- Discuss - lists.centos.org

CentOS-announce Digest, Vol 2, Issue 2
by centos-announce-request＠centos.org 04 Apr '05

04 Apr '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005-0402-001: Information CentOS 3.3 x86_64 librsvg2 - dependency conflict resolution (Tru Huynh) 2. CESA-2005-0402-001: Information CentOS 3.3 i386 librsvg2 - dependency conflict resolution (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Sat, 2 Apr 2005 22:56:40 +0200 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2005-0402-001: Information CentOS 3.3 x86_64 librsvg2 - dependency conflict resolution To: centos-announce(a)centos.org Message-ID: <20050402205640.GA3654(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005-0402-001 for CentOS 3.3 only librsvg2 required update for CentOS 3.3 x86_64 (resolving dependency conflicts) for the gtk2 security update (CESA 2005:344) The following updated file has been uploaded and is currently syncing to the mirrors: x86_64: updates/x86_64/RPMS/librsvg2-2.2.3-6.x86_64.rpm updates/x86_64/RPMS/librsvg2-devel-2.2.3-6.x86_64.rpm Tru -- Tru Huynh (CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

autofs
by Michael Falzon 04 Apr '05

04 Apr '05

Hi not sure how long this has been going on for ( sure it has not been that long ) when i get auto fs to try map a shair using CentOS release 3.4 the shairs UID is not set right Ie cat /etc/auto.misc uber_work -fstype=smbfs,username=me,password=XXX,workgroup=box,uid=500 //sys/uber when ls i get drwxrwx--- 1 root 2015 0 Mar 2 16:50 1 drwxrwxr-x 1 2001 2015 0 Mar 3 11:55 2 drwxrwx--- 1 root 2015 0 Dec 6 11:02 3 drwxrwx--- 1 root 2015 0 Dec 6 11:02 4 drwxrwx--- 1 root 2015 0 Dec 6 11:03 5 drwxrwx--- 1 root 2015 0 Dec 6 11:02 6 as you can see the UID's are not right not 100% sure why some info samba-3.0.9-1.3E.2 autofs-4.1.3-47 See BUG. "That's not a bug, it's a feature!" A bug can be changed to a feature by documenting it. Michael Falzon (RHCT) Mozy's Swamp BBs & Red Dwarf BBs http://mozysswamp.org Registered LFS User #406 Registered Linux User #204397 ------------------------------------------------------------------------------- UNINTENDED RECIPIENT: This email and any attachments are confidential. They may contain legally privileged information or copyright material. You should not read, copy, use or disclose them without authorisation. If you are not an intended recipient, please contact us at once by return email and then permanently delete both messages. VIRUS WARNING: Mozy's Swamp & Red Dwarf BBs does not accept liability in connection with computer viruses, data corruption, delay or denial of service as a result of virus infection.

1 0

RE: [CentOS] Re: postfix tightening
by Mark A. Lewis 04 Apr '05

04 Apr '05

> On Saturday 02 April 2005 05:32 pm, karl(a)streetlampsoftware.com wrote: > > > How > > would I go about providing a good, solid *matching* ptr (as > in, mail > > from AcmeWidget.com reflects to mail.AcmeWidget.com at x.x.x.219 ... > > which also happens to be mail.hostco.com) for the bazillion and one > > virtual-hosted email accounts on mail.hostco.com? > > You wouldn't. That's not and never was the purpose of a ptr record. > The ptr record is to attach responsibility for the IP#. > That's done by pointing it to the hostname. But, in this case, it has multiple hostnames, all of which are valid. > You could have multiple ptr records, but there exists no > facility in any DNS or resolution system to match up ptr > records with a records. If I recall correctly, behavior in > the case of multiple ptr records is undefined. Interesting, never tried creating multiple ptr records. I guess if the MTA knew how to deal with that it would be a very good solution. I will have to do some testing to see how it reacts to the scenario. It all comes back to a few key points: 1) Refusing mail based on HELO not matching the ptr record is not RFC compliant, but it is not uncommon. 2) There are some vanity issues with someone who cares what the mail headers say in them. As someone else said, if they are expecting that, they should expect to pay for it. 3) All of the RFCs pertaining to this were written in a much more trusting time, and as we are seeing, they need to be revisited. 4) There are some easy to do HELO checks that can eliminate a large number of spammers and misconfigured MTAs. I do think that the RFCs need to address dynamic address space more sufficently. I think that the one proposal where the source IP must be listed under a particular record type in DNS will go a long way towards addressing many of these issues. IMO, none of the cost based solutions I have read such as "postage" or something mildly CPU intensive will accomplish anything but a mess. Good discussion though, I have learned a lot by actually reading some of the RFCs and some dicussions on them. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

Re: postfix tightening
by karl＠streetlampsoftware.com 03 Apr '05

03 Apr '05

>Tom Ivar Helbekkmo writes: > >"Mark A. Lewis" <mark(a)siliconjunkie.net> writes: > >> Lets say that Acme Widget has their mail hosted with Hostco. Acme Widget >> would rather not have mail.hostco.com in the mail headers for whatever >> reason. So, hostco doesn't setup a ptr record for it. This does not make >> Acme Widget or Hostco any more likely to be spammers, it just makes you >> more likely to drop their mail. > >Actually, the problem you're describing is routinely solved at any >decent ISP *without* breaking any rules. If the above were a genuine >scenario, I would conclude that Hostco is run by nincompoops. ;-) For the posterity of the list, and the wonderful information that's been provided so far for all of the newbie nincompoops out in CentOS list lurker-land ... Let's say that I'm a nincompoop newbie sysadmin from HostCo that would like to avoid breaking any rules. (In reality, I'm a PHB, and I let my sysadmin worry about the rule-breaking.) How would I go about providing a good, solid *matching* ptr (as in, mail from AcmeWidget.com reflects to mail.AcmeWidget.com at x.x.x.219 ... which also happens to be mail.hostco.com) for the bazillion and one virtual-hosted email accounts on mail.hostco.com? -Karl Katzke

3 2

RE: [CentOS] Re: postfix tightening
by Mark A. Lewis 03 Apr '05

03 Apr '05

Stumbled across this while researching the points raised in this thread. Very good writeup IMO and addresses many of the questions/concerns. http://jimsun.LinxNet.com/misc/postfix-anti-UCE.txt -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

CentOS 3.4 to CentOS 4
by Jason 03 Apr '05

03 Apr '05

I have upgraded to CentOS 4 from 3.4. I am having trouble figuring out the mail changes. Under 3.4, Imap and POP were modules that xinetd controlled. Under 4.0, I have a choice of either Cyrus-Imapd or Dovecot. After googling all week, I was about to get my user account authenticated under Cyrus and the saslpasswd program, as well as dovecot. My problem is that they don't know where my mail is. I run postfix, and have mail delivered to /var/spool/mail/%u. I put this into Cyrus' mail directory but it still doesn't see anything. Dovecot always tries to chdir to the user's home directory, ignoring anything I put into dovecot.conf concerning mail locations. Any ideas? Thanks.

1 0

RE: [CentOS] postfix tightening
by Mark A. Lewis 03 Apr '05

03 Apr '05

> -----Original Message----- > From: centos-bounces(a)centos.org > [mailto:centos-bounces@centos.org] On Behalf Of > ryanag(a)zoominternet.net > Sent: Friday, April 01, 2005 9:24 PM > To: CentOS mailing list > Subject: RE: [CentOS] postfix tightening > > On Fri, 2005-04-01 at 21:04 -0600, Mark A. Lewis wrote: > > > > Riight. Ever done a reverse lookup on a RR IP? Rogers? SBC? All of > > them will have valid reverse entries. > See below. > > http://searchcio.techtarget.com/sDefinition/0,,sid19_gci917504,00.html > > "Reverse DNS (rDNS) is a method of resolving an IP address > into a domain > name, just as the domain name system (DNS) resolves domain names into > associated IP addresses. One of the applications of reverse > DNS is as a > spam filter. Here's how it works: Typically, a spammer uses an invalid > IP address, one that doesn't match the domain name. A reverse > DNS lookup > program inputs IP addresses of incoming messages to a DNS database. If > no valid name is found to match the IP address, the server blocks that > message." So, here is the problem. Lets say that Acme Widget has their mail hosted with Hostco. Acme Widget would rather not have mail.hostco.com in the mail headers for whatever reason. So, hostco doesn't setup a ptr record for it. This does not make Acme Widget or Hostco any more likely to be spammers, it just makes you more likely to drop their mail. Now, the other side of that... Foospam wants to send out 87 bazillion mail messages to everyone about fooagra. So, they set their mail server to helo with fooco.com and set the ptr record to be mail.fooco.com and they just danced right by all of this with very minimal effort. For that matter, you can use whatever ptr your ISP sets up for you. The whole accountablity thing is a fallacy. I can buy a domain right now for $8, put whatever I want in the whois info and just use that for the ptr record part, it could be a throwaway domain for all I care. At the end of the day, it bought the person reciving the spam nothing. Reverse DNS or not, you can see what IP the mail came from, you can tell who is the owner of that IP and they can find out what user has that IP. The problem is that most of them are simply unwilling to do so, they ignore mail to the abuse address or just give you a canned answer. My point is that relying on this only makes you more likely to drop legit mail and poses no problem to the spammers. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

7 9

RE: [CentOS] Re: postfix tightening
by Mark A. Lewis 03 Apr '05

03 Apr '05

>There is certainly nothing there > to override the earlier RFC (which I've forgotten) that > specifies a similar recommendation but goes on to say that > the receiver MUST NOT reject the message based on an address > lookup mismatch for the HELO/EHLO name (obviously written by > someone who realized that multi-homed servers are common and > that corporate servers often live behind NAT firewalls and > don't even know the address that will be used the public side). > > -- > Les Mikesell > les(a)futuresource.com I believe you are referring to RFC 821: The HELO receiver MAY verify that the HELO parameter really corresponds to the IP address of the sender. However, the receiver MUST NOT refuse to accept a message, even if the sender's HELO command fails verification. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

RE: [CentOS] Re: postfix tightening
by Mark A. Lewis 03 Apr '05

03 Apr '05

> Wrong. RFC2821 says: > > 4.1.1.1 Extended HELLO (EHLO) or HELLO (HELO) > > These commands are used to identify the SMTP client to the SMTP > server. The argument field contains the fully-qualified > domain name > of the SMTP client if one is available. In situations in which the > SMTP client system does not have a meaningful domain name > (e.g., when > its address is dynamically allocated and no reverse > mapping record is > available), the client SHOULD send an address literal (see section > 4.1.3), optionally followed by information that will help > to identify > the client system. The SMTP server identifies itself to the SMTP > client in the connection greeting reply and in the response to this > command. > > > Cheers, > Gavin It specifically mentions that dynamic addresses are acceptable. It specifically states that there are alternatives (an address literal) RFC 2821 also says: There are two exceptions to the rule requiring FQDNs: - The domain name given in the EHLO command MUST BE either a primary host name (a domain name that resolves to an A RR) or, if the host has no name, an address literal as described in section 4.1.1.1. So, it seems to me that the RFC compliant way to do this is to use the literal address in the HELO Meaning that those who reject this are the non RFC compliant ones... -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

CentOS4 laptop touchpad erratic operation
by Collins Richey 02 Apr '05

02 Apr '05

I've just put up CentOS4 on my HP ze4630us laptop, and the installation produced only two problems of note, both related to X operations. 1. The installer refused to allow 1024x768 resoultion for the screen. After install, manually setting the resolution in xorg.conf was no problem. 2. Erratic touchpad operation. This unit has a synaptic touchpad. I've also noted similar problems on my previous Gentoo install (also 2.6 kernel and xorg). Never really resolved this. When scrolling across a screen in a browser panel where there are multiple links, the mouse will trigger click operations all on its own, so it's difficult to reach the link you want without inadvertently opening another link that you scroll past. In googling, I didn't have much luck finding a matching problem; nor did I have much luck earlier. Most of the problems reported seemed to be "touchpad unable to respond to clicks", i.e. the opposite of my problem. The installer generated the following mouse definition in xorg.conf: Section "InputDevice" Identifier "Mouse0" Driver "mouse" Option "Protocol" "IMPS/2" Option "Device" "/dev/input/mice" Option "ZAxisMapping" "4 5" Option "Emulate3Buttons" "yes" EndSection Has anyone else seen this type of problem with a touchpad, and does anyone have knowledge of a fix? TIA, -- Collins When I saw the Iraqi people voting three weeks ago, 8 million of them, it was the start of a new Arab world.... The Berlin Wall has fallen. - Lebanese Druze leader Walid Jumblatt

2 3

mkbootdisk!
by israel.garcia＠cimex.com.cu 02 Apr '05

02 Apr '05

I'm trying to make a bootdisk in my CentOS server and I got this error.. any ideas? [root@server:~]$ rpm -qa kernel kernel-2.6.9-5.0.3.EL [root@server:~]$ mkbootdisk 2.6.9-5.0.3.EL --device /dev/fd0 Insert a disk in /dev/fd0. Any information on the disk will be lost. Press <Enter> to continue or ^C to abort: cp: writing `/tmp/mkbootdisk.d20227/initrd.img': No space left on device cat: write error: No space left on device cat: write error: No space left on device 20+0 records in 20+0 records out I have enogh space on the disk: [root@server:~]$ df -h Filesystem Size Used Avail Use% Mounted on /dev/md5 17G 1.8G 14G 12% / /dev/md1 99M 8.4M 86M 9% /boot none 126M 0 126M 0% /dev/shm /dev/md3 9.7G 2.7G 6.5G 30% /home /dev/md0 981M 26M 905M 3% /usr/local/salva /dev/md4 4.9G 262M 4.4G 6% /var/log /dev/md2 981M 24M 908M 3% /var/spool regards, Israel

2 1

CentOS-announce Digest, Vol 2, Issue 1
by centos-announce-request＠centos.org 02 Apr '05

02 Apr '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS-4 ia64 errata: Important: gtk2 security update (Pasi Pirhonen) 2. CentOS-3 ia64 errata: Important: gtk2 security update (Pasi Pirhonen) 3. CESA-2005:354 Moderate CentOS 3 ia64 tetex - security update (Pasi Pirhonen) 4. CESA-2005:344: Important CentOS 3 i386 gtk2 - security update (Tru Huynh) 5. CESA-2005:344: Important CentOS 3 x86_64 gtk2 - security update (Tru Huynh) 6. CESA-2005:354: Moderate CentOS 3 x86_64 tetex - security update (Tru Huynh) 7. CESA-2005:354: Moderate CentOS 3 i386 tetex - security update (Tru Huynh) 8. CESA-2005:344 Important CentOS 3 s390(x) gtk2 - security update (Pasi Pirhonen) 9. CESA-2005:344 Important CentOS 4 i386 and x86_64 gtk2 - security update (Johnny Hughes) 10. CESA-2005:354 Moderate CentOS 3 s390(x) tetex - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 1 Apr 2005 23:31:02 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CentOS-4 ia64 errata: Important: gtk2 security update To: centos-announce(a)centos.org Message-ID: <20050401203102.GA9816(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" Security update for CentOS 4 ia64 https://rhn.redhat.com/errata/RHSA-2005-344.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/gtk2-2.4.13-14.ia64.rpm updates/ia64/RPMS/gtk2-devel-2.4.13-14.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

Re: [Centos] email server partition scheme
by Ralph Angenendt 02 Apr '05

02 Apr '05

Bill Baird wrote: > I like to have my /var directory on a different partition, just in case log files start to get large. I would rather have my /var fill up, than have services stop working... In case of a mailserver: If /var fills up, the service stops working :) But I also like to have a pretty big /var-Partition on my mailservers in case one of the other partitions fills up ... Ralph -- Ralph Angenendt......ra(a)br-online.de | .."Text processing has made it possible Bayerischer Rundfunk...HA-Multimedia | ....to right-justify any idea, even one Rundfunkplatz 1........80300 München | .which cannot be justified on any other Tl:089.5900.16023..Fx:089.5900.16240 | ..........grounds." -- J. Finnegan, USC

1 0

RE: [CentOS] postfix tightening
by Mark A. Lewis 02 Apr '05

02 Apr '05

<snip> > > I have never understood the precived connection between reverse DNS > > and spam. I have seen some go as far as if the reverse DNS does not > > match the senders domain they will kick it. > ---- > it doesn't seem to be too difficult to have the smtp server > helo to be locatable in reverse dns - the thing that this > blocks is people running smtp servers on dynamic ip space and > forces them to use a smart host - can't see what the big deal > is here since it provides accountability for the mail path. It's not a matter of difficult, nor does it provide any accountability. I can tell my mail server to helo whatever I want and make the ptr say whatever I want. It doesn't authenicate anything. Nor does someone running an SMTP server with a dynamic address prove anything about it being spam. The big problem that I have with it is that it completely ignores shared hosting. Not everyone wants someone to be able to look at the mail headers and know what company is hosting them, particularly a business. There are plenty of legitimate reasons to not have it. > Now that AOL is doing this, it pretty much dictates that smtp > servers comply with this restriction. I don't see the problem with it. So, you are saying that we should let AOL dictate standards? I see a HUGE problem with that. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

Centos 4 & Cisco 350 MiniPCI Wireless
by Barry L. Kline 02 Apr '05

02 Apr '05

I have an IBM Thinkpad with this beastie in it. The card was immediately recognized and uses the airo driver. No matter what I do, I can't get it to successfully connect to my WAP. Sometimes it sees the access point (as evidenced by an iwlist wifi0 scan seeing the network) and sometimes I can actually get it to connect ( as evidenced by the iwlist command showing the WAP ID). Eventually the connection between the card and the AP simply dies. I'm not new to wireless and have had no problems manually configuring other wireless cards to work properly, so I have gone through most of the gyrations. Right now I've fallen back to an Orinoco silver. Google doesn't seem to be helpful in this endeavor (lots of hits but most having to do with the 2.4 kernel series) so my question is relatively simple: Before I waste an inordinate amonut of time trying to make this thing work I would like to know if anyone else has had success here? If so, could you tell me the firmware version of your card? Even if you can't I'd be delighted to hear that the fact that the kernel manages to turn on my wireless light isn't the kernel's way of teasing me. Thanks very much! BK

1 0

RE: [CentOS] postfix tightening
by Mark A. Lewis 02 Apr '05

02 Apr '05

> On Fri, 2005-04-01 at 20:19 -0600, Mark A. Lewis wrote: > > I have never understood the precived connection between reverse DNS > > and spam. I have seen some go as far as if the reverse DNS does not > > match the senders domain they will kick it. > > Mostly because a trojaned machine on a broadband connection > spewing SPAM will not have a valid reverse DNS entry. Riight. Ever done a reverse lookup on a RR IP? Rogers? SBC? All of them will have valid reverse entries. > By forcing a policy of accurate reverse DNS, most of the > home-broadband- SPAM factories are shut down. I would argue that using that logic none of them will be shut down. Not trying to pick any fights here, I just feel very strongly that the logic is very flawed and am looking for some real justification of this. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

RE: [CentOS] postfix tightening
by Mark A. Lewis 02 Apr '05

02 Apr '05

> -----Original Message----- > From: centos-bounces(a)centos.org > [mailto:centos-bounces@centos.org] On Behalf Of RNuno > Sent: Friday, April 01, 2005 4:12 PM > To: CentOS mailing list > Subject: Re: [CentOS] postfix tightening > > Ajay Sharma wrote: > > >I run an "office" mail server and my boss would kill me if > we bounced a > >message just because the client is using a brain dead ISP. So our > >approach is a little different in that we accept a lot of mail and I > >spend my time on tuning spamassassin. > > > > > > > Same here. We cannot going on rejecting every server that > don't reverse I'ts not that I would like to but the truth is > MANY companies have them. I have never understood the precived connection between reverse DNS and spam. I have seen some go as far as if the reverse DNS does not match the senders domain they will kick it. I am all for blocking spam, but it is a fine line to block it without being an ass and catching all kinds of legitimate mail in the process. Perfect example is the one RBL that will list entire ISPs until the sufficently grovel in their newsgroup, all the while not caring that this is impacting hundreds or thousands of servers that are not spamming or supporting spam. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

postfix tightening
by Craig White 02 Apr '05

02 Apr '05

I am used to sendmail and am using Postfix now and am uncertain of some features. I typically would comment out the line in sendmail.mc that went something like 'accept unresolvable domains' I tried using smtpd_sender_restrictions = reject_unverified_sender reject_unverified_smtp and this seems a bit too restrictive and got some bounces on legitimate senders so I'm thinking that this is perhaps a bit more apropos... smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname does this make sense? Craig

4 11

Re: [CentOS] Hints on gpg key
by Steven Vishoot 01 Apr '05

01 Apr '05

--- Vaneet Sharma <vaneet(a)iwg.info> wrote: > I researched on google for some time ... > This is my other machine having centos 3.4 > > Im getting these GPG_KEY error while using > > Yum install httpd-devel AND Yum upgrade > > > warning: rpmts_HdrFromFdno: V3 DSA signature: NOKEY, > key ID 025e513b > Error: Could not find the GPG Key necessary to > validate pkg > /var/cache/yum/base/packages/httpd-devel-2.0.46-44.ent.centos.2.i386.rpm > Error: You may also check that you have the correct > GPG keys installed > > Thankx in advance > Any hints on this direction would be great > > Vaneet > > > Vaneet Sharma > executive manager > iDeasTank Limited > an iwg business > dolphins' court po 388 > valletta, m-malta/europe > mobile: +356 9943 8263 > skype: CALLVANEET > fax: +356 9952 8888 > phone: +356 9942 8888 > > vaneet(a)iwg.info > call me on www.skype.com - my ID is CALLVANEET > > Want a signature like this? - > www.plaxo.com\signature > > iwg is a global e-mobile company creating, building > and growing new businesses. iwg founders are > pioneers in creating multi-billion dollar mobile and > Internet businesses in Europe, Asia and the US. > > www.iWG.info > www.countryprofiler.com/iWG > www.visitmalta.com > www.mfc.com.mt > > > Privileged/Confidential Information may be contained > in this message. If you are not the addressee > indicated in this message (or responsible for > delivery of the message to such person), you may not > copy or deliver this message to anyone. In such > case, you should destroy this message and kindly > notify the sender by reply email.> _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > Vaneet do this command and it should solve your problems. rpm --import http://centos.cs.ucr.edu/centos/centos/3.4/os/i386/RPM-GPG-KEY-CentOS-3 Steven "On the side of the software box, in the 'System Requirements' section, it said 'Requires Windows or better'. So I installed Linux." __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/

2 1

Hints on gpg key
by Vaneet Sharma 01 Apr '05

01 Apr '05

I researched on google for some time ... This is my other machine having centos 3.4 Im getting these GPG_KEY error while using Yum install httpd-devel AND Yum upgrade warning: rpmts_HdrFromFdno: V3 DSA signature: NOKEY, key ID 025e513b Error: Could not find the GPG Key necessary to validate pkg /var/cache/yum/base/packages/httpd-devel-2.0.46-44.ent.centos.2.i386.rpm Error: You may also check that you have the correct GPG keys installed Thankx in advance Any hints on this direction would be great Vaneet Vaneet Sharma executive manager iDeasTank Limited an iwg business dolphins' court po 388 valletta, m-malta/europe mobile: +356 9943 8263 skype: CALLVANEET fax: +356 9952 8888 phone: +356 9942 8888 vaneet(a)iwg.info call me on www.skype.com - my ID is CALLVANEET Want a signature like this? - www.plaxo.com\signature iwg is a global e-mobile company creating, building and growing new businesses. iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. www.iWG.info www.countryprofiler.com/iWG www.visitmalta.com www.mfc.com.mt Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.

2 1

spamassassin - sa-learn
by Craig White 01 Apr '05

01 Apr '05

How do I get this set up? spamassassin -D --lint shows me an error... debug: bayes: no dbs present, cannot tie DB R/O: /root/.spamassassin/bayes_toks and with no db present, it doesn't learn. Is there something simple that I'm missing? Craig

5 9

Re: [Centos] email server partition scheme
by Dan Pritts 01 Apr '05

01 Apr '05

On Tue, Mar 29, 2005 at 03:52:37PM -0600, scott.list wrote: > Another thing to consider it throughput. High IO servers like postfix > will benefit from splitting up the partitions on multiple drives. > That way your IO can be split between drives, lowering IO on the > individual drives. A postfix guru gave me a recommended layout once > for a high usage postfix serve, but I don't have it handy.. sorry. the most obvious thing is to put /var/spool/postfix (or /var/spool/mqueue in a sendmail installation) on its own disk. inside that directory on postfix, you might further split up incoming active defer & deferred I don't know whether mounting with noatime would be a good idea, postfix might depend on the date stamps, but it would help performance if postfix doesn't need it. if you're using reiserfs, mounting with notail would definitely help performance. danno -- dan pritts - systems administrator - internet2 734/352-4953 office 734/834-7224 mobile

1 0

[CentOS] Lost all info in a file server because of LVM - HEEEELP ME, please
by Mário Gamito 01 Apr '05

01 Apr '05

Hi, I'm totally desperated. I have this file server with a total of about 200 GB of my user's files. The server has "3 in 1" discs, using LVM. Somehow, i don't know why, the LVM info is gone and i cannot access my file system. I had in LVM: sda1 -> /boot sda2 -> / sda3 -> /home (where all the Samba shares resides). sda4 -> swap sdb sdc Tha machine now starts with a single partition ( / ) mounted on /dev/root From there i can manually mount under /mnt partitions "/boot", "/", but NOT "/home". Trying to mount /home, i always get the busy error. I cannot unmount the "/" on /dev/root, obviously. How can i (if possible) restore the LVM info ? I have a backup from Sunday, so, it's really not a life or death case, but nevertheless it is a real annoiance, and the server is already down for 24 hours :( Any help would be apreciated. Warm Regards, Mário Gamito

1 0

mail add change
by Barot Ashish 01 Apr '05

01 Apr '05

Hi everybody i m ashish here now i m not using this mail more so pl.mail me on abbarot(a)gmail.com Thank you Barot Ashish Jr.System Administrator, Lubi Electronics, Ahmedabad. __________________________________ Yahoo! Messenger Show us what our next emoticon should look like. Join the fun. http://www.advision.webevents.yahoo.com/emoticontest

1 0

Where is gnumeric in CentOS 4
by Joe Harb 01 Apr '05

01 Apr '05

The release notes state that gnumeric has been included in this distribution. Was it forgotten?

4 4

Re: [Centos] Restart centos from Commandline
by rehj rehj 31 Mar '05

31 Mar '05

reboot now On Tue, 29 Mar 2005 11:33:14 +0200, Vaneet Sharma <vaneet(a)iwg.info> wrote: > > > > > Hello, > I am connecting to my server through SecureCRT. Server is running Centos 4.0 > I need to restart my server > > What is command line?> anyone knows > > vaneet > Vaneet Sharma > executive manager iDeasTank Limited > an iwg business > dolphins' court po 388 > valletta, m-malta/europe > vaneet(a)iwg.info > call me on www.skype.com - my ID is CALLVANEET > > mobile: > +356 9943 8263 > skype: CALLVANEET > fax: +356 9952 8888 > phone: +356 9942 8888 > Want a signature like this? > > > iwg is a global e-mobile company creating, building and growing new > businesses. iwg founders are pioneers in creating multi-billion dollar > mobile and Internet businesses in Europe, Asia and the US. > > www.iWG.info > www.countryprofiler.com/iWG > www.visitmalta.com > www.mfc.com.mt > Privileged/Confidential Information may be contained in this message. If > you are not the addressee indicated in this message (or responsible for > delivery of the message to such person), you may not copy or deliver this > message to anyone. In such case, you should destroy this message and kindly > notify the sender by reply email. > _______________________________________________ > CentOS mailing list > CentOS(a)caosity.org > http://lists.caosity.org/mailman/listinfo/centos > > >

2 1

Odd Question... MAX Ram Disk Size
by Scott Heisler 31 Mar '05

31 Mar '05

Greetings, Before I get slammed, I've looked all over the internet for the answer to this (googled and more) and haven't been able to find what I'm looking for. Here's what I need. I have a server that I use to hold workstation images. I use a Linux boot CD combined with some scripts I wrote and some disk imaging software to allow me to image windows workstations. Anyway, when I roll out a new workstation Image, I may roll it out to 20 or 30 computers at once, all using the same image file (base build). I want to put that image file on a RAMDISK on my server. The image file is between 3 and 4 gig. I have 6 gig in the server, so plenty of memory. I modified GRUB to increase the size of my ram disk... First I started with a 200mb, that worked group, formatted, etc. Then I tried 1gig - everything looks like it works but when I mount it, it tells me the volume is not formatted or has invalid super blocks. Perhaps I'm exceeding the allowable built-in ramdisk limit, but I couldn't find any docs anywhere that would tell me what that limit was. Does anyone know of an alternative ramdisk product, that does not load at boot time, where I could do what I need (as described above)? Or does anyone know how I can get a 4-gig Ramdisk to work properly? I'm running the new CentOS 4 on the server. Thanks for any help. I did spend 2 days doing Internet research with no results, prior to posting here. Thanks. Scott

3 4

RE: [CentOS] Odd Question... MAX Ram Disk Size
by Scott Heisler 31 Mar '05

31 Mar '05

Thanks everyone for the great INFO... This was EXACTLY what I needed and had a very hard time finding out. The mount -t tmpfs -o size=1g none /ramdisk worked perfectly. I needed temporary ram space to use as disk space. Thanks! Just to explain further, the "images" are not ISO's... These are hard drive images, like GHOST files (only using a Linux free application). But to further explain, even if I mounted an ISO, there would still be disk IO.. I'm trying to eliminate the disk I/O from the equation so I can be downloading 20 or 25 machines at the same time. Since the server us a dual 2.0gig Xeon and I have gig all the way from the server to the desktop.. This should scream! Thanks again. Scott -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Craig White Sent: Thursday, March 31, 2005 10:38 AM To: centos(a)centos.org Subject: Re: [CentOS] Odd Question... MAX Ram Disk Size On Thu, 2005-03-31 at 09:59 -0600, Aleksandar Milivojevic wrote: > Scott Heisler wrote: > > I want to put that image file on a RAMDISK on my server. > > The image file is between 3 and 4 gig. I have 6 gig in the server, > > so plenty of memory. I modified GRUB to increase the size of my ram > > disk... First I started with a 200mb, that worked group, formatted, etc. > > Then I tried 1gig - everything looks like it works but when I mount > > it, it tells me the volume is not formatted or has invalid super blocks. > > Perhaps I'm exceeding the allowable built-in ramdisk limit, but I > > couldn't find any docs anywhere that would tell me what that limit was. > > When you say ramdisk, do you mean ramdisk as in ramsdisk device > (hardware) that keeps information accross system reboots and/or power > cycles, or ramdisk as in file system that exists only in your server's > RAM and is lost each time machine is rebooted? Not clear from your > question. You mention having "enough RAM for it in server" (which > would imply later), but you also say that you are looking for "device" > (which would imply former). > > If you are looking for self-contained device, there are many solid > state disks (SSD) available on the market. Basically, they look like > disk, the "only" difference is instead of having magnetic plates, they > store information into internal RAM (either battery backed up, or of > the non-volatile type). System sees them as normal IDE/SATA/SCSI/FC > drive (depending on the interface), and you don't need to have > anything special to access them. The speed is usually limited by > interface used and type of memory used (obviously EEPROM based SSD > will have much worse write times then DRAM with battery backup based SSD). > > If you are looking for solution to use your server's memory as > temporary RAM disk (you don't care information being lost when you > reboot or power cycle), something like this works nicely: > > # mount -t tmpfs -o size=8g none /ramdisk > > That would create 8GB memory-based file system. The memory file > system uses is swappable. So just make sure free RAM + free swap is > larger than 8GB, and you should be fine. Of course, you can create > smaller or larger system too. Basically it is the same thing as tmpfs > on Solaris systems. I kind of like to mount /tmp this way (of course, > with much smaller size, usually 32-128MB, depending on server's needs). > > Or you can place it in fstab to have it always available: > > none /ramdisk tmpfs size=8g 0 0 ---- this is great info and I suppose I might find use for it someday but wouldn't a loop mount from an iso file (the disk image) be better for this purpose? Craig _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ HUNTLEIGH VIRUS & SPAM FILTERING SERVER NOTIFICATION ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This message has been scanned by our system and has been determined to be free of dangerous content and spam. This notification is attached to the bottom of all inbound Huntleigh e-mail messages, even spam. If you see a different notification above, please disregard this message footer. If you feel this message is actually spam, please help the system "learn" so future spam messages are caught. Please forward this e-mail to spam(a)pop3.huntleighusa.com. Be sure to remove any signature information outlook may add. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

OK. time to make some contribution (centos4/ppc)
by Pasi Pirhonen 31 Mar '05

31 Mar '05

Hi, Even now someone is actually installing (i see that from the ftp-server logs) the centos-4/ppc beta-version from announced place. You people have to stand up and _TELL_ me what kind of hardware _IS_ working, so we would know more than already know - 43p works. I can't believe that all those, who installs, does have 43p too? Please? Something, so if it's actually working on something else than already known 43p, we'd really like to hear about it. If it's not working, we'd still ike to hear about it as one can't fix anything not known to be broken. Someone something, so eventually there would be release? -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

2 1

CentOS-2 errata
by John Newbigin 31 Mar '05

31 Mar '05

The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHSA-2005:330-01 Important: krb5 security update Files available: krb5-devel-1.2.2-34.i386.rpm krb5-libs-1.2.2-34.i386.rpm krb5-server-1.2.2-34.i386.rpm krb5-workstation-1.2.2-34.i386.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin

1 0

CentOS-announce Digest, Vol 1, Issue 2
by centos-announce-request＠centos.org 31 Mar '05

31 Mar '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS-3 s390(x) errata: Important: krb5 security update (Pasi Pirhonen) 2. CentOS-3 i386 errata: Important: krb5 security update (Tru Huynh) 3. CentOS-3 x86_64 errata: Important: krb5 security update (Tru Huynh) 4. CentOS-3 x86_64 errata: Moderate: XFree86 security update (Tru Huynh) 5. CentOS-3 i386 errata: Moderate: XFree86 security update (Tru Huynh) 6. CentOS-3 s390(x) errata: Moderate: XFree86 security update (Pasi Pirhonen) 7. VERY Important: CESA naming conventions (donavan nelson) ---------------------------------------------------------------------- Message: 1 Date: Wed, 30 Mar 2005 15:15:57 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CentOS-3 s390(x) errata: Important: krb5 security update To: centos-announce(a)centos.org Message-ID: <20050330121557.GQ6734(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" Security update for CentOS 3 s390(x) https://rhn.redhat.com/errata/RHSA-2005-330.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/krb5-devel-1.2.7-42.s390.rpm updates/s390/RPMS/krb5-libs-1.2.7-42.s390.rpm updates/s390/RPMS/krb5-server-1.2.7-42.s390.rpm updates/s390/RPMS/krb5-workstation-1.2.7-42.s390.rpm s390x: updates/s390x/RPMS/krb5-devel-1.2.7-42.s390x.rpm updates/s390x/RPMS/krb5-libs-1.2.7-42.s390x.rpm updates/s390x/RPMS/krb5-server-1.2.7-42.s390x.rpm updates/s390x/RPMS/krb5-workstation-1.2.7-42.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

5 4

RE: [CentOS] CentOS-announce Digest, Vol 1, Issue 2
by Marc Powell 31 Mar '05

31 Mar '05

> -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Collins Richey > Sent: Thursday, March 31, 2005 7:36 AM > To: CentOS mailing list > Subject: Re: [CentOS] CentOS-announce Digest, Vol 1, Issue 2 > > On Thu, 31 Mar 2005 08:33:42 -0500, Douglas E. Warner > <dwarner(a)ctinetworks.com> wrote: > > Admin, > > > > I appologize if I'm missing something, but I hadn't signed up for the > digest > > and can't find that it is currently enabled for my email address > > (dwarner(a)ctinetworks.com) I'd appreciate it if you could help me track > down > > where this is enabled. > > If it helps, this only started happening after the maillist conversion > to the > > new host. > > > > I'm getting them, too. My guess is that the conversion turned digests > on for everyone. Perhaps they'll post a howto to remove this. If not, > it's no big deal to hit the bix X once a day. Wasn't there an email yesterday indicating that a daily digest of the announce list was emailed here for the benefit of those who did not want to sign up for two lists? -- Marc

1 0

RE: [Centos] Restart centos from Commandline
by Vaneet Sharma 31 Mar '05

31 Mar '05

you need to learn business i think ) to create multi dollar business, you need ideas, a team of people, a vision and a risk. Try this what i said and may be if u become rich, drop me a thank you Lets drop the argument cos it will never end ( we both have different ways to look at things and hence compromise will never reach) have fun -----Original Message----- From: centos-bounces(a)centos.org on behalf of Aleksandar Milivojevic Sent: Wed 3/30/2005 10:59 PM To: CentOS mailing list Cc: Subject: Re: [Centos] Restart centos from Commandline Vaneet Sharma wrote: > Well, regarding creating multi billion dollar business, you dont have to know everything I was just trying to be a bit funny. But it seems I wasn't as funny as I thought I was ;-) > You just need to know what is needed to make and create multi billion dollar business. That one is easy. To create multi billion dollar business you need money. Because only money can create more money. Everyting else is small details that will be taken care of by people who will never profit from the business itself. Just look at Microsoft, at the beggining you had one guy who had more money than he could ever possibly need, and he become even richer because he was rich to begin with. On the other side you had bunch of developers whose wealth is constantly at about the same level (not that I feel sorry for them looking at the final product). Simple, easy, clean ;-) Point of the story? If you have money, you don't need to reboot servers to create more money ;-) -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7 _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Vaneet Sharma executive manager iDeasTank Limited an iwg business dolphins' court po 388 valletta, m-malta/europe mobile: +356 9943 8263 skype: CALLVANEET fax: +356 9952 8888 phone: +356 9942 8888 vaneet(a)iwg.info call me on www.skype.com - my ID is CALLVANEET Want a signature like this? - www.plaxo.com\signature iwg is a global e-mobile company creating, building and growing new businesses. iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. www.iWG.info www.countryprofiler.com/iWG www.visitmalta.com www.mfc.com.mt Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.

1 0

RE: DHCPd Config or HOW-TO on DNS + DHCP + SQUID +Firewall + Router
by Stanley Langa (ST) 31 Mar '05

31 Mar '05

I thought I'd share this with you guys:- Been working/testing on the DEV release of SME7a3 based on CenTOS (on VMWARE), see contribs.org. Pretty neat I must say, most daemons (DNS, DCHP, SMB-PDC, LDAP, IMAP, POP, Web Admin) are preconfigured. I've got phpGroupware, WebERP, KnowledgeTree + other running on the same box (VMWARE). I've always had a challenge with manually configuring listeners etc and this has saved me hours/days on the Development I'm working on.' Cheers, Stanley "The only stupid question is the one never asked", "As one thinketh in his heart, so is he" Shakespeare ================================================================== This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF

1 0

Re: [Centos] RFE: Please create a announcement mailing list
by Lance Davis 31 Mar '05

31 Mar '05

On Thu, 24 Mar 2005, Bernd Bartmann wrote: > On Thu, 24 Mar 2005 12:21:55 -0600, Johnny Hughes > <mailing-lists(a)hughesjr.com> wrote: > > On Thu, 2005-03-24 at 19:12 +0100, Bernd Bartmann wrote: > > > > > BTW: The announcement list is not being mentioned at > > > http://www.centos.org/modules/tinycontent/index.php?id=16. > > > > > > > Exactly ... (meaning, it is not officially in use yet :)) > > Ok, when we're already discussing the update/errata announcements here > are some more things to consider: > > 1. all announcements should be GPG signed by a central CENTOS key no - they are signed by individual keys that have been signed by a central centos key. > 2. md5sums and/or sha1sums should be listed next to each rpm filename > 3. the announcements should be a little more verbose (include > ChangeLog, release date, obsoletes, advisory id, ...). Use the RHES or > Fedora announcements as templates > 4. a web-site like https://rhn.redhat.com/errata/rhel4es-errata.html > should be created and are you volunteering ?? Regards Lance -- uklinux.net - The ISP of choice for the discerning Linux user.

2 1

VERY Important: CESA naming conventions
by donavan nelson 31 Mar '05

31 Mar '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 (sorry about the cross post, this is vital information to get out) The following naming conventions have been established for posts to the CentOS-announce mailing list. The purpose is to ensure uniformity across products, architectures, releases etc. This will allow easier and simpler automated CESA (CentOS Errata and Security Advisory) processing by end users. === CentOS-announce Subject Construction Guidelines for Errata and Product Announcements ~ For Errata Postings (all one line) ~ Subject: [CentOS-announce] CESA-$NUMBER: $priority CentOS $release $arch $package - $brief_description ~ First Line of Message: CentOS Errata and Security Advisory $NUMBER ~ where: ~ $NUMBER: use $RH_NUMBER if the matter is a result ~ of a RH?A, if not, YYYY-MMDD-SEQ ~ where: ~ YYYY-MMDD -- is in UTC, ~ SEQ is an increasing 3 digit number starting ~ at 000 each day, for the time being SEQ ~ numbers will be stored on the master mirror ~ in /centos/centos-cesa.txt. Developers ~ posting errata with a $NUMBER that is ~ CentOS errata will need to check the file for ~ an existing number for a given problem or ~ create a new number and add it to the file. ~ $priority: follows RH levels ~ $release: one of 4, 3, or 2 ~ For Product Releases (all one line) ~ Subject: [CentOS-announce] Release Announcement: $name $version $arch Note: [CentOS-announce] is automatically added by mailman. Note: All official announcements should be signed by your CentOS ~ signed key. Note: Not all $variable's are described above. === -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFCS3ynCRFXD+VcGBkRAm8YAKCEvaazYDK97s1Q+iGWah8bFdVb9QCfaEcb HGdUPF4vB4TAugFjXG3D24U= =sOE8 -----END PGP SIGNATURE-----

1 0

Re: [Centos] Mounting Netware Volumes
by Paul 31 Mar '05

31 Mar '05

On Thu, 2005-03-24 at 19:33 -0600, Paul wrote: > On Tue, 2005-03-22 at 22:22 -0600, Paul wrote: > > I have one last RH 7.3 system that I want to convert to CentOS 4, but I > > can't find the ncpfs utilities that I used to use to mount Netware > > shares. > > > > Has support been removed from the 3.x and 4? > > Well I dug though the RH's site and in the release notes for AS 3.95 ite > mentionsed that ncpfs has been deprecated. I can't find the release > notes for 4, but assume that they must have removed support in the > kernel along with the package. > > It looks like I've reached a dead-end unless I want to build a custom > version of the kernel for this workstation each time a new one comes > out. That looks to be more work than continuing with it as it is and > using fedoralegacy updates. > > Anybody have other ideas? > Well I modified the script and spec file at http://linux- ntfs.sourceforge.net/rpm/build.html to build rpms for the ncpfs module I'm still cleaning up the cruft that is not needed and will post them here if anybody is interested. Paul Berger

1 0

CentOS as an internet gateway
by ryanag＠zoominternet.net 31 Mar '05

31 Mar '05

I would add the below: -Recommend using CentOS 4.0 -Use squid rpm, no tar (this is for new users I'm guessing). -Recommend using etherape and iptraf (available as rpms) for a graphical overview of traffic. http://etherape.sourceforge.net/ -Recommend the use of chkrootkit, and TCP Wrappers (at the least put ALL: ALL EXCEPT PARANOID in /etc/hosts.allow) to protect servers. -Provide some information about how to protect the whole network from spyware with the /etc/hosts file (a nice side benefit from doing DNS proxy). http://www.mvps.org/winhelp2002/hosts.htm -A *huge* disclaimer on running squid on a machine with a public interface. -Consider using webmin to manage this outside a GUI. -fwlogwatch can parse log files nicely. http://fwlogwatch.inside- security.de/ Biggest issue I have with your setup: -I wouldn't use Guard Dog as the GUI setup - it is very nice, but inflexible and not really meant for what you are doing. Try kmyfirewall instead if you want a GUI for iptables. It offers near complete control of iptables functions. If you can get along with using webmin, try shorewall. *If* this is going to be in a bigger than SOHO (+ 30 PC) network, go with shorewall. Just my $.02, good luck with the site, it'll help a lot of people. :-) On Wednesday 30 March 2005 13:27, Seth Bardash wrote: > To the list: > > HOW-TO on DNS + DHCP + SQUID + Firewall + Router > > Since this seems to be a recurring topic: > > Thought you might be interested in a working set up of > DNS + DHCP + SQUID + Firewall + Router machine that took > quite an effort to get working but now runs flawlessly. > > Don't get discouraged. This takes some time to set up > correctly but once you get through it - it works great! > > Remember: tcpdump is your friend!!!! > > Anyone having a network internally that needs these > features should continue reading: > > We set up a new firewall based on CentOS 3.3. (3.4 should work fine) > > We needed it to serve many protocols internally. > > The specifications for it are: > > NOT Microsoft based > (We are a MS Partner with all the software but I wanted something that was > MS virus proof) > > KDE Graphical Firewall Control > External Internet LAN Port x 1 > Internal Networks x 2 (more can be added) -> we used 192.168.0.X and > 192.168.1.X > DNS Name Caching Server - internal and external, forward and reverse > lookups DHCP Server that does ddns-update internally > Squid Server > IP Masqerading > Routing between all networks > > Hardware: > > OLD P3-800 Based System (Only non AMD system we run) > 3 x Intel Pro 100 NIC's (We have a big box of these) > 1GB SDRAM > 40GB IDE Disk > CDROM Drive > Floppy > Standard PC Case with extra cooling and 400 w ps. > > This hardware is overkill as it never runs above 30% load. > Any machine supported by Centos with > 600 MHz CPU and 512M Memory should > do. > > Software: > > Centos 3.3 Full Install (Lessens the chance of missing packages) > > Guarddog Firewall RPM for Centos > (http://centos.hughesjr.com/3/guarddog/RPMS/) > Guidedog router/masqerader RPM for RH9 (works fine) > (http://www.simonzone.com/software/guidedog/guidedog-1.0.0-1_rh9.i386.rpm) > > Squid source tar ball. > > First install Centos and set it for a KDE graphical boot up. > Turn off all services not used > Leave Iptables on but turn off IP6tables > > Then Install Guarddog > Then install Guidedog > Configure both of the above - read the instructions for these carefully. > - questions for these should go to the writer > or his mail forum > - Make sure to enable DHCP for eth1 and eth2 > BUT NOT eth0 (external LAN NIC) > > Make sure you can see the internet from the inside LANs with the clients > set to use static IPs. > > NEXT --- > > Please read the instructions on how to set up DHCP and bind(DNS) here: > > http://integratedsolutions.org/downloads/DHCP-DDNS.txt > > Read this multiple times and make sure you understand it! > > Cut and paste can be an enemy. Be careful which editor you use > > > This set up allows us to have any number of machines on our internal > network automagically connected to each other and the internet with all the > IP information coming from our firewall / router / masquerader / squid > server. > > It works for forward and reverse DNS internally for Windows and linux > clients and servers. > > It also speeds up client internet traffic by caching most outside pages. > > Install squid per the INSTALL in the src tar ball and > add a startup entry to either chkconfig or rc.local. > We set it to use 5 GB of disk cache and start > automatically at boot time. We used the standard proxy port. > > We configured squid using webmin and this works fine. > > We added Webmin just to see how well it works: > It can break DNS and DHCP easily if you are not careful but it was helpful > getting squid working. > > Read up on syslogd and change the config file (or use webmin) to rotate > logs every day and keep 7 to 14 old logs for back checking purposes. This > will limit log size and make it easier to find any problems. > > Your milage mary vary. > > Standard software disclaimer applies. > > If this is helpful drop me an email so I know. > > If this needs work drop me an email with specifics. > > We will be adding a knowledgebase to our website with complete instructions > for this in the next few weeks. > > Best > > Seth Bardash > > Integrated Solutions and Systems > > seth(a)integratedsolutions.org > > 719-495-5866 > > Failure can not cope with perseverance!

2 2

Re: [Centos] Restart centos from Commandline
by Collins Richey 31 Mar '05

31 Mar '05

Every list goes through this sort of thrashing: 1. There are some users who are too self-important to remember back when they were once n00bs. From what I've heard, these are the bulk of users on the Debian lists <grin>. 2. There are others who can provide the simple answer AND a gentle reminder where the n00b might find the answer him/herself. What's the old saying: "You ctch more flies with honey than with vinegar." 3. Then there is the group (actually, subcategory of 1) who never has any time and can't be bothered to read anything other than super-intellectual stuff and who fills the replies with "your're wasting our time." The most successful lists have a lot of users in category 2. Enjoy, -- Collins When I saw the Iraqi people voting three weeks ago, 8 million of them, it was the start of a new Arab world.... The Berlin Wall has fallen. - Lebanese Druze leader Walid Jumblatt

6 5

Re: [CentOS] Double posting
by Steven Vishoot 30 Mar '05

30 Mar '05

--- Johnny Hughes <mailing-lists(a)hughesjr.com> wrote: > On Wed, 2005-03-30 at 12:51 -0800, Steven Vishoot > wrote: > > I do not know if i am seeing things, but it seems > > there has been a lot of double posting lately. It > > seems it has been only a short while since it > started. > > i thought it might only been some people, though i > am > > seeing an increasing amounts of this lately. Is > there > > something going on with the list or is it a snafu > that > > i have noticed something. > > > > letting my big mouth run like always. ;-) > > > > Steven > > The list has moved from centos(a)caosity.org to > centos(a)centos.org > > All e-mails from centos(a)caosity.org are also > forwared to > centos(a)centos.org ... so if you post to the old > list, we will get it. > > Some posts are to centos(a)centos.org and > CC:centos@caosity.org ... if you > do that, we will get it twice :) > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > thanks Johnny, i thought i was losing it there for a moment. now my big mouth will shut for a while.... dont bet on it! ;-O Steven "On the side of the software box, in the 'System Requirements' section, it said 'Requires Windows or better'. So I installed Linux." __________________________________ Do you Yahoo!? Make Yahoo! your home page http://www.yahoo.com/r/hs

1 0

Double posting
by Steven Vishoot 30 Mar '05

30 Mar '05

I do not know if i am seeing things, but it seems there has been a lot of double posting lately. It seems it has been only a short while since it started. i thought it might only been some people, though i am seeing an increasing amounts of this lately. Is there something going on with the list or is it a snafu that i have noticed something. letting my big mouth run like always. ;-) Steven "On the side of the software box, in the 'System Requirements' section, it said 'Requires Windows or better'. So I installed Linux." __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/

2 1

RE: [Centos] Restart centos from Commandline
by Vaneet Sharma 30 Mar '05

30 Mar '05

Hello Alexander, well, i just asked how to restart the server from command line ? i does not mean that i dont know how to restart ? if you ask how to open email from command line ? it does not mean that you have never checked an email before? lets come to mathematics and try to understand Well, regarding creating multi billion dollar business, you dont have to know everything You just need to know what is needed to make and create multi billion dollar business. I dont want to sound rude here, but now people have come down to my self respect i apologised on mailist list for asking this question. Do you want the users like us to be removed from this mailist list? Well, if it happens again, i dont want to be a user on this mailing list It seems to me that people here think that they know a lot. We , our company know a lot as well , ( we know how to make money ) and i hope this helps you people in understanding who we are Regards Vaneet -----Original Message----- From: centos-bounces(a)caosity.org on behalf of Aleksandar Milivojevic Sent: Tue 3/29/2005 5:34 PM To: CentOS discussion and information list Cc: Subject: Re: [Centos] Restart centos from Commandline darshan jadav wrote: >>>Hello, >>>I am connecting to my server through SecureCRT. Server is running Centos >>>4.0 >>>I need to restart my server >>> >>>What is command line?> anyone knows >> > > dunno if u need to go thru docz or not, but u shld defintely shorten > yr signature ;-) Actually, the signature is really the scary part. It reads "iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses". Somebody in charge of multi-billion dollar Internet businesses does not know how to restart the server (or have somebody on the site who knows)... -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7 _______________________________________________ CentOS mailing list CentOS(a)caosity.org http://lists.caosity.org/mailman/listinfo/centos Vaneet Sharma executive manager iDeasTank Limited an iwg business dolphins' court po 388 valletta, m-malta/europe mobile: +356 9943 8263 skype: CALLVANEET fax: +356 9952 8888 phone: +356 9942 8888 vaneet(a)iwg.info call me on www.skype.com - my ID is CALLVANEET Want a signature like this? - www.plaxo.com\signature iwg is a global e-mobile company creating, building and growing new businesses. iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. www.iWG.info www.countryprofiler.com/iWG www.visitmalta.com www.mfc.com.mt Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.

2 1

RE: [Centos] Restart centos from Commandline
by Vaneet Sharma 30 Mar '05

30 Mar '05

Well, this conversation started with me I just asked two silly questions and no where did i mention panicking or sound begging ? The reason i asked them from team was 1) i can get right answer in right time ( as there are so many distros of linux) 2) i was so eager to learn and run apache and tomcat on linux that these small things were coming as hindrance to my main aim Regarding, spoon fed, i dont think if anyone can reach the stage of joining the CENTOS mailing list is spoon fed if i can join this mailing list, install Centos on my own, run apache and run tomcat, if i can code java and restart application servers, i dont think i am spoon fed Of cours i dont know how to start centos from command line because I am not a system administrator and never was and never did. I think aim of this mailing list is to help new users get right answers in right time. There is too much information on internet which waste lot of time and also ............................ there are too many ways to do same thing. for e.g setting JAVA_HOME from bashrc and also from etc\profile Does anyone has comments from what i stated above. People here on the list have lot of ego's and they dont want to move from their point If u read my previous emails, i was criticised by 5 people, i apologised and also am thankful in giving me new direction. bottom line: if you are that much agigated, please do not answer my questions and delete the email. it is better. kind regards Vaneet -----Original Message----- From: centos-bounces(a)centos.org on behalf of Greg Knaddison Sent: Wed 3/30/2005 5:37 PM To: CentOS mailing list Cc: Subject: Re: [Centos] Restart centos from Commandline On Wed, 30 Mar 2005 14:56:00 +0100, Peter Farrow <peter(a)farrows.org> wrote: > If a question really is very simple to answer, why not just give the > answer, after all asking questions is how we all learn.... > No. RTFM and then ask questions is how we all learn. If I see a question I'm interested in that I don't know the answer to, I'll do some research and find the answer. 75% of the time that I make a post that's what it's based upon. I'm frequently happy to do it because I'm increasing my own knowledge, but when the poster is of the "I need to be spoon fed" variety and asks a follow up question that is clearly answered online it's a waste of everyone's time. Besides, how many times have you seen the "I REALLY NEED HELP RIGHT NOW OMG I CAN'T FIGURE OUT HOW TO XYZ!!!!! MY BOSS IS GOING TO FIRE ME, HELP ME HELP ME HELP ME!"? If you're used to getting spoon-fed and then get into a situation where you need help right now, spoon feeding is very unlikely to happen fast enough, but man/info/google are always there, unless you never learned to use them ;) I agree with Collins. The more people in his "group 2" the better. Respond with help and respond with a nudge. Greg _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Vaneet Sharma executive manager iDeasTank Limited an iwg business dolphins' court po 388 valletta, m-malta/europe mobile: +356 9943 8263 skype: CALLVANEET fax: +356 9952 8888 phone: +356 9942 8888 vaneet(a)iwg.info call me on www.skype.com - my ID is CALLVANEET Want a signature like this? - www.plaxo.com\signature iwg is a global e-mobile company creating, building and growing new businesses. iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. www.iWG.info www.countryprofiler.com/iWG www.visitmalta.com www.mfc.com.mt Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.

4 3

RE: [Centos] Restart centos from Commandline
by Vaneet Sharma 30 Mar '05

30 Mar '05

Thank you very much Vaneet -----Original Message----- From: centos-bounces(a)centos.org on behalf of dan1 Sent: Wed 3/30/2005 9:00 PM To: CentOS mailing list Cc: Subject: Re: [Centos] Restart centos from Commandline Hello, Vaneet. I understand and agree with what you are saying. It's true that it's becoming a bit agressive and it's sad. I think that you were right to ask those questions, and I don't think that the JAVA_HOME thing did hurt to ask. It even helped me so I'm happy you asked for. You asked only one or two basic questions but even though I think we should be able to ask them. However the rule to seach first before ask is still to keep in mind. Thus, the only thing that really misses here to my point of view is a place where we can get a search on all this precious mailing list. The google option is not very good because of the delay of inclusion (1-2 days I think) and also because we get other answers and we only want answers from here (and to be sure to have all of them), knowing that here is the most appropriate information. That's why I suggest putting on the home page of CentOS.org the following search motor's URL in the 'support' section: http://search.gmane.org/search.php?query=&email=&group=gmane.linux.centos.g… I'm sure that many new comers will appreciate it a lot. This will most probably also reduce by 2 or 3 times the amount of e-mails on this list. Kind regards to all, Daniel ----- Original Message ----- From: Vaneet Sharma To: CentOS mailing list Sent: Wednesday, March 30, 2005 8:47 PM Subject: RE: [Centos] Restart centos from Commandline Well, this conversation started with me I just asked two silly questions and no where did i mention panicking or sound begging ? The reason i asked them from team was 1) i can get right answer in right time ( as there are so many distros of linux) 2) i was so eager to learn and run apache and tomcat on linux that these small things were coming as hindrance to my main aim Regarding, spoon fed, i dont think if anyone can reach the stage of joining the CENTOS mailing list is spoon fed if i can join this mailing list, install Centos on my own, run apache and run tomcat, if i can code java and restart application servers, i dont think i am spoon fed Of cours i dont know how to start centos from command line because I am not a system administrator and never was and never did. I think aim of this mailing list is to help new users get right answers in right time. There is too much information on internet which waste lot of time and also ........................... there are too many ways to do same thing. for e.g setting JAVA_HOME from bashrc and also from etc\profile Does anyone has comments from what i stated above. People here on the list have lot of ego's and they dont want to move from their point If u read my previous emails, i was criticised by 5 people, i apologised and also am thankful in giving me new direction. bottom line: if you are that much agigated, please do not answer my questions and delete the email. it is better. kind regards Vaneet _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Vaneet Sharma executive manager iDeasTank Limited an iwg business dolphins' court po 388 valletta, m-malta/europe mobile: +356 9943 8263 skype: CALLVANEET fax: +356 9952 8888 phone: +356 9942 8888 vaneet(a)iwg.info call me on www.skype.com - my ID is CALLVANEET Want a signature like this? - www.plaxo.com\signature iwg is a global e-mobile company creating, building and growing new businesses. iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. www.iWG.info www.countryprofiler.com/iWG www.visitmalta.com www.mfc.com.mt Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.

1 0

RE: [Centos] Restart centos from Commandline
by Nathan Oyler 30 Mar '05

30 Mar '05

It isn't that you are wrong, as much as there is a perfectly valid reason not to answer those questions. Because then people will ask them. And return and ask another. They are all simple except that you become a resource, and that grows. Support Irc channels are the easiest to see this in. It isn't that it's difficult to answer these questions, it just gives no incentive for people to try and learn the answer themselves, which stunts their growth and makes them lean more on assistance. It's easier on us all to force people to try and figure out the easy answers, because if you can't figure out with google how to restart linux from the command line, how will you be able to resolve 22 dependencies with 10 perl modules that require you to debug on 3 of them error messages that.. you get the point. 2 cents. > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Peter Farrow > Sent: Wednesday, March 30, 2005 6:56 AM > To: CentOS mailing list > Subject: Re: [Centos] Restart centos from Commandline > > I agree, > > If a question really is very simple to answer, why not just give the > answer, after all asking questions is how we all learn.... > > Self importance really is ultimatelty self-defeating, no one knows > everything....and one day we all have to ask. > > I've been in the computing game far too long to to claim to know > definite answers to everything, the more you learn the more > > you realise you don't know! > > ;-) > > P. > > > > Joao Medeiros wrote: > > >Same happened to me when I joined the Fedora dlist and asked some > >newbie question which I'm too ashamed to remember now :-) > > > >Point is, the time it takes to reply with a "you're wasting my time" > >could actually be used to give some help. If peeps are too busy why > >bothering replying with nasty comments in the first place?! > > > >Just my 2 cents... > > > > > >On Tue, 29 Mar 2005 20:37:08 -0700, Collins Richey <crichey(a)gmail.com> > wrote: > > > > > >>Every list goes through this sort of thrashing: > >> > >>1. There are some users who are too self-important to remember back > >>when they were once n00bs. From what I've heard, these are the bulk > >>of users on the Debian lists <grin>. > >> > >>2. There are others who can provide the simple answer AND a gentle > >>reminder where the n00b might find the answer him/herself. What's the > >>old saying: "You ctch more flies with honey than with vinegar." > >> > >>3. Then there is the group (actually, subcategory of 1) who never has > >>any time and can't be bothered to read anything other than > >>super-intellectual stuff and who fills the replies with "your're > >>wasting our time." > >> > >>The most successful lists have a lot of users in category 2. > >> > >>Enjoy, > >> > >>-- > >> Collins > >> When I saw the Iraqi people voting three weeks ago, 8 million of > them, > >> it was the start of a new Arab world.... The Berlin Wall has > fallen. > >> - Lebanese Druze leader Walid Jumblatt > >>_______________________________________________ > >>CentOS mailing list > >>CentOS(a)centos.org > >>http://lists.centos.org/mailman/listinfo/centos > >> > >> > >> > >_______________________________________________ > >CentOS mailing list > >CentOS(a)centos.org > >http://lists.centos.org/mailman/listinfo/centos > > > > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

2 1

Access to Archives
by Gerry Tool 30 Mar '05

30 Mar '05

I just joined the list and am trying to look at the archives. The page http://lists.caosity.org/mailman/listinfo/centos has a link to the archives that resolves to http://localhost.localdomain/pipermail/centos/ which of course produces an error "The connection was refused when attempting to contact localhost.localdomain." What am I missing, and how can I review the archives to keep from asking obviously answered questions? Thanks. Gerry

3 2

strict selinux policy?
by Aleksandar Milivojevic 30 Mar '05

30 Mar '05

What happened to selinux-policy-strict package in RHEL/CentOS? -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7

2 1

Centos 4.0 and Named
by Robert Moskowitz 30 Mar '05

30 Mar '05

I am failing to get Named started. I copied my named.custom and zone files to a diskette from my 3.3 build. I installed 4.0 from scratch and did the updates. I edited /etc/named.conf (which I realize is a link) to include named.custom I cp named.custom into /etc (all of this was done while logged in as root) When I try to start named from the services GUI (using GNOME) and I get this error: named failed. The error was: Starting named: /etc/named.conf:67: open /etc/named.custom: file nto found /etc/init.d/named: line 56: [: too many arguements [FAILED] So what is wrong. /etc/named.custom is there. permissions look right. All done as root. Am I suppose to put named.custom in the croot area along with named.conf and set up a symbolic link (which I have forgotten how to do, as I haven't done it since '93)?

3 2

yum upgrade on 3.4 and spamassassin
by Francois Caen 30 Mar '05

30 Mar '05

Hello, I run CentOS 3.4 on 3 machines (i386). Original yum.conf If I do a yum update: No actions to take If I do a yum upgrade a machine that has no spamassassin: No actions to take If I do a yum upgrade on 2 machines that have perl-Mail-SpamAssassin-3.0.1-1 installed (3rd party rpm, more recent than the CentOS/RHEL one): I will do the following: [update: spamassassin 2.55-3.4.i386] I will install/upgrade these to satisfy the dependencies: [deps: perl-Time-HiRes 1.38-3.i386] Is this ok [y/N]: Could someone please explain this behavior? Why is yum upgrade trying to upgrade a package that is a newer 3rd party rpm, with a different name? Thanks, Francois

3 4

RE: [CentOS] Mailscanner and Postfix
by Plant, Dean 30 Mar '05

30 Mar '05

Peter Farrow wrote: > Dean, > > do you have any details on mailscanner with sendmail, Sendmail/ClamAV is covered in nearly all the docs for MailScanner. http://www.sng.ecs.soton.ac.uk/mailscanner/docs.html http://www.fsl.com/support/ http://www.fsl.com/support/MailScanner-Manual-Version-1.0.1.pdf > > I am currently using Mimedefang, sendmail and clamav, as an mid stream > relay to filter viruses and spam, can mailscanner do this? Yes, we use it for exactly that. It really does work well, removing nearly all spam and virus scanning with multiple virus engines. Dean

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss