At Thu, 14 May 2009 13:00:09 -0700 CentOS mailing list centos@centos.org wrote:

on 5-14-2009 11:46 AM James B. Byrne spake the following:

...

On: Thu, 14 May 2009 08:48:36 -0700, Bill Campbell centos@celestial.com wrote:

...

You might look at fail2ban which can automatically create iptables blocks when things like this happen.

I went to the source forge website, but the rh rpm is inaccessible. I really do not wish to join yet another mailing list simply to report this so if anyone here is a member there as well please let them know.

Regards,

http://packages.sw.be/fail2ban/

If you have either epel or rpmforge repos setup, then

yum install fail2ban

also will work.

Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkoMeEkACgkQRADw9lziUqQXqwCfT4tOBbYDvP8hdzRpXIcGJFr+ qV4An25wJNeT7gvhH8s9MNC3X+spHjwE =vFVn -----END PGP SIGNATURE-----

MIME-Version: 1.0

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Hi All,

Is anyone using mod_gnutls on CentOS 5.3 x64?

A while ago there was a rpm in the CentOs-testing repo, but it disappeared.. so does anyone have a recent version?

Cheers,

Bart

Thanks David,

That worked! Had some conflicts with cups-libs, but overruling the dependency will hopefully not damage to much ;)

Cheers,

Bart ----- "David Hrbáč" hrbac.conf@seznam.cz wrote:

From: "David Hrbáč" hrbac.conf@seznam.cz To: "CentOS mailing list" centos@centos.org Sent: Friday, 15 May, 2009 15:01:59 GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stockholm / Vienna Subject: Re: [CentOS] Mod_gnutls

Bart Baars napsal(a):

...

Hi All,

Is anyone using mod_gnutls on CentOS 5.3 x64?

A while ago there was a rpm in the CentOs-testing repo, but it

disappeared.. so does anyone have a recent version?

...

Cheers,

Bart

Hi Bart, I do http://fs12.vsb.cz/hrb33/el5/hrb-tls/stable/i386/repoview/mod_gnutls.html http://fs12.vsb.cz/hrb33/el5/hrb-tls/stable/x86_64/repoview/mod_gnutls.html Regards, David Hrbáč _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Looks like I am running into this (http://issues.outoforder.cc/view.php?id=87) bug..

I am proxy'ing Zimbra with Apache. It looks like Apache is also talking HTTPS to Zimbra, but it shouldn't do that :(

Cheers,

Bart

----- "David Hrbáč" hrbac.conf@seznam.cz wrote:

From: "David Hrbáč" hrbac.conf@seznam.cz To: "CentOS mailing list" centos@centos.org Sent: Friday, 15 May, 2009 15:25:02 GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stockholm / Vienna Subject: Re: [CentOS] Mod_gnutls

Bart Baars napsal(a):

...

Thanks David,

That worked! Had some conflicts with cups-libs, but overruling the

dependency will hopefully not damage to much ;)

...

Cheers,

Bart

Well :o) it looks like I have to rebuild the repo :o). I'm gonna look at it. David _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Okay, here it is:

<VirtualHost 192.168.0.23:443> ServerName webmail.bartbaars.nl # SSLProxyEngine ON ProxyRequests off ProxyPreserveHost On ProxyPass / http://zstore.bartbaars.nl/ ProxyPassReverse / http://zstore.bartbaars.nl/ GnuTLSEnable on GnuTLSPriorities NORMAL GnuTLSCertificateFile /etc/pki/tls/certs/webserver.cert GnuTLSKeyFile /etc/pki/tls/private/webserver.key GnuTLSClientCAFile /etc/pki/tls/certs/ca.cert ErrorLog /var/log/httpd/webmail/error_log CustomLog /var/log/httpd/webmail/access_log combined </VirtualHost>

Cheers,

Bart ----- "David Hrbáč" hrbac.conf@seznam.cz wrote:

From: "David Hrbáč" hrbac.conf@seznam.cz To: "CentOS mailing list" centos@centos.org Sent: Friday, 15 May, 2009 16:01:41 GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stockholm / Vienna Subject: Re: [CentOS] Mod_gnutls

Bart Baars napsal(a):

...

Looks like I am running into this

(http://issues.outoforder.cc/view.php?id=87) bug..

...

I am proxy'ing Zimbra with Apache. It looks like Apache is also

talking HTTPS to Zimbra, but it shouldn't do that :(

...

Cheers,

Bart

We are proxing a lot of sites. Make sure the proxy is configure to talk to HTTP not HTTPS server. Send your conf. David

PS: Cups issue should be solved now.

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos