Re: [CentOS-virt] Upgrade of CentOS and libvirt: need help on configuring network

2013-09-23 Thread Stefano Stabellini
On Mon, 23 Sep 2013, Schut, Koos J J (Koos) wrote: I upgraded from CentOS 5.9 to CentOS 6.4. I try to reuse my virtual machines and am only partially successful: I can run them, I just cannot get the network OK and need some help with that.   What I had in the past was pretty simple:

Re: [CentOS-virt] Upgrade of CentOS and libvirt: need help on configuring network

2013-09-23 Thread Zoltan Frombach
Your requirements are pretty simple. I assume you do not use DHCP and all IP addresses are static. This should work: You need to create a bridge interface `br0` on your host: yum install bridge-utils vi /etc/sysconfig/network-scripts/ifcfg-br0 DEVICE=br0 NM_CONTROLLED=yes ONBOOT=yes

[CentOS-virt] moving the Xen4CentOS repo Kernel to 3.10.x

2013-09-23 Thread Johnny Hughes
Do we want to move the Xen4CentOS kernel to new LTS 3.10.x from the current 3.4.x Kernel? If so, can we start testing the that kernel build? Is someone from Xen.org working on porting the xen specific patches that are required in the 3.10.x kernel from the ones we have in the 3.4.x tree in

[CentOS-virt] Teh is away for vacation until 5th October

2013-09-23 Thread jyteh
Thank you for your message. I will be away for vacation in US from 21st Sept to 5th October. Shall you have any request , you can drop an email to my team at server-supp...@exabytes.com.my ___ CentOS-virt mailing list CentOS-virt@centos.org

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread Miguel González
Sobre el ping interno escribí claramente que tengo *todos los servicios en la LAN (locales)*, vaya FTP, HTTP, SSH... todos !.. Vaya, *SI PUEDO HACER PING* a la red LAN (osease a las IPs de los equipos de la red), solo no logro llegar al segmento distinto al que estoy (10.0.1.0/24), no

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread Rodolfo Vargas
El 22/09/13, angel jauregui darkdiabl...@gmail.com escribió: Buen día. Rodolfo si usted se considera tan conocedor creo que debería plantear una solución u opción, no solo una critica de esta mal o esta bien, de nada sirve que me digan que esta mal (si por algo no funciona). La lista es para

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread Pablo Alberto Flores
Partamos por el principio, tu linux hace ping a google? si tu linux no hace ping tu lan nunca saldra al mundo. El 23 de septiembre de 2013 05:00, Rodolfo Vargasedgarr...@gmail.comescribió: El 22/09/13, angel jauregui darkdiabl...@gmail.com escribió: Buen día. Rodolfo si usted se

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread David González Romero
Yo veo que esto es una discusión absurda. Angel la cuestión es muy sencilla: 1- Tu server hace ping a internet? SI 2- Tu red deberá poder navegar por medio del SQUID 3- Tu red, NUNCA podrá hacer PING a internet, porque no estas USANDO NAT para adentro. Porque entonces que sentido tendría el

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread angel jauregui
Gracias MIGUEL por tu atenta respuesta, te comento: Servidor: eth0 -- 192.168.1.1 conectada al router (ip: 192.168.1.254) eth1 -- 10.0.1.1 conectada al switch (red LAN). En el servidor tengo DNSMASQ y asigno como gateway la IP de la eth1 del server (10.0.1.1). Saludos ! El 23 de septiembre

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread Miguel González
On 9/23/2013 4:19 PM, angel jauregui wrote: Gracias MIGUEL por tu atenta respuesta, te comento: Servidor: eth0 -- 192.168.1.1 conectada al router (ip: 192.168.1.254) eth1 -- 10.0.1.1 conectada al switch (red LAN). En el servidor tengo DNSMASQ y asigno como gateway la IP de la eth1 del

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread RENE LARA ALVARADO
Creo que bajo tu esquema, deseeas usar tu servidor (maq con dos interfaces de red y en distinta red) con la funcion de ruteador. A reserva de si es conveniente o no, en ese caso sería mejor que pusieras tu modem-router en modo puente, conectado a una de las interfases. De esa forma solo lidiaras

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread David González Romero
Yo no soy partidario de este esquema que propones de poner el Modem-Router directo al servidor. Porque entonces el conceto DMZ queda obsoleto ahi. Esta bien su esquema de red. Lo que yo me cuestiono es si realmente el necesito que los clientes de la red 10.0.1.0/24 puedan pingear a internet. Y no

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread RENE LARA ALVARADO
Angel: Entiendo que en tu servidor tienes 2 tarjetas lo que involcran dos redes 192.168.1.0/24 IPADDR=192.168.1.1 NETMASK=255.255.255.0 NETWORK=192.168.1.0 GATEWAY=192.168.1.254 y 10.0.1.0/24 IPADDR=10.0.1.1 NETMASK=255.255.255.0 NETWORK=10.0.1.0 A reserva de que eso

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread angel jauregui
## RENE Mis equipos están en el segmento 10.0.1.0/24, se asignan IPs de 10.0.1.2 a 10.0.1.254 La red 192.168.1.0/24 es el rango de IPs que maneja el server para hacer su propia red, por lo cual no muevo dicha configuración alcabo solo existiran 2 IPs... 1- La ip del router: 192.168.1.254 2-

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread angel jauregui
Desde cualquier equipo conectado al switch puedo hacer ping a cualquier equipo de la red, tambien tengo todos los servicios que brinda el servidor: http, ftp, ssh, nfs, samba, etc El punto es que desde cualquier equipo de la red no puedo hacer ping a la IP del router 192.168.1.254 y mucho

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread angel jauregui
Acabo de cambiar el cable de red que va del router a la eth0 del server y ahora puedo hacer ping desde el server hacia la IP del router y cualquier web. Voy a probar en los demas equipos de la red. Saludos ! El 23 de septiembre de 2013 15:18, angel jauregui darkdiabl...@gmail.comescribió: ##

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread angel jauregui
que maravilla :D era el maldito cable... en serio que voy a enmarcar ese cable de red y le ponde el maldito cable que me hizo bullying de red. Ya hice pruebas en los equipos de red y ya logro hacer ping a la IP del router 192.168.1.254 y a cualquier pagina. Ahora solo me gustaria

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread angel jauregui
Estuve pensando poner las reglas iniciales iptables -P INPUT ACCEPT por DROP, pero el detalle es que al momento de que el navegador de conecta a internet usa un puertos distinto al destino (80) por lo cual se queda pensando. Hice pruebas poninendo: iptables -P INPUT -j DROP iptables -P FORWARD

Re: [CentOS-es] [iptables] No logro llegar al Router, no tengo navegacion !

2013-09-23 Thread Jose Manuel Ajhuacho Vargas
no tuve tiempo de revisar tus reglas de iptables, por lo general son dos una de salida y la otra de vuelta o entrada (regreso), como quieran llamar verificaste esa regla??   Atte Jose Manuel GPG Key ID: UBCMEOLVQMHEILINJBE De: angel jauregui

[CentOS] Centos 6.4 on Xserve, IPMI error

2013-09-23 Thread Arno B
Hello! I'm trying to install Centos 6.4 64 bit on this Xserve: http://www.everymac.com/systems/apple/xserve/specs/xserve-intel-xeon-2.8-eight-core-specs.html I got a bootloader from: http://blog.christophersmart.com/2009/07/23/linux-on-an-apple-xserve-efi-only-machine/ as none of the official

Re: [CentOS] Chromium update

2013-09-23 Thread James Pearson
isd...@gmail.com wrote: My advice to anyone who needs a good, solid browser is to use the stock one (Firefox ESR) or get the latest Firefox binary from ftp.mozilla.org if they really want to be bleeding edge. Doesn't work or even build on CentOS5 anymore. The latest version that

Re: [CentOS] Package chkconfig-1.3.49.3-2.el6_4.1.x86_64.rpm is not signed

2013-09-23 Thread Joe Pruett
On 09/23/2013 09:39 AM, Leonard den Ottolander wrote: Hello, gpk-update-viewer on my CentOS 6 desktop gives me an error about untrusted updates. When running yum update from a terminal I get the following error: Package chkconfig-1.3.49.3-2.el6_4.1.x86_64.rpm is not signed No other

Re: [CentOS] Package chkconfig-1.3.49.3-2.el6_4.1.x86_64.rpm is not signed

2013-09-23 Thread Johnny Hughes
On 09/23/2013 01:10 PM, Joe Pruett wrote: On 09/23/2013 09:39 AM, Leonard den Ottolander wrote: Hello, gpk-update-viewer on my CentOS 6 desktop gives me an error about untrusted updates. When running yum update from a terminal I get the following error: Package

[CentOS] Howto: Extremely tight security rsync shell for backups

2013-09-23 Thread Lists
We've been using rsync since forever to back up all our servers and it's worked without a problem. But in a recent security review, we noted that our specific rsync backup host is using root keys to access the server, meaning that if the keys on the backup server were leaked/compromised in any

Re: [CentOS] Howto: Extremely tight security rsync shell for backups

2013-09-23 Thread m . roth
Lists wrote: We've been using rsync since forever to back up all our servers and it's worked without a problem. But in a recent security review, we noted that our specific rsync backup host is using root keys to access the server, meaning that if the keys on the backup server were

[CentOS] Package chkconfig-1.3.49.3-2.el6_4.1.x86_64.rpm is not signed

2013-09-23 Thread Leonard den Ottolander
Hello, gpk-update-viewer on my CentOS 6 desktop gives me an error about untrusted updates. When running yum update from a terminal I get the following error: Package chkconfig-1.3.49.3-2.el6_4.1.x86_64.rpm is not signed No other packages seem to be affected so for now I updated excuding

Re: [CentOS] Howto: Extremely tight security rsync shell for backups

2013-09-23 Thread Lists
On 09/23/2013 01:02 PM, m.r...@5-cent.us wrote: It does have to run as root, though, on both, to preserve ownership of home and project directories, etc. Depending on how you interpret this statement, my documented process may present a (mild) improvement. It has the backup account on the

Re: [CentOS] Howto: Extremely tight security rsync shell for backups

2013-09-23 Thread Les Mikesell
On Mon, Sep 23, 2013 at 3:26 PM, Lists li...@benjamindsmith.com wrote: Depending on how you interpret this statement, my documented process may present a (mild) improvement. It has the backup account on the public server being a non-priviliged account only able to run a (tightly controlled)

Re: [CentOS] Howto: Extremely tight security rsync shell for backups

2013-09-23 Thread Lists
On 09/23/2013 01:50 PM, Les Mikesell wrote: Is there something that convinces you that sudo is better at handling the command restriction than sshd would be? In the context of a production server, the idea is to remove any ability from another host (EG: backup server) to run local arbitrary

Re: [CentOS] Howto: Extremely tight security rsync shell for backups

2013-09-23 Thread m . roth
Lists wrote: On 09/23/2013 01:50 PM, Les Mikesell wrote: Is there something that convinces you that sudo is better at handling the command restriction than sshd would be? In the context of a production server, the idea is to remove any ability from another host (EG: backup server) to run

Re: [CentOS] Howto: Extremely tight security rsync shell for backups

2013-09-23 Thread Lists
On 09/23/2013 02:44 PM, m.r...@5-cent.us wrote: Lists wrote: On 09/23/2013 01:50 PM, Les Mikesell wrote: Is there something that convinces you that sudo is better at handling the command restriction than sshd would be? In the context of a production server, the idea is to remove any ability

Re: [CentOS] Howto: Extremely tight security rsync shell for backups

2013-09-23 Thread m . roth
Lists wrote: On 09/23/2013 02:44 PM, m.r...@5-cent.us wrote: Lists wrote: On 09/23/2013 01:50 PM, Les Mikesell wrote: Is there something that convinces you that sudo is better at handling the command restriction than sshd would be? In the context of a production server, the idea is to remove

Re: [CentOS] Howto: Extremely tight security rsync shell for backups

2013-09-23 Thread Kahlil Hodgson
A couple of weeks ago I found this breakdown of various approaches https://techstdout.boum.org/EncryptedBackupsForParanoiacs/ We're currently using a variation of the push-backup system described (using rsync via duplicity). K Kahlil (Kal) Hodgson GPG: C9A02289 Head