Discuss

discuss@lists.centos.org

34753 discussions

Security advice, please
by Anne Wilson 26 Dec '08

26 Dec '08

My LAN is behind a Netgear router, which does NAT. On the CentOS server I have fail2ban running. This morning my router reported 3 different IPs attempting to send UDP packets to port 38950, Since each address is only seen 4-5 times, I presume that fail2ban took over after that. GRC reports that ports are stealthed (port 143 was open, but is now closed), but then: Unsolicited Packets: RECEIVED (FAILED) — Your system's personal security countermeasures unwisely attempted to probe us in response to our probes. While some users believe that "tracking down" the source of Internet probes is useful, experience indicates that there is little to gain and potentially much to lose. The wisest course of action is to simulate nonexistence — which your system has failed to do. Your counter-probes immediately reveal your system's presence and location on the Internet. So, two questions really. First, what should I be looking for on the router, to turn off this 'tracking down' activity? Then, I want to read from my own IMAP server when I'm away from home. Is there a better way than opening port 143? Anne

12 24

Fasttrack Repo on CentOS 4
by Vandaman 26 Dec '08

26 Dec '08

A quick question on the fasttrack repo which is now up to date with upstream. Why is the fasttrack repo not in the main CentOS-Base.repo file but contrib which has never had anything is included in the main CentOS-Base.repo file? The goal of CentOS is to be binary-compatible with upstream so fasttrack is "more important" in this regard than contrib. Upsteam ships with the main channels as well as fasttrack. As CentOS includes the repos in one repo file rather than having separate files, this tradition should be considered for fasttrack as well. Regards, Vandaman.

2 2

Question on USB to CF device
by Jerry Geis 26 Dec '08

26 Dec '08

I have this USB to CF device I tried to plug in today. Below is dmesg output when I plug it in. I was hoping it would look just like a USB thumbdrive. Is there something special I would have to do to be able to read the USB to CF device? Looks like its trying to make it /dev/sdd but I continue to get the errors at the end. Thank, jerry Dec 26 08:41:53 devgeisquad kernel: usb 1-4: new high speed USB device using ehci_hcd and address 83 Dec 26 08:41:53 devgeisquad kernel: usb 1-4: configuration #1 chosen from 1 choice Dec 26 08:41:53 devgeisquad kernel: scsi37 : SCSI emulation for USB Mass Storage devices Dec 26 08:41:58 devgeisquad kernel: scsi 37:0:0:0: Direct-Access Generic- Multi-Card 1.00 PQ: 0 ANSI: 0 CCS Dec 26 08:41:58 devgeisquad kernel: usb 1-4: USB disconnect, address 83 Dec 26 08:41:58 devgeisquad kernel: sd 37:0:0:0: [sdd] READ CAPACITY failed Dec 26 08:41:58 devgeisquad kernel: sd 37:0:0:0: [sdd] Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK,SUGGEST_OK Dec 26 08:41:58 devgeisquad kernel: sd 37:0:0:0: [sdd] Sense not available. Dec 26 08:41:58 devgeisquad kernel: sd 37:0:0:0: [sdd] Write Protect is off Dec 26 08:41:58 devgeisquad kernel: sd 37:0:0:0: [sdd] Assuming drive cache: write through Dec 26 08:41:58 devgeisquad kernel: sd 37:0:0:0: [sdd] Attached SCSI removable disk Dec 26 08:41:58 devgeisquad kernel: sd 37:0:0:0: Attached scsi generic sg3 type 0 Dec 26 08:41:59 devgeisquad kernel: usb 1-4: new high speed USB device using ehci_hcd and address 84 Dec 26 08:42:14 devgeisquad kernel: usb 1-4: device descriptor read/64, error -110 Dec 26 08:42:29 devgeisquad kernel: usb 1-4: device descriptor read/64, error -110 Dec 26 08:42:29 devgeisquad kernel: usb 1-4: new high speed USB device using ehci_hcd and address 85 Dec 26 08:42:44 devgeisquad kernel: usb 1-4: device descriptor read/64, error -110

1 0

saslauthd question and sendmail
by swilting 26 Dec '08

26 Dec '08

the commande [root @ r13 *** ~] # sasl2-shared-mechlist Available mechanisms: GSSAPI, ANONYMOUS CRAM-MD5, DIGEST-MD5, LOGIN, PLAIN, NTLM Library media: EXTERNAL, NTLM, PLAIN, LOGIN, DIGEST-MD5, CRAM-MD5, ANONYMOUS, GSSAPI [root @ r13151 ~] # indicates the presence of all options the customer smtp in the page http://www.sendmail.org/~ca/email/auth.html it indicates that you have to edit /etc/sysconfig/saslauthd it seems to me I have to try to change the option pam present in the file in plain login but after impossible to restart /sbin/service saslauthd restart is not working anymore my question is related Sendmail I try to configure I thank you for all your returns sl ps:Excuse my bad English I am French

2 1

Another security question
by Anne Wilson 26 Dec '08

26 Dec '08

I would like to be able to check my bank account while we are on holiday. I know the bank's site is encrypted from the start - the login page is https and Verisign-trust encrypted - but is there any risk in using public wireless networks for jobs like this? It sounds secure enough, but maybe I'm paranoid.... Anne

6 11

Please share some RHCE/RHCT learning material
by Xiaobo Zhu 26 Dec '08

26 Dec '08

Hi all, will anyone please share me some material on RHCE/RHCT, I am fighting for the Quality Engineer in RedHat, and that may help a lot in the coming written exam. Many thanks and Merry Christmas! Cheers, Xiaobo

5 6

FYI: IBM Netvista locking up
by Thomas Dukes 26 Dec '08

26 Dec '08

Hello, Having not been able to run a kernel without locking up since 2.6.9-34.0.2.EL, I think I have found the 'fix'. There are numerous post about this and all suggest its related to ACPI. For me, its APIC. I added the following to grub.conf: noapic apic=off. Been up now 4 days, 22 mins. running 2.6.9-78.0.8.EL. Previously I could get maybe 4 - 6 hours before locking up. Another thing I noticed is that eth1 was on interrupt 9, the same as ACPI. I also changed the interrupt for ACPI in CMOS to 10. I'm happy as a pig in slop!!! I may now upgrade to 5.2.

1 0

need help to play video
by adrian kok 25 Dec '08

25 Dec '08

Hi I click the DVD amd there is an error The playback of this movie requires a MPEG-2 System Stream demuxer plugin which is not installed. Which rpm I can install to play the video? Thank you Send instant messages to your online friends http://uk.messenger.yahoo.com

2 2

Linux backup help
by Kevin Kempter 25 Dec '08

25 Dec '08

Hi All; I'm awaiting a new linux laptop that will be my primary work machine. I want to implement a strategy that allows me as easily as possible to revert back to a former state. My primary concern is a scenario where I apply system updates and it breaks something that for me is critical. I wonder if a simple rsync script would work. If so, here's what I'm thinking: 1) updates are available so I execute the rsync script which pulls any updated files from my laptop to a backup server/drive 2) apply updates 3) if something breaks (even if I can no longer login) I boot the laptop, run the rsync script in the opposite direction (push files from the backup drive to the laptop) I assume that if I were to execute step 3 above that my system would be in the exact state that it was before I ran the updates. Is this a correct assumption ? Are there better approaches ? Thanks in advance..

10 17

yum update via NX connection?
by Les Mikesell 25 Dec '08

25 Dec '08

Somewhere in the process of doing a yum update from a terminal window open in an NX/freenx desktop session, the whole session blew up - perhaps when ssh restarted or when freenx was updated. The yum update did not complete beyond that point and the session was gone when I reconnected. Is that supposed to happen? (Centos 5.x) -- Les Mikesell lesmikesell(a)gmail.com

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss