Re: [CentOS] Strange behavior from software RAID

2013-03-03 Thread Gerry Reno
You can usually generate a new mdadm.conf using:

rm /etc/mdadm.conf
mdadm --detail --scan  /etc/mdadm.conf


On 03/02/2013 09:35 PM, Harold Pritchett wrote:
 Somewhere, mdadm is cacheing information.  Here is my /etc/mdadm.conf file:

 more /etc/mdadm.conf
 # mdadm.conf written out by anaconda
 DEVICE partitions
 MAILADDR root
 ARRAY /dev/md0 level=raid1 num-devices=4 metadata=0.90 
 UUID=55ff58b2:0abb5bad:42911890:5950dfce
 ARRAY /dev/md1 level=raid1 num-devices=2 metadata=0.90 
 UUID=315eaf5c:776c85bd:5fa8189c:68a99382
 ARRAY /dev/md2 level=raid1 num-devices=2 metadata=0.90 
 UUID=5b017f95:b7e266cc:f17a7611:8b752a02
 ARRAY /dev/md3 level=raid1 num-devices=2 metadata=0.90 
 UUID=4cc310ee:60201e16:c7017bd4:9feea350
 ARRAY /dev/md4 level=raid1 num-devices=2 metadata=0.90 
 UUID=ea205046:3c6e78c6:ab84faa4:0da53c7c

 After a system re-boot, here is the contents of /proc/mdstat

 # cat /proc/mdstat
 Personalities : [raid1]
 md125 : active raid1 sdc3[0]
455482816 blocks [2/1] [U_]

 md0 : active raid1 sdd1[3] sdc1[0] sdb1[1] sda1[2]
1000320 blocks [4/4] []

 md127 : active raid1 sdd3[1] sdb3[0]
971747648 blocks [2/2] [UU]

 md3 : active raid1 sdf1[1] sde1[0]
1003904 blocks [2/2] [UU]

 md4 : active raid1 sdf3[1] sde3[0]
1948491648 blocks [2/2] [UU]

 md1 : active raid1 sda3[1]
455482816 blocks [2/1] [_U]

 unused devices: none

 There are six physical disks in this system:

 Disk /dev/sda:  500.1 GB, 500107862016 bytes
 Disk /dev/sdb: 1000.2 GB, 1000204886016 bytes
 Disk /dev/sdc:  500.1 GB, 500107862016 bytes
 Disk /dev/sdd: 1000.2 GB, 1000204886016 bytes
 Disk /dev/sde: 2000.3 GB, 2000398934016 bytes
 Disk /dev/sdf: 2000.3 GB, 2000398934016 bytes

 I used mdadm --examine /dev/sda1 to find the internal UUID for each of the 
 physical volumes making up these volume groups

 /dev/sda1:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 55ff58b2:0abb5bad:42911890:5950dfce
 /dev/sdb1:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 55ff58b2:0abb5bad:42911890:5950dfce
 /dev/sdc1:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 55ff58b2:0abb5bad:42911890:5950dfce
 /dev/sdd1:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 55ff58b2:0abb5bad:42911890:5950dfce
 /dev/sda3:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 315eaf5c:776c85bd:5fa8189c:68a99382
 /dev/sdc3:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 315eaf5c:776c85bd:5fa8189c:68a99382
 /dev/sdb3:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 5b017f95:b7e266cc:f17a7611:8b752a02
 /dev/sdd3:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 5b017f95:b7e266cc:f17a7611:8b752a02
 /dev/sde1:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 4cc310ee:60201e16:c7017bd4:9feea350
 /dev/sdf1:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 4cc310ee:60201e16:c7017bd4:9feea350
 /dev/sde3:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 ea205046:3c6e78c6:ab84faa4:0da53c7c
 /dev/sdf3:  Magic : a92b4efc  Version : 0.90.00  UUID : 
 ea205046:3c6e78c6:ab84faa4:0da53c7c

 As you can see, the UUID on the various PVs match the values in the 
 /etc/mdadm.conf file.

 My question is What the heck is going on.  When I boot the system, I end up 
 with two unexpected, unconfigured volume groups.  Where the heck are 
 /dev/md125 and /dev/md127 coming 
 from?  They don't appear in /etc/mdadm.conf and if I re-boot they keep coming 
 back.  It appears that somewhere mdadm is keeping information.  How can I get 
 rid of it so the 
 mdadm.conf file is used.

 Harold


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Tomcat query from complete newbie

2013-03-03 Thread Les Mikesell
On Sat, Mar 2, 2013 at 9:45 AM, Timothy Murphy gayle...@eircom.net wrote:
 I'm a complete tomcat beginner -
 (I installed it on my CentOS-6.3 server this morning.)
 According to the web-interface on port 8080
 tomcat is running fine.

 Basically, I want to allow a Java program I have written
 (which works well) to be run over the internet.
 This is to test students understanding of Turing machines.
 The student has to enter a short program
 (consisting of 20-80 quadruples).
 My program will then test if the program does
 what it is meant to do.

 So the student enters his program (about 1k),
 eg by pasting from a file - the program should then run,
 and the student should see what it outputs.

 I'm looking for advice on the best way to set this up.
 As I understand it, tomcat can either be run standalone
 or behind apache.
 I am running httpd on the server, so either method should be available.
 It seems that the standalone option is simpler,
 so I would probably prefer that.

On the tomcat side there really isn't any difference.  The reason you
would run behind apache would be to permit running all http
connections over port 80, while letting apache handle some URL's
internally and proxying other paths to other programs.If port 8080
is open and you don't need to restrict access to other tomcat apps you
might as well go direct.

-- 
   Les Mikesell
 lesmikes...@gmail.com
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Tomcat query from complete newbie

2013-03-03 Thread John R Pierce
On 3/2/2013 7:45 AM, Timothy Murphy wrote:
 As I understand it, tomcat can either be run standalone
 or behind apache.
 I am running httpd on the server, so either method should be available.
 It seems that the standalone option is simpler,
 so I would probably prefer that.

the main reason to run 'behind apache' is so static content can be 
delivered by apache which is more efficient at that, and only dynamic 
content is pushed through Tomcat.

If you're just providing 'webapp' APIs, there's no reason to not run it 
directly.



-- 
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] OT? : Big Yellow Cursor

2013-03-03 Thread Beartooth
Last time I had a machine running CentOS (6.2 iirc) I had managed 
to get a big yellow arrow to show the mouse cursor. It was wonderful.

Now I have machines running Fedora (17  18) and Puppy (5.0) -- 
and I need cursor symbols that my antiquated eyeballs can spot even 
through trifocals. Can anyone tell me a way to get my arrow back??

-- 
Beartooth Sciurivore, Curmudgeon On Line
Viruses, trojans, and spyware, Oh My!

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] preventing apache from being a mail relay

2013-03-03 Thread Robert Moskowitz
I am trying to recall back at least 2 years, and my notes are poor, and 
my searching appears to be worst...

Seems I recall that last when I set up my apache server, the spammers 
were posting to it so it would send out the spam on port 25.  There was 
some conf that I did to block this, but I did not document it, and I 
can't find any reference to this.

I don't think my memory is that bad, but it IS sunday...

I don't want to put up this new server and have it flooding the world 
with spam and then get the server blocked.  So do I remember correctly 
that this was a problem?  Is it still, and how is this prevented?

Thanks.  Am putting up better notes this time around.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Not installing avahi in a kickstart install

2013-03-03 Thread Robert Moskowitz
In the packages section of my kickstart I have:

-avahi

and I am still getting avahi and all of its rpms installed.  I don't 
want avahi on my servers, how do I specify in a kickstart to NOT install it?


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread John R Pierce
On 3/3/2013 1:30 PM, Robert Moskowitz wrote:
 Seems I recall that last when I set up my apache server, the spammers
 were posting to it so it would send out the spam on port 25.  There was
 some conf that I did to block this, but I did not document it, and I
 can't find any reference to this.


a webserver can't send email unless you've got email cgi or forms on/in 
your webpages




-- 
john r pierce  37N 122W
somewhere on the middle of the left coast

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Alexander Dalloz
Am 03.03.2013 22:30, schrieb Robert Moskowitz:
 I am trying to recall back at least 2 years, and my notes are poor, and 
 my searching appears to be worst...
 
 Seems I recall that last when I set up my apache server, the spammers 
 were posting to it so it would send out the spam on port 25.  There was 
 some conf that I did to block this, but I did not document it, and I 
 can't find any reference to this.
 
 I don't think my memory is that bad, but it IS sunday...
 
 I don't want to put up this new server and have it flooding the world 
 with spam and then get the server blocked.  So do I remember correctly 
 that this was a problem?  Is it still, and how is this prevented?
 
 Thanks.  Am putting up better notes this time around.

Don't run doubtful applications together with apache. Then there is
little risk to be misused. Back in time there has been a pretty bad
formmail cgi around which could be easily misused. Be careful with
other applications these days like with wordpress and such.

The default SELinux on CentOS does prevent apache to send mail using the
sendmail binary:

# getsebool httpd_can_sendmail
httpd_can_sendmail -- off

Alexander

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Robert Moskowitz

On 03/03/2013 04:33 PM, Reindl Harald wrote:

 Am 03.03.2013 22:30, schrieb Robert Moskowitz:
 I am trying to recall back at least 2 years, and my notes are poor, and
 my searching appears to be worst...

 Seems I recall that last when I set up my apache server, the spammers
 were posting to it so it would send out the spam on port 25.  There was
 some conf that I did to block this, but I did not document it, and I
 can't find any reference to this
 what are you speaking about?
 apache is a WEBSERVER and has NOTHING to do with email

There was an attack, and if you search you will find references to it, 
where the spammers post to your web server in such a way that they relay 
out port 25.  They send to your port 80, but you send out port 25.  For 
example:

http://forums.fedoraforum.org/archive/index.php/t-173601.html

My old server has been running smoothly for over two years, but it is 
time to bring the software current.  I did all the work on this back 
then, or maybe before and copied from my earlier server.  This time I am 
trying to build everything clean and document every change I make.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Not installing avahi in a kickstart install

2013-03-03 Thread Robert Moskowitz

On 03/03/2013 04:39 PM, Reindl Harald wrote:

 Am 03.03.2013 22:35, schrieb Robert Moskowitz:
 In the packages section of my kickstart I have:

 -avahi

 and I am still getting avahi and all of its rpms installed.  I don't
 want avahi on my servers, how do I specify in a kickstart to NOT install it?
 do not install packages which requires avahi?
 which they are?

 try yum remove avahi and see what it lists after install

The list is too long.  It includes firstboot!  Easier just to disable it 
after install as I have been doing.  Just thought I could prevent it 
from installing in the first place.  I can put a %post in to turn it off 
at least.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Robert Moskowitz

On 03/03/2013 04:37 PM, John R Pierce wrote:
 On 3/3/2013 1:30 PM, Robert Moskowitz wrote:
 Seems I recall that last when I set up my apache server, the spammers
 were posting to it so it would send out the spam on port 25.  There was
 some conf that I did to block this, but I did not document it, and I
 can't find any reference to this.

 a webserver can't send email unless you've got email cgi or forms on/in
 your webpages

This is probably such an old attack, that 'modern' apache builds block 
it by default. It had nothing to do with email cgi or forms.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Robert Moskowitz

On 03/03/2013 04:39 PM, Alexander Dalloz wrote:
 Am 03.03.2013 22:30, schrieb Robert Moskowitz:
 I am trying to recall back at least 2 years, and my notes are poor, and
 my searching appears to be worst...

 Seems I recall that last when I set up my apache server, the spammers
 were posting to it so it would send out the spam on port 25.  There was
 some conf that I did to block this, but I did not document it, and I
 can't find any reference to this.

 I don't think my memory is that bad, but it IS sunday...

 I don't want to put up this new server and have it flooding the world
 with spam and then get the server blocked.  So do I remember correctly
 that this was a problem?  Is it still, and how is this prevented?

 Thanks.  Am putting up better notes this time around.
 Don't run doubtful applications together with apache. Then there is
 little risk to be misused. Back in time there has been a pretty bad
 formmail cgi around which could be easily misused. Be careful with
 other applications these days like with wordpress and such.

 The default SELinux on CentOS does prevent apache to send mail using the
 sendmail binary:

 # getsebool httpd_can_sendmail
 httpd_can_sendmail -- off

Since this server is only apache and supplies ntp for internal systems, 
I am able to run with selinux.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread zGreenfelder
On Sun, Mar 3, 2013 at 4:37 PM, John R Pierce pie...@hogranch.com wrote:
 On 3/3/2013 1:30 PM, Robert Moskowitz wrote:
 Seems I recall that last when I set up my apache server, the spammers
 were posting to it so it would send out the spam on port 25.  There was
 some conf that I did to block this, but I did not document it, and I
 can't find any reference to this.


 a webserver can't send email unless you've got email cgi or forms on/in
 your webpages



I have vague (and very distant ~98ish?) memories of apache deployments
coming with a mail.cgi that was poorly secured and often exploited to
send out emails, but I think that's long since gone the way of the
dodo birds.   you have to go to some lengths to make webservers
interact with email servers.  if you're really worried about it, you
should also look into removing/blocking proxy connections:

http://ihazem.wordpress.com/2010/12/08/apache-forward-proxy-relay-security-problem/

-- 
Even the Magic 8 ball has an opinion on email clients: Outlook not so good.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Alexander Dalloz
Am 03.03.2013 22:49, schrieb Robert Moskowitz:

 There was an attack, and if you search you will find references to it, 
 where the spammers post to your web server in such a way that they relay 
 out port 25.  They send to your port 80, but you send out port 25.  For 
 example:
 
 http://forums.fedoraforum.org/archive/index.php/t-173601.html
 
 My old server has been running smoothly for over two years, but it is 
 time to bring the software current.  I did all the work on this back 
 then, or maybe before and copied from my earlier server.  This time I am 
 trying to build everything clean and document every change I make.

Such a misbehaviour would be caused by a misconfigured apache proxy setup.

Alexander

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Robert Moskowitz

On 03/03/2013 04:58 PM, zGreenfelder wrote:
 On Sun, Mar 3, 2013 at 4:37 PM, John R Pierce pie...@hogranch.com wrote:
 On 3/3/2013 1:30 PM, Robert Moskowitz wrote:
 Seems I recall that last when I set up my apache server, the spammers
 were posting to it so it would send out the spam on port 25.  There was
 some conf that I did to block this, but I did not document it, and I
 can't find any reference to this.

 a webserver can't send email unless you've got email cgi or forms on/in
 your webpages


 I have vague (and very distant ~98ish?) memories of apache deployments
 coming with a mail.cgi that was poorly secured and often exploited to
 send out emails, but I think that's long since gone the way of the
 dodo birds.   you have to go to some lengths to make webservers
 interact with email servers.  if you're really worried about it, you
 should also look into removing/blocking proxy connections:

 http://ihazem.wordpress.com/2010/12/08/apache-forward-proxy-relay-security-problem/

That may have been the attack vector way back when. Now the proxy 
directives come commented out, so supposedly you are suppose to know the 
risks of running a proxy.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Robert Moskowitz

On 03/03/2013 05:06 PM, Alexander Dalloz wrote:
 Am 03.03.2013 22:49, schrieb Robert Moskowitz:

 There was an attack, and if you search you will find references to it,
 where the spammers post to your web server in such a way that they relay
 out port 25.  They send to your port 80, but you send out port 25.  For
 example:

 http://forums.fedoraforum.org/archive/index.php/t-173601.html

 My old server has been running smoothly for over two years, but it is
 time to bring the software current.  I did all the work on this back
 then, or maybe before and copied from my earlier server.  This time I am
 trying to build everything clean and document every change I make.
 Such a misbehaviour would be caused by a misconfigured apache proxy setup.

It is coming back now through a pair of dark glasses. Just haven't built 
a public web server is so long, as the old one just ran for as little as 
I needed it, that I lost the notes on the problem. Looks like current 
defaults do not allow this.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Not installing avahi in a kickstart install

2013-03-03 Thread Natxo Asenjo
On Sun, Mar 3, 2013 at 10:52 PM, Robert Moskowitz r...@htt-consult.com wrote:

 On 03/03/2013 04:39 PM, Reindl Harald wrote:

 Am 03.03.2013 22:35, schrieb Robert Moskowitz:
 In the packages section of my kickstart I have:

 -avahi

 and I am still getting avahi and all of its rpms installed.  I don't
 want avahi on my servers, how do I specify in a kickstart to NOT install it?
 do not install packages which requires avahi?
 which they are?

 try yum remove avahi and see what it lists after install

 The list is too long.  It includes firstboot!  Easier just to disable it
 after install as I have been doing.  Just thought I could prevent it
 from installing in the first place.  I can put a %post in to turn it off
 at least.

yes, that was my conclusion too. If you run a centos desktop (like I
do), it simply wants to remove the whole gnome ;-).

So we have cfengine stop the avahi-daemon service plus if the
avahi-daemon process is running for whatever reason it gets stopped.

-- 
natxo
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT? : Big Yellow Cursor

2013-03-03 Thread Robert
On Sun, 3 Mar 2013 20:21:34 + (UTC)
Beartooth bearto...@comcast.net wrote:

   Last time I had a machine running CentOS (6.2 iirc) I had managed 
 to get a big yellow arrow to show the mouse cursor. It was wonderful.
 
   Now I have machines running Fedora (17  18) and Puppy (5.0) -- 
 and I need cursor symbols that my antiquated eyeballs can spot even 
 through trifocals. Can anyone tell me a way to get my arrow back??

If you are using KDE 4.x then goto System Settings - Workspace Decorations - 
Cursor Themes

There you can set the size of the cursor.


--  
Regards
Robert

Linux
The adventure of a lifetime.

Linux User #296285
Get Counted
http://linuxcounter.net/
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Strange behavior from software RAID

2013-03-03 Thread Gordon Messmer
On 03/02/2013 06:35 PM, Harold Pritchett wrote:
 When I boot the system, I end up with two unexpected, unconfigured
 volume groups.

RAID set is a better term.  The term volume group describes 
components of the LVM system, which is not directly related to md raid.

  Where the heck are /dev/md125 and /dev/md127 coming
 from?

Well, md125 is the other half of md1.  Check which of those two devices 
has the correct data.  Destroy the other, then add that partition to the 
remaining RAID device.

 They don't appear in /etc/mdadm.conf and if I re-boot they
 keep coming back.  It appears that somewhere mdadm is keeping
 information.  How can I get rid of it so the mdadm.conf file is
 used.

I think you'll need to do two things.  First, automatically-detected 
RAID sets get an automatic minor number assigned.  That number is stored 
in the RAID metadata, so if you want to change it, you'll need to 
manually update the metadata.  I think that's done by:
mdadm --stop /dev/md127
mdadm --assemble /dev/md2 --update=super-minor /dev/sdd3 /dev/sdb3

As Maxim suggested, you may also need to re-build your initrd.

As always, make sure you have backups first.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Joseph Spenner
On 03/03/2013 05:06 PM, Alexander Dalloz wrote:

 Am 03.03.2013 22:49, schrieb Robert Moskowitz:

 There was an attack, and if you search you will find references to it,
 where the spammers post to your web server in such a way that they relay
 out port 25.  They send to your port 80, but you send out port 25.  For
 example:

 http://forums.fedoraforum.org/archive/index.php/t-173601.html

 My old server has been running smoothly for over two years, but it is
 time to bring the software current.  I did all the work on this back
 then, or maybe before and copied from my earlier server.  This time I am
 trying to build everything clean and document every change I make.
 Such a misbehaviour would be caused by a misconfigured apache proxy setup.

It is coming back now through a pair of dark glasses. Just haven't built 
a public web server is so long, as the old one just ran for as little as 
I needed it, that I lost the notes on the problem. Looks like current 
defaults do not allow this.

Wouldn't this attack be similar to using someone's web server as a proxy to get 
to other sites?  By default, apache doesn't permit itself to proxy this way.

A simple test would be to do something like this to your own web server, or one 
in question:

$ telnet ip.of.webserver 80

GET http://www.google.com HTTP/1.0
returnreturn



 If life gives you lemons, keep them-- because hey.. free lemons.
~heart~ Sticker  fixer:  http://microflush.org/stuff/stickers/heartFix.html
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Not installing avahi in a kickstart install

2013-03-03 Thread Robert Moskowitz

On 03/03/2013 05:28 PM, Natxo Asenjo wrote:
 On Sun, Mar 3, 2013 at 10:52 PM, Robert Moskowitz r...@htt-consult.com 
 wrote:
 On 03/03/2013 04:39 PM, Reindl Harald wrote:
 Am 03.03.2013 22:35, schrieb Robert Moskowitz:
 In the packages section of my kickstart I have:

 -avahi

 and I am still getting avahi and all of its rpms installed.  I don't
 want avahi on my servers, how do I specify in a kickstart to NOT install 
 it?
 do not install packages which requires avahi?
 which they are?

 try yum remove avahi and see what it lists after install

 The list is too long.  It includes firstboot!  Easier just to disable it
 after install as I have been doing.  Just thought I could prevent it
 from installing in the first place.  I can put a %post in to turn it off
 at least.
 yes, that was my conclusion too. If you run a centos desktop (like I
 do), it simply wants to remove the whole gnome ;-).

 So we have cfengine stop the avahi-daemon service plus if the
 avahi-daemon process is running for whatever reason it gets stopped.

Looks a bit too much to take on at this point. But I will put a link in 
my notes for future study. Thanks.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Robert Moskowitz

On 03/03/2013 05:39 PM, Reindl Harald wrote:

 Am 03.03.2013 22:49, schrieb Robert Moskowitz:
 On 03/03/2013 04:33 PM, Reindl Harald wrote:
 Am 03.03.2013 22:30, schrieb Robert Moskowitz:
 I am trying to recall back at least 2 years, and my notes are poor, and
 my searching appears to be worst...

 Seems I recall that last when I set up my apache server, the spammers
 were posting to it so it would send out the spam on port 25.  There was
 some conf that I did to block this, but I did not document it, and I
 can't find any reference to this
 what are you speaking about?
 apache is a WEBSERVER and has NOTHING to do with email
 There was an attack, and if you search you will find references to it, where 
 the spammers post to your web server
 in such a way that they relay out port 25.  They send to your port 80, but 
 you send out port 25.  For example:

 http://forums.fedoraforum.org/archive/index.php/t-173601.html
 only if you are so stupid and enable prxy-requests and load
 any useless module becuse it exists - in other words: this
 only affects poorly wrong configured setups which have way
 larger problems as this one

Once upon a time, it worked this way out of the box.  I did NOT set up 
proxy, and I was being pounded, and found I had to turn it off. Now 
knowing what to look for, I found my notes and it was back on my '07 server.

There is no reason for a general web server to function as a proxy, so 
for some time it has come with that part commented out.  I looked a 
another '10 box (Centos 5.5) that had apache installed but never used 
and the proxy part was commented out.

So yes, anyone turning on proxy today without care gets what they set 
up.  But again, who needs proxying on a general web server?


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Robert Moskowitz

On 03/03/2013 05:46 PM, Joseph Spenner wrote:
 On 03/03/2013 05:06 PM, Alexander Dalloz wrote:

 Am 03.03.2013 22:49, schrieb Robert Moskowitz:

 There was an attack, and if you search you will find references to it,
 where the spammers post to your web server in such a way that they relay
 out port 25.  They send to your port 80, but you send out port 25.  For
 example:

 http://forums.fedoraforum.org/archive/index.php/t-173601.html

 My old server has been running smoothly for over two years, but it is
 time to bring the software current.  I did all the work on this back
 then, or maybe before and copied from my earlier server.  This time I am
 trying to build everything clean and document every change I make.
 Such a misbehaviour would be caused by a misconfigured apache proxy setup.
 It is coming back now through a pair of dark glasses. Just haven't built
 a public web server is so long, as the old one just ran for as little as
 I needed it, that I lost the notes on the problem. Looks like current
 defaults do not allow this.
 Wouldn't this attack be similar to using someone's web server as a proxy to 
 get to other sites?  By default, apache doesn't permit itself to proxy this 
 way.

Not anymore.  Once upon a time, the internet was a nice place and so 
what if you proxied?  But the dragons were always lurking there, ready 
to feed...


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread Eddie G. O'Connor Jr.
On 03/03/2013 04:49 PM, Robert Moskowitz wrote:
 On 03/03/2013 04:33 PM, Reindl Harald wrote:
 Am 03.03.2013 22:30, schrieb Robert Moskowitz:
 I am trying to recall back at least 2 years, and my notes are poor, and
 my searching appears to be worst...

 Seems I recall that last when I set up my apache server, the spammers
 were posting to it so it would send out the spam on port 25.  There was
 some conf that I did to block this, but I did not document it, and I
 can't find any reference to this
 what are you speaking about?
 apache is a WEBSERVER and has NOTHING to do with email
 There was an attack, and if you search you will find references to it,
 where the spammers post to your web server in such a way that they relay
 out port 25.  They send to your port 80, but you send out port 25.  For
 example:

 http://forums.fedoraforum.org/archive/index.php/t-173601.html

 My old server has been running smoothly for over two years, but it is
 time to bring the software current.  I did all the work on this back
 then, or maybe before and copied from my earlier server.  This time I am
 trying to build everything clean and document every change I make.


 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos
If / when I get the guts to build my own Apache web server...I would 
think that the ONLY way to do it would be to document EVERYTHINGsort 
of as a Just-In-Case policy?or is it only after you've built 
it?...and when you make CHANGES to your serverTHAT'S when you 
document everything?


EGO II
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] suggestions for simple audio editor

2013-03-03 Thread Carl T. Miller
On 02/28/2013 08:15 PM, Rob Kampen wrote:
 On 03/01/2013 07:24 AM, Fred Smith wrote:
 What I think you're saying is: if you place the cursor at a location
 that is, e.g., 1.43 seconds into the clip, right-click then drag (in
 either direction) until you've selected the part you want to cut, that
 Audacity moves the endpoints of you selection from where you put them
 to a whole-second point?
 
 I just wonder if this is an artifact from having started with an mp3
 rather than a proper wave file?

I finally figured out what the problem was.  I started audacity at the
shell prompt with the name of my wav file as a parameter.  After doing
more searching, I found that audacity will not allow edits to an
original file.  So I started audacity without any parameters, opened
the wav file, and saved it as a project.  I was then able to edit it.

I just wish that audacity warned me that I was in readonly mode.
Otherwise everything else about it was pretty intuitive.  Thanks for
all of the suggestions!

c

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Google Earth on EL6.x x86_64

2013-03-03 Thread Fred Smith
Has anyone gotten 64-bit google earth to run on el6 x86_64?

It dies almost immediately, complaining for lack of ld-lsb.so.3.
Perusing user forums at google I see a few others with the problem,
but no (working) solutions.

Thanks in advance!

-- 
 Fred Smith -- fre...@fcshome.stoneham.ma.us -
   For the word of God is living and active. Sharper than any double-edged 
   sword, it penetrates even to dividing soul and spirit, joints and marrow; 
  it judges the thoughts and attitudes of the heart.  
 Hebrews 4:12 (niv) --
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Google Earth on EL6.x x86_64

2013-03-03 Thread Earl Ramirez
On Sun, 2013-03-03 at 21:49 -0500, Fred Smith wrote:
 Has anyone gotten 64-bit google earth to run on el6 x86_64?
 
 It dies almost immediately, complaining for lack of ld-lsb.so.3.
 Perusing user forums at google I see a few others with the problem,
 but no (working) solutions.
 
 Thanks in advance!
 
Fred,

You will need to install the following 32 bit packages

1. redhat-lsb.i686
2. mesa-libGL.i686
3. mesa-libGLU.i686

I get this to work on my laptop a few days ago.

-- 


Kind Regards
Earl Ramirez
GPG Key: http://trinipino.com/PublicKey.asc


signature.asc
Description: This is a digitally signed message part
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] preventing apache from being a mail relay

2013-03-03 Thread John R. Dennison
On Sun, Mar 03, 2013 at 04:54:46PM -0500, Robert Moskowitz wrote:
 
 Since this server is only apache and supplies ntp for internal systems, 
 I am able to run with selinux.

Not to start an selinux flamewar but there is no reason that selinux can
not be used on any server in any role serving any content for any
audience unless there is a craptastic control panel such as cpanel or
others of its ilk present.






John
-- 
The beauty of the Second Amendment is that it will not be needed until they
try to take it.

-- Thomas Jefferson


pgpg3JYY4Kceg.pgp
Description: PGP signature
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Google Earth on EL6.x x86_64

2013-03-03 Thread Fred Smith
On Mon, Mar 04, 2013 at 10:56:26AM +0800, Earl Ramirez wrote:
 On Sun, 2013-03-03 at 21:49 -0500, Fred Smith wrote:
  Has anyone gotten 64-bit google earth to run on el6 x86_64?
  
  It dies almost immediately, complaining for lack of ld-lsb.so.3.
  Perusing user forums at google I see a few others with the problem,
  but no (working) solutions.
  
  Thanks in advance!
  
 Fred,
 
 You will need to install the following 32 bit packages
 
 1. redhat-lsb.i686
 2. mesa-libGL.i686
 3. mesa-libGLU.i686
 
 I get this to work on my laptop a few days ago.

thanks Earl, I'll give it a whirl.

I did ldd /opt/google/earth/free/googleearth-bin and got back a list
of a dozen or so not found items, would you be willing to check on
your system and see what you get back? (that might be because it has
not been thru the preceding shellscript that might set up some ENV
to point to the right places, I suppose.)

thanks!

Fred

-- 
 Fred Smith -- fre...@fcshome.stoneham.ma.us -
   I can do all things through Christ 
  who strengthens me.
-- Philippians 4:13 ---
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Lockups with kernel-2.6.32-358.0.1.el6.i686

2013-03-03 Thread Ian Pilcher
I updated my home server with the 6.4 CR packages, and I've experienced
3 or 4 hard lockups since.  The server is a fanless VIA C7
CentaurHauls system with a 1GHz CPU underclocked to 800MHz and 1GB of
RAM.  It has a dual-port Intel 82546GB NIC in its single PCI slot.  (It
also has an on-board Realtek RTL-8110SC/8169SC NIC that is plugged in,
but doesn't currently have an IP address configured.)

This server provides a number of services -- DNS, DHCP, routing between
VLANs, DLNA media server, CUPS, etc.  Most importantly, it runs Asterisk
and manages all of the phones in the house.

There's absolutely nothing in the logs related to the lockup.  The
system simply becomes totally unresponsive, to the point that the
console cursor stops blinking.  A hard reset is required to bring it
back.

kernel-2.6.32-279.22.1.el6.i686 seems to be completely stable.

I don't really expect to be able to figure this out, but I thought I'd
post here to see if anyone else is experiencing anything like this with
this kernel.

Thanks!

-- 

Ian Pilcher arequip...@gmail.com
Sometimes there's nothing left to do but crash and burn...or die trying.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] acrobat reader for x86_64?

2013-03-03 Thread Sorin Srbu
 -Original Message-
 From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On
 Behalf Of Fred Smith
 Sent: Saturday, March 02, 2013 5:03 AM
 To: centos@centos.org
 Subject: [CentOS] acrobat reader for x86_64?
 
 Adobe doesn't seem to have acroread for x86_64 linux, or at least I
 don't
 see it anywhere.
 
 Anybody know otherwise?
 
 Evince and other tools work pretty well, but I have always liked having
 the real thing around for those occasions when they don't.

What would be the advantage running having this software in 64b?

-- 
/Sorin
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos