Discuss

discuss@lists.centos.org

34753 discussions

Yum errors
by Scott Silva 23 Jul '08

23 Jul '08

I'm having a problem with a fairly new server. Running yum upgrade I get the following: Traceback (most recent call last): File "/usr/bin/yum", line 29, in ? yummain.main(sys.argv[1:]) File "/usr/share/yum-cli/yummain.py", line 105, in main result, resultmsgs = base.doCommands() File "/usr/share/yum-cli/cli.py", line 289, in doCommands self._getTs() File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 85, in _getTs self._getTsInfo() File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 91, in _getTsInfo self._tsInfo.setDatabases(self.rpmdb, self.pkgSack) File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 537, in <lambda> pkgSack = property(fget=lambda self: self._getSacks(), File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 392, in _getSacks self.repos.populateSack(which=repos) File "/usr/lib/python2.4/site-packages/yum/repos.py", line 242, in populateSack sack.populate(repo, mdtype, callback, cacheonly) File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 168, in populate dobj = repo_cache_function(xml, csum) File "/usr/lib64/python2.4/site-packages/sqlitecachec.py", line 42, in getPrimary self.repoid)) TypeError: Can not prepare packages insertion: table packages has no column named location_base -- MailScanner is like deodorant... You hope everybody uses it, and you notice quickly if they don't!!!!

4 13

prevent runaway PID taking down server (RAM/swap)
by Ed Donahue 23 Jul '08

23 Jul '08

Is there a way I can prevent processes from taking up all the ram then swap until the box crashes/freezes? I'm using IEs4Linux and the wineserver seems to start taking up RAM until my box dies, it happens slowly. I am able to kill the sucker now, but I'd like to not have to worry about that. sar -r 01:00:01 PM kbmemfree kbmemused %memused kbbuffers kbcached kbswpfree kbswpused %swpused kbswpcad 01:10:01 PM 5812 949580 99.39 5560 67688 189912 1841696 90.65 33300 01:20:01 PM 4736 950656 99.50 4832 119364 0 2031608 100.00 46104 01:30:02 PM 8788 946604 99.08 1004 32360 4 2031604 100.00 10672 01:52:50 PM LINUX RESTART

3 2

Re: [CentOS] Bind Firewall Rules
by Scott Mazur 23 Jul '08

23 Jul '08

On Wed, 23 Jul 2008 12:40:42 -0400, John Hinton wrote > I'm running caching nameservers on almost all of my systems and then > also three nameservers. All are available publicly. I too had hard > coded bind to port 53. I also had specifically opened port 53 > through the firewall. But now, it appears that using only port 53 is > a bad thing. From what I read, both the port and the ID need to > change to be secure > (even this is just security through obscurity). It's sounding like > I'll need to open a port range, but I don't know what a 'good > practice' will be. Port 53 is the dns port used by the world (and your internal private networks) to query your name server. If your name server is intended to provide domain resolution publicly just how do you expect the public to find it if you're randomly changing ports? The world won't port scan your machine until it finds a name server answering on one of them. Dns requests, internal or external, will come into your box on port 53 and there would be no point to running a name server (private, public, caching or otherwise) if this port is not open through the firewall. You've mis-understood the issues of dns security. It would be dangerous to start messing with your firewall rules until you understand exactly how the process works.

2 1

df command reports inaccurate results?
by Sean Carolan 23 Jul '08

23 Jul '08

Can anyone help make sense of this? This is an ext3 partition. It's only showing 403GB out of 426GB used, but then it says only 632MB available? Where'd the extra ~25GB go? [scarolan@server]$ df -H /disks/vrac5 Filesystem Size Used Avail Use% Mounted on /dev/sdb2 426GB 403GB 632MB 100% /disks/vrac5

5 8

fail2ban needs shorewall?
by Kai Schaetzl 23 Jul '08

23 Jul '08

I want to try out fail2ban and notice that both, kbs-CentOS-Testing and ATrpms, have shorewall as a dependency. I do not use shorewall and have never used it. I have my own iptables/firewall script and am happy with it. Can I install shorewall without any ill effects to my current sue of iptables or would I need to use shorewall for firewalling from that point on? (It may be a good product, but I really don't want to learn yet another rule syntax.) Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

2 4

MOUSE problem in Centos 5.1
by Gopinath Achari 23 Jul '08

23 Jul '08

HI All, i installed Cent OS 5.1 on a INtel P4 PC. it got installed successfully. Upto the login prompt the mouse cursor appears on the screen. then cursor disappers. i we move the mouse. the cursor movement is felt when it is on a icon or when right click is done but the cursor is transparent. i dont know what is the problem. the mouse cursor is seen on the CUI prompt but not in GUI. Please help me what to do. the mouse is of Logitech make and is a ball mouse Regards, Gopinath

2 1

Re: [CentOS] Ideas for stopping ssh brute force attacks
by Les Bell 23 Jul '08

23 Jul '08

"David Dyer-Bennet" <dd-b(a)dd-b.net> wrote: >> Yes, but if there are *any* ports exposed, seems like those are equally possible. << Sort of. Changing the port used by sshd stops the completely clueless script kiddies, since they don't even bother looking at anything other than port 22. Putting it way up high, among the ephemeral ports, will slow down the slightly more clueful who perform nmap scans, since nmap only scans around 1500 ports by default, and if sshd isn't running on one of those, they won't spot it. However, it won't deter the intelligent or curious attacker; these guys will scan all ports (slowly, so you may not even notice them) and they will use banner enumeration to identify the services, rather than assuming. Moving sshd to a non-standard port is one of the worst examples of relying on security by obscurity. Its only advantage is that it cuts out some noise in the logs, but proper precautions do that as well, without lulling you into a false sense of security. Rate limiting, combined with enforcement of really strong passwords, or even better, public/private key authentication, is real security. A useful additional layer of defence, if you want it, is a daemon that will watch for port scans on the simple services ports and immediately insert a firewall rule to block that source - such as the old PortSentry, if you can find it, or some more modern equivalent. Of course, this won't do much to defend against some types of stealthy scans, such as idle time scans. Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

6 5

OT: Making BT/Yahoo account accessible to plain router
by Anne Wilson 23 Jul '08

23 Jul '08

My daughter has a BT account, with a BT supplied single-port router. I'd like to replace it with a standard router, but the settings appear to be totally hidden. If anyone reading uses BT, could you please tell me where to find the info? Maybe off-list, to save bandwidth for others/ Thanks Anne

3 4

TLA -- GNU Arch 1
by Robert Moskowitz 23 Jul '08

23 Jul '08

Was it ever a part of Centos? Supposedly I need it and my colleague is providing me with an rpm, but he implies that 'seems to have been removed from Centos'?

4 4

VNC server problem
by Gopinath Achari 23 Jul '08

23 Jul '08

HI all, i am configuring VNC server in CentOS 5.1. i have enables this two lines in /etc/sysconfig/vncserver file VNCSERVERS="2:vnc" VNCSERVERARGS[2]="-geometry 1024x768 -depth 24" here i have created a user vnc and set the password using vncpasswd cmd. then i started the vncserver # vncserver New 'localhost.localdomain:1 (gopinath)' desktop is localhost.localdomain:1 Starting applications specified in /root/.vnc/xstartup Log file is /root/.vnc/localhost.localdomain:1.log The above message was displayed about executing vncserver command. no OK status was displayed. then i used cmd vncviewer localhost.localdomain:5901 it prompted for the passwd i gave the password then it started vncviewer but in that only cursor is displayed which can be moved. but no GUI display. Please help me on this if any one knows i am still a beginner to linux

5 8

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss