Discuss

discuss@lists.centos.org

34758 discussions

fail2ban help
by Nikos Gatsis - Qbit 09 Aug '11

09 Aug '11

Hello list. I have a question for fail2ban for bad logins on sasl. I use sasl, sendmail and cyrus-imapd. In jail.conf I use the following syntax: [sasl-iptables] enabled = true filter = sasl backend = polling action = iptables[name=sasl, port=smtp, protocol=tcp] sendmail-whois[name=sasl, dest=my@email] logpath = /var/log/maillog maxretry = 6 and the following filter: failregex = (?i): warning: [-._\w]+\[<HOST>\]: SASL (?:LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [A-Za-z0-9+/]*={0,2})?$ in iptables: fail2ban-sasl tcp -- anywhere anywhere tcp dpt:smtp ... Chain fail2ban-sasl (2 references) target prot opt source destination RETURN all -- anywhere anywhere The problem is that never ban bad logins. I tried to change action as port="imap,imaps,pop3,pop3s,smtp" but nothing change. Can somebody help me? Thank you, Nikos

2 1

Funny Characters in Midnight Commander??
by Keith Roberts 09 Aug '11

09 Aug '11

I'm on Centos 5.6 and I have a problem with the screen showing funny characters when I run mc in a konsole terminal window, under Xfce desktop. Here's a link to what it looks like: http://tinypic.com/view.php?pic=zojry1&s=7 Any ideas why mc is doing this? Kind Regards, Keith Roberts ----------------------------------------------------------------- Websites: http://www.karsites.net http://www.php-debuggers.net http://www.raised-from-the-dead.org.uk All email addresses are challenge-response protected with TMDA [http://tmda.net] -----------------------------------------------------------------

3 4

CentOS 6 kernel update and grub.conf...
by John Doe 09 Aug '11

09 Aug '11

Hey, I ran a yum update and it installed a new kernel. ... Installed: kernel.x86_64 0:2.6.32-71.29.1.el6 kernel-devel.x86_64 0:2.6.32-71.29.1.el6 but it did not modify the grub.conf file. #boot=/dev/sda default=0 timeout=5 splashimage=(hd0,0)/grub/splash.xpm.gz hiddenmenu title CentOS (2.6.32-71.el6.x86_64) root (hd0,0) kernel /vmlinuz-2.6.32-71.el6.x86_64 ro root=UUID=... initrd /initramfs-2.6.32-71.el6.x86_64.img Is this the new behavior or...? Thx, JD

4 7

Does anyone try Xen in Kernel 3.0?
by LHT. Quốc 08 Aug '11

08 Aug '11

Does anyone try Xen in Kernel 3.0? I use "$ git clone git://git.kernel.org/pub/scm/linux/kernel/git/jeremy/xen.git linux-3.0.0-xen" command and it works. -- Thân ái, Quốc

5 5

Re: [CentOS] Centos6 Migration glitch - ZFS-FUSE
by david 08 Aug '11

08 Aug '11

At 02:03 PM 8/8/2011, you wrote: > > Folks > > > > My experiments with installing ZFS-FUSE in a Centos 6 system reveal > > behavior different from that observed in Centos 5.6. > > > > The version of ZFS-FUSE is that provided on the EPEL repository, and > > was installed on a 32-bit machine. I use it because of its > > deduplication facility. > > > > In Centos 5.6, the facility worked as advertised. > > > > In Centos 6, however, the system "hung" in initialization upon the > > first reboot after installing ZFS-FUSE and creating a pool. By > > "hung", I mean that the cute sliding blue bar that progresses during > >You may want to disable the cute sliding blue crap by editing the grub >options and remove "rhgb quiet" from it. That's what I do most of the >times because I want to see what's going on. > > > bootstrap got to nearly complete and then stood there for at least 20 > > minutes. The identical computer, configured without ZFS-FUSE, > > completed the system initialization within normal time. > > > > Following some clues found by googling the bug, I suspected that > > AUDITD and ZFS-FUSE had a conflict. After several experiments, I > > found what appears to work. > > > > REMEDY: > > > > When you install ZFS-FUSE, it will start the zfs-fuse service, and > > will also automatically issue a "chkconfig zfs-fuse on" command. The > > remedy is to prevent zfs-fuse from running during initializtion by issuing > > chkconfig zfs-fuse off > > and starting the service after the initialization is complete. > >Hm, I've just started running a server with SELinux enabled and already >learned why it was a good thing to stay away from it until now. I guess >that's also where your problems come from: the selinux-policy does not >have support for zfs-fuse, or for the way you are using it. you can check >audit.log to see if SELinux prevents zfs-fuse from starting up. I may be >wrong of course. > >Regards, >Simon > > >I I forgot to add... SELINUX is disabled.

1 0

Centos6 Migration glitch - ZFS-FUSE
by david 08 Aug '11

08 Aug '11

Folks My experiments with installing ZFS-FUSE in a Centos 6 system reveal behavior different from that observed in Centos 5.6. The version of ZFS-FUSE is that provided on the EPEL repository, and was installed on a 32-bit machine. I use it because of its deduplication facility. In Centos 5.6, the facility worked as advertised. In Centos 6, however, the system "hung" in initialization upon the first reboot after installing ZFS-FUSE and creating a pool. By "hung", I mean that the cute sliding blue bar that progresses during bootstrap got to nearly complete and then stood there for at least 20 minutes. The identical computer, configured without ZFS-FUSE, completed the system initialization within normal time. Following some clues found by googling the bug, I suspected that AUDITD and ZFS-FUSE had a conflict. After several experiments, I found what appears to work. REMEDY: When you install ZFS-FUSE, it will start the zfs-fuse service, and will also automatically issue a "chkconfig zfs-fuse on" command. The remedy is to prevent zfs-fuse from running during initializtion by issuing chkconfig zfs-fuse off and starting the service after the initialization is complete. I personally chose to start it via a crontab entry as root: @reboot <something> where "something" could be the direct service call, or (as was in my case) the starting of a script to do a bunch of startup things including starting zfs-fuse service. IS THIS THE DESIRED BEHAVIOR I sort of doubt it, and I'm sure it will eventually be sorted out by the zfs-fuse developers. David Kurn

2 1

Loadbalance Repo / ldirectord packages?
by Peter Hinse 08 Aug '11

08 Aug '11

Hi *, we want to migrate our loadbalancers running CentOS 5.6 to new hardware and CentOS 6, however the (heartbeat-)ldirectord package seems to be hidden in the new LoadBalance repo in RHEL6. Any chance to get the RHEL SRPMs from this repo? Regards, Peter

2 4

iptables problem under tuned bridge
by Steve liu 08 Aug '11

08 Aug '11

Hi this is my bridge structure ========================================= brctl show bridge name bridge id STP enabled interfaces *br0* 8000.0023aea32e26 no *eth0* *tapxp* ========================================= I tunneled a tapxp for my xp virtual machine. host is centos 6 using eth0 eth0 & tapxp are under bridge *br0 *and they work well. I wish to open 22 for host 80 for xp to outside. others to the outside are blocked. but I also wanna constrict nothing between *host* and *xp* now for host it's OK to open 22 and others are blocked. and I just want to open the connection between host and xp now. I tried the following command .... ========================================================================== iptables -A OUTPUT -s argent -m physdev --physdev-in tapxp -j ACCEPT iptables -A OUTPUT -s argent -m policy --dir out --mode tunnel --tunnel-dst 172.18.16.0/21 -j ACCEPT iptables -A OUTPUT -j LOG --log-tcp-sequence --log-level debug --log-prefix 'OUTPUT:' ========================================================================== but failed by logging this ================================================================ 6381 Aug 8 15:45:04 argent kernel: OUTPUT:IN= OUT=br0 SRC=172.18.22.188 DST=172.18.22.180 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=54323 DF PROTO=TCP SPT=52595 DPT=3389 SEQ=1304299590 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 ================================================================ from this log, I think it should in the *OUTPUT* chain, not *FORWARD* but why could I open it? 1) is there a much more verbose log could be used, or could be opened. 2) how to solve this? thanks

1 0

Will QA site also have 6.1 info/updates?
by Patrick Lists 07 Aug '11

07 Aug '11

Hi, Just wondering if the QA site will also have info & updates on the progress of 6.1? Thanks! Parick

1 0

openssl and eliptic curve
by Lucian 07 Aug '11

07 Aug '11

Hello, I'm trying to rebuild redhat openssl rpm with eliptic curve support enabled. What I did is just edit the spec file and modify the configure parameters from no-ec to enable-ec. Not surprisingly the package does not build with this enabled: http://pastie.org/2334009 This appears to be deliberate due to shitware patents. Anyone knows how to "fix" this? Thanks

2 5

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss