Discuss

discuss@lists.centos.org

8 participants
34745 discussions

CentOS as an internet gateway
by ryanag＠zoominternet.net 31 Mar '05

31 Mar '05

I would add the below: -Recommend using CentOS 4.0 -Use squid rpm, no tar (this is for new users I'm guessing). -Recommend using etherape and iptraf (available as rpms) for a graphical overview of traffic. http://etherape.sourceforge.net/ -Recommend the use of chkrootkit, and TCP Wrappers (at the least put ALL: ALL EXCEPT PARANOID in /etc/hosts.allow) to protect servers. -Provide some information about how to protect the whole network from spyware with the /etc/hosts file (a nice side benefit from doing DNS proxy). http://www.mvps.org/winhelp2002/hosts.htm -A *huge* disclaimer on running squid on a machine with a public interface. -Consider using webmin to manage this outside a GUI. -fwlogwatch can parse log files nicely. http://fwlogwatch.inside- security.de/ Biggest issue I have with your setup: -I wouldn't use Guard Dog as the GUI setup - it is very nice, but inflexible and not really meant for what you are doing. Try kmyfirewall instead if you want a GUI for iptables. It offers near complete control of iptables functions. If you can get along with using webmin, try shorewall. *If* this is going to be in a bigger than SOHO (+ 30 PC) network, go with shorewall. Just my $.02, good luck with the site, it'll help a lot of people. :-) On Wednesday 30 March 2005 13:27, Seth Bardash wrote: > To the list: > > HOW-TO on DNS + DHCP + SQUID + Firewall + Router > > Since this seems to be a recurring topic: > > Thought you might be interested in a working set up of > DNS + DHCP + SQUID + Firewall + Router machine that took > quite an effort to get working but now runs flawlessly. > > Don't get discouraged. This takes some time to set up > correctly but once you get through it - it works great! > > Remember: tcpdump is your friend!!!! > > Anyone having a network internally that needs these > features should continue reading: > > We set up a new firewall based on CentOS 3.3. (3.4 should work fine) > > We needed it to serve many protocols internally. > > The specifications for it are: > > NOT Microsoft based > (We are a MS Partner with all the software but I wanted something that was > MS virus proof) > > KDE Graphical Firewall Control > External Internet LAN Port x 1 > Internal Networks x 2 (more can be added) -> we used 192.168.0.X and > 192.168.1.X > DNS Name Caching Server - internal and external, forward and reverse > lookups DHCP Server that does ddns-update internally > Squid Server > IP Masqerading > Routing between all networks > > Hardware: > > OLD P3-800 Based System (Only non AMD system we run) > 3 x Intel Pro 100 NIC's (We have a big box of these) > 1GB SDRAM > 40GB IDE Disk > CDROM Drive > Floppy > Standard PC Case with extra cooling and 400 w ps. > > This hardware is overkill as it never runs above 30% load. > Any machine supported by Centos with > 600 MHz CPU and 512M Memory should > do. > > Software: > > Centos 3.3 Full Install (Lessens the chance of missing packages) > > Guarddog Firewall RPM for Centos > (http://centos.hughesjr.com/3/guarddog/RPMS/) > Guidedog router/masqerader RPM for RH9 (works fine) > (http://www.simonzone.com/software/guidedog/guidedog-1.0.0-1_rh9.i386.rpm) > > Squid source tar ball. > > First install Centos and set it for a KDE graphical boot up. > Turn off all services not used > Leave Iptables on but turn off IP6tables > > Then Install Guarddog > Then install Guidedog > Configure both of the above - read the instructions for these carefully. > - questions for these should go to the writer > or his mail forum > - Make sure to enable DHCP for eth1 and eth2 > BUT NOT eth0 (external LAN NIC) > > Make sure you can see the internet from the inside LANs with the clients > set to use static IPs. > > NEXT --- > > Please read the instructions on how to set up DHCP and bind(DNS) here: > > http://integratedsolutions.org/downloads/DHCP-DDNS.txt > > Read this multiple times and make sure you understand it! > > Cut and paste can be an enemy. Be careful which editor you use > > > This set up allows us to have any number of machines on our internal > network automagically connected to each other and the internet with all the > IP information coming from our firewall / router / masquerader / squid > server. > > It works for forward and reverse DNS internally for Windows and linux > clients and servers. > > It also speeds up client internet traffic by caching most outside pages. > > Install squid per the INSTALL in the src tar ball and > add a startup entry to either chkconfig or rc.local. > We set it to use 5 GB of disk cache and start > automatically at boot time. We used the standard proxy port. > > We configured squid using webmin and this works fine. > > We added Webmin just to see how well it works: > It can break DNS and DHCP easily if you are not careful but it was helpful > getting squid working. > > Read up on syslogd and change the config file (or use webmin) to rotate > logs every day and keep 7 to 14 old logs for back checking purposes. This > will limit log size and make it easier to find any problems. > > Your milage mary vary. > > Standard software disclaimer applies. > > If this is helpful drop me an email so I know. > > If this needs work drop me an email with specifics. > > We will be adding a knowledgebase to our website with complete instructions > for this in the next few weeks. > > Best > > Seth Bardash > > Integrated Solutions and Systems > > seth(a)integratedsolutions.org > > 719-495-5866 > > Failure can not cope with perseverance!

2 2

Re: [Centos] Restart centos from Commandline
by Collins Richey 31 Mar '05

31 Mar '05

Every list goes through this sort of thrashing: 1. There are some users who are too self-important to remember back when they were once n00bs. From what I've heard, these are the bulk of users on the Debian lists <grin>. 2. There are others who can provide the simple answer AND a gentle reminder where the n00b might find the answer him/herself. What's the old saying: "You ctch more flies with honey than with vinegar." 3. Then there is the group (actually, subcategory of 1) who never has any time and can't be bothered to read anything other than super-intellectual stuff and who fills the replies with "your're wasting our time." The most successful lists have a lot of users in category 2. Enjoy, -- Collins When I saw the Iraqi people voting three weeks ago, 8 million of them, it was the start of a new Arab world.... The Berlin Wall has fallen. - Lebanese Druze leader Walid Jumblatt

6 5

Re: [CentOS] Double posting
by Steven Vishoot 30 Mar '05

30 Mar '05

--- Johnny Hughes <mailing-lists(a)hughesjr.com> wrote: > On Wed, 2005-03-30 at 12:51 -0800, Steven Vishoot > wrote: > > I do not know if i am seeing things, but it seems > > there has been a lot of double posting lately. It > > seems it has been only a short while since it > started. > > i thought it might only been some people, though i > am > > seeing an increasing amounts of this lately. Is > there > > something going on with the list or is it a snafu > that > > i have noticed something. > > > > letting my big mouth run like always. ;-) > > > > Steven > > The list has moved from centos(a)caosity.org to > centos(a)centos.org > > All e-mails from centos(a)caosity.org are also > forwared to > centos(a)centos.org ... so if you post to the old > list, we will get it. > > Some posts are to centos(a)centos.org and > CC:centos@caosity.org ... if you > do that, we will get it twice :) > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos > thanks Johnny, i thought i was losing it there for a moment. now my big mouth will shut for a while.... dont bet on it! ;-O Steven "On the side of the software box, in the 'System Requirements' section, it said 'Requires Windows or better'. So I installed Linux." __________________________________ Do you Yahoo!? Make Yahoo! your home page http://www.yahoo.com/r/hs

1 0

Double posting
by Steven Vishoot 30 Mar '05

30 Mar '05

I do not know if i am seeing things, but it seems there has been a lot of double posting lately. It seems it has been only a short while since it started. i thought it might only been some people, though i am seeing an increasing amounts of this lately. Is there something going on with the list or is it a snafu that i have noticed something. letting my big mouth run like always. ;-) Steven "On the side of the software box, in the 'System Requirements' section, it said 'Requires Windows or better'. So I installed Linux." __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/

2 1

RE: [Centos] Restart centos from Commandline
by Vaneet Sharma 30 Mar '05

30 Mar '05

Hello Alexander, well, i just asked how to restart the server from command line ? i does not mean that i dont know how to restart ? if you ask how to open email from command line ? it does not mean that you have never checked an email before? lets come to mathematics and try to understand Well, regarding creating multi billion dollar business, you dont have to know everything You just need to know what is needed to make and create multi billion dollar business. I dont want to sound rude here, but now people have come down to my self respect i apologised on mailist list for asking this question. Do you want the users like us to be removed from this mailist list? Well, if it happens again, i dont want to be a user on this mailing list It seems to me that people here think that they know a lot. We , our company know a lot as well , ( we know how to make money ) and i hope this helps you people in understanding who we are Regards Vaneet -----Original Message----- From: centos-bounces(a)caosity.org on behalf of Aleksandar Milivojevic Sent: Tue 3/29/2005 5:34 PM To: CentOS discussion and information list Cc: Subject: Re: [Centos] Restart centos from Commandline darshan jadav wrote: >>>Hello, >>>I am connecting to my server through SecureCRT. Server is running Centos >>>4.0 >>>I need to restart my server >>> >>>What is command line?> anyone knows >> > > dunno if u need to go thru docz or not, but u shld defintely shorten > yr signature ;-) Actually, the signature is really the scary part. It reads "iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses". Somebody in charge of multi-billion dollar Internet businesses does not know how to restart the server (or have somebody on the site who knows)... -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7 _______________________________________________ CentOS mailing list CentOS(a)caosity.org http://lists.caosity.org/mailman/listinfo/centos Vaneet Sharma executive manager iDeasTank Limited an iwg business dolphins' court po 388 valletta, m-malta/europe mobile: +356 9943 8263 skype: CALLVANEET fax: +356 9952 8888 phone: +356 9942 8888 vaneet(a)iwg.info call me on www.skype.com - my ID is CALLVANEET Want a signature like this? - www.plaxo.com\signature iwg is a global e-mobile company creating, building and growing new businesses. iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. www.iWG.info www.countryprofiler.com/iWG www.visitmalta.com www.mfc.com.mt Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.

2 1

RE: [Centos] Restart centos from Commandline
by Vaneet Sharma 30 Mar '05

30 Mar '05

Well, this conversation started with me I just asked two silly questions and no where did i mention panicking or sound begging ? The reason i asked them from team was 1) i can get right answer in right time ( as there are so many distros of linux) 2) i was so eager to learn and run apache and tomcat on linux that these small things were coming as hindrance to my main aim Regarding, spoon fed, i dont think if anyone can reach the stage of joining the CENTOS mailing list is spoon fed if i can join this mailing list, install Centos on my own, run apache and run tomcat, if i can code java and restart application servers, i dont think i am spoon fed Of cours i dont know how to start centos from command line because I am not a system administrator and never was and never did. I think aim of this mailing list is to help new users get right answers in right time. There is too much information on internet which waste lot of time and also ............................ there are too many ways to do same thing. for e.g setting JAVA_HOME from bashrc and also from etc\profile Does anyone has comments from what i stated above. People here on the list have lot of ego's and they dont want to move from their point If u read my previous emails, i was criticised by 5 people, i apologised and also am thankful in giving me new direction. bottom line: if you are that much agigated, please do not answer my questions and delete the email. it is better. kind regards Vaneet -----Original Message----- From: centos-bounces(a)centos.org on behalf of Greg Knaddison Sent: Wed 3/30/2005 5:37 PM To: CentOS mailing list Cc: Subject: Re: [Centos] Restart centos from Commandline On Wed, 30 Mar 2005 14:56:00 +0100, Peter Farrow <peter(a)farrows.org> wrote: > If a question really is very simple to answer, why not just give the > answer, after all asking questions is how we all learn.... > No. RTFM and then ask questions is how we all learn. If I see a question I'm interested in that I don't know the answer to, I'll do some research and find the answer. 75% of the time that I make a post that's what it's based upon. I'm frequently happy to do it because I'm increasing my own knowledge, but when the poster is of the "I need to be spoon fed" variety and asks a follow up question that is clearly answered online it's a waste of everyone's time. Besides, how many times have you seen the "I REALLY NEED HELP RIGHT NOW OMG I CAN'T FIGURE OUT HOW TO XYZ!!!!! MY BOSS IS GOING TO FIRE ME, HELP ME HELP ME HELP ME!"? If you're used to getting spoon-fed and then get into a situation where you need help right now, spoon feeding is very unlikely to happen fast enough, but man/info/google are always there, unless you never learned to use them ;) I agree with Collins. The more people in his "group 2" the better. Respond with help and respond with a nudge. Greg _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Vaneet Sharma executive manager iDeasTank Limited an iwg business dolphins' court po 388 valletta, m-malta/europe mobile: +356 9943 8263 skype: CALLVANEET fax: +356 9952 8888 phone: +356 9942 8888 vaneet(a)iwg.info call me on www.skype.com - my ID is CALLVANEET Want a signature like this? - www.plaxo.com\signature iwg is a global e-mobile company creating, building and growing new businesses. iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. www.iWG.info www.countryprofiler.com/iWG www.visitmalta.com www.mfc.com.mt Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.

4 3

RE: [Centos] Restart centos from Commandline
by Vaneet Sharma 30 Mar '05

30 Mar '05

Thank you very much Vaneet -----Original Message----- From: centos-bounces(a)centos.org on behalf of dan1 Sent: Wed 3/30/2005 9:00 PM To: CentOS mailing list Cc: Subject: Re: [Centos] Restart centos from Commandline Hello, Vaneet. I understand and agree with what you are saying. It's true that it's becoming a bit agressive and it's sad. I think that you were right to ask those questions, and I don't think that the JAVA_HOME thing did hurt to ask. It even helped me so I'm happy you asked for. You asked only one or two basic questions but even though I think we should be able to ask them. However the rule to seach first before ask is still to keep in mind. Thus, the only thing that really misses here to my point of view is a place where we can get a search on all this precious mailing list. The google option is not very good because of the delay of inclusion (1-2 days I think) and also because we get other answers and we only want answers from here (and to be sure to have all of them), knowing that here is the most appropriate information. That's why I suggest putting on the home page of CentOS.org the following search motor's URL in the 'support' section: http://search.gmane.org/search.php?query=&email=&group=gmane.linux.centos.g… I'm sure that many new comers will appreciate it a lot. This will most probably also reduce by 2 or 3 times the amount of e-mails on this list. Kind regards to all, Daniel ----- Original Message ----- From: Vaneet Sharma To: CentOS mailing list Sent: Wednesday, March 30, 2005 8:47 PM Subject: RE: [Centos] Restart centos from Commandline Well, this conversation started with me I just asked two silly questions and no where did i mention panicking or sound begging ? The reason i asked them from team was 1) i can get right answer in right time ( as there are so many distros of linux) 2) i was so eager to learn and run apache and tomcat on linux that these small things were coming as hindrance to my main aim Regarding, spoon fed, i dont think if anyone can reach the stage of joining the CENTOS mailing list is spoon fed if i can join this mailing list, install Centos on my own, run apache and run tomcat, if i can code java and restart application servers, i dont think i am spoon fed Of cours i dont know how to start centos from command line because I am not a system administrator and never was and never did. I think aim of this mailing list is to help new users get right answers in right time. There is too much information on internet which waste lot of time and also ........................... there are too many ways to do same thing. for e.g setting JAVA_HOME from bashrc and also from etc\profile Does anyone has comments from what i stated above. People here on the list have lot of ego's and they dont want to move from their point If u read my previous emails, i was criticised by 5 people, i apologised and also am thankful in giving me new direction. bottom line: if you are that much agigated, please do not answer my questions and delete the email. it is better. kind regards Vaneet _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos Vaneet Sharma executive manager iDeasTank Limited an iwg business dolphins' court po 388 valletta, m-malta/europe mobile: +356 9943 8263 skype: CALLVANEET fax: +356 9952 8888 phone: +356 9942 8888 vaneet(a)iwg.info call me on www.skype.com - my ID is CALLVANEET Want a signature like this? - www.plaxo.com\signature iwg is a global e-mobile company creating, building and growing new businesses. iwg founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. www.iWG.info www.countryprofiler.com/iWG www.visitmalta.com www.mfc.com.mt Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.

1 0

RE: [Centos] Restart centos from Commandline
by Nathan Oyler 30 Mar '05

30 Mar '05

It isn't that you are wrong, as much as there is a perfectly valid reason not to answer those questions. Because then people will ask them. And return and ask another. They are all simple except that you become a resource, and that grows. Support Irc channels are the easiest to see this in. It isn't that it's difficult to answer these questions, it just gives no incentive for people to try and learn the answer themselves, which stunts their growth and makes them lean more on assistance. It's easier on us all to force people to try and figure out the easy answers, because if you can't figure out with google how to restart linux from the command line, how will you be able to resolve 22 dependencies with 10 perl modules that require you to debug on 3 of them error messages that.. you get the point. 2 cents. > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Peter Farrow > Sent: Wednesday, March 30, 2005 6:56 AM > To: CentOS mailing list > Subject: Re: [Centos] Restart centos from Commandline > > I agree, > > If a question really is very simple to answer, why not just give the > answer, after all asking questions is how we all learn.... > > Self importance really is ultimatelty self-defeating, no one knows > everything....and one day we all have to ask. > > I've been in the computing game far too long to to claim to know > definite answers to everything, the more you learn the more > > you realise you don't know! > > ;-) > > P. > > > > Joao Medeiros wrote: > > >Same happened to me when I joined the Fedora dlist and asked some > >newbie question which I'm too ashamed to remember now :-) > > > >Point is, the time it takes to reply with a "you're wasting my time" > >could actually be used to give some help. If peeps are too busy why > >bothering replying with nasty comments in the first place?! > > > >Just my 2 cents... > > > > > >On Tue, 29 Mar 2005 20:37:08 -0700, Collins Richey <crichey(a)gmail.com> > wrote: > > > > > >>Every list goes through this sort of thrashing: > >> > >>1. There are some users who are too self-important to remember back > >>when they were once n00bs. From what I've heard, these are the bulk > >>of users on the Debian lists <grin>. > >> > >>2. There are others who can provide the simple answer AND a gentle > >>reminder where the n00b might find the answer him/herself. What's the > >>old saying: "You ctch more flies with honey than with vinegar." > >> > >>3. Then there is the group (actually, subcategory of 1) who never has > >>any time and can't be bothered to read anything other than > >>super-intellectual stuff and who fills the replies with "your're > >>wasting our time." > >> > >>The most successful lists have a lot of users in category 2. > >> > >>Enjoy, > >> > >>-- > >> Collins > >> When I saw the Iraqi people voting three weeks ago, 8 million of > them, > >> it was the start of a new Arab world.... The Berlin Wall has > fallen. > >> - Lebanese Druze leader Walid Jumblatt > >>_______________________________________________ > >>CentOS mailing list > >>CentOS(a)centos.org > >>http://lists.centos.org/mailman/listinfo/centos > >> > >> > >> > >_______________________________________________ > >CentOS mailing list > >CentOS(a)centos.org > >http://lists.centos.org/mailman/listinfo/centos > > > > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

2 1

Access to Archives
by Gerry Tool 30 Mar '05

30 Mar '05

I just joined the list and am trying to look at the archives. The page http://lists.caosity.org/mailman/listinfo/centos has a link to the archives that resolves to http://localhost.localdomain/pipermail/centos/ which of course produces an error "The connection was refused when attempting to contact localhost.localdomain." What am I missing, and how can I review the archives to keep from asking obviously answered questions? Thanks. Gerry

3 2

strict selinux policy?
by Aleksandar Milivojevic 30 Mar '05

30 Mar '05

What happened to selinux-policy-strict package in RHEL/CentOS? -- Aleksandar Milivojevic <amilivojevic(a)pbl.ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss