Discuss

discuss@lists.centos.org

34753 discussions

iptables: forwarding on internal device
by Marcus Moeller 10 Feb '09

10 Feb '09

Good Evening, I am trying to forward packages on an internal device using iptables: /sbin/iptables -A FORWARD -i eth0 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT but the packages are still blocked, e.g.: Feb 6 20:58:28 firewall kernel: DROP-TCP IN=eth0 OUT=eth0 SRC=192.168.100.177 DST=172.28.2.184 LEN=40 TOS=0x00 PREC=0x00 TTL=127 ID=16609 PROTO=TCP SPT=7166 DPT=3590 WINDOW=0 RES=0x00 ACK RST URGP=0 net.ipv4.ip_forward = 1 is set, too. Best Regards Marcus

7 22

Re: [CentOS] iptables: forwarding on internal device
by jgimer＠gmail.com 10 Feb '09

10 Feb '09

What does Iptables -nL Show? ------Original Message------ From: Marcus Moeller Sender: centos-bounces(a)centos.org To: CentOS mailing list ReplyTo: CentOS mailing list Sent: Feb 6, 2009 1:15 PM Subject: Re: [CentOS] iptables: forwarding on internal device Dear Josh, > What does your input and output chains show? > > Josh I guess you mean the forward rules: ACCEPT all -- eth0 eth0 anywhere anywhere state NEW,RELATED,ESTABLISHED Best Regards Marcus _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Sent via BlackBerry from T-Mobile

4 5

tinydns/djbdns opinion poll
by Jake 10 Feb '09

10 Feb '09

Good morning: We're about to start moving our public DNS to in-house managed servers. My first thought was "Linux + BIND" and we're done. Someone in another business unit's IT dept. has suggested tinydns be used. >From what I could find, it looks like this software hasn't really had any community drive behind it in a while. The latest RPMs on rpmforge are for red hat 6 and red hat 7. I very much dislike the idea of compiling my own because of all the overhead associated with making sure the system stays up-to-date and so on so this really puts me off already. Does anyone have an opinion on this software? It seems to have some strong virtues but maybe not enough to justify using it over BIND just because any Linux admin we hire could be expected to know BIND. Thanks for your time, -- Jake Paulus JakePaulus(a)gmail.com

9 11

Testing out USB mic
by Robert Moskowitz 10 Feb '09

10 Feb '09

I have a Plantronics DSP-400 headset on a Centos 5.2 system that I am using for testing with SIP Communicator. How can I test the microphone on the headset to see if it is working in the system?

1 0

Scripting Oddity
by David G. Miller 10 Feb '09

10 Feb '09

I've been playing around with qemu and wanted to make the guest OS instance visible on my network. This meant getting bridging and tun/tap working. After getting things working by pasting command from the CentOS wiki article plus adding a few enhancements, I decided to capture the process in a shell script that would be suitable for a user in the sudoers file to fire off. Not sure why (which is why I'm posting this) but I couldn't get the same result from the shell script as I got from pasting commands onto the command line or using the shell history. After a lot of very tedious debugging, I finally got the script to work by adding a couple of short sleeps at selected locations. The script now looks like: cat upBridge.sh #!/bin/bash # # Script for setting up a bridge accessible by a qemu VM. # # First, make sure we're starting with a clean slate. /usr/bin/sudo /sbin/rmmod bridge /usr/bin/sudo /sbin/rmmod tun /usr/bin/sudo /sbin/service network restart # # Grab the IP address of the given interface so we can restore it later. # oldIP=`/sbin/ifconfig $1 | /bin/grep 'inet addr' | /usr/bin/awk -F \: '{print substr($2,0,index($2, " ")) ; }'` echo "$1 currently has IP address $oldIP" # # Create the bridge. # /usr/bin/sudo /usr/sbin/brctl addbr br0 /usr/bin/sudo /sbin/ifconfig $1 0.0.0.0 sleep 2 /usr/bin/sudo /usr/sbin/brctl addif br0 $1 # # Stop any dhclient still running. # /usr/bin/sudo /usr/bin/killall dhclient # # Get and IP address and routing information for the bridge # /usr/bin/sudo /sbin/dhclient br0 # # Make sure the tun module is loaded, assign it to our user and bring it up. # /usr/bin/sudo /sbin/modprobe tun echo "Did tun load?" lsmod | grep tun /usr/bin/sudo /usr/sbin/tunctl -b -u $USER sleep 2 /usr/bin/sudo /sbin/ifconfig tap0 up # # Connect the bridge and the tap. # /usr/bin/sudo /usr/sbin/brctl addif br0 tap0 /usr/bin/sudo /bin/chown $USER:users /dev/net/tun /usr/bin/sudo /sbin/iptables -I RH-Firewall-1-INPUT -i br0 -j ACCEPT # # restore the IP address of our "normal" interface. # /usr/bin/sudo /sbin/ifconfig $1 $oldIP So, my question is, why do I need to have a short sleep in these two locations in my script? Without a sleep after the "ifconfig eth0 0.0.0.0", eth0 retains its original IP address instead of having no address. The qemu guest VM still functions correctly but the host system loses connectivity. Likewise, without a sleep after the tunctl command, the device /dev/net/tun isn't present when the next command executes. With the sleeps the script executes as expected and sets up the bridge. Without the sleeps the script fails. Oh yeah. There's another script called downBridge.sh that undoes the bridge if anyone is interested. Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

2 1

SquirrelMail Prefs Deleted
by John Hinton 10 Feb '09

10 Feb '09

FYI. I just had all of the squirrelmail prefs for all the users on one of my servers disappear. I have never had anything like this happen ever before. I'm in the process of finding the needle in the haystack of logs to try to get a handle on this. I'm sending this to the list as a heads up. Seems like Squirrelmail is not doing so good here over the last few months. John Hinton

3 5

rpmforge
by rray_1＠comcast.net 10 Feb '09

10 Feb '09

I have not been able to connect to rpmforge for a couple of days Is it me or is there a problem with the repository Richard

6 12

Sun Java on CentOS 5
by Joseph L. Casale 10 Feb '09

10 Feb '09

The wiki has a long procedure for installing Sun JDK 1.6 but not JRE. What's the benefit to installing the JDK this way (repackaging it)? Thanks! jlc

2 1

process accounting - track PIDs
by nate 10 Feb '09

10 Feb '09

Hello -- I've done some searching but haven't come up with much yet, I was wondering if there was a way to track PID creation and what command was assigned to a PID? I am trying to track down a locking issue with NFS/NLM where the client PID that initiates the unlock request is not the same PID that initiates the lock request. Even with running "ps auxww" in a "while true" loop I cannot seem to capture the PID it comes/goes too fast. I can see the PID right after the one specified, but not the one I want. I tried a couple things I found for the audit system: auditctl -a entry,always -S fork -S vfork -S clone auditctl -a entry,always -S brk -F 'a0=0' auditctl -a task,always auditctl -a exit,always And none of them were able to detect the PID that was created. Another way to approach this is perhaps NLM debugging on the linux client side but I haven't had any luck tracking down useful debugging info on the client side. I saw one post mentioning a kernel patch is needed and it may make it into RHEL 5.3, though this is 4.4, so maybe it is not possible. any ideas? thanks nate

1 0

real SATA RAID
by Paolo Supino 10 Feb '09

10 Feb '09

Hi Last week I had a lengthy thread in which someone indicated the my SIL card is a FRAID (don't know if F stands for the F word or Fake, though it doesn't really matter). I want to replace the controller with a controller that Linux will see the RAID1 group as a single HD and not multiple HDs as it happens with the SIL controller. Recommendations anyone? -- TIA Paolo

11 12

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss