Re: [CentOS] tape drive

2008-07-10 Thread John R Pierce
Pitshou Asingalembi wrote: the hp smart array 6400 controller. thats a raid controller. are you sure it supports plain scsi devices like tape?many raid controllers are disk only, and for things like tape drives, you need a seperate plain scsi port. _

Re: [CentOS] tape drive

2008-07-10 Thread Mogens Kjaer
Pitshou Asingalembi wrote: the hp smart array 6400 controller. Using the cciss driver? yum install kernel-doc Read /usr/share/doc/kernel-doc-2.6.18/Documentation/cciss.txt There's a section on how to enable the tape drive. Mogens -- Mogens Kjaer, Carlsberg A/S, Computer Department Gamle Car

Re: [CentOS] tape drive

2008-07-10 Thread nate
Pitshou Asingalembi wrote: > the hp smart array 6400 controller. It's usually not a good idea to connect a tape drive to a raid controller. The 6400 is made to be connected to something like a MSA20/MSA30 (JBOD SCSI shelf) Send the output of the command 'dmesg'. But I think you need to get anoth

Re: [CentOS] tape drive

2008-07-10 Thread Pitshou Asingalembi
the hp smart array 6400 controller. --- En date de : Ven 11.7.08, nate <[EMAIL PROTECTED]> a écrit : De: nate <[EMAIL PROTECTED]> Objet: Re: [CentOS] tape drive À: centos@centos.org Date: Vendredi 11 Juillet 2008, 8h17 Pitshou Asingalembi wrote: > yes, > when the computer reboots, i saw the ta

Re: [CentOS] XEN virtualization Problem

2008-07-10 Thread js
Gopinath Achari a écrit : Hi, I am trying to install windows XP on XEN. The Base operating system is Centos 5.1 I used GUI tool Virtual Manager. Once this Virtual manager is started is connected the XEN and QEMU. i used new tab placed below to install a virtual OS ( ex. Winxp

Re: [CentOS] tape drive

2008-07-10 Thread nate
Pitshou Asingalembi wrote: > yes, > when the computer reboots, i saw the tape drive as device detected. but i > can not use it when i log on What kind of scsi controller exactly? send the output of 'dmesg' as well. nate ___ CentOS mailing list CentOS@c

Re: [CentOS] tape drive

2008-07-10 Thread Pitshou Asingalembi
yes, when the computer reboots, i saw the tape drive as device detected. but i can not use it when i log on --- En date de : Ven 11.7.08, nate <[EMAIL PROTECTED]> a écrit : De: nate <[EMAIL PROTECTED]> Objet: Re: [CentOS] tape drive À: centos@centos.org Date: Vendredi 11 Juillet 2008, 7h51 Pitsh

[CentOS] XEN virtualization Problem

2008-07-10 Thread Gopinath Achari
Hi, I am trying to install windows XP on XEN. The Base operating system is Centos 5.1 I used GUI tool Virtual Manager. Once this Virtual manager is started is connected the XEN and QEMU. i used new tab placed below to install a virtual OS ( ex. Winxp.) after passing through th

Re: [CentOS] tape drive

2008-07-10 Thread nate
Pitshou Asingalembi wrote: > cat /proc/scsi/scsi gave me only the HDD, the st module was loaded by typing > modprobe st but i don't have the st file under /dev. Doesn't matter if the st module is loaded or not. If it's a SCSI tape drive, and if it's connected to your SCSI controller, and if the

Re: [CentOS] tape drive

2008-07-10 Thread Pitshou Asingalembi
cat /proc/scsi/scsi gave me only the HDD, the st module was loaded by typing modprobe st  but i don't have the st file under /dev. --- En date de : Ven 11.7.08, nate <[EMAIL PROTECTED]> a écrit : De: nate <[EMAIL PROTECTED]> Objet: Re: [CentOS] tape drive À: centos@centos.org Date: Vendredi 11 J

[CentOS] Re: Iptables not blocking UDP port 53

2008-07-10 Thread Robert Nichols
Sean Carolan wrote: Does the count field from "iptables -vnL RH-Firewall-1-INPUT" show your REJECT rules being hit? Yes, the rule gets hit and it returns an answer to the DNS query anyway. I saw it increment from 10 to 11 when I ran the query: 11 692 REJECT udp -- * * 10.10

[CentOS] libc-client 2007 conflict when updating

2008-07-10 Thread Kenneth Porter
FYI for others who might encounter this. I just did a yum update (C5.1) and after a very long download of packages I get a transaction test failure: Transaction Check Error: file /usr/lib/libc-client.so.2007 from install of libc-client2007-2007b-1.el5 conflicts with file from package libc-c

Re: [CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Meenoo Shivdasani
On 7/10/08, Filipe Brandenburger <[EMAIL PROTECTED]> wrote: > Did you update the "selinux-policy" package at the same time? > Well, I'm almost positive that is what you are missing. Filipe, You nailed it. That was what I was missing. Many thanks, M __

Re: [CentOS] Understanding iptables

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 10:42 PM, Robert Spangler <[EMAIL PROTECTED]> wrote: > Could you post /etc/sysconfig/iptables? /etc/sysconfig/iptables doesn't necessarily reflect what is running right now, and you can't include the counters with it. An acceptable compromise would be posting the output of

Re: [CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 10:39 PM, Meenoo Shivdasani <[EMAIL PROTECTED]> wrote: > To be more accurate, I installed the patched version of BIND which > randomizes the source port to address the latest DNS vulnerability. Did you update the "selinux-policy" package at the same time? On my system I ha

Re: [CentOS] Understanding iptables

2008-07-10 Thread Robert Spangler
On Thursday 10 July 2008 18:08, MHR wrote: > In following up on the rsh "problem" I was having earlier, I decided > to try out the suggestion Felipe sent about using > system-config-securitylevel-tui to open up ports 513 and 514, but that > doesn't seem to do the job, either. > > # iptables -

Re: [CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Meenoo Shivdasani
On 7/10/08, Meenoo Shivdasani <[EMAIL PROTECTED]> wrote: > > SELinux is preventing BIND to open port UDP/16660. Did you configure > > BIND to use that specific non-standard port? > > > I installed the latest version of BIND which randomizes the source > port...do you think that's the problem? I

Re: [CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Meenoo Shivdasani
> SELinux is preventing BIND to open port UDP/16660. Did you configure > BIND to use that specific non-standard port? I installed the latest version of BIND which randomizes the source port...do you think that's the problem? If so, how do I get SELinux to accept it? M __

Re: [CentOS] Understanding iptables

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 9:53 PM, MHR <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] mrichter]$ rsh sushi ls > sushi: Connection refused Are you sure the daemons are up and listening on those ports? What does "netstat -ltp" says on sushi? Filipe ___ Cent

Re: [CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 9:41 PM, Meenoo Shivdasani <[EMAIL PROTECTED]> wrote: > type=AVC msg=audit(1215740151.446:796): avc: denied { name_bind } > for pid=21081 comm="named" src=16660 > scontext=root:system_r:named_t:s0 tcontext=system_u:object_r:port_t:s0 > tclass=udp_socket SELinux is preven

Re: [CentOS] /etc/pam.d/system-auth changes in update

2008-07-10 Thread Toby Bluhm
listmail wrote: On Thu, 10 Jul 2008 16:31:44 +0200, Kai Schaetzl wrote Filipe Brandenburger wrote on Wed, 9 Jul 2008 23:08:44 -0400: The exact same question came up two weeks ago. And the answers were confusing at least me ;-) To me as well, having now read the thread. N

RE: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Joseph L. Casale
>What you probably mean is: ># echo "ifdown eth0 && ifup eth0" | at now Yea, sorry :) Op would have figured that out rather fast after nothing "useful" happened jlc ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/cent

Re: [CentOS] tape drive

2008-07-10 Thread nate
Pitshou Asingalembi wrote: > hi all, > i want to use a compaq sdlt 320 under centos. the tape drive was already > installed and after rebooting i was not able to see it(dmesg | grep tape or > dmesg | grep scsi). i add the correct module (modprobe st) but i'm not able > to use with mt. the st0 file

Re: [CentOS] Understanding iptables

2008-07-10 Thread MHR
On Thu, Jul 10, 2008 at 6:43 PM, Spiro Harvey, Knossos Networks Ltd <[EMAIL PROTECTED]> wrote: > > next you'll be telling me our internets shouldn't use tubes. > You're up to tubes? Hippy freak! mhr ___ CentOS mailing list CentOS@centos.org http://list

Re: [CentOS] Understanding iptables

2008-07-10 Thread MHR
On Thu, Jul 10, 2008 at 6:29 PM, Filipe Brandenburger <[EMAIL PROTECTED]> wrote: > > Try using "iptables -vL", it will show you how many packets have > matched that rule. Then try to rsh or rlogin and see if the numbers > change. That should give you a clue to whether it's working or not. > Before

Re: [CentOS] Understanding iptables

2008-07-10 Thread Spiro Harvey, Knossos Networks Ltd
P.S.: Once again: although it's great that you are digging into the problem, using iptables, and learning a lot on the process, you should *REALLY* consider ditching rsh/rlogin and sticking to SSH. I would consider using rsh/rlogin instead of SSH today about the same as using gopher instead of the

Re: [CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Meenoo Shivdasani
> If it's SELinux related, have a look at /var/log/audit/audit.log, that > will tell you what is being blocked in SELinux. That would be a good > start. Let us know what you found there, then we might be able to help > you a little more. That's a huge help -- didn't occur to me to look in audi

Re: [CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Ian Blackwell
Lanny Marcus wrote: [EMAIL PROTECTED] ~]# ssh ipcop.homelan:222 ssh: ipcop.homelan:222: Name or service not known [EMAIL PROTECTED] ~]# Try:- ssh -p 222 ipcop.homelan Ian smime.p7s Description: S/MIME Cryptographic Signature ___ CentOS mailin

[CentOS] tape drive

2008-07-10 Thread Pitshou Asingalembi
hi all, i want to use a compaq sdlt 320 under centos. the tape drive was already installed and after rebooting i was not able to see it(dmesg | grep tape or dmesg | grep scsi). i add the correct module (modprobe st) but i'm not able to use with mt. the st0 file is missing, can someone help to re

Re: [CentOS] Understanding iptables

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 6:08 PM, MHR <[EMAIL PROTECTED]> wrote: > ACCEPT tcp -- anywhere anywherestate NEW > tcp dpt:login > ACCEPT tcp -- anywhere anywherestate NEW > tcp dpt:shell It seems right to me... Try using "iptables -vL", it wi

Re: [CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 7:22 PM, Meenoo Shivdasani <[EMAIL PROTECTED]> wrote: > I'm running up against a problem that seems to be related to SELinux. > Any ideas? If it's SELinux related, have a look at /var/log/audit/audit.log, that will tell you what is being blocked in SELinux. That would be a

Re: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 5:19 PM, Joseph L. Casale <[EMAIL PROTECTED]> wrote: > # echo ifdown eth0 && ifup eth0 | at now What you probably mean is: # echo "ifdown eth0 && ifup eth0" | at now Otherwise it will run "echo", and then it will run "ifup eth0" piping its output to "at". I don't see what

Re: [CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Lanny Marcus
On 7/10/08, Lanny Marcus <[EMAIL PROTECTED]> wrote: >> your >> ipcop should be a caching nameserver. If you have another address there it >> will query to that server. > > Obviously, I need to change that, so I can run Setup from a terminal > window, run the dig + trace command as you did from one

Re: [CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Lanny Marcus
On 7/10/08, Scott Silva <[EMAIL PROTECTED]> wrote: > When you set up your connection to your provider, do you have a static > address > or dynamic? Dynamic IP > If static, you had to set your next step resolver in the config. > If you are dynamic, you get what your provider sends with the dhcp r

Re: [CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Lanny Marcus
On 7/10/08, Scott Silva <[EMAIL PROTECTED]> wrote: > Do you want to install a complete router using CentOS? > Is your ipcop box not adequate for your needs? >From what you wrote to me in another reply, ipcop will do the job, as soon as I can get into it and get it configured the way you said. That

Re: [CentOS] OT: anything in CentOS 5.2 that uses opendns.com whenbrowsing web?

2008-07-10 Thread Lanny Marcus
On 7/10/08, Dennis McLeod <[EMAIL PROTECTED]> wrote: > IPCOP here. Use it for Masq, dhcp, NAT, time, Transparent Webfiltering via > URLFilter plugin (and automatic blacklist downloads) and banned internal MAC > addresses (our inside machines) via advancedproxy plugin, and more. > It's on our pu

Re: [CentOS] CentOS 5.2 VMI support

2008-07-10 Thread nate
Ruslan Sivak wrote: > Does it just require a kernel recompile? Is there maybe one available > somewhere? No it requires changes to the kernel itself, changes which I don't think Red Hat will introduce in a minor release as their current VM stuff is Xen based which has it's own paravirtualization

Re: [CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Lanny Marcus
On 7/10/08, Scott Silva <[EMAIL PROTECTED]> wrote: > When you set up your connection to your provider, do you have a static > address > or dynamic? We get a dynamic IP address when we connect to ADSL. >If static, you had to set your next step resolver in the config. > If you are dynamic, you get

Re: [CentOS] CentOS 5.2 VMI support

2008-07-10 Thread Ruslan Sivak
nate wrote: Ruslan Sivak wrote: I'm using VMWare Server 2 RC1 to on top of CentOS 5.2 x86_64 running a CentOS 5.2 i386 guest. I have enabled VMI in VMware, so I guess it won't let me install if VMI wasn't available in the kernel? How do I know whether VMI is supported/enabled and what perfo

Re: [CentOS] Java Setup

2008-07-10 Thread Clint Dilks
R P Herrold wrote: On Thu, 10 Jul 2008, Clint Dilks wrote: I have been following the instructions here http://wiki.centos.org/HowTos/JavaOnCentOS but trying to modify them for jdk-6u7-linux-amd64.rpm but there doesn't see to be a compatible java-1.6.0-sun-compat-*.rpm. Does one exist ? What

Re: [CentOS] CentOS 5.2 VMI support

2008-07-10 Thread nate
Ruslan Sivak wrote: > I'm using VMWare Server 2 RC1 to on top of CentOS 5.2 x86_64 running a > CentOS 5.2 i386 guest. I have enabled VMI in VMware, so I guess it > won't let me install if VMI wasn't available in the kernel? How do I > know whether VMI is supported/enabled and what performance ben

Re: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Robert Moskowitz
Joseph L. Casale wrote: Since I was SSHed into the boxes, I could not test ifconfig (down then up!). Just so you know, you can do this type of thing even with SSH. (I don't know what would of helped that situation, but for future ref...) #echo ifdown eth0 && ifup eth0 | at now Oh, ne

Re: [CentOS] Re: Evolution in CentOS 5.2

2008-07-10 Thread Lanny Marcus
On 7/9/08, MHR <[EMAIL PROTECTED]> wrote: > On Wed, Jul 9, 2008 at 5:42 PM, nate <[EMAIL PROTECTED]> wrote: >> >> The next thing I suggest is stopping evolution, and killing all >> evolution processes on the system and starting evolution again and >> see if that fixes it. I have killed Evolution a

[CentOS] bind9, SELinux, ServFail

2008-07-10 Thread Meenoo Shivdasani
I just set up a CentOS 5.2 system with bind9 (9.3.4-6.0.1.P1.el5) and I'm running up against a problem that seems to be related to SELinux. If I set named_disable_trans to 1, everything works as expected, but if I leave it enabled the server will only give me data for the zones for which it is auth

RE: [CentOS] OT: anything in CentOS 5.2 that uses opendns.com whenbrowsing web?

2008-07-10 Thread Dennis McLeod
IPCOP here. Use it for Masq, dhcp, NAT, time, Transparent Webfiltering via URLFilter plugin (and automatic blacklist downloads) and banned internal MAC addresses (our inside machines) via advancedproxy plugin, and more. It's on our public access wifi network with a dedicated DSL connection. Bee

Re: [CentOS] Understanding iptables

2008-07-10 Thread William L. Maltby
On Thu, 2008-07-10 at 15:40 -0700, MHR wrote: > On Thu, Jul 10, 2008 at 3:17 PM, Barry Brimer <[EMAIL PROTECTED]> wrote: > > Quoting MHR <[EMAIL PROTECTED]>: > > > >> > >> system-config-securitylevel-tui to open up ports 513 and 514, but that > >> doesn't seem to do the job, either. > > > > I cou

[CentOS] CentOS 5.2 VMI support

2008-07-10 Thread Ruslan Sivak
I'm using VMWare Server 2 RC1 to on top of CentOS 5.2 x86_64 running a CentOS 5.2 i386 guest. I have enabled VMI in VMware, so I guess it won't let me install if VMI wasn't available in the kernel? How do I know whether VMI is supported/enabled and what performance benefits can I expect from

Re: [CentOS] OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread William L. Maltby
On Thu, 2008-07-10 at 15:39 -0500, Lanny Marcus wrote: > On 7/10/08, Victor Padro <[EMAIL PROTECTED]> wrote: > > > I'm a Desktop user and Linux newbie. If I could use CentOS (which can > do almost anything, if one knows how to do it), to replace our IPCop > box, all I need it to do is: (a) Router

Re: [CentOS] Understanding iptables

2008-07-10 Thread MHR
On Thu, Jul 10, 2008 at 3:17 PM, Barry Brimer <[EMAIL PROTECTED]> wrote: > Quoting MHR <[EMAIL PROTECTED]>: > >> In following up on the rsh "problem" I was having earlier, I decided >> to try out the suggestion Felipe sent about using >> system-config-securitylevel-tui to open up ports 513 and 514,

[CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Scott Silva
on 7-10-2008 2:50 PM Lanny Marcus spake the following: On 7/10/08, Scott Silva <[EMAIL PROTECTED]> wrote: Bind as a caching nameserver is dead easy to install. Just run "yum install caching-nameserver" and it will pull everything in. Then "chkconfig named on & service named start" Scott: Than

Re: [CentOS] Understanding iptables

2008-07-10 Thread Barry Brimer
Quoting MHR <[EMAIL PROTECTED]>: > In following up on the rsh "problem" I was having earlier, I decided > to try out the suggestion Felipe sent about using > system-config-securitylevel-tui to open up ports 513 and 514, but that > doesn't seem to do the job, either. I could be remembering this wr

[CentOS] Understanding iptables

2008-07-10 Thread MHR
In following up on the rsh "problem" I was having earlier, I decided to try out the suggestion Felipe sent about using system-config-securitylevel-tui to open up ports 513 and 514, but that doesn't seem to do the job, either. # iptables -L Chain INPUT (policy ACCEPT) target prot opt source

Re: [CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Bill Campbell
On Thu, Jul 10, 2008, Lanny Marcus wrote: >On 7/10/08, Scott Silva <[EMAIL PROTECTED]> wrote: > >> Bind as a caching nameserver is dead easy to install. >> Just run "yum install caching-nameserver" and it will pull everything in. >> Then "chkconfig named on & service named start" > >Scott: Thanks!

[CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Scott Silva
on 7-10-2008 2:32 PM Lanny Marcus spake the following: On 7/10/08, Scott Silva <[EMAIL PROTECTED]> wrote: Try dig +trace emcali.net It should show all servers "your" query goes through. Scott: Please note that I added ".co" (for Colombia) emcali.net.co Is this showing which DNS Servers my

Re: [CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Lanny Marcus
On 7/10/08, Scott Silva <[EMAIL PROTECTED]> wrote: > Bind as a caching nameserver is dead easy to install. > Just run "yum install caching-nameserver" and it will pull everything in. > Then "chkconfig named on & service named start" Scott: Thanks! I just began a text file: "Caching DNS Server" an

Re: [CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Lanny Marcus
On 7/10/08, Scott Silva <[EMAIL PROTECTED]> wrote: > Try dig +trace emcali.net > It should show all servers "your" query goes through. Scott: Please note that I added ".co" (for Colombia) emcali.net.co Is this showing which DNS Servers my DNS requests use, or, which DNS Servers serve their web

RE: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Joseph L. Casale
>Since I was SSHed into the boxes, I could not test ifconfig (down then >up!). Just so you know, you can do this type of thing even with SSH. (I don't know what would of helped that situation, but for future ref...) #echo ifdown eth0 && ifup eth0 | at now through ssh will work fine, and you will

[CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Scott Silva
on 7-10-2008 2:04 PM Lanny Marcus spake the following: On 7/10/08, Lanny Marcus <[EMAIL PROTECTED]> wrote: I think I saw a reference, in a thread yesterday, about not having a package with "caching" in it's name, if one also has BIND installed. I am going to try to locate that thread and find o

Re: [CentOS] OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Lanny Marcus
On 7/10/08, Lanny Marcus <[EMAIL PROTECTED]> wrote: > I think I saw a reference, in a thread yesterday, about not having a > package with "caching" in it's name, if one also has BIND installed. I > am going to try to locate that thread and find out about that package. > Possibly it can do what I n

Re: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Robert Moskowitz
Sean Carolan wrote: Yep. They are there. So what is the 'proper' method to get them out (other than using VI and deleteing the lines?)? I would comment them out and add another comment like this: # Un-comment these to disable ipv6 #alias net-pf-10 off #alias ipv6 off You will need to

[CentOS] Re: OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Scott Silva
on 7-10-2008 1:55 PM Lanny Marcus spake the following: On 7/10/08, Rob Townley <[EMAIL PROTECTED]> wrote: why not use the dig command to query your isp dns system to see if they forward requests to opendns. By the way, OpenDNS is a great way to help prevent phishing attacks. Rob: What other p

Re: [CentOS] OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Lanny Marcus
On 7/10/08, Rob Townley <[EMAIL PROTECTED]> wrote: > why not use the dig command to query your isp dns system to see if > they forward requests to opendns. By the way, OpenDNS is a great way > to help prevent phishing attacks. Rob: What other parameters or arguments I should add onto the dig comm

[CentOS] SOLVED Re: Problems with bind on 5.2

2008-07-10 Thread Scott Silva
on 7-8-2008 11:15 PM Robert - elists spake the following: After digging for a bit at arin Near as I can tell, it appears the authoritative dns servers for that specific block are a lil messed up for the moment. Not delegating something properly. Tough to say without admin access to those machi

Re: [CentOS] Re: Iptables not blocking UDP port 53

2008-07-10 Thread Sean Carolan
> Are you running tcpdump on the same machine that is doing the filtering? > You do realize that tcpdump sees the packets as they come from the > interface and before they are passed to the filter rules, right? I had forgotten this important piece of information. Thank you for pointing this out.

[CentOS] Re: Kernel is not compiled with IPv6 support?

2008-07-10 Thread Scott Silva
on 7-10-2008 1:11 PM Robert Moskowitz spake the following: Sean Carolan wrote: CRITICAL : [ipv6_test] Kernel is not compiled with IPv6 support [ OK ] FATAL: Module off not found. CRITICAL : [ipv6_test] Kernel is not compiled with IPv6 su

Re: [CentOS] OT: anything in CentOS 5.2 that uses opendns.com when browsing web?

2008-07-10 Thread Lanny Marcus
On 7/10/08, Victor Padro <[EMAIL PROTECTED]> wrote: > Hi there again... > I just found this on my quest of DNS caching... > http://isc.sans.org/diary.html?storyid=4687 Victor: I read that page and I sent the URL to the Supervisor in Support at our ISP, hoping she will pass it along, to whoever is

Re: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Filipe Brandenburger
On Thu, Jul 10, 2008 at 4:26 PM, Sean Carolan <[EMAIL PROTECTED]> wrote: > You will need to reboot the server to enable the changes. IIRC, ipv6 > is not a module that you can load or unload anytime like a network or > sound card driver. No, not at all. If you just try to "ifconfig" after commenti

[CentOS] Re: Iptables not blocking UDP port 53

2008-07-10 Thread Robert Nichols
Sean Carolan wrote: I'm attempting to block access to port 53 from internet hosts for an internal server. This device is behind a gateway router so all traffic appears to come from source ip 10.100.1.1. Here are my (non-working) iptables rules: -A RH-Firewall-1-INPUT -s 10.100.1.1 -m tcp -p tc

Re: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Sean Carolan
> Yep. They are there. So what is the 'proper' method to get them out (other > than using VI and deleteing the lines?)? > I would comment them out and add another comment like this: # Un-comment these to disable ipv6 #alias net-pf-10 off #alias ipv6 off You will need to reboot the server to enab

Re: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Robert Moskowitz
Sean Carolan wrote: CRITICAL : [ipv6_test] Kernel is not compiled with IPv6 support [ OK ] FATAL: Module off not found. CRITICAL : [ipv6_test] Kernel is not compiled with IPv6 support Try looking inside /etc/modprobe.conf for these

Re: [CentOS] backuppc on CentOS 5

2008-07-10 Thread Sean Carolan
I've used the guide on mantic.org before, worked well for me: http://www.mantic.org/wiki/Installing_BackupPC We use BackupPC extensively where I work, once you get it settled down and in a steady state it is invaluable. ___ CentOS mailing list CentOS@ce

Re: [CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Sean Carolan
> CRITICAL : [ipv6_test] Kernel is not compiled with IPv6 support > [ OK ] > FATAL: Module off not found. > CRITICAL : [ipv6_test] Kernel is not compiled with IPv6 support Try looking inside /etc/modprobe.conf for these lines: alias net-pf

Re: [CentOS] /etc/pam.d/system-auth changes in update

2008-07-10 Thread listmail
On Thu, 10 Jul 2008 16:31:44 +0200, Kai Schaetzl wrote > Filipe Brandenburger wrote on Wed, 9 Jul 2008 23:08:44 -0400: > > > The exact same question came up two weeks ago. > > And the answers were confusing at least me ;-) > To me as well, having now read the thread. No one seems to know why the

[CentOS] Iptables not blocking UDP port 53

2008-07-10 Thread Sean Carolan
I'm attempting to block access to port 53 from internet hosts for an internal server. This device is behind a gateway router so all traffic appears to come from source ip 10.100.1.1. Here are my (non-working) iptables rules: -A RH-Firewall-1-INPUT -s 10.100.1.1 -m tcp -p tcp --dport 53 -j REJECT

[CentOS] redirecting when behind a firewall

2008-07-10 Thread bruce
Hi.. I know this isn't a centos/rhel/fedora issue... but i'm hopeful that someone might have an answer!!! thanks VV Got a bit of an issue here, that I can't seem to resolve. I have a test domain on a dynamic service (dyndns.org). the test domain is foo.gotdns.com, which i have pointing

Re: [CentOS] Yaz and libyaz package for CentOS 5

2008-07-10 Thread Siju George
On Mon, Jul 7, 2008 at 10:19 PM, Akemi Yagi <[EMAIL PROTECTED]> wrote: > On Mon, Jul 7, 2008 at 9:37 AM, Siju George <[EMAIL PROTECTED]> wrote: >> Hi, >> >> Where do I get Yaz and libyaz package for CentOS 5? > > Try the EPEL repository. See > http://wiki.centos.org/AdditionalResources/Repositorie

Re: [CentOS] Bind update overwrites named.conf

2008-07-10 Thread Chris Miller
Tru Huynh wrote: On Wed, Jul 09, 2008 at 08:42:12AM -0700, Chris Miller wrote: I just had a customer's bind server lose all of it's local DNS records. Yum updated the bind packages this morning at ~6am, and replaced the original /etc/named.conf file, saving the old as named.conf.rpmsave. This

[CentOS] Kernel is not compiled with IPv6 support?

2008-07-10 Thread Robert Moskowitz
How did I get this? I am current on my 5.2 upgrades on this system. Running kernel: 2.6.18-92.1.6.el5 I did a service network restart and got: Shutting down interface eth0: [ OK ] Shutting down loopback interface: [ OK ] FATAL: Module

Re: [CentOS] Need help with awk one-liner

2008-07-10 Thread Denis
Sean Carolan wrote: The awk output that was piped into to the sed command looks like this: ajpv12://host1.domain.company.com:8008/root ajpv12://host2.domain.company.com:8008/root ajpv12://host3.domain.company.com:8008/root ___ CentOS mailing list CentO

Re: [CentOS] rsh problems in CentOS 5.2 (was "cvs command failure on 5.2")

2008-07-10 Thread MHR
On Mon, Jul 7, 2008 at 4:05 PM, John R Pierce <[EMAIL PROTECTED]> wrote: > > man ssh-keygen > Unfortunately, as with most man pages, this gives the technical details of how the command works, not so much how to use it in context. However, this (http://rcsg-gsir.imsb-dsgi.nrc-cnrc.gc.ca/documents

[CentOS] IPv6 static routing

2008-07-10 Thread Robert Moskowitz
So I do not want to run radvd on my public subnet (between the gateway and firewall). I am trying to set up the firewall's public interface. For now in ifcfg-eth0 I have the lines: DEVICE=eth0 BOOTPROTO=static HWADDR=00:40:F4:05:A8:F1 IPV6INIT=yes IPV6_AUTOCONF=no IPV6ADDR="2607:F4B8:3:1:0:

Re: [CentOS] How can I automate random bytes generation for CENTOS 5.2?

2008-07-10 Thread Tolun ARDAHANLI
2008/7/10 Ralph Angenendt <[EMAIL PROTECTED] <[EMAIL PROTECTED]> >: > Tolun ARDAHANLI wrote: > > It can be created every second... Cause we do not know when the users > want > > to create these own keys... > > Then they have to wait - or look why your system doesn't have a big > enough entropy poo

[CentOS] Java Setup

2008-07-10 Thread R P Herrold
On Thu, 10 Jul 2008, Clint Dilks wrote: I have been following the instructions here http://wiki.centos.org/HowTos/JavaOnCentOS but trying to modify them for jdk-6u7-linux-amd64.rpm but there doesn't see to be a compatible java-1.6.0-sun-compat-*.rpm.Does one exist ? What's wrong with the

[CentOS] Re: CentOS Patch for http://www.kb.cert.org/vuls/id/800113

2008-07-10 Thread Scott Silva
on 7-10-2008 5:16 AM Sergio Belkin spake the following: 2008/7/9 Scott Silva <[EMAIL PROTECTED]>: on 7-9-2008 1:08 PM John R Pierce spake the following: Sean Carolan wrote: Will there be a BIND patch available for this vulnerability, for CentOS 3.9? http://www.kb.cert.org/vuls/id/800113 for

[CentOS] Re: can I use CentOS as a antivirus / spam filter / HTTP AV gateway?

2008-07-10 Thread Scott Silva
on 7-10-2008 3:23 AM Rudi Ahlers spake the following: Johnny Hughes wrote: Rudi Ahlers wrote: Hi all I've been thinking about using CentOS on a Dell R200 server and turn it into a firewall / network monitor / traffic shaper in our datacentre, instead of using a dedicated firewall device. O

RE: [CentOS] Latest samaba updates

2008-07-10 Thread John
Remember this. It is going to work when set to Permisive regardless!! John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David G. Mackay Sent: Wednesday, July 09, 2008 10:36 PM To: CentOS mailing list Subject: RE: [CentOS] Latest samaba updates On W

[CentOS] 1st static IPv6 address

2008-07-10 Thread Robert Moskowitz
My ISP assigned prefix is: 2607:F4B8:3::/48 So I am building my internal IPv6 firewall/router/ etc. I want to have a static IPv6 address on its eth0 so that I can create static v6 routes to it from the gateway. I add the following lines to ifcfg-eth0: HWADDR=00:40:F4:05:A8:F1 IPV6INIT=yes

Re: [CentOS] backuppc on CentOS 5

2008-07-10 Thread dnk
On 10-Jul-08, at 2:47 AM, Johnny Hughes wrote: Not a exactly a guide, however there is a README.centos in the /usr/ share/docs/backuppc- dir that should tell you how to make it work :D hey, that is a start Thanks! Dustin ___ CentOS mailin

Re: [CentOS] what does "not found" mean in a DHCPRELEASE context?

2008-07-10 Thread nate
David Mackintosh wrote: > Does anyone know what dhcpd (or the device) is trying to tell me with this > message? I believe it's saying the device was telling the server it didn't want to use that IP anymore, and the server logged that it couldn't find evidence that it leased that address out to t

Re: [CentOS] UTF-8 support in PCRE

2008-07-10 Thread Ralph Angenendt
Amitava Shee wrote: > The issue is in CentOS 5. I ran the application successfully in Ubuntu 8.04. > > > PCRE in CentOS does not have "unicode properties" enabled. So it's not utf-8 support which is missing. > Is there a way to enable these options (without the usual ./configure make)? Rebuil

[CentOS] what does "not found" mean in a DHCPRELEASE context?

2008-07-10 Thread David Mackintosh
I have a CentOS 4.6 server running dhcpd. One of my client devices (a Panasonic KX-HCM280A camera) is trying to get a lease from that server. I can see the device accept a lease (it is a reservation), however it always releases the reservation after about 25 seconds: Jul 10 10:30:49 stargate dhcp

Re: [CentOS] UTF-8 support in PCRE

2008-07-10 Thread Kai Schaetzl
Amitava Shee wrote on Wed, 9 Jul 2008 13:27:35 -0400: > PCRE in CentOS does not have "unicode properties" enabled. But that's different from what you claimed earlier! Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com __

Re: [CentOS] /etc/pam.d/system-auth changes in update

2008-07-10 Thread Kai Schaetzl
Filipe Brandenburger wrote on Wed, 9 Jul 2008 23:08:44 -0400: > The exact same question came up two weeks ago. And the answers were confusing at least me ;-) Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com ___

[CentOS] Slow HVM IO performance with newer kernels

2008-07-10 Thread henry ritzlmayr
Hi list. I am testing CentOS 5.2 now. I experience much slower IO under HVM Guests with the newer kernels, so I started some measurements. DOM-0 is a fully upgraded CentOS 5.2. DOM-U is CentOS 5.0 not upgraded at all for testing purposes. DOM-U sits on an LVM Volume. No other services are running

Re: [CentOS] How can I automate random bytes generation for CENTOS 5.2?

2008-07-10 Thread Ralph Angenendt
Tolun ARDAHANLI wrote: > It can be created every second... Cause we do not know when the users want > to create these own keys... Then they have to wait - or look why your system doesn't have a big enough entropy pool. What does cat /proc/sys/kernel/random/entropy_avail say? You need a enough "r

Re: [CentOS] can I use CentOS as a antivirus / spam filter / HTTP AV gateway?

2008-07-10 Thread Rudi Ahlers
John R Pierce wrote: Rudi Ahlers wrote: Hi all I've been thinking about using CentOS on a Dell R200 server and turn it into a firewall / network monitor / traffic shaper in our datacentre, instead of using a dedicated firewall device. One of the devices that I have been looking at, with my

Re: [CentOS] Re: CentOS Patch for http://www.kb.cert.org/vuls/id/800113

2008-07-10 Thread Sergio Belkin
2008/7/9 Scott Silva <[EMAIL PROTECTED]>: > on 7-9-2008 1:08 PM John R Pierce spake the following: >> >> Sean Carolan wrote: >>> >>> Will there be a BIND patch available for this vulnerability, for CentOS >>> 3.9? >>> >>> http://www.kb.cert.org/vuls/id/800113 >>> >> >> for that matter, how do I fig

[CentOS] CentOS-announce Digest, Vol 41, Issue 5

2008-07-10 Thread centos-announce-request
Send CentOS-announce mailing list submissions to [EMAIL PROTECTED] To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reac

Re: [CentOS] How can I automate random bytes generation for CENTOS 5.2?

2008-07-10 Thread Tolun ARDAHANLI
It can be created every second... Cause we do not know when the users want to create these own keys... -- Tolun ARDAHANLI Bilgisayar Muhendisi E-posta:[EMAIL PROTECTED]<[EMAIL PROTECTED]> Icq:326600 Tolun ARDAHANLI

Re: [CentOS] How can I automate random bytes generation for CENTOS 5.2?

2008-07-10 Thread Ralph Angenendt
Tolun ARDAHANLI wrote: > I want that every time the random bytes are prepared and waiting for use for > gpg. How often do you create a new gpg key? And please trim your mails. Ralph pgpicJwrkKOb4.pgp Description: PGP signature ___ CentOS mailing list

  1   2   >