t nat -A PREROUTING -i eth0 -p udp -m udp --dport 162 -j DNAT --to-destination 192.168.1.3:162 # iptables -A INPUT -i eth0 -p udp -m udp --dport 162 -j ACCEPT But that doesn't seem to work either. I can see running wireshark on both systems that the old server is receiving traps, but they are never getting forwarded to the zenoss system. Anyone here know how to do it? Any assistance is appreciated. Thanks, James

1 0

netcat issue: no UDP transmission
by Boris Epstein 28 Sep '12

28 Sep '12

Hello listamtes, Here's is a curious issue: netcat (nc) seems to not do UDP for me, even though TCP works flawlessly. Not even on the local host. Here's the "server session" I am running: cat test.dd | nc -l -u -n -k -v 2456 (test.dd is just a large file with random data) Here's the client: nc -v -u 127.0.0.1 2456 | dd of=/dev/null ^C0+0 records in 0+0 records out 0 bytes (0 B) copied, 219.944 s, 0.0 kB/s Here's what netstat reports: netstat -a -n | grep 2456 udp 0 0 0.0.0.0:2456 0.0.0.0:* udp 0 0 127.0.0.1:52394 127.0.0.1:2456 ESTABLISHED unix 3 [ ] STREAM CONNECTED 12456 So the connection is established - but no data appears to be getting transferred. This behaviour seems to be the same on CentOS 6 and LinuxMint. Any idea what may be going on? Thanks. Boris.

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss