Discuss

discuss@lists.centos.org

2 participants
34758 discussions

CentOS 6.8, Iptables 1.4.7, and MASQUERADE
by Robert Heller 21 Sep '16

21 Sep '16

I have a server that is also a firewall router at a public library with a fiber optic Internet connection. It is running kernel 2.6.32-642.4.2.el6.x86_64 (current CentOS 6.8) and Iptables 1.4.7 (current stock CentOS 6.8). I having trouble with Internet throughput. I am supposed to be getting 20Mbits down and 20MBits up, but I am not getting that. It has no problem doing 20MBits down, but for uploads of *large* files (using different protocols, such as ssh or http), the upload starts at 20MBits, but over time quickly slows down to about 3MBits. Speedtests claim I am getting about 20/20. I seem to be about to get 3Mbits *per transfer*, even if the transfers are concurrent and MRTG shows total throughput edging up to 6Mbits. What can possibly be going on. My ISP is not believing there is anything wrong on their end. About the only thing left is maybe some sort of weirdness with Iptables imposing some sort of I/O overhead, maybe related to the MASQUERADE postrouting. Does this even make sense? -- Robert Heller -- 978-544-6933 Deepwoods Software -- Custom Software Services http://www.deepsoft.com/ -- Linux Administration Services heller(a)deepsoft.com -- Webhosting Services

2 1

Re: [CentOS] ipset and blacklisting
by tdukes＠palmettoshopper.com 21 Sep '16

21 Sep '16

-------- Original Message -------- Subject: Re: [CentOS] ipset and blacklisting From: "Albert McCann" <mac358(a)newsguy.com> Date: Wed, September 21, 2016 5:34 am To: "'CentOS mailing list'" <centos(a)centos.org> How are you saving and reloading the ipsets over a reboot? > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of TE Dukes > Sent: Tuesday, September 20, 2016 9:46 PM > To: 'CentOS mailing list' <centos(a)centos.org> > Subject: [CentOS] ipset and blacklisting > > This is what ipset can do for traffic on a home server that's not wanted > on > a slow 6MB DSL connection. > > http://palmettoshopper.com/httpd_traffic.jpg > > I only use my home server for zoneminder, testing my commercial website > and > streaming movies. > > Got tired of hackers looking for files that don't exist on my home server > and non-complying robots. > > Check the drop in bandwidth. > > Setup up a redirect to the NSA webite. They can deal with the hackers. > > HTH > I do a: ipset save blacklist, and service ipset save I use three scripts: access_log_ips.sh #!/bin/bash ############################################## cp /root/blacklist /root/blacklist.old sed -e 's/$[0-9]\+\.[0-9]\+\.[0-9]\+\.[0-9]\+$.*$/\1/' -e t -e d /var/log/httpd/access_log | sort | uniq > blacklist exit 0 import_blacklist.sh #!/bin/bash ############################################## sed s/,/\\n/g /root/blacklist |while read i; do ipset add blacklist $i /usr/sbin/ipset save blacklist # rm -f /root/blacklist.old done and most importantly so I don't ban myself, ipset_whitelist.sh #!/bin/bash ############################################## ipset del blacklist 192.168.1.102 ipset del blacklist 192.168.1.110 ipset del blacklist 107.161.163.5 ipset del blacklist 24.168.204.125 ipset del blacklist 107.161.163.4 ipset del blacklist 66.87.133.247 ipset del blacklist 107.161.163.10 ipset del blacklist 192.240.96.67 ipset del blacklist 107.161.163.8 ipset del blacklist 192.240.96.133 ipset del blacklist 127.0.0.1 ipset save blacklist service ipset save exit 0 I combined the three in another script that runs 4 times a day.

2 1

ipset and blacklisting
by TE Dukes 21 Sep '16

21 Sep '16

This is what ipset can do for traffic on a home server that's not wanted on a slow 6MB DSL connection. http://palmettoshopper.com/httpd_traffic.jpg I only use my home server for zoneminder, testing my commercial website and streaming movies. Got tired of hackers looking for files that don't exist on my home server and non-complying robots. Check the drop in bandwidth. Setup up a redirect to the NSA webite. They can deal with the hackers. HTH

2 1

OT: I fixed and it wasn't broken
by TE Dukes 21 Sep '16

21 Sep '16

Hello, I fixed it real good. I bought a Lenovo TS130 ThinkServer about 5 or 6 years ago. Folks told me, RHEL/CentOS would not run on this server. I bought it and installed it and it works fine. So, a couple weeks ago, I decided to upgrade the memory. At the time, the bios only supported 16GB but it would be upgradable to 32GB. So, I started adding memory and figured I needed to upgrade the bios so I could get to 32GB. I got through 2 updates with rufus 2.11 and FreeDOS. Both installed with no problems. On the third upgrade, my USB flash drive is no longer recognized as a boot device. The fourth bios upgrade is a shell script run from RHEL which the support was also added later. I tried that first but it didn't work. Didn't get any errors, it just didn't work. Lenovo says use rufus 2.2 which supports MS-DOS. I can't get that version to create a bootable USB drive. It fails. I have tried .iso images and adding the bios files to it for a bootable DVD/CD. It boots but can't find the bios files. A dir of the DVD shows the flash.bat. I've tried plopt and a couple others. I'm stuck!! Any help would be greatly appreciated.

2 2

CM8828 sound chip ??
by Alice Wonder 20 Sep '16

20 Sep '16

Need a PCI-E sound card with low profile bracket, optical out, and one of those mini-din connectors that fans out into various analog connectors. Only card I have been able to find so far uses a CM8828 chipset. Looks like that chipset is natively supported by the kernel alsa driver starting in 3.17 kernel but CentOS 7 uses 3.10 kernel. I did not see a package that was obviously for that chipset in elrepo. Has that driver been backported into the RHEL/CentOS 7 kernel, and if not, is it in elrepo? Worst case scenario I suppose it may be possible to port the driver like many of the elrepo drivers have been, but not sure I want to buy hardware based on a "may be possible" Thanks for any comments. -- -=- Sent my from my laptop, may not be able to respond timely

2 1

CentOS-announce Digest, Vol 139, Issue 5
by centos-announce-request＠centos.org 20 Sep '16

20 Sep '16

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2016:1847 Important CentOS 7 kernel Security Update (Johnny Hughes) 2. CEEA-2016:1902 CentOS 7 i40e Enhancement Update (Johnny Hughes) 3. CEEA-2016:1902 CentOS 7 i40evf Enhancement Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 19 Sep 2016 15:43:06 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CESA-2016:1847 Important CentOS 7 kernel Security Update Message-ID: <20160919154306.GA24134(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2016:1847 Important Upstream details at : https://rhn.redhat.com/errata/RHSA-2016-1847.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 0132c81c464d7fd124c3cc05667cd1b946f02d5f290786a24b5b3f455475710a kernel-3.10.0-327.36.1.el7.x86_64.rpm 47ca54349833bf6552db64f7ebbcbc371dd75b202afc6112cd745fa5ea2e088a kernel-abi-whitelists-3.10.0-327.36.1.el7.noarch.rpm 7fb03457b08a16d9c164bc9d16430cbc2f711a43bc15e5d8d1218862fac8ad63 kernel-debug-3.10.0-327.36.1.el7.x86_64.rpm cf097685adfdda59acdbd1d31e0c71ab8e4fbec3d58276363b702ebd5d0c8da3 kernel-debug-devel-3.10.0-327.36.1.el7.x86_64.rpm 8640f0e8f41db56b9641a59e141dd26f7e406e2d04a3fe51bdfd010bf536ffb5 kernel-devel-3.10.0-327.36.1.el7.x86_64.rpm 752886f128cbcc5137b267a44b6b42ffa2f0c9834cbffb8f19377390bae22b64 kernel-doc-3.10.0-327.36.1.el7.noarch.rpm 5ec824e095fcd81cb8121ec4f847c741401a59144bff4d82ccd591cb86fd31c3 kernel-headers-3.10.0-327.36.1.el7.x86_64.rpm d6ab7934185ac95acb8ff96fdeec23c38d557d797dabe6777d0312d9d7e3981f kernel-tools-3.10.0-327.36.1.el7.x86_64.rpm 93d49a5f861ef0bde2c60ec3953049dba0e50b8602f8c06f7cc12372c4c45a8f kernel-tools-libs-3.10.0-327.36.1.el7.x86_64.rpm c12ac571e80595f53ca2a6c666cee9cb7c952f4a48c62952a0c4f312e3d54b5d kernel-tools-libs-devel-3.10.0-327.36.1.el7.x86_64.rpm e8b7e4161d9a26bd8c1433c3e0268077f927255da232d8b55a2b478e0899a7bb perf-3.10.0-327.36.1.el7.x86_64.rpm 6547fdd10604f70869da0ed0bf1aa4856e3cb9582b6801b208824864137f7d75 python-perf-3.10.0-327.36.1.el7.x86_64.rpm Source: fdaf7af158a3ced62921d8591f76638bfa77f3440900ed7e90639d275720ae68 kernel-3.10.0-327.36.1.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 2 Date: Mon, 19 Sep 2016 16:27:15 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:1902 CentOS 7 i40e Enhancement Update Message-ID: <20160919162715.GA25203(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:1902 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-1902.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: eb2c140f5b95878b359ca8c65274ea3b73020ddb3b4b797ed4f8499d332d4822 kmod-i40e-1.5.10_k-2.el7_2.x86_64.rpm Source: dd03d63ea0ec326bd696d5512605e6e9976d28dd09727a00f51c02080d6af1b8 i40e-1.5.10_k-2.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ Message: 3 Date: Mon, 19 Sep 2016 16:27:34 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2016:1902 CentOS 7 i40evf Enhancement Update Message-ID: <20160919162734.GA25261(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2016:1902 Upstream details at : https://rhn.redhat.com/errata/RHEA-2016-1902.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b0c104d05e884a57fd198f40c4c9bdc517e85576bbaed56f5c69d9a802158fd2 kmod-i40evf-1.5.10_k-2.el7_2.x86_64.rpm Source: f45125d39805d07bda253c88f62534a84168bcb64a88ec180f3f5655763e590e i40evf-1.5.10_k-2.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net Twitter: @JohnnyCentOS ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org https://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 139, Issue 5 ***********************************************

1 0

Centos 7: Notification of available updates in KDE?
by Frank Bures 19 Sep '16

19 Sep '16

Hi, I recently upgraded from CentOS 5 to 7. I have been running KDE. In version 5, if there was a pending update, an icon would appear in the panel, notifying about the update. There is no such icon in CentOS 7 - KDE 4. Is there a way to get this very convenient function? Thanks Frank -- <feeb(a)chem.toronto.edu>

2 1

Re: [CentOS] IPMI ??
by James B. Byrne 19 Sep '16

19 Sep '16

On Sun, September 18, 2016 19:08, Keith Keller wrote: > > Make sure you do not allow the IPMI's IP to be accessible > on a public network. Either keep the IP on a private network > (better), keep the IP firewalled to only certain IPs, > or change the admin password from the default. In order of importance: 1. ALWAYS change the administrative account credentials from their defaults to something reasonably difficult to infer. Supermicro allows one to select the user name of the administrative account in addition to setting the password. Change both. 2. Always restrict access to IPMI from specific source addresses. If you need to obtain access from from a different point of origin then set up one or more of the hosts having a permitted IP as an sshd/vpn service in advance and relay to the IPMI port from there. 3. Firewall any IPMI IP addresses at the gateway for all protocols and prevent any direct access to it whatsoever from the internet. 4. Where feasible place all IPMI IP addresses on their own private IP network ([192.168.X.0/24] or similar) and set up the gateway router internal interface to suit. -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

IPMI ??
by Alice Wonder 19 Sep '16

19 Sep '16

Never used IPMI in my life and while I thought it was cool when I heard about it, had no plans to. Just built a home server (while out of town) using a SUPERMICRO MBD-X10SLM+-F-O I put an nVidia 405 based video card in it but it may be bad. When I power it on, I get some beeps but they are different than the no memory beeps (I intentionally powered on w/o memory to hear those) and I think what may be happening is normal boot process but no video simply because the card (bought used) may be bad. Before I go and try to find a retailer that still carries VGA cables, is there a way via the boards IPMI interface (it has ethernet port just for that) to connect from my CentOS 7 laptop and see if the machine is normally powering on? I saw some IPMI packages exist for CentOS 7 but I don't know if this is what they are for. And it seems there are OpenIPMI and freeimpi packages. Are those just different ways of doing same thing or do they serve different purposes? Thanks. -- -=- Sent my from my laptop, may not be able to respond timely

6 12

An m4 question
by m.roth＠5-cent.us 17 Sep '16

17 Sep '16

Does anyone know what, if any, the limits are in m4 on the length of strings, such as in defines? That is, if I were to do define('LINUX', 'machine1, machine2,...machine120...') Is there a limit to how many I could put in that one define? mark

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss