Re: [CentOS] system-config-network-tui not part of base install... wtf

2012-07-26 Thread Giles Coochey
component. OK I'm a SOHO with a single server trying to setup a VM. What you're saying is that RHEL/CentOS should not care about my needs because there's a Good Reason(TM) for the way things currently are. We won't have this problem with IPv6... -- Regards, Giles Coochey, CCNA, CCNAS

Re: [CentOS] Question about storage for virtualisation

2012-07-02 Thread Giles Coochey
on systems I put together. Embedded guys try to understand and simplify... Rob -- GPLv3: as worthy a successor as The Phantom Menace, as timely as Duke Nukem Forever, and as welcome as New Coke. -- Regards, Giles Coochey, CCNA, CCNAS NetSecSpec Ltd +44 (0) 7983 877438 http://www.coochey.net http

Re: [CentOS] OT - Is there a package to monitor network traffic

2012-06-15 Thread Giles Coochey
in a manner that would allow me to determine where these packets might be going or from where they originate? tp://lists.centos.org/mailman/listinfo/centos I used to quite like iptraf for a quick summary view of the traffic use. Don't know if there is a CentOS package for it. -- Regards, Giles Coochey

Re: [CentOS] Worrying after IPv6 day...

2012-06-07 Thread Giles Coochey
are not running IPv6 and you're blocking protocol 41 (note this is not port 41, but _protocol_ 41) then you should mitigate most of the IPv6 issues. I would normally assume that your demarc points have a default policy to drop unknown / unspecified traffic. -- Regards, Giles Coochey, CCNA, CCNAS

Re: [CentOS] CentOS 4.8 to 4.9

2012-05-29 Thread Giles Coochey
___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Can he not use http://vault.centos.org/4.9/updates/ as a repository for updates? -- Regards, Giles Coochey, CCNA, CCNAS NetSecSpec Ltd +44 (0) 7983 877438 http://www.coochey.net http

Re: [CentOS] NTP Daemon in not bound to port

2012-05-16 Thread Giles Coochey
On 2012-05-16 13:19, Shiv. NK wrote: Hello Dear Friends, it is CentOS Release 6.2, ntpd is running but do not see bounded to the port udp:123 any guidelines would be very much appreciable. [root@jet mavi]# netstat -ntlp | grep ntpd nothing in output [root@jet mavi]# netstat -ntl |

Re: [CentOS] VPN Traffic

2012-05-15 Thread Giles Coochey
On 15/05/2012 15:56, Shiv. NK wrote: Hi List Members, i understand that perhaps i should not ask this question here. But you all are technical. Therefor, has anyone ever monitor the VPN traffic using any open source tools such as Zabbix/Nagios/Cacti? or any other Thanks Can you provide

Re: [CentOS] VPN Traffic

2012-05-15 Thread Giles Coochey
On 15/05/2012 16:10, Shiv. NK wrote: Can you provide a somewhat less generic term for the VPN traffic? If the VPN has an interface, then you can monitor this like you monitor any other interface, yes with Nagios / Cacti and the like... Dear Glies, Thanks for the information sent. VPN is

Re: [CentOS] Centos 6 - x11vnc auto probing to port 5903

2012-05-09 Thread Giles Coochey
, Giles Coochey, CCNA Security, CCNA NetSecSpec Ltd giles.cooc...@netsecspec.co.uk Tel: +44 (0) 7983 877 438 Live Messenger: gi...@coochey.net http://www.netsecspec.co.uk http://www.coochey.net ___ CentOS mailing list CentOS@centos.org http://lists.centos.org

Re: [CentOS] Reject Action For SPF

2012-05-09 Thread Giles Coochey
are only interested in receiving email from a few 'known' domains... it could work. Seems it would be easier to just blacklist all and whitelist the few? If it is just for internal... perhaps a webmail system with no outside email ability would be the way to go? -- Best Regards, Giles Coochey

Re: [CentOS] Reject Action For SPF

2012-05-09 Thread Giles Coochey
a milter. It doesn't queue the mail and check later - the mail is checked after SMTP DATA and the decision to reject the email is made there and then. So, no, SA does not work after the email gets in the queue, as you say. That is dependent on implementation. -- Best Regards, Giles Coochey

Re: [CentOS] OpenLDAP migration from Centos 5 to 6

2012-05-01 Thread Giles Coochey
configuration mechanism, and will ignore your slapd.conf configuration if that mechnism already exists. I think this config is in /etc/openldap/slapd.d/ Try backing up and removing that folder, then your slapd.conf configuration will actually be read. -- Best Regards, Giles Coochey, CCNA Security

Re: [CentOS] A request from the CentOS Project

2012-04-20 Thread Giles Coochey
On 20/04/2012 12:35, Tilman Schmidt wrote: Am 19.04.2012 23:42, schrieb Giles Coochey: On 19/04/2012 01:28, Larry Martell wrote: 18) If you're on AOL, don't worry about anything I've said here. You're already a fucking laughing stock, and there's no hope for you. Oh, that fateful day when

Re: [CentOS] A request from the CentOS Project

2012-04-19 Thread Giles Coochey
On 19/04/2012 01:28, Larry Martell wrote: 18) If you're on AOL, don't worry about anything I've said here. You're already a fucking laughing stock, and there's no hope for you. Oh, that fateful day when AOL joined usenet, and usenet died. ___

Re: [CentOS] testing a udp socket with netcat

2012-03-14 Thread Giles Coochey
on Wed Mar 14 19:58:13 2012 And your INPUT chain rejects everything that is not matched by those lines above it. You'll need a: -A INPUT -p udp --dport port -j ACCEPT in there before you go to REJECT. -- Best Regards, Giles Coochey NetSecSpec Ltd UK Mobile: +44 7983 877 438 Business Email

Re: [CentOS] testing a udp socket with netcat

2012-03-14 Thread Giles Coochey
On 14/03/2012 14:56, Arif Hossain wrote: On Wed, 2012-03-14 at 14:11 +, Giles Coochey wrote: --ms00020507030501060609 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable On 14/03/2012 13:59, Arif Hossain wrote: On Wed

Re: [CentOS] OT: Sysadmin position

2012-02-29 Thread Giles Coochey
if they just thought they needed _a_ System Administrator. Giles Coochey +44 (0) 7983 877438 CCNAS, CCNA, CCENT NetSecSpec Ltd -- Message sent via my webmail account. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Problems with Microsoft Forefront proxy with yum

2012-02-09 Thread Giles Coochey
On 2012-02-09 15:35, C. L. Martinez wrote: Hello all, How can I configure yum to download updates when I need to authenticate to a Microsoft Forefront proxy?? I have tried to configure http_proxy variable as a http_proxy=http://DOMAIN\\user:passwd@proxy:port/;, but it doesn't works ... I

Re: [CentOS] Problems with Microsoft Forefront proxy with yum

2012-02-09 Thread Giles Coochey
On 2012-02-09 15:35, C. L. Martinez wrote: Hello all, How can I configure yum to download updates when I need to authenticate to a Microsoft Forefront proxy?? I have tried to configure http_proxy variable as a http_proxy=http://DOMAIN\\user:passwd@proxy:port/;, but it doesn't works ... I

Re: [CentOS] Problems with Microsoft Forefront proxy with yum

2012-02-09 Thread Giles Coochey
On 2012-02-09 15:57, C. L. Martinez wrote: On Thu, Feb 9, 2012 at 4:51 PM, Giles Coochey gi...@coochey.net wrote: On 2012-02-09 15:35, C. L. Martinez wrote: Hello all,  How can I configure yum to download updates when I need to authenticate to a Microsoft Forefront proxy?? I have tried

Re: [CentOS] postfix - reject of incoming mail due to helo check??

2012-02-02 Thread Giles Coochey
On 2012-02-02 15:39, Ned Slider wrote: I would recommend removing reject_unknown_client from your smtpd_sender_restrictions. I would not recommend that, I would recommend you fix your DNS. If you have a lot of mail throughput perhaps run a caching-DNS server or proxy to improve performance

Re: [CentOS] postfix - reject of incoming mail due to helo check??

2012-02-02 Thread Giles Coochey
On 02/02/2012 17:35, Ned Slider wrote: On 02/02/12 15:44, Giles Coochey wrote: On 2012-02-02 15:39, Ned Slider wrote: I would recommend removing reject_unknown_client from your smtpd_sender_restrictions. I would not recommend that, I would recommend you fix your DNS. If you have a lot

Re: [CentOS] squirrelmail for 6.2

2012-02-01 Thread Giles Coochey
On 2012-02-01 13:21, B.J. McClure wrote: On Wed, 2012-02-01 at 15:09 +0200, Nikos Gatsis - Qbit wrote: Hello list. I have install centos-release-6-2.el6.centos.7.x86_64 and I cant find squirrelmail. Does any know why? Check epel repo. squirrelmail-1.4.22-2.el6.noarch : webmail client

Re: [CentOS] squirrelmail for 6.2

2012-02-01 Thread Giles Coochey
On 2012-02-01 14:40, Alain Péan wrote: Le 01/02/2012 15:24, Giles Coochey a écrit : Hello list. I have install centos-release-6-2.el6.centos.7.x86_64 and I cant find squirrelmail. Does any know why? Check epel repo. squirrelmail-1.4.22-2.el6.noarch : webmail client

Re: [CentOS] Machine becoming irresponsive

2012-01-23 Thread Giles Coochey
On 2012-01-23 15:13, Dotan Cohen wrote: On Mon, Jan 23, 2012 at 16:23, Phil Schaffner philip.r.schaff...@nasa.gov wrote: I'd have a look at why an apparently Internet-facing server is 5 point releases, plus a lot of subsequent errata, behind the current 5.7 release level; and what resultant

Re: [CentOS] Theoretical Firewall Specs?

2012-01-18 Thread Giles Coochey
On Wed, January 18, 2012 00:52, John R Pierce wrote: I'd expect with a firewall-centric OS distribution like pfSense, a dual core 2-3Ghz I3 could easily keep up with gigE and quite complex rule sets, several network zones. No storage requirements at all, unless you plan on keeping your

Re: [CentOS] anyone doing automatic yum updates via yum-updatesd on production servers?

2012-01-17 Thread Giles Coochey
Best reason I can think of is application feature deprecation. If an update contains changes to the default configuration file then the file will normally be installed with the '.rpmnew' extension. If an application decides to deprecate and phase out options which you actually use in the current

Re: [CentOS] Centos 6.2 Postfix - forward through SMTP smarthost with SMTP-AUTH

2012-01-11 Thread Giles Coochey
On 11/01/2012 00:31, Mail Lists wrote: On 01/10/2012 05:54 PM, Giles Coochey wrote: Hi All, I have set up three servers in a development environment. Via CR they're updated to Centos 6.2 It appears that these servers have postfix installed on them by default, which unfortunately I'm not very

Re: [CentOS] Centos 6.2 Postfix - forward through SMTP smarthost with SMTP-AUTH

2012-01-11 Thread Giles Coochey
On Wed, January 11, 2012 10:09, John R Pierce wrote: On 01/11/12 12:50 AM, Giles Coochey wrote: I don't really have the enerygy to do that, thanks anyway. I'll uninstall postfix and use sendmail. Just thought maybe there was a quick way to keep the default MTA on the system. the first google

Re: [CentOS] Centos 6.2 Postfix - forward through SMTP smarthost with SMTP-AUTH

2012-01-11 Thread Giles Coochey
On 11/01/2012 10:33, Benjamin Hackl wrote: $ cat /etc/postfix/main.cf myorigin=yourdomain.com relayhost=your.smarthost.com smtp_sasl_auth_enable=yes ## you probably want to limit how postfix authenticates # smtp_sasl_security_options=noanonymous # smtp_sasl_mechanism_filter=login

Re: [CentOS] Centos 6.2 Postfix - forward through SMTP smarthost with SMTP-AUTH [RESOLVED]

2012-01-11 Thread Giles Coochey
On 11/01/2012 17:36, Giles Coochey wrote: On 11/01/2012 10:33, Benjamin Hackl wrote: $ cat /etc/postfix/main.cf myorigin=yourdomain.com relayhost=your.smarthost.com smtp_sasl_auth_enable=yes ## you probably want to limit how postfix authenticates # smtp_sasl_security_options=noanonymous

Re: [CentOS] bug submission justified for distribution of obsolete java software?

2012-01-10 Thread Giles Coochey
On Tue, January 10, 2012 17:15, Les Mikesell wrote: On Tue, Jan 10, 2012 at 8:47 AM, m.r...@5-cent.us wrote: One *could* argue that Java is a bug, being a) so error-prone, b) so vulnerable to attack, and c) so huge and slow, and shouldn't be allowed But you'd be wrong on all counts.

[CentOS] Centos 6.2 Postfix - forward through SMTP smarthost with SMTP-AUTH

2012-01-10 Thread Giles Coochey
Hi All, I have set up three servers in a development environment. Via CR they're updated to Centos 6.2 It appears that these servers have postfix installed on them by default, which unfortunately I'm not very well acquainted with. All I want is a quick and dirty way to enable these hosts

Re: [CentOS] monitoring space in directories

2012-01-06 Thread Giles Coochey
On Fri, January 6, 2012 16:42, Alan McKay wrote: Might be overkill but cacti or Nagios+PNP would do this... PNP? What's that ? I already have Icinga installed. http://docs.pnp4nagios.org/pnp-0.4/start ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] After Latest Update...

2011-11-14 Thread Giles Coochey
On Mon, November 14, 2011 13:39, Phil Savoie wrote: Hi All, Using the following to ssh into my home to get mail, I suddenly get this: ssh -o TCPKeepAlive=yes -o ServerAliveInterval=240 -L 110:192.168.100.108:110 phil@FQDN phil@FQDN's password: bind: Cannot assign requested address

Re: [CentOS] Centos 6 - named with internal zone file and forwarding

2011-10-23 Thread Giles Coochey
On 21/10/2011 16:27, Les Mikesell wrote: On Fri, Oct 21, 2011 at 4:12 AM, Giles Coocheygi...@coochey.net wrote: I have two Centos 6 servers running BIND. I have configured the two servers to run internal zones as a master / slave setup. My gateway runs DNSmasq and I would like all other

[CentOS] Centos 6 - named with internal zone file and forwarding

2011-10-21 Thread Giles Coochey
Hi All, I have two Centos 6 servers running BIND. I have configured the two servers to run internal zones as a master / slave setup. My gateway runs DNSmasq and I would like all other requests for lookups to be sent to the DNSmasq system. I have added the following: forward first;

Re: [CentOS] Samba + Openldap

2011-10-21 Thread Giles Coochey
On Fri, October 21, 2011 12:14, Adam Tauno Williams wrote: On Tue, 2011-10-18 at 16:43 -0400, Al wrote: Anyone have an update tutorial/howto for samba to authenticate to ldap? This are lots of docs. But DO NOT DO IT. A Samba 3.x DC is very very *obsolete*. The Windows world has moved on

Re: [CentOS] What happened to 6.1

2011-10-21 Thread Giles Coochey
On Fri, October 21, 2011 15:23, Johnny Hughes wrote: There is SOME QA ... just not all the QA that they get as part of the main release. They are not right off the build and into the server ... we do our functionality test suite prior to pushing CR (and other tests, and look for repo

Re: [CentOS] What happened to 6.1

2011-10-21 Thread Giles Coochey
On Fri, October 21, 2011 15:39, Bowie Bailey wrote: On 10/21/2011 9:33 AM, Giles Coochey wrote: OK. So my question is. I have Centos 6.0 installed on a couple of systems. I have not modified any repos or installed any repos etc... Am I receiving security updates via 'yum update', which

Re: [CentOS] What happened to 6.1

2011-10-21 Thread Giles Coochey
On Fri, October 21, 2011 16:02, Nicolas Thierry-Mieg wrote: Giles Coochey wrote: So Centos 6.0 is EOL? not familiar with the rhel life cycle are you? Read this: https://access.redhat.com/support/policy/updates/errata/ ___ Thanks. I see

Re: [CentOS] What happened to 6.1

2011-10-21 Thread Giles Coochey
On Fri, October 21, 2011 16:24, Johnny Hughes wrote: On 10/21/2011 09:17 AM, Giles Coochey wrote: However, if I install whatever latest version of an operating system distribution. I expect to be able to run something that will give me stable security-updates for that distribution

Re: [CentOS] Centos 6 Server has no GUI

2011-07-11 Thread Giles Coochey
On Mon, July 11, 2011 16:43, Keith Beeby wrote: Hi, So first daft question with Centos 6 (someone had to be first!) I've setup Centos 6 as a Server but as with Centos 5 it used to boot into the GUI but v6 doesn't do this, startx etc doesn't seem to work to launch the GUI Any suggestions on

Re: [CentOS] Celebrating Centos 6.0 Day World-wide

2011-07-10 Thread Giles Coochey
On 09/07/2011 23:20, Ljubomir Ljubojevic wrote: Craig White wrote: The reality is that applications are becoming more and more web based SAAS and as the costs of specific applications needed on specific platforms (ie, Quickbooks) rise, web based SAAS will replace them. The point is that for end

Re: [CentOS] Wierd cursor jump when I type letter y

2011-07-10 Thread Giles Coochey
rate? CentOS 5.5 Gnome, I mostly use Firefox and Thunderbird. Check your key modifiers, sometimes they get stuck - serves us right for eating biscuits at the keyboard. By key modifiers I mean (Ctrl-L, Alt, AltGr, Ctrl-R, Fn etc...) -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems

Re: [CentOS] how to enable Flow Control on CentOS?

2011-07-10 Thread Giles Coochey
doesn't work, and consider turning it off a best-practice. This should be avoided - once autonegotiation is turned off, it will not work by definition, creating a self-enforcing problem. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131

Re: [CentOS] Celebrating Centos 6.0 Day World-wide

2011-07-10 Thread Giles Coochey
On 10/07/2011 10:40, Ron Blizzard wrote: On Sun, Jul 10, 2011 at 2:19 AM, Giles Coocheygi...@coochey.net wrote: Can your company afford to be without your apps and data for a couple of weeks, while some hacker organisation has it? I think not. But it's not like you can't do both. The Cloud

Re: [CentOS] Celebrating Centos 6.0 Day World-wide

2011-07-10 Thread Giles Coochey
On 10/07/2011 11:22, Ron Blizzard wrote: On Sun, Jul 10, 2011 at 4:02 AM, Giles Coocheygi...@coochey.net wrote: Well, do both then, but at double the cost!! The whole point to CEOs and CFOs about going with the Cloud is that they will save money on IT infrastructure and possibly get rid of

Re: [CentOS] Celebrating Centos 6.0 Day World-wide

2011-07-10 Thread Giles Coochey
On 10/07/2011 11:40, Ron Blizzard wrote: On Sun, Jul 10, 2011 at 4:32 AM, Giles Coocheygi...@coochey.net wrote: The reference to 'porn' was meant to be a light hearted reference to 'your personal stuff', as opposed to 'your work stuff'. Okay, you've made good points. Sorry about

Re: [CentOS] how to enable Flow Control on CentOS?

2011-07-10 Thread Giles Coochey
On 10/07/2011 12:57, John R Pierce wrote: On 07/10/11 1:46 AM, Giles Coochey wrote: Fiber is not a CSMA/CD medium, it's a Point to Point medium - Duplex is meaningless. so is twisted pair. ha... ha... of course, interesting. I guess what I was trying to say is that for fiber connections

Re: [CentOS] how to enable Flow Control on CentOS?

2011-07-09 Thread Giles Coochey
an unmanaged switch then it's time to change provider :-) - they obviously are cheapskates and don't have any change management control on their systems. Gigabit is different. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350

Re: [CentOS] Celebrating Centos 6.0 Day World-wide

2011-07-09 Thread Giles Coochey
On 09/07/2011 20:13, Ljubomir Ljubojevic wrote: I already have several friends lined up for installation. But you should also be prepared to help them with install and primary setup, like adding third party repositories for audio/video codecs and similar. Ljubomir And the next ten years or

Re: [CentOS] how to enable Flow Control on CentOS?

2011-07-08 Thread Giles Coochey
of faffing about and almost always works a treat. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350 5401 6693 Business Email: giles.cooc...@netsecspec.co.uk Email/MSN/Live Messenger: gi...@coochey.net Skype: gilescoochey

Re: [CentOS] inconsistent DNS results - ping vs dig vs nslookup

2011-06-23 Thread Giles Coochey
Can you avoid the bar.baz.domain.com.domain.com by searching for bar.baz.domain.com. (note trailing dot) ?? On Thu, June 23, 2011 11:06, John Hodrien wrote: On Wed, 22 Jun 2011, Ljubomir Ljubojevic wrote: As Les wrote in another branch of the thread, search clause is if you try name

Re: [CentOS] inconsistent DNS results - ping vs dig vs nslookup

2011-06-23 Thread Giles Coochey
On Thu, June 23, 2011 11:53, John Hodrien wrote: On Thu, 23 Jun 2011, Giles Coochey wrote: Can you avoid the bar.baz.domain.com.domain.com by searching for bar.baz.domain.com. (note trailing dot) ?? Hmm, good suggestion, that I'd not considered, Thanks. It does appear to clear that up

Re: [CentOS] inconsistent DNS results - ping vs dig vs nslookup

2011-06-23 Thread Giles Coochey
On Thu, June 23, 2011 12:07, John Hodrien wrote: On Thu, 23 Jun 2011, Giles Coochey wrote: Yes, I'm sure it will depend on the implementation, the trailing dot was somewhat an educated guess from previous ISC BIND dig tool use. :-) As for both the A and record, I think you will have

Re: [CentOS] Paypal phishing warning

2011-06-09 Thread Giles Coochey
On Thu, June 9, 2011 10:51, Rudi Ahlers wrote: On Thu, Jun 9, 2011 at 8:39 AM, MR ZenWiz mrzen...@gmail.com wrote: Sorry for the cross-post, and off-topic at that, but: This morning I received a very authentic looking email from info.paypal.com, claiming that Paypal wanted me to update my

Re: [CentOS] RECALL: http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-24 Thread Giles Coochey
, just don't rise to the bait of a troll - bite once if you really must, but remember they are just trying to add noise to an otherwise rational discussion group. So it is not worth getting into an elongated thread about it. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681

Re: [CentOS] VPN inside VPN?

2011-02-09 Thread Giles Coochey
, but cannot ping the PPTP gateway, and half minute later the PPTP got disconnected. No obvious error message in the PPTP log. How is this related to centos? quite but at first glance this looks like a MTU problem. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL

Re: [CentOS] OT: looking for system Rescue CD with LSI MegaRAID 8708EM2 drivers pre-installed

2011-02-03 Thread Giles Coochey
On 03/02/2011 11:24, Rudi Ahlers wrote: Hi all, Does anyone know of a Linux rescue CD with driver for a SLI MegaRAID 8708? You might try the Gentoo Live CD with the domegaraid boot option. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626

Re: [CentOS] Lost root access

2011-02-03 Thread Giles Coochey
It will give you the same result and mount stuff without the need to chroot etc... -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350 5401 6693 Email/MSN/Live Messenger: gi...@coochey.net Skype: gilescoochey smime.p7s

Re: [CentOS] Lost root access

2011-02-02 Thread Giles Coochey
. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350 5401 6693 Email/MSN/Live Messenger: gi...@coochey.net Skype: gilescoochey smime.p7s Description: S/MIME Cryptographic Signature

Re: [CentOS] redirecting traffic using iptables

2011-01-31 Thread Giles Coochey
, but not required. ANy ideas, anyone? Read the transparent proxy howto... you may need to do SNAT as well as DNAT. http://tldp.org/HOWTO/TransparentProxy-6.html -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350 5401 6693 Email/MSN

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread Giles Coochey
too. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350 5401 6693 Email/MSN/Live Messenger: gi...@coochey.net Skype: gilescoochey smime.p7s Description: S/MIME Cryptographic Signature

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread Giles Coochey
the message and processes it before the Screensaver sees anything If you want to disable CTRL-ALT-BACKSPACE use the X option DontZap in your X configuration. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350 5401 6693 Email

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread Giles Coochey
and don't need to comply with PCI/DSS in their offices. Even companies that do in-house card payment processing only have to enforce PCI/DSS in their CDE. I can't speak for HIPPA, SOX etc... but automatic locking is part of IT best practice. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread Giles Coochey
for an engineer to gain access to a user's PC automatically arises suspicion Hi Rudi, Your stance on this is counter-intuitive to me, are you able to cite any good reference which recommends that administrators know user passwords? -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31

Re: [CentOS] How to disable screen locking system-wide?

2011-01-20 Thread Giles Coochey
:44 Subject: [CentOS] How to disable screen locking system-wide? To: CentOS mailing list centos@centos.org On Thu, Jan 20, 2011 at 6:29 PM, Giles Coochey gi...@coochey.net wrote: On 20/01/2011 17:11, Rudi Ahlers wrote: The message I'm trying to bring across is that users in the company shouldn't

Re: [CentOS] Intel DH67BL + CentOS 5.5 IRQ #177 nobody cared

2011-01-18 Thread Giles Coochey
? -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 Email/MSN/Live Messenger: gi...@coochey.net Skype: gilescoochey smime.p7s Description: S/MIME Cryptographic Signature ___ CentOS mailing

Re: [CentOS] Intel DH67BL + CentOS 5.5 IRQ #177 nobody cared

2011-01-18 Thread Giles Coochey
On 18/01/2011 15:34, Drew Weaver wrote: Ah, it is a PCI card and there is only one PCI slot.. -Drew -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Giles Coochey Sent: Tuesday, January 18, 2011 9:24 AM To: centos@centos.org Subject

Re: [CentOS] Intel DH67BL + CentOS 5.5 IRQ #177 nobody cared

2011-01-18 Thread Giles Coochey
Plug and Play OS -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350 5401 6693 Email/MSN/Live Messenger: gi...@coochey.net Skype: gilescoochey smime.p7s Description: S/MIME Cryptographic Signature

Re: [CentOS] Intel DH67BL + CentOS 5.5 IRQ #177 nobody cared

2011-01-18 Thread Giles Coochey
://www.lindevdoc.org/wiki/irqpoll_(kernel_parameter) -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 GIB Mobile: +350 5401 6693 Email/MSN/Live Messenger: gi...@coochey.net Skype: gilescoochey smime.p7s Description: S/MIME Cryptographic Signature

Re: [CentOS] tcpdump; how to dump all

2011-01-14 Thread Giles Coochey
capture.cap It creates a file capture.cap that can be read by a packet analyzer - e.g. wireshark. -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 Gib Mobile: +350 5401 6693 Email/MSN/Live Messenger: gi...@coochey.net Skype

Re: [CentOS] Nerd rage (Was: IPV4 is nearly depleted, are you ready for IPV6?)

2010-12-08 Thread Giles Coochey
, the horror of it. Oh, BTW: vim over emacs. ;-) -- Best Regards, Giles Coochey NetSecSpec Ltd NL T-Systems Mobile: +31 681 265 086 NL Mobile: +31 626 508 131 Gib Mobile: +350 5401 6693 Email/MSN/Live Messenger: gi...@coochey.net Skype: gilescoochey smime.p7s Description: S/MIME

Re: [CentOS] Pptp vpn server

2010-11-04 Thread Giles Coochey
On 04/11/2010 13:31, Rob Kampen wrote: I've been watching this thread and offer the following observation. some years ago when working in the corporate world - most internet connections were still via modem - I used to connect via VPN to the corporate network from remote offices. Even

Re: [CentOS] network interface question

2010-10-15 Thread Giles Coochey
On 15/10/2010 10:36, John Doe wrote: From: Paras pradhanpradhanpa...@gmail.com I have eight nics and its getting difficult to me which MAC id represents which physical port. Any way to find this? Unless you are 100% sure the nics detection follow a sequential order that matches the nics

Re: [CentOS] Wireless problem

2010-10-15 Thread Giles Coochey
try installing the firmware available from Elrepo for this card: http://elrepo.org/tiki/rt73usb-firmware Once done, if it still doesn't work provide a directory listing of /lib/firmware and any other error messages you get. -- Best Regards, Giles Coochey NetSecSpec Ltd NL Mobile: +31 626

Re: [CentOS] sendmail substitute?

2010-10-14 Thread Giles Coochey
On 14/10/2010 08:44, Roland RoLaNd wrote: Hi all, i'm following online guides to secure my centos 5.4 it's advised to turn off sendmail service among others. but how can i forward my /var/log/mail to my webmail ? http://blog.zloether.com/2009/07/install-ssmtp-in-centos.html

Re: [CentOS] sendmail substitute?

2010-10-14 Thread Giles Coochey
On 14/10/2010 09:11, Alexander Dalloz wrote: Hi all, i'm following online guides to secure my centos 5.4 it's advised to turn off sendmail service among others. but how can i forward my /var/log/mail to my webmail ? To update to CentOS 5.5 with current updates (especially the kernel!)

Re: [CentOS] sendmail substitute?

2010-10-14 Thread Giles Coochey
What could be so insecure about using sendmail localy? Don't start the daemon, so it is not listening... Or the firewall will block the port anyway... If the mail is sent to a trusted mail server, there is no risks. Am I missing something? On a hardened, production, well configured server

Re: [CentOS] sendmail substitute?

2010-10-14 Thread Giles Coochey
On 14/10/2010 11:48, Scott Robbins wrote: http://blog.zloether.com/2009/07/send-email-from-linux-shell.html This also, you will note, sends email through (in the example) through gmail, that is, going outside the machine. I thought that was what the OP requested?

Re: [CentOS] installing centOS5.5

2010-10-14 Thread Giles Coochey
On 14/10/2010 14:45, Ritika Garg wrote: Want to install CentOS 5.5 by burning the image on DVD. On the link:http://mirrors.hns.net.in/centos/5.5/isos/x86_64/, there is a list given. CentOS-5.5-x86 64-bin-DVD.torrent is in the list. So is the download of the .iso possible only through

Re: [CentOS] the wandering MAC?

2010-10-13 Thread Giles Coochey
On 13/10/2010 18:37, Boris Epstein wrote: On Wed, Oct 13, 2010 at 12:35 PM, Benjamin Franzjfr...@freerun.com wrote: On 10/13/2010 09:28 AM, Boris Epstein wrote: What's happening is, it is showing up under one of the two MAC's: either 00:0a:cd:1a:c1:71 or 00:00:00:00:c1:71. If you reboot it

Re: [CentOS] the wandering MAC?

2010-10-13 Thread Giles Coochey
On 13/10/2010 19:00, Timo Schoeler wrote: On 10/13/2010 06:46 PM, Giles Coochey wrote: I've tended to find that when a card is failing the MAC address starts setting itself to FF:FF:FF:FF:FF:FF not 00:00:00:XX:XX:XX FF:FF:FF:FF:FF:FF is broadcast. Sorry... in order to qualify my statement

Re: [CentOS] using a Laptop as a KVM console?

2010-10-13 Thread Giles Coochey
On 13/10/2010 19:31, Rudi Ahlers wrote: Hi all, Has anyone seen something like this before: I want to use a laptop as a KVM console. Basically when a technician goes to one of our datacentres, or clients he has to look for a free LCD, keyboard mouse to connect to a server (no network

Re: [CentOS] using a Laptop as a KVM console?

2010-10-13 Thread Giles Coochey
On 13/10/2010 20:35, Rudi Ahlers wrote: On Wed, Oct 13, 2010 at 7:51 PM, Giles Coocheygi...@coochey.net wrote: On 13/10/2010 19:31, Rudi Ahlers wrote: Hi all, Has anyone seen something like this before: I want to use a laptop as a KVM console. Basically when a technician goes to one

Re: [CentOS] using a Laptop as a KVM console?

2010-10-13 Thread Giles Coochey
On 13/10/2010 20:52, Rudi Ahlers wrote: On Wed, Oct 13, 2010 at 8:42 PM, Giles Coocheygi...@coochey.net wrote: Yes, for the lower end of the market you won't find that capability built in, but going forward - if you're looking for a server that is going to be co-located then remote

Re: [CentOS] security updates

2010-10-11 Thread Giles Coochey
On Mon, October 11, 2010 13:36, Ritika Garg wrote: I can't understand exactly what these security updates do? Why is there a need to have a security update? ___ What is your IP? :-D ___ CentOS mailing list

Re: [CentOS] OT: linux desktop market share more than 1%

2010-10-07 Thread Giles Coochey
On Thu, October 7, 2010 14:05, Rudi Ahlers wrote: You can register on this site if you use linux on your desktop, to prove that we have at least more than 1% market share today :-) http://www.dudalibre.com/gnulinuxcounter?lang=en I don't get it... I use Windows on the desktop and UNIX on

Re: [CentOS] TCP flow latency graphs

2010-09-13 Thread Giles Coochey
On Mon, September 13, 2010 15:28, przemol...@poczta.fm wrote: Hello, we have one application which gets some data from our database but to print just one result it connects many times to the database over WAN. Of course there are some performance related problems with this type of work. I'd

Re: [CentOS] OT: sendmail access

2010-09-12 Thread Giles Coochey
On Sun, September 12, 2010 07:42, Richard Gliebe wrote: Now I need the right sendmail.cf entries for SASL-AUTH (we don't work with *.mc Files or similar. We directly edit the sendmail.cf files ;-) I don't know if this is complete, but you could try the following: # list of authentication

Re: [CentOS] OT: sendmail access

2010-09-12 Thread Giles Coochey
But, when I'm trying to send an email, the user still becames: Relaying denied. Proper authentication required. Before SASL, the user becomes only Relaying denied In Outlook 2003 in Email Preferences, the authentication for smtp is activ. the outgoing server (SMTP) needed

Re: [CentOS] Traffic shaping on CentOS

2010-09-10 Thread Giles Coochey
On Fri, September 10, 2010 05:51, Emmanuel Noobadmin wrote: I've been trying to do traffic shaping on one of my public servers and after reading up, it seems like the way to do so is via tc/htb. However, most of the documentation seems at least half a decade old with nothing new recently.

Re: [CentOS] Traffic shaping on CentOS

2010-09-10 Thread Giles Coochey
On Fri, September 10, 2010 13:20, Emmanuel Noobadmin wrote: On 9/10/10, John R Pierce pie...@hogranch.com wrote: On 09/09/10 8:51 PM, Emmanuel Noobadmin wrote: So I'm wondering is tc the current and recommended method for traffic shaping on CentOS or is there some newer method that has

Re: [CentOS] Interpreting logwatch

2010-09-08 Thread Giles Coochey
Every few days I see in the logwatch on my Centos-5.5 web-server what seems like a rather feeble break-in attempt. Eg today I see --- 403 Forbidden /phpMyAdmin/scripts/setup.php: 2 Time(s) /phpmyadmin/scripts/setup.php: 2 Time(s) 404 Not

Re: [CentOS] Updates offered annoyance

2010-08-25 Thread Giles Coochey
On Wed, August 25, 2010 16:19, Robert Heller wrote: At Wed, 25 Aug 2010 14:41:11 +0100 CentOS mailing list centos@centos.org wrote: Robert, On 25 August 2010 14:24, Robert Heller hel...@deepsoft.com wrote: The main problem is that yum is NOT well written to deal with a slow and

Re: [CentOS] PAM_shield locking me out?

2010-08-24 Thread Giles Coochey
On Tue, August 24, 2010 17:29, Rob Kampen wrote: Yesterday I installed pam_shield and followed the testing suggested and thought all was well. today I find that I cannot get to my email account, I can login via ssh okay (uses keys) but su and sudo give segmentation faults. I am guessing due

<    1   2