Discuss

discuss@lists.centos.org

34758 discussions

Problems suspending/hibernating Dell Latitude D810 with CentOS 5
by ArcosCom Linux User 05 Oct '07

05 Oct '07

Hi all. I'm having problems trying to suspend/hibernate my Dell Latitude D810 Laptop. Basically I have an ATI X600 videographics and SATA harddrive and run httpd and mysqld daemons on it. I use fglrx (ATI propietary drivers) and the open too with no success. I tried with 1 and 2 screens configurations with no success. I tried with CA and/or with battery with no success. I need some help to debug de suspend/hibernate proccess and help to discover at wich point the process is stopped. When I try to suspend/hibernate, the screens are powered off, but the system not go into suspend mode or power off (when hibernating). Then I have to use power button to power off/on the lapton and when I login into gnome, It says me that had a problem with suspend/hibernate process. All help is apretiated!! Regards

2 2

Cron job
by umair shakil 05 Oct '07

05 Oct '07

Dear All Salam, Is there a possibility that we can run MRTG command in seconds???? The only thing is know is we can run MRTG in one minute other than standard 5 minutes.... Like */1 * * * * root env LANG=C /usr/bin/mrtg /etc/mrtg/test.cfg what if, i want to monitor traffic in seconds??? Regards, Umair Shakil ETD

3 2

DNAT rule for vsftp --(PASSIVE FTP)
by Indunil Jayasooriya 05 Oct '07

05 Oct '07

Hi all, I want to run vsftp behind a firewall.(i.e DMZ zone) . It is runnig as passive ftp. the theroy behind passive ftp is , - FTP server's port 21 from anywhere ( Client initiates connection) - FTP server's port 21 to ports > 1024 (Server responds to client's control port) - FTP server's ports > 1024 from anywhere (Client initiates data connection to random port specified by server) - FTP server's ports > 1024 to remote ports > 1024 (Server sends ACKs (and data) to client's data port) Then, How can I write DNAT rules. pls assume 1.2.3.4 is the ip of the internert interface. #DNAT from Internet to the box running VSFTP @ 192.168.100.3 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 21 -j DNAT --to-destination 192.168.100.3:21 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 1024: -j DNAT --to-destination 192.168.100.3 And also #connect to below ip (actual destination ip) with below ports,due to DNATing iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 21 -m state --state NEW -j ACCEPT iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 1024: -m state --state NEW -j ACCEPT R u okay with the above 4 rules ? If WRONG, pls write down your rules. I am going to put this vsftp server in to PRODUCTION USE. Pls also make sure , my firewall has below rules such as DROP, ESTABLISHED,RELATED. iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT YOUR comments. -- Thank you Indunil Jayasooriya

3 4

Re: [CentOS] DNAT rule for vsftp --(PASSIVE FTP)
by Indunil Jayasooriya 05 Oct '07

05 Oct '07

On 10/5/07, Feizhou <feizhou(a)graffiti.net> wrote: > > > > Do you have ip_nat_ftp loaded too? > > > > > > YES, both ip_conntrack_ftp and ip_nat_ftp. > > pls see below > > > > #Enable tracking mechanism > > /sbin/modprobe -a ip_conntrack_ftp ip_nat_ftp > > Hmm, I think the NEW for port 1024: is not necessary in FORWARD then. > The nat_ftp should handle it and thus make it ESTABLISHED,RELATED and > the ESTABLISHED,RELATED rule should therefore be sufficient. > That meas I do not nedd below rule i FORWARD chain. iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 1024: -m state --state NEW -j ACCEPT So below 3 rules will be enough. iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 21 -j DNAT --to-destination 192.168.100.3:21 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 1.2.3.4 --dport 1024: -j DNAT --to-destination 192.168.100.3 iptables -A FORWARD -p tcp -d 192.168.100.3 --dport 21 -m state --state NEW -j ACCEPT -- Thank you Indunil Jayasooriya

1 0

[OT] DNS queries issue
by Rick Barnes 04 Oct '07

04 Oct '07

Hello, I have a 2 bind nameservers on my network (both running C3.9). Over the last 3 weeks, I've seen a significant increase in the amount of denied cache queries to DNS service and I'm wondering if I should be worried or if there's something I can do to resolve or prevent this. I show millions of lines like: Oct 4 11:49:30 dns1 named[878]: client 68.13.16.20#53535: query (cache) denied If I trim out those and the last message repeated lines, I go from a messages log of 1.8GB to 1.3MB but 2 weeks earlier my messages log for the week was only 339M. Googling for the query (cache) denied didn't seem find anything useful, that this is other name servers attempting to query my servers for info. Its this something I need to bear with in having a publically available DNS server with authoritative domains? Is there a way to suppress these messages from going to syslog and is it a bad idea to do so? There have been no configuration changes except to add 1 or 2 domains to the nameservers. Any help in understanding this would be great. Thanks, Rick

4 3

Auditing software for a CentOS server
by israel.garcia＠cimex.com.cu 04 Oct '07

04 Oct '07

Hi, I'm running some databases's software on a CentOS 4.5 server and I'd like to know if there are any audit software in CentOS4.5 CDs packages?.....I need some software to audit all the files on the server, I mean, if some one delete a file, or change some permissions on any filesystems, if someone copy files to my server and some of this stuff... take in mind I'm not lookign for an IDS.. I just want to audit my server... thanks in advance Israel

4 4

Internet threat management package
by J 04 Oct '07

04 Oct '07

... Looking for a recommendation for a commercial threat management package. ( Think antivirus / antispy / anti-rootkit -- all rolled into one engine ), similar to this product: http://usa.kaspersky.com/products_services/work-space-security.php, which currently only supports one kernel for FC6, and RHEL4, officially. Here's the background. Need to make a decision and investment for a hybrid linux/windows network, with a Samba file server running Centos5. Would like to invest a single product, rather than multiple products, especially since that implies that I'm not giving money to companies that only provide software for Windows. (or, supporting companies that provide software solutions for Linux, depending on how you look at it.) Not even sure if I have the right idea. I would assume that Linux clients are not completely invulnerable to virii, spyware, and rootkits, and that it would make sense, in a small corporate environment to guard against them, the same as Windows machines... but the lack of options seems to suggest otherwise? Anyone have any tips, advice, or recommendations? Thanks!! -- J.

3 2

CentOS-announce Digest, Vol 32, Issue 2
by centos-announce-request＠centos.org 04 Oct '07

04 Oct '07

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2007:0933 Moderate CentOS 4 ia64 elinks - security update (Pasi Pirhonen) 2. CESA-2007:0933 Moderate CentOS 4 s390(x) elinks - security update (Pasi Pirhonen) 3. CESA-2007:0513-01: Moderate CentOS 2 i386 gimp security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Wed, 3 Oct 2007 19:19:25 +0300 From: Pasi Pirhonen <upi(a)centos.fi> Subject: [CentOS-announce] CESA-2007:0933 Moderate CentOS 4 ia64 elinks - security update To: centos-announce(a)centos.org Message-ID: <20071003161925.GA9861(a)centos.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2007:0933 https://rhn.redhat.com/errata/RHSA-2007-0933.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/elinks-0.9.2-3.3.5.2.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://pasi.pirhonen.eu/ Top-postings silently ignored

1 0

Postgres Config File (eg: PGDATA)
by Ow Mun Heng 04 Oct '07

04 Oct '07

Hi guys, need some clarification on whether there is a config file sourced by the init script to determine where PGDATA is located. Right now, it seems like it's not sourced from anywhere by located on the init file itself. Appreciate if you guys can let me know if this is the correct place for altering it.

2 2

denyhosts
by CentOS List 04 Oct '07

04 Oct '07

Hi, My denyhosts stop working. How do i check why isnt it working anymore for me? Thanks Oct 2 22:59:17 beyond sshd[15690]: Failed password for root from 221.7.37.142 port 49836 ssh2 Oct 2 22:59:17 beyond sshd[15692]: Received disconnect from 221.7.37.142: 11: Bye Bye Oct 2 22:59:18 beyond sshd[15701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.7.37.142 user=root Oct 2 22:59:20 beyond sshd[15701]: Failed password for root from 221.7.37.142 port 50929 ssh2 Oct 2 22:59:20 beyond sshd[15702]: Received disconnect from 221.7.37.142: 11: Bye Bye Oct 2 22:59:22 beyond sshd[15706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.7.37.142 user=root Oct 2 22:59:24 beyond sshd[15706]: Failed password for root from 221.7.37.142 port 51911 ssh2 Oct 2 22:59:24 beyond sshd[15707]: Received disconnect from 221.7.37.142: 11: Bye Bye Oct 2 22:59:30 beyond sshd[15718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.7.37.142 user=root Oct 2 22:59:32 beyond sshd[15718]: Failed password for root from 221.7.37.142 port 52741 ssh2 Oct 2 22:59:32 beyond sshd[15719]: Received disconnect from 221.7.37.142: 11: Bye Bye Oct 2 22:59:33 beyond sshd[15724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.7.37.142 user=root Oct 2 22:59:36 beyond sshd[15724]: Failed password for root from 221.7.37.142 port 54591 ssh2 Oct 2 22:59:36 beyond sshd[15725]: Received disconnect from 221.7.37.142: 11: Bye Bye Oct 2 22:59:41 beyond sshd[15735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.7.37.142 user=root

3 4

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss