Discuss

discuss@lists.centos.org

2 participants
34758 discussions

NFS and firewall issues
by Niki Kovacs 16 May '06

16 May '06

Hi, I have a small home LAN, where one machine (192.168.1.1) connects to the internet via dialup (no DSL here) and shares the connection with IP masquerading. To achieve this, I tried out various recipes found on the internet, and finally put this in /etc/rc.d/rc.local: --8<------ rc.local ------------ #!/bin/sh # # This script will be executed *after* all the other init scripts. # You can put your own initialization stuff in here if you don't # want to do the full Sys V style init stuff. touch /var/lock/subsys/local # Setup IP Masquerading iptables -F; iptables -t nat -F; iptables -t mangle -F iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE # Secure it iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT iptables -P INPUT DROP iptables -A FORWARD -i ppp0 -o ppp0 -j REJECT --8<--------------------------- I don't understand much about iptables. Documentation about it is on my TODO list (I'll keep it for after my death:oD). Now I have a problem. I fiddled a bit with NFS, and I had a firewall-related problem with it. In short, when iptables (the firewall) runs, I can't do an NFS mount. But as soon as I stop it (service iptables stop), NFS mounts are possible. Now what can I do to 1) go on sharing my ppp connection 2) be able to do NFS mounts while 3) still having a reasonable secure system? Cheers, Niki Kovacs

5 6

Loading GNOME with GDM
by Hairul Ikmal Mohamad Fuzi 16 May '06

16 May '06

Hi, We have a few PC with CentOS 4 installed. By default, it runs to runlevel 5, which displays the GDM. I'm just wondering, how do I actually make the GDM to start GNOME automatically (after a successful login) for all normal user account without having to add 'exec gnome-session' in every user's ~/.xinitrc? The current scenario is, only successful 'root' logins starts the GNOME, while other normal user successful login is presented with the minimalist window manager (which is equivalent to 'Default System Session' from the GDM menu). I'd appreciate if anyone could help me to figure this one out. Thanks! -Ikmal

4 6

PHP5 questions
by Kai Schaetzl 15 May '06

15 May '06

If I install PHP5 from centosplus it will replace PHP4, is this correct? Or is there a way to have it installed in parallel? I know I can't run both modules at the same time, but I'd prefer having them installed in parallel, so I can switch back/between easier. When I try updating I get a dependency warning from php-eaccelerator (from dag repo) - can I ignore that? Searching thru my list archive I find it mentioned several times that eaccelerator works with PHP5, but it's not clear if and what package. Thanks. Kai

3 4

Requirements for building source RPM's?
by Niki Kovacs 15 May '06

15 May '06

Hi, I have CentOS 4.3. On install, I chose the 'Personal Desktop' option without bothering about customizing. I'm on dialup, so I try to choose a mixture of rpm and yum, e. g. I do 'yum install something', take a peek at what is needed, and then install as much as I can from the CD's using rpm -ivh. I want to build an app (cdlabelgen and its frontend gtkcdlabel) from a source RPM, since the binary has a few encoding weirdnesses. I've never built a source RPM (using Slack before), now I wonder: what tools (packages) do I need for this, besides rpm-build, gcc, autoconf etc.? Niki Kovacs

4 4

4.3 ServerCD
by Michael Grinnell 15 May '06

15 May '06

I'm building some new servers next week, and I'm wondering if I should wait for the 4.3 ServerCD or just use the 4.2 ServerCD. Is there an ETA on 4.3? Thanks for the great work, Michael Grinnell

9 11

Basic SAMBA setup
by Niki Kovacs 15 May '06

15 May '06

Hi, I want to setup a simple SAMBA file server, in its most simple configuration first, and then fine-tune that gradually. I've never worked with SAMBA before, so I based myself on Carla Schroder's "Linux Cookbook", chapter XX: SAMBA. Here's what I did, following the step-by-step instructions and reading the explanations as to what-does-what: # mkdir -m 777 /shares Rename /etc/samba/smb.conf to something else (old.sambaconfig) and then edit a new smb.conf from scratch, which looks like this: --8<-------------------- [global] workgroup = workgroup netbios name = windbag server string = Anonymous local file server security = share browseable = yes hosts allow = 192.168.1. [share1] path = /shares comment = Test files read only = No guest ok = Yes --8<--------------------- I tested this configuration with testparm, and it looked OK. Next I restarted SAMBA (service smb restart) and checked the status (service smb status). After this I tried (on the same machine) to connect to my file server: $ smbclient -L windbag But there I got a "Failed to connect". Now what? Niki Kovacs

4 4

pop3d and iptables lockup
by Bowie Bailey 15 May '06

15 May '06

I am having a problem implementing iptables with Courier's pop3 daemon. If I disable iptables, everything works fine. As soon as I enable it, pop3 will stop working for messages over 32K. Small messages will go through with no problems, but large ones will time out. I get this message from OE: "Your POP3 server has not responded in 60 seconds." And an option to stop or continue waiting. I can wait as long as I want, but it will not download the message. This problem only exists with connections coming from outside our network. Connections from within the network can download large messages with no problems. Has anyone seen this before? I would like to implement iptables for more security, but I can't do it if this problem persists. My server is: P4 2.8, 1GB RAM CentOS 4.3 (fully patched) Courier 0.53.1 My iptables rules were initially created with system-config-securitylevel and then modified from there. The current rules are: Chain INPUT (policy ACCEPT) target prot opt in out source destination RH-Firewall-1-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy ACCEPT) target prot opt in out source destination RH-Firewall-1-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT) target prot opt in out source destination Chain RH-Firewall-1-INPUT (2 references) target prot opt in out source destination ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 255 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:25 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:110 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:53 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:53 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:587 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:80 ACCEPT tcp -- * * 172.16.0.0/16 0.0.0.0/0 state NEW tcp dpt:22 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:443 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:995 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited I have found information on Google indicating that this might be a problem with the MTU or MSS setting, but the solutions given seemed to be aimed at the end user rather than the server. I tried them anyway, but they didn't seem to help. This is what was generally suggested: iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN \ -j TCPMSS --clamp-mss-to-pmtu It didn't get any hits on the FORWARD chain. I put it on the OUTPUT chain and it got some hits there, but didn't have any effect on the problem. I also tried the --set-mss option with the same lack of results. I appreciate any suggestions. -- Bowie

1 0

Setting a different LANG variable for a single GTK application?
by Niki Kovacs 15 May '06

15 May '06

Hi, I just installed GtkCDLabel, a nifty little app to create CD covers in a matter of minutes, if not seconds, and which I've been using on a daily basis on Slackware (previous system). I've encountered some encoding issues. Whenever my CD text contains french special characters like é, è, à and ç, the resulting .ps file displays martian characters instead. 'printenv' shows me that the default LANG variable on my system is fr_FR.UTF-8. So I tried to start the app from the terminal with: $ LANG=fr_FR && gtkcdlabel ... and everything worked fine. The problem is now including this workaround in the corresponding .desktop menu entry in /usr/share/applications. When I try to replace Exec=gtkcdlabel by Exec='LANG=fr_FR && gtkcdlabel' ... GNOME complains about an error. My second attempt included an alias in /etc/bashrc, which resulted in a partial success. Typing 'gtkcdlabel' in gnome-terminal, I get the correct result. But when the app is launched from the desktop menu, it is unimpressed by the alias. Which leaves me clueless. Is there any other place where I could define a more global alias? Niki Kovacs

5 7

wireless card on amd64 and notebook
by Jerry Geis 15 May '06

15 May '06

>Jerry Geis wrote: >>/ All, />>/ />>/ Over the weekend I purchased a linksys wireless-g PCI card />>/ for use in my amd64 box. I downloaded ndiswrapper, compiled, installed, />>/ tried to load the driver off the CDROM and it was a no-go. />>/ />>/ I have do this on another box with an amd sempron. Difference being />>/ 32 bit versus 64 bit... />>/ />>/ Seems there are no 64 bit drivers for the wireless card. />>/ />>/ Anyone have a wireless card working on a 64 bit machine? />>/ What was the card and driver? / >I've been noticing this more and more as I've been playing with new >batches of 64-bit machines. Johnny seems to have hit the nail on the >head when he mentioned something to the effect of "if you're doing >straightforward vanilla server things, x86_64 works fine." Since I >don't have any situations (currently) where I need all the extra address >space (no big honking databases 'round here or machines with more than a >few gigs of RAM), I think I'm just going to revert to the x86 32-bit >build to keep my compatibility options open. >Did you ever get everything working satisfactorily on your athlon_64 >notebook? Did you run the 32-bit or 64-bit version of CentOS? >Cheers, Chris, After alot of fuss I did get my compaq R4000 working OK. I had to put the latest kernel from kernel.org on it and recompile. This fixed the SLOOWWW ness issue. Finding ATI drivers fixed the display issues. Personally I dont like the 1280x800 display. Too small more my taste. I miss at least having 1600x1200 on my old dell insipron. Jerry

1 0

CentOS4 and SiS190 LAN chipset
by Nigel Kendrick 15 May '06

15 May '06

I have an Asus Pundit AE3 setup as an Asterisk server (Asterisk at Home) and the only quirk so far is that the onboard SiS190 LAN chipset is not detected and so I have fitted a full height card for now, but as it's a small barebones design this means I cannot fit the case cover. I have the option of throwing in a low-profile LAN card or compiling the OS/drivers - I have looked into this but it means downloading the SRPMs and (for me) working in unfamiliar territory. Is there a simpler way with a pre-compiled driver that I can load as a module? Thanks Nigel Kendrick

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss