Discuss

discuss@lists.centos.org

34758 discussions

CentOS-announce Digest, Vol 88, Issue 10
by centos-announce-request＠centos.org 18 Jun '12

18 Jun '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0745 Moderate CentOS 5 python Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 18 Jun 2012 13:11:45 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0745 Moderate CentOS 5 python Update To: centos-announce(a)centos.org Message-ID: <20120618131145.GA23757(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0745 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0745.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 8732b6917bb703e83bcedba44db574bb5c08b6fdc6078b3cc85a2a2c8764ab1e python-2.4.3-46.el5_8.2.i386.rpm 686cf6c90f524d21a9ab6726d92a665728be79e405b0436d68c4ee1e7adfbb8e python-devel-2.4.3-46.el5_8.2.i386.rpm 5ac75df1c01468be5adb94dd75c1bc72ee899a2cf4f93a33b42bf90370bc9aca python-libs-2.4.3-46.el5_8.2.i386.rpm 64ab9d7cd165684ee8bace4ad12b3f2b44cc008760d8fdfb3a504f2335e8a18a python-tools-2.4.3-46.el5_8.2.i386.rpm c36a78764e6624defd97452951b957ec8c85177e340baa52ea74dcca15912987 tkinter-2.4.3-46.el5_8.2.i386.rpm x86_64: 75a516ec99cfb3bfbeb2ed6289b91aca405aee98225d68b7f4087445d1b734d5 python-2.4.3-46.el5_8.2.x86_64.rpm 686cf6c90f524d21a9ab6726d92a665728be79e405b0436d68c4ee1e7adfbb8e python-devel-2.4.3-46.el5_8.2.i386.rpm 4566def644dc427f74e946a767e11d2bed86cc9150a2b38a7234ab11eb599e29 python-devel-2.4.3-46.el5_8.2.x86_64.rpm a99ed59ad78084a5bbe6fbaf811a428618529df9cd391bfb5420b66a6d4b9752 python-libs-2.4.3-46.el5_8.2.x86_64.rpm 532ebf0691f63c3f835ed394928790b8aa2af6ad1227ae248a87736cf38ea443 python-tools-2.4.3-46.el5_8.2.x86_64.rpm 282c9c7a70c4bd1f9b9da1becc280784839852c464814fcd8c91e0606b23bab0 tkinter-2.4.3-46.el5_8.2.x86_64.rpm Source: c0a95526d16a245d9b0537d7ff7b09225c1709d892885ff3489b58dad4661280 python-2.4.3-46.el5_8.2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 88, Issue 10 ***********************************************

1 0

Update on spam, postfix, fail2ban, centos 6
by Bob Hoffman 18 Jun '12

18 Jun '12

I have been using centos 6 in a virtualized system for a few months now. Took a while to batten down the hatches with postfix, rbls, and to use fail2ban correctly. The mailserver for my website(s) are located on the http server as well..an 'all in one' server. DNS servers are separated. My two sites, and their emails addresses (1 for each) have been around for 10 and 15 years respectively. One site was a business site, one was news and politics...both were very busy at one point, thus 'on the radar' of hackers and spammers. I decided to see what I could do with my system to prevent hacks and spams in regards to email and brute force attacks on all systems except for my web apps (which are down right now and in development). Fail2ban is really good at the brute force, assuming it is just one ip and not all attempts are at once. Thus it works on script kiddies but I do not think it would work well on a dedicated hack attempt by a serious individual or group. But I am using fail2ban to auto ban ips regarding spam. As far as spam, very little gets through now. A few a day. Between blacklists, my own blacklist of commercial spammers, stringent settings of postfix the actual spam that gets through is small. But it still gets through. I was using fail2ban on attempts that numbered 3 or more that ended in 5xx replies from my server. I would block for 10 minutes. I found I was blocking about 800 ips a day on one server, half that on the other. I did notice that there were a ton of attempts that were under 3. Lots of 2's and a ton of 1's. So a couple weeks ago (not sure when I started) I decided to try blocking any 5xx reply by IP. This is a private server and just my own mail comes to it, so I am not worried too much about false positives or other effects. ------------------------------------------------ So what happened? The ips jumped up considerably, to 1,500 to 1,700 a day banned on one server, about 1000 on the other. What is interesting in those numbers is they are constant. Every week day I can count on about 1500 banned ips on one, 1000 on the other, give or take. What really changed was the mail servers sending mail that got through the restrictions, but were sending to non existent addresses. A majority (like 80%) were from yahoo. This was a sudden change. It was not like this before. Yahoo spammed like crazy. And they got the mailserver ip banned. 10 to 20 emails a day from yahoo mail servers, going to non existent emails. Where before it would be one or two. The yahoo mails got bigger every day until they started waning (probably due to ip banning). The mail that actually got through all of this was 50% free mail (yahoo, msn/live, some aol, etc) Yahoo being the biggest. Another thing I noticed. When I started adding domains to my 'blacklist of commercial senders', legitimate or not, I started to get yahoo mails with references inside the mails to many of the illegitimate sites that were coming from the UCE's I had blocked. It is quite interesting to watch this process. More interesting that no matter how strict or lax I make the system there will be the same number of attempted mails sent to my server. (give or take a few hundred). If I unban all the ips, which I did once, there was a one day bump up, then it leveled off to the same amount of individual attemtps (not counting the same attempt being tried again). I have 35,000 ips blocked right now and nothing changed...except yahoo spam. Spamassassin I use, but only for level 10 or more spam...it is deleted. I found all of these over the last few months to be the kind with attachments, probably viruses. ------------------------------------------------------------------------- What Have I learned? I have learned a large number of attempts are from ISP's and not websites. I have learned that ISP's will not do anything at all, ever, about this. (someone trying to send 1 million mails a day might be suspicious, but they ignore it) I have learned a large majority of 'hosts' are technically challenged small business owners who have no sys admin knowledge. Those hosts spew spam bots I have learned the chinese have really taken a liking to play with my server, possibly for training purposes. My server is a hit in beijing and some other province I cannot spell. ---------------------------------------------------------- What can be done? Not much. If the isp's do nothing, and the technology is not available to datacenters and hosts, there is not much I can do at all. Complaining to an isp or host would take 24 hours a day of messages, 99% which would be ignored. There is a consideration for the scumbags that call themselves legitimate mailers, like vocus.com. They are in the US, as I am. I am considering going to small claims for some of these spam attempts. I cannot use the can-spam act, since they are technically not in violation. However, I could use the logs and attempts, copies of emails and phone calls telling them to stop, and sue them for a small dedicated denial of service attack, use of my bandwidth, harassment of my server and business. Would I win? Probably. Would I ever get money from them? Most likely not.

5 13

Cannot set alias IP address
by Nikolaos Milas 18 Jun '12

18 Jun '12

Hi, I have an eth0 interface (it's a CentOS 6 guest VM on a KVM host) which is configured as follows (see below) with a primary public IP address of xxx.xxx.xxx.130 (which works fine). I cannot set an alias IP address. I want eth0 to also use another IP address (xxx.xxx.xxx.131, so I create /etc/sysconfig/network-scripts/ifcfg-eth0:1. Then: # service network restart Shutting down interface eth0: Device state: 3 (disconnected) [ OK ] Shutting down loopback interface: [ OK ] Bringing up loopback interface: [ OK ] Bringing up interface eth0: Active connection state: activated Active connection path: /org/freedesktop/NetworkManager/ActiveConnection/2 [ OK ] # ping xxx.xxx.xxx.130 PING xxx.xxx.xxx.130 (xxx.xxx.xxx.130) 56(84) bytes of data. 64 bytes from xxx.xxx.xxx.130: icmp_seq=1 ttl=64 time=0.078 ms 64 bytes from xxx.xxx.xxx.130: icmp_seq=2 ttl=64 time=0.044 ms ^C --- xxx.xxx.xxx.130 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1767ms rtt min/avg/max/mdev = 0.044/0.061/0.078/0.017 ms # ping xxx.xxx.xxx.131 PING xxx.xxx.xxx.131 (xxx.xxx.xxx.131) 56(84) bytes of data. From xxx.xxx.xxx.130 icmp_seq=2 Destination Host Unreachable If I try: # ifup eth0:1 Active connection state: activating Active connection path: /org/freedesktop/NetworkManager/ActiveConnection/3 state: activated Connection activated then I totally lose network connectivity. What am I doing wrong? Please advise! -------------------------------------------------------------- eth0 -------------------------------------------------------------- DEVICE="eth0" NM_CONTROLLED="yes" ONBOOT="yes" HWADDR="DE:DB:EE:CD:8E:03" TYPE=Ethernet BOOTPROTO=static GATEWAY=xxx.xxx.xxx.129 NETWORK=xxx.xxx.xxx.128 IPADDR=xxx.xxx.xxx.130 NETMASK=255.255.255.248 BROADCAST=xxx.xxx.xxx.135 IPV6INIT=yes IPV6_AUTOCONF=no IPV6ADDR=2001:xxxx:xxxx:xxxx::130 IPV6_DEFAULTGW=2001:xxxx:xxxx:14::1 DNS1=xxx.xxx.xxx.211 DNS2=xxx.xxx.xxx.210 DNS3=2001:xxxx:xxxx:xxxx::210 IPV4_FAILURE_FATAL=no IPV6_FAILURE_FATAL=no DOMAIN="example.com example.com" -------------------------------------------------------------- I've tried: -------------------------------------------------------------- eth0:1 -------------------------------------------------------------- DEVICE="eth0:1" ONPARENT="yes" BOOTPROTO=none IPADDR=xxx.xxx.xxx.131 NETMASK=255.255.255.248 BROADCAST=xxx.xxx.xxx.135 -------------------------------------------------------------- and: -------------------------------------------------------------- eth0:1 -------------------------------------------------------------- DEVICE="eth0:1" NM_CONTROLLED="yes" ONBOOT="yes" HWADDR="DE:DB:EE:CD:8E:03" TYPE=Ethernet BOOTPROTO=static ONPARENT="yes" GATEWAY=xxx.xxx.xxx.129 NETWORK=xxx.xxx.xxx.128 IPADDR=xxx.xxx.xxx.131 NETMASK=255.255.255.248 BROADCAST=xxx.xxx.xxx.135 IPV6INIT=yes IPV6_AUTOCONF=no IPV6ADDR=2001:xxxx:xxxx:xxxx::131 IPV6_DEFAULTGW=2001:xxxx:xxxx:xxxx::1 DNS1=xxxx.xxxx.xxxx.211 DNS2=xxxx.xxxx.xxxx.210 DNS3=2001:xxxx:xxxx:xxxx::210 IPV4_FAILURE_FATAL=no IPV6_FAILURE_FATAL=no DOMAIN="example.com example.com" -------------------------------------------------------------- Thanks, Nick

2 6

Configure KVM
by jiten jha 18 Jun '12

18 Jun '12

Dear Friends, How to configure KVM in centos 5.6. Can you send me documentation with all configuration and process. -- Regards Jitendra Jha

4 4

10gb :: ixgbe :: ssl problems?
by Adrian Sevcenco 18 Jun '12

18 Jun '12

Hi! Did anyone encountered some ssl transaction problems with latest version of ixgbe? i had some very strange problem with nodes with private ip (the server with 10 gb interface was masquerading the nodes behind a switch with 10gb and 1 gb interfaces) i used the latest drivers and the ssl conection could be made .. as soon as i used the 2.6.18-308.8.1.el5 driver (3.4.8-k) the problem vanished... What am i missing? how can a network driver have effect on ssl transactions? Thank you for any info ..i feel like in twilight zone :( Adrian

1 0

centos 6.2 mirror no yum grouplist
by Natxo Asenjo 18 Jun '12

18 Jun '12

hi, I have created a 6.2 local repository in our lan and it works fine for packages. However, when trying to use the yum groups, I get this: # yum grouplist Loaded plugins: fastestmirror, security Setting up Group Process Loading mirror speeds from cached hostfile Error: No group data available for configured repositories I have tried downloading one comps.xml file (I have tried both with http://mirror.centos.org/centos/6.2/os/i386/repodata/e9226c33fcd943a60c7a63… with http://mirror.centos.org/centos/6.2/os/i386/repodata/cffddde71947e5fe5a7ce5…) and rebuilding the repo with createrepo -g /path/to/xml /path/to/rpms, but after cleaning the yum cache and remaking the cache on the client I still have the same error. I am obviously doing something wrong, but I do not see what. Any hints greatly appreciated The repos are created with mrepo, in case this is important. Any hints greatly appreciated. -- Groeten, natxo

1 0

[HW/OT] Recommend vendor to recover data from LTO4 tapes
by Arun Khan 18 Jun '12

18 Jun '12

Posting here in the hope that some one may have encountered problems with recovery from backups on LTO4 media and found a solution. Back ups on FujiFilm LTO4 media (800/1600). Archives created using tar -cf /dev/nst0. The tapes were fine when the archives were created (tested by extracting random sample files from them) but something went wrong in storage (no physical damage). Now a few LTO4 tapes are giving I/O errors when I try to extract data from them. Tried dd_rescue and that too fails giving I/O errors. I am wondering if there are any service providers, to extract the data out of the magnetic tapes in a fashion similar to "dead" hard disks. Please share info if you know of any such provider. Thanks, -- Arun Khan

3 2

unfsd scalability issues
by Boris Epstein 17 Jun '12

17 Jun '12

Hello there, I believe that unfsd ( http://unfs3.sourceforge.net/ ) now does have multi-threaded capability and as such should be fairly well scalable. I am using it on CentOS 6.2 and it seems to become all but unusable when more then 3-4 users connect to it. Is that normal? What sort of experience have other people had? Is there a way to parametrically tune it, by the way? Thanks. Boris.

8 18

Resizing est4 filesystem while mounted
by Jeff Boyce 17 Jun '12

17 Jun '12

Greetings - I had a logical volume that was running out of space on a virtual machine. I successfully expanded the LV using lvextend, and lvdisplay shows that it has been expanded. Then I went to expand the filesystem to fill the new space (# resize2fs -p /dev/vde1) and I get the results that the filesystem is already xx blocks long, nothing to do. If I do a # df -h, I can see that the filesystem has not been extended. I could kick the users off the VM, reboot the VM using a GParted live CD and extend the filesystem that way, but I thought that it was possible to do this live and mounted? The RH docs say this is possible; the man page for resize2fs also says it is possible with ext4. What am I missing here? This is a Centos 6.2 VM with an ext4 filesystem. The logical volumes are setup on the host system which is also a Centos 6.2 system. Jeff Boyce Meridian Environmental

5 5

Sendmail SMTP Brute-Force Attack
by Gustavo Lacoste 16 Jun '12

16 Jun '12

Dear CentOS Community Is totally clear there's no support sendmail platform today, but I need to stop SMTP brute-force attack on sendmail. My server is attacked today, my maillog look like : 4624(a)myserver.com>, proto=ESMTP, daemon=MTA, relay=myserver.com [127.0.0.1] Jun 14 19:07:01 at6412 sendmail[24627]: q5EN71jC024627: from=<>, size=3958, class=0, nrcpts=1, msgid=<201206142307.q5EN710u024623(a)myserver.com>, proto=ESMTP, daemon=MTA, relay=myserver.com [127.0.0.1] Jun 14 19:07:23 at6412 sendmail[24868]: q5EN7M6D024868: from=< qmarket(a)qmarket.cl>, size=2193, class=0, nrcpts=2, msgid=< 20120614231448.1E99A13EE5F(a)smtp02qmarket.qmarket.cl>, proto=ESMTP, daemon=MTA, relay=[200.1.174.121] Jun 14 19:07:24 at6412 sendmail[24961]: q5EN7OT4024961: from=< nobody(a)2012.123icq.cl>, size=4716, class=0, nrcpts=1, msgid=< E1SfJ8H-0005kv-JE(a)2012.123icq.cl>, proto=ESMTP, daemon=MTA, relay= pc1.globalmac.cl [200.29.231.61] (may be forged) Jun 14 19:07:33 at6412 sendmail[25013]: q5EN7SqK025013: from=< a.pfsvtij(a)yahoo.com>, size=760, class=0, nrcpts=1, msgid=< 1531549-634033-36(a)owfzdl.net>, proto=SMTP, daemon=MTA, relay= h095159149119.ys.dsl.sakhalin.ru [95.159.149.119] Jun 14 19:07:37 at6412 sendmail[25065]: q5EN7bCj025065: from=< en.viaimport(a)gmail.com>, size=4531, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=186-105-73-29.baf.movistar.cl [186.105.73.29] I need help for STOP this spamers right now. Thanks in advance to anyone who can guide me With Kind Regards, Gustavo A. Lacoste Z. Curacautín - Chile Skype: knxroot Msn & Gtalk: knx.root [at] gmail.com Home page: http://www.lacosox.org - - *Por favor, evite enviarme documentos adjuntos en formato Word o PowerPoint. Lea http://www.gnu.org/philosophy/no-word-attachments.es.html*

9 16

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss