Discuss

discuss@lists.centos.org

34753 discussions

Re: [CentOS] unpatched local root on centos 5?
by Eero Volotinen 14 Aug '15

14 Aug '15

Sound very weird, that supported os is not patched. is the list of non patched security issues in rhel 5 / centos 5 -- Eero 2015-08-14 7:59 GMT+03:00 Mark Milhollan <mlm(a)pixelgate.net>: > On Thu, 13 Aug 2015, Eero Volotinen wrote: > > >Looks like this affects on centos 5 and is unpatched like on rhel 5? > > >Trying to test if this affects on centos 5. > > It does. Red Hat won't patch RHEL 5 so it is likely there will be no > patch from CentOS for CentOS 5 either. > > > /mark >

2 1

Skype Issue
by Mark LaPierre 14 Aug '15

14 Aug '15

Hey Y'all, Seems my Skype installation has stopped working. I have skype-4.3.0.37-2.el6.i686.rpm from the Nux repo. [mlapier@peach ~]$ skype %U (<unknown>:27070): Gtk-WARNING **: Unable to locate theme engine in module_path: "clearlooks", Gtk-Message: Failed to load module "canberra-gtk-module" Gtk-Message: Failed to load module "pk-gtk-module" I checked the yum log. Other than the 6.7 upgrade these are all the transactions I see. Aug 09 20:32:28 Updated: firefox-38.1.1-1.el6.centos.x86_64 Aug 11 20:58:39 Updated: firefox-38.2.0-4.el6.centos.x86_64 Aug 11 20:58:40 Updated: flash-plugin-11.2.202.508-release.x86_64 Aug 11 20:58:49 Updated: google-chrome-stable-44.0.2403.155-1.x86_64 Aug 12 17:29:49 Installed: opus-1.1-1.el6.x86_64 The issue did not begin with the 6.7 upgrade. Does anyone have any idea how to fix the issue? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

2 2

unpatched local root on centos 5?
by Eero Volotinen 13 Aug '15

13 Aug '15

Hi List, Looks like this affects on centos 5 and is unpatched like on rhel 5? https://access.redhat.com/articles/1537873 Trying to test if this affects on centos 5. can someone compile this exploit on centos 5? https://www.qualys.com/research/security-advisories/roothelper.c any ideas how to compile it on centos 5? -- Eero

2 4

CentOS-6, SELInux, Ruby-on-Rails, Passenger and Kernel-2.6.32
by James B. Byrne 13 Aug '15

13 Aug '15

We run a project administration system web application call 'Redmine'. I have been trying for ages, without success, to get SELinux and Passenger -- essentially a fast-cgi replacement Apache module built specifically for Rails -- to run together. I have found that the latest versions of the Passenger Apache module are supposed to work on CentOS-6, but not with the stock kernel. See: https://www.phusionpassenger.com/library/walkthroughs/deploy/ruby/ownserver… My questions are: Are there really really grave implications of using the kernel-ml form epel repo to get a sufficiently modern kernel to finally get Passenger and SELinux to work together? And are those implications more grave than simply disabling SELinux on that server entirely, which is the only other choice. TIA -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

CentOS-announce Digest, Vol 126, Issue 6
by centos-announce-request＠centos.org 13 Aug '15

13 Aug '15

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2015:1600 CentOS 6 iwlwifi_dup Enhancement Update (Johnny Hughes) 2. CEEA-2015:1600 CentOS 6 mac80211_dup Enhancement Update (Johnny Hughes) 3. CEEA-2015:1600 CentOS 6 cfg80211_dup Enhancement Update (Johnny Hughes) 4. CEBA-2015:1596 CentOS 7 filesystem FASTTRACK BugFix Update (Johnny Hughes) 5. CEBA-2015:1597 CentOS 7 perl-Test-Harness FASTTRACK BugFix Update (Johnny Hughes) 6. CEBA-2015:1594 CentOS 7 perl-Test-Pod-Coverage FASTTRACK BugFix Update (Johnny Hughes) 7. CEBA-2015:1595 CentOS 7 perl-Test-Warn FASTTRACK BugFix Update (Johnny Hughes) 8. CEBA-2015:1601 CentOS 7 python-sphinx FASTTRACK BugFix Update (Johnny Hughes) 9. CEEA-2015:1599 CentOS 7 setup FASTTRACK Enhancement Update (Johnny Hughes) 10. CEBA-2015:1598 CentOS 7 xz FASTTRACK BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 12 Aug 2015 13:31:48 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:1600 CentOS 6 iwlwifi_dup Enhancement Update Message-ID: <20150812133148.GA16901(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:1600 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: c3d93d0fd54c593609e5993911c7823941600cb620758117f49dcb454aa75ed5 kmod-iwlwifi_dup-0.1_rh1-1.el6_6.i686.rpm e444efaf101ddcb1fc26eb28646420fa26f42b41466f811cf889db718420c12c kmod-iwlwifi_dup-firmware-0.1_rh1-1.el6_6.i686.rpm x86_64: bf0db204c599967070d41209240eea643e2e03131f730be92a79db20a76b2b1d kmod-iwlwifi_dup-0.1_rh1-1.el6_6.x86_64.rpm e03a1f36e1a367558bc59ba7e0072dc0dc919b23ac761d456827489446aa4fc6 kmod-iwlwifi_dup-firmware-0.1_rh1-1.el6_6.x86_64.rpm Source: c2d2378c6fc32cf978c3597fd5c2d3f87fffffde0eb305685e7423eae643a337 iwlwifi_dup-0.1_rh1-1.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Wed, 12 Aug 2015 13:32:01 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:1600 CentOS 6 mac80211_dup Enhancement Update Message-ID: <20150812133201.GA16978(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:1600 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: d49f85c2013498475e53ac5270c7e582e603eb4ed4d653946aa0143126e8c610 kmod-mac80211_dup-0.1_rh1-1.el6_6.i686.rpm x86_64: 3285e98c5797bef7fc06d20850fc7f3766d2fdec0348a95085d8780794fb3c7d kmod-mac80211_dup-0.1_rh1-1.el6_6.x86_64.rpm Source: 07fdfe64fab5291f1bd3d79ed1a9019670364fb4bdd43d9c2184054fa5a8ab89 mac80211_dup-0.1_rh1-1.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Wed, 12 Aug 2015 13:32:35 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:1600 CentOS 6 cfg80211_dup Enhancement Update Message-ID: <20150812133235.GA17182(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:1600 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-1600.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 6901cdee5ee315b81904f3883eff2aad14b0da4533097c566816e97ae64e8773 kmod-cfg80211_dup-0.1_rh1-1.el6_6.i686.rpm x86_64: 067549365623676b6b63b781a43203fa24ff9e50f134f1ffce7bdeeb8ec048f7 kmod-cfg80211_dup-0.1_rh1-1.el6_6.x86_64.rpm Source: 6043001ba4f5d6b8ebf4629495b7b2a5aff150800c8642190f52c1715d1d1e06 cfg80211_dup-0.1_rh1-1.el6_6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Wed, 12 Aug 2015 14:58:49 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1596 CentOS 7 filesystem FASTTRACK BugFix Update Message-ID: <20150812145849.GA22520(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1596 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1596.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 865119d716a0e4d4f57b2d075f242fbf11d6af440f24ce052ae568e0f369d685 filesystem-3.2-20.el7.x86_64.rpm Source: 0063f44da1df467e4b1d94cc3aed08d67a86d820fe7c2d409f05530740305345 filesystem-3.2-20.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Wed, 12 Aug 2015 14:59:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1597 CentOS 7 perl-Test-Harness FASTTRACK BugFix Update Message-ID: <20150812145914.GA22589(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1597 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1597.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 3414c239f0b991dad77b3b6652e1a5f6c54d0931ad69fbe4286223e34c6b1a40 perl-Test-Harness-3.28-3.el7.noarch.rpm Source: eaf5fbcde0700d430249fb53f62e99b98e8918f836f6b852cc94c38044187356 perl-Test-Harness-3.28-3.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Wed, 12 Aug 2015 14:59:27 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1594 CentOS 7 perl-Test-Pod-Coverage FASTTRACK BugFix Update Message-ID: <20150812145927.GA22663(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1594 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1594.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: a6a0ad6e5b82f523a4ad42484442be9d44819884ca99a1d47b64c404dd3e2bca perl-Test-Pod-Coverage-1.08-21.el7.noarch.rpm Source: 9fa26cd237299d7b24f69a806ee8ee7f4eb2c2a7792fc791d9fab38e326c1ab9 perl-Test-Pod-Coverage-1.08-21.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Wed, 12 Aug 2015 15:04:14 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1595 CentOS 7 perl-Test-Warn FASTTRACK BugFix Update Message-ID: <20150812150414.GA22952(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1595 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1595.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: bea9cf656b7e455702f1a78fe3b975470f8ddd08a3798e82765a3849cb0eb7c3 perl-Test-Warn-0.24-6.el7.noarch.rpm Source: 3d90517974a699b2b34211838d3c0a666688f3e29ae4de7a9a0d8c513a05476a perl-Test-Warn-0.24-6.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Wed, 12 Aug 2015 15:06:08 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1601 CentOS 7 python-sphinx FASTTRACK BugFix Update Message-ID: <20150812150608.GA23068(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1601 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1601.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 49faa3aca2a576c3b762c1b4ed3f5783b4df8709f8e1a803fe52bc2d8b2889b8 python-sphinx-1.1.3-9.el7.noarch.rpm c40513326310db2848e57c8a2bdb5dea308056139d80f5df408546974b907ed5 python-sphinx-doc-1.1.3-9.el7.noarch.rpm Source: 4a7e15b41b98eb32d32d1781f40728b1f496e47febc881a96d976886a29b7e1c python-sphinx-1.1.3-9.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 9 Date: Wed, 12 Aug 2015 15:06:25 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEEA-2015:1599 CentOS 7 setup FASTTRACK Enhancement Update Message-ID: <20150812150625.GA23144(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2015:1599 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-1599.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 182800e0f99aa74e9c95c115809cf7955631ce8cfae21d3db77d5435146e894e setup-2.8.71-6.el7.noarch.rpm Source: 802565e8637c8945a1d7a96b1466c7b41aed1c2ff9829104457166cac4db7a74 setup-2.8.71-6.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 10 Date: Wed, 12 Aug 2015 15:06:38 +0000 From: Johnny Hughes <johnny(a)centos.org> To: centos-announce(a)centos.org Subject: [CentOS-announce] CEBA-2015:1598 CentOS 7 xz FASTTRACK BugFix Update Message-ID: <20150812150638.GA23231(a)n04.lon1.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2015:1598 Upstream details at : https://rhn.redhat.com/errata/RHBA-2015-1598.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d1f3c585b5e1d389d7aa761c813f8d343da761dba95c3a85bc60262537067569 xz-5.1.2-12alpha.el7.x86_64.rpm ba3f0edd21700bc1ce3541605cf6588e9379b3c4f879aab42506f275ba2d5d7d xz-compat-libs-5.1.2-12alpha.el7.i686.rpm be109d65935feff7d6aabc72f81291966de3d5cb7f0b8e51f5a7c256127bc13a xz-compat-libs-5.1.2-12alpha.el7.x86_64.rpm 14a46d008f064e835e2bf24e06537d5ae8885f2eda8586c8c93b9f77c8cc1b8e xz-devel-5.1.2-12alpha.el7.i686.rpm e460b6cb05318865f1ad9b7a4651de1f15d381bc7b574717bc0a6f81a7e23b12 xz-devel-5.1.2-12alpha.el7.x86_64.rpm 0234318738c2f01ab1d4d1851971f25006c032b3e8bbe55419892735f372634f xz-libs-5.1.2-12alpha.el7.i686.rpm 33e16b7290d911e6bcdcec76eea38d03a17d65e289267348036d7be0dd615b3b xz-libs-5.1.2-12alpha.el7.x86_64.rpm 82cca99f369b3d8989f5b6f903b5a83018bb5fc8a88443cb7cc53fbb47b48b6f xz-lzma-compat-5.1.2-12alpha.el7.x86_64.rpm Source: 4eaf1fbf222390f94fd3a61c17c2b1443394cc53750f30039818c51905740c78 xz-5.1.2-12alpha.el7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 126, Issue 6 ***********************************************

1 0

OT: bareos (F/OSS fork of bacula)
by m.roth＠5-cent.us 12 Aug '15

12 Aug '15

I'm trying to get this up and running, and have run into something that isn't clear in the docs: volumes are part of pools, I get, but I see that the limit to the number of volumes is 100. Is this a drop-dead can't-go-beyond? If I have > 100 clients to back up, do they all go to one volume, or to individual volumes? mark

2 1

Re: [CentOS] C6.7 evolution to cyrus imap(s) fails
by Richard 12 Aug '15

12 Aug '15

> Date: Wednesday, August 12, 2015 22:22:22 +0100 > From: Dr J Austin <ja(a)maui.jaa.org.uk> > > > Many thanks to Alexander, Richard, Jonathan and m.roth > > The Magic incandation ! > > portrelease dovecot > service cyrus-imapd restart > > [root@maui:/etc/named]$ cat /etc/portreserve/dovecot > imap > imaps > pop3 > pop3s > > My total ignorance of portrelease/portreserve has been a bit > of a problem! > > Now to fix it permanently and get evolution back in one piece > > But why was cyrus able to use imap, pop3 & pop3S but not imaps? > > John > > Look in /etc/portreserve/ and look at the files there (both the names on the files and their contents). That will give you a sense of what services are covered. Your previous netstat output indicated that portreserve was "holding" both 143 (imap) and 993 (imaps). Since we were focusing on imap I didn't ask for netstat for other ports, so don't know what else it might have been "holding". [snip ... ] > ------------------------------------------------------------------ > -- >> What did you configure in your DNS and set in /etc/hosts? Please >> provide last one. >> > I am running a DNS server on maui that is updated by DHCP as > required > The zone file looks like this at the moment > IPs between range 148.197.29.129 148.197.29.253 ; > are dynamic, the rest are fixed > > [root@maui:/var/named/chroot/var/named/dynamic]$ cat > jaa.org.uk.zone > $ORIGIN . > $TTL 86400 ; 1 day > jaa.org.uk IN SOA maui.jaa.org.uk. ja.jaa.org.uk. ( > 200714349 ; serial > 7200 ; refresh (2 hours) > 300 ; retry (5 minutes) > 604800 ; expire (1 week) > 60 ; minimum (1 minute) > ) > NS maui.jaa.org.uk. > MX 10 maui.jaa.org.uk. > $ORIGIN jaa.org.uk. > $TTL 43200 ; 12 hours > android-54f4af51ba23308b A 148.197.29.251 > TXT > "31d805ae3efb12d6a37351a28b581c9142" > $TTL 86400 ; 1 day > draytek A 148.197.29.254 > $TTL 43200 ; 12 hours > ferrari A 148.197.29.183 > TXT > "310fc27c6e505544502e0a12fb2192d64a" > $TTL 86400 ; 1 day > maui A 148.197.29.5 > $TTL 43200 ; 12 hours > paxos A 148.197.29.159 > TXT > "315dff374b9faae33e5457b537bb671bd9" > $TTL 86400 ; 1 day > zyxel A 148.197.29.2 > ------------------------------------------------------------------- > [root@maui:/etc/named]$ cat /etc/hosts > 127.0.0.1 localhost.localdomain localhost maui ># 127.0.0.1 localhost.localdomain localhost > ::1 maui.jaa.org.uk maui localhost6.localdomain6 localhost6 > 148.197.29.5 maui.jaa.org.uk maui > I'm not certain where that's coming from. That will all work internally (assuming internal consistency), but the outside world has a rather different view. The information returned by whois for jaa.org.uk (which has your name as registrant) shows: Name servers: ns.hosteurope.com ns2.hosteurope.com as the nameservers for that domain. If you do a "dig" against either of those servers for your maui host: dig @ns.hosteurope.com maui.jaa.org.uk you get: maui.jaa.org.uk. 14400 IN A 213.152.52.233 An rDNS lookup on that IPnumber returns: 233.52.152.213.in-addr.arpa. 56246 IN PTR jaa.org.uk. while the rDNS on 148.197.29.5 returns: 5.29.197.148.in-addr.arpa. 50161 IN PTR adarwash1.ee.port.ac.uk which matches the forward lookup: adarwash1.ee.port.ac.uk. 86400 IN A 148.197.29.5 So, the outside world has a rather different view of what your ipnumber(s) are than you seem to be getting/using internally.

1 0

Re: [CentOS] C6.7 evolution to cyrus imap(s) fails
by Richard 12 Aug '15

12 Aug '15

------------ Original Message ------------ > Date: Wednesday, August 12, 2015 14:16:03 +0100 > From: Dr J Austin <ja(a)maui.jaa.org.uk> > > On Wed, 12 Aug 2015, Richard wrote: > >> >> I don't think that wireshark adds much to this. Unless you had a >> proxy in the middle, the "connection refused" responses already >> indicated that your connections were getting to the/a server, it's >> just refusing the connections. >> >> Connections by name, especially short forms, are suspect unless >> you can be very certain of how they are being resolved (i.e., what >> IPnumber you end up trying to connect to). There is no reason that >> using root to connect to port 993 would work when a normal user >> doesn't. An IMAP server either accepts the initial connection >> from a machine or not - it doesn't know or care what type of user >> is originating the connection. >> >> You may want to look into what you were able to connect to via: >> >> openssl s_client -connect maui:993 >> >> I'd start by looking up what "maui" resolves to. >> >> I just looked up maui.jaa.org.uk. It (currently) resolves to >> 213.152.52.233, not the 148.197 you seemed to be using above. I >> realize you may have some form of dynamic dns going here, but >> thought I'd mention it. >> >> >> Could you try (as root) two slightly different version of my >> earlier netstat commands: >> >> netstat -pnlA inet | egrep ':993|:143' >> >> netstat -pnlA inet6 | egrep ':993|:143' >> >> >> the addition of "A inet/inet6" will show whether it is listening >> via ipv4 (inet) or ipv6 (inet6) on the imap port > > > Hi Richard > > I have been working at trying to get cyrus to listen on > 148.197.29.5 interface instead of the localhost - I have failed > > Whenever I add things to /etc/cyrus.conf such as > imaps cmd="imapd -s" listen="[148.197.29.5]:imaps" prefork=1 > > [root@maui:~]$ service cyrus-imapd restart > > [root@maui:~]$ ps -ef|grep cyr > cyrus 22187 1 0 13:26 ? 00:00:00 idled > cyrus 28044 1 0 13:54 ? 00:00:00 > /usr/lib/cyrus-imapd/cyrus-master -d > cyrus 28048 1 0 13:54 ? 00:00:00 idled > cyrus 28050 28044 0 13:54 ? 00:00:00 imapd > cyrus 28051 28044 0 13:54 ? 00:00:00 pop3d > cyrus 28052 28044 0 13:54 ? 00:00:00 pop3d -s > cyrus 28053 28044 0 13:54 ? 00:00:00 lmtpd -a > cyrus 28054 28044 0 13:54 ? 00:00:00 imapd > cyrus 28055 28044 0 13:54 ? 00:00:00 pop3d > cyrus 28058 28044 0 13:54 ? 00:00:00 imapd > cyrus 28059 28044 0 13:54 ? 00:00:00 imapd > cyrus 28060 28044 0 13:54 ? 00:00:00 imapd > cyrus 28061 28044 1 13:54 ? 00:00:00 pop3d > root 28063 11348 0 13:54 pts/2 00:00:00 grep cyr > > Then no "imapd -s" appears > > I have tried all sorts of combinations in cyrus.conf but all fail > to LISTEN on 148.197.29.5 > > I have tried taking maui out of /etc/hosts > > My IP addresses are a bit odd - but I have been using > 148.197.29.0/24 for so long, ... > They have never escaped as far as I know! > client machine > ja@paxos ~ 1$ host 148.197.29.5 > 5.29.197.148.in-addr.arpa domain name pointer maui.jaa.org.uk. > ja@paxos ~ 2$ host maui > maui.jaa.org.uk has address 148.197.29.5 > > server machine > [root@maui:/etc/pki/cyrus-imapd]$ host maui > maui.jaa.org.uk has address 148.197.29.5 > ------------------------------------------------------------------ > ----- > With these lines in cyrus.conf > imap cmd="imapd" listen="imap" prefork=5 ># imaps cmd="imapd -s" listen="imaps" prefork=1 > imaps cmd="imapd -s" listen="[148.197.29.5]:imaps" prefork=1 > pop3 cmd="pop3d" listen="pop3" prefork=3 > pop3s cmd="pop3d -s" listen="pop3s" prefork=1 > sieve cmd="timsieved" listen="sieve" prefork=0 > > your two netstat lines show > [root@maui:/etc/pki/cyrus-imapd]$ netstat -pnlA inet | egrep > ':993|:143' > udp 0 0 0.0.0.0:143 0.0.0.0:* > 1465/portreserve > udp 0 0 0.0.0.0:993 0.0.0.0:* > 1465/portreserve > > [root@maui:/etc/pki/cyrus-imapd]$ netstat -pnlA inet6 | egrep > ':993|:143' > tcp 0 0 :::143 :::* LISTEN > 29460/cyrus-master > > ------------------------------------------------------------------ > -------- > With > imap cmd="imapd" listen="imap" prefork=5 > imaps cmd="imapd -s" listen="imaps" prefork=1 ># imaps cmd="imapd -s" listen="[148.197.29.5]:imaps" prefork=1 > pop3 cmd="pop3d" listen="pop3" prefork=3 > pop3s cmd="pop3d -s" listen="pop3s" prefork=1 > sieve cmd="timsieved" listen="sieve" prefork=0 > > [root@maui:/etc/pki/cyrus-imapd]$ netstat -pnlA inet | egrep > ':993|:143' > udp 0 0 0.0.0.0:143 0.0.0.0:* > 1465/portreserve > udp 0 0 0.0.0.0:993 0.0.0.0:* > 1465/portreserve > [root@maui:/etc/pki/cyrus-imapd]$ netstat -pnlA inet6 | egrep > ':993|:143' > tcp 0 0 :::993 :::* LISTEN > 30596/cyrus-master > tcp 0 0 :::143 :::* LISTEN > 30596/cyrus-master > > Why will cyrus not listen on 148.197.29.5 ? > > John My dns lookup (against either of the hosteurope.com nameservers listed for jaa.org.uk) is showing the following for the maui FQDN. maui.jaa.org.uk. 14400 IN A 213.152.52.233 and I'm getting: 5.29.197.148.in-addr.arpa. 80184 IN PTR adarwash1.ee.port.ac.uk for the rDNS of 148.197.29.5. As you can see from the netstat output, cyrus is listening (on all interfaces), but only on ipv6. It doesn't appear to be listening on any interface on ipv4. You do have portreserve "holding" the IMAP ipv4 ports. It's possible that it's not releasing them to cyrus. You may want to look at the man page for that application, and see that it knows about cyrus (mine is only set up to "hold" things for cups). I would also suggest looking at your yum.log to see if cyrus was updated with the .6->.7 update. If so, look for "rpmnew" or "rpmold" config files. In my experience it is uncommon for updates to move current configs out, unless they are incompatible with a new release (and when they do you should find an "rpmold"). I've never touched cyrus, so can't be of much help trying to (re-)configure it (but I'd look at portreserve first).

2 1

C6.7 evolution to cyrus imap(s) fails
by Dr J Austin 12 Aug '15

12 Aug '15

Hi I have been using evolution/cyrus/exim for 10 years - until yesterday! I upgraded to C6.7 and now there is no way I can find of connecting from evo to the cyrus imap(s) server [root@maui:~]$ ps -ef|grep imap cyrus 27768 1 0 15:21 ? 00:00:00 /usr/lib/cyrus-imapd/cyrus-master -d cyrus 27775 27768 0 15:21 ? 00:00:00 imapd -s cyrus 27779 27768 0 15:21 ? 00:00:00 imapd cyrus 27781 27768 0 15:21 ? 00:00:00 imapd cyrus 27782 27768 0 15:21 ? 00:00:00 imapd cyrus 27783 27768 0 15:21 ? 00:00:00 imapd cyrus 27933 27768 0 15:36 ? 00:00:00 imapd cyrus 28048 27768 0 15:46 ? 00:00:00 imapd evo is running on a fully updated F22 machine, cyrus/exim on C6.7 k-9 mail on a tablet and a mobile no longer connect even tried thunderbird which also would not connect When trying to connect with evo I get Failed to open folder The reported error was "Could not connect to 148.197.29.5: Connection refused" If I try to change things by editing the "Recieving Email" menu ie by changing the "Encryption method" from "SSL on a dedicated port" 993 to "No encryption" it still fails In fact just hitting Authentication "Check for supported types" gives Failed to query server for a list of supported authentication mechanisms. Could not connect to 148.197.29.5: Connection refused wireshark shows just two lines using tcp.port==993 filter Unfortunately this does not mean much to me! 124 3.276582000 148.197.29.159 148.197.29.5 TCP 74 54564→993 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=71392019 TSecr=0 WS=128 125 3.276770000 148.197.29.5 148.197.29.159 TCP 60 993→54564 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 I have tried the following to no avail tcpdump -s 0 -w dump_file ssldump -a -A -H -d -r dump_file and selinux in permissive mode firewall off Help! John

5 17

Apache mod_perl cross site scripting vulnerability
by Proxy One 12 Aug '15

12 Aug '15

Hello, I've failed latest PCI scan because of CVE-2009-0796. Centos 6.7. The Red Hat Security Response Team has rated this issue as having moderate security impact and bug as wontfix. Explanation: The vulnerability affects non default configuration of Apache HTTP web server, i.e cases, when access to Apache::Status and Apache2::Status resources is explicitly allowed via <Location /perl-status> httpd.conf configuration directive. Its occurrence can be prevented by using the default configuration for the Apache HTTP web server (not exporting /perl-status). I haven't used <Location /perl-status> but Trustwave still finds me vulnerable. Evidence: Request: GET /perl- status/APR::SockAddr::port/"><script>alert('xss')</script> HTTP/1.1 Accept: */* User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Host: www.mydomain.com Content-Type: text/html Content-Length: 0 Response: HTTP/1.1 404 Not Found Date: Mon, 07 Aug 2015 11:10:21 GMT Server: Apache/2.2.15 (CentOS) X-Powered-By: PHP/5.3.3 Set-Cookie: PHPSESSID=kj6bpud7htmbtgaqtcwhsqk7j1; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre- check=0 Pragma: no-cache Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Body: contains '"><script>alert('xss')</script>' How can I get around this?

4 6

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss