- Discuss - lists.centos.org

SiI 3114 and RAID
by Florin Andrei 23 Feb '07

23 Feb '07

I've two machines with almost identical hardware (slightly different CPUs). The SATA/RAID controller is SiI 3114. One of the servers was installed a while ago by someone else, it's running Fedora Core 5 and RAID is enabled: # df -m Filesystem 1M-blocks Used Available Use% Mounted on /dev/dm-6 125931 2990 116441 3% / /dev/dm-1 99 13 81 14% /boot tmpfs 1012 0 1012 0% /dev/shm /dev/dm-2 9917 151 9254 2% /tmp /dev/dm-3 9917 237 9168 3% /var # cat /etc/modprobe.conf | tail -n 1 alias scsi_hostadapter sata_sil I installed CentOS 4.4 64bit on the other system, but I could not enable RAID. The installer was always seeing 2 separate drives instead of one RAID device. Was it my mistake? Did I not enable the proper settings in the BIOS? (I tried quite a few different settings) Or is it perhaps that the CentOS kernel does not have the proper drivers to support SiI 3114 in RAID mode? -- Florin Andrei http://florin.myip.org/

4 4

CentOS 4.4 - Compat lib issue
by Tom Brown 23 Feb '07

23 Feb '07

Hi Got a legacy app that has to run on this version of java - Anyone know where i can find this lib? /usr/java/jre1.3.1_09/bin/i386/native_threads/java: error while loading shared libraries: libstdc++-libc6.1-1.so.2: cannot open shared object file: No such file or directory thanks

2 2

RTL8169S-32 card
by Eduardo Grosclaude 23 Feb '07

23 Feb '07

Hello, I am building a DRBD cluster with CentOS 4.4. Both nodes have RTL8169S-32 cards, Pheenet branded. I'm getting no more than 185 Mbps with the driver selected at installation (r8169). Downloading Realtek's r1000 climbs to some amazing 200Mbps. I am measuring performance with iperf, host to host, with a cat5e direct cable some 2.5ft long. Maybe disk I/O will be the bottleneck in my use case but anyway I feel performance is well under par with this cards. Is something wrong in my measuring setup? Am I right in expecting more speed? Has anyone had this same experience? Resources to compatible Gbps cards? Thanks! -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina

1 0

open webmail error
by Indunil Jayasooriya 23 Feb '07

23 Feb '07

Hi, I installed openwebmail on centOS 4.4 using tarballs CGI.pm-3.05.tar.gz MIME-Base64-3.01.tar.gz libnet-1.19.tar.gz Text-Iconv-1.2.tar.gz openwebmail-2.52.tar.gz and fianlly I did the below /var/www/cgi-bin/openwebmail/openwebmail-tool.pl --init Then I browse as below http://IP/cgi-bin/openwebmail/openwebmail.pl then I got the below error. Please execute '/var/www/cgi-bin/openwebmail/openwebmail-tool.pl --init' on server first! then, I again issued that command many times. /var/www/cgi-bin/openwebmail/openwebmail-tool.pl --init /var/www/cgi-bin/openwebmail/openwebmail-tool.pl --init But I still get the same error. Can you help me to solve this? -- Thank you Indunil Jayasooriya

2 1

CentOS 4.4-IBM Netvista Performace Problems, help needed.
by Chuck Mattern 23 Feb '07

23 Feb '07

I've got an odd situation that I need some advise on. I have two computers that I am planning to use as a cluster. I initially started with some left over Compaq Presairos with 667MHz CPUs. I loaded CentOS 4.3 and later updated to 4.4. Things ran normally, albeit slowly. I had an opportunity to upgrade to a pair of IBM Netvistas with 2.26 GHz CPUs, I did this by transferring the 160GB Western Digital IDE disks and NICs but did not re-install the OS, just migrated the disks. Since then they have had the following symptoms: -Systems frequently boot faster than the disks can be spun up and have to be soft booted to recognize and boot from the disks. -Systems will bog down critically after approximately 24 hours loosing system time at an increasing rate, ofrr instance a for loop that runs date, hwclock ans then sleeps for 10 minutes will show time in sync for the first few hours then the system time will begin to fall behind at an increasing rate, after 24 hours the system time essentially stops elapsing. It almost feels like the box has trouble processing interrupts. Once it gets to this state performance becomes very sluggish, for instance top will take up to 90 seconds to display it's first screen and will not update on it's own, only when Enter is depressed. At times top will show 0's across the utilization line for everything including idle. I have gone as far as to boot one of the boxes into single user mode and run the date/hwclock loop and even in that state the system will bog down and gradually stop elapsing time after 18-24 hours. Even shutting down is impacted. A reboot will take well over an hour to process. I had a copy of Ubuntu on my desk and have booted into that distro from cd and it passes the date/hwclock test (actually lost 2 seconds over a 24 hour period but I can live with that via ntp). I'm downloading a copy of the CentOS live 4.4 cd and will try this with that as well but at this time does anyone see that this could be something other than a disk incompatibility with the newer systems? Should I try re-installing? If it is the disks, any thoughts on something I could try to avoid buying new disks (I have tried setting the BIOS to both the high performance and legacy disk modes (not entirely sure what's behind that IBMism)). Regards, Chuck

4 5

How do I build a modified rpm (Another newbie question)?
by Mark Hull-Richter 23 Feb '07

23 Feb '07

I made a minor change to the XFS package (in the unpacked source files), but I can't figure out which rpmbuild option to use to build from that changed source file (instead of re-unpacking all the source files, overwriting all the source files, etc.). Please assist/explain. Thanks.

2 1

Centos firewall/router issue
by Dustin Krysak 22 Feb '07

22 Feb '07

Good day everyone. Today has been "one of those..." days. So I have a feeling this is just a brain lapse here. At any rate, I am setting up a firewall/router using centos 4.4 (minimal install, yummed up to date). I have in fact enables V4 ip forwarding (by editing /etc/sysctl.conf) and rebooted the system. I use fwbuilder for my rules, and at this point have a next to nothing set of rules. a DHCP server is also residing on this router. Now the firewall can get pings back from various sources on the net by IP and by host name. The firewall can also ping the workstations, and the workstations can ping hte firewall (VIA the internal IP). The work stations are in fact getting proper IP info from the DHCP server (I have released and renewed it many times as well as rebooted). Now the issue is, I can not get out of the internal network to the internet for any traffic. Pings (by ip and name), web sites, etc. It "seems" like the traffic is not being forwarded, but I have run the following command to confirm the ip forwarding is on: # cat /proc/sys/net/ipv4/ip_forward And I do in fact have a "1" in there. Did I miss one little step somewhere? I have set these things up before without issue, so I suspect I am over looking a little step here. Ideas?

3 3

RE: [CentOS] USB flash drive stopped working properly....
by Mark Hull-Richter 22 Feb '07

22 Feb '07

How did you manually mount it? I tried and it would not recognize the mount point.... > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of David A. Woyciesjes > Sent: Thursday, February 22, 2007 11:30 AM > To: CentOS mailing list > Subject: Re: [CentOS] USB flash drive stopped working properly.... > > Hmmm, this might be similar to my issue. I have 2 USB keys, one > mounts > okay, 256MB SanDisk SD card in an adapter), the other (SanDisk Cruzer > mini 256MB) gets funky, won't automatically mount. But when I manually > mount it, the automount part finally works. > Last week I posted a message (with no replies) about the Cruzer not > being able to mount at all. The only change this time was I ran (in > Windows) Scandisk.on the Cruzer. Still not quite right, though. > And my box is a Precision 530... > I ran chkdsk on it when I got home to my Windows box, and it came out fine, and it's working fine today, too. Thanks.

2 2

BETA 2
by Jerry Geis 22 Feb '07

22 Feb '07

So is beta 2 off - in favor of just waiting for the real RHEL5 release? RH has said it is ready to go and would be released in march. Hopefully march 1. HA! No complaining just curious. Jerry

8 10

RE: [CentOS] USB flash drive stopped working properly....
by Mark Hull-Richter 22 Feb '07

22 Feb '07

Theoretically, but it works perfectly today, last night and this morning on my Windows (ugh) machine at home, everywhere else.... So far, I've never had a flash drive fail, and this one is supposed to be better than most (plus, it's only about five months old...). So, I doubt it.... > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Alvin Chang > Sent: Thursday, February 22, 2007 10:35 AM > To: CentOS mailing list > Subject: Re: [CentOS] USB flash drive stopped working properly.... > > On 22/02/07, Mark Hull-Richter <mhull-richter(a)datallegro.com> wrote: > > Is there some time limit on how long a USB flash drive will work in > > CentOS or is this a bug or ? ? ? > Gees, couldn't it be a busted flash drive? The least robust components > in your setup is the flash drive. > > -- > Alvin Chang Yu-Ming > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

1 0

Re: CentOS Digest, Vol 25, Issue 22
by richardy＠tppvideo.com 22 Feb '07

22 Feb '07

I will be away from the office until Tuesday, February 27th. If you are in need of technical support please send your email to: support(a)tppvideo.com otherwise I will return your e-mail as soon as possible upon my return. --- Richard Ybarra Twin Palms Productions, Inc. http://www.tppvideo.com PH: 512-377-1719 ATTENTION! The information contained in this email may be CONFIDENTIAL and PRIVILEGED. It is intended for the individual or entity named above. If you are not the intended recipient, please be notified that any use, review, distribution or copying of this email is strictly prohibited. If you have received this email by error, please delete it and notify the sender immediately. Thank you.

1 0

CentOS-announce Digest, Vol 24, Issue 12
by centos-announce-request＠centos.org 22 Feb '07

22 Feb '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0074 Important CentOS 4 ia64 spamassassin - security update (Pasi Pirhonen) 2. CESA-2007:0074 Important CentOS 4 s390(x) spamassassin - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Wed, 21 Feb 2007 21:24:09 +0200 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2007:0074 Important CentOS 4 ia64 spamassassin - security update To: centos-announce(a)centos.org Message-ID: <20070221192409.GC11744(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0074 https://rhn.redhat.com/errata/RHSA-2007-0074.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/spamassassin-3.1.8-2.el4.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Centosplus
by John Hinton 22 Feb '07

22 Feb '07

Are there any gotchas with doing a MySQL5 upgrade from the centosplus repostitory? Can this be done as an update via yum or do I need to uninstall and the install? There wasn't anything on this in the readme.txt file. Thanks, John Hinton

5 5

alternative to rocks cluster
by Tom Brown 22 Feb '07

22 Feb '07

Hi I am after a solution where i can easily kickstart many, read hundreds, of boxes in a short time frame. Perhaps the way i install software is to actually re-kix the box with a new software baseline - that type of idea. I have looked at rocks and it looks good but it seems a little rigid in that i need to be able to determine certain things like hostname etc as in our env hostname represents box location etc. Are there any tools out there that do things as 'easily' as rocks but with more customization in them? Rocks seems to be based on beowulf type clusters where our setup is more an application type affair where communication it between the apps and not through the master box. thanks for any pointers

7 9

postfix vurtual user
by Mohd Syakir 22 Feb '07

22 Feb '07

Hi, Sory to bother you with my new-user questions. i've got one redhat 9 box, acting as email server using sendmail. it use local /etc/passwd. last week i've just finished setting up a server, centos 4.4 as a replacement mail server for the red hat 9. i mainly refereing the tutorial at http://www.howtoforge.com/virtual_users_postfix_courier_mailscanner_clamav_…. with some modification, it's now working. i installed postfixadmin as it have freindly interface, because, beside me, other admin does not feel comfortable inserting the data through dump black and white command prompt. there is 2 problems: 1. what should i do so that the user does not have to fill thier full email address (user(a)domain1.com) at the login page of squirellmail. it's moreindly to just put "user" as they used before. 2. how do i convert all the previous email to the new mailbox format. anyone have had an experience doing this? please help me. thanks.

3 4

CentOS 4.4 blocking outbound connections?
by Neil Aggarwal 22 Feb '07

22 Feb '07

Hello: When I installed CentOS 4.4 (from the ServerCD) on my server, I told it not to install a firewall and I disabled SELinux. The server is a SuperMicro 5015P-TR. I set up my own /etc/init.d/firewall with these rules: #!/bin/sh # Firewall script # # Source function library . /etc/init.d/functions RETVAL=0 # Some definitions (Will need to change ETH0_IP to match your configuration) ETH0_IP=38.114.192.86 # See how we were called. case "$1" in start) echo -n "Starting firewall: " /sbin/modprobe ip_conntrack_ftp # Set the default policies to drop all packets /sbin/iptables -P INPUT DROP /sbin/iptables -P OUTPUT DROP /sbin/iptables -P FORWARD DROP # Flush any existing rules /sbin/iptables -F # Allow loopback traffic /sbin/iptables -A INPUT -i lo -j ACCEPT /sbin/iptables -A OUTPUT -o lo -j ACCEPT # Allow icmp protocol packets /sbin/iptables -A INPUT -i eth0 -d $ETH0_IP -p icmp -j ACCEPT /sbin/iptables -A OUTPUT -o eth0 -s $ETH0_IP -p icmp -j ACCEPT # Allow ssh connections from the outside world /sbin/iptables -A INPUT -i eth0 -d $ETH0_IP -p tcp --sport 1024: --dport ssh -m state --state NEW,ESTABLISHED -j ACCEPT /sbin/iptables -A OUTPUT -o eth0 -s $ETH0_IP -p tcp --sport ssh --dport 1024: -m state --state ESTABLISHED -j ACCEPT # Allow this sever to access DNS /sbin/iptables -A OUTPUT -o eth0 -s $ETH0_IP -p udp --sport 1024: --dport domain -j ACCEPT /sbin/iptables -A INPUT -i eth0 -d $ETH0_IP -p udp --sport domain --dport 1024: -j ACCEPT # Log any packets that are left /sbin/iptables -A INPUT -j LOG --log-prefix "INPUT " /sbin/iptables -A OUTPUT -j LOG --log-prefix "OUTPUT " /sbin/iptables -A FORWARD -j LOG --log-prefix "FORWARD " RETVAL=$? echo [ $RETVAL = 0 ] && touch /var/lock/subsys/firewall ;; stop) echo -n "Shutting down firewall: " # Flush the rules /sbin/iptables -F # Set the default policies to accept /sbin/iptables -P INPUT ACCEPT /sbin/iptables -P OUTPUT ACCEPT /sbin/iptables -P FORWARD ACCEPT RETVAL=$? echo [ $RETVAL = 0 ] && rm -f /var/lock/subsys/firewall ;; *) echo "Usage: firewall {start|stop}" exit 1 esac exit $RETVAL Now, I can ssh to it only from the other machines in the same rack. When I try to ssh to it from outside, I get this error in the /var/log/messages file: Feb 17 23:01:26 tweb kernel: OUTPUT IN= OUT=eth0 SRC=38.114.192.86 DST=24.175.73.85 LEN=48 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=22 DPT=1118 WINDOW=5840 RES=0x00 ACK SYN URGP=0 If I log into the machine and try to ping an external IP, I get no response and nothing in the messages file. Is there some security setting on CentOS 4.4 that limits connectivity? Thanks, Neil -- Neil Aggarwal, (214)986-3533, www.JAMMConsulting.com FREE! Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details.

3 6

Re: [CentOS] php version 4.4 / ez publish
by gillbates 22 Feb '07

22 Feb '07

I have a silly question... why not install from source? http://www.php.net/downloads.php PHP 4.4.4 ----- Original Message ---- From: Michael Kress <kress(a)hal.saar.de> To: CentOS mailing list <centos(a)centos.org> Sent: Wednesday, February 14, 2007 2:48:37 PM Subject: [CentOS] php version 4.4 / ez publish Hi list, is there any repository on this world where I can stick to and update to a stable and hopefully secure and hopefully long supported version 4.4 of php? EZ publish's software requirements as of the current version tells me that it requires php 4.4 which doesn't meet what Centos 4.4 or its upstream provides. For a certain project I want to use ez publish. Is there any solution you see for that? Install a seperate server for that? (That's the least I wanna do). Or _does_ it work with php 4.3 under centos 4.4? Any experience? TIA Regards, Michael -- Michael Kress, kress(a)hal.saar.de http://www.michael-kress.de / http://kress.net P E N G U I N S A R E C O O L _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Send instant messages to your online friends http://uk.messenger.yahoo.com

6 7

(no subject)
by Edward Milstein 22 Feb '07

22 Feb '07

Hello, I would like to replace one of the disks in a raid 1 array (software raid) in centos 4.4 for the purpose of saving the removed drive as a backup of the system. Replace it with a new disk and have the raod resync. That way the removed disk can be used to restore the system to that point in time if something dramatic occured. I have a number of questions, I can’t find the answers to and I don't have a system I can play with to see how the software behaves: 1) Do I need to partition the replacement drive or will the system do it after reboot? 2) Should I break the raid before replacement or just shutdown, replace and reboot? 3) I have also read that acronis 10 rescue CD can be booted and take a system image that way but I have not tried that yet.. In general, are these approaches a good idea for generating an offsite image backup?? Any help or input would be appreciated. Thank you, -ed-

4 4

Problem with Cacti and CentOS 4.4
by Matthew Martz 22 Feb '07

22 Feb '07

I just for the first time attempted to install Cacti from the RPMForge repo on CentOS 4.4. And I have to say that it hasn't gone very well at all. I have installed Cacti on Fedora a good 20 times with absolutely no problem. Basically the default rrds/graphs for localhost are generated but no other rrds/graphs are generated. When I look at the poller cache or snmp cache I see all the data. When I turn on Graph Debugging I get the following: RRDTool Command: /usr/bin/rrdtool graph - \ --imgformat=PNG \ --start=-86400 \ --end=-300 \ --title="DCN2948-1 - Traffic - Fa10" \ --rigid \ --base=1000 \ --height=120 \ --width=500 \ --alt-autoscale-max \ --lower-limit=0 \ --vertical-label="bits per second" \ --slope-mode \ DEF:a="/var/www/cacti/rra/dcn29481_traffic_in_19.rrd":traffic_in:AVERAGE \ DEF:b="/var/www/cacti/rra/dcn29481_traffic_in_19.rrd":traffic_out:AVERAGE \ CDEF:cdefa=a,8,* \ CDEF:cdefe=b,8,* \ AREA:cdefa#00CF00:"Inbound" \ GPRINT:cdefa:LAST:" Current\:%8.2lf %s" \ GPRINT:cdefa:AVERAGE:"Average\:%8.2lf %s" \ GPRINT:cdefa:MAX:"Maximum\:%8.2lf %s\n" \ LINE1:cdefe#002A97:"Outbound" \ GPRINT:cdefe:LAST:"Current\:%8.2lf %s" \ GPRINT:cdefe:AVERAGE:"Average\:%8.2lf %s" \ GPRINT:cdefe:MAX:"Maximum\:%8.2lf %s" RRDTool Says: ERROR: opening '/var/www/cacti/rra/dcn29481_traffic_in_19.rrd': No such file or directory When I turn on debug I get the following in the logs (I have added logging for poller.php): poller.log Waiting on 1/1 pollers. Waiting on 1/1 pollers. Waiting on 1/1 pollers. ... (Repeat of above) Waiting on 1/1 pollers. Waiting on 1/1 pollers. 02/21/2007 12:09:16 PM - POLLER: Poller[0] Maximum runtime of 292 seconds exceeded. Exiting. 02/21/2007 12:09:16 PM - SYSTEM STATS: Time:293.1932 Method:cmd.php Processes:1 Threads:N/A Hosts:3 HostsPerProcess:3 DataSources:114 RRDsProcessed:5 cacti.log 02/21/2007 12:09:14 PM - CMDPHP: Poller[0] DEBUG: SQL Assoc: "select poller_id,end_time from poller_time where poller_id = 0" 02/21/2007 12:09:14 PM - CMDPHP: Poller[0] DEBUG: SQL Assoc: "select poller_output.output, poller_output.time, poller_output.local_data_id, poller_item.rrd_path, poller_item.rrd_name, poller_item.rrd_num from (poller_output,poller_item) where (poller_output.local_data_id=poller_item.local_data_id and poller_output.rrd_name=poller_item.rrd_name) LIMIT 10000" 02/21/2007 12:09:15 PM - CMDPHP: Poller[0] DEBUG: SQL Assoc: "select poller_id,end_time from poller_time where poller_id = 0" 02/21/2007 12:09:15 PM - CMDPHP: Poller[0] DEBUG: SQL Assoc: "select poller_output.output, poller_output.time, poller_output.local_data_id, poller_item.rrd_path, poller_item.rrd_name, poller_item.rrd_num from (poller_output,poller_item) where (poller_output.local_data_id=poller_item.local_data_id and poller_output.rrd_name=poller_item.rrd_name) LIMIT 10000" ... (Repeat of above) 02/21/2007 12:09:16 PM - CMDPHP: Poller[0] DEBUG: SQL Assoc: "select poller_id,end_time from poller_time where poller_id = 0" 02/21/2007 12:09:16 PM - CMDPHP: Poller[0] DEBUG: SQL Assoc: "select poller_output.output, poller_output.time, poller_output.local_data_id, poller_item.rrd_path, poller_item.rrd_name, poller_item.rrd_num from (poller_output,poller_item) where (poller_output.local_data_id=poller_item.local_data_id and poller_output.rrd_name=poller_item.rrd_name) LIMIT 10000" 02/21/2007 12:09:16 PM - POLLER: Poller[0] Maximum runtime of 292 seconds exceeded. Exiting. 02/21/2007 12:09:16 PM - SYSTEM STATS: Time:293.1932 Method:cmd.php Processes:1 Threads:N/A Hosts:3 HostsPerProcess:3 DataSources:114 RRDsProcessed:5 02/21/2007 12:09:16 PM - CMDPHP: Poller[0] DEBUG: SQL Exec: "replace into settings (name,value) values ('stats_poller','Time:293.1932 Method:cmd.php Processes:1 Threads:N/A Hosts:3 HostsPerProcess:3 DataSources:114 RRDsProcessed:5')" 02/21/2007 12:09:16 PM - CMDPHP: Poller[0] DEBUG: SQL Cell: "select count(*) from poller_command" It doesn't appear to do anything at all. I have also tried installing using the tgz from the cacti.net website with no success. I think the problem is being caused by one of the depenedencies, probably php. The bigest difference between the CentOS install and Fedora in reference to Cacti is the version of php. Centos as you know uses php4 and Fedora uses php5. And yes I have followed the documentation that resides on the CentOS wiki as well as the docs on the Cacti website. I have also tried running the poller as root with no success. Any help would be greatly appreciated. -- Matthew Martz CentOS Mirror Admin mdmartz(a)gflug.net

1 0

Video Player for CentOS
by Cartman 21 Feb '07

21 Feb '07

Hi, I'am finding a video player for my centos 4.4, but I don't know which is the bets video player, and how to would install it. -- Gracias. Atentamente, Carlos Arturo Trujillo Silva Ingeniero de Sistemas

4 6

Re: CentOS Digest, Vol 25, Issue 21
by richardy＠tppvideo.com 21 Feb '07

21 Feb '07

I will be away from the office until Tuesday, February 27th. If you are in need of technical support please send your email to: support(a)tppvideo.com otherwise I will return your e-mail as soon as possible upon my return. --- Richard Ybarra Twin Palms Productions, Inc. http://www.tppvideo.com PH: 512-377-1719 ATTENTION! The information contained in this email may be CONFIDENTIAL and PRIVILEGED. It is intended for the individual or entity named above. If you are not the intended recipient, please be notified that any use, review, distribution or copying of this email is strictly prohibited. If you have received this email by error, please delete it and notify the sender immediately. Thank you.

1 0

CentOS-announce Digest, Vol 24, Issue 11
by centos-announce-request＠centos.org 21 Feb '07

21 Feb '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0010-01: Moderate CentOS 2 i386 koffice security update (John Newbigin) 2. CESA-2007:0086 Critical CentOS 4 x86_64 gnomemeeting - security update (Johnny Hughes) 3. CESA-2007:0086 Critical CentOS 4 i386 gnomemeeting - security update (Johnny Hughes) 4. CESA-2007:0076 Important CentOS 4 x86_64 php - security update (Johnny Hughes) 5. CESA-2007:0076 Important CentOS 4 i386 php - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Wed, 21 Feb 2007 17:28:25 +1100 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2007:0010-01: Moderate CentOS 2 i386 koffice security update To: centos-announce(a)centos.org Message-ID: <45DBE689.3020403(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2007:0010-01 Moderate: koffice security update Files available: koffice-1.1.1-2.3.i386.rpm koffice-devel-1.1.1-2.3.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ Message: 2 Date: Wed, 21 Feb 2007 11:31:40 -0600 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2007:0086 Critical CentOS 4 x86_64 gnomemeeting - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1172079100.5131.113.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0086 https://rhn.redhat.com/errata/RHSA-2007-0086.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: gnomemeeting-1.0.2-9.x86_64.rpm src: gnomemeeting-1.0.2-9.src.rpm

1 0

Updating a distribution
by Al Sparks 21 Feb '07

21 Feb '07

I've got a CentOS 4.3 distribution in nfs mount. I'd like to be able to update that distribution, so that when I install off of it, I don't have to run yum update for hours. Hints? === Al

3 3

Globus Toolkit 4.0.3 under CentOS-4.4
by Joachim Backes 21 Feb '07

21 Feb '07

Hi, did somebody successfully compile Globus Toolkit 4.0.3 under CenTOS-4.4 from the source installer gt4.0.3-all-source-installer? If yes, with using some special compile controls? Any comments welcome. Regards Joachim Backes <joachim.backes(a)rhrk.uni-kl.de> University of Kaiserslautern,Computer Center [RHRK], Systems and Operations, High Performance Computing, D-67653 Kaiserslautern, PO Box 3049, Germany -------------------------------------------------- Phone: +49-631-205-2438, FAX: +49-631-205-3056 http://hlrwm.rhrk.uni-kl.de/home/staff/backes.html

2 2

Probelm with some smtp MTAs
by James B. Byrne 20 Feb '07

20 Feb '07

I am getting large numbers of these types of messages in my maillog files: somehost.hotmail.com [65.54.246.97] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA on both of our external machines beginning on the same date. These hosts sit on different netblocks and on both machines the sendmail.cf files date from Jan 09, 2007. The last successfull connection from any hotmail acocunt was on Jan 15 at 13:17:29. The first failure was recorded on Jan 15 at 18:36:46. Does anybody have any idea what is going on? We are now getting reports that hotmail users are getting a delayed transmission warning and then a failure message. Is this a sender's issue or our local configuration issue? ANY help regarding this matter would be most appreciated. If you feel that sendmail related items should not be discussed on the list then please contact me privately. Thanks, Jim -- James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

5 9

CentOS-announce Digest, Vol 24, Issue 10
by centos-announce-request＠centos.org 20 Feb '07

20 Feb '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0076 Important CentOS 3 ia64 php - security update (Pasi Pirhonen) 2. CESA-2007:0076 Important CentOS 4 ia64 php - security update (Pasi Pirhonen) 3. CESA-2007:0076 Important CentOS 3 i386 php - security update (Tru Huynh) 4. CESA-2007:0076 Important CentOS 3 x86_64 php - security update (Tru Huynh) 5. CESA-2007:0076 Important CentOS 3 s390(x) php - security update (Pasi Pirhonen) 6. CESA-2007:0076 Important CentOS 4 s390(x) php - security update (Pasi Pirhonen) 7. CESA-2007:0086 Critical CentOS 3 i386 gnomemeeting - security update (Tru Huynh) 8. CESA-2007:0086 Critical CentOS 3 x86_64 gnomemeeting - security update (Tru Huynh) 9. CESA-2007:0086 Critical CentOS 3 ia64 gnomemeeting - security update (Pasi Pirhonen) 10. CESA-2007:0086 Critical CentOS 4 ia64 gnomemeeting - security update (Pasi Pirhonen) 11. CESA-2007:0086 Critical CentOS 3 s390(x) gnomemeeting - security update (Pasi Pirhonen) 12. CESA-2007:0086 Critical CentOS 4 s390(x) gnomemeeting - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Mon, 19 Feb 2007 23:40:07 +0200 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2007:0076 Important CentOS 3 ia64 php - security update To: centos-announce(a)centos.org Message-ID: <20070219214007.GU11744(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0076 https://rhn.redhat.com/errata/RHSA-2007-0076.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/php-4.3.2-39.ent.ia64.rpm updates/ia64/RPMS/php-devel-4.3.2-39.ent.ia64.rpm updates/ia64/RPMS/php-imap-4.3.2-39.ent.ia64.rpm updates/ia64/RPMS/php-ldap-4.3.2-39.ent.ia64.rpm updates/ia64/RPMS/php-mysql-4.3.2-39.ent.ia64.rpm updates/ia64/RPMS/php-odbc-4.3.2-39.ent.ia64.rpm updates/ia64/RPMS/php-pgsql-4.3.2-39.ent.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

CHINA: Donation Scheme and Quality Community Development
by Richard Ford 20 Feb '07

20 Feb '07

G'Day All, We have been supporting linux as a side business for a while (because we use that skill set in our own value chain internally) and we are now going to start targeting the wider local Chinese market and not just the foreign companies and joint ventures. As such we expect to see tremendous growth in this market segment this year due to the quickly dwindling support of local support outlets due to the poor local skill sets and fundamental understanding of computing and Linux practices. But this growth may be short lived as the segment itself disappears (Linux and anything not Microsoft off the shelf) as evidenced by less and less exhibitors and attendees at Linux World here over the past 4 years. I am trying to figure out a way to change this. Of course we can donate money back to the project itself - but does anyone have any idea on how to help the local Chinese get better as a form of donation too? Maybe offering free support services? Point is, people should be paying IT professionals money to do UML and process design as they do in the west (Accenture, CA, IBM, et al) and not to play with technology day in day out. However in China, IT is more dumbed down and is akin to "Computing Services", backup, servers, hosting, windows/linux/cisco/et al is what comes to mind. While this is all fine and dandy it is hardly IT and it is a very price erosive market (China and India combined) and seems to be destroying the local demand for real IT and everyones chance to start more off-shoring operations here in competition with India. The concept of technology being a support service to a greater operational goal and process (value chain) is quickly shoved to the side as people here consider IT to be a "cost" and focus on the "lego" aspect of it - computing services, mutton dressed up as lamb. And Linux is not seen as a fertile bed to develop, create and explore, it is often just used to plunder and get something for free...cheap, cheap, cheap...... I know that I can't change a country on my own, however, the atrophy in Open Source Community development and IT service demand is really sad here. I saw a post before from a chap who said words to the effect of: > Meanwhile, if there are many companies engage in > same product, they will have price competition with each other. That > will make companies could not survive after that. So, we hope your > company could authorize us as a exclusive distributor to sale and > market your product to share our resources and Chinese sales network. And it is any wonder that open source cooperation here is failing as people fail to understand the "knowledge economy" that is central to open source? And IT is not expanding as it continues to be percieved as purely bits and bytes and not also opportunity cost and risk. So I on behalf of the Beijing GNU/Linux Users Group ask for some advice, pointers and tips for how in my own small way I can get some change happening here before all creative technological thinking and successful open source development becomes even more extinct. And before real IT has a chance to take off and operate in harmony with all the business analysts and accountants as opposed to with just the motherboard and disk driver retailers at the various tech depots. :-( Don't get me wrong, there is Linux use here - but nothing new and nothing is ever thrown back into the community - just take and abuse. :-( Cheers, Richard Ford. centos.candishosting.com.cn www.beijinglug.org

2 1

kernel-smp-2.6.9-48
by Maxim Shpakov 20 Feb '07

20 Feb '07

Hello all, There is kernel-smp-2.6.9-48 from Jason Baron at http://people.redhat.com/~jbaron/rhel4/ Can anyone advice where I can find RPMs of this kernel version for CentOS 4.4 ? Or how it can be created... -- Best regards, Maxim mailto:maxim@osetia.org

6 6

RPMS's -- Standalone or From Sources?
by Benjamin Sher 20 Feb '07

20 Feb '07

Dear friends: [Using the Centos 4.4 DVD) I will spend the next few days reading the documentation for Centos/RedHat. But meanwhile, I would like, while reading it, to listen to my favorite radio programs which require RealPlayer. So, my question is simply: should I download the RealPlayer RPM from www.real.com or should I download it from an rpm repository source? While I am at, what about other programs such as Acrobat Reader, Java, etc.? Thank you so much. Benjamin

3 2

Uninstalling GAG Boot Manager -- Problem Solved!
by Benjamin Sher 20 Feb '07

20 Feb '07

Dear friends: Problem Solved! I had to donwload a new copy of GAG, install a new copy on a floppy, then reboot, switch to diskette in the Bios and only then does the GAG install/uninstall menu show up. Clicked on Uninstall and GAG not only uninstalled itself from the hard drive but also restored the old MBR. Now Centos boots up correctly. Thank God. Benjamin

1 0

Uninstalling GAG Boot Manager
by Benjamin Sher 20 Feb '07

20 Feb '07

Dear friends: New to Centos, DVD version 4.4. Fabulous distro, rich in features, applications, very stable and robust. My first install failed to boot up (after rebooting, switching in Bios from CD/DVD to hard drive. This was probably because I chose to install the Grub boot loader in MBR. I got the error message: GRUB, Stage 2 Loading... But it never loaded up. Nothing happened. So, I did a fresh install of Centos. This time I chose the first partition on hda (hda1). Rebooted, switched from CD/DVD to hard drive. When the computer started booting up, it immediately brought up the GAG Boot Manager, which I had used earlier to dual boot Linux and Windows. The floppy drive was empty and the Bios was definitely turned to hard drive. I had earlier saved my GAG settings both to the floppy and the hard drive. That explains why it's still on my hard drive. At any rate, I used GAG to add Centos to the operating systems. I clicked on Centos and this booted up Centos successfully (after first seeing the lovely Centso blue boot-up screen. I no longer need GAG and would like very much to get rid of it and boot up Centos normally. How do I do that, please? Here is the URL for GAG: http://gag.sourceforge.net/ I downloaded GAG originally in Windows and installed it on a floppy, then saved the settings to the floppy and then to the hard drive. I might add that GAG worked fine earlier. The problem is that I can't seem to bring up the GAG screen that allows you to install or uninstall it. I click on R for Restore but I never see the install/uninstall screen. I'd very much appreciate your help. Thank you. Benjamin P. S. One funny thing: I am sending this letter from Kmail in Centos. I know for a fact that I am supposed to use login authentication to send mail. I had configured my email program, including Kmail, many times in the past and it always worked fine. But this time, the only way I could send my mail was to NOT use login or any kind of authentication. Does this make sense? Yet, the mail failed to go out with authentication but was sent successfully WITHOUT authentication. Is this some sort of bug or is this normal? I'd appreciate your help. Thank you all so much. Benjamin

1 0

Fwd: Fwd: [CentOS] HOW to enable traceroute with IPTABLES(SLOVED)
by Indunil Jayasooriya 20 Feb '07

20 Feb '07

Hi all, That issue is over now. I found why my ESTABLISHED,RELATED rule at the top of INPUT chain did not work for udp and icmp. The reason was I have included the protocol as tcp as below iptables -A INPUT -i eth0 -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT I removed -p tcp from above rule. Now it works for all protocols. Thanks for your support. ---------- Forwarded message ---------- From: Robert Spangler <lazydog(a)zoominternet.net> Date: Feb 20, 2007 2:45 AM Subject: Re: Fwd: [CentOS] HOW to enable traceroute with IPTABLES To: Indunil Jayasooriya <indunil75(a)gmail.com> On Mon February 19 2007 00:00, you wrote: > I have included ESTABLISHED,RELATED at the top of your INPUT chain as > below > > #Allow established,related trafffic to come back > #(for OUTPUT traffic to come back) > iptables -A INPUT -i eth0 -d 192.168.101.60 -p tcp -m state --state > ESTABLISHED,RELATED -j ACCEPT > > But without an INPUT statament it does not work. BUT for TCP OUTPUT > traffice , that will be appilicalbe. But other than tcp (i.e UPD and ICMP ) > I will have to include a INPUT staement. I have no INPUT statements for any traffic that is started from my box. You will only need INPUT statements for traffic that originates from the internet that you want to connect to your box. > A few OUTPUT rules that I need INPUT statemet are give below. (not TCP) > > #UDP > iptables -A OUTPUT -p udp -o eth0 --dport 53 -j ACCEPT > iptables -A INPUT -p udp -i eth0 --sport 53 -j ACCEPT You don't need INPUT statesments for DNS unless you are expecting someone to connect to your box from the outside. ESTABLISHED,RELATED should take care of this for you. > #ICMP (for ping www.google.com) > > iptables -A OUTPUT -p icmp -d 64.233.189.104 -j ACCEPT > iptables -A INPUT -p icmp -s 64.233.189.104 -j ACCEPT OK, here there are many diffierent kind of ICMP traffic To view what is avaliable try this: iptables -p icmp -h With the above INPUT statement you are allowing all types of ICMP packets into your system. > And this is for TCP ( it does not nedd a INPUT satatment .it works fine) > > iptables -A OUTPUT -p tcp -o eth0 --dport 22 -j ACCEPT That is because the reply for the system you are SSH'ing to is already concidered an ESATBLISHED,RELATED connection which is handled by you ESTABLISHED,RELATED rule. > PLs expalin, why? I hope that might have cleared up some confusion you were/are having. -- Regards Robert Smile... it increases your face value! -- Thank you Indunil Jayasooriya

1 0

Re: [CentOS] Centos under vmware under Ubuntu
by Miguel Ramirez 20 Feb '07

20 Feb '07

Johnny: Thank you so much.

1 0

Centos under vmware under Ubuntu
by Miguel Ramirez 19 Feb '07

19 Feb '07

Saludos a la lista, I installed CentOS under Vmware, when start statrx, this service goes down with the this error: (WW) VMWARE (0): Failed to set up write-combining range (0xf0000000, 0x1000000). Somebody knows where may I find a driver or files needed to solve it? Atentamente, Miguel.

5 4

SBS2ke Ad integration
by William Warren 19 Feb '07

19 Feb '07

I have a couple of workstations that are perfect candidates for Linux at a client's location. The only think i am shaky on is getting CentOS 4.4 to integrate into the AD domain. Any tips links would be highly appreciated. -- My "Foundation" verse: Isa 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD. -- carpe ductum -- "Grab the tape" CDTT (Certified Duct Tape Technician) Linux user #322099 Machines: 206822 256638 276825 http://counter.li.org/

2 1

RE: [CentOS] Starting samba configuration
by Mark Schoonover 19 Feb '07

19 Feb '07

Swat is disabled by default under xinted. You'll need to go into /etc/xinetd.d/swat, comment out the line for disable=no, and add your subnet to the network line. Restart xinetd to reread everything and you should be good to go. Thanks! Mark Schoonover *** Winner of the 2008 Best Psychic Award IS Manager American Geotechnical - California, Nevada and Arizona V-> 858.450.4040 F-> 714.685.3909 C-> 858.472.3816 -----Original Message----- From: Chris Moloney [mailto:cm_e_mail@yahoo.com.au] Sent: Saturday, February 17, 2007 5:31 PM To: centos(a)centos.org Subject: [CentOS] Starting samba configuration After installing samba, "rpm -q" shows me I have samba, samba-common, samba-client and samba-swat installed. However, putting http://localhost:901 in the browser brings up an error that the URL cannot be found. Not sure where to go from here. Appreciate advice Thanks Send instant messages to your online friends http://au.messenger.yahoo.com

1 0

CentOS-announce Digest, Vol 24, Issue 9
by centos-announce-request＠centos.org 19 Feb '07

19 Feb '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0015-01: Moderate CentOS 2 i386 ImageMagick security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Mon, 19 Feb 2007 10:20:12 +1100 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2007:0015-01: Moderate CentOS 2 i386 ImageMagick security update To: centos-announce(a)centos.org Message-ID: <45D8DF2C.8050900(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2007:0015-01 Moderate: ImageMagick security update Files available: ImageMagick-5.3.8-18.c2.1.i386.rpm ImageMagick-c++-5.3.8-18.c2.1.i386.rpm ImageMagick-c++-devel-5.3.8-18.c2.1.i386.rpm ImageMagick-devel-5.3.8-18.c2.1.i386.rpm ImageMagick-perl-5.3.8-18.c2.1.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 24, Issue 9 **********************************************

1 0

HOW to enable traceroute with IPTABLES
by Indunil Jayasooriya 19 Feb '07

19 Feb '07

Hi, I am setting up a firewall on CENTOS 4.4. I have done default block iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP I have enabled ICMP to www.google.com iptables -A OUTPUT -p icmp -d 64.233.189.104 -j ACCEPT iptables -A INPUT -p icmp -s 64.233.189.104 -j ACCEPT Ping works fine as below [root@firebox rc.d]# ping 64.233.189.104 PING 64.233.189.104 ( 64.233.189.104) 56(84) bytes of data. 64 bytes from 64.233.189.104: icmp_seq=0 ttl=246 time=91.7 ms 64 bytes from 64.233.189.104: icmp_seq=1 ttl=246 time= 92.6 ms 64 bytes from 64.233.189.104: icmp_seq=2 ttl=246 time=93.2 ms 64 bytes from 64.233.189.104: icmp_seq=3 ttl=246 time=92.8 ms 64 bytes from 64.233.189.104: icmp_seq=4 ttl=246 time=91.4 ms 64 bytes from 64.233.189.104: icmp_seq=5 ttl=246 time=93.1 ms But I still can not traceroute to that ip Pls see below, as to when I try traceroute [root@firebox rc.d]# traceroute 64.233.189.104 traceroute to 64.233.189.104 ( 64.233.189.104), 30 hops max, 38 byte packets traceroute: sendto: Operation not permitted 1 traceroute: wrote 64.233.189.104 38 chars, ret=-1 *traceroute: sendto: Operation not permitted traceroute: wrote 64.233.189.104 38 chars, ret=-1 *traceroute: sendto: Operation not permitted traceroute: wrote 64.233.189.104 38 chars, ret=-1 * traceroute: sendto: Operation not permitted 2 traceroute: wrote 64.233.189.104 38 chars, ret=-1 WHY , Help needed. -- Thank you Indunil Jayasooriya -- Thank you Indunil Jayasooriya

6 8

OT rpmforge rpm is not putting Dag repo info in yum.conf
by Steve Campbell 19 Feb '07

19 Feb '07

I should change this to OT, as it's not really CentOS related. I had a post on the list last week asking how the rpmforge rpm was to be implemented in yum. Craig White was kind enough to list how his yum.conf is appended, I assume after he installed the rpm. Unfortunately, mine is not appended with these lines. I am running CentOS 3. I will add these lines manually, and probably remove the yum.repos.d folder. This could be related to the fact that this was an upgraded Tao machine, and I had to remove and reinstall the yum rpms as the centosplus repos were also not in the conf file, but the main repos for Centos were there. I just wanted to let people know that installing the rpmforge rpm doesn't seem to work all the time. It seems to think that I have a CentOS 4 version of yum, so it creates the extra repos folder, adds the mirrors and conf files under the repos folder and does not append the yum.conf with the repository info. I have probably done something improper along the Tao->Centos upgrade path, but I am not sure what. Thanks for all of the help. Steve Campbell campbell(a)cnpapers.com Charleston Newspapers

2 1

Advice, Please.
by Phil Savoie 19 Feb '07

19 Feb '07

Hello, I have a home setup where I am using Centos 4.4 as a sort of mail server. This is what I have done. I have it configured to pop mail locally. I have fetchmail configured to dl from my provider my families mail through a cron job and .fetchmailrc in their home directories. They then pop the server to retrieve their mail. They send their mail directly through the provider. I have been relying on spamassasin on their local boxes to learn and filter out the spam but find it is only doing about half of the job even after months of training. I guess my question is this. Is there a way to do further spam filtering on the mail server incorporating my method of doing mail or am I not just doing this right? Any thoughts, please? Thank you, Phil

2 2

RPM rebuild, cross compiling from x86 to x86_64
by Martin Hamant 19 Feb '07

19 Feb '07

Hi I want to recompile some RPMs (my own) for x86_64 arch from my i386 compatible build host (because of hardware restriction/funds).Is anyone ever done this ? After a google search, it seems not so easy... i just found this: http://www.speedblue.org/cross_compilation/ but haven't tried it yet (i would have to convert these to RPM first). How is it done for Centos SRPMS rebuilds ? is it a different hardware for each target arch ? Thanks ! -- Martin

4 4

Could not mount SATA disk as module scsi_hostadapter is not loaded, although present in modules.conf
by Alexander Georgiev 19 Feb '07

19 Feb '07

Hi people, I installed a via SATA controller in a CentOS release 3.8 (Final) - I needed additional disk space. After the first boot, the kudzu service, added the following line to /etc/modules.conf: alias scsi_hostadapter sata_via and I rebooted. After reboot in dmesg one can see: scsi0 : sata_via scsi1 : sata_via Vendor: ATA Model: SAMSUNG HD080HJ Rev: WT10 Type: Direct-Access ANSI SCSI revision: 05 Attached scsi disk sda at scsi0, channel 0, id 0, lun 0 SCSI device sda: 156301488 512-byte hdwr sectors (80026 MB) sda: sda1 sda2 < sda5 > sda3 scsi : 0 hosts left But the /dev/sda device is not present in the system. If I issue the command: [root@bdc root]# fdisk /dev/sda Unable to open /dev/sda I found out that if at that point I issue the command: [root@bdc root]# modprobe scsi_hostadapter the /dev/sda is inserted in the system and I can access it using fdisk. It appears to me that scsi_hostadapter is initially loaded during boot, later unloaded - therefore the drive is missing. Currently I patch the situation with a file /etc/rc.modules with the following contents: #! /bin/sh modprobe scsi_hostadapter However I assume that this is not the correct way to fix this. Maybe I need additional lines in modules.conf? Best regards, alex

2 1

CPAN.pm failure to install
by Gregory P. Ennis 19 Feb '07

19 Feb '07

Everyone, Have a new install of Centos 4.4 with a Supermicro dual processor. I was trying to install the perl module Astro::Time with CPAN and the initial setup of CPAN suggested a -j3 switch to be used with 'make' on dual processor machines. I followed the suggestion but when the CPAN module tried to use make it failed with the -j3 switch. I thought I would uninstall CPAN to start over without the -j3 switch, but could not figure out how this is done. Any ideas? Greg Ennis

2 2

Event scheduling
by Frank M. Ramaekers 19 Feb '07

19 Feb '07

Okay, I know about 'cron' and 'at', but how do you schedule jobs (scripts) based on events. For instance: Run script xyz when file abcd.efg arrives via ftp? TIA, Frank M. Ramaekers Jr. Systems Programmer; MCP, MCP+I, MCSE & RHCE American Income Life Insurance Company Phone: (254) 761-6649 Fax: (254) 741-5777

11 16

Quick demo guide for SPA ( re: the port knocking thread )
by MrKiwi 19 Feb '07

19 Feb '07

For what it's worth to those who want to play with SPA, here is a demo i whipped up. It is very easy to set up, and i almost guarantee anyone can get this running. What we will demonstrate: Bascially: An SPA demo. Requirements: Very little - a minimal setup of centos. This setup will demonstrate a client who initially cannot connect to a an ssh port on the server (the server is DROPing packets and appears to not be running sshd). After a successful encrypted SPA (Single Packet Authorization) packet is sent to the server, in which a shared key and usercode is required, the ssh port is opened for the client IP only, and the client can then continue to connect with the normally required ssh credentials. After a timeout, the port is CLOSED to all traffic from the client IP, however firewall ESTABLISHED and RELATED rules will allow the connected client to continue to communicate. Setup Details; Server; Almost any kind of CentOS, but i use CentOS 4.4 installed on a VM (vmware workstation build 36983) SELinux Disabled Firewall enabled, no services allowed. "Minimal" installation performed. IP=10.1.1.155 Client; Almost any *nix, but i have used CentOS 4.4 installed on a VM (vmware workstation build 36983) SELinux Disabled Firewall enabled, no services allowed. "Minimal" installation performed. IP=10.1.1.8 =================== Setup the server Optional : Update the server; #yum -y update #reboot Install fwknop #cd /tmp #wget http://www.cipherdyne.org/fwknop/download/fwknop-1.0.1-1.i386.rpm #rpm -i fwknop-1.0.1-1.i386.rpm Backup fwknop's access.conf file and make our own. #mv /etc/fwknop/access.conf /etc/fwknop/access.conf.orig #access=/etc/fwknop/access.conf #echo "SOURCE: ANY;">>$access #echo "OPEN_PORTS:tcp/22;">>$access #echo "DATA_COLLECT_MODE: ULOG_PCAP;">>$access #echo "KEY: pkpassword;">>$access #echo "FW_ACCESS_TIMEOUT: 30;">>$access #echo "REQUIRE_USERNAME: mbr;">>$access Note ... the usercode and password we need to tell the client is; usercode:mbr , password:pkpassword Change the firewall (by default in a CentOS build it REJECTS everything. We want it to DROP instead, so that no-one knows if sshd is running or not) (this step is optional) #service iptables stop #joe /etc/sysconfig/iptables change -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited to -A RH-Firewall-1-INPUT -j DROP Restart the firewall #service iptables start Start fwknopd --debug Leave this debug window open, and you will see the rules that fwknop adds to the firewall. Setup the Client; Install fwknop (the same package contains server and client tools) #cd /tmp #wget http://www.cipherdyne.org/fwknop/download/fwknop-1.0.1-1.i386.rpm #rpm -i fwknop-1.0.1-1.i386.rpm Proof : Try to connect to server on port 22 #nc -v 10.1.1.155 nc will apear to hang waiting for a response. -> no response. (unless you skipped the step above for changing the firewall rules, in which case i think you get a 'no route to host' message) Now knock to open the port, using the usercode and password as above; (password will be prompted for ) #fwknop -A tcp/22 -k 10.1.1.155 --Spoof-user mbr -a 10.1.1.8 -A is the port to send the SPA packet to -k is the server to send to --Spoof-user is because we are not mbr (i am root) we wouldnt need this if we were logged on as 'mbr' -a 10.1.1.8 is because i am on a NATed subnet, and without it fwknop will resolve my IP to a public one, and then tell the server to open port 22 to that public IP, which wont help me. You have 30 seconds to try to connect now ... #nc -v 10.1.1.155 22 pc-00155.xx_hidden_xx.org [10.1.1.155] 22 (ssh) open SSH-1.99-OpenSSH_3.9p1 Ctrl-c to kill this. So we have proved that port 22 has been opened by our knock. Watching the servers debug output as mentioned above will show you the exact rule which was added to iptables to achieve this. If you have exceeded your 30 sec, just run the knock again; #fwknop -A tcp/22 -k 10.1.1.155 --Spoof-user mbr -a 10.1.1.8 and then try to connect; #ssh root(a)10.1.1.155 If you are quick enough you can run #service iptables status|grep 10.1.1.8 ACCEPT tcp -- 10.1.1.8 0.0.0.0/0 tcp dpt:22 This shows you the rule which let you in. Note that port 22 is open to *YOUR IP* only. About 30 sec later you will see; # service iptables status|grep 10.1.1.8 # [no output] This shows you that the open port has been closed. Notes: If you get a message like 'remote time stamp is older than 120 second max age.' then you have a clock sync problem. (common when using vmware) Notes: If you have trouble with clock drift and you dont want to be bothered fixing it, you can make fwknop less sensitive; joe /etc/fwknop/fwknop.conf change MAX_SPA_PACKET_AGE 120; to MAX_SPA_PACKET_AGE 1200; or similar (20 minute window) Thanks to Michael Rash for his great pdf (http://www.usenix.org/publications/login/2006-02/pdfs/rash.pdf) which i blatently ripped content from for the good of the world.

1 0

Defending againts simultanious attacks
by Mohd Syakir 18 Feb '07

18 Feb '07

Hi, i have one centos 4.3 box, exposed to the internet. since several weeks ago, i found numerous attemps to connect through SSH, but failed. they tried with many username, including root. it's comes from different IP. some of them are foreign website. How do i make my centos become smarter in handling this kind of attacks. eventhough i've disable all the user accounts, left only the admin accounts. making the password so hard, longer and combining alphabet, numbers and characters... yet i dont want the attackers keep on trying. any suggestions? thanks in advance.

16 25

CentOS (2.6.9-42.0.8.ELsmp) and CentOS (2.6.9-42.0.8.EL)
by Gregory P. Ennis 18 Feb '07

18 Feb '07

List, I am experimenting with a Dual processor Supermicro and plan to use CentOS 5 when it is released. In the meantime I have installed Centos 4.4. Sorry for asking such a basic question but what is the difference between CentOS (2.6.9-42.0.8.ELsmp) and CentOS (2.6.9-42.0.8.EL) Both kernels have been installed, but I have not been able to find which one is best to use for what purposes. Thanks, Greg Ennis

7 7

A full detailed add user script
by Dwi Suharto 18 Feb '07

18 Feb '07

Anyone here have any sample script, using BASH, for adding user. The script can define: - home directory - quota - create public_html folder - update shadow password (in replace to manually using passwd particularly to related user) Thank you. Dwi Suharto Rumahweb's TSO http://www.rumahweb.com

2 1

How can I batch print html pages
by Theo Band 18 Feb '07

18 Feb '07

I thought this was easy, but it turns out to be not so obvious. My problem: I have a database with hour registration. I need to print out about hundreds of pages and have them signed by employees. Of course I want to do this automatically. Up to now I have a collection of html pages (got them using wget). So the final thing I want is to print them all out in one go. How to do that? I search for a command-line option to convert the html to pdf. Or have firefox/konqueror print them directly without user intervention (there is not a switch like "firefox --print <url>"). Note that the pages are off-line, not on the server. The original pages can only retrieved with after authorization. That's why I used wget with a saved session cookie. Anyone got an simple solution? Thanks, Theo

7 11

Starting samba configuration
by Chris Moloney 18 Feb '07

18 Feb '07

After installing samba, "rpm -q" shows me I have samba, samba-common, samba-client and samba-swat installed. However, putting http://localhost:901 in the browser brings up an error that the URL cannot be found. Not sure where to go from here. Appreciate advice Thanks Send instant messages to your online friends http://au.messenger.yahoo.com

4 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss