Re: [CentOS] Fix for the CVE-2017-7494?

2017-05-30 Thread franco

Hi, check your selinux-policy package version, else nmbd does't work!

https://bugzilla.redhat.com/show_bug.cgi?id=913762

Francesco

On 26/05/2017 18:43, Bernard Fay wrote:

Thanks Mark and Christian,

I have two Samba servers running those two versions.  That reassure me!

Thanks,
Bernard


On Fri, May 26, 2017 at 12:08 PM, Paul Heinlein  wrote:


On Fri, 26 May 2017, Christian, Mark wrote:

On Fri, 2017-05-26 at 11:19 -0400, Bernard Fay wrote:

Hi,

Does a fix has already been made in the CenOS RPM repositories for this
Samba remote execution code vulnerability, CVE-2017-7494?


yes. samba-3.6.23-43.el6_9.x86_64.rpm


And samba-*-4.4.4-14.el7_3.x86_64

--
Paul Heinlein <> heinl...@madboa.com <> http://www.madboa.com/

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix Questions

2009-05-02 Thread German Andres Pulido Franco
-- Original Message ---
From: Indunil Jayasooriya 
To: CentOS mailing list 
Sent: Sun, 3 May 2009 07:46:17 +0530
Subject: Re: [CentOS] Postfix Questions

> On Sat, May 2, 2009 at 4:36 AM, Jason Todd Slack-Moehrle
>  wrote:
> > Hi All,
> >
> > I am working on setting up Postfix and I have a few questions:
> >
> > 1. mynetworks =  Do I put my public static IP here? So I am hosting at
> > another provider on my own dedicated hardware. Do I put that machines
> > IP or the IP of my apartment where I want to access from? Second, do I
> > have to know the Ip information for my BlackBerry to work as well?
> >
> 
> put clients ip range there.
> 
> e.g
> 
> mynetworks = 192.168.0.0/24
> 
> then, clinets behind postfix mail server will be able to send mail 
> via postfix server.
> 
> > 2. relaying: Obviously I dont want to be an open relay, but I do what
> > to send mail from my apartment and from my Blackberry.
> 
> as i said the above under mynetworks, Pls add those ip ranges. then, 
> u r done.

For dynamic IPs, like those assigned by home ISPs is not useful (besides
stupid) adding the ISP's range (since the spammers will probably be windows
machines using an IP from the same IP range than yours). What I did was
implementing SMTP authentication, and then I can send e-amil from my e-mail
client at home without my server being an open relay and without allowing the
full ISP IP range to send mail through my mail server.

Regards.

> 
> >
> 
> > ___
> > CentOS mailing list
> > CentOS@centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> >
> 
> -- 
> Thank you
> Indunil Jayasooriya
> ___
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
--- End of Original Message ---

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] i386 packages on x64 servers

2008-12-30 Thread German Andres Pulido Franco
Hi!

I have some servers, all running centos 5.2 x64 with current updates. None of
the servers has installed packages that are not part of the centos regular
packages. They were installed using the "server" packages at install,
therefore there is no X server, GNOME, KDE or any other non-server stuff.
However, I recently noted that the servers have the x64 _and_ the i386
versions of some packages installed, for instance: krb5-libs-1.6.1-25.el5_2.1
and pam_krb5-2.2.14-1.el5_2.1. My question is: If I have no 32 bits software
installed on these machines, why are such libraries installed? and can they be
safely removed from the servers?

Thanks in advance.


GERMAN ANDRES PULIDO F.
Ingeniero de Proyectos

Global Technology Services - GTS S.A.
-
Tel: (571) 658 34 10 ext 110
Cel: (573) 300 265 23 03
Carrera 7b No. 123-46
Bogotá-Colombia
Sitio Web: www.gtscolombia.com

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos