Re: [CentOS] CentOS automatically blocks port 80 out-of-the-box

2009-04-07 Thread Jeremiah Heller
On 7 Apr 2009, at 15:57, David M Lemcoe Jr. wrote: by default, iptables is blocking inbound port 80 requests. This leads me to believe that I have a non-OS firewall error because I can ping but not http request. Is there a particular reason for this? Or is it a fail on my end? it's a

Re: [CentOS] Recommended Configuration Control Software?

2008-10-27 Thread Jeremiah Heller
On 17 Oct 2008, at 09:41, Sean Carolan wrote: We have several dozen production Linux servers and I would like to have better control over what files are changed, by whom, when they were changed, etc. Because these are all production servers that are in use 24x7, we do not have the luxury of

Re: [CentOS] Recommended Configuration Control Software?

2008-10-27 Thread Jeremiah Heller
On 27 Oct 2008, at 15:56, Jeremiah Heller wrote: On 17 Oct 2008, at 09:41, Sean Carolan wrote: We have several dozen production Linux servers and I would like to have better control over what files are changed, by whom, when they were changed, etc. Because these are all production servers

Re: [CentOS] find

2008-10-07 Thread Jeremiah Heller
On 6 Oct 2008, at 09:33, MHR wrote: On Mon, Oct 6, 2008 at 9:26 AM, Ralph Angenendt [EMAIL PROTECTED] wrote: Hu? | [EMAIL PROTECTED] httpd]$grep -ri virtu conf* | grep -v # | conf.d/ssl.conf:VirtualHost _default_:443 | conf.d/ssl.conf:/VirtualHost | [EMAIL PROTECTED] httpd]$grep -rHi virtu

Re: [CentOS] Re: Yum-updatesd

2008-09-12 Thread Jeremiah Heller
On 12 Sep 2008, at 14:47, Scott Silva wrote: If anyone uses this, do you have something similar? I don't run it on critical servers. I have had too many updates that needed to have manual intervention to get the server running again. Most were trivial to fix, but it still took someone being

Re: [CentOS] iptables question

2008-08-29 Thread Jeremiah Heller
On 28 Aug 2008, at 15:22, Joseph L. Casale wrote: I tried writing out a FWBuilder script but man that thing was something messy to look at, geesh... Since you mentioned a FWBuilder script you might want to look at FireHOL as well (http://firehol.sourceforge.net/). I've been using it for

Re: [CentOS] syslog-ng

2008-08-29 Thread Jeremiah Heller
Have you heard of http://www.ossec.net/? It would do what you like and more. You configure which logs you want watched and who should be emailed/texted/paged according to various levels of criticality. I believe you can have it email you for custom log-events; although it will notice

Re: [CentOS] syslog-ng

2008-08-29 Thread Jeremiah Heller
On 29 Aug 2008, at 05:04, Mag Gam wrote: Oh, so syslog-ng probally isn't the right tool for the job? I'm not sure, I'm not familiar with syslog-ng... or what all the job entails. I can use these tools to monitor my /var/log/kern ? You can use OSSEC to monitor any or all logs. It