- Discuss - lists.centos.org

RE: [CentOS] Adding Bind to a workstation build
by Bowie Bailey 08 Feb '06

08 Feb '06

Robert Moskowitz wrote: > I need a DNS server in a test environment, so I am adding Bind to my > notebook build. > > I first did: yum install bind > rebooted > yum update > rebooted > > Now I see named as a service I can start. > > But when I go to /var/named to edit the files (btw, all I want to do > at this point is to fake out a FQDN expected by a piece of gear), > none exist. > > And I doubt that if I start named it would be properly chrooted (as > it was on a server where I selected named as a service to install). > > So pointers? > > where do I go from here? You could go here: http://www.isc.org/index.pl?/sw/bind/ -- Bowie

2 1

Some 3Ware questions
by Todd Cary 08 Feb '06

08 Feb '06

I have not used RAID controller boards to date since I have relied on the built in RAID on the motherboards. Thanks to the informative message Byron, I realize the deficiencies of doing RAID 1 this way, especially now that the builtin is out of date with Kernel used by Centos. I have 4 ATA drives that were configured in two pairs. I assume that I need a 3Wave controller that has 4 ports like the 7506-4LP...correct? Do I need to install any software during the installation of Centos? Todd -- Ariste Software 200 D Street Ext Petaluma, CA 94952 (707) 773-4523

8 11

When is update 3 coming out?
by Jim Smith 08 Feb '06

08 Feb '06

Hey dudes, Nice work by the CentOS team in giving us arguably the best distro in the world. When is update 3 coming out? What changes are expected in it? The reason i ask is that i applied the openoffice.org 2.0.1-1 rpms and now WINE is not playing so nicely. It may be a good time to re-wipe the system and reinstall update 3 from fresh ISO's. some of these "goodies" from upstream can eat the cheese in your house. $ grep openoffice.org /var/log/rpmpkgs openoffice.org-1.1.2-28.6.0.EL4.i386.rpm openoffice.org-base-2.0.1-1.i586.rpm openoffice.org-calc-2.0.1-1.i586.rpm openoffice.org-core01-2.0.1-1.i586.rpm openoffice.org-core02-2.0.1-1.i586.rpm openoffice.org-core03-2.0.1-1.i586.rpm openoffice.org-core03u-2.0.1-1.i586.rpm openoffice.org-core04-2.0.1-1.i586.rpm openoffice.org-core04u-2.0.1-1.i586.rpm openoffice.org-core05-2.0.1-1.i586.rpm openoffice.org-core05u-2.0.1-1.i586.rpm openoffice.org-core06-2.0.1-1.i586.rpm openoffice.org-core07-2.0.1-1.i586.rpm openoffice.org-core08-2.0.1-1.i586.rpm openoffice.org-core09-2.0.1-1.i586.rpm openoffice.org-core10-2.0.1-1.i586.rpm openoffice.org-draw-2.0.1-1.i586.rpm openoffice.org-emailmerge-2.0.1-1.i586.rpm openoffice.org-gnome-integration-2.0.1-1.i586.rpm openoffice.org-graphicfilter-2.0.1-1.i586.rpm openoffice.org-impress-2.0.1-1.i586.rpm openoffice.org-javafilter-2.0.1-1.i586.rpm openoffice.org-kde-1.1.2-28.6.0.EL4.i386.rpm openoffice.org-libs-1.1.2-28.6.0.EL4.i386.rpm openoffice.org-math-2.0.1-1.i586.rpm openoffice.org-pyuno-2.0.1-1.i586.rpm openoffice.org-redhat-menus-2.0.1-1.noarch.rpm openoffice.org-spellcheck-2.0.1-1.i586.rpm openoffice.org-testtool-2.0.1-1.i586.rpm openoffice.org-writer-2.0.1-1.i586.rpm openoffice.org-xsltfilter-2.0.1-1.i586.rpm __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 2

GNBD vs NFS
by Bassett, Mark 08 Feb '06

08 Feb '06

Anyone have any experience with GNBD? What kind of performance and security differences are there in running GNBD vs NFS? We're planning an implementation with an external storage array (DAS) and want to use a shared filesystem. We have 10 or so clients that will be connecting to the shared filesystem. We have duplicate systems and arrays and were planning on using keepalived for failover of the NFS, however we are looking into using Cluster Suite, GFS, and GNBD to do the same thing. Would it just be overcomplicating things and not really providing any clear benefits?

1 0

Heartbeat and mount --bind for NFS v4.
by Will McDonald 08 Feb '06

08 Feb '06

Hi all. This is probably more of a HA list, or possibly even linux-practices, question but all hosts concerned are running CentOS and I reckon some of you guys might have some good suggestions. Feel free to tell me to piss off. :) I'm building a new CentOS, DRBD, Heartbeat and NFS HA cluster. We already have boxes running similar setups on FC2/3 running NFS v2/3 with the Ultra Monkey Heartbeat packages. These new systems are using CentOS packages as much as possible. [root@tempmailstore1a ha.d]# rpm -qa | grep -Ei 'heartbeat|drbd' heartbeat-pils-1.2.3.cvs.20050927-1.centos4 heartbeat-ldirectord-1.2.3.cvs.20050927-1.centos4 heartbeat-stonith-1.2.3.cvs.20050927-1.centos4 heartbeat-1.2.3.cvs.20050927-1.centos4 kernel-module-drbd-2.6.9-22.0.1.ELsmp-0.7.14-1.centos4 drbd-0.7.14-1.centos4 I'm messing around with NFS v4 (any and all experience/horror stories about EL4's NFS v4 in production environments more than welcome as I'm still at the evaluation/test stage) and looking at the best way to setup the --bind mounts for the NFS v4 pseudofilesystem. So far in /etc/ha.d/haresources I have... tempmailstore1a IPaddr::192.168.24.73 \ drbddisk::r0 \ Filesystem::/dev/drbd0::/mnt/drbd::ext3::rw,acl,data=journal \ portmap \ nfslock \ nfs \ rpcidmapd Now, after the Filesystem resource.d script's called ideally I'd like to setup the --bind mounts as detailed here... http://www.citi.umich.edu/projects/nfsv4/linux/using-nfsv4.html As follows... mount --bind /mnt/drbd /export/drbd I would've thought the best way to achieve this, since it's effectively another filesystem of type "none" when mounted would be with the resource.d/Filesystem script... which can't take a --mount option. Obviously I can hack around in the shell script or write my own, has anyone else bumped up against this? And how did you deal with it. Will.

2 4

Partition question
by Dan Bulmer 08 Feb '06

08 Feb '06

We just purchased a new dedicated server outside of the country. I just logged into it (Centos 4.2) and it appears the datacenter formatted it with one big partition. We require a /home partition for our software to function. Typically I install the OS myself on our local machines and manually create the /, /home, /var, partitions on setup. What do I need to do to get a /home partition on this machine remotely? Can it be done? Thanks for your advise Dan Bulmer CRUSE Hosting Services www.crusehosting.com <http://www.crusehosting.com/>

3 2

Raid tools for hardware raid?
by Benjamin J. Weiss 08 Feb '06

08 Feb '06

Okay, this is probably a stupid question, but here goes: We've got a database server that I'm going to wipe clean and install the latest OS. It's running 2.1 right now, and it has a hardware raid. I've found lots of stuff on software raid tools, but are there any tools on hardware raid? We've got another box, an IBM AS/400, and when one of it's raid disks fail there's a message in the system queue to let me know. I'd like to find a way to have this database box email me or something if one of the raid disks fail, and then of course the tools to rebuild the raid when I replace the disk. We're running Adaptec RAID SCSI adapters: [oracle@sibrsdbs oracle]$ dmesg | grep -i scsi SCSI subsystem driver Revision: 1.00 (scsi0) <Adaptec AIC-7899 Ultra 160/m SCSI host adapter> found at PCI 0/5/0 (scsi0) Wide Channel A, SCSI ID=7, 32/255 SCBs (scsi0) Downloading sequencer code... 396 instructions downloaded (scsi1) <Adaptec AIC-7899 Ultra 160/m SCSI host adapter> found at PCI 0/5/1 (scsi1) Wide Channel B, SCSI ID=7, 32/255 SCBs (scsi1) Downloading sequencer code... 396 instructions downloaded scsi0 : Adaptec AHA274x/284x/294x (EISA/VLB/PCI-Fast SCSI) 5.2.5/5.2.0 <Adaptec AIC-7899 Ultra 160/m SCSI host adapter> scsi1 : Adaptec AHA274x/284x/294x (EISA/VLB/PCI-Fast SCSI) 5.2.5/5.2.0 <Adaptec AIC-7899 Ultra 160/m SCSI host adapter> Thanks! Ben

2 1

speaking of redhat-kde repository
by Craig White 08 Feb '06

08 Feb '06

Perhaps a note to Matt Morgan but might be of general interest to others... Packaged in redhat-kde repository a very current samba instead of the laggard packages from upstream. I've not been using it and in fact I only just now realized it as I was updating the kde stuff but it's undoubtedly the easiest way to get to samba-3.0.21b Craig

1 0

thanks Rex
by Craig White 08 Feb '06

08 Feb '06

Thanks Rex for the updates to kde - especially the kdewebdev since that 'save' bug was especially annoying. Craig

1 0

possible fraud attempt and phising on my mail logs
by spart cus 08 Feb '06

08 Feb '06

hi guys, found this logs on my mail server about possible fraud attempt and phising. is this normal ? Found ip-based phishing fraud from 10.2.0.0 Found ip-based phishing fraud from 255.255.255.255 Found ip-based phishing fraud from 10.1.0.0 Found ip-based phishing fraud from 255.255.255.255 . MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee Sent: Wednesday, February 08, 2006 6:01 PM - Show quoted text - \n Subject: Fwd: 16 new messages in 8 topics \n - digest \n ---------- Forwarded message ---------- From: comp.dcom.sys.cisco \n group <noreply(a)googlegroups.com> Date: \n Feb 8, 2006 5:03 PM Subject: 16 new messages in 8 topics - digest To: \n "comp.dcom.sys.cisco digest subscribers" <comp.dcom.sys.cisco(a)googlegroups.com \n > comp.dcom.sys.cisco http://groups.google.com/group/comp.dcom.sys.cisco comp.dcom.sys.cisco(a)googlegroups.com Today\'s \n topics: * getting in - 4 messages, 2 authors http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/f48… \n * memory - 4 messages, 2 authors http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/235… \n * Which switch? - 1 messages, 1 author http://groups.google.com/group",1] ); //-->- Show quoted text - Subject: Fwd: 16 new messages in 8 topics - digest ---------- Forwarded message ---------- From: comp.dcom.sys.cisco group <noreply(a)googlegroups.com> Date: Feb 8, 2006 5:03 PM Subject: 16 new messages in 8 topics - digest To: "comp.dcom.sys.cisco digest subscribers" <comp.dcom.sys.cisco(a)googlegroups.com > comp.dcom.sys.cisco http://groups.google.com/group/comp.dcom.sys.cisco comp.dcom.sys.cisco(a)googlegroups.com Today's topics: * getting in - 4 messages, 2 authors http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/f48… * memory - 4 messages, 2 authors http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/235… * Which switch? - 1 messages, 1 author http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/a62… \n * Definitive max flash/DRAM for a 2621 non-XM - 1 messages, 1 \n author http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/f7c… \n * C3750 Layer 3 Switching and VLANs - 1 messages, 1 author http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/d9a… \n * PIX to PIX VPN problem - 3 messages, 2 authors http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/d8c… \n * AP1200 wds server hanging - 1 messages, 1 author http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/ebd… \n * IOS for 1401. - 1 messages, 1 author http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/f0d… \n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d TOPIC: \n getting in ",1] ); //-->/comp.dcom.sys.cisco/browse_thread/thread/a6263c2a6cf2f5ab * Definitive max flash/DRAM for a 2621 non-XM - 1 messages, 1 author http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/f7c… * C3750 Layer 3 Switching and VLANs - 1 messages, 1 author http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/d9a… * PIX to PIX VPN problem - 3 messages, 2 authors http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/d8c… * AP1200 wds server hanging - 1 messages, 1 author http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/ebd… * IOS for 1401. - 1 messages, 1 author http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/f0d… ============================================================================== TOPIC: getting in /comp.dcom.sys.cisco/browse_thread/thread/f48de60251014965 \n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d \n 1 of 4 \u003d\u003d Date: Wed, Feb 8 2006 4:16am From: roberson(a)hushmail.com (Walter \n Roberson) In article <1139371420.774575.279580(a)f14g2000cwb.googlegroups.com>, <fatlobsterman(a)yahoo.com > \n wrote: [PIX 515E] >thanks for replying so wuickly. I don\'t even \n know how to do that. I >have it hooked to my pc but I heard that I have \n to match ip addresses >and telnet which is way beyong my knowledge. Is \n it a big deal to do all >of this? Take the serial cable you got \n with the PIX 515E. Connect it to a serial port on your PC. Plug the RJ45 \n end into the "console" connection on the 515E. If you don\'t know which one \n that is, look at the diagram at http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/hig63… Then \n on your PC, fire up Hyperterm and set it to use the appropriate COM port at \n 9600 8 N 1. Now press return in the Hyperterm window. Alternately, \n follow the instructions in chapter 3 of the Quick Start Guide at http://www.cisco.com/univercd",1] ); //-->http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/f48… ============================================================================== == 1 of 4 == Date: Wed, Feb 8 2006 4:16am From: roberson(a)hushmail.com (Walter Roberson) In article <1139371420.774575.279580(a)f14g2000cwb.googlegroups.com>, <fatlobsterman(a)yahoo.com > wrote: [PIX 515E] >thanks for replying so wuickly. I don't even know how to do that. I >have it hooked to my pc but I heard that I have to match ip addresses >and telnet which is way beyong my knowledge. Is it a big deal to do all >of this? Take the serial cable you got with the PIX 515E. Connect it to a serial port on your PC. Plug the RJ45 end into the "console" connection on the 515E. If you don't know which one that is, look at the diagram at http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/hig63… Then on your PC, fire up Hyperterm and set it to use the appropriate COM port at 9600 8 N 1. Now press return in the Hyperterm window. Alternately, follow the instructions in chapter 3 of the Quick Start Guide at http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63qsg… \u003d\u003d \n 2 of 4 \u003d\u003d Date: Tues, Feb 7 2006 8:35pm From: fatlobsterman(a)yahoo.com are \n you referring to using the pcterminal adapter with the rj45into the console \n like in figure 4-7? \u003d\u003d 3 of 4 \u003d\u003d Date: Tues, Feb 7 2006 \n 8:56pm From: fatlobsterman(a)yahoo.com I \n think I may be in if that is the way that you were referring to. I used \n com3 with the other info you gave me and hyperterminal says connected but \n show version does nothering- what else can I do?\\ \u003d\u003d 4 of 4 \n \u003d\u003d Date: Wed, Feb 8 2006 6:15am From: roberson(a)hushmail.com (Walter \n Roberson) In article <1139374576.472587.175160(a)o13g2000cwo.googlegroups.com>, < fatlobsterman(a)yahoo.com> \n wrote: [PIX 515E] >I think I may be in if that is the way that \n you were referring to. I don\'t use googlegroups for actively reading \n postings (only when I am researching old postings), so your previous \n postings are not visible on my screen. It would therefore be \n appreciated if you would follow the Usenet convention of quoting enough \n of the previous conversation to establish the context of your \n remarks. For example if you go back and re-read your message in \n isolation, you will see that there is no reference present as to what \n kind",1] ); //-->/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63qsg/515quick.pdf == 2 of 4 == Date: Tues, Feb 7 2006 8:35pm From: fatlobsterman(a)yahoo.com are you referring to using the pcterminal adapter with the rj45into the console like in figure 4-7? == 3 of 4 == Date: Tues, Feb 7 2006 8:56pm From: fatlobsterman(a)yahoo.com I think I may be in if that is the way that you were referring to. I used com3 with the other info you gave me and hyperterminal says connected but show version does nothering- what else can I do?\ == 4 of 4 == Date: Wed, Feb 8 2006 6:15am From: roberson(a)hushmail.com (Walter Roberson) In article <1139374576.472587.175160(a)o13g2000cwo.googlegroups.com>, < fatlobsterman(a)yahoo.com> wrote: [PIX 515E] >I think I may be in if that is the way that you were referring to. I don't use googlegroups for actively reading postings (only when I am researching old postings), so your previous postings are not visible on my screen. It would therefore be appreciated if you would follow the Usenet convention of quoting enough of the previous conversation to establish the context of your remarks. For example if you go back and re-read your message in isolation, you will see that there is no reference present as to what kindof device you are using -- that\'s why I stuck the "[PIX 515E]" \n in, to give back that necessary context. >I used com3 with \n the other info you gave me and hyperterminal says >connected but show \n version does nothering- what else can I do?\\ You haven\'t provided any \n information about what kind of PC you are using or how it is set up, so I \n will have to make wild guesses here. In most PCs that I have seen, \n COM3 is either not connected at all, or is a modem port; the standard \n serial ports that are connected are COM1 and COM2. On most laptops that I \n have seen, the standard serial ports are COM1 and COM3 with COM2 not \n present, and COM3 usually being a modem port. So, lacking further \n information, I would -suspect- that you have used the wrong COM port number \n and that if you are talking to anything, you are talking to a \n modem. \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d TOPIC: \n memory http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/235… \n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d \n 1 of 4 \u003d\u003d Date: Tues, Feb 7 2006 8:18pm From: fatlobsterman(a)yahoo.com I \n have 2 pix- one is a 515e-UR and the other is 515e-FO. I don\'t even know \n how to get into the pix. I have it hooked up to my PC but I am clueless \n when it comes to these. Is there a place where I can go or could you \n possibly help me get it to get that information. I was told that I have to \n set up the same ips and telnet but again, I\'m clueless when it comes to \n this but I do know my way around PCs very well just to",1] ); //--> of device you are using -- that's why I stuck the "[PIX 515E]" in, to give back that necessary context. >I used com3 with the other info you gave me and hyperterminal says >connected but show version does nothering- what else can I do?\ You haven't provided any information about what kind of PC you are using or how it is set up, so I will have to make wild guesses here. In most PCs that I have seen, COM3 is either not connected at all, or is a modem port; the standard serial ports that are connected are COM1 and COM2. On most laptops that I have seen, the standard serial ports are COM1 and COM3 with COM2 not present, and COM3 usually being a modem port. So, lacking further information, I would -suspect- that you have used the wrong COM port number and that if you are talking to anything, you are talking to a modem. ============================================================================== TOPIC: memory http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/235… ============================================================================== == 1 of 4 == Date: Tues, Feb 7 2006 8:18pm From: fatlobsterman(a)yahoo.com I have 2 pix- one is a 515e-UR and the other is 515e-FO. I don't even know how to get into the pix. I have it hooked up to my PC but I am clueless when it comes to these. Is there a place where I can go or could you possibly help me get it to get that information. I was told that I have to set up the same ips and telnet but again, I'm clueless when it comes to this but I do know my way around PCs very well just togive you an idea of \n my knowledge. thanks \u003d\u003d 2 of 4 \u003d\u003d Date: Tues, \n Feb 7 2006 8:54pm From: fatlobsterman(a)yahoo.com I \n think that I am logged in b/c hypertermal is saying I\'m connected- I used \n the serial to rj45 to the console on the back- I used com 3 is that \n alright? maybe it is since I am connected but I tried shpow version in the \n hyperterminal window and nothing happens \u003d\u003d 3 of 4 \n \u003d\u003d Date: Tues, Feb 7 2006 8:54pm From: fatlobsterman(a)yahoo.com I \n think that I am logged in b/c hypertermal is saying I\'m connected- I used \n the serial to rj45 to the console on the back- I used com 3 is that \n alright? maybe it is since I am connected but I tried shpow version in the \n hyperterminal window and nothing happens \u003d\u003d 4 of 4 \n \u003d\u003d Date: Tues, Feb 7 2006 10:07pm From: "J" Honestly I don\'t know \n if I could walk you through this. Connecting to the console \n could be an all day speaking event for some people. Do you have \n the right cable, a serial port or USB adapter, and DB9 adapter \n if applicable? What COM port are you on. Are you \n using the 9600 8N1 settings? Do you know the password for the \n device? Do you have the necessary file to attempt password \n recovery? There are too many unknowns for me to be of any real \n assistance. I googled for "cisco console howto" and found a few \n useful hits. http://www.google.com/search?hl\u003den&q\u003dcisco+console+howto&btnG\u00… Setting \n up a Pix is certainly not a trivial manner. I recommend ",1] ); //--> give you an idea of my knowledge. thanks == 2 of 4 == Date: Tues, Feb 7 2006 8:54pm From: fatlobsterman(a)yahoo.com I think that I am logged in b/c hypertermal is saying I'm connected- I used the serial to rj45 to the console on the back- I used com 3 is that alright? maybe it is since I am connected but I tried shpow version in the hyperterminal window and nothing happens == 3 of 4 == Date: Tues, Feb 7 2006 8:54pm From: fatlobsterman(a)yahoo.com I think that I am logged in b/c hypertermal is saying I'm connected- I used the serial to rj45 to the console on the back- I used com 3 is that alright? maybe it is since I am connected but I tried shpow version in the hyperterminal window and nothing happens == 4 of 4 == Date: Tues, Feb 7 2006 10:07pm From: "J" Honestly I don't know if I could walk you through this. Connecting to the console could be an all day speaking event for some people. Do you have the right cable, a serial port or USB adapter, and DB9 adapter if applicable? What COM port are you on. Are you using the 9600 8N1 settings? Do you know the password for the device? Do you have the necessary file to attempt password recovery? There are too many unknowns for me to be of any real assistance. I googled for "cisco console howto" and found a few useful hits. http://www.google.com/search?hl=en&q=cisco+console+howto&btnG=Google+Search Setting up a Pix is certainly not a trivial manner. I recommend finding \n a person qualified to take on the task. I could write a book on \n nothing but Pix basics and still not cover everything you \n should know. Someone else may be able to provide better input \n than I. Best of \n luck. J \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d TOPIC: \n Which switch? http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/a62… \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d \n 1 of 1 \u003d\u003d Date: Tues, Feb 7 2006 8:28pm From: "www.BradReese.Com" Andrew, The \n 2005 Cisco Product Guide has a good matrix: http://www.bradreese.com/2005-cisco-guide.htm \n Found at Cisco Product Guides: http://www.bradreese.com/refurbished-cisco-product-guide.htm Sincerely, Brad \n Reese BradReese.Com Cisco Engineers http://www.BradReese.Com 1293 \n Hendersonville Road, Suite 17 Asheville, North Carolina USA 28803 USA \n & Canada: 877-549-2680 International: 828-277-7272 \n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d TOPIC: \n Definitive max flash/DRAM for a 2621 non-XM ",1] ); //--> finding a person qualified to take on the task. I could write a book on nothing but Pix basics and still not cover everything you should know. Someone else may be able to provide better input than I. Best of luck. J ============================================================================== TOPIC: Which switch? http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/a62… ============================================================================== == 1 of 1 == Date: Tues, Feb 7 2006 8:28pm From: "www.BradReese.Com" Andrew, The 2005 Cisco Product Guide has a good matrix: http://www.bradreese.com/2005-cisco-guide.htm Found at Cisco Product Guides: http://www.bradreese.com/refurbished-cisco-product-guide.htm Sincerely, Brad Reese BradReese.Com Cisco Engineers http://www.BradReese.Com 1293 Hendersonville Road, Suite 17 Asheville, North Carolina USA 28803 USA & Canada: 877-549-2680 International: 828-277-7272 ============================================================================== TOPIC: Definitive max flash/DRAM for a 2621 non-XM /comp.dcom.sys.cisco/browse_thread/thread/f7c8f2baa300293e \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d \n 1 of 1 \u003d\u003d Date: Tues, Feb 7 2006 8:44pm From: "J" I thought for \n sure the 2621 I had was an XM but apparently it\'s not. I\'m not sure how I \n missed it but I did. I need to be able to run a PPPoE client on \n this guy. Unfortunately it looks like that feature is only \n found in the advanced entreprise services code which require 96MB DRAM and \n 32MB flash for 12.3. This 2621 is running \n 64/16. I\'ve researched the max resources for the 2621 on both \n Google and Cisco\'s website and have gotten mixed results. What\'s \n the definitive maximum flash and DRAM for this router? Does anyone \n else have any ideas for running a PPPoE client on this router rather than \n running \n c2600-adventerprisek9-mz.123-4.xd1? Thanks J \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \n TOPIC: C3750 Layer 3 Switching and VLANs http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/d9a… \n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d \n 1 of 1 \u003d\u003d Date: Tues, Feb 7 2006 8:45pm From: "NETADMIN" Hi \n Lutz.. >>Hi Lutz - thanks a million for the reply - I was looking \n into VACLs and >>all sorts - didn\'t think it was as easy as that! I \n am just wondering if >>you could also provide an example on \n configuring the L3 part of the >>switch? Is posted ",1] ); //-->http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/f7c… ============================================================================== == 1 of 1 == Date: Tues, Feb 7 2006 8:44pm From: "J" I thought for sure the 2621 I had was an XM but apparently it's not. I'm not sure how I missed it but I did. I need to be able to run a PPPoE client on this guy. Unfortunately it looks like that feature is only found in the advanced entreprise services code which require 96MB DRAM and 32MB flash for 12.3. This 2621 is running 64/16. I've researched the max resources for the 2621 on both Google and Cisco's website and have gotten mixed results. What's the definitive maximum flash and DRAM for this router? Does anyone else have any ideas for running a PPPoE client on this router rather than running c2600-adventerprisek9-mz.123-4.xd1? Thanks J ============================================================================== TOPIC: C3750 Layer 3 Switching and VLANs http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/d9a… ============================================================================== == 1 of 1 == Date: Tues, Feb 7 2006 8:45pm From: "NETADMIN" Hi Lutz.. >>Hi Lutz - thanks a million for the reply - I was looking into VACLs and >>all sorts - didn't think it was as easy as that! I am just wondering if >>you could also provide an example on configuring the L3 part of the >>switch? Is posted not by \n me Thanks, NETADMIN \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d TOPIC: \n PIX to PIX VPN problem http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/d8c… \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d \n 1 of 3 \u003d\u003d Date: Wed, Feb 8 2006 5:00am From: John Scholvin In \n article <BVaGf.581257$ki.478851@pd7tw2no>, Walter Roberson <roberson(a)hushmail.com> \n wrote: >No, when you are ssh\'d in and you use \'debug\' commands, the \n output goes >to your ssh session. You might possibly need to adjust \n the >"logging monitor" level but I don\'t think so. Weird...this \n never worked for me. I tried turning on all kinds of debug and saw none of \n it in my ssh session. But I did manage to use "logging console" to see \n some debug output on the console port, so I made progress on my \n problem. I\'ll have to come back to this after I solve the more pressing \n crisis... Thanks, john -- John \n Scholvin -- john(a)scholvin.com -- an \n E7b5#9 man in an F major world \u003d\u003d 2 of 3 \u003d\u003d Date: Wed, Feb 8 \n 2006 5:29am From: John Scholvin In article < \n ds8duj$1bu$1(a)chessie.cirr.com>, John Scholvin <",1] ); //-->ryanfinne...(a)hotmail.com not by me Thanks, NETADMIN ============================================================================== TOPIC: PIX to PIX VPN problem http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/d8c… ============================================================================== == 1 of 3 == Date: Wed, Feb 8 2006 5:00am From: John Scholvin In article <BVaGf.581257$ki.478851@pd7tw2no>, Walter Roberson <roberson(a)hushmail.com> wrote: >No, when you are ssh'd in and you use 'debug' commands, the output goes >to your ssh session. You might possibly need to adjust the >"logging monitor" level but I don't think so. Weird...this never worked for me. I tried turning on all kinds of debug and saw none of it in my ssh session. But I did manage to use "logging console" to see some debug output on the console port, so I made progress on my problem. I'll have to come back to this after I solve the more pressing crisis... Thanks, john -- John Scholvin -- john(a)scholvin.com -- an E7b5#9 man in an F major world == 2 of 3 == Date: Wed, Feb 8 2006 5:29am From: John Scholvin In article < ds8duj$1bu$1(a)chessie.cirr.com>, John Scholvin <> \n wrote: > >I am trying to establish a VPN tunnel between 2 PIX \n 506E\'s. This is, for >now, as straightforward a setup as there could \n be: > >private LAN 1 --- PIX 1 ----- internet ----- PIX 2 ----- \n private LAN 2 > >The problem is that the pixen don\'t seem to even \n want to get to phase 1 >negotiations. "show isakmp sa" \n returns 0 associations on both sides. OK, I worked around the weird \n debug problem I had (thanks for the tips!) and now I have the two pixes \n connected through isakmp phase II. But they still won\'t pass \n traffic. Here\'s is my theory. One of the pixes handles incoming VPN \n client connections in addition to the "dedicated" connection to the other \n pix. Looking at the output from "show ipsec sa" on that dual-purpose pix, I \n see something funny right at the top: interface: \n outside ",1] ); //-->john(a)scholvin.com.REMOVETHIS> wrote: > >I am trying to establish a VPN tunnel between 2 PIX 506E's. This is, for >now, as straightforward a setup as there could be: > >private LAN 1 --- PIX 1 ----- internet ----- PIX 2 ----- private LAN 2 > >The problem is that the pixen don't seem to even want to get to phase 1 >negotiations. "show isakmp sa" returns 0 associations on both sides. OK, I worked around the weird debug problem I had (thanks for the tips!) and now I have the two pixes connected through isakmp phase II. But they still won't pass traffic. Here's is my theory. One of the pixes handles incoming VPN client connections in addition to the "dedicated" connection to the other pix. Looking at the output from "show ipsec sa" on that dual-purpose pix, I see something funny right at the top: interface: outside Crypto map tag: CRYPTO_MAP, local addr. MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical \n links are often malicious: ee.ee.ee.ee \n local ident (addr/mask/prot/port): (MailScanner has detected a possible fraud attempt from "10.1.0.0" claiming to be MailScanner warning: \n numerical links are often malicious: 10.1.0.0/255.255.0.0/0/0 \n ) remote ident (addr/mask/prot/port): (MailScanner has detected a possible fraud attempt from "10.2.0.0" claiming to be MailScanner warning: \n numerical links are often malicious: \n 10.2.0.0/255.255.0.0/0/0) current_peer: MailScanner has detected a possible fraud attempt from "cc.cc.cc.cc:500" claiming to be MailScanner warning: \n numerical links are often malicious: \n cc.cc.cc.cc:500 dynamic allocated peer ip: MailScanner has detected a possible fraud attempt from "0.0.0.0" claiming to be MailScanner warning: numerical links \n are often malicious: 0.0.0.0 ",1] ); //--> Crypto map tag: CRYPTO_MAP, local addr. MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee local ident (addr/mask/prot/port): (MailScanner has detected a possible fraud attempt from "10.1.0.0" claiming to be MailScanner warning: numerical links are often malicious: 10.1.0.0/255.255.0.0/0/0 ) remote ident (addr/mask/prot/port): (MailScanner has detected a possible fraud attempt from "10.2.0.0" claiming to be MailScanner warning: numerical links are often malicious: 10.2.0.0/255.255.0.0/0/0) current_peer: MailScanner has detected a possible fraud attempt from "cc.cc.cc.cc:500" claiming to be MailScanner warning: numerical links are often malicious: cc.cc.cc.cc:500 dynamic allocated peer ip: MailScanner has detected a possible fraud attempt from "0.0.0.0" claiming to be MailScanner warning: numerical links are often malicious: 0.0.0.0 MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical \n links are often malicious: ee.ee.ee.ee and MailScanner has detected a possible fraud attempt from "cc.cc.cc.cc" claiming to be MailScanner warning: numerical \n links are often malicious: cc.cc.cc.cc are the public IPs of \n the pixes)",1] ); D(["mb"," That dynamically allocated peer doesn\'t make sense to me. \n The other pix doesn\'t have that line in the output. I\'m guessing I have \n somehow butchered the config of the crypto map and it\'s confusing this peer \n with the VPN clients. The config of this pix is below, hopefully someone \n here can spot the problem. Summary: ",1] ); //-->(MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee and MailScanner has detected a possible fraud attempt from "cc.cc.cc.cc" claiming to be MailScanner warning: numerical links are often malicious: cc.cc.cc.cc are the public IPs of the pixes) That dynamically allocated peer doesn't make sense to me. The other pix doesn't have that line in the output. I'm guessing I have somehow butchered the config of the crypto map and it's confusing this peer with the VPN clients. The config of this pix is below, hopefully someone here can spot the problem. Summary: MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: \n numerical links are often malicious: ee.ee.ee.ee), one in \n Chicago (MailScanner has detected a possible fraud attempt from "cc.cc.cc.cc" claiming to be MailScanner warning: \n numerical links are often malicious: cc.cc.cc.cc)",1] ); D(["mb"," * the pix \n in Evanston also handles incoming VPN client connections ",1] ); //-->* one pix is in Evanston (public=MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee), one in Chicago (MailScanner has detected a possible fraud attempt from "cc.cc.cc.cc" claiming to be MailScanner warning: numerical links are often malicious: cc.cc.cc.cc) * the pix in Evanston also handles incoming VPN client connections MailScanner has detected a possible fraud attempt from "10.1.0.0" claiming to be MailScanner \n warning: numerical links are often malicious: 10.1.0.0/16 and \n MailScanner has detected a possible fraud attempt from "192.168.0.0" claiming to be MailScanner warning: \n numerical links are often malicious: 192.168.0.0/24; and \n Chicago\'s is MailScanner has detected a possible fraud attempt from "10.2.0.0" claiming to be MailScanner \n warning: numerical links are often malicious: \n 10.2.0.0/16",1] ); //-->* the Evanston private lans are MailScanner has detected a possible fraud attempt from "10.1.0.0" claiming to be MailScanner warning: numerical links are often malicious: 10.1.0.0/16 and MailScanner has detected a possible fraud attempt from "192.168.0.0" claiming to be MailScanner warning: numerical links are often malicious: 192.168.0.0/24; and Chicago's is MailScanner has detected a possible fraud attempt from "10.2.0.0" claiming to be MailScanner warning: numerical links are often malicious: 10.2.0.0/16- Show quoted text - Thanks in advance if anyone can spot the problem here. \n PIX Version 6.3(3) interface ethernet0 auto interface ethernet1 \n auto nameif ethernet0 outside security0 nameif ethernet1 inside \n security100 enable password ** encrypted passwd ** encrypted hostname \n pix-evn domain-name ** clock timezone CST -6 clock summer-time CDT \n recurring fixup protocol dns maximum-length 700 fixup protocol ftp \n 21 fixup protocol h323 h225 1720 fixup protocol h323 ras \n 1718-1719 fixup protocol http 80 fixup protocol rsh 514 fixup \n protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp \n 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol \n sqlnet 1521 fixup protocol tftp 69 ",1] ); D(["mb","name MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical \n links are often malicious: ee.ee.ee.ee vpn-evn",1] ); //-->- Show quoted text - Thanks in advance if anyone can spot the problem here. PIX Version 6.3(3) interface ethernet0 auto interface ethernet1 auto nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password ** encrypted passwd ** encrypted hostname pix-evn domain-name ** clock timezone CST -6 clock summer-time CDT recurring fixup protocol dns maximum-length 700 fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol tftp 69 name MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee vpn-evn object-group \n icmp-type icmp_traffic icmp-object \n echo-reply icmp-object source-quench icmp-object \n unreachable icmp-object time-exceeded access-list PERMIT_IN \n permit icmp any any object-group icmp_traffic ",1] ); //--> object-group icmp-type icmp_traffic icmp-object echo-reply icmp-object source-quench icmp-object unreachable icmp-object time-exceeded access-list PERMIT_IN permit icmp any any object-group icmp_traffic access-list PERMIT_IN permit \n tcp any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner \n warning: numerical links are often malicious: ee.ee.ee.ee eq \n ssh access-list PERMIT_IN permit tcp any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical \n links are often malicious: ee.ee.ee.ee eq www access-list \n PERMIT_IN permit tcp any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often \n malicious: ee.ee.ee.ee eq https access-list PERMIT_IN permit \n udp any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner \n warning: numerical links are often malicious: ee.ee.ee.ee eq \n isakmp access-list PERMIT_IN permit ah any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical \n links are often malicious: ee.ee.ee.ee access-list PERMIT_IN \n permit esp any host ",1] ); //-->access-list PERMIT_IN permit tcp any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee eq ssh access-list PERMIT_IN permit tcp any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee eq www access-list PERMIT_IN permit tcp any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee eq https access-list PERMIT_IN permit udp any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee eq isakmp access-list PERMIT_IN permit ah any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee access-list PERMIT_IN permit esp any host MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often \n malicious: ee.ee.ee.ee access-list NONAT permit ip MailScanner has detected a possible fraud attempt from "192.168.0.0" claiming to be MailScanner warning: numerical \n links are often malicious: 192.168.0.0 MailScanner has detected a possible fraud attempt from "255.255.255.0" claiming to be MailScanner warning: numerical \n links are often malicious: 255.255.255.0 MailScanner has detected a possible fraud attempt from "10.1.250.0" claiming to be MailScanner warning: numerical \n links are often malicious: 10.1.250.0 MailScanner has detected a possible fraud attempt from "255.255.255.0" claiming to be MailScanner warning: numerical \n links are often malicious: 255.255.255.0 access-list NONAT \n permit ip MailScanner has detected a possible fraud attempt from "10.1.0.0" claiming to be MailScanner warning: \n numerical links are often malicious: 10.1.0.0 ",1] ); //-->MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee access-list NONAT permit ip MailScanner has detected a possible fraud attempt from "192.168.0.0" claiming to be MailScanner warning: numerical links are often malicious: 192.168.0.0 MailScanner has detected a possible fraud attempt from "255.255.255.0" claiming to be MailScanner warning: numerical links are often malicious: 255.255.255.0 MailScanner has detected a possible fraud attempt from "10.1.250.0" claiming to be MailScanner warning: numerical links are often malicious: 10.1.250.0 MailScanner has detected a possible fraud attempt from "255.255.255.0" claiming to be MailScanner warning: numerical links are often malicious: 255.255.255.0 access-list NONAT permit ip MailScanner has detected a possible fraud attempt from "10.1.0.0" claiming to be MailScanner warning: numerical links are often malicious: 10.1.0.0 MailScanner has detected a possible fraud attempt from "255.255.0.0" claiming to be MailScanner warning: numerical \n links are often malicious: 255.255.0.0 MailScanner has detected a possible fraud attempt from "10.1.250.0" claiming to be MailScanner warning: numerical \n links are often malicious: 10.1.250.0 MailScanner has detected a possible fraud attempt from "255.255.255.0" claiming to be MailScanner warning: numerical \n links are often malicious: 255.255.255.0 ",1] ); //-->MailScanner has detected a possible fraud attempt from "255.255.0.0" claiming to be MailScanner warning: numerical links are often malicious: 255.255.0.0 MailScanner has detected a possible fraud attempt from "10.1.250.0" claiming to be MailScanner warning: numerical links are often malicious: 10.1.250.0 MailScanner has detected a possible fraud attempt from "255.255.255.0" claiming to be MailScanner warning: numerical links are often malicious: 255.255.255.0 MailScanner has detected a possible fraud attempt from "10.1.0.0" claiming to be MailScanner warning: \n numerical links are often malicious: 10.1.0.0 MailScanner has detected a possible fraud attempt from "255.255.0.0" claiming to be MailScanner warning: numerical \n links are often malicious: 255.255.0.0 MailScanner has detected a possible fraud attempt from "10.2.0.0" claiming to be MailScanner warning: numerical links \n are often malicious: 10.2.0.0 MailScanner has detected a possible fraud attempt from "255.255.0.0" claiming to be MailScanner warning: numerical \n links are often malicious: 255.255.0.0 access-list CHICAGO \n permit ip MailScanner has detected a possible fraud attempt from "10.1.0.0" claiming to be MailScanner warning: \n numerical links are often malicious: 10.1.0.0 MailScanner has detected a possible fraud attempt from "255.255.0.0" claiming to be MailScanner warning: numerical \n links are often malicious: 255.255.0.0",1] ); //-->access-list NONAT permit ip MailScanner has detected a possible fraud attempt from "10.1.0.0" claiming to be MailScanner warning: numerical links are often malicious: 10.1.0.0 MailScanner has detected a possible fraud attempt from "255.255.0.0" claiming to be MailScanner warning: numerical links are often malicious: 255.255.0.0 MailScanner has detected a possible fraud attempt from "10.2.0.0" claiming to be MailScanner warning: numerical links are often malicious: 10.2.0.0 MailScanner has detected a possible fraud attempt from "255.255.0.0" claiming to be MailScanner warning: numerical links are often malicious: 255.255.0.0 access-list CHICAGO permit ip MailScanner has detected a possible fraud attempt from "10.1.0.0" claiming to be MailScanner warning: numerical links are often malicious: 10.1.0.0 MailScanner has detected a possible fraud attempt from "255.255.0.0" claiming to be MailScanner warning: numerical links are often malicious: 255.255.0.0MailScanner has detected a possible fraud attempt from "10.2.0.0" claiming to be MailScanner warning: numerical links \n are often malicious: 10.2.0.0 MailScanner has detected a possible fraud attempt from "255.255.0.0" claiming to be MailScanner warning: numerical \n links are often malicious: 255.255.0.0",1] ); D(["mb"," no pager logging \n on logging trap notifications ",1] ); D(["mb","logging host inside MailScanner has detected a possible fraud attempt from "192.168.0.200" claiming to be MailScanner warning: numerical \n links are often malicious: 192.168.0.200",1] ); //--> MailScanner has detected a possible fraud attempt from "10.2.0.0" claiming to be MailScanner warning: numerical links are often malicious: 10.2.0.0 MailScanner has detected a possible fraud attempt from "255.255.0.0" claiming to be MailScanner warning: numerical links are often malicious: 255.255.0.0 no pager logging on logging trap notifications logging host inside MailScanner has detected a possible fraud attempt from "192.168.0.200" claiming to be MailScanner warning: numerical links are often malicious: 192.168.0.200 no logging message \n 106023 no logging message 305005 no logging message 304001 icmp \n permit any outside icmp permit any inside mtu outside 1500 mtu inside \n 1500 ",1] ); D(["mb","ip address outside MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often \n malicious: ee.ee.ee.ee MailScanner has detected a possible fraud attempt from "255.255.255.248" claiming to be MailScanner warning: numerical links are often \n malicious: 255.255.255.248 ",1] ); //--> no logging message 106023 no logging message 305005 no logging message 304001 icmp permit any outside icmp permit any inside mtu outside 1500 mtu inside 1500 ip address outside MailScanner has detected a possible fraud attempt from "ee.ee.ee.ee" claiming to be MailScanner warning: numerical links are often malicious: ee.ee.ee.ee MailScanner has detected a possible fraud attempt from "255.255.255.248" claiming to be MailScanner warning: numerical links are often malicious: 255.255.255.248 MailScanner has detected a possible fraud attempt from "10.1.1.1" claiming to be MailScanner warning: numerical links \n are often malicious: 10.1.1.1 MailScanner has detected a possible fraud attempt from "255.0.0.0" claiming to be MailScanner warning: numerical links are often \n malicious: 255.0.0.0",1] ); D(["mb"," ip audit info action alarm ip audit \n attack action alarm ip local pool REMOTE 10.1.250.1-10.1.250.254 pdm \n logging informational 100 pdm history enable arp timeout 14400 global \n (outside) 1 interface nat (inside) 0 access-list NONAT ",1] ); //-->ip address inside MailScanner has detected a possible fraud attempt from "10.1.1.1" claiming to be MailScanner warning: numerical links are often malicious: 10.1.1.1 MailScanner has detected a possible fraud attempt from "255.0.0.0" claiming to be Mai --------------------------------- Brings words and photos together (easily) with PhotoMail - it's free and works with Yahoo! Mail.

1 0

Video card suggestions
by Jerry Geis 07 Feb '06

07 Feb '06

I am looking for a video card (preferably nvidia) that will do 1920x1080p (that is p not i). I need 1920x1080p, AGP 8x, DVI ----------------------- history is below: I prefered nvidia as they have a decent method of driver updates. I presently have the FX5200. It actually works at 1920x1080p but the nv driver locks up. I downloaded the nvidia drivers and they will not run at 1920x1080p. I then purchased another card the MX4000 the specs said it would do more than 1920x1080 but the FINE print said in DVI mode it only does 1600x1200. All the cards I find say 1920x1080i. I tried a P650 also from Matrox but I could not get the drivers to work at all on linux. Any suggestions are greatly appreciated. Thanks, Jerry

2 1

Dag - Victim of burglary
by Karanbir Singh 07 Feb '06

07 Feb '06

Last thursday ( Feb 2nd ) Dag's place was broken into a significant amount of hardware was taken, along with other valuables. You can see the details posted by Dag at http://lists.freshrpms.net/pipermail/freshrpms-list/2006-February/013868.ht… We all know the excellent work he has done for the entire linux community over the years, and specifically his continued support for the CentOS project. If at any stage you were considering donating or helping out in anyway, now is the time - I am sure he will appreciate all the help he can get. - KB -- Karanbir Singh : http://www.karan.org/ : 2522219@icq

2 1

network trouble with asus P5LD2-VM board
by David M. Shirley 07 Feb '06

07 Feb '06

I am trying to install centos 4.2 on an Asus P5LD2-VM and cannot for the life of me get networking to work. The installer does not see the onboard Gbit ethernet port nor can I configure at after installation. It gives no errors when I modprobe e1000 to insert the drivers but I cannot "ifup eth0" without getting a "device eth0 does not seem to be present, delaying initialization." error message. (yes I have the ifcfg-eth0 file set up properly) What am I missing? TIA David

4 3

RE: [CentOS] Booting centos from a windows ris server - SOLVED
by Plant, Dean 07 Feb '06

07 Feb '06

Will McDonald wrote: > On 01/02/06, Plant, Dean <dean.plant(a)roke.co.uk> wrote: >> We are thinking of using pxe boot with a windows ris server to start >> off a Centos 4 install. Does anyone know if this is possible? > > I've never done it myself but turned up a few links a few weeks back > which imply it's feasible... > > http://syslinux.zytor.com/pxe.php > Thanks for the link. This lead me to http://syslinux.zytor.com/ris.php which explained what we needed to do. Here's a quick summary of actions to add Centos PXE installs to an existing windoze ris server. Create the following folder structure on RIS Server: RemoteInstall\Setup\English\Tools\PXELinux\i386\templates\ RemoteInstall\Setup\English\Tools\PXELinux\i386\templates\pxelinux.cfg\ >From the Centos images directory, extract contents of 'diskboot.img' into the templates folder. Rename 'syslinux.cfg' to 'default' and move to ..\templates\pxelinux.cfg\ (edit the default file to include your site configuration/ks file) Copy /usr/lib/syslinux/pxelinux.0 from Centos 4.2 and move to ..\templates\ Create 'pxelinux.sif' in ..\templates\ Example 'pxelinux.sif' below: ----------- [OSChooser] Description="Linux Install - Centos 4" Help="Automatically installs Centos 4." LaunchFile = "Setup\English\Tools\PXELinux\i386\templates\pxelinux.0" ImageType =Flat Version="5.2 (0)" Restart ris. The Centos install option will be in the "Maintenance and Trouble Shooting" menu as default. Dean

1 0

Occasional faults - CentOS server running subversion
by David Fletcher 07 Feb '06

07 Feb '06

Dear All, I've got a small server at work, built from a Via Epia SP 8000E mini-ITX motherboard and a Seagate SATA hard drive. The application of this server is to provide versioned file storage, using subversion. I'm running CentOS, with Apache 2 and SSL to provide controlled access to the subversion repositories. There have been two problems with this machine:- Problem 1 Every once in a while one of the repositories gets corrupted, which produces an error when attempting to use it with tortoisesvn or svn from another Linux box. I then have to go in as root on ssh and do svnadmin recover followed by chown -R apache:apache just to be sure, then it works again. Problem 2 The server had been running continually for maybe 70 days without problems apart from problem 1. A couple of weeks ago there was a kernel update. I rebooted the machine to run the new kernel in case it included security fixes, and at 23:00 on Thursday night it died. When I came in on Friday morning it was sat there with the hard drive permanently lit and not responding. I had to push the reset button to get it going again. /var/log/messages entries from this incident follow:- Feb 2 21:01:01 localhost crond(pam_unix)[1399]: session opened for user root by (uid=0) Feb 2 21:01:01 localhost crond(pam_unix)[1399]: session closed for user root Feb 2 22:01:01 localhost crond(pam_unix)[1403]: session opened for user root by (uid=0) Feb 2 22:01:01 localhost crond(pam_unix)[1403]: session closed for user root Feb 2 23:00:01 localhost crond(pam_unix)[1407]: session opened for user root by (uid=0) Feb 3 09:10:02 localhost syslogd 1.4.1: restart. Feb 3 09:10:02 localhost syslog: syslogd startup succeeded At 23:00 on Thursday crond would have been running a bash script to do a daily dump of the repositories. BTW the server is supplied by an APC UPS so there should be no issues with mains power supply problems. As I'm not running on Intel hardware, does anybody know of any issues with running CentOS on Via motherboards with Eden processors? Thanks. Dave Fletcher

1 0

works best with centos 4+? CPanel or Plesk?
by Dustin Krysak 07 Feb '06

07 Feb '06

Hi there i was wondering if anyone on this list has any comments on CPanel vs Plesk on Centos 4+? Looking for the one that best work with the "out of the box" RPMs for Centos. Thanks in advance! Dustin

8 10

[ANN] Footprint - kickstart management tool
by Dag Wieers 07 Feb '06

07 Feb '06

Hi, I'm planning to create a new tool to simplify creation and management of kickstart-files (as well as automate some of the tasks that come with automated installation). If you know of another mailinglist that fits this subject, or you know of similar projects (because I can imagine there are countless implementations inside companies) please let me know. I'm just in the design phase and i'm interested in what already exists and how it was implemented (the structure/interface/features). Let me first explain what I aim for (and how it is currently in my head). First of all, it should be straight-forward to manage a list of systems (or groups of systems) that have similar configurations. A config-file could be something like: /etc/footprint/system/proxy-servers.conf [main] boot options = panic=10 acpi=off dist = rhel4as #modules = e100 profile = proxy-servers [proxy01] ip = 10.0.0.1 netmask = 255.255.255.0 mac address = 00:01:02:03:004:05 ... (or even more simple, only hold 1 system) There would be a collection of profiles, each specifying a set of variables that influence the kickstart file. This could be hardware-related or functional. And a directory-structure for different methods, like LVM setup for rhel3as, rhel4as for different disk configurations, or a debug-method (to ease development), or a method that sets up callback and log functionality (to follow progress from remote), lots of things are possible here to extend anaconda. The tool would then be able to construct a working kickstart file, depending on the combination of profiles/variables it could generate a custom initial ramdisk, use another kernel, create the PXE and DHCP configuration, or make a floppy or ISO file used for custom hardware booting. Also, it would be nice to have a script in Apache that is able to (based on the IP address or mac address) to generate the correct kickstart file (and automatically save/timestamp it for debug/management purposes). In the end, the command-line tool (based on the config files) would automatically control DHCP/PXE, all the files that make remote booting possible and the management (and revisions) of kickstart files. And that's how I got the name, what is left after a good kickstart ? A footprint :) The aim is to integrate it to work with Yam, so that setting this up becomes very easy. And custom packages and updates are merged with the default packagelist so you don't have to do customisations afterwards. Additionally, I'd like to have methods for doing extra configuration tweaks (like populating hosts files, dropping SSH keys, configuring user management and much much more). For all these things I can use help and ideas, so let me know what additional features you have in mind. Discussions go onto the rpmforge tools mailinglist: http://lists.rpmforge.net/mailman/listinfo/tools And I have a non-functional website at: http://dag.wieers.com/home-made/footprint/ (required for registering the freshmeat project) Kind regards, -- dag wieers, dag(a)wieers.com, http://dag.wieers.com/ -- [all I want is a warm bed and a kind word and unlimited power]

2 1

ftp access directory
by Andrew Rice 07 Feb '06

07 Feb '06

using vsftpd, I know its possible to specify what directory you want a user to be dropped into when he ftps in...but I dont remember where to go to change that. any suggestions? -- Andrew Rice Jr

5 7

How to add System V Filesystem to Centos?
by Mace Eliason 07 Feb '06

07 Feb '06

Hi, I am working on a project where I have to move some parts files from an old Unix server. I have tared the files to floppy disc, but I can't mount them. After doing some reasearch I have found that the SCO Unix ver 3.2 uses a System V filesystem I think. From the article that I have read I need to add this filesystem to my kernel to be able to mount and read the floppy discs. Can anyone help me with this I have never recomipled my kernel before. Then I should be able to use # mount -t sysv /dev/fd0 /mnt/floppy I have found in the .config file under misc filesystems that I can turn on sysv filesytem. I am not sure what to do after that. Is it better to make it a module or to compileit into the kernel? kernel CONFIG_SYSV_FS=y as a modual CONFIG_SYSV_FS=m If I go the modual way where do I find the modual? I would use modprobe to install it right? What commands do you run to recompile the kernel? Do I run make menuconfig? I have been reading alot but not finding what I need. I have a fresh install off Centos 4.2 just for this purpose so if I mess it up that s okay I will start again. I am sure this is so simple once you have done it once. Thanks Scandog

7 23

Install from USB Pendrive
by Chris Hammond 07 Feb '06

07 Feb '06

I would like to take a USB pen drive and make it CentOS 4.2 install cdrom 1. I have found the boot image for USB drives or floppies but I want to make my pen drive Install CD 1. I have looked around and the closest thing I have found is a how to for Debian but I can't seem to figure out how to adapt it to what I want to do. Any help or links would be much appreciated. Thanks Chris

3 4

32bit 3d X apps under CentOS 4 x86_64?
by Steve Bergman 07 Feb '06

07 Feb '06

Is it possible to run 32 bit X applications under CentOS using DRI? I'm finding that the app looks for: /usr/X11R6/lib/modules/dri/r200_dri.so and does not find it. Although /usr/X11R6/lib64/modules/dri/r200_dri.so does exist. And so I end up with software gl rendering. Thanks, Steve

3 3

Oracle and kernel 2.6 vs 2.4 performance question
by Benjamin J. Weiss 07 Feb '06

07 Feb '06

All, We're currently running Oracle 9i on a RHEL AS 2.1 installation. We need to upgrade to Oracle 10g, and I've half-way convinced my boss to upgrade to RHEL 4 (we're still discussing AS vs ES, since we're running 2 HT processors...). Anyway, I want to upgrade because of EOL issues whenever RHEL 5 comes out, but before he okays me wiping the server and installing 4, he wants to know if we're going to get any specific benefits out of upgrading the OS. I recall that the 2.6 kernel did a bunch of optimization stuff, but is there anything in there that would affect the performance of Oracle 10g? And if so, are there any web sites to which I can direct him? So far my googling hasn't been very productive. Maybe I'm using the wrong search terms. Thanks! Ben Weiss

4 3

FreeNX problem
by Kanwar Ranbir Sandhu 06 Feb '06

06 Feb '06

Hello All, I have FreeNX deployed on a CentOS 4 server at a client site. When I log into my Gnome desktop on the client's server and start an app, the window borders aren't visible. The applications themselves act strangely too - when I try to click on a menu item, either nothing happens or the app loses focus. Overall, the window manager looks to be acting up. At first I thought something was wrong with my Gnome profile, so I moved the .gnome* and .gconf* directories out of the way and logged in again. This didn't fix the problem. So, I then backed up my home folder, deleted my account, recreated it, setup the nx keys, and logged in again - same problem. The next course of action was to remove and reinstall the NX client on my laptop. I did this, but the problem remains. Logging into my account on the local network (i.e. at the client site) does not exhibit the same problem. None of my client's employees have reported issues, so it's completely isolated to my account. Everything seems to point to FreeNX/NX as the culprit. There must be some temporary file sitting around that's causing the window manager problems, but I can't find it. Anyone have any idea where I should look next? I'm out of ideas at the moment. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.15-1.1830_FC4 i686 GNU/Linux 14:49:33 up 7:49, 3 users, load average: 0.68, 0.52, 0.32

1 0

Relaying of spam
by Marcel 06 Feb '06

06 Feb '06

Hi, sorry if this isn't the right place to post, but I'm having some trouble figuring out a spamming issue. If anyone here can help, that'd be amazing. I'm running Brian's CentOS/BlueQuartz CD, version 3.5 from Nuonce.net. Everything seemed to be running fine for several days until this morning, when I received a zillion "returned mail" notices from the mailer daemon. Within it, it said it was unable to complete sending to the following users for various reasons and blah blah blah. That's fine, but I never initiated the email. In my logs, entries like the following shows up ('portal' is the name of the box obviously): Feb 5 12:11:45 portal sendmail[17135]: k15EXFZf015093: SMTP outgoing connect on portal.xxxxxxx.com Feb 5 12:12:51 portal sendmail[17135]: k15EXFZf015093: makeconnection (mobilemail.caii-dc.com. [209.135.227.253]) failed: Connection timed out with mobilemail.caii-dc.com. Feb 5 12:12:51 portal sendmail[17135]: k15EXFZf015093: to=<aldara(a)caii-dc.com>, ctladdr=<username(a)portal.xxxxxxxxxxxxxxxxxxxx.com> (502/100), delay=03:39:35, xdelay=00:01:06, mailer=esmtp, pri=3188891, relay=mobilemail.caii-dc.com. [209.135.227.253], dsn=4.0.0, stat=Deferred: Connection timed out with mobilemail.caii-dc.com. Irregardless of the errors, I can't figure out why/where the outbound email is being generated. There are many entries in the log like this, and I assume alot of it, is going through. The user never initiated it. It has to be the server itself? Plus, it's using the full name of the server which is portal.domainname.com in the email address. It seems to only use ONE user's name though. AND it's ONLY using 1 user's name from a list of several. The user account gets some spam every now and then with the following header info, then these returned emails. These emails are from the local server using an account that doesn't exist: =============================== Subject: The hottest issue we've seen this year From: ThePickOfTheYear2696(a)domainname.com Date: Sun, 5 Feb 2006 08:52:47 -0600 To: ThePickOfTheYear2696(a)portal.domainname.com =============================== Since the "pickoftheyear" account doesn't exist.... Is there any suggestions from the group? I'm a newb at running a mail server, just trying to figure out what's going on. The site in question did have a couple formmail scripts that I deleted. I am interested in running chkrootkit but is there a specific package required for CentOS/BQ? Or just download and compile? Thanks. M

6 8

SNMP help
by Kevin B 06 Feb '06

06 Feb '06

Hello I'm trying to setup SNMP on my Centos 4.2 server. I want the ability to monitor the disk and some other non default settings that can be defined in snmpd.conf but when I request the data, it doesn't give the disired results. Config below and trap results below. Thanks in advance for any help. Kevin [root@localhost snmp] snmpget -v 2c -c public localhost disk HOST-RESOURCES-MIB::hrDiskStorageTable = No Such Object available on this agent at this OID [root@localhost snmp]# grep -v '#' snmpd.conf | uniq com2sec notConfigUser default public group notConfigGroup v1 notConfigUser group notConfigGroup v2c notConfigUser view systemview included .1.3.6.1.2.1.1 view systemview included .1.3.6.1.2.1.25.1.1 access notConfigGroup "" any noauth exact systemview none none view rwview included interfaces.ifTable.ifEntry.ifAdminStatus syslocation Unknown (edit /etc/snmp/snmpd.conf) syscontact Root <root@localhost> (configure /etc/snmp/snmp.local.conf) proc mountd proc sendmail 10 1 disk / 100000 load 12 14 14 exec .1.3.6.1.4.1.2021.51 ps /bin/ps exec .1.3.6.1.4.1.2021.52 top /usr/local/bin/top exec .1.3.6.1.4.1.2021.53 mailq /usr/bin/mailq pass .1.3.6.1.4.1.4413.4.1 /usr/bin/ucd5820stat [root@localhost ~]# snmpwalk -v 2c -c public localhost SNMPv2-MIB::sysDescr.0 = STRING: Linux localhost.localdomain 2.6.9-22.0.2.EL #1 Tue Jan 17 06:51:40 CST 2006 i686 SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10 SNMPv2-MIB::sysUpTime.0 = Timeticks: (1560693) 4:20:06.93 SNMPv2-MIB::sysContact.0 = STRING: Root <root@localhost> (configure /etc/snmp/snmp.local.conf) SNMPv2-MIB::sysName.0 = STRING: localhost.localdomain SNMPv2-MIB::sysLocation.0 = STRING: Unknown (edit /etc/snmp/snmpd.conf) SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORID.1 = OID: IF-MIB::ifMIB SNMPv2-MIB::sysORID.2 = OID: SNMPv2-MIB::snmpMIB SNMPv2-MIB::sysORID.3 = OID: TCP-MIB::tcpMIB SNMPv2-MIB::sysORID.4 = OID: IP-MIB::ip SNMPv2-MIB::sysORID.5 = OID: UDP-MIB::udpMIB SNMPv2-MIB::sysORID.6 = OID: SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup SNMPv2-MIB::sysORID.7 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance SNMPv2-MIB::sysORID.8 = OID: SNMP-MPD-MIB::snmpMPDCompliance SNMPv2-MIB::sysORID.9 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance SNMPv2-MIB::sysORDescr.1 = STRING: The MIB module to describe generic objects for network interface sub-layers SNMPv2-MIB::sysORDescr.2 = STRING: The MIB module for SNMPv2 entities SNMPv2-MIB::sysORDescr.3 = STRING: The MIB module for managing TCP implementations SNMPv2-MIB::sysORDescr.4 = STRING: The MIB module for managing IP and ICMP implementations SNMPv2-MIB::sysORDescr.5 = STRING: The MIB module for managing UDP implementations SNMPv2-MIB::sysORDescr.6 = STRING: View-based Access Control Model for SNMP. SNMPv2-MIB::sysORDescr.7 = STRING: The SNMP Management Architecture MIB. SNMPv2-MIB::sysORDescr.8 = STRING: The MIB for Message Processing and Dispatching. SNMPv2-MIB::sysORDescr.9 = STRING: The management information definitions for the SNMP User-based Security Model. SNMPv2-MIB::sysORUpTime.1 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.2 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.3 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.4 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.5 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.6 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.7 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.8 = Timeticks: (0) 0:00:00.00 SNMPv2-MIB::sysORUpTime.9 = Timeticks: (0) 0:00:00.00 HOST-RESOURCES-MIB::hrSystemUptime.0 = Timeticks: (47717391) 5 days, 12:32:53.91

3 4

ip_forwarding
by Scott Taylor 06 Feb '06

06 Feb '06

Hey all, I'm trying to swap to CentOS and I have just about everything working except ip_forwarding. I have FORWARD_IPV4="yes" in my /etc/sysconfig/network file but /proc/sys/net/ipv4/ip_forward does not = 1 (also tried to set it to ="true" and just =true). All the firewall (iptable) rules are in place. Why won't ip_forward stay enabled? I'm using the latest DL of CentOS and all updated. Any ideas? Cheers. -- Scott

3 3

Re: Issuse installing either i386 or x86_64
by Chris 06 Feb '06

06 Feb '06

Edward Dekkers wrote: > Chris wrote: >> Greetings - >> >> Has anyone ever managed to install FC4 on a Sony Vaio desktop, model >> VGC-RB53 ? >> I can install - but on boot up after the install, I get a kernel panic >> and it just hangs. >> > > Hangs tend to be able to be worked around by using boot parameters. > > Try some of the ones listed at: > > http://www.fedorafaq.org/#otherinstall > > While you're there - bookmark the site. It's extremely handy. > > Regards, > Ed. > Welp - I tried all sorts of stuff. Still a no-go. Here's how I'm doing this: Primary SATA drive is XP Secondary SATA is for CentOS or FC4 (whichever I can get to work) On complete install of either (it installs just dandy) and reboot into the virgin install, I get the kernel panic (poop loads of code) and the caps lock and scroll lock lights on the keyboard are both flashing at the same time. Some other info that may be relevent - I am using a Belkin OmniView SE 4 port PS/2 KVM (I don't know it that may be the issue after the fact). Anyhow - if someone else can shed some light - I really would like to NOT use XP, and even though I like FreeBSD, I would prefer the use of CentOS or FC4. Help! -- Best regards, Chris Never create a problem for which you do not have the answer.

2 1

HELP
by Thomas E Dukes 05 Feb '06

05 Feb '06

HELP!!! Someone is forging my domain to spam AOL accounts. Anyone know how I can stop this. I have deleted 400 - 500 of these over the last 2 days. TIA!!!!! -----Original Message----- From: Mail Delivery Subsystem [mailto:MAILER-DAEMON@palmettodomains.com] Sent: Sunday, February 05, 2006 9:55 AM To: apache(a)palmettodomains.com Subject: Returned mail: see transcript for details The original message was received at Sun, 5 Feb 2006 09:52:16 -0500 from localhost.localdomain [127.0.0.1] ----- The following addresses had permanent fatal errors ----- <missmeia(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mizwhinealot1(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misskittysmother(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misspimpete13(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mizagui(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mir3896345(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitniqui(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missmisterious(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjkauffman(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitchellq(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitchblairdo(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misskitty5339085(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitschmitt(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missionrid(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misterrichter(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mizzerine(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missyandshaun(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjdevenport(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missf28(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missdbs2u(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mischifman44(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misssrich(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjim4255(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mizzmicheaux(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missk1135(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjgorga4(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <miteone(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjchase2(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mizutag(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitclass56(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mizangeleyez187(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitchell18137060(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjfpro(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mirianflang(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <miweshop(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitzimara(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misshortstuff06(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mistiontop(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mistersimple(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjgdodds(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjdsldadjd(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missperfect96(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misterjkl(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mix46016(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjdonovan5(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mithros(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missygyrl1(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mistymiz003(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mizchinad(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitchkid24(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misslas(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misscoolatta(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mistica96(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjgotham(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mistersharkyjr(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mirounga(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <miraclelady(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitzy293(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mistylk13(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjdgolf(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mizzunique125(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misshollyweirdo(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missrosi(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missorleans65(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missent(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mj231383(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitchl21(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mito203(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missnikkigriff(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missallthat21(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <minouchat7(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjaboudreau(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <miwa2103(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mismoneypenny45(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mipoems(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misterb310(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <miscetcemail(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitchdetours(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mintersl(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missmpress(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <miphilip(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missthang8713(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mishallen(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missmick38(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <miriam1106(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mishhy95(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misssecrets918(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missalina66(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missamcglashan(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misscmc(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missteetee7948(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjhanscom(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjalex5(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mistyday01(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <misserin16(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mjac349303(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mitchland2(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mioj2003(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <mishcata(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) <missbamdhines(a)aol.com> (reason: 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html ) ----- Transcript of session follows ----- ... while talking to mailin-01.mx.aol.com.: <<< 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html <<< 554- AOL does not accept e-mail transactions from IP addresses which <<< 554- generate complaints or transmit unsolicited bulk e-mail. <<< 554 Connecting IP: 151.213.88.187 ... while talking to mailin-03.mx.aol.com.: >>> QUIT <<< 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html <<< 554- AOL does not accept e-mail transactions from IP addresses which <<< 554- generate complaints or transmit unsolicited bulk e-mail. <<< 554 Connecting IP: 151.213.88.187 ... while talking to mailin-02.mx.aol.com.: >>> QUIT <<< 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html <<< 554- AOL does not accept e-mail transactions from IP addresses which <<< 554- generate complaints or transmit unsolicited bulk e-mail. <<< 554 Connecting IP: 151.213.88.187 ... while talking to mailin-04.mx.aol.com.: >>> QUIT <<< 554- (RTR:SC) http://postmaster.info.aol.com/errors/554rtrsc.html <<< 554- AOL does not accept e-mail transactions from IP addresses which <<< 554- generate complaints or transmit unsolicited bulk e-mail. <<< 554 Connecting IP: 151.213.88.187 554 5.0.0 Service unavailable

2 2

2.5.STABLE6-3.4E.11 Problem
by Peter Kitchener 05 Feb '06

05 Feb '06

Has anyone had a problem with this version of Squid, we are using Centos4, and this is the latest package of squid. The problem occurs when a host attempts to make a SSL connection that involves a reverse DNS lookup, it will cause squid to crash. I ran squid with the "-d 10" option to find out what happens, and this is the error i get. How you reproduce this error is, find a SSL enabled website, get the IP address and type into your browser, https://<ipaddress>/ and this will produce the error (squid): rfc1035.c:417: rfc1035RRUnpack: Assertion `(*off) <= sz' failed. Squid will then proceed to restart itself. Has anyone else found this problem? Regards, Peter K

5 5

Postfix + SASL
by Dominik Składanowski 05 Feb '06

05 Feb '06

Hello list. I have a mail server where I use Postfix+SASL. Everything works fine. Sending emails when using client (Outlook, Thunderbird or anything else) require authorization. It is OK. But on the same server there is a Squirrelmail which sends emails as a localhost. To send email in this way there is no any authorization. Besides one preson use PINE on the server... How to do that authorization is required when you use Squirrelmail or PINE (localhost)? Regards -- ____________________________________________________________________ D o m i n i k S k ł a d a n o w s k i

4 5

Moderating on IRC and/or the Mailing Lists
by Johnny Hughes 05 Feb '06

05 Feb '06

OK I am going to say this once. The CentOS IRC Channel and these lists are not personal playgrounds for people, and they are moderated by CentOS developers. If a developer tells you to stop something on the lists or in the IRC ... then JUST DO IT ... and then: JUST SHUT THE F--- UP I am getting fairly tired of people thinking that they don't have to listen to what people who make this distro possible have to say ... and that they don't need to be polite. You need to do both ...

4 4

Issuse installing either i386 or x86_64
by Chris 04 Feb '06

04 Feb '06

Greetings - Has anyone ever managed to install 4.2 on a Sony Vaio desktop, model VGC-RB53 ? I can install either mentioned - but on bottup after the install, I get a kernel panic and it just hangs. For that matter, it does the same if I try FC4 - TIA -- Best regards, Chris Never create a problem for which you do not have the answer.

1 0

CentOS-announce Digest, Vol 12, Issue 3
by centos-announce-request＠centos.org 04 Feb '06

04 Feb '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0200 Critical CentOS 4 s390(x) firefox - security update (Pasi Pirhonen) 2. CESA-2006:0199 Critical CentOS 4 s390(x) mozilla - security update (Pasi Pirhonen) 3. CENTOSPLUS CESA-2006:0200 Critical CentOS 3 s390(x) firefox - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 3 Feb 2006 16:50:00 +0200 From: Pasi Pirhonen <upi(a)papat.org> Subject: [CentOS-announce] CESA-2006:0200 Critical CentOS 4 s390(x) firefox - security update To: centos-announce(a)centos.org Message-ID: <20060203145000.GJ4576(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0200 https://rhn.redhat.com/errata/RHSA-2006-0200.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/firefox-1.0.7-1.4.3.centos4.s390.rpm s390x: updates/s390x/RPMS/firefox-1.0.7-1.4.3.centos4.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

Problem with mount and dvd-ram
by Sebastian Marten 04 Feb '06

04 Feb '06

Hi list, I have a problem with mountig a DVD-RAM as a specific user and group. I mount with this parameters: #mount -t udf -o uid=33,gid=6,umask=0000 /dev/hdc /mnt/ #mount: /dev/hdc on /mnt type udf (rw,uid=33,gid=6,umask=0000) but a #ll /mnt shows: drwxr-xr-x 2 root root 256 Jan 29 10:03 data -rw------- 1 root root 11 Feb 2 10:52 info drwxr-xr-x 2 root root 40 Jan 29 09:02 lost+found Whats wrong? I can't find the error. I hope someone can help me, tanks, Sebastian

2 2

local port redirect not working on Centos4
by Francois Caen 04 Feb '06

04 Feb '06

Hello, I want to redirect one local port to another. I am using the following: iptables -t nat -A PREROUTING -p tcp --dport 7003 -j REDIRECT --to-ports 80 and testing it by telneting to localhost on port 7003. It works on Centos3, not on Centos4. No luck with this either: iptables -t nat -A PREROUTING -p tcp --dport 7002 -j DNAT --to 127.0.0.1:80 Am I doing something wrong? Or did something change in 2.6? Tried googling this, no luck. Thanks, -- Francois Caen, RHCE, CCNA SpiderMaker, LLC

2 2

Recommendations for securing a webserver
by Benjamin Smith 04 Feb '06

04 Feb '06

Hello, We're migrating a webserver from RedHat 7.x to CentOS 4.2. In the process, we'd like to improve security. We're currently planning on making sure SELinux is enabled, mounting the /tmp partition noexec, and running PHP in safe mode, hide_errors on, register_globals off by default. vsftpd is set to chroot logins. I've seen Apache run inside a chroot jail, but that was always very hassle-prone, and ironically, when security updates came out, they weren't applied within the chroot jail, (eg, installed via yum) making it more likely to get compromised! Is there an easier/better way to do this? Can you mix/match chroot'ed websites with those that aren't, without running a wholy separate webserver daemon? What other actions would the knowledgeable crowd here suggest? -Ben -- "The best way to predict the future is to invent it." - XEROX PARC slogan, circa 1978

2 1

Video card
by Steve Bergman 03 Feb '06

03 Feb '06

I'm looking for the highest performance 2d/3d video card that is supported out of the box by Centos 4.2 with open source drivers. I would need for both 2d and 3d to work. No tv tuner, tv in, tv out etc. is needed. I think my best candidate would be a 9800 series radeon. Any comments? Thanks, Steve

5 9

MCP51 what is the network module name
by Jerry Geis 03 Feb '06

03 Feb '06

I have a new biostar motherboard with nvidia chipset. The lspci says MCP51 ethernet. The module was not detected although for FC4 installs it says it works. What is the network module name for the MCP51 driver so that I can try loading it manually. CentOS 4.2 Thanks, Jerry

2 1

DBMail on CentOS?
by Eduardo Grosclaude 03 Feb '06

03 Feb '06

Hello, is anybody using DBMail or any other approach to manage huge volume mail installations? Comments about it? Are RPMs somewhere out there? -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina

2 1

Gnome print manager. Nobody knows ?
by Jean Lee 03 Feb '06

03 Feb '06

Hi all, I got no answers to my last post so I try one more time. I really can't find the info on the Centos mailing list archive. I'm sure that it is an easy question.... I want to use the gnome print manager (in order to manage the print queue) but the icon is not available in : Main menu -> System tools. Does anybody knows in which package it is contained or how to launch it from a terminal? Thanks, Jean

5 6

CentOSPlus: What happened to Postgresql?
by Benjamin Smith 03 Feb '06

03 Feb '06

I've been using Postgresql 8.1 on CentOS X86/64 for a about a month, but the RPMs seem to have vanished from CentOS Plus! Are these to no longer be supported? http://mirror.centos.org/centos/4.2/centosplus/x86_64/RPMS/ -Ben -- "The best way to predict the future is to invent it." - XEROX PARC slogan, circa 1978

6 16

automatic transfer files between Windows PC & Centos server
by JC 03 Feb '06

03 Feb '06

Hi everyone, I have this problem and need your help. I have some files locate on windows pc that I need to upload to centos server everyday automatically and without provide password. Is there an easy way for this? I would like to use some kind of batch file because I can use schedule in WinXP to performance this job everyday. Thanks in advance, JC

9 10

ProLiant DL3n0 EMT64 - x86_64 or i686
by Will McDonald 03 Feb '06

03 Feb '06

Guys, I'll be building a couple of DL360 G4p & DL380 G4 boxes soon and I've not dealt extensively (i.e. at all) with any PC stuff that hasn't been i386. I know the DL line pretty well but it was all G2/3. So, question is, do I stick CentOS i386 or x86_64 on them? 2 boxes x 2GB RAM and 1 x 4GB, all SMP. Will.

3 3

Re: CentOS Digest, Vol 13, Issue 3
by Allan Mayer 03 Feb '06

03 Feb '06

>>> Message: 37 Date: Thu, 02 Feb 2006 13:38:01 -0600 From: Steve Bergman <steve(a)rueb.com> Subject: [CentOS] Video card To: centos(a)centos.org Message-ID: <1138909081.20789.3.camel(a)voyager.localdomain> Content-Type: text/plain I'm looking for the highest performance 2d/3d video card that is supported out of the box by Centos 4.2 with open source drivers. I would need for both 2d and 3d to work. No tv tuner, tv in, tv out etc. is needed. I think my best candidate would be a 9800 series radeon. Any comments? Thanks, Steve <<< Hi all :) Personally I would go with a Nvidia 6800 GT, preffereably one made by Leadtech. Best bang for the $$ performance wise, and the OS supports it. ATI's clock faster, Nvidia's have more pipelines and are just plain faster for most games. (I only know about flight sim's, and FPS games here) -- Allan Mayer http://sctuser.home.comcast.net

1 0

IPtraf not looking right on the console..
by WipeOut 03 Feb '06

03 Feb '06

I have a CentOS 4 server at home where we store all our data, I wanted to get some idea of the amount of traffic going into and out of the server by protocol so I installed IPtraf.. When I run it from an ssh session it looks fine but when I run it directly on the server console its doesn't look right at all.. It doesn't seem to layout correctly.. Is there something I need to do differently on the console to run it? Thanks..

5 10

CentOS-announce Digest, Vol 12, Issue 2
by centos-announce-request＠centos.org 03 Feb '06

03 Feb '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0199 Critical CentOS 3 ia64 mozilla - security update (Pasi Pirhonen) 2. CESA-2006:0199 Critical CentOS 4 ia64 mozilla - security update (Pasi Pirhonen) 3. CESA-2006:0200 Critical CentOS 4 ia64 firefox - security update (Pasi Pirhonen) 4. CENTOSPLUS CESA-2006:0200 Critical CentOS 3 ia64 firefox - security update (Pasi Pirhonen) 5. CESA-2006:0199 Critical CentOS 3 i386 mozilla - security update (Tru Huynh) 6. CESA-2006:0199 Critical CentOS 3 x86_64 mozilla - security update (Tru Huynh) 7. CESA-2006:0200 Critical CentOS 3 i386 firefox - security update (CENTOSPLUS only) (Tru Huynh) 8. CESA-2006:0200 Critical CentOS 3 x86_64 firefox - security update (CENTOSPLUS only) (Tru Huynh) 9. CESA-2006:0191-01: Important CentOS 2 i386 kernel security update (John Newbigin) 10. CESA-2006:0199 Critical CentOS 3 s390(x) mozilla - security update (Pasi Pirhonen) 11. CESA-2006:0199-01: Critical CentOS 2 i386 mozilla security update (John Newbigin) 12. CESA-2006:0200 Critical CentOS 4 i386 firefox - security update (Johnny Hughes) 13. CESA-2006:0200 Critical CentOS 4 x86_64 firefox - security update (Johnny Hughes) 14. CESA-2006:0199 Critical CentOS 4 x86_64 mozilla - security update (Johnny Hughes) 15. CESA-2006:0199 Critical CentOS 4 i386 mozilla - security update (Johnny Hughes) 16. CESA-2006:0200 Critical CentOS 4 axp firefox - security update (Pasi Pirhonen) 17. CESA-2006:0199 Critical CentOS 4 axp mozilla - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Thu, 2 Feb 2006 20:17:59 +0200 From: Pasi Pirhonen <upi(a)papat.org> Subject: [CentOS-announce] CESA-2006:0199 Critical CentOS 3 ia64 mozilla - security update To: centos-announce(a)centos.org Message-ID: <20060202181758.GC4576(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0199 https://rhn.redhat.com/errata/RHSA-2006-0199.html The following updated files have been uploaded and are currently syncing to the mirrors: files: updates/ia64/RPMS/mozilla-1.7.12-1.1.3.4.centos3.ia64.rpm updates/ia64/RPMS/mozilla-chat-1.7.12-1.1.3.4.centos3.ia64.rpm updates/ia64/RPMS/mozilla-devel-1.7.12-1.1.3.4.centos3.ia64.rpm updates/ia64/RPMS/mozilla-dom-inspector-1.7.12-1.1.3.4.centos3.ia64.rpm updates/ia64/RPMS/mozilla-js-debugger-1.7.12-1.1.3.4.centos3.ia64.rpm updates/ia64/RPMS/mozilla-mail-1.7.12-1.1.3.4.centos3.ia64.rpm updates/ia64/RPMS/mozilla-nspr-1.7.12-1.1.3.4.centos3.ia64.rpm updates/ia64/RPMS/mozilla-nspr-devel-1.7.12-1.1.3.4.centos3.ia64.rpm updates/ia64/RPMS/mozilla-nss-1.7.12-1.1.3.4.centos3.ia64.rpm updates/ia64/RPMS/mozilla-nss-devel-1.7.12-1.1.3.4.centos3.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

CentOS 3 sound intermittently goes out
by Bart Schaefer 03 Feb '06

03 Feb '06

I'm running CentOS 3.6. The hardware is an Intel D865GBF motherboard, but I also have a generic soundblaster-compatible PCI card installed, because back when I installed CentOS 3.1 I had problems getting the onboard sound to work. The PCI sound card worked fine until about the time I installed CentOS 3.5. Since then, however, it has failed intermittently. Once it fails, it's generally out for several days, then might come back for a while, then go out again. Lately it's off more than it's on. The state following a reboot or power cycle is unpredictable; usually there's no sound after reboot, but sometimes that revives it. I've tried changing configurations, including fiddling with alsa as suggested in a some postings on this list, and starting up and exiting from various different sound apps, etc. None of it seems to make any difference; when the sound comes back on, it's for no reason that I can discern. Does anyone have any ideas how to diagnose/fix this? Could the card itself be going bad, and if so how can I tell?

1 1

postfix+sasl error logs
by spart cus 03 Feb '06

03 Feb '06

i have these errors on my postfix logs. ive just installed postfix+sasl.what seems to be the problem ? mail postfix/smtpd[26307]: auxpropfunc error no mechanism available Feb 1 17:37:27 mail postfix/smtpd[26333]: sql_select option missing --------------------------------- Do you Yahoo!? With a free 1 GB, there's more in store with Yahoo! Mail.

2 10

Mbox Problems Dovecot
by José Albornoz_ViaBcp 02 Feb '06

02 Feb '06

Hi all, Is anybody have this problem with Centos 4.2, postfix-2.1.5-4.2.RHEL4, dovecot-0.99.11-2.EL4.1 In the log /var/log/maillog have: Feb 2 08:44:44 net02 pop3(user01): Error indexing mbox file /var/mail/user01: LF not found where expected Feb 2 08:45:14 net02 pop3(user01): Error indexing mbox file /var/mail/user01: LF not found where expected Feb 2 08:45:14 net02 pop3(user01): Error indexing mbox file /var/mail/user01: LF not found where expected Feb 2 11:48:11 net02 pop3(user02): Error indexing mbox file /var/mail/user02: LF not found where expected Feb 2 11:48:11 net02 pop3(user02): Error indexing mbox file /var/mail/user02: LF not found where expected Feb 2 11:49:11 net02 pop3(user02): Error indexing mbox file /var/mail/user02: LF not found where expected I know it´s a bug of dovecot ( http://wiki.dovecot.org/MboxProblems ) there is a new version or patch of dovecot any suggestions? Thanks. José Albornoz.

1 0

rsh/rlogin on CentOS4.2
by Scott Taylor 02 Feb '06

02 Feb '06

Hello all, I'm not quite sure what has changed in the recent rsh commands, but I can't seem to get around the password promting. I need a clnk rsh between two machines in order to run my backup script. I added all the usual .rhosts with the proper permissions et al added the xinetd.d confilg files, opened ports 543 and 544 in my firewall, yet when I use the rsh commands, I get either a password prompt or some Kerberos stuff that I don't use. ie: rexec intrbase ls password: and connect to address 192.168.99.211: Connection refused Trying krb4 rlogin... connect to address 192.168.99.211: Connection refused trying normal rlogin (/usr/bin/rlogin) Last login: Thu Feb 2 07:47:37 from spare As you can see this is for an internal network, so I'm not freaked out about security here. I can't seem to find anything in the help files about it. How can I configure rsh to use the old, normal way of auth? I'm using the latest CentOS4.2 Cheers. -- Scott

4 8

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss