[CentOS] NIC naming conventions and vmware

2018-03-07 Thread John Ratliff
I have a couple of CentOS 7 machines running in a vmware environment. On 
all the older ones I've deployed, the NIC is named ens160, but on all of 
the new ones, it is named ens192. I can't find any difference in the 
hardware that would account for this.


Any suggestions on what I can do to figure out why some are named ens160 
and some ens192?


Thanks.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Squid and HTTPS interception on CentOS 7 ?

2018-03-05 Thread John Ratliff

On 2/28/2018 4:23 PM, Nicolas Kovacs wrote:

Hi,

I've been running Squid successfully on CentOS 7 (and before that on 6
and 5), and it's always been running nicely. I've been using it mostly
as a transparent proxy filter in school networks.

So far, I've only been able to filter HTTP.

Do any of you do transparent HTTPS filtering ? Any suggestions, advice,
caveats, do's and don'ts ?

Cheers from the snowy South of France,

Niki



I made a video on doing this yesterday on Debian. If you skip the part 
about the Debian install and use the CentOS Squid 3.5 packages from the 
binary package repo provided by Squid, you should be able to follow the 
same directions.


https://www.youtube.com/watch?v=Bogdplu_lsE
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] selinux policy with rsyslog and tls/certs

2018-02-13 Thread John Ratliff

On 2/13/2018 4:48 PM, John Ratliff wrote:
I've setup my rsyslog server to forward traffic to another rsyslog 
server on my network. It's using gTLS to encrypt the messages in transit.


selinux is not allowing rsyslogd to read the certificates. They are 
world readable, so I don't think that is the problem. When I turn 
selinux mode to permissive, it works fine.


What context should the ssl certificates be in for rsyslog to be able to 
read them?




It worked when I set it to syslog_conf_t. Not sure if that's correct, 
but it functions.


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] selinux policy with rsyslog and tls/certs

2018-02-13 Thread John Ratliff
I've setup my rsyslog server to forward traffic to another rsyslog 
server on my network. It's using gTLS to encrypt the messages in transit.


selinux is not allowing rsyslogd to read the certificates. They are 
world readable, so I don't think that is the problem. When I turn 
selinux mode to permissive, it works fine.


What context should the ssl certificates be in for rsyslog to be able to 
read them?


thanks.
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


[CentOS] yum-cron hourly errors

2017-10-12 Thread John Ratliff
I receive messages like this from cron often. Not every hour, and not 
consistently between the servers running CentOS, but at least two per 
day. Is this normal?


/etc/cron.hourly/0yum-hourly.cron:

Could not retrieve mirrorlist 
http://mirrorlist.centos.org/?release=7=x86_64=os=stock 
error was


14: HTTP Error 403 - Forbidden

Could not retrieve mirrorlist 
http://mirrorlist.centos.org/?release=7=x86_64=extras=stock 
error was


14: HTTP Error 403 - Forbidden

Could not retrieve mirrorlist 
http://mirrorlist.centos.org/?release=7=x86_64=updates=stock 
error was


14: HTTP Error 403 - Forbidden

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos