Discuss

discuss@lists.centos.org

5 participants
34752 discussions

CentOS-announce Digest, Vol 7, Issue 12
by centos-announce-request＠centos.org 16 Sep '05

16 Sep '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2005:766 Important CentOS 3 s390(x) squid - security update (Pasi Pirhonen) 2. CESA-2005:766-01: Important CentOS 2 i386 squid security update (John Newbigin) 3. CESA-2005:501 Important CentOS 3 s390(x) XFree86 - security update (Pasi Pirhonen) 4. CESA-2005:773-01: Important CentOS 2 i386 mod_ssl security update (John Newbigin) ---------------------------------------------------------------------- Message: 1 Date: Thu, 15 Sep 2005 15:11:32 +0300 From: Pasi Pirhonen <upi(a)papat.org> Subject: [CentOS-announce] CESA-2005:766 Important CentOS 3 s390(x) squid - security update To: centos-announce(a)centos.org Message-ID: <20050915121132.GA15823(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2005:766 https://rhn.redhat.com/errata/RHSA-2005-766.html The following updated files have been uploaded and are currently syncing to the mirrors: s390: updates/s390/RPMS/squid-2.5.STABLE3-6.3E.14.s390.rpm s390x: updates/s390x/RPMS/squid-2.5.STABLE3-6.3E.14.s390x.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

ppc questions
by Karanbir Singh 16 Sep '05

16 Sep '05

Chris Mauritz wrote: > > The 32bit PPC release is for the older G3/G4 macs, no? I've got a > pile of unused G4 400-800mhz powermacs just sitting around The ppc32 distro will work on any NewWorld G3, G4 based machine ( and 32bit ibm power, like the older rs6k's ) - it _also_ works fine on the MacMini and G4 Xserve's. With some common sense tweaks, a G4 450Mhz is a very usable machine running CentOS4 in 386MB of ram. Much more usable than OSX Tiger. > that I'd love to > get some use out of, but I don't think they'd be very responsive with > OSX tiger. how much of Ram do these machines have ? if its anything >=256 megs, you have very functional and usable desktop machines there. > My children's school has a lab full of Macs so I'm > wondering if I donated the machines, installed CentOS and then > volunteered some > time each week to train someone how to maintain them, that might be > better than having them collect dust at the office. Sounds like a plan, go for it - if you have any issues, feel free to drop a message here or come find us on #centos-ppc / #centos on irc.freenode.net > As for PPC64, has anyone done benchmarking between a ppc64 and OSX > system on the same G5 hardware? Linux wins hands down. I am sitting typing this out on a Dual G5 2ghz, and I find Linux to be much more responsive than OSX. anandtech had a write-up recently where they compared OSX Server to Linux on the server side of things, iirc correctly - Linux came out on top. A bit of googling should dig up the exact article. - K

4 4

OT - where to buy linux HW
by kevin.kempter＠dataintellect.com 16 Sep '05

16 Sep '05

Hi List; Anyone know of any good retail or online outlets to but Linux desktops/servers. I would like to acquire another low cost dev box and I refuse to give the M$ chronies any of my money. Thanks for your advice...

3 2

CentOS 4U2 timing.
by Lamar Owen 16 Sep '05

16 Sep '05

Any idea on timing of 4U2? Reason being is https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140002 and a pair of DPT SmartRAID V Milleniums. -- Lamar Owen Director of Information Technology Pisgah Astronomical Research Institute 1 PARI Drive Rosman, NC 28772 (828)862-5554 www.pari.edu

13 27

Can someone point me in the direction of a quick postfix/fetchmail setup example?
by Preston Crawford 16 Sep '05

16 Sep '05

I need to start doing some email filtering. Can someone point me in the direction of how to do this if they have a link handy? If not I'll Google anyway, but I thought I'd ask just in case. Preston

3 4

OT: Proftpd and Iptables
by Ed Morrison 16 Sep '05

16 Sep '05

Hi Peoples, I'm still beating my head with the Proftpd although I have solved my orininal issue. That turned out to be an iptables issue and I'm beginning to wonder if iptables is playing with me again. I have an FTP server that allows anonymous downloads and with specific accounts able to upload to the anonymous directory. The problem is, those users cannot upload. I have attached my proftpd conf file and my iptables for those willing to take a look and provide some feedback: Thanks for any feedback. Iptables: #!/bin/bash # Make sure modules are loaded insmod ip_tables insmod ip_conntrack insmod ip_conntrack_ftp insmod ipt_state # Flush any existing rules iptables -F # Block x.x.x.x/x.x.x.x iptables -A INPUT -s 194.150.236.171 -j DROP iptables -A INPUT -s 213.193.230.2 -j DROP iptables -A INPUT -s 205.134.230.2 -j DROP iptables -A INPUT -s 201.15.13.42 -j DROP iptables -A INPUT -s 61.100.12.125 -j DROP iptables -A INPUT -s 193.136.200.48 -j DROP iptables -A INPUT -s 61.218.41.152 -j DROP iptables -A INPUT -s 61.183.22.0/24 -j DROP iptables -A INPUT -s 80.228.206.0/24 -j DROP iptables -A INPUT -s 67.94.106.0/24 -j DROP # Allow other traffic # iptables -A INPUT -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 20 -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 110 -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT iptables -A INPUT -p icmp -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -p tcp --sport 21 -m state --state ESTABLISHED -j ACCEPT iptables -A OUTPUT -p tcp --dport 21 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A OUTPUT -p icmp -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT #Drop all other traffic #iptables -A INPUT -j DROP Proftpd conf: AuthPAMAuthoritative on IdentLookups off UseReverseDNS off Port 21 Umask 022 ListOptions "-a" AllowRetrieveRestart on AllowStoreRestart on MaxInstances 20 User nobody Group nobody ScoreboardFile /var/run/proftpd.score <Global> AllowOverwrite yes <Limit ALL SITE_CHMOD> AllowAll </Limit> </Global> LogFormat default "%h %l %u %t \"%r\" %s %b" LogFormat auth "%v [%P] %h %t \"%r\" %s" TransferLog /var/log/proftpd/xferlog ExtendedLog /var/log/proftpd/access.log WRITE,READ ExtendedLog /var/log/proftpd/auth.log AUTH auth UseFTPUsers off <Anonymous /var/ftp/pub> AnonRequirePassword on User gps Group gps #DefaultChdir /var/ftp/pub/ RequireValidShell off <Limit STOR> AllowAll </Limit> <Limit WRITE> AllowAll </Limit> </Anonymous> <Anonymous ~ftp> User ftp Group ftp AccessGrantMsg "Anonymous login ok, restrictions apply." UserAlias anonymous ftp DefaultChdir /pub/ RequireValidShell off AnonRequirePassword off <Limit LOGIN> AllowAll </Limit> <Limit WRITE> DenyAll </Limit> <Limit STOR> DenyAll </Limit> <Limit READ> AllowAll </Limit> </Anonymous>

2 2

[OT] Can we end this now, please ? (Was: [CentOS] Why is yum not liked by some?)
by Rohan Walsh 15 Sep '05

15 Sep '05

Dag said: > Please everybody involved, go private. Little has been added since > the first few posts and it's getting boring. Besides, I'm sure as > soon as this is a private discussion it dies silently as no honor > has to be defended. I agree. One point (and my addition) from 'Skill with People' by Les Giblin from the section '7 musts for successful criticism' - 1. Criticism should be made in absolute privacy. technical corrections on the list, correction re manners, attitude, etc etc off list My observation is that on this list criticism of manners etc ALWAYS makes the problem worse, technical discussion gets left behind in favour of a flame war, the exact opposite of the stated intention of the criticism. Dag's comments sums up why nicely. Figure it out already! For those of you who deal regularly with customers, particularly if you're self employed or paid by contract, I highly recommend getting this booklet. It takes about 15 minutes to read, so can be done regularly before talking to a new client, going for job interview etc. I have no doubt it can cause a sharp increase in income for many people. ISBN 187 682 5278 Since this is already offtopic, if anyone really needs to reply, off list is probably best. regards Rohan

1 0

SMART error (OfflineUncorrectableSector) detected on host: SMART error (CurrentPendingSector) detected on host
by Abilash Praveen M 15 Sep '05

15 Sep '05

Hello, SMART error (OfflineUncorrectableSector) detected on host: *************************************************************************** The following warning/error was logged by the smartd daemon: Device: /dev/hdb, 2 Offline uncorrectable sectors For details see host's SYSLOG (default: /var/log/messages). You can also use the smartctl utility for further investigation. No additional email messages about this problem will be sent. SMART error (CurrentPendingSector) detected on host: ********************************************************************* The following warning/error was logged by the smartd daemon: Device: /dev/hdb, 2 Currently unreadable (pending) sectors For details see host's SYSLOG (default: /var/log/messages). You can also use the smartctl utility for further investigation. No additional email messages about this problem will be sent. I tried to smartcl.. but it won't let me in to the mounted partition. Please help! Is this a very serious issue? It was a very new HDD and I wonder how I got the uncorrectable sectors. Should I have to replace my HDD? Thanks, Abilash Praveen M

2 1

GFS version compatibility
by Bowie Bailey 15 Sep '05

15 Sep '05

Can a GFS 6.0 and GFS 6.1 system share the same storage? I'm considering building my system using GFS 6.0 and then migrating up to 6.1 when it is more stable. I would prefer to migrate the machines one by one to avoid any overall downtime, but this would mean that some nodes would be 6.0 and other nodes would be 6.1. Will this work, or would I need to take everything down and migrate all of the nodes at once? Is there a better place for this question? Bowie

1 0

RE: [CentOS] Portsentry
by Todd Reed 15 Sep '05

15 Sep '05

Try going to ftp://www.falsehope.net/home/tengel/portsentry/CentOS4/ portsentry-1.2-1.te.i386.rpm I had the same trouble. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Manny Tau Sent: Thursday, September 15, 2005 10:59 AM To: CentOS mailing list Subject: RE: [CentOS] Portsentry >I'm running CentOS 4 with Blue Quartz on a white box, and having problems >with installing Portsentry vi the .tar.gz route. Various errors, etc. > >Anyone here know of a source, like an RPM or something, for Portsentry for >CentOS? >... or a similar app? > > > ftp://ftp.pbone.net/mirror/ftp.falsehope.net/home/tengel/portsentry/Cent OS4/ portsentry-1.2-1.te.i386.rpm Unfortunately, I get an error ... can't find the ftp site ... with the above link, and also via their site ... Manny _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss