- Discuss - lists.centos.org

Recent Java OpenJDK RPMs
by Mathieu Baudier 28 Dec '09

28 Dec '09

Hello, I have quite a few issues with the default OpenJdk package on CentOS 5.4 x86_64 (e.g. crash of Eclipse [1], and now excessive permgen memory requirement causing the JVM to freeze and requiring a kill -9). These issues do not appear with a local build of the latest stable IcedTea [2], so I am considering using a more recent version of the JVM (I am not running Red Hat certified Java apps). Does anyone know of ongoing efforts to provide recent versions of the JDK as (S)RPMs? I found some in CentOS Testing [3] but they date back from July 2008 and are b09 whereas current is b16. Thanks in advance for any hints! Cheers, Mathieu [1] http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=401 [2] http://icedtea.classpath.org/wiki/RhelBuildInstructions [3] http://dev.centos.org/centos/5/testing/x86_64/RPMS/

2 1

environment-modules
by m.roth＠5-cent.us 27 Dec '09

27 Dec '09

We've got a developer here who needs to use both java and openjdk. I was giving her sudo for alternatives, but my manager would prefer that I look into environment-modules. I've installed it, and I see it comes with configurations for cvs and info... but nothing for java, and the man pages doesn't seem to offer info on creating one. Does anyone have a pointer to a howto, or maybe even a sample one? Thanks in advance. mark

6 10

SFTP - stalled - on large files
by Sean Carolan 27 Dec '09

27 Dec '09

I have an SSH server that was set up for a client, and every time we try to upload large files via SFTP or scp, the transfers speed quickly slows to zero and gives a - stalled - status message, then disconnects. Here is an example: ftp> put iTunesSetup.exe iTunesSetup.exe Uploading iTunesSetup.exe to /home/scarolan/iTunesSetup.exe iTunesSetup.exe 0% 704KB 0.0KB/s - stalled -debug1: channel 0: free: client-session, nchannels 1 Read from remote host ftp.authoria.net: Connection reset by peer debug1: Transferred: stdin 0, stdout 0, stderr 66 bytes in 203.9 seconds debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.3 debug1: Exit status -1 Connection closed I have no idea why this is happening. Can anyone point me in the right direction?

7 13

CentOS 5.4 Upgrade installation failure
by Edward Diener 26 Dec '09

26 Dec '09

CentOS 5.3 has been running fairly good except for a slow ethernet connection so I thought I would upgrade to CentOS 5.4 to see if that improved things. I had previously changed fstab and menu.lst to use UUID instead of LABEL in order to insulate myself from partition label changes I wanted to make. This worked fine in CentOS 5.3. When I attempted to upgrade from 5.3 to 5.4 using the installation disk and telling it to upgrade rather than do a new install, the installation correctly found my root partition as /dev/sdb8. When I proceeded with the upgrade I received the error: "Error mounting device UUID=cee298a0-9c47-4a3a-ac84-23db4d20edd5 as /. No such file or directory. This most likely means the partition has not been formatted." But of course it has been formatted and is my / partition running CentOS 5.3. Does anyone know how to fix this to get CentOS 5.3 upgraded ? Do I have to use LABEL in fstab and menu.lst for my partitions, or perhaps just for my root partition ? Any other ideas why this is failing ?

3 4

rhn_register
by Timothy Murphy 26 Dec '09

26 Dec '09

Is this available on CentOS systems? If so, what advantage does running it provide? -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

3 3

Missing virtio-win in CentOS 5.4
by Sebastian Marten 26 Dec '09

26 Dec '09

Hello, I Installed 5.4 on a test system to use KVM, but i didn't find the "virtio-win" package with the Windows drivers. -> http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Virtuali… Is this a CentOS or Upstream Problem? Regards, Sebastian

6 5

I had a 5.4 installation crash and generate a log file - where do I send it?
by Jeff Silverman 26 Dec '09

26 Dec '09

People, While installing 5.4, I ran into an unhandled exception. It generated a log file, which I saved successfully. Unfortunately, I neglected to write down where to send the log file. Where does it go? Thank you Jeff Jeff Silverman | Network Support Engineer D 206.272-6465 F 206.272-5541 www.f5.com<http://www.f5.com> [file:///C:\Documents%20and%20Settings\silverman\Application%20Data\Microsoft\Signatures\f5_logo_2009.gif]

3 2

ip range cidr calculator
by Frank Cox 25 Dec '09

25 Dec '09

I found a command-line program that did this once before, used it for a while and then forgot about it until right now and I'll be damned if I can find it again. A command line IP calculator that takes an address range and give it back in cidr format. I found an online one that does this here: http://www.ipaddresslocation.org/subnet-mask-calculator.php But I would prefer to have the commandline one back again. Does anyone know what it's called and where it can be found? -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

3 5

Re: [CentOS] attack
by Manu Verhaegen 25 Dec '09

25 Dec '09

Hi, We have plesk running, i have running logwatch and i have found a IP adress. I have add it in the IP table to block it then the attack is solved. We see a lot of outgouing emails a php script is used for sending many emails possible stored in the database. I have use the following command grep 'ipadres' /var/www/vhosts/*/statistics/logs/access_log grep 'ipadres' /var/log/httpd/access.log it do not find any record. Regards, Manu Verhaegen -----Oorspronkelijk bericht----- Van: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] Namens Pete Verzonden: donderdag 24 december 2009 12:45 Aan: CentOS mailing list Onderwerp: Re: [CentOS] attack On Thu, 2009-12-24 at 11:31 +0000, Manu Verhaegen wrote: > Hi, > > My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. > > Regards, > maverh Hi Maverh, I know this may sound like a silly question but how do you know your server is under attack ? As others have advised, have you checked your logs on the server ? What are you running that's being attacked ? /var/log/httpd /var/log/messages Regards, Pete. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

6 5

questions relate to "sar"
by mcclnx mcc 25 Dec '09

25 Dec '09

We have CENTOS 5.3 on DELL server. I tried to use "sar -b" or "sar -u" and it only show report starting on 12:00 A.M. my questions are: 1. for "sar -u" or "sar -b" how can I generate two or three days ago report? 2. how to generate daily report from "sa2 " peocess? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

3 2

About liveCd installation...
by Tolun ARDAHANLI 25 Dec '09

25 Dec '09

Hi List; I didn't found the installation from Centos5.4 LiveCD. Does not have any installation script inside this distribution? or How can I start to install LiveCd to HDD? Thanks a lot... Sincerely, Tolun ARDAHANLI Computer Engineer web: www.ardahanli.net E-mail: tolun(a)ardahanli.net Icq:326600

2 1

SOLVED -Re: OT: How can I tell if a web site is now blocking IPs from my country?
by Lanny Marcus 25 Dec '09

25 Dec '09

On Sun, Dec 6, 2009 at 4:22 PM, Lanny Marcus <lmmailinglists(a)gmail.com> wrote: > I have always been able to browse, without any problems, > http://www.mobile-review.com/index-en.shtml but for the past 2 or 3 > days, Mozilla Firefox just hangs "connecting to ...." How can I tell > if they have started blocking IP addresses from Colombia? <snip> After using the traceroute servers, I was pretty sure this was a connectivity problem. There seemed to be a problem with a router in Russia (the web site is in Moscow). I reported the problem to a man at mobile-review.com and the problem went away. :-) Lanny -------------------------------------- Magazine subscriptions Largest discount Credit/Debit Card Check Pay Pal http://lowcostmagazines.com/

1 0

kvm-shell
by Michael Kress 25 Dec '09

25 Dec '09

Hi, I don't know if that already exists somewhere ... I've written it for me and wanted to share it with you. It's minimal kvm shell for end users - it allows them to start/stop/reboot their own kvm guests. http://www.michael-kress.de/2009/12/kvm-shell/ kvm-shell should run on all platforms. Have fun. Regards Michael -- Michael Kress, kress(a)hal.saar.de

1 0

[OT] Urgent request
by tdukes＠sc.rr.com 24 Dec '09

24 Dec '09

Help, Our server at work is down. The video memory is out. Its an old IBM PC300PL, 6892-12U, running SCO. If anyone happens to a stick of this type memory and would be willing to sell it, please let me know. Below are the requirements for the video memory: The video memory interface is controlled by an S3 TRIO 3D graphics controller. The amount of SGRAM shipped with the video subsystem is 4MB in the PC 300PL computers, and 2MB in the PC 300GL computers. The video memory module used in the PC 300PL (Types 6862 and 6892) is 2 MB 512K X32, with 100MHz SGRAM. The video memory module used in the PC 300GL (Types 6275 and 6285) is 2 MB 256K X32, with 100MHz SGRAM. The PC 300GL (Types 6275 and 6285) can be upgraded from 2 MB SGRAM to 4 MB SGRAM with a 2 MB SGRAM SODIMM. The SODIMM can be plugged into the SODIMM socket on the system board. I know, this machine should have been scraped a long time ago. TIA

16 25

Re: [CentOS] attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

Hi, i ame checking this thanks, Manu -----Oorspronkelijk bericht----- Van: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] Namens Kai Schaetzl Verzonden: donderdag 24 december 2009 15:32 Aan: centos(a)centos.org Onderwerp: Re: [CentOS] attack Obviously, if you are running several vhosts and plesk you likely have other logs to check. Also, one can usually see the origin of the mail injection in the maillog (e.g. complaints about setting to an unsafe sender) or in the outgoing messages. At runtime you can see the connects with full URLs on the apache status page. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Inquiry:yum?
by hadi motamedi 24 Dec '09

24 Dec '09

Dear All I want to add "yum" to my CentOS 5.2 so I downloaded the rpm package from the www.pbone.net . But I didn't have success in installing it so please let me know if there is another way to accomplish this job ? Thank you in advance

12 31

Re: [CentOS] attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

Hi, i have Check my tmp directory and subdirectorys for std, udp.pl no file exist. Also i have check /etc/passwd and /etc/shadow for unusual users. regards -----Oorspronkelijk bericht----- Van: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] Namens Thomas Dukes Verzonden: donderdag 24 december 2009 13:08 Aan: 'CentOS mailing list' Onderwerp: Re: [CentOS] attack > -----Original Message----- > From: centos-bounces(a)centos.org > [mailto:centos-bounces@centos.org] On Behalf Of Manu Verhaegen > Sent: Thursday, December 24, 2009 7:04 AM > To: CentOS mailing list > Subject: Re: [CentOS] attack > > at the moment everiting is solved i have block the IP adress > but i d'ont have found the script > So you are the attacker. Happened to me a couple weeks ago. Check your tmp directory and subdirectory for std, udp.pl. Also check /etc/passwd and /etc/shadow for unusual users. Should be at the very bottom of those files. _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

2 1

Re: [CentOS] attack
by david＠pnyet.web.id 24 Dec '09

24 Dec '09

Triying find to what are users running on spacific command, you should using top or ps or netstat please read the manual how to use it. After all and you get some info unpluge your server from internet, see what log says. ------Original Message------ From: Manu Verhaegen Sender: centos-bounces(a)centos.org To: centos(a)centos.org ReplyTo: CentOS mailing list Subject: [CentOS] attack Sent: Dec 24, 2009 6:31 PM Hi, My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. Regards, maverh _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Warm regards, David --------------------- ./nobody

1 0

Re: [CentOS] attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

at the moment everiting is solved i have block the IP adress but i d'ont have found the script >----- Oorspronkelijk bericht ----- >Van : david(a)pnyet.web.id [mailto:david@pnyet.web.id] >Verzonden : donderdag , december 24, 2009 01:07 PM >Aan : 'CentOS mailing list' >Onderwerp : Re: [CentOS] attack > >Triying find to what are users running on spacific command, you should using top or ps or netstat please read the manual how to use it. After all and you get some info unpluge your server from internet, see what log says. > >------Original Message------ >From: Manu Verhaegen >Sender: centos-bounces(a)centos.org >To: centos(a)centos.org >ReplyTo: CentOS mailing list >Subject: [CentOS] attack >Sent: Dec 24, 2009 6:31 PM > >Hi, > >My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. > >Regards, > maverh > > > > > > >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos > > >Warm regards, >David >--------------------- >./nobody >_______________________________________________ >CentOS mailing list >CentOS(a)centos.org >http://lists.centos.org/mailman/listinfo/centos > >

2 1

attack
by Manu Verhaegen 24 Dec '09

24 Dec '09

Hi, My server is under attack allows the attacker to abuse of a php script of a vhost. How can I find what is the script. Regards, maverh

4 3

partitioning order and IO performance
by Carlos Santana 24 Dec '09

24 Dec '09

Hi, Does mount point specification while partitioning (order in which I specify /, /boot, swap etc..) affect performance? I am not sure about the syntax, but I guess one can also specify address/block range while partitioning. Does it affect IO performance? Probably a stupid question, but just curious.. Any insights? Thanks, CS.

7 11

OT:Which filesystem to use with large files
by carlopmart 23 Dec '09

23 Dec '09

Hi all, Recently I have installed a centOS 5.4 server to use as a home NAS server. I need to use large files (8GB minimum) inside of it to serve via iSCSI services. Which filesystem do you recommends me to reach maximum performance: xfs, ext3, ext4, gfs2 ....?? Thanks. -- CL Martinez carlopmart {at} gmail {d0t} com

4 9

donations
by Jerry Geis 23 Dec '09

23 Dec '09

The donation page does not seem up to date: *Monetary* CentOS is currently reviewing our cash donation program. If you are looking to make a cash dontation to the CentOS Project, please check back here after August 15th, 2009. I sent an email to the webmaster but did not get a reply. I thought I would post. Anything new on this? Thanks, Jerry

2 1

/dev/video* permissions
by Boris Epstein 23 Dec '09

23 Dec '09

Hi all, Does anybody know where those permissions are controlled? I've looked in /etc/udev and everywhere else I could think of and thus far I have seen not a hint... Thanks in advance for all your help. Boris.

1 0

fully automatic installation FAI?
by David Mehler 23 Dec '09

23 Dec '09

Hello, Is anyone running a software package called FAI for Fully Automatic Installation on a CentOS server? I was wondering if there were any issues to running it? Thanks. Dave.

2 1

CentOS 5 and Fedora Core
by Matt 23 Dec '09

23 Dec '09

If memory serves me correctly I was told CentOS 4.x was based on Fedora Core 3. So when finding a rpm I always looked for one for Fedora Core 3 and then it seemed to install ok on CentOS 4. Is CentOS 5 the same way and if so what Core is it based on? Matt

5 4

eME627-5082 laptop and Linux?
by Scott Ehrlich 23 Dec '09

23 Dec '09

Anyone have experience with this laptop running C5 5.4 32 or 64-bit? Any known problems/issues? Thanks. Scott

1 0

iptables ... *BSD pf ... pfSense
by Götz Reinicke - IT Koordinator 23 Dec '09

23 Dec '09

Hi, I followed the "Optimizing CentOS for gigabit firewall" posting and as some posters wrote pf is soo sooo ssooooo mutch faster, I was thinking to give it a try. But I'm not familier to BSD so I was looking for some tools and found "pfsense" http://www.pfsense.org/ "pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router" Has any of the firewall guys on the list ever tested this distri? What do you think? Right now we run a iptables Shorewall system and had no problems so far, but having a "managed" firewall distri which rocks whould be an alternative. Cheers, Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium Geschäftsführer: Prof. Thomas Schadt

4 3

advanced routing, 2isp
by David Hláčik 23 Dec '09

23 Dec '09

Guys, please I have no luck with this. I have 2 ISPS. I have working configuration with ip route a 2 routing tables in a way, that matching local subnet uses second provider while all the others are using the first one - main. The main problem I am having is, that I am unable to reach my router via public ip address of that second ISP. This is my default routing table [root@sx1 cron.hourly]# ip route show table main 194.228.196.39 dev ppp0 proto kernel scope link src 90.178.76.117 10.123.50.101 dev ppp2 proto kernel scope link src 10.123.50.1 10.123.50.100 dev ppp1 proto kernel scope link src 10.123.50.1 213.194.242.0/24 dev eth1 proto kernel scope link src 213.194.242.198 10.123.20.0/24 dev eth0 proto kernel scope link src 10.123.20.1 10.123.10.0/24 dev eth0 proto kernel scope link src 10.123.10.11 10.123.11.0/24 dev eth0.8 proto kernel scope link src 10.123.11.1 10.123.42.0/24 dev eth0.5 proto kernel scope link src 10.123.42.1 10.123.123.0/24 dev eth0.7 proto kernel scope link src 10.123.123.1 10.123.40.0/24 dev eth0.4 proto kernel scope link src 10.123.40.1 10.123.30.0/24 dev eth0 proto kernel scope link src 10.123.30.1 10.123.44.0/24 dev eth0.6 proto kernel scope link src 10.123.44.1 169.254.0.0/16 dev eth0.8 scope link default via 213.194.242.1 dev eth1 As you can see , my default provider has gateway 213.192.252.1 , connected via eth1 . This works fine for me. Second configuration is ip rule based, when subnet 10.123.123.0/24 goes to routing table adsl [root@sx1 cron.hourly]# ip rule show 0: from all lookup 255 32764: from all fwmark 0x1 lookup adsl-vpn 32765: from 10.123.123.0/24 lookup adsl 32766: from all lookup main 32767: from all lookup default [root@sx1 cron.hourly]# ip route show table adsl 194.228.196.39 dev ppp0 scope link src 90.178.76.117 10.123.123.0/24 dev eth0.7 scope link src 10.123.123.1 default via 194.228.196.39 dev ppp0 As you can see in this case, all trafic goes via ppp0 (my second internet provider connected via ppp0 - adsl ppoe). This works fine. What I want to achieve is, now being able to ping /access/whatever to my server via second public IP address of my adsl provider (90.178.76.117). To achieve this i have added iptables rule, which marks all packets comming via ppp0 (iptables -t mangle -A PREROUTING -i ppp0 -j MARK --set-mark 0x1). And created another routing table named adsl-vpn [root@sx1 cron.hourly]# ip route show table adsl-vpn 194.228.196.39 dev ppp0 scope link src 90.178.76.117 10.123.10.0/24 dev eth0 scope link src 10.123.10.11 default via 194.228.196.39 dev ppp0 Now i have added ip rule, which for all packets marked as 1 , which are the ones which came trough ppp0 = my second ISP, uses table adsl-vpn [root@sx1 cron.hourly]# ip rule show 0: from all lookup 255 32764: from all fwmark 0x1 lookup adsl-vpn <--- this one 32765: from 10.123.123.0/24 lookup adsl 32766: from all lookup main 32767: from all lookup default Well, now I should be able definitely to ping my server from outside, but it does not works Pinging from windows machine in outside world : C:\Users\boss>ping 90.178.76.117 Pinging 90.178.76.117 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Ping statistics for 90.178.76.117: Packets: Sent = 3, Received = 0, Lost = 3 (100% loss), If i will tcpdump my ppp0 interface on my router I see the ICMP echo requests are comming [root@sx1 cron.hourly]# tcpdump -i ppp0 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes 09:08:27.743789 IP adsl-dyn118.78-98-105.t-com.sk > gw2.cz.polarion.com: ICMP echo request, id 1, seq 72, length 40 But, echo responses from my server NOT, instead of that, responses are comming out of eth1 interface , which is my first ISP! [root@sx1 cron.hourly]# tcpdump -i eth1 |grep ICMP tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes 09:09:30.451706 IP gw2.cz.polarion.com > adsl-dyn118.78-98-105.t-com.sk: ICMP echo reply, id 1, seq 73, length 40 09:09:35.409704 IP gw2.cz.polarion.com > adsl-dyn118.78-98-105.t-com.sk: ICMP echo reply, id 1, seq 74, length 40 This means that either mange is not working or ip rule is not working . Please help, David

1 0

iptables -m connlimit
by Helmut Drodofsky 23 Dec '09

23 Dec '09

Hi, to the use of connlimit, I have found http://lists.centos.org/pipermail/centos/2008-June/059656.html Is there something new with centos 5.3 or 5.4? Helmut

1 0

SOLVED - Re: Frustrations with MySQL loss, tcpdump, netstat, etc
by Slack-Moehrle 22 Dec '09

22 Dec '09

Hi Guys, OK, I figured out the problem, It would seem that Comcast spelling my DNS entry wrong would do it! I have done this a zillion times, I was totally stumped as to what I would be missing this time. Thanks everyone for their help. -Jason ----- Original Message ----- From: "Kai Schaetzl" <maillists(a)conactive.com> To: centos(a)centos.org Sent: Tuesday, December 22, 2009 9:31:19 AM Subject: Re: [CentOS] Frustrations with MySQL loss, tcpdump, netstat, etc MySQL is *not* listening on TCP 3306 since *long* unless you tell it to in the my.cf. It uses a local Unix socket by default. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

NMS Opinions
by Joseph L. Casale 22 Dec '09

22 Dec '09

A recent post that mentioned Zabbix inspired me to have a look at them again while I was waiting on something as it’s been a while since I looked at them. Currently, I was using Nagios but had to start using Munin to add some functionality I needed and don’t want to continue down this road of supporting umpteen different packages. Between Zabbix, Pandora and HyperIQ, what would anyone familiar with these have to say. HyperIQ looks rather crippled for the FOSS version, Pandora’s website seems to be down☺ Maybe they a monitoring solution, heh… Any opinions appreciated! jlc

6 10

IPTABLES --hitcount maximum value
by James B. Byrne 22 Dec '09

22 Dec '09

In-Reply-To: <4B30F618.6060809(a)kinzesberg.de> On: Tue, 22 Dec 2009 17:38:48 +0100, "Dirk H. Schulz" <dirk.schulz(a)kinzesberg.de> wrote: > That is a new "phenomenon" I also ran into. You now have to > adjust memory values. > > I have added to my /etc/modprobe.conf > "options ipt_recent ipt_pkt_list_tot=75" > Now I can use hitcount values of 50 (did not test if the above > is sufficient for higher values). I found this on the net so I deduce that you would be safe up to a hitcount value of 75. > [PATCH] netfilter: ipt_recent: sanity check hit count > From: Daniel Hokka Zakrisson > Date: Sat Mar 15 2008 - 10:11:05 EST > > If a rule using ipt_recent is created with a hit count greater > than ip_pkt_list_tot, the rule will never match as it cannot > keep track of enough timestamps. This patch makes ipt_recent > refuse to create such rules. > > With ip_pkt_list_tot's default value of 20, . . . Thanks for the lead. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Frustrations with MySQL loss, tcpdump, netstat, etc
by ML 22 Dec '09

22 Dec '09

Hi All, Hi All, MySQL 5.0.77 on CentOS 5.4 MySQL is running, my Wordpress stuff is working, but I cannot connect to the server from my house. This server is in my house, however, but on a public IP, behind a firewall, etc. I checked my hardware firewall (a dedicated UnTangle system) and that is successfully allowing the passage. I know this because the firewall shows: 2009-12-22 6:29:41 am passed <my IP>:35606 <server IP>:3306 I checked the firewall (system-config-securitylevel-tui) on the server and that has 3306:tcp allowed. When I try to connect I get an error (4) which when I google says: "Interrupted System call" I have tried using the MySQL Workbench and other client software. If I look in /var/log/mysqld.log I dont see anything but the fact the server started. I tried stopping mysql with /etc/init.d/mysqld stop Then starting with mysqld_safe --init-file=/tmp/code.txt & Where code.txt contains: UPDATE mysql.user SET Password=PASSWORD('mypassword') WHERE User='root'; GRANT ALL ON mysql.* to 'root'@'127.0.0.1'; GRANT ALL ON mysql.* TO 'root'@'localhost'; GRANT ALL ON mysql.* TO 'root'@'my home IP'; FLUSH PRIVILEGES; commit; and I still cannot connect. But the database starts and this code executes because If I go to the console and run /usr/bin/mysql -u root -p and use this password from the update statement that password gets me in. So, on my server I run tcpdump host <my ip> and I dont think I see anything where 3306 is coming through. if I run a test MySQL connection from the MySQL Workbench and they run netstat on my server and I dont see a entry where 3306 is used in what netstat is dumping. What am I doing wrong? What can I check for? I am stumped! -Jason

5 7

Re: [CentOS] Frustrations with MySQL loss, tcpdump, netstat, etc
by ML 22 Dec '09

22 Dec '09

Rick, > have you tried to telnet to port 3306 of the machine where the mysql > server is located, from your home machine? if so, what do you get? > If you're successful you'll get a connect bit that includes a string > that will show your mysql server version number. if you don't have > mysql access you'll likely see a mysqld reject of some nature. if > there's a network issue you'll just get a hang or you could get an > unreachable error. Yup, it works: $ telnet 173.13.167.209 3306 Trying 173.13.167.209... Connected to mail.mailnewsrss.com. Escape character is '^]'. 4 5.0.77aWqQ!OMq,slG]|xft5L[fConnection closed by foreign host.

2 1

IPTABLES --hitcount maximum value
by James B. Byrne 22 Dec '09

22 Dec '09

Is the maximum permitted value for --hitcount documented anywhere? I reliably get a iptables-restore error when I specify a hitcount value greater than 20 but I cannot find any mention of there being a maximum value. -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

2 1

CENTOS 5.3 "kernel segfault at ..."
by mcclnx mcc 22 Dec '09

22 Dec '09

We have CENTOS 5.3 on DELL server. Recently I saw /var/log/messages have following pop-up: Dec 19 11:31:45 ORA2 kernel: oracle[18900]: segfault at fffffffffffffff0 rip 0000000007d54183 rsp 00007fff8eff2c60 error 4 Dec 19 11:31:49 ORA2 kernel: oracle[18902]: segfault at fffffffffffffff0 rip 0000000007d54183 rsp 00007ffff5e12a80 error 4 Dec 19 11:31:53 ORA2 kernel: oracle[18904]: segfault at fffffffffffffff0 rip 0000000007d54183 rsp 00007fff228684d0 error 4 Anyone know why? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

3 2

routing with 2 ISPs
by David Hláčik 22 Dec '09

22 Dec '09

Hello guys, Sorry to bothering you. I had a small network with one ISP and firewall. eth1 -> Is connected to my ISP eth0 + eth0.1 , eth0.2 and etc are my local networks. All my network accesses internet via eth1. My routing table looks like the following : 213.194.242.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 10.123.20.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.123.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.123.11.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.8 10.123.42.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.5 10.123.123.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.7 10.123.40.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.4 10.123.30.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 10.123.44.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.6 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0.8 0.0.0.0 213.194.242.1 0.0.0.0 UG 0 0 0 eth1 Recently I have added secon provider via ADSL. ADSL modem is connected via eth0.8 . Using adsl-setup I have created ppp interface ppp0. Now I want to achieve the following : Computers from local network range 10.123.123.0/24 (eth0.7) should access internet using my second internet provider via ppp0. I believe that for that I need to use advanced networking and iproute package. I will add the second routing table named "adsl" and configure routing via ppp0 there. Together with that i need to set in iptables , nat table to masquerade all ips going out via ppp0. I believe I need to use ip command for this. And the finally my questions are : 1) Is there a good tutorial / howto for using iproute on the internet, except of the LARTC.org 2) Can i utilize by tools of CentOS, to have my configuration (with second routing table, using ip ) somehow stored - to be permanent when I will do machine restart? I mean there are networking-scripts /etc/sysconfing/network-scripts which can handle, IP assigment, virtual LANS, aliases even static routes. Can they handle advanced routing as well? Thank you milion times. David Hlacik

3 4

xm mem-set on an F11 xen guest
by Scot P. Floess 22 Dec '09

22 Dec '09

I just tried to change the memory for my F11 xen guest from 512 to 1024. After executing: xm mem-set workstation 1024 xm list shows the memory still being 512. Anyone else see this behavior before? I tried other values as well - but the memory is still what it was when I created the VM... I'm running CentOS 5.4 on an i386... Scot P. Floess 27 Lake Royale Louisburg, NC 27549 252-478-8087 (Home) 919-890-8117 (Work) Chief Architect JPlate http://sourceforge.net/projects/jplate Chief Architect JavaPIM http://sourceforge.net/projects/javapim Architect Keros http://sourceforge.net/projects/keros

2 2

Munin CGI Graphs
by Joseph L. Casale 21 Dec '09

21 Dec '09

Anyone here running Munin w/ the CGI graphs? I must have missed something in the munin wiki as its creating the correct html, yet the only errors I get are apache suggesting it can't find the files for the png's? The cgi script has all the perl modules it requires installed. Thanks, jlc

3 4

scp copy remote files does NOT copy link?
by mcclnx mcc 21 Dec '09

21 Dec '09

We have CENTOS 5.3 on DELL servers. I tried to us following command to copy remote files system to local: scp -rp oracle@ORA2:/home/app/oracle/10.2 . After SCP finish copy, I found some files on source file system using "link" but on target file systems it change to "physical file". Does there has way scp not change "link" setup? Thanks. ___________________________________________________ 您的生活即時通－溝通、娛樂、生活、工作一次搞定！ http://messenger.yahoo.com.tw/

8 10

What determines default kernel after update?
by Les Mikesell 21 Dec '09

21 Dec '09

I have a 32-bit machine with 8 gigs RAM and was running the PAE kernel, but after the last update noticed that grub was set to default to the non-PAE version although both were installed. Does anyone know how boot default is supposed to be determined? -- Les Mikesell lesmikesell(a)gmail.com

2 3

disk at 101% - but it isn't
by Alan McKay 21 Dec '09

21 Dec '09

Hey folks, Is there any way to get this to report the proper values again? The disk did fill up but we removed a good 60G of data but it still shows full [root@price-two:/]# df -h Filesystem Size Used Avail Use% Mounted on /dev/sda3 131G -64Z 131G 101% / /dev/sda1 99M 9.7M 84M 11% /boot /dev/sdb1 269G 60G 196G 24% /data none 4.0G 0 4.0G 0% /dev/shm -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food"

2 1

minimal set of packages for gnome desktop
by Janez Kosmrlj 21 Dec '09

21 Dec '09

Does anybody know what is the minimal set of packages, you have to install, to make gnome desktop work.

2 1

Cannot see samba in win Neighborhood
by Matias Morawicki 21 Dec '09

21 Dec '09

Hello u all, sorry to bring this issue back again, but I´ve been searching and trying all the advices suggested in previous posts and I still can´t see the samba server in the win network neighborhood. I can see the samba shares from win via net view \\servername but if I issue a plain "net view" samba won´t show up. only the win machines, the same i can see on the Neighborhood... and when I select local master = no Samba would stay without master! I issue smbclient -L servername -U% and the master section remains empty. It´s like samba is not being able to "talk" to the rest of the workgroup. (of course they are all in the same workgroup) I´m using "wins support = yes" and I´ve set the DHCP to set the clients to use the samba server as wins server.I´ve checked the win clients and they get the correct conf. I´ve tried stopping iptables, disabling Selinux, different smb.conf from the simple examples of t first chapters of samba by example, to plenty of options... that´s why I´m not including my smb.conf, because I´ve tried many variations, always with the same results. I tried a basic samba configuration in a ubuntu server in another box just to test, anf the win clients were able to see it in the neigbohood... so I guess the issue is on my Centos box. I tried the same smb.conf from that working ubuntu-samba and didn´t make it on the Centos... Btw, the server is a Centos 5.3, with samba 3.2.15 (it also happened with the default samba, so I´ve upgraded just in case...) I hope someone can point me some directions... thanks in advance!! Matias

3 2

storage servers crashing, hair being pulled out!
by Gordon McLellan 21 Dec '09

21 Dec '09

I have a trio of servers that like to reboot during high disk / network IO operations. They don't appear to panic, as I have kernel.panic = 0 in sysctl.conf. The syslog just shows normal messages, like samba complaining about browse master and then just syslogd starting up. The machines seem to crash when I'm not near the console, usually when I'm trying to pull data off them to another machine running backups. But, they've also crashed trying to copy data off them to other servers (via iscsi). Also, they have crashed being on the receiving end of data via nfs. Two of the servers are linked using drbd and heartbeat, the third is stand alone. Centos 5.4 x86-64 is the flavor of linux on all of them, pretty much vanilla except for the drbd/iscsi stuff. I want to go after the motherboard manufactorer, since I'm more willing to suspect three mobos in a bad lot than three CPUs, especially since one cpu is completely different than the other two. The other variable is the two machines running drbd have promise raid cards in them. I also have the same raid card in my personal server at home. That server also has a nack of crashing during heavy disk IO to the raid volume. The entire OS doesn't crash, just the raid volume, and the only way to bring it back is a reboot. I'm really at a loss on what to do next... Any suggestions? Gordon The hardware config of the drbd servers: Tyan i3210 ICH9 mobo Intel C2D 7500 cpu 4GB A-Data ram Promise ex8650 raid Supermicro 742TQ-865 chassis (865w psu) 8x 1Tb western digital green power drives The third machine: Tyan i3210 ICH9 mobo Intel C2Q 9400 cpu 8GB Mushkin ram dmraid 5 Antec something or other chassis 550W PC Power and Cooling PSU 7x 250gb seagate 7200's

6 7

RHEL 6 won't support Itanic, will support PowerPC, though
by Timo Schoeler 21 Dec '09

21 Dec '09

Hi list, after some discussion on #IRC on PowerPC I was waiting for some commitment on supported architectures in RHEL 6. As I just learnt, Itanic will be dumped, but there will be a PowerPC release: http://www.theregister.co.uk/2009/12/18/redhat_rhel6_itanium_dead/ Best, Timo (happy PowerPC enthusiast :)

3 3

College student printer for CentOS 5.4 x86_64?
by David McGuffey 21 Dec '09

21 Dec '09

Oldest son came back from college and wants a printer for his Dell laptop. I built it with CentOS 5.3 x86_64 several months ago and will upgrade it to 5.4 The Cannon printer he now has (bought with the laptop and Vista through the university book store), doesn't seem to have linux drivers. I built the machine with Vista and CentOS in dual-boot, so he could manage his iTunes and use the printer under Vista. He does almost all his college work under CentOS. Most of his papers are submitted electronically, but occasionally he has to print one. What would the community recommend? His needs are simple...mostly B&W papers. On rare occasions he needs to print a paper with color photos/graphs embedded. Not looking to spend a lot, just enough to satisfy the requirement. DaveM

12 17

Re: [CentOS] Optimizing CentOS for gigabit firewall
by sadas sadas 21 Dec '09

21 Dec '09

>Some months ago there was discussions about 10 gbit performance with >Linux. Some guys were pushing over 70 Gbit/sec through a single linux >box. 70 Gbit/sec ? Maybe with port aggravation it's possible. Can you give some more info about that guys. To achieve that hight throughput maybe it's necessary to cut most of the OS and the kernel, leaving only the necessary. I'm very interested to read more information about the experiment. regards p.s here you can see 10 Gbit/s experiment http://haproxy.1wt.eu/10g.html

2 1

Inquiry:How to recognize the assigned device for attached usb memory?
by hadi motamedi 21 Dec '09

21 Dec '09

Dear All I have attached usb memory to my CentOS 5.2 server and I want to add it to my /etc/fstab . Can you please let me know how can I recognize it from my"/dev/?" list ? Thank you in advance

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss