Discuss

discuss@lists.centos.org

34758 discussions

ProFTPd under CentOS 5.2 running FTPS - iptables problem
by happymaster23 26 Jan '09

26 Jan '09

Thank you, I will check it. But - is this only possible solution? SFTP I am using only for administration purposes (yeah, it is quite easy to set it up :-D) and it´s better for me, to make FTPS for customers and SFTP only for me. 2009/1/26 German Andres Pulido <gpulido(a)gtscolombia.com>: >> Hello, >> >> I am setting up ProFTPd daemon (from EPEL repository) under CentOS 5.2 >> and I need encrypted connection. Daemon is configured perfectly, there >> is no problem - if iptables is off connection is smoothly established, >> but when iptables is on, connection in FTP client ends on command LIST >> without response. Last command with response (positive) is PASV. >> >> Thank you for your replies >> Martin Šťastný >> _______________________________________________ >> CentOS mailing list >> CentOS(a)centos.org >> http://lists.centos.org/mailman/listinfo/centos > > Hi! > > The issue is probably with the way FTP is handled. I see two possible > solutions: > > 1. Use the ip_conntrack_ftp module of IPtables. What this does is setting > iptables aware that the data FTP connection should also be allowed since it's > related to the original one on port 21. Google for more info on it (and the > exact module name) > > 2. If you only need encrypted traffic, using SFTP makes sense. It only uses > the port 22 (It's a subsystem of SSH) and its encryption is very good. > > Regards. >

3 3

Bind Issues
by Joseph L. Casale 26 Jan '09

26 Jan '09

I have a bind server running that cannot resolve www.atbfinancialonline.com. I turned on "debug 10" in the named.conf and start up dig on it, but dig just times out, what else can I do to see why exactly it won't resolve this? Thanks! jlc

4 4

ProFTPd under CentOS 5.2 running FTPS - iptables problem
by happymaster23 26 Jan '09

26 Jan '09

Hello, I am setting up ProFTPd daemon (from EPEL repository) under CentOS 5.2 and I need encrypted connection. Daemon is configured perfectly, there is no problem - if iptables is off connection is smoothly established, but when iptables is on, connection in FTP client ends on command LIST without response. Last command with response (positive) is PASV. Thank you for your replies Martin Šťastný

2 1

Ldap login
by Per Qvindesland 26 Jan '09

26 Jan '09

Hello List, I have installed Centos Directory Server to be able to authenticate with ldap on the other servers in the system, the directory server seems to be working fine, but when I configure a test server to authenticate up against this server then it says that there is no such user, I have made sure that the config is correct on the client /etc/ldap.conf is there also the /etc/openldap/ldap.conf is there and both is configured correctly, i have tried to telnet from the client to the server on port 389 and that also works. Does anyone have any idea of what I am missing here? Thanks in advance Regards Per Qvindesland

3 5

Shell Script - Compare packages. rpm.
by Tiago Dias 26 Jan '09

26 Jan '09

Hi, I need a script which makes the package compação rpm's through two text files ... Since a file is the output of the command *rpm-qa > pkg.out * And the second file is a list of several packages rpm's, multiple versions and architectures. My idea is to compare a package *x* file pkg.out with several packages *y* of the file update.out and know whether a package and has a larger version of the package *x* installed and with that I return I have a package to be updated. Does anyone can help me do this comparison? OBS.: The servers do not have access to internet. Here's an example of the packages described in the files: [root@rpm tiago]# tail -n12 pkg.out glibc-devel-2.3.4-2.39 libuser-devel-0.52.5-1.el4.1 libmudflap-4.1.2-14.EL4 iiimf-libs-devel-12.1-13.EL.6 xorg-x11-devel-6.8.2-1.EL.33 lam-libs-7.1.2-8 libdbi-0.6.5-10.RHEL4.1 unixODBC-kde-2.2.11-1.RHEL4.1 perl-Compress-Zlib-1.42-1.el4 MySQL-python-1.2.1_p2-1.el4.1 nmap-3.70-1 sysstat-5.0.5-16.rhel4 [root@rpm tiago]# -- [root@rpm tiago]# cat update.out glibc-devel-2.3.4-2.41.i386.rpm glibc-devel-2.3.4-2.39.i386.rpm glibc-devel-2.3.4-2.36.i386.rpm glibc-devel-2.3.4-2.25.i386.rpm glibc-devel-2.3.4-2.19.i386.rpm glibc-devel-2.3.4-2.13.i386.rpm glibc-devel-2.3.4-2.9.i386.rpm glibc-devel-2.3.4-2.i386.rpm libuser-devel-0.52.5-1.el4.3.i386.rpm libuser-devel-0.52.5-1.el4.1.i386.rpm libuser-devel-0.52.5-1.i386.rpm libmudflap-4.1.2-42.EL4.i386.rpm libmudflap-4.1.2-14.EL4.i386.rpm libmudflap-4.1.1-53.EL4.i386.rpm libmudflap-4.1.0-18.EL4.3.i386.rpm libmudflap-4.1.0-18.EL4.i386.rpm libmudflap-4.0.2-14.EL4.i386.rpm libmudflap-4.0.1-4.EL4.2.i386.rpm libmudflap-4.0.0-0.14.EL4.i386.rpm xorg-x11-devel-6.8.2-1.EL.52.i386.rpm xorg-x11-devel-6.8.2-1.EL.33.0.4.i386.rpm xorg-x11-devel-6.8.2-1.EL.33.0.2.i386.rpm xorg-x11-devel-6.8.2-1.EL.33.0.1.i386.rpm xorg-x11-devel-6.8.2-1.EL.33.i386.rpm xorg-x11-devel-6.8.2-1.EL.31.i386.rpm xorg-x11-devel-6.8.2-1.EL.19.i386.rpm xorg-x11-devel-6.8.2-1.EL.18.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.37.7.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.37.5.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.37.2.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.37.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.36.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.25.1.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.25.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.20.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.16.i386.rpm xorg-x11-devel-6.8.2-1.EL.13.6.i386.rpm xorg-x11-devel-6.8.1-23.EL.i386.rpm lam-libs-7.1.2-15.el4:2.i386.rpm lam-libs-7.1.2-8:2.i386.rpm MySQL-python-1.2.1_p2-1.el4.1.i386.rpm MySQL-python-1.0.0-1.RHEL4.1.i386.rpm sysstat-5.0.5-19.el4.i386.rpm sysstat-5.0.5-16.rhel4.i386.rpm sysstat-5.0.5-15.0.1.el4.i386.rpm sysstat-5.0.5-14.rhel4.i386.rpm sysstat-5.0.5-11.rhel4.i386.rpm sysstat-5.0.5-7.rhel4.i386.rpm sysstat-5.0.5-1.i386.rpm nmap-3.70-1:2.i386.rpm [root@rpm tiago]# Att, -- Tiago Dias da Silva Administrador de Sistemas GNU/Linux HomePage: www.dias.eti.br Email: tiago(a)dias.eti.br "A mente que se abre a uma nova idéia jamais voltará ao seu tamanho original" (Albert Einstein)

3 2

Completeley disabling SELinux?
by Kevin Thorpe 26 Jan '09

26 Jan '09

Hi all, I've set SELinux to disabled using the security and firewall widget but I'm still getting a lot of messages in Logwatch.... NULL security context for user, but SELinux in permissive mode, continuing () So it looks like SELinux is still operating. Can anyone tell me how to turn it off completely? It's my development server under my desk so I reallly don't care about security. thanks

10 13

I may have been rooted - but I may not!?
by Nigel Kendrick 26 Jan '09

26 Jan '09

Morning, I am going to treat this as a rooted box and reinstall from scratch, but any thoughts appreciated: This is a Trixbox Server based on Centos, running kernel 2.6.18-53.1.4.el5 SMP The phone system stopped working but this was traced to a configuration error with a replacement switch (it did not get added to the vlan properly), which meant that Trixbox could not see any DNS servers and this b0rks TB. Anyway, during debugging I went to reboot the server and got the following: /dev/kmem missing IDT table read failed I have run rkhunter, which turns up nothing If have forced a filesystem check - all clean I have checked the logs and history file and cannot see anything The server is behind a hardware firewall and the only ports open are those needed for RTP, IAX2 and SIP - there is no other public access and no user accounts. Having fixed the vlan issue, Asterisk is running fine. I re-created /dev/kmem, but it's missing at subsequent reboots. I have Googled many references to the IDT table problem being associated with the SuckIT rootkit, but I can find no evidence that it's installed. OK, bearing in mind that I will go ahead and reinstall the server (no biggie as I have Trixbox config backups and installing TB is not a big task), I just wanted to check whether there were any IDT table issues that may *NOT* be rootkit related and if there are any simple fixes I can try on the box while it's isolated on the bench? In the other direction, has anyone seen this type of behaviour with any rootkit that is not detected by rkhunter and doesn't leave any obvious footprints? Anything to look for? Happy Monday! Thanks Nigel

2 3

Ping and traceroute...
by John Doe 26 Jan '09

26 Jan '09

Hi everybody, Right now, we are blocking pings and traceroutes to our website. But, in order for our members to test the connection when they are experiencing slow browsing, we are thinking about unblocking them... Are there still any security issues (flooding, etc...) in enabling them or is that an old problem fixed a long time ago? Thanks, JD

6 7

e-sata
by centos＠911networks.com 26 Jan '09

26 Jan '09

Hi, Does anybody has any experience with e-sata on CentOS5.2? - How fast is it? Same as an internal sata? - Does it support sata-2? - Does it "hot-plug" like a USB? -- Thanks http://www.911networks.com When the network has to work

5 5

OT? File order on CentOS/Samba server
by Miguel Medalha 25 Jan '09

25 Jan '09

I hope someone familiar with the way Linux processes files can enlighten me on the following: I recently replaced an old Windows 2000 server with a new machine running CentOS 5.2. It uses Samba 3.2.7 to serve a network of Windows XP clients. We are a newspaper. We use Acrobat Distiller to batch-convert a folder of single-page PostScript files (for print) to a multipage PDF file (for electronic distribution). Running on a workstation, Distiller watches the folder on a Samba share and does the conversion, automatically creating bookmarks, indexes and other information. On the Windows server, Distiller processes the files by filename order: M09010901A001C.ps M09010901A002C.ps M09010901A003C.ps ... and so on. On the Linux server, Distiller processes the files in an order that seems arbitrary, for example: M09010901A021C.ps M09010901A005C.ps M09010901A015C.ps ... and so on. The order Distiller uses is NOT related to the time stamp of the files. I tried to copy the files to the watched folder one by one in the correct order; the result is the same. This creates the need to open the final PDF and reshuffle the pages by hand, which is very time consuming and prone to error. There is a workaround to this: use the runfilex script that comes with Acrobat: it can contain a list of files to convert, in the order you want. Unfortunately, this is not acceptable for us since the process then takes about 40 minutes (irrespective of platform or filesystem), instead of 3 or 4 minutes. My question is: how is the order of files determined by Linux when a particular order is not explicitly required by a program? I noted the following: I have 4 files in a folder: file1.ps, file2.ps, file3.ps, file4.ps. When I order them by date, they appear in Windows Explorer in, say, the following order: 3, 4, 1, 2 If I copy them to a new folder one by one in the order 1, 2, 3, 4, they will still appear in the order 3, 4, 1, 2 when ordered by date. So, what information is transported with the files that makes the Linux server present them to the world in this order? Does someone know a workaround to this situation or can someone point me to information about file ordering with Linux? By the way, I am using the EXT3 file system. I tried the same on a VFAT file system and the result is the same. It seems to be a Linux thing, not a file system thing. Thank you for your patience.

12 49

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss