Discuss

discuss@lists.centos.org

34753 discussions

Checking last shutdown state
by Joseph L. Casale 14 Aug '08

14 Aug '08

How do I check the last shutdown, or any if possible for the status related to whether or not it was clean? I need to know if a UPS had successfully shut a few boxes down. Thanks! jlc

2 2

RE: [CentOS] What is vibr0 Network interface and what is it used for
by Trevor Benson 14 Aug '08

14 Aug '08

Sorry missed the answer you provided the first time. T

1 0

RE: [CentOS] What is vibr0 Network interface and what is it used for
by Trevor Benson 14 Aug '08

14 Aug '08

My first guess would be a Virtual Bridge 0 interface. Did you decide to install Xen during the 5.2 installation? If so then it would automatically start up its network bridge to connect your Xen Guests to your local network (if you mapped the Xen Guest interface to work on this bridge). Trevor > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Ivan Varbanov > Sent: Thursday, August 14, 2008 12:06 AM > To: CentOS mailing list > Subject: Re: [CentOS] What is vibr0 Network interface and what is it > used for > > It comes from virtual bridge (if you use vm,xen ...). > > On Wed, Aug 13, 2008 at 7:54 AM, Lunix1618 <lunix1618(a)gmail.com>wrote: > Hello, > > I have see that my machine have an interface that named virbr0. I have > no idea what is it and what it using for ? I am not configured any IP > address for it but I see it had an IP address and see it listed in > firewall config. > Can anyone give me an explanation about this or point me to a document > that describe it ? > > My machine running CentOS 5.2 and do not have internet connection from > the installation time. > > Thanks, > > > virbr0 Link encap:Ethernet HWaddr 00:00:00:00:00:00 inet > addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0 > inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:35 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:0 (0.0 b) TX bytes:9143 (8.9 KiB) > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > > > > > > > __________ Information from ESET NOD32 Antivirus, version of virus > signature database 2806 (20080118) __________ > > The message was checked by ESET NOD32 Antivirus. > > http://www.eset.com >

1 0

RE: [CentOS] [OT] VPN/DMZ best practices
by Trevor Benson 14 Aug '08

14 Aug '08

> There is such a wealth of knowledge and personal experience on this > list > that I'd like to get your opinions on our current situation. > > Currently, we have a simple tri-homed firewall with the internal > network <snip> > 1. What are your recommendations for where the vpn (openvpn on linux) > appliance should reside? In the dmz? Internally and configure the > firewall to allow (and nat) vpn connections? On the unused interface > in > a different dmz than our hosting software? Somewhere else? For basics regarding your environment if Linux is your firewall gateway appliance and you have multiple internal networks behind it, then openvpn on the gateway is the simplest most effective way to connect the networks. Ssl vpn's can be behind network gateway devices, but then depending on the type of connection between sites (site to site or road warrior) you may need to configure additional routes on the gateway or each machine to return traffic. If its on the gateway for your networks then that box decides how to route it out properly. > 2. Should I abandon the single firewall approach and instead use two > firewalls in a more traditional setup (gateway firewall -> dmz -> > internal firewall)? If so, where should the vpn appliance go? We do VPN's, Firewalls, and security for quite a few collocations and companies. Rarely is a company so security conscious that they want multiple layers of firewalls, and the complexity that can bring to the environment. Usually those that do have the staff on hand to troubleshoot complex networks as they need to adjust things. Not to say that this isn't done, many people do, but does your environment necessitate this level of security? If not lets stick to the single device approach. > I'll probably have more questions based on your answers and I look > forward to the responses. Thanks. > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

1 0

[OT] VPN/DMZ best practices
by Scott McClanahan 14 Aug '08

14 Aug '08

There is such a wealth of knowledge and personal experience on this list that I'd like to get your opinions on our current situation. Currently, we have a simple tri-homed firewall with the internal network on one interface, the dmz on another, and the dirty internet on the last. Also, there is a spare interface on the box which is unused. We use CentOS and manually maintain our rule sets and routes since it's not really that complex. I'd like to setup a vpn connection between our office and a remote office, as well as, allow remote users to vpn into there desktops and map samba shares. I would prefer to tie in the openvpn software with our internal openldap server. Our dmz is currently not in use at all but will be soon, hosting our software. Having said all of this, what insights do you have for the following: 1. What are your recommendations for where the vpn (openvpn on linux) appliance should reside? In the dmz? Internally and configure the firewall to allow (and nat) vpn connections? On the unused interface in a different dmz than our hosting software? Somewhere else? 2. Should I abandon the single firewall approach and instead use two firewalls in a more traditional setup (gateway firewall -> dmz -> internal firewall)? If so, where should the vpn appliance go? I'll probably have more questions based on your answers and I look forward to the responses. Thanks.

1 0

Firewall/Proxy with time window access control
by Lunix1618 14 Aug '08

14 Aug '08

Hello all, I have to setup a system that required to block users access internet in work time but let them access internet on specified time window e.g lunch time. I plan to use iptables and squid to do block and web caching but I have no idea how to control access on time frame. Could any one of you experienced with this can give some starting point /document/howto start reading ? My firewal/proxy box will be CentOS 5.2 so I prefer something that can install via yum/rpm Thanks in advance!

5 5

NFS not syncing until directory viewed.
by andylockran 14 Aug '08

14 Aug '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Guys, Having a weird problem with NFS. We have two web-servers under a load balanced system. Web1 and Web2. Currently all files are hosted in Web1, and we use NFS exports to share the files with Web2. Up until recently this was working fine (two/three weeks ago). However, it's starting to behave a little randomly. When a file is uploaded, it appears on Web1, yet is not accessible when browsing the Web2 server. Weirdly though, when I log into the Web2 server to check if it's there, it does appear there with correct timestamp et al.. The funny thing is, that after I check it's on Web2.. it then starts to work thorough the browser. So simply logging in and checking it's there must give it a kick of some sort. If anyone else can give me advice on how to resolve this, it would be much appreciated. Regards, Andy -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFIpAx8auMjEM4rxIQRAuPQAJ41JGA98CIbP8hFIVhVma50mXQOzgCgiZVa ilBmX+CY1ZChtUVvZqP45mY= =9N4b -----END PGP SIGNATURE-----

1 0

What is vibr0 Network interface and what is it used for
by Lunix1618 14 Aug '08

14 Aug '08

Hello, I have see that my machine have an interface that named virbr0. I have no idea what is it and what it using for ? I am not configured any IP address for it but I see it had an IP address and see it listed in firewall config. Can anyone give me an explanation about this or point me to a document that describe it ? My machine running CentOS 5.2 and do not have internet connection from the installation time. Thanks, virbr0 Link encap:Ethernet HWaddr 00:00:00:00:00:00 inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0 inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:35 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 b) TX bytes:9143 (8.9 KiB)

3 3

how to create whole image
by kapil singh 14 Aug '08

14 Aug '08

Hello, I am using Cent OS 5.2 . i want to create one master image of whole running OS becoz i have to do same installation many times on different machines. so any one suggest me to how create and run the image of whole OS at the time of installation or , which escape me to install each and every thing many times. i would not like to create image using dd. any suggestions ?? - - Thanks and Regards Kapil Singh Kushwah Linux System/Network Administrator Hotwax Media Inc. Indore,(M.P) INDIA

7 8

Boot from degraded sw RAID 1
by Eduardo Grosclaude 14 Aug '08

14 Aug '08

OK, this is probably long, and your answer will surely make me slap my forehead really hard... please help me understand what goes on. I intend to install CentOS 5.1 afresh over software RAID level 1. SATA drives are in AHCI mode. I follow basically [1] though I have made some mistakes as will be explained. AFAIK GRUB does not boot off LVM, so I: 1. Build a 100MB RAID-type partition on each disk 2. Build a second RAID-type partition taking the remaining space on each disk 3. Build a RAID 1 device over the small partitions 4. Build a second RAID 1 device over the bigger ones 5. Declare /boot as ext3 to live on the smaller RAID 1 device 6. Declare an LVM PV to live on the bigger one 7. Build a VG on the PV, then build LVs for swap, / and /data on the VG Only problem is, I numbly have failed to follow [1] in that I left Disk Druid to make partitions wherever it chooses, so now I have cross-named partitions... md0 is the bigger RAID 1 device with /dev/sda2 AND /dev/sdb1... and md1 is the smaller one with /dev/sda1 AND /dev/sdb2. Oh well, things can't get complicated on this, I tell myself. Installation goes on well, system boots. I update the system. Now I want to be able to boot from whichever disk survives an accident. If I take out sdb, system boots. If I take out sda, system refuses to work. Aha. GRUB is not installed into sdb's MBR. Reconnect sda, reboot. Prepare for GRUB device juggling as in [1]. Into GRUB console I do > find /grub/stage1 hd(0,0) hd(1,1) > device (hd0) /dev/sdb > root (hd0,1) Filesystem type is ext2fs, partition type 0xfd > setup (hd0) Checking if "/boot/grub/stage1" exists... no Checking if "/grub/stage1" exists... yes Checking if "/grub/stage2" exists... yes Checking if "/grub/e2fs_stage1_5" exists... yes Running "embed /grub/e2fs_stage1_5 (hd0)"... 15 sectors are embedded. succeeded Running "install /grub/stage1 (hd0) (hd0)1+15 p (hd0,1)/grub/stage2 /grub/grub .conf"... succeeded Done. > quit The rationale for this being that, when the faulty disk is removed at boot, the remaining one (currently /dev/sdb) will be addressed as /dev/sda (i.e. hd0 in GRUB parlance). Now I prune /dev/sda and reboot. I see: root(hd0,0) <----------------------------------------------- interesting Filesystem type unknown, partition type 0xfd kernel /vmlinuz-2.6........ ro root=/dev/VolGroup00/LogVol01 rhgb quiet Error 17: Cannot mount selected partition Press any key to continue... Not quite what I expected. I enter GRUB console at boot and repeat the above device juggling. > find /grub/stage1 hd(0,1) > root (hd0,1) > setup (hd0) > quit However, 'quit' seems to fail as grub keeps prompting me without really quitting. After a forced reboot I get the very same error message as above. I edit the GRUB configuration entry at boot (with e command) and see root (hd0,0) as the first line It should be root(hd0,1), so probably GRUB did not write down my modifications. I edit it to read so (e command again), and then boot (b command). Now it works. I rebuild the arrays succesfully. However, I have made a one-time edit and the problem is still there. I understand the error message from the booting process was reasonable: hd(0,0) carries an unknown filesystem -- an LVM device. [1] was right, you definitely want to have exact disk duplicates to keep your life simple. However, I can't see why it shouldn't work the way it is. I can probably rebuild the secondary disk to mimic the primary's partition numbering and "fix" my problem... But, Am I right about the GRUB console commands I was issuing? How can I make them permanent then? I KNOW I did 'quit' from the grub console the first time, when from inside bash, when the system was running. What am I missing? Thank you in advance [1] http://lists.us.dell.com/pipermail/linux-poweredge/2003-July/008898.html -- Eduardo Grosclaude Universidad Nacional del Comahue Neuquen, Argentina

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss