Discuss

discuss@lists.centos.org

1 participants
34734 discussions

Postfix restrictions
by Nicolas Kovacs 09 Jun '20

09 Jun '20

Hi, I'm currently fine-tuning my mail server (Postfix and Dovecot on CentOS 7). SPF, DKIM and DMARC work fine, now I'd like to limit the spam tsunami. Besides the official Postfix documentation, I've read a few articles about Postfix spam restrictions, namely these : https://www.linuxbabe.com/mail-server/block-email-spam-postfix https://wiki.centos.org/HowTos/postfix_restrictions After some experimenting, here's what I currently have on my test server: --8<----- /etc/postfix/main.cf ----------------------------- ... smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, check_helo_access hash:/etc/postfix/helo_access reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_unknown_helo_hostname smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, check_sender_access hash:/etc/postfix/sender_access, reject_unknown_sender_domain, reject_unknown_reverse_client_hostname, reject_unknown_client_hostname smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/etc/postfix/rbl_override, reject_rhsbl_helo dbl.spamhaus.org, reject_rhsbl_reverse_client dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org, reject_rbl_client zen.spamhaus.org --8<-------------------------------------------------------- Before committing this configuration to my main server, I thought I'd share this configuration on the list. Maybe the Postfix gurus among you have the odd comment to make. My aim is simply to eliminate as much spam as possible (that is, before adding SpamAssassin) while keeping false positives to a minimum. Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : info(a)microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12

6 6

EPEL repository: Failure to download metadata
by Jay Hart 08 Jun '20

08 Jun '20

Trying to install certbot, for Lets Encrypt certificate installation. How do I fix the below repo issue? I have not been successful tracking down this issue using google. [root@dream postfix]# yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm CentOS-8 - AppStream 0.0 B/s | 0 B 00:10 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream' [root@dream postfix]# ^C [root@dream postfix]# ls /etc/yum.repos.d/ CentOS-AppStream.repo CentOS-CR.repo CentOS-Extras.repo CentOS-Media.repo CentOS-Vault.repo CentOS-Base.repo CentOS-Debuginfo.repo CentOS-fasttrack.repo CentOS-PowerTools.repo CentOS-centosplus.repo CentOS-Devel.repo CentOS-HA.repo CentOS-Sources.repo [root@dream postfix]# dnf repolist CentOS-8 - AppStream 0.0 B/s | 0 B 00:25 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream' Thanks, Jay

1 2

Logitech webcam for use with CentOS 7
by H 08 Jun '20

08 Jun '20

I am thinking of buying a Logitech C920S Pro HD or C922 webcam for the necessary video conferencing. Is anyone using that with Zoom or perhaps with Jitsi? Do I need drivers? Any issues? Thank you.

7 6

live centos 8?
by Michael Hennebry 07 Jun '20

07 Jun '20

Is there a live centos 8? If so, where? -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 3

perl-Curses in C8?
by Mike McCarthy, W1NR 06 Jun '20

06 Jun '20

Are there any repos that would have perl-Curses for CentOS 8? It was always available in epel but not anymore. Thanks, Mike

2 1

How to disable dhcpv6-client on Centos 8
by Jay Hart 06 Jun '20

06 Jun '20

Machine is an internal server with zero need to provide or receive ip addresses using dhcp (all IPs are hard coded). Question: how do I disable dhcpv6-client on this box? [user@boxname user]# firewall-cmd --list-all public (active) target: default icmp-block-inversion: no interfaces: enp2s0 sources: services: cockpit dhcpv6-client http https ssh ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: Thanks, Jay

2 2

Bridge network for virt-manager
by Jerry Geis 05 Jun '20

05 Jun '20

Hello. I desire to get bridge network working using virt-manager. Centos 7 and centos 7 guest. >From researching I think I need to have a ifcfg-br0 file like this ? cat ifcfg-br0 DEVICE=nm-bridge0 STP=no TYPE=Bridge BOOTPROTO=none IPADDR=192.168.1.8 PREFIX=32 GATEWAY=192.168.1.1 IPV6INIT=no NAME=br0 ONBOOT=yes DELAY=0 Is that for sure needed ? The use that nm-bridge0 as the network name? I dont want to mess up my current setup. Thanks, Jerry

6 7

Re: [CentOS] migrating from sendmail to postfix, centos 6 to centos 8
by Pete Biggs 05 Jun '20

05 Jun '20

On Fri, 2020-06-05 at 07:32 -0500, Chuck Campbell wrote: > On 6/4/2020 8:58 AM, Pete Biggs wrote: > > > Fair enough, and I now understand the issues with root receiving and > > > handling emails. The problem with the alias is that ALL emails are being > > > sent out to my ISP, and on to the particular user. > > Even for local users that are in /etc/passwd? > Yes, I only have two local users, and email I send on the box ends up at > the outside ISP, then comes back via fetchmail, and procmail. I can read > it with IMAP from outside. I guess I'll live with this. So even if you do something like mail chuck at the command line (with whatever user has a local account) it still gets sent to the ISP? > I'm sure it is the RelayHost or RelayDomains that forwards the email > outbound to my ISP. relay_host is the host that mail is sent to if it can't be delivered elsewhere. relay_domains is a list of domains the host will relay mail to. > If I set up a local only account, those emails try > to go outbound as well, but are rejected as there is no registered user > of that name at my ISP. In /etc/postfix/main.cf what is 'local_recipient_maps' set to? Also, what about 'mydestination' If you look in /var/log/maillog what does a message log for a local user look like when sent using the mail command? P.

1 0

CentOS-announce Digest, Vol 184, Issue 2
by centos-announce-request＠centos.org 05 Jun '20

05 Jun '20

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2020:2355 CentOS 7 kernel BugFix Update (Johnny Hughes) 2. CESA-2020:2381 Important CentOS 7 firefox Security Update (Johnny Hughes) 3. CESA-2020:2378 Important CentOS 6 firefox Security Update (Johnny Hughes) 4. CESA-2020:2383 Important CentOS 6 bind Security Update (Johnny Hughes) 5. CESA-2020:2406 Important CentOS 6 freerdp Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 4 Jun 2020 15:57:04 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2020:2355 CentOS 7 kernel BugFix Update Message-ID: <20200604155704.GA1900(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2020:2355 Upstream details at : https://access.redhat.com/errata/RHBA-2020:2355 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 90880fda5382cdfbb3a8efa5819aaeaf432beb87f41cced03d0d4315d9b56f4f bpftool-3.10.0-1127.10.1.el7.x86_64.rpm 0a62bf26f4dcc406c7e93ba64113b5951bf0e3417e4048bf1eb9f692ce9fcba6 kernel-3.10.0-1127.10.1.el7.x86_64.rpm 4dedd65ef61d1267bfbdcba08bac83d9daed745dae3f319836ef815de867c644 kernel-abi-whitelists-3.10.0-1127.10.1.el7.noarch.rpm 872bbf427084610609bc1ca50c0c0125bc0288b94021a784af01e603b10ff6b7 kernel-debug-3.10.0-1127.10.1.el7.x86_64.rpm 9a61082cc7739fb979a4f89c427e9a56f877f4f212a6662d5bccf5dc53c85951 kernel-debug-devel-3.10.0-1127.10.1.el7.x86_64.rpm ffbc0b342b3c57411f7f20e8d472a77a721c43f48e533f0d2c1668c1ecff518c kernel-devel-3.10.0-1127.10.1.el7.x86_64.rpm 2bd013eb1697677f9335f62400cf661db0bfdd380672f17eab7201a82c89e239 kernel-doc-3.10.0-1127.10.1.el7.noarch.rpm 83cf78d1eb99f7d18f7b2d961c53d65fb2754c1f9cc6b4c4c19a7949313979e7 kernel-headers-3.10.0-1127.10.1.el7.x86_64.rpm 4b5f2447521ce65ad55a344e2329d4d678bdc4e3ab6a3de5ac71e97ec03ccf83 kernel-tools-3.10.0-1127.10.1.el7.x86_64.rpm 2d8e03ebf9b5396f0bc9807c65f0635f0cbb0df22322bfa76c003caf529b4b7b kernel-tools-libs-3.10.0-1127.10.1.el7.x86_64.rpm c3e80c27f04a07625e285675ea6ae47a0d8bf5ce869afdf32cc5cc0ed7be5816 kernel-tools-libs-devel-3.10.0-1127.10.1.el7.x86_64.rpm 88e6e25aee0c99313e5eef30a51de25b053641461ca9ab2dcc90befec3f1a4ec perf-3.10.0-1127.10.1.el7.x86_64.rpm 12e13fac92eecf8e55c6285409d046106a54d99c106a633c597b9e152b608bcb python-perf-3.10.0-1127.10.1.el7.x86_64.rpm Source: 0f6c8513b3a00d46c499d1db35acf54ebd1e3ff01d9d3da6d8eb51fd14e897b7 kernel-3.10.0-1127.10.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Thu, 4 Jun 2020 16:00:43 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2381 Important CentOS 7 firefox Security Update Message-ID: <20200604160043.GA2192(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2381 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2381 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f74ffc53ad50103bb632597f34f8ad2d978d4833674d4bf50d49fd9d2c6f4f1c firefox-68.9.0-1.el7.centos.i686.rpm 2d5253ea7beff9a7ccb052d056d3eaf35a6a03a5d59551d67f3dfacf82bae124 firefox-68.9.0-1.el7.centos.x86_64.rpm Source: d64c5d0af07830f0acd90798f0fc722ab66bf0440a9be3422ac0e7d190afb8cb firefox-68.9.0-1.el7.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Thu, 4 Jun 2020 16:02:07 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2378 Important CentOS 6 firefox Security Update Message-ID: <20200604160207.GA2361(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2378 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2378 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 856df97cac6587dfbbda84b3d1228a2a4a029e905eaf7e2d91510a1419c8d1d1 firefox-68.9.0-1.el6.centos.i686.rpm x86_64: 856df97cac6587dfbbda84b3d1228a2a4a029e905eaf7e2d91510a1419c8d1d1 firefox-68.9.0-1.el6.centos.i686.rpm 93a67e36a0ac83a9132b6f30657627561094abd81fad3547e6a536274f36a38e firefox-68.9.0-1.el6.centos.x86_64.rpm Source: f0bb0aaeaed1191848fee0a2bec55e2b9079aa5fa9b7baf932513047f9caf108 firefox-68.9.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 4 Date: Thu, 4 Jun 2020 16:10:05 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2383 Important CentOS 6 bind Security Update Message-ID: <20200604161005.GA2776(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2383 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2383 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 38e6935a774d6bf23e64738e47bd210b99e2ca71a8b4be858e4f38468f90f09c bind-9.8.2-0.68.rc1.el6_10.7.i686.rpm 38ab4c3d80d5ba490935027e9dac352f2a6500674fa38d94c7db4ad6ceaf65b2 bind-chroot-9.8.2-0.68.rc1.el6_10.7.i686.rpm 42e976e219a8fd5e3e55208df3535e54ed60c3902746b4620f5f919f9f8de34e bind-devel-9.8.2-0.68.rc1.el6_10.7.i686.rpm 2be485965db6cf9fe724fc16f772bfe15bf6dc4e4516f94f9697549f8e8b38ec bind-libs-9.8.2-0.68.rc1.el6_10.7.i686.rpm feb19898a3da1423604d5b7eedf261c47d648afcb907e18cdba3396d86da7b5c bind-sdb-9.8.2-0.68.rc1.el6_10.7.i686.rpm 757c6a9b10575ae842779e66e2e87dba2f353c13ba3fcdc88bf55243962c8e2b bind-utils-9.8.2-0.68.rc1.el6_10.7.i686.rpm x86_64: 043b382da00b5da9191d0fed17280757f70bde12b9f48730f0c2926245c9097b bind-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm 1704dc77fb9c35475accbadc35176644c61d3989de04543093f2c760bad3252e bind-chroot-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm 42e976e219a8fd5e3e55208df3535e54ed60c3902746b4620f5f919f9f8de34e bind-devel-9.8.2-0.68.rc1.el6_10.7.i686.rpm e8e129aa45200ede187103445d37e27ded0922accaf12c0551af3c253d51ee9d bind-devel-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm 2be485965db6cf9fe724fc16f772bfe15bf6dc4e4516f94f9697549f8e8b38ec bind-libs-9.8.2-0.68.rc1.el6_10.7.i686.rpm c83ea96bcec6a7ce68266a5b5ba7681038c7c115e0d642747409bee518db7f03 bind-libs-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm 7e745c2d513daf40a440027265a5c966cfc6e8e9a1cd39e9804a0eae40ce00fa bind-sdb-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm 1d8b16ab1bf34e51ac160ba0c27afeb050639c37f0bed6ad68a06bf77bdb591b bind-utils-9.8.2-0.68.rc1.el6_10.7.x86_64.rpm Source: 452bb4f0ab96c2fec8012499a79fbac64703504888ce1896f427b69ab599ee3b bind-9.8.2-0.68.rc1.el6_10.7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 5 Date: Thu, 4 Jun 2020 20:08:00 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2020:2406 Important CentOS 6 freerdp Security Update Message-ID: <20200604200800.GA11486(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2020:2406 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2406 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 40052c3b9715a48e1c9af9e95e7a6066e0ec0ed6608657324f3fe355e9c1b8f5 freerdp-1.0.2-7.el6_10.i686.rpm 0df0853d13fc8d3dfc3c993ef2113eea6cc09943032ef6fc9efa04af8911edc7 freerdp-devel-1.0.2-7.el6_10.i686.rpm 464c929ecb74502cbf75b962255982726981f146606c08bc84f14b8d5dd60c48 freerdp-libs-1.0.2-7.el6_10.i686.rpm 08de995c79b51a1e8d0bce2e35a9e2098589f539ac2710edb4c1886c64d4bda5 freerdp-plugins-1.0.2-7.el6_10.i686.rpm x86_64: 84e0e22103a6f530bf3c3542f32b2cad958f1034405521dc76242e3a55609764 freerdp-1.0.2-7.el6_10.x86_64.rpm 0df0853d13fc8d3dfc3c993ef2113eea6cc09943032ef6fc9efa04af8911edc7 freerdp-devel-1.0.2-7.el6_10.i686.rpm 3ce674caf8c636d8c54a86ffcc210c50e2c5599d553edcc29ce39771d62f05c1 freerdp-devel-1.0.2-7.el6_10.x86_64.rpm 464c929ecb74502cbf75b962255982726981f146606c08bc84f14b8d5dd60c48 freerdp-libs-1.0.2-7.el6_10.i686.rpm 72def2a742c6b8b1d28a81a99d042d2b4646ce169908dcaf47e5b067e6e6b7af freerdp-libs-1.0.2-7.el6_10.x86_64.rpm f4e577036c923c1f84f11ae1310043f44260d4cc51b2857060099e40ab150895 freerdp-plugins-1.0.2-7.el6_10.x86_64.rpm Source: 28cbed327abc58d60686810bbba51cc577d10516d3ef77f361830ba2964005bf freerdp-1.0.2-7.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 184, Issue 2 ***********************************************

1 0

Google authenticator on C8
by Patrick DERWAEL 05 Jun '20

05 Jun '20

Hi folks I have installed Google authenticator on a few C8 boxes This is working fine on all of them except one... - google-authenticator is installed and the box is added to my Android app - /etc/pam.d/sshd contains auth sufficient pam_google_authenticator.so - /etc/ssh/sshd_config contains ChallengeResponseAuthentication yes - sshd restarted When logging in, I'm prompted with the password (i.e. no request OTP request) I have already uninstalled/reinstalled/rebooted and compared the config files across boxes... but I can't see what I have done wrong Any clue about what I could have missed? Thanks! -- Patrick Derwael

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss