Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Christopher Chan
RedShift wrote: > On 12/20/09 16:22, Chan Chung Hang Christopher wrote: >> Les Mikesell wrote: >>> Timo Schoeler wrote: > What about NetBSD? I heard that NetBSD has the best network stack out > there. Maybe NetBSD with pf is the best choice? NetBSD is a very nice OS, I personally like

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Christopher Chan
Les Mikesell wrote: > Chan Chung Hang Christopher wrote: >> That part about high-core speed for OpenBSD pf is definitely on. The >> multi-processor part...not too sure. Maybe with NUMA systems like what >> you get on AMD Opteron platforms. >> > > Don't both iptables and pf bypass the filters for

Re: [CentOS] College student printer for CentOS 5.4 x86_64?

2009-12-20 Thread David McGuffey
On Sat, 2009-12-19 at 18:40 -0500, Stephen Harris wrote: > On Sat, Dec 19, 2009 at 06:33:18PM -0500, David McGuffey wrote: > > Yes, I checked that site. The printer is a USB Cannon IP1800. Chasing > > links I found at linuxprinting I had to go to Japan to get a driver, but > > it wouldn't work. >

Re: [CentOS] routing with 2 ISPs

2009-12-20 Thread Frank Cox
On Sun, 2009-12-20 at 19:54 +0100, David Hláčik wrote: > Computers from local network range 10.123.123.0/24 (eth0.7) should > access internet using my second internet provider via ppp0. This may be too simple for your needs, but it took a while for the light to come on for me about this when I se

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Les Mikesell
rai...@ultra-secure.de wrote: >> I've got a garage full of tools at my disposal. However, for the task at >> hand, which is nailing a nail, there is no tool more appropriate than the >> aforementioned hammer. > > > Yeah, but the original poster's only tool seems to be the CentOS > sledge-hammer.

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Les Mikesell
Peter Serwe wrote: > This thread is like a bad joke. You've been given the answer 37 times > by 23 people. > And yet, none of those responses provided any objective measurements or links to test results. Not only were most just opinions, many said the opinions were based on first impressio

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread rainer
> I've got a garage full of tools at my disposal. However, for the task at > hand, which is nailing a nail, there is no tool more appropriate than the > aforementioned hammer. Yeah, but the original poster's only tool seems to be the CentOS sledge-hammer. I could understand him if the answer to

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Peter Serwe
I've got a garage full of tools at my disposal. However, for the task at hand, which is nailing a nail, there is no tool more appropriate than the aforementioned hammer. Peter On Sun, Dec 20, 2009 at 12:50 PM, wrote: > > This thread is like a bad joke. You've been given the answer 37 times by

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread rainer
> This thread is like a bad joke. You've been given the answer 37 times by > 23 > people. > > Harrow?!! > Well, if all you've got is a hammer, everything will begin to look like a nail. Doesn't it? ;-) Rainer ___ CentOS mailing list CentOS@centos.or

Re: [CentOS] Supsend/hibernate on Samsung NC10

2009-12-20 Thread Tru Huynh
On Sun, Dec 20, 2009 at 08:17:07PM +0100, Mathieu Baudier wrote: > Hi, > > I cannot have suspend and hibernate working on a Samsung NC10 > (netbook) running CentOS 5.4 i386. > > When I try suspending/hibernating the screen becomes black (with a few > logs, like "shrinking memory" for hibernate) a

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Peter Serwe
This thread is like a bad joke. You've been given the answer 37 times by 23 people. Harrow?!! Peter On Sun, Dec 20, 2009 at 8:10 AM, sadas sadas wrote: > What solution for gigabit firewall can you suggest? Witch OS and packet > filter is capable to atcheave hight performance and gigabit speed

Re: [CentOS] mdadm help

2009-12-20 Thread James Bensley
Already I have made some progress with this, It would seem I had some how wrote a superblock to the drives hence mdadm picking the drives up as potential raid devices so I used the mdadm option --zero-superblock on each drive and solved that little issue. On to the next problem! -- Regards, Jame

[CentOS] Supsend/hibernate on Samsung NC10

2009-12-20 Thread Mathieu Baudier
Hi, I cannot have suspend and hibernate working on a Samsung NC10 (netbook) running CentOS 5.4 i386. When I try suspending/hibernating the screen becomes black (with a few logs, like "shrinking memory" for hibernate) and then the computer hangs and I have to force a shutdown with the power button

[CentOS] routing with 2 ISPs

2009-12-20 Thread David Hláčik
Hello guys, Sorry to bothering you. I had a small network with one ISP and firewall. eth1 -> Is connected to my ISP eth0 + eth0.1 , eth0.2 and etc are my local networks. All my network accesses internet via eth1. My routing table looks like the following : 213.194.242.0 0.0.0.0 255.

Re: [CentOS] storage servers crashing, hair being pulled out!

2009-12-20 Thread Matty
On Sat, Dec 19, 2009 at 10:55 PM, Gordon McLellan wrote: > I have a trio of servers that like to reboot during high disk / > network IO operations.  They don't appear to panic, as I have > kernel.panic = 0 in sysctl.conf.  The syslog just shows normal > messages, like samba complaining about brow

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Matty
On Fri, Dec 18, 2009 at 12:06 PM, nate wrote: > iptables makes a TERRIBLE firewall, use pf instead > > http://www.openbsd.org/faq/pf/index.html I whole heartedly with Nate on this! I spent a bunch of time looking at firewall solutions a year or two back, and PF was by far the easiest solution to

[CentOS] mdadm help

2009-12-20 Thread James Bensley
Hey List, So I had a 4 drive software RAID 5 set up consisting of /dev/sdb1, /dev/sdc1, /dev/sdd1 and /dev/sde1. I reinstalled my OS and after the reinstall I made the mistake of re-assembling the array incorrectly by typing "sudo mdadm --assemble /dev/md0 /dev/sdb /dev/sdc /dev/sdd /dev/sde" in a

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread nate
RedShift wrote: > Have you got some figures to back that up? Everybody's saying OpenBSD's pf > performance is superior, yet nobody has posted some proof. Not sure myself, keep in mind that there are (at least) two different ways to measure firewall performance - connections/second and throughput.

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread RedShift
On 12/20/09 16:22, Chan Chung Hang Christopher wrote: > Les Mikesell wrote: >> Timo Schoeler wrote: What about NetBSD? I heard that NetBSD has the best network stack out there. Maybe NetBSD with pf is the best choice? >>> NetBSD is a very nice OS, I personally like it most (out of all BSD

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Les Mikesell
Chan Chung Hang Christopher wrote: > Les Mikesell wrote: >> Timo Schoeler wrote: What about NetBSD? I heard that NetBSD has the best network stack out there. Maybe NetBSD with pf is the best choice? >>> NetBSD is a very nice OS, I personally like it most (out of all BSDs out >>> there); h

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Les Mikesell
Chan Chung Hang Christopher wrote: > > That part about high-core speed for OpenBSD pf is definitely on. The > multi-processor part...not too sure. Maybe with NUMA systems like what > you get on AMD Opteron platforms. > Don't both iptables and pf bypass the filters for established TCP connection

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread sadas sadas
What solution for gigabit firewall can you suggest? Witch OS and packet filter is capable to atcheave hight performance and gigabit speeds? >Les Mikesell wrote: >> Timo Schoeler wrote: What about NetBSD? I heard that NetBSD has the best network stack out there. Maybe NetBSD with p

Re: [CentOS] Cannot see samba in win Neighborhood

2009-12-20 Thread Joseph L. Casale
>It´s like samba is not being able to "talk" to the rest of the >workgroup. (of course they are all in the same workgroup) > >I´m using "wins support = yes" and I´ve set the DHCP to set the clients to use >the samba server as wins server.I´ve checked the win clients and they get the >correct conf

Re: [CentOS] Removable drive configuration

2009-12-20 Thread Stephen Harris
On Sun, Dec 20, 2009 at 09:27:09AM -0500, Robert Heller wrote: > PATA (IDE) drives are not hot-swapable -- I don't think either the > kernel IDE driver or many (if any) plain IDE controllers support hot Annoyingly old kernels used to (2.2? 2.4? Can't remember). You could do "hdparm -b 0 /dev/hdg

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Chan Chung Hang Christopher
Peter Serwe wrote: > I'll second damn near everything nate said, and hopefully add a tidbit or > two. > > If you're new to BSD, you may want to consider the pfsense project in the > aforementioned active-active configuration. > > It gives you a nice, intuitive gui to manage your failover firewall

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Chan Chung Hang Christopher
sadas sadas wrote: > The syntax is not a problem. The problem is in the performance. I suppose > that if I configure OpenBSD to process the in/out packets only to layer 2 the > performance will be much more than linux with iptables. > You know SQUAT about filtering on Linux. You want a bridg

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-20 Thread Chan Chung Hang Christopher
Les Mikesell wrote: > Timo Schoeler wrote: >>> What about NetBSD? I heard that NetBSD has the best network stack out >>> there. Maybe NetBSD with pf is the best choice? >> NetBSD is a very nice OS, I personally like it most (out of all BSDs out >> there); however, as can be read on >> >> http://www

Re: [CentOS] Removable drive configuration

2009-12-20 Thread Robert Heller
At Sun, 20 Dec 2009 08:49:02 -0500 CentOS mailing list wrote: > > I have a box running CentOS 5.3 with two Dataport removable drive bays > installed on the second IDE interface (/dev/hdc and hdd). I want to > configure it so I can plug in and mount various drives at different > times, includ

[CentOS] Removable drive configuration

2009-12-20 Thread Bob McConnell
I have a box running CentOS 5.3 with two Dataport removable drive bays installed on the second IDE interface (/dev/hdc and hdd). I want to configure it so I can plug in and mount various drives at different times, including different size drives. So far it will only recognize the first drive I

[CentOS] xen domu not starting

2009-12-20 Thread Peter Peltonen
After running out of swap and memory and freezing, a domU called web02 won't start up. Both dom0 and domU are running CentOS release 5.4. dom0's kernel is 2.6.18-164.el5xen and I'm running the stock xen from CentOS: xen-3.0.3-94.el5 After issuing 'xen create web02' I see the following in the xen

Re: [CentOS] unverified files in 5.4

2009-12-20 Thread Peter Kjellstrom
On Sunday 20 December 2009, ken wrote: > On 12/18/2009 10:53 AM Peter Kjellstrom wrote: > > On Friday 18 December 2009, ken wrote: ... > >> To ensure that a file hasn't been corrupted or tampered with, you can > >> use rpm to verify the package it came from. Well, I found this: > >> > >> rpm -Vv u

Re: [CentOS] unverified files in 5.4

2009-12-20 Thread ken
On 12/18/2009 10:53 AM Peter Kjellstrom wrote: > On Friday 18 December 2009, ken wrote: >> Hey, Gang! >> >> To ensure that a file hasn't been corrupted or tampered with, you can >> use rpm to verify the package it came from. Well, I found this: >> >> >> rpm -Vv util-linux >> >> /