Discuss

discuss@lists.centos.org

34758 discussions

directory services and root/sudo access
by Iain Morris 29 Nov '10

29 Nov '10

This is perhaps a more general security question. For those of you with a directory services installation, do you install a generic local user with sudo access in case directory services is not available? Or do you just beef up your directory services to the point that you are confident it will almost always be up? I usually disable root login via ssh, but allow it from the physical console, and make an emergency generic account with sudo privs in case DS breaks down. What I've noticed, however, is if I simulate a directory services failure, ssh logins with this generic local account take an eternity as the server still tries to auth that user against ldap/kerberos first. I'm sure this could be adjusted in pam in some way. I was just curious how other admins approach this, and what level of trust they place in directory services being available. -- -- - Iain Morris iain.t.morris(a)gmail.com

2 1

opensc/ct/etc
by m.roth＠5-cent.us 29 Nov '10

29 Nov '10

Has anyone worked with the upstream installation for 5.5, and successfully told it to ->shut up<- when you pull your smart card out of the reader? Since you can't add parms in /etc/reader.conf, or in a file in /etc/reader.conf.d, I tried editing /etc/init.d/pcscd to tell it error level and above logging only, and it ignores it, and writes over and over that the card is "mute or absent", filling my logs. mark

1 0

Rebuilding samba3x rpms results in size doubled
by Oguz Yilmaz 29 Nov '10

29 Nov '10

Hi, I have rebuilt samba3x SRPM in Centos 5.5. The resultings RPM's are nearly in triple size of the original RPMs. I have installed and checked the binary files are stripped. What can result in such difference in RPM sizes? I have not changed anything on built and install sections of spec file. Regards, Some files and sizes in original samba3x rpm: -rwxr-xr-x 1 root root 17904 Mar 31 2010 recycle.so -rwxr-xr-x 1 root root 18156 Mar 31 2010 shadow_copy2.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 shadow_copy.so -rwxr-xr-x 1 root root 13844 Mar 31 2010 smb_traffic_analyzer.so -rwxr-xr-x 1 root root 13796 Mar 31 2010 streams_depot.so -rwxr-xr-x 1 root root 17984 Mar 31 2010 streams_xattr.so -rwxr-xr-x 1 root root 5560 Mar 31 2010 syncops.so -rwxr-xr-x 1 root root 17744 Mar 31 2010 xattr_tdb.so -rwxr-xr-x 1 root root 22052 Mar 31 2010 /usr/lib/samba/vfs/acl_tdb.so -rwxr-xr-x 1 root root 17920 Mar 31 2010 /usr/lib/samba/vfs/acl_xattr.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 /usr/lib/samba/vfs/audit.so -rwxr-xr-x 1 root root 14060 Mar 31 2010 /usr/lib/samba/vfs/cap.so -rwxr-xr-x 1 root root 5448 Mar 31 2010 /usr/lib/samba/vfs/default_quota.so -rwxr-xr-x 1 root root 5512 Mar 31 2010 /usr/lib/samba/vfs/dirsort.so -rwxr-xr-x 1 root root 9600 Mar 31 2010 /usr/lib/samba/vfs/expand_msdfs.so -rwxr-xr-x 1 root root 13832 Mar 31 2010 /usr/lib/samba/vfs/extd_audit.so -rwxr-xr-x 1 root root 5444 Mar 31 2010 /usr/lib/samba/vfs/fake_perms.so -rwxr-xr-x 1 root root 9644 Mar 31 2010 /usr/lib/samba/vfs/fileid.so -rwxr-xr-x 1 root root 31312 Mar 31 2010 /usr/lib/samba/vfs/full_audit.so -rwxr-xr-x 1 root root 9696 Mar 31 2010 /usr/lib/samba/vfs/netatalk.so -rwxr-xr-x 1 root root 9636 Mar 31 2010 /usr/lib/samba/vfs/preopen.so -rwxr-xr-x 1 root root 9584 Mar 31 2010 /usr/lib/samba/vfs/readahead.so -rwxr-xr-x 1 root root 17752 Mar 31 2010 /usr/lib/samba/vfs/readonly.so -rwxr-xr-x 1 root root 17904 Mar 31 2010 /usr/lib/samba/vfs/recycle.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 /usr/lib/samba/vfs/shadow_copy.so -rwxr-xr-x 1 root root 18156 Mar 31 2010 /usr/lib/samba/vfs/shadow_copy2.so -rwxr-xr-x 1 root root 13844 Mar 31 2010 /usr/lib/samba/vfs/smb_traffic_analyzer.so -rwxr-xr-x 1 root root 13796 Mar 31 2010 /usr/lib/samba/vfs/streams_depot.so -rwxr-xr-x 1 root root 17984 Mar 31 2010 /usr/lib/samba/vfs/streams_xattr.so -rwxr-xr-x 1 root root 5560 Mar 31 2010 /usr/lib/samba/vfs/syncops.so -rwxr-xr-x 1 root root 17744 Mar 31 2010 /usr/lib/samba/vfs/xattr_tdb.so -rwxr-xr-x 1 root root 2502552 Mar 31 2010 /usr/sbin/nmbd -rwxr-xr-x 1 root root 6807276 Mar 31 2010 /usr/sbin/smbd Some files and sizes in mine samba3x rpm: -rwxr-xr-x 1 root root 62018 Nov 26 14:50 recycle.so -rwxr-xr-x 1 root root 72876 Nov 26 14:50 shadow_copy2.so -rwxr-xr-x 1 root root 44528 Nov 26 14:50 shadow_copy.so -rwxr-xr-x 1 root root 54391 Nov 26 14:50 smb_traffic_analyzer.so -rwxr-xr-x 1 root root 56096 Nov 26 14:50 streams_depot.so -rwxr-xr-x 1 root root 63394 Nov 26 14:50 streams_xattr.so -rwxr-xr-x 1 root root 42007 Nov 26 14:50 syncops.so -rwxr-xr-x 1 root root 63989 Nov 26 14:50 xattr_tdb.so -rwxr-xr-x 1 root root 68818 Nov 26 14:50 /usr/lib/samba/vfs/acl_tdb.so -rwxr-xr-x 1 root root 60184 Nov 26 14:50 /usr/lib/samba/vfs/acl_xattr.so -rwxr-xr-x 1 root root 46167 Nov 26 14:50 /usr/lib/samba/vfs/audit.so -rwxr-xr-x 1 root root 60597 Nov 26 14:50 /usr/lib/samba/vfs/cap.so -rwxr-xr-x 1 root root 37894 Nov 26 14:50 /usr/lib/samba/vfs/default_quota.so -rwxr-xr-x 1 root root 40378 Nov 26 14:50 /usr/lib/samba/vfs/dirsort.so -rwxr-xr-x 1 root root 44448 Nov 26 14:50 /usr/lib/samba/vfs/expand_msdfs.so -rwxr-xr-x 1 root root 51756 Nov 26 14:50 /usr/lib/samba/vfs/extd_audit.so -rwxr-xr-x 1 root root 37428 Nov 26 14:50 /usr/lib/samba/vfs/fake_perms.so -rwxr-xr-x 1 root root 46429 Nov 26 14:50 /usr/lib/samba/vfs/fileid.so -rwxr-xr-x 1 root root 95070 Nov 26 14:50 /usr/lib/samba/vfs/full_audit.so -rwxr-xr-x 1 root root 48276 Nov 26 14:50 /usr/lib/samba/vfs/netatalk.so -rwxr-xr-x 1 root root 48882 Nov 26 14:50 /usr/lib/samba/vfs/preopen.so -rwxr-xr-x 1 root root 43154 Nov 26 14:50 /usr/lib/samba/vfs/readahead.so -rwxr-xr-x 1 root root 62346 Nov 26 14:50 /usr/lib/samba/vfs/readonly.so -rwxr-xr-x 1 root root 62018 Nov 26 14:50 /usr/lib/samba/vfs/recycle.so -rwxr-xr-x 1 root root 44528 Nov 26 14:50 /usr/lib/samba/vfs/shadow_copy.so -rwxr-xr-x 1 root root 72876 Nov 26 14:50 /usr/lib/samba/vfs/shadow_copy2.so -rwxr-xr-x 1 root root 54391 Nov 26 14:50 /usr/lib/samba/vfs/smb_traffic_analyzer.so -rwxr-xr-x 1 root root 56096 Nov 26 14:50 /usr/lib/samba/vfs/streams_depot.so -rwxr-xr-x 1 root root 63394 Nov 26 14:50 /usr/lib/samba/vfs/streams_xattr.so -rwxr-xr-x 1 root root 42007 Nov 26 14:50 /usr/lib/samba/vfs/syncops.so -rwxr-xr-x 1 root root 63989 Nov 26 14:50 /usr/lib/samba/vfs/xattr_tdb.so -rwxr-xr-x 1 root root 6293564 Nov 26 14:50 /usr/sbin/nmbd -rwxr-xr-x 1 root root 18057363 Nov 26 14:50 /usr/sbin/smbd -- Oguz YILMAZ

4 4

can't use godaddy SSL cert
by bluethundr 28 Nov '10

28 Nov '10

Hey list, I was having a similar SSL/openLDAP problem to this last week. I had a chance to look at this again today and it still appears to not be working. I called godaddy and had the last cert cancelled and reissued as I had mis-typed the name of the CN on the last one. I am trying to setup a Godaddy turbo SSL certificate with an openLDAP 2.4 server under FreeBSD 8.1. The clients are mainly a network of virtual CentOS 5.5 instances. [root@LBSD2:/usr/home/bluethundr]#pkg_info | grep openldap openldap-sasl-client-2.4.23 Open source LDAP client implementation with SASL2 support openldap-sasl-server-2.4.23 Open source LDAP server implementation I have setup the certificate chain in my slapd.conf like so: [root@LBSD2:/usr/home/bluethundr]#grep -i tls /usr/local/etc/openldap/slapd.conf## TLS options for slapd TLSCipherSuite HIGH:MEDIUM:+SSLv2 TLSCertificateFile /usr/local/etc/openldap/cacerts/LBSD2.summitnjhome.com.crt TLSCertificateKeyFile /usr/local/etc/openldap/cacerts/slapd.pem TLSCACertificateFile /usr/local/etc/openldap/cacerts/sf_issuing.crt I have tried each of the following certs with no luck in getting my cert to talk to it's CA: -rw-r--r-- 1 root bluethundr 2604 Nov 25 11:37 ca_bundle.crt -r--r----- 1 root ldap 4604 Nov 24 18:57 gd_bundle.crt -r--r----- 1 root ldap 1537 Nov 25 02:00 sf_issuing.crt and I get the same result for each when I attempt to connect to SSL on the LDAP server: [root@LCENT01:/tmp/Foswiki-1.1.2]#openssl s_client -connect ldap.example.com:389 -showcerts -CAfile sf_issuing.crt 13730:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('sf_issuing.crt','r') 13730:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:125: 13730:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: CONNECTED(00000003) 13730:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188: ldapsearch -h ldap.example.com -d -1 -ZZ "dc=example,dc=com" TLS certificate verification: depth: 0, err: 20, subject: /O=LBSD2.summitnjhome.com/OU=Domain Control Validated/CN=LBSD2.summitnjhome.com, issuer: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure Certification Authority/serialNumber=07969287 TLS certificate verification: Error, unable to get local issuer certificate tls_write: want=7, written=7 0000: 15 03 01 00 02 02 30 ......0 TLS trace: SSL3 alert write:fatal:unknown CA TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS: can't connect. ldap_perror ldap_start_tls: Connect error (-11) additional info: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed It seems to indicate that it can't talk to it's CA... does anyone have any suggestions on how to make this work? thanks! -- Here's my RSA Public key: gpg --keyserver pgp.mit.edu --recv-keys B6D6EAC3

2 2

Re: [CentOS] simple website hit counter
by Les Bell 27 Nov '10

27 Nov '10

John Hinton <webmaster(a)ew3d.com> wrote: >> You set it to run once per day against the logs for that website... normally around midnight. The loads aren't that bad. The reporting I think defaults to 12 months of stored data which is stored normally in a directory in the web root for that website. That directory of course can be protected by something like htaccess. << Just a heads up: the Webalizer report logs are not managed by logrotate, and will continue to accumulate indefinitely. I had a server fall over a couple of months ago when /var filled up; after a little du'ing, I discovered that the thing had three and a half years' worth of Webalizer logs taking up a lot of space. Best, --- Les Bell [http://www.lesbell.com.au] Tel: +61 2 9451 1144

1 0

centos-5.5 VS Firefox 3.6.12
by fred smith 27 Nov '10

27 Nov '10

My firefox auto-installed an update from 3.6.11 to 3.6.12 this morning, after which it gives this upon a restart attempt: Program received signal SIGBUS, Bus error. 0x00123c47 in memset () from /lib/ld-linux.so.2 while I dig deeper, wondering if anyone else has seen it and/or can suggest a fix. Thanks! -- ---- Fred Smith -- fredex(a)fcshome.stoneham.ma.us ----------------------------- I can do all things through Christ who strengthens me. ------------------------------ Philippians 4:13 -------------------------------

2 2

Postfix - message queue filling with Host or name not found - try again
by Rob Kampen 27 Nov '10

27 Nov '10

Hi list, I have noted over the last week or so my DNS servers are dumping lots of messages for bogus domain lookups. Examining the postfix queue with postqueue -p: I see many (Host or domain name not found. Name service error for name=bdgiedjhea.po6e4ina.com type=MX: Host not found, try again) Jake(a)bdgiedjhea.po6e4ina.com My question - why does this stay in the message queue - why not dumped back with message undeliverable or dropped? I understand this is probably related to my config - which follows: <main.cf> queue_directory = /var/spool/postfix command_directory = /usr/sbin daemon_directory = /usr/libexec/postfix mail_owner = postfix myhostname = <mumble> mydomain = <mumble> myorigin = $mydomain inet_interfaces = all inet_protocols = ipv4 proxy_interfaces = <mumble> mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, mail.$mydomain, www.$mydomain, ftp.$mydomain unknown_local_recipient_reject_code = 550 mynetworks = 192.168.230.0/24, 127.0.0.0/8 relay_domains = virtual_alias_domains = hash:/etc/postfix/virtual_alias_domains virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps smtpd_helo_required = yes smtpd_delay_reject = yes strict_rfc821_envelopes = yes smtpd_helo_restrictions = permit_mynetworks, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, permit smtpd_sender_login_maps = hash:/etc/postfix/smtpd_sender_login_map smtpd_client_restrictions = check_client_access hash:/etc/postfix/access smtpd_recipient_restrictions = reject_unauth_pipelining, reject_non_fqdn_recipient, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_recipient_access hash:/etc/postfix/roleaccount_exceptions, reject_invalid_hostname, check_helo_access pcre:/etc/postfix/helo_checks, reject_rbl_client sbl-xbl.spamhaus.org, permit smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes tls_random_exchange_name = /var/spool/postfix/prng_exch smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_use_tls = yes smtpd_tls_security_level = may smtpd_tls_auth_only = yes smtpd_tls_key_file = /etc/pki/tls/private/ssl.key.private.decrypted smtpd_tls_cert_file = /etc/pki/tls/certs/<mumble> smtpd_tls_CAfile = /etc/pki/tls/certs/sub.class2.server.ca.pem smptd_tls_loglevel = 2 smtpd_tls_received_header = yes smtpd_sasl_tls_security_options = noanonymous smtpd_sasl_security_options = noanonymous mailbox_size_limit = 102400000 message_size_limit = 40960000 in_flow_delay = 1s alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases home_mailbox = Maildir/ content_filter=amavisfeed:[127.0.0.1]:10024 debug_peer_level = 2 debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin xxgdb $daemon_directory/$process_name $process_id & sleep 5 sendmail_path = /usr/sbin/sendmail.postfix newaliases_path = /usr/bin/newaliases.postfix mailq_path = /usr/bin/mailq.postfix setgid_group = postdrop html_directory = no manpage_directory = /usr/share/man sample_directory = /usr/share/doc/postfix-2.2.2/samples readme_directory = /usr/share/doc/postfix-2.2.2/README_FILES </main.cf> Any suggestions appreciated. TIA rob

6 10

CentOS-announce Digest, Vol 69, Issue 9
by centos-announce-request＠centos.org 27 Nov '10

27 Nov '10

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEBA-2010:0913 CentOS 5 x86_64 gtk2 Update (Karanbir Singh) 2. CEBA-2010:0913 CentOS 5 i386 gtk2 Update (Karanbir Singh) 3. CEBA-2010:0900 CentOS 5 i386 thunderbird Update (Karanbir Singh) 4. CEBA-2010:0900 CentOS 5 x86_64 thunderbird Update (Karanbir Singh) ---------------------------------------------------------------------- Message: 1 Date: Fri, 26 Nov 2010 18:08:26 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0913 CentOS 5 x86_64 gtk2 Update To: centos-announce(a)centos.org Message-ID: <20101126180826.GA27443(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0913 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 1cc83a152509a74f6614308e42c6f43a gtk2-2.10.4-21.el5_5.6.i386.rpm 87c5c3a858d9d63f031fec320a6a547d gtk2-2.10.4-21.el5_5.6.x86_64.rpm 9286c99d64aaca8ca442c9cc5549b284 gtk2-devel-2.10.4-21.el5_5.6.i386.rpm e39c7a2371e7f5abdf4950fd173ad677 gtk2-devel-2.10.4-21.el5_5.6.x86_64.rpm Source: 2f26dac41203a95ac15d9cc74f039845 gtk2-2.10.4-21.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 26 Nov 2010 18:08:26 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0913 CentOS 5 i386 gtk2 Update To: centos-announce(a)centos.org Message-ID: <20101126180826.GA27428(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0913 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0913.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 29b4a5cd2b0b3f6f1fe25e54d20ee01d gtk2-2.10.4-21.el5_5.6.i386.rpm e0d9866168342114db39d4fb5e5beeea gtk2-devel-2.10.4-21.el5_5.6.i386.rpm Source: 2f26dac41203a95ac15d9cc74f039845 gtk2-2.10.4-21.el5_5.6.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Sat, 27 Nov 2010 12:43:33 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0900 CentOS 5 i386 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20101127124333.GA1984(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0900 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0900.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 5c69a7bc16453026ec7caa85216f0c9d thunderbird-2.0.0.24-12.el5.centos.i386.rpm Source: 32e3dae9627ae0b4caa3ce1a57c881cb thunderbird-2.0.0.24-12.el5.centos.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Sat, 27 Nov 2010 12:43:33 +0000 From: Karanbir Singh <kbsingh(a)centos.org> Subject: [CentOS-announce] CEBA-2010:0900 CentOS 5 x86_64 thunderbird Update To: centos-announce(a)centos.org Message-ID: <20101127124333.GA2001(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2010:0900 Upstream details at : https://rhn.redhat.com/errata/RHBA-2010-0900.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 11960f6689f559620bcedc18beae46a3 thunderbird-2.0.0.24-12.el5.centos.x86_64.rpm Source: 32e3dae9627ae0b4caa3ce1a57c881cb thunderbird-2.0.0.24-12.el5.centos.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 69, Issue 9 **********************************************

1 0

simple website hit counter
by Frank Cox 27 Nov '10

27 Nov '10

Googling for this finds me a ton of stuff that doesn't actually do what I'm looking for. I want a simple hit counter cgi script of some kind that will increment a counter on every page load but I want to access the counter from a different page. In other words, I don't want to have a visible hit counter on the webpage itself. I want to have a different webpage that will show me the number. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

8 14

Centos and Bridging
by Robert Spangler 27 Nov '10

27 Nov '10

Hello, Presently I am running CentOS release 5.5 (Final). I am looking to setup bridging as I would like to setup some KVM virtual hosts on my system as a test lab. I am following the the instruction at this site > http://tldp.org/HOWTO/BRIDGE-STP-HOWTO/index.html but I cannot figure out where I am going wrong and would be thankful if someone could point me in the right direction. Here is what I have done: Check bridge information with the following: > ~ $ modprobe -v bridge No issues or errors > ~ $ cat /proc/modules | grep bridge > bidge 91889 0 - Live 0xffffffff89247000 Check to ensure forwarding is turned on: > ~ $ cat /proc/sys/net/ipv4/ip_forward > 1 Checked that my interface are up and running (Was sure of this but did the check anyway): > ~ $ ifconfig > eth0 Link encap:Ethernet HWaddr 48:5B:39:2A:07:D5 > inet addr:192.168.1.100 Bcast:192.168.1.255 Mask:255.255.255.0 > inet6 addr: fe80::4a5b:39ff:fe2a:7d5/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:1059 errors:0 dropped:0 overruns:0 frame:0 > TX packets:1080 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:454226 (443.5 KiB) TX bytes:120584 (117.7 KiB) > Interrupt:90 Base address:0x8400 > > lo Link encap:Local Loopback > inet addr:127.0.0.1 Mask:255.0.0.0 > inet6 addr: ::1/128 Scope:Host > UP LOOPBACK RUNNING MTU:16436 Metric:1 > RX packets:92 errors:0 dropped:0 overruns:0 frame:0 > TX packets:92 errors:0 dropped:0 overruns:0 carrier:0[Thu Nov 25 So now I begin to create the bridge form CLI as I want to make sure everything works before committing it to the config: > brctl addbr br0 > ifconfig eth0 down > ifconfig br0 192.168.1.100 up > ifconfig eth0 0.0.0.0 up > route add default gw 192.168.1.254 I check my interfaces and routing: > ~ $ ifconfig > br0 Link encap:Ethernet HWaddr 00:00:00:00:00:00 > inet addr:192.168.1.100 Bcast:192.168.1.255 Mask:255.255.255.0 > inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:5 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:0 (0.0 b) TX bytes:398 (398.0 b) > > eth0 Link encap:Ethernet HWaddr 48:5B:39:2A:07:D5 > inet6 addr: fe80::4a5b:39ff:fe2a:7d5/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:64662 errors:0 dropped:0 overruns:0 frame:0 > TX packets:63301 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:17699194 (16.8 MiB) TX bytes:7958063 (7.5 MiB) > Interrupt:90 Base address:0x8400 > > lo Link encap:Local Loopback > inet addr:127.0.0.1 Mask:255.0.0.0 > inet6 addr: ::1/128 Scope:Host > UP LOOPBACK RUNNING MTU:16436 Metric:1 > RX packets:211 errors:0 dropped:0 overruns:0 frame:0 > TX packets:211 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:17346 (16.9 KiB) TX bytes:17346 (16.9 KiB) > ~ $ route -n > Kernel IP routing table > Destination Gateway Genmask Flags Metric Ref Use Iface > 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br0 > 0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 br0 Time to test if ping works: > ~ $ ping -c3 192.168.1.254 > PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data. > ping: sendmsg: Operation not permitted > ping: sendmsg: Operation not permitted > ping: sendmsg: Operation not permitted > > --- 192.168.1.254 ping statistics --- > 3 packets transmitted, 0 received, 100% packet loss, time 2000ms I know the firewall is causing this issue so I stop the firewall: > ~ $ service iptables stop > Flushing firewall rules: [ OK ] > Setting chains to policy ACCEPT: nat filter [ OK ] > Unloading iptables modules: [ OK ] Time to try ping again: > ~ $ ping -c3 192.168.1.254 > PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data. > From 192.168.1.100 icmp_seq=1 Destination Host Unreachable > From 192.168.1.100 icmp_seq=2 Destination Host Unreachable > From 192.168.1.100 icmp_seq=3 Destination Host Unreachable > > --- 192.168.1.254 ping statistics --- > 3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 1999ms To back out all I needed to do was: > ifconfig br0 down > brctl delbr br0 > service iptables start > service netowrk restart Everything is back to normal. I cannot figure out what am I missing here? Interfaces and routing look to be setup correctly. Is there something else I need to be looking at? -- Regards Robert Linux The adventure of a life time. Linux User #296285 Get Counted http://counter.li.org/

8 14

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss