Re: [CentOS] Linux malware attack

2014-03-21 Thread Thomas Harold
On 3/19/2014 2:50 PM, Ned Slider wrote: Just to add, I'm sure everyone has already read and implemented many of the suggestions here: http://wiki.centos.org/HowTos/Network/SecuringSSH Numbers 2 and 7 have already been highlighted in this thread. #1 These days I would say that 8 chars

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-30 Thread Thomas Harold
On 8/28/2011 12:37 PM, Les Mikesell wrote: On Sun, Aug 28, 2011 at 10:20 AM, Keith Robertske...@karsites.net wrote: The CentOS Forums are a very very good resource for many people and the people spending time managing and posting there are doing a very good job. I'm guessing you were unable

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-30 Thread Thomas Harold
On 8/25/2011 7:05 PM, Always Learning wrote: On Thu, 2011-08-25 at 14:36 -0700, John R Pierce wrote: On 08/25/11 1:45 PM, Always Learning wrote: I have broken-up the very large conf file (/etc/httpd/conf/httpd.conf) into 3 main parts. Part 1 is left in situ. Parts 2 and 3 are located

Re: [CentOS] Adding the [SOLVED] Tag to break threads -- multiple factors

2011-07-29 Thread Thomas Harold
On 7/28/2011 5:01 PM, Spiro Harvey wrote: the thing is that not all mail clients will set the in-reply-to headers, whuch is why clients like thunderbird, evolution and mutt will use the subject line as well to thread messages. Apple Mail does that too and it makes the threading unusable IMO.

Re: [CentOS] yum segfault - rpmforge problem?

2011-07-26 Thread Thomas Harold
On 7/26/2011 12:12 PM, Karanbir Singh wrote: On 07/26/2011 04:59 PM, Leonard den Ottolander wrote: Seems an issue with yum too, seeing that it segfaults over bad data. This has been reported upstream: https://bugzilla.redhat.com/show_bug.cgi?id=725798 I dont really see that as a yum issue,

Re: [CentOS] Power-outage

2011-07-01 Thread Thomas Harold
On 7/1/2011 10:59 AM, Robert Heller wrote: APC UPSes are supported by apcupsd. Other brands, not so much. Some (read: cheaper models) have their own special protocol and don't include Linux support. These solutions are intended for the cheaper or otherwise 'unsupported' UPSes. It *sounds*

Re: [CentOS] unofficial ext3 and ext4 compare

2011-06-27 Thread Thomas Harold
On 6/27/2011 8:10 AM, Jerry Geis wrote: I have something like 300G I routinely backup. This includes some large 12Gig images and other files. I had been using ext3 on an external USB disk for part of the process. Under ext3 doing rsync -a /home /mnt/external_back/backup.jun.27.2011 it took

Re: [CentOS] ext4 in CentOS 5.6?

2011-06-23 Thread Thomas Harold
On 6/23/2011 12:16 PM, PJ wrote: I'm sure many are running ext4 FS's in production, but just want to be re-assured that there are not currently any major issues before starting a new project that looks like it will be using ext4. I've previously been using xfs but the software for this

Re: [CentOS] Possible to use multiple disk to bypass I/O wait?

2011-06-09 Thread Thomas Harold
On 6/9/2011 1:09 PM, Emmanuel Noobadmin wrote: On 6/10/11, Markus Falbmarkus.f...@fasel.at wrote: Yes, but before doing this be sure that your Software does not need atime. For a brief moment, I had that sinking Oh No... why didn't I see this earlier feeling especially since I've already

Re: [CentOS] Possible to use multiple disk to bypass I/O wait?

2011-06-09 Thread Thomas Harold
On 6/9/2011 1:26 PM, John R Pierce wrote: On 06/09/11 2:24 AM, Emmanuel Noobadmin wrote: Alternatively, if I mdraid mirror the existing disk, would md be smart enough to read using the other disk while the first's tied up with the first process? that woudl be my first choice, and yes, queued

Re: [CentOS] High system load but low cpu usage

2011-06-09 Thread Thomas Harold
On 6/9/2011 1:02 PM, Emmanuel Noobadmin wrote: On 6/9/11, Steven Tardys...@its.msstate.edu wrote: top Cpu(s) line is averaged for all cpus/cores. to display individual cpus/cores press: 1 you'll likely see one cpu/core being pegged with iowait. to identify the offending process within

Re: [CentOS] hard disk install failure

2011-06-07 Thread Thomas Harold
On 6/7/2011 11:22 AM, m.r...@5-cent.us wrote: Timothy Murphy wrote: Right, I just looked it up, and I see it's an ADSL modem. Look at your IP address, and I'll bet you're 192.168.0.x, or 192.168.1.x. Whatever it is, try pinging 192.168.[0 or 1].1. Whichever it is, pull up your browser, and

Re: [CentOS] hard disk install failure

2011-06-07 Thread Thomas Harold
On 6/7/2011 1:04 PM, Timothy Murphy wrote: No. I was rung one day by a lady at my ISP (Eircom), who told me I had been chosen as a recipient of their new Ultimate system, which would increase my speed from 5Mb/s to 14Mb/s, at no extra cost! Could be newer DSL technology, or could simply be

Re: [CentOS] Good book on Linux Admin (Centos 5.5)

2011-06-03 Thread Thomas Harold
On 6/2/2011 4:18 PM, Les Mikesell wrote: The things I always look for and almost never find are (a) A split between tutorial (step-by-step for common uses) and reference sections (that have all the options). Once you've followed the tutorial you won't want to wade through that again to

Re: [CentOS] Grep: show me this line and the next N lines?

2011-05-31 Thread Thomas Harold
On 5/31/2011 3:43 AM, Dotan Cohen wrote: On Tue, May 31, 2011 at 01:26, John R. Dennisonj...@gerdesas.com wrote: On Tue, May 31, 2011 at 01:10:40AM +0300, Dotan Cohen wrote: Thanks, all. I did actually look at the grep manpage but after a few screenfuls it became tl;dr and I started just

Re: [CentOS] SSD for Centos SWAP /tmp /var/ partition

2011-05-27 Thread Thomas Harold
On 5/26/2011 8:04 AM, Ljubomir Ljubojevic wrote: John Hodrien wrote: On Thu, 26 May 2011, Emmanuel Noobadmin wrote: Personally, I'm averse to using SSD with any important long term data is the nightmare that I could one day wake up to find everything gone without any means of recovery.

Re: [CentOS] SSD for Centos SWAP /tmp /var/ partition

2011-05-23 Thread Thomas Harold
On 5/23/2011 7:03 AM, Timothy Murphy wrote: yonatan pingle wrote: On Sun, May 22, 2011 at 2:06 PM, Keith Roberts anyways - if it's for home usage Don't think twice get an SSD . Why? I've read most of the articles in this thread, and I haven't seen anything that persuades me SSD would be

Re: [CentOS] Web based file versioning frontend

2011-05-23 Thread Thomas Harold
On 5/20/2011 4:00 PM, Les Mikesell wrote: On 5/20/11 1:16 PM, Joseph L. Casale wrote: Git and Gitweb? Thought of that, is there anything that can monitor for changes so I can avoid a commit command for every script, as they all dump to an already well organized tree, I was hoping to monitor

Re: [CentOS] [OT] 8-15 TB storage: any recommendations?

2010-01-08 Thread Thomas Harold
On 1/7/2010 12:28 PM, Joseph L. Casale wrote: I also heard that disks above 1TB might have reliability issues. Maybe it changed since then... I remember rumors about the early 2TB Seagates. Personally, I won't RAID SATA drives over 500GB unless they're enterprise-level ones with the limits

Re: [CentOS] [OT] 8-15 TB storage: any recommendations?

2010-01-07 Thread Thomas Harold
On 1/7/2010 10:54 AM, John Doe wrote: From: Karanbir Singhmail-li...@karan.org On 01/07/2010 02:30 PM, Boris Epstein wrote: KB, thanks. When you say dont go over 1 TiB in storage per spindle what are you referring to as spindle? disk. it boils down to how much data do you want to put under

Re: [CentOS] unattended fsck on reboot

2010-01-06 Thread Thomas Harold
On 1/6/2010 2:36 PM, Alan McKay wrote: On Wed, Jan 6, 2010 at 1:05 PM, Brian Mathisbrian.mat...@gmail.com wrote: No out of band management? My thoughts exactly. All servers should have this these days, be it an integrated card or an IP-based KVM. Oh believe me, I want to get there. It's

Re: [CentOS] PAM configuration?

2010-01-05 Thread Thomas Harold
On 1/4/2010 12:42 PM, Roland Roland wrote: also is there a way I could enable the PAM module which uses crack library to check the strength of a users password? any help with this is truly appreciated... /etc/pam.d/system-auth-ac The default is: passwordrequisite pam_cracklib.so

Re: [CentOS] PAM configuration?

2010-01-05 Thread Thomas Harold
On 1/5/2010 7:31 AM, Kai Schaetzl wrote: For what do you need the hash? You don't supply the hash for logging in. In the case of SSH login, you are correct that the hash is not used to login. But the attacker may find a way to read the hash out of the /etc/shadow file, or the same password

Re: [CentOS] IPTABLEs and port scanning

2010-01-05 Thread Thomas Harold
On 1/5/2010 11:49 AM, Benjamin Franz wrote: If your brute force protection is not catching the repeated login failures, you should check its configuration. Or give up and move SSH to a non-standard port, at least from the outside. (I got tired a few years ago of watching my log files fill

Re: [CentOS] Centos 5.4 and TYAN s4985 motherboard....

2010-01-05 Thread Thomas Harold
On 1/4/2010 10:09 AM, Tom Bishop wrote: Was wondering if anyone has any luck with the Tyan s4985 motherboard, I had loaded up the latest 5.4 release and in installed most everything that I wanted but when I loaded it up, as in processor wise it would lock up. Funny thing I could still ssh to

Re: [CentOS] Centos 5.4 and TYAN s4985 motherboard....

2010-01-05 Thread Thomas Harold
On 1/5/2010 1:52 PM, Tom Bishop wrote: Yeah I know fedora core 12 works well along with ubuntu 8.04, thats what I am running now with later kernel, I just like to run centos on my production servers...neither of the latter exhibit the same condition that I saw with centos5.4. I have updated

Re: [CentOS] IUD Number

2010-01-05 Thread Thomas Harold
On 1/5/2010 3:53 PM, Susan Day wrote: Hello; How do I get the IUD number for a user? id command (see also the groups command) $ id -u thomas 999 $ id -G thomas (prints a list of all group numbers that I belong to) ___ CentOS mailing list

Re: [CentOS] Software RAID1 Disk I/O

2010-01-05 Thread Thomas Harold
On 1/5/2010 5:44 PM, Matt wrote: I just installed CentOS 5.4 64 bit release on a 1.9ghz CPU with 8gB of RAM. It has 2 Western Digital 1.5TB SATA2 drives in RAID1. [r...@server ~]# df -h FilesystemSize Used Avail Use% Mounted on /dev/md2 1.4T 1.4G 1.3T 1% /

Re: [CentOS] Lost mdadm.conf

2010-01-01 Thread Thomas Harold
On 12/31/2009 11:27 AM, James Bensley wrote: I can't say this with 100% certainty but I would of thought that it would been fine. I've lost my mdadm.conf (reinstalled OS) with a separate 4 disk RAID 5 array and re-assembled the array and carried on as if nothing had happened. Yes, in

Re: [CentOS] Find reason for heavy load

2009-12-30 Thread Thomas Harold
On 12/29/2009 11:44 PM, Noob Centos Admin wrote: My Centos 5 server has seen the average load jumped through the roof recently despite having no major additional clients placed on it. Previously, I was looking at an average of less than 0.6 load, I had a monitoring script that sends an email

[CentOS] [OT] CAT5 IP-capable rackmount KVM units?

2009-12-30 Thread Thomas Harold
Rather off-topic, but I'm looking for IP-based KVMs (~16 ports) that can handle both PS/2 and USB hookups on the server side. All of the answers over at Slashdot are a few years out of date and it looks like prices on KVM head units have dropped a bit over the years. Some of the older units

Re: [CentOS] Monitor Network Traffic

2009-12-21 Thread Thomas Harold
On 12/21/2009 9:08 AM, sadas sadas wrote: What is the best way to monitor the total incoming / outcoming network traffic of CentOS server. I think that the solution is to monitor the network interfaces and to send SNMP packets to remote server. But is it possible? MRTG is the simplest

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-18 Thread Thomas Harold
On 12/18/2009 4:12 PM, Peter Serwe wrote: You can't patch the Berkeley Packet Filter into Linux. Linux kernel doesn't support it. and... Despite a cacophonous chorus of replies directing you to the right tool for the job, you insist on sticking with Linux. If you want to use the

Re: [CentOS] Subversion server: v1.4 (centos) vs. v1.6 (rpmforge)

2009-12-17 Thread Thomas Harold
On 12/16/2009 1:32 PM, Mathieu Baudier wrote: (We took advantage of repository sharding in 1.6, which is why we did a svn dump/load method. If we didn't need sharding, we probably could've just copied the directory tree across from the 1.4 to the 1.6 server.) Did you consider the type

Re: [CentOS] LVM, usb drives, Active Directory

2009-12-16 Thread Thomas Harold
On 12/15/2009 7:48 AM, Scott Ehrlich wrote: I have a client with a handful of USB drives connected to a CentOS box. I am charged with binding the USB drives together into a single LVM for a cheap storage data pool (10 x 1 TB usb drives = 10 TB cheap storage in a single mount point). (snip)

Re: [CentOS] LVM, usb drives, Active Directory

2009-12-16 Thread Thomas Harold
On 12/16/2009 9:41 AM, William Warren wrote: On 12/16/2009 12:10 AM, Eero Volotinen wrote: Still going to need 10TB of backups. And i can guarantee you the chances of having a URE during rebuild are almost certain with this setup so a backup is going to be crucial. Sounds like a nightmare

Re: [CentOS] Subversion server: v1.4 (centos) vs. v1.6 (rpmforge)

2009-12-16 Thread Thomas Harold
On 12/15/2009 4:22 AM, Mathieu Baudier wrote: Hi, I'm planning to upgrade an old public/internal development infrastructure and will use CentOS 5.4 x86_64 as basis. The Subversion version in CentOS 5.4 is v1.4, whereas RPMForge provides v1.6. I use the RPMForge version as my client on the

Re: [CentOS] Migrating to RAID

2009-12-10 Thread Thomas Harold
On 12/10/2009 10:39 AM, Matt wrote: I have CentOS 4.x installed on a single 500GB SATA drive. Drive is about 10 percent used. I would like to migrate to software RAID 5 without reinstalling the OS. Was thinking 3 500GB drives. Is that possible or must I reinstall? Moving to RAID-1 is

Re: [CentOS] Is ext4 safe for a production server?

2009-12-09 Thread Thomas Harold
On 12/9/2009 12:23 PM, Miguel Di Ciurcio Filho wrote: Miguel Medalha wrote: I am about to install a new server running CentOS 5.4. The server will contain pretty critical data that we can't afford to corrupt. Just for the record, Theodore Ts'o marked ext4 as stable and ready for general

Re: [CentOS] CentOS 5.4 x86_64 only detects 32GB RAM while Fedora x86_64 correctly lists 128GB

2009-12-07 Thread Thomas Harold
On 12/7/2009 7:24 AM, Diederick Stoffers wrote: [r...@localhost ~]# uname -a Linux localhost.localdomain 2.6.18-164.6.1.el5xen #1 SMP Tue Nov 3 16:48:13 EST 2009 x86_64 x86_64 x86_64 GNU/Linux If you dig back through the xen-users mailing list, there's a thread that discusses this

Re: [CentOS-virt] Slightly OT: FakeRaid or Software Raid

2009-12-03 Thread Thomas Harold
On 12/3/2009 7:35 AM, Grant McWilliams wrote: You can talk theoretics but I can tell you my real world experience. I cannot speak for other vendors but for 3ware this DOES work and is working so far with 100% success. I have a bunch of Areca controllers too but the drives are never moved

Re: [CentOS] Latency Monitor

2009-12-02 Thread Thomas Harold
On 12/2/2009 4:41 PM, Matt wrote: Does anyone know of a utility I can run on a server to periodically ping several hosts and record the result? Does not need to be anything fancy at all. Various monitoring apps (cacti, nagios, etc)... or MRTG. All of which store their data in RRDTool.

Re: [CentOS] /etc/cron.weekly/99-raid-check

2009-12-01 Thread Thomas Harold
On 12/1/2009 8:05 AM, Paul Bijnens wrote: I have the problem on 2 servers, and both of those servers are also running a VMware image (very small, but constantly used) under VMware Server 2. Could it be that the .vmem file, or even the virtual disk is constantly written to, and the raid is

Re: [CentOS] timekeeping on VM - ntpd running

2009-11-30 Thread Thomas Harold
On 11/30/2009 11:34 AM, Jonathan Garden wrote: This is really stupid question. But referring to: http://lists.centos.org/pipermail/centos/2009-October/083791.html I don't see any line related to ntpd in my /var/log/messages . Do I need to turn-on ntpd for timekeeping on VMs? Some people say

Re: [CentOS] again, nic driver order (bonding)

2009-11-28 Thread Thomas Harold
On 11/22/2009 8:38 PM, Gordon McLellan wrote: I have two servers with identical hardware ... TYAN i3210w system boards with dual intel gigabit interfaces, and a PCI intel gigabit nic. I'm running Centos 5.4, x86_64, 2.6.18-164.6.1.el5 Every other time I reboot, the nics initialize in a

Re: [CentOS] Recommend Mail Server

2009-11-25 Thread Thomas Harold
On 11/23/2009 2:21 PM, John R. Dennison wrote: On Mon, Nov 23, 2009 at 01:59:40PM -0500, Robert Moskowitz wrote: It points you to: http://howtoforge.net/virtual-users-domains-postfix-courier-mysql-squirrelmail-fedora-10 Now granted this is for FC10, but I suspect it would be easy to fit into

Re: [CentOS] Recommend Mail Server

2009-11-25 Thread Thomas Harold
On 11/23/2009 1:59 PM, Robert Moskowitz wrote: Susan Day wrote: Hi; I don't want sendmail. What's a good secure email server that I can yum? I really only need smtp right now, but who knows what the future will bring? See my slightly prior post on: Re: [CentOS]

Re: [CentOS] Recommend Mail Server

2009-11-25 Thread Thomas Harold
On 11/25/2009 6:45 PM, Christopher Chan wrote: Thomas Harold wrote: We use postfix, dovecot, clamav milter (reject at SMTP time), spf policy check (with rejecting on SPF_FAIL at SMTP time), and AmavisD-New w/ SpamAssassin for scoring what's left. Have you looked at spamass-milter too

Re: [CentOS] Best Motherboard

2008-05-16 Thread Thomas Harold
John Plemons wrote: I would look at Tyan, Soyo, and Intel for middle of the road performance, but more over for dependability... I have also had very good luck with MSI, Asus... Same here, Tyan for the really important systems (complete with ECC) inside a SuperMicro rack case. Asus for the

Re: [CentOS] Somewhat OT:

2008-05-14 Thread Thomas Harold
Ross S. W. Walker wrote: Nagios can start very simple, but has the ability to end up very complex. It's configs take a modular approach, you have monitors, monitors belong in groups, groups have operators/administrators, etc. We just finished setting up Nagios at our office. It's not that

Re: [CentOS] Somewhat OT: (Nagios)

2008-05-14 Thread Thomas Harold
Sergio Belkin wrote: 2008/5/13 [EMAIL PROTECTED]: OK, you won :) I'm going to test nagios. I am using centos 5.1 x86_64. Do I lose much if I use rpm from rpmforge (version 2.9)? We're running version 2.11 at the office (on CentOS 5.1 x86_64). I've looked at some of the things in 3.0, but