Re: [CentOS] BIND server getting DDOS

2022-08-04 Thread Mark Milhollan
On Wed, 3 Aug 2022, Gordon Messmer wrote: On 8/3/22 11:08, Mark Milhollan wrote: Usually that's someone hoping to use you in a reflection attack Doesn't a reflection attack require the reflecting server to answer queries?  I'd think that the server logging that the query was denied would

Re: [CentOS] BIND server getting DDOS

2022-08-03 Thread Mark Milhollan
On Tue, 2 Aug 2022, Robert Moskowitz wrote: I just, maybe, figured out why I have been having problems with my CentOS DNS server with BIND 9.11.4. Aug  2 15:47:19 onlo named[6155]: client @0xaa3cad80 114.29.194.4#11205 (.): view external: query (cache) './A/IN' denied Aug  2 15:47:19 onlo

Re: [CentOS] [External] Re: Microsoft Teams on CentOS 7. Does the latest version work?

2021-07-15 Thread Mark Milhollan
On Wed, 14 Jul 2021, Chris Adams wrote: Like a number of "desktop apps" for web-based sites, Teams is an Electron app. That means it's really a package of Chrome plus the site's client HTML/CSS/JavaScript, so you get all the fun bugs of Chrome (with no way to upgrade it). And it is still

Re: [CentOS] nmcli: unwanted secondary ip-address

2020-09-22 Thread Mark Milhollan
On Tue, 22 Sep 2020, Felix Kölzow wrote: A secondary ip address seems to be automatically added to a nic which causes several issues in our setup. # nmcli con show NAME  UUID  TYPE  DEVICE eno4  dbd95c24-1ed7-4292-8dba-3934bd1476a0  ethernet  eno4

Re: [CentOS] CentOS 7 - xfs shrink & expand

2020-05-13 Thread Mark Milhollan
Correct, XFS filesystems cannot be shrunk (reduced) dynamically, like ext2/3/4 can, only grown. You need to create another, smaller filesystem (XFS too usually) then copy the existing content which can be done with tools like xfsdump & xfsrestore (iff both are XFS), rsync, pax (spax), or tar,

Re: [CentOS] centos 6 vs 7

2020-04-02 Thread Mark Milhollan
On Tue, 31 Mar 2020, Divine Tanyingoh wrote: On centos 6 I cannot ping the hostname and get a reply without first resolving in the /etc/hosts file by adding a new entry: 192.168.0.47 server1.example.com. But for centos 7 I am able to ping the hostname and get a reply even when I have not made

Re: [CentOS] CentOS 7 : SELinux trouble with Fail2ban

2020-02-27 Thread Mark Milhollan
On Wed, 26 Feb 2020, Nicolas Kovacs wrote: Some time ago I had SELinux problems with Fail2ban. Unfortunately when I install [...] from EPEL, I still get the same error. EPEL packages are often crap quality (as packages), merely blind imports of the upstream package without any adjustments

Re: [CentOS] Peculiar process name in /proc

2019-08-05 Thread Mark Milhollan
On Mon, 5 Aug 2019, John Horne wrote: lrwxrwxrwx. 1 xymon xymon 0 Aug 2 14:07 /proc/58032/exe -> /usr/sbin/xymond;5d44410e (deleted) I am aware of what the 'deleted' part means, but have no idea what the ';5d44410e' part means. Is this some sort of thread reference? IIRC that's the inode

Re: [CentOS] Own CentOS MirrorList

2019-06-10 Thread Mark Milhollan
On Mon, 10 Jun 2019, Daniel Watson wrote: I am interested in setting up my OWN mirrorlist like http://mirrorlist.centos.org/?release=7=x86_64=os=stock where it pulls a few local mirrors, but mine would be statically set with 3 or 4 different location URL's There isn't much magic to the

Re: [CentOS] Delta RPMs (drpms) for CentOS-6 and CentOS-7

2019-06-05 Thread Mark Milhollan
On Tue, 4 Jun 2019, Johnny Hughes wrote: We would like to remove delta rpms (drpms) from our CentOS-6 and CentOS-7 repositories. But before we do , we would like a discussion Delta's are about conserving network bandwidth at the expense of local disk bandwidth, so I expect the greatest

Re: [CentOS] RHEL 8 released

2019-05-08 Thread Mark Milhollan
You can experience RHEL8 via the developer version allowing you to work out how your configurations and management will have to change, which may coincide with CentOS arriving by the time you finish. /mark ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] [OT] Where to buy S/MIME ??

2018-11-26 Thread Mark Milhollan
On Sun, 25 Nov 2018, Alice Wonder wrote: >I want more than just DKIM sigs on my e-mail now. That digital signature (failing to verify) should be sufficient proof that the content was altered -- it is as strong as S/MIME signing only will provide, i.e., if someone with power over your life can

Re: [CentOS] C 7 installation annoyances

2018-10-16 Thread Mark Milhollan
On Tue, 16 Oct 2018, Nux! wrote: >The EL7 partitioner is a complete disaster and I regularly bitch about >it on twitter and irc. Aye. It's annoying that the text mode installer can't manipulate partitioning at all -- they lost that when they made the installer "better". If it weren't for

Re: [CentOS] IPv6 fixed address using ip token

2018-09-29 Thread Mark Milhollan
On Thu, 20 Sep 2018, Mark Milhollan wrote: >On Thu, 20 Sep 2018, Kenneth Porter wrote: >> I'm about to publish a fixed IPv6 address and I understand I can use the ip >> token command to lock the host part of the RA-assigned address to a fixed >> value. But I can't

Re: [CentOS] CVE-2018-14634 and kernel-debuginfo ?

2018-09-26 Thread Mark Milhollan
On Tue, 25 Sep 2018, Zube wrote: >Is there some way to get kernel-debuginfo-2.6.32-754.3.5.el6.x86_64? Worst case use the full name: yum install kernel-debuginfo-2.6.32-754.3.5.el6.x86_64 /mark ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] Firewall trouble with Kickstart

2018-09-21 Thread Mark Milhollan
On Fri, 21 Sep 2018, Patrick Begou wrote: > firewall --enabled --ssh --service=nfs --port=111:tcp,111:upd,875:tcp,875:upd udp not upd. /mark ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] IPv6 fixed address using ip token

2018-09-20 Thread Mark Milhollan
On Thu, 20 Sep 2018, Kenneth Porter wrote: > I'm about to publish a fixed IPv6 address and I understand I can use the ip > token command to lock the host part of the RA-assigned address to a fixed > value. But I can't see an obvious place to configure this. It looks like there is no support for

Re: [CentOS] ipset-service save fails when module compiled into kernel

2018-09-15 Thread Mark Milhollan
On Fri, 14 Sep 2018, Kenneth Porter wrote: > I'm using a kernel with ipsets compiled in, rather than loaded as a module. > The > support script that saves ipsets checks if the module is loaded before saving > and finds nothing, so aborts. Why does it need to make this check? Likely the check is

Re: [CentOS] bash completion in C7

2018-08-29 Thread Mark Milhollan
On Wed, 29 Aug 2018, wwp wrote: >while bash completion was working great to me in CentOS6, since I'm >using C7 I spend my day stuck on completion not working the way it >should. Since you don't want what it provides you can either remove the bash-completions* packages or append "complete -r" to

Re: [CentOS] Down C6 ALL without torrent ?

2018-04-19 Thread Mark Milhollan
On Thu, 19 Apr 2018, John Hodrien wrote: >On Thu, 19 Apr 2018, Valeri Galtsev wrote: >>On Wed, April 18, 2018 8:36 pm, Always Learning wrote: >>>I have a machine with a BIOS that does not permit DVD installation. It >>>accepts everything else including some old superseded media types. Doesn't

Re: [CentOS] DHCPv6 prefix delegation

2018-04-08 Thread Mark Milhollan
On Sat, 7 Apr 2018, Chris Adams wrote: >Is there an DHCPv6 client in CentOS that supports prefix delegation >correctly? Tried dibbler? /mark ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Traffic shaping on CentOS

2017-12-16 Thread Mark Milhollan
On Fri, 15 Dec 2017, Kenneth Porter wrote: > The gateway is for a small business and I don't want shell and remote desktop > sessions to come to a crawl because someone's uploading/downloading/mailing a > big CAD file to a customer/vendor, or because several are watching Youtube > videos.

Re: [CentOS] Sendmail is considered deprecated

2017-04-01 Thread Mark Milhollan
On Fri, 31 Mar 2017, Xinhuan Zheng wrote: >Today I searched redhat official portal and learned that Sendmail is >considered deprecated. By default, CentOS 7 will use postfix as MTA. I >need good advise on what it means to us. As of today you don't need to do anything, apart from explicitly

Re: [CentOS] firewalld management on a headless server

2017-03-30 Thread Mark Milhollan
On Wed, 29 Mar 2017, Robert Moskowitz wrote: >On 03/29/2017 07:38 AM, Leon Fauster wrote: >>We have good results with http://www.shorewall.net/ an iptables >>"abstraction". >>Despite its not a GUI, the streamlined configuration helps to be effective. > >From what I can determine, it is still

Re: [CentOS] ?barracuda? listing in logwatch session 123 of user root.

2016-07-22 Thread Mark Milhollan
On Tue, 19 Jul 2016, Jon LaBadie wrote: >My nightly logwatch report had a never before seen >section last night, "barracuda spam firewall". > >I have not problem with the emails it noted as >being rejected. But I've always thought of "barracuda" >as a commercial product. > >I have neither

Re: [CentOS] Question on 7.2 and weird characters

2016-05-24 Thread Mark Milhollan
On Mon, 23 May 2016, Jerry Geis wrote: >When I run this command: >rm /tmp/jerry.txt >rm: remove regular file â/tmp/jerry.txtâ? > >I get the a with the carrot on top... > >How do I get back to the normal characters ? Your locale specifies an encoding that your terminal doesn't understand, i.e.,

Re: [CentOS] OT: hardware: MegaCli and initializing a RAID

2016-05-08 Thread Mark Milhollan
On Fri, 6 May 2016, Valeri Galtsev wrote: >I agree with what John said about their command line interface MegaCli. StorCli is the replacement, which has differently awful syntax. /mark ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] OpenSSL Update - not a security update???

2016-03-03 Thread Mark Milhollan
On Wed, 2 Mar 2016, Johnny Hughes wrote: >On 03/02/2016 10:42 AM, Mark Milhollan wrote: >>I wish --security was functional >>I hope that the lack is not due to >>the assumed use resulting in it being ignored. > >That is not the reason, >We do not have enough spa

Re: [CentOS] OpenSSL Update - not a security update???

2016-03-02 Thread Mark Milhollan
I understand that some people might be trying to cherry-pick their updates and the assertion that doing so is not supported. But that is not the only way in which --security can be used and it is a bit boring to continually see whining about the assumptive use. For me it is about scheduling

Re: [CentOS] C7: How to configure raid at install time

2015-11-26 Thread Mark Milhollan
On Wed, 25 Nov 2015, Gordon Messmer wrote: >I really recommend using the fewest partitions possible, >replacing >a disk will require you to handle each partition individually. This is not a large burden, but I do agree to keep it simple. >It's probably best to do a small /boot on RAID1 and

Re: [CentOS] Rsync and differential Backups

2015-11-14 Thread Mark Milhollan
On Fri, 13 Nov 2015, Gordon Messmer wrote: >Breaking a RAID volume doesn't make filesystems consistent, While using LVM arranges for some filesystems to be consistent (it is not always possible), it does nothing to ensure application consistency which can be just as important. Linux doesn't

Re: [CentOS] Poor perfmance of bridged interfaces

2015-11-14 Thread Mark Milhollan
On Fri, 13 Nov 2015, Ulf Volmer wrote: >On 11/13/2015 12:57 PM, Sergio Belkin wrote: >>When I enable stp: >> >> [root@localhost ~]# brctl show br0 >> bridge name bridge id STP enabled interfaces >> br0 8000.080027a398e6 yes enp0s3 >>

Re: [CentOS] After reboot of web-server accessing website shows "Forbidden", restarting httpd all is fine

2015-11-09 Thread Mark Milhollan
On Sat, 7 Nov 2015, Fred Smith wrote: >On Fri, Nov 06, 2015 at 07:23:59PM -0800, Gordon Messmer wrote: >>On 11/06/2015 06:30 PM, Jobst Schmalenbach wrote: >>>What troubles me that a simple restart of the daemon fixes everything but it >>>does not come up on reboot. >> >>Running the service

Re: [CentOS] persistent change of max_stack_depth

2015-08-15 Thread Mark Milhollan
On Fri, 14 Aug 2015, Thomas Eriksson wrote: If it's centos 6 stick 'ulimit -s' in the init script I suggest putting it in the sysconfig file instead, if such exists. /mark ___ CentOS mailing list CentOS@centos.org

Re: [CentOS-virt] Problem with lvm disks assigned to kvm guests

2014-02-06 Thread Mark Milhollan
On Thu, 6 Feb 2014, C. L. Martinez wrote: On Thu, Feb 6, 2014 at 11:01 AM, Dennis Jacobfeuerborn denni...@conversis.de wrote: On 06.02.2014 11:45, C. L. Martinez wrote: I create a new kvm with another lvm disks that use the same disk space previously assigned to the previous kvm guest, this new