Re: [CentOS] sendmail substitute?

2010-10-14 Thread Alexander Dalloz
>
> Hi all,
>
> i'm following online guides to secure my centos 5.4
> it's advised to turn off sendmail service among others.
> but how can i forward my /var/log/mail to my webmail ?

To update to CentOS 5.5 with current updates (especially the kernel!)
would improve security much more than deactivating Sendmail. That said you
are not bound to 5.4 by any specific usecase.

> any help would be greatly appreciated..

What is the rationale behind deactivating Sendmail. Just curious. Or is it
the typical rant "Sendmail is insecure, see its history"?

> thank you

Alexander


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] using a Laptop as a KVM console?

2010-10-14 Thread cornel panceac
is there a client-server application which does kvm over network
connections?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread Giles Coochey
  On 14/10/2010 09:11, Alexander Dalloz wrote:
>> Hi all,
>>
>> i'm following online guides to secure my centos 5.4
>> it's advised to turn off sendmail service among others.
>> but how can i forward my /var/log/mail to my webmail ?
> To update to CentOS 5.5 with current updates (especially the kernel!)
> would improve security much more than deactivating Sendmail. That said you
> are not bound to 5.4 by any specific usecase.
>
Agree with above.
>> any help would be greatly appreciated..
> What is the rationale behind deactivating Sendmail. Just curious. Or is it
> the typical rant "Sendmail is insecure, see its history"?
>
If he just wants to send emails generated by internal programs on his 
system and doesn't need a full blown MTA then something smaller with 
SMTP capability would be a more fitting choice.
I run sendmail myself, but then run a full blown mail system, want spam 
/ anti-vrus checking and so on, but for ordinary systems 
(non-mailservers) something simpler with a smaller footprint and 
capability is probably better, not just from a security point of view.
I commend anyone who choses not to run a full-blown MTA if they are 
technically uncertain about the security implications.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] using a Laptop as a KVM console?

2010-10-14 Thread Bart Schaefer
On Wed, Oct 13, 2010 at 11:39 AM, Rudi Ahlers  wrote:
> On Wed, Oct 13, 2010 at 8:20 PM, Dale Dellutri  wrote:
>> Your request inspired me to try a google search:
>>
>>   linux laptop as kvm console
>>
>> http://us.startech.com/product/NOTECONS01-Portable-USB-PS-2-KVM-Console-Adapter-for-Notebook-PCs
>
> Thanx Dale, that's what I was looking for :) Now I just need to find a
> local supplier, seeing how expensive this is. I guess my google search
> terms were just a bit off.

Try searching for "kvm over ip" -- you'll find a number of devices not
much more expensive than that adapter, which are KVMs with their own
network interfaces.  Which means you don't even need to be physically
plugged in to use them, though I believe you *could* be if security
concerns mean you don't want to connect the KVM to a public network.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] using a Laptop as a KVM console?

2010-10-14 Thread cornel panceac
>
>
> Try searching for "kvm over ip" -- you'll find a number of devices not
> much more expensive than that adapter, which are KVMs with their own
> network interfaces.  Which means you don't even need to be physically
> plugged in to use them, though I believe you *could* be if security
> concerns mean you don't want to connect the KVM to a public network.
>
> thank you
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] network interface question

2010-10-14 Thread John Doe
From: Paras pradhan 

> I don't have ifcfg-eth1 in my /etc/sysconfig/network-scripts.

Maybe try to have one and put:
  ONBOOT=no

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread John Doe
From: Giles Coochey 

>   On 14/10/2010 09:11, Alexander Dalloz wrote:
> >> i'm following online guides to secure my centos  5.4
> >> it's advised to turn off sendmail service among  others.
> >> but how can i forward my /var/log/mail to my webmail  ?
> > To update to CentOS 5.5 with current updates (especially the  kernel!)
> > would improve security much more than deactivating Sendmail.  That said you
> > are not bound to 5.4 by any specific  usecase.
> >
> Agree with above.
> >> any help would be greatly  appreciated..
> > What is the rationale behind deactivating Sendmail. Just  curious. Or is it
> > the typical rant "Sendmail is insecure, see its  history"?
> >
> If he just wants to send emails generated by internal  programs on his 
> system and doesn't need a full blown MTA then something  smaller with 
> SMTP capability would be a more fitting choice.
> I run  sendmail myself, but then run a full blown mail system, want spam 
> /  anti-vrus checking and so on, but for ordinary systems 
> (non-mailservers)  something simpler with a smaller footprint and 
> capability is probably  better, not just from a security point of view.
> I commend anyone who choses  not to run a full-blown MTA if they are 
> technically uncertain about the  security  implications.

What could be so insecure about using sendmail localy?
Don't start the daemon, so it is not listening...
Or the firewall will block the port anyway...
If the mail is sent to a trusted mail server, there is no risks.
Am I missing something?

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread Giles Coochey

> What could be so insecure about using sendmail localy?
> Don't start the daemon, so it is not listening...
> Or the firewall will block the port anyway...
> If the mail is sent to a trusted mail server, there is no risks.
> Am I missing something?
>
On a hardened, production, well configured server that strategy would 
simply be a part of a "Defence-in-Depth" security strategy.

What's the worst that could happen?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread Scott Robbins
On Thu, Oct 14, 2010 at 08:47:28AM +0200, Giles Coochey wrote:
> On 14/10/2010 08:44, Roland RoLaNd wrote:
> 
> Hi all,
> 
> i'm following online guides to secure my centos 5.4
> it's advised to turn off sendmail service among others.
> but how can i forward my /var/log/mail to my webmail ?
> 

> http://blog.zloether.com/2009/07/install-ssmtp-in-centos.html

The problem with ssmtp is that it only sends to an outside source.  It's
no longer maintained as far as I know, and I don't think there's a way
to get it to just go local, without sending outside.
(DISCLAIMER--haven't used it in a long while, and perhaps someone fixed
that, or found out a way, but I remember on Fedora forums there was a
thread about it, and I don't think anyone managed to get it to only send
and deliver locally.)

> 
> http://blog.zloether.com/2009/07/send-email-from-linux-shell.html

This also, you will note, sends email through (in the example) through
gmail, that is, going outside the machine. 



-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Buffy: Ahh, it's okay. Gave Cord and I chance to spend some 
quality death time. 
Cordelia: And we got these free corsages. 
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread Giles Coochey
  On 14/10/2010 11:48, Scott Robbins wrote:
>
>> http://blog.zloether.com/2009/07/send-email-from-linux-shell.html
> This also, you will note, sends email through (in the example) through
> gmail, that is, going outside the machine.
>
>
I thought that was what the OP requested?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread Scott Robbins
On Thu, Oct 14, 2010 at 11:50:51AM +0200, Giles Coochey wrote:
>   On 14/10/2010 11:48, Scott Robbins wrote:
> >
> >> http://blog.zloether.com/2009/07/send-email-from-linux-shell.html
> > This also, you will note, sends email through (in the example) through
> > gmail, that is, going outside the machine.
> >
> >
> I thought that was what the OP requested?

I may have misunderstood--I was under the impression that the OP only
wanted to send system messages locally, that is, the sort of things
syslog sends to root. 

I have a rather dated page on it (that I host locally, so slow site and
often down), at 

http://www.scottro.net/qnd/qnd-ssmtp.html


-- 
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Cordelia: Do you know what he's going to do to me when he
finds out I let his car get stolen? I mean, what are the chances that
a vampire has full insurance with a low deductible?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] best practices in using shared storage for XEN Virtual Machines and auto-failover?

2010-10-14 Thread Rudi Ahlers
Hi all,

Can anyone pleas tell me what would be best practice to use shared
storage with virtual machines, especially when it involved high
availability / automated failover between 2 XEN servers?

i.e. if I setup 2x identical XEN servers, each with say 16GB RAM, 4x
1GB NIC's, etc. Then I need the xen domU's to auto failover between
the 2 servers if either goes down (hardware failure / overload /
kernel updates / etc).

What is the best way to connect a NAS / SAN to these 2 servers for
this kind of setup to work flawlessly? The NAS can export iSCSI, NFS,
SMB, etc. I'm sure I could even use ATAOE if needed

-- 
Kind Regards
Rudi Ahlers
SoftDux

Website: http://www.SoftDux.com
Technical Blog: http://Blog.SoftDux.com
Office: 087 805 9573
Cell: 082 554 7532
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] installing centOS on extended partition

2010-10-14 Thread Ritika Garg
Can CentOS be installed on an extended partition? System has the following
partitions:
OEM(reserved)-78MB(primary)
System-100MB(primary)
C-55GB(primary)
D-100GB(extended)
Can I divide D into 2 parts:70GB and 30GB and install CentOS in the 70GB
logical partition?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Determine next UID number

2010-10-14 Thread John Kennedy
On Wed, Oct 13, 2010 at 17:16, Spiro Harvey  wrote:

> John Kennedy  wrote:
> > This also does not tell me how useradd knows that on this system at
> > this time the highest UID assigned to a user is 20015.
>
> From the source's mouth (this is from useradd.c in the shadow-utils
> package):
>
> /*
>  * find_new_uid - find the next available UID
>  *
>  *  find_new_uid() locates the next highest unused UID in the password
>  *  file, or checks the given user ID against the existing ones for
>  *  uniqueness.
>  */
> static void find_new_uid (void)
> {
>const struct passwd *pwd;
>uid_t uid_min, uid_max;
>
>uid_min = getdef_unum ("UID_MIN", 1000);
>uid_max = getdef_unum ("UID_MAX", 6);
>
>/*
> * Start with some UID value if the user didn't provide us with
> * one already.
> */
>if (!uflg)
>user_id = uid_min;
>
>/*
> * Search the entire password file, either looking for this
> * UID (if the user specified one with -u) or looking for the
> * largest unused value.
> */
> #ifdef NO_GETPWENT
>pw_rewind ();
>while ((pwd = pw_next ())) {
> #else   /* using getpwent() we can check against
> NIS users etc. */
>setpwent ();
>while ((pwd = getpwent ())) {
> #endif
>if (strcmp (user_name, pwd->pw_name) == 0) {
>fprintf (stderr, _("%s: name %s is not unique\n"),
> Prog, user_name);
> #ifdef WITH_AUDIT
>audit_logger (AUDIT_USER_CHAUTHTOK, Prog, "adding
> user",
>  user_name, user_id, 0);
> #endif
>exit (E_NAME_IN_USE);
>}
>if (uflg && user_id == pwd->pw_uid) {
>fprintf (stderr, _("%s: UID %u is not unique\n"),
> Prog, (unsigned int) user_id);
> #ifdef WITH_AUDIT
>audit_logger (AUDIT_USER_CHAUTHTOK, Prog, "adding
> user",
>  user_name, user_id, 0);
> #endif
>exit (E_UID_IN_USE);
>}
>if (!uflg && pwd->pw_uid >= user_id) {
>if (pwd->pw_uid > uid_max)
>continue;
>user_id = pwd->pw_uid + 1;
>}
>}
>
>/*
> * If a user with UID equal to UID_MAX exists, the above algorithm
> * will give us UID_MAX+1 even if not unique. Search for the first
> * free UID starting with UID_MIN (it's O(n*n) but can be avoided
> * by not having users with UID equal to UID_MAX).  --marekm
> */
>if (!uflg && user_id == uid_max + 1) {
>for (user_id = uid_min; user_id < uid_max; user_id++) {
> #ifdef NO_GETPWENT
>pw_rewind ();
>while ((pwd = pw_next ())
>   && pwd->pw_uid != user_id);
>if (!pwd)
>break;
> #else
>if (!getpwuid (user_id))
>break;
> #endif
>}
>if (user_id == uid_max) {
>fprintf (stderr, _("%s: can't get unique UID\n"),
> Prog);
>fail_exit (E_UID_IN_USE);
>}
>}
> }
>
>
>
> --
> Spiro Harvey  Knossos Networks Ltd
> 021-295-1923  www.knossos.net.nz
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
This looks like what I am talking about. Interesting to see that the program
literally does what the code above does (as much as I can tell. I am not a
coder)

Thanks Spiro.
John

-- 
 John Kennedy
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] installing centOS5.5

2010-10-14 Thread Ritika Garg
Want to install CentOS 5.5 by burning the image on DVD. On the link:
http://mirrors.hns.net.in/centos/5.5/isos/x86_64/, there is a list given.
CentOS-5.5-x86 64-bin-DVD.torrent is in the list. So is the download of the
.iso possible only through torrent?
There is CentOS-5.5-x86 64-netinstall.iso Is this also an .iso which one can
download to install CentOS5.5?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] using a Laptop as a KVM console?

2010-10-14 Thread John Doe
From: cornel panceac 
> is there a client-server application which does kvm over network connections?

What do you mean by client-server?
VNC? NX?
KVM is hardware "emulation" of the keyboard, Video and Mouse...
Meaning you can remotely manage the server (reboot, bios, etc...), without 
being 
dependent of a server application running under an OS.
So you need some hardware...  Build into the server or from an external device.

JD


  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centOS5.5

2010-10-14 Thread Giles Coochey
  On 14/10/2010 14:45, Ritika Garg wrote:
> Want to install CentOS 5.5 by burning the image on DVD. On the 
> link:http://mirrors.hns.net.in/centos/5.5/isos/x86_64/, there is a 
> list given. CentOS-5.5-x86 64-bin-DVD.torrent is in the list. So is 
> the download of the .iso possible only through torrent?
> There is CentOS-5.5-x86 64-netinstall.iso Is this also an .iso which 
> one can download to install CentOS5.5?
The netinstall is a minimal ISO which will grab packages from a package 
repository over the Internet.

I've used it before and with a good network connection and it's faster 
than downloading the DVD if you know what packages you want and don't 
want a system with everything on it.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centOS5.5

2010-10-14 Thread Timo Schoeler
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

thus Ritika Garg spake:
> Want to install CentOS 5.5 by burning the image on DVD. On the link:
> http://mirrors.hns.net.in/centos/5.5/isos/x86_64/, there is a list given.
> CentOS-5.5-x86 64-bin-DVD.torrent is in the list. So is the download of the
> .iso possible only through torrent?

No, there are servers which do have the DVD downloadable; however, it's
not the case for all the servers.

http://www.centos.org/modules/tinycontent/index.php?id=30

(Check the 'Direct DVD Downloads' coloumn.)

> There is CentOS-5.5-x86 64-netinstall.iso Is this also an .iso which one can
> download to install CentOS5.5?

Yes, it will boot the installer, which then fetches the packeges needed
via your internet connection. However, a connection is mandatory then,
in contrast to an installation from DVD. But keep in mind to update the
system ASAP using 'yum update', for which an internet connection is of
course needed, too.

HTH,

Timo
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)

iD4DBQFMtvwkfg746kcGBOwRAt2PAJi2ICzPPk35pUKSUKBZVhUUm4KwAKCruGD9
2vvCvEMJDnaNHZgjRV4Wgg==
=T14r
-END PGP SIGNATURE-
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centOS on extended partition

2010-10-14 Thread m . roth
Ritika Garg wrote:
> Can CentOS be installed on an extended partition? System has the following
> partitions:
> OEM(reserved)-78MB(primary)
> System-100MB(primary)
> C-55GB(primary)
> D-100GB(extended)
> Can I divide D into 2 parts:70GB and 30GB and install CentOS in the 70GB
> logical partition?

Of course. Extended or primary is an old, old DOS separation, but once
they exist, everything just treats it as another partition.

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] network interface question

2010-10-14 Thread Paras pradhan
It looks like when there are no ifcfg-* files , then the kernel
assigns some default logical names ( don;t know how and why), but if
we create ifcfg-ethx files then it overrides it. That should be ok (?)
i think.

One more question:

I have eight nics and its getting difficult to me which MAC id
represents which physical port. Any way to find this?

Thanks!
Paras.


On Thu, Oct 14, 2010 at 3:53 AM, John Doe  wrote:
> From: Paras pradhan 
>
>> I don't have ifcfg-eth1 in my /etc/sysconfig/network-scripts.
>
> Maybe try to have one and put:
>  ONBOOT=no
>
> JD
>
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centOS on extended partition

2010-10-14 Thread John R Pierce
  On 10/14/10 6:53 AM, m.r...@5-cent.us wrote:
> Ritika Garg wrote:
>> Can CentOS be installed on an extended partition? System has the following
>> partitions:
>> OEM(reserved)-78MB(primary)
>> System-100MB(primary)
>> C-55GB(primary)
>> D-100GB(extended)
>> Can I divide D into 2 parts:70GB and 30GB and install CentOS in the 70GB
>> logical partition?
> Of course. Extended or primary is an old, old DOS separation, but once
> they exist, everything just treats it as another partition.
>

/boot still has to be on a primary, doesn't it?


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centOS on extended partition

2010-10-14 Thread m . roth
John R Pierce wrote:
>   On 10/14/10 6:53 AM, m.r...@5-cent.us wrote:
>> Ritika Garg wrote:
>>> Can CentOS be installed on an extended partition? System has the
>>> following
>>> partitions:
>>> OEM(reserved)-78MB(primary)
>>> System-100MB(primary)
>>> C-55GB(primary)
>>> D-100GB(extended)
>>> Can I divide D into 2 parts:70GB and 30GB and install CentOS in the
>>> 70GB
>>> logical partition?
>> Of course. Extended or primary is an old, old DOS separation, but once
>> they exist, everything just treats it as another partition.
>>
>
> /boot still has to be on a primary, doesn't it?

I *think* so.

  mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread James A. Peltier
- Original Message -
| Hi all,
| 
| i'm following online guides to secure my centos 5.4
| it's advised to turn off sendmail service among others.
| but how can i forward my /var/log/mail to my webmail ?
| 
| any help would be greatly appreciated..
| 
| thank you
| 
| ___
| CentOS mailing list
| CentOS@centos.org
| http://lists.centos.org/mailman/listinfo/centos

A local MTA is required to deliver mail.  If you ensure that sendmail is only 
listening on localhost you should be okay.

--
James A. Peltier
Systems Analyst (FASNet), VIVARIUM Technical Director
Simon Fraser University - Burnaby Campus
Phone   : 778-782-6573
Fax : 778-782-3045
E-Mail  : jpelt...@sfu.ca
Website : http://www.fas.sfu.ca | http://vivarium.cs.sfu.ca
MSN : subatomic_s...@hotmail.com

Does your OS has a man 8 lart?
http://www.xinu.nl/unix/humour/asr-manpages/lart.html


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centOS on extended partition

2010-10-14 Thread Robert Heller
At Thu, 14 Oct 2010 09:53:52 -0700 CentOS mailing list  
wrote:

> 
>   On 10/14/10 6:53 AM, m.r...@5-cent.us wrote:
> > Ritika Garg wrote:
> >> Can CentOS be installed on an extended partition? System has the following
> >> partitions:
> >> OEM(reserved)-78MB(primary)
> >> System-100MB(primary)
> >> C-55GB(primary)
> >> D-100GB(extended)
> >> Can I divide D into 2 parts:70GB and 30GB and install CentOS in the 70GB
> >> logical partition?
> > Of course. Extended or primary is an old, old DOS separation, but once
> > they exist, everything just treats it as another partition.
> >
> 
> /boot still has to be on a primary, doesn't it?

No.  The *only* thing that needs to be in any partitular place is the
boot loader -- this is a BIOS thing: the BIOS wants the boot loader (or
actually the first stage of it) in the MBR of the first disk.  Both
Lilo and Grub can access any disk or partition that can be accessed by
the BIOS.  Lilo cares not about 'partitions' at all: it does raw disk
access using raw LBA32 (modern) or CHS (old) addressing).  Grub
understands ext2 file systems.  Neither Lilo nor Grub understand about
LVM or RAID (they don't actually need to).  /boot cannot be inside a
LVM VG.  It can be a *mirrored* (RAID1) set.  Trickyness: if your /boot
raid set is on the first & second disk (eg /dev/sda and /dev/sdb or
/dev/hda and /dev/hdb) and you want to be able to boot if the first
disk dies, make sure that the boot loader is on both disks (eg do a
grub-install on the second disk as well as the first disk, similar
magic for lilo).  That way if the first disk of the raid mirror set
dies, you can 'swap' the bad drive out, put the good *second* drive in
as what the BIOS sees as the first drive (if real SCSI or hot-swapable
SATA, merely removing the bad drive is enough -- for IDE one needs to
reach inside and have fun with cables and/or jumpers). You system will
boot (with a degraded RAID set).  (You can install a replacement drive,
partition it, add it to the raid set and have things rebuild).

> 
> 
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 
>

-- 
Robert Heller -- 978-544-6933 / hel...@deepsoft.com
Deepwoods Software-- http://www.deepsoft.com/
()  ascii ribbon campaign -- against html e-mail
/\  www.asciiribbon.org   -- against proprietary attachments



  
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread Morten P.D. Stevens
On Thu, Oct 14, 2010 at 9:11 AM, Alexander Dalloz  wrote:
>
> What is the rationale behind deactivating Sendmail. Just curious. Or is it
> the typical rant "Sendmail is insecure, see its history"?

I don't understand why many people calling sendmail insecure.

Sendmail is the default MTA in RHEL, Solaris, AIX, FreeBSD, OpenBSD ...

Why should they use an insecure MTA?

Sendmail is a very robust and reliable MTA.

Best regards,

Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centOS on extended partition

2010-10-14 Thread m . roth
Robert Heller wrote:
> At Thu, 14 Oct 2010 09:53:52 -0700 CentOS mailing list 
> wrote:
>>   On 10/14/10 6:53 AM, m.r...@5-cent.us wrote:
>> > Ritika Garg wrote:
>> >> Can CentOS be installed on an extended partition? System has the
>> following
>> >> partitions:
>> >> OEM(reserved)-78MB(primary)
>> >> System-100MB(primary)
>> >> C-55GB(primary)
>> >> D-100GB(extended)
>> >> Can I divide D into 2 parts:70GB and 30GB and install CentOS in the
>> 70GB
>> >> logical partition?
>> > Of course. Extended or primary is an old, old DOS separation, but once
>> > they exist, everything just treats it as another partition.
>>
>> /boot still has to be on a primary, doesn't it?
>
> No.  The *only* thing that needs to be in any partitular place is the
> boot loader -- this is a BIOS thing: the BIOS wants the boot loader (or
> actually the first stage of it) in the MBR of the first disk.  Both

> LVM VG.  It can be a *mirrored* (RAID1) set.  Trickyness: if your /boot
> raid set is on the first & second disk (eg /dev/sda and /dev/sdb or
> /dev/hda and /dev/hdb) and you want to be able to boot if the first

Ah, but what about hardware raid, say, a Dell PERC 7, with the two
internal drives raided by that, *not* by software? I'm not sure I can see
them as separate disks to grub-install.

   mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread Baird, Josh
Actually, as of RHEL6, the default MTA is now Postfix.

Sendmail does indeed have a rather lengthy history of vulnerabilities.
With that being said, in my opinion, Postfix is also a much more
flexible MTA.

Josh

-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
Behalf Of Morten P.D. Stevens
Sent: Thursday, October 14, 2010 1:55 PM
To: CentOS mailing list
Subject: Re: [CentOS] sendmail substitute?

On Thu, Oct 14, 2010 at 9:11 AM, Alexander Dalloz 
wrote:
>
> What is the rationale behind deactivating Sendmail. Just curious. Or
is it
> the typical rant "Sendmail is insecure, see its history"?

I don't understand why many people calling sendmail insecure.

Sendmail is the default MTA in RHEL, Solaris, AIX, FreeBSD, OpenBSD ...

Why should they use an insecure MTA?

Sendmail is a very robust and reliable MTA.

Best regards,

Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centOS on extended partition

2010-10-14 Thread Robert Heller
At Thu, 14 Oct 2010 13:57:58 -0400 CentOS mailing list  
wrote:

> 
> Robert Heller wrote:
> > At Thu, 14 Oct 2010 09:53:52 -0700 CentOS mailing list 
> > wrote:
> >>   On 10/14/10 6:53 AM, m.r...@5-cent.us wrote:
> >> > Ritika Garg wrote:
> >> >> Can CentOS be installed on an extended partition? System has the
> >> following
> >> >> partitions:
> >> >> OEM(reserved)-78MB(primary)
> >> >> System-100MB(primary)
> >> >> C-55GB(primary)
> >> >> D-100GB(extended)
> >> >> Can I divide D into 2 parts:70GB and 30GB and install CentOS in the
> >> 70GB
> >> >> logical partition?
> >> > Of course. Extended or primary is an old, old DOS separation, but once
> >> > they exist, everything just treats it as another partition.
> >>
> >> /boot still has to be on a primary, doesn't it?
> >
> > No.  The *only* thing that needs to be in any partitular place is the
> > boot loader -- this is a BIOS thing: the BIOS wants the boot loader (or
> > actually the first stage of it) in the MBR of the first disk.  Both
> 
> > LVM VG.  It can be a *mirrored* (RAID1) set.  Trickyness: if your /boot
> > raid set is on the first & second disk (eg /dev/sda and /dev/sdb or
> > /dev/hda and /dev/hdb) and you want to be able to boot if the first
> 
> Ah, but what about hardware raid, say, a Dell PERC 7, with the two
> internal drives raided by that, *not* by software? I'm not sure I can see
> them as separate disks to grub-install.

With hardware RAID, the BIOS, lilo/grub, Linux, etc. just 'see'
whatever logical disk(s) the hardware RAID controller presents to the
system. The underlying structure is 'hidden' from view by the hardware
RAID controller. With most (true) hardware RAID controllers, the
logical disks should up as SCSI disks (usually with some 'fake' drive
model number), by using the kernel's SCSI disk abstraction layer (the
DAC960 driver does its own thing as far as a block structured
abstraction). When you write to the MBR of this 'disk', the hardware
RAID would mirror (or whatever, depending on the level of RAID -- with
only 2 disks, it would be either RAID0 (striped) or RAID1 (mirrored))
the writes. I was only talking about Linux's *software* RAID, which does
NOT apply to MBRs (which cannot be part of software RAID sets, unless
whole raw disks are being RAIDed, in which case there isn't a MBR at
all, or not something the *BIOS* can deal with as such).

> 
>mark
> 
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 
>  

-- 
Robert Heller -- 978-544-6933 / hel...@deepsoft.com
Deepwoods Software-- http://www.deepsoft.com/
()  ascii ribbon campaign -- against html e-mail
/\  www.asciiribbon.org   -- against proprietary attachments


   
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] dhcpd rpm

2010-10-14 Thread m . roth
Folks,

   We've been having occasional issues with failover dhcpd. I went looking
for "peer holds all free leases", and happened to run across
,
which is rated important, and is supposed to be fixed in 3.0.5-24.
Looking at the repo at kernel.org, all I see is what we have,
dhclient-3.0.5-23.el5.x86_64.rpm.

   Any idea when this update will be released?

 mark "we won't mention 3.1 or 4.x"

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dhcpd rpm

2010-10-14 Thread JohnS

On Thu, 2010-10-14 at 14:58 -0400, m.r...@5-cent.us wrote:
> Folks,
> 
>We've been having occasional issues with failover dhcpd. I went looking
> for "peer holds all free leases", and happened to run across
> ,
> which is rated important, and is supposed to be fixed in 3.0.5-24.
> Looking at the repo at kernel.org, all I see is what we have,
> dhclient-3.0.5-23.el5.x86_64.rpm.
> 
>Any idea when this update will be released?
> 
>  mark "we won't mention 3.1 or 4.x"
---
Bother to even look on Upstreams Site?  It's not freely available yet as
I see it.

John

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dhcpd rpm

2010-10-14 Thread m . roth
JohnS wrote:
>
> On Thu, 2010-10-14 at 14:58 -0400, m.r...@5-cent.us wrote:
>> Folks,
>>
>>We've been having occasional issues with failover dhcpd. I went
>> looking for "peer holds all free leases", and happened to run across
>> ,
>> which is rated important, and is supposed to be fixed in 3.0.5-24.
>> Looking at the repo at kernel.org, all I see is what we have,
>> dhclient-3.0.5-23.el5.x86_64.rpm.
>>
>>Any idea when this update will be released?
> ---
> Bother to even look on Upstreams Site?  It's not freely available yet as
> I see it.

No, I hadn't. I'm just a tad surprised - that was rated "important", and
looked as though it would be released soon. And with 6 coming soon, I was
thinking, though I haven't gone to look, that they'd have 3.1 or 4.x.

Thanks, though.

mark

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] dhcpd rpm

2010-10-14 Thread Waleed Harbi
*Try find-out SPEC file and rpm source, recompile it, this is the faster way
I think, if you have big issue.

Fedora they released 4.1, check it.

http://mirrors.isu.net.sa/pub/fedora/linux/releases/13/Everything/x86_64/os/Packages/dhclient-4.1.1-15.fc13.x86_64.rpm

*--
Best Wishes,
Waleed Harbi

Dream | Do | Be


On Thu, Oct 14, 2010 at 11:44 PM,  wrote:

> JohnS wrote:
> >
> > On Thu, 2010-10-14 at 14:58 -0400, m.r...@5-cent.us wrote:
> >> Folks,
> >>
> >>We've been having occasional issues with failover dhcpd. I went
> >> looking for "peer holds all free leases", and happened to run across
> >> ,
> >> which is rated important, and is supposed to be fixed in 3.0.5-24.
> >> Looking at the repo at kernel.org, all I see is what we have,
> >> dhclient-3.0.5-23.el5.x86_64.rpm.
> >>
> >>Any idea when this update will be released?
> > ---
> > Bother to even look on Upstreams Site?  It's not freely available yet as
> > I see it.
>
> No, I hadn't. I'm just a tad surprised - that was rated "important", and
> looked as though it would be released soon. And with 6 coming soon, I was
> thinking, though I haven't gone to look, that they'd have 3.1 or 4.x.
>
> Thanks, though.
>
>mark
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] yum 4 packages excluded due to repository priority protections

2010-10-14 Thread Dave
Is there a simple command to get yum to list what packages are being excluded?
mahalo,
TDB

-- 
Q: Why should this email be 5 sentences or less?
A: http://five.sentenc.es
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread Gary Greene
On 14/10/10 10:58 AM, "Baird, Josh"  wrote:
> Actually, as of RHEL6, the default MTA is now Postfix.
> 
> Sendmail does indeed have a rather lengthy history of vulnerabilities.
> With that being said, in my opinion, Postfix is also a much more
> flexible MTA.
> 
> Josh

Well, I'd call that a red herring as Sendmail is just as flexible. The main
issues that people have with Sendmail regarding security or flexibility come
from the fact that you need to understand the configuration language that
Sendmail's configuration files use. If you don't, yes, you can easily eff up
the the security of your mail infrastructure and can get lost quickly if
you're trying to configure it for more functionality/mail routing/etc.

Sure there have been vulnerabilities in the past, but so has
postfix/exim/dbmail/etc I think the main reason upstream changed to
Postfix is mostly a) most Linux distributions are using it as the default
MTA now, and b) it is easier to configure and nothing more.

-- 
Gary L. Greene, Jr.
IT Operations
Minerva Networks, Inc.
Cell:   (650) 704-6633
Office: (408) 240-1239



smime.p7s
Description: S/MIME cryptographic signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum 4 packages excluded due to repository priority protections

2010-10-14 Thread JohnS

On Thu, 2010-10-14 at 10:53 -1000, Dave wrote:
> Is there a simple command to get yum to list what packages are being excluded?
> mahalo,
> TDB
> 
---
 yum update -d3
Loaded plugins: fastestmirror
Config time: 0.111
Yum Version: 3.2.22
Setting up Package Sacks
Loading mirror speeds from cached hostfile
Excluding Packages in global exclude list
Excluding kernel-2.6.18-194.el5.x86_64
Excluding kernel-2.6.18-194.11.1.el5.x86_64
Excluding kernel-2.6.18-194.8.1.el5.x86_64
Excluding kernel-2.6.18-194.3.1.el5.x86_64
Excluding kernel-2.6.18-194.11.3.el5.x86_64
Excluding kernel-2.6.18-194.17.1.el5.x86_64
Excluding kernel-2.6.18-194.11.4.el5.x86_64
Finished

John

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread Les Mikesell
On 10/14/2010 4:19 PM, Gary Greene wrote:
> On 14/10/10 10:58 AM, "Baird, Josh"  wrote:
>> Actually, as of RHEL6, the default MTA is now Postfix.
>>
>> Sendmail does indeed have a rather lengthy history of vulnerabilities.
>> With that being said, in my opinion, Postfix is also a much more
>> flexible MTA.
>>
>> Josh
>
> Well, I'd call that a red herring as Sendmail is just as flexible. The main
> issues that people have with Sendmail regarding security or flexibility come
> from the fact that you need to understand the configuration language that
> Sendmail's configuration files use. If you don't, yes, you can easily eff up
> the the security of your mail infrastructure and can get lost quickly if
> you're trying to configure it for more functionality/mail routing/etc.
>
> Sure there have been vulnerabilities in the past, but so has
> postfix/exim/dbmail/etc I think the main reason upstream changed to
> Postfix is mostly a) most Linux distributions are using it as the default
> MTA now, and b) it is easier to configure and nothing more.

What you really want with sendmail is a milter-multiplexer like 
MimeDefang where you can do anything you want without slowing down the 
faster native sendmail steps and handle the unusual configuration parts 
in a snipped of perl.  Now that postfix has gotten milters right I think 
you could use MimeDefang with it too.

But, sendmail these days is probably the most strictly audited piece of 
code on your server so I think the OP is just following bad advice.

-- 
   Les Mikesell
lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum 4 packages excluded due to repository priority protections

2010-10-14 Thread Karanbir Singh
On 10/14/2010 03:53 PM, Dave wrote:
> Is there a simple command to get yum to list what packages are being excluded?
> mahalo,

easy way to do this is write a couple of lines of code, or use something 
like this :

http://www.karan.org/blog/index.php/2009/05/28/checking-a-machines-yum-exclude-policy


- KB
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum 4 packages excluded due to repository priority protections

2010-10-14 Thread JohnS

On Thu, 2010-10-14 at 22:55 -0500, Karanbir Singh wrote:
> On 10/14/2010 03:53 PM, Dave wrote:
> > Is there a simple command to get yum to list what packages are being 
> > excluded?
> > mahalo,
> 
> easy way to do this is write a couple of lines of code, or use something 
> like this :
> 
> http://www.karan.org/blog/index.php/2009/05/28/checking-a-machines-yum-exclude-policy
> 
> 
> - KB

"d" is more trivial when you can not put nice things like that on some
machines.  I'll remember though you have it.

John

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] yum 4 packages excluded due to repository priority protections

2010-10-14 Thread Dave
On Thu, Oct 14, 2010 at 5:55 PM, Karanbir Singh  wrote:
> On 10/14/2010 03:53 PM, Dave wrote:
>> Is there a simple command to get yum to list what packages are being 
>> excluded?
>> mahalo,
>
> easy way to do this is write a couple of lines of code, or use something
> like this :
>
> http://www.karan.org/blog/index.php/2009/05/28/checking-a-machines-yum-exclude-policy
>
>

Snippet does not work for me, but the -d3 thing is good enough. Thanks!

Dave

Output:
bash-3.2$ sudo wget -q http://centos.karan.org/check_excludes.py -O - | python
Password:
Loaded plugins: dellsysidplugin2, fastestmirror, priorities
main: []
addons - []
adobe-linux-i386 - []
base - []
epel - []
extras - []
google - []
google64 - []
opennms-stable-common - []
opennms-stable-rhel5 - []
rpmforge - []
rpmfusion-free-updates - []
rpmfusion-free-updates-testing - []
rpmfusion-nonfree-updates - []
rpmfusion-nonfree-updates-testing - []
updates - []
bash-3.2$ sudo yum -d3 search lsb
Loaded plugins: dellsysidplugin2, fastestmirror, priorities, security
Config time: 0.141
Yum Version: 3.2.22
Setting up Package Sacks
Loading mirror speeds from cached hostfile
 * addons: mirror.san.fastserv.com
 * base: mirror.san.fastserv.com
 * epel: ftp.osuosl.org
 * extras: mirrors.versaweb.com
 * rpmforge: ftp-stud.fht-esslingen.de
 * rpmfusion-free-updates: mirror.web-ster.com
 * rpmfusion-free-updates-testing: mirror.web-ster.com
 * rpmfusion-nonfree-updates: mirror.web-ster.com
 * rpmfusion-nonfree-updates-testing: mirror.web-ster.com
 * updates: mirror.san.fastserv.com
addons   |  951 B 00:00
adobe-linux-i386 |  951 B 00:00
base | 2.1 kB 00:00
epel | 3.7 kB 00:00
extras   | 2.1 kB 00:00
google   |  951 B 00:00
google64 |  951 B 00:00
opennms-stable-common|  951 B 00:00
opennms-stable-rhel5 |  951 B 00:00
rpmforge | 1.1 kB 00:00
rpmfusion-free-updates   | 2.8 kB 00:00
rpmfusion-free-updates-testing   | 2.8 kB 00:00
rpmfusion-nonfree-updates| 2.8 kB 00:00
rpmfusion-nonfree-updates-testing| 2.8 kB 00:00
updates  | 1.9 kB 00:00
updates/primary_db   | 799 kB 00:00
 --> flash-plugin-10.0.22.87-1.el5.rf.x86_64 from rpmforge excluded (priority)
 --> flash-plugin-10.0.32.18-0.1.el5.rf.x86_64 from rpmforge excluded (priority)
 --> flash-plugin-10.0.45.2-0.1.el5.rf.x86_64 from rpmforge excluded (priority)
 --> flash-plugin-10.2.161.22-0.1.el5.rf.x86_64 from rpmforge excluded
(priority)
4 packages excluded due to repository priority protections
pkgsack time: 10.450
rpmdb time: 0.000
= Matched: lsb =
redhat-lsb.i386 : LSB support for Red Hat Linux
redhat-lsb.x86_64 : LSB support for Red Hat Linux
tor-lsb.x86_64 : LSB initscripts for tor
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sendmail substitute?

2010-10-14 Thread John Hinton
  On 10/14/2010 5:19 PM, Gary Greene wrote:
> On 14/10/10 10:58 AM, "Baird, Josh"  wrote:
>> Actually, as of RHEL6, the default MTA is now Postfix.
>>
>> Sendmail does indeed have a rather lengthy history of vulnerabilities.
>> With that being said, in my opinion, Postfix is also a much more
>> flexible MTA.
>>
>> Josh
> Well, I'd call that a red herring as Sendmail is just as flexible. The main
> issues that people have with Sendmail regarding security or flexibility come
> from the fact that you need to understand the configuration language that
> Sendmail's configuration files use. If you don't, yes, you can easily eff up
> the the security of your mail infrastructure and can get lost quickly if
> you're trying to configure it for more functionality/mail routing/etc.
>
> Sure there have been vulnerabilities in the past, but so has
> postfix/exim/dbmail/etc I think the main reason upstream changed to
> Postfix is mostly a) most Linux distributions are using it as the default
> MTA now, and b) it is easier to configure and nothing more.
I think the key phrase above is 'lengthy history'. With that comes years 
of hack testing and some holes found. One could even argue that Sendmail 
has been more thoroughly 'tested', therefore more robust. I'm running 
both Sendmail servers and Postfix servers. I'm in the process of 
switching over to Postfix for other reasons, but I've gotten so good 
with Sendmail that I really hate making this change and find the Postfix 
configs foreign. Easier? Well, it's what you're used to. Most of this 
post is really about 'what I use so it is best'. That's not a bad thing, 
it just is. Any MTA will at some point in the future have security 
issues. The beauty of CentOS is they are dealt with in a timely manner 
and provided almost always, as a patch which breaks nothing else. So, 
it's really just easy. Choose the one you want and update your system. 
Sleep well. :)

John Hinton
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] mcelog

2010-10-14 Thread Tsuyoshi Nagata
Hi, Mark!
(2010/10/14 3:04), m.r...@5-cent.us wrote:
> Can't remember if I asked this last month, but has anyone seen ECC errors
> where mcelog gave no o/p at all, even when the errors showed in
> /var/log/messages?

Someone's mce log detects on inside of CPU and chipset.
I guess bios DIMM ECC log could not be detected by MCE mechanism.

Tsuyoshi

> > > MCE 1
> > > CPU 0 4 northbridge TSC 8f1a7b270b6f
> > > ADDR 75c3320
> > > Northbridge ECC error
> > > ECC syndrome = 62
> > > bit32 = err cpu0
> > > bit46 = corrected ecc error
> > > bus error 'local node origin, request didn't time out
> > > generic read mem transaction
> > > memory access, level generic'
> > > STATUS 943140010813 MCGSTATUS 0
> > > MCE 2
> > > CPU 0 2 bus unit TSC 8f8ad2325db7
> > > L2 cache ECC error
> > > Bus or cache array error
> > > bit46 = corrected ecc error
> > > bit62 = error overflow (multiple errors)
> > > bus error 'local node origin, request didn't time out
> > > prefetch mem transaction
> > > memory access, level generic'
> > > STATUS d0004863 MCGSTATUS 0

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] aac and tag editing

2010-10-14 Thread Rob Kampen
As my iphone will not play nice with open source audio formats I'm 
forced to use aac.
I have faac and produce .aac files that seems to play fine with Amarok 
but no tags.
I usually use Easytag (from rpmforge) to deal with metadata on audio 
files, but despite the advertised ability to do mp4/aac it does not even 
show the files..
Anyone have any experience or pointers as to how I get the metadata 
sorted on these files?

TIA
Rob
<>___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] installing centOS5.5

2010-10-14 Thread Ritika Garg
For burning the image on DVD I found 2 iso files:
CentOS-5.5-x86_64-bin-DVD-1of2.iso
CentOS-5.5-x86_64-bin-DVD-2of2.iso
I found out that the first one is 4.1GB and the second one is 412MB. Do I
have to burn the first one on 1 DVD and the second one on another DVD?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Routing local generted packets with fwmark

2010-10-14 Thread C. L. Martinez
On Wed, Oct 13, 2010 at 11:22 AM, C. L. Martinez wrote:

> Hi all,
>
>  I need to route local generated packages depending on which tcp or udp
> service I need to use. To accomplish this I have configured two routing
> tables:
>
> [r...@lothlorien ~]# ip ru ls
> 0:  from all lookup 255
> 32762:  from all fwmark 0x2 lookup FirstLan
> 32763:  from all fwmark 0x1 lookup SecondLan
> 32764:  from 172.25.80.10 lookup SecondLan
> 32765:  from 172.25.70.18 lookup FirstLan
> 32766:  from all lookup main
> 32767:  from all lookup default
>
> My routing tables:
>
> [r...@lothlorien net]# ip ro show table FirstLan
> 172.25.70.16/28 dev eth1  proto kernel  scope link  src 172.25.70.18
> default via 172.25.70.30 dev eth1
>
> [r...@lothlorien net]# ip ro show table SecondLan
> 172.25.80.0/24 dev eth1  proto kernel  scope link  src 172.25.80.10
> default via 172.25.80.1 dev eth2
>
>  And my iptables rule is:
>
>  iptables -t mangle -A OUTPUT -p udp --dport 53  -j MARK --set-mark 1
>
> But this doesn't works. This host is CentOS 5.5 based with two interfaces.
>
>  What am I doing wrong??
>
>  Thanks.
>

Please, any hints?
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] installing centOS5.5

2010-10-14 Thread ganu MailList
Both two

2010/10/15 Ritika Garg 

> For burning the image on DVD I found 2 iso files:
> CentOS-5.5-x86_64-bin-DVD-1of2.iso
> CentOS-5.5-x86_64-bin-DVD-2of2.iso
> I found out that the first one is 4.1GB and the second one is 412MB. Do I
> have to burn the first one on 1 DVD and the second one on another DVD?
>
>
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos