Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-17 Thread Liam O'Toole
On 2015-04-17, Peter Lawler cen...@bleeter.id.au wrote: [OT ALERT] On 17/04/15 02:28, Valeri Galtsev wrote: clamav is a scanner that is designed to detect viruses (virii I should use for plural as it is Latin word) I believe this 'rule' in English is misunderstood by many and as a general

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-17 Thread Peter
On 04/17/2015 11:20 PM, Eero Volotinen wrote: Yep, maybe using ssl offloading devices like (BigIP) that receives tls1.2 and tlsv1.2 and then re-encrypts traffic with tls1.0 might be cheapest solution. Perhaps re-evaluate the need to have TLS 1.1 and 1.2 right now. The only attack against 1.0

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-17 Thread Mike
On Fri, Apr 17, 2015 at 7:46 AM, James Hogarth james.hoga...@gmail.com wrote: It wasn't the bind package directly but rather an issue with the libkrb5 libraries. This is the specific bug that fixed the issue: https://bugzilla.redhat.com/show_bug.cgi?id=1087068 I'll get the samba wiki

[CentOS] CentOS-announce Digest, Vol 122, Issue 9

2015-04-17 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to

Re: [CentOS] Mailman, junk mail, DMARC and DKIM

2015-04-17 Thread James B. Byrne
https://bugzilla.redhat.com/show_bug.cgi?id=1095359 Jan Kaluža jkal...@redhat.com changed: What|Removed |Added Fixed In Version|mailman-2.1.12-22.el6 |mailman-2.1.12-23.el6

Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-17 Thread Valeri Galtsev
On Fri, April 17, 2015 12:50 am, Peter Lawler wrote: On 17/04/15 12:31, Valeri Galtsev wrote: But being not native English speaker, I use it (not native English speaker) Figured as much, which is why I mentioned it ;) as an excuse for being unable to pronounce anything. Not as if most

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-17 Thread Dennis Jacobfeuerborn
The cheapest sollution is probably compiling a private openssl somewhere on the system and then compiling apache using that private openssl version instead of the default system-wide one. Regards, Dennis On 17.04.2015 13:20, Eero Volotinen wrote: Yep, maybe using ssl offloading devices like

Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-17 Thread Always Learning
On Fri, 2015-04-17 at 08:00 -0500, Valeri Galtsev wrote: It is amazing how much one can cripple what another person said by scissoring his phrases ;-) English people (excludes USA people) should always try to speak simple, jargon-free, easily understandable and logically expressed English

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-17 Thread James Hogarth
On 17 Apr 2015 13:04, Mike 1100...@gmail.com wrote: On Fri, Apr 17, 2015 at 7:46 AM, James Hogarth james.hoga...@gmail.com wrote: It wasn't the bind package directly but rather an issue with the libkrb5 libraries. This is the specific bug that fixed the issue:

Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-17 Thread Александр Кириллов
But being not native English speaker, I use it (not native English speaker) Figured as much, which is why I mentioned it ;) as an excuse for being unable to pronounce anything. Not as if most English speakers can pronounce many English words ... ttfn :) It is amazing how much one can

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-17 Thread Johnny Hughes
On 04/16/2015 05:00 PM, Eero Volotinen wrote: in fact: modgnutls provides easy way to get tlsv1.2 to rhel 5 -- Eero If you do that, then you are at the mercy of Mr. Bergmann to provide updates for all security issues for openssl. Has he updated his RPMs since 2014-11-19 23:57:58? Does his

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-17 Thread James Hogarth
On 17 Apr 2015 00:42, Mike 1100...@gmail.com wrote: On Thu, Apr 16, 2015 at 6:03 PM, James Hogarth james.hoga...@gmail.com wrote: This was required for kerberos secured updates prior to el7.1 and el6.6 ... The problem in the underlying kerberos libraries was resolved so that kerberos

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-17 Thread Eero Volotinen
Yep, maybe using ssl offloading devices like (BigIP) that receives tls1.2 and tlsv1.2 and then re-encrypts traffic with tls1.0 might be cheapest solution. -- Eero 2015-04-17 14:15 GMT+03:00 Johnny Hughes joh...@centos.org: On 04/16/2015 05:00 PM, Eero Volotinen wrote: in fact: modgnutls

Re: [CentOS] Install Bind with gss-spnego enabled

2015-04-17 Thread Mike
K, clear. Still very much appreciative of your experience and insight. I'm a wannabe who never has enough time amongst my duties to get my sys-admin skills tight. Cheers, Mike On Fri, Apr 17, 2015 at 9:36 AM, James Hogarth james.hoga...@gmail.com wrote: On 17 Apr 2015 13:04, Mike

Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-17 Thread Valeri Galtsev
On Fri, April 17, 2015 9:51 am, Always Learning wrote: On Fri, 2015-04-17 at 08:00 -0500, Valeri Galtsev wrote: It is amazing how much one can cripple what another person said by scissoring his phrases ;-) English people (excludes USA people) The first thing I learned what US people

Re: [CentOS-virt] CentOS 7 AMI Building

2015-04-17 Thread Jason Antman
Ok, thanks so much! That'll do fine. The only other bits mentioned on http://wiki.centos.org/Cloud/AWS in Image Builder Notes were the random root password, SELinux enabled, and relabel at first boot, which are easy enough. Thanks so much, Jason On Fri, Apr 17, 2015 at 12:20 PM, Karanbir Singh

Re: [CentOS-virt] CentOS 7 AMI Building

2015-04-17 Thread Karanbir Singh
I highly recommend actually looking at the images :) its just a minimal install with cloud-init from extras/ added in ( for 7, the 6 ones dont have cloud-init ). the installed content delivered from the minimal.iso and the ami's should be identical in pretty much every respect. If you really

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-17 Thread Eero Volotinen
2015-04-17 14:26 GMT+03:00 Dennis Jacobfeuerborn denni...@conversis.de: The cheapest sollution is probably compiling a private openssl somewhere on the system and then compiling apache using that private openssl version instead of the default system-wide one.=== Well, not

Re: [CentOS-virt] Seeing dropped packets / tcp retrans on latest 4.4.1-10el6

2015-04-17 Thread Nathan March
Hi All, I've tracked this down... We do rate limiting of our vms with a mix of ebtables/tc. Running these commands (replace vif1.0 with the correct vif for your VM) will reproduce this: ebtables -A FORWARD -i vif1.0 -j mark --set-mark 990 --mark-target CONTINUE tc qdisc add dev bond0 root

Re: [CentOS] Centos 5 tls v1.2, v1.1

2015-04-17 Thread Eero Volotinen
2015-04-17 14:40 GMT+03:00 Peter pe...@pajamian.dhs.org: On 04/17/2015 11:20 PM, Eero Volotinen wrote: Yep, maybe using ssl offloading devices like (BigIP) that receives tls1.2 and tlsv1.2 and then re-encrypts traffic with tls1.0 might be cheapest solution. Perhaps re-evaluate the need

Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-17 Thread J Martin Rushton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/04/15 02:59, Peter Lawler wrote: [OT ALERT] On 17/04/15 02:28, Valeri Galtsev wrote: clamav is a scanner that is designed to detect viruses (virii I should use for plural as it is Latin word) I believe this 'rule' in English is

Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-17 Thread J Martin Rushton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/04/15 16:04, Valeri Galtsev wrote: On Fri, April 17, 2015 9:51 am, Always Learning wrote: On Fri, 2015-04-17 at 08:00 -0500, Valeri Galtsev wrote: It is amazing how much one can cripple what another person said by scissoring his

[CentOS-announce] CEEA-2015:0855 CentOS 6 tzdata Enhancement Update

2015-04-17 Thread Johnny Hughes
CentOS Errata and Enhancement Advisory 2015:0855 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0855.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386:

[CentOS-announce] CEEA-2015:0855 CentOS 7 tzdata Enhancement Update

2015-04-17 Thread Johnny Hughes
CentOS Errata and Enhancement Advisory 2015:0855 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0855.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64:

[CentOS-announce] CEEA-2015:0855 CentOS 5 tzdata Enhancement Update

2015-04-17 Thread Johnny Hughes
CentOS Errata and Enhancement Advisory 2015:0855 Upstream details at : https://rhn.redhat.com/errata/RHEA-2015-0855.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386:

Re: [CentOS] Disable SSLv3 in sendmail in CentOS 5

2015-04-17 Thread Andrew Daviel
On Thu, 16 Apr 2015, Paul Heinlein wrote: On Thu, 16 Apr 2015, Andrew Daviel wrote: RedHat released sendmail-8.13.8-10.el5_11.src.rpm which includes sendmail-8.13.8-ssl-opts.patch which adds support for disabling SSLv3 and SSLv2 in sendmail.cf But as far as I can see there is no support in

Re: [CentOS] Plurals in English (was Re: ClamAV reports a trojan)

2015-04-17 Thread Liam O'Toole
On 2015-04-17, J Martin Rushton martinrushto...@btinternet.com wrote: On 17/04/15 16:04, Valeri Galtsev wrote: On Fri, April 17, 2015 9:51 am, Always Learning wrote: On Fri, 2015-04-17 at 08:00 -0500, Valeri Galtsev wrote: It is amazing how much one can cripple what another person