Discuss

discuss@lists.centos.org

34753 discussions

routing and virtual machines: how to access dmz if bridged to two networks
by Peter Peltonen 05 Mar '12

05 Mar '12

I am not quite sure if this issue relates to iptables, routing or Xen virtual machines. Too many variables for my simple mind, so I'm asking some advice :) This is my network setup: Internet --- eth2 + CentOS dom0 / firewall / router + eth1 (xenbr1) --- LAN with private IPs --- separate file server and workstations + eth0 (xenbr0) | DMZ network with public IPs --- CentOS6 domU web server Lets assume my dom0's eth2 public ip is 1.2.3.33 and my dmz network 11.22.33.96/255.255.255.224 . I have created NAT from my LAN with iptables. You can see my /etc/sysconfig/iptables here: http://pastebin.com/1FqSTvPH And this is my routing table: # route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 1.2.3.32 0.0.0.0 255.255.255.252 U 0 0 0 eth2 11.22.33.96 0.0.0.0 255.255.255.224 U 0 0 0 xenbr0 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 xenbr1 169.254.0.0 0.0.0.0 255.255.0.0 U 1004 0 0 eth2 169.254.0.0 0.0.0.0 255.255.0.0 U 1005 0 0 xenbr0 169.254.0.0 0.0.0.0 255.255.0.0 U 1006 0 0 xenbr1 0.0.0.0 1.2.3.34 0.0.0.0 UG 0 0 0 eth2 My goal: To access NFS shares on a (non-virtualized) file server in the LAN network from the domU web server in the DMZ network. What I tried: I attached the domU to both bridges using this Xen config: vif = [ "mac=00:0c:29:de:3a:fe,bridge=xenbr0","mac=00:0C:29:76:19:85,bridge=xenbr1" ] and then created two eth interfaces inside the domU mapping to the MAC addresses above, giving eth1 an IP from the DMZ (11.22.33.111) and giving eth2 an IP from the LAN (192.168.0.12). After this I mounted the NFS share from the file server (192.168.0.2). My problem: If my domU web server is connected to both LAN and DMZ using the two bridges xenbr0 and xenbr1, I can access the NFS share from the domU web server and everything else works as expected, except for one thing -- my workstations in the LAN cannot anymore access the web server: web pages do not open anymore and from the workstations I cannot ping the domU. If the web server domU is only connected to DMZ via xenbr0, the workstations can access it ok. Any advice what I am doing wrong and I could fix my setup? Regards, Peter

1 0

how to find...
by fred smith 05 Mar '12

05 Mar '12

I'm trying to find out from which repo I got xiphos and its matching sword libraries from, and somehow am not finding it. hints, anyone? thanks! -- ------------------------------------------------------------------------------- Under no circumstances will I ever purchase anything offered to me as the result of an unsolicited e-mail message. Nor will I forward chain letters, petitions, mass mailings, or virus warnings to large numbers of others. This is my contribution to the survival of the online community. --Roger Ebert, December, 1996 ----------------------------- The Boulder Pledge -----------------------------

5 7

whcih mailing list for mail server issue?
by Bob Hoffman 05 Mar '12

05 Mar '12

Hello, First of all, thanks for the yum-cron config location, did not see that there. That helped get my yum updates to my root user folder. Second, I am not sure where to go with this one. I want to block emails coming in to the server to root@, etc. But not block the cron jobs (and other internal server setups) that send mail to root to be blocked. I am using postfix/dovecot,spamassassin, and procmail. The file from the logwatch is going through the spamassassin so I figure all 4 are going to deal with any internal and external mail sent to root. I can't see a way to say 'stop incoming mails to root' without killing the internal mail delivery use. In fact, I would really like only a few specified users to get incoming mail period, but allow all internal mail to do as it should. Which mailing list should I hit up. Dovecot does the delivery but is totally hooked up with postfix and the rest using maildir/. not sure where to go with this one.

1 0

CentOS 5.8 Critical Samba Update
by Johnny Hughes 05 Mar '12

05 Mar '12

There is a critical update for samba for centos-5.8 ... we are working on CentOS-5.8 right now and I fully expect it to be released in a week or less. For those of you who can not wait for a week, here is the samba critical update: http://people.centos.org/hughesjr/c58-samba/x8664/critical/ http://people.centos.org/hughesjr/c58-samba/i386/critical/ These may or may not work without the rest of 5.8 ... for those who do try them, please provide feedback here in this thread. Thanks, Johnny Hughes

4 6

getting yum-cron to send a mail
by Bob Hoffman 04 Mar '12

04 Mar '12

Hello, On my old centos 5 system I get updates from yum automatically, it sends a mail to root. on my new centos 6 things have changed and it has a thing called 'yum-cron' I have it on and it is working....except I can find no particular file where mailto might be added. The crontab is going to root, but yum-cron has nothing as far as a variable for this. yum-cron has no man page, no documents...not sure what to do on this one. Thinking about just adding 'mailto=root' in the daily and weekly cron job yum-cron has set. Again, it is definitely updating the server (did so this morning, added stuff to the yum log) but no mails. thanks bob

3 2

OT: Documentation for Mailman
by John J. Boyer 04 Mar '12

04 Mar '12

I have Mailman installed on a VPS running Centos to handle mailing lists for my organization. However, I can't find the documentation. So far, one of our consultants has been handling it, but that costs money. At the moment the problem is that I configured a list with config_list, but the changes have not taken effect. Presumably the list must be restarted in some way, but I can't find out how. Thanks, John -- John J. Boyer; President, Chief Software Developer Abilitiessoft, Inc. http://www.abilitiessoft.com Madison, Wisconsin USA Developing software for people with disabilities

2 1

download.fedora.redhat.com down? moved?
by Rob Del Vecchio 02 Mar '12

02 Mar '12

Hello all, I'm trying to install mod_python from the normal channels via RPM, though it seems that download.fedora.redhat.com is down, or moved? DNS reports it does not exist. I've seen multiple references to this domain name including on the site: http://rpm.pbone.net/index.php3/stat/4/idpl/15286937/dir/redhat_el_6/com/mo… Please help? Thank you, Rob

3 3

Re: [CentOS] network problems
by m.roth＠5-cent.us 02 Mar '12

02 Mar '12

Nataraj wrote: > On 03/01/2012 08:15 AM, m.roth(a)5-cent.us wrote: >> We just moved a user, who deals with a *lot* of data, to a new server, since his old NFS home directory was on a disk that had started showing problems. >> >> Now, i/o is about six times slower, my manager reports. <snip> Ok, more info: at this point, it seems obvious that it's an NFSv4 problem, not a network problem: I've created /scratch/foo, exported it, and mounted it on the same machine at /mnt/foo. I then cd to that directory, and unpack a large file which is located in a user's home directory which is NFSv4 mounted. In a native directory, takes about a minute; when I cd to /mnt/foo and do it, it takes about 6.5 min. I've tried setting wsize and rsize to 1M; I've tried noatime, which someone in a post said helped, and nothing I do makes more than a second or two's difference. Clues for the poor? mark

1 0

VSftp, ssl/tls, slight issue with directory listings
by Bob Hoffman 02 Mar '12

02 Mar '12

Centos 6, stock installation, no additional repos added. vsftp works fine in regular mode, going to ssl I got issues. I get as far as 'directory listing' and it dies. It times out and disconnects. file: /etc/sysconfig/iptables-config added: IPTABLES_MODULES="ip_conntrack_ftp" (without this line, ftp normally fails, afraid it may be causing issues with the ssl) iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT again, normal ftp fine. vsftp file below are the additional commands I entered to get ssl/tls up and running. pam_service_name=vsftpd userlist_enable=YES tcp_wrappers=YES ssl_enable=YES implicit_ssl=yes <--- tried with and without this and the port 21 below listen_port=21 <-- see above allow_anon_ssl=NO force_local_data_ssl=NO <-- set this to yes so I can still test normal functions force_local_logins_ssl=NO ssl_tlsv1=YES ssl_sslv2=NO ssl_sslv3=NO rsa_cert_file=/etc/pki/tls/certs/vsftpd.pem ssl_ciphers=HIGH <-- this was added as I was using filezilla and it wanted different ciphers. without this it would have a tls fatal error, adding this absolved that issue. Now I have tried playing with the settings and in all cases when it can connect it dies at directory listing. Implicit ssl wants 990, but the listen_port directive can tell it to go to 21. Again, full connect, changes folders, dies at trying to display contents of initial folder. I have redone the pem a few times and even moved it in and out of the vsftpd folder just for kicks, no joy. I tried opening port 990 and that made no difference at all (even changing listen_port or leaving it commented out) so, cannot figure what is up. Most online notes are for non-centos 6 and/or generally follow this same set of commands. Most of the debug threads about this issue deal with plain connections and not tls/ssl. I can find no solution yet, has anyone out there secured their vsftp server and wanna throw me a bone? Only this and two other things prevent me from throwing out a nice video tutorial of how to go from a stock install to a fully armed and operational webserver, ssl everywhere, etc.... all nighter and no where with this one. At least not yet.

3 7

CentOS-announce Digest, Vol 85, Issue 2
by centos-announce-request＠centos.org 02 Mar '12

02 Mar '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2012:0344 CentOS 6 nss Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Thu, 1 Mar 2012 20:30:10 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEBA-2012:0344 CentOS 6 nss Update To: centos-announce(a)centos.org Message-ID: <20120301203010.GA14849(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2012:0344 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0344.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4f067da59c4dbda049f7387b8c542f02447611216cfaee1b3694f0cda2ebec6d nss-3.13.1-7.el6_2.i686.rpm 3162125b2e15fd326f339b07775bea7d1137d80653971eb6e56a325b24362845 nss-devel-3.13.1-7.el6_2.i686.rpm aded40a91dce15703060cb2b536415ca3dd0566f430de625ea4bb3a59801278e nss-pkcs11-devel-3.13.1-7.el6_2.i686.rpm ba17aaa1e7c3ae7c44d0eefef7feb1f81b4ce408c8435bb81b35d593c1570c84 nss-sysinit-3.13.1-7.el6_2.i686.rpm facb12db5a66302a33368475e6569c5cee5952692298a0d99e1745eb34987f57 nss-tools-3.13.1-7.el6_2.i686.rpm x86_64: 4f067da59c4dbda049f7387b8c542f02447611216cfaee1b3694f0cda2ebec6d nss-3.13.1-7.el6_2.i686.rpm e3e5c774675d0a783863765e41f7eee92d7b52e5d37f24a224e010172255140f nss-3.13.1-7.el6_2.x86_64.rpm 3162125b2e15fd326f339b07775bea7d1137d80653971eb6e56a325b24362845 nss-devel-3.13.1-7.el6_2.i686.rpm a4829bd18458b86e6581d67efb73337a53fc7079cb28a244ddc2ebecf20bca4a nss-devel-3.13.1-7.el6_2.x86_64.rpm aded40a91dce15703060cb2b536415ca3dd0566f430de625ea4bb3a59801278e nss-pkcs11-devel-3.13.1-7.el6_2.i686.rpm 961e6ae9f5df7ad1dee7e0df0ef28e5c1a6e4545cb5b0985e5955b3141efddf1 nss-pkcs11-devel-3.13.1-7.el6_2.x86_64.rpm 516b592e56833b4d45dd86d3bb251db92db80bb20d6d5291f7b9db67209a904d nss-sysinit-3.13.1-7.el6_2.x86_64.rpm 700f45d8103117620dfa985b8c904f2c839a2358013b065624958a37ecb3d89a nss-tools-3.13.1-7.el6_2.x86_64.rpm Source: 87c2694f3fb82efb3ce744ba7edbfe5bbe61aaa39a13c9984a257e5481745b07 nss-3.13.1-7.el6_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 85, Issue 2 **********************************************

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss