[CentOS] mount CIFS issue with CentOS 6.4
I have a NAS that I can connect to just fine with a CentOS 6.3 box. But when I try the same exact command on my CentOS 6.4 box I get this error. mount -t cifs //xxx.xxx.xxx.xxx/mailserver/ /mnt/test -o username=xxx,password=xxx mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) I've been googling, trying different things all afternoon, please help Thanks Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] server fails to boot GRUB and flashing cursor
On 8/13/2012 2:24 PM, m.r...@5-cent.us wrote: Dan Carl wrote: I have a power edge with raid5 that contains Centos 5.4. I had a drive failure, anyway the array is optimal now but the server won't boot. I can boot from a Centos 5.3 liveCD and all the data is still there. There is no grub.conf just shows a broken link. Is fixing this as simple as gub-install |--root-directory=/mnt/disc/sda3 /dev/sda| Before screwing things up I am seeking your all's advice. Thanks in advance Dan # fdisk -l /dev/sda Disk /dev/sda: 72.7 GB, 72729231360 bytes 255 heads, 63 sectors/track, 8842 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Device Boot Start End Blocks Id System /dev/sda1 * 1 13 104391 83 Linux /dev/sda2 14 658 5180962+ 82 Linux swap / Solaris /dev/sda3 659884265737980 83 Linux You said this had RAID5: what's the o/p of cat /proc/mdstat?\ Its a hardware raid5 perc. I cannot mount the boot partition sda1. sda3 mounts fine this is where the OS is. What to do? Dan mark ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos -- Dan Carl 651-766-2800 x218 651-491-9712 Mobile ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] server fails to boot GRUB and flashing cursor
On 8/13/2012 4:07 PM, Les Mikesell wrote: On Mon, Aug 13, 2012 at 2:41 PM, Dan Carl d...@bluestarshows.com wrote: Device Boot Start End Blocks Id System /dev/sda1 * 1 13 104391 83 Linux /dev/sda2 14 658 5180962+ 82 Linux swap / Solaris /dev/sda3 659884265737980 83 Linux You said this had RAID5: what's the o/p of cat /proc/mdstat?\ Its a hardware raid5 perc. I cannot mount the boot partition sda1. sda3 mounts fine this is where the OS is. What to do? What kind of error do you get when you try to mount sda1? Is it something fsck will fix? You need to load the kernel and initrd from there. #mount -t ext3 /dev/sda1 /mnt/myboot mount: wrong fs type, bad option, bad superblock on /dev/sda1, missing codepage or other error In some cases useful info is found in syslog - try dmesg | tail or so I have nothing in my boot directory. Will I have to reload the kernel and grub? ran fsck got Superblock has an invalid ext3 journal (inode 8). Cleary? Should I select Y? Thanks Dan -- Dan Carl 651-766-2800 x218 651-491-9712 Mobile ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: high static in server room
On 6/14/2011 7:04 PM, Fajar Priyanto wrote: Thanks all for the reply. What is the worst thing can happen from excessive static? We have two corrupted UEFI when we reboot servers which now I suspect because of static. Yesterday I actually saw a spark when I put a memory module on motherboard even though I was careful like touching the metal casing first. That just blow my mind and made me ask you in this list I have an antistatic mat on the floor in front of my server rack similar to this. http://www.uline.com/BL_1755/Anti-Static-Mats Simple, does the job, and it also feels good on the feets! If you spend a lot of time in your server room, you might also consider a fish tank. It will add moisture to your room and give you something to look at other than flashing leds:-) Sorry for that but this list really needs to lighten up. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: Video Surveillance SW on CentOS
On 5/17/2011 8:33 AM, Lanny Marcus wrote: I suggested to our Homeowners Association that we begin a Private Forum (phpBB) and web site. That suggestion has been well received and we will proceed with that. Now, I have become involved in a much more complex and important project, which is Video Surveillance, for the entrance to our subdivision. I Googled and found two (2) things for Linux that seem to be OK: (a) ZoneMinder http://www.zoneminder.com/ (b) Motion http://www.lavrsen.dk/foswiki/bin/view/Motion/WebHome Both are licensed under the GPL. Motion is available from the RPMForge Repository, which is a big plus, for installation, upgrades and removal. ZoneMinder seems to be a much more active project. Used zoneminder in the past may be a bit of overkill for your application. I would appreciate Feedback, from anyone who has used either or both of these programs. Pros and Cons? Check out Tiger Direct they sell Night Owl system for less the $300. Maybe they can't do everything but for easy of use, setup, maintenance etc well worth the trade off. Trust me it'll save on the Lanny the camera server isn't working, again calls :) I've also had success with Geo Vision but it is ... dare I say Windows based. Also, if anyone has other Software to recommend, to run on CentOS, that information will be appreciated. If you don't want to run it on CentOS but are looking for a Linux solution LinuxMCE may be worth a look. Never used it but looks interesting. The idea is to have at least two (2) cameras. One for Arrivals and One for Departures. Cheers ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Sendmail Replay problem
On 12/16/2010 2:56 AM, sync wrote: Hi , guys : I have a problem about the sendmail replay . The following is my condition: I have installed the sendmail server on my laptop which installed CentOS 5.5 x86 64, and I want to set up the sendmail replay. That is to say . If my linux account called test and his mail address is t...@test.com mailto:t...@test.com, when he get the new mail, then the server send the mail to the company mail server , the new mail address is t...@aa.com mailto:t...@aa.com snip confused on what your trying to accomplish here. Googling smarthost should provide some answers. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Web statistics - w3perl
On 11/4/2010 8:03 AM, Mathew S. McCarrell wrote: On Thu, Nov 4, 2010 at 7:45 AM, Lanny Marcus lmmailingli...@gmail.com mailto:lmmailingli...@gmail.com wrote: On Wed, Oct 13, 2010 at 2:15 PM, Camron W. Fox cw...@us.fujitsu.com mailto:cw...@us.fujitsu.com wrote: On 10/10/13 08:12, Jussi Hirvi wrote: I am considering a richer alternative to good old Webalizer, in a webhotel (multidomain) setting. Any experience with w3perl? The demo at least looks impressive. http://www.w3perl.com - Jussi I've used it for close to ten years, 2 thumbs up. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] How to access one machine behind iptables, on different subnet?
On 10/29/2010 3:22 AM, Rudi Ahlers wrote: Hi all, I wonder if someone can help me with this: The setup is as follows: 192.168.1.254 - wireless ADSL modem, with DHCP pool on 192.168.100 - 192.168.200 192.168.1.250 - Linux firewall RED interface 192.168.2.250 - Linux firewall GREEN interface. There are some normal LAN clients behind the Linux firewall's GREEN interface, which can all access each other's shared services and also all the clients behind the RED interface. i.e. those clients connected to the 192.168.1.254 ADSL wifi APP directly. Now I want the clients on the outside to connect to one specific host on the inside, behind the GREEN interface, on IP 192.168.1.20. How would I do that? I know I can do this with port fowarding, but need many ports forwarded. How do I give full access to all ports on this IP, instead of forwarding every port? Does that make sense? snip Not much of a firewall if you allow everything, unless you're limiting the outside IPs. Other solutions would be to allow either a range of ports. Ex --dport 5000:5500 --dport 1024:65535 (all unassigned ports) or define the ports you wish to allow with a variable Ex FORWARDPORTS=1024 1025 1026 even a hybred like this should work Ex FORWARDPORTS=1024 1025 1026 5000:5500 Then call the variable in your forward rules. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Backing up pass words
On 8/26/2010 12:40 PM, Todd Cary wrote: I am currently running CentOS 4 and want to install CentOS 5. To do that, I plan to install a new HD in my server box onto which CentOS will be installed. I will then copy the home directory from the old drive or from a backup on a USB drive, however I am not sure how to handle the Users/Passwords from the old installation. Many thanks... Todd I used this howto a year or 2 ago and it worked great for me. http://www.cyberciti.biz/faq/howto-move-migrate-user-accounts-old-to-new-server/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Ethernet Quad
On 8/12/2010 7:56 AM, Daniel Bruno wrote: Hello, Someone can indicate some Ethernet device Quad 10/100 to use with CentOS 5.x? Thanks, I use an Intel Pro 10/100 board on a CentOS 5.5 based router works quite well. I've been using it since RH 7.2 so its well supported under CentOS I bought mine as a dual and then upgraded it to a quad (was way cheaper at the time). Intel made them for Compaq also. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] cameras and CentOS
On 6/17/2010 1:22 AM, Jobst Schmalenbach wrote: Hi I want to put up a few cameras connected to a CentOS box. I currently have a box with one camera and that works (USB), I can take a pic (the script does that) and see that on a webpage. However, I want to have a couple of cameras a little further away (more than 5 meters). USB has a limit, I have tried that camera with a longer cable and it does not work ... so I need to route that in a different way. Are there equaly as cheap other moethods? Or can I use USB-adapter-network cable-adapter-USB? How can I get that to work? Jobst If you're using them for a security and surveillance solution. A capture card and zoneminder would be a more professional grade solution. Also an all-in-one device like the one found here http://www.nightowlsp.com/products.htm are a great low cost alternative. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] LSI software raid with centos 5.4
On 5/24/2010 4:10 AM, CList wrote: I have been trying to install CentOS 5.4 on a Intel SR1530SHS, Intel S3200SH mainboard.. It has a 3 x 1TB sata hotswap drives with LSI software raid onboard. I had configured the LSI to have Sata0 and Sata1 with raid 1 and the third drive as a hotspare drive. Format the harddisk and installation was a breeze. The server rebooted into a blank screen and the cursor just keep blinking. snip I've had this problem on an Intel board when I had hard drives on the motherboards SATA ports and some on the motherboards silicon image SATA ports. The bios seemed to swap the order the drives were present to grub so it couldn't boot. I would either get a blinking cursor or GRUB. I ended up putting all the drives on a LSI PCI Express card and everything just worked. However in your situation it sounds like you only have drives on the LSI controller. I would try booting into resuce mode with the CentOS installation CD. You can do this by typing linux rescue. Have it search and mount the CentOS installation. Look at /boot/grub/device.map and make sure hd0 references the correct /dev/sd device. Also chroot /mnt/sysimage and try grub-install /dev/sd Ryan, I followed your instruction, but it is still not working. Any other suggestion? Have you considered using software raid instead? I would take a reinstall, but IMO an easier/better solution over built-in and low-end HW raid controllers. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] OT: What are the 2 openssl commands I need to use?
On 12/29/2009 11:36 AM, Lanny Marcus wrote: I looked on the openssl man page but am too dense with commands to understand what I need to do. Ran into problems generating a key and CSR for SSL, because the web site is on a server with an old Ensim Control Panel. Please someone knowledgeable, give me the openssl commands I need to use, after I ssh into the web site, to generate a 2048 bit key and csr. TIA and Happy New Year! I believe the issue you are having is due to the size of the encryption key. The ensim control panel generates a 1024 bit key, where the certificate you got was 2048 bits. What you need to do is generate a 2048 bit key and csr on your domain. You would need to login in to your domain through ssh and generate the files from the command line. snip This will create one with a passphrase openssl genrsa -des3 -out mydomain.key 2048 openssl req -new -key mydomain.key -out mydomain.csr Same put without a passpharse openssl genrsa -out mydomain.key 2048 openssl req -new -key mydomain.key -out mydomain.csr Cheers ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] [OT] Urgent request
On 12/17/2009 1:20 PM, tdu...@sc.rr.com wrote: William L. Maltbycentos4b...@triad.rr.com wrote: On Thu, 2009-12-17 at 13:29 -0500, tdu...@sc.rr.com wrote: m.r...@5-cent.us wrote: snip We have been searching the internet since Tuesday. We have already tried installing a video card, that didn't work. The beeps at start up indicate to check the video ram. It will boot and run if we put it in another pc. The server is running c-sytems software on a sco operating system. They tell us we can't pull the hard drive and move it to another pc - something about a bug causing it to lose data. I've been running linux systems since the late 80's. I have never heard of this but then, I have never run a sco system either. Any help or suggestions? Some BIOS allow you to disable on-board video. Can you get to BIOS and see? If you can that might get you going with another video card added to the system. We have no video at all. Was hoping a video card would have at least let us in to reconfigure the bios but we are unable to see anything. Did you try an ISA video card? Some systems will use that slot first without changing jumpers or bios. Some things to try as a last resort. 1.Clean contacts with eraser and rubbing alcohol. 2.Try putting the memory in the freezer for awhile. 3.Take a soldering iron and reheat the solder joints. If all these fail drink some alcohol :) ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] info about hdds in raid
Eugeneapolinary Ju wrote: How can I tell wich HDD to swap, when the cat /proc/mdstat says one HDD of the RAID1 array has died? Does the HDD's has some serial numbers, that I can see in reality, and I can get that number from e.g.: a commands output? How could I know wich HDD to swap in e.g.: a RAID1 array? thank you # smartctl -a /dev/sda and so on This will give you the serial # of the working drives. You'll then have to power down and search for the one not in your serial# list. Make sure to have a good backup first. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Newsletter feedback
Frank Thommen wrote: Hi, We have now published the sixth version of the Newsletter [...] What newsletter are you referring to? I cannot find any newsletter offer on centos.org. frank Its in the wiki http://wiki.centos.org/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] sendmail question
Les Mikesell wrote: Jerry Geis wrote: Hi all, I have a local user account call panel on a machine. When I use the mail command to manually send email to the panel account it over 1 minute until that mail actually deposited in the mail account. What setting is that reduces this time? I changed /etc/sysconfig/sendmail the QUEUE=10s and that did not have any effect. You could look at /var/log/maillog to see what steps happened and the timestamps. My guess is that your DNS is badly broken and it is waiting for the local machine name and/or IP to resolve. Does 'nslookup' return quickly with these? My guess would be a resolving problem also. Its usually what causes sendmail to slow down. Check your /etc/hosts file Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] sendmail question
Jerry Geis wrote: My guess would be a resolving problem also. Its usually what causes sendmail to slow down. Check your /etc/hosts file Dan My /etc/hosts file is only has the nameserver x.x.x.x entry. the /var/log/maillog shows the entry right away when mail on the command line is done. Again, this is mail originating on the the box and destination is on the same box. mailq always shows 0, even doing it repeatedly. the mail delivery is delayed exactly 2 minutes. I have 127.0.0.1 localhost in the /etc/hosts file. Very odd, any thoughts? If you don't have DNS running on the box, try adding the machine name to your hosts file Example: 127.0.0.1 localhost.localdomain localhost localdomain your-machine-name-here Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] sendmail question
Dan Carl wrote: Jerry Geis wrote: My guess would be a resolving problem also. Its usually what causes sendmail to slow down. Check your /etc/hosts file Dan My /etc/hosts file is only has the nameserver x.x.x.x entry. the /var/log/maillog shows the entry right away when mail on the command line is done. Again, this is mail originating on the the box and destination is on the same box. mailq always shows 0, even doing it repeatedly. the mail delivery is delayed exactly 2 minutes. I have 127.0.0.1 localhost in the /etc/hosts file. Very odd, any thoughts? If you don't have DNS running on the box, try adding the machine name to your hosts file Example: 127.0.0.1 localhost.localdomain localhost localdomain your-machine-name-here Sorry formatting issue it should all be on one line 127.0.0.1 localhost.localdomain localhost localdomain your-name-here Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] bind question, please help
adrian kok wrote: in my understanding: 1/ this allow internal network can query zone and outside allow-query { localhost; internal-network; }; recursion yes; 2/ this allow internal network can query zone but not outside allow-query { localhost; internal-network; }; recursion no; i would like this dns as let outside query zone and allow internal network to equiry zone and outside. how can i do it? Thank you snip Not quite sure of your question. if there is a zone you want for your internal network do something like this. match-clients { internals; }; match-destinations { internals; }; allow-recursion {192.168.0.0/24;127.0.0.1;}; for external match-clients { any; }; match-destinations { any; }; recursion no; This is assuming you're setting up views. Bind and views can get complicated. You may be better off setting up two DNS servers, one for internal and one for external. I have no experience with it but its been suggested here that dnsmasq is very easy to configure. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] More about firewalling
ML wrote: I have a Comcast business circuit with 13 IP's. The gateway device they provide is a 'pass through' device. They sent traffic for all 13 IP's my way. It just allows traffic through. So if I put in a device to firewall (like Ipcop or Vyatta or something) in front, say it has 3 NICS, how do I do that? Before I start this my not be the best/easiest way to accomplish this, just sharing how I do it. I too have Comcast Business (love the speed and the price). I have only a standard 5 usable IP block, but my setup may work for you. I choose to use CentOS for everything, I know there are better suited OS's out there for this. I just don't want to have to remember the different nuances between nix's. You could also buy a commercial router for this but if you're cheap like me, and have an ever shrinking IT budget why. I use a recycled dual P-III 866MHz, 512K RAM and a 4 port Intel NIC.. You should be able to purchase similar boxes for $100-$150 or use whatever you have laying around. I mirror 2 40GB HD's but a more reliable setup would be to boot a live CD and use a USB drive for storage. I just have not got around to trying this yet. If you want the IP's to go to different boxes you can just buy a switch connect it to the Comcast device. Then set your assigned IP addresses on each boxes nic. But what I believe you want is to have all the IP's come into one point and be distributed to your other boxes behind it. To do this use IP aliasing and assign your 13 IP's to eth0 - eth0:12. For more info google IP aliasing. You can route the traffic out one or several nics. I DMZ my internal network, mailserver and webserver to seperate nics but you don't have to. To decide where the whole IP and or port traffic goes use iptables for this. Everything and more you need to know about it and more is here: http://iptables-tutorial.frozentux.net/iptables-tutorial.html I just like writing /editing iptables from a script. If the Firewall has IP A and Traffic for IP B comes in how would IP A answer and decide if the traffic to IP B belonged? Without statically routing I am confused on how to accomplish this? How fast does this device need to be? I run DNS, DHCP, NTP without ever using 1% of CPU and very rarely using swap. So I'd say its fast enough. Just install base, no GUI, and turn off all nonessential services . If you want email me off list and I can forward you a crude howto. Cheers Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] dhcpd logging to dhcpd.log only
I've added this to my dhcpd.conf log-facility local6; and added this to my syslog.conf local6.* /var/log/dhcpd.log It's still writing to dhcpd info to both log files. How do I stop this. I've googled but all suggested modifications I've made to the dhcpd.conf causes dhcpd to not start. Thanks Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] dhcpd logging to dhcpd.log only
Jim Perrin wrote: On Tue, Sep 22, 2009 at 11:33 AM, Dan Carl d...@bluestarshows.com wrote: I've added this to my dhcpd.conf log-facility local6; and added this to my syslog.conf local6.* /var/log/dhcpd.log It's still writing to dhcpd info to both log files. How do I stop this. Add local6.none to the /var/log/messages line in syslog.conf Should look similar to this - *.info;mail.none;authpriv.none;cron.none;local6.none /var/log/messages Thanks that did it. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Secure mail login problem
On 6/25/2009 5:35 PM, S.Tindall wrote: On Thu, 2009-06-25 at 23:00 +0100, Ned Slider wrote: Bob Hoffman wrote: Hi all, Finally got around to making sendmail and dovecot use a secure log in procedure on my server. Now when I open up outlook it goes through a secure log in. Unfortunately, I am using my own self signed cert on the server for this. Hence, I get, for every single account, everytime I open up outlook a warning about untrusted cert. I have looked around and found a spot in IE to 'import' a cert of some kind...and this would seem like the way to make it work. I am unsure exactly what I am supposed to copy or run on the server to then save to my home computer to then add to the 'import' part. For sendmail I made a sendmail.pem and dovecot already came installed with its cert. It is annoying to have the warnings everytime I open outlook up and if anyone has experience with this stuff I would not mind a quick helping hand. Thanks all. Bob What warnings are you getting? You'll probably need to generate your own cert for dovecot too. The dovecot cert that ships with the package is for imap.example.com, so you'll probably get a warning that the cert doesn't match the host, and it also expired in Jan 2009 so you might get a warning for that too. If you generate your own cert, be sure the cert matches your FQ hostname. The other common warning is for an untrusted or self-signed cert, which can normally be overcome by importing the cert the first time. SSL/TLS for Dovecot is covered in the Wiki here: http://wiki.centos.org/HowTos/postfix_sasl#head-67159b2747e8ff10df5bf5da41d4f21a245afd7f I'll leave it for a sendmail user to advise you for that :) Adding to NedSlider's comments, you can also create your own Certificate Authority for signing your local certs and then clients can import your CA cert as a trusted authority. After that, any local cert you create and sign will be recognized as trusted by the client systems. It's surprisingly easy to do. The steps are nicely addressed in Apache Security (O'Reilly) by I. Ristic: Chapter 4, Apache and SSL pp.86-93 and Setting up a Certificate Authority pp. 93-99. They leave little to your imagination. And as NedSlider pointed out, be sure the host name on the cert. matches the actual host name. Outlook/OE are very unforgiving on that point. Steve The easiest way I've found to add a hand rolled cert to windows box is as follows. Open your web browser of choice type the https url followed by :995. Example: https://mail.mydomain.com:995 You'll be prompted about the cert and there you can choose to install it. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Upgrade mail server to new machine
Thom Paine wrote: if local users copy /home/* /etc/passwd /etc/shadow after first making sure there are no dupes on new system as for mail - what format is tha mail box in? maybe as simple as copying /var/spool/something personally i like to use rsync for this as it keeps perms well if you ask it to - your tool of choice is your call though I have no users on this box as of yet. It is a clean install of CentOS 5.3. The server only does email, as we have another server for domain control. I had thought I could just copy /home/* /etc/shadow and /etc/passwd and /var/spool/mail. Does it matter which file I copy first? Should I do passwd and shadow first? then do home, and leave /var/spool/mail to last? If I do it this way, will it keep all my users passwords as well? Thanks. Try this link, worked for me :-) http://www.cyberciti.biz/faq/howto-move-migrate-user-accounts-old-to-new-server/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Port Forwarding woes
Bo Lynch wrote: I'm having some port forwarding issues issues with iptables. We are using iptables as a firewall with 2 nics and on ip alias. I'm trying to port forward on the alias ip eth0 = 65.x.x.1 eth0:1 = 65.x.x.2 eth1 = 192.168.x.x I'm wanting to forward certain ports(80,5071...etc) that makes request on eth0:1 IP 65.x.x.2 to forward to internal IP 192.168.x.x. I have setup the following rules but I must be doing something wrong. iptables -t nat -A PREROUTING -p tcp -i eth0 -d 65.x.x.2 --dport 80 -j DNAT --to-destination 192.168.x.x:80 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 65.x.x.2 --dport 5071 -j DNAT --to-destination 192.168.x.x:5071 iptables -A FORWARD -p tcp -i eth0 -d 192.168.x.x --dport 80 -j ACCEPT iptables -A FORWARD -p tcp -i eth0 -d 192.168.x.x --dport 5071 -j ACCEPT Any help would be greatly appreciated. Thanks Try iptables -A FORWARD -p tcp -i eth0 -o eth1 -d 192.168.x.x --dport 80 -j ACCEPT iptables -A FORWARD -p tcp -i eth0 -o eth1 -d 192.168.x.x --dport 5071 -j ACCEPT ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Port Forwarding woes
Bo Lynch wrote: On Mon, April 27, 2009 12:01 pm, Dan Carl wrote: Bo Lynch wrote: I'm having some port forwarding issues issues with iptables. We are using iptables as a firewall with 2 nics and on ip alias. I'm trying to port forward on the alias ip eth0 = 65.x.x.1 eth0:1 = 65.x.x.2 eth1 = 192.168.x.x I'm wanting to forward certain ports(80,5071...etc) that makes request on eth0:1 IP 65.x.x.2 to forward to internal IP 192.168.x.x. I have setup the following rules but I must be doing something wrong. iptables -t nat -A PREROUTING -p tcp -i eth0 -d 65.x.x.2 --dport 80 -j DNAT --to-destination 192.168.x.x:80 iptables -t nat -A PREROUTING -p tcp -i eth0 -d 65.x.x.2 --dport 5071 -j DNAT --to-destination 192.168.x.x:5071 iptables -A FORWARD -p tcp -i eth0 -d 192.168.x.x --dport 80 -j ACCEPT iptables -A FORWARD -p tcp -i eth0 -d 192.168.x.x --dport 5071 -j ACCEPT Any help would be greatly appreciated. Thanks Try iptables -A FORWARD -p tcp -i eth0 -o eth1 -d 192.168.x.x --dport 80 -j ACCEPT iptables -A FORWARD -p tcp -i eth0 -o eth1 -d 192.168.x.x --dport 5071 -j ACCEPT Tried that with no luck. Here is what my NAT looks like. [r...@localhost ~]# iptables -t nat -L Chain PREROUTING (policy ACCEPT) target prot opt source destination DNAT tcp -- anywhere 65.161.127.70 tcp dpt:http to:192.168.1.3:80 DNAT tcp -- anywhere 65.161.127.70 tcp dpt:powerschool to:192.168.1.3:5071 DNAT tcp -- anywhere 65.161.127.70 tcp dpt:timbuktu to:192.168.1.3:407 DNAT tcp -- anywhere 65.161.127.70 tcp dpt:timbuktu-srv1 to:192.168.1.3:1417 DNAT tcp -- anywhere 65.161.127.70 tcp dpt:timbuktu-srv2 to:192.168.1.3:1418 DNAT tcp -- anywhere 65.161.127.70 tcp dpt:timbuktu-srv3 to:192.168.1.3:1419 DNAT tcp -- anywhere 65.161.127.70 tcp dpt:timbuktu-srv4 to:192.168.1.3:1420 DNAT tcp -- anywhere 65.161.127.70 tcp dpt:7880 to:192.168.1.3:7880 DNAT tcp -- anywhere 65.161.127.70 tcp dpt:https to:192.168.1.3:443 DNAT udp -- anywhere 65.161.127.70 udp dpt:timbuktu to:192.168.1.3:407 DNAT udp -- anywhere 65.161.127.70 udp dpt:timbuktu-srv1 to:192.168.1.3:1417 DNAT udp -- anywhere 65.161.127.70 udp dpt:timbuktu-srv2 to:192.168.1.3:1418 DNAT udp -- anywhere 65.161.127.70 udp dpt:timbuktu-srv3 to:192.168.1.3:1419 DNAT udp -- anywhere 65.161.127.70 udp dpt:timbuktu-srv4 to:192.168.1.3:1420 DNAT udp -- anywhere 65.161.127.70 udp dpt:7880 to:192.168.1.3:7880 To me it looks like it should work. When I try and do a telnet on the port number I get a connection refused. Is using an alias a problem? Bo Lynch It will work and does for me here. Try putting this at the beginning of your script. echo 1 /proc/sys/net/ipv4/ip_forward IPTABLES=/sbin/iptables $IPTABLES -F $IPTABLES -F INPUT $IPTABLES -F OUTPUT $IPTABLES -F FORWARD $IPTABLES -F -t mangle $IPTABLES -F -t nat $IPTABLES -X Verify the alias is setup correctly with ifconfig. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] WAY OT: domain name registration .co.za
Glenn wrote: Hello All, Very sorry about WAY off-topic query, but you folks really are one of my most International subscribed groups. I am looking for a recommendation for a domain name registrar I can register my .co.za domain name with that won't 'yank my chains'. I tried a couple attempts at registering and found some hidden fees along with the insistence that I had to host my DNS with them. Lots of hosting bundles! I just want a registrar that can register the domain name and use MY DNS servers. I'll do all the hosting, thank you very much! Thanks in Advance! Glenn ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Try Network Solutions or Godaddy. I use both. NetSol is more expensive but if you call them they'll usually match godaddy's prices. NetSol has better support, but if all you're using them for is to register you won't need much/any. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] centos 5.2 - latest rpms for mailcanner , clamav and spamassassin
Linux Advocate wrote: Guys, acording to the quickinstall.txt guide on the mailscanner site, there is an install.sh file which installs the mailscanner rpm, all the other perl rpms. Additionally, the site has also clam av and spamassassin installers too? any experience on these things? could just forego the rpms from the rpmforge repo? - Original Message From: Ned Slider n...@unixmail.co.uk Linux Advocate wrote: Guys, What repo has rpms for mailscanner, clamav and spamassasin? RPMforge has clamav and spamassassin, but not mailscanner. Mailscanner has RPMs available on their site. I did an install a few weeks back. I installed clamd from rpmforge, as suggested from folks on mailscanner list. You can install mailscanner wiht this repo. http://yum.vanderkooij.org/el5/ Don't install mailscanner on Centos via the install.sh script. It will overwrite some perl packages. Trust me I did it. As suggested to me by Kai. With rpmforge enabled install these packages via yum. yum install perl-Convert-BinHex perl-Convert-TNEF perl-Convert-BinHex perl-Convert-TNEF perl-DBD-SQLite perl-Filesys-Df perl-IO-stringy perl- MIME-tools perl-Net-CIDR perl-OLE-Storage_Lite perl-Pod-Escapes perl-Pod- Simple perl-Test-Pod perl-Time-HiRes then install mailscanner*.rpm ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] iptables question
ward.p.fonte...@wellsfargo.com wrote: Hi, I have two servers in the same subnet, one has this arrangement: BOX A [3 ips, one real two vips] BOX B [1 ip] I need to redirect input from one of the vips (192.168.0.1:8080) on BOX A to BOX B (192.168.0.2:8080) and I'm about to pull my hair out. Can anyone lend a hand? All my searching leads me to home firewall type arrangements using DNAT. I tried to bend one of those to fit my situation but it was a no go (most likely due to my lack of knowledge with iptables) Paul Fontenot snip signature Try this tutorial its long but thorough . http://iptables-tutorial.frozentux.net/iptables-tutorial.html There are several examples that you should be able to craft to fit your needs. First you make a forward chain and then prerouting chain with DNAT. Be advised if you don't have console access you can cut off your access very easy with iptables. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Software Raid Recovery
Stephen Leonard Character wrote: On Fri, Feb 20, 2009 at 3:15 PM, Stephen Leonard Character stephen.charac...@alorica.net wrote: I have a server set up with 4hdd using software raid. I have /boot on a raid1 on md0 , / on raid5 on md1, and swap on raid0 on md2. If one of my drives die, how to I recover? First, put the swap also on RAID1, you don't want part of your memory to become unavailable is a drive dies. Using RAID has no use then. If a drive dies nothing will happen, your system will continue to keep running (if you put your swap on raid1 that is). But make sure you configure mdadm to send you a mail when that happens, so you know a drive is gone. For recovery, just replace the disk, repartition it and re-add the partitions to the raid arrays and your are done. The disks will resync and then everything is back to how it was. Regards, Tim Thanks for the reply's, I'm assuming to do the repartitioning with fdisk or gparted to repartition, what tools do I use to manage the software raid? I.e. how do I go about changing the swap partition to raid1 and re-add the partitions to the array? This system is for me to practice on for my RHCT/E exams(too broke to pay for training) so I'm planning on breaking one of the drives(just remove it) and add a new one for practice. Thanks in advance, Stephen Right, first partition the new drive then add it back to the Raid like this. mdadm /dev/md1 -a /dev/sdc3 Then the raid will start rebuilding. As posted early having swap on a raid zero is a bad idea . Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Software Raid Recovery
Stephen Leonard Character wrote: As posted early having swap on a raid zero is a bad idea . Dan Yes I wasn't thinking too clearly when I made the swap raid0, well I did think about performance, but not drive failure :( Thanks everyone for your help, Stephen I did the same thing when I started out using Linux. At least you learned your lesson on a test box. Here what I'd suggest. Turn off the swap. (Only because its a test box. On the production server you'd want to create a new swap first.) #swapoff /dev/md2 Umount the array #umount /dev/md2 Then stop it mdadm --stop /dev/md0 Create new swap now I don't raid swap. As stated in the Software Raid How-To ||There's no reason to use RAID for swap performance reasons. The kernel itself can stripe swapping on several devices, if you just give them the same priority in the |/etc/fstab| file. Assuming you made your raid 0 over all four drives. (never done this post install but I believe it would go like this) go into fdisk and change partition type to 82 mkswap /dev/sda2 mkswap /dev/sdb2 mkswap /dev/sdc2 mkswap /dev/sdd2 Edit fstab file and give them the same priority swapon -p 1 /dev/sda2 swapon -p 1 /dev/sdb2 swapon -p 1 /dev/sdc2 swapon -p 1 /dev/sdd2 and all should be good. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Software Raid Recovery
John R Pierce wrote: Dan Carl wrote: I don't raid swap. As stated in the Software Raid How-To ||There's no reason to use RAID for swap performance reasons. BP! you want to MIRROR swap for RELIABILITY reasons.if a swap device fails, you're looking at a kernel panic. You're right I should of read the next paragraph in the howto. Going back under rock in shame. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Yum update conflicts perl-Math-BigInt
Kai Schaetzl wrote: Dan Carl wrote on Wed, 04 Feb 2009 14:48:23 -0600: add check_obsoletes = 1 does nothing Not in this situation, as you didn't tell everything last time ;-) Sorry, I usually post too much info Correct. But there is no such file in CentOS. You installed the complete MailScanner package which installs lots of not so good perl packages which either are not necessary (including this one) or can be fetched from rpmforge. Remove that BigInt package and all shoulkd be well. And do not install the complete MailScanner package when you do your next upgrade, install only the mailscanner*.rpm If I remove the conflicting perl packages won't this break MailScanner? I doubt he would install them if they weren't needed. If I uninstall the older perl package versions and install the newer ones from rpmforge will MailScanner still function properly? I know there's MailScanner users on this list so I'll wait for a response here before posting to the MailScanner list. Dan Kai ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Yum update conflicts perl-Math-BigInt
Kai Schaetzl wrote: Dan Carl wrote on Thu, 05 Feb 2009 11:27:30 -0600: If I remove the conflicting perl packages won't this break MailScanner? No. It might break your Perl, though, if it overwrote anything from Perl. In that case you want to reinstall Perl. Removed perl-Math-BigInt now Mailscanner won't start Glad this server isn't in production yet. I did see in the install.log for MailScanner that it did do a force install of BigInt, BigRat and bignum I remedied (not fxed) the problem by rerunning the the install.sh script and excluding bignum BigInt and BigRat from the rpmforge.repo. I doubt he would install them if they weren't needed. Believe me. I've been using MailScanner since long on many systems and also on CentOS since I changed to CentOS in 2004 or so. If I uninstall the older perl package versions and install the newer ones from rpmforge will MailScanner still function properly? I'm not exactly sure what you mean. The point is: Perl in CentOS has quite a few packages that come with MailScanner already built-in. There is *no* need to replace them with what comes with MailScanner. These should remain as is. In other words: you only need to add those packages which are really missing (from rpmforge). All the packages that are built-in should not be upgraded at all. This are the following packages: perl-bignum perl-File-Spec perl-File-Temp perl-Getopt-Long perl-IO perl-Math-BigRat perl-Test-Harness perl-Test-Simple which means you do: yum install perl-Convert-BinHex perl-Convert-TNEF perl-Convert-BinHex perl-Convert-TNEF perl-DBD-SQLite perl-Filesys-Df perl-IO-stringy perl- MIME-tools perl-Net-CIDR perl-OLE-Storage_Lite perl-Pod-Escapes perl-Pod- Simple perl-Test-Pod perl-Time-HiRes with rpmforge enabled and then install mailscanner*.rpm (and not use install.sh!). That's all. It was too late, I already installed via the install.sh script. (I've always done it this way without any problems) I suppose now I can either... Cross my fingers and hope I won't run into any perl problems, try reinstalling perl which doesn't sound easy or wait for 5.3 to come out cause its going to fix everything. :-) Thanks for the help, next time I try installing it your way, or maybe by then it will be as easy as yum install MailScanner. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Yum update conflicts perl-Math-BigInt
Kai Schaetzl wrote: Dan Carl wrote on Fri, 30 Jan 2009 15:13:50 -0600: I followed the Wiki instructions for setting up *yum-priorities*. I added the rpmforge repo I installed clamd without a problem. Now when I go to update I get conflicts with perl-Math-BigInt. add check_obsoletes = 1 to the /etc/yum.d/priorities.comf Kai Sorry to take so long to follow up on this, been busy. add check_obsoletes = 1 does nothing Here's the errors I'm getting: Transaction Check Error: snip file /usr/share/man/man3/Math::BigInt.3pm.gz from install of perl-Math-BigInt-1.89-1.el5.rf conflicts with file from package perl-5.8.8-15.el5_2.1 file /usr/share/man/man3/Math::BigInt::Calc.3pm.gz from install of perl-Math-BigInt-1.89-1.el5.rf conflicts with file from package perl-5.8.8-15.el5_2.1 file /usr/share/man/man3/Math::BigInt::CalcEmu.3pm.gz from install of perl-Math-BigInt-1.89-1.el5.rf conflicts with file from package perl-5.8.8-15.el5_2.1 snip #rpm -qa | grep perl-Math perl-Math-BigInt-1.86-2 perl-Math-BigRat-0.19-2 This tells me rpmforge has a newer version, but isn't yum-priorities suppose to keep rpmforge from updating it? I've never needed rpmforge before, what am I doing wrong? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Yum update conflicts perl-Math-BigInt
I followed the Wiki instructions for setting up *yum-priorities*. I added the rpmforge repo I installed clamd without a problem. Now when I go to update I get conflicts with perl-Math-BigInt. Is the only solution to uninstall the base version and then install the rpmforge version? According the the wiki Packages from repositories with a lower priority will never be used to upgrade packages that were installed from a repository with a higher priority. If this true why the conflicts? please advise Thanks Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Centos Website
I can't connect, appears to be down. Thought I'd post in case whoevers in charge is listening here. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Mirroring Hard Drive
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Les Mikesell Sent: Friday, August 01, 2008 3:16 PM To: CentOS mailing list Subject: Re: [CentOS] Mirroring Hard Drive Joseph L. Casale wrote: brute force approach... dd if=/dev/sda of=/dev/sdb bs=16384 That's probably the most safest, but you'll have to remove it before you boot if you use lvm right? Doesn't clonzilla support lvm? Could you boot off a live cd to only copy actual data which should be quick in your case? Clonezilla will handle LVMs, but I'm not sure if it is happy with cloned identifiers done disk-disk in the same machine. It may drop back to dd for that anyway. If you have space on the network to store the image, let clonezilla copy to the network from the source box and clone it to disk on a different one. Unless the contents are extremely critical you probably don't need to clone back to a real disk anyway. That part would only take a few extra minutes when you need it. I did this the other day with clonezilla and it worked great! It only took 15-20 minutes. I put the new clone in a different box and now use rsynce to keep things current. If you wanted to keep the drives in the same box I'm sure theres a way, with linux there always is :) Anyone? Dan snip ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Bind Firewall Rules
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Mazur Sent: Wednesday, July 23, 2008 12:19 PM To: CentOS mailing list Subject: Re: [CentOS] Bind Firewall Rules On Wed, 23 Jul 2008 12:40:42 -0400, John Hinton wrote I'm running caching nameservers on almost all of my systems and then also three nameservers. All are available publicly. I too had hard coded bind to port 53. I also had specifically opened port 53 through the firewall. But now, it appears that using only port 53 is a bad thing. From what I read, both the port and the ID need to change to be secure (even this is just security through obscurity). It's sounding like I'll need to open a port range, but I don't know what a 'good practice' will be. Port 53 is the dns port used by the world (and your internal private networks) to query your name server. If your name server is intended to provide domain resolution publicly just how do you expect the public to find it if you're randomly changing ports? The world won't port scan your machine until it finds a name server answering on one of them. Dns requests, internal or external, will come into your box on port 53 and there would be no point to running a name server (private, public, caching or otherwise) if this port is not open through the firewall. You've mis-understood the issues of dns security. It would be dangerous to start messing with your firewall rules until you understand exactly how the process works. I've understood bind to work this way also. I haven't read up on this vulnerability but can't you just restrict who queries the server? http://oreilly.com/catalog/dns4/chapter/ch11.html#10959 Maybe dnsstuff is saying your server is vulnerable because of something else. I haven't used them since they starter charging but mine always passed. Do you have an allow-recursion line? Have you changed version to sonething like this? version [SECURED]; I only have my master and slave servers exposed to the outside. My caching and internal DNS is done behind my firewall. I would agree that taking down your firewall is way more dangerous. My firewall rules are based on the howto but try this. $IPTABLES -N allowed $IPTABLES -N tcp_packets $IPTABLES -N udp_packets $IPTABLES -A allowed -p TCP --syn -j ACCEPT $IPTABLES -A allowed -p TCP -m state --state ESTABLISHED,RELATED -j ACCEPT $IPTABLES -A allowed -p TCP -j DROP $IPTABLES -A tcp_packets -p TCP -s 0/0 --dport 53 -j allowed $IPTABLES -A udp_packets -p UDP -s 0/0 --dport 53 -j ACCEPT ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] disable SELinux
snip for testing, i need to disable selinux, but something still not working right. i'm trying to figure out why i can't access http://10.0.0.160 from the same network (10.0.0.x). on 10.0.0.160 box, i can access http://localhost, or http://10.0.0.160, but from any other computer, i can't. any advice how to troubleshoot this? thanks. The port could be being blocked by iptables. Try #service iptables stop t. hiep ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Rejecting spam
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Glenn Sent: Tuesday, March 04, 2008 2:00 PM To: CentOS mailing list Subject: Re: [CentOS] Rejecting spam At 02:35 PM 3/4/2008, you wrote: Sorry, not a direct CentOS question, but I know there's a lot of experienced users on this list...I'm using CentOS with sendmail and spamassassin. I've got it configured with spamass-milter and it is working correctly. However, I was expecting to be able to reject mail that is marked as spam, not just deliver it as usual. Anyone know if it can be done and how? I know a milter can reject mail, because I've used milter-grelist in the past to give temporary fail messages Not really a good idea to reject all spam. Spam filtering is not that black and white. Suppose a legitmate email gets tagged as Spam. This does happen trust me and more than likely its a email your boss has been waiting for. You'll want a some way to retrieve it. Following is my sendmail.m4 directive for spamass-milter: INPUT_MAIL_FILTER(`spamassassin', `S=unix:/var/run/spamass-milter/spamass-milter.sock, F=, T=C:15m;S:4m;R:4m;E:10m')dnl define(`confMILTER_MACROS_CONNECT',`t, b, j, _, {daemon_name}, {if_name}, {if_addr}')dnl define(`confMILTER_MACROS_HELO',`s, {tls_version}, {cipher}, {cipher_bits}, {cert_subject}, {cert_issuer}')dnl Not sure, but I think you could use procmail to filter to a junk folder based upon parsing the SpamAssassin score. Also, you can block based on RBL in sendmail , or score in spamassassin. I use MailScanner with SpamAssassin and swear by it! http://mailscanner.info/ Happy (mostly), very vital list group. The author is very actively answering questions and requests. Can't get much better support! Cheers! I use mailscanner also, works great. I delete whats called high scoring spam and deliver the low scoring spam. Since the low scoring spam is tagged as spam. You can either use mail client rules or a procmail receipe to move it to another folder. That way, the user can retieve it themselves. -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.516 / Virus Database: 269.21.4/1309 - Release Date: 3/3/2008 6:50 PM ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Send in your favorite CentOS slogan today
Heard someone mention free beer, had to participate. CentOS, we find RedHat's bugs CentOS, the OS that makes sense. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] smtp mailer or SMART_HOST in sendmail.mc
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jerry Geis Sent: Thursday, February 28, 2008 11:12 AM To: CentOS ML Subject: [CentOS] smtp mailer or SMART_HOST in sendmail.mc Is there a EASY way to change the SMART_HOST in sendmail.mc. Some command line that does it? cd /etc/mail sed -e '/SMART_HOST/s/dnl //' -e 's/smtp.old.provider/smtp.new.provider/' -i.bak sendmail.mc make -C /etc/mail /etc/init.d/sendmail restart You'll likely need to change your authinfo also. Trying to explain to customers editor commands, etc... to edit this file, change the name, make and service sendmail restart is BIG for someone that doesnt know linux... Don't really understand why you don't just ssh in and do it yourself. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] How to speed up Rsync transfers
On Sun, 2008-02-24 at 17:53 -0600, Dan Carl wrote: - Original Message - From: William L. Maltby [EMAIL PROTECTED] snip list header and now irrelevant stuff Don't be afraid to seek/request some kind of raid/NAS/SAN resource if the data is mission-critical, growing constantly and volatile. It may not be needed now, but look down the road so you don't get into a constant cycle of scrambling to keep up with needs. Have a LVM/raid already. Just want to have an automated offsite backup to be on the safe side. Have learned the hard way raid is not a subsitute for a backup. snip In conjunction with lock files mentioned in another reply, you may be able to gain something by segmenting the local and remote rsync. This allows 1) concurrent *local* compression and rsync (if CPU/memory resources are sufficient to avoid unduly slowing the user's activities - again man nice to reduce the effects on users) and 2) easier management of the remote rsync start/stop on directory boundaries as the window is entered/exited. This may not be needed at all or may be of limited benefit. Lock file sound like the way I'll go. I'm going to stick with the hand-crafted stuff Lastly, see if it's possible to run the rsync during normal hours. If your site has upload of 750KB/sec and during 90% of the normal workday only a small percentage is consumed, take advantage by doing some of the rsync (maybe in small chunks) during these hours at low priority and throttled appropriately. Presuming that most of your activity is download, not upload during the normal workday, and knowing that most of the rsync activity will be upload, not download, there is an opportunity there. Something I'll look at down the road. -- Bill Thanks Bill Lots of good imformation and thanks to all Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] How to speed up Rsync transfers
- Original Message - From: William L. Maltby [EMAIL PROTECTED] To: CentOS General List centos@centos.org Sent: Saturday, February 23, 2008 12:32 PM Subject: Re: [CentOS] How to speed up Rsync transfers On Sat, 2008-02-23 at 10:38 -0600, Dan Carl wrote: - Original Message - From: nate [EMAIL PROTECTED] To: centos@centos.org Sent: Friday, February 22, 2008 10:33 PM Subject: RE: [CentOS] How to speed up Rsync transfers Dan Carl wrote: snip - Do you know what sort of bandwidth your supposed to have from your ISP? source server business DSL 1.5m down / 878k up distination server T1 colo at a large ISP. nate Sounds like I'll be stuck with the tranfer rate I'm getting. In that case, it sounds like you need a local staging that can be quickly done before starting upload sync. Then the upload can run 24/7. How you might want to deal with new updates that happen before the previous upload finishes is going to be an interesting problem. This is exactly the situation I'm trying to avoid. Right now its less than 2GB new/edited images a day so the rsync backup finishes before the script runs again. But I can't take it for granted that this will always be the case. Any ideas would be appreciated. What do you mean by local staging? I'd like the backup to run from 7pm to 7am and then if it didn't finish to resume again the next night. That way when nothing was added/edited on the weekends the backup can catch up. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] How to speed up Rsync transfers
- Original Message - From: nate [EMAIL PROTECTED] To: centos@centos.org Sent: Friday, February 22, 2008 10:33 PM Subject: RE: [CentOS] How to speed up Rsync transfers Dan Carl wrote: I just ran a test from one local box the another on a 100Mbit link and the fastest transfer OI got was 10MBytes/second but most were between 1MBytes/second and 4MBytes/second. Pardon the stupid suggestions but - Did the test you run with iperf, was that a bi-directional test, are you sure you weren't testing your inbound speed at ~700KByte/s rather than your outbound speed? With most connections, inbound speed is several times faster than outbound speed. Not stupid question me stupid, I only tested it one way. I guess I just assumed iperf was testing both up and down. I didn't have remote access to the source servers firewall, so I had iperf listening on the distination server. Monday I'll run the test the other way. - Do you know what sort of bandwidth your supposed to have from your ISP? source server business DSL 1.5m down / 878k up distination server T1 colo at a large ISP. nate Sounds like I'll be stuck with the tranfer rate I'm getting. Thanks Nate Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] How to speed up Rsync transfers
Is there a way to speed up rsync transfers? I tested the bandwidth with iperf (recommended to me in an earlier post worked well)its as advertised by my ISP's around 740KB/sec. When I manually run my rsync script with the --progress switch the transfers are around 100KB/sec. I googled this and the only thing I found had to do with the TCP window which I understand to be the limiting factor. But if this is true how can I ftp stuff at 300KB/sec? (someone please enlighten me) I'm backing up jpg files and some days they add 5+GB of images. My goal was to backup the images nightly, but at the 100KB/sec rate that's not possible. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] How to speed up Rsync transfers
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of nate Sent: Friday, February 22, 2008 11:06 AM To: centos@centos.org Subject: Re: [CentOS] How to speed up Rsync transfers Dan Carl wrote: Is there a way to speed up rsync transfers? I tested the bandwidth with iperf (recommended to me in an earlier post worked well)its as advertised by my ISP's around 740KB/sec. When I manually run my rsync script with the --progress switch the transfers are around 100KB/sec. I googled this and the only thing I found had to do with the TCP window which I understand to be the limiting factor. But if this is true how can I ftp stuff at 300KB/sec? (someone please enlighten me) I'm backing up jpg files and some days they add 5+GB of images. My goal was to backup the images nightly, but at the 100KB/sec rate that's not possible. What options are you using with rsync ? Stay away from the -z option if your copying jpegs. That'll slow things down quite a bit. I have no problem using rsync to copy at 20+MBytes/second with the default tcp window size on gigabit networks(using rsync over SSH). And I can achieve ~700kByte/s on a 10Mbit link over a VPN between two sites( about 40 miles apart), again, default tcp settings across the board. Also note that some ISPs, such as Comcast have features built into their services that provide an initial power boost for a few seconds to speed up file transfers, then are quickly throttled down to normal levels. In this case your bandwidth test with the ISP may not of lasted long enough to show your true long, sustained available bandwidth. The options I use: rsync -ave ssh (local file) remote_server:(remote file) or rsync -ave ssh --progress (rest of command) nate I don't do anything that special rsync -ae 'ssh -p 2112' --progress $SOURCEPATH [EMAIL PROTECTED]:$DESTPATH or rsync -a --progress --rsh='ssh -p 2112' $SOURCEPATH [EMAIL PROTECTED]:$DESTPATH no real speed difference etiher way. I just ran a test from one local box the another on a 100Mbit link and the fastest transfer OI got was 10MBytes/second but most were between 1MBytes/second and 4MBytes/second. Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Command line tool to test bandwidth between 2 servers
What's the best way to do this? Daily, jpg images are added to an inhouse server. Everynight I want to backup these images to a server offsite, via rsync. What I want is to determine what to set the bwlimit to. I also want to estimate how many MB's of images I can move nightly. Thanks Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Switching To Raid1
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Sent: Wednesday, January 09, 2008 10:55 AM To: CentOS mailing list Subject: [CentOS] Switching To Raid1 I have this ASUS M2NBP-VM motherboard http://tinyurl.com/3xby3h running CentOS 4.4 as a web/email server. It has a 500Gb SATA2 drive with about 32Gb in use. The motherboard supports hardware raid. Is there a way to switch to RAID1 without reinstalling or loosing any data? Also, if I am running raid how do I know if there is a failure on one of the drives anyway? Is hardware RAID1 a good idea? Matt Like most here, I would suggest going the software Raid route. The performance is about the same As I learned earlier this week you can move a software raid to another system of even distro. It totally independent from the server hardware. To create a Raid just google mdadm software raid and you get lots of information. As far as monitoring: Smartmontools will email you when a drive fails or is about to. Look at /etc/smartd.conf for details. Just remember Raid is not a replacement for a good backup plan it just provides fault tolerance. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Migrating software raid from SUSE 9.0 to Centos 5 SOLVED
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Les Mikesell Sent: Monday, January 07, 2008 12:39 PM To: CentOS mailing list Subject: Re: [CentOS] Migrating software raid from SUSE 9.0 to Centos 5 Dan Carl wrote: I forgot to add the file system is riserfs. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Carl Sent: Friday, January 04, 2008 5:43 PM To: centos@centos.org Subject: [CentOS] Migrating software raid from SUSE 9.0 to Centos 5 I have a SUSE 9.0 box with a software raid. It consists of 6 IDE drives and three different controllers The OS is on a separate drive. What I want to do is put a new boot drive in load Centos on it. Then I want to be able to mount the raid without loosing any of the data on it. What information do I need from the SUSE OS (raid info etc...) to tell Centos how to recognize it? The data is backup on DVD's but it would be a real pain to reload it.(its around a terabyte of data) So I'm writing here for some advice. I've setup many raids in the past but only fresh installs. Thanks After you do your base Centos install and 'yum update', do: yum --enablerepo=centosplus update kernel yum --enablerepo=centosplus install reiserfs-utils Then reboot, and you should be able to mount the raid and add it to /etc/fstab. Ok but how does Centos recognise the ARRAY? Is the Array's configuration stored some where? SUSE uses raidtab. The only raid type conf file on my other Centos boxes is /etc/mdadm.conf If the partition type is FD, the kernel will autodetect and assemble it at boot time. So you mean to tell me I just have to make sure reiserfs is installed, then just mount like this in fstab /dev/md0 /home/tera reiserfs defaults 1 2 #mount -a and bang everything in done? Something tells me it can't be that easy. Before putting it in /etc/fstab, do a 'cat /proc/mdstat' to be sure that md0 really exists and includes the right underlying devices, but yes, it should be that simple. Dan Carl wrote: Sorry, I forgot to follow-up You're right it was that easy. Thanks Dan ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] Migrating software raid from SUSE 9.0 to Centos 5
I have a SUSE 9.0 box with a software raid. It consists of 6 IDE drives and three different controllers The OS is on a separate drive. What I want to do is put a new boot drive in load Centos on it. Then I want to be able to mount the raid without loosing any of the data on it. What information do I need from the SUSE OS (raid info etc...) to tell Centos how to recognize it? The data is backup on DVD's but it would be a real pain to reload it.(its around a terabyte of data) So I'm writing here for some advice. I've setup many raids in the past but only fresh installs. Thanks ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
RE: [CentOS] Migrating software raid from SUSE 9.0 to Centos 5
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Les Mikesell Sent: Friday, January 04, 2008 6:29 PM To: CentOS mailing list Subject: Re: [CentOS] Migrating software raid from SUSE 9.0 to Centos 5 Dan Carl wrote: I forgot to add the file system is riserfs. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Carl Sent: Friday, January 04, 2008 5:43 PM To: centos@centos.org Subject: [CentOS] Migrating software raid from SUSE 9.0 to Centos 5 I have a SUSE 9.0 box with a software raid. It consists of 6 IDE drives and three different controllers The OS is on a separate drive. What I want to do is put a new boot drive in load Centos on it. Then I want to be able to mount the raid without loosing any of the data on it. What information do I need from the SUSE OS (raid info etc...) to tell Centos how to recognize it? The data is backup on DVD's but it would be a real pain to reload it.(its around a terabyte of data) So I'm writing here for some advice. I've setup many raids in the past but only fresh installs. Thanks After you do your base Centos install and 'yum update', do: yum --enablerepo=centosplus update kernel yum --enablerepo=centosplus install reiserfs-utils Then reboot, and you should be able to mount the raid and add it to /etc/fstab. Ok but how does Centos recognise the ARRAY? Is the Array's configuration stored some where? SUSE uses raidtab. The only raid type conf file on my other Centos boxes is /etc/mdadm.conf So you mean to tell me I just have to make sure reiserfs is installed, then just mount like this in fstab /dev/md0 /home/tera reiserfs defaults 1 2 #mount -a and bang everything in done? Something tells me it can't be that easy. -- Les Mikesell [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Installing java on CentOS 5
- Original Message - From: Craig White [EMAIL PROTECTED] To: centos@centos.org Sent: Wednesday, November 14, 2007 2:15 PM Subject: [CentOS] Installing java on CentOS 5 strugging with things here... tried tracking the info on the Wiki (which apparently is now in need of a maintainer)... http://wiki.centos.org/HowTos/JavaOnCentOS My primary interest is using Xalan/Saxon/xslt/xsl-fo docbook generation. I was thinking that all I really need is jre but downloaded both jre and jdk just in case. can anyone tell me what I'm doing wrong? (after removing both jdk jre)... -rw-r--r-- 1 rootroot56835774 Sep 25 00:47 jdk-6u3-linux-i586.rpm -rw-r--r-- 1 rootroot18835725 Sep 25 00:45 jre-6u3-linux-i586.rpm I tried installing each of them but they never show up in # alternatives --config java # rpm -qa|grep jpackage jpackage-utils-1.7.3-1jpp.2.el5 # rpm -ivh jre-6u3-linux-i586.rpm Preparing...### [100%] 1:jre### [100%] Unpacking JAR files... rt.jar... jsse.jar... charsets.jar... localedata.jar... plugin.jar... javaws.jar... deploy.jar... # alternatives --config java Download the RPM and install that matches your version of JDK from here ftp://jpackage.hmdc.harvard.edu/JPackage/1.7/generic/RPMS.non-free in your case wget ftp://jpackage.hmdc.harvard.edu/JPackage/1.7/generic/RPMS.non-free/java-1.6.0-sun-compat-1.6.0.03-1jpp.i586.rpm Install the RPM and you should be all set. The Wiki does state to install both packages but the link is bad and the current JDK is 6 update 3 Explaination can be found here http://www.jpackage.org/installation.php There is 1 program that provides 'java'. SelectionCommand --- *+ 1 /usr/lib/jvm/jre-1.4.2-gcj/bin/java Enter to keep the current selection[+], or type selection number: Craig ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] mount cd
- Original Message - From: Hiep Nguyen [EMAIL PROTECTED] To: centos@centos.org Sent: Friday, October 26, 2007 12:52 PM Subject: [CentOS] mount cd hi there, i can mount my cdrom with this command: mount -t iso9660 /dev/cdrom cdrom/ how do i mount the cdrom everytime the computer is boot? Add it to your fstab file /etc/fstab ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to recover data off SATA-to-SCSI external 2TBARRAY
On Monday 15 October 2007, John R Pierce wrote: Peter Kjellstrom wrote: On Monday 15 October 2007, Dan Carl wrote: ... But with errors In dmesg have this: sda: Mode Sense: bf 00 00 08 SCSI device sda: drive cache: write back sda: unknown partition table sd 0:0:0:0: Attached scsi disk sda ... Try mount -oro /dev/sda /mnt/tmp (or whatever) or just see if there's a superblock there with tune2fs -l /dev/sda. he has a hardware raid set of drives originally from a HP/Compaq SmartArray controller, now connected to a simple non-raid scsi controller. sorry, thats not gonna play no way no how. Since he only mentioned one device on his centos, there are centainly plausible ways this could work. The original cciss array could have been a single drive, could have been a raid1, could have been a misunderstood hwraid just tunneled through the host adapter as a single driver, etc. . The SmartArray doesn't recognize the external array. So thats why I connected it to a SCSI non-raid controller which does. lvndiskscan on my Centos server even can tell the size of it. /dev/sda [2.00 TB] The external array has it's own built in raid controller. The Bios the SmartArray said it was a raid 0 2048GB failed. I not sure why the SmartArray sees it as that because the external array is configured as a raid 5 with spares. Im not familar with the SmartArray and don't have another to try. Is there no way to access the data other than via the SmartArray? /Peter - Original Message - From: Peter Kjellstrom [EMAIL PROTECTED] To: centos@centos.org Sent: Monday, October 15, 2007 2:18 PM Subject: Re: [CentOS] Trying to recover data off SATA-to-SCSI external 2TBARRAY ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to recover data off SATA-to-SCSI external 2TBARRAY
On Monday 15 October 2007, Dan Carl wrote: ... The SmartArray doesn't recognize the external array. So thats why I connected it to a SCSI non-raid controller which does. lvndiskscan on my Centos server even can tell the size of it. /dev/sda [2.00 TB] The external array has it's own built in raid controller. The Bios the SmartArray said it was a raid 0 2048GB failed. I not sure why the SmartArray sees it as that because the external array is configured as a raid 5 with spares. Im not familar with the SmartArray and don't have another to try. Is there no way to access the data other than via the SmartArray? so give tune2fs -l /dev/sda a try. Maybe you'll find a nice ext3 fs, maybe no. It's a non-destructive operation so go ahead. That yielded :'( tune2fs 1.39 (29-May-2006) tune2fs: Bad magic number in super-block while trying to open /dev/sda Couldn't find valid filesystem superblock. And know they didn't backup their data, under the advice of their developer. Advice to everyone if you care about your data BACK IT UP!!! even a raid 5 with hot spares can fail. I feel bad for them. Thier developer screwed them and then left them. If any has any other advice please share. /Peter - Original Message - From: Peter Kjellstrom [EMAIL PROTECTED] To: centos@centos.org Sent: Monday, October 15, 2007 2:50 PM Subject: Re: [CentOS] Trying to recover data off SATA-to-SCSI external 2TBARRAY ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Trying to recover data off SATA-to-SCSI external 2TBARRAY
- Original Message - From: Michael Watters [EMAIL PROTECTED] To: CentOS mailing list centos@centos.org Sent: Monday, October 15, 2007 3:12 PM Subject: Re: [CentOS] Trying to recover data off SATA-to-SCSI external 2TBARRAY So thats why I connected it to a SCSI non-raid controller which does. lvndiskscan on my Centos server even can tell the size of it. /dev/sda [2.00 TB] The external array has it's own built in raid controller. The Bios the SmartArray said it was a raid 0 2048GB failed. I not sure why the SmartArray sees it as that because the external array is configured as a raid 5 with spares. Im not familar with the SmartArray and don't have another to try. Is there no way to access the data other than via the SmartArray? /Peter What do you mean by connected it? The array that I'm tyring to recover is a SCSI-toSATA 2U external Raid device. It connects to any u320 controller and is suppose to show up to Linux as 1 SCSI drive. Quote from the manual: These host interfaces are host O/S independent and will operate on any system that has a working SCSI or Fiber interface The DAS is made up of several components including a RAID controller, backplane board with intelligent environmental monitoring, chassis, power supplies, fans, front control panel with LCD display and hard drive bays. Are all drives from the old array connected? Without having the drives attached to the original All the drive are in the external array, and it says the Array is functioning properly. controller you may not be able to get much from it, Linux would still see the individual SCSI drives but that doesn't help if you want the file system. You may want to take the old RAID card out of the other server and install it, that is the only way you're going to get anything from it. The Smart Array card that it was originally connected to doesn't recongize it. The SmartArray is in a working server and is currently running an internal Raid 5. My guess is there was some hardware failure on the external side of the controller or the external array. My reasoning for this, is if I connect the A Channel of the external array to my Centos server my SCSI card doesn't recognize it. But if I connect it to the B channel side it does I would love to be able to connect the external array to another SmartArray controller and see if it recogizes it, but I don't have one. - Original Message - From: Peter Kjellstrom [EMAIL PROTECTED] To: centos@centos.org Sent: Monday, October 15, 2007 2:18 PM Subject: Re: [CentOS] Trying to recover data off SATA-to-SCSI external 2TBARRAY The SmartArray doesn't recognize the external array. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] Can't get XFS enabled on Centos 5.0 Solved
On Thursday 11 October 2007, Dan Carl wrote: I anm trying to enable XFS with no success. I followed the instructions provided in http://wiki.centos.org/Repositories/CentOSPlus I installed the new kernel. Example: 2.6.18-8.1.14.el5.centos.plus I also installed these packages as described in a post I found yum install --enablerepo=centosplus xfsprogs xfsprogs-devel 1) you don't need the centosplus kernel use the normal one Peters right, an it probably more reiable 2) you do need the kmod-xfs package (the xfs module) and xfsprogs 3) all this from extras not centosplus Ok I rolled back my kernel installed the kmod-xfs and xfsprogs packages I also installed xfsdumb dmapi (per another post) xfs is only loaded if you do either modprobe xfs or if you try to mount an xfs filesystem. now when I modprobe xfs it loads. Thanks /Peter - Original Message - From: Peter Kjellstrom [EMAIL PROTECTED] To: centos@centos.org Sent: Friday, October 12, 2007 1:58 AM Subject: Re: [CentOS] Can't get XFS enabled on Centos 5.0 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos