Discuss

discuss@lists.centos.org

34753 discussions

CESA-2007:0933 Moderate CentOS 4 i386 elinks - security update
by Johnny Hughes 06 Oct '07

06 Oct '07

CentOS Errata and Security Advisory 2007:0933 https://rhn.redhat.com/errata/RHSA-2007-0933.html The following updated files have been uploaded and are currently syncing to the mirrors: i386: elinks-0.9.2-3.3.5.2.i386.rpm src: elinks-0.9.2-3.3.5.2.src.rpm

1 0

flex package marked as fc6 and no flex-devel?
by Steven Haigh 06 Oct '07

06 Oct '07

Hi all, I'm in the middle of setting up a build environment for OpenWRT and it looks like the packages need flex. Looking at the CentOS repositories, it looks as though the flex package is tagged as fc6 - it also looks like there is no flex-devel package at all. Does anyone know what the go is here? Available Packages Name : flex Arch : i386 Version: 2.5.4a Release: 41.fc6 Size : 124 k Repo : base -- Steven Haigh Email: netwiz(a)crc.id.au Web: http://www.crc.id.au Phone: (03) 9001 6090 - 0412 935 897

5 4

CentOS-announce Digest, Vol 32, Issue 4
by centos-announce-request＠centos.org 06 Oct '07

06 Oct '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. Planet CentOS (Daniel de Kok) ---------------------------------------------------------------------- Message: 1 Date: Fri, 05 Oct 2007 14:53:24 +0200 From: Daniel de Kok <daniel(a)centos.org> Subject: [CentOS-announce] Planet CentOS To: centos-announce(a)centos.org Message-ID: <1191588804.3885.0.camel(a)mindbender.taickim.com> Content-Type: text/plain The CentOS team is pleased to announce the Planet CentOS website. Are you wondering what is cooking in the kitchens of the CentOS developers? Wait no longer, Planet CentOS aggregates the blogs of CentOS contributors, merging them into one feed. You can read Planet CentOS with your favorite RSS/Atom reader, or through the Planet CentOS website. The Planet CentOS website, with links to RSS and Atom feeds can be found at: http://planet.centos.org/ With kind regards, The CentOS team ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 32, Issue 4 **********************************************

1 0

Re: [CentOS] Re: Asterisk
by Les Bell 06 Oct '07

06 Oct '07

William Warren <hescominsoon(a)emmanuelcomputerconsulting.com> wrote: >> have you tried trixbox which is an asterisk version based off of Centos? << Seconded. I have an 8-extension, 2-POTS-line + VoIP Asterisk setup here which started life as an Asterisk@Home (precursor to trixbox) install the best part of 2 years ago. It's based on Centos 4.5, and I enabled various repos to keep the base distro up-to-date but have maintained the asterisk, asterisk-addons, zaptel, etc. packages manually ever since, no problem. >From my experience, building Asterisk is only where the fun starts - you then have to configure your phones and write a callplan. I did that for a basic installation, but trixbox will give you a nice web-based management interface with MySQL CDR integration, flash console and a bunch of other stuff (automated attendant, voicemail, wakeup calls, etc) working pretty much out of the box. I've tweaked the callplan and added some functionality, but my basic goal was to get a phone system up and running to support two professional consultancies without it becoming a full-time job in its own right. Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909

1 0

CentOS-announce Digest, Vol 32, Issue 3
by centos-announce-request＠centos.org 05 Oct '07

05 Oct '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0928-05: Low CentOS 2 i386 tzdata enhancement (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Fri, 05 Oct 2007 11:33:58 +1000 From: John Newbigin <jnewbigin(a)ict.swin.edu.au> Subject: [CentOS-announce] CESA-2007:0928-05: Low CentOS 2 i386 tzdata enhancement To: centos-announce(a)centos.org Message-ID: <47059486.6010307(a)ict.swin.edu.au> Content-Type: text/plain; charset=us-ascii; format=flowed The following errata for CentOS-2 have been built and uploaded to the centos mirror: RHEA-2007:0928-05 tzdata enhancement update Files available: tzdata-2007h-1.el2_1.noarch.rpm More details are available from the RedHat web site at https://rhn.redhat.com/errata/rh21as-errata.html The easy way to make sure you are up to date with all the latest patches is to run: # yum update -- John Newbigin Computer Systems Officer Faculty of Information and Communication Technologies Swinburne University of Technology Melbourne, Australia http://www.ict.swin.edu.au/staff/jnewbigin ------------------------------ _______________________________________________ CentOS-announce mailing list CentOS-announce(a)centos.org http://lists.centos.org/mailman/listinfo/centos-announce End of CentOS-announce Digest, Vol 32, Issue 3 **********************************************

1 0

Problems suspending/hibernating Dell Latitude D810 with CentOS 5
by ArcosCom Linux User 05 Oct '07

05 Oct '07

Hi all. I'm having problems trying to suspend/hibernate my Dell Latitude D810 Laptop. Basically I have an ATI X600 videographics and SATA harddrive and run httpd and mysqld daemons on it. I use fglrx (ATI propietary drivers) and the open too with no success. I tried with 1 and 2 screens configurations with no success. I tried with CA and/or with battery with no success. I need some help to debug de suspend/hibernate proccess and help to discover at wich point the process is stopped. When I try to suspend/hibernate, the screens are powered off, but the system not go into suspend mode or power off (when hibernating). Then I have to use power button to power off/on the lapton and when I login into gnome, It says me that had a problem with suspend/hibernate process. All help is apretiated!! Regards

2 2

Cron job
by umair shakil 05 Oct '07

05 Oct '07

Dear All Salam, Is there a possibility that we can run MRTG command in seconds???? The only thing is know is we can run MRTG in one minute other than standard 5 minutes.... Like */1 * * * * root env LANG=C /usr/bin/mrtg /etc/mrtg/test.cfg what if, i want to monitor traffic in seconds??? Regards, Umair Shakil ETD

3 2

DNAT rule for vsftp --(PASSIVE FTP)
by Indunil Jayasooriya 05 Oct '07

05 Oct '07

Hi all, I want to run vsftp behind a firewall.(i.e DMZ zone) . It is runnig as passive ftp. the theroy behind passive ftp is , - FTP server's port 21 from anywhere ( Client initiates connection) - FTP server's port 21 to ports > 1024 (Server responds to client's control port) - FTP server's ports > 1024 from anywhere (Client initiates data connection to random port specified by server) - FTP server's ports > 1024 to remote ports > 1024 (Server sends ACKs (and data) to client's data port) Then, How can I write DNAT rules. pls assume 1.2.3.4 is the ip of the internert interface. #DNAT from Internet to the box running VSFTP @ 192.168.100.3 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 21 -j DNAT --to-destination 192.168.100.3:21 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 1024: -j DNAT --to-destination 192.168.100.3 And also #connect to below ip (actual destination ip) with below ports,due to DNATing iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 21 -m state --state NEW -j ACCEPT iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 1024: -m state --state NEW -j ACCEPT R u okay with the above 4 rules ? If WRONG, pls write down your rules. I am going to put this vsftp server in to PRODUCTION USE. Pls also make sure , my firewall has below rules such as DROP, ESTABLISHED,RELATED. iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT YOUR comments. -- Thank you Indunil Jayasooriya

3 4

Re: [CentOS] DNAT rule for vsftp --(PASSIVE FTP)
by Indunil Jayasooriya 05 Oct '07

05 Oct '07

On 10/5/07, Feizhou <feizhou(a)graffiti.net> wrote: > > > > Do you have ip_nat_ftp loaded too? > > > > > > YES, both ip_conntrack_ftp and ip_nat_ftp. > > pls see below > > > > #Enable tracking mechanism > > /sbin/modprobe -a ip_conntrack_ftp ip_nat_ftp > > Hmm, I think the NEW for port 1024: is not necessary in FORWARD then. > The nat_ftp should handle it and thus make it ESTABLISHED,RELATED and > the ESTABLISHED,RELATED rule should therefore be sufficient. > That meas I do not nedd below rule i FORWARD chain. iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 1024: -m state --state NEW -j ACCEPT So below 3 rules will be enough. iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 21 -j DNAT --to-destination 192.168.100.3:21 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 1024: -j DNAT --to-destination 192.168.100.3 iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 21 -m state --state NEW -j ACCEPT -- Thank you Indunil Jayasooriya

1 0

[OT] DNS queries issue
by Rick Barnes 04 Oct '07

04 Oct '07

Hello, I have a 2 bind nameservers on my network (both running C3.9). Over the last 3 weeks, I've seen a significant increase in the amount of denied cache queries to DNS service and I'm wondering if I should be worried or if there's something I can do to resolve or prevent this. I show millions of lines like: Oct 4 11:49:30 dns1 named[878]: client 68.13.16.20#53535: query (cache) denied If I trim out those and the last message repeated lines, I go from a messages log of 1.8GB to 1.3MB but 2 weeks earlier my messages log for the week was only 339M. Googling for the query (cache) denied didn't seem find anything useful, that this is other name servers attempting to query my servers for info. Its this something I need to bear with in having a publically available DNS server with authoritative domains? Is there a way to suppress these messages from going to syslog and is it a bad idea to do so? There have been no configuration changes except to add 1 or 2 domains to the nameservers. Any help in understanding this would be great. Thanks, Rick

4 3

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss