Discuss

discuss@lists.centos.org

34758 discussions

Intrusion Attempt Prevension - iptables problems
by James B. Byrne 13 Jan '09

13 Jan '09

I have these rules in effect: ]# iptables --list --line-numbers Chain INPUT (policy ACCEPT) num target prot opt source destination 1 RH-Firewall-1-INPUT all -- anywhere anywhere Chain FORWARD (policy ACCEPT) num target prot opt source destination 1 RH-Firewall-1-INPUT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) num target prot opt source destination Chain RH-Firewall-1-INPUT (2 references) num target prot opt source destination 1 DROP all -- 202.14.0.0/24 anywhere 2 DROP all -- 220.232.0.0/24 anywhere 3 ACCEPT all -- anywhere anywhere 4 ACCEPT icmp -- anywhere anywhere icmp any 5 ACCEPT esp -- anywhere anywhere 6 ACCEPT ah -- anywhere anywhere 7 ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns 8 ACCEPT udp -- anywhere anywhere udp dpt:ipp 9 ACCEPT tcp -- anywhere anywhere tcp dpt:ipp 10 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED 11 ACCEPT tcp -- 216.185.71.0/24 anywhere tcp dpts:ftp-data:ftp 12 ACCEPT tcp -- 216.185.71.0/25 anywhere tcp dpt:ssh state NEW 13 DROP tcp -- anywhere anywhere tcp dpt:ssh state NEW recent: CHECK seconds: 10 name: THROTTLE side: source 14 ACCEPT tcp -- anywhere anywhere tcp dpt:ssh state NEW recent: SET name: THROTTLE side: source 15 ACCEPT tcp -- 209.47.176.0/25 anywhere tcp dpt:ssh state NEW 16 ACCEPT tcp -- anywhere anywhere tcp dpt:ssh state NEW ... Note particularly line 2. Now, notwithstanding the above, I see this in my /var/log/secure file: Jan 12 13:36:02 inet01 sshd[16056]: Received disconnect from 220.232.152.137: 11: Bye Bye Jan 12 13:36:13 inet01 sshd[16062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=avalon.aty-group.com user=root Jan 12 13:36:15 inet01 sshd[16062]: Failed password for root from 220.232.152.137 port 38722 ssh2 Jan 12 13:36:15 inet01 sshd[16063]: Received disconnect from 220.232.152.137: 11: Bye Bye Jan 12 13:36:26 inet01 sshd[16070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=avalon.aty-group.com user=root Jan 12 13:36:27 inet01 sshd[16070]: Failed password for root from 220.232.152.137 port 39287 ssh2 Jan 12 13:36:28 inet01 sshd[16071]: Received disconnect from 220.232.152.137: 11: Bye Bye Jan 12 13:36:38 inet01 sshd[16078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=avalon.aty-group.com user=root Jan 12 13:36:40 inet01 sshd[16078]: Failed password for root from 220.232.152.137 port 39863 ssh2 Jan 12 13:36:40 inet01 sshd[16079]: Received disconnect from 220.232.152.137: 11: Bye Bye What is wrong with my IPTABLES rules that this connection is permitted? -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

6 7

After BIND update owner changed and restart failed
by Robert Moskowitz 12 Jan '09

12 Jan '09

I just applied the BIND updates. Then I fixed the one file that had a second include of named.ca (remembered that from last time) and did a 'service named restart', and it failed. In messages I found: Jan 10 21:31:17 z9m9z named[31001]: loading configuration from '/etc/named.conf' Jan 10 21:31:17 z9m9z named[31001]: /etc/named.conf:11: open: /etc/named.acl: permission denied Jan 10 21:31:17 z9m9z named[31001]: loading configuration: permission denied Jan 10 21:31:17 z9m9z named[31001]: exiting (due to fatal error) Oh, I remember this from the last update... So off to /var/named/chroot/etc and do a 'chown named:named *' then named started. This apparent changing of file ownership in installing a new set of bind updates so that named cannot access the files seems like something is broken somewhere.

8 20

yum update fails: CentOS 5.2
by Mike -- EMAIL IGNORED 12 Jan '09

12 Jan '09

It gets as far as telling me: Total download size: 207 M It doesn't ask if its ok. But if I type y<enter> it reports: Is this ok [y/N]: Downloading Packages: Then it does nothing. I can't kill it with CRTL-C, but I killed the yum process with kill -9 from another window. I retried it several times; same result. Thanks for your help. Mike.

5 4

anyone using an ATI card and fglrx with 5.2?
by Dave Stevens 12 Jan '09

12 Jan '09

And does it work ok? any special use cases or installation issues? I'm thinking of a 64 bit installation with an RV530 chipset. Dave -- Canada must refuse to be entangled in any more wars fought to make the world safe for capitalism. -- The Regina Manifesto, 1933

2 1

hostapd or other AP software for Centos
by Robert Moskowitz 12 Jan '09

12 Jan '09

Is there a recent rpm available for hostapd? I found 0.6.0 over at atrpms.net via rpmfind. Actually a more recent ver than available for FC8,9, or 10! But http://hostap.epitest.fi/hostapd/ shows the current version is 0.6.7. And does anyone have this running on Centos? Is there a 'better' AP software? I have the Atheros card in my notebook for this....

1 0

CentOS-announce Digest, Vol 47, Issue 4
by centos-announce-request＠centos.org 12 Jan '09

12 Jan '09

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2009:0010 Moderate CentOS 3 i386 squirrelmail - security update (Tru Huynh) 2. CESA-2009:0010 Moderate CentOS 3 x86_64 squirrelmail - security update (Tru Huynh) ---------------------------------------------------------------------- Message: 1 Date: Mon, 12 Jan 2009 16:25:30 +0100 From: Tru Huynh <tru(a)centos.org> Subject: [CentOS-announce] CESA-2009:0010 Moderate CentOS 3 i386 squirrelmail - security update To: centos-announce(a)centos.org Message-ID: <20090112152530.GA31794(a)sillage.bis.pasteur.fr> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory CESA-2009:0010 squirrelmail security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-0010.html The following updated file has been uploaded and is currently syncing to the mirrors: i386: updates/i386/RPMS/squirrelmail-1.4.8-8.el3.centos.1.noarch.rpm source: updates/SRPMS/squirrelmail-1.4.8-8.el3.centos.1.src.rpm You may update your CentOS-3 i386 installations by running the command: yum update squirrelmail Tru -- Tru Huynh (mirrors, CentOS-3 i386/x86_64 Package Maintenance) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEFA581B

1 0

Re: [CentOS] mp3 to wav converter
by David G. Miller 12 Jan '09

12 Jan '09

"John" <jses27(a)gmail.com> wrote: >> > -----Original Message----- >> > From: centos-bounces(a)centos.org >> > [mailto:centos-bounces@centos.org] On Behalf Of Ralph Angenendt >> > Sent: Sunday, January 11, 2009 5:13 AM >> > To: centos(a)centos.org >> > Subject: Re: [CentOS] mp3 to wav converter >> > >> > Robert Moskowitz wrote: >> >> <snip> >>> > > Now that Audacity is no longer available to us... >>> >> <snip> > ------ > This is the install process for Audacity. > Ccrma = planet ccrma <ccrma.stanford.edu> > rf = rpmforge > > audacity-1.3.5-0.5.beta.el5.ccrma.i386.rpm > compat-wxGTK26-2.6.4-2.el5.ccrma.i386.rpm > jack-audio-connection-kit-0.102.20-3.0.el5.i386.rpm > libfreebob-1.0.0-3.0.el5.i386.rpm > libsamplerate-0.1.2-1.2.el5.rf.i386.rpm > soundtouch-1.3.1-6.el5.ccrma.i386.rpm > soundtouch-devel-1.3.1-6.el5.ccrma.i386.rpm > wxGTK-2.8.9-1.el5.rf.i386.rpm > > Ralph, as I understood it the RPMForge Repo was not going to be fixed as I > think Dag posted weeks ago on it. This is the install process I done a a > clients machine after I posted to the list about the problem and was told of > the rpms deps being in the Planet CCRMA Repo and a few others. BTW to that > Poster Thanks.... > > As conversion from Wave to MP3 and back seems of great interest is there any > possobility to get Audacity and the Dependancies in the Extras Repo? > > JohnStanley It's actually a tad easier than that as long as you don't mind forcing wxGTK to stay at 2.6.3-1. I just removed the "current" version of wxGTK (rpm -e wxGTK-2.8.9-1.el5.rf ) and then installed audacity-1.3.0b-1.el5.rf and wxGTK-2.6.3-1.el5.rf by doing a "yum localinstall." Seems to work fine although I have to do updates as "yum --exclude wxGTK update" or the update fails dependency checks. I posted more about how I solved the issues on my blog at http://davenjudy.org/davesBlog/node/40 There could be an issue if some package other than audacity needs the more recent version of wxGTK but I didn't have to force the removal of the package. This tells me that the easiest way to resolve this issue may be to just "hold" wxGTK at 2.6.3-1 until the next version of audacity is ready for prime time. Anyone know of any other packages that are dependent on wxGTK and need the most recent version? Finally, if you don't want to mess with any of this, you can convert an mp3 to wav using mpg123: mpg123 -w infile.wav outfile.mp3 Cheers, Dave -- Politics, n. Strife of interests masquerading as a contest of principles. -- Ambrose Bierce

3 2

Email/GroupWare Suite
by Bo Lynch 12 Jan '09

12 Jan '09

Just wanted to get some thoughts from the list..... We are a public k-12 school and are looking to migrate to a groupware style system for out staff to collaborate better. Currently we are using Squirrelmail/postfix for email. Does anyone have any recommendations/opinions. Any input would be greatly appreciated. Thank you -- Bo Lynch Systems Administrator RedHat Academy Instructor Energy Manager Amelia County Public Schools

22 41

Dealing with 800x480 displays
by Robert Moskowitz 12 Jan '09

12 Jan '09

Has anyone worked around the display size limit on units like the ASUS eee? They list a 800x480 display resolution, and I have encountered Gnome dialogs that require at least 800x600 to see the <OK> button on the bottom of the panel.

5 8

Re: [CentOS] mp3 to wav converter
by Mark Pryor 12 Jan '09

12 Jan '09

Robert, --- On Sun, 1/11/09, Robert Moskowitz <rgm(a)htt-consult.com> wrote: > From: Robert Moskowitz <rgm(a)htt-consult.com> > Subject: Re: [CentOS] mp3 to wav converter > To: "CentOS mailing list" <centos(a)centos.org> > Date: Sunday, January 11, 2009, 4:53 PM > John wrote: > >> -----Original Message----- > >> From: centos-bounces(a)centos.org > >> [mailto:centos-bounces@centos.org] On Behalf Of > Ralph Angenendt > >> Sent: Sunday, January 11, 2009 5:13 AM > >> To: centos(a)centos.org > >> Subject: Re: [CentOS] mp3 to wav converter > >> > >> Robert Moskowitz wrote: > >> > >>> What is there available for Centos? > > > This is the install process for Audacity. > > Ccrma = planet ccrma <ccrma.stanford.edu> > > > > Can you provide the content of a ccrma.repo file please? > > > rf = rpmforge > > > > audacity-1.3.5-0.5.beta.el5.ccrma.i386.rpm > > compat-wxGTK26-2.6.4-2.el5.ccrma.i386.rpm > > jack-audio-connection-kit-0.102.20-3.0.el5.i386.rpm > > libfreebob-1.0.0-3.0.el5.i386.rpm > > libsamplerate-0.1.2-1.2.el5.rf.i386.rpm > > soundtouch-1.3.1-6.el5.ccrma.i386.rpm > > soundtouch-devel-1.3.1-6.el5.ccrma.i386.rpm > > wxGTK-2.8.9-1.el5.rf.i386.rpm > > go here for C5 packages http://ccrma.stanford.edu/planetccrma/software/installplanetcentosfive.html -- Mark

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss