- Discuss - lists.centos.org

Re: [CentOS] Create Virtual Machine via HTTP or FTP
by cbulist＠gmail.com 09 Feb '12

09 Feb '12

On 02/08/2012 06:42 PM, lists-centos wrote: > > ------------ Original Message ------------ >> Date: Wednesday, February 08, 2012 06:21:17 PM -0600 >> From: cbulist(a)gmail.com >> To: centos(a)centos.org >> Cc: >> Subject: [CentOS] Create Virtual Machine via HTTP or FTP >> >> Hi, >> >> I'm trying to create a Virtual Machine using Network Install mode >> (I tried HTTP and FTP). >> The HTTP/FTP server where the installation files are located is >> the Host Machine. >> The URL that I'm using is: http://192.168.1.104/inst and the >> Automatic detect option detects the OS without problem. >> When the installation starts I got an error: >> Unable to retrieve >> http://192.168.1.104/inst/images/install.img >> >> I tried different path but I always get the same error. >> >> The host machine is a Centos 6.2 (2.6.32.-220.el6.x86_64) >> >> I really appreciate any help with this problem. >> >> Thanks in advance, >> >> >> > Having just done an http-based net-install the other day and having > had to fix up where some files/directories were ... > > Look at the error log on the httpd server (in conjunction of your > document root, etc.). That generally makes things clear. I.e., it's > likely looking for that directory/file at a different level from > where you actually have it. > > > - Richard > >

1 0

sar -n DEV does not show bonded interfaces
by Sean Carolan 08 Feb '12

08 Feb '12

Anyone know how to get statistics on bonded interfaces? I have a system that does not use eth0-3, rather we have bond0, bond1, bond2. The members of each bond are not eth0-3, rather they are eth6, eth7, etc. I didn't see anything in the man page about forcing sar to collect data on specific network interfaces.

1 1

Centos 5.6 3ware raid 5
by Ken Smith 08 Feb '12

08 Feb '12

Hi, I've seen comments about the poor performance of these cards with raid 5 configs. I have an old card with 3 x 500G IDE drives connected in raid 5 and I'm getting around 10mb/s write performance. :-( I'm seeing high iowait figures at times and associated very high cpu load average figures, probably because, under load, everything is stacked up waiting for the disks to actually do something. A non-raid sata disk in the same machine manages 70mb/s Does anyone know what the performance is like if I used the 3ware just as an IDE controller? I could then switch to software raid5? Thanks Ken -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

Re: [CentOS] Preparing to convince to shift to non-propriety documents formats
by Dotan Cohen 08 Feb '12

08 Feb '12

On Wed, Feb 8, 2012 at 12:52, Boaz Rymland <boaz.rymland(a)gmail.com> wrote: > Hi Dotan, > > thanks for taking care of this. Attached is one such document. No problem at > all in making it public. It was pretty much so in the first place. > Here are the two bugs: Severe MS Office incompatibilities https://bugs.freedesktop.org/show_bug.cgi?id=45769 https://issues.apache.org/ooo/show_bug.cgi?id=118889 -- Dotan Cohen http://gibberish.co.il http://what-is-what.com

1 0

PCIe AER support in 5.5
by Baylis, Neil 08 Feb '12

08 Feb '12

I have a question about getting PCIe advanced error reporting to work on 5.5. The info I need to start with is the following: 1) Is PCIe Advanced Error Reporting (including error injections) known to work in 5.5? 2) What configuration options do I need to select in order to enable it? I'm using the following configs: CONFIG_ACPI=y CONFIG_PCI=y CONFIG_PCI_DIRECT=y CONFIG_PCI_MMCONFIG=y CONFIG_PCIEPORTBUS=y CONFIG_PCIEAER=y CONFIG_PCIE_ECRC=y CONFIG_PCIE_AER_INJECT=y CONFIG_PCI_DOMAINS=y CONFIG_PCI_MSI=y I also have the kernel boot parameter aerdriver.forceload=y With this config, I see that the relevant devices appear to support Advanced Error Reporting (visible in lspci -v output). However, when I attempt to inject errors to them the injections fail for various reasons. None of them (out of about a dozen candidate devices) succeeds. The aer_inject facility is currently the only means I have of testing this functionality. Note that on the same hardware with a RHEL-6 based (2.6.32) kernel, the injections work correctly. I need to make them also work with 5.5. Before I go and track down those various errors, I want to verify that I have the right kernel and that it's configured correctly. The required code seems to be present in the kernel. I suspect there's something going wrong during driver initialization and device probing. Once again, I need answers to these two specific questions: 1) Is PCIe Advanced Error Reporting (including error injections) known to work in 5.5? 2) What configuration options do I need to select in order to enable it? Thanks, Neil Baylis

1 0

Centosplus src rpm
by centos1＠iotti.biz 07 Feb '12

07 Feb '12

Hi all, I'm looking for latest centosplus kernel source rpm , which should be kernel-2.6.32-220.4.1.el6.centos.plus.src.rpm to date. Maybe someone could provide a link to it? Thank you Luigi

3 4

about major version upgrades
by Mihamina Rakotomandimby 07 Feb '12

07 Feb '12

Hi all, In http://goo.gl/Krjfh I read: +++++++++++++++++++++++ Upgrading from CentOS-4 or CentOS-5: We recommend everyone run through a reinstall rather than attempt an inplace upgrade from CentOS-4 or CentOS-5 +++++++++++++++++++++++ Do you ever now if that advice will be up to date for the 6 to 7 upgrade? What is the preferred upgrade process if some want to upgrade inplace? I mostly run virtual guest in a one-VM-per-service (MySQL, php, Mail, DNS, NFS/SMB) basis, with a main + spare physical machine. I'm installing 6.2 on our dev servers and try to pre-evaluate the amount of work when 7 will be released. -- RMA.

7 14

network intermitent, not sure if virtualization issue
by Bob Hoffman 07 Feb '12

07 Feb '12

I have a computer I am using to host a virtual machine. Centos 6, for both, 64 bit. The host machine's network connection seems fine. No problems. Trying to access the virtual machine is usually fine. but then, poof, ssh, http, ftp, all lose connection for about a minute. Then they come back up. I looked in all the logs on both machines, could find nothing, but not sure where to look. My question, would this be a setting on the VM as a webserver, some new centos 6 setting that just times out network when not in use? Or something that I did when I bonded my eth ports and bridged them? The bond covers the two onboard eth ports and one port from an add on network card. It is intermittent, seems to happen whenever, but service network restart on the webserver seems to fix it immediately, but it also just fixes itself too. is there some setting with centos 6 that must be changed to allow constant 'uptime' of the network?

2 5

SSD Drives
by Matt 07 Feb '12

07 Feb '12

Has anyone installed a high I/O application such as an email server on SSD drives? Was thinking about doing two SSD's in RAID1. It would solve my I/O latency issues but I have heard that SSD's wear out quickly in high I/O situations? Something like each memory location only has X many writes before its done. Just wandering if anyone has tested it and if newer SSD's are better about this?

6 8

Re: [CentOS] schily tools
by Dennis Clarke 07 Feb '12

07 Feb '12

> Let me comment some questions in one single mail: > >> My basic requirement with what I'm doing is to use standard tools and >> formats so that archives I write today can be readable in 10 years. > > Star becomes 30 in 4 months, any archive created since it's early > beginning in summer 1982 can still be read back. I have been using it for about a decade or more and anything I dumped has been a no brainer to retrieve, on any other OS or even architecture. >> I don't think there is any such general consensus. Are you reading >> something that favors Solaris/*bsd over GNU based systems? > > Schily tools (and in special star) implement support for Linux specific > extensions. This is what you do not get from gtar at all. So why do Linux > distros prefer gtar even though there is no Linux support? Is there any correlation between this and the warning message I see during a bootstrap like so : Warning: *** /usr/src/linux/include contains broken include files *** Warning: *** /usr/src/linux/include is not used this reason *** Warning: This may result in the inability to use recent Linux kernel interfaces Warning: *** linux/ext2_fs.h is not usable at all *** Warning: *** This makes it impossible to support Linux file flags *** You may try to compile using 'make COPTX=-DTRY_EXT2_FS' >> I doubt if they are as well maintained in linux distros as the GNU >> tool set, particularly in terms of having recent fixes backported into >> the versions carried in enterprise distros. > > gtar still did not fix bugs I reported in 1993 (e.g. the bug that > causes gtar to complain with "skipping to next header" even on it's > own archives). I am thus sure that star not not worse than gtar.... There seems to be something missing here. The subject was "schily tools" which is a lot more than star : root@rsync:/etc/default# ls /opt/schily/bin bosh cdrecord isodebug mdigest pfsh sfind star ustar bsh change isodump mkhybrid pxupgrade sformat star_sym ved btcflash compare isoinfo mkisofs readcd sgrow suntar ved-e calc copy isovfy mt sccs sh tar ved-w calltree count jsh od scgcheck smake tartest cdda2mp3 devdump label opatch scgskeleton smt termcap cdda2ogg gnutar lndir p scpio spatch translit cdda2wav hdump match pfbsh sdd spax udiff care to comment on any of these ? Certainly bosh needs a few words. dc -- -- http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x1D936C72FA35B44B +-------------------------+-----------------------------------+ | Dennis Clarke | Solaris and Linux and Open Source | | dclarke(a)blastwave.org | Respect for open standards. | +-------------------------+-----------------------------------+

2 1

Problems installing 6.2 on HP 8540w laptop
by david 07 Feb '12

07 Feb '12

Folks I've been trying to install Centos 6.2 on an HP Mobile Workstation 8540w. For various reasons, I have restarted the install many times.I use the 64-bit DVD image. The install chooses the following options a) Install with Basic Video Driver b) Skip the media scan c) Default Country, Language, Basic Storage Devices, change time zone d) Fresh Installation e) Configure network, (turn on wired Always Connect). f) Hit ALT-B to get back to examining storage devices. (I found I had to do this to get the HostName field filled in with the defaults from DHCP). [See below, frequent hangs here, in which case I power down and start again] g) If I get beyond the HostName stage, I choose the Virtual Host method and the install goes to completion successfully. The machine is connected with an ethernet cable to a LAN that is my internal NAT'ted system. The wireless button indicates disabled. I have been getting varied results with (presumably) the same starting conditions. In each case, I power off the machine, wait a few seconds, and power it on with the DVD image in place, choose "Install with basic video driver", and go through the same sequence. On many attempts, the installation sequence finishes just right, and the reboot gives me the expected root prompt. The USB mouse does not work during install, so I have to use the keyboard and touch-pad pointers. Among the anomalies I get are: 1) The first "Waiting for hardware to initialize..." is as far as it goes. Usually, it's done in a couple of seconds and goes on to a second hardware scan. Sometimes it hangs for over a minute before I give up. 2) The install appears to come to the end, the DVD is ejected, and I hit ENTER to reboot. The reboot starts and the screen goes dark. Power down and power up to boot from HD succeeds, but there was a flash of about three lines on the screen before the blue sliding bar appeared. 3) The install sequence hangs with the screen all blue except for the bottom line which reads "Running anaconda 13.21.149, the CentOS installer, Please wait ... Then after about a minute the screen blinks and goes dark. 4) The install sequence hangs on "Media Detected - Found local installation media", the CD drive idled down. 5) The install sequence hangs on "Examining Devices, Examining storage devices, with the blue slider almost at the left edge. Although this screen appears several times, the instance that hangs is the one after I've activated the wired network and hit Back. In most cases, if the system gets to the point of choosing the Virtual Host option, the installation completes successfully. So, -- is this an issue with the install procedure? Does it not treat this hardware correctly? Is there some other startup method or option I could use?

1 0

Re: [CentOS] rsync from rescue boot
by Les Mikesell 07 Feb '12

07 Feb '12

On Tue, Jan 31, 2012 at 4:01 PM, <m.roth(a)5-cent.us> wrote: >> On Tue, Jan 31, 2012 at 3:14 PM, Ljubomir Ljubojevic <office(a)plnet.rs> >> wrote: >>> On 01/31/2012 09:47 PM, Les Mikesell wrote: >>>> No, I'm trying to have rsync make an outbound connection over ssh from >>>> the rescue environment and getting what looks like an argument error >>>> from ssh. Ssh itself works and I can connect to the same target if I >>>> run it directly, and the exact same rsync command lines work from a >>>> normal host. Either rsync isn't setting up the remote command right, >>>> or ssh isn't allowing it and giving a bad error message. > <snip> >> I'm going the other direction (originating the command from the rescue >> host), but yes, tar works over ssh, and and ssh works by itself. The >> part that doesn't work is ssh when invoked by rsync, either by default >> or with an explicit '-essh' argument, and the error message looks like >> an ssh argument error so it doesn't even prompt for the password. > > AUGH! I think I have it: are the versions of rsync on the rescue instance > and the other server the same? It's not getting that far. I'm getting an error trying to start the local ssh. And at this point I have working VM from the tar copy, _except_ that it isn't matching a driver to the virtual NIC. I'm glad I'm not restoring a real backup with a dead machine here... Since I don't need this today, I think I'll try ReaR to see if it gets it right. It builds a bootable iso that is supposed to re-install on bare metal. -- Les Mikesell lesmikesell(a)gmail.com

2 2

CentOS-announce Digest, Vol 84, Issue 4
by centos-announce-request＠centos.org 07 Feb '12

07 Feb '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2012:0060 Moderate CentOS 5 openssl Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 7 Feb 2012 12:39:01 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0060 Moderate CentOS 5 openssl Update To: centos-announce(a)centos.org Message-ID: <20120207123901.GA1929(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0060 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0060.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 4e24142e043d6a22161c589ae9a3845255c85db2e5f6a4f25c91c87d424d61ef openssl-0.9.8e-20.el5_7.1.0.1.centos.i386.rpm 79e1510c19787a433c4c65d4887cc7ce4a8e511826ea2e714ce10ad59dcf398e openssl-0.9.8e-20.el5_7.1.0.1.centos.i686.rpm 77592fb450989aa7e2d4ebf311de0714ebed529ce58409bec2d718bee70d843c openssl-devel-0.9.8e-20.el5_7.1.0.1.centos.i386.rpm 832af976fbd8d82ee748ad2ac696697c56324c09af89990b8215f705f81feaef openssl-perl-0.9.8e-20.el5_7.1.0.1.centos.i386.rpm x86_64: 79e1510c19787a433c4c65d4887cc7ce4a8e511826ea2e714ce10ad59dcf398e openssl-0.9.8e-20.el5_7.1.0.1.centos.i686.rpm 41b00785ba5d7f79b686d0981f940fbd75f729110189eb693af3d10afccff71a openssl-0.9.8e-20.el5_7.1.0.1.centos.x86_64.rpm 77592fb450989aa7e2d4ebf311de0714ebed529ce58409bec2d718bee70d843c openssl-devel-0.9.8e-20.el5_7.1.0.1.centos.i386.rpm 163bf5f13d8a767deecc71b70b5e6237c7aa44208af0234980e78b66a2d21221 openssl-devel-0.9.8e-20.el5_7.1.0.1.centos.x86_64.rpm 4c3b5206a1fa079325f3b08f3ee81af5a9289f4521d5614d41e5501ad47aa976 openssl-perl-0.9.8e-20.el5_7.1.0.1.centos.x86_64.rpm Source: 27eb8351655accb27eb1380af188980bd9cec322834c93a0247ccdba44ca6b75 openssl-0.9.8e-20.el5_7.1.0.1.centos.src.rpm NOTE: This is a reissue of RPMS due to a md5sum error in shared document files that prevented the i686 and x86_64 RPMS to be installed simultaneously on an x86_64 machine. See http://bugs.centos.org/view.php?id=5489 for details. -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 84, Issue 4 **********************************************

1 0

new mysql installation, kinda stuck
by Bob Hoffman 07 Feb '12

07 Feb '12

I installed centos 6 as a webserver. It installed mysql. However, I guess I need mysql-server for me to use it for php and my website. I installed that. I am unable to give root a password and can go no further. I have tried mysql-secure-installation and I just get stuck at errors and no progression. I have tried mysqladmin -u root password <password> and the accompanying one that includes the hostname. ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES) I am unable to use mysql with php or do anything at all with it. It was strange it installed mysql but I guess this version is different and needs more packages to work within a webserver. all attempts at using mysql without mysql-server installed just results in nothing being found (like mysqld) and the like...so I had to install the server. In 5.x I could just use mysqladmin and add roots, delete anonymous, etc. However, this time I am stuck. I uninstalled mysql-server, the perl thing that comes with it, and mysql itself, then reinstalled them, that got me no where. gotta be something I am missing here. thanks for listening.

4 4

Re: [CentOS] install detecting disk as sdb not sda
by wwp 07 Feb '12

07 Feb '12

Hello Reindl, On Fri, 03 Feb 2012 23:19:26 +0100 Reindl Harald <h.reindl(a)thelounge.net> wrote: > > > Am 03.02.2012 23:02, schrieb wwp: > > An aspect of the problem w/ that behaviour change introduced w/ recent > > kernel updates, is that some mount mapping tables (fstab for instance) > > are broken if they rely on mount order (sda, hda, etc.) instead of > > device ID or label. > > if they are doing so they are broken all the time by design > > the last 10 years i saw no single machine not using LABEL and > the last 4 years no single one not using UUID, even in my RAID10 > i can plug any disk whereever i want Interesting.. my habits seem very old then :-). A long time after setting up my CentOS6, I decided to create a partition in extended area for my personal data, and to automount it at boot. This is done in fstab with: /dev/sda8 /storage/data ext4 noatime,nodiratime 0 0 (see how I rely on sda, silly me!) I grabbed the UUID from `lshal` and replaced it in fstab: UUID=005374e2_5c18_437d_84d8_8069868fe54e ext4 noatime,nodiratime 0 0 .. no luck, it doesn't automount at boot. I think I'll have to investigate or get another brain update. Regards, -- wwp

2 2

distributed storage/home-made cloud recommendations
by Boris Epstein 07 Feb '12

07 Feb '12

Hello listmates, This is not specifically CentOS-related - though I will probably execute this design on CentOS if I decide to do so. It will certainly be some kind of Linux. At any rate, here's my situation. I would like to build a fairly large storage solution (let us say, 100 TB). I want this solution to be distributed and redundant. I want to be able to lose part of the machines involved and still stay operational (the bigger part, the better). I would prefer to avoid having to buy large servers to accomplish this task. What I am soliciting here is thoughts, reports from experience, recommendations, etc. Thanks in advance. Boris.

8 18

where to download CENTOS 4.9 DVD image?
by mcclnx mcc 07 Feb '12

07 Feb '12

I want to CENTOS site and try to download version 4.9. I found all download sites ONLY have 4.8 NO 4.9. anyone know where can i download CENTOS 4.9 DVD image? Thanks.

3 2

Google video chat on 5.7 using the Fedora RPM
by E Westphal 07 Feb '12

07 Feb '12

I've tried to use the Google recommended RPM to enable video chat on 5.7. Get a long list of unsatisfied dependencies. Has anyone got this to work and not created a boat full of problems? Is this something that does work in 6 and just not in 5.7 - another reason to jump in and update? Please advise. Thanks.

2 1

gtar compression achieved
by Alan McKay 07 Feb '12

07 Feb '12

Hey folks, I looked at the man page and don't see any way to do this - maybe it is a function of the compression program used I dunno. Is there any way to get gtar to report on the compression it achieved? I can't just check file sizes because I'm writing data to tape. The basic problem is that I know how much data is there to begin with but I don't know how much room it took up on the tape so I have no idea how much room is left on the tape. thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

5 16

looking for lxc rpm for centos 6.2 x86_64
by Mihamina Rakotomandimby 07 Feb '12

07 Feb '12

Hi all Just on a fresh CentOS 6.2 minimal install, it doesnt find lxc: [mihamina@dev-spare ~]$ sudo yum install lxc [...] No package lxc available. Error: Nothing to do [mihamina@dev-spare ~]$ yum provides lxc-create [...] No Matches found Well, I think this is not really a problem: there probably is a personal packager that made his own lxc package and some people in here trust :-) Which one would you recommend? - http://goo.gl/8UXGh: MMmmm not rpm, just binaries... - ... what else? -- RMA.

3 3

Red Hat Extends Linux Support
by Mark LaPierre 07 Feb '12

07 Feb '12

Hey Y'all, What do you think this means for CentOS long term support? http://www.serverwatch.com/server-news/red-hat-extends-linux-support.html -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004

4 3

CentOS 6 vps
by Bazy 07 Feb '12

07 Feb '12

Hello, I'm looking for two hours now for a VPS provider offering CentOS 6 in DE or UK. Can you please point me to one, maybe where you currently own a virtual server and have a good experience with it. Cheers, Bazy

5 4

schily tools
by Alan McKay 07 Feb '12

07 Feb '12

Hey folks, I'm reading up on gtar for tape archiving and it sounds kind of nasty and not something I really want to rely on. It looks like star from the schily tools is preferred. I'm using Centos (and RHEL) 5.7 which seems to have star but not sdd. Which leads me to believe that the Schily tools are maybe a bit "rogue" My basic requirement with what I'm doing is to use standard tools and formats so that archives I write today can be readable in 10 years. Is the use of Schily tools going to be contrary to my basic requirement? Is that considered a risk for future readability? thanks, -Alan -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

4 7

pdfmerge and ghostscript-8.70-6.el5_7.6.x86_64
by Gregory P. Ennis 07 Feb '12

07 Feb '12

Everyone, It looks like pdfmerge is broken after the recent upgrade of gs to ghostscript-8.70-6.el5_7.6.x86_64. Has anyone else had this problem. I have just started trying to debug it. If any of you already have solutions please let me know. Thanks, Greg Ennis

1 2

MySQL on CentOS 6 broken? No 'mysql' database?
by Jason T. Slack-Moehrle 07 Feb '12

07 Feb '12

Hi Guys, I installed CentOS 6 and installed 'yum install mysql mysql-devel mysql-server' When I try and start MySQL I get: 120206 16:42:07 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql /usr/libexec/mysqld: Table 'mysql.plugin' doesn't exist 120206 16:42:07 [ERROR] Can't open the mysql.plugin table. Please run mysql_upgrade to create it. 120206 16:42:07 InnoDB: Started; log sequence number 0 44233 120206 16:42:07 [ERROR] Fatal error: Can't open and lock privilege tables: Table 'mysql.host' doesn't exist 120206 16:42:07 mysqld_safe mysqld from pid file /var/run/mysqld/mysqld.pid ended if I go look in /var/lib/mysql I see: -rw-rw----. 1 mysql mysql 10485760 Feb 5 16:53 ibdata1 -rw-rw----. 1 mysql mysql 5242880 Feb 6 16:42 ib_logfile0 -rw-rw----. 1 mysql mysql 5242880 Feb 5 16:33 ib_logfile1 drwx------. 2 mysql mysql 4096 Feb 5 16:55 mysql drwx------. 2 mysql mysql 4096 Feb 5 16:55 test and the 'mysql' is empty. I dont understand, I have never had this issue. I assume that the 'mysql' directory should contain something? So with this, I cannot do anything to get MySQL going! I tried a 'yum upgrade' to make sure everything was up to date. [root@www mysql]# cat /etc/*release* CentOS release 6.2 (Final) cat: /etc/lsb-release.d: Is a directory CentOS release 6.2 (Final) CentOS release 6.2 (Final) cpe:/o:centos:linux:6:GA Any thoughts? -Jason

2 2

Tools to change ssh password easily
by Fajar Priyanto 07 Feb '12

07 Feb '12

Hi all, I have an issue where I need to find an easy way to change ssh password in 3 different machines at the same time, at least in one go. Is there such tool? Preferably Web based. Thank you. Fajar

3 2

Re: [CentOS] schily tools
by Dennis Clarke 06 Feb '12

06 Feb '12

> On Mon, Feb 6, 2012 at 12:48 PM, Dennis Clarke <dclarke(a)blastwave.org> wrote: >> >>> I doubt if they are as well maintained in linux distros as the GNU >>> tool set, particularly in terms of having recent fixes backported into >>> the versions carried in enterprise distros. >> >> They are updated pretty much every month. > > My experience is very old (probably w/CentOS 3.x), but when I found > problems with star they were fixed in its own source but I gave up > before the packaged version was updated. Maybe that has changed... It is pretty up to date : ftp://ftp.berlios.de/pub/schily/AN-2012-01-23 Course that includes a pack of goodies. Like a real cdrecord that really works with blue ray etc etc. dc -- -- http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x1D936C72FA35B44B +-------------------------+-----------------------------------+ | Dennis Clarke | Solaris and Linux and Open Source | | dclarke(a)blastwave.org | Respect for open standards. | +-------------------------+-----------------------------------+

1 0

Configuration Compliance auditing for many CentOS 5.x boxes
by Tom H 06 Feb '12

06 Feb '12

Hi CentOS experts,* Short Version* I would like to produce a weekly report in HTML for each CentOS 5.x server we have indicating configuration compliance with some industry benchmark. I am looking for a tool or tools to implement this, I am happy to use 3rd party proprietary stuff if necessary. * Long(er) Version* Current Situation.. I have a client with many (200x) CentOS 5.x servers deployed in various web, mail, database and file server roles, and these boxes have been variously administrated to a lessor or greater degree. All the boxes have EPEL repository included as part of their base-install, and all boxes have cron jobs for "yum -y update" running frequently, and are rebooted when kernels are available. (so they are not in a terrible state) For network, local and external vulnerabilities - We use a 3rd party firm, who use WebInspect to monitor for external facing ports and vulnerable services and produce various regular reports to my boss. (hence am not looking at Nessus, OpenVAS or network based scanning tools right now, or indeed any vulnerability tools) However we now have a New Big Boss in Town - who is an ex security compliance dude. The new rules are; that if its not being regularly tested, then its not in compliance, even if it is in compliance etc. (to be honest, I quite like that rule) So now I am looking for a way to generate a report of server compliance with some compliance standard for all the boxes regularly. We have a basic list of configuration settings, that is a weaker form of various compliance recommendations, so I am confident that most compliance benchmarks like CIS, EAL3 or the linux web STIG level would be sufficient. We have chef installed on the CentOS instances, hence I can push out yum based packages, (and I can install from source tarballs, but it will make me cry, on these instances) I Would like to have... a tool that runs locally on each CentOS box and produces a reasonably comprehensive html report regarding configuration compliance (and a massive bonus would be to send email alert for severe problems, but I can script that if required) Ideally I could generate a weekly report that indicates compliance with 1 or more of the recognised linux server benchmarks. I am happy to pay for a subscription for the checklist, but I suspect the kind per instance 100 USD licenses I see are going to blow my budget. Current progress is... I see that OPENSCAP and OVAL have tools in CentOS-base or EPEL, such as OpenSCAP-utils ovaldi - oval reference interpreter Which can be used to create reports. However they seem a little unrefined. For SCAP and OVAL content I have found the following. 1. NIST provide SCAP content for RHEL desktop, which is kinda close; 2. http://usgcb.nist.gov/usgcb/rhel_content.html 3. There is a tool called sectool in the fedora repos, but I can't get it to run on CentOS due to a missing python-slip module. Any suggestions on functioning stacks for this problem would be helpful. Thanks, Tom ps SORRY FOR THE LONG EMAIL

6 8

Re: [CentOS] schily tools
by Dennis Clarke 06 Feb '12

06 Feb '12

> I doubt if they are as well maintained in linux distros as the GNU > tool set, particularly in terms of having recent fixes backported into > the versions carried in enterprise distros. They are updated pretty much every month. >> My basic requirement with what I'm doing is to use standard tools and >> formats so that archives I write today can be readable in 10 years. > > I've never had any doubts that current GNU tar would extract archives > made with it 10+ years ago - in fact I'm fairly sure I've done that. > Or that I'd be able to obtain a copy of it in the future. GNU tar .. has its own bugs. Is it really standards compliant? >> Is the use of Schily tools going to be contrary to my basic requirement? >> Is that considered a risk for future readability? > > It shouldn't matter if you don't use either of the version's > extensions, and for archiving you probably don't need them. For > example, star and GNUtar use very different concepts for incremental > backups - star is sort of like dump and must work on filesystem > boundaries where GNUtar's --listed incremental needs a file to hold > state but will work on arbitrary directories and can span mount > points. same sort of deal with star .. but you should go ask the author. dc -- -- http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x1D936C72FA35B44B +-------------------------+-----------------------------------+ | Dennis Clarke | Solaris and Linux and Open Source | | dclarke(a)blastwave.org | Respect for open standards. | +-------------------------+-----------------------------------+

2 1

Unknown KERNEL Warning in boot messages
by Jonathan Vomacka 06 Feb '12

06 Feb '12

CentOS Community, Would someone who is familiar with reading boot messages and kernel errors be able to assist with advising me on what the following errors might mean in dmesg. It seems to come up randomly towards the end of the logfile. ------------[ cut here ]------------ WARNING: at arch/x86/kernel/cpu/mtrr/generic.c:467 generic_get_mtrr+0x11e/0x140() (Not tainted) Hardware name: empty mtrr: your BIOS has set up an incorrect mask, fixing it up. Modules linked in: Pid: 0, comm: swapper Not tainted 2.6.32-220.2.1.el6.x86_64 #1 Call Trace: [<ffffffff81069997>] ? warn_slowpath_common+0x87/0xc0 [<ffffffff81069a86>] ? warn_slowpath_fmt+0x46/0x50 [<ffffffff8102713e>] ? generic_get_mtrr+0x11e/0x140 [<ffffffff81c2bfd1>] ? mtrr_cleanup+0x8c/0x3fd [<ffffffff81c2ae47>] ? get_mtrr_state+0x2ec/0x2fb [<ffffffff81c2a988>] ? mtrr_bp_init+0x1ab/0x1d2 [<ffffffff81c254d8>] ? setup_arch+0x4b8/0xaea [<ffffffff814ec4c5>] ? printk+0x41/0x44 [<ffffffff81c1fc2e>] ? start_kernel+0xdc/0x430 [<ffffffff81c1f33a>] ? x86_64_start_reservations+0x125/0x129 [<ffffffff81c1f438>] ? x86_64_start_kernel+0xfa/0x109 ---[ end trace a7919e7f17c0a725 ]--- ------------[ cut here ]------------ WARNING: at kernel/sched.c:5914 thread_return+0x232/0x79d() (Tainted: G W ---------------- ) Hardware name: empty Modules linked in: ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables ipv6 raid1 e1000e serio_raw i2c_i801 i2c_core sg iTCO_wdt iTCO_vendor_support ioatdma dca i5000_edac edac_core i5k_amb shpchp ext4 mbcache jbd2 raid10 sd_mod crc_t10dif ahci pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan] Pid: 5696, comm: md1_resync Tainted: G W ---------------- 2.6.32-220.2.1.el6.x86_64 #1 Call Trace: [<ffffffff81069997>] ? warn_slowpath_common+0x87/0xc0 [<ffffffff810699ea>] ? warn_slowpath_null+0x1a/0x20 [<ffffffff814eccc5>] ? thread_return+0x232/0x79d [<ffffffffa0073654>] ? raise_barrier+0xb4/0x1e0 [raid10] [<ffffffff8105e770>] ? default_wake_function+0x0/0x20 [<ffffffffa00747d1>] ? sync_request+0x541/0xa70 [raid10] [<ffffffffa0073599>] ? raid10_unplug+0x29/0x30 [raid10] [<ffffffff813ea428>] ? is_mddev_idle+0xc8/0x120 [<ffffffff813eab6d>] ? md_do_sync+0x6ad/0xbe0 [<ffffffff813eb336>] ? md_thread+0x116/0x150 [<ffffffff813eb220>] ? md_thread+0x0/0x150 [<ffffffff810906a6>] ? kthread+0x96/0xa0 [<ffffffff8100c14a>] ? child_rip+0xa/0x20 [<ffffffff81090610>] ? kthread+0x0/0xa0 [<ffffffff8100c140>] ? child_rip+0x0/0x20 ---[ end trace a7919e7f17c0a727 ]--- md: md1: data-check done. x86 PAT enabled: cpu 0, old 0x7040600070406, new 0x7010600070106 ------------[ cut here ]------------ WARNING: at arch/x86/kernel/cpu/mtrr/generic.c:467 generic_get_mtrr+0x11e/0x140() (Not tainted) Hardware name: empty mtrr: your BIOS has set up an incorrect mask, fixing it up. Modules linked in: Pid: 0, comm: swapper Not tainted 2.6.32-220.4.1.el6.x86_64 #1 Call Trace: [<ffffffff81069a17>] ? warn_slowpath_common+0x87/0xc0 [<ffffffff81069b06>] ? warn_slowpath_fmt+0x46/0x50 [<ffffffff8102713e>] ? generic_get_mtrr+0x11e/0x140 [<ffffffff81c2bfd1>] ? mtrr_cleanup+0x8c/0x3fd [<ffffffff81c2ae47>] ? get_mtrr_state+0x2ec/0x2fb [<ffffffff81c2a988>] ? mtrr_bp_init+0x1ab/0x1d2 [<ffffffff81c254d8>] ? setup_arch+0x4b8/0xaea [<ffffffff814ec3c6>] ? printk+0x41/0x43 [<ffffffff81c1fc2e>] ? start_kernel+0xdc/0x430 [<ffffffff81c1f33a>] ? x86_64_start_reservations+0x125/0x129 [<ffffffff81c1f438>] ? x86_64_start_kernel+0xfa/0x109 ---[ end trace a7919e7f17c0a725 ]---

2 1

Re: [CentOS] schily tools
by Dennis Clarke 06 Feb '12

06 Feb '12

> Hey folks, > > I'm reading up on gtar for tape archiving and it sounds kind of nasty and > not something I really want to rely on. > > It looks like star from the schily tools is preferred. I'm using Centos > (and RHEL) 5.7 which seems to have star but not sdd. > > Which leads me to believe that the Schily tools are maybe a bit "rogue" > > My basic requirement with what I'm doing is to use standard tools and > formats so that archives I write today can be readable in 10 years. > > Is the use of Schily tools going to be contrary to my basic requirement? > Is that considered a risk for future readability? Use star like so : star -c -p -acl -sparse -dump -fs=32m -fifostats -time \ -C /some_dir dir1 dir2 dir3 file=/dev/rmt/0mbn or something like that will work like a charm and be POSIX spec compliant. That means you can still read it in 20 years .. if the tape survives. dc -- -- http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x1D936C72FA35B44B +-------------------------+-----------------------------------+ | Dennis Clarke | Solaris and Linux and Open Source | | dclarke(a)blastwave.org | Respect for open standards. | +-------------------------+-----------------------------------+

1 0

mysql won't start with service, but starts with mysqld_safe
by Larry Martell 06 Feb '12

06 Feb '12

Just installed mysql on centos 6.2. When I try to start it with service I get: #service mysqld start MySQL Daemon failed to start. Starting mysqld: [FAILED] Nothing at all is written to the error log. But if I start it with mysqld_safe it comes up and works fine. Anyone know what's going on here? -larry

4 5

Postfix - no nfs mounted shares on server - but nfs related problem in maillog.
by Rafał Radecki 06 Feb '12

06 Feb '12

Hi all. I have one server with problem in maillog: Feb 6 06:46:26 host1 postfix/qmgr[24296]: fatal: qmgr_move: update active/4DE015AC536 time stamps: Stale NFS file handle Feb 6 06:46:27 host1 postfix/master[4487]: warning: process /usr/libexec/postfix/qmgr pid 24296 exit status 1 Feb 6 06:46:27 host1 postfix/master[4487]: warning: /usr/libexec/postfix/qmgr: bad command startup -- throttling ls -la /var/spool/postfix/active | tail -10 -rwx------ 1 postfix postfix 25367 lut 5 03:28 9F38A2D89FD -rwx------ 1 postfix postfix 22198 lut 5 03:28 9F5D45AC094 -rwx------ 1 postfix postfix 22219 lut 5 03:28 9F90F5AC323 ?--------- ? ? ? ? ? 9FBB22DAE65 So there are problems with filesystem(ext3). df -h /var/spool/postfix/active System plików rozm. użyte dost. %uż. zamont. na /dev/sda5 69G 24G 43G 36% / mount | grep sda5 /dev/sda5 on / type ext3 (rw) /var/spool is a local filesystem, there are no nfs shares mounted on server. Also nfs, nfslock, autofs services are disabled. I've run fsck on / 3 days ago, there have been errors which I repaired (fsck -y). Now the problems like ?--------- ? ? ? ? ? 9FBB22DAE65 show again. smartctl -a /dev/sda SMART Attributes Data Structure revision number: 16 Vendor Specific SMART Attributes with Thresholds: ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE 1 Raw_Read_Error_Rate 0x000b 100 100 016 Pre-fail Always - 0 2 Throughput_Performance 0x0005 133 133 054 Pre-fail Offline - 138 3 Spin_Up_Time 0x0007 142 142 024 Pre-fail Always - 178 (Average 109) 4 Start_Stop_Count 0x0012 100 100 000 Old_age Always - 120 5 Reallocated_Sector_Ct 0x0033 100 100 005 Pre-fail Always - 0 7 Seek_Error_Rate 0x000b 100 100 067 Pre-fail Always - 0 8 Seek_Time_Performance 0x0005 139 139 020 Pre-fail Offline - 26 9 Power_On_Hours 0x0012 100 100 000 Old_age Always - 5725 10 Spin_Retry_Count 0x0013 100 100 060 Pre-fail Always - 0 12 Power_Cycle_Count 0x0032 100 100 000 Old_age Always - 120 192 Power-Off_Retract_Count 0x0032 100 100 000 Old_age Always - 308 193 Load_Cycle_Count 0x0012 100 100 000 Old_age Always - 308 194 Temperature_Celsius 0x0002 176 176 000 Old_age Always - 34 (Lifetime Min/Max 22/51) 196 Reallocated_Event_Count 0x0032 100 100 000 Old_age Always - 0 197 Current_Pending_Sector 0x0022 100 100 000 Old_age Always - 0 198 Offline_Uncorrectable 0x0008 100 100 000 Old_age Offline - 0 199 UDMA_CRC_Error_Count 0x000a 200 200 000 Old_age Always - 0 dmesg | grep sda EXT3-fs warning (device sda5): ext3_unlink: Deleting nonexistent file (2982233), 0 Any tips?

2 1

How to boot into a different kernel
by Jonathan Vomacka 06 Feb '12

06 Feb '12

CentOS Community, Is there a command to boot into a different version of the kernel? I believe this is setup via grub.conf but unsure. There are a few different kernels loaded into /boot but I want to see if there is a command to boot into a different kernel as a single instance or permanent if needed. Please advise [root@titanium boot]# ls -ltr total 62768 -rw-r--r--. 1 root root 2312369 Dec 6 15:35 System.map-2.6.32-220.el6.x86_64 -rw-r--r--. 1 root root 100943 Dec 6 15:35 config-2.6.32-220.el6.x86_64 -rwxr-xr-x. 1 root root 3938288 Dec 6 15:35 vmlinuz-2.6.32-220.el6.x86_64 -rw-r--r--. 1 root root 171087 Dec 6 15:36 symvers-2.6.32-220.el6.x86_64.gz -rw-r--r--. 1 root root 2313220 Dec 23 04:14 System.map-2.6.32-220.2.1.el6.x86_64 -rw-r--r--. 1 root root 100947 Dec 23 04:14 config-2.6.32-220.2.1.el6.x86_64 -rwxr-xr-x. 1 root root 3940752 Dec 23 04:14 vmlinuz-2.6.32-220.2.1.el6.x86_64 -rw-r--r--. 1 root root 171175 Dec 23 04:17 symvers-2.6.32-220.2.1.el6.x86_64.gz drwx------. 2 root root 12288 Jan 18 10:36 lost+found drwxr-xr-x. 3 root root 1024 Jan 18 10:45 efi -rw-r--r--. 1 root root 14888469 Jan 18 10:45 initramfs-2.6.32-220.el6.x86_64.img -rw-r--r--. 1 root root 14885287 Jan 18 11:23 initramfs-2.6.32-220.2.1.el6.x86_64.img -rwxr-xr-x. 1 root root 3940016 Jan 23 22:02 vmlinuz-2.6.32-220.4.1.el6.x86_64 -rw-r--r--. 1 root root 2313117 Jan 23 22:02 System.map-2.6.32-220.4.1.el6.x86_64 -rw-r--r--. 1 root root 100947 Jan 23 22:02 config-2.6.32-220.4.1.el6.x86_64 -rw-r--r--. 1 root root 171175 Jan 23 22:02 symvers-2.6.32-220.4.1.el6.x86_64.gz -rw-r--r--. 1 root root 14885301 Jan 26 08:13 initramfs-2.6.32-220.4.1.el6.x86_64.img drwxr-xr-x. 2 root root 1024 Feb 6 01:06 grub [root@titanium boot]#

2 1

configure network bridge listing bridged intefaces
by Mihamina Rakotomandimby 06 Feb '12

06 Feb '12

Hi all, Having a 4 NIC server, I want to bridge eth2 and eth3, with a bridge named br0. Searching the web I only found about creating a file /etc/sysconfig/network-scripts/ifcfg-br0, but did not find where to explicitely list what ports will be bridged. Where is it configured? Thank you. -- RMA.

6 10

a cloud VM under CentOS
by Boris Epstein 05 Feb '12

05 Feb '12

Hello everyone, Does anyone know if it is possible to construct a cloud of sorts out of several CentOS machines so as to enable a VM (or several VM's) that would run on top of that cloud and have failover capability? Boris.

3 3

CentOS 6.2 New Kernel Issues
by Jonathan Vomacka 05 Feb '12

05 Feb '12

CentOS 6.2 Community / Developers, Are there any known issues with the latest Kernel on CentOS 6.2? I performed a yum update and the kernel downloaded. When the system rebooted I started having intermittent latency issues when trying to perform certain commands on the system such as top or ls -ltr, etc. I was having extreme latency getting to root. I am unsure if there is a hardware compat issue but I found my server in kernel PANIC mode the next day and was unable to login entirely. Has this been reported before?

1 0

Double Copies Double Copies
by Mark LaPierre 04 Feb '12

04 Feb '12

Hey Y'all, why am I getting double copies of every email on this list today when it wasn't happening yesterday? Isn't happening on any of my other email. -- _ °v° /(_)\ ^ ^ Mark LaPierre Registerd Linux user No #267004

3 7

install detecting disk as sdb not sda
by Jerry Geis 04 Feb '12

04 Feb '12

I am trying to install 6.2 on a machine. I am using PXE as I have done so a number of times. My hard disk is being detected as sdb and not sda. My kickstart config is wanting it at sda. There are no other disks in the unit. It has and SD slot and an esata although BIOS does not appear to have a disable for either of those devices. Is there anyway to "force" the disk to sda ? or find out what its detecting at sda and disable that from the PXE boot line? Doing " dmesg | grep sda" does say SCSI removable disk. So how can I tell linux to NOT include that when installing? Thanks, jerry

4 6

Re: [CentOS] network intermitent, not sure if virtualization issue
by Digimer 04 Feb '12

04 Feb '12

On 02/03/2012 03:55 PM, Bob Hoffman wrote: > On the virtual machine, which is having the issue, this is my eth0 > (I have been commenting out things to see if anything changes the issue.) Looks fine. > on the main machine which experiences no problems. > > eth0 and 1 onboard, eth 2 add on card, all are the same except > hwaddress, uuid, etc. Looks fine, assuming of course that the DEVICE and HWADDR are different. :) > (tried playing with bonding mode, but got nowhere there, again, the host > machine never has an issue) Are you bonding for performance or reliability? Bridge config looks fine, too. > not sure why vnet0 shows up in ifconfig, it is there and sometimes it is > not depending on boot.... Are you using KVM? I assume so. Regardless, the 'vnetX' interface is the link between the VM and the bridge. Think of it as your virtual network cable. As such, it exists when the VM exists, and is deleted when the VM migrates or is shut down. What does 'cat /proc/net/bonding/bond0' show on either node? -- Digimer E-Mail: digimer(a)alteeve.com Papers and Projects: https://alteeve.com

2 3

upgrade centos 5 to 6
by fakessh ＠ 04 Feb '12

04 Feb '12

upgrade question is it possible to imagine during an upgrade from centos 5 to 6 to keep the named directory /etc and /var unchanged if an update as simple as possible. can this be -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting

4 4

Re: [CentOS] postfix - reject of incoming mail due to helo check??
by Stephen Harris 03 Feb '12

03 Feb '12

On Fri, Feb 03, 2012 at 11:47:06PM +0100, Reindl Harald wrote: > Am 03.02.2012 23:32, schrieb Stephen Harris: > > If you're telling me that my internal mail servers must talk to each > > other via the name pool-173-71-187-61.pitbpa.fios.verizon.net then... > > well, never mind. > > i am telling you that your network design is poor and yes if THIS is > your rDNS it has to be your HELO Fortunately, you're wrong. The real world doesn't work the way you think it should. Which is a relief to everyone else! -- rgds Stephen

1 0

Re: [CentOS] postfix - reject of incoming mail due to helo check??
by Stephen Harris 03 Feb '12

03 Feb '12

On Fri, Feb 03, 2012 at 11:17:29PM +0100, Reindl Harald wrote: > Am 03.02.2012 22:58, schrieb Stephen Harris: > > If your mail server talks to machine with IP address 1.2.3.4 then should > > it say HELO with the 10 address name or the 91 address name? > > if you are not too stupid your internl view and external view of > dns-names is identical and there is no difference *boggle* What? Wow. No. Just no. That won't even work on a toy home network where your ISP sets the rDNS, it definitely won't work on a large corporate network. It only works in a trivial environment. If you're telling me that my internal mail servers must talk to each other via the name pool-173-71-187-61.pitbpa.fios.verizon.net then... well, never mind. -- rgds Stephen

1 0

Re: [CentOS] postfix - reject of incoming mail due to helo check??
by Stephen Harris 03 Feb '12

03 Feb '12

On Fri, Feb 03, 2012 at 10:34:20PM +0100, Reindl Harald wrote: > > > Am 03.02.2012 20:58, schrieb Stephen Harris: > > On Fri, Feb 03, 2012 at 08:04:31PM +0100, Reindl Harald wrote: > >> does not change that it is a dmaned good idea this days > >> to make matching A/PTR/HELO and it is EASY to do this > > > > A & PTR, yes. HELO, no. It's not even possible to do HELO matching PTR > > when NAT gets in the way. > > WHAT has NAT to do with this? > > my mailserver has intern 10.0.0.x, external 91.118.73.x > my internal DNS has the PTR/A for the NAt address > external DNS have the PTR/A for the public idea > > what in the world let you think that NAT does change anything? If your mail server talks to machine with IP address 1.2.3.4 then should it say HELO with the 10 address name or the 91 address name? The mail server doesn't know what IP address will be presented to the remote machine, so it can't pick the correct name for the HELO. This is why I agree that A/PTR values should match, but there's no way for the HELO value to match. -- rgds Stephen

1 0

Re: [CentOS] postfix - reject of incoming mail due to helo check??
by Stephen Harris 03 Feb '12

03 Feb '12

On Fri, Feb 03, 2012 at 08:04:31PM +0100, Reindl Harald wrote: > Am 03.02.2012 20:01, schrieb Stephen Harris: > > In this, Les is correct. The RFCs merely say the HELO needs to _a_ valid > > identifier for the host. Indeed this discussion was on this list back in > > July ("SPAM on the List") where I pointed out that RFC 5321 says > > i know the RFCs > > does not change that it is a dmaned good idea this days > to make matching A/PTR/HELO and it is EASY to do this A & PTR, yes. HELO, no. It's not even possible to do HELO matching PTR when NAT gets in the way. -- rgds Stephen

1 0

Re: [CentOS] postfix - reject of incoming mail due to helo check??
by Les Mikesell 03 Feb '12

03 Feb '12

On Fri, Feb 3, 2012 at 12:51 PM, Reindl Harald <h.reindl(a)thelounge.net> wrote: > >>> a A-Record and matching PTR and that is what "myhostname" >>> has to be set to >> >> RFC quote, please > > you need A RFC to know with what IP your machines connecting outside? > who should know and write it for you? > maybe you have the wrong job or talking about things are not yours? > > also nobody needs RFCs for bad practices > as said: ignore them, but do not whineif your server is ognored? I understand you have your own opinion on the matter. I am requesting facts. If someone wants to whimsically discard my mail, they are free to do so. -- Les Mikesell lesmikesell(a)gmail.com

1 0

Re: [CentOS] postfix - reject of incoming mail due to helo check??
by Les Mikesell 03 Feb '12

03 Feb '12

On Fri, Feb 3, 2012 at 10:28 AM, Reindl Harald <h.reindl(a)thelounge.net> wrote: > > it is quite easy to know the mail-flow and from what public > interface mails are going out and hwatever that ip is get > a A-Record and matching PTR and that is what "myhostname" > has to be set to RFC quote, please. -- Les Mikesell lesmikesell(a)gmail.com

2 1

CentOS-announce Digest, Vol 84, Issue 3
by centos-announce-request＠centos.org 03 Feb '12

03 Feb '12

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CEEA-2012:0090 CentOS 5 kexec-tools Update (Johnny Hughes) 2. CESA-2012:0095 Moderate CentOS 5 ghostscript Update (Johnny Hughes) 3. CESA-2012:0093 Critical CentOS 5 php Update (Johnny Hughes) 4. CESA-2012:0092 Critical CentOS 5 php53 Update (Johnny Hughes) 5. CESA-2012:0096 Moderate CentOS 4 ghostscript Update (Johnny Hughes) 6. CESA-2012:0093 Critical CentOS 4 php Update (Johnny Hughes) 7. CESA-2012:0095 Moderate CentOS 6 ghostscript Update (Johnny Hughes) 8. CESA-2012:0093 Critical CentOS 6 php Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Fri, 3 Feb 2012 01:37:21 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CEEA-2012:0090 CentOS 5 kexec-tools Update To: centos-announce(a)centos.org Message-ID: <20120203013721.GA1969(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Enhancement Advisory 2012:0090 Upstream details at : https://rhn.redhat.com/errata/RHEA-2012-0090.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 36f05f4036316ee57bd4c76465fe48f094fa96554777bcf6483300359320efb8 kexec-tools-1.102pre-126.el5_7.7.i386.rpm x86_64: c314014b4e5317a1637c8a1e7a91ad9512a212122fa8d32e1ceba6002bd9df38 kexec-tools-1.102pre-126.el5_7.7.x86_64.rpm Source: 468087d4c73eb8411aaf947b5a6ec8701fdbf7996d0804eebcda1f342ab72259 kexec-tools-1.102pre-126.el5_7.7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 2 Date: Fri, 3 Feb 2012 01:39:04 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0095 Moderate CentOS 5 ghostscript Update To: centos-announce(a)centos.org Message-ID: <20120203013904.GA2102(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0095 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0095.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 55a729159a2391756b9d544a47c46b16aa10b2ac6457d6822927ccea2179576d ghostscript-8.70-6.el5_7.6.i386.rpm a8f288d87e555478b9fbe02c861b181aeeffc1000c1bdd877aa605eb756f9bc0 ghostscript-devel-8.70-6.el5_7.6.i386.rpm 2b180288e940e85f4faa40274aecf7522c7326f2764cdb3853bf4ff6a957394a ghostscript-gtk-8.70-6.el5_7.6.i386.rpm x86_64: 55a729159a2391756b9d544a47c46b16aa10b2ac6457d6822927ccea2179576d ghostscript-8.70-6.el5_7.6.i386.rpm cfc621069bae438be9dd2c3e3ba074145fb9924b91cbd117d8c09a2bc1ab3410 ghostscript-8.70-6.el5_7.6.x86_64.rpm a8f288d87e555478b9fbe02c861b181aeeffc1000c1bdd877aa605eb756f9bc0 ghostscript-devel-8.70-6.el5_7.6.i386.rpm b5e31f4d7a0de415ed61633b8ff487faa9115f2abfabbf792293a31d63a8e9c5 ghostscript-devel-8.70-6.el5_7.6.x86_64.rpm 2a4753e7242f167ffb70be785e8bfe1e6679c986bbb0af1efbbfeb8dc5fa7a57 ghostscript-gtk-8.70-6.el5_7.6.x86_64.rpm Source: 35fe7d353d4c5c66c342ebbdf92e3a5baa6072d82e3b96d2edc6e1fae59d3e2e ghostscript-8.70-6.el5_7.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 3 Date: Fri, 3 Feb 2012 01:41:17 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0093 Critical CentOS 5 php Update To: centos-announce(a)centos.org Message-ID: <20120203014117.GA2370(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0093 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0093.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 3005d81c7b06ac01e026066070dac2c3a87c227db91325bdef17b9c0509e4499 php-5.1.6-27.el5_7.5.i386.rpm 8319bc5e570869d3bdbe3dfacf8e06fdd9500ff2bbcbff9de6382e4b30a626d1 php-bcmath-5.1.6-27.el5_7.5.i386.rpm abe1a6c64658046f91dfc5a6bac9128158f32688e70086122d732041ff14757f php-cli-5.1.6-27.el5_7.5.i386.rpm b36070fa668bb53e591d6749754ec6388f7e529932616172de4ed9fe36cf3967 php-common-5.1.6-27.el5_7.5.i386.rpm e82f480d56c63ab88c3d466ecd8c9069046aed3ef7b7e48b3317f54420d2aeeb php-dba-5.1.6-27.el5_7.5.i386.rpm 931c5d90c3d7e9813a8b67de50063cffe6c422c814d37e133be8e680db7322aa php-devel-5.1.6-27.el5_7.5.i386.rpm 11c24feee87fef60bae2acada6bc54cfdf9c633a4273ec17ef05457e34415115 php-gd-5.1.6-27.el5_7.5.i386.rpm fc2ac07fc754f68d73e8373864163f6b5907d78d2beceb5878b0d0b034f8d716 php-imap-5.1.6-27.el5_7.5.i386.rpm 9151281f79bc33e50362fe4d44b5062c728443be763312b8b0faed51b5b94004 php-ldap-5.1.6-27.el5_7.5.i386.rpm 39d013804bf0adacb8f606c54e543739c5ed2aa1174756cbb362e91e59312ad2 php-mbstring-5.1.6-27.el5_7.5.i386.rpm 2c15876b66ba5da82d9e72f984901b5478ffb753aea2da61ff8613f9cb7eb39a php-mysql-5.1.6-27.el5_7.5.i386.rpm e82d96659e4f42158c13d7c0bfaa6965645a5e8c0f9b6815c79e59ba4f73f807 php-ncurses-5.1.6-27.el5_7.5.i386.rpm aa6710528776ddf00a72bf140531a79a8ce63821720bc10386e6ac8c1824f290 php-odbc-5.1.6-27.el5_7.5.i386.rpm 772c7bb9e738bb0f44dab04f6dd81ed2a330e7d41a4d5b20b16dc89091c64677 php-pdo-5.1.6-27.el5_7.5.i386.rpm 9bbd6de7b3670440069b6fff61cc26429622a59995369e3a44af3a41d483577a php-pgsql-5.1.6-27.el5_7.5.i386.rpm 8474ab5dacfda351d257e52ce0586d219fa088fefd3cdb27a63bb2bbb760988e php-snmp-5.1.6-27.el5_7.5.i386.rpm fcb53f1b36f95ddba6289e89281d6dcd53c47de4acf6ade7beefaade2624de38 php-soap-5.1.6-27.el5_7.5.i386.rpm 65296100b75030e96c5e425874c9b8dd539e82933990eb1c6537f04bf30008a3 php-xml-5.1.6-27.el5_7.5.i386.rpm 630a061fc70bbf4587421a901af6d28aed87b3cfad48ec0b014d3777e96817cb php-xmlrpc-5.1.6-27.el5_7.5.i386.rpm x86_64: edadb50329c48455589ad6681ce901ed2ffa21cea6145a4ef381e066202dd8a0 php-5.1.6-27.el5_7.5.x86_64.rpm cee74de9cb4b5e0f2f19a985fb5575b9bc185e481e33e93dc78c39b787711b60 php-bcmath-5.1.6-27.el5_7.5.x86_64.rpm e47dccf41051c706970dd9f76125acce49cbe6107ef11fcd741d8c8df46c3813 php-cli-5.1.6-27.el5_7.5.x86_64.rpm 484a01bef81c0c5278f2130f625694dffd99c0a74d26c9bfb11a1e7f18cbf5df php-common-5.1.6-27.el5_7.5.x86_64.rpm 78a42ce85d86499b686c79d02a5ff65b83632dc4242d4b62394ac8b76bd15546 php-dba-5.1.6-27.el5_7.5.x86_64.rpm 05d6941c4d7ca00411205d109d84baaab3101d3d968f30a1dbc8ff61541b3448 php-devel-5.1.6-27.el5_7.5.x86_64.rpm f74a9634b8aac9c6801cede5f7a5c077276721236bf4cd6525071807cad826f1 php-gd-5.1.6-27.el5_7.5.x86_64.rpm 866f741888adedb599a28f54b93a73f609be2014fde153d1c4d4bcc25f0860ac php-imap-5.1.6-27.el5_7.5.x86_64.rpm 4db2e16ca3e28d62c9d23f1df862151971ac78fb341a43ee360d8e9fdb3a53c8 php-ldap-5.1.6-27.el5_7.5.x86_64.rpm df8fe6a2a366a20dedaac813ba87e68e72945edf068753a2f57e3e28db83d038 php-mbstring-5.1.6-27.el5_7.5.x86_64.rpm 8ea08f2e7ccd372a8c2bf7a5899604fffadd40978b4a64b83c5e27550a6a6211 php-mysql-5.1.6-27.el5_7.5.x86_64.rpm 74fc066f8471adcf25ba0d218b1e9fe71a7ee8160fbae7dd41f5c79e4af8e194 php-ncurses-5.1.6-27.el5_7.5.x86_64.rpm 13649ef469eafb0cb95626f5353dedc957c7848c81bf45709d9eb80875c53f15 php-odbc-5.1.6-27.el5_7.5.x86_64.rpm 89507f8f984cfca0516a51837556aa5eed4e480a427c0b477ef4be35aabca0f6 php-pdo-5.1.6-27.el5_7.5.x86_64.rpm d2bc77208f4303694ca5da15d77b922badd91dcd3ad7b51ac4956125826b3d9b php-pgsql-5.1.6-27.el5_7.5.x86_64.rpm 93d117beea11534d90aca58f7b4ecbdc1d0c187eb0f622b4f963f2c41ac84c67 php-snmp-5.1.6-27.el5_7.5.x86_64.rpm 26cfda88671c1c63cd2ac3f64230443690d0d6684985b403ddbed404617d699d php-soap-5.1.6-27.el5_7.5.x86_64.rpm 7ba9fdc5d8c3c4048135db5d9f3561ecff0456805fdfc789ed6fddecf2071343 php-xml-5.1.6-27.el5_7.5.x86_64.rpm cf3b5b77339e9dd6abb3ca23c3b8d82102250215f1501ea198d814762cdc9240 php-xmlrpc-5.1.6-27.el5_7.5.x86_64.rpm Source: 92092c008a97667b7df8b1ff77fa1da192cfaec904368cc45ed275a814cf7919 php-5.1.6-27.el5_7.5.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 4 Date: Fri, 3 Feb 2012 01:43:26 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0092 Critical CentOS 5 php53 Update To: centos-announce(a)centos.org Message-ID: <20120203014326.GA2682(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0092 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0092.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 40edb3d5109fcee3a17096ac78f7c492fd088876d2baa54f5c8205f082601539 php53-5.3.3-1.el5_7.6.i386.rpm 6c96e758e63da2545aaf905e99d3d5dde93b43e75db824cd311ce80a320aa5d7 php53-bcmath-5.3.3-1.el5_7.6.i386.rpm c7b618c743ef806485b566aec6ebf71fd93ebc0553ffde950a140b935b9f4be8 php53-cli-5.3.3-1.el5_7.6.i386.rpm b9f18e1afbd732db5c73a11c33c173c83207b3623845d52f52a0f19dceb9a19a php53-common-5.3.3-1.el5_7.6.i386.rpm a87ef01172f471655eb1494219ae6fe7f6a90bb671e7246621611087a08b5a07 php53-dba-5.3.3-1.el5_7.6.i386.rpm c056e3d6f9ebf1e1043b5470dd418304b58d960f736c69658c3b379af897456c php53-devel-5.3.3-1.el5_7.6.i386.rpm 0d5a525cada48d7cc04a48a95f28fc41c76380c979c9a0d2fb437cf16af94039 php53-gd-5.3.3-1.el5_7.6.i386.rpm 210522ecd8e91bc0efa2bd04f0e160256138d5b40381150d190a020c0af4e0b7 php53-imap-5.3.3-1.el5_7.6.i386.rpm 6a8aaa8511c5d7b198a7f8289534983cc7adb5b9f53c9af5af6a7acd2d12c194 php53-intl-5.3.3-1.el5_7.6.i386.rpm 305744ffa37c499a66fa056e650b756cc7d62a29f76a3db3fd01ebbd58b7628a php53-ldap-5.3.3-1.el5_7.6.i386.rpm 49fe50c17bdb4e7cba5908f9c4fb82768c46f9a0a4e77a2e978eb1ab28e52c85 php53-mbstring-5.3.3-1.el5_7.6.i386.rpm eaeb0b713d8bb2bef3327b35f4f00275fb572034be20de6595ba599cb7cb677e php53-mysql-5.3.3-1.el5_7.6.i386.rpm dc115dcdfa33d8e2e2c960390fdd66814dd281b4f94969c45dcf069c9b4a4771 php53-odbc-5.3.3-1.el5_7.6.i386.rpm 2c7d04b40639978f408ce186f48efeb59b9547728d888825b3ebdf3262e62e88 php53-pdo-5.3.3-1.el5_7.6.i386.rpm 68d5829a2aaeda44e9ce5d8cfe4188ad7564b4d125b5840479074046119fd762 php53-pgsql-5.3.3-1.el5_7.6.i386.rpm 43cfd4f4272d237d646732e66aac069e799ce49268a8f7fcc56130648c4f2322 php53-process-5.3.3-1.el5_7.6.i386.rpm 313935ed35486eb87bfff3a090195a35a7ac2cfc6392c86bbe7575a07945ef3c php53-pspell-5.3.3-1.el5_7.6.i386.rpm a016eded9bb0d432add5f0ac4b86d47ad8da6e83f6abb1fdf594342358a8de7a php53-snmp-5.3.3-1.el5_7.6.i386.rpm ba2ded3868bcb866d107bc7c917f80d0489196d727eb066bf68390a0d080fe50 php53-soap-5.3.3-1.el5_7.6.i386.rpm 5e60ce6fccafc2cca70e3fd24b72ab5e518dadd3057855ace43101e2e281a392 php53-xml-5.3.3-1.el5_7.6.i386.rpm c177d97e8544626fcc8bf6e6d6961c56c4ac189ddc11134e500f5a8b499307d4 php53-xmlrpc-5.3.3-1.el5_7.6.i386.rpm x86_64: f3a144b967236e30e300c409e8e4327d596b31b0e0e96e82d867463a2ae8f624 php53-5.3.3-1.el5_7.6.x86_64.rpm 05c8e64abcad09dfedfcf13078298a2a3ea350beed055b14cc443f431f41969c php53-bcmath-5.3.3-1.el5_7.6.x86_64.rpm 4075387df5bb9d4db4ed2c6dba970e6995ed320f1662c8a1155e831d1b8ad47b php53-cli-5.3.3-1.el5_7.6.x86_64.rpm 22ade6b4f256985caec5e430eaf05bdf1666bc613351b292470b4347ea09b8c0 php53-common-5.3.3-1.el5_7.6.x86_64.rpm e185f14bdf87724d70167126706bafc9e6c488b99e933b8cdaf50b2367faa2df php53-dba-5.3.3-1.el5_7.6.x86_64.rpm 827c65f212076cfaa32d1baadd7db0f7ecfde412ed55b3b88f68b79ac452cb96 php53-devel-5.3.3-1.el5_7.6.x86_64.rpm be3f0235eda641eea89cf3ed18515153af816a4aaa035d7bfb0e10244728e8e7 php53-gd-5.3.3-1.el5_7.6.x86_64.rpm d84ae966982bd0c77160dac56a1c2ea891483d6ff26fe07b0affc5b3f18e669c php53-imap-5.3.3-1.el5_7.6.x86_64.rpm 2bb27e1d36785a44c22d9424a1751fe92c352a227bcc52cd25608f34449c01ae php53-intl-5.3.3-1.el5_7.6.x86_64.rpm a07cac8cd01077be4f94b2e7a718f9f92c75be6144a29d836421ed52bb90178a php53-ldap-5.3.3-1.el5_7.6.x86_64.rpm 28d6eceabbc05564a4b1ab05dd04c643cf76c5552e1e119b24969483193013d4 php53-mbstring-5.3.3-1.el5_7.6.x86_64.rpm 4df2b958c5a787c6c350cece50cf4f33cce4c487fbd133d16681adf961b034ee php53-mysql-5.3.3-1.el5_7.6.x86_64.rpm efed36e8e4721f20f4f84cd4e2ead5ffbdfe66b5d3f5151257c7ea0fac20fd22 php53-odbc-5.3.3-1.el5_7.6.x86_64.rpm 0ffdcefe380e5e301a5858aa3e8ebc8515e114b1571f40950c794bf094ab8485 php53-pdo-5.3.3-1.el5_7.6.x86_64.rpm 1735e957ef649c8442c0bbd32a4776ec720a49791575f6b4ac593f71d51fb24c php53-pgsql-5.3.3-1.el5_7.6.x86_64.rpm 70e281071c516d0a86161771a300cbcc6a6e28b9d44302d7cf3f658c76f76d25 php53-process-5.3.3-1.el5_7.6.x86_64.rpm 0ff0590a8284dd20fa89a341ff81fa9a6a38b8bbf1e4af6de0bcda0888489a81 php53-pspell-5.3.3-1.el5_7.6.x86_64.rpm d85ed1dae1595122c9afec792a5caec6009ca0faee0a228b4e764492d2935150 php53-snmp-5.3.3-1.el5_7.6.x86_64.rpm 5b9d4edfeb90d305eb8c6086055e56758e7e8f6c75a47bab925462b0bce702f1 php53-soap-5.3.3-1.el5_7.6.x86_64.rpm 2ff60f2ae8bd2ca71c6a6edc9fb8babbcc17514f26b7d5adb8a497cadf9ce905 php53-xml-5.3.3-1.el5_7.6.x86_64.rpm 52a3e72816c4fe01b0c781a72b732fe0971cd097cd82ae1897d6b21a2f33315f php53-xmlrpc-5.3.3-1.el5_7.6.x86_64.rpm Source: e005f4f374e9ea652fe33129800ef62e9a50b3143ca31d8d8826bb061c48077a php53-5.3.3-1.el5_7.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 5 Date: Fri, 3 Feb 2012 01:48:02 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0096 Moderate CentOS 4 ghostscript Update To: centos-announce(a)centos.org Message-ID: <20120203014802.GA2871(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0096 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0096.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 9f4f2e2c9950825395792ccafe52ce143e0c03804768006eaa16cb03ab985f26 ghostscript-7.07-33.13.el4.i386.rpm 0d1b85af3a54108b38c56339ebb4c860948cf32580ac90487418ea6f9cef6f83 ghostscript-devel-7.07-33.13.el4.i386.rpm c9922eafbc23063c02d2035cc4fe5aa0feedcaa18f948068adb34f46567acb2c ghostscript-gtk-7.07-33.13.el4.i386.rpm x86_64: 9f4f2e2c9950825395792ccafe52ce143e0c03804768006eaa16cb03ab985f26 ghostscript-7.07-33.13.el4.i386.rpm 876fdf2034a98b427f0191b8a4c99cb248a3ede3c8e0b3d8c67f0183531ad80e ghostscript-7.07-33.13.el4.x86_64.rpm ec020f236e43a93b5a0b933a48c3cbbb488e34386c45bff29fa15c2fc855066b ghostscript-devel-7.07-33.13.el4.x86_64.rpm 5db275a9036da06b579167d32183459cd544c1ea2f70f2c3d14eb2970dbf1b26 ghostscript-gtk-7.07-33.13.el4.x86_64.rpm Source: 98fd91e73185fd3356df87f2ad0ab4ff4149ecea4fae9261cdff3edaddb6920c ghostscript-7.07-33.13.el4.src.rpm -- Tru Huynh CentOS Project { http://www.centos.org/ } irc: tru_tru, #centos(a)irc.freenode.net ------------------------------ Message: 6 Date: Fri, 3 Feb 2012 01:49:54 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0093 Critical CentOS 4 php Update To: centos-announce(a)centos.org Message-ID: <20120203014954.GA3089(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0093 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0093.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: b6887bb0353187dda1bfb94f309a3b0985389bf6bdfc6b315ea301459bb90afd php-4.3.9-3.36.i386.rpm ee3646d19f32d82c63ae4fcd2a4b3f0e43a0995bf1386261d2eb9e936195217e php-devel-4.3.9-3.36.i386.rpm 7e2645aff527ce35504aba2cdd37dec316cb0e4951c475b68bfc31d2b7baf771 php-domxml-4.3.9-3.36.i386.rpm 0ad34c0c8d120893fe6eca24fb03f8db92e8d57839d95a59de3a119806209835 php-gd-4.3.9-3.36.i386.rpm 5a6528bd462d94ac9d6e1ca76d6f8362e62512d90501df9499649d8c54240de0 php-imap-4.3.9-3.36.i386.rpm aa8e03f2dda9ea89df9e58b7c19aa54fe91e79b03bd4c602c13964720b933ff2 php-ldap-4.3.9-3.36.i386.rpm e3a4dcec6fb8980a04174bfed568ff516a5df7af8ee92d102d3761c23ef92506 php-mbstring-4.3.9-3.36.i386.rpm eacc30a1c71c714f6a3fc322390941f07a0fb0e4cba7022bf7c66bbbff681a30 php-mysql-4.3.9-3.36.i386.rpm 9dc61049bd569d88a87629553c7f113fbed1cb419244ac41b634311882aef834 php-ncurses-4.3.9-3.36.i386.rpm 6c80fe8ff9a650504d46df3e0ac9989f468046a8f785606de5091412620ed67c php-odbc-4.3.9-3.36.i386.rpm 783b6323270e3e5cdb75ae040c6eb02ab113a7fc937182d8ec3264163a2316ce php-pear-4.3.9-3.36.i386.rpm 1a33ee1bd850828073d709e52cb746f419dd2a5a32c59274331477b560acfbd2 php-pgsql-4.3.9-3.36.i386.rpm a6cbe0d73477fbc676cc7ab1822d205a80ae6d06f083333054f1d86655e8ed5d php-snmp-4.3.9-3.36.i386.rpm b288c0425edc78365aa69ac686438ffba862e5dd97318bbfd6f803a360042501 php-xmlrpc-4.3.9-3.36.i386.rpm x86_64: 778992db8c258d51488f73ed4ead592c2dd905ceaec798c9fe50b3d8d6426ace php-4.3.9-3.36.x86_64.rpm 36d91af5bac27f36fa996c2a926e8dcd6c0de25b4c5323d68122a9314bc04ca4 php-devel-4.3.9-3.36.x86_64.rpm 2ac7fa92aba8f5932455ef54c7611c83dbc5f59267d4a72062fa5a2ba2ad6330 php-domxml-4.3.9-3.36.x86_64.rpm 36b7631fed8038731b350598d6b6cf844c25b1ab16a19e42f001d42f5666d818 php-gd-4.3.9-3.36.x86_64.rpm cb8e57789f2997cb104471b78d6b6c0712349cef8443540d2f0b919c4461daa7 php-imap-4.3.9-3.36.x86_64.rpm 820ae6e7ca9edc77ddaae1ee0fc58e03142f64ac991d98d5b6e8bd7c915523e0 php-ldap-4.3.9-3.36.x86_64.rpm 1f9024f27802f9b5b29c7052e9277f158c8744311b50a35bf853e21098a50ca6 php-mbstring-4.3.9-3.36.x86_64.rpm f6375a5cd6c36d3f5f7229f922ceeaca2f05cac54821d84c223f49f0ed8147a7 php-mysql-4.3.9-3.36.x86_64.rpm d300fe8f4ffbb19330e2558a9caab9c228b7c4d57b52401a6721bda1963c8b05 php-ncurses-4.3.9-3.36.x86_64.rpm eae6ce4e011cd604a04c59dd77d40fb3c7998464e7ea3825e324eed3ae000f26 php-odbc-4.3.9-3.36.x86_64.rpm e93a1466ee7d651c5ac806bb10c3e13cd0416f3b6aea474df93d5a76df2e4b13 php-pear-4.3.9-3.36.x86_64.rpm cfd38edd962c09d980e0ab76330710015e6315f64d01d4109fa807246cb9b056 php-pgsql-4.3.9-3.36.x86_64.rpm 2452527de98552de0637b88380025c30df47686b2c985068c4f43f68eae76ccf php-snmp-4.3.9-3.36.x86_64.rpm 0af66e2e42ace25cf810ddb2559bb83178c7050c72c20f68810e08bd6efab5cf php-xmlrpc-4.3.9-3.36.x86_64.rpm Source: d05123322910da40dc54b2f0a89b115738069eaed16820b992da46156be21465 php-4.3.9-3.36.src.rpm -- Tru Huynh CentOS Project { http://www.centos.org/ } irc: tru_tru, #centos(a)irc.freenode.net ------------------------------ Message: 7 Date: Fri, 3 Feb 2012 02:16:06 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0095 Moderate CentOS 6 ghostscript Update To: centos-announce(a)centos.org Message-ID: <20120203021606.GA4644(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0095 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0095.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: da990b202f0b81f00375793d251f0ef4d0a316c470ae3b6e1c3845049b427352 ghostscript-8.70-11.el6_2.6.i686.rpm 2da7b8deef639b782631987b1b3b9bccd2b4e89526f81c3382cc6b72744a8e51 ghostscript-devel-8.70-11.el6_2.6.i686.rpm f91451f53a38ee524e14dd5ed6d89125c6935c9e7a246e16256f985a0d9f58e8 ghostscript-doc-8.70-11.el6_2.6.i686.rpm 76644da9f2de942dc48436e8286434081c605cd80ee9065f7c2b61c7ffda9ae5 ghostscript-gtk-8.70-11.el6_2.6.i686.rpm x86_64: da990b202f0b81f00375793d251f0ef4d0a316c470ae3b6e1c3845049b427352 ghostscript-8.70-11.el6_2.6.i686.rpm 98e62447086b09cb8e8ca19fb1f806b37ee06a1ccebdf0f549f927499963d3c1 ghostscript-8.70-11.el6_2.6.x86_64.rpm 2da7b8deef639b782631987b1b3b9bccd2b4e89526f81c3382cc6b72744a8e51 ghostscript-devel-8.70-11.el6_2.6.i686.rpm 8569d0259aebf17278ba32e011a73fe603b31e349ceb3db38db8ba4bb9bd019b ghostscript-devel-8.70-11.el6_2.6.x86_64.rpm 7e4735f5b9df4e79219cd5238aed94ac35523b2cffa60b60f2722d4591969cce ghostscript-doc-8.70-11.el6_2.6.x86_64.rpm b392e76fad9350e2a9cff6cf349f83b1f1665e994c34b6fca6d21cd35cacc041 ghostscript-gtk-8.70-11.el6_2.6.x86_64.rpm Source: 96643ff13da209b1acdafd1d70e78a1da0bf513dcde5d10056eed8388697476f ghostscript-8.70-11.el6_2.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ Message: 8 Date: Fri, 3 Feb 2012 02:16:36 +0000 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2012:0093 Critical CentOS 6 php Update To: centos-announce(a)centos.org Message-ID: <20120203021636.GA4863(a)chakra.karan.org> Content-Type: text/plain; charset=us-ascii CentOS Errata and Security Advisory 2012:0093 Critical Upstream details at : https://rhn.redhat.com/errata/RHSA-2012-0093.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: ac71d734511bfded09983f30b2a04fe8b106ef1540e2a94edb5182b9f00af0b2 php-5.3.3-3.el6_2.6.i686.rpm be47a904d3daee3aa35d6089edafefcefcb5fe0dd0232772da0ef54513cb65e4 php-bcmath-5.3.3-3.el6_2.6.i686.rpm fb9bf84c509f58b8f24f620bb5799cd3998ec8d7503ea363c7ea44be89b12520 php-cli-5.3.3-3.el6_2.6.i686.rpm e3427e9fec72102d47870a3ed51774a98efe0984a8d22dc9d27637e7721b8803 php-common-5.3.3-3.el6_2.6.i686.rpm 2af43097586d2a6127c10ebccc6458915d30e45b45cc000cdaae3668fe169828 php-dba-5.3.3-3.el6_2.6.i686.rpm a8a63df9d3bba70eb4216b701e90311267e778d1ed2a9ce3b1c7f39717bf8d8c php-devel-5.3.3-3.el6_2.6.i686.rpm f90cdd462bbc03a535c5ea4508957448bd6286c45ea4c5826dae8ff39b65815b php-embedded-5.3.3-3.el6_2.6.i686.rpm 14d89c19b4f2f99d7fae69e71f374c4ab7a3db2ac7159507978057027938b137 php-enchant-5.3.3-3.el6_2.6.i686.rpm fa1f05cb0aac5a82b75e9436e5caba9af67fa5f75874cfc938cb9abff3eeeb2e php-gd-5.3.3-3.el6_2.6.i686.rpm 38849c45c5482acbd8c36ba3cf76269636c43c4a8db6ffc3313c7c1ee3878dfd php-imap-5.3.3-3.el6_2.6.i686.rpm cc30117ce48bcaeeaeb339d56b618ecb38184a58cbd96ee457ec016482c94a19 php-intl-5.3.3-3.el6_2.6.i686.rpm 7e0af8d1afe2676d81fdaa7536f1b04beaf5201c8a247e9b9c7719868ee9f180 php-ldap-5.3.3-3.el6_2.6.i686.rpm e8e7889d36643b3e9cba1dd4ef8aad44a1c876140e71e2b1cd30abf6e0efc074 php-mbstring-5.3.3-3.el6_2.6.i686.rpm 24c6e2bd87d2d4510b1e51b1472ce73ce24fef297ae61a36802a97fcfa48dcda php-mysql-5.3.3-3.el6_2.6.i686.rpm e6766d7d236a44f63f9a3adeffbec8dbb83145d302197991ef48713cc9e86be5 php-odbc-5.3.3-3.el6_2.6.i686.rpm 448ab46bcf8829bcc48eaed2cf05b05bc1b8b4abae1b2051fb0b7a83613911b3 php-pdo-5.3.3-3.el6_2.6.i686.rpm fb43cfc8295089f8c0f06f006dad84d2d8ec17ef1cfbfb4d254ba5f9e1c8f618 php-pgsql-5.3.3-3.el6_2.6.i686.rpm 0c578fcb8599e18ff095f13af2f31f81bf69f99a0ffcc2d5087b61b37de1ddd1 php-process-5.3.3-3.el6_2.6.i686.rpm 91a6aad492887504cad41ff73f1e64744a7f909f7f20b2510964f1e6506585c6 php-pspell-5.3.3-3.el6_2.6.i686.rpm 00fe9ac698e1c098f43da994f60fe1117f7f346cbac4523b919a87273963c484 php-recode-5.3.3-3.el6_2.6.i686.rpm aac4a92a50122935441274c42c5b850246335b3c75f403f9842a54f75609f845 php-snmp-5.3.3-3.el6_2.6.i686.rpm 1b78cf079cc17e600e746ae981a2f63bf913dc494a8d022d1b54e7764a05f4f5 php-soap-5.3.3-3.el6_2.6.i686.rpm 1fdecd600bf5f422d4166d4631aec7bd670920291926122d4215016a1c184619 php-tidy-5.3.3-3.el6_2.6.i686.rpm 0fe5d89547221b4726d59d6fa87b6901a9e4c0bcc410e0474bc42487cc2af050 php-xml-5.3.3-3.el6_2.6.i686.rpm 0a5f106b054f7062c3d565252effe0d52503c07f885764651e4c940a37c7240c php-xmlrpc-5.3.3-3.el6_2.6.i686.rpm 27071d2c53bfc673f47cc1f7630b792510a628bb260a922ac005f70ff3ea67d2 php-zts-5.3.3-3.el6_2.6.i686.rpm x86_64: 99da93985972188ae0f963b038348700c8f20d1f728cb20d0723f802ae7b03a2 php-5.3.3-3.el6_2.6.x86_64.rpm a0f733a78599c1e6d432bb76a34454e9bdf8ba71e8ae5afacebf1c78f11175c7 php-bcmath-5.3.3-3.el6_2.6.x86_64.rpm b332848a9378e222b336e47695ff09773f2873cf1940ed35be76dfa1f79272b3 php-cli-5.3.3-3.el6_2.6.x86_64.rpm 334c04892236df0d3da739dd4a47078c2ba8db295addbb663e340217686c2dff php-common-5.3.3-3.el6_2.6.x86_64.rpm b64324f32d16db13dec4d4049e71be1ed0763e63ea753ddf1f70dceb346f24b8 php-dba-5.3.3-3.el6_2.6.x86_64.rpm cf5b50e67a71e62585841e4b471ab58d79e817b70cb4b7f6bd96f3ad256270c4 php-devel-5.3.3-3.el6_2.6.x86_64.rpm 5c89079ffd232378a5087b86bef11cd87407650b66ba1a9b181a397358246d7a php-embedded-5.3.3-3.el6_2.6.x86_64.rpm e63668c12784e0b44eb68f4df4e1b9c3a1f1f78625d8b3e6b26d4c2c9248803c php-enchant-5.3.3-3.el6_2.6.x86_64.rpm f4614bb77228bab577c775bd8486f7a0a113a65df9a6aaa9a72c28e32e79dd7b php-gd-5.3.3-3.el6_2.6.x86_64.rpm 78cdadee024add1fcc92ebebaa8d2a3419181753bfb03391256c64718b90a59b php-imap-5.3.3-3.el6_2.6.x86_64.rpm 39c7f714119acfd32a4f70b22a13365ce02a4aa8763b6b1473e6755f20dc8ce5 php-intl-5.3.3-3.el6_2.6.x86_64.rpm 7ab8560a544dd22f027097ca23cc64c9f4596591b43f9a61de0ff0d87b251916 php-ldap-5.3.3-3.el6_2.6.x86_64.rpm ffcb53ffcbcfdd6df122943305ae8b87b447365a3b0296cd3eb2ed3154b66253 php-mbstring-5.3.3-3.el6_2.6.x86_64.rpm 7895769f1af9b346a275c5e6799b7399c0b6ddeb0cd88b351651f06901f5c2e1 php-mysql-5.3.3-3.el6_2.6.x86_64.rpm 006f26db79775dcd16a4cc3d5fbf241d3516accd48c02a09c03b2e6f7a8064ee php-odbc-5.3.3-3.el6_2.6.x86_64.rpm 1ecd6dfe170def072f563b7ff5c7d91cdfaa4f457afd0f72e2d8517892f9a68c php-pdo-5.3.3-3.el6_2.6.x86_64.rpm 093e3364056a4fe6dab77d11b704487b7e3174d2dc6093347b41372d41035c64 php-pgsql-5.3.3-3.el6_2.6.x86_64.rpm 0a196d116438fd831b0f9aa817b75b925ed8adbf7f08102f2d92131e97b94cdd php-process-5.3.3-3.el6_2.6.x86_64.rpm 3f98bbed27a029c984cf4f6b1df0eb5e729f887e71dcd21b57282b07d676297b php-pspell-5.3.3-3.el6_2.6.x86_64.rpm 1fdf4b3cf9819e6a914bd5e33e6096a8c8eb54bcf3c5bd17c66fb39d0f8b27f0 php-recode-5.3.3-3.el6_2.6.x86_64.rpm 9322a39e67237e6ae0c8db9072eadda0d0755333e74c01c02308756d5028b2b1 php-snmp-5.3.3-3.el6_2.6.x86_64.rpm 906449ad5f262163d40962f5b87098e6aa0639912db62937e92a2e70523aff38 php-soap-5.3.3-3.el6_2.6.x86_64.rpm d899934cce915f79042d89626dbdc511df25407137cade6a758f25881323bc6a php-tidy-5.3.3-3.el6_2.6.x86_64.rpm 79bf424ce3189db8eb7fc42c215f2f929f3e130f7f76541164cadbc1a30ad5d8 php-xml-5.3.3-3.el6_2.6.x86_64.rpm 3d9a0f511d42fca8c53e631555495f7f7d98c74754b227a13d58dc1b4f7045e6 php-xmlrpc-5.3.3-3.el6_2.6.x86_64.rpm 661ea1faa7885494c51fe2422277efe5ad9cb90216446279325b643010a022d7 php-zts-5.3.3-3.el6_2.6.x86_64.rpm Source: ec39e3d07f0c5ac1203c0722ec5b718f296a09126a3de901a581776e5ce05ba7 php-5.3.3-3.el6_2.6.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos(a)irc.freenode.net ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 84, Issue 3 **********************************************

1 0

postfix - reject of incoming mail due to helo check??
by Rob Kampen 03 Feb '12

03 Feb '12

Hi list, I have been getting the following types of log messages Jan 30 08:22:33 ndgonline postfix/smtpd[30538]: NOQUEUE: reject: RCPT from unknown[71.46.229.50]: 450 4.7.1 Client host rejected: cannot find your hostname, [71.46.229.50]; from=<DWoodman(a)orangebankfl.com> to=<rkampen(a)ndgonline.net> proto=ESMTP helo=<mail.floridianbank.com> a rdns check shows all is well with 71.46.229.50 - it belongs to the from senders domain name. ;; ANSWER SECTION: 50.229.46.71.in-addr.arpa. 777 IN PTR mail2.orangebankfl.com. It seems it is being rejected due to the helo domain name - which does not have a correct rdns. My problem is that I do not specify the helo check?? this is the relevant portion of main.cf <snip> smtpd_helo_required = yes smtpd_delay_reject = yes #added 20090410 strict_rfc821_envelopes = yes smtpd_helo_restrictions = permit_mynetworks, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, permit smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender, reject_unknown_client, reject_unauthenticated_sender_login_mismatch, permit smtpd_sender_login_maps = hash:/etc/postfix/smtpd_sender_login_map smtpd_client_restrictions = check_client_access hash:/etc/postfix/access smtpd_recipient_restrictions = reject_unauth_pipelining, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_sender_access hash:/etc/postfix/sender_access, check_recipient_access hash:/etc/postfix/roleaccount_exceptions, check_helo_access pcre:/etc/postfix/helo_checks, reject_rbl_client sbl-xbl.spamhaus.org, reject_rbl_client cbl.abuseat.org, reject_rbl_client dul.dnsbl.sorbs.net, check_policy_service unix:postgrey/socket, permit # reject_unauthenticated_sender_login_mismatch smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous #, noplaintext broken_sasl_auth_clients = yes </snip> so no reject_unknown_helo_hostname check - so why is it throwing them out? Thanks for anyone's insight.

7 13

Re: [CentOS] postfix - reject of incoming mail due to helo check??
by Les Mikesell 03 Feb '12

03 Feb '12

On Fri, Feb 3, 2012 at 8:14 AM, Reindl Harald <h.reindl(a)thelounge.net> wrote: > > on both sides of the NAt you need a DNS with the correct mapping > the host on the other side is not interested in your NAT > it sees a IP, a HELO and DNS-Records > > so it is YOUR job as admin to provide the correct HELO for your > outgoing IP and even configure the DNS behind the NAT correctly > if you like it really clean Your HELO has nothing to do with your source IP, and you can't possibly expect a multi-homed server to adjust its HELO to the interface it happens across. Expecting the reverse DNS of the source IP to give a name that has the same IP in an A record lookup is somewhat different, but still I don't think that is an actual requirement. As a mail admin, you are of course free to discard your users' mail for any whimsical reason you like, but if you want to say it is a requirement, please quote the MUST in an RFC. -- Les Mikesell lesmikesell(a)gmail.com

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss