Discuss

discuss@lists.centos.org

5 participants
34752 discussions

pop3d and iptables lockup
by Bowie Bailey 15 May '06

15 May '06

I am having a problem implementing iptables with Courier's pop3 daemon. If I disable iptables, everything works fine. As soon as I enable it, pop3 will stop working for messages over 32K. Small messages will go through with no problems, but large ones will time out. I get this message from OE: "Your POP3 server has not responded in 60 seconds." And an option to stop or continue waiting. I can wait as long as I want, but it will not download the message. This problem only exists with connections coming from outside our network. Connections from within the network can download large messages with no problems. Has anyone seen this before? I would like to implement iptables for more security, but I can't do it if this problem persists. My server is: P4 2.8, 1GB RAM CentOS 4.3 (fully patched) Courier 0.53.1 My iptables rules were initially created with system-config-securitylevel and then modified from there. The current rules are: Chain INPUT (policy ACCEPT) target prot opt in out source destination RH-Firewall-1-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy ACCEPT) target prot opt in out source destination RH-Firewall-1-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT) target prot opt in out source destination Chain RH-Firewall-1-INPUT (2 references) target prot opt in out source destination ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 255 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:25 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:110 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:53 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:53 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:587 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:80 ACCEPT tcp -- * * 172.16.0.0/16 0.0.0.0/0 state NEW tcp dpt:22 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:443 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:995 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited I have found information on Google indicating that this might be a problem with the MTU or MSS setting, but the solutions given seemed to be aimed at the end user rather than the server. I tried them anyway, but they didn't seem to help. This is what was generally suggested: iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN \ -j TCPMSS --clamp-mss-to-pmtu It didn't get any hits on the FORWARD chain. I put it on the OUTPUT chain and it got some hits there, but didn't have any effect on the problem. I also tried the --set-mss option with the same lack of results. I appreciate any suggestions. -- Bowie

1 0

Setting a different LANG variable for a single GTK application?
by Niki Kovacs 15 May '06

15 May '06

Hi, I just installed GtkCDLabel, a nifty little app to create CD covers in a matter of minutes, if not seconds, and which I've been using on a daily basis on Slackware (previous system). I've encountered some encoding issues. Whenever my CD text contains french special characters like é, è, à and ç, the resulting .ps file displays martian characters instead. 'printenv' shows me that the default LANG variable on my system is fr_FR.UTF-8. So I tried to start the app from the terminal with: $ LANG=fr_FR && gtkcdlabel ... and everything worked fine. The problem is now including this workaround in the corresponding .desktop menu entry in /usr/share/applications. When I try to replace Exec=gtkcdlabel by Exec='LANG=fr_FR && gtkcdlabel' ... GNOME complains about an error. My second attempt included an alias in /etc/bashrc, which resulted in a partial success. Typing 'gtkcdlabel' in gnome-terminal, I get the correct result. But when the app is launched from the desktop menu, it is unimpressed by the alias. Which leaves me clueless. Is there any other place where I could define a more global alias? Niki Kovacs

5 7

wireless card on amd64 and notebook
by Jerry Geis 15 May '06

15 May '06

>Jerry Geis wrote: >>/ All, />>/ />>/ Over the weekend I purchased a linksys wireless-g PCI card />>/ for use in my amd64 box. I downloaded ndiswrapper, compiled, installed, />>/ tried to load the driver off the CDROM and it was a no-go. />>/ />>/ I have do this on another box with an amd sempron. Difference being />>/ 32 bit versus 64 bit... />>/ />>/ Seems there are no 64 bit drivers for the wireless card. />>/ />>/ Anyone have a wireless card working on a 64 bit machine? />>/ What was the card and driver? / >I've been noticing this more and more as I've been playing with new >batches of 64-bit machines. Johnny seems to have hit the nail on the >head when he mentioned something to the effect of "if you're doing >straightforward vanilla server things, x86_64 works fine." Since I >don't have any situations (currently) where I need all the extra address >space (no big honking databases 'round here or machines with more than a >few gigs of RAM), I think I'm just going to revert to the x86 32-bit >build to keep my compatibility options open. >Did you ever get everything working satisfactorily on your athlon_64 >notebook? Did you run the 32-bit or 64-bit version of CentOS? >Cheers, Chris, After alot of fuss I did get my compaq R4000 working OK. I had to put the latest kernel from kernel.org on it and recompile. This fixed the SLOOWWW ness issue. Finding ATI drivers fixed the display issues. Personally I dont like the 1280x800 display. Too small more my taste. I miss at least having 1600x1200 on my old dell insipron. Jerry

1 0

CentOS4 and SiS190 LAN chipset
by Nigel Kendrick 15 May '06

15 May '06

I have an Asus Pundit AE3 setup as an Asterisk server (Asterisk at Home) and the only quirk so far is that the onboard SiS190 LAN chipset is not detected and so I have fitted a full height card for now, but as it's a small barebones design this means I cannot fit the case cover. I have the option of throwing in a low-profile LAN card or compiling the OS/drivers - I have looked into this but it means downloading the SRPMs and (for me) working in unfamiliar territory. Is there a simpler way with a pre-compiled driver that I can load as a module? Thanks Nigel Kendrick

1 0

wireless card on amd64
by Jerry Geis 15 May '06

15 May '06

All, Over the weekend I purchased a linksys wireless-g PCI card for use in my amd64 box. I downloaded ndiswrapper, compiled, installed, tried to load the driver off the CDROM and it was a no-go. I have do this on another box with an amd sempron. Difference being 32 bit versus 64 bit... Seems there are no 64 bit drivers for the wireless card. Anyone have a wireless card working on a 64 bit machine? What was the card and driver? Thanks, Jerry

2 1

PDF viewer?
by Niki Kovacs 15 May '06

15 May '06

Hi, I'm looking for a usable PDF viewer with CentOS 4.3. On my previous install (Slack running XFCE with a handful of GNOME libs), I used Evince, which is just great. Looks like this is an Achilles' heel in CentOS, as I tested three available PDF viewers (ggv, gsview, acroread) with various PDF documents downloaded from the internet (which all display perfectly with Evince): either the result is just ugly, like Lego for the very young. Or the document can't be opened at all and produces an error. Which is annoying, as I have to install this in a production environment in about two weeks. Any suggestions? Niki Kovacs

3 3

NFS versus ISCSI
by Bruno Sousa 15 May '06

15 May '06

Hello ! I was wondering if anyone has done any kind of benchmarks regarding having a NFS export or using ISCSI. If not, is there any idea in how to do those benchmarks. In my case I will us NFS or ISCSI to export some space to run a mysql server, oracle 10g and ordinary file share. At this point I have 3 iscsi "servers" and 3 isci clients, each one running one service. All the servers are connect at 1Gbps. Best regards, Bruno Sousa

2 1

Firefox 1.5.0.3 in CentOSPlus?
by Mike Stankovic 14 May '06

14 May '06

Seeing Fedora have released 1.5.0.3 for fc5 isn't it time for CentOS to rebuild 1.5.0.3 for CentOSPlus or does the current rpm have the patches? I recall last times goof in FC5 firefox appearing in the CentOS one so I assume that CentOSPlus needs to rebuild the FC5 one again. __________________________________________________ Improve the mailing list by performing a simple search before posting and reading the FAQ/etiquette. Protect the integrity of your installation with the yum plugins. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 3

Thin client server setup
by Mace Eliason 14 May '06

14 May '06

Hi, I am thinking of settting up a thin client server setup. I would like to set it up to work with linux and windows. I was going to use Symbiont but it says it needs a different version of linux to install. Has anyone used it with Centos before? Would it be easier to just install LTSP and set it up. I would like to b have a small box that does the dhcp and then allows users to logon to windows or linux terminal servers. Thanks for any suggestions. Mace

3 2

Midi Playback on CentOS 4
by Barry Brimer 14 May '06

14 May '06

I am trying to get MIDI playback working on my CentOS 4 machine. Ultimately, I would like to have it working inside Firefox as well. Any ideas would be greatly appreciated. Thanks, Barry

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss