Re: [CentOS] Local Privilege Escalation

2013-05-14 Thread Banyan He
Did anyone try 6.x other than 6.4 what I mean? I don't have the server to try right now. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 5/14/13 9:52 AM, Eero Volotinen wrote: Yep, works also on my centos 6.4 box. -- Eero 2013/5/14 Tom Brown t...@ng23.net

Re: [CentOS] fail2ban problem

2013-04-10 Thread Banyan He
Try strace to follow all fork/exec to see which command is invalid. Or, debug log? Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 4/10/2013 6:06 PM, Nikos Gatsis - Qbit wrote: Hello list I'm trying to setup fail2ban specially sasl action but I'm facing

Re: [CentOS] What about port 2048 for GRE(47) packaged in ip protocol

2013-04-10 Thread Banyan He
I remember I saw this behavior before. Mostly important thing is to find out if the enc/dec goes well. I was having this problem that triggers kernel to send out the icmp. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 4/10/2013 5:27 PM, yihect wrote

Re: [CentOS] fail2ban problem

2013-04-10 Thread Banyan He
This doesn't look enough for tracking. How about strace? Did you find anything interesting? Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 4/10/2013 6:52 PM, Nikos Gatsis - Qbit wrote: debug: fail2ban.server : INFO Changed logging target to /var/log

Re: [CentOS] fail2ban problem

2013-04-10 Thread Banyan He
strace -s 512 -f -F -p pid e.g. strace -s 512 -f -F -p 19420 You can use -o output to redirect the output to a file. That would be easier to check later then. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 4/10/2013 7:19 PM, Nikos Gatsis - Qbit wrote: yes

Re: [CentOS] How to determine 64 vs 32 bit processor

2013-04-10 Thread Banyan He
you can do this, cat /proc/cpuinfo Then, you can find the model of cpu, google it. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 4/10/2013 9:58 PM, Robert Moskowitz wrote: I have been tied up with other work and Holidays. Now back to some server work

Re: [CentOS] What about port 2048 for GRE(47) packaged in ip protocol

2013-04-10 Thread Banyan He
encryption/decryption I mean. The kernel can't decrypt the packet eventually, kernel sends out the icmp. Just remember this part last time I track it down to the kernel side. You may have to take a look at your application why the gre doesn't setup correctly. Banyan He Blog: http

Re: [CentOS-virt] [CentOS] qemu-kvm high cpu usage with idle windows guest

2013-04-07 Thread Banyan He
Maybe you can print out what it is doing, then try to figure out if they are doing good. My linux works good, never tried windows. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 4/7/2013 10:21 PM, Micky wrote: Windows 2k8 R2 guest with updated virtio drivers

Re: [CentOS] Apache Issue on CentOS 6

2013-04-07 Thread Banyan He
the lead here as I mentioned. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 4/7/2013 12:23 AM, linuxsupport wrote: There is no problem with the hardware, If I installed CentOS 5 then it works well, at a time out of total 44 concurrent requests 34 were in reading

Re: [CentOS] Apache Issue on CentOS 6

2013-04-07 Thread Banyan He
checking what it goes wrong. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 4/8/2013 1:03 PM, linuxsupport wrote: your both el5 and el6 Apache status show lots of R -- Reading On Mon, Apr 8, 2013 at 10:24 AM, Banyan He ban...@rootong.com mailto:ban

Re: [CentOS] Apache Issue on CentOS 6

2013-04-05 Thread Banyan He
I'd recommend you to sort out the connections. Find out if they are coming from the same client or the same subnet of the clients. Doing a simple tcpdump capture to analyze the data seeing if it's a good R or a bad R. Don't really think it's because of the version. Banyan He Blog

Re: [CentOS] What is bind97 and what are the differences to bind

2013-04-04 Thread Banyan He
Just some different versions. Here you go, bind.x86_64 30:9.3.6-20.P1.el5_8.5 base bind97.x86_64 32:9.7.0-17.P2.el5 base As you can see, bind is 9.3.6-20.P1, and bind97 is 9.7.0-17.P2. Banyan He Blog: http://www.rootong.com Email: ban

Re: [CentOS] Vsftpd configuration problem

2013-04-01 Thread Banyan He
will send out port unreachable ICMP? Maybe you can do a tcpdump to see what it is going on. For PASV, you can only use host client and host server and tcp and not port 22 as the filter. It's not effective but it will collect what you want to locate the issue. Best regards, Banyan He

Re: [CentOS] nagios 3.5 for rpm repository for centos 5

2013-03-31 Thread Banyan He
is it what you are looking for? http://pkgs.org/centos-5-rhel-5/centalt-x86_64/nagios-3.5.0-1.el5.x86_64.rpm.html Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 3/30/2013 8:03 PM, Eero Volotinen wrote: Hi List, Is there any good rpm repository that provides

Re: [CentOS] C6: tcp-wrapping pop3?

2013-03-31 Thread Banyan He
I remember on the left side of the colon, it should be the name of the daemon. Then, tcp-wrapped is able to map it. So, just have to find out what the name of the process is. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 4/1/2013 4:37 AM, Max Pyziur wrote

Re: [CentOS] Kernel 2.6.32-358 networking issues...

2013-03-27 Thread Banyan He
. To openvpn, you can use strace for a single connection test. But capture first. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 3/27/2013 9:39 PM, John Doe wrote: Hi, after a long general power failure, I had to power off/on my soon to be 6.4 firewall (updated

Re: [CentOS] How to make a network interface come up automatically on link up?

2013-03-23 Thread Banyan He
what do you find in dmesg and /var/log/messages? The system should bring it up automatically. If not, you should get an error for the prompts. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 3/24/2013 10:27 AM, Joakim Ziegler wrote: I have a recently installed

Re: [CentOS] Network interface status

2013-03-21 Thread Banyan He
Maybe you will like ethtool from now. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 3/21/2013 5:21 PM, isdtor wrote: Under CentOS6, is it possible to get an interface to RUNNING state without assigning a (dummy) IP address? # ifconfig em2 em2 Link

Re: [CentOS] posfix admin issue

2013-03-21 Thread Banyan He
will not be directly to login page. BTW, some codes will check the existence of the setup files. If they do exist, you won't be able to login to the admin page. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 3/21/2013 5:06 PM, Austin Einter wrote: Dear All I had

Re: [CentOS] Routing

2013-03-20 Thread Banyan He
table smtp Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 3/20/2013 7:37 PM, Tom Grace wrote: On 20/03/13 11:28, Prabhpal S. Mavi wrote: Is it possible that i can identify the source traffic and forward it to the specific interface. i.e. Remote packet coming

Re: [CentOS] change /etc/security/limits.conf need reboot or not?

2013-03-20 Thread Banyan He
I rmeember you can just exist the shell and log on again to apply the changes. Not really a reboot. You can check it with ulimit -a for the list items of the changes. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 3/21/2013 2:52 AM, mcclnx mcc wrote: We have

Re: [CentOS] CentOS: Install Packages Via yum Command Using DVD / CD as Repo

2013-03-20 Thread Banyan He
You have to check the content of the file here for the path. |/etc/yum.repos.d/CentOS-Media.repo| The file is deleted on my server. No samples from me then. Sorry :) Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 3/21/2013 8:00 AM, Al Sparks wrote: I'm

Re: [CentOS] DNS problem

2013-03-18 Thread Banyan He
, Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 3/18/2013 4:04 PM, Weplica wrote: Hello, I just get a server with CentOS 6.4, I have install Webmin and Vitualmin running OK, but I can't run correctly DNS server. I set hostname: dns.maca.li Resolution order

Re: [CentOS] DNS problem

2013-03-18 Thread Banyan He
what do they access to? How to access? How's the verification being handled here? Maybe a capture on port 53 explains everything. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 3/19/2013 1:15 AM, Weplica wrote: Hi, Actually, the website is found, but when I

Re: [CentOS] can not login to server (use ssh)

2013-03-01 Thread Banyan He
you can use the command ulimit to make the change first and change the file as well effecting permanently. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2/28/2013 3:45 AM, mcclnx mcc wrote: very possible this problem cause by /etc/security/limits.conf

Re: [CentOS] suricata-ids for centos 5 ?

2013-02-18 Thread Banyan He
I thought somewhere they say there is no official RPM from them. The users can only build them up themselves. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2/19/2013 10:28 AM, Eero Volotinen wrote: Url? eero On Tuesday, February 19, 2013, Mark LaPierre

Re: [CentOS] CentOS 6.3 as Firewall/Router

2013-01-06 Thread Banyan He
fwbuilder+quagga is a great choice. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 1/5/2013 11:13 PM, m...@tdiehl.org wrote: On Fri, 4 Jan 2013, Steve Campbell wrote: On 1/4/2013 12:21 PM, Tim Evans wrote: On 01/04/2013 12:01 PM, Tim Evans wrote: I'm

Re: [CentOS] ldap_bind parse result: Decoding error (-4).

2012-11-25 Thread Banyan He
seeing if you can get more from -v and -d ALL or -d 0x7FFF It is good to take a look at your base file. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-24 9:35 PM, Kaushal Shriyan wrote: Hi, Any clue about this error /usr/bin/ldapadd -x -W -D cn

Re: [CentOS] centos 6.3, cron and mail script output

2012-11-23 Thread Banyan He
-parts /etc/cron.weekly 42 4 1 * * root run-parts /etc/cron.monthly Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-23 3:52 PM, Mihamina Rakotomandimby wrote: Hi all I have a '/etc/cron.daily/push-to-backup' script which the content is: #!/bin/bash

Re: [CentOS] selinux policy and httpd

2012-11-21 Thread Banyan He
tried to install a new centos6.3 and apache. No luck to reproduce what you've been through. Don't know what the error is you had but I dont get any error from my log files. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-21 9:08 PM, mark wrote: On 11

Re: [CentOS] ip6tables REJECT target 3s timeout

2012-11-21 Thread Banyan He
how about telnet yourself via the lo interface? Is there something different then? Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-22 12:40 AM, Markus Falb wrote: Hi, I am trying to get ipv6 firewall running. I did a very simple ip6tables rules

Re: [CentOS] selinux policy and httpd

2012-11-20 Thread Banyan He
what's the error? How do you produce it? Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-21 4:56 AM, m.r...@5-cent.us wrote: I upgraded a development server last week, and it started spewing selinux errors to the log. I googled. What finally *seems

Re: [CentOS] System-Administation-Network

2012-11-20 Thread Banyan He
you can find the details here, http://www.centos.org/docs/4/html/rhd-dg-en-4/ch-ddg-menus.html Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-20 9:12 PM, Steve Campbell wrote: Banyan, I don't follow what you are describing or how to recreate the menu

Re: [CentOS] SAMBA and Active Directory Intergration Problem

2012-11-19 Thread Banyan He
There are two things you can do, 1. for homes share, add path = /path/to/home/%S 2. for homes share, change mask from 0775 to 0700 This may help but may not the way you are looking for. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-19 5:10 PM, Bonnie

Re: [CentOS] upstream Storage Server fully OSS?

2012-11-19 Thread Banyan He
. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-20 1:12 AM, Les Mikesell wrote: On Mon, Nov 19, 2012 at 7:48 AM, Ted Miller tedli...@sbcglobal.net wrote: If RHSS is not available or suitable, other suggestions welcome. I need a file system/server

Re: [CentOS] System-Administation-Network

2012-11-19 Thread Banyan He
recreate the menu item and put the command system-config-network over there. You can regain your menu back then. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-20 3:43 AM, Steve Campbell wrote: On 11/19/2012 2:06 PM, Frank Cox wrote: On Mon, 19 Nov

Re: [CentOS] crush after update

2012-11-17 Thread Banyan He
error? log? screenshot? backstrace? Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-17 11:53 PM, Hossein Lanjanian wrote: Hi every body! I installed centos 6 64bit on my sony labtop. I updated it`s kernel by yum command, and rebooted it. But it crush

Re: [CentOS] Postfix dont work

2012-11-15 Thread Banyan He
to doesn't like what they have So, maillog will tell you about it more. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-16 2:18 AM, Andrei Rolando León Salas wrote: Hi, i send a email to my server but i get Technical details of permanent failure: Google tried

Re: [CentOS] lshw on a newer Dell

2012-11-15 Thread Banyan He
Check out your opcode what it is if it's the new firmware or what. Looks like it just doesn't understand how to read the data in this device. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-16 5:20 AM, m.r...@5-cent.us wrote: m.r...@5-cent.us wrote

Re: [CentOS] Install error - disc 2

2012-11-14 Thread Banyan He
what's the package the system is installing? Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-14 11:01 PM, Burt Hailey wrote: I am doing a fresh install of 6.3 from DVDs that I created on a Windows laptop. I used ImgBurn to create them. When I started

Re: [CentOS] mce error

2012-11-13 Thread Banyan He
Just check the config to build the edac_mce module if you don't build it in. CONFIG_EDAC_MCE=y Make sure you have this in the /boot/config-. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-13 8:12 PM, Ted Miller wrote: During booting of Centos6 I

Re: [CentOS] JPackage repo - is it good?

2012-11-13 Thread Banyan He
you can use YUM to download the packages first before installing them. Just doing some verification. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11-13 10:51 PM, Rafał Radecki wrote: Hi all. I am installing solr and would like to use JPackage repo

Re: [CentOS] mce error

2012-11-13 Thread Banyan He
(stderr, CPU is unsupported\n); exit(1); } The routine is_cpu_supported reads the data from /proc/cpuinfo for the family number. You got stuck here then. You can change the code from =15 to 15. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-11

Re: [CentOS] CentOS6 LDAP Authentication.

2012-10-27 Thread Banyan He
I think it's better checking it one by one. 1. check where it stuck arp/ip/tcp There is gonna be a layer to take the responsibility. 2. check if the ldaps works fine in Centos6 to the server tcpdump 3. decrypt the traffic seeing if the protocol goes well ssldump Banyan He Blog

Re: [CentOS] Network issue - Windows works but CentOS does not

2012-10-27 Thread Banyan He
or some others. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-10-28 1:54 AM, xrx wrote: I am having an extremely strange issue with a BL460c1 (G1) blade on a c7000 enclosure. I could not for the life of me get the machine to ping the gateway or any other

Re: [CentOS] 8139 dropping packets

2012-10-27 Thread Banyan He
Is there any chances you can send in the stats of the interface? Just show if the driver says why it's being dropped. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-10-28 4:40 AM, Jerry Geis wrote: I have a CentOS 5.8 box that is dropping packets (just

Re: [CentOS] fsck.ext4 problem 64bit

2012-10-25 Thread Banyan He
Try this out to find out who complains the arch, strace fsck.ext4 /dev/md5. Post the output here that we can check more if it's from the app or the kernel. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-10-25 5:10 PM, Steve Brooks wrote: Hi All, Trying

Re: [CentOS] fsck.ext4 problem 64bit

2012-10-25 Thread Banyan He
)); } } putc('\n', stderr); goto get_newer; } Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-10-25 5:10 PM, Steve Brooks wrote: Hi All, Trying to run fsck on a local linux raid partition gave the following. [root

Re: [CentOS] mount -o loop question.

2012-10-24 Thread Banyan He
exactly, that's a wise choice. Best regards, Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-10-24 1:45 PM, Jobst Schmalenbach wrote: On Tue, Oct 23, 2012 at 08:08:38AM -0500, Robert Nichols (rnicholsnos...@comcast.net) wrote: On 10/23/2012 03:44 AM

Re: [CentOS] mount -o loop question.

2012-10-23 Thread Banyan He
again to me. I don't think we can do it. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-10-23 2:08 PM, Jobst Schmalenbach wrote: Hi, I know I can create a file and mount it like this: dd if=/dev/zero of=/tmp/somefile bs=1024 count=10 mke2fs /tmp

Re: [CentOS] mount -o loop question.

2012-10-23 Thread Banyan He
btw, here is the way to append more bytes on the tail, dd if=/dev/zero of=myfile bs=1 count=no_of_bytes seek=$(stat -c%s myfile) Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-10-23 2:08 PM, Jobst Schmalenbach wrote: Hi, I know I can create a file

Re: [CentOS] Assign external esata drive to KVM

2012-10-20 Thread Banyan He
. There is no point to use USB in this case. Banyan He Blog: http://www.rootong.com Email: ban...@rootong.com On 2012-10-21 12:39 AM, Kanwar Ranbir Sandhu wrote: Hello Everyone, I have a CentOS 6.3 host running a few KVMs. One of them is a CentOS 6.3 KVM that I want to use for making