Discuss

discuss@lists.centos.org

34758 discussions

Re: [CentOS] BIND vulnerability
by Stephen Harris 30 Jul '09

30 Jul '09

In-Reply-To=<4A70B20C.5020808(a)karan.org> Reply-To: (Apologies if this isn't in the thread properly; I'm trying to fake it from the website headers :-)) Karanbir Singh wrote: > http://lists.centos.org/pipermail/centos-devel/2009-July/004794.html > > I've updated 2 machines, and had no problems here. But some wider > testing would be good and we can get them into the main repos so more > people benefit. I just updated one machine; the process ended up with named not running. I did rpm -Uvh bind-utils-9.2.4-30.el4_8.4.i386.rpm bind-9.2.4-30.el4_8.4.i386.rpm bind-libs-9.2.4-30.el4_8.4.i386.rpm and got Jul 29 20:29:15 linode named: succeeded Jul 29 20:29:16 linode named[2873]: shutting down: flushing changes Jul 29 20:29:16 linode named[2873]: stopping command channel on 127.0.0.1#953 Jul 29 20:29:16 linode named[2873]: no longer listening on 127.0.0.1#53 Jul 29 20:29:16 linode named[2873]: no longer listening on 66.160.141.105#53 Jul 29 20:29:17 linode named[2873]: exiting Jul 29 20:29:18 linode named: failed After a restart it appeared to work... Jul 29 20:29:41 linode named[31609]: starting BIND 9.2.4 -u named Jul 29 20:29:41 linode named[31609]: using 4 CPUs Jul 29 20:29:41 linode named[31609]: loading configuration from '/etc/named.conf' etc... The daemon seems to be responding properly to requests after this manual start. -- rgds Stephen

1 0

Re: [CentOS] USB, AutoMount & VNC
by Jason Thrasher 29 Jul '09

29 Jul '09

Hi Guy, I'm curious if you found a solution to the headless automount problem on centos? I'm running into a similar problem, though I am not using VNC. My machine is simply headless, with only network and power supplied, and I'm trying to trigger a bash script to run when a new device is added (like USB, DVD, CDROM, etc) using a custom udev rule. Automount seems to only work for removable devices if a user is logged in locally on the console, not via ssh. Something about the tty nature of the login seems to be affecting how udev handles these removable devices. When a user is logged in locally, it fires the udev rules, and will run my udev rule which triggers other actions. I can't get this to work without the local login though. any ideas or pointers? thanks, Jason

1 0

Re: [CentOS] DRBD on a xen host: crash on high I/O
by Ross Walker 29 Jul '09

29 Jul '09

On Jul 29, 2009, at 7:52 AM, "Andrea Dell'Amico" <adellam(a)sevenseas.org> wrote: > On Tue, 2009-07-28 at 14:31 -0400, William L. Maltby wrote: > >>> When the two hosts are in sync, if I activate more than a few (six >>> or >>> seven) xen guests, the master server crashes spectacularly and >>> reboots. >>> >>> I've seen a kernel dump over the serial console, but the machine >>> restarts immediately so I didn't write it down. >> >> If you have an available pc, hook it up in place of the serial >> console >> and start a terminal emulator, e.g. minicom or whatever you prefer, >> and >> turn on full logging. This should save everyting in a file that you >> can >> then review. > > Uhm. The console is on the DRAC5 card. I think I would need to > activate > some network kernel crash dump feature. > >> If it's a Windows based, just remember to get rid of the ^M with >> dos2unix, or equivalent, after you send it to a *IX box. >> >> I don't know anything about the rest of your problem, sorry. > > As I wrote, it's a production server. I cannot stop it when I want, I > need to reserve a weekend session. > In the meantime, I was asking if there's a known problem with a setup > like mine. I read on another forum how a user using iSCSI for domUs was experiencing network hangs due to the fact that dom0 didn't have enough scheduler credits to handle the network throughput. That might be related. http://lists.centos.org/pipermail/centos-virt/2009-June/001021.html -Ross

2 3

Re: [CentOS] SSH attacks from china
by Lucian＠lastdot.org 29 Jul '09

29 Jul '09

On Wed, Jul 29, 2009 at 9:10 PM, Sorin Srbu<sorin.srbu(a)orgfarm.uu.se> wrote: >>-----Original Message----- >>From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On >>Behalf Of Lucian(a)lastdot.org >>Sent: Sunday, July 26, 2009 11:27 PM >>To: CentOS mailing list >>Subject: Re: [CentOS] SSH attacks from china >> >>Vietnam and Indonezia are also suspects in my list. >>The biggest problem with this approach is that even tho I could ban >>whole Asia and Russia, a significant part of the attacks do not >>originate from there, but from countries like USA, UK, etc, controlled >>by hackers (also) from the aforementioned areas... >>The latest case of password breaking I had to deal with was from an >>USA IP address.. they managed to insert an iframe in all index.html >>and index.php files on the respective FTP account. The iframe however >>was pointing to a .ru website hosted in France.. Isn't globalization >>fun?! >>Anyway, just banning ranges of IP addresses may not enough, so to rely >>on this _only_ would be careless. > > Exactly, that was what I trying to get at! > > So you're not going to ban all ip addresses from the US I take it, since > most spam, crapware, attacks and whatnot originate from there, as you point > out? ;-) I might just do that, but of course, for a certain range of ports. Actually a better idea would be to just allow connections on the most sensitive services only from our country since we do no business with people abroad. It would be interesting to see which method is more performant, iptables+ipset or iptables-geoip. > -- > /Sorin > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > >

1 0

Re: [CentOS] SSH attacks from china
by Kai Schaetzl 29 Jul '09

29 Jul '09

Sorin Srbu wrote on Sat, 25 Jul 2009 19:40:28 +0200: > What if you have legit users from China and Korea trying to connect to your > server(s)? What if he does not? See, you always use the solution that fits you and your setup/environment/needs. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

3 3

Default PHP Build ! include Mysql Support?
by Chuck 29 Jul '09

29 Jul '09

Do you need to roll your own PHP build to support MySQL now? I don't see support built into the included libphp module.. Thx, CC

5 7

Grub fallback problem
by Matthias Blankenhaus 29 Jul '09

29 Jul '09

Hi ! I am running CentOS 5 using grub 0.97

1 0

mod_perl2 and DBD::SQLite
by Mark Hedges 29 Jul '09

29 Jul '09

On Thu, 23 Jul 2009, Fred Moyer wrote: > Looks like dev@httpd is aware of the issue and will be > releasing a fix. Haven't tried 5.3 centos but this sounds > like they shipped a version of apache that caused this. > > http://www.mail-archive.com/dev@httpd.apache.org/msg44177.html > Hello, it seems like httpd-devel 2.2.3 was patched with a bug from an upstream version. DBD::SQLite no longer works under mod_perl2, generating an error which is "not an error" upon any attempt to select something. (The same selects all work in a command-line script.) (https://rt.cpan.org/Ticket/Display.html?id=47983) I tried to sign up for a centos bug report username, but the signup form is buggy, the captcha never works.... Any chance someone can try to fix this? Mark

1 0

etc passwd and groups file
by Carlos Santana 29 Jul '09

29 Jul '09

Hi, I need to maintain a same user/group list on multiples systems. Can we just copy the same passwd and groups file on all machines? If we create a new user on one system then I will need to copy this to all other systems. This is quite cumbersome. Any suggestions? - CS.

7 11

Software RAID-1 partition constantly syncing
by Jeff Gregor 29 Jul '09

29 Jul '09

I have a partition set up as software RAID-1 on a CentOS 5.3 machine. Today, the system was rebooted, when it came back up I noticed that it had started to resync. It completes the sync, then immediately starts again. From the log: Jul 29 09:46:02 cbserver kernel: md: syncing RAID array md2 Jul 29 09:46:02 cbserver kernel: md: minimum _guaranteed_ reconstruction speed: 5000 KB/sec/disc. Jul 29 09:46:02 cbserver kernel: md: using maximum available idle IO bandwidth (but not more than 200000 KB/sec) for reconstruction. Jul 29 09:46:02 cbserver kernel: md: using 128k window, over a total of 239946752 blocks. Jul 29 11:02:01 cbserver kernel: md: md2: sync done. Jul 29 11:02:01 cbserver kernel: md: syncing RAID array md2 Jul 29 11:02:01 cbserver kernel: md: minimum _guaranteed_ reconstruction speed: 5000 KB/sec/disc. Jul 29 11:02:01 cbserver kernel: md: using maximum available idle IO bandwidth (but not more than 200000 KB/sec) for reconstruction. Jul 29 11:02:01 cbserver kernel: md: using 128k window, over a total of 239946752 blocks. Jul 29 11:56:36 cbserver kernel: md: md2: sync done. Jul 29 11:56:37 cbserver kernel: md: syncing RAID array md2 Jul 29 11:56:37 cbserver kernel: md: minimum _guaranteed_ reconstruction speed: 5000 KB/sec/disc. Jul 29 11:56:37 cbserver kernel: md: using maximum available idle IO bandwidth (but not more than 200000 KB/sec) for reconstruction. Jul 29 11:56:37 cbserver kernel: md: using 128k window, over a total of 239946752 blocks. Any idea what is causing this? And how to make it stop? Thanks!

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss