Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Tom H
On Mon, Dec 6, 2010 at 6:28 PM, Bob McConnell rmcco...@lightlink.com wrote: Ryan Wagoner wrote: IPv6 is not broken by design. NAT was implemented to extend the time until IPv4 exhaustion. A side effect was hiding the internal IPv4 address, which complicates a number of protocols like FTP and

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Tom H
On Mon, Dec 6, 2010 at 6:56 PM, Ryan Wagoner rswago...@gmail.com wrote: On Mon, Dec 6, 2010 at 6:28 PM, Bob McConnell rmcco...@lightlink.com wrote: Ryan Wagoner wrote: On Mon, Dec 6, 2010 at 5:15 PM, Bob McConnell rmcco...@lightlink.com wrote: David Sommerseth wrote: On 06/12/10 15:29, Todd

[CentOS] How to dump mails via HTTP

2010-12-07 Thread gigzbyte
Hello everyone! How can i dump with human-readable format all e-mails sent and received via HTTP web-interface, for example, via aol.com or gmail.com - it's just examples, there's own mail service, but not under control. Connections to web-iface not secured with HTTPS, pure HTTP. In case of

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Christopher Chan
On Tuesday, December 07, 2010 11:08 AM, Todd Rinaldo wrote: On Dec 6, 2010, at 7:51 PM, Christopher Chan wrote: On Tuesday, December 07, 2010 08:57 AM, David wrote: Folks I have been following the IPV6 comments. What concerns me with the loss of NAT are the following issues: 1) My

Re: [CentOS] CentOS 5.5 with MediaWiki

2010-12-07 Thread Clovis Tristao
Em 06-12-2010 15:55, Mathieu Baudier escreveu: Also, there will soon be a MediaWiki 1.16 package in EPEL[1]. There is Good news! Actually my dependencies were probably from EPEL in that case, not RPMForge. ___ CentOS mailing list

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread David Sommerseth
On 07/12/10 02:26, Les Mikesell wrote: On 12/6/10 6:27 PM, Brian Mathis wrote: You are enjoying a side-effect of NAT by thinking it is a firewall. The other nice side-effect of NAT is that you get an effectively infinite number of addresses behind it without any pre-arrangement with

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Mon, 2010-12-06 at 17:15 -0500, Bob McConnell wrote: So, spending one or two or 100s /64 subnets with public IPv6 addresses which is completely blocked in a firewall will serve exactly the same purpose as a site-local subnet. But this /64 net may get access to the Internet *if*

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Mon, 2010-12-06 at 18:28 -0500, Bob McConnell wrote: IPv6 is not broken by design. NAT was implemented to extend the time until IPv4 exhaustion. A side effect was hiding the internal IPv4 address, which complicates a number of protocols like FTP and SIP. The only downside I see is ISPs

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Mathieu Baudier
    b)  Do I get charged by my ISP on a per-device basis? Heh, if they want to micromanage... This is no science fiction. Some big providers in some countries limit the number of device that can connect to internet. You have to register the MAC address of your single PC (which, by the way, is

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Christopher Chan
On Tuesday, December 07, 2010 07:23 PM, Mathieu Baudier wrote: b) Do I get charged by my ISP on a per-device basis? Heh, if they want to micromanage... This is no science fiction. Never said it was. Some big providers in some countries limit the number of device that can connect to

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Mathieu Baudier
/me does not care. Not sure about other folks though...do them a service :-p In theory, a lot of residential routers (not provided by the ISP) will allow to set the sent MAC address via their web interface. And on a full fledged Linux OS: ifconfig ethX hw ether MY:MA:CA:DD:RE:SS (or something

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mathieu Baudier said the following on 07/12/10 12:23: Some big providers in some countries limit the number of device that can connect to internet. FastWeb does this in Italy. They configure their router (to which you do NOT have access) giving

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Scott Robbins
On Tue, Dec 07, 2010 at 12:23:08PM +0100, Mathieu Baudier wrote:     b)  Do I get charged by my ISP on a per-device basis? Heh, if they want to micromanage... This is no science fiction. Some big providers in some countries limit the number of device that can connect to internet. You

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Mogens Kjaer
On 12/07/2010 12:53 PM, Mathieu Baudier wrote: ... And on a full fledged Linux OS: ifconfig ethX hw ether MY:MA:CA:DD:RE:SS (or something like that, see man ifconfig) I just did not say whether I have ever tried in real... You just add the following line to

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread John Thomas
Can a machine with only an IPV6 address communicate with a machine that only has an IPV4 or are they separate? -- Sincerely, John Thomas ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread David Sommerseth
On 07/12/10 12:23, Mathieu Baudier wrote: b) Do I get charged by my ISP on a per-device basis? Heh, if they want to micromanage... This is no science fiction. Some big providers in some countries limit the number of device that can connect to internet. You have to register the MAC

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Gavin Carr
On Mon, Dec 06, 2010 at 08:55:17PM -0500, Bob McConnell wrote: 3) When I connect my IPV6 refrigerator with its automatic inventory system tracking every RFID-enabled carrot I use, won't I be making my shopping habits visible to all those annoying advertisers? Or, in other words, am I

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Steve Clark
On 12/07/2010 06:56 AM, Luigi Rosa wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mathieu Baudier said the following on 07/12/10 12:23: Some big providers in some countries limit the number of device that can connect to internet. FastWeb does this in Italy. They configure

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Steve Clark
On 12/07/2010 05:13 AM, David Sommerseth wrote: On 07/12/10 02:26, Les Mikesell wrote: On 12/6/10 6:27 PM, Brian Mathis wrote: You are enjoying a side-effect of NAT by thinking it is a firewall. The other nice side-effect of NAT is that you get an effectively infinite number

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread David Sommerseth
On 07/12/10 13:22, John Thomas wrote: Can a machine with only an IPV6 address communicate with a machine that only has an IPV4 or are they separate? They are separated. It's two different protocols, even though they are similar in many aspects. There are some projects trying to bridge that

[CentOS] difference between cron and shell invocation.

2010-12-07 Thread James B. Byrne
I have a fairly involved root cron task that I moved verbatim from another server. On the original server, this task ran without problem. On the new server, when this task runs via cron, which I confirm is happening by looking in the cron log, no files are transferred and no error is reported.

Re: [CentOS] difference between cron and shell invocation.

2010-12-07 Thread m . roth
James B. Byrne wrote: I have a fairly involved root cron task that I moved verbatim from another server. On the original server, this task ran without problem. On the new server, when this task runs via cron, which I confirm is happening by looking in the cron log, no files are transferred

Re: [CentOS] difference between cron and shell invocation.

2010-12-07 Thread Tony Molloy
On Tuesday 07 December 2010 14:34:33 James B. Byrne wrote: I have a fairly involved root cron task that I moved verbatim from another server. On the original server, this task ran without problem. On the new server, when this task runs via cron, which I confirm is happening by looking in the

Re: [CentOS] difference between cron and shell invocation.

2010-12-07 Thread Robert Heller
At Tue, 7 Dec 2010 09:34:33 -0500 (EST) CentOS mailing list centos@centos.org wrote: I have a fairly involved root cron task that I moved verbatim from another server. On the original server, this task ran without problem. On the new server, when this task runs via cron, which I confirm

Re: [CentOS] difference between cron and shell invocation.

2010-12-07 Thread James B. Byrne
On Tue, December 7, 2010 09:49, Brent L. Bates wrote: If you aren't already doing so, use the full path to the commands you are I have done as you suggest and that indeed has solved the problem. Thank you very much. Regards, -- *** E-Mail is NOT a SECURE channel ***

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Mon, 2010-12-06 at 19:26 -0600, Les Mikesell wrote: On 12/6/10 6:27 PM, Brian Mathis wrote: You are enjoying a side-effect of NAT by thinking it is a firewall. The other nice side-effect of NAT is that you get an effectively infinite number of addresses behind it without any

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
3) When I connect my IPV6 refrigerator with its automatic inventory system tracking every RFID-enabled carrot I use, won't I be making my shopping habits visible to all those annoying advertisers? Or, in other words, am I compromising my privacy? Actually, although such

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Mon, 2010-12-06 at 20:55 -0500, Bob McConnell wrote: David wrote: Folks I have been following the IPV6 comments. What concerns me with the loss of NAT are the following issues 3) When I connect my IPV6 refrigerator with its automatic inventory system tracking every RFID-enabled

Re: [CentOS] CentOS 5.5 with MediaWiki

2010-12-07 Thread Ray Van Dolson
On Tue, Dec 07, 2010 at 07:41:24AM -0200, Clovis Tristao wrote: Em 06-12-2010 15:55, Mathieu Baudier escreveu: Also, there will soon be a MediaWiki 1.16 package in EPEL[1]. There is Good news! Actually my dependencies were probably from EPEL in that case, not RPMForge.

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Bob McConnell
Adam Tauno Williams wrote: On Mon, 2010-12-06 at 17:15 -0500, Bob McConnell wrote: So, spending one or two or 100s /64 subnets with public IPv6 addresses which is completely blocked in a firewall will serve exactly the same purpose as a site-local subnet. But this /64 net may get access to

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Lamar Owen
On Tuesday, December 07, 2010 05:29:09 am Adam Tauno Williams wrote: On Mon, 2010-12-06 at 18:28 -0500, Bob McConnell wrote: No, the downside is that each address used will be exposed to the world. False. That is *NOT* a downside. In your opinion. Others hold a different opinion. While

Re: [CentOS] difference between cron and shell invocation.

2010-12-07 Thread James B. Byrne
Question. In a chained cron job like this: sshfs . . . /usr/bin/rsync . . . | /bin/mail -s . . . . . . Is there anyway to get a failure message from the first part to be emailed or logged? Given the resolution of this problem I gather that sshfs must not have been found and

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Tom H
On Tue, Dec 7, 2010 at 6:23 AM, Mathieu Baudier mbaud...@argeo.org wrote:     b)  Do I get charged by my ISP on a per-device basis? This is no science fiction. Some big providers in some countries limit the number of device that can connect to internet. You have to register the MAC address

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Bob McConnell
Adam Tauno Williams wrote: On Mon, 2010-12-06 at 18:28 -0500, Bob McConnell wrote: IPv6 is not broken by design. NAT was implemented to extend the time until IPv4 exhaustion. A side effect was hiding the internal IPv4 address, which complicates a number of protocols like FTP and SIP. The

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Tom H
On Tue, Dec 7, 2010 at 10:29 AM, Bob McConnell rmcco...@lightlink.com wrote: Adam Tauno Williams wrote: On Mon, 2010-12-06 at 18:28 -0500, Bob McConnell wrote: IPv6 is not broken by design. NAT was implemented to extend the time until IPv4 exhaustion. A side effect was hiding the internal IPv4

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Benjamin Franz
On 12/06/2010 06:47 AM, Daniel J Walsh wrote: I agree, and would like to look at the AVC's to understand what could have broken the labeling Well - since it happened again this morning, here you go. On further investigation in backups, I previously had the user account that I use for the FTP

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread m . roth
Lamar Owen wrote: On Tuesday, December 07, 2010 05:29:09 am Adam Tauno Williams wrote: On Mon, 2010-12-06 at 18:28 -0500, Bob McConnell wrote: No, the downside is that each address used will be exposed to the world. False. That is *NOT* a downside. In your opinion. Others hold a

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Tue, 2010-12-07 at 10:11 -0500, Lamar Owen wrote: On Tuesday, December 07, 2010 05:29:09 am Adam Tauno Williams wrote: On Mon, 2010-12-06 at 18:28 -0500, Bob McConnell wrote: No, the downside is that each address used will be exposed to the world. False. That is *NOT* a downside. In

Re: [CentOS] difference between cron and shell invocation.

2010-12-07 Thread Robert Heller
At Tue, 7 Dec 2010 10:21:27 -0500 (EST) CentOS mailing list centos@centos.org wrote: Question. In a chained cron job like this: sshfs . . . /usr/bin/rsync . . . | /bin/mail -s . . . . . . Is there anyway to get a failure message from the first part to be emailed or logged?

Re: [CentOS] difference between cron and shell invocation.

2010-12-07 Thread m . roth
James B. Byrne wrote: Question. In a chained cron job like this: sshfs . . . /usr/bin/rsync . . . | /bin/mail -s . . . . . . Is there anyway to get a failure message from the first part to be emailed or logged? Given the resolution of this problem I gather that sshfs must not

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/07/2010 10:36 AM, Benjamin Franz wrote: On 12/06/2010 06:47 AM, Daniel J Walsh wrote: I agree, and would like to look at the AVC's to understand what could have broken the labeling Well - since it happened again this morning, here you go.

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Lamar Owen
On Tuesday, December 07, 2010 10:32:32 am Tom H wrote: Is 172.16.10.72 a private address of yours or of your ISP? More to the point; do you have a route to his address? Blackhole routing makes the best firewall in the world; you can't even attempt to hack an address to which your autonomous

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Tue, 2010-12-07 at 10:32 -0500, Tom H wrote: On Tue, Dec 7, 2010 at 10:29 AM, Bob McConnell rmcco...@lightlink.com wrote: Adam Tauno Williams wrote: On Mon, 2010-12-06 at 18:28 -0500, Bob McConnell wrote: IPv6 is not broken by design. NAT was implemented to extend the time until IPv4

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Bob McConnell
Gavin Carr wrote: On Mon, Dec 06, 2010 at 08:55:17PM -0500, Bob McConnell wrote: 3) When I connect my IPV6 refrigerator with its automatic inventory system tracking every RFID-enabled carrot I use, won't I be making my shopping habits visible to all those annoying advertisers? Or, in other

Re: [CentOS] difference between cron and shell invocation.

2010-12-07 Thread Les Mikesell
On 12/7/10 9:21 AM, James B. Byrne wrote: Question. In a chained cron job like this: sshfs . . . /usr/bin/rsync . . . | /bin/mail -s . . . . . . Is there anyway to get a failure message from the first part to be emailed or logged? Given the resolution of this problem I gather

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Benjamin Franz
On 12/07/2010 07:36 AM, Benjamin Franz wrote: On 12/06/2010 06:47 AM, Daniel J Walsh wrote: I agree, and would like to look at the AVC's to understand what could have broken the labeling Well - since it happened again this morning, here you go. On further investigation in backups, I

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Les Mikesell
On 12/7/10 9:07 AM, Adam Tauno Williams wrote: site-local addresses are officially deprecated. If you want a device to only be available locally - block the traffic to/from that device. So security will depend on every connection owner having a high level of knowledge about ipv6 internals?

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Tue, 2010-12-07 at 10:49 -0500, Bob McConnell wrote: There _is_ more information leakage with ipv6, in the sense that you are using a real ip from an internal machine on the connection. But the point is that the security benefit of that is largely illusory, security by obscurity.

Re: [CentOS] CentOS 5.5 on a new Mac Mini? no CD Driver?

2010-12-07 Thread Bob Arnold
On 12/6/10 3:54 PM, Jason T. Slack-Moehrle wrote: Hi All, I am attempting to install CentOS 5.5 64 bit on my new Mac Mini. I boot to the CD and when I get to selecting where I am installing from (local cd, hard disk, ftp, etc) I select Local CD and it cannot find a driver and wants me to

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/07/2010 10:59 AM, Benjamin Franz wrote: On 12/07/2010 07:36 AM, Benjamin Franz wrote: On 12/06/2010 06:47 AM, Daniel J Walsh wrote: I agree, and would like to look at the AVC's to understand what could have broken the labeling Well -

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Tue, 2010-12-07 at 10:01 -0600, Les Mikesell wrote: On 12/7/10 9:07 AM, Adam Tauno Williams wrote: site-local addresses are officially deprecated. If you want a device to only be available locally - block the traffic to/from that device. So security will depend on every connection

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Les Mikesell
On 12/7/10 9:04 AM, Adam Tauno Williams wrote: The other nice side-effect of NAT is that you get an effectively infinite number of addresses behind it without any pre-arrangement with anyone else. Even if ISPs hand out what they expect to reasonably-sized blocks, won't it be much harder to

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Tue, 2010-12-07 at 10:16 -0600, Les Mikesell wrote: On 12/7/10 9:04 AM, Adam Tauno Williams wrote: Some people's belief that NAT is some magic sauce that makes themmore secure [it does not] or provides them more flexibility [it does not] than real addresses ... causes the people who

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Tom H
On Tue, Dec 7, 2010 at 11:18 AM, Brunner, Brian T. bbrun...@gai-tronics.com wrote: Trim your quotes. LOL I was in a hurry... I think that this applies to all in this thread so I hope that you've email everyone else... Also, please keep your commands on-list; I only caught your email because

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Tom H
On Tue, Dec 7, 2010 at 10:43 AM, Lamar Owen lo...@pari.edu wrote: On Tuesday, December 07, 2010 10:32:32 am Tom H wrote: Is 172.16.10.72 a private address of yours or of your ISP? More to the point; do you have a route to his address? I have a route to his dsl router, which, assuming that the

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Brunner, Brian T.
LOL twice, I'll top-post! (I hate M$ Office, but I'm stuck with it) I didn't want my whining (not commanding) archived for-frigging-ever, so I sent it direct. TBH I ran out of steam/indignation/angst after a few of the over-quoter under-trimmers, so I didn't get all. -Original

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Benjamin Franz
On 12/07/2010 08:12 AM, Daniel J Walsh wrote: Yes SELinux and all MAC systems require that if the administrator puts files in non default directories, then they have to have to be told. In the case of SELinux, this involves correcting the labeling. DAC has similar problems, in that you need

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Les Mikesell
On 12/7/10 10:20 AM, Adam Tauno Williams wrote: Some people's belief that NAT is some magic sauce that makes themmore secure [it does not] or provides them more flexibility [it does not] than real addresses ... causes the people who understand networking to have to spend time explaining that

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Bowie Bailey
On 12/7/2010 11:36 AM, Tom H wrote: I have a route to his dsl router, which, assuming that the ipv4 and ipv6 firewalls are as good at allowing/disallowing access, makes his current ipv4 and his future ipv6 addresses equally accessible. I've been following the NAT debate here and something

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread David Sommerseth
On 07/12/10 16:49, Bob McConnell wrote: Gavin Carr wrote: On Mon, Dec 06, 2010 at 08:55:17PM -0500, Bob McConnell wrote: 3) When I connect my IPV6 refrigerator with its automatic inventory system tracking every RFID-enabled carrot I use, won't I be making my shopping habits visible to all

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Les Mikesell said the following on 07/12/10 17:01: So security will depend on every connection owner having a high level of knowledge about ipv6 internals? Is this being designed by people planning careers as consultants? A network protocol

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread David Sommerseth
On 07/12/10 18:01, Les Mikesell wrote: On 12/7/10 10:20 AM, Adam Tauno Williams wrote: [...snip...] permit outbound client connections from anything connected behind them without much regard to how many devices there are, and block everything else isn't NAT. That's a router/firewall.

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Rudi Ahlers
On Tue, Dec 7, 2010 at 6:01 PM, Les Mikesell lesmikes...@gmail.com wrote: On 12/7/10 9:07 AM, Adam Tauno Williams wrote: site-local addresses are officially deprecated. If you want a device to only be available locally - block the traffic to/from that device. So security will depend on

Re: [CentOS] CentOS 5.5 on a new Mac Mini? no CD Driver?

2010-12-07 Thread Nataraj
You need to install and use Apple's Boot Camp to make CentOS work on a Mac Mini. It will install a utility on the drive that will make the Mini look like an ordinary system instead of the Apple based hardware including standard drivers for the Cd/DVD and hard drives and network and sound

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Brunner, Brian T.
The issue is similar to that of using passwords of more than 10 characters composed of random mixed-case alphanumeric characters (ideally with special characters mixed in). Yes - they are provably more secure in a technical sense than virtually any easily remembered system. However

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread David Sommerseth
On 07/12/10 16:45, Adam Tauno Williams wrote: On Tue, 2010-12-07 at 10:32 -0500, Tom H wrote: On Tue, Dec 7, 2010 at 10:29 AM, Bob McConnell rmcco...@lightlink.com wrote: Adam Tauno Williams wrote: On Mon, 2010-12-06 at 18:28 -0500, Bob McConnell wrote: IPv6 is not broken by design. NAT

Re: [CentOS] ntfs

2010-12-07 Thread Dag Wieers
On Sun, 5 Dec 2010, Ron Loftin wrote: On Sun, 2010-12-05 at 23:52 +0530, Ritika Garg wrote: CentOS 5.5 is installed in the system. I installed the package kmod-ntfs-2.1.27-3.el5.elrepo.x86_64.rpm I mounted Seagate external hard disk. I am able to copy contents from the hard disk to the

Re: [CentOS] ntfs

2010-12-07 Thread Dag Wieers
On Mon, 6 Dec 2010, Niki Kovacs wrote: Robert Heller a écrit : Will FAT support the larger external disks, such as the .5TB and larger? I read the replies to my previous posts, and I get your point, since I didn't know about the various limitations. It's probably due to the fact that we're

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/07/2010 11:59 AM, Benjamin Franz wrote: On 12/07/2010 08:12 AM, Daniel J Walsh wrote: Yes SELinux and all MAC systems require that if the administrator puts files in non default directories, then they have to have to be told. In the case

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Les Mikesell
On 12/7/10 11:19 AM, David Sommerseth wrote: On 07/12/10 18:01, Les Mikesell wrote: On 12/7/10 10:20 AM, Adam Tauno Williams wrote: [...snip...] permit outbound client connections from anything connected behind them without much regard to how many devices there are, and block everything

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread m . roth
Brunner, Brian T. wrote: snip My solution is to use complex passwords, and write them down wrong, making my write-down a password hint, but not a password. My task is to remember what is my transform from hint to fact: (examples follow, choose your own) snip Yeah, I use hints, too... but do

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread David Sommerseth
On 07/12/10 18:10, Bowie Bailey wrote: On 12/7/2010 11:36 AM, Tom H wrote: I have a route to his dsl router, which, assuming that the ipv4 and ipv6 firewalls are as good at allowing/disallowing access, makes his current ipv4 and his future ipv6 addresses equally accessible. I've been

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread m . roth
Daniel J Walsh wrote: On 12/07/2010 11:59 AM, Benjamin Franz wrote: On 12/07/2010 08:12 AM, Daniel J Walsh wrote: Yes SELinux and all MAC systems require that if the administrator puts files in non default directories, then they have to have to be told. In the case of SELinux, this involves

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread David Sommerseth
On 07/12/10 18:39, Les Mikesell wrote: On 12/7/10 11:19 AM, David Sommerseth wrote: On 07/12/10 18:01, Les Mikesell wrote: On 12/7/10 10:20 AM, Adam Tauno Williams wrote: [...snip...] permit outbound client connections from anything connected behind them without much regard to how many

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Bowie Bailey
On 12/7/2010 12:43 PM, David Sommerseth wrote: On 07/12/10 18:10, Bowie Bailey wrote: On 12/7/2010 11:36 AM, Tom H wrote: I have a route to his dsl router, which, assuming that the ipv4 and ipv6 firewalls are as good at allowing/disallowing access, makes his current ipv4 and his future ipv6

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/07/2010 12:46 PM, m.r...@5-cent.us wrote: Daniel J Walsh wrote: On 12/07/2010 11:59 AM, Benjamin Franz wrote: On 12/07/2010 08:12 AM, Daniel J Walsh wrote: Yes SELinux and all MAC systems require that if the administrator puts files in non

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Les Mikesell
On 12/7/10 11:10 AM, Bowie Bailey wrote: I have a route to his dsl router, which, assuming that the ipv4 and ipv6 firewalls are as good at allowing/disallowing access, makes his current ipv4 and his future ipv6 addresses equally accessible. I've been following the NAT debate here and

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread David Sommerseth
On 07/12/10 18:52, Bowie Bailey wrote: On 12/7/2010 12:43 PM, David Sommerseth wrote: On 07/12/10 18:10, Bowie Bailey wrote: On 12/7/2010 11:36 AM, Tom H wrote: I have a route to his dsl router, which, assuming that the ipv4 and ipv6 firewalls are as good at allowing/disallowing access, makes

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Les Mikesell
On 12/7/10 11:53 AM, Daniel J Walsh wrote: We have attempted to work with them, setup default labeling for them when we know about the problems, embarrass them when they say you need to disable SELInux. Red Hat is working on new developer tools to help third party developers work on RHEL

[CentOS] display issue after installing centos 5.5 on hp probook 4420s

2010-12-07 Thread Agnello George
HI I was just assigned a laptop with a pre install windows 7 in it. I decide to dual boot this server with cent os 5.5 , i did a linux text at the boot prompt as anaconda was not able to display the graphis screen ( it was barely viable ) . The installation happened perfect , but when i start x

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Paul Heinlein
On Tue, 7 Dec 2010, m.r...@5-cent.us wrote: I am not arguing that SELinux is easy, I am arguing that it is not rocket science. I have worked for a several years to try to make If rocket science means very difficult and obscure, yes, it is. I've got to cry foul here. Difficult and obscure

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Ben McGinnes
On 7/12/10 8:33 PM, Christopher Chan wrote: Ah, I must pity you who have to live with what you've got in the United States being under the rule of these tyrants. You guys probably can only dream of getting a 100MB fibre connection for 13USD/mnth or a 1GB fibre connection for 30 or so

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/07/2010 01:13 PM, m.r...@5-cent.us wrote: Daniel J Walsh wrote: On 12/07/2010 12:46 PM, m.r...@5-cent.us wrote: Daniel J Walsh wrote: On 12/07/2010 11:59 AM, Benjamin Franz wrote: On 12/07/2010 08:12 AM, Daniel J Walsh wrote: mvnch What

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Bowie Bailey
On 12/7/2010 1:13 PM, Les Mikesell wrote: On 12/7/10 11:10 AM, Bowie Bailey wrote: I have a route to his dsl router, which, assuming that the ipv4 and ipv6 firewalls are as good at allowing/disallowing access, makes his current ipv4 and his future ipv6 addresses equally accessible. I've been

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Ben McGinnes
On 8/12/10 4:12 AM, David Sommerseth wrote: On 07/12/10 16:49, Bob McConnell wrote: No, it is not FUD, it is a real concern by people with much to lose. Those of you evangelizing this new, and still unproven technology can't seem to recognize this simple fact. This is FUD. Agreed, but

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Lamar Owen
On Tuesday, December 07, 2010 12:26:30 pm David Sommerseth wrote: You mean something along the way ... Oh, this Bob uses 172.16.10.72 ... let's run some traceroutes towards his gateway. That could be 64.57.176.18, right? Then we can just setup a direct route from us to his 172.16.10.0/24

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Lamar Owen
On Tuesday, December 07, 2010 12:39:28 pm Les Mikesell wrote: How many devices? You mean exceeding the number of available inside a IPv6 subnet? I do hope you're kidding ... as for a /64 subnet we're talking about 4.294.967.296 addresses doubled 32 times. Is that what people will

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Lamar Owen
On Tuesday, December 07, 2010 03:31:15 pm Lamar Owen wrote: It will depend upon your provider if you get PA addresses; Minor edit: 'The prefix size of your address block with depend upon your provider, if you get PA addresses by default from your provider; Sorry for the error.

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread John R. Dennison
On Tue, Dec 07, 2010 at 11:51:16AM -0500, Brunner, Brian T. wrote: LOL twice, I'll top-post! (I hate M$ Office, but I'm stuck with it) Really? In blatant disregard for the published guidelines for use on this and other centos.org mailing lists? How very sporting of

Re: [CentOS] display issue after installing centos 5.5 on hp probook 4420s

2010-12-07 Thread Keith Roberts
On Wed, 8 Dec 2010, Agnello George wrote: To: CentOS mailing list centos@centos.org From: Agnello George agnello.dso...@gmail.com Subject: [CentOS] display issue after installing centos 5.5 on hp probook 4420s HI I was just assigned a laptop with a pre install windows 7 in it. I

Re: [CentOS] LVM change disk

2010-12-07 Thread muhammad panji
On Mon, Dec 6, 2010 at 9:23 PM, Adam Tauno Williams awill...@whitemice.org wrote: On Sat, 2010-12-04 at 10:29 -0800, John R Pierce wrote: On 12/03/10 10:47 PM, muhammad panji wrote: Dear all, I have a 4,1TB Logical volume consist of four disks with size of 2TB, 1TB, 1TB, and 500GB. The LV

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Rob Kampen
Daniel J Walsh wrote: I wrote this paper to try to explain what SELinux tends to complain about. http://people.fedoraproject.org/~dwalsh/SELinux/Presentations/selinux_four_things.pdf I am having difficulty with the pdf file - both adobe and kpdf have problems with the pages with screen shots

Re: [CentOS] SELinux - way of the future or good idea but !!!

2010-12-07 Thread Les Mikesell
On 12/7/10 1:45 PM, Marko Vojinovic wrote: And it isn't really rocket science. It's just an extension to the existing classical permissions system --- it works in analogous way, just with greater flexibility and power. If you know how to understand and use file permissions, you will easily

Re: [CentOS] display issue after installing centos 5.5 on hp probook 4420s

2010-12-07 Thread Nico Kadel-Garcia
On Tue, Dec 7, 2010 at 1:34 PM, Agnello George agnello.dso...@gmail.com wrote: HI I was just assigned a laptop with a pre install windows 7 in it. I decide to dual boot this server with cent os 5.5 , i did a linux text at the boot prompt as anaconda was not able to display the graphis

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Nico Kadel-Garcia
On Tue, Dec 7, 2010 at 10:04 AM, Adam Tauno Williams awill...@whitemice.org wrote: Bogus.  The reason is that they haven't been pressured into adoption by higher powers; so we will get into a nice scramble to migrate in a pinch. most people have no idea what NAT is, don't care, and shouldn't

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Ross Walker
On Dec 7, 2010, at 7:41 PM, Nico Kadel-Garcia nka...@gmail.com wrote: On Tue, Dec 7, 2010 at 10:04 AM, Adam Tauno Williams awill...@whitemice.org wrote: Bogus. The reason is that they haven't been pressured into adoption by higher powers; so we will get into a nice scramble to migrate in a

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Tony Schreiner
Does this mean I have to type in URLs like: http://3ffe:1900:4545:3:200:f8ff:fe21:67cf/ I can only image phonetically calling these off on a support call, I'd get half way through it and the other end would tell me to forget it I'll wait until DNS is working again. In fact with DNS

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Tue, 2010-12-07 at 20:37 -0500, Ross Walker wrote: On Dec 7, 2010, at 7:41 PM, Nico Kadel-Garcia nka...@gmail.com wrote: On Tue, Dec 7, 2010 at 10:04 AM, Adam Tauno Williams awill...@whitemice.org wrote: Bogus. The reason is that they haven't been pressured into adoption by

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Adam Tauno Williams
On Tue, 2010-12-07 at 20:44 -0500, Tony Schreiner wrote: Does this mean I have to type in URLs like: http://3ffe:1900:4545:3:200:f8ff:fe21:67cf/ I can only image phonetically calling these off on a support call, I'd get half way through it and the other end would tell me to forget it I'll

Re: [CentOS] IPV4 is nearly depleted, are you ready for IPV6?

2010-12-07 Thread Ross Walker
On Dec 7, 2010, at 9:20 PM, Adam Tauno Williams awill...@whitemice.org wrote: On Tue, 2010-12-07 at 20:37 -0500, Ross Walker wrote: On Dec 7, 2010, at 7:41 PM, Nico Kadel-Garcia nka...@gmail.com wrote: On Tue, Dec 7, 2010 at 10:04 AM, Adam Tauno Williams awill...@whitemice.org wrote:

  1   2   >