Discuss

discuss@lists.centos.org

2 participants
34758 discussions

Re: [CentOS] : Iptables blocks out going connetion some times
by likun 26 Apr '19

26 Apr '19

Yes, I have double checked and am sure there is no IP address conflicts. Likun On 4/24/19 23:28, centos wrote: >On 4/24/19 10:31, likun wrote: >> Hello, Stephen, thank you for input. >> >> Yes, these servers have the same firewall rules, and both of them have the same problem from time to time, most of time they are good. >> >> Actually, these servers are newly installed to be used as the Glusterfs storage server, so not much data flowing at this time. > >As a WAG - have you double checked to make sure there aren't any IP addressing conflicts in play? _______________________________________________ CentOS mailing list CentOS(a)centos.org https://lists.centos.org/mailman/listinfo/centos

1 0

Recommended PHP 7 source for Centos 7
by MRob 25 Apr '19

25 Apr '19

I know there's a couple third party repos offering PHP 7 for Centos. I prefer not to add too much third party that I don't have to and PHP 7 has been mainstream for some time now, I thought maybe it would be in EPEL by now. What is the most recommended and stable way to get an up to date PHP on Centos 7?

10 9

Are linux distros redundant?
by Andrew Holway 25 Apr '19

25 Apr '19

I just realised that I haven't touched a centos/redhat machine in more than a couple of years. Everything I do now is Kubernetes based or using cloud services (or k8s cloud services). What about it listeroons? Is your fleet of centos boxes ever expanding or are you just taking care of a single java 6 jboss application that takes care of the companies widget stocks? How are your jobs changing? Cheers, Andrew

13 23

Re: [CentOS] Are linux distros redundant?
by James B. Byrne 25 Apr '19

25 Apr '19

On Wed, April 24, 2019 11:14, Simon Matter wrote: > > I'm afraid too many clouds make the wider horizon invisible :-) > At that point it is called fog. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

3 2

Re: [CentOS] : Iptables blocks out going connetion some times
by likun 25 Apr '19

25 Apr '19

1 0

Iptables blocks out going connetion some times
by likun 24 Apr '19

24 Apr '19

Hi，guys. There is a wierd problem with iptables recently, hopes somebody can help me. I have installed Centos 7.2.1511 on a bare metal Dell server these days, disabled firewalld and enabled iptables.services, and setup a group of very simple rules, as the following: # iptables-save # Generated by iptables-save v1.4.21 on Tue Apr 23 09:15:14 2019 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [2449555:327804572] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -s 172.22.0.0/16 -p tcp -m tcp --dport 49152:49664 -m conntrack --ctstate NEW -j ACCEPT -A INPUT -s 10.3.3.0/25 -p tcp -m tcp --dport 49152:49664 -m conntrack --ctstate NEW -j ACCEPT -A INPUT -s 172.22.0.0/16 -p tcp -m tcp --dport 24007 -m conntrack --ctstate NEW -j ACCEPT -A INPUT -s 10.3.3.0/25 -p tcp -m tcp --dport 24007 -m conntrack --ctstate NEW -j ACCEPT -A INPUT -s 10.3.3.0/25 -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT -A INPUT -s 10.3.7.0/25 -p tcp -m tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT # Completed on Tue Apr 23 09:15:14 2019 >From time to time, when this server, say 10.3.3.3, trying to connect to port 24007 of another server 10.3.3.4, it will fail sometimes. from tcpdump output, you can see these packages: 22:49:05.992737 IP 10.3.3.3.49149 > 10.3.3.4.24007: Flags [S], seq 2454712274, win 29200, options [mss 1460,sackOK,TS val 24055648 ecr 0,nop,wscale 7], length 0 22:49:05.992847 IP 10.3.3.4.24007 > 10.3.3.3.49149: Flags [S.], seq 3127562073, ack 2454712275, win 28960, options [mss 1460,sackOK,TS val 17803660 ecr 24055648,nop,wscale 7], length 0 22:49:05.992872 IP 10.3.3.3 > 10.3.3.4: ICMP host 10.3.3.3 unreachable - admin prohibited, length 68 The package back from 10.3.3.4 is prohibited by 10.3.3.3, why? Obviously, the package that's been prohibited is the SYNC package that in response of the SYNC sent out by 10.3.3.3, it should match the iptables rule -m state --state RELATED,ESTABLISHED -j ACCEPT, but still be prohibited by the rule -j REJECT --reject-with icmp-host-prohibited. Also, the iptables -nvL output: # iptables -nvL Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 8258 615K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 1 84 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT tcp -- * * 172.22.0.0/16 0.0.0.0/0 tcp dpts:49152:49664 ctstate NEW 0 0 ACCEPT tcp -- * * 10.3.3.0/25 0.0.0.0/0 tcp dpts:49152:49664 ctstate NEW 0 0 ACCEPT tcp -- * * 172.22.0.0/16 0.0.0.0/0 tcp dpt:24007 ctstate NEW 918 55080 ACCEPT tcp -- * * 10.3.3.0/25 0.0.0.0/0 tcp dpt:24007 ctstate NEW 1 60 ACCEPT tcp -- * * 10.3.3.0/25 0.0.0.0/0 tcp dpt:22 ctstate NEW 0 0 ACCEPT tcp -- * * 10.3.7.0/25 0.0.0.0/0 tcp dpt:22 ctstate NEW 244 14640 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT 7378 packets, 957K bytes) pkts bytes target prot opt in out source destination I noticed that the 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited one increase fast. Is this a bug of iptables, or is there something that I have not noticed? Any hints will be appreciated. Likun

3 4

... deploy CentOS 8 ... than develop Scientific Linux 8 ...
by Leon Fauster 23 Apr '19

23 Apr '19

JFYI: https://listserv.fnal.gov/scripts/wa.exe?A2=ind1904&L=SCIENTIFIC-LINUX-ANNO… -- LF

1 0

CentOS-announce Digest, Vol 170, Issue 6
by centos-announce-request＠centos.org 23 Apr '19

23 Apr '19

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2019:0791 Important CentOS 7 java-1.7.0-openjdk Security Update (Johnny Hughes) 2. CESA-2019:0790 Important CentOS 6 java-1.7.0-openjdk Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 22 Apr 2019 22:45:55 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0791 Important CentOS 7 java-1.7.0-openjdk Security Update Message-ID: <20190422224555.GA1938(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0791 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0791 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 48762f12bd57c185b1dfa25ffe4672137205ed54f4570b80077ccd8fe3ba0876 java-1.7.0-openjdk-1.7.0.221-2.6.18.0.el7_6.x86_64.rpm c2eabbf8ff0b3c55d22b7ceb7339106c1d95f6d206d7d4cb497c628bf1178290 java-1.7.0-openjdk-accessibility-1.7.0.221-2.6.18.0.el7_6.x86_64.rpm b102a68a3ec41a3295028ee654624e86ac39431c3a3f0df6f1aff2cea5159267 java-1.7.0-openjdk-demo-1.7.0.221-2.6.18.0.el7_6.x86_64.rpm 5b80734c052a1a91956a92baa53e33890c4e3d668d30cedf40c3549f111e782b java-1.7.0-openjdk-devel-1.7.0.221-2.6.18.0.el7_6.x86_64.rpm e8e229205fa6faf1d078b4bdf4d96d1dfb1cb19b6e2c95d0333383997c92d5a6 java-1.7.0-openjdk-headless-1.7.0.221-2.6.18.0.el7_6.x86_64.rpm 27eab07c10a988c1a483a1d7bb430e2a6e8a7e5da824439539ec8eccf4ae78eb java-1.7.0-openjdk-javadoc-1.7.0.221-2.6.18.0.el7_6.noarch.rpm 9008fc48fa4820bff69d21a6fc42cd7acb517086b430deb1d7b7acf696dda047 java-1.7.0-openjdk-src-1.7.0.221-2.6.18.0.el7_6.x86_64.rpm Source: 9415d05ced5d55a4569ef7684c2e9c07eb124dcefd3250b37431cec79030132e java-1.7.0-openjdk-1.7.0.221-2.6.18.0.el7_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 22 Apr 2019 22:47:39 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2019:0790 Important CentOS 6 java-1.7.0-openjdk Security Update Message-ID: <20190422224739.GA2174(a)bstore1.rdu2.centos.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2019:0790 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0790 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 50c18febd5bf93d2ab91ed16fe2f0a39dd366c6c171b2bf57293f405bac747bc java-1.7.0-openjdk-1.7.0.221-2.6.18.0.el6_10.i686.rpm e426d402fb8c4b100f35cdd33e804934e00f6207df01a4dadf027670aad4b081 java-1.7.0-openjdk-demo-1.7.0.221-2.6.18.0.el6_10.i686.rpm 04b8b251ace7ff3edb478b7f24b61a6ae4ec7b76d72ded5f42d145e0c4464bf0 java-1.7.0-openjdk-devel-1.7.0.221-2.6.18.0.el6_10.i686.rpm 0891365074966d40a361e7743309c72100eecea3204c4966cf32e2abd6ab4326 java-1.7.0-openjdk-javadoc-1.7.0.221-2.6.18.0.el6_10.noarch.rpm b7118bb1f0ea749a49dd6e309b917b539ba7193509c91b76df654aae11b06693 java-1.7.0-openjdk-src-1.7.0.221-2.6.18.0.el6_10.i686.rpm x86_64: 0f8aef84efb6b4863c6387ca05734a62f2a69a6fbf2d483652ec62f5f2afe5d8 java-1.7.0-openjdk-1.7.0.221-2.6.18.0.el6_10.x86_64.rpm 3a9a2bcfa12f6c7a81f87c895a110c20e5c72409633f2da057f9a047a2b878bc java-1.7.0-openjdk-demo-1.7.0.221-2.6.18.0.el6_10.x86_64.rpm 70f81f69d3557a60fffd253400d364f9d626c26c0a3347c8af93f110f2f11c8f java-1.7.0-openjdk-devel-1.7.0.221-2.6.18.0.el6_10.x86_64.rpm 0891365074966d40a361e7743309c72100eecea3204c4966cf32e2abd6ab4326 java-1.7.0-openjdk-javadoc-1.7.0.221-2.6.18.0.el6_10.noarch.rpm b90f1c583805cf03833d848620b95822ab8567b3ea28908e27b31d509d7bc3e7 java-1.7.0-openjdk-src-1.7.0.221-2.6.18.0.el6_10.x86_64.rpm Source: f74b9b7fbace20bd6c2ee30604d714e1c1ddaff8d6ba188813a2d7dd73751879 java-1.7.0-openjdk-1.7.0.221-2.6.18.0.el6_10.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Subject: Digest Footer _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce ------------------------------ End of CentOS-announce Digest, Vol 170, Issue 6 ***********************************************

1 0

Intel Vroc experiences?
by Nux! 23 Apr '19

23 Apr '19

Hi, Has anyone had any experience with Intel Vroc[1]? I'm possibly having to deal with a new server with such technology and can't find much (real world) information about it. Looking at the specs it's basically a glorified fake raid which usually turns on my alarm bells. Has anyone done any testing, how does it compare with "real" raid or software raid? Cheers, Lucian [1] - https://www.intel.co.uk/content/www/uk/en/support/articles/000024498/memory… -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro

3 2

How often do CentOS bugs get triaged?
by Brian Reichert 22 Apr '19

22 Apr '19

Back in February, I opened two bugs, that seem to have had no activity: https://bugs.centos.org/view.php?id=15850 https://bugs.centos.org/view.php?id=15846 Is there some step I skipped when creating these? Or am I being impatient? :) -- Brian Reichert <reichert(a)numachi.com> BSD admin/developer at large

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss