Re: [CentOS-docs] New HOWTO: Setting up multiple IP addresses on the same network interface

2009-07-01 Thread Karanbir Singh
On 07/01/2009 04:03 PM, JohnS wrote: Ofcourse this raises the question - what are we doing wrong - and so badly - that people cant find content when they want to, even though it exists and is quite well done. Mostly because what you do find on the net is incorrect! So they expect to find the

Re: [CentOS-docs] New HOWTO: Setting up multiple IP addresses on the same network interface

2009-07-01 Thread JohnS
On Wed, 2009-07-01 at 16:45 +0100, Karanbir Singh wrote: On 07/01/2009 04:03 PM, JohnS wrote: Ofcourse this raises the question - what are we doing wrong - and so badly - that people cant find content when they want to, even though it exists and is quite well done. Mostly because what

[CentOS-announce] CESA-2009:1134 Important CentOS 3 i386 seamonkey - security update

2009-07-01 Thread Tru Huynh
CentOS Errata and Security Advisory CESA-2009:1134 seamonkey security update for CentOS 3 i386: https://rhn.redhat.com/errata/RHSA-2009-1134.html The following updated file has been uploaded and is currently syncing to the mirrors: i386:

[CentOS-announce] CESA-2009:1134 Important CentOS 3 x86_64 seamonkey - security update

2009-07-01 Thread Tru Huynh
CentOS Errata and Security Advisory CESA-2009:1134 seamonkey security update for CentOS 3 x86_64: https://rhn.redhat.com/errata/RHSA-2009-1134.html The following updated file has been uploaded and is currently syncing to the mirrors: x86_64:

Re: [CentOS-es] COnsulta con Rutas de OpenVPN

2009-07-01 Thread Alfonzo Fernandez
Tiene incluida la directiva client-to-client en al configuración del tunel de tu vpn? *# Uncomment this directive to allow different # clients to be able to see each other. # By default, clients will only see the server. # To force clients to only see the server, you # will also need to

Re: [CentOS-es] Un gran paso

2009-07-01 Thread Ruben Moyota
Hola, Podrias mirar este link, y revisa el asunto de ACL y habilitar el acceso a la navegacion. http://wiki.squid-cache.org/ConfigExamples/ Saludos. ___ CentOS-es mailing list CentOS-es@centos.org http://lists.centos.org/mailman/listinfo/centos-es

[CentOS-es] Problemaso con tarjeta red y video

2009-07-01 Thread Cesar Augusto Martinez Cobo
Hola listeros. Tengo problemas con mi tarjeta de red y video de computador al tratar de instalar centos 5.3, este no me las reconoce. El equipo es un lenovo, si alguien me puede colaborar diciendome que puedo hacer en este caso para solucionar este gram problema o que programa parecido al

Re: [CentOS-es] Consulta consumo maquina

2009-07-01 Thread Manolo
Hola, si tu maquina se está volviendo lenta puede deberse a varias cosas, por ejemplo nu exceso de consumo de ram por parte de algun proceso, o un exceso de consumo de cpu. Si es un exceso de consumo en CPU, podrias verlo con sar -u -P ALL 1 0 Aqui verias si alguno de tus procesadores tiene un

Re: [CentOS-es] Problemaso con tarjeta red y video

2009-07-01 Thread Manolo
Hola, con lspci podrias ver el hardware que tienes, para luego ver que drivers necesitas. Salu2. El mié, 01-07-2009 a las 12:18 -0400, Cesar Augusto Martinez Cobo escribió: Hola listeros. Tengo problemas con mi tarjeta de red y video de computador al tratar de instalar centos 5.3, este no me

[CentOS-es] Error al instalar centos en HP DC 5700 sff

2009-07-01 Thread David Marcelo Ochoa
Amigos de Centos: tengo un problema al querer instalar centos en una pc HP DC5700, la instalaciòn se estanca en : ACPI: Interpreter enabled ACPI: Using IOAPIC for interrup routing ACPI: PCI Root Bridge [PCI0] (:00) Si alguien tiene alguna idea , agradecere mucho su ayuda. Marcelo Ochoa

Re: [CentOS] Web photo gallery options

2009-07-01 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of John R Pierce Sent: Tuesday, June 30, 2009 7:02 PM To: CentOS mailing list Subject: Re: [CentOS] Web photo gallery options Sorin Srbu wrote: Checked the site ou linked too, but I don't get

Re: [CentOS] Web photo gallery options

2009-07-01 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Matt Sent: Wednesday, July 01, 2009 12:05 AM To: CentOS mailing list Subject: Re: [CentOS] Web photo gallery options Try this one: Single File PHP Gallery http://sye.dk/sfpg/ Very simple.

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread hrbac.c...@seznam.cz
Ned Slider napsal(a): Bingo! That's the whole point Russ - members of the Community don't know what's going on with *their* Community Enterprise OS because there is no dissemination of information. What I *do* know is that 5.3 took ~10 weeks to release, and before that 4.7 took ~7 weeks.

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Michael A. Peters
Michael A. Peters wrote: Sander Snel wrote: 10. use sudo instead of su - How does that help? I still don't understand how using sudo instead of su makes it more secure. If the user does not have the root password that the only danger to su - is brute force from local account, but you can

Re: [CentOS] server is always getting hacked

2009-07-01 Thread John R. Dennison
On Wed, Jul 01, 2009 at 01:20:50AM -0700, Michael A. Peters wrote: What would be a security enhancement would be to borrow the bsd su which only allows you to su to root from a wheel group account. Take a look at /etc/pam.d/su; the ability of restricting su to root for

Re: [CentOS] Web photo gallery options

2009-07-01 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of John R Pierce Sent: Wednesday, July 01, 2009 12:19 AM To: CentOS mailing list Subject: Re: [CentOS] Web photo gallery options Ray Van Dolson wrote: On Wed, Jun 24, 2009 at 3:57 AM, Sorin

Re: [CentOS] Web photo gallery options

2009-07-01 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Ray Van Dolson Sent: Wednesday, July 01, 2009 12:12 AM To: CentOS mailing list Subject: Re: [CentOS] Web photo gallery options FYI, gallery2 is available in EPEL for EL-5. I used the info

[CentOS] Playing with php 5.3.0

2009-07-01 Thread Michael A. Peters
Even though I do not recommend it for production yet, I packaged and am playing with php 5.3.0 - src.rpm at http://www.clfsrpm.net/php53/ (needed epel to build) Other than the suhosin loadable module messing up pear's ability to do anything, initial tests show it working fairly well. Looks

Re: [CentOS] Web photo gallery options

2009-07-01 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Sorin Srbu Sent: Wednesday, July 01, 2009 11:26 AM To: 'CentOS mailing list' Subject: Re: [CentOS] Web photo gallery options FYI, gallery2 is available in EPEL for EL-5. I used the info

[CentOS] How best to allow users to change Samba passwords?

2009-07-01 Thread Kevin Thorpe
I was wondering if anyone could advise me on this. I've got two Samba servers, each using passdb.tdb for authentication. All works well, but I've now been asked to let users change their own passwords (a requirement of data secuity). What's the best way of arranging this, preferably updating

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Dag Wieers
On Tue, 30 Jun 2009, Radu-Cristian FOTESCU wrote: What was the problem with audacious again ? # yum install audacious ... Resolving Dependencies -- Running transaction check --- Package audacious.i386 0:1.3.2-5.el5.rf set to be updated -- Processing Dependency: audacious-plugins = 1.3.0

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Dag Wieers
On Tue, 30 Jun 2009, Radu-Cristian FOTESCU wrote: Anyway, as I said previously, I would rather see the CentOS Project concentrate on the core product and do a really good job on that (i.e, a move closer to the old 4 week release lag than the current 10 week release lag), and I would much rather

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Mihai T. Lazarescu
On Tue, Jun 30, 2009 at 03:43:41PM -0700, Radu-Cristian FOTESCU wrote: I Can not speak for others, but the only time i have seen Karanbir be stern with anyone is when they do deserve it. Well, I've read him saying in various ways and on several occasions something that would equate

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Ned Slider
Dag Wieers wrote: On Tue, 30 Jun 2009, Radu-Cristian FOTESCU wrote: Anyway, as I said previously, I would rather see the CentOS Project concentrate on the core product and do a really good job on that (i.e, a move closer to the old 4 week release lag than the current 10 week release lag),

Re: [CentOS] [OT] Batch Job Scheduler/Manager

2009-07-01 Thread Marcelo M. Garcia
Mauriat Miranda wrote: Hi. Looking for suggestions/ideas. I have pretty loose requirements at this point, but I am looking for a tool (or set of tools) where I can automate and control a large group of tasks by a basic web front end. I have a series of scripts that do various conversions

[CentOS] Fortran90 and 77 on CentOS

2009-07-01 Thread Sorin Srbu
Hi all, Is anybody here using Fortran90 and Fortran77 on their CentOS-machine(s)? If so, did you get that from a repo or something? One of our PhD-students needs a software that requires the Fortran compilers mentioned in order to make the sources for our i7-machines. The Fortran stuff that is

Re: [CentOS] Fortran90 and 77 on CentOS

2009-07-01 Thread Marcelo M. Garcia
Sorin Srbu wrote: Hi all, Is anybody here using Fortran90 and Fortran77 on their CentOS-machine(s)? If so, did you get that from a repo or something? One of our PhD-students needs a software that requires the Fortran compilers mentioned in order to make the sources for our i7-machines.

Re: [CentOS] Fortran90 and 77 on CentOS

2009-07-01 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Marcelo M. Garcia Sent: Wednesday, July 01, 2009 2:24 PM To: CentOS mailing list Subject: Re: [CentOS] Fortran90 and 77 on CentOS Is anybody here using Fortran90 and Fortran77 on their

Re: [CentOS] How best to allow users to change Samba passwords?

2009-07-01 Thread Jason Pyeron
-Original Message- From: Kevin Thorpe Sent: Wednesday, July 01, 2009 5:43 I was wondering if anyone could advise me on this. We allow users th change their passwords via ctrl-alt-del, and via the web using the password change tool that comes with exchange. I've got two Samba

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Radu-Cristian FOTESCU
My point being: audacious does build, but it has a missing dependency. Which still == broken repo. You were referring the whole time to SRPMs that do not build. But you never give me an example of one. On the contrary, I mentioned Comix. But again, I never try the SRPM, but the

Re: [CentOS] How best to allow users to change Samba passwords?

2009-07-01 Thread Ross Walker
On Jul 1, 2009, at 5:42 AM, Kevin Thorpe ke...@pibenchmark.com wrote: What's the best way of arranging this, preferably updating both servers at the same time? What you should do is pick one server to manage the passwords and have the other setup to authenticate users against the first. Use

Re: [CentOS] How best to allow users to change Samba passwords?

2009-07-01 Thread Kevin Thorpe
On 01/07/2009 14:29, Jason Pyeron wrote: -Original Message- From: Kevin Thorpe Sent: Wednesday, July 01, 2009 5:43 I was wondering if anyone could advise me on this. We allow users th change their passwords via ctrl-alt-del, and via the web using the password change tool that

Re: [CentOS] [OT] Batch Job Scheduler/Manager

2009-07-01 Thread Mauriat Miranda
On Wed, Jul 1, 2009 at 8:03 AM, Marcelo M. Garciamarcelo.maia.gar...@googlemail.com wrote: I suggest sge. It doesn't have a web interface, but a GUI. Or torque. Looks like most of the robust tools are Java based, including Hudson. I also found the following:

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Stuart Jansen
On Wed, 2009-07-01 at 01:20 -0700, Michael A. Peters wrote: I still don't understand how using sudo instead of su makes it more secure. As implemented by Ubuntu and others, sudo does nothing to make things more secure. In fact, as you pointed out, it can be less secure. However, sudo has the

Re: [CentOS] [OT] Batch Job Scheduler/Manager

2009-07-01 Thread Marcelo M. Garcia
Mauriat Miranda wrote: On Wed, Jul 1, 2009 at 8:03 AM, Marcelo M. Garciamarcelo.maia.gar...@googlemail.com wrote: I suggest sge. It doesn't have a web interface, but a GUI. Or torque. Looks like most of the robust tools are Java based, including Hudson. I also found the following:

Re: [CentOS] How to change Disk sequence on DELL R900 CENTOS 5.3?

2009-07-01 Thread nate
mcclnx mcc wrote: Thank you for answer. I change /etc/fstab and using UUID instead of LABEL. after reboot, UUID did NOT change disk sequence back to what I want. Boot device original /dev/sda1, it still /dev/sdc1 NO change. Have you tried asking Dell? Your asking to change the boot device

Re: [CentOS] Web photo gallery options

2009-07-01 Thread Ray Van Dolson
On Wed, Jul 01, 2009 at 11:45:05AM +0200, Sorin Srbu wrote: FYI, gallery2 is available in EPEL for EL-5. I used the info available at http://www.cyberciti.biz/faq/rhel-fedora-centos-linux-enable-epel-repo/ to add the EPEL-repo. Replying to myself... Googled some and found that Gallery2 is

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Les Mikesell
Radu-Cristian FOTESCU wrote: The audacious package is willing to wait that long :) Nope, because I've built it *for myself*, i.e. in my repo. And was your patch rejected from the places you are complaining about? -- Les Mikesell lesmikes...@gmail.com

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Radu-Cristian FOTESCU
The audacious package is willing to wait that long :) Nope, because I've built it *for myself*, i.e. in my repo. And was your patch rejected from the places you are complaining about? There. Is. No. Question. About. Any. Patch. When you build audacious from SPEC + tarball, it

Re: [CentOS] How best to allow users to change Samba passwords?

2009-07-01 Thread Alexander Georgiev
2009/7/1 Kevin Thorpe ke...@pibenchmark.com: On 01/07/2009 14:29, Jason Pyeron wrote: We're missing some bits on this. We don't run Windows servers at all so the Exchange route is out. Also most of our workstations are only windows Home, not Professional so we can't use a domain or the

Re: [CentOS] How to change Disk sequence on DELL R900 CENTOS 5.3?

2009-07-01 Thread Ross Walker
2009/7/1 mcclnx mcc mcc...@yahoo.com.tw: Thank you for answer. I change /etc/fstab and using UUID instead of LABEL.  after reboot, UUID did NOT change disk sequence back to what I want.  Boot device original /dev/sda1, it still /dev/sdc1 NO change. Modify modprobe.conf to list the disk

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Robert
Radu-Cristian FOTESCU wrote: The audacious package is willing to wait that long :) Nope, because I've built it *for myself*, i.e. in my repo. And was your patch rejected from the places you are complaining about? There. Is. No. Question. About. Any. Patch.

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Dag Wieers
On Wed, 1 Jul 2009, Radu-Cristian FOTESCU wrote: My point being: audacious does build, but it has a missing dependency. Which still == broken repo. Sure, but when you started that thread you didn't mention your problem with the comix package. I was still confused why you would talk about

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Lanny Marcus
On Wed, Jul 1, 2009 at 5:05 AM, Dag Wieersd...@wieers.com wrote: On Tue, 30 Jun 2009, Radu-Cristian FOTESCU wrote: What was the problem with audacious again ? snip Maybe the problem is indeed you, and not the repository. You expect too much from people who volunteer their own time. As I said

[CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Doug Coats
I have a server with 4 nics. Two are using different internet connections, both with static IP's, and two are connected to our private network. The two internet facing nics seem to be battling over the gateway designation. Which ever I designate as the gateway the other stops responding to

Re: [CentOS] Web photo gallery options

2009-07-01 Thread Lanny Marcus
On Wed, Jul 1, 2009 at 4:25 AM, Sorin Srbusorin.s...@orgfarm.uu.se wrote: snip FYI, gallery2 is available in EPEL for EL-5. I used the info available at http://www.cyberciti.biz/faq/rhel-fedora-centos-linux-enable-epel-repo/ to add the EPEL-repo. r...@kadath ~ [0 jobs]# yum repolist Loaded

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Radu-Cristian FOTESCU
Buildlogs are available from:     http://packages.sw.be/comix/_buildlogs/ I hope you come back and tell me what was your problem. I have to be back on my continent before addressing this issue. So far, I can see that the build of Comix seems to have been done by Dries, and that it was

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Radu-Cristian FOTESCU
I believe that YOU are the only person on this list who has expressed an interest in audacious (whatever it is does) for CentOS during these several days of rant.  I believe that YOU are the only person on this list (whoever you are do) to have suggested popularity as a required raison

Re: [CentOS] How to change Disk sequence on DELL R900 CENTOS 5.3?

2009-07-01 Thread mcclnx mcc
Thank you for your answer. change adapter sequence on /etc/modprobe.conf and rebuild image always my first try. Unfortunately it does NOT work on DELL R900. The reason is DELL R900 internal RAID and external RAID use same driver. There is NO way to change adapter sequence on

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Ron Loftin
As a really radical suggestion, perhaps you should consider moving this discussion to the rpmforge mail list, since it seems that most of your issues are focused on that repository. You might even find a larger collection of viewpoints there. On Wed, 2009-07-01 at 11:32 -0700, Radu-Cristian

Re: [CentOS] How to change Disk sequence on DELL R900 CENTOS 5.3?

2009-07-01 Thread Joseph L. Casale
Unfortunately it does NOT work on DELL R900. The reason is DELL R900 internal RAID and external RAID use same driver. There is NO way to change adapter sequence on /etc/modprobe.conf. Well, I suspect a udev rule *might* work to rename the discs, but labels or uuid's aren’t designed to *change*

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Dag Wieers
On Wed, 1 Jul 2009, Dag Wieers wrote: On Wed, 1 Jul 2009, Radu-Cristian FOTESCU wrote:   - audacious has a missing dependency (audacious-plugins)   - comix SRPM does not rebuild That's 2 packages, I think we do quite well if that is it :) But this is only because I am not crazy

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread James A. Peltier
On Wed, 1 Jul 2009, Doug Coats wrote: I have a server with 4 nics.  Two are using different internet connections, both with static IP's, and two are connected to our private network.   The two internet facing nics seem to be battling over the gateway designation.  Which ever I designate as

Re: [CentOS] How to change Disk sequence on DELL R900 CENTOS 5.3?

2009-07-01 Thread Robert Heller
At Thu, 2 Jul 2009 02:39:02 +0800 (CST) CentOS mailing list centos@centos.org wrote: Thank you for your answer. change adapter sequence on /etc/modprobe.conf and rebuild image always my first try. Unfortunately it does NOT work on DELL R900. The reason is DELL R900 internal RAID

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Alexander Dalloz
Doug Coats schrieb: I have a server with 4 nics. Two are using different internet connections, both with static IP's, and two are connected to our private network. The two internet facing nics seem to be battling over the gateway designation. Which ever I designate as the gateway the other

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Doug Coats
Thanks for your responses. I have tried some of the configurations that you have mentioned but not all of them. I will try the others tonight when the server is less active. In the meantime I will read the links you sent. Thanks again. This is starting to drive me crazy. On Wed, Jul 1, 2009

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Warren Young
Michael A. Peters wrote: I still don't understand how using sudo instead of su makes it more secure. Let's start with the simple case where only one person needs superuser type privileges on a given machine. What, then, is the difference between sudo and su -? There has to be one

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Gary Greene
On 7/1/09 2:47 PM, Warren Young war...@etr-usa.com wrote: Michael A. Peters wrote: I still don't understand how using sudo instead of su makes it more secure. Let's start with the simple case where only one person needs superuser type privileges on a given machine. What, then, is the

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Frank Cox
On Wed, 01 Jul 2009 15:05:58 -0700 Gary Greene wrote: . With sudo, you get a record of what command was executed with superuser rights by whom at whenever given hour. sudo bash -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Warren Young
Frank Cox wrote: On Wed, 01 Jul 2009 15:05:58 -0700 Gary Greene wrote: . With sudo, you get a record of what command was executed with superuser rights by whom at whenever given hour. sudo bash If that's a problem for you, don't let people run bash via sudo. There's an entire body of

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Stephen Harris
On Wed, Jul 01, 2009 at 04:59:36PM -0600, Warren Young wrote: Frank Cox wrote: Gary Greene wrote: . With sudo, you get a record of what command was executed with superuser rights by whom at whenever given hour. sudo bash If that's a problem for you, don't let people run bash

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Christopher Chan
ip rule add from xx.yy.51.46 table Cable ip rule add from aa.bb.166.2 table T1 Other people seem to be using this configuration successfully but I seem to be missing something important. Change the above rules to: ip rule add from xx.yy.51.46 to default lookup Cable ip rule add from

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Doug Coats
I changed those two rules to no affect. I have also done the above mentioned things. My tcpdump shows connections comming in on eth3 but there is no outbound communication. Example: tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth3, link-type EN10MB

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Gary Greene
On 7/1/09 3:08 PM, Frank Cox thea...@sasktel.net wrote: On Wed, 01 Jul 2009 15:05:58 -0700 Gary Greene wrote: . With sudo, you get a record of what command was executed with superuser rights by whom at whenever given hour. sudo bash I didn't think I had to be THAT pedantic of what you

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Michael A. Peters
Radu-Cristian FOTESCU wrote: Buildlogs are available from: http://packages.sw.be/comix/_buildlogs/ I hope you come back and tell me what was your problem. I have to be back on my continent before addressing this issue. So far, I can see that the build of Comix seems to have been done

Re: [CentOS] Dag's comment at linuxtag

2009-07-01 Thread Les Mikesell
Michael A. Peters wrote: How it interacts with epel I don't really care about, but it should not update vendor packages, and anything that requires an updated vendor package will be broken on yum configurations that protect the base install. I think you've confused rpmforge with something

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Christopher Chan
Hello Doug, Here are the iproute2 commands for a multigateway setup I did. ip route add 220.232.217.72/29 dev eth0 proto kernel scope link src 220.232.217.78 table pacific ip route add 10.9.0.0/17 dev eth1 proto kernel scope link src 10.9.1.101 table pacific ip route add default via

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Doug Coats
Thanks for your responce! If I open up Iptables to accept everything on eth3 and eth2 or turn it off all together I get the same results. I will have to look through your iproute2 commands to see how they match up to mine. Do you see anything different in mine that would indicate the issue?

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Robert Heller
At Wed, 01 Jul 2009 16:08:08 -0600 CentOS mailing list centos@centos.org wrote: On Wed, 01 Jul 2009 15:05:58 -0700 Gary Greene wrote: . With sudo, you get a record of what command was executed with superuser rights by whom at whenever given hour. sudo bash Which in turn is

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Doug Coats
I am not understanding somethings very fundamental to me troubleshooting this issue. How do I clear the iproute2's that I have created? How do I tell if they are in affect? What should they look like when listed if they are configured properly? Thanks for holding my hand in this!

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Michael A. Peters
Warren Young wrote: Michael A. Peters wrote: I still don't understand how using sudo instead of su makes it more secure. Let's start with the simple case where only one person needs superuser type privileges on a given machine. What, then, is the difference between sudo and su -? There

Re: [CentOS] server is always getting hacked

2009-07-01 Thread Michael A. Peters
Robert Heller wrote: At Wed, 01 Jul 2009 16:08:08 -0600 CentOS mailing list centos@centos.org wrote: On Wed, 01 Jul 2009 15:05:58 -0700 Gary Greene wrote: . With sudo, you get a record of what command was executed with superuser rights by whom at whenever given hour. sudo bash Which

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Christopher Chan
Doug Coats wrote: Thanks for your responce! If I open up Iptables to accept everything on eth3 and eth2 or turn it off all together I get the same results. I will have to look through your iproute2 commands to see how they match up to mine. Do you see anything different in mine that

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Doug Coats
I am convinced that my iproute2 tables are all messed upIn fact I found some errors in my initial post. # ip rule list 0: from all lookup 255 32766: from all lookup main 32767: from all lookup default /etc/iproute2/rt_tables # # reserved values # 255 local 254 main 253

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Christopher Chan
Doug Coats wrote: I am not understanding somethings very fundamental to me troubleshooting this issue. How do I clear the iproute2's that I have created? They are cleared by being deleted or a reboot takes place. Try 'ip route help' and 'ip rule help' How do I tell if they are in

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Christopher Chan
Doug Coats wrote: I am convinced that my iproute2 tables are all messed upIn fact I found some errors in my initial post. # ip rule list 0: from all lookup 255 32766: from all lookup main 32767: from all lookup default Boy, did we miss that... /etc/iproute2/rt_tables #

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Doug Coats
So if I run the following two commands the rules show up in the list. ip rule add from 173.11.51.46 table Cable ip rule add from 67.152.166.2 table T1 # ip rule list 0: from all lookup 255 32764: from 67.152.166.2 lookup T1 32765: from 173.11.51.46 lookup Cable 32766: from all lookup

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Christopher Chan
Doug Coats wrote: So if I run the following two commands the rules show up in the list. ip rule add from 173.11.51.46 table Cable ip rule add from 67.152.166.2 table T1 # ip rule list 0: from all lookup 255 32764: from 67.152.166.2 lookup T1 32765: from 173.11.51.46 lookup

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread Christopher Chan
Doug Coats wrote: So if I run the following two commands the rules show up in the list. ip rule add from 173.11.51.46 table Cable ip rule add from 67.152.166.2 table T1 # ip rule list 0: from all lookup 255 32764: from 67.152.166.2 lookup T1 32765: from 173.11.51.46 lookup

Re: [CentOS] Multiple Internet facing Nics - Gateway issue

2009-07-01 Thread John R Pierce
Doug Coats wrote: So if I run the following two commands the rules show up in the list. ip rule add from 173.11.51.46 table Cable ip rule add from 67.152.166.2 table T1 # ip rule list 0: from all lookup 255 32764: from 67.152.166.2 lookup T1 32765: from 173.11.51.46 lookup