Re: [CentOS] Package hwloc-1.5-2.el6_5.x86_64.rpm is not signed

2014-08-12 Thread Karanbir Singh
On 08/13/2014 12:37 AM, Leonard den Ottolander wrote: > Package hwloc-1.5-2.el6_5.x86_64.rpm is not signed > fixed, signed rpms now posted. thanks for the heads up -- Karanbir Singh +44-207-0999389 | http://www.karan.org/ | twitter.com/kbsingh GnuPG Key : http://www.karan.org/publickey.asc

[CentOS] Package hwloc-1.5-2.el6_5.x86_64.rpm is not signed

2014-08-12 Thread Leonard den Ottolander
Package hwloc-1.5-2.el6_5.x86_64.rpm is not signed -- mount -t life -o ro /dev/dna /genetic/research ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-12 Thread Valeri Galtsev
Great, thanks! It looks like I will survive even if they drop "iptables-service" in some future to come. Just for my understanding which of the following is incorrect: 1. firewalld is a front end to the iptables kernel module (pretty much as "iptables-service" is) 2. therefore the rules syntax is

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-12 Thread Jonathan Billings
On Tue, Aug 12, 2014 at 09:59:17AM -0500, Valeri Galtsev wrote: > > Wonderful! > > Can you do with firewalld an equivalent of the following done with iptables: > > :SSHSCAN - [0:0] > -A INPUT -p tcp --dport 22 -m state --state NEW -j SSHSCAN > -A SSHSCAN -m recent --set --name SSH > -A SSHSCAN -m

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-12 Thread Always Learning
On Mon, 2014-08-11 at 21:19 -0700, Kirk Bocek wrote: > I have now been alerted by two list members to the behavior of the > individual involved. I will not allow myself to be baited again. I have blocked his normal and private email addresses on every incoming MTA. Details available. -- Reg

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-12 Thread Always Learning
On Tue, 2014-08-12 at 09:59 -0500, Valeri Galtsev wrote: > Long ago I learned a rule > (what users will expect from a good sysadmin): do not make any changes > unless they are absolutely necessary. The English (non-American) version is "If it ain't broke, don't fix it." So, to use in

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-12 Thread Valeri Galtsev
Wonderful! Can you do with firewalld an equivalent of the following done with iptables: :SSHSCAN - [0:0] -A INPUT -p tcp --dport 22 -m state --state NEW -j SSHSCAN -A SSHSCAN -m recent --set --name SSH -A SSHSCAN -m recent --update --seconds 300 --hitcount 10 --name SSH -j DROP -A INPUT -p tcp --

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-12 Thread Jonathan Billings
On Tue, Aug 12, 2014 at 09:26:17AM -0500, Neil Aggarwal wrote: > > Jonathan: > > > Looking at the documentation closer, there does appear to be a way to > > add rules to the OUTPUT table, using the rich rules syntax. > > Do you see a way to set the default policy to DROP? Most likely, just addin

Re: [CentOS] when will docker 1.1.2 for rhel7 be released?

2014-08-12 Thread Daniel J Walsh
We are working on an update to docker within RHEL7. First we are releasing it to our High Touch Beta process. If you are on HTB you should see a release in the next week. On 08/12/2014 08:54 AM, Jim Perrin wrote: > > On 08/11/2014 07:02 PM, Dennis Jacobfeuerborn wrote: > >> Looks like docker-io

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-12 Thread Neil Aggarwal
Jonathan: > Looking at the documentation closer, there does appear to be a way to > add rules to the OUTPUT table, using the rich rules syntax. Do you see a way to set the default policy to DROP? Thanks, Neil -- Neil Aggarwal, (972) 834-1565 We lend money to investors to buy or refinance sing

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-12 Thread Alexander Dalloz
Am 2014-08-08 23:55, schrieb Neil Aggarwal: > Hello all: > > I am looking at the documentation of the new firewalld service in > CentOS 7. > It looks like no matter what I configure with it, outgoing connections > are > still going to be allowed. That does not seem very secure. > > I always se

Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-12 Thread Jonathan Billings
On Fri, Aug 08, 2014 at 04:55:15PM -0500, Neil Aggarwal wrote: > I am looking at the documentation of the new firewalld service in CentOS 7. > It looks like no matter what I configure with it, outgoing connections are > still going to be allowed. That does not seem very secure. Looking at the doc

Re: [CentOS] when will docker 1.1.2 for rhel7 be released?

2014-08-12 Thread Jim Perrin
On 08/11/2014 07:02 PM, Dennis Jacobfeuerborn wrote: > Looks like docker-io-1.0.0 is available in EPEL: > http://dl.fedoraproject.org/pub/epel/beta/7/x86_64/repoview/docker-io.html This package is due to be removed from EPEL soon, because of EPEL's policy of not competing/conflicting with base

[CentOS] CentOS-announce Digest, Vol 114, Issue 6

2014-08-12 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-requ..

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

2014-08-12 Thread Alexander Dalloz
Am 12.08.2014 um 00:09 schrieb David Beveridge: > Another alternative to milters is the postfix policy daemons. > The best one to use for block and reject is policyd-weight. > found here http://www.policyd-weight.org/ > > This gives spam a weight based on a number of factors. > I setup to do this

Re: [CentOS] Use postfix and spamd on CentOS 6 - looking for a shortest guide

2014-08-12 Thread Alexander Farber
Hello again, here is my solution on how to use Postfix + Spamassassin on CentOS in 4 steps: 1) yum install spamassassin 2) useradd spam 3) Add the following line to /etc/postfix/header_checks: /^Subject: \[SPAM\]/ DISCARD 4) Add the following lines to /etc/postfix/master.cf: smtp ine