Re: [CentOS] [Request] mod_auth_ntlm_winbind

2008-08-19 Thread Morten Nilsen

Rob Townley wrote:

Morten, i may have mixed up the conversations.  I had just posted about
wanting a SaMBa 3.2 package for CentOS.  This would make it so that the user
could logon to a XWindows/SSH Linux workstation using MS Active Directory
Services credentials.

You are talking about getting your CentOS server to check credentials by
verifying with ADS.  Your users are likely on Windows machines.


Yes, my users are on windows machines.
I also have my CentOS server set up to use AD to authenticate on SSH..
No local users required
This is also working fine - to give access to the server, all one has to 
do is to add the staff to a certain AD group.


--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [Request] mod_auth_ntlm_winbind

2008-08-19 Thread Morten Nilsen

Rob Townley wrote:

One of the other users posted about EnterpriseSamba.com.  Their repository
is at *http://ftp.sernet.de
http://ftp.sernet.de/pub/services/samba/README.txt

Haven't tried it myself.  Then again, you are referring to using AD
Authentication in a web browser, but i would think their package would
eliminate some of the steps, anyway.


I'm uncertain as to what you are talking about, but, yes what I am doing 
is using NTLM to get seamless logon to web servers from clients that are 
logged into AD.


This is working quite fine, and there was little I had to do on CentOS,
I basically only installed mod_auth_ntlm_winbind, and everything was 
fine and dandy..


There was one little issue though, I had to turn on keepalive in httpd.conf

--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [Request] mod_auth_ntlm_winbind

2008-08-18 Thread Morten Nilsen

http://adldap.sourceforge.net/wiki/doku.php?id=mod_auth_ntlm_winbind

I have built an rpm for my own use, by grabbing the source files from 
sambas' web interface to cvs.

It would be real neat to have it packaged and available through yum.

--
Cheers, Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MRTG Problem - no traffic recorded

2008-08-09 Thread Morten Nilsen

Mogens Kjaer wrote:

Morten Nilsen wrote:
...

Target[vlan10]: `ifconfig vlan10 |
   /usr/bin/awk '/bytes/{ gsub(/:/, " "); print $3 "\n" $8}'`


Try adding the full path to ifconfig


I did in fact do that last night, and left it running, and now the graph 
is fine..


Thanks for the reply, none the less!

--
Cheers, Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Package request: php, pear: spreadsheet::excel::writer

2008-08-08 Thread Morten Nilsen

Hello,
I am currently using this PEAR package to generate .xls documents in PHP;

http://pear.php.net/package/Spreadsheet_Excel_Writer

It would be very much appreciated if someone could add it to the 
repository, as it is always to prefer rpm packages over manually 
installed ones.


--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] MRTG Problem - no traffic recorded

2008-08-07 Thread Morten Nilsen

Hi all,

I've just recently replaced my old firewall with a new one, running 
CentOS 5..


Yesterday, I decided to get MRTG up and running again, so I entered 
sections like this into the mrtg.conf file:


Title[vlan10]: Bandwidth usage on tenchi.4th-age.com (Internet)
PageTop[vlan10]: Traffic stats on VLAN 10 (Internet)
Target[vlan10]: `ifconfig vlan10 |
   /usr/bin/awk '/bytes/{ gsub(/:/, " "); print $3 "\n" $8}'`
MaxBytes[vlan10]: 1250
Options[vlan10]: noinfo, growright, bits
WithPeak[vlan10]: wmy

The Target is all on one line in the file.

This config worked fine on my old firewall, but on the new, I get this 
in the log files:


[EMAIL PROTECTED] mrtg]# head /var/lib/mrtg/vlan10.log
1218175802 -1 -1
1218175802 3 3 3 3
1218175501 3 3 3 3
1218175500 3 3 3 3

When testing, I ran the mrtg command, precisely as it is written in 
/etc/cron.d/mrtg, and that placed real values where now it says -1, but 
as soon as the cron job ran, the values became -1 again.


I hope someone can shed some light on this problem..

--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Help: Server security compromised?

2008-08-05 Thread Morten Nilsen

Bent Terp wrote:

On Wed, Aug 6, 2008 at 7:48 AM, Noob Centos Admin
<[EMAIL PROTECTED]> wrote:

/sbin/iptables -A RH-Firewall-1-INPUT -s 219.64.114.52 -j DROP


I'd recommend you add the extra rules by editing
/etc/sysconfig/iptables instead. At least that way you can be sure
they'll survive restarts off iptables.


I rather prefer to add rules using the command and then issuing
service iptables save
when I'm adding one or two simple rules..
If completely redesigning the firewall or adding in many complex rules,
then I edit the iptables file.

--
Cheers, Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] is CentOS an LSB certified product?

2008-06-13 Thread Morten Nilsen

Nicholas wrote:

Just to see if it matters to ppl if it matters to be certified.


And what, pray tell, is LSB?

--
Cheers, Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EVMS?

2008-06-07 Thread Morten Nilsen

drew einhorn wrote:

EVMS Enterprise Volume Management System sounds interesting,
looks like it supported CentOS4, but not CentOS5.


EVMS was introduced in the 3.0 release of TSL, but was jerked out of 
3.0.5, the test-version of 3.1, which was never released..


Back then, EVMS was slapped on without any kind of explanation or well 
sorted plan.. It merely created problems for users or wasn't noticed at 
all..


It was one of many things that drove most of the user base away, long 
before the distro was scrapped by Comodo.


I have yet to see what EVMS is supposed to do, other than muck up the 
booting process with additional indirection..


I still have TSL on servers both at home and work, as I have not yet had 
the time needed to rework them.


--
Cheers, Morten Nilsen
Former TSL contributor
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] NMAP - reveal MAC address

2008-05-07 Thread Morten Nilsen

Tom Brown wrote:
In CentOS 4 does anyone know the switches to get NMAP to reveal the MAC 
of the host being scanned ?


Others have given you good answers, but I felt I could share some 
insight on the matter..


The MAC address of a NIC is used by switches to send packets out the 
right port - As soon as you add a routing element, all traffic to a 
routed IP appears to be destined for the router, if one goes by the MAC 
address in the packet.


If the destination MAC were to be encoded in the packet, no switches 
would be able to keep their internal tables sane, as it would be flooded 
with MACs, all on the same port (the one connected to the gateway).


When a switch recieves a packet adressed to a MAC that doesn't appear in 
the switch-internal list, the packet will be flooded (sent out on all 
ports). Once a packet from that MAC passes through the switch, that MAC 
will be added to the list, and future packets only leave that one port.


The main function of a switch is to keep irrelevant packets away from 
hosts, but packets to unknown (to the switch) hosts get sent everywhere, 
just like a Hub would do.


--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Watching Netflix movies on CentOS

2008-05-04 Thread Morten Nilsen

Kai Schaetzl wrote:
I remember about the Netflix format from before 2000. It's a very low 
bandwidth format with really bad quality. AFAIK it was mainly porn sites 
using it. I thought it had died out since long.


I believe there are two entirely separate things called "netflix"..

--
Cheers, Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS as VPN Gateway?

2008-05-03 Thread Morten Nilsen

Akemi Yagi wrote:

There is a driver for the Attansic L1 thanks to wolfy (Manuel
Wolfshant). Please see:

http://wiki.centos.org/HardwareList/CentOS5/AttansicL1


Thanks a bunch, that fixed it!

--
Cheers, Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS as VPN Gateway?

2008-05-03 Thread Morten Nilsen

Barry Brimer wrote:

Hello,

I am currently setting up my new router, and I opted for using CentOS..
Now, I need OpenVPN support, and I'd rather not install it from source.

I tried yum, but there doesn't appear to be any packages for it 
available..


Any tips?


rpmforge has openvpn packages for Red Hat/CentOS/Fedora:


Thanks!

--
Cheers, Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS as VPN Gateway?

2008-05-03 Thread Morten Nilsen

Morten Nilsen wrote:

Hello,

I am currently setting up my new router, and I opted for using CentOS..


The new router hardware has an Attansic L1 Gigabit Ethernet adapter, 
which the internet tells me is supported from kernel 2.6.21..


Any chance of the CentOS kernel gets updated (or the driver backported) 
to allow me to use this interface?


Or should/must I just go ahead and bake my own kernel?

--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS as VPN Gateway?

2008-05-03 Thread Morten Nilsen

Hello,

I am currently setting up my new router, and I opted for using CentOS..
Now, I need OpenVPN support, and I'd rather not install it from source.

I tried yum, but there doesn't appear to be any packages for it available..

Any tips?

--
Cheers, Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] XFS at install time

2008-05-03 Thread Morten Nilsen

Akemi Yagi wrote:

On Sat, May 3, 2008 at 6:17 AM, Morten Nilsen <[EMAIL PROTECTED]> wrote:

Why won't the installer let me choose XFS for my partitions?


The distro kernel (thus installer CD) does not have xfs support.


I don't actually use a CD, but okay..

Please consider adding xfs support.. It doesn't please me to run things 
on ext3..


--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] XFS at install time

2008-05-03 Thread Morten Nilsen

Why won't the installer let me choose XFS for my partitions?

--
Cheers, Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Turning off Gnome and other stuff

2008-04-28 Thread Morten Nilsen

Dennis McLeod wrote:

Is there a simple way to turn all the applets and such off and start from
the command line?  Idea is to come up with a default level of 3 via the
inittab, due a remote login and then a command line entry "startx &" 
to start the X server, possibly a minimum window manager, and then go right

into the sim programs.


That is an excellent solution, though, you can start the X11 server 
directly without startx..


So, "X & my_simulator.bin"

You could also toss that into rc.local to get it up automatically..
If you trim down the boot process to its bare bones, you should be able 
to get it to load up quite fast as well.


--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Can't get .htaccess to work

2008-04-20 Thread Morten Nilsen

Pam Astor wrote:

That you got a server error is good.> > > Here are the last two log file entries for that httpd 
request:> > you want to look in the *error* log if you look for errors!> > > > I could not 
access the site,> > which means exactly what? ;-)
 
OK, starting from scratch this morning,

here is the .htaccess file I am using which is inside of the
/home/LinuxAccountName/www directory:
 
 
Options NoneAuthName "UserNameIUsedToCreatePasswordWith"AuthType BasicAuthUserFile /home/LinuxAccountName/.htpasswdRequire valid-user

www above refers to the root or web directory - the lowest or first or base
directory that is web accessable.
And, this is the error I am getting from my httpd error log for this domain:
 
[Sun Apr 20 07:47:40 2008] [alert] [client 75.46.110.14] /home/LinuxAccountName/.htaccess: 

Remove the  tag.. a .htaccess file is placed inside a 
 tag for the folder it is in automatically..


Consequentially, your .htaccess looks like this to apache:


...



--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Another samba problem - SOLVED!

2008-04-19 Thread Morten Nilsen

Anne Wilson wrote:
Unbelievably simple, once I found it.  /etc/hosts had lost several lines.  I 
have no idea how that could have happened, but one of the missing lines was 
the address of the server.  I can now see all the server's shares within 
konqueror!


Yes, that would indeed do it..

However, there has in "recent" years been made some progress in this 
field, and DNS has solved the issue of hosts-files being corrupted or 
out of sync between machines on the local network..


It might be worth the effort to set up dhcp with ddns updates - it makes 
such interoperability a piece of cake!


--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Can't get .htaccess to work

2008-04-18 Thread Morten Nilsen

Pam Astor wrote:

When I reload, apache will not reload.

What am I doing wrong?


I suspect your only fault is not checking the logs..
Right after you issue service httpd start,
go look at /var/log/messages and /var/log/httpd/*

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Simulate RJ 45 Port

2008-04-18 Thread Morten Nilsen

On 4/18/2008, "John" <[EMAIL PROTECTED]> wrote:
>On Thu, 2008-04-17 at 23:10 -0700, John R Pierce wrote:
>> John wrote:
>> > Attachment Unit Interface? (AUI) RJ46 to Serial DB9  or RJ45 to LPT ?
>>
>> AUI connectors were DB15, and also aren't 'serial ports', they are
>> ethernet without the PHY layer transcievers.
>
>I thought it was a DB9. I have not seen one in years. IIRC I used them
>for printer connections.

http://en.wikipedia.org/wiki/Attachment_Unit_Interface

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Upgrading MySQL from 4.1 to 5

2008-04-15 Thread Morten Nilsen

Tito Valentin wrote:
I am trying to upgrade MySQL on CentOS 4.5 but having a hard time.  I 
need to go from MySQL 4.1 to 5.  I downloaded the following two files:


mysql-server-5.0.58-1.el4.centos.i386.rpm
mysql-5.0.48-2.el4.centos.i386.rpm

I tried to do:

yum install mysql-server-5.0.58-1.el4.centos.i386.rpm


The command to use here would be rpm -Uvh, as these packages are not in 
the yum system.


You would need to uninstall the current mysql first, however - and to 
migrate any data, you need to use mysqldump --all --opt before that, and 
then import it back after 5.x is installed.


Last time I checked, you could not use the same database files for 
different major versions of MySQL - I could be wrong on this point, however.


--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] SSH Question relating to Public and Private Keys

2008-04-14 Thread Morten Nilsen

Clint Dilks wrote:
1. Currently all of the key pairs we are using have empty passphrases is 
it worth the effort of changing this and setting up ssh-agent compared 
to what you gain in security by doing this ?


Certainly, adding passphrases nudges the security up a step, as 
otherwise a compromised account means the offender can log onto any 
other system - or in the case of compromised root, can log in anywhere 
as anyone..


It comes down to, like all security measures, a balancing act between 
security and ease-of-use.. You need to take into consideration what data 
is around the systems, and what the worst case scenario would be..


--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Why does 'test -f' and 'test -e' return true on a (hidden) file that doesn't exist?

2008-03-31 Thread Morten Nilsen

Rudi Ahlers wrote:

Relax man, didn't you see the smiley face ?


Hey man, would you please trim replies in the future..
Five miles of quoted text is actually worse than html mail ;)

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: A few questions regarding CentOS (5.0)

2008-03-30 Thread Morten Nilsen

Alan Bartlett wrote:
Then surely it comes down to an issue with either *your* video 
controller card or monitor. Please now try the obvious, follow 
scientific procedures and swap them out, one at a time. Clearly, it is a 
hardware problem and nothing to do with CentOS - unless you can convince 
me otherwise.


I will first have to find a new vga card to try that..
But I do know it isn't the monitor, as the three other boxes connected 
to it never show this sort of behaviour..


I have found a way to provoke the flashes, by the way;
simply invoking ifup and ifdown triggers it.

--
Chers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: A few questions regarding CentOS (5.0)

2008-03-29 Thread Morten Nilsen

Johnny Hughes wrote:

Alan Bartlett wrote:
Please remember that there are also active CentOS fora. Perhaps this 
may be

of interest:

http://www.centos.org/modules/newbb/viewtopic.php?topic_id=12678&forum=37&post_id=41742#forumpost41742 


That does indeed look exactly like what is being described and they are 
not fixing it in RHEL ... though you might try their patch and see if it 
fixes it for you.


I don't think that sounds like the same error at all, my screen switches 
off and depending on what is going on doesn't switch back on right away 
(like that one time when some process didn't start up and I had to ssh 
in to poke it)


Nevertheless, I tried applying the patch, and the result was identical..

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Big devices and missing space

2008-03-29 Thread Morten Nilsen

Hello,

I have a Promise EX 12-port RAID controller in my box, connected to 8 
750GB disks. I have set up 2 RAID-5 devices and joined these using LVM.


This is working fine.

However, there is something that seems wrong..
(4-1) * 750 = 2250, but df reports the LVM volume as a mere 4.0T;

/dev/mapper/storage_volume-stor  4.0T  3.6T  507G  88% /storage

Shouldn't this be 4.5TB?


Relevant bit of boot log:

scsi4 : stex
  Vendor: Promise   Model:  4 Disk RAID5 Rev: 1.10
  Type:   Direct-Access  ANSI SCSI revision: 02
sdb : very big device. try to use READ CAPACITY(16).
SCSI device sdb: 4395053952 512-byte hdwr sectors (2250268 MB)
sdb: Write Protect is off
sdb: Mode Sense: 00 12 00 00
SCSI device sdb: drive cache: write back
sdb : very big device. try to use READ CAPACITY(16).
SCSI device sdb: 4395053952 512-byte hdwr sectors (2250268 MB)
sdb: Write Protect is off
sdb: Mode Sense: 00 12 00 00
SCSI device sdb: drive cache: write back
 sdb: sdb1
sd 4:0:0:0: Attached scsi disk sdb
sd 4:0:0:0: Attached scsi generic sg1 type 0
  Vendor: Promise   Model:  4 Disk RAID5 Rev: 1.10
  Type:   Direct-Access  ANSI SCSI revision: 02
sdc : very big device. try to use READ CAPACITY(16).
SCSI device sdc: 4395053952 512-byte hdwr sectors (2250268 MB)
sdc: Write Protect is off
sdc: Mode Sense: 00 12 00 00
SCSI device sdc: drive cache: write back
sdc : very big device. try to use READ CAPACITY(16).
SCSI device sdc: 4395053952 512-byte hdwr sectors (2250268 MB)
sdc: Write Protect is off
sdc: Mode Sense: 00 12 00 00
SCSI device sdc: drive cache: write back
 sdc: sdc1
sd 4:0:4:0: Attached scsi disk sdc
sd 4:0:4:0: Attached scsi generic sg2 type 0
  Vendor: Promise   Model: RAID Console  Rev: 1.00
  Type:   Processor  ANSI SCSI revision: 03
scsi 4:0:16:0: Attached scsi generic sg3 type 3

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: A few questions regarding CentOS (5.0)

2008-03-29 Thread Morten Nilsen

Rudi Ahlers wrote:

What happens when you reboot in "safe mode"?


What exactly do you mean by "safe mode"?

The monitor I have hooked up is a 15" LCD panel, by the way.

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: A few questions regarding CentOS (5.0)

2008-03-29 Thread Morten Nilsen

Morten Nilsen wrote:
Next time I reboot the system, I'll report back on the state of the 
flashing..


Rebooted just now to test, and the flashing still happens..

[EMAIL PROTECTED] ~]# uname -a
Linux washu3.4th-age.com 2.6.18-53.1.14.el5 #1 SMP Wed Mar 5 11:37:38 
EST 2008 x86_64 x86_64 x86_64 GNU/Linux

[EMAIL PROTECTED] ~]# rpm -q centos-release
centos-release-5-1.0.el5.centos.1

I really do hope somebody have an idea, because this is real annoying.

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sofware caused connection abort

2008-03-29 Thread Morten Nilsen

Gergely Buday wrote:

On 29/03/2008, Morten Nilsen <[EMAIL PROTECTED]> wrote:

I have seen similar problems if ICMP is blocked..
 On my LAN, putty sessions live forever.


They connect via the internet, could it make a difference? And, how
can I check if ICMP is blocked?


Ping sends ICMP packages, so try pinging the server from the clients 
whom experience problems.


--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] sofware caused connection abort

2008-03-29 Thread Morten Nilsen

Gergely Buday wrote:

some of my users use putty to connect to my server via ssh protocol.
After some time they get the above error message, and it could be that
my CentOS-side configuration caused this. Do anybody has experience
with this problem?


I have seen similar problems if ICMP is blocked..
On my LAN, putty sessions live forever.

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Securing SSH

2008-03-28 Thread Morten Nilsen

Rudi Ahlers wrote:

Trey Sizemore wrote:

On Fri Mar 28, 2008 07:47PM, Rudi Ahlers wrote:
 

Ray Leventhal wrote:
   

James A. Peltier wrote:
 

Rudi Ahlers wrote:
   

Tim Alberts wrote:
 
So I setup ssh on a server so I could do some work from home and 
I think the second I opened it every sorry monkey from around the 
world has been trying every account name imaginable to get into 
the system.


What's a good way to deal with this?

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos



1. Change the default port
2. use only SSH protocol 2
3. Install some brute force protection which can automatically 
ban  an IP on say 5 / 10 failed login attempts
4. ONLY allow SSH access from your IP, if it's static. Or signup 
for a DynDNS account, and then only allow SSH access from your 
DynDNS domain


  
Fail2Ban is a good brute force protector.  It works in conjunction  
with IPTables to block IPs that are "attacking" for a said 
duration  of time. :)




I haven't used Fail2Ban, but I do like what I've been experiencing  
with apf[1]  and sim[2].  The Reactive Address Blocking (RAB) 
feature  in apf is a bit timesaver, but I expect Fail2Ban has 
something  similar.  apf is basically an easier (for me, anyway)  of 
managing  iptables.  Manually banning an ip or block is as easy as 
adding it to  the deny_hosts.rules file and restarting apf.  RAB 
really helps, again  imo.



HTH,
-Ray
[1] http://rfxnetworks.com/apf.php
[2] http://rfxnetworks.com/sim.php
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

  
Here's a quick howto for Suse10.3, but the principles stay the same.  
Fail2Ban can be used for many other things as well, like FTP, MySQL,  
SMTP, etc  :)





I don't see the how-to...

  

Sorry, here it is

http://howtoforge.net/fail2ban_opensuse10.3



(leaving quoted text in place for illustrative purposes)

I would really appreciate it, as well as most others I believe, if 
everyone could begin trimming down their replies..


When I read the emails of this thread, I had to scroll down quite a bit 
to get to the text, which wastes a few seconds of my time and leaves me 
slightly annoyed.


This in and of itself is surely no big deal, but multiply that with the 
number of subscribers on this list, and we are truly getting somewhere.


So, please, in the future when replying to an email, delete all text 
that isn't directly related to your reply.


--
Thank you,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [Request] Slurm

2008-03-27 Thread Morten Nilsen

Hi,

I really like the tool "slurm", which lets me monitor bandwidth usage 
realtime from within screen..


I would really appreciate it if this could be added to CentOS..
http://www.wormulon.net/slurm/

If some other tool that covers this need exists,
I'll be glad to hear about it.

--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: A few questions regarding CentOS (5.0)

2008-03-27 Thread Morten Nilsen

Akemi Yagi wrote:

Well, if it is suspected that there are more duplicates in the rpm
database, you might want to follow the procedure detailed in this
forum post:

http://www.centos.org/modules/newbb/viewtopic.php?viewmode=flat&topic_id=10139&forum=27


I've now gotten the dupes sorted out, and have run yum upgrade..
Next time I reboot the system, I'll report back on the state of the 
flashing..


--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: A few questions regarding CentOS (5.0)

2008-03-27 Thread Morten Nilsen

Scott Silva wrote:
The attached script should fix it up, but check it first, don't just run 
it.


Your attachment got stripped, it seems..

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: A few questions regarding CentOS (5.0)

2008-03-27 Thread Morten Nilsen

Alan Bartlett wrote:
If the command rpm -q centos-release returns 
centos-release-5-1.0.el5.centos.1 then you *are* running CentOS 5 update 1.


I had previously looked at /etc/issue, which says "release 5 (Final)"..

# rpm -q centos-release
centos-release-5-0.0.el5.centos.2
centos-release-5-1.0.el5.centos.1

hmm, that doesn't look right to me..?

--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A few questions regarding CentOS (5.0)

2008-03-27 Thread Morten Nilsen

Niki Kovacs wrote:

The question may sound silly, but are you up-to-date?


As far as "yum update/upgrade" tells me, yes..

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Re: A few questions regarding CentOS (5.0)

2008-03-27 Thread Morten Nilsen

Robert Nichols wrote:

If you installed 5.0, you're missing a LOT of updates.  The normal update
mechanism should bring your machine up to 5.1 unless you've taken action
to lock it to the 5.0 release.


When I installed this box, 5.1 wasn't out yet..
And, no I haven't taken any kind of action to lock it to 5.0.

I have run "yum update" a few times, but I don't see any signs of it 
wanting to upgrade to 5.1..


--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A few questions regarding CentOS (5.0)

2008-03-27 Thread Morten Nilsen

Johnny Hughes wrote:

Do these options exist in /boot/grub/grub.conf on the "Kernel" line:

quiet rhgb


Just got home - and no, they do not..

--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A few questions regarding CentOS (5.0)

2008-03-27 Thread Morten Nilsen

Joshua Baker-LePain wrote:
'yum remove libgnomesomething' will do the depsolving for you (just like 
'yum install').


I don't really mind doing it manually, it yields greater control..

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A few questions regarding CentOS (5.0)

2008-03-27 Thread Morten Nilsen

On 3/27/2008, "Johnny Hughes" <[EMAIL PROTECTED]> wrote:
>> that time the monitor stayed off.. had to ssh in to resolve it..That may
>> indicate that someting in the sysinit shuts off the monitor at the start
>> of a script, then turns it back on at the end..
>
>Do these options exist in /boot/grub/grub.conf on the "Kernel" line:
>
>quiet rhgb
>
>If so, please remove them if you do not want X on the server.  These 2 
>things try (during boot up) to take away the standard startup screen and 
>replace it with a Blue background and picture.  This uses X, which could 
>cause something if it has been removed and the options are still listed.
>
>Removing those options (if they are there) should fix that issue.

I'll look into it, thanks.

>We do not seem to have php-mssql for CentOS extras as it requires 
>freetds and we were concerned about potential patent issues with 
>freetds.  However, it seems Fedora is including freetds now in version 8 
>and version 9, so I will research this freetds issue again and if we 
>think we can safely build and distribute freetds I will get it into our 
>extras repo soon. If not, you should be able to easily build it ... but 
>I think we will add it, so not to worry.

Good to hear :)
I know I can easily build it, I supplied contrib rpms of freetds for
Trustix a while back, which got adopted into official..
I just asked because I really like getting updates without having to
rebuild php/freetds each time..

>Also ... some rpms do require certain things to be available, and the 
>binaries are LINKED against the shared libraries.  So, one can not just 
>delete (for example) all xorg-x11 RPMS just because you don't want X. If 
>you did use "rpm -e" (with a --force or --nodeps) then it should be OK 
>since if a library is necessary, RPM will complain and not do the 
>removal unless overridden.

Yes, I am well aware of the dependency thing.. I used to maintain a large
selection of packages in TSL contrib..
I did rpm -e libgnomesomething and added on packages until it stopped
complaining about deps..
As far as X11 goes, I deselected that during install, don't remember
having to remove any of those rpms by hand..

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A few questions regarding CentOS (5.0)

2008-03-27 Thread Morten Nilsen

On 3/27/2008, "Karanbir Singh" <[EMAIL PROTECTED]> wrote:
>> no, that's not it.. the monitor goes into power off mode - the LED turns
>> orange.
>
>Sounds like your monitor does not like switching modes between text /
>gui perhaps ?

Which GUI are you referring to? I removed all the X11 stuff..

Also, one time I booted, it had some problems starting some service, and
that time the monitor stayed off.. had to ssh in to resolve it..That may
indicate that someting in the sysinit shuts off the monitor at the start
of a script, then turns it back on at the end..

--
Cheers,
Morten
:wq
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A few questions regarding CentOS (5.0)

2008-03-26 Thread Morten Nilsen

Karanbir Singh wrote:

Morten Nilsen wrote:
- Why does the screen flicker on and off several times during boot and 
when logging in?


mine does not, so cant say what is going on with your setup, perhaps 
posting some more info about your setup might help make it easier to 
diagnose.


Isn't much to say, really..
* ATI Radeon PCI
* Intel 975 Chipset

The motherboard is an Asus "Wallstreet Quartet"..

- When I chose a pure console environment, without any X11 stuff, why 
did a bunch of gnome packages get installed?


CentOS comes with a package manager, yum. There is a man page for that, 
and lots of docs online. You can use that to remove anything you dont need.


Yes, I know.. I didn't ask how to remove anything, just why it got 
installed to begin with.. The gnome stuff is long gone on this box.


--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] A few questions regarding CentOS (5.0)

2008-03-26 Thread Morten Nilsen

D Steward wrote:
- Why does the screen flicker on and off several times during boot and 
when logging in?

I presume you mean when logging in at the console, the fonts look a bit
glitchy and flickery at times.


no, that's not it.. the monitor goes into power off mode - the LED turns 
orange.



I don't see it now, in any case, since I login via ssh and dont need to
be at the console.


Yes, I do that too.. but each time I actually need to use the console, 
this annoys me to no end..


- When I chose a pure console environment, without any X11 stuff, why 
did a bunch of gnome packages get installed?

As strange as it may seem, some apps which are supposedly text-only,
have dependencies based on the gnome libs.
I can't remember the offending packages offhand, but I don't really care
much since disk-space is so cheap.


Well, sure.. But on the other hand, it is nice to keep bloat down.

- Is it possible to get a php-mssql package? -I need this if I'm going 
to use CentOS at work..



There is no default rpm for centos5, but one exists for Fedora.


I am aware of this fact, which is why I asked for CentOS to add a 
php-mssql package..


--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] A few questions regarding CentOS (5.0)

2008-03-26 Thread Morten Nilsen

Hello list,

I'm a former Trustix User (were active in that community since the very 
first betas), and now that my dear distro is dead, I'm looking to make a 
switch..


Several people recommended CentOS, so I decided to give it a spin..
I installed one new server with 5.0 a few months back, and I do have a 
couple of questions..


- Why does the screen flicker on and off several times during boot and 
when logging in?
- Why does floppy.so get loaded? I have no floppy, and having floppy.so 
loaded while installing certain packages is dreadfully slow.
- When I chose a pure console environment, without any X11 stuff, why 
did a bunch of gnome packages get installed?
- Is it possible to get a php-mssql package? -I need this if I'm going 
to use CentOS at work..


I think that's it for now..

--
Cheers,
Morten
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos