Discuss

discuss@lists.centos.org

34753 discussions

Iptables Rpm Missing Modules
by Ben Mohilef 10 Oct '05

10 Oct '05

The current build of iptables does not appear to include some modules. Among these are ipt_recent.so, a very handy module in deflecting the current flurry of sshd dictionary attacks. Lineox appears to have the same problem. This is because the RedHat source rpm spec file is not explicit in the kernel directory location and that omission affects these few modules. Required changes in the spec file are in bold and italics (everywhere there is a /usr just replace it by /usr/src/linux-2.4): make COPT_FLAGS="$OPT" KERNEL_DIR=/usr/src/linux-2.4 LIBDIR=/%{_lib} make COPT_FLAGS="$OPT" KERNEL_DIR=/usr/src/linux-2.4 LIBDIR=/%{_lib} iptables- save iptables-restore make COPT_FLAGS="$OPT" KERNEL_DIR=/usr/src/linux-2.4 LIBDIR=/%{_lib} ip6tables-save ip6tables-restore make install DESTDIR=%{buildroot} KERNEL_DIR=/usr/src/linux- 2.4 BINDIR=/sbin LIBDIR=/%{_lib} MANDIR=%{_mandir} %if %{build_devel} make install-devel DESTDIR=%{buildroot} KERNEL_DIR=/usr/src/linux-2.4 BINDIR=/sbin LIBDIR=%{_libdir} MANDIR=%{_mandir} To fix this yourself, first download the iptables source rpm, install it, modify the spec (/usr/src/redhat/SPECS/iptables.spec) and run rpmbuild -ba /usr/src/redhat/SPECS/iptables.spec . It runs quickly and produces an rpm which contains all of the missing modules.

1 0

Lost my menu options again - KDE messes with Gnome?
by Dave Gutteridge 10 Oct '05

10 Oct '05

This was a problem I had a while back. I lost the "Preferences" menu item in my "Applications" menu in Gnome. After much discussion, the following commands got my "Preferences" menu item back, along with all the applications inside of it: rpm -e redhat-artwork redhat-menus --nodeps --allmatches yum install redhat-artwork redhat-menus But... For some reason it isn't working this time. My "Preferences" option in my application menu is gone, and I don't even know why it left. And doing the commands above aren't getting them back. Actually, I have some suspicion as to why I've lost my "Preferences" option in my "Applications" menu. Last time this happened, it happened after I installed Amarok and ended up with a bunch of KDE settings I didn't want. This time, I installed Quanta, which required some KDE libraries, but it didn't seem to cause as much chaos as last time. However, the implications are that for some reason, having any KDE programs seems to affect my Gnome options. What's up with that? Dave

8 30

CentOS Mailing List
by T. V. Sivaraman 10 Oct '05

10 Oct '05

Confirm -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Dr. T. V. Sivaraman, Scientist, National Geophysical Research Institute, Uppal Road, Hyderabad - 500 007. INDIA. Telephone: 91-40-23434644 (Office), 91-40-23434828 (Home) FAX: 91-40-23434651, 91-40-27171564 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Email: tvsraman(a)ngri.res.in, tvsraman_45(a)yahoo.com Web: www.ngri.org.in ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

mkinitrd-4.2.1.3-1 unsuitable for 2.6.13+ kernels?
by Simen Thoresen 10 Oct '05

10 Oct '05

Hi all, I have a Opteron-machine with the MPT SCSI-controller (Symbios 53c1030). At least in i386-mode, mkinitrd does not seem to build a usable initrd for 2.6.13.x (.3 tested) with this kernel. With 2.6.12.6 it works fine. I have not tested this in x86_64 -mode yet. The symptom is that mptbase and mptscsih load, but mptscsih does not discover any controllers nor drives, and things like Booting the kernel. Red Hat nash version 4.1.18 starting mkrootdev: lable / not found mount: error 2 mounting ext3 mount: error 2 mounting none switchroot: mount failed : 22 umount : /initrd/dev failed : 22 kernel panic - not syncing : Attempted to kill init occur. I have been informed that there are changes to the mpt-driver options between 2.6.12 and 2.6.13, and that part of the menuconfig-screens does indeed look different. So - are there any plans for an mkinitrd upgrade, either from CentOS or RH? Alternatively, is there a workaround for this problem? I have not spent much time picking initrds appart yet, but I will be happy to assist in testing. Yours, -S -- Simen Thoresen, Wulfkit Support, Dolphin ICS http://www.tysland.com/~simentt/cluster

2 1

Mailman + htDig
by Thomas E Dukes 10 Oct '05

10 Oct '05

Hello, Does anyone know if there is an rpm for mailman with the htdig integration? If not, how hard is to patch mailman to use this feature? Anyone have this working? TIA

2 2

CentOS-announce Digest, Vol 8, Issue 3
by centos-announce-request＠centos.org 09 Oct '05

09 Oct '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:791 Important CentOS 4 x86_64 thunderbird - security update (Johnny Hughes) 2. CESA-2005:791 Important CentOS 4 i386 thunderbird - security update (Johnny Hughes) 3. CESA-2005:346 Low CentOS 4 i386 slocate - security update (Johnny Hughes) 4. CESA-2005:346 Low CentOS 4 x86_64 slocate - security update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Sat, 08 Oct 2005 07:29:15 -0500 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2005:791 Important CentOS 4 x86_64 thunderbird - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1128774555.3699.24.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:791 https://rhn.redhat.com/errata/RHSA-2005-791.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: thunderbird-1.0.7-1.4.1.centos4.x86_64.rpm src: thunderbird-1.0.7-1.4.1.centos4.src.rpm

1 0

Paranoid Firewalling
by Kirk Bocek 09 Oct '05

09 Oct '05

After reading this article: http://www.theregister.co.uk/2005/08/31/blocking_chinese_ip_addresses/ I got to thinking that there is really no reason for *any* traffic to hit my servers that comes from anywhere outside North America. So I wrote the perl script at the end of this posting to extract selected IP ranges posted at iana.org and convert them into iptables rules blocking any traffic from those ranges. I'd like comments on this. I know it's not perfect as there are both corporate and 'various registries' address ranges that aren't covered but it's a start. Since my company web site is hosted elsewhere but we are doing the DNS, I put in the exceptions for DNS. In my ten or so years of administering Linux servers, following the usual security precautions has been sufficient: closing unused ports, keeping up to date on patches, limiting permissions and logins, etc. I've never had a system broken into. But if I can lessen the bandwidth used up by brute-force password attacks and port scans at the cost of a few CPU cycles, that's a good thing. I've had the new rules up on one server for about half an hour and can see about 10 or so connection attempts from the addresses in question. What do you think? Kirk Bocek #!/usr/bin/perl # # iana-makeiptables.pl # Convert IPv4 Address assignment document from iana.org into # a shell script that will insert iptables rules to block traffic # from selected regional registries. # # Copy the data from: # http://www.iana.org/assignments/ipv4-address-space # and save it to the file in $datafile (here -- iana-assignments.dat) # Then edit the 'my @block' line below to select the registries you want to block # # Sept 6, 2005 Kirk Bocek # use strict; my $datafile='iana-assignments.dat'; my $outfile='iana-block.sh'; #Registries are ARIN APNIC RIPE LACNIC AfriNIC my @block=qw/APNIC RIPE LACNIC AfriNIC/; die "Data File $datafile Not Found!" unless -f $datafile; die "Cannot open $outfile for writing!" unless open OUT, ">$outfile"; die "Cannot open $datafile for reading!" unless open DAT, "<$datafile"; print OUT "#!/bin/bash\n"; print OUT "# Blocking traffic from: @block\n"; print OUT "# Generated by iana-makeiptables.pl\n"; foreach (<DAT>) { next unless /^\d{3}\/8/; BLOCK: foreach my $reg (@block) { if (/^(\d{3})\/8.*$reg/) { my $x=$1; $x=substr($x,1) if substr($x,0,1) eq '0'; #Strip leading zero $x=substr($x,1) if substr($x,0,1) eq '0'; #Might be two of them print OUT 'iptables -I INPUT -s ',$x,".0.0.0/8 -j DROP\n"; last BLOCK; } } } #Put any exceptions here #For example, I'm allowing DNS traffic print OUT "iptables -I INPUT -p tcp -m tcp --dport 53 -j ACCEPT\n"; print OUT "iptables -I INPUT -p udp -m udp --dport 53 -j ACCEPT\n"; close OUT; close DAT; # End of iana-makeiptables.pl

11 23

Centos 4.1 & ReiserFS
by Ajay Sharma 09 Oct '05

09 Oct '05

Hi, I'm upgrading my mail server tomorrow from CentOS 3 to CentOS 4.1. And I'd like to use ReiserFS this time around since everyone says it performs much better with smaller files (all the mail is in Maildir's instead of mbox'es). Right now I have a pretty basic filesystem layout: /boot, swap, and /. Am I making the correct assumption that I can't install CentOS with the CentOSPlus kernel? So I need to split it up: /boot -> 128MB ext3 swap / -> 4 GB ext3 <free space> Then i'll install the OS, upgrade the kernel to the CentOSPlus kernel, install reiserfs-utils, format the free space as resierfs and mount it as /home. This is an older server so I'm trying to suck as much out of it before forcing the company to upgrade. I figure a shiny new 2.6 kernel and reiserfs should buy me some more time. Thoughts? Suggestions? Tips? Thanks, Ajay

1 0

Problem(s) solved
by Sam Drinkard 09 Oct '05

09 Oct '05

I think I solved the problem. ACPI was disabled in the bios. I had to run kudzu manually once the system came up, but it removed all the other stuff and added the new. All is well (again) ... Sam -- Snowman

1 0

Boot problems
by Sam Drinkard 09 Oct '05

09 Oct '05

My dead S-M motherboard is not so dead. Short between the seat and keyboard :-) I'm running into some problems booting up tho. When kudzu runs, it finds all the stuff from the Tyan board that the super micro board does not have. I've told it to remove the configurations for all those things, but kudzu never goes into the probing for new devices after removing, but halts or hangs at "enabling swap space". Nothing happens after that. Prior to all this tho, in the boot screen I see the message that ACPI cannot find the RSDP ?? whatever that is. Ok.. this time I didn't do anything, but just let it progress into the bootup, and it continues and completes, gives me a login, etc., like everything is OK. What should I do to get kudzu to remove all the stuff that is not there now, and find the new hardware? Thanks much.... Sam -- Snowman

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss