Re: [CentOS-docs] Arabic Wiki pages, again

2012-04-02 Thread Karanbir Singh
On 04/01/2012 08:14 AM, Steve-Mustafa Ismail wrote: Could I please, pretty please, with whipped cream and a cherry on top, be given the privilege to alter the most exalted and sublime of pages, the Arabic wiki? :) how about a reply to my last email ? -- Karanbir Singh +44-207-0999389 |

Re: [CentOS-docs] Arabic Wiki - resend because of bounce back

2012-04-02 Thread Steve-Mustafa Ismail
Sorry Karanbir, I failed to see this email, I wouldn't have sent a third otherwise. What would help is if we could get some more people involved, people who have been seen in the centos ecosystem in the past, and have some level of trust associated. Is that possible ? I wouldn't even know

[CentOS-announce] CEBA-2012:0438 CentOS 5 wget Update

2012-04-02 Thread Johnny Hughes
CentOS Errata and Bugfix Advisory 2012:0438 Upstream details at : https://rhn.redhat.com/errata/RHBA-2012-0438.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386:

Re: [CentOS-es] configuracion de dns

2012-04-02 Thread Edg@r Rodolfo
El 01/04/12, Ignacio Ordeñana ifor1...@gmail.com escribió: al configurar el dns y todo estar ok,al utilizar el comando host dominio.com mas el ip muestra el siguiente mensaje connection time out trying next origin de igual manera al utilizar los comandos dig @ip dominio.com En ese mismo

Re: [CentOS-es] configuracion de dns

2012-04-02 Thread César CRUZ ARRUNATEGUI
www.howtoforge.org César D. Cruz Arrunátegui - Mensaje original - De: Ignacio Ordeñana ifor1...@gmail.com Para: centos-es@centos.org Enviados: Domingo, 1 de Abril 2012 13:52:00 Asunto: [CentOS-es] configuracion de dns hola alguien tiene la configuracion completa para configurar un

Re: [CentOS-es] configuracion de dns

2012-04-02 Thread Aland Laines
El 2 de abril de 2012 01:56, Edg@r Rodolfo edgarr...@gmail.com escribió: El 01/04/12, Ignacio Ordeñana ifor1...@gmail.com escribió: al configurar el dns y todo estar ok,al utilizar el comando host dominio.com mas el ip muestra el siguiente mensaje connection time out trying next origin de

Re: [CentOS-es] configuracion de dns

2012-04-02 Thread Edg@r Rodolfo
El día 2 de abril de 2012 11:27, Ignacio Ordeñana ifor1...@gmail.com escribió: hola al ejecutar un chequeo de la zona con el siguinte comando: named-checkzone dominio.com.zone /var/named/chroot/var/named me muestra el siguiente error: dns_master_load: var/named/chroot/var/named:1

[CentOS-es] [OT] Software de diseño e impresion de tarjeta de identificacion (ID Cards)

2012-04-02 Thread Aland Laines
Alguien de algún software freeware u opensource que genere esas tarjetas de un layout e importe los datos de una DB? Se los agradeceré infinitamente, Aland Laines Calonge Tecnico en Informatica Lima - Perú ___ CentOS-es mailing list

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread John R Pierce
On 04/01/12 10:45 PM, alikhan damirov wrote: I don't know about statistics, but selinux have log's. Watch here: http://wiki.centos.org/HowTos/SELinux By default SELinux log messages are written to */var/log/audit/audit.log* I believe the OP was asking about the statistics of how many CentOS

Re: [CentOS] SPF Setup CentOS 6.3 x86_64

2012-04-02 Thread Prabhpal S. Mavi
Dear Natraj, Thank you very much for your response, this is really greate solution and I did not know about it. Very good stuff indeed. I love it. Thanks Natraj, for your greate advice. Prabhpal On 04/01/2012 09:06 AM, Prabhpal S. Mavi wrote: Dear Friends Greetings, i wish to setup SPF look

Re: [CentOS] transition to ip6

2012-04-02 Thread Adam Tauno Williams
On Sat, 2012-03-31 at 19:52 +0200, Tilman Schmidt wrote: Am 31.03.2012 17:37, schrieb Les Mikesell: On Sat, Mar 31, 2012 at 8:06 AM, Peter Eckel li...@eckel-edv.de wrote: So, before you do anything else, set up proper incoming and outgoing IPv6 port filtering rules on your perimeter

Re: [CentOS] transition to ip6

2012-04-02 Thread Adam Tauno Williams
On Sat, 2012-03-31 at 15:06 +0200, Peter Eckel wrote: Hi Adam, And recent computer or distributions is sitting their quietly waiting for it's IPv6 address to arrive - probably automatically, via auto discovery. Clients are trivial. ... and that is EXACTLY the biggest problem with IPv6.

Re: [CentOS] transition to ip6

2012-04-02 Thread Adam Tauno Williams
On Sat, 2012-03-31 at 16:38 -0500, Les Mikesell wrote: On Sat, Mar 31, 2012 at 3:24 PM, Peter Eckel li...@eckel-edv.de wrote: 1. Each interface on an IPv6 enabled machine has several addresses. 2. Except for the Privacy Extension address(es), auto-configured a How do applications choose the

Re: [CentOS] transition to ip6

2012-04-02 Thread Peter Eckel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Adam, Or you assign the rule to the interface, rather than the address. Nothing new, that is how firewalls work on DHCP clients today. that will be pretty difficult on the perimeter router ... Best regards, Peter. -BEGIN PGP

Re: [CentOS] transition to ip6

2012-04-02 Thread Peter Eckel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Adam, You can explicitly turn in off on every type of client. Then wait till you want to do it. agreed. The problem is that you can, and you actually *must* do it. Doing nothing leaves v6 on by default on most modern operating systems.

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Johnny Hughes
On 03/31/2012 10:31 PM, Min Wang wrote: hi Just wondering if there is any statiscs report of selinxu usages in production environment? I know some still turn it off. If you have machines purposely serving things to the masses on the Internet, you should take the time to make SELinux work

Re: [CentOS] transition to ip6

2012-04-02 Thread Peter Eckel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Adam, Typically the routing table does a lot of work. Much like 127.0.0.0/8 the mask of a link-local will make it unprefered by 'public' traffic. There is also a syntax for specifying the outbound interface for traffic. Routing tables

Re: [CentOS] Grails 1.3.x (S)RPM for CentOS 6?

2012-04-02 Thread Ljubomir Ljubojevic
On 03/15/2012 02:13 PM, Patrick Lists wrote: Hi, My Google foo came up empty. Does anyone know where I can find a Grails 1.3.x (S)RPM? I do not see any rpm past history of once existing 1.0.4 version back in 2008. -- Ljubomir Ljubojevic (Love is in the Air) PL Computers Serbia, Europe

Re: [CentOS] transition to ip6

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 5:28 AM, Peter Eckel li...@eckel-edv.de wrote: Routing tables won't do much for you when you have several different IP addresses (stateless autocnfigured, privacy extension and static) within the same network on the same physical interface - they'll all use the same

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 5:28 AM, Johnny Hughes joh...@centos.org wrote:     Just wondering if there is any statiscs report of selinxu usages in production environment? I know some still turn it off. If you have machines purposely serving things to the masses on the Internet, you should take

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread m . roth
Les Mikesell wrote: On Mon, Apr 2, 2012 at 5:28 AM, Johnny Hughes joh...@centos.org wrote:     Just wondering if there is any statiscs report of selinxu usages in production environment? I know some still turn it off. If you have machines purposely serving things to the masses on the

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Lamar Owen
On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: Another statistic I'd like to see is how much admin time this costs on the average to learn and implement. No more than proper firewalling techniques cost, really. Has anyone really measured this? Probably not. Are there

Re: [CentOS] Grails 1.3.x (S)RPM for CentOS 6?

2012-04-02 Thread Patrick Lists
On 04/02/2012 01:59 PM, Ljubomir Ljubojevic wrote: On 03/15/2012 02:13 PM, Patrick Lists wrote: Hi, My Google foo came up empty. Does anyone know where I can find a Grails 1.3.x (S)RPM? I do not see any rpm past history of once existing 1.0.4 version back in 2008. Thanks Ljubomir. I saw

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 9:10 AM, Lamar Owen lo...@pari.edu wrote: On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: Another statistic I'd like to see is how much admin time this costs on the average to learn and implement. No more than proper firewalling techniques cost, really. So

Re: [CentOS] transition to ip6

2012-04-02 Thread Peter Eckel
Hi Lee, So what does that mean for a client application (http/ftp,etc.) where you might have local firewalls permitting things for internal-subnet source ranges but you also have external targets that only accept pre-configured static sources? Are you referring to the situation where you

Re: [CentOS] centos 6.2 netinstall does not offer create custom layout at Select type of installation in text mode installation

2012-04-02 Thread Lamar Owen
On Saturday, March 31, 2012 06:29:49 PM John Stanley wrote: On Sat, 2012-03-31 at 12:38 -0400, Lamar Owen wrote: On Wednesday, March 28, 2012 06:29:12 AM Karanbir Singh wrote: you can still run a vnc install from the netinstall emdia and get the complete installer going. With 512MB

Re: [CentOS] transition to ip6

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 9:39 AM, Peter Eckel li...@eckel-edv.de wrote: So what does that mean for a client application (http/ftp,etc.) where you might have local firewalls permitting things for internal-subnet source ranges but you also have external targets that only accept pre-configured

Re: [CentOS] Centos6 iptables startup vs. restart?

2012-04-02 Thread Les Mikesell
On Sun, Apr 1, 2012 at 12:43 PM, Eero Volotinen eero.voloti...@iki.fi wrote: 2012/3/30 Les Mikesell lesmikes...@gmail.com: What is different about the initial startup of iptables than 'service iptables restart'  (and different from C5)?   I want to use iptables port redirection to send port 80

Re: [CentOS] transition to ip6

2012-04-02 Thread Stephen Harris
On Mon, Apr 02, 2012 at 04:39:17PM +0200, Peter Eckel wrote: network. Security-wise there is no difference as you'll never get smaller allocations than /64 per site anyway, so what with respect to filtering *gigglefit* One of my providers gave me a single(!) IPv6 address. Another one has

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread John Doe
From: Lamar Owen lo...@pari.edu On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: Another statistic I'd like to see is how much admin time this costs on the average to learn and implement.  No more than proper firewalling techniques cost, really. Depends... Takes me 1mn to open a

Re: [CentOS] transition to ip6

2012-04-02 Thread Peter Eckel
Hi Stephen, *gigglefit* One of my providers gave me a single(!) IPv6 address. Actually that's at least something the IETF has thought of ... if it is certain that one and only one device will be connected. I'm not actually sure what use case there is for such a connection, but at least it

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Ned Slider
On 02/04/12 15:10, Lamar Owen wrote: On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: Another statistic I'd like to see is how much admin time this costs on the average to learn and implement. No more than proper firewalling techniques cost, really. Has anyone really measured this?

Re: [CentOS] transition to ip6

2012-04-02 Thread Stephen Harris
On Mon, Apr 02, 2012 at 05:30:57PM +0200, Peter Eckel wrote: Hi Stephen, Another one has subdivided a /64 into multiple /96's (one for each customer). Yuck. That doesn't make sense at all. SLAAC won't work, Privacy Extensions won't work ... you're stuck with static addresses that

Re: [CentOS] transition to ip6

2012-04-02 Thread Lamar Owen
On Monday, April 02, 2012 11:11:29 AM Stephen Harris wrote: One of my providers gave me a single(!) IPv6 address. Another one has subdivided a /64 into multiple /96's (one for each customer). You might want to rethink the /64 concept! Subscribe to the NANOG list, and let that group know who

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Lamar Owen
On Monday, April 02, 2012 11:27:54 AM John Doe wrote: ...self-compiled... As Jamie Hyneman would say, well, there's your problem. Having said that, I run Plone on a few sites, and the only way to run Plone reliably on CentOS is to use the Plone-distributed unified installer, which compiles

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Lamar Owen
On Monday, April 02, 2012 10:34:58 AM Les Mikesell wrote: So at least another grumpy, overworked full-time administrator for a typical company? Perhaps. It depends upon how willing the existing admins are to learn something new, and on how overworked they are. I'm as overworked as anyone; it

Re: [CentOS] transition to ip6

2012-04-02 Thread Peter Eckel
Hi Les (sorry for calling you 'Lee' before), What is typical or reasonable for source address restrictions? That is, if there are 2 global organizations, and one wants to increase the security on access to a service by limiting to the source addresses that might come from the other, is there

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread m . roth
Ned Slider wrote: On 02/04/12 15:10, Lamar Owen wrote: On Monday, April 02, 2012 08:51:46 AM Les Mikesell wrote: Another statistic I'd like to see is how much admin time this costs on the average to learn and implement. No more than proper firewalling techniques cost, really. Has anyone

[CentOS] CentOS-announce Digest, Vol 86, Issue 1

2012-04-02 Thread centos-announce-request
Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to

Re: [CentOS] NFS Hanging Under Heavy Load

2012-04-02 Thread Ray Van Dolson
On Fri, Mar 30, 2012 at 01:33:10PM -0700, Aaron Blew wrote: UPDATE I rolled a new kernel that's identical to the stock CentOS 2.6.32-220.el6 kernel with the exception of the new idmapper being enabled. Unfortunately there's been no improvement. Did you get a chance to try the RHEL

Re: [CentOS] selinux on/off percentage

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 10:52 AM, Lamar Owen lo...@pari.edu wrote: On Monday, April 02, 2012 11:27:54 AM John Doe wrote: ...self-compiled... As Jamie Hyneman would say, well, there's your problem. Isn't most of the point of running servers to provide a unique service? -- Les Mikesell

Re: [CentOS] centos 6.2 netinstall does not offer create custom layout at Select type of installation in text mode installation

2012-04-02 Thread John Stanley
On Mon, 2012-04-02 at 10:43 -0400, Lamar Owen wrote: On Saturday, March 31, 2012 06:29:49 PM John Stanley wrote: On Sat, 2012-03-31 at 12:38 -0400, Lamar Owen wrote: On Wednesday, March 28, 2012 06:29:12 AM Karanbir Singh wrote: you can still run a vnc install from the netinstall emdia

[CentOS] CentOS 6.2 vs 6.0

2012-04-02 Thread Boris Epstein
Hello listamates, Has anyone tried 6.2? How good is it? Should I specifically download it to install on a new server I am configuring - or is 6.0 good enough in your opinion? Thanks. Boris. ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] CentOS 6.2 vs 6.0

2012-04-02 Thread William Hooper
On Mon, Apr 2, 2012 at 2:04 PM, Boris Epstein borepst...@gmail.com wrote: Hello listamates, Has anyone tried 6.2? How good is it? Should I specifically download it to install on a new server I am configuring - or is 6.0 good enough in your opinion? CentOS 6.2 is just a CentOS 6.0 install

Re: [CentOS] transition to ip6

2012-04-02 Thread Adam Tauno Williams
On Mon, 2012-04-02 at 09:59 -0500, Les Mikesell wrote: On Mon, Apr 2, 2012 at 9:39 AM, Peter Eckel li...@eckel-edv.de wrote: When there really is a requirement that the external server allows only a single address to access it and that can't be changed, you could resort to using a proxy.

Re: [CentOS] transition to ip6

2012-04-02 Thread Adam Tauno Williams
On Mon, 2012-04-02 at 11:11 -0400, Stephen Harris wrote: On Mon, Apr 02, 2012 at 04:39:17PM +0200, Peter Eckel wrote: network. Security-wise there is no difference as you'll never get smaller allocations than /64 per site anyway, so what with respect to filterin *gigglefit One of my

Re: [CentOS] transition to ip6

2012-04-02 Thread Les Mikesell
On Mon, Apr 2, 2012 at 7:33 PM, Adam Tauno Williams awill...@whitemice.org wrote: On Mon, 2012-04-02 at 09:59 -0500, Les Mikesell wrote: On Mon, Apr 2, 2012 at 9:39 AM, Peter Eckel li...@eckel-edv.de wrote: When there really is a requirement that the external server allows only a single

[CentOS] called a spammer today

2012-04-02 Thread Bob Hoffman
thought you would find this interesting... I get a LOT of political spam on one of my mails due to hosting a political site once. I have been slowly blacklisting the bulk companies and 'the net' of private people pushing political spam. There is one guy who has been sending me stuff for years