Re: [CentOS-es] Off-topic.

2011-08-31 Thread carlos restrepo
Gracias Eduardo, Voy a aportar el manual (tipo dummy) de como instalar Pykota (Software para la contabilización de impresiones) en CentOS 5/ RHEL 5 que no es nada trivial como si lo es en Debian/Ubuntu. El autor de Pykota no coloca algunos tips en la documentación que al no saberlos pasan la

Re: [CentOS-es] Instalación Servidor DNS CentOS 6

2011-08-31 Thread carlos restrepo
Revisa el archivo /etc/resolv.conf. Carlos R. 2011/8/30 Ariel Hernández ariel@gmail.com Ok! ahora si :D gracias por su ayuda!! 2011/8/30 Jesus Rudas Simmonds jrud...@gmail.com Revisa el firewall, debes tener abierto el puerdo del DNS -Mensaje original- De:

[CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread Ariel Hernández
ola a todos, resulta que estoy intentando instalar asterisk en mi CentOs y cuando quiero hacer: *yum install bison bison-devel ncurses ncurses-devel zlib zlib-devel openssl openssl-devel gnutls-devel gcc gcc-c++ make* me aparece el siguiente error: *Error: Package:

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread Miguel Gonzalez
Si no recuerdo mal habia una maquina virtual con Asterisk preinstalado en CentOS Saludos miguel --- El mié, 31/8/11, Ariel Hernández ariel@gmail.com escribió: De: Ariel Hernández ariel@gmail.com Asunto: [CentOS-es] Instalaciòn Asterisk Para: centos-es@centos.org Fecha: miércoles,

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread carlos restrepo
yum clean all e intenta nuevamente. Carlos R. El 31 de agosto de 2011 10:34, Miguel Gonzalez miguel_3_gonza...@yahoo.esescribió: Si no recuerdo mal habia una maquina virtual con Asterisk preinstalado en CentOS Saludos miguel --- El mié, 31/8/11, Ariel Hernández ariel@gmail.com

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread Ariel Hernández
Me sigue dando el mismo problema carlos. El 31 de agosto de 2011 13:05, carlos restrepo restrcar...@gmail.comescribió: yum clean all e intenta nuevamente. Carlos R. El 31 de agosto de 2011 10:34, Miguel Gonzalez miguel_3_gonza...@yahoo.esescribió: Si no recuerdo mal habia una maquina

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread Hector Cuadros Prosopio
primero prueba si existe : yum search (paquete ) El 31 de agosto de 2011 12:19, Ariel Hernández ariel@gmail.comescribió: Me sigue dando el mismo problema carlos. El 31 de agosto de 2011 13:05, carlos restrepo restrcar...@gmail.com escribió: yum clean all e intenta nuevamente.

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread Ariel Hernández
Los encontro todos, solo que cada paquete aparece con un nuemro al final del nombre, ejemplo: yum search bison, aparece como bison-devel.i686, debere instalar asi entonces el paquete o no??, pero lo que encuentro extraño es que me tira error con el paquete glibc. El 31 de agosto de 2011 14:21,

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread Hector Cuadros Prosopio
[root@srvsquid ~]# yum search glibc Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile Exiting on user cancel [root@ ~]#* yum search glibc* === Matched: glibc

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread ces can
se soluciono tu problema? Date: Wed, 31 Aug 2011 12:29:01 -0500 From: ohmi...@gmail.com To: centos-es@centos.org Subject: Re: [CentOS-es] Instalaciòn Asterisk [root@srvsquid ~]# yum search glibc Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile Exiting on

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread Ariel Hernández
OK.! gracias, si recien se soluciono, no entiendo porque me marcaba error en los paquetes, al final hice un yum install kernel-devel, y de ahi todos los otros paquetes los instale correctamente. Muchas gracias por la ayuda de todos. El 31 de agosto de 2011 14:37, ces can arvega...@hotmail.com

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread Ariel Hernández
aggh! me volvio el problema con el glibc, hago un yum clean all, luego un yum install glibc, y me manda el siguiente error: *Error: Package: glibc-devel-2.12-1.7.el6_0.5.i686 (updates) Requires: glibc = 2.12-1.7.el6_0.5 Installed: glibc-2.12-1.7.el6.i686

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread ces can
entonces dererias hacer antes un yum update; fijate que no tengas otros repositorios a parte de los que tiene centos. saludos Date: Wed, 31 Aug 2011 13:49:29 -0400 From: ariel@gmail.com To: centos-es@centos.org Subject: Re: [CentOS-es] Instalaciòn Asterisk aggh! me volvio el

Re: [CentOS-es] Instalaciòn Asterisk

2011-08-31 Thread Ernesto Miranda
AHí está lo malo.. El 31/08/11 14:49, Ariel Hernández escribió: [root@localhost src]# rpm -q glibc glibc-2.12-1.7.el6.i686 glibc-2.12-1.7.el6_0.5.i686 ACÁ...debiera indicarte sólo uno.. dale un rpm -qa|sort y verifica que no esten duplicados los programas.. en este caso, tienes instaladas 2

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Michael Schumacher
Are you a dog lover ? I like dogs too. They usually bark at strangers. Paul. PLONK see also http://en.wikipedia.org/wiki/Plonk_%28Usenet%29 best regards --- Michael ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread wwp
Hello R, On Tue, 30 Aug 2011 21:46:53 -0700 R - elists list...@abbacomm.net wrote: we need to filter out various peoples posts on this list would some kind soul(s) please direct us in locating the best email list reading programs w/ the best features to read the centos and other lists.

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Luigi Rosa
m.r...@5-cent.us said the following on 25/08/11 18:33: Anyone have any idea how soon RHEL and CentOS will be releasing the patch package? Apparently Apache just released a patch: https://www.apache.org/dist/httpd/Announcement2.2.html Source:

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-31 Thread Alexander Dalloz
Am 31.08.2011 01:58, schrieb Always Learning: I also notice our servers successfully contacting official time references centres which are not those sites trying to connect to us. I notice too the installed time software is listening on every available IP. I can not identity any options in

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Tru Huynh
On Wed, Aug 31, 2011 at 04:43:46AM +0100, Always Learning wrote: That you for the useful enlightenment. I was unaware it was an OpenVZ. I thought is was XEN on Ubuntu. Next time, try posting more usefull information stating that you are indeed running CentOS on a CentOS support mailing list and

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Tom H
On Tue, Aug 30, 2011 at 10:24 PM, Always Learning cen...@u61.u22.net wrote: On a VPS I wanted to add to IP tables:- iptables -A -p tcp -m string --algo bm --string 'login' -j DROP I got:        iptables: Unknown error 18446744073709551615 uname -a =  2.6.35.4 #2  (don't know how

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Karanbir Singh
On 08/30/2011 11:33 PM, Thomas Harold wrote: Someday, perhaps we'll end up back on an authenticated version of NNTP, with support for bbcode, images, and the front end reader of your choice... Thats quite a good idea - and something that we explored at length when looking for a replacement

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Timo Schoeler
thus Karanbir Singh spake: On 08/30/2011 11:33 PM, Thomas Harold wrote: Someday, perhaps we'll end up back on an authenticated version of NNTP, with support for bbcode, images, and the front end reader of your choice... Thats quite a good idea - and something that we explored at length when

[CentOS] xendomains not starting at boot

2011-08-31 Thread Theo Band
On one of my xen hosts a virtual machine does not start at boot. I can see that xendomains gives an error: service xendomains start Starting auto Xen domains: fszeleNo handlers could be found for logger xend Error: Disk isn't accessible No handlers could be found for logger xend Error: Disk isn't

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Walter Haidinger
Am 31.08.2011 04:24, schrieb Always Learning: On a VPS I wanted to add to IP tables:- iptables -A -p tcp -m string --algo bm --string 'login' -j DROP I got: iptables: Unknown error 18446744073709551615 uname -a = 2.6.35.4 #2 (don't know how this got installed) lsmod | grep

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 10:13 +0200, Alexander Dalloz wrote: ntpd shipping with CentOS 6 has an option -I iface; see man 8 ntpd. Edit /etc/sysconfig/ntpd accordingly. ntpd shipping with CentOS 5 does not have that and thus always binds to all available interfaces. That explains why I can not

Re: [CentOS] (Centos 5.6) Server Time NTP Facility

2011-08-31 Thread Lamar Owen
On Tuesday, August 30, 2011 08:15:28 PM brian wrote: ...to your rule list will allow the specified net address(es) to contact you on port 123. the above, of course, assumes your input port is eth0 (change that, if different on your system), and that the NTP server uses TCP protocol

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Lamar Owen
On Tuesday, August 30, 2011 10:24:41 PM Always Learning wrote: On a VPS I wanted to add to IP tables:- iptables -A -p tcp -m string --algo bm --string 'login' -j DROP iptables: Unknown error 18446744073709551615 uname -a = 2.6.35.4 #2 (don't know how this got installed) This is

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 12:46:53 AM R - elists wrote: we need to filter out various peoples posts on this list would some kind soul(s) please direct us in locating the best email list reading programs w/ the best features to read the centos and other lists. While I use Kmail (which can

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 09:01 -0400, Lamar Owen wrote: On Tuesday, August 30, 2011 10:24:41 PM Always Learning wrote: uname -a = 2.6.35.4 #2 (don't know how this got installed) This is not a CentOS-provided kernel; as has been said elsewhere in the thread, this is likely an OpenVZ

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread m . roth
Lamar Owen wrote: On Wednesday, August 31, 2011 12:46:53 AM R - elists wrote: snip While I use Kmail (which can do very powerful filtering based on a number snip So how is kmail these days? I jumped ship to t-bird about '03 or '05, when I got tired of kmail munging my mbox (I tend to have

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 09:25 -0400, m.r...@5-cent.us wrote: So how is kmail these days? I jumped ship to t-bird about '03 or '05, when I got tired of kmail munging my mbox (I tend to have thousands of emails stored there, before I get around to moving them to a dated folder...). Why not store

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Karanbir Singh
On 08/31/2011 12:10 PM, Walter Haidinger wrote: PS: To install iptables from source is pretty straightforward: get the tarball from netfilter.org, unpack and run: ./configure --prefix=/opt/iptables make make install And at that point you lose. All management capability or the

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Karanbir Singh
Hi, On 08/31/2011 10:56 AM, Timo Schoeler wrote: Just released: https://www.apache.org/dist/httpd/Announcement2.2.html thanks. I guess we should wait on a fix from upstream, make sure its tested etc. If there is interest in doing a local fix/build for c4/5/6 testing repo's, please submit a

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 09:25:06 AM m.r...@5-cent.us wrote: Lamar Owen wrote: On Wednesday, August 31, 2011 12:46:53 AM R - elists wrote: snip While I use Kmail (which can do very powerful filtering based on a number snip So how is kmail these days? Kmail beats the Dickens out of

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 09:34:48 AM Always Learning wrote: Why not store them in a correspondence database ? Kmail is working towards full Akonadi integration, and the full 'semantic desktop' paradigm is (or will be) available. So it's already being done, to a degree, and in a very

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 09:18:26 AM Always Learning wrote: A very helpful and knowledgeable poster, Walter Haidinger, in his email dated Wed, 31 Aug 2011 13:10:16 +0200 (12:10 BST), gave what appears to be an ideal solution. * get a more recent iptables from netfilter.org It's

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Mike
Perhaps the most important point here is that the script kiddies and/or bots usually make sure the target string, 'login' in your example is *not* contained within a single packet. You can verify this with wireshark. In any case just be aware that your solution will likely not have the

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 09:54 -0400, Lamar Owen wrote: It's less than ideal to install anything from source, as Karanbir has so correctly pointed out downthread. Sometimes it is necessary; but it is never ideal, for the reasons KB stated The service provider has suggested it needs the

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Les Mikesell
On Tue, Aug 30, 2011 at 11:46 PM, R - elists list...@abbacomm.net wrote: we need to filter out various peoples posts on this list would some kind soul(s) please direct us in locating the best email list reading programs w/ the best features to read the centos and other lists. the CentOS

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 7:22 AM, Always Learning wrote: In the current 4,000 to 6,000 daily hits, the lunatic uses login.php contact.php forgotten_password.php your 'lunatic' aka 'hacker' is undoubtably a blind script ('bot') running on distributed previously hacked hosts, and probing

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 08:07 -0700, John R Pierce wrote: On 08/31/11 7:22 AM, Always Learning wrote: In the current 4,000 to 6,000 daily hits, the lunatic uses login.php contact.php forgotten_password.php your 'lunatic' aka 'hacker' is undoubtably a blind script ('bot')

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread R - elists
Christopher, It's not an email program but I think it has the best filtering capabilities of all - the brain. umm, yeah, exactly, i want to use my brain to program certain peoples posts from never reaching my eyeballs arent they called threaded email readers? i really didnt find much

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread m . roth
John R Pierce wrote: On 08/31/11 7:22 AM, Always Learning wrote: In the current 4,000 to 6,000 daily hits, the lunatic uses login.php contact.php forgotten_password.php your 'lunatic' aka 'hacker' is undoubtably a blind script ('bot') running on distributed previously

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-31 Thread Les Mikesell
On Wed, Aug 31, 2011 at 4:32 AM, Karanbir Singh mail-li...@karan.org wrote: On 08/30/2011 11:33 PM, Thomas Harold wrote: Someday, perhaps we'll end up back on an authenticated version of NNTP, with support for bbcode, images, and the front end reader of your choice... Thats quite a good idea

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 11:16 -0400, m.r...@5-cent.us wrote: Maybe not, for a small website. However, let me re-suggest fail2ban, with three lines from one of our config files: failregex = HOST -.*GET .*(php|pma|PMA|p/m/a|db|sql|admin).*/(config/c onfig\.inc|main)\.php.*.*404.*

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Bowie Bailey
On 8/31/2011 11:22 AM, Always Learning wrote: On Wed, 2011-08-31 at 11:16 -0400, m.r...@5-cent.us wrote: Maybe not, for a small website. However, let me re-suggest fail2ban, with three lines from one of our config files: failregex = HOST -.*GET .*(php|pma|PMA|p/m/a|db|sql|admin).*/(config/c

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 11:29 -0400, Bowie Bailey wrote: I assume this is an Apache server. Have you looked at mod_security (http://www.modsecurity.org/)? It is available from the epel repository. There is a bit of a learning curve to get it running, but it protects against a ton of hacking

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread m . roth
Always Learning wrote: On Wed, 2011-08-31 at 11:16 -0400, m.r...@5-cent.us wrote: Maybe not, for a small website. However, let me re-suggest fail2ban, with three lines from one of our config files: failregex = HOST -.*GET .*(php|pma|PMA|p/m/a|db|sql|admin).*/(config/c

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Les Mikesell
On Wed, Aug 31, 2011 at 10:15 AM, R - elists list...@abbacomm.net wrote: sometimes people on the list just get beligerant, drunk, and/or stupid and need to be filtered. But filters tend to be stupid as well. And once you are involved in a conversation you should have a certain responsibility

Re: [CentOS] new memory not getting regonized

2011-08-31 Thread Pasi Kärkkäinen
On Tue, Aug 30, 2011 at 03:30:46PM +0200, Dennis Jacobfeuerborn wrote: On 08/27/2011 09:12 PM, sylvan.dcu...@gmail.com wrote: Dear Dennis, Thanks a lot for the wise reply.. really did boost my knowledge.. honestly was unware of the fact that dom0 is just like another VM ... Anyway I had

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 8:22 AM, Always Learning wrote: Looking at your example seems to suggest Fail2Ban is an 'after the event' response. I would like to implement 'before the event' filtering which prevents, even on the first detected hacking attempt, anything reaching HTTPD. so you want another piece

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread R - elists
But filters tend to be stupid as well. And once you are involved in a conversation you should have a certain responsibility to follow it to the bitter end. Filters mostly don't understand that (but gmail will push a reply to your own message into the 'important' view). i hear ya

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Bowie Bailey
On 8/31/2011 11:32 AM, Always Learning wrote: On Wed, 2011-08-31 at 11:29 -0400, Bowie Bailey wrote: I assume this is an Apache server. Have you looked at mod_security (http://www.modsecurity.org/)? It is available from the epel repository. There is a bit of a learning curve to get it

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 08:41 -0700, John R Pierce wrote: On 08/31/11 8:22 AM, Always Learning wrote: Looking at your example seems to suggest Fail2Ban is an 'after the event' response. I would like to implement 'before the event' filtering which prevents, even on the first detected hacking

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 11:51 -0400, Bowie Bailey wrote: On 8/31/2011 11:32 AM, Always Learning wrote: On Wed, 2011-08-31 at 11:29 -0400, Bowie Bailey wrote: I assume this is an Apache server. Have you looked at mod_security (http://www.modsecurity.org/)? It is available from the epel

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 9:00 AM, Always Learning wrote: No I do not want another piece of software to parse the http protocol and analyze the traffic. IT Tables, in which I have great confidence and trust, can do it. iptables will filter on packet headers and such at layer 3, it can't and won't analyze

[CentOS] Error installing latest CentOS kernel from %post section of kickstart

2011-08-31 Thread Alfred von Campe
I'm running the command yum -y update from a script called from the the post section of my kickstart config file, and I get the following error: Installing : kernel-2.6.32-71.29.1.el6.i686 185/378 grubby fatal error: unable to find a suitable template After the

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
UPDATE: I started with kernel 2.6.35.4 #2 and lsmod | grep ipt = ipt_LOG 5419 2. My service provider produced a replacement kernel 2.6.24-28-xen #1. Now lsmod | grep ipt reveals .. ipt_LOG 8192 2 iptable_filter 4608 1 ip_tables 24232 1

Re: [CentOS] OT: help with email list reading programs w/ best features to read the centos and other lists that can filter people etc

2011-08-31 Thread Les Mikesell
On Wed, Aug 31, 2011 at 10:48 AM, R - elists list...@abbacomm.net wrote: But filters tend to be stupid as well.   And once you are involved in a conversation you should have a certain responsibility to follow it to the bitter end.  Filters mostly don't understand that (but gmail will push a

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 09:11 -0700, John R Pierce wrote: iptables will filter on packet headers and such at layer 3, it can't and won't analyze the content of packets, regardless of your emotional attachments. I believe IP Tables '-m string' will. If you think the custodians and maintainers

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 11:15:20 AM Always Learning wrote: Dangerous to ignore any background noise - far better to firmly shut the door and fill-in all known holes. The unknown holes are the ones that will get you. You are also setting yourself up for a denial-of-service vector.

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 9:32 AM, Always Learning wrote: Wrong. Some can be determined by machine searching for 'known' invalid URL strings which are not remotely similar to valid web page names. there's an infinite number of invalid strings, and only a finite number of valid ones. anyways, your webserver

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 10:17 -0700, John R Pierce wrote: anyways, your webserver already filters these out, its not going to respond to an invalid URL with anything other than '404'. thats its job. The 'error' is trapped; a PHP routine examines the URL for known (in a list) hacker strings;

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Les Mikesell
On Wed, Aug 31, 2011 at 12:17 PM, John R Pierce pie...@hogranch.com wrote: Wrong. Some can be determined by machine searching for 'known' invalid URL strings which are not remotely similar to valid web page names. there's an infinite number of invalid strings, and only a finite number of

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 13:01 -0400, Lamar Owen wrote: On today's Internet you are simply not going to catch 100% of the attacks, full stop. Rather than being a willing or passive victim to 100% of the attacks, I aim to reduce the penetrability of most of them. Paul.

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread John R Pierce
On 08/31/11 10:33 AM, Always Learning wrote: Rather than being a willing or passive victim to 100% of the attacks, I aim to reduce the penetrability of most of them. an attempted access of a non-vunerability won't be any more effective the millionth time its run than the first time. its the

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 10:38 -0700, John R Pierce wrote: On 08/31/11 10:33 AM, Always Learning wrote: Rather than being a willing or passive victim to 100% of the attacks, I aim to reduce the penetrability of most of them. an attempted access of a non-vunerability won't be any more

Re: [CentOS] Question re: CentOS-6.0, KVM, and /dev/sr0

2011-08-31 Thread James B. Byrne
On Tue, August 30, 2011 18:57, psprojectplann...@gmail.com wrote: On 29/08/2011 15:46, James B. Byrne wrote: I am experimenting with KVM and I wish to create a virtual machine image in a logical volume. I can create the new lv without problem but when I go to format its file system then I

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Lamar Owen
On Wednesday, August 31, 2011 01:33:31 PM Always Learning wrote: Rather than being a willing or passive victim to 100% of the attacks, I aim to reduce the penetrability of most of them. Getting the last 10% will cost you 90% of your time. ___ CentOS

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 13:55 -0400, Lamar Owen wrote: On Wednesday, August 31, 2011 01:33:31 PM Always Learning wrote: Rather than being a willing or passive victim to 100% of the attacks, I aim to reduce the penetrability of most of them. Getting the last 10% will cost you 90% of your

[CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread Michael D. Berger
On my new CentOS 6, KDE 4, running WireShark I see what appears to be frequent nonsensical DNS queries, for example: settings-personal.desktop and settings-system.desktop. The DNS response is always:No such name. Do tell! These appear especially when I click on things on the KDE menus. On my

Re: [CentOS] Error installing latest CentOS kernel from %post section of kickstart

2011-08-31 Thread Ned Slider
On 31/08/11 17:12, Alfred von Campe wrote: I'm running the command yum -y update from a script called from the the post section of my kickstart config file, and I get the following error: Installing : kernel-2.6.32-71.29.1.el6.i686 185/378 grubby fatal error:

Re: [CentOS] new memory not getting regonized

2011-08-31 Thread Dennis Jacobfeuerborn
On 08/31/2011 05:38 PM, Pasi Kärkkäinen wrote: On Tue, Aug 30, 2011 at 03:30:46PM +0200, Dennis Jacobfeuerborn wrote: On 08/27/2011 09:12 PM, sylvan.dcu...@gmail.com wrote: Dear Dennis, Thanks a lot for the wise reply.. really did boost my knowledge.. honestly was unware of the fact that

Re: [CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread John Hodrien
On Wed, 31 Aug 2011, Michael D. Berger wrote: On my new CentOS 6, KDE 4, running WireShark I see what appears to be frequent nonsensical DNS queries, for example: settings-personal.desktop and settings-system.desktop. The DNS response is always:No such name. Do tell! These appear

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Louis Lagendijk
On Wed, 2011-08-31 at 19:00 +0100, Always Learning wrote: On Wed, 2011-08-31 at 13:55 -0400, Lamar Owen wrote: On Wednesday, August 31, 2011 01:33:31 PM Always Learning wrote: Rather than being a willing or passive victim to 100% of the attacks, I aim to reduce the penetrability of most

Re: [CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread Michael D. Berger
On Wed, 31 Aug 2011 20:02:09 +0100, John Hodrien wrote: On Wed, 31 Aug 2011, Michael D. Berger wrote: On my new CentOS 6, KDE 4, running WireShark I see what appears to be frequent nonsensical DNS queries, for example: settings-personal.desktop and settings-system.desktop. The DNS

[CentOS] dealing with spoofing

2011-08-31 Thread m . roth
Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is using it in the Reply-To: in its spamming efforts. Now, I realize that some mails go out from noreply, but other than that, is there a good reason why a mailserver would not be configured

Re: [CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread m . roth
Michael D. Berger wrote: On Wed, 31 Aug 2011 20:02:09 +0100, John Hodrien wrote: On Wed, 31 Aug 2011, Michael D. Berger wrote: On my new CentOS 6, KDE 4, running WireShark I see what appears to be frequent nonsensical DNS queries, for example: settings-personal.desktop and

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:16 PM, m.r...@5-cent.us wrote: Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is using it in the Reply-To: in its spamming efforts. Now, I realize that some mails go out from noreply, but other than that, is there a

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Stephen Harris
Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is using it in the Reply-To: in its spamming efforts. Now, I realize that some mails go out from noreply, but other than that, is there a good reason why a mailserver would not be

Re: [CentOS] dealing with spoofing

2011-08-31 Thread m . roth
Stephen Harris wrote: Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is using it in the Reply-To: in its spamming efforts. Now, I realize that some mails go out from noreply, but other than that, is there a good reason why a

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Mailing Lists
Spam filter that'll authorize the sending before receiving? Just a thought to stop the hundreds of emails... On Wed, Aug 31, 2011 at 4:27 PM, m.r...@5-cent.us wrote: Stephen Harris wrote: Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email,

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: Stephen Harris wrote: Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is using it in the Reply-To: in its spamming efforts. Now, I realize that some mails go out from noreply, but other

Re: [CentOS] dealing with spoofing

2011-08-31 Thread m . roth
Josh Miller wrote: On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: Stephen Harris wrote: Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is using it in the Reply-To: in its spamming efforts. Now, I realize that some mails go out from

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: Josh Miller wrote: On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: Stephen Harris wrote: Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is using it in the Reply-To: in its spamming

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:37 PM, Josh Miller wrote: On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: Josh Miller wrote: On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: Stephen Harris wrote: Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Stephen Harris
On Wed, Aug 31, 2011 at 04:27:00PM -0400, m.r...@5-cent.us wrote: Stephen Harris wrote: Anyway, the SMTP server should send the delivery failure to the envelope address, which may be different to both the From and Reply-To addresses. That would be lovely. Unfortunately, a high percentage

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Bowie Bailey
On 8/31/2011 4:37 PM, Josh Miller wrote: On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: You're saying it uses the envelope, not if exists Reply-To, else From? The problem I have with that is that a few of them have returned the email, with full headers, and I see the *only* reference to my

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Mailing Lists
http://www.openspf.org/Introduction - SPF FTW On Wed, Aug 31, 2011 at 4:47 PM, Stephen Harris li...@spuddy.org wrote: On Wed, Aug 31, 2011 at 04:27:00PM -0400, m.r...@5-cent.us wrote: Stephen Harris wrote: Anyway, the SMTP server should send the delivery failure to the envelope

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:48 PM, Bowie Bailey wrote: On 8/31/2011 4:37 PM, Josh Miller wrote: On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: You're saying it uses the envelope, not if exists Reply-To, else From? The problem I have with that is that a few of them have returned the email, with full

Re: [CentOS] dealing with spoofing

2011-08-31 Thread m . roth
Josh Miller wrote: On 08/31/2011 01:37 PM, Josh Miller wrote: On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: Josh Miller wrote: On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: Stephen Harris wrote: Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Josh Miller
On 08/31/2011 01:57 PM, m.r...@5-cent.us wrote: Josh Miller wrote: On 08/31/2011 01:37 PM, Josh Miller wrote: On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: Josh Miller wrote: On 08/31/2011 01:27 PM, m.r...@5-cent.us wrote: Stephen Harris wrote: Here's a thought I just thunk, folks: some

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Bowie Bailey
On 8/31/2011 4:50 PM, Josh Miller wrote: On 08/31/2011 01:48 PM, Bowie Bailey wrote: On 8/31/2011 4:37 PM, Josh Miller wrote: On 08/31/2011 01:33 PM, m.r...@5-cent.us wrote: You're saying it uses the envelope, not if exists Reply-To, else From? The problem I have with that is that a few of

Re: [CentOS] Centos VPS Kernel 2.6.35.4 'string-less' IP tables

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 22:08 +0200, Louis Lagendijk wrote: On Wed, 2011-08-31 at 19:00 +0100, Always Learning wrote: On Wed, 2011-08-31 at 13:55 -0400, Lamar Owen wrote: On Wednesday, August 31, 2011 01:33:31 PM Always Learning wrote: Rather than being a willing or passive victim to

Re: [CentOS] Error installing latest CentOS kernel from %post section of kickstart

2011-08-31 Thread Alfred von Campe
On Aug 31, 2011, at 14:58, Ned Slider wrote: Yes, it's a known issue: https://www.redhat.com/archives/rhelv6-list/2011-January/msg6.html https://bugzilla.redhat.com/show_bug.cgi?id=625216 https://bugzilla.redhat.com/show_bug.cgi?id=657257 Thanks, the workarounds described in the

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 16:16 -0400, m.r...@5-cent.us wrote: Here's a thought I just thunk, folks: some scum, apparently in eastern Europe, has harvested my email, and is using it in the Reply-To: in its spamming efforts. Now, I realize that some mails go out from noreply, but other than that,

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 16:33 -0400, m.r...@5-cent.us wrote: You're saying it uses the envelope, not if exists Reply-To, else From? The problem I have with that is that a few of them have returned the email, with full headers, and I see the *only* reference to my email address is in the

[CentOS] Unable to run yum update

2011-08-31 Thread david
Folks The system involved is a 32-bit system, installed via the net about a week ago. The command yum update encountered the following diagonstic Error: Package: yaf-1.3.2-1.el6.rf.x86_64 (@rpmforge) Requires: libfixbuf-0.9.0.so.8()(64bit) Removing:

Re: [CentOS] dealing with spoofing

2011-08-31 Thread Always Learning
On Wed, 2011-08-31 at 13:50 -0700, Josh Miller wrote: That is not true as the remote server will present the envelope header to your mail server upon connection. Surely the FROM is ? Paul ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] CentOS 6, KDE 4: bad DNS traffic

2011-08-31 Thread Michael D. Berger
On Wed, 31 Aug 2011 16:19:05 -0400, m.roth-x6lchVBUigD1P9xLtpHBDw wrote: Michael D. Berger wrote: On Wed, 31 Aug 2011 20:02:09 +0100, John Hodrien wrote: On Wed, 31 Aug 2011, Michael D. Berger wrote: On my new CentOS 6, KDE 4, running WireShark I see what appears to be frequent nonsensical

  1   2   >