Discuss

discuss@lists.centos.org

2 participants
34758 discussions

CentOS-announce Digest, Vol 8, Issue 3
by centos-announce-request＠centos.org 09 Oct '05

09 Oct '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:791 Important CentOS 4 x86_64 thunderbird - security update (Johnny Hughes) 2. CESA-2005:791 Important CentOS 4 i386 thunderbird - security update (Johnny Hughes) 3. CESA-2005:346 Low CentOS 4 i386 slocate - security update (Johnny Hughes) 4. CESA-2005:346 Low CentOS 4 x86_64 slocate - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 08 Oct 2005 07:29:15 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2005:791 Important CentOS 4 x86_64 thunderbird - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1128774555.3699.24.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:791 https://rhn.redhat.com/errata/RHSA-2005-791.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: thunderbird-1.0.7-1.4.1.centos4.x86_64.rpm src: thunderbird-1.0.7-1.4.1.centos4.src.rpm

1 0

Paranoid Firewalling
by Kirk Bocek 09 Oct '05

09 Oct '05

After reading this article: http://www.theregister.co.uk/2005/08/31/blocking_chinese_ip_addresses/ I got to thinking that there is really no reason for *any* traffic to hit my servers that comes from anywhere outside North America. So I wrote the perl script at the end of this posting to extract selected IP ranges posted at iana.org and convert them into iptables rules blocking any traffic from those ranges. I'd like comments on this. I know it's not perfect as there are both corporate and 'various registries' address ranges that aren't covered but it's a start. Since my company web site is hosted elsewhere but we are doing the DNS, I put in the exceptions for DNS. In my ten or so years of administering Linux servers, following the usual security precautions has been sufficient: closing unused ports, keeping up to date on patches, limiting permissions and logins, etc. I've never had a system broken into. But if I can lessen the bandwidth used up by brute-force password attacks and port scans at the cost of a few CPU cycles, that's a good thing. I've had the new rules up on one server for about half an hour and can see about 10 or so connection attempts from the addresses in question. What do you think? Kirk Bocek #!/usr/bin/perl # # iana-makeiptables.pl # Convert IPv4 Address assignment document from iana.org into # a shell script that will insert iptables rules to block traffic # from selected regional registries. # # Copy the data from: # http://www.iana.org/assignments/ipv4-address-space # and save it to the file in $datafile (here -- iana-assignments.dat) # Then edit the 'my @block' line below to select the registries you want to block # # Sept 6, 2005 Kirk Bocek # use strict; my $datafile='iana-assignments.dat'; my $outfile='iana-block.sh'; #Registries are ARIN APNIC RIPE LACNIC AfriNIC my @block=qw/APNIC RIPE LACNIC AfriNIC/; die "Data File $datafile Not Found!" unless -f $datafile; die "Cannot open $outfile for writing!" unless open OUT, ">$outfile"; die "Cannot open $datafile for reading!" unless open DAT, "<$datafile"; print OUT "#!/bin/bash\n"; print OUT "# Blocking traffic from: @block\n"; print OUT "# Generated by iana-makeiptables.pl\n"; foreach (<DAT>) { next unless /^\d{3}\/8/; BLOCK: foreach my $reg (@block) { if (/^(\d{3})\/8.*$reg/) { my $x=$1; $x=substr($x,1) if substr($x,0,1) eq '0'; #Strip leading zero $x=substr($x,1) if substr($x,0,1) eq '0'; #Might be two of them print OUT 'iptables -I INPUT -s ',$x,".0.0.0/8 -j DROP\n"; last BLOCK; } } } #Put any exceptions here #For example, I'm allowing DNS traffic print OUT "iptables -I INPUT -p tcp -m tcp --dport 53 -j ACCEPT\n"; print OUT "iptables -I INPUT -p udp -m udp --dport 53 -j ACCEPT\n"; close OUT; close DAT; # End of iana-makeiptables.pl

11 23

Centos 4.1 & ReiserFS
by Ajay Sharma 09 Oct '05

09 Oct '05

Hi, I'm upgrading my mail server tomorrow from CentOS 3 to CentOS 4.1. And I'd like to use ReiserFS this time around since everyone says it performs much better with smaller files (all the mail is in Maildir's instead of mbox'es). Right now I have a pretty basic filesystem layout: /boot, swap, and /. Am I making the correct assumption that I can't install CentOS with the CentOSPlus kernel? So I need to split it up: /boot -> 128MB ext3 swap / -> 4 GB ext3 <free space> Then i'll install the OS, upgrade the kernel to the CentOSPlus kernel, install reiserfs-utils, format the free space as resierfs and mount it as /home. This is an older server so I'm trying to suck as much out of it before forcing the company to upgrade. I figure a shiny new 2.6 kernel and reiserfs should buy me some more time. Thoughts? Suggestions? Tips? Thanks, Ajay

1 0

Problem(s) solved
by Sam Drinkard 09 Oct '05

09 Oct '05

I think I solved the problem. ACPI was disabled in the bios. I had to run kudzu manually once the system came up, but it removed all the other stuff and added the new. All is well (again) ... Sam -- Snowman

1 0

Boot problems
by Sam Drinkard 09 Oct '05

09 Oct '05

My dead S-M motherboard is not so dead. Short between the seat and keyboard :-) I'm running into some problems booting up tho. When kudzu runs, it finds all the stuff from the Tyan board that the super micro board does not have. I've told it to remove the configurations for all those things, but kudzu never goes into the probing for new devices after removing, but halts or hangs at "enabling swap space". Nothing happens after that. Prior to all this tho, in the boot screen I see the message that ACPI cannot find the RSDP ?? whatever that is. Ok.. this time I didn't do anything, but just let it progress into the bootup, and it continues and completes, gives me a login, etc., like everything is OK. What should I do to get kudzu to remove all the stuff that is not there now, and find the new hardware? Thanks much.... Sam -- Snowman

1 0

Adding (belatedly) Chinese fonts
by Chris Mauritz 08 Oct '05

08 Oct '05

I have a couple of English language systems that are soon going to have to be able to display Chinese web content. I searched the repositories and wasn't sure exactly which packages ought to be installed to make this work properly. The systems are CentOS 4 w/Gnome. I figured I'd ask here before I just dive in and break things. 8-) Any suggestions would be greatly appreciated.

2 2

Clarification
by Sam Drinkard 08 Oct '05

08 Oct '05

List, Being pretty new to CentOS and such, can someone answer a couple of questions about yum and up2date? I think I got the basic info, but I'm a bit confused about what does what. I configured yum to use the dag repo (I think) but now and then, I get the red circle from up2date stuff on the upper menubar. I have been using the up2date function to grab the latest bits when indicated something is available. I don't have yum running nightly as a cron job either. Now, what is the difference in using the up2date vs. yum? Should I be using yum exclusively to do updates, and if so, how does it know there are updates available? Are the files coming from the RH update site the same as would be avaliable via yum? Sorry if this is a newbie question, but while the machine is down waiting on the new mobo, I figured I could do a little brushing up on things I don't fully understand. Thanks.. -- Snowman

3 3

cyclades driver on centos 4.1
by Jerry Geis 08 Oct '05

08 Oct '05

I have a 5 year old machine that had a working cyclades8ys (8 port ISA rs232) card. I installed centos 4.1 on the box. I installed the kernel source and rebuilt the the kernel, did menuconfig and seelcted the cyclades module. Did the modprode cyclades and got some driver information echoed to the screen but it did not detect the card. Does udev have anything to do with this? Does any one have an old ISA cyclades card working on centos 4.1? Can you share how? Thanks, jerry

1 0

2 httpd configs
by Craig White 08 Oct '05

08 Oct '05

I normally don't do this - haven't got any traction on taroon list and I want to get a backup going. I have an RHEL 3 server and it is serving some simple web stuff (horde/imp/etc.) I have installed BrightStor ArcServe and I need it to also serve some web pages. The ArcServe runs on a different port but has it's own httpd.conf with the distribution. The last time I did it, it was the only web pages I needed to serve on the system so it was easy enough to just replace the default /etc/httpd/conf/httpd.conf with the supplied httpd.conf from ArcServe This time, I can't do that so I guess that I want to run another instance of httpd, with the alternate httpd.conf file which I can do by copying /etc/rc.d/init.d/httpd and altering the copy to use the ArcServe config file. Is this the right way to handle this? Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 6

java error
by Raymond Norton 08 Oct '05

08 Oct '05

I just installed java-sdk using yum. When I try to execute the following, I get an exception error: root@blh fileIndexer]# java -Xmx256m -jar FileIndexer-1.1.5.jar Warning: -Xmx256m not understood. Ignoring. Warning: -jar not understood. Ignoring. Exception in thread "main" java.lang.NoClassDefFoundError: How can I fix this? Raymond

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss