[CentOS] iptables nat table rules

I am forwarding traffic on port 8080 to port 80 with following rule. # iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 8080 -j REDIRECT --to-port 80 # iptables-save However, I am unable to add it directly in /etc/sysconfig/iptables. I think it is used only for filter table and not nat table.

Re: [CentOS] iptables nat table rules

Thanks for the help. Robert, you pointed out the mistakes correctly. Not sure why I used iptables-save command at first place... -- cs. On Tue, Feb 8, 2011 at 2:08 PM, Robert Spangler mli...@zoominternet.net wrote: On Tuesday 08 February 2011 13:36, Carlos S wrote:  I am forwarding traffic

Re: [CentOS] httpd LDAP auth module

On Wed, Jan 12, 2011 at 6:21 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: Look inside your httpd.conf file, it will answer that one for you. RHEL's httpd supports ldap auth as shipped. /snip See the line: LoadModule authnz_ldap_module modules/mod_authnz_ldap.so Except that these

[CentOS] httpd LDAP auth module

Hi, I am looking at LDAP module for Apache httpd for authentication. The 'yum install' gives me 'mod_authz_ldap.i386 0:0.26-9.el5_5.1', whereas on Apache documentation site I find mod_authNz_ldap module. Both modules appear to be different looking at available directives. Any clues or suggestions

[CentOS] netstat - kill by pid ?

I am writing a small script to kill process(es) listening on particular port number. Here I am particularly looking at Java servlet-containers like Tomcat and JBoss, which sometimes don't complete their shutdown process and it still shows up as running process with ps or netstat. This needs to be

Re: [CentOS] netstat - kill by pid ?

Thanks for the replies. I don't want to run this script as sudo/root user and hence not looking at lsof/fuser. I think netstat and awk looks good solution for now. Following is what I have used for now. [[ netstat -nlp | grep 8082 | awk -F / '{ print $1 }' | awk '{ print $7 }' ]] -- CS. On

[CentOS] logrotate - size and daily options

Hi, A question about logrotate: Are size and daily/weekly/monthly options mutually exclusive or ORred? If mutually exclusive, then which one takes preference first specified or last specified? -- CS. ___ CentOS mailing list CentOS@centos.org

[CentOS] statd random port - sysconfig/nfs not taking effect

I have changed /etc/sysconfig/nfs to specify port numbers for NFS daemons. Somehow statd is still starting up at random port number. Other damons are starting at properly at specified port numbers Any clues on what might be wrong? Any other location/setting that takes precedence over sysconfig/nfs

Re: [CentOS] statd random port - sysconfig/nfs not taking effect

additional daemons like statd, mountd, and rquotad. -- CS. On Wed, Sep 1, 2010 at 8:58 PM, Rob Kampen rkam...@kampensonline.com wrote: Carlos S wrote: I have changed /etc/sysconfig/nfs to specify port numbers for NFS daemons. Somehow statd is still starting up at random port number. Other damons

[CentOS] iptables for PostgreSQL not working

Hi, I am having problem in configuring iptables for PostgreSQL server. I added following rule to iptables to allow connections to default PostgreSQL port (5432): {{{ sudo /sbin/iptables -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 10.0.0.0/24 --dport 5432 -j ACCEPT }}} After this

Re: [CentOS] iptables for PostgreSQL not working

There was a rule above this 5432 blocking connections. Somehow I missed it and noticed it only after posting this message. Fixed and it's working now. -- Thanks, CS On Tue, Aug 31, 2010 at 8:09 PM, Carlos S neu...@gmail.com wrote: Hi, I am having problem in configuring iptables

[CentOS] pam changes - service restart reqd?

Howdy, Do we need to restart any service after making changed to pam modules? I have changed system-auth config, but not sure if I need to restart any service after making changes, e.g. ssh which uses pam. Any help? -- Thanks, CS. ___ CentOS mailing

Re: [CentOS] pam changes - service restart reqd?

, Paul Heinlein heinl...@madboa.com wrote: On Mon, 30 Aug 2010, Carlos S wrote: Howdy, Do we need to restart any service after making changed to pam modules? I have changed system-auth config, but not sure if I need to restart any service after making changes, e.g. ssh which uses pam. Any help

Re: [CentOS] pam changes - service restart reqd?

, 2010 at 3:25 PM, Paul Heinlein heinl...@madboa.com wrote: On Mon, 30 Aug 2010, Carlos S wrote: Changed system-auth config to use LDAP. The sshd config is configured to use PAM. I am not sure whether it load that file at daemon start or refers to it every time a login attempt with password

Re: [CentOS] NFS exports network mask

Had to put exclusive IP address before subnet-masked entry. Thanks for the pointers. -- CS. On Tue, Jun 22, 2010 at 5:06 PM, James Pearson jame...@moving-picture.com wrote: Carlos S wrote: Thanks James. So does exports list has any priority for loading config. e.g. I have general rule

[CentOS] NFS exports network mask

Hi, I need to export NFS shares to all clients in a subnetwork, except that one client will have different NFS options. I am not sure how to write subnest mask for this in exports file. For all clients it was easy as all I had to do was 10.0.0.0/16 or 10.0.0.0/255.255.0.0. How do I modify

Re: [CentOS] NFS exports network mask

-picture.com wrote: Carlos S wrote: Hi, I need to export NFS shares to all clients in a subnetwork, except that one client will have different NFS options. I am not sure how to write subnest mask for this in exports file. For all clients it was easy as all I had to do was 10.0.0.0/16 or 10.0.0.0

Re: [CentOS] 32-bit boot CD for 64-bit install using kickstart

I also have same kickstart files except change in url and NTP settings (for VMware server). I will verify again if I made some silly mistake somewhere in kickstart file. Thanks for the replies... -- neubyr. On Fri, Apr 30, 2010 at 8:45 PM, Robert Heller hel...@deepsoft.com wrote: At Fri, 30

[CentOS] 32-bit boot CD for 64-bit install using kickstart

Hi, I am using kickstart method for CentOS installation. The install is done using mirror site URL and not CD/DVD ISOs. However, the system is initially booted from 32-bit CentOS CD. When the install process starts I get errors as: - package rpm not found - abort/continue? - package lvm2 not

[CentOS] iptables info in proc - ttl

Hello List, I am having problem in getting iptables recent module working for me, so I was looking into /proc to get some clues. I see following line in the /proc for my iptables recent rule: # cat /proc/net/ipt_recent/badguy src=10.0.0.17 ttl: 63 last_seen: 3301974512 oldest_pkt: 2 3301973507,