Re: [CentOS] Dag's comment at linuxtag

2009-07-03 Thread RobertH

enough is enough already.

can some centos admin please discipline, ban and/or get rid of Radu-Cristian
FOTESCU aka beranger...@yahoo.ca

please?

not only has he physically threatened a contributor, his language  behavior
are more than inappropriate for such a professional atmosphere that has been
developed and become a long term testimony at centos.org

it is most difficult, yet i will resist any further comment at this time.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RHEL, centos and seeing if i now understand this

2009-06-24 Thread RobertH
 

 Subject: Re: [CentOS] RHEL, centos and seeing if i now understand this
 
 On Wed, 24 Jun 2009, Spiro Harvey wrote:
 
  Robert P. J. Day rpj...@crashcourse.ca wrote:
 ok, given the flurry of responses to my original post, 
 let me see 
   if i have a handle on this as i think i've finally figured it out 
   and, yes, it does make sense.
 
  This also would have been clear had you done some research 
 in advance 
  of your postings here -- not very thorough for someone who 
 appears to 
  have to support himself (and possibly his family) via consultancy 
  work.
 
  Ask yourself: What does paying money to Redhat get me? And then go 
  read up on their website.
 
   the issue was not what support was available from *redhat*, 
 it was trying to clarify what was available from the *centos* 
 community.
 but thanks for playing.
 
 rday
 --
 
 ==
 ==
 Robert P. J. Day   Waterloo, 

Mr Day

so, you started a 2nd thread on basically the same thing because the link
to commercial support page isn't really helpful thread you started wasnt
helping anymore?

so, do you really understand now, or will you be starting another thread to
see if you understand the second thread about understanding the first
thread??

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Rsync, SSH and authorized_keys problem

2009-06-17 Thread RobertH

stewart,

try this website using anything other than msie browser.

http://www.jms1.net/code/rsync-backup.shtml

this code has been most excellent for meeting many basic needs.

:-)

dont forget to give jms1 a shout of thanks

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] NAS Storage server question

2009-06-11 Thread RobertH
 

 
 Briefly, but iet has been rock stable for me. It just runs forever...
 I have only used NFS under vmware, it worked good.
 
 jlc
 ___

jlc,

what has been rock stable?

can you be more specific on the implementaion?

are you saying it or iet

if iet what is that?

;-)

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] resolving names it is really slow slow with CentOS5.x using named

2009-05-25 Thread RobertH

ive read most of the thread, yet not all. forgive me as i might have missed
some of this below in helping...

carlopmart,

what is in your /etc/resolv.conf

is it configured correctly?

are you using ipv6?

if not, is it fully disabled / turned off?

in modprobe.conf put

alias net-pf-10 off
alias ipv6 off

reboot...

also, are you loading those other opsys on the same machine and getting good
results or different machines?

testing other opsys on different hardware could be problematic.

did you bother to check the physical ports to see if any problems in the
switch or with ethtool on the server interface ?

thoughtfully consinder following advise of others re: tcp and dns

cables...

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to run command as apache?

2009-05-10 Thread RobertH

 
 I don't want to change its shell to a valid shell.  It should 
 be a locked account.
 
   Neil

neil,

[r...@sa1 ~]# su -s /bin/sh apache -c whoami

apache

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] centos 4.7 - logwatch - and perl script applytaidate

2009-04-05 Thread RobertH

does anyone have a working perl script called applytaidate that works on
latest centos 4 that they would please share?

i am working on learning more about logwatch and the half dozen
applytaidate scripts i have tried have all bombed and were not easily
discernable to fix

thanks in advance!

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Getting ready for CentOS 5.4

2009-03-31 Thread RobertH

this getting ready for centos 5.4 thread...

i am not following it... yet...

did we time warp and lose 5.3, being trashcanned and now waiting on 5.4?

microsoft didnt buy out the centos faithful did they?

;-

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Getting ready for CentOS 5.4

2009-03-31 Thread RobertH

waiting for 5.5, that is funny...

:-)

heheh, no, really, what happened to 5.3?

-rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Getting ready for CentOS 5.4

2009-03-31 Thread RobertH
 

 Brian Mathis wrote:
 Sent: Tuesday, March 31, 2009
 
 If you read any of the previous 90 messages, you'd know that 
 they are talking about ways to plan for the *future* release 
 of 5.4 and is asking how the community can help to try to 
 prevent the delays that have happened with 5.3.
 

brian. hm, i see.

read a few. wasnt able to discern in a few.

having been on the list like forever, i know better than to whine for an
update so i have just been patiently waiting knowing it would be ready when
it is ready.

bottom line is i dont want to read 90 messages to figure it out, especially
when AFAIK centos 5.3 wasnt even released yet...

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] I see 5.3 ISO images on the mirrors

2009-03-31 Thread RobertH

 
 For 5.x to 5.3, you must:
 
 # yum update glibc
 # yum update
 
 You need to update glibc first  (upstream bug I believe).
 
 
 d

if this is so, is there a link to this on upstream website that someone
already has booked?

please share

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] live audio feed via telephone link

2009-03-30 Thread RobertH
yes

i would explore  consider moving the offices too, especially if you can do
what you want with a dedicated conditioned business line from old office to
new office and then send out on a reliable lower cost internet link.

maybe good pots if you have to.

like you said, it all depends on the costs

if it fails, which should be rare, you can always drive to the old office
space and go live there.

yet do explore the dedicated radios from the office to the tower to the
remote end too...

maybe you could make some extra money as a business WISP.

:-)

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to add ClamAV to Postfix?

2009-03-23 Thread RobertH

the crash-hat ftp server for clamav has been older version  behind the
times for a long time now.

better to roll you own clamav or get it from sourceforge via dag and dries
etc

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] PAM and vsftpd

2009-03-01 Thread RobertH
i have been researching for alternatives.

it is latest centos 4 (4.7) and uses vsftpd 2.01

started (again) investigating possible PAM or PAM module way...

Q: is there a PAM way to control repeated crack retires on vsftpd?

possibly something that can be done in /etc/pam.d/vsftpd

i have been looking for a solution other than fail2ban and/or similar
methods using hosts.allow and hosts.deny or iptables

specifically, i am trying to stop repeated access to vsftpd after more than
x attempts from the same ip address

thanks in advance for any pointers..

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] PAM and vsftpd

2009-03-01 Thread RobertH
of course, replying to own post.

gigegigegige  ;-

what i found was

pam_abl

http://www.hexten.net/wiki/index.php/Pam_abl

it is in dag land.

search for   pam_abl dag rpm

does anyone have an experience they are willing to share with the group re:
pam_abl ?

thanks in advance

 - rh


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] probem with bind???

2009-02-21 Thread RobertH

 Feb 22 09:14:52 kmdns1 named[2087]: client 62.109.4.89#59870: query
 (cache) './NS/IN' denied
 
 now in my firewall i tryied to block this ip but the messages 
 dont stop
 
 i also upgraded bind to version bind-9.3.4-6.0.3.P1.el5_2 but 
 no avail the problem still there
 
 
 i jus like to know whts this problem and how could i solve it
 
 is there a problem with my DNS server
 
 thnks and regards
 
 apprecite your kind help
 
 
 fabian

fabian, 

you might try something like the bad-guys acl i setup a long time ago in
named.conf

change the ips as you see fit



// Default named.conf generated by install of bind-9.2.4-2
//
// r.initials August 29 2005
//
acl bad-guys {
201.114.231.0/24;
201.114.236.0/24;
};
logging {
category lame-servers { null; };
};
options {
version Bind;
directory /var/named; // working directory
listen-on { 127.0.0.1; redactedx.y.z.a; };
listen-on-v6 { none; };
allow-transfer { redactedx.y.z.a; redactedx.y.z.b;};
blackhole { bad-guys; };
dump-file /var/named/data/cache_dump.db;
statistics-file /var/named/data/named_stats.txt;
//  pid-file named.pid;   // Put pid file in working
dir
allow-query { any; };   // This is the default
recursion yes; // Do provide recursive service  or not???
};
include /etc/rndc.key;

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] boot problem with centos

2009-02-02 Thread RobertH
 

 
 I have a Centos 5.2 server used as a squid proxy server for 
 quite sometime and was workin fine
 
 after a power failure the system refused to boot
 
 i jus see the grub boot load screen n then hangs
 
 so using the space bar n with the arrow keys i selected my 
 earlier kernel and it booted fine
 
 i think that the latest kernel file i have that 
 isvmlinuz-2.6.18-92.1.17.el5xen is corrupted.
 
 how could i restore it back
 
 will yum upgrade solve the problem
 
 
 appreciate ur help
 
 
 regards
 
 fabian

fabian,

if you installed from rpm - you could do this

rpm -qa | grep kernel

then whatever it puts out remove the bad one with

yum remove whateverkernel

then reboot and yum update to that kernel again

if it is hand rolled and installed, i dont have the info for you and you
should know how to do that yourself

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] difference in x86 64 bit centos between 4.x and 5.xversions

2009-01-29 Thread RobertH

 
 My opinion is to first determine a few issues.
 
 How much RAM will it need?  If over 3GB of physical RAM, 
 consider 64 bit.
 Are there third party applications you need to run on it?  If they are
 64 bit, that answers the question too.  If 32 bit, are they 
 supported on 64 bit OS?  Do they have different versions for 
 32 and 64 bit?
 

lots of good info to ponder back from those that responded.

what i a getting at is, why would one use x86 64 bit Centos version 4.7 when
one can get the same in x86 64bit Centos 5.2 or later version?

is there a reason to stay with the older version other than for specific
deprecated hardware issues or something else?

is 64 bit Centos 5 just plain better OR would some of you choose 4.7 over
5.x and why?

 - rh 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] it's that time again - lj rca's

2009-01-29 Thread RobertH

it is that time again to let your choices be known in one of the mainstream
journals

http://www.linuxjournal.com/content/readers-choice-awards

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] difference in x86 64 bit centos between 4.x and 5.x versions

2009-01-28 Thread RobertH

i am new to the x86 64 bit centos versions.

ive always used the 32 bit version on industrial type HP hardware

for those of you that are running x86 64 bit centos, other than specific
hardware issues, are you finding that 5.x centos is better than 4.x centos
for x86 64 bit processing?

does it matter in the amd vrs intel hardware differences what you choose to
use for centos version?

other things to make note of?

if i need to be more specific in the general-ness of the approach, please
let me know.

thanks in advance for feedback.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] getting Centos on used rackable systems 1U with dual Opteron 248 HE

2009-01-27 Thread RobertH
hi there.

anyone have any tips on params to pass to the kernel etc in order to install
Centos4 or Centos5 32bit or 64 bit installed on this unit

i can get it close to install, yet no cigar.

it is a tyan MB and ill try to get more info if needed...

for this case, please assume for now that the hardware itself is not bad

thanks in advance...

 - rh

Rackable Systems Dual Opteron 2.0 GHz 1U Half-Depth Server 

General Features: 
No Server Operating System 
Dual AMD Opteron 246 HE (OSK246CMP5AU) 2.0 GHz processors 
4 GB DDR RAM  
120 GB IDE hard drive 
ATI Rage XL integrated video 
Broadcom BCM5704 Gigabit Ethernet 


Motherboard Features: 
AMD-8111 chipset 
One (1) PCI-X riser slot 
Eight (8) DDR DIMM sockets  


Front I/O Ports: 
Two (2) PS/2 ports 
One (1) 15-pin VGA port 
One (1) 9-pin serial port  
Two (2) USB ports 
Two (2) RJ-45 Ethernet jacks 


Case Features: 
1U half-depth server chassis 
One (1) 3.5-inch drive bay 
Four rear cooling fans 
400-watt power supply 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] getting Centos on used rackable systems 1U withdualOpteron 248 HE

2009-01-27 Thread RobertH
 

 Subject: Re: [CentOS] getting Centos on used rackable 
 systems 1U withdualOpteron 248 HE
 
 hi robert...
 
 what issues are you having? what params are you using as of now...
 
 
 

u basically with centos 4 or 5 64 bit, it is freezing when i get to the
partitioning and want to continue forward or after partitioning and moving
towards the um place where one chooses software.

4.7 seems to work better than 5.2

would not work in graphical install mode. hangs

so i went to

linux text

...and i am not using any kernel params *yet* other than one time i tried

nousb nousbstorage skipddc

just for the heck of it, which worked on old compaq DL380 servers hehehehe
;-)

what i will try next is to turn off power mgmt and apic or whatever

i was wondering if others had bought any of these boxes and played with them
yet. they are pretty cheap and i have been looking for some cheap rackmount
boxes that i can throw large ata ide drives in to do some things with

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Support for i7 architecture?

2009-01-23 Thread RobertH
did anyone give insight into the OP question, or is this just email bashing
class 099 ?

:-o

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache Server Tuning for Performance

2009-01-21 Thread RobertH

 
  KeepAliveTimeout 150
 
reduce this to 10 or 5.
 
 
 Kai
 
 --
 Kai Schätzl, Berlin, Germany

Kai,

what do you think about the general Timeout

it is set to 300

ive never much thought about it, yet should we be consider and possible
reduce that one too?

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] 2 internet connections and one for backup

2008-12-29 Thread RobertH


the part that really clear is that posting about posting is a something not
mentionable anywhere at anytime.

how about a solution people?

like have a cup of caffeine and .

or maybe the list daddies can be baby sitters OFF LIST and everyone else can


 - rh


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] how can I stress a server?

2008-11-21 Thread RobertH
 

 
 Sorry, I overlooked that. Doesn't change the rest of what I 
 wrote, though.
 
 Kai
 

kai,

dont be sorry, i miss things in email here and there too.

im make more *general* mistakes than anyone ive ever met.

yet, when such inexpensive, need meeting, industrial hardware is available,
i just cannot imagine building and fighting with higher cost frequently less
reliable systems unless there are *a lot* of substantive reasons to justify
it.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] how can I stress a server?

2008-11-20 Thread RobertH
 

 
 I wasn't rejecting server grade hardware. I was a bit 
 irritated by the fact that I don't have server grade 
 hardware, and every says get proper hardware. It ticked me 
 off a bit that only a server can be good, and not a standard 
 desktop which is also used to serve content to many people 
 over the net.
 

Rudi,

dont be irritated. you can afford server grade hardware no prob.

goto ebay and search for

DL380 G3 Dual

or

DL360 G3 Dual

both units do hardware raid stock. if you need more that 72GB hotswap
hardware RAID1 total disk space, get a DL380 now or if over time disk space
needs to grow a lot. DL380 will do hardware raid 1 and 5.

the space you need and the scsi drives you purchase will be the larger cost
factor depending on your decisions. the hot swap drives above 72gb in size
will be the limiting factor in price if you want huge drives. 72gb and below
are very inexpensive

your current machine can serve, and possibly meet your needs, yet it wasnt
designed to be a set and forget *server*

we regularly see these machines for 50 to 150 dollars and with drives add
another 50 to 100 bucks unless you need to go qty or super large.

or get a buy it now package of some sort.

way less expensive and much more reliable than any wothwhile desktops out
there.

the only drawback is knowing who to buy from and who not to because of
shipping costs and if the seller is a pro and packs properly.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] how can I stress a server?

2008-11-20 Thread RobertH
 

 
 And how does he squeeze that in 1U?
 
 AFAIR, Rudi's located in South Africa and has already stated 
 several times that prices there for servergrade stuff are not 
 as cheap as you can get it in some other areas of the world. 
 May apply for Ebay deliveries to SA as well (if they ship at 
 all to SA). And, looking at the Ebay ads, I sure wouldn't buy 
 such a machine. 
 I can understand that Rudi builds his own servers in that 
 situation, I do this sometimes as well. One thing what I 
 would have avoided if possible, though, is buy a board with 
 such a new chipset that you can't even get lm_sensors to run. 
 (Or you didn't research too well, Rudi. You can upgrade 
 lm_sensors from rpmforge and you can get coretemp.ko patches 
 for some chipsets. I had to do this myself for an oldish 
 Intel 5000 server
 chipset.) That's another thing where server-grade stuff comes 
 nice into
 play: the machines usually include BMC, so you are not 
 dependant on lm_sensors and kernel.
 
 Kai
 
 --


Kai,

it can be purcased and shipped to him, no biggie.

:-)

you ask how does a DL380 G3 fit in 1U?

not a bright question. dont care.

:-)

all previous info was FYI

it was noted in the email the DL360 G3 unit as well. it is 1U

dont care  doesnt matter if you wont buy said equipment.

i have built between 600 to 1000 computers and would still rather have
industrial type hardware if at all possible.

for all of you on a serious budget and you want long term bullet proof basic
server, the hardware mentioned does a most excellent job as do the G4 scsi
units.

they have hot swap hardware raid scsi drives  they also can be purchased
with dual hot swap redundant power supplies  have what are called ILO ports
so you can get into the machine from remote and power it on or off or see
and interact with the console from remote (just like you were there in
person) if you accidentally foobar a box and cannot get into it with ssh
etc.

way better than a home build in many circumstances, yet not all, of course.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] windows auth in linux world

2008-11-06 Thread RobertH

it is not my expertise so i need to get some direction please so i can
google better on this one.

looks like to many choices and i am sure some are time wasters.

for those of you that have done it, what is your recommendation on the
absolute easiest / fastest implementation to get a centos file (space)
server to auth from a windows domain controller?

do you need more info?

i know i do and have asked the windows admin if we need more than a login
and password or login/domain and password etc.

thanks in advance.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Recent CentOS4 kernel update

2008-10-20 Thread RobertH
 

 
 Also the kernel-doc-2.6.9-78.0.5.EL.noarch.rpm package is 
 missing from that updates directory on the mirrors, though it 
 was released upstream
 
 http://rhn.redhat.com/errata/RHBA-2008-0859.html
 

anyone?

ummm i was thinking, i seem to recall that the upstream kernel was foob'd
and causing major problems

isnt why this one is out so soon?

correct?

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] problem with dns

2008-10-13 Thread RobertH
 

 


yes i already installed bind but when i want to configurate i don't find the
file or the right file


  


  

 

 

 

Try this

 

cd /etc

ls -axl named.conf

 

if you do not see it or a symlink to where it really is, then do what the
others suggested and try the find command or samples area

 

when you install bind and chroot bind stuff it would go here

 

cd /var/named

 

then

 

ls -axl

 

and look around chroot dir etc

 

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Re: mysqld breaks yum, help?

2008-10-05 Thread RobertH

 
 z00dax in irc made a good point, that I should mention that this is a
 VPS and i have root access. No one else is on this machine.
 
 Furthermore, disabling the fastestmirror plugin solves the problem
 for now. (thanks z00dax)
 
 If anything else weird happens i'll write back.
 
 Thanks for the help.
 

Dac

Interesting...

Why does disabling something that the centos website says is highly
recommended (multiple times) fix this issue?

For those that do not know, you can disable this plugin by removing it or by
going to the /etc/yum directory, and then go to the plugin directory below
there and editing the proper file and zeroing out the enable line

 -rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Centos and colocation....

2008-09-24 Thread RobertH
Good job Bob,

Now you get to do it again for redundancy just in case the main box
somehow croaks, ya gotta be auto failover redundant, or have a hot or cold
spare sync'd

Surprise!

:-)

Wake up and get to work!

;-

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] DKIM

2008-09-24 Thread RobertH


 Okay,
 Yahoo is bumming me. Only system my mail is having an issue with. All mail
 is accepted, but junked. I can only think it is the DKIM/Domain keys.
 
 It is apparent that the dkim-milter is not part of the centos 5.x distro
 nor
 is it part of the mirrors, as far as I can tell.
 
 So...have any of you done it with your servers for sendmail?
 
 There are some sites that claim to have rpms and I have downloaded the tar
 from sendmail. But I would rather hear from anyone who has an opinion
 before
 I go with one or the other.
 
 I do not trust any rpms except for their mirrors, so not sure if I want to
 do that. But maybe it is fine.
 
 Open to suggestions, ideas for what works for you and yahoo.
 
 
 No, I do not want to install postfix, thank you - /ninja'd ya
 

Bob

Setup proper SPF records for your domain(s) for one.

As far as the dk or dkim stuff, there should be some howto's out there in
relation to centos and other mailservers acceptance of signed emails

 - rh


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] DKIM

2008-09-24 Thread RobertH

 
 That's supposed to help with what regarding his problem? OTOH I have no
 idea
 which problem SPF solves anyway other than making it harder for others to
 use your domain for fake adresses (if receiving mail servers do some sort
 of
 check against SPF).
 
 Ralph

Ralph,

He asked for help with yahoo re: dkim and any other advice...

So I groped his dns a little and checked forward and reverse and then txt
records etc etc

Then I said

Setup proper SPF records for your domain(s) for one.

Most properly setup mail servers do some sort of SPF checking nowadays and
use the info at SMTP time or later in something like spamassasssin scoring
etc

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] DKIM

2008-09-24 Thread RobertH
 
 I am pretty sure I am not bouncing mails...I have catchalls and they go to
 devnull..however I could be wrong since that only affects my domain mails
 only. I am sure there is something else I should do.
 

Bob

I am not sure why or what your basic policy on it is yet I think it is
better to not accept an email for an email address that does not exist than
to blanket accept anything and /dev/null it

Just an observation that might save you some abuse headaches in the future.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Re: DKIM

2008-09-24 Thread RobertH

 
 you'll be beaten to death by SPF fans. 

Isn't beating someone to death is too good for them in regards to spf
fights?

;-

U actually, spf records can possibly just help the cause in general.

There is no reason for people to get all bent outta shape in regards to SPF
or DKIM or whatever.

It is just another potentially helpful tool in a toolbox.

Pick the tool up if you need or want to or do not if you don't.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Re: DKIM

2008-09-24 Thread RobertH
 
 prove what?
 
 if the machine with an rDNS of bobhoffman.com sends mail from
 [EMAIL PROTECTED], and is the MX of this domain, would anybody think
 this is a forgery?
 

Mouss... I mean Ratatouille  :-)

Answer: Possibly

Depends on many factors doesn't it?

I know you are on other lists like SA so I am not sure why you are leading
us down the infinite possibilities path... 

...seeing as you are quite excellent at *nix and *net administration and
implementations.

:-)


 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Request info on managing MySQL

2008-09-20 Thread RobertH

 
 Using a tool like phpMyAdmin might be perfect for you (even if you're
 not lazy).
 
 It's in EPEL, so just add the repo and yum install phpMyAdmin.
 
 Ray

Ray

How would you specifically propose that he protect the phpMyAdmin once it is
installed on a public box?

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Changing hostname?

2008-09-16 Thread RobertH

 
 so, i still say, where's this law for private networks???
 
 
 

BRUCE

I don't need to re-read your posts. Once is more than enough.

Well, that law is the law of common sense

:-)

Then one would not look like as big a moron when their mistakes becomes
public.

If you look at my post, which was before yours, I mentioned that a person
should read / study up on configuring and using their DNS when it involves
public and private ip space.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Changing hostname?

2008-09-13 Thread RobertH

 
 127.0.0.1   localhost.localdomainlocalhost   calimero.local
 calimero
 
 Best Regards
 Marcus

Marcus,

Per man hostname

FILES
   /etc/hosts /etc/sysconfig/network

NOTE
   Note that hostname doesnât change anything permanently. After reboot
original names from /etc/hosts are used again.

:-)

Do you really think one should tie the hostname to the loopback interface in
the /etc/hosts file

We recommend that one should not tie the actual hostname or FQDN to the
loopback interface.

There are very few limited implementation or security seclusion cases where
you would want to consider doing that

It should look like this as example in /etc/hosts

127.0.0.1   localhost.localdomain localhost calimero.local

x.y.z.a calimero.some123domain.com calimero

if the machine is not talking to another machine via network, then the
hostname doesn’t really matter too much now does it?

Put a sticker on it.

;-)

Production server examples can be provided if you are having major issues.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Changing hostname?

2008-09-13 Thread RobertH

Marcus,

Exactly, I have often wondered upstream does it that way so that I always
have to go fix the /etc/hosts file after every CentOS install.

Since functionally, it is wrong.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Changing hostname?

2008-09-13 Thread RobertH

 John R Pierce wrote: 
 indeed, having the hostname bound to the loopback interface seems to
 break a bunch of our java stuff too.first thing we've always had to
 do after a CentOS/RHEL install is change /etc/hosts, and put the
 hostname on its own line with the static IP, or leave it out entirely.
 

John,

Hit that nail on the head and exactly what I was describing.

Thing is, why does upstream and/or other distros do that?

What is the reasoning?

We should understand it if there is such a thing yet it appears many of us
change it regardless.

I do know a several people that are not aware of it when they do installs...
and I have to remind or fix.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] 4.7 update issues?

2008-09-13 Thread RobertH
 
 
 indeed, specifically, did those issues with the broken kernel update get
 sorted out?


I dunno about any kernel issues on mirrors or syncing or whatever...

After a quick backup set check, I bit the bullet on one of our main CentOS
4.6 i386 production boxes and did a full update to CentOS 4.7 i386 yet
excluding the kernel* update in the /etc/yum.conf

Reboot and after quick check, it appears there are no noticeable issues.

As a side note, this particular box started about as an original CentOS4
approx 4 years ago and has been updated many times without one issue.

Again, good work CentOS team and supporters!

 - rh



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] A very interesting cinfiguration page for centos

2008-09-11 Thread RobertH

 
 Thought I would share this..not sure exactly what it is...but I wish I
 could
 pull out my configurations with a program like this...
 
 
 
 http://www.openeyet.nl/scc/examples/scc.centos50.html
 Really cool.
 
 Relly intense view of the whole server.

Bob,

Go to

http://www.openeyet.nl/scc/

and get the software to do it

:-)

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Need help with an odd issue I am experiencing

2008-09-09 Thread RobertH

 
 I have a server with dual nic's running centos 5.2 1 nic connects to the
 cable modem, which has 15m d and 2m up, but speed tests barely come back
 at 5mb down including road runner's internal speed test. I hook up my
 laptop to the same modem, same port, using the same cable and I get 17mb
 down. I have ruled out iptables, nics (because same result on both
 nics), cables, cable modem(with a brighthouse rep) any suggestions would
 be greatly appreciated. Thanks.
 

David,

IME, it is typically (yet not always) a duplex and/or speed issue between
the NIC port and the switch or device it is talking too.

man ethtool

ethtool eth0

and check to see what speed and duplex are currently in use...

if duplex and/or speed are off I typically hard code a *managed* switch and
the centos box on whatever ports as necessary by adding this line or one
similar to it

ETHTOOL_OPTS=speed 100 duplex full autoneg off

To this and other interface files as necessary

/etc/sysconfig/network-scripts/ifcfg-eth0

At this point a reboot will take care of it or if you don't want to reboot
now, Then I would make a little script called downup.sh

ifdown eth0
ifup eth0

and then I chmod 750 that script and then call it like this if from remote

./downup.sh 

So I don't lose connectivity...

There is probably a more elegant command like way to do that...

Be careful if remote box and YMMV

 - rh


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] DJB's daemontools package

2008-09-09 Thread RobertH
 I know DJB from the IETF; quite the personality. And actually before
 that as he went to UofM, and I went to MSU... But then the IETF is
 filled with people that stand out; it draws us together.
 
 I need the deamontools for the HIPL DNS proxy, and was looking for what
 my options were for setting it up.
 
 Source it is, it seems
 
 

Robert

There are some rpms and sources and specs out there.

I just dunno if they are functionally perfect in patched for centos terms.

One source/rpm/spec that came up looked promising... it was from qmail.org I
think

Anyways, you are experienced enough to do whatever you need to

G'day

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Need help with an odd issue I am experiencing

2008-09-09 Thread RobertH
 
 1. Comcrap is not available in my area I am on road runner biz through
 bright house with 15m down and 2 up and static ip.
 
 2.  Already tested without the internal nic running
 
 3. Tried with a router in between and the result is the same.
 
 4. I do agree about the negotiation aspect, which I'm looking into as
 well.
 
 5. Don't notice any collisions or errors on ifconfig.
 
 

I see, when I trace the domain you are sending email from I assumed it was
you on a comcast link.

Or maybe roadrunner resells comcast in your area or comcast bought
roadrunner in your area?

The dlsi.com dig pointing at 0.0.0.0 was interesting.

Never ever seen dns point to 0.0.0.0

Shouldn't there be a error catch in dns server software for that situation?

It's like using dns to route? Har har he.

Or did you buy the internet?

;-)

Man, if so, I wanna be your best bud cause I need a piece of the action to
sell at a good deal

;-

 - rh


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] DJB's daemontools package

2008-09-06 Thread RobertH


 Al wrote:
 I was going to recommend roughly the same thing.
 

Oops, the word *source* can get you huh...  ;-

What I actually recommended was going to the source website to fully
understand the usage and internals.

At the source website you can get the software source and the reasons behind
it.

One can google for more info after that.

I believe the OP is/was more than intelligent enough to get source and
implement etc.

I was a little ambiguous and I can do better in my language too.   :-)

Anyways, one should know how to install that software and use it from source
on a test box before looking for an RPM for several reasons...

There are issues with certain versions of software that have to be
compensated for and you want to make sure that any rpm is for your distro
and was rolled properly.

Bottom line, some software (both in this case if I remember right) do or
used to need to be *errno* patched, and may still need to be patched
depending blah blah.

Simple patches, yet patched none the less.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] DJB's daemontools package

2008-09-05 Thread RobertH

With all due respect...

Do any of you that gave advice on finding DJB software in rpm format use any
of the software that you are giving advice on finding in rpm format or
otherwise?

If you do use it, you can do better.   :-)

If not, well... then you are talking out yer' rear ends.

It is best to go to the source and learn all you can, then make your own rpm
or know what you are looking for in an rpm and specifically why.

http://cr.yp.to

and it wasn't the hard to google for

daemontools rpm

or the other packages in rpm format.

 - rh

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


RE: [CentOS] Re: Is there a way to save the routing table permanently?

2008-08-22 Thread RobertH

Hasn't this been hashed over several times in the past year to the same end
result?

:-)

It appeared to me the original issue (this time) was being able to do
primary and secondary dns on one box with different ip addresses because the
registrar needed two different ip addresses when registering a domain.

If you must do it at home and you cannot get this solution to work as you
expect, get a routed subnet on one side.

or 

...better yet, since both links appear to be residential, ask a buddy with a
colo for for access and make it the primary dns and pull secondary on your
residential, or get a VPS server or two, or something else...

Unless it is a pure don't care if down sometimes hobby, having primary and
secondary dns on last mile residential links, regardless of budget or your
reliability perceptions, is not particularly wise.

 - rh



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos