Re: [CentOS] Help: Server security compromised?

2008-08-06 Thread Bent Terp
On Wed, Aug 6, 2008 at 8:29 AM, Noob Centos Admin
<[EMAIL PROTECTED]> wrote:
> Since I followed some of the rules about SSH and used a non-standard port
> for SSH and disable SSHD listening on the default port 22, I've no way back

IMNSHO that's not particularly effective - much better to set up SSH
keys and either set
'PermitRootLogin without-password' in /etc/ssh/sshd_config; or
set 'PermitRootLogin no', and then su or sudo from your regular user -
I know the latter IS more secure, but it's also more annoying to work
with

> So I'm now prepping for a long ride to the IDC if a reboot doesn't help my
> stupidity.

Remember to reinstall from scratch if your server has been compromised
- there are thousands of dark dusty corners for the bugs to hide, once
they're inside, so don't expect to be able to flush them out.

Good luck!
/Bent
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Help: Server security compromised?

2008-08-06 Thread Robert - elists
 

 

If server is not compromised, just edit the smtp configs to deny acceptance
from that ip block

 

Why doesn't the server have an ILO port or something to that effect?

 

 - rh

 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Yum

2008-08-06 Thread Bent Terp
On Tue, Aug 5, 2008 at 7:01 PM, Mohsen Pahlevanzadeh
<[EMAIL PROTECTED]> wrote:
> Dear All,
> When i install CentOS, it doesn't install yum package.
> How i do it?
> when i haven't yum, it is like that i haven't apt-get.
> Please help me
> Yours,
> Mohsen
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Sounds like you need to talk to the support staff where you bought the
VPServer - after all, they're the ones responsible for creating your
problem.

Alternatively, you could try 'rpm --upgrade
http://mirror.centos.org/centos-5/5.2/updates/i386/RPMS/yum-3.2.8-9.el5.centos.2.1.noarch.rpm";
- add dependencies ad nauseam.

BR Bent
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help: Server security compromised?

2008-08-06 Thread Noob Centos Admin
On Wed, Aug 6, 2008 at 3:06 PM, Bent Terp <[EMAIL PROTECTED]> wrote:

> On Wed, Aug 6, 2008 at 8:29 AM, Noob Centos Admin
> <[EMAIL PROTECTED]> wrote:
> > Since I followed some of the rules about SSH and used a non-standard port
> > for SSH and disable SSHD listening on the default port 22, I've no way
> back
>
> IMNSHO that's not particularly effective - much better to set up SSH
> keys and either set
> 'PermitRootLogin without-password' in /etc/ssh/sshd_config; or
> set 'PermitRootLogin no', and then su or sudo from your regular user -
> I know the latter IS more secure, but it's also more annoying to work
> with


I did that too, no root login and everytime I have to su from normal user.
It is a pain to work with especially with having to use full pathnames for
commands instead of say just doing a "service httpd restart". But I figured
it was better safe than sorry and as well as I can do since I could not
figure out how to properly create a self-sign SSL cert.


Remember to reinstall from scratch if your server has been compromised
> - there are thousands of dark dusty corners for the bugs to hide, once
> they're inside, so don't expect to be able to flush them out.
>

Well, the thing is I'm not sure if it's compromised since now it became
obvious that the iptables is just being reset by the apf settings.. which is
at the moment a good thing since on reboot, apf re-added the lines to
disable the firewall every 5 minutes so I'm able to get back into the
server.

Now I just have to figure out where exactly can I add the block for the
offending VNSL IP address and have it work without choking up. However, I
decided to try whatever it is on Saturday so clients won't be hopping mad
why everything's dead.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help: Server security compromised?

2008-08-06 Thread Hendrik Strydom

On Wed, 2008-08-06 at 15:14 +0800, Noob Centos Admin wrote:
> 
.. snip


> I did that too, no root login and everytime I have to su from normal
> user. It is a pain to work with especially with having to use full
> pathnames for commands instead of say just doing a "service httpd
> restart". 
If you use 
su
only, you assume root privileges without the root environment.
Rather do
su -
which gives you the full root environment, including path.
The same holds for other users, i..e
su - joe
switches the user to the user joe with full environment.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help: Server security compromised?

2008-08-06 Thread Noob Centos Admin
Hi,


On Wed, Aug 6, 2008 at 3:07 PM, Robert - elists <[EMAIL PROTECTED]>wrote:

> If server is not compromised, just edit the smtp configs to deny acceptance
> from that ip block
>
The EXIM configurations are even more nightmarish than iptables, which at
least made some sort of sense. I've been plugging the ip address into the
various bad_sender bad_host etc files in the exim configuration directory
but it's still not ignoring it. The EXIM smpt/MTA will still accept the
connection, then check and realize hey something's not quite right, then
issue a reject before the VNSL machine terminates the connection. So the
server's still wasting resources handling tens of thousands of such
transaction and chewing up log space at the same time.

Hence I have to resort to just blocking from iptables.

Of course, it could very well be my own admitted incompetence that I'm doing
something wrong here so Exim is not working the way I expect. I'm very very
wary about messing any deeper with the mail settings because a server that's
obviously dead to the world is much easier to notice than client emails
mysteriously disappearing for days due to bad config before they realize it.


Why doesn't the server have an ILO port or something to that effect?
>

Well, my boss's a cheapskate and his clients are cheapskate so a couple of
years back I was assigned the server administration job on top of my regular
day role to setup the server with OTS parts. Hence the half baked setup
based on a tight budget and whatever information I can glean from the
internet and the good folks on forums and mailing lists.

So for the ILO? Well, only today did the term enter my mind. Although I did
vaguely remember suggestions for a remote reboot button but it was beyond my
know how to setup.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help: Server security compromised?

2008-08-06 Thread Noob Centos Admin
Hi,


If you use
> su
> only, you assume root privileges without the root environment.
> Rather do
> su -
> which gives you the full root environment, including path.
> The same holds for other users, i..e
> su - joe
> switches the user to the user joe with full environment.
>

Thanks a million for that! Going to save me a ton of time from issuing
whereis command to find commands when I need to follow instructions off a
website!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help: Server security compromised?

2008-08-06 Thread Ned Slider

Noob Centos Admin wrote:

Hi,


If you use

su
only, you assume root privileges without the root environment.
Rather do
su -
which gives you the full root environment, including path.
The same holds for other users, i..e
su - joe
switches the user to the user joe with full environment.



Thanks a million for that! Going to save me a ton of time from issuing
whereis command to find commands when I need to follow instructions off a
website!



Plus we have a Wiki page that explains in some detail here:

http://wiki.centos.org/TipsAndTricks/BecomingRoot

It's a common mistake/misunderstanding most people make to start with :)

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5.2 -- how do I choose a wireless network?

2008-08-06 Thread Johnny Hughes

Aleksey Tsalolikhin wrote:

Good answer.  Thanks, Spiro!   I'll try Ubunto.

Aleksey

On Tue, Aug 5, 2008 at 9:53 PM, Spiro Harvey, Knossos Networks Ltd
<[EMAIL PROTECTED]> wrote:

CentOS is aimed as a server distribution, and I don't recommend it for a
home machine. You would do better to look at Fedora or Ubuntu. They are
designed as home distributions and are far better for getting going on a
home network.


OK ... this is silly

CentOS is an Enterprise distro and works great as a workstation.  In 
fact, it is just as good as Ubuntu for a desktop.  I would argue that a 
stable, supported for several year desktop is much better than a distro 
that upgrades every 6 months.


I am not in the business of tearing down other distros, so I won't ... 
and if you want to use Ubuntu, great.  But, there are millions of users 
of CentOS and many people use it on the desktop and on their wireless 
laptops.


WRT wireless on CentOS, use NetworkManager to find and connect to 
networks ...


You can see if it is installed with the command:

rpm -qa | egrep "NetworkManager|wpa_supplicant"

If installed, the output is similar to this:

NetworkManager-0.6.4-8.el5
NetworkManager-glib-0.6.4-8.el5
NetworkManager-gnome-0.6.4-8.el5
wpa_supplicant-0.4.8-10.2.el5

If not, install with thsi command:

yum install NetworkManger\* wpa_supplicant

The run NetworkManager from the command line.

You will see a NetworkManager applet beside the clock and you should be 
able to click it and pick a network.


Here are more details for how to setup NetworkManager:

http://fedoraproject.org/wiki/Tools/NetworkManager

Thanks,
Johnny Hughes



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RPM Uninstall

2008-08-06 Thread kapil singh
Hello,
run

# rpm -qa | grep caching-nameserver

it shows the whole package name.
Uninstall it using

# rpm -e 

or

remove it using yum (recommended)

yum remove 


On Wed, Aug 6, 2008 at 1:24 AM, R P Herrold <[EMAIL PROTECTED]> wrote:

> On Tue, 5 Aug 2008, Matt wrote:
>
>  I am wanting to uninstall an rpm off my CentOS 4.6 box.  Namely
>> caching-nameserver.  Is there anywhere I can look at the uninstall
>> script to see what it all does on its way out?
>>
>
> Run as an unpriv'd user:
>
>rpm -q --scripts caching-nameserver
>
> will show them to you, without running them
>
> -- Russ herrold
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
Thanks and Regards,
Kapil Singh Kushwah
Linux System Administrator
Hotwax Media Inc.
Indore,(M.P) INDIA
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5.2 -- how do I choose a wireless network?

2008-08-06 Thread Akemi Yagi
On Wed, Aug 6, 2008 at 3:57 AM, Johnny Hughes <[EMAIL PROTECTED]> wrote:
>
> WRT wireless on CentOS, use NetworkManager to find and connect to networks
> ...
>
> You can see if it is installed with the command:
>
> rpm -qa | egrep "NetworkManager|wpa_supplicant"
>
> If installed, the output is similar to this:
>
> NetworkManager-0.6.4-8.el5
> NetworkManager-glib-0.6.4-8.el5
> NetworkManager-gnome-0.6.4-8.el5
> wpa_supplicant-0.4.8-10.2.el5
>
> If not, install with thsi command:
>
> yum install NetworkManger\* wpa_supplicant
>
> The run NetworkManager from the command line.
>
> You will see a NetworkManager applet beside the clock and you should be able
> to click it and pick a network.
>
> Here are more details for how to setup NetworkManager:
>
> http://fedoraproject.org/wiki/Tools/NetworkManager

Although not quite as extensive as the Fedora Wiki page, we have our
own CentOS Wiki for NetworkManager at:

http://wiki.centos.org/HowTos/Laptops/NetworkManager

At the bottom of the page it says "There is nothing more to it !"   :-D

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 42, Issue 2

2008-08-06 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
[EMAIL PROTECTED]

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]

You can reach the person managing the list at
[EMAIL PROTECTED]

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CESA-2008:0612 Important CentOS 5 i386 kernel Update
  (Karanbir Singh)
   2. CESA-2008:0612 Important CentOS 5 x86_64 kernel   Update
  (Karanbir Singh)


--

Message: 1
Date: Wed, 6 Aug 2008 10:53:20 +0100
From: Karanbir Singh <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0612 Important CentOS 5 i386
kernel  Update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2008:0612 Important

Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0612.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

i386:
0e96a5c5648375bca4f54f290d3a2247  kernel-2.6.18-92.1.10.el5.i686.rpm
5336a850aa30b5a55cdb3788a14a9f28  kernel-debug-2.6.18-92.1.10.el5.i686.rpm
3c78e714d11c2c2b6910cdcc47a694bf  kernel-debug-devel-2.6.18-92.1.10.el5.i686.rpm
1404c810d7571d722436fba2dbe86445  kernel-devel-2.6.18-92.1.10.el5.i686.rpm
f4990d57aed66cd66b86cb0193032981  kernel-doc-2.6.18-92.1.10.el5.noarch.rpm
bc9b2a65df26736b6dfd8ed731f50209  kernel-headers-2.6.18-92.1.10.el5.i386.rpm
5aa251d478ff3d43fae595e008087f0a  kernel-PAE-2.6.18-92.1.10.el5.i686.rpm
d76a3f8d837b82f0ddb3d9b06537898f  kernel-PAE-devel-2.6.18-92.1.10.el5.i686.rpm
4a0c9a6c14ade7cbf7e2701cfdfa22a8  kernel-xen-2.6.18-92.1.10.el5.i686.rpm
743d9f204512f83a73e46ae126733371  kernel-xen-devel-2.6.18-92.1.10.el5.i686.rpm

Source:
1b05a0525efa915022c16d741764325e  kernel-2.6.18-92.1.10.el5.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, [EMAIL PROTECTED]



--

Message: 2
Date: Wed, 6 Aug 2008 10:53:21 +0100
From: Karanbir Singh <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0612 Important CentOS 5 x86_64
kernel  Update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=us-ascii


CentOS Errata and Security Advisory 2008:0612 Important

Upstream details at : https://rhn.redhat.com/errata/RHSA-2008-0612.html

The following updated files have been uploaded and are currently 
syncing to the mirrors: ( md5sum Filename ) 

x86_64:
1457356856ffe82848877a6f08457dea  kernel-2.6.18-92.1.10.el5.x86_64.rpm
7cd3f0234fb117b11298281bdb5f4d0c  kernel-debug-2.6.18-92.1.10.el5.x86_64.rpm
c79e31719719d3b732f0f62248c2186e  
kernel-debug-devel-2.6.18-92.1.10.el5.x86_64.rpm
ff0631c0ff8325ae2162ee811090193a  kernel-devel-2.6.18-92.1.10.el5.x86_64.rpm
b1d78ee9d4a2b15052584d1a55733325  kernel-doc-2.6.18-92.1.10.el5.noarch.rpm
53917fdfdbabc3e34983b9cf073983ae  kernel-headers-2.6.18-92.1.10.el5.x86_64.rpm
3726883410bb2de3d7b124bf68439e72  kernel-xen-2.6.18-92.1.10.el5.x86_64.rpm
a8ce18b06b43a0e586347ba5e9f0ad8c  kernel-xen-devel-2.6.18-92.1.10.el5.x86_64.rpm

Source:
1b05a0525efa915022c16d741764325e  kernel-2.6.18-92.1.10.el5.src.rpm


-- 
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, [EMAIL PROTECTED]



--

___
CentOS-announce mailing list
[EMAIL PROTECTED]
http://lists.centos.org/mailman/listinfo/centos-announce


End of CentOS-announce Digest, Vol 42, Issue 2
**
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Slightly OT

2008-08-06 Thread D Steward
> OK ... this is silly
> 
> CentOS is an Enterprise distro and works great as a workstation.  In 
> fact, it is just as good as Ubuntu for a desktop.  I would argue that a 
> stable, supported for several year desktop is much better than a distro 
> that upgrades every 6 months.

I've been starting to ascribe to your opinion.

For several years now, I've used CentOS on my servers and fedora on my
laptop and desktop computer.
However, F6 and onwards have been a bit flaky to install, with myriad
little things going wrong which needed some TLC which no beginner could
possibly do.
And just last month when I went to install F8 on my laptop since F7 was
EOL, the darned thing consistently segfaulted, despite the media passing
OK, and my laptop being a bog-standard 4 year old HP corporate
centrino-powered which is certified RH3-compatible. The only way I could
do it was via the LiveCD :/
And then I had lots of little things going wrong on the install like
vital rpms not being installed by yum which I had to do by hand since
yum refused to even acknowledge they were available. :-X
In 6 months time I'll have to do it all again to install F9 which by
many accounts is a POS, freezing up for several minutes at a time for no
apparent reason.
So IMO, having used Fedora since about FC3, stability is getting worse -
each version is more and more on the bleeding edge, too unpolished, too
unfinished - definitely not suitable for beginners unless they have
someone to hold their hand and pick up the pieces.

Ubuntu has its own problems. While it is slightly less cutting-edge than
F9 and thus easier to install, the forums are huge and unwieldy. Every
problem that one can possibly have, has already been answered by 100,000
+ people in 10,000+ threads. The noobs outnumber the proficient users by
100 to 1, so finding the right solution to your problem is a real
challenge in that 95% (my estimate) of the answers are wrong. So you'll
spend a lot of time doing (and undoing) the advice given and
backtracking from dead-ends.

In stark contrast, this list has one of the highest signal-to-noise
ratios I have ever encountered, and the standard of contributors makes
me feel inadequate :/
However, IMO, CentOS is still slightly too old to be used on a modern
laptop, but probably fine for use on a desktop where standby and power
conservation is less important.
Stability of CentOS is outstanding, but still not perfect - I remember
one problem from last year when I was using CentOS on a desktop and
Evolution refused to start after an update.  It needed a small tweak
which was supplied on-list. But this problem came from upstream so also
affected RedHat.

FWIW, I don't know what version of NetworkManager that CentOS uses, but
the one used by F8 not only doesn't require wpa-supplicant to connect
via WPA/WPA2 but many 'puters (such as my laptop) don't even need the
network service running, since NW is now managing wired connections as
well as wireless. It even integrates with OpenVPN now, although I am yet
to try this.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Slightly OT

2008-08-06 Thread Jayson Rowe

D Steward wrote:

OK ... this is silly

CentOS is an Enterprise distro and works great as a workstation.  In 
fact, it is just as good as Ubuntu for a desktop.  I would argue that a 
stable, supported for several year desktop is much better than a distro 
that upgrades every 6 months.



I've been starting to ascribe to your opinion.

For several years now, I've used CentOS on my servers and fedora on my
laptop and desktop computer.
However, F6 and onwards have been a bit flaky to install, with myriad
little things going wrong which needed some TLC which no beginner could
possibly do.
And just last month when I went to install F8 on my laptop since F7 was
EOL, the darned thing consistently segfaulted, despite the media passing
OK, and my laptop being a bog-standard 4 year old HP corporate
centrino-powered which is certified RH3-compatible. The only way I could
do it was via the LiveCD :/
And then I had lots of little things going wrong on the install like
vital rpms not being installed by yum which I had to do by hand since
yum refused to even acknowledge they were available. :-X
In 6 months time I'll have to do it all again to install F9 which by
many accounts is a POS, freezing up for several minutes at a time for no
apparent reason.
So IMO, having used Fedora since about FC3, stability is getting worse -
each version is more and more on the bleeding edge, too unpolished, too
unfinished - definitely not suitable for beginners unless they have
someone to hold their hand and pick up the pieces.

Ubuntu has its own problems. While it is slightly less cutting-edge than
F9 and thus easier to install, the forums are huge and unwieldy. Every
problem that one can possibly have, has already been answered by 100,000
+ people in 10,000+ threads. The noobs outnumber the proficient users by
100 to 1, so finding the right solution to your problem is a real
challenge in that 95% (my estimate) of the answers are wrong. So you'll
spend a lot of time doing (and undoing) the advice given and
backtracking from dead-ends.

In stark contrast, this list has one of the highest signal-to-noise
ratios I have ever encountered, and the standard of contributors makes
me feel inadequate :/
However, IMO, CentOS is still slightly too old to be used on a modern
laptop, but probably fine for use on a desktop where standby and power
conservation is less important.
Stability of CentOS is outstanding, but still not perfect - I remember
one problem from last year when I was using CentOS on a desktop and
Evolution refused to start after an update.  It needed a small tweak
which was supplied on-list. But this problem came from upstream so also
affected RedHat.

FWIW, I don't know what version of NetworkManager that CentOS uses, but
the one used by F8 not only doesn't require wpa-supplicant to connect
via WPA/WPA2 but many 'puters (such as my laptop) don't even need the
network service running, since NW is now managing wired connections as
well as wireless. It even integrates with OpenVPN now, although I am yet
to try this.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
  
I agree with both posters 100% [especially about the Ubuntu Forums - 
sometimes bigger isn't always better :-) ]
I started using linux with Red Hat 6.2 and I stayed w/ Fedora until 
around FC3, and that's when things started going downhill. I ended up 
being the classical distro-hopper for some time trying to find what 
would work for me, and I ended up using CentOS on my desktop 
workstation, and I use a small lesser-known distro called Foresight 
Linux on my Laptop - it's very up-to-date, has a unique and wonderful 
package manager and is far more stable than either Fedora or Ubuntu.


That combination works very well for me.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help: Server security compromised?

2008-08-06 Thread D Steward
Hi, the more completely you lock down a server, the harder it will be
for you to do some useful work on it.
These matters require a balance between security and ease-of-use for the
admins.
Its especially important not to cut your bridges when administering a
remote server.

Despite many people advising to use keys and change ports etc etc, you
really only need to do 3 things to stop dead any unauthorised SSH
logins:
1. prevent direct root logins
2. create a user account (just for SSH logins) with an unusual name and
give that account a very good password (20 character alphanumeric). Only
allow that user to login via SSH.
3. give root a password of similar complexity.

Doing just these three will ensure that not only will no-one ever be
likely to get in via SSH, but you will be able to SSH in from anywhere
from any computer.

Furthermore, when doing any work with firewalls or ssh on a remote
server, you must *always* have more than one SSH shell open. Don't close
the last shell until you have tested your changes and are confident you
won't lock yourself out.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?

2008-08-06 Thread Ross S. W. Walker
Rainer Duffner wrote:
> Am 06.08.2008 um 01:00 schrieb Lanny Marcus:
> 
> >
> > John: Thank you. I'm not sure how we will capture the video from the
> > camera. If it's
> > via Firewire, I will need to buy something to install in one of our
> > PCs Last resort is doing
> > it on Windows XP, with whatever comes with that or is 
> available free..
> >
> 
> 
> Only Macs come with a good, free DV-Editor (iMovie), IIRC.
> Some people claim the Mac is worth iMovie alone - but I don't 
> know, I only do digital still-pictures.
> 
> With the Mac, there would at least be a Unix underneath. ;-)
> 
> One thing: my co-worker has a PC he edits videos with where he  
> disables antivirus stuff during the edit.
> He said he really only got on the internet once in that state  
> (antivirus disabled) - but that was enough to infect the PC 
> so he had to spend hours to clean it up.
> If you can do it with kinodv - good for you.
> Otherwhise, consider getting a Mac, if your time is worth 
> something

I have to second the Mac suggestion. Having just bought a Mac
coming from a PC/Windows desktop I had no idea how good an
environment it was for media processing, but I have to say
it is the best for video/still image editing and if iMovie
or iPhoto don't cut it then Aperature or Final Cut would
get the job done for a reasonable price (compared to say
Photoshop and Premiere).

-Ross

__
This e-mail, and any attachments thereto, is intended only for use by
the addressee(s) named herein and may contain legally privileged
and/or confidential information. If you are not the intended recipient
of this e-mail, you are hereby notified that any dissemination,
distribution or copying of this e-mail, and any attachments thereto,
is strictly prohibited. If you have received this e-mail in error,
please immediately notify the sender and permanently delete the
original and any copy or printout thereof.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Help: Server security compromised?

2008-08-06 Thread Robert - elists
 

 

 A possible remote reboot can be setup from a on that server obscure web
page URL to a privileged script that is password protected

 

 Inexpensive reset button

 

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help: Server security compromised?

2008-08-06 Thread Noob Centos Admin
Thanks Steward and Robert for those suggestions, they make plenty of sense!.


About the two SSH terminal, if I activate a wrong firewall change that
blocks the SSH port, would it not also terminate the existing terminals
since new packets going in would be rejected, or does it not affect already
established TCP connections?


Probably also going to make a script to shutdown the firewall as well as one
for reboot. Since so far all 3 times my noobness involves firewalling myself
out, although in a slightly different way each time!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] I'm Stuck

2008-08-06 Thread Bob Smither
Dear List,

I have an older Sony Vaio that I would like to install CentOS on.  The
unit has a USB CD that can _not_ be used as a boot device (the Sony one
could, but mine is an aftermarket CD and can't be used to boot).  It
does have a floppy drive that it can boot from.

The only network install method for CentOS that I can find uses a CD,
not a floppy.

Is there anyway to get CentOS on this machine?

Thanks!
-- 
Bob Smither, PhD   Circuit Concepts, Inc.
=

 - Ubi libertas habitat, ibi nostra patria est -
   "Where liberty dwells, there is my country"

=
[EMAIL PROTECTED]  http://www.C-C-I.Com  281-331-2744(office)  -4616(fax)

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] I'm Stuck

2008-08-06 Thread Sergey Podushkin

Bob Smither wrote:

Dear List,

I have an older Sony Vaio that I would like to install CentOS on.  The
unit has a USB CD that can _not_ be used as a boot device (the Sony one
could, but mine is an aftermarket CD and can't be used to boot).  It
does have a floppy drive that it can boot from.

The only network install method for CentOS that I can find uses a CD,
not a floppy.

Is there anyway to get CentOS on this machine?

You can write floppy, boot from it and continue install from CD.
I hope... ;)

If your Sony can boot from network by PXE, so you can use that way too
(and it's one I prefer), but you have to have appropriate server for
this type of install.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5.2 -- how do I choose a wireless network?

2008-08-06 Thread MHR
On Wed, Aug 6, 2008 at 3:57 AM, Johnny Hughes <[EMAIL PROTECTED]> wrote:
>
> WRT wireless on CentOS, use NetworkManager to find and connect to networks
> ...
>
> You can see if it is installed with the command:
>
> rpm -qa | egrep "NetworkManager|wpa_supplicant"
>
> If installed, the output is similar to this:
>
> NetworkManager-0.6.4-8.el5
> NetworkManager-glib-0.6.4-8.el5
> NetworkManager-gnome-0.6.4-8.el5
> wpa_supplicant-0.4.8-10.2.el5
>
> If not, install with thsi command:
>
> yum install NetworkManger\* wpa_supplicant
>
> The run NetworkManager from the command line.
>
> You will see a NetworkManager applet beside the clock and you should be able
> to click it and pick a network.
>
> Here are more details for how to setup NetworkManager:
>
> http://fedoraproject.org/wiki/Tools/NetworkManager
>

The OP was wondering if this was possible from the live CD - I'm
wondering if installing a (missing?) package is the right solution in
/that/ case.

For (normal) CentOS, I have used a USB plugin wireless adapter on my
laptop with excellent success, although it is not as easy as (okay, I
won't name that other excuse for an OS) 1-2-3 - it takes some looking
to find the whole enchilada, but it /is/ find-able.

mhr
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Help: Server security compromised?

2008-08-06 Thread Sorin Srbu
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Noob Centos Admin
Sent: Wednesday, August 06, 2008 5:31 PM
To: CentOS mailing list
Subject: Re: [CentOS] Help: Server security compromised?

 

Thanks Steward and Robert for those suggestions, they make plenty of sense!. 

About the two SSH terminal, if I activate a wrong firewall change that blocks
the SSH port, would it not also terminate the existing terminals since new
packets going in would be rejected, or does it not affect already established
TCP connections?


Probably also going to make a script to shutdown the firewall as well as one
for reboot. Since so far all 3 times my noobness involves firewalling myself
out, although in a slightly different way each time!

Seen this?

http://www.askbjoernhansen.com/2007/09/18/safely_change_firewall_rules_remotel
y.html



smime.p7s
Description: S/MIME cryptographic signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] I'm Stuck

2008-08-06 Thread Michel van Deventer
Hi,

On Wed, 2008-08-06 at 11:36 -0500, Bob Smither wrote:
> Dear List,
> 
> I have an older Sony Vaio that I would like to install CentOS on.  The
> unit has a USB CD that can _not_ be used as a boot device (the Sony one
> could, but mine is an aftermarket CD and can't be used to boot).  It
> does have a floppy drive that it can boot from.
> 
> The only network install method for CentOS that I can find uses a CD,
> not a floppy.
> 
> Is there anyway to get CentOS on this machine?
Can you boot from USB stick? You then could use the Live CD, converted
to USB or use another bootable linux on it. As long as you have a
bootable partition where you can put a vmlinuz, initrd.img and grub,
you're in business.

regards,

Michel



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?

2008-08-06 Thread Florin Andrei

Akemi Yagi wrote:


I almost forgot to tell you that firewire support is disabled in the
distro kernel.  This is upstream's decision.


wow :-(

Why did they do that?

--
Florin Andrei

http://florin.myip.org/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?

2008-08-06 Thread Florin Andrei

John R Pierce wrote:


bad news is, you really should have a separate drive just for video 
capture to reduce disk contention as the streaming rate of the capture 
can't be interrupted.   its only around 3MB/sec, so its not /that/  bad 
with today's faster drives, but still.


Well, it depends. If you're just browsing and reading email, a separate 
drive is really quite unnecessary. I got away with a single drive for 
everything, I just bumped up the buffers in dvgrab to like 200 frames or 
so (about 7 seconds for NTSC) and everything was fine.


dvgrab will tell you if it drops frames. If it does, you know you have 
to either:

- increase the buffer even more
- stop messing around with the system
- should the previous fail, then get a dedicated drive

--
Florin Andrei

http://florin.myip.org/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?

2008-08-06 Thread Akemi Yagi
On Wed, Aug 6, 2008 at 11:27 AM, Florin Andrei <[EMAIL PROTECTED]> wrote:
> Akemi Yagi wrote:
>>
>> I almost forgot to tell you that firewire support is disabled in the
>> distro kernel.  This is upstream's decision.
>
> wow :-(
>
> Why did they do that?

Well, this is just my guess -- enterprise class Linux is (used to be)
primarily for servers and therefore there is not much demand for
things like firewire and wireless and...

The situation *might* change if/when upstream start pushing toward the
desktop world.

Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] I'm Stuck

2008-08-06 Thread William L. Maltby

On Wed, 2008-08-06 at 20:03 +0200, Michel van Deventer wrote: 
> Hi,
> 
> On Wed, 2008-08-06 at 11:36 -0500, Bob Smither wrote:
> > Dear List,
> > 
> > I have an older Sony Vaio that I would like to install CentOS on.  The
> > unit has a USB CD that can _not_ be used as a boot device (the Sony one
> > could, but mine is an aftermarket CD and can't be used to boot).  It
> > does have a floppy drive that it can boot from.

I think someone mentioned a floppy. Last I checked, the ISO image had
some sub-directories that contained floppy images. If they're still
included, you should be able to make a bootable floppy and then use the
USB CD as the install media. Or get the image from a network location
(IIRC).

> > 
> > The only network install method for CentOS that I can find uses a CD,
> > not a floppy.

Give the floppy method a try. If it let's you get either the CD or to a
network, you should be able to install.

> > 
> > Is there anyway to get CentOS on this machine?
> Can you boot from USB stick? You then could use the Live CD, converted
> to USB or use another bootable linux on it. As long as you have a
> bootable partition where you can put a vmlinuz, initrd.img and grub,
> you're in business.
> 
>   regards,
> 
>   Michel
> 

HTH
-- 
Bill

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Yum

2008-08-06 Thread Lanny Marcus
On Wed, Aug 6, 2008 at 2:10 AM, Bent Terp <[EMAIL PROTECTED]> wrote:
> On Tue, Aug 5, 2008 at 7:01 PM, Mohsen Pahlevanzadeh
> <[EMAIL PROTECTED]> wrote:
>> Dear All,
>> When i install CentOS, it doesn't install yum package.
>> How i do it?
>> when i haven't yum, it is like that i haven't apt-get.
>> Please help me
>> Yours,
>> Mohsen
>> ___
>> CentOS mailing list
>> CentOS@centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>
> Sounds like you need to talk to the support staff where you bought the
> VPServer - after all, they're the ones responsible for creating your
> problem.
>
> Alternatively, you could try 'rpm --upgrade
> http://mirror.centos.org/centos-5/5.2/updates/i386/RPMS/yum-3.2.8-9.el5.centos.2.1.noarch.rpm";
> - add dependencies ad nauseam.

Hosts normally advertise a VPS as being almost like a Dedicated
Server. Lots of resources and lots of options. In this case,
without being able to use yum, it starts as a Security problem,
because he cannot update the packages that are
installed. His second problem is that he cannot install new software
with yum, which eliminates a lot of options. Unlike Shared Hosting,
which is Managed, someone with a VPS must Manage their VPS, as if it
was a Dedicated Server, or, pay someone to do that. But, how
would they manage it, without yum? It's much more difficult, without
yum. IMHO, he should look for a VPS with another provider, that allows
him to use yum, etc.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?

2008-08-06 Thread Lanny Marcus
n Tue, Aug 5, 2008 at 10:47 PM, Akemi Yagi <[EMAIL PROTECTED]> wrote:
> On Tue, Aug 5, 2008 at 7:57 PM, Lanny Marcus <[EMAIL PROTECTED]> wrote:
>> On Tue, Aug 5, 2008 at 6:58 PM, Florin Andrei <[EMAIL PROTECTED]> wrote:
>>> Akemi Yagi wrote:
 I have been using kino to import from our miniDV camcorder and do some
 simple editing -- but all on FC6.  As I wrote in my post earlier in
 this thread, I have been unable to do this on CentOS 5.  Were you able
 to get kino to recognize the firewire port ?  If so, would you mind
 sharing your experience in this forum thread?

>> After we get the camcorder and a PCI Firewire card, I will try this in
>> CentOS 5.2 and let you know if it works on our HW.
>> Possibly it has to do with the HW Akemi is using, but, probably not,
>> because it works there on FC6. Probably you are correct that
>> something is broken in CentOS for Firewire.
>
> I almost forgot to tell you that firewire support is disabled in the
> distro kernel.  This is upstream's decision.  Fortunately, we have
> centosplus kernel which has firewire enabled.  This is briefly
> mentioned in the forum thread I referred to.

Thank you for advising me about that very critical detail!   I would have
wondered why it didn't work, with the standard kernel!
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?

2008-08-06 Thread Lanny Marcus
On Tue, Aug 5, 2008 at 11:05 PM, John R Pierce <[EMAIL PROTECTED]> wrote:
> Lanny Marcus wrote:
>> I will need to buy a PCI card for Firewire and put it into one of our
>> Desktop boxes.. Probably my wife's, because it has the biggest HD. If
>> it doesn't work on CentOS 5.2, we will need to use M$ Windows.
>
> good news is, firewire cards are quite cheap.   note that DV uses firewire
> 100, which is compatible with 100-400 but NOT 800 (sigh).  so don't get a
> card  which has only firewire 800 ports.   also, you'll need a 1394 cable
> that has the standard firewire 100-400 connector on one end and the little
> tiny camcorder connector on the other (this is similar to but VERY DIFFERENT
> than the miniUSB connector)
>
> bad news is, you really should have a separate drive just for video capture
> to reduce disk contention as the streaming rate of the capture can't be
> interrupted.   its only around 3MB/sec, so its not /that/  bad with today's
> faster drives, but still.

John: Thank you, for all of the above information! If I can't buy the
card here in our
town, there is something like Ebay and I can probably order it there.
Very useful data to have,,
*before* I buy the card, and not after. I have a couple of spare HDs,
in a box, so I can install one, if there
is a spare bay. I will check out the specs on our 3 Desktops, to see
which of them can
handle a 2nd HD. Lanny
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: OT: Digital Video Editor for CentOS 5.2 - Suggestions?

2008-08-06 Thread Scott Silva

on 8-6-2008 11:33 AM Akemi Yagi spake the following:

On Wed, Aug 6, 2008 at 11:27 AM, Florin Andrei  
wrote:

Akemi Yagi wrote:

I almost forgot to tell you that firewire support is disabled in the
distro kernel.  This is upstream's decision.

wow :-(

Why did they do that?


Well, this is just my guess -- enterprise class Linux is (used to be)
primarily for servers and therefore there is not much demand for
things like firewire and wireless and...

The situation *might* change if/when upstream start pushing toward the
desktop world.

Akemi
I also believe there are firewire exploits that can allow unauth. access since 
firewire has direct DMA access. But that may or may not be upstreams 
motivation. It could be as simple as they didn't want to support it.


--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Re: I'm Stuck

2008-08-06 Thread Scott Silva

on 8-6-2008 11:34 AM William L. Maltby spake the following:
On Wed, 2008-08-06 at 20:03 +0200, Michel van Deventer wrote: 

Hi,

On Wed, 2008-08-06 at 11:36 -0500, Bob Smither wrote:

Dear List,

I have an older Sony Vaio that I would like to install CentOS on.  The
unit has a USB CD that can _not_ be used as a boot device (the Sony one
could, but mine is an aftermarket CD and can't be used to boot).  It
does have a floppy drive that it can boot from.


I think someone mentioned a floppy. Last I checked, the ISO image had
some sub-directories that contained floppy images. If they're still
included, you should be able to make a bootable floppy and then use the
USB CD as the install media. Or get the image from a network location
(IIRC).


The only network install method for CentOS that I can find uses a CD,
not a floppy.


Give the floppy method a try. If it let's you get either the CD or to a
network, you should be able to install.


Is there anyway to get CentOS on this machine?

Can you boot from USB stick? You then could use the Live CD, converted
to USB or use another bootable linux on it. As long as you have a
bootable partition where you can put a vmlinuz, initrd.img and grub,
you're in business.

regards,

Michel



HTH

Floppy is probably out per this info in the /images directory;

This directory contains image files that can be used to create media
capable of starting the CentOS installation process.

The boot.iso file is an ISO 9660 image of a bootable CD-ROM.  It is useful
in cases where the CD-ROM installation method is not desired, but the
CD-ROM's boot speed would be an advantage.

To use this image file, burn the file onto CD-R (or CD-RW) media as you
normally would.

The diskboot.img file is a VFAT filesystem image that can be written to a
USB pendrive or other bootable media larger than a floppy.  Note that
booting via USB is dependent on your BIOS supporting this.  It should
be written to the device using dd.

But if you can boot from USB you are all set. If you can only boot from 
floppy, you would need to use a bootable floppy linux that supports your 
network card to copy some stuff to the system and get it to boot the pxe 
images by whatever you can use like grub, or syslinux.


Or you can remove the hard drive and copy files to it from another system or 
install from that system.




--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Yum

2008-08-06 Thread David Dyer-Bennet

On Wed, August 6, 2008 13:40, Lanny Marcus wrote:

> Hosts normally advertise a VPS as being almost like a Dedicated
> Server. Lots of resources and lots of options. In this case,
> without being able to use yum, it starts as a Security problem,
> because he cannot update the packages that are
> installed. His second problem is that he cannot install new software
> with yum, which eliminates a lot of options. Unlike Shared Hosting,
> which is Managed, someone with a VPS must Manage their VPS, as if it
> was a Dedicated Server, or, pay someone to do that. But, how
> would they manage it, without yum? It's much more difficult, without
> yum. IMHO, he should look for a VPS with another provider, that allows
> him to use yum, etc.

FTP?  Rpm?  Ftp up a suitable yum rpm and install it.

(Maybe it's really part of an active attempt to keep people from
installing software, but on a virtual private server that'd be amazingly
stupid; so I'm guessing, from a great distance and very little
information, that it's something simpler like just not having installed
yum.)
-- 
David Dyer-Bennet, [EMAIL PROTECTED]; http://dd-b.net/
Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/
Photos: http://dd-b.net/photography/gallery/
Dragaera: http://dragaera.info

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?

2008-08-06 Thread David Dyer-Bennet

On Wed, August 6, 2008 13:33, Akemi Yagi wrote:
> On Wed, Aug 6, 2008 at 11:27 AM, Florin Andrei <[EMAIL PROTECTED]>
> wrote:

>> Why did they do that?
>
> Well, this is just my guess -- enterprise class Linux is (used to be)
> primarily for servers and therefore there is not much demand for
> things like firewire and wireless and...

Firewire is a sensible interface for external backup devices in some
configurations.  Then again, is it hard to add back in?

-- 
David Dyer-Bennet, [EMAIL PROTECTED]; http://dd-b.net/
Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/
Photos: http://dd-b.net/photography/gallery/
Dragaera: http://dragaera.info

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] rsyslog and imuxsocks

2008-08-06 Thread Dirk H. Schulz

Hi folks,

I have installed rsyslog and rsyslog-mysql from the base repository, but 
the loadable module "imuxsocks" seems not to be part of these packages.


Does this have a certain reason? And is there any other way to get this 
module besides compiling rsyslog on my own?


Any hint or help is appreciated.

Dirk
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] OT: Digital Video Editor for CentOS 5.2 - Suggestions?

2008-08-06 Thread Jason Pyeron

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of David Dyer-Bennet
> Sent: Wednesday, August 06, 2008 3:36 PM
> To: CentOS mailing list
> Subject: Re: [CentOS] OT: Digital Video Editor for CentOS 5.2 
> - Suggestions?
> 
> 
> On Wed, August 6, 2008 13:33, Akemi Yagi wrote:
> > On Wed, Aug 6, 2008 at 11:27 AM, Florin Andrei 
> > <[EMAIL PROTECTED]>
> > wrote:
> 
> >> Why did they do that?
> >
> > Well, this is just my guess -- enterprise class Linux is 
> (used to be) 
> > primarily for servers and therefore there is not much demand for 
> > things like firewire and wireless and...
> 
> Firewire is a sensible interface for external backup devices 
> in some configurations.  Then again, is it hard to add back in?

I was under the impression that firewire hard drives worked it was the libraw
firewire stuff that was yanked.

I could have sworn that I have used a centos cd to do a hd clone using firewire
on my laptop.


--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron  PD Inc. http://www.pdinc.us -
- Principal Consultant  10 West 24th Street #100-
- +1 (443) 269-1555 x333Baltimore, Maryland 21218   -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00.
 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help: Server security compromised?

2008-08-06 Thread Noob Centos Admin
On Thu, Aug 7, 2008 at 1:54 AM, Sorin Srbu <[EMAIL PROTECTED]> wrote:

>  Seen this?
>
>
> http://www.askbjoernhansen.com/2007/09/18/safely_change_firewall_rules_remotely.html
>
Unfortunately, only after you pointed it out :(
But thankfully whoever wrote APF apparently knows this, hence it does insert
an automatic reset of the firewall after 5 minutes.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: I'm Stuck

2008-08-06 Thread Bob Smither
Dear List,

Many thanks for all the suggestions!  I will see if the Vaio can boot
from a pen drive.  Being several years old, I'm not sure.  If not, the
suggestion to put the drive in another computer is intriguing.

Best regards,
-- 
Bob Smither <[EMAIL PROTECTED]>

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help: Server security compromised?

2008-08-06 Thread D Steward

> About the two SSH terminal, if I activate a wrong firewall change that
> blocks the SSH port, would it not also terminate the existing
> terminals since new packets going in would be rejected, or does it not
> affect already established TCP connections?
It depends upon what you are doing and in which order you do it.
Unfortunately, I'm not an expert in iptables - I refuse to spend time
learning more than the basics on it, since I don't like it. IMO the
structure and rules are byzantine and unnecessarily flexible/complex, so when
fiddling about with the firewall, usually its just simple commands to
open/close ports or do connection limiting/throttling, and I don't ever
touch port 22.


FWIW, when doing a complex task, instead of typing in commands in a
terminal, I begin writing a script to do those commands. At the very
same time I develop a 'rollback' script to undo those commands in case
of error.
Experimenting on a Centos 5.2 server which I have console access. Upon
an error condition, I then modify the script, play the 'rollback'
script, and reissue the script. So gradually the script and its
'antidote' are built to where I'm satisfied they work.
Then and only then, do I use that script on production and remote
servers which are also running CentOS 5.2
The only problem which my method is that getting these scripts to be
100% correct even in the face of malevolent conditions such as DNS
timeouts and hardware errors makes them 2-3 times as long and yukky and
hard to read.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] TSPC RPM for CentOS 5

2008-08-06 Thread Darryl Ross

Hi All,

Before I go about building an RPM for TSPC (the IPv6 tunnel setup protocol 
client), I'm just wondering if someone has already done it?


My Googling hasn't turned up anything, and I can't see any packages in the 
Dag, RpmForge, etc repositories.


Regards
Darryl
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Kernel 92.1.10 build issue

2008-08-06 Thread Mark Hull-Richter
I pulled down the 2.6.18-92.1.10 source, installed it, built the
package, copied the straight x86_64 config file from SOURCES into the
build directory, redid make menuconfig to enable NTFS support, added the
# x86_64 back into the .config file, copied .config back to the SOURCES
directory and ran rpmbuild -ba --target=x86_64  (same as I
always do with new kernels), but this time I'm getting this error in the
build:

Patch #0 (linux-2.6-rhel-version-h.patch):
+ patch -p1 -s
+ perl -p -i -e 's/^SUBLEVEL.*/SUBLEVEL = 18/' Makefile
+ perl -p -i -e 's/^EXTRAVERSION.*/EXTRAVERSION = -prep/' Makefile
+ perl -p -i -e 's/^RHEL_MAJOR.*/RHEL_MAJOR = 5/' Makefile
+ perl -p -i -e 's/^RHEL_MINOR.*/RHEL_MINOR = 2/' Makefile
+ cp /home/rpmbuild/SOURCES/COPYING.modules Documentation/
+ mkdir configs
+ for cfg in 'kernel-2.6.18-x86_64*.config'
+ cp
-f /home/rpmbuild/SOURCES/kernel-2.6.18-x86_64-debug.config 
/home/rpmbuild/SOURCES/kernel-2.6.18-x86_64-xen.config 
/home/rpmbuild/SOURCES/kernel-2.6.18-x86_64.config .
+ for i in 'kernel-2.6.18-x86_64*.config'
+ mv kernel-2.6.18-x86_64-debug.config
kernel-2.6.18-x86_64-debug.config.tmp
+ /home/rpmbuild/SOURCES/merge.pl /home/rpmbuild/SOURCES/config-rhel-generic 
kernel-2.6.18-x86_64-debug.config.tmp
+ rm kernel-2.6.18-x86_64-debug.config.tmp
+ for i in 'kernel-2.6.18-x86_64*.config'
+ mv kernel-2.6.18-x86_64-xen.config kernel-2.6.18-x86_64-xen.config.tmp
+ /home/rpmbuild/SOURCES/merge.pl /home/rpmbuild/SOURCES/config-rhel-generic 
kernel-2.6.18-x86_64-xen.config.tmp
+ rm kernel-2.6.18-x86_64-xen.config.tmp
+ for i in 'kernel-2.6.18-x86_64*.config'
+ mv kernel-2.6.18-x86_64.config kernel-2.6.18-x86_64.config.tmp
+ /home/rpmbuild/SOURCES/merge.pl /home/rpmbuild/SOURCES/config-rhel-generic 
kernel-2.6.18-x86_64.config.tmp
+ rm kernel-2.6.18-x86_64.config.tmp
+ rm -f kernel-2.6.18-i686-kdump.config
kernel-2.6.18-x86_64-kdump.config
+ rm -f kernel-2.6.18-i586.config
+ rm -f kernel-2.6.18-x86_64-debug.config
+ for i in '*.config'
+ mv kernel-2.6.18-x86_64-xen.config .config
++ head -1 .config
++ cut -b 3-
+ Arch=x86_64
+ make ARCH=x86_64 nonint_oldconfig
+ echo '# x86_64'
+ cat .config
+ for i in '*.config'
+ mv kernel-2.6.18-x86_64.config .config
++ head -1 .config
++ cut -b 3-
+ Arch=x86_64
+ make ARCH=x86_64 nonint_oldconfig
CONFIG_MAX_RAW_DEVS
make[1]: *** [nonint_oldconfig] Error 1
make: *** [nonint_oldconfig] Error 2
error: Bad exit status from /var/tmp/rpm-tmp.53835 (%prep)


RPM build errors:
Bad exit status from /var/tmp/rpm-tmp.53835 (%prep)


Was there something I needed to tweak in the spec file, other than the
build id and a few of the build switches I usually turn off (xen, debug,
kdump)?

Thanks.

mhr

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos