Discuss

discuss@lists.centos.org

34753 discussions

CentOS 5 and Fedora Core
by Matt 23 Dec '09

23 Dec '09

If memory serves me correctly I was told CentOS 4.x was based on Fedora Core 3. So when finding a rpm I always looked for one for Fedora Core 3 and then it seemed to install ok on CentOS 4. Is CentOS 5 the same way and if so what Core is it based on? Matt

5 4

eME627-5082 laptop and Linux?
by Scott Ehrlich 23 Dec '09

23 Dec '09

Anyone have experience with this laptop running C5 5.4 32 or 64-bit? Any known problems/issues? Thanks. Scott

1 0

iptables ... *BSD pf ... pfSense
by Götz Reinicke - IT Koordinator 23 Dec '09

23 Dec '09

Hi, I followed the "Optimizing CentOS for gigabit firewall" posting and as some posters wrote pf is soo sooo ssooooo mutch faster, I was thinking to give it a try. But I'm not familier to BSD so I was looking for some tools and found "pfsense" http://www.pfsense.org/ "pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router" Has any of the firewall guys on the list ever tested this distri? What do you think? Right now we run a iptables Shorewall system and had no problems so far, but having a "managed" firewall distri which rocks whould be an alternative. Cheers, Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Staatsrätin für Demographischen Wandel und für Senioren im Staatsministerium Geschäftsführer: Prof. Thomas Schadt

4 3

advanced routing, 2isp
by David Hláčik 23 Dec '09

23 Dec '09

Guys, please I have no luck with this. I have 2 ISPS. I have working configuration with ip route a 2 routing tables in a way, that matching local subnet uses second provider while all the others are using the first one - main. The main problem I am having is, that I am unable to reach my router via public ip address of that second ISP. This is my default routing table [root@sx1 cron.hourly]# ip route show table main 194.228.196.39 dev ppp0 proto kernel scope link src 90.178.76.117 10.123.50.101 dev ppp2 proto kernel scope link src 10.123.50.1 10.123.50.100 dev ppp1 proto kernel scope link src 10.123.50.1 213.194.242.0/24 dev eth1 proto kernel scope link src 213.194.242.198 10.123.20.0/24 dev eth0 proto kernel scope link src 10.123.20.1 10.123.10.0/24 dev eth0 proto kernel scope link src 10.123.10.11 10.123.11.0/24 dev eth0.8 proto kernel scope link src 10.123.11.1 10.123.42.0/24 dev eth0.5 proto kernel scope link src 10.123.42.1 10.123.123.0/24 dev eth0.7 proto kernel scope link src 10.123.123.1 10.123.40.0/24 dev eth0.4 proto kernel scope link src 10.123.40.1 10.123.30.0/24 dev eth0 proto kernel scope link src 10.123.30.1 10.123.44.0/24 dev eth0.6 proto kernel scope link src 10.123.44.1 169.254.0.0/16 dev eth0.8 scope link default via 213.194.242.1 dev eth1 As you can see , my default provider has gateway 213.192.252.1 , connected via eth1 . This works fine for me. Second configuration is ip rule based, when subnet 10.123.123.0/24 goes to routing table adsl [root@sx1 cron.hourly]# ip rule show 0: from all lookup 255 32764: from all fwmark 0x1 lookup adsl-vpn 32765: from 10.123.123.0/24 lookup adsl 32766: from all lookup main 32767: from all lookup default [root@sx1 cron.hourly]# ip route show table adsl 194.228.196.39 dev ppp0 scope link src 90.178.76.117 10.123.123.0/24 dev eth0.7 scope link src 10.123.123.1 default via 194.228.196.39 dev ppp0 As you can see in this case, all trafic goes via ppp0 (my second internet provider connected via ppp0 - adsl ppoe). This works fine. What I want to achieve is, now being able to ping /access/whatever to my server via second public IP address of my adsl provider (90.178.76.117). To achieve this i have added iptables rule, which marks all packets comming via ppp0 (iptables -t mangle -A PREROUTING -i ppp0 -j MARK --set-mark 0x1). And created another routing table named adsl-vpn [root@sx1 cron.hourly]# ip route show table adsl-vpn 194.228.196.39 dev ppp0 scope link src 90.178.76.117 10.123.10.0/24 dev eth0 scope link src 10.123.10.11 default via 194.228.196.39 dev ppp0 Now i have added ip rule, which for all packets marked as 1 , which are the ones which came trough ppp0 = my second ISP, uses table adsl-vpn [root@sx1 cron.hourly]# ip rule show 0: from all lookup 255 32764: from all fwmark 0x1 lookup adsl-vpn <--- this one 32765: from 10.123.123.0/24 lookup adsl 32766: from all lookup main 32767: from all lookup default Well, now I should be able definitely to ping my server from outside, but it does not works Pinging from windows machine in outside world : C:\Users\boss>ping 90.178.76.117 Pinging 90.178.76.117 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Ping statistics for 90.178.76.117: Packets: Sent = 3, Received = 0, Lost = 3 (100% loss), If i will tcpdump my ppp0 interface on my router I see the ICMP echo requests are comming [root@sx1 cron.hourly]# tcpdump -i ppp0 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes 09:08:27.743789 IP adsl-dyn118.78-98-105.t-com.sk > gw2.cz.polarion.com: ICMP echo request, id 1, seq 72, length 40 But, echo responses from my server NOT, instead of that, responses are comming out of eth1 interface , which is my first ISP! [root@sx1 cron.hourly]# tcpdump -i eth1 |grep ICMP tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes 09:09:30.451706 IP gw2.cz.polarion.com > adsl-dyn118.78-98-105.t-com.sk: ICMP echo reply, id 1, seq 73, length 40 09:09:35.409704 IP gw2.cz.polarion.com > adsl-dyn118.78-98-105.t-com.sk: ICMP echo reply, id 1, seq 74, length 40 This means that either mange is not working or ip rule is not working . Please help, David

1 0

iptables -m connlimit
by Helmut Drodofsky 23 Dec '09

23 Dec '09

Hi, to the use of connlimit, I have found http://lists.centos.org/pipermail/centos/2008-June/059656.html Is there something new with centos 5.3 or 5.4? Helmut

1 0

SOLVED - Re: Frustrations with MySQL loss, tcpdump, netstat, etc
by Slack-Moehrle 22 Dec '09

22 Dec '09

Hi Guys, OK, I figured out the problem, It would seem that Comcast spelling my DNS entry wrong would do it! I have done this a zillion times, I was totally stumped as to what I would be missing this time. Thanks everyone for their help. -Jason ----- Original Message ----- From: "Kai Schaetzl" <maillists(a)conactive.com> To: centos(a)centos.org Sent: Tuesday, December 22, 2009 9:31:19 AM Subject: Re: [CentOS] Frustrations with MySQL loss, tcpdump, netstat, etc MySQL is *not* listening on TCP 3306 since *long* unless you tell it to in the my.cf. It uses a local Unix socket by default. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

NMS Opinions
by Joseph L. Casale 22 Dec '09

22 Dec '09

A recent post that mentioned Zabbix inspired me to have a look at them again while I was waiting on something as it’s been a while since I looked at them. Currently, I was using Nagios but had to start using Munin to add some functionality I needed and don’t want to continue down this road of supporting umpteen different packages. Between Zabbix, Pandora and HyperIQ, what would anyone familiar with these have to say. HyperIQ looks rather crippled for the FOSS version, Pandora’s website seems to be down☺ Maybe they a monitoring solution, heh… Any opinions appreciated! jlc

6 10

IPTABLES --hitcount maximum value
by James B. Byrne 22 Dec '09

22 Dec '09

In-Reply-To: <4B30F618.6060809(a)kinzesberg.de> On: Tue, 22 Dec 2009 17:38:48 +0100, "Dirk H. Schulz" <dirk.schulz(a)kinzesberg.de> wrote: > That is a new "phenomenon" I also ran into. You now have to > adjust memory values. > > I have added to my /etc/modprobe.conf > "options ipt_recent ipt_pkt_list_tot=75" > Now I can use hitcount values of 50 (did not test if the above > is sufficient for higher values). I found this on the net so I deduce that you would be safe up to a hitcount value of 75. > [PATCH] netfilter: ipt_recent: sanity check hit count > From: Daniel Hokka Zakrisson > Date: Sat Mar 15 2008 - 10:11:05 EST > > If a rule using ipt_recent is created with a hit count greater > than ip_pkt_list_tot, the rule will never match as it cannot > keep track of enough timestamps. This patch makes ipt_recent > refuse to create such rules. > > With ip_pkt_list_tot's default value of 20, . . . Thanks for the lead. Regards, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

1 0

Frustrations with MySQL loss, tcpdump, netstat, etc
by ML 22 Dec '09

22 Dec '09

Hi All, Hi All, MySQL 5.0.77 on CentOS 5.4 MySQL is running, my Wordpress stuff is working, but I cannot connect to the server from my house. This server is in my house, however, but on a public IP, behind a firewall, etc. I checked my hardware firewall (a dedicated UnTangle system) and that is successfully allowing the passage. I know this because the firewall shows: 2009-12-22 6:29:41 am passed <my IP>:35606 <server IP>:3306 I checked the firewall (system-config-securitylevel-tui) on the server and that has 3306:tcp allowed. When I try to connect I get an error (4) which when I google says: "Interrupted System call" I have tried using the MySQL Workbench and other client software. If I look in /var/log/mysqld.log I dont see anything but the fact the server started. I tried stopping mysql with /etc/init.d/mysqld stop Then starting with mysqld_safe --init-file=/tmp/code.txt & Where code.txt contains: UPDATE mysql.user SET Password=PASSWORD('mypassword') WHERE User='root'; GRANT ALL ON mysql.* to 'root'@'127.0.0.1'; GRANT ALL ON mysql.* TO 'root'@'localhost'; GRANT ALL ON mysql.* TO 'root'@'my home IP'; FLUSH PRIVILEGES; commit; and I still cannot connect. But the database starts and this code executes because If I go to the console and run /usr/bin/mysql -u root -p and use this password from the update statement that password gets me in. So, on my server I run tcpdump host <my ip> and I dont think I see anything where 3306 is coming through. if I run a test MySQL connection from the MySQL Workbench and they run netstat on my server and I dont see a entry where 3306 is used in what netstat is dumping. What am I doing wrong? What can I check for? I am stumped! -Jason

5 7

Re: [CentOS] Frustrations with MySQL loss, tcpdump, netstat, etc
by ML 22 Dec '09

22 Dec '09

Rick, > have you tried to telnet to port 3306 of the machine where the mysql > server is located, from your home machine? if so, what do you get? > If you're successful you'll get a connect bit that includes a string > that will show your mysql server version number. if you don't have > mysql access you'll likely see a mysqld reject of some nature. if > there's a network issue you'll just get a hang or you could get an > unreachable error. Yup, it works: $ telnet 173.13.167.209 3306 Trying 173.13.167.209... Connected to mail.mailnewsrss.com. Escape character is '^]'. 4 5.0.77aWqQ!OMq,slG]|xft5L[fConnection closed by foreign host.

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss