Discuss

discuss@lists.centos.org

3 participants
34748 discussions

Back to c7 and firewalld
by mark 05 Feb '19

05 Feb '19

If I've missed someone's response, apologies. As I said, my converted rules seem fine, and I can run the script that issues a bunch of direct rules for the built-in FORWARD rule... but when I try firewall-cmd --reload, it tells me error, that FORWARD is a built-in. Now, today, what I've been looking at is to run iptables-save, and what I see is this (in part): -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i lo -j ACCEPT -A FORWARD -j FORWARD_direct -A FORWARD -j FORWARD_IN_ZONES_SOURCE -A FORWARD -j FORWARD_IN_ZONES -A FORWARD -j FORWARD_OUT_ZONES_SOURCE -A FORWARD -j FORWARD_OUT_ZONES -A FORWARD -m conntrack --ctstate INVALID -j DROP -A FORWARD -j REJECT --reject-with icmp-host-prohibited Does this mean that, instead of the format of the entry of the rule being firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD <actual rule) that it should, instead, be firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD_direct <actual rule> ? And if that's what I need to do, that's fine, but I have found *zero* documentation about that. Everything I have found about adding direct rules to a built-in chain don't mention it. Is this so new, it's not documented? mark

1 0

looking for a tool to convert my running system into a installation dvd
by Ralf Prengel 05 Feb '19

05 Feb '19

Hallo, I m looking for a tool to convert my running system into a installation dvd. Thanks for hint. I found some tools working more or less for debian. Thank for hints Ralf Von meinem iPad gesendet

4 3

C7 and firewalld, ongoing
by mark 04 Feb '19

04 Feb '19

I've got my direct rules, converted from a C6 iptables-save. I load them - they're to add to the built-in FORWARD chain. They all seem to load... but then, when I try to --reload, I get Error: BUILTIN_CHAIN: chain 'FORWARD' is built-in chain and firewall-cmd --direct --get-all-rules returns nothing. A sample command in my script is firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD 1 -m state --state RELATED,ESTABLISHED -j ACCEPT So, what am I doing wrong: mark

1 0

Bug in libreoffice or cups?
by mark 04 Feb '19

04 Feb '19

C7 My manager's manager sent out a ppt. Nothing fancy, no animation. 1. Page down doesn't get me to the next page. 2. Slide show decides that on my left monitor, it should fill the entire monitor- no options, with the slide, and the next slide, and that my right-hand monitor shuold be *COMPLETELY* filled with the slide. 3. Hitting <esc> gets rid of the one on the right... and anything then crashes all instances of libreoffice. 4. I just tried to print it out... and suddenly, printer options, or the print box itself, no longer offers me the option to fit to paper, so landscape, and it goes off the page. Esp. that last one - bug or "feature"? mark

1 1

PCMCIA on Centos 7
by Kevin K 02 Feb '19

02 Feb '19

Anyone ever look into what would be required to support 16 bit PCMCIA cards on 7? There are still 64 bit computers out there with at least 1 PCMCIA slot. Thanks, Kevin

1 0

OVAL content
by Gaurav Kumar 01 Feb '19

01 Feb '19

Hi all, Much like Ubuntu and Debian teams have OVAL content published for detecting vulnerabilities, are there plans of publishing such content? e.g. https://people.canonical.com/~ubuntu-security/oval/ On a related note, has anybody looked into using RHEL oval content on CentOS?

1 0

C7, firewalld and rich rules
by mark 01 Feb '19

01 Feb '19

Hi, again, folks, I'm trying to convert a number of iptables rules to firewalld rich rules. I need to do this, because this is, in fact, a firewall, to protect access to servers with sensitive data. It will limit access to the servers behind it to a specific network, and nobody else, and allow only certain services through. What I've been trying to find is a script/program that converts the output of iptables-save to something I can feed to firewall-cmd. Anyone have a link to such? I admit this is annoying. Why is it, when some New Kewl thing is introduced, it *always* expects you to start anew, rather than giving you a tool to convert what you had. I ran into this 15 years ago, trying to put an existing website into bricolage (early CMS), and here I am, trying to do this. Anyway, any links would be appreciated. mark

5 11

Centos 7 and backup solution
by Alessandro Baggi 01 Feb '19

01 Feb '19

Hey there, what type of backup solution do you use on C7? Thanks in advance

17 32

centos dfcp send hostname to microsoft dhcp/dns
by Ralf Prengel 31 Jan '19

31 Jan '19

Hallo, I try to configure my dhcp-client to send the hostname to a microsoft dns/dhcp server. It doesn t work. Nothing happens. A debian system works fine so it seems that the microsoft-side isn t the problem this time. I found some hints but nothing works. Thansk for hints. Ralf

4 9

EPEL repo problem
by SternData 31 Jan '19

31 Jan '19

This keeps logging: Could not get metalink https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=x86_64 error was 14: HTTPS Error 503 - Service Unavailable I've removed the epel-release package, done a "yum clean all", then reinstalled it, but still get the same error. -- -- Steve

4 7

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss