Discuss

discuss@lists.centos.org

34729 discussions

Re: [CentOS] ip6tables equivalent for NAT?
by John Pierce 27 May '20

27 May '20

with ipv6, you just allow the specific ports destined to the specific local machine(s) in on your WAN side, they don't need translating. same sort of rule as if you had a internet-facing service running on the routing system On Tue, May 26, 2020 at 11:55 AM Kenneth Porter <shiva(a)sewingwitch.com> wrote: > I finally got an ISP connection with working IPv6 and now I need to add > firewall rules for forwarding connections from my LAN to the WAN. I'm > using > firewalld to handle the high-level description that gets translated to > iptables/ip6tables on CentOS 7. > > Of course, with IPv6, one doesn't do NAT, so the usual masquerade target > doesn't make sense. But I want similar connection logic, with no inbound > connections allowed to LAN clients and all outbound connections allowed. > How does one express this in either firewalld or its ip6tables "direct > rules"? > > I don't currently need port-forwarding to internal servers but, for > completeness, what would such rules look like? > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > https://lists.centos.org/mailman/listinfo/centos > -- -john r pierce recycling used bits in santa cruz

3 3

ip6tables equivalent for NAT?
by Kenneth Porter 26 May '20

26 May '20

I finally got an ISP connection with working IPv6 and now I need to add firewall rules for forwarding connections from my LAN to the WAN. I'm using firewalld to handle the high-level description that gets translated to iptables/ip6tables on CentOS 7. Of course, with IPv6, one doesn't do NAT, so the usual masquerade target doesn't make sense. But I want similar connection logic, with no inbound connections allowed to LAN clients and all outbound connections allowed. How does one express this in either firewalld or its ip6tables "direct rules"? I don't currently need port-forwarding to internal servers but, for completeness, what would such rules look like?

1 0

network disconnection after several hours
by Thomas Poty 26 May '20

26 May '20

Hello, Here is the context during the problem occurs : We have a new machine running on centos 8.From this machine, we restore a postgresql dump on an other machine runnning on centos 7.After several hoursof running, restore fails due to a disconnection (no route to host).But, if we disable the firewall on centos 8, restore succeed. Before having this new centos 8 machine, we had a centos 7 machine and all worked fine with firewall activated. Has anyboby an ideas, clues or something else? Thanks, Thomas Poty

2 4

Thunderbird Revision Issues
by Mark LaPierre 25 May '20

25 May '20

Hey all, CentOS 6 has Thunderbird 68.8.0 CentOS 8 has Thunderbird 68.7.0 When I rsync my .thunderbird folder from my CentOS 6 machine to my CentOS 8 machine and start Thunderbird it says: "A newer version of Thunderbird may have made changes to your profile which are no longer compatible with this older version. Use this profile only with that newer version, or create a new profile for this installation of Thunderbird. Creating a new profile requires setting up your accounts, calendars and add-ons again." Needless to say, this is not an acceptable choice. I have several email accounts that would have to be set up. That's not such a big issue, but I have many local folders set up that I can't duplicate on the new installation if I can't use my previous profile. Does anyone know when CentOS 8 will catch up with CentOS 6 so that I can start using my new CentOS 8 box? Perhaps there is another work around. I've tried many of the solution provided on the mozilla web site to no avail. I even tried to install Thunderbird 68.8.0 on my CentOS 8 box. That didn't make it happy either. What now brown cow? -- _ °v° /(_)\ ^ ^ Mark LaPierre Registered Linux user No #267004 https://linuxcounter.net/ ****

4 5

mkfs.fat Device or resource busy
by Michael Hennebry 25 May '20

25 May '20

I'm trying to format a 16 GB SD card to FAT32. Either it won't find the device or it gives me the titular error message. mkfs.fat /dev/sdc I have tried "ejecting" the drive and reinserting the card. I have tried inserting another card, checking to insure that I could see its file, ejecting that card and inserting the target card. If I do not umount it, busy, if I don't, not found. What is the incantation for formatting an SD card. BTW I am using Centos 7 and a USB adapter. -- Michael hennebry(a)web.cs.ndsu.NoDak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards

2 2

authconfig vs authselect
by Leon Fauster 24 May '20

24 May '20

I had the habit to use authconfig --passalgo=sha512 --update but in EL8 its not supported anymore. The authselect-compat package is installed (and it says "not supported anymore and have no effect). Whats the equivalent call using the new tool "authselect"? -- Thanks Leon

2 1

Re: [CentOS] ether-wake
by Rich Greenwood 23 May '20

23 May '20

Some switch hardware can generate the packets directly, negating the need for a box on every VLAN. Meraki hardware can do it, but you have to go through the dashboard so automating it isn't currently possible. Here is some documentation on forwarding WoL on catalyst 3750 switches from Cisco: https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-series-sw… -- Rich Greenwood Network Engineer Shasta County Office of Education 530-225-0161

4 4

External Array Data Migration
by Xinhuan Zheng 23 May '20

23 May '20

Dear All, Below question has been puzzled me for a while, and don’t know if anyone has experienced such puzzle: You have an external array attached to a physical hardware. The operating system is CentOS 5. The file system is created on top of LVM on external array & mounted. The CentOS 5 can see the array controller, and manage all LVM configuration, etc. There is data stored in that external array. At some point, you want to upgrade the operating system to higher version, CentOS 7. Is there a fast way to migrate the external array data volume to new hardware with CentOS 7 without doing machine-to-machine rsync the whole external array data volume? In another words, can I detach external array from old hardware, and attach it to new hardware, then re-configure LVM, so new operating system can recognize the external array file system? Thanks, - Xinhuan

2 1

Re: [CentOS] How to Load Custom CentOS 7 Image
by Xinhuan Zheng 21 May '20

21 May '20

Dear All, > It seems like kickstart is what you are looking for.? > Is this what you were trying to do? Yes, kickstart is what I’m looking for. Let me detail my provisioning process: * Provision a VM with standard CentOS 7 NetInstall ISO & my post script. The file system is created on top of LVM * Export entire VM as custom ISO image to be loaded into physical hardware * Kickstart physical hardware using above exported custom image & different grub/isolinux configuration Although I could just use the same CentOS 7 NetInstall ISO & run all my post script to the physical HW, it may take a few hours, since post script is long, and I wonder if above process will speed up, since the VM has everything needed. If that process isn’t feasible, then I’ll just do the same thing for physical hardware. Thanks, - Xinhuan

2 1

how does autofs deal with stuck NFS mounts and suspending to RAM?
by hw 21 May '20

21 May '20

Hi, after trying sshfs to mount a remote file system on a server with the result that sshfs will sooner or later get stuck and require a reboot of the client, I'm fed up with it and am looking for alternatives. So next I would like to use NFS over a VPN connection instead. To minimize the instances of the NFS mount getting stuck, it might be helpful to use autofs. What happens when the mount is stuck because the connection is down and autofs figures the idle timeout has expired and tries to unmount the remote file system? What happens when I put the client to sleep by suspending to RAM? Will autofs automatically unmount first, or will the server have to deal with a client that has apparently gone away and might re-appear later in unexpected ways? Is there a way to tell NFS to retry an operation _now_ after the connection went down and came back, rather than having to wait for a possibly rather long time? Is there a better alternative for mounting remote file systems over unreliable connections?

5 7

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss