Re: [CentOS] EPEL repository: Failure to download metadata
Believe I have fixed the repo failure issue. 'Yum repolist' works about half the time, the other 50% still seems to be connection related. Still investigating. Jay > Trying to install certbot, for Lets Encrypt certificate installation. How do > I fix the below repo > issue? I have not been successful tracking down this issue using google. > > [root@dream postfix]# yum install > https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm > CentOS-8 - AppStream > 0.0 > B/s | 0 B 00:10 > Failed to download metadata for repo 'AppStream' > Error: Failed to download metadata for repo 'AppStream' > [root@dream postfix]# ^C > [root@dream postfix]# ls /etc/yum.repos.d/ > CentOS-AppStream.repo CentOS-CR.repo CentOS-Extras.repo > CentOS-Media.repo > CentOS-Vault.repo > CentOS-Base.repoCentOS-Debuginfo.repo CentOS-fasttrack.repo > CentOS-PowerTools.repo > CentOS-centosplus.repo CentOS-Devel.repo CentOS-HA.repo > CentOS-Sources.repo > [root@dream postfix]# dnf repolist > CentOS-8 - AppStream > 0.0 > B/s | 0 B 00:25 > Failed to download metadata for repo 'AppStream' > Error: Failed to download metadata for repo 'AppStream' > > Thanks, > > Jay > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Logitech webcam for use with CentOS 7
I am thinking of buying a Logitech C920S Pro HD or C922 webcam for the necessary video conferencing. Is anyone using that with Zoom or perhaps with Jitsi? Do I need drivers? Any issues? Thank you. _ H, I am running several desktop units with Centos 7.8 with a Logitech Brio. I was able to make it work with Cheese, but not with Zoom. I just happened across a serendipitous fix when I found that installing 'kamoso' caused Zoom to work. The Zoom I had been using was before 7.1. Zoom just enhanced their product to 7.1, and I installed it today. Zoom has continued to work. I had to install 'kamoso' to get Zoom to work initially on all of the Centos 7.8 desktop units. It works exceptionally well with the rpm that that Zoom provides for Centos 7. Hope this helps. Greg Ennis ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] EPEL repository: Failure to download metadata
I don't know if one has anything to do with the other, but I am also getting dnf makecache failures in the logs... Jay > Trying to install certbot, for Lets Encrypt certificate installation. How do > I fix the below repo > issue? I have not been successful tracking down this issue using google. > > [root@dream postfix]# yum install > https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm > CentOS-8 - AppStream > 0.0 > B/s | 0 B 00:10 > Failed to download metadata for repo 'AppStream' > Error: Failed to download metadata for repo 'AppStream' > [root@dream postfix]# ^C > [root@dream postfix]# ls /etc/yum.repos.d/ > CentOS-AppStream.repo CentOS-CR.repo CentOS-Extras.repo > CentOS-Media.repo > CentOS-Vault.repo > CentOS-Base.repoCentOS-Debuginfo.repo CentOS-fasttrack.repo > CentOS-PowerTools.repo > CentOS-centosplus.repo CentOS-Devel.repo CentOS-HA.repo > CentOS-Sources.repo > [root@dream postfix]# dnf repolist > CentOS-8 - AppStream > 0.0 > B/s | 0 B 00:25 > Failed to download metadata for repo 'AppStream' > Error: Failed to download metadata for repo 'AppStream' > > Thanks, > > Jay > > ___ > CentOS mailing list > CentOS@centos.org > https://lists.centos.org/mailman/listinfo/centos > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] EPEL repository: Failure to download metadata
Trying to install certbot, for Lets Encrypt certificate installation. How do I fix the below repo issue? I have not been successful tracking down this issue using google. [root@dream postfix]# yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm CentOS-8 - AppStream 0.0 B/s | 0 B 00:10 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream' [root@dream postfix]# ^C [root@dream postfix]# ls /etc/yum.repos.d/ CentOS-AppStream.repo CentOS-CR.repo CentOS-Extras.repo CentOS-Media.repo CentOS-Vault.repo CentOS-Base.repoCentOS-Debuginfo.repo CentOS-fasttrack.repo CentOS-PowerTools.repo CentOS-centosplus.repo CentOS-Devel.repo CentOS-HA.repo CentOS-Sources.repo [root@dream postfix]# dnf repolist CentOS-8 - AppStream 0.0 B/s | 0 B 00:25 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream' Thanks, Jay ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] EL8 / certwatch missing
I have some scripts using certwatch from the crypto-utils package. This rpm seems to be unshipped with EL8. Any ideas whats the "new" tool to check pem cert files? -- Leon ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] live centos 8?
On Sun, 7 Jun 2020, Michael Hennebry wrote: On Fri, 5 Jun 2020, Fabian Arrotin wrote: No, there is not ... I tried initially but lack of time on my side because anaconda wasn't able to generate an image that then would be installable on disk (never tried since though) Then we asked who would be volunteer and nobody showed up , so it stayed in that state. But , hey, welcome to OSS, if you're interested, you can make it happen , submit patches, etc ;-) I am truly sorry to disappoint. No such expertise between keyboard and chair. Just installing an OS has always been a struggle for me. That is why I went from Fedora to Centos: fewer installs. Now I want something newer and it seems to be impossible. In light of previous difficulties, I'm reluctant to try anything without a live version. The live Fedora 32 fails without nomodeset and gives me 640x480 without it. The folks on the fedora list have tried to help, but to no avail. I'm doing this from a Knoppix 8.6 November DVD, but after a while, it fades to black, so I need to hurry. Now when I open a terminal window, it shows hennebry@Microknoppix . Do not know what happened. G. -- Michael henne...@web.cs.ndsu.nodak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] live centos 8?
On Fri, 5 Jun 2020, Fabian Arrotin wrote: On 05/06/2020 18:15, Michael Hennebry wrote: Is there a live centos 8?> If so, where? No, there is not ... I tried initially but lack of time on my side because anaconda wasn't able to generate an image that then would be installable on disk (never tried since though) Then we asked who would be volunteer and nobody showed up , so it stayed in that state. But , hey, welcome to OSS, if you're interested, you can make it happen , submit patches, etc ;-) I am truly sorry to disappoint. No such expertise between keyboard and chair. Just installing an OS has always been a struggle for me. That is why I went from Fedora to Centos: fewer installs. Now I want something newer and it seems to be impossible. In light of previous difficulties, I'm reluctant to try anything without a live version. The live Fedora 32 fails without nomodeset and gives me 640x480 without it. The folks on the fedora list have tried to help, but to no avail. I'm doing this from a Knoppix 8.6 November DVD, but after a while, it fades to black, so I need to hurry. -- Michael henne...@web.cs.ndsu.nodak.edu "Sorry but your password must contain an uppercase letter, a number, a haiku, a gang sign, a heiroglyph, and the blood of a virgin." -- someeecards ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Postfix restrictions
Am 07.06.2020 um 11:46 schrieb Nicolas Kovacs: Hi, I'm currently fine-tuning my mail server (Postfix and Dovecot on CentOS 7). SPF, DKIM and DMARC work fine, now I'd like to limit the spam tsunami. Besides the official Postfix documentation, I've read a few articles about Postfix spam restrictions, namely these : https://www.linuxbabe.com/mail-server/block-email-spam-postfix https://wiki.centos.org/HowTos/postfix_restrictions After some experimenting, here's what I currently have on my test server: --8<- /etc/postfix/main.cf - ... smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, check_helo_access hash:/etc/postfix/helo_access reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_unknown_helo_hostname smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, check_sender_access hash:/etc/postfix/sender_access, reject_unknown_sender_domain, reject_unknown_reverse_client_hostname, reject_unknown_client_hostname smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/etc/postfix/rbl_override, reject_rhsbl_helo dbl.spamhaus.org, reject_rhsbl_reverse_client dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org, reject_rbl_client zen.spamhaus.org --8< Before committing this configuration to my main server, I thought I'd share this configuration on the list. Maybe the Postfix gurus among you have the odd comment to make. My aim is simply to eliminate as much spam as possible (that is, before adding SpamAssassin) while keeping false positives to a minimum. Any suggestions ? Niki Hi, a few points: - don't split up the smtpd_*_restrictions as shown above. It is simpler to maintain by keeping everything under smtpd_recipient_restrictions. - use postscreen, it is a Postfix feature. That way relocate the RBL and RHSBL calls to postscreen in a weighted approach - don't offer SMTP AUTH on smtp port 25. Offer submission (port 587) or submissions (465) or both for your known clients. That way you can much better control what's allowed on port 25. - reject_non_fqdn_helo_hostname could lead to reject valid mail, use warn_if_reject for some time to check if that would be relevant for you. - don't make use of permit_mynetworks, control relaying by use of SMTP AUTH. Alexander ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Postfix restrictions
On Sun, Jun 7, 2020, 2:47 AM Nicolas Kovacs wrote: > > My aim is simply to eliminate as much spam as possible (that is, before > adding > SpamAssassin) while keeping false positives to a minimum. > The one thing that stopped the most spam on my last mailserver was greylisting. Any mta that connects to you to send you mail, you check against a white list, and if they are not on it, you reject the connection with a 'try again later' code and add them to a grey list that will let them in after 10 minutes or so. The vast majority of spambots don't queue up retries, they just move on to the next target. The downside of greylisting is delayed delivery of mail from non white listed servers, dependent on their retry cycle. I finally gave up on running my own email services and use Gmail which has excellent spam filtering > ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
[CentOS] Postfix restrictions
Hi, I'm currently fine-tuning my mail server (Postfix and Dovecot on CentOS 7). SPF, DKIM and DMARC work fine, now I'd like to limit the spam tsunami. Besides the official Postfix documentation, I've read a few articles about Postfix spam restrictions, namely these : https://www.linuxbabe.com/mail-server/block-email-spam-postfix https://wiki.centos.org/HowTos/postfix_restrictions After some experimenting, here's what I currently have on my test server: --8<- /etc/postfix/main.cf - ... smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, check_helo_access hash:/etc/postfix/helo_access reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_unknown_helo_hostname smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, check_sender_access hash:/etc/postfix/sender_access, reject_unknown_sender_domain, reject_unknown_reverse_client_hostname, reject_unknown_client_hostname smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/etc/postfix/rbl_override, reject_rhsbl_helo dbl.spamhaus.org, reject_rhsbl_reverse_client dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org, reject_rbl_client zen.spamhaus.org --8< Before committing this configuration to my main server, I thought I'd share this configuration on the list. Maybe the Postfix gurus among you have the odd comment to make. My aim is simply to eliminate as much spam as possible (that is, before adding SpamAssassin) while keeping false positives to a minimum. Any suggestions ? Niki -- Microlinux - Solutions informatiques durables 7, place de l'église - 30730 Montpezat Site : https://www.microlinux.fr Mail : i...@microlinux.fr Tél. : 04 66 63 10 32 Mob. : 06 51 80 12 12 ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
