Discuss

discuss@lists.centos.org

2 participants
34758 discussions

How to block routing/forwarding with firewalld
by Jeff White 02 Nov '16

02 Nov '16

On CentOS 7 with firewalld I have a box with numerous interfaces acting as a NAT gateway. This works but I noticed that it routes/forwards traffic not just from my internal zone to external zone but also between interfaces within the internal zone. How can I prevent that traffic? I've tried adding direct and rich rules to deny the traffic but it doesn't work. Direct: firewall-cmd --direct --add-rule ipv4 filter INPUT 0 -s 10.110.4.0/22 -d 10.110.0.0/22 -j REJECT That command works, and I see it in `iptables -L` but traffic is still allowed. Rich: # firewall-cmd --zone=trusted --add-rich-rule='rule family=ipv4 source address=10.110.4.0/22 destination address=10.110.0.0/22 reject' Error: INVALID_RULE: destination action I can't find any explanation of what that error means. So, how do you tell firewalld to stop forwarding traffic between interfaces? # firewall-cmd --get-active-zones public interfaces: ens161 ens193 trusted interfaces: ens192 ens224 ens256 lo # firewall-cmd --list-all public (default, active) interfaces: ens161 ens193 sources: services: dhcpv6-client ssh ports: masquerade: yes forward-ports: icmp-blocks: rich rules: -- Jeff White HPC Systems Engineer Information Technology Services - WSU

3 2

Latest glusterfs 3.8.5 server not compatible with livbirt libgfapi access
by Radu Radutiu 02 Nov '16

02 Nov '16

Hi, After updating glusterfs server to 3.8.5 (from Centos-gluster-3.8.repo) the KVM virtual machines (qemu-kvm-ev-2.3.0-31) that access storage using libgfapi are no longer able to start. The libvirt log file shows: [2016-11-02 14:26:41.864024] I [MSGID: 104045] [glfs-master.c:91:notify] 0-gfapi: New graph 73332d32-3937-3130-2d32-3031362d3131 (0) coming up [2016-11-02 14:26:41.864075] I [MSGID: 114020] [client.c:2356:notify] 0-testvol-client-0: parent translators are ready, attempting connect on transport [2016-11-02 14:26:41.882975] I [rpc-clnt.c:1947:rpc_clnt_reconfig] 0-testvol-client-0: changing port to 49152 (from 0) [2016-11-02 14:26:41.889362] I [MSGID: 114057] [client-handshake.c:1446:select_server_supported_programs] 0-testvol-client-0: Using Program GlusterFS 3.3, Num (1298437), Version (330) [2016-11-02 14:26:41.890001] I [MSGID: 114046] [client-handshake.c:1222:client_setvolume_cbk] 0-testvol-client-0: Connected to testvol-client-0, attached to remote volume '/data/brick1/testvol'. [2016-11-02 14:26:41.890035] I [MSGID: 114047] [client-handshake.c:1233:client_setvolume_cbk] 0-testvol-client-0: Server and Client lk-version numbers are not same, reopening the fds [2016-11-02 14:26:41.917990] I [MSGID: 114035] [client-handshake.c:201:client_set_lk_version_cbk] 0-testvol-client-0: Server lk version = 1 [2016-11-02 14:26:41.919289] I [MSGID: 104041] [glfs-resolve.c:885:__glfs_active_subvol] 0-testvol: switched to graph 73332d32-3937-3130-2d32-3031362d3131 (0) [2016-11-02 14:26:41.922174] I [MSGID: 114021] [client.c:2365:notify] 0-testvol-client-0: current graph is no longer active, destroying rpc_client [2016-11-02 14:26:41.922269] I [MSGID: 114018] [client.c:2280:client_rpc_notify] 0-testvol-client-0: disconnected from testvol-client-0. Client process will keep trying to connect to glusterd until brick's port is available [2016-11-02 14:26:41.922592] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-gfapi: size=84 max=1 total=1 [2016-11-02 14:26:41.923044] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-gfapi: size=188 max=2 total=2 [2016-11-02 14:26:41.923419] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-gfapi: size=140 max=2 total=2 [2016-11-02 14:26:41.923442] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-client-0: size=1324 max=2 total=5 [2016-11-02 14:26:41.923458] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-dht: size=1148 max=0 total=0 [2016-11-02 14:26:41.923546] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-dht: size=3380 max=2 total=5 [2016-11-02 14:26:41.923815] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-read-ahead: size=188 max=0 total=0 [2016-11-02 14:26:41.923832] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-readdir-ahead: size=60 max=0 total=0 [2016-11-02 14:26:41.923844] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-io-cache: size=68 max=0 total=0 [2016-11-02 14:26:41.923856] I [MSGID: 101053] [mem-pool.c:617:mem_pool_destroy] 0-testvol-io-cache: size=252 max=1 total=3 [2016-11-02 14:26:41.923877] I [io-stats.c:3747:fini] 0-testvol: io-stats translator unloaded [2016-11-02 14:26:41.924191] I [MSGID: 101191] [event-epoll.c:659:event_dispatch_epoll_worker] 0-epoll: Exited thread with index 2 [2016-11-02 14:26:41.924232] I [MSGID: 101191] [event-epoll.c:659:event_dispatch_epoll_worker] 0-epoll: Exited thread with index 1 2016-11-02T14:26:42.825041Z qemu-kvm: -drive file=gluster://s3/testvol/c7.img,if=none,id=drive-virtio-disk0,format=qcow2,cache=none: Could not read L1 table: Bad file descriptor The brick is available , runs on the same host and mounted in another directory using fuse (to confirm that it is indeed fine). If I downgrade the gluster server to 3.8.4 everything works fine. Anyone has seen this or has any idea how to debug? Regards, Radu

1 0

how to view a picture under shell?
by Glenn WANG 02 Nov '16

02 Nov '16

hi, all, is there any command(such asciiview) to view the picture under bash shell? I found the asciiview could meet my requirement, but how to install it on centos? thanks.

2 2

Download Centos 7.2 64 bit
by JEYARAJ 02 Nov '16

02 Nov '16

Hi All, How to download the Centos 7.2 64 bit.. If you see anyone please send me the link. Urgent. Regards, Jeyaraj. M

3 3

how to install amule in CertOS 7?
by Zhao Xiaoqi 01 Nov '16

01 Nov '16

I could find the amule package in CertOS7, is anyone know this? Thanks. Xiaoqi

1 0

Airprint to old printer using Centos server
by Gary Stainburn 31 Oct '16

31 Oct '16

Hi folks, I've found a number of articles on setting up a Linux / CUPS / Avahi server to allow airprinting, but they all seem to be quite old. Two questions: 1) Does anyone have a link for a more recent article, hopefully specifically for Centos7. 2) I'm on a structured, VLAN network. Will I have to put a WIFI card into my Centos server to give it a presence on the WIFI before this will work? Gary

4 4

Cannot boot CentOS 7 VM after updating Host CentOS 7 Kernel
by Paul R. Ganci 31 Oct '16

31 Oct '16

I have something very strange that occurred. After updating the kernel on my host CentOS 7 Dell 2950iii I have found that one of my CentOS 7 guest VMs will no longer boot... it just stops at the grub prompt (a second VM functions just fine). I have no idea why this problem occurred and have been unable to fix it. On google I have found several suggestions as to how to repair grub but so far none have worked. What I have found so far is this: grub> ls (hd0) (hd0,msdos2) (hd0,msdos1) grub> ls -l (hd0,1) (hd0,msdos2) (hd0,msdos1) Partition hd0,1: Filesystem type xfs, UUID 250008ab-9fde-4892-a8b7-a38882b1a1448 - Partition start at 1024KiB - Total size 512000Kib Partition hd0,msdos2: No known filesystem detected - Partition start at 513024KiB - Total size 12069888KiB Partition hd0,msdos1: Filesystem type xfs, UUID 250008ab-9fde-4892-a8b7-a38882b1a1448 - Partition start at 1024KiB - Total size 512000Kib So it appears that (hd0,1) and (hd0,msdos1) are the same partition containing the boot directory contents grub> set root=(hd0,1) grub> ls -l / DIR 20151002231139 grub/ DIR 20161013022100 grub2/ 10190975 20151219235512 initrd-plymouth.img 40655493 20150403032637 initramfs-0-rescue-6494b5d98adc4f66b0cf4c19a0f6ab66.img 4902656 20150403032703 vmlinuz0-rescue-6494b5d98adc4f66b0cf4c19a0f6ab66 252739 20161010232025 symvers-3.10.0-327.36.2.el7.x86_64.gz 29666884 20161013012551 initramfs-3.10.0-327.36.2.el7.x86_64.img 2965270 20161010231818 System.map-3.10.0-327.36.2.el7.x86_64 126431 20161010231818 config-3.10.0-327.36.2.el7.x86_64 5157936 20161010231819 vmlinuz-3.10.0-327.36.2.el7.x86_64 18119089 20161013022032 initramfs-3.10.0-327.36.2.el7.x86_64kdump.img Is that (hd0,msdos2) the root partition? If is, has it become corrupted somehow? Can I get this system to boot somehow so that I might fix the grub configuration? So far I have tried something along these lines with out success: grub> set root=(hd0,msdos2) grub> linux (hd0,1)/vmlinuz-3.10.0-327.36.2.el7.x86_64 root=(hd0,msdos2)/ grub> initrd initrd-plymouth.img grub> boot I just get this error: [ 2.128131] No filesystem could mount root, tried: [ 2.129038] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(1,0) [ 2.130537] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 3.10.0-327.36.2.el7.x86_64 #1 [ 2.132017] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 {remainder of stack dump} Does anyone have any ideas as to 1.) How to fix the problem? 2.) Why the problem occurred in the first place? 3.) How to go about debugging the problem? I would really like to know how this problem could have occurred on the 1 VM but the Host and 2nd Guest are just fine? Thanks for your help. -- Paul (ganci(a)nurdog.com) Cell: (303)257-5208

4 10

Disk near failure
by Alessandro Baggi 30 Oct '16

30 Oct '16

Hi list, on my workstation I've a md raid (mirror) for / on md1. This raid has 2 ssd as members (each corsair GT force 120GB MLC). This disks are ~ 5 years old. Today I've checked my ssds smart status and I get: ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE 1 Raw_Read_Error_Rate 0x000f 100 100 050 Pre-fail Always - 0/4754882 5 Retired_Block_Count 0x0033 100 100 003 Pre-fail Always - 0 9 Power_On_Hours_and_Msec 0x0032 000 000 000 Old_age Always - 17337h+11m+24.440s 12 Power_Cycle_Count 0x0032 099 099 000 Old_age Always - 1965 171 Program_Fail_Count 0x0032 000 000 000 Old_age Always - 0 172 Erase_Fail_Count 0x0032 000 000 000 Old_age Always - 0 174 Unexpect_Power_Loss_Ct 0x0030 000 000 000 Old_age Offline - 780 177 Wear_Range_Delta 0x0000 000 000 000 Old_age Offline - 3 181 Program_Fail_Count 0x0032 000 000 000 Old_age Always - 0 182 Erase_Fail_Count 0x0032 000 000 000 Old_age Always - 0 187 Reported_Uncorrect 0x0032 100 100 000 Old_age Always - 0 194 Temperature_Celsius 0x0022 033 042 000 Old_age Always - 33 (Min/Max 15/42) 195 ECC_Uncorr_Error_Count 0x001c 120 120 000 Old_age Offline - 0/4754882 196 Reallocated_Event_Count 0x0033 100 100 003 Pre-fail Always - 0 201 Unc_Soft_Read_Err_Rate 0x001c 120 120 000 Old_age Offline - 0/4754882 204 Soft_ECC_Correct_Rate 0x001c 120 120 000 Old_age Offline - 0/4754882 230 Life_Curve_Status 0x0013 100 100 000 Pre-fail Always - 100 231 SSD_Life_Left 0x0013 100 100 010 Pre-fail Always - 0 233 SandForce_Internal 0x0000 000 000 000 Old_age Offline - 6585 234 SandForce_Internal 0x0032 000 000 000 Old_age Always - 6885 241 Lifetime_Writes_GiB 0x0032 000 000 000 Old_age Always - 6885 242 Lifetime_Reads_GiB 0x0032 000 000 000 Old_age Always - 6244 The second ssd has very similar values. SSD_Life_Left is 0 since ~ 1years ago for each ssd. Today these disks are working without problems: # hdparm -tT /dev/md1 /dev/md1: Timing cached reads: 26322 MB in 2.00 seconds = 13181.10 MB/sec Timing buffered disk reads: 1048 MB in 3.00 seconds = 349.00 MB/sec # hdparm -tT /dev/sda /dev/sda: Timing cached reads: 26604 MB in 2.00 seconds = 13322.82 MB/sec Timing buffered disk reads: 1140 MB in 3.00 seconds = 379.87 MB/sec # hdparm -tT /dev/sdb /dev/sdb: Timing cached reads: 26258 MB in 2.00 seconds = 13148.38 MB/sec Timing buffered disk reads: 1140 MB in 3.00 seconds = 379.70 MB/sec # dd if=/dev/zero of=file count=2000000 2000000+0 record in 2000000+0 record out 1024000000 byte (1,0 GB) copied, 2,36335 s, 433 MB/s My ssds are failing? Thanks in advance.

8 22

Stupid vim question
by Alice Wonder 30 Oct '16

30 Oct '16

on very large files, vim will condense display - e.g. +-- 8 lines: static inline void php_openssl_rand_add_timeval() -------------------------------------------------------------------------------------------------------------------------------------------------- #endif +-- 29 lines: static int php_openssl_load_rand_file(const char * file, int *egdsocket, int *seeded) --------------------------------------------------------------------------------------------------------------- +-- 22 lines: static int php_openssl_write_rand_file(const char * file, int egdsocket, int seeded) ---------------------------------------------------------------------------------------------------------------- +-- 45 lines: static EVP_MD * php_openssl_get_evp_md_from_algo(zend_long algo) { ---------------------------------------------------------------------------------------------------------------------------------- +-- 42 lines: static const EVP_CIPHER * php_openssl_get_evp_cipher_from_algo(zend_long algo) { -------------------------------------------------------------------------------------------------------------------- How do I get it to stop doing that? It didn't use to do that as far as I remember, seems to be new to me in CentOS 7 - either that or I previously had something in me .vimrc that prevented it and I just forgot. I have tried searching but I just can't seem to get the proper search term to produce relevant results. using it in a terminal shell, the only way I ever use it.

3 6

Squid question
by paul.greene.va 29 Oct '16

29 Oct '16

I'm having issues getting squid to send traffic through a specific upstream gateway. I need for a MS WSUS server and a Symantec Endpoint Protection Manager to get through a squid proxy to get out to Microsoft and Symantec respectively to get MS patches and Symantec DAT files. The traffic needs to go through the squid proxy, through a firewall, and through an upstream McAfee gateway server. If it tries to take a path different than that upstream gateway to get out to the internet, it'll get dropped. However, once the traffic goes through the proxy, it tries to go directly to the vendor website and not go through the McAfee gateway, and therefore is getting blocked by the firewall. The traffic never reaches the McAfee gateway. If I configure a browser to use the proxy server and browse to some websites, it can get to http sites, but not https sites. Port 443 is what isn't getting through. I thought this line in squid.conf was supposed to send the traffic to an upstream cache_peer parent gateway, but I could easily be misunderstanding what its supposed to do. (I'm pretty new with squid) cache_peer <upstream gateway IP address> parent 8080 3130 proxy-only no-query no-netdb-exchange default login=<username>:<password> The Safe_ports and SSL_ports is the squid.conf default settings, and include both port 443 and port 80 traffic Thanks, PG

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss