Re: [CentOS] Linux malware attack

2014-03-21 Thread Thomas Harold
On 3/19/2014 2:50 PM, Ned Slider wrote: > > Just to add, I'm sure everyone has already read and implemented many of > the suggestions here: > > http://wiki.centos.org/HowTos/Network/SecuringSSH > > Numbers 2 and 7 have already been highlighted in this thread. > #1 These days I would say that

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-30 Thread Thomas Harold
On 8/25/2011 7:05 PM, Always Learning wrote: > > On Thu, 2011-08-25 at 14:36 -0700, John R Pierce wrote: > >> On 08/25/11 1:45 PM, Always Learning wrote: >>> I have broken-up the very large conf file (/etc/httpd/conf/httpd.conf) >>> into 3 main parts. Part 1 is left in situ. Parts 2 and 3 are locat

Re: [CentOS] Apache warns Web server admins of DoS attack tool

2011-08-30 Thread Thomas Harold
On 8/28/2011 12:37 PM, Les Mikesell wrote: > On Sun, Aug 28, 2011 at 10:20 AM, Keith Roberts wrote: >>> The CentOS Forums are a very very good resource for many people and the >>> people spending time managing and posting there are doing a very good >>> job. I'm guessing you were unable to get val

Re: [CentOS] Adding the [SOLVED] Tag to break threads -- multiple factors

2011-07-29 Thread Thomas Harold
On 7/28/2011 5:01 PM, Spiro Harvey wrote: >> the thing is that not all mail clients will set the in-reply-to >> headers, whuch is why clients like thunderbird, evolution and mutt >> will use the subject line as well to thread messages. > > Apple Mail does that too and it makes the threading unusabl

Re: [CentOS] yum segfault - rpmforge problem?

2011-07-26 Thread Thomas Harold
On 7/26/2011 12:12 PM, Karanbir Singh wrote: > On 07/26/2011 04:59 PM, Leonard den Ottolander wrote: >> Seems an issue with yum too, seeing that it segfaults over bad data. >> This has been reported upstream: >> https://bugzilla.redhat.com/show_bug.cgi?id=725798 > > I dont really see that as a yum

Re: [CentOS] Power-outage

2011-07-01 Thread Thomas Harold
On 7/1/2011 10:59 AM, Robert Heller wrote: > > APC UPSes are supported by apcupsd. Other brands, not so much. Some > (read: cheaper models) have their own special protocol and don't > include Linux support. These solutions are intended for the cheaper or > otherwise 'unsupported' UPSes. It *sou

Re: [CentOS] unofficial ext3 and ext4 compare

2011-06-27 Thread Thomas Harold
On 6/27/2011 8:10 AM, Jerry Geis wrote: > I have something like 300G I routinely backup. > This includes some large 12Gig images and other files. > > I had been using ext3 on an external USB disk for part of the process. > > Under ext3 doing "rsync -a /home /mnt/external_back/backup.jun.27.2011" >

Re: [CentOS] ext4 in CentOS 5.6?

2011-06-23 Thread Thomas Harold
On 6/23/2011 12:16 PM, PJ wrote: > I'm sure many are running ext4 FS's in production, but just want to be > re-assured that there are not currently any major issues before > starting a new project that looks like it will be using ext4. > > I've previously been using xfs but the software for this pr

Re: [CentOS] High system load but low cpu usage

2011-06-09 Thread Thomas Harold
On 6/9/2011 1:02 PM, Emmanuel Noobadmin wrote: > On 6/9/11, Steven Tardy wrote: >> top Cpu(s) line is averaged for all cpus/cores. to display individual >> cpus/cores press: >> 1 >> you'll likely see one cpu/core being pegged with iowait. >> to identify the offending process within top press:

Re: [CentOS] Possible to use multiple disk to bypass I/O wait?

2011-06-09 Thread Thomas Harold
On 6/9/2011 1:26 PM, John R Pierce wrote: > On 06/09/11 2:24 AM, Emmanuel Noobadmin wrote: >> Alternatively, if I mdraid mirror the existing disk, would md be smart >> enough to read using the other disk while the first's tied up with the >> first process? > > that woudl be my first choice, and yes

Re: [CentOS] Possible to use multiple disk to bypass I/O wait?

2011-06-09 Thread Thomas Harold
On 6/9/2011 1:09 PM, Emmanuel Noobadmin wrote: > On 6/10/11, Markus Falb wrote: >> Yes, but before doing this be sure that your Software does not need atime. > > For a brief moment, I had that sinking "Oh No... why didn't I see this > earlier" feeling especially since I've already remounted the >

Re: [CentOS] hard disk install failure

2011-06-07 Thread Thomas Harold
On 6/7/2011 1:04 PM, Timothy Murphy wrote: > > No. I was rung one day by a lady at my ISP (Eircom), who told me I > had been chosen as a recipient of their new "Ultimate" system, which > would increase my speed from 5Mb/s to 14Mb/s, at no extra cost! Could be newer DSL technology, or could simply

Re: [CentOS] hard disk install failure

2011-06-07 Thread Thomas Harold
On 6/7/2011 11:22 AM, m.r...@5-cent.us wrote: > Timothy Murphy wrote: > > Right, I just looked it up, and I see it's an ADSL modem. Look at your IP > address, and I'll bet you're 192.168.0.x, or 192.168.1.x. Whatever it is, > try pinging 192.168.[0 or 1].1. Whichever it is, pull up your browser, an

Re: [CentOS] ClearOS rebuild

2011-06-03 Thread Thomas Harold
On 6/3/2011 10:12 PM, Ron Blizzard wrote: > On Fri, Jun 3, 2011 at 2:06 PM, Les Mikesell wrote: > >> That's not what I said. I said Red Hat's redistribution restriction >> created the need for Ubunutu. And that the community that is now >> dependent on RH-rebuilds might be better served by a dist

Re: [CentOS] Good book on Linux Admin (Centos 5.5)

2011-06-03 Thread Thomas Harold
On 6/2/2011 4:18 PM, Les Mikesell wrote: > > The things I always look for and almost never find are > > (a) A split between tutorial (step-by-step for common uses) and > reference sections (that have all the options). Once you've followed the > tutorial you won't want to wade through that again

Re: [CentOS] Grep: show me this line and the next N lines?

2011-05-31 Thread Thomas Harold
On 5/31/2011 3:43 AM, Dotan Cohen wrote: > On Tue, May 31, 2011 at 01:26, John R. Dennison wrote: >> On Tue, May 31, 2011 at 01:10:40AM +0300, Dotan Cohen wrote: >>> Thanks, all. I did actually look at the grep manpage but after a few >>> screenfuls it became tl;dr and I started just skimming.

Re: [CentOS] SSD for Centos SWAP /tmp & /var/ partition

2011-05-27 Thread Thomas Harold
On 5/26/2011 8:04 AM, Ljubomir Ljubojevic wrote: > John Hodrien wrote: >> On Thu, 26 May 2011, Emmanuel Noobadmin wrote: >> >>> Personally, I'm averse to using SSD with any important long term data >>> is the nightmare that I could one day wake up to find everything gone >>> without any means of re

Re: [CentOS] Web based file versioning frontend

2011-05-23 Thread Thomas Harold
On 5/20/2011 4:00 PM, Les Mikesell wrote: > On 5/20/11 1:16 PM, Joseph L. Casale wrote: >>> Git and Gitweb? >> >> Thought of that, is there anything that can monitor for changes so I can >> avoid a commit command for every script, as they all dump to an already >> well organized tree, I was hoping

Re: [CentOS] SSD for Centos SWAP /tmp & /var/ partition

2011-05-23 Thread Thomas Harold
On 5/23/2011 7:03 AM, Timothy Murphy wrote: > yonatan pingle wrote: > >> On Sun, May 22, 2011 at 2:06 PM, Keith Roberts > >> anyways - if it's for home usage Don't think twice get an SSD . > > Why? > I've read most of the articles in this thread, > and I haven't seen anything that persuades me > S

Re: [CentOS] [OT] 8-15 TB storage: any recommendations?

2010-01-08 Thread Thomas Harold
On 1/7/2010 12:28 PM, Joseph L. Casale wrote: >>> I also heard that disks above 1TB might have reliability issues. >>> Maybe it changed since then... >>> >> >> I remember rumors about the early 2TB Seagates. >> >> Personally, I won't RAID SATA drives over 500GB unless they're >> enterprise-level on

Re: [CentOS] [OT] 8-15 TB storage: any recommendations?

2010-01-07 Thread Thomas Harold
On 1/7/2010 10:54 AM, John Doe wrote: > From: Karanbir Singh >> On 01/07/2010 02:30 PM, Boris Epstein wrote: >>> KB, thanks. When you say "dont go over 1 TiB in storage per spindle" >>> what are you referring to as spindle? >> >> disk. it boils down to how much data do you want to put under one >>

Re: [CentOS] unattended fsck on reboot

2010-01-06 Thread Thomas Harold
On 1/6/2010 2:36 PM, Alan McKay wrote: > On Wed, Jan 6, 2010 at 1:05 PM, Brian Mathis wrote: >>> No out of band management? > >> My thoughts exactly. All servers should have this these days, be it >> an integrated card or an IP-based KVM. > > Oh believe me, I want to get there. It's high on my

Re: [CentOS] Software RAID1 Disk I/O

2010-01-05 Thread Thomas Harold
On 1/5/2010 5:44 PM, Matt wrote: > I just installed CentOS 5.4 64 bit release on a 1.9ghz CPU with 8gB of > RAM. It has 2 Western Digital 1.5TB SATA2 drives in RAID1. > > [r...@server ~]# df -h > FilesystemSize Used Avail Use% Mounted on > /dev/md2 1.4T 1.4G 1.3T 1% /

Re: [CentOS] IUD Number

2010-01-05 Thread Thomas Harold
On 1/5/2010 3:53 PM, Susan Day wrote: > Hello; > How do I get the IUD number for a user? "id" command (see also the "groups" command) $ id -u thomas 999 $ id -G thomas (prints a list of all group numbers that I belong to) ___ CentOS mailing list CentOS

Re: [CentOS] Centos 5.4 and TYAN s4985 motherboard....

2010-01-05 Thread Thomas Harold
On 1/5/2010 1:52 PM, Tom Bishop wrote: > Yeah I know fedora core 12 works well along with ubuntu 8.04, thats what > I am running now with later kernel, I just like to run centos on my > production servers...neither of the latter exhibit the same condition > that I saw with centos5.4. I have updat

Re: [CentOS] Centos 5.4 and TYAN s4985 motherboard....

2010-01-05 Thread Thomas Harold
On 1/4/2010 10:09 AM, Tom Bishop wrote: > Was wondering if anyone has any luck with the Tyan s4985 motherboard, I > had loaded up the latest 5.4 release and in installed most everything > that I wanted but when I loaded it up, as in processor wise it would > lock up. Funny thing I could still ssh

Re: [CentOS] IPTABLEs and port scanning

2010-01-05 Thread Thomas Harold
On 1/5/2010 11:49 AM, Benjamin Franz wrote: > > If your brute force protection is not catching the repeated login > failures, you should check its configuration. > Or give up and move SSH to a non-standard port, at least from the outside. (I got tired a few years ago of watching my log files fil

Re: [CentOS] PAM configuration?

2010-01-05 Thread Thomas Harold
On 1/5/2010 7:31 AM, Kai Schaetzl wrote: > For what do you need the hash? You don't supply the hash for logging in. > In the case of SSH login, you are correct that the hash is not used to login. But the attacker may find a way to read the hash out of the /etc/shadow file, or the same password

Re: [CentOS] PAM configuration?

2010-01-05 Thread Thomas Harold
On 1/4/2010 12:42 PM, Roland Roland wrote: > also is there a way I could enable the PAM module which uses crack > library to check the strength of a users password? > any help with this is truly appreciated... /etc/pam.d/system-auth-ac The default is: passwordrequisite pam_cracklib.so tr

Re: [CentOS] Lost mdadm.conf

2010-01-01 Thread Thomas Harold
On 12/31/2009 11:27 AM, James Bensley wrote: > > I can't say this with 100% certainty but I would of thought that it > would been fine. I've lost my mdadm.conf (reinstalled OS) with a > separate 4 disk RAID 5 array and re-assembled the array and carried on > as if nothing had happened. > Yes, in g

[CentOS] [OT] CAT5 IP-capable rackmount KVM units?

2009-12-30 Thread Thomas Harold
Rather off-topic, but I'm looking for IP-based KVMs (~16 ports) that can handle both PS/2 and USB hookups on the server side. All of the answers over at Slashdot are a few years out of date and it looks like prices on KVM head units have dropped a bit over the years. Some of the older units on

Re: [CentOS] Find reason for heavy load

2009-12-30 Thread Thomas Harold
On 12/29/2009 11:44 PM, Noob Centos Admin wrote: > My Centos 5 server has seen the average load jumped through the roof > recently despite having no major additional clients placed on it. > Previously, I was looking at an average of less than 0.6 load, I had a > monitoring script that sends an emai

Re: [CentOS] Monitor Network Traffic

2009-12-21 Thread Thomas Harold
On 12/21/2009 9:08 AM, sadas sadas wrote: > What is the best way to monitor the total incoming / outcoming network > traffic of CentOS server. I think that the solution is to monitor the > network interfaces and to send SNMP packets to remote server. But is it > possible? > MRTG is the simp

Re: [CentOS] Optimizing CentOS for gigabit firewall

2009-12-18 Thread Thomas Harold
On 12/18/2009 4:12 PM, Peter Serwe wrote: > You can't patch the Berkeley Packet Filter into Linux. Linux kernel > doesn't support it. > > and... > > Despite a cacophonous chorus of replies directing you to the right tool > for the job, you insist on sticking with Linux. > > If you want to

Re: [CentOS] Subversion server: v1.4 (centos) vs. v1.6 (rpmforge)

2009-12-17 Thread Thomas Harold
On 12/16/2009 1:32 PM, Mathieu Baudier wrote: >> (We took advantage of repository sharding in 1.6, which is why we did a >> svn dump/load method. If we didn't need sharding, we probably could've >> just copied the directory tree across from the 1.4 to the 1.6 server.) > > Did you consider the

Re: [CentOS] Subversion server: v1.4 (centos) vs. v1.6 (rpmforge)

2009-12-16 Thread Thomas Harold
On 12/15/2009 4:22 AM, Mathieu Baudier wrote: > Hi, > > I'm planning to upgrade an old public/internal development > infrastructure and will use CentOS 5.4 x86_64 as basis. > > The Subversion version in CentOS 5.4 is v1.4, whereas RPMForge provides v1.6. > I use the RPMForge version as my client on

Re: [CentOS] LVM, usb drives, Active Directory

2009-12-16 Thread Thomas Harold
On 12/16/2009 9:41 AM, William Warren wrote: > On 12/16/2009 12:10 AM, Eero Volotinen wrote: > Still going to need 10TB of backups. And i can guarantee you the > chances of having a URE during rebuild are almost certain with this > setup so a backup is going to be crucial. Sounds like a nightmare

Re: [CentOS] LVM, usb drives, Active Directory

2009-12-16 Thread Thomas Harold
On 12/15/2009 7:48 AM, Scott Ehrlich wrote: > I have a client with a handful of USB drives connected to a CentOS > box. I am charged with binding the USB drives together into a single > LVM for a cheap storage data pool (10 x 1 TB usb drives = 10 TB cheap > storage in a single mount point). > (sn

Re: [CentOS] Migrating to RAID

2009-12-10 Thread Thomas Harold
On 12/10/2009 10:39 AM, Matt wrote: > I have CentOS 4.x installed on a single 500GB SATA drive. Drive is > about 10 percent used. I would like to migrate to software RAID 5 > without reinstalling the OS. Was thinking 3 500GB drives. Is that > possible or must I reinstall? Moving to RAID-1 is g

Re: [CentOS] Is ext4 safe for a production server?

2009-12-09 Thread Thomas Harold
On 12/9/2009 12:23 PM, Miguel Di Ciurcio Filho wrote: > Miguel Medalha wrote: >> I am about to install a new server running CentOS 5.4. The server will >> contain pretty critical data that we can't afford to corrupt. >> > > Just for the record, Theodore Ts'o marked ext4 as stable and ready for > ge

Re: [CentOS] CentOS 5.4 x86_64 only detects 32GB RAM while Fedora x86_64 correctly lists 128GB

2009-12-07 Thread Thomas Harold
On 12/7/2009 7:24 AM, Diederick Stoffers wrote: > [r...@localhost ~]# uname -a > Linux localhost.localdomain 2.6.18-164.6.1.el5xen #1 SMP Tue Nov 3 > 16:48:13 EST 2009 x86_64 x86_64 x86_64 GNU/Linux > If you dig back through the xen-users mailing list, there's a thread that discusses this rec

Re: [CentOS] Latency Monitor

2009-12-02 Thread Thomas Harold
On 12/2/2009 4:41 PM, Matt wrote: > Does anyone know of a utility I can run on a server to periodically > ping several hosts and record the result? Does not need to be > anything fancy at all. Various monitoring apps (cacti, nagios, etc)... or MRTG. All of which store their data in RRDTool. Wh

Re: [CentOS] /etc/cron.weekly/99-raid-check

2009-12-01 Thread Thomas Harold
On 12/1/2009 8:05 AM, Paul Bijnens wrote: > I have the problem on 2 servers, and both of those servers are also running > a VMware image (very small, but constantly used) under VMware Server 2. > Could it be that the .vmem file, or even the virtual disk is constantly > written to, and the raid is c

Re: [CentOS] timekeeping on VM - ntpd running

2009-11-30 Thread Thomas Harold
On 11/30/2009 11:34 AM, Jonathan Garden wrote: > This is really stupid question. But referring to: > http://lists.centos.org/pipermail/centos/2009-October/083791.html > I don't see any line related to ntpd in my /var/log/messages . Do I need > to turn-on ntpd for timekeeping on VMs? Some people say

Re: [CentOS] again, nic driver order (bonding)

2009-11-28 Thread Thomas Harold
On 11/22/2009 8:38 PM, Gordon McLellan wrote: > I have two servers with identical hardware ... TYAN i3210w system > boards with dual intel gigabit interfaces, and a PCI intel gigabit > nic. I'm running Centos 5.4, x86_64, 2.6.18-164.6.1.el5 > > Every other time I reboot, the nics initialize in a

Re: [CentOS] Recommend Mail Server

2009-11-25 Thread Thomas Harold
On 11/25/2009 6:45 PM, Christopher Chan wrote: > Thomas Harold wrote: >> >> We use postfix, dovecot, clamav milter (reject at SMTP time), spf policy >> check (with rejecting on SPF_FAIL at SMTP time), and AmavisD-New w/ >> SpamAssassin for scoring what's left.

Re: [CentOS] Recommend Mail Server

2009-11-25 Thread Thomas Harold
On 11/23/2009 1:59 PM, Robert Moskowitz wrote: > Susan Day wrote: >> Hi; >> I don't want sendmail. What's a good secure email server that I can >> yum? I really only need smtp right now, but who knows what the future >> will bring? > > See my slightly prior post on: Re: [CentOS] > smtp+pop3+imap+t

Re: [CentOS] Recommend Mail Server

2009-11-25 Thread Thomas Harold
On 11/23/2009 2:21 PM, John R. Dennison wrote: > On Mon, Nov 23, 2009 at 01:59:40PM -0500, Robert Moskowitz wrote: >> >> It points you to: >> http://howtoforge.net/virtual-users-domains-postfix-courier-mysql-squirrelmail-fedora-10 >> >> Now granted this is for FC10, but I suspect it would be easy t

Re: [CentOS] Upgrade perl; package conflict

2008-07-09 Thread Thomas Harold
Johnny Hughes wrote: is it possible that you have extras set at a different priority than base ... you also have the protectbase installed along with priorities (not recommended). You should have these settings for [extras], [base] and [updates] sections in CentOS-Base.repo: priority=1 pr

Re: [CentOS] Best Motherboard

2008-05-16 Thread Thomas Harold
Simon Jolle sjolle wrote: On 05/15/2008 04:24 PM, Sam Drinkard wrote: About 2 years ago, I build a server [...] What are the advantages of building your own server comparing with products from HP, Dell and IBM? Is it cheaper? I never heard of DIY server hardware market. Getting exactly w

Re: [CentOS] Best Motherboard

2008-05-16 Thread Thomas Harold
John Plemons wrote: I would look at Tyan, Soyo, and Intel for middle of the road performance, but more over for dependability... I have also had very good luck with MSI, Asus... Same here, Tyan for the really important systems (complete with ECC) inside a SuperMicro rack case. Asus for the

Re: [CentOS] Somewhat OT: (Nagios)

2008-05-14 Thread Thomas Harold
Sergio Belkin wrote: 2008/5/13 <[EMAIL PROTECTED]>: OK, you won :) I'm going to test nagios. I am using centos 5.1 x86_64. Do I lose much if I use rpm from rpmforge (version 2.9)? We're running version 2.11 at the office (on CentOS 5.1 x86_64). I've looked at some of the things in 3.0, bu

Re: [CentOS] Somewhat OT:

2008-05-14 Thread Thomas Harold
Ross S. W. Walker wrote: Nagios can start very simple, but has the ability to end up very complex. It's configs take a modular approach, you have monitors, monitors belong in groups, groups have operators/administrators, etc. We just finished setting up Nagios at our office. It's not that b