[CentOS] How to check for rootkit, troians etc in backed up files?

2008-08-31 Thread M. Fioretti
Hi,

there is a remote (VPS) Centos 4.2 server which *may* have been
compromised. Reinstalling everything from scratch isn't a problem, it
may even be an occasion to improve a few things, the question is
another.

There are backups of necessary shell script, ASCII configuration files
and more or less important email (maildir format, if it matters)
including messages with binary attachments in .doc, .pdf, .jpeg and
other formats. What is, in the context above, the best way to make
sure that **those** backed up files (which _must_ be put back on the
server after reinstall) do not contain any rootkit, troian, virus,
whatever? Which Centos / linux tool you'd recommend for this specific
case?

TIA,
Marco
-- 
Your own civil rights and the quality of your life heavily depend on how
software is used *around* you:http://digifreedom.net/node/84
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] S.M.A.R.T

2008-08-31 Thread Mogens Kjaer
Mag Gam wrote:
> When I do a scan for 0
> 
> I get this,
> 
> Device: HP   P800 Version: 5.20
>>> Terminate command early due to bad response to IEC mode page
> 
> Very strange...
> 
> Also, I am using
> 
> smartctl -a -d cciss,1 -i /dev/cciss/c0d0
> smartctl -a -d cciss,2 -i /dev/cciss/c0d0
> smartctl -a -d cciss,3 -i /dev/cciss/c0d0
> 
> 
> If I go above 3 I get the same type of error. I am not sure why this
> is occuring. Any ideas?

No. I get:

# smartctl -a -d cciss,0 -i /dev/cciss/c0d0
smartctl version 5.36 [i686-redhat-linux-gnu] Copyright (C) 2002-6 Bruce
Allen
Home page is http://smartmontools.sourceforge.net/

Device: COMPAQ   BD14685A26   Version: HPB8
Serial number: 3HY0Y2A07345YXGK
Device type: disk
Transport protocol: Parallel SCSI (SPI-4)
Local Time is: Mon Sep  1 07:50:33 2008 CEST
Device supports SMART and is Enabled
Temperature Warning Enabled
SMART Health Status: OK

Current Drive Temperature: 30 C
Drive Trip Temperature:68 C
Elements in grown defect list: 0
Vendor (Seagate) cache information
  Blocks sent to initiator = 1002192096
  Blocks received from initiator = 3013775768
  Blocks read from cache and sent to initiator = 2824497623
  Number of read and write commands whose size <= segment size = 2618352439
  Number of read and write commands whose size > segment size = 315346
Vendor (Seagate/Hitachi) factory information
  number of hours powered up = 44957.97
  number of minutes until next internal SMART test = 66

Error counter log:
   Errors Corrected by   Total   Correction
GigabytesTotal
   ECC  rereads/errors   algorithm
processeduncorrected
   fast | delayed   rewrites  corrected  invocations   [10^9
bytes]  errors
read:   2016750540 0  201675054   201675054
308793.455   0
write: 00 0 0  0   8566.933
  0
verify:383980 0 38398  38398146.816
  0

Non-medium error count:39977

SMART Self-test log
Num  Test  Status segment  LifeTime
LBA_first_err [SK ASC ASQ]
 Description  number   (hours)
# 1  Background short  Completed   -   2
 - [-   --]
# 2  Background short  Completed   -   2
 - [-   --]

Long (extended) Self Test duration: 3072 seconds [51.2 minutes]

And:

# smartctl -a -d cciss,1 -i /dev/cciss/c0d0
smartctl version 5.36 [i686-redhat-linux-gnu] Copyright (C) 2002-6 Bruce
Allen
Home page is http://smartmontools.sourceforge.net/

Device: COMPAQ   BD14685A26   Version: HPB8
Serial number: 3HY0XJF37346LYPT
Device type: disk
Transport protocol: Parallel SCSI (SPI-4)
Local Time is: Mon Sep  1 07:51:32 2008 CEST
Device supports SMART and is Enabled
Temperature Warning Enabled
SMART Health Status: OK

Current Drive Temperature: 30 C
Drive Trip Temperature:68 C
Elements in grown defect list: 0
Vendor (Seagate) cache information
  Blocks sent to initiator = 2178327863
  Blocks received from initiator = 2023231997
  Blocks read from cache and sent to initiator = 822049249
  Number of read and write commands whose size <= segment size = 223031
  Number of read and write commands whose size > segment size = 307242
Vendor (Seagate/Hitachi) factory information
  number of hours powered up = 44604.20
  number of minutes until next internal SMART test = 66

Error counter log:
   Errors Corrected by   Total   Correction
GigabytesTotal
   ECC  rereads/errors   algorithm
processeduncorrected
   fast | delayed   rewrites  corrected  invocations   [10^9
bytes]  errors
read:   2397187480 0  239718748   239718748
252353.742   0
write: 00 0 0  0   8059.356
  0
verify:466610 0 46661  46661146.816
  0

Non-medium error count:30252

SMART Self-test log
Num  Test  Status segment  LifeTime
LBA_first_err [SK ASC ASQ]
 Description  number   (hours)
# 1  Background short  Completed   -   2
 - [-   --]
# 2  Background short  Completed   -   2
 - [-   --]

Long (extended) Self Test duration: 3072 seconds [51.2 minutes]

Mogens

-- 
Mogens Kjaer, Carlsberg A/S, Computer Department
Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Iptables masq traffic limiting

2008-08-31 Thread Robert Spangler
On Sunday 31 August 2008 22:31, Joseph L. Casale wrote:

>  >We should be talking live.  Why don't your join the #centos-social on
>  > freenode so we can chat real time?
>
>  Robert,
>  Just got back from my trip and reading that Tutorial, it went on to state
>  what I now find to be two distinct opposite thoughts. Its says at
>  http://iptables-tutorial.frozentux.net/chunkyhtml/c962.html that you
> shouldn't filter in the NAT Postrouting chain as some streams of packets
> only have their first packet hit the chain and everything else is
> redirected hence the possibility exists that some packets can miss the
> rule.
>
>  It seems the Filter Forward chain is the safest place to limit what gets
> masq'ed so internal clients could only have say port 80/443 but no ftp
> access as an example.

That is correct.  The only thing that should hit the NAT chain is what you 
have already decided should be allowed out.  


-- 

Regards
Robert

It is not just an adventure.
It is my job!!

Linux User #296285
http://counter.li.org
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] I need help with GRUB

2008-08-31 Thread Sadaruwan Samaraweera
On Mon, Sep 1, 2008 at 9:55 AM, Ian Forde <[EMAIL PROTECTED]> wrote:

> On Mon, 2008-09-01 at 09:47 +0530, Sadaruwan Samaraweera wrote:
> > Hello,
>
> >And the problem that I'm having is with my two Linux distros. Ive
> > installed CentOS & Windows in my SATA HDD and I've used my complete
> > 40GB PATA HDD for Ubuntu. Well all OS's work fine with out any
> > problems but when I want to boot into CentOS I've to select the SATA
> > as my booting HDD from the BIOS if I want to go to Ubuntu the I've to
> > select my PATA as the default HDD from the menu. So what I want to do
> > is I need to add Both distros in to one GRUB boot loader and the other
> > thing is that both grubs that I've on both HDD s only detects the
> > windows Partition not the Linux partion. So I need to to know how to
> > add bothe Linux versions I've into one GRUB. I want to use the SATA
> > HDD as my default HDD.
>
> You'll want to merge the grub boot stanzas into one file, apply it to
> one (or both) of the drives, and keep it in sync when you do kernel
> updates (because those affect the grub menu)... This way, you won't have
> to change the BIOS setting.
>
>-I
>
OK, thx for the quick reply but I realy don't know how to do that can any
one help on that note.

Thank you
Sadaruwan
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help me

2008-08-31 Thread Sadaruwan Samaraweera
On Mon, Sep 1, 2008 at 9:53 AM, David Andrews <[EMAIL PROTECTED]> wrote:

> At 11:01 PM 8/31/2008, you wrote:
>
>  On Aug 31, 2008, at 11:17 PM, Sadaruwan Samaraweera wrote:
>>
>>  also NOT top posting? - Wht do u mean by this I don't get u.
>>>
>>> On Mon, Sep 1, 2008 at 1:54 AM, MHR <[EMAIL PROTECTED]> wrote:
>>> On Sun, Aug 31, 2008 at 1:58 AM, Sadaruwan Samaraweera
>>> <[EMAIL PROTECTED]> wrote:
>>> > Hi,
>>> > thx every much trying to get me on to the right track and I
>>> apologize for
>>> > being such an ass. Sorry again yes I made a big mistake. I was
>>> under lot of
>>> > pressure in my private life so I think that might have come over me.
>>>
>>> Well, now that the pressure's off, or lightened, how about editing
>>> your posts, and also NOT top posting?
>>>
>>
>>
>> he means what you did just here, and in your other posts. :)  you put
>> your response above the quoted message you were replying to, rather
>> than below it.  please don't do this; it makes it difficult to follow
>> the conversation, and thus it decreases the likelihood that you will
>> get the responses you want.
>>
>> also, when i just now did a google search for "top posting", the
>> entire first page of hits were all links that explained what he was
>> talking about.
>>
>> -steve
>>
>
> While I know that the practice won't, and shouldn't change for me, I would
> just like to say that for some of us, top posting is more useful.  I am a
> blind computer user, and top posting is easier to handle.  I can read the
> response, and continue reading if I need context, more information etc.
>
> Unix/Linux people tend to be pretty black and white, and the world should
> be a certain way ... but remember, others of us may have a good reason for
> wanting a different world!
>
> Dave
>
> Sorry, Guys I was not doing it intentionally I'm using Gmail so the thing
> is when ever I click on reply it goes to top so as a habit I do top posting.
> So sorry for any difficulties.
>

Regards
Sadaruwan Samaraweera
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] I need help with GRUB

2008-08-31 Thread Ian Forde
On Mon, 2008-09-01 at 09:47 +0530, Sadaruwan Samaraweera wrote:
> Hello,

>And the problem that I'm having is with my two Linux distros. Ive
> installed CentOS & Windows in my SATA HDD and I've used my complete
> 40GB PATA HDD for Ubuntu. Well all OS's work fine with out any
> problems but when I want to boot into CentOS I've to select the SATA
> as my booting HDD from the BIOS if I want to go to Ubuntu the I've to
> select my PATA as the default HDD from the menu. So what I want to do
> is I need to add Both distros in to one GRUB boot loader and the other
> thing is that both grubs that I've on both HDD s only detects the
> windows Partition not the Linux partion. So I need to to know how to
> add bothe Linux versions I've into one GRUB. I want to use the SATA
> HDD as my default HDD.

You'll want to merge the grub boot stanzas into one file, apply it to
one (or both) of the drives, and keep it in sync when you do kernel
updates (because those affect the grub menu)... This way, you won't have
to change the BIOS setting.

-I

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help me

2008-08-31 Thread David Andrews

At 11:01 PM 8/31/2008, you wrote:


On Aug 31, 2008, at 11:17 PM, Sadaruwan Samaraweera wrote:


also NOT top posting? - Wht do u mean by this I don't get u.

On Mon, Sep 1, 2008 at 1:54 AM, MHR <[EMAIL PROTECTED]> wrote:
On Sun, Aug 31, 2008 at 1:58 AM, Sadaruwan Samaraweera
<[EMAIL PROTECTED]> wrote:
> Hi,
> thx every much trying to get me on to the right track and I
apologize for
> being such an ass. Sorry again yes I made a big mistake. I was
under lot of
> pressure in my private life so I think that might have come over me.

Well, now that the pressure's off, or lightened, how about editing
your posts, and also NOT top posting?



he means what you did just here, and in your other posts. :)  you put
your response above the quoted message you were replying to, rather
than below it.  please don't do this; it makes it difficult to follow
the conversation, and thus it decreases the likelihood that you will
get the responses you want.

also, when i just now did a google search for "top posting", the
entire first page of hits were all links that explained what he was
talking about.

-steve


While I know that the practice won't, and shouldn't change for me, I 
would just like to say that for some of us, top posting is more 
useful.  I am a blind computer user, and top posting is easier to 
handle.  I can read the response, and continue reading if I need 
context, more information etc.


Unix/Linux people tend to be pretty black and white, and the world 
should be a certain way ... but remember, others of us may have a 
good reason for wanting a different world!


Dave


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] I need help with GRUB

2008-08-31 Thread Sadaruwan Samaraweera
Hello,

  I need help with grub. I've a PC that I've assembled by my self and
the configuration is listed below.

AMD Athlon 3600+
1GB Kingstone RAM
80GB SATA & 40 GB PATA
MSI Motherboard

   And the problem that I'm having is with my two Linux distros. Ive
installed CentOS & Windows in my SATA HDD and I've used my complete 40GB
PATA HDD for Ubuntu. Well all OS's work fine with out any problems but when
I want to boot into CentOS I've to select the SATA as my booting HDD from
the BIOS if I want to go to Ubuntu the I've to select my PATA as the default
HDD from the menu. So what I want to do is I need to add Both distros in to
one GRUB boot loader and the other thing is that both grubs that I've on
both HDD s only detects the windows Partition not the Linux partion. So I
need to to know how to add bothe Linux versions I've into one GRUB. I want
to use the SATA HDD as my default HDD.

Regards,
Sadaruwan Samaraweera
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help me

2008-08-31 Thread Frank Cox
On Mon, 01 Sep 2008 04:05:37 +
[EMAIL PROTECTED] wrote:

> Food for thought, I guess.  

Not really.

Top posting is generally used in direct business or personal correspondence.  I
send you a message, you put your reply on top of that and send it back to me.
The theory is that you and I already know what we're talking about.

In newsgroup and mailing list postings, on the other hand, the convention is to
put your reply at the bottom or in-line with the original message (and the
original message is ideally trimmed to the minimum required to keep the flow
of the "conversation" going. The idea here is that posts are intended to be read
and comprehended by people other than the ones who are directly involved in the
exchange. Accordingly, it makes the most sense to create a message that can be
read from the top to the bottom  in chronological order.

-- 
MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help me

2008-08-31 Thread russ
Top posting is when you put your reply on top of the original message, the way 
I'm doing.  Apparently some people prefer that for some reason which dates back 
to the days of newsgroups.  Some people also don't understand that not all 
clients support bottom posting.

Interestingly enough, we use top posting 99% of the time at work, even though 
it takes extra effort to do so in thunderbird.  We had a new employee that 
started with us, and used bottom posting on some of her replies, and most 
people thought that her replies were empty.  

Food for thought, I guess.  

Russ
Sent from my Verizon Wireless BlackBerry

-Original Message-
From: "Sadaruwan Samaraweera" <[EMAIL PROTECTED]>

Date: Mon, 1 Sep 2008 08:47:21 
To: CentOS mailing list
Subject: Re: [CentOS] Help me


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help me

2008-08-31 Thread Steve Huff


On Aug 31, 2008, at 11:17 PM, Sadaruwan Samaraweera wrote:


also NOT top posting? - Wht do u mean by this I don't get u.

On Mon, Sep 1, 2008 at 1:54 AM, MHR <[EMAIL PROTECTED]> wrote:
On Sun, Aug 31, 2008 at 1:58 AM, Sadaruwan Samaraweera
<[EMAIL PROTECTED]> wrote:
> Hi,
> thx every much trying to get me on to the right track and I  
apologize for
> being such an ass. Sorry again yes I made a big mistake. I was  
under lot of

> pressure in my private life so I think that might have come over me.

Well, now that the pressure's off, or lightened, how about editing
your posts, and also NOT top posting?



he means what you did just here, and in your other posts. :)  you put  
your response above the quoted message you were replying to, rather  
than below it.  please don't do this; it makes it difficult to follow  
the conversation, and thus it decreases the likelihood that you will  
get the responses you want.


also, when i just now did a google search for "top posting", the  
entire first page of hits were all links that explained what he was  
talking about.


-steve
---
If this were played upon a stage now, I could condemn it as an  
improbable fiction. - Fabian, Twelfth Night, III,v




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help me

2008-08-31 Thread Sadaruwan Samaraweera
also NOT top posting? - Wht do u mean by this I don't get u.

On Mon, Sep 1, 2008 at 1:54 AM, MHR <[EMAIL PROTECTED]> wrote:

> On Sun, Aug 31, 2008 at 1:58 AM, Sadaruwan Samaraweera
> <[EMAIL PROTECTED]> wrote:
> > Hi,
> > thx every much trying to get me on to the right track and I apologize for
> > being such an ass. Sorry again yes I made a big mistake. I was under lot
> of
> > pressure in my private life so I think that might have come over me.
>
> Well, now that the pressure's off, or lightened, how about editing
> your posts, and also NOT top posting?
>
> Thanks.
>
> mhr
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Iptables masq traffic limiting

2008-08-31 Thread Joseph L. Casale
>We should be talking live.  Why don't your join the #centos-social on freenode
>so we can chat real time?

Robert,
Just got back from my trip and reading that Tutorial, it went on to state
what I now find to be two distinct opposite thoughts. Its says at
http://iptables-tutorial.frozentux.net/chunkyhtml/c962.html that you shouldn't
filter in the NAT Postrouting chain as some streams of packets only have their
first packet hit the chain and everything else is redirected hence the 
possibility
exists that some packets can miss the rule.

It seems the Filter Forward chain is the safest place to limit what gets masq'ed
so internal clients could only have say port 80/443 but no ftp access as an 
example.

What are your thoughts in this?
Thanks,
jlc
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] strange httpd error page using apache

2008-08-31 Thread Ric Moore

On Mon, 2008-09-01 at 11:52 +1200, Spiro Harvey, Knossos Networks Ltd
wrote:
> Ric Moore wrote:
> > I get this error page re-direct while opening a local webpage on my
> > server, which carries me to yahoo for the error page filled with
> > adverts. I'd really like to know how this one got here, as I just
> > installed centOS a few weeks ago. 
> > 
> > http://h.found-not-help.com/search?qo=www.wayward4now.net&rn=3D9F6PY8wdYwGYX&rg=
> 
> I'm really not suicidal enough to click on that link..
> 
> what does the A HREF tag on your page that you're clicking on say?
 for some reason that page I posted removes that back-arrow to the
original URL. Nasty bit of business that Firefox seems to be making cozy
with Yahoo. Owell. I've fixed the problem, I should have been more
observant letting yum update run when I went to bed.  Ric


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: Curmudgeoning (was Re: Problems with writing Dual Layer DVD)

2008-08-31 Thread Ric Moore

On Sun, 2008-08-31 at 11:20 -0700, Bill Campbell wrote:

> When I first encountered a customer who had disk drive problems such that
> we replaced the 8in drives in their Radio Shack Model II several times, it
> wasn't until I went on-site to find that they were storing their floppies
> by sticking them to the file cabinet with refrigerator magnets.  The
> amazing thing to me was that I found that this was a fairly common problem.
> 
> Then there was the person who stapled the floppy to a cover letter.

Just turning the machine off, with the 8" floppy still in the drive
would spike the boot sector. Luckily I knew a guy that could resurrect
it. That was on the IMSAI VDP-88 with voice-coil. By the time I got it,
they weren't making replacement boot disks as IMSAI was long out of
business. Govt. State Surplus is your friend, if you're into old
iron. :) Ric


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Anti Virus and Anti Spam

2008-08-31 Thread horas simalango
I am using sendmail as MTA, and I am looking for free anti virus.
About the milter, where can I download it?

Thank you

Horasima


2008/8/30 Eucke <[EMAIL PROTECTED]>:
>
> horas simalango wrote:
>>
>> New be in linux!
>> Currently I have Install DNS, Email and Web server using centos 4.3.
>> All functions are running properly!
>> What anti virus and anti spam recomended for me to install to my
>> server? What I have to configure after installing anti virus and anti
>> spam?
>> Would some one help me please.! Now many spam mail come to user mailbox!
>>
>> Thank's 'n Regards
>
> Well there are builds of spamassassin available via RPM that you can
> install.  You might mention which MTA you're usingSendmail?  Postfix?
>  If you're using Sendmail then you can use milter plugins for spam and
> antivirus.  Are you looking for free antivirus plugins or ones your pay for?
>
> --
> Eucke
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] strange httpd error page using apache

2008-08-31 Thread Ric Moore

On Mon, 2008-09-01 at 11:52 +1200, Spiro Harvey, Knossos Networks Ltd
wrote:
> Ric Moore wrote:
> > I get this error page re-direct while opening a local webpage on my
> > server, which carries me to yahoo for the error page filled with
> > adverts. I'd really like to know how this one got here, as I just
> > installed centOS a few weeks ago. 
> > 
> > http://h.found-not-help.com/search?qo=www.wayward4now.net&rn=3D9F6PY8wdYwGYX&rg=
> 
> I'm really not suicidal enough to click on that link..
> 
> what does the A HREF tag on your page that you're clicking on say?

My bad, the re-direct comes from my browser (firefox) and not my machine
locally. I got steamed seeing the ads and hit send before I thought
about where the error originated. Not that I like it any better. :) Ric


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rc.local

2008-08-31 Thread Ric Moore

On Mon, 2008-09-01 at 10:53 +1200, Spiro Harvey, Knossos Networks Ltd
wrote:
> Ric Moore wrote:
> > I note that there are two 'rc.local' files. One is in /etc and the other
> > in /etc/rc.d   Which has precedence and is the one to use? Thanks, Ric
> 
> 
> if you do an 'ls -lad /etc/rc.local', what do you get?

Correct! Whew! I didn't notice that it was a link. Thanks, Ric


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] strange httpd error page using apache

2008-08-31 Thread Spiro Harvey, Knossos Networks Ltd

Ric Moore wrote:

I get this error page re-direct while opening a local webpage on my
server, which carries me to yahoo for the error page filled with
adverts. I'd really like to know how this one got here, as I just
installed centOS a few weeks ago. 


http://h.found-not-help.com/search?qo=www.wayward4now.net&rn=3D9F6PY8wdYwGYX&rg=


I'm really not suicidal enough to click on that link..

what does the A HREF tag on your page that you're clicking on say?


--
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] strange httpd error page using apache

2008-08-31 Thread Ric Moore
I get this error page re-direct while opening a local webpage on my
server, which carries me to yahoo for the error page filled with
adverts. I'd really like to know how this one got here, as I just
installed centOS a few weeks ago. 

http://h.found-not-help.com/search?qo=www.wayward4now.net&rn=3D9F6PY8wdYwGYX&rg=

This just doesn't strike me as Kosher. And, I'm a southern baptist!
 Ric


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rc.local

2008-08-31 Thread Spiro Harvey, Knossos Networks Ltd

Ric Moore wrote:

I note that there are two 'rc.local' files. One is in /etc and the other
in /etc/rc.d   Which has precedence and is the one to use? Thanks, Ric



if you do an 'ls -lad /etc/rc.local', what do you get?

Mine's a symlink to rc.d/rc.local. The rc.d directory is where the 
startup stuff should all be for the bootup scripts. I don't know why one 
would be in etc, but if you've got two separate files, the one in /etc 
is probably going to be ignored (at least I would hope so).




--
Spiro Harvey  Knossos Networks Ltd
021-295-1923www.knossos.net.nz

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rc.local

2008-08-31 Thread Ian Blackwell
Ric Moore wrote:
> I note that there are two 'rc.local' files. One is in /etc and the other
> in /etc/rc.d   Which has precedence and is the one to use? Thanks, Ric
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>   
Hi Ric,

You'll find one is a link to the other, so you really only have one file
on disk.

Ian


smime.p7s
Description: S/MIME Cryptographic Signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] rc.local

2008-08-31 Thread Ric Moore
I note that there are two 'rc.local' files. One is in /etc and the other
in /etc/rc.d   Which has precedence and is the one to use? Thanks, Ric


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help me

2008-08-31 Thread MHR
On Sun, Aug 31, 2008 at 1:58 AM, Sadaruwan Samaraweera
<[EMAIL PROTECTED]> wrote:
> Hi,
> thx every much trying to get me on to the right track and I apologize for
> being such an ass. Sorry again yes I made a big mistake. I was under lot of
> pressure in my private life so I think that might have come over me.

Well, now that the pressure's off, or lightened, how about editing
your posts, and also NOT top posting?

Thanks.

mhr
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: Curmudgeoning (was Re: Problems with writing Dual Layer DVD)

2008-08-31 Thread Lanny Marcus
On Sun, Aug 31, 2008 at 1:20 PM, Bill Campbell <[EMAIL PROTECTED]> wrote:
> On Sun, Aug 31, 2008, Lanny Marcus wrote:
>>On Thu, Aug 28, 2008 at 7:35 PM, MHR <[EMAIL PROTECTED]> wrote:
>>> On Thu, Aug 28, 2008 at 5:27 PM, Bill Campbell <[EMAIL PROTECTED]> wrote:

>>> Wait, I have a Pascal Microengine in the garage that I never did get
>>> to boot!  You know, the ones that ran on the 8" floppies, like the old
>>> Teraks we used at UCSD?
>>
>>8" floppies. Now that does bring back a memory for me. I was working
>>on a project in Texas. The customer was in Kentucky as I recall.
>>I fixed a problem and gave an 8" floppy to our Shipping department, to
>>send to the customer. The customer called me on the phone, to
>>inform me that the floppy had been bent, so it would fit into the box.
>>As I recall, it did work, after he straightened it out. For the rest
>>of the time that I worked there, I packed things myself, before they
>>were shipped, and that wasn't my job. I couldn't believe someone in
>>the Shipping department was that stupid.
>
> Never underestimate the level of stupidity/ignorance of people (after all
> most of the were ``educated'' in government schools :-).
>
> When I first encountered a customer who had disk drive problems such that
> we replaced the 8in drives in their Radio Shack Model II several times, it
> wasn't until I went on-site to find that they were storing their floppies
> by sticking them to the file cabinet with refrigerator magnets.  The
> amazing thing to me was that I found that this was a fairly common problem.
>
> Then there was the person who stapled the floppy to a cover letter.

LOL.  The customer in Kentucky was very good. We shipped the system to
them in a moving van (and we prayed it wouldn't be involved in
an accident or fire) and they installed it. I never had to go down
there. He probably hasn't forgotten the bent floppy either. Attaching
the floppies with magnets is also very good.   :-)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: Curmudgeoning (was Re: Problems with writing Dual Layer DVD)

2008-08-31 Thread Bill Campbell
On Sun, Aug 31, 2008, Lanny Marcus wrote:
>On Thu, Aug 28, 2008 at 7:35 PM, MHR <[EMAIL PROTECTED]> wrote:
>> On Thu, Aug 28, 2008 at 5:27 PM, Bill Campbell <[EMAIL PROTECTED]> wrote:
>>> I still have a Tandy 4000, 386-16 no cache, that is used occassionally to
>>> program EPROMS.  This same machine ran Xenix for years before being abused
>>> by installing DR-DOS on it.
>>>
>>> I have a Radio Shack Model 100, the first laptop, in the closet beside an
>>> HP-97 programmable calculator.
>>
>> Well, all I have that foes back that far is a 2nd gen IBM PC (the 64k
>> m/b) that would probably work if I knew where any of my 360k MS-DOS
>> floppies were.
>>
>> Wait, I have a Pascal Microengine in the garage that I never did get
>> to boot!  You know, the ones that ran on the 8" floppies, like the old
>> Teraks we used at UCSD?
>
>8" floppies. Now that does bring back a memory for me. I was working
>on a project in Texas. The customer was in Kentucky as I recall.
>I fixed a problem and gave an 8" floppy to our Shipping department, to
>send to the customer. The customer called me on the phone, to
>inform me that the floppy had been bent, so it would fit into the box.
>As I recall, it did work, after he straightened it out. For the rest
>of the time that I worked there, I packed things myself, before they
>were shipped, and that wasn't my job. I couldn't believe someone in
>the Shipping department was that stupid.

Never underestimate the level of stupidity/ignorance of people (after all
most of the were ``educated'' in government schools :-).

When I first encountered a customer who had disk drive problems such that
we replaced the 8in drives in their Radio Shack Model II several times, it
wasn't until I went on-site to find that they were storing their floppies
by sticking them to the file cabinet with refrigerator magnets.  The
amazing thing to me was that I found that this was a fairly common problem.

Then there was the person who stapled the floppy to a cover letter.

Bill
-- 
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
Voice:  (206) 236-1676  Mercer Island, WA 98040-0820
Fax:(206) 232-9186

The only freedom which deserves the name, is that of pursuing our own good
in our own way, so long as we do not attempt to deprive others of theirs,
or impede their efforts to obtain it. -- John Stuart Mill, 1859
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: Curmudgeoning (was Re: Problems with writing Dual Layer DVD)

2008-08-31 Thread Lanny Marcus
On Thu, Aug 28, 2008 at 7:35 PM, MHR <[EMAIL PROTECTED]> wrote:
> On Thu, Aug 28, 2008 at 5:27 PM, Bill Campbell <[EMAIL PROTECTED]> wrote:
>> I still have a Tandy 4000, 386-16 no cache, that is used occassionally to
>> program EPROMS.  This same machine ran Xenix for years before being abused
>> by installing DR-DOS on it.
>>
>> I have a Radio Shack Model 100, the first laptop, in the closet beside an
>> HP-97 programmable calculator.
>
> Well, all I have that foes back that far is a 2nd gen IBM PC (the 64k
> m/b) that would probably work if I knew where any of my 360k MS-DOS
> floppies were.
>
> Wait, I have a Pascal Microengine in the garage that I never did get
> to boot!  You know, the ones that ran on the 8" floppies, like the old
> Teraks we used at UCSD?

8" floppies. Now that does bring back a memory for me. I was working
on a project in Texas. The customer was in Kentucky as I recall.
I fixed a problem and gave an 8" floppy to our Shipping department, to
send to the customer. The customer called me on the phone, to
inform me that the floppy had been bent, so it would fit into the box.
As I recall, it did work, after he straightened it out. For the rest
of the time that I worked there, I packed things myself, before they
were shipped, and that wasn't my job. I couldn't believe someone in
the Shipping department was that stupid.
>
> Never mind - too modern (vintage 1978-79)
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Help using ed [OT]

2008-08-31 Thread Thomas Johansson

Hi

Perhaps omeone might answer this tricky problem. I can do this other 
ways, but i really want to understand how to solve it using ed. I have 
one solution using g/re/s/re//txt/ , but I want to understand how or if 
i can solve it using the ed (.)a command.


A script i have parse several files and append text after a specific 
text is matched. If one file do not have this text, i get a no match and 
the script terminates. How can I avoid this behavior keeping the 
original coding style for ed and append text. I have tried tried but 
still cannot get it correct using (.)a. Is it even possible to do it 
that way using the (.)a command?


Thanks in advance
Thomas


code example that give a "no match". Fairly easy to read and understand

example 1:
---
for RFILE in $RLIST; do
ed - RFILE <<- EOF
H
/\[matching_text_1\]/a
This is the appended textline(s) for text1
.
/\[matching_text_2\]/a
This is the appended textline(s) for text2
.
w
q
EOF
done

Another example that solve the above problem. But this example become 
very easy unreadable if the appended text is long and/or includes 
linebreaks.


Example 2:
--
for RFILE in $RLIST; do
ed - $RFILE << EOF
g/text1/s//text1\\
appended_text1/g
g/text2/s//text2\\
appended_text2/g
w
EOF
done
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: Curmudgeoning (was Re: [CentOS] Problems with writing Dual Layer DVD)

2008-08-31 Thread Lanny Marcus
On Thu, Aug 28, 2008 at 4:40 PM, MHR <[EMAIL PROTECTED]> wrote:
> On Thu, Aug 28, 2008 at 2:29 PM, David Dyer-Bennet <[EMAIL PROTECTED]> wrote:
>>
>> I believe the drives in my case were 1311's.  Or else 1310, but I think
>> that was the controller.  1403 printer, of course, and 1402 reader/punch.
>> Reading cards with copper brushes at 800 cards per minute.
>>
>
> Well, I'm not as aged and decrepit as you and Bill, but I, too,
> remember card punches, rapid boot drums, and file systems that took
> seven or eight 14" removable disk cabinets that were about three times
> the size of today's PCs each and held I don't remember how much data.
> I took my first programming class in Fortran V with card punches and
> printouts on a CDC 6600 mainframe, in 1974

OK Mark. Watch out! Aged and decrepit?:-)   We are not as young as
you and Jim
and many others here. I remember an IBM 7090 on an airline reservation
system and
after that the IBM 360 Model 65 with Large Core Storage (I forget how
much, probably
very little, compared to my  Desktop) seemed like something very
powerful. Imagine
the power consumption of some of the models that have been mentioned
in this thread,
and, their cooling requirements..
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] LVM and hotswap (USB/iSCSI) devices?

2008-08-31 Thread Simen Timian Thoresen

Simen Timian Thoresen wrote:

nate wrote:

Simen Timian Thoresen wrote:

So - with the LV unmounted, I power my USB-device down, and then back 
up;




Hi Nate,


I believe your problem is you didn't deactivate the logical
volume, and export the volume group before disconnecting.


Yes! Thank you - exporting and then importing again after replugging 
worked.


I'll have to read up on what actually happens here .-)

Still - say that the USB (or iSCSI) PV is not exported before being 
unplugged (cables tripped over, internet connection going down, etc) - 
how do I recover from an unplugged but not exported PV/VG? It seems that 
vg[im/ex]port only fiddle with the off-PV metadata. Is this correct?


I think I'm looking for a force-import that allows me to bring a VG with 
associated LVs up provided that the PVs are present - affectively a 
'assemble' ala mdadm.


Hah! I got this one on my own.

After unplugging, I removed the /etc/lvm/archive/ /etc/lvm/backup and 
/dev/mapper/ entries, and then replugged;


[EMAIL PROTECTED] ~]# pvscan
  PV /dev/iscsi_01   VG iscsistorage   lvm2 [102.79 GB / 102.59 GB free]
  Total: 1 [102.79 GB] / in use: 1 [102.79 GB] / in no VG: 0 [0   ]
(this I've seen before)

Thinking that I could import the VG, I found that it's impossible to 
imoport a non-exported VG;


[EMAIL PROTECTED] ~]# vgimport -a
  Volume group "iscsistorage" is not exported

...but just setting it active worked;
[EMAIL PROTECTED] ~]# vgchange -a y iscsistorage
  1 logical volume(s) in volume group "iscsistorage" now active
[EMAIL PROTECTED] ~]# lvdisplay
  /dev/mapper/iscsistorage-lv1: open failed: No such file or directory
  /dev/mapper/iscsistorage-lv1: open failed: No such file or directory
  --- Logical volume ---
  LV Name/dev/iscsistorage/lv1
  VG Nameiscsistorage
  LV UUIDmKP1DG-Pc1q-vFzf-sR9v-RE3e-ChNV-T0dWq1
(...)

...and the LV is not mountable;
[EMAIL PROTECTED] ~]# mount /dev/iscsistorage/lv1 /mnt/
mount: special device /dev/iscsistorage/lv1 does not exist


To remove the missing /dev/mapper entries, I exported and then 
reimported the VG;


[EMAIL PROTECTED] ~]# vgexport -a
  Volume group "iscsistorage" successfully exported
[EMAIL PROTECTED] ~]# vgimport -a
  Volume group "iscsistorage" successfully imported
[EMAIL PROTECTED] ~]# lvdisplay
  --- Logical volume ---
  LV Name/dev/iscsistorage/lv1
  VG Nameiscsistorage
  LV UUIDmKP1DG-Pc1q-vFzf-sR9v-RE3e-ChNV-T0dWq1
(...)
[EMAIL PROTECTED] ~]# mount /dev/iscsistorage/lv1 /mnt/
[EMAIL PROTECTED] ~]# ls /mnt/
lost+found
(...)

Woila!

I think I saw someone doing something to /dev/mapper/control as well to 
skip the export-reimport steps.


I'll see if I can robustify this a little, but if this works, I'll be 
significantly closer to my main goal.


Thank you again for your help .-)

Yours,
-S



Thank you for pointing me in the right way ;-)

-S


lvchange -a n 
vgexport -a (don't worry it will only export groups that are
ready to be exported)

Now you can safely power the device down(provided the VG was
successfully exported, all logical volumes must be unmounted
and deactivated before it will succeed).

when you power it back up run

pvscan
vgimport -a
lvchange -a y 

LVM is very useful for volumes that change device names, but you
must use it properly otherwise bad things will happen as you
saw.

If you want to have USB mount automatically it may be better
to put a label on the file system, at least in Debian(don't
have a CentOS system with a USB disk handy here) the volume
is mounted as /media/ if there is a disk label.
You can use the e2label command to label the device. I'd
expect CentOS to likely behave similarly to debian in this
respect.

nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos







--
Simen Thoresen, Dolphin ICS
Systems Administration and Wulfkit Support
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Wifi networking-Endgame (Was: wireless laptop configuration)

2008-08-31 Thread Sorin Srbu
>-Original Message-
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of
>Toshaan Bharvani
>Sent: Wednesday, August 20, 2008 1:42 AM
>To: centos@centos.org
>Subject: Re: [CentOS] wireless laptop configuration
>
>Sorin Srbu wrote:
>
>   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
>On Behalf Of Toshaan Bharvani
>   Sent: Tuesday, August 19, 2008 4:24 PM
>   To: centos@centos.org
>   Subject: Re: [CentOS] wireless laptop configuration
>
>
>
>   Sorin Srbu wrote:
>
>   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
>On Behalf Of Toshaan Bharvani
>   Sent: Tuesday, August 19, 2008 2:42 PM
>   To: centos@centos.org
>   Subject: Re: [CentOS] wireless laptop configuration
>
>   Steve Huff wrote:
>   >
>   > On Aug 19, 2008, at 5:04 AM, [EMAIL PROTECTED] wrote:
>   >
>   >> I'm using a 3Com 3CRWE154G72 IIRC, which according to the
>hwconf's using the
>   >> prism54 driver/firmware/whatever.
>   >>
>   >> Would I maybe be better off reinstalling the whole shebang and have
>the
>   >> wifi-card inserted from start in order for the centos installer to
>   >> see it
>   >> properly from the beginning?
>   >
>   >
>   > before you do that, open a terminal, become root, and run
>   > /usr/sbin/kudzu (while the wireless card is installed). that's the
>   > program that does hardware detection; it may be able to sort out
your
>   > issue.
>   >
>   > -steve
>   >
>   or if kudzu for some reason doesn't cooperate (which is always on my
>system)
>   become root
>   run : /sbin/modprobe prism54
>   run : dmesg | tail
>   and read whether it just says it has loaded the module (single line)
or
>   detected will output a wlanX statement and you are in business
>
>
>
>   Isn't it implied that since "prism54" is listed in
/etc/sysconfig/hwconf for the
>wifi-card that the module has been loaded already? Or is this some of the
magical stuff
>that sometimes doesn't happen for whatever reason? 8-)
>
>   /etc/sysconfig/hwconf is the file kudzu creates when of all detected
>hardware at startup and it related this hardware with drivers in the kernel
>   but certain drivers are modules in the kernel, wich need to be loaded
>manually or later when the system is already running
>   this can be done by method 1 explained here above or adding them in
>/etc/modprobe.conf which makes it load the modules at startup
>   you will need to add the line (if it is not yet there) :
>   alias wlan0 prism54
>   you can check whether the module is loaded with : /sbin/lsmod | grep
>prism54
>
>   This is how far I got with the above hints. For some reason I don't
have a
>wlan0, but instead a eth0. I did create an alias in Network Manager for eth0
> wlan0.
>Then I ran the below modprobe command according to the below.
>
>   "[EMAIL PROTECTED] ~]# /sbin/modprobe prism54
>
>   [EMAIL PROTECTED] ~]# dmesg|tail
>
>   eth0: resetting device...
>
>   eth0: uploading firmware...
>
>   prism54: request_firmware() failed for 'isl3890'
>
>   eth0: could not upload firmware ('isl3890')
>
>   eth0: islpci_reset: failure
>
>   eth0: resetting device...
>
>   eth0: uploading firmware...
>
>   prism54: request_firmware() failed for 'isl3890'
>
>   eth0: could not upload firmware ('isl3890')
>
>   eth0: islpci_reset: failure
>
>   [EMAIL PROTECTED] ~]#"
>
>
>
>   "When I try to activate wlan0, I get this message:
>
>   Error for wireless request "Set Bit Rate" (8B20) :
>
>   SET failed on device eth0 ; Input/output error.
>
>   Determining IP information for eth0...SIOCSIFFLAGS: No such file or
>directory
>
>   SIOCSIFFLAGS: No such file or directory
>
>   failed."
>
>   In /etc/modprobe.conf I've added the line "alias wlan0 prism54".
>
>   What's more, I went to the prism54.org site and found a firmware,
>downloaded it and as per instructed on the site, renamed the .arm-file to
isl3890 and
>put it in /usr/lib/hotplug/firmware.
>
>   Upon restarting and activating wlan0 I still get the above SIOC-error.
>
>   I have a hunch this might actually work if I put the isl3890-file in
the correct
>place. Not sure /usr/lib/hotplug/firmware *is* actually right, as I had to
create the
>hotplugs and firmware-folders.
>
>   Any hints on this guys?
>
>   TIA.
>
>
>
>
>
>   ___
>   CentOS mailing list
>   CentOS@centos.org
>   http://lists.centos.org/mailman/listinfo/centos
>
>
>you have used the following :
>
>
>   2.5.2.0.arm : http://daemonizer.de/prism54/prism54-fw/fw-
>softmac/2.5.2.0.arm
>   Version 2.5.2.0 built on Thu Mar 4 16:05:03 CET 2004 by
>[EMAIL PROTECTED]
>   87a5519d70c16991b8fff9b3b31de68e
>   headers
>
>   Source: 3CRWE154

Re: [CentOS] LVM and hotswap (USB/iSCSI) devices?

2008-08-31 Thread Simen Timian Thoresen

nate wrote:

Simen Timian Thoresen wrote:


So - with the LV unmounted, I power my USB-device down, and then back up;




Hi Nate,


I believe your problem is you didn't deactivate the logical
volume, and export the volume group before disconnecting.


Yes! Thank you - exporting and then importing again after replugging worked.

I'll have to read up on what actually happens here .-)

Still - say that the USB (or iSCSI) PV is not exported before being 
unplugged (cables tripped over, internet connection going down, etc) - 
how do I recover from an unplugged but not exported PV/VG? It seems that 
vg[im/ex]port only fiddle with the off-PV metadata. Is this correct?


I think I'm looking for a force-import that allows me to bring a VG with 
associated LVs up provided that the PVs are present - affectively a 
'assemble' ala mdadm.


Thank you for pointing me in the right way ;-)

-S


lvchange -a n 
vgexport -a (don't worry it will only export groups that are
ready to be exported)

Now you can safely power the device down(provided the VG was
successfully exported, all logical volumes must be unmounted
and deactivated before it will succeed).

when you power it back up run

pvscan
vgimport -a
lvchange -a y 

LVM is very useful for volumes that change device names, but you
must use it properly otherwise bad things will happen as you
saw.

If you want to have USB mount automatically it may be better
to put a label on the file system, at least in Debian(don't
have a CentOS system with a USB disk handy here) the volume
is mounted as /media/ if there is a disk label.
You can use the e2label command to label the device. I'd
expect CentOS to likely behave similarly to debian in this
respect.

nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos




--
Simen Thoresen, Dolphin ICS
Systems Administration and Wulfkit Support
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] S.M.A.R.T

2008-08-31 Thread Mag Gam
When I do a scan for 0

I get this,

Device: HP   P800 Version: 5.20
>> Terminate command early due to bad response to IEC mode page

Very strange...

Also, I am using

smartctl -a -d cciss,1 -i /dev/cciss/c0d0
smartctl -a -d cciss,2 -i /dev/cciss/c0d0
smartctl -a -d cciss,3 -i /dev/cciss/c0d0


If I go above 3 I get the same type of error. I am not sure why this
is occuring. Any ideas?

TIA
On 8/30/08, Mag Gam <[EMAIL PROTECTED]> wrote:
> But, how would the OS know about physical drives. I though it would
> only know about the logical drive
>
>
> On Sat, Aug 30, 2008 at 11:43 AM, Mogens Kjaer <[EMAIL PROTECTED]> wrote:
> > Mag Gam wrote:
> >>
> >> Mogens,
> >>
> >> Correct thats what I am using.
> >>
> >> N=0 is the controller
> >> N=1 1 drive
> >> N=2 2 Drive
> >> N>3 is not working for me. Strange
> >>
> >> I have 2 logical drives. /dev/cciss/c0d1 and /dev/cciss/c0d2
> >>
> >> Each logical drive has 6 physical volumes totaling 12 physical volumes
> >>
> >> Are you experiencing the same thing?
> >
> > No. N refers to physical drives. N=0 is the first drive.
> >
> > Mogens
> >
> > --
> > Mogens Kjaer, Carlsberg A/S, Computer Department
> > Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
> > Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
> > Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> >
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] LVM and hotswap (USB/iSCSI) devices?

2008-08-31 Thread nate
Simen Timian Thoresen wrote:

> So - with the LV unmounted, I power my USB-device down, and then back up;


I believe your problem is you didn't deactivate the logical
volume, and export the volume group before disconnecting.

lvchange -a n 
vgexport -a (don't worry it will only export groups that are
ready to be exported)

Now you can safely power the device down(provided the VG was
successfully exported, all logical volumes must be unmounted
and deactivated before it will succeed).

when you power it back up run

pvscan
vgimport -a
lvchange -a y 

LVM is very useful for volumes that change device names, but you
must use it properly otherwise bad things will happen as you
saw.

If you want to have USB mount automatically it may be better
to put a label on the file system, at least in Debian(don't
have a CentOS system with a USB disk handy here) the volume
is mounted as /media/ if there is a disk label.
You can use the e2label command to label the device. I'd
expect CentOS to likely behave similarly to debian in this
respect.

nate


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] establish a 128 bit encrypted tunnel between centos 5.2 boxes

2008-08-31 Thread Robert Moskowitz

Ric Moore wrote:

On Tue, 2008-08-26 at 18:55 -0400, Robert Moskowitz wrote:
  

Jeff Kinz wrote:


On Tue, Aug 26, 2008 at 04:04:21PM -0400, Jerry Geis wrote:
  
  
Is there an easy way or anyway to establish a 128 bit encrypted tunnel 
between a handful of centos 5.2 boxes?



In addition the rest of the good info others already posted for you,
please remember that "128 bit encryption" doesn't mean anything 
unless you also specify the encryption scheme being used.


A 128 bit encryption scheme may or may not be easily broken depending on
which one it is. (Pick a good!)
  
Actually 'we' (crypto community) talk about crypto-suites, as you have 
to look at all the pieces involved. If everything is not disclosed (like 
with Skype), then you just don't know where the weakness may be.


SSH, IPsec (watch out for the 'Null' cipher :) ), TLS (some of the 
suites are too weak to talk about), and HIP are all well-rounded 
security protocols. I have worked on all of them.



Whatever happened to cipe?? Ric
Has it kept up with the known attacks?  It predates a lot of work we did 
in IETF on IPsec, for example.  For example I had to axe the implicite 
IV mode for DES-CBC due to the hamming distance attack.  "But schnier 
lists counters as a valid method of generating IVs".  Sheesh, there 
is such a thing as new attacks (even if they are old to the NSA) as 
being reasons NOT to site old texts.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS-announce Digest, Vol 42, Issue 13

2008-08-31 Thread centos-announce-request
Send CentOS-announce mailing list submissions to
[EMAIL PROTECTED]

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.centos.org/mailman/listinfo/centos-announce
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]

You can reach the person managing the list at
[EMAIL PROTECTED]

When replying, please edit your Subject line so it is more specific
than "Re: Contents of CentOS-announce digest..."


Today's Topics:

   1. CESA-2008:0849 Important CentOS 3 ia64ipsec-tools - security
  update (Pasi Pirhonen)
   2. CESA-2008:0863 Important CentOS 3 ia64 libtiff -  security
  update (Pasi Pirhonen)
   3. CESA-2008:0849 Important CentOS 4 ia64ipsec-tools - security
  update (Pasi Pirhonen)
   4. CESA-2008:0848 Important CentOS 4 ia64 libtiff -  security
  update (Pasi Pirhonen)
   5. CESA-2008:0849 Important CentOS 3 s390(x) ipsec-tools -
  security update (Pasi Pirhonen)
   6. CESA-2008:0863 Important CentOS 3 s390(x) libtiff - security
  update (Pasi Pirhonen)
   7. CESA-2008:0849 Important CentOS 4 s390(x) ipsec-tools -
  security update (Pasi Pirhonen)
   8. CESA-2008:0848 Important CentOS 4 s390(x) libtiff - security
  update (Pasi Pirhonen)
   9. CESA-2008:0835 Important CentOS 5 i386openoffice.org Update
  (Karanbir Singh)
  10. CESA-2008:0835 Important CentOS 5 x86_64  openoffice.org
  Update (Karanbir Singh)


--

Message: 1
Date: Sat, 30 Aug 2008 17:16:28 +0300
From: Pasi Pirhonen <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0849 Important CentOS 3 ia64
ipsec-tools - security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2008:0849

https://rhn.redhat.com/errata/RHSA-2008-0849.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

ia64:
updates/ia64/RPMS/ipsec-tools-0.2.5-0.7.rhel3.5.ia64.rpm


-- 
Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/
Top-postings silently ignored
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20080830/7a0546ae/attachment-0001.bin

--

Message: 2
Date: Sat, 30 Aug 2008 17:17:33 +0300
From: Pasi Pirhonen <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0863 Important CentOS 3 ia64
libtiff -   security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2008:0863

https://rhn.redhat.com/errata/RHSA-2008-0863.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

ia64:
updates/ia64/RPMS/libtiff-3.5.7-31.el3.ia64.rpm
updates/ia64/RPMS/libtiff-devel-3.5.7-31.el3.ia64.rpm


-- 
Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/
Top-postings silently ignored
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20080830/0a8cefb9/attachment-0001.bin

--

Message: 3
Date: Sat, 30 Aug 2008 17:20:21 +0300
From: Pasi Pirhonen <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0849 Important CentOS 4 ia64
ipsec-tools - security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2008:0849

https://rhn.redhat.com/errata/RHSA-2008-0849.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

ia64:
updates/ia64/RPMS/ipsec-tools-0.3.3-7.c4.ia64.rpm


-- 
Pasi Pirhonen - [EMAIL PROTECTED] - http://pasi.pirhonen.eu/
Top-postings silently ignored
-- next part --
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : 
http://lists.centos.org/pipermail/centos-announce/attachments/20080830/f35fa41c/attachment-0001.bin

--

Message: 4
Date: Sat, 30 Aug 2008 17:21:20 +0300
From: Pasi Pirhonen <[EMAIL PROTECTED]>
Subject: [CentOS-announce] CESA-2008:0848 Important CentOS 4 ia64
libtiff -   security update
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"

CentOS Errata and Security Advisory 2008:0848

https://rhn.redhat.com/errata/RHSA-2008-0848.html

The following updated files have been uploaded and are currently
syncing to the mirrors:

ia64:
updates/ia64/RPMS/libtiff-3.6.1-12.c4.2.ia64.rpm
updates/ia64/RPMS/libtiff-devel-

Re: [CentOS] LVM and hotswap (USB/iSCSI) devices?

2008-08-31 Thread William L. Maltby

On Sun, 2008-08-31 at 11:19 +0200, Simen Timian Thoresen wrote:
> Hi list,
> 
> I'm having one of those 'I'm stupid' -problems with LVM on CentOS 5.2. 
> I've been working with traditional partitions until now, but I've 
> finally been sold on the theoretical benefits of using LVM, but for now 
> I only have a huge pile of broken filesystems to show for my efforts.
> 
> My scenario;
> I attach a disk, either over USB or iSCSI.
> I create a PV on this device, create a VG using the device, and slice 
> off a tiny LV for tests.

Uh-oh! I hope these are for temporary usage only!

> 
> [EMAIL PROTECTED] ~]# dmesg
> 

> [EMAIL PROTECTED] ~]# pvcreate /dev/sdg1
>Physical volume "/dev/sdg1" successfully created
> [EMAIL PROTECTED] ~]# vgcreate testgroup /dev/sdg1
>Volume group "testgroup" successfully created
> [EMAIL PROTECTED] ~]# lvcreate -L 200M testgroup -n testLV
>Logical volume "testLV" created
> 
> 
> At this point, I have /dev/testgroup/testLV, which I can stick a fs on, 
> mount, store files on, unmount, remount and recover the files from. Just 
> as I'd expect.
> 
> [EMAIL PROTECTED] ~]# lvdisplay
>--- Logical volume ---
>LV Name/dev/testgroup/testLV
>VG Nametestgroup
>LV UUID3KjDiZ-gTAD-sC9E-sOSA-772o-41Yk-ZKK7cx
>LV Write Accessread/write
>LV Status  available
># open 0
>LV Size200.00 MB
>Current LE 50
>Segments   1
>Allocation inherit
>Read ahead sectors auto
>- currently set to 256
>Block device   253:1
> 
> 
> I have not explicitly set the vg active, as I understand that it 
> implicitly will be set active in non-clustered environments like mine. 
> LVM works as I'd expect it to up until here in any case.
> 
> So - with the LV unmounted, I power my USB-device down, and then back up;
> 
> [EMAIL PROTECTED] ~]# dmesg
> 


> (note that my disk is now sdi, not sdg, and connected on scsi28 and not 
> scsi27)

By now you realize that is a big problem?

> 
> If I now try to access the device, all falls appart;
> [EMAIL PROTECTED] ~]# lvdisplay
>/dev/testgroup/testLV: read failed after 0 of 4096 at 209649664: 
> Input/output error
> 

>--- Logical volume ---
>LV Name/dev/testgroup/testLV
>VG Nametestgroup
>LV UUID3KjDiZ-gTAD-sC9E-sOSA-772o-41Yk-ZKK7cx
>LV Write Accessread/write
>LV Status  available
># open 0
>LV Size200.00 MB
>Current LE 50
>Segments   1
>Allocation inherit
>Read ahead sectors auto
>- currently set to 256
>Block device   253:1
> 
> 
> Trying to mount or otherwise access the LV also shows the problems;
> 
> 
> scsi 27:0:0:0: rejecting I/O to dead device
> 
> Buffer I/O error on device dm-1, logical block 7
> scsi 27:0:0:0: rejecting I/O to dead device
> scsi 27:0:0:0: rejecting I/O to dead device
> scsi 27:0:0:0: rejecting I/O to dead device
> scsi 27:0:0:0: rejecting I/O to dead device
> hfs: unable to find HFS+ superblock
> 
> So - LVM seems to believe my LV is still attached to scsi27, while it 
> now actually sits on scsi28.
> 
> What am I missing here?

Use the pvdisplay command and you'll see.

# pvdisplay
  --- Physical volume ---
  PV Name   /dev/sdb2
  VG Name   VolGroup00
  PV Size   148.95 GB / not usable 11.37 MB
  Allocatable   yes (but full)
  PE Size (KByte)   32768
  Total PE  4766
  Free PE   0
  Allocated PE  4766
  PV UUID   eeqb0A-6EJV-VE3Q-paLi-kTXv-S46k-0xaeTy

Sit back a moment and think about it. You defined a PV on a specific
device. That device is no longer available. LVM has to track the
assignment, allocation and use of PVs. It must have a record of it
somewhere.

# ls -l /etc/lvm
total 44
drwx-- 2 root root  4096 May 25 00:41 archive
drwx-- 2 root root  4096 May 25 00:41 backup
drwx-- 2 root root  4096 Aug 30 08:38 cache
-rw-r--r-- 1 root root 15911 May 25 00:41 lvm.conf

Use the man command to read up on more stuff, like "man lvm.conf" and
"man lvm". Be sure and read some of the other refs at the bottom of the
man pages.

> 
> How do I get LVM to use a persistent device instead of a transient path?

Normally you give a persistent device instead of a transient path.  You
didn't do that.

Generally speaking, LVM is designed to use fixed devices - those that
always come up on the same address. Neither iscsi nor UHB devices do
this reliably. However, on a reboot, there is a liklihood that they will
be the same devices.

I've not tried to configure it on transient devices. There may be a way,
but I've not looked into it.

If you make them their own VG, rather than adding the PV to another VG,
you can use the export and import LVM commands

[CentOS] LVM and hotswap (USB/iSCSI) devices?

2008-08-31 Thread Simen Timian Thoresen

Hi list,

I'm having one of those 'I'm stupid' -problems with LVM on CentOS 5.2. 
I've been working with traditional partitions until now, but I've 
finally been sold on the theoretical benefits of using LVM, but for now 
I only have a huge pile of broken filesystems to show for my efforts.


My scenario;
I attach a disk, either over USB or iSCSI.
I create a PV on this device, create a VG using the device, and slice 
off a tiny LV for tests.


[EMAIL PROTECTED] ~]# dmesg
usb 1-3: new high speed USB device using ehci_hcd and address 7
usb 1-3: configuration #1 chosen from 1 choice
scsi27 : SCSI emulation for USB Mass Storage devices
usb-storage: device found at 7
usb-storage: waiting for device to settle before scanning
  Vendor: ST375064  Model: 0ARev: 3.AA
  Type:   Direct-Access  ANSI SCSI revision: 00
SCSI device sdg: 1465149168 512-byte hdwr sectors (750156 MB)
sdg: Write Protect is off
sdg: Mode Sense: 10 00 00 00
sdg: assuming drive cache: write through
SCSI device sdg: 1465149168 512-byte hdwr sectors (750156 MB)
sdg: Write Protect is off
sdg: Mode Sense: 10 00 00 00
sdg: assuming drive cache: write through
 sdg: sdg1
sd 27:0:0:0: Attached scsi disk sdg
sd 27:0:0:0: Attached scsi generic sg6 type 0
usb-storage: device scan complete
[EMAIL PROTECTED] ~]# pvcreate /dev/sdg1
  Physical volume "/dev/sdg1" successfully created
[EMAIL PROTECTED] ~]# vgcreate testgroup /dev/sdg1
  Volume group "testgroup" successfully created
[EMAIL PROTECTED] ~]# lvcreate -L 200M testgroup -n testLV
  Logical volume "testLV" created


At this point, I have /dev/testgroup/testLV, which I can stick a fs on, 
mount, store files on, unmount, remount and recover the files from. Just 
as I'd expect.


[EMAIL PROTECTED] ~]# lvdisplay
  --- Logical volume ---
  LV Name/dev/testgroup/testLV
  VG Nametestgroup
  LV UUID3KjDiZ-gTAD-sC9E-sOSA-772o-41Yk-ZKK7cx
  LV Write Accessread/write
  LV Status  available
  # open 0
  LV Size200.00 MB
  Current LE 50
  Segments   1
  Allocation inherit
  Read ahead sectors auto
  - currently set to 256
  Block device   253:1


I have not explicitly set the vg active, as I understand that it 
implicitly will be set active in non-clustered environments like mine. 
LVM works as I'd expect it to up until here in any case.


So - with the LV unmounted, I power my USB-device down, and then back up;

[EMAIL PROTECTED] ~]# dmesg
usb 1-3: USB disconnect, address 7
usb 1-3: new high speed USB device using ehci_hcd and address 8
usb 1-3: configuration #1 chosen from 1 choice
scsi28 : SCSI emulation for USB Mass Storage devices
usb-storage: device found at 8
usb-storage: waiting for device to settle before scanning
  Vendor: ST375064  Model: 0ARev: 3.AA
  Type:   Direct-Access  ANSI SCSI revision: 00
SCSI device sdi: 1465149168 512-byte hdwr sectors (750156 MB)
sdi: Write Protect is off
sdi: Mode Sense: 10 00 00 00
sdi: assuming drive cache: write through
SCSI device sdi: 1465149168 512-byte hdwr sectors (750156 MB)
sdi: Write Protect is off
sdi: Mode Sense: 10 00 00 00
sdi: assuming drive cache: write through
 sdi: sdi1
sd 28:0:0:0: Attached scsi disk sdi
sd 28:0:0:0: Attached scsi generic sg6 type 0
usb-storage: device scan complete

(note that my disk is now sdi, not sdg, and connected on scsi28 and not 
scsi27)


If I now try to access the device, all falls appart;
[EMAIL PROTECTED] ~]# lvdisplay
  /dev/testgroup/testLV: read failed after 0 of 4096 at 209649664: 
Input/output error
  /dev/testgroup/testLV: read failed after 0 of 4096 at 209707008: 
Input/output error
  /dev/testgroup/testLV: read failed after 0 of 4096 at 0: Input/output 
error
  /dev/testgroup/testLV: read failed after 0 of 4096 at 4096: 
Input/output error
  /dev/testgroup/testLV: read failed after 0 of 4096 at 0: Input/output 
error

  --- Logical volume ---
  LV Name/dev/testgroup/testLV
  VG Nametestgroup
  LV UUID3KjDiZ-gTAD-sC9E-sOSA-772o-41Yk-ZKK7cx
  LV Write Accessread/write
  LV Status  available
  # open 0
  LV Size200.00 MB
  Current LE 50
  Segments   1
  Allocation inherit
  Read ahead sectors auto
  - currently set to 256
  Block device   253:1


Trying to mount or otherwise access the LV also shows the problems;


scsi 27:0:0:0: rejecting I/O to dead device
scsi 27:0:0:0: rejecting I/O to dead device
scsi 27:0:0:0: rejecting I/O to dead device
scsi 27:0:0:0: rejecting I/O to dead device
scsi 27:0:0:0: rejecting I/O to dead device
scsi 27:0:0:0: rejecting I/O to dead device
printk: 25 messages suppressed.
Buffer I/O error on device dm-1, logical block 30
Buffer I/O error on device dm-1, logical block 31
scsi 27:0:0:0: rejecting I/O to dead device
Buffe

Re: [CentOS] Re: Curmudgeoning (was Re: Problems with writing Dual Layer DVD)

2008-08-31 Thread Ric Moore

On Fri, 2008-08-29 at 10:51 -0500, David Dyer-Bennet wrote:
> On Thu, August 28, 2008 17:50, Scott Silva wrote:
> > 
> >>
> >> You do realize I'm one of the "squirts" you're referring to right?
> >>  I started working with computers in more than just a 'hey, I need to
> >> write this paper' sort of way around 1995. The *first* CPU I used was
> >> a pentium (though this is not the oldest, as I developed a fondness
> >> for antiques).
> >>
> >> So you geezers can just put the token ring down, and step away from
> >> the thin-net. Oh.. and get off my lawn! :-P
> 
> > I have motherboards in my garage older than you! ;-D
> 
> I just took one down off the server shelf last week, finishing the
> decommissioning process.  It hasn't made it out to the garage yet.
> 
> I've also still got a laptop that's probably older than him.  It runs CP/M.

I once had a pretty large collection of CP/M machines. I had three
IMSAI's. a VDP-80 and two VDP-44's. I think I had every Televideo ever
made, including the luggable and the server that ran MP/M. Altos,
Osborn, and a bunch of others. Man, think of what CP/M could do running
on a Pentium.  Ric
 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help me

2008-08-31 Thread Sadaruwan Samaraweera
Hi,
thx every much trying to get me on to the right track and I apologize for
being such an ass. Sorry again yes I made a big mistake. I was under lot of
pressure in my private life so I think that might have come over me.
Regards
Sadaruwan Samaraweera

On Wed, Aug 27, 2008 at 10:19 PM, William L. Maltby <
[EMAIL PROTECTED]> wrote:

>
> On Wed, 2008-08-27 at 12:00 +0530, Sadaruwan Samaraweera wrote:
> > Hi,
> >
> >  Yes I know what your saying ok! I didn't ask him any descent question
> > but I gave a solution based on my experience. So why hell r u guy's
> > coming after me
>
> First, don't get offended. If you've been on any/many lists for awhile,
> you'll know that time is at a premium for many of the participants and
> they tend to give short answers. *And* when someone gives "definitive"
> answers based on (possibly incorrect) assumptions (like the problem is
> similar to yours, equipment similar to yours, net setup similar, ...)
> they are quick to jump in because those answers may lead to severe
> damage to the recipient. Sometimes immediate harm, sometimes longer-term
> difficulty.
>
> Because of those risks, it is important to try to fully understand (to a
> *reasonable* extent, for the time expended) the nature of a problem, its
> operational environment, various constraints that may be in place, etc.,
> before offering solutions that may be tried. That is why, if you follow
> the lists on *good* sites like CentOS, you will often see (I'll
> exaggerate now) "My network card doesn't work! Help" followed by various
> types of responses saying, essentially, something like "We need more
> information" and those responses may ask specific questions.
>
> Solving many technical problems can be difficult even in a hands-on
> situation, it's inordinately more difficult to do remotely. As with
> *any* resolution process, the first step is to identify the *problem*,
> *not* the *symptoms*. Symptoms are clues pointing to the problem. Ergo,
> sufficient, but *not* excessive information is a necessity.
>
> *Experienced* people know this and will quickly try to help *educate*
> those who don't seem to know this, whether is is the person with the
> problem or one responding to the OP.
>
> That's why we are "coming after you". The problem is not "we are coming
> after you", the problem is that both the OP and you seem to have been
> extremely casual in the problem resolution process and that engenders a
> high degree of risk to the OP and none for you. Further it wastes the
> valuable time of those who might try to help, both in reading the
> original request for help (and then having to ask for even the most
> basic pertinent information) and in reading replies that may be offered
> that pose excessive risk to those who might use the offered solutions.
> So, "education" is in order so that *all* may benefit, including the OP,
> the folks who reply and even just those who have to wade through som
> many useless posts (and post of the type being discussed ar, at best,
> useless).
>
> As long as no one is completely crude, rude and unattractive in their
> replies (not always the case), you should take no offense.
>
> My suggestion is you thicken your skin, contribute as you can and desire
> to, with *due* *care*, and learn from others as we *all* learn from
> others on this list.
>
> > and as you said in the world of IT there are lot of perhaps OK buddy.
>
> I don't know what you mean by this.
>
> >
> > Regards,
> > Sadaruwan
>
> I won't even mention top posting or failure to snip text not needed. ;-)
>
> > 
>
> --
> Bill
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] establish a 128 bit encrypted tunnel between centos 5.2 boxes

2008-08-31 Thread Ric Moore

On Tue, 2008-08-26 at 18:55 -0400, Robert Moskowitz wrote:
> Jeff Kinz wrote:
> > On Tue, Aug 26, 2008 at 04:04:21PM -0400, Jerry Geis wrote:
> >   
> >> Is there an easy way or anyway to establish a 128 bit encrypted tunnel 
> >> between a handful of centos 5.2 boxes?
> >> 
> >
> > In addition the rest of the good info others already posted for you,
> > please remember that "128 bit encryption" doesn't mean anything 
> > unless you also specify the encryption scheme being used.
> >
> > A 128 bit encryption scheme may or may not be easily broken depending on
> > which one it is. (Pick a good!)
> Actually 'we' (crypto community) talk about crypto-suites, as you have 
> to look at all the pieces involved. If everything is not disclosed (like 
> with Skype), then you just don't know where the weakness may be.
> 
> SSH, IPsec (watch out for the 'Null' cipher :) ), TLS (some of the 
> suites are too weak to talk about), and HIP are all well-rounded 
> security protocols. I have worked on all of them.

Whatever happened to cipe?? Ric


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos