search for: jcenile1983

Hello all, I manage a few servers overseas that are running CentOS 6. When performing a yum update, it fails because it's trying to download from: mirror.centos.org/centos/*6.6*/extras/x86_64/repodata/repomd.xml Which fails due to the fact that the entire 6.6 directory is empty on all of the mirrors I have checked. From what I can tell it should be using:

Am 24.02.2016 um 16:07 schrieb Sylvain CANOINE: > Hello, > > ----- Mail original ----- >> De: "John Cenile" <jcenile1983 at gmail.com> >> ?: "centos" <centos at centos.org> >> Envoy?: Mercredi 24 F?vrier 2016 15:42:36 >> Objet: [CentOS] IPtables block user from outbound ICMP > >> Is it possible at all to block all users other than root from sending >> outbound ICMP...

Hello, Is it possible at all to block all users other than root from sending outbound ICMP packets on an interface? At the moment we have the following two rules in our IPtables config: iptables -A OUTPUT -o eth1 -m owner --uid-owner 0 -j ACCEPT iptables -A OUTPUT -o eth1 -j DROP But this still allows ICMP for some reason (but *does* block other TCP/UDP packets, which is what we want, as well

...6:03, Valeri Galtsev <galtsev at kicp.uchicago.edu> wrote: > On Wed, February 24, 2016 12:25 pm, Alexander Dalloz wrote: > > Am 24.02.2016 um 16:07 schrieb Sylvain CANOINE: > >> Hello, > >> ----- Mail original ----- > >>> De: "John Cenile" <jcenile1983 at gmail.com> > >>> ??: "centos" <centos at centos.org> > >>> Envoy??: Mercredi 24 F??vrier 2016 15:42:36 > >>> Objet: [CentOS] IPtables block user from outbound ICMP > >>> Is it possible at all to block all users other than root fr...

Well. Centos 5 is really near of it's end of life. There is not much updates to kernel or openswan. You should at least try latest openswan version. Your issue looks like a bit network problem. -- Eero 2016-02-10 8:34 GMT+02:00 John Cenile <jcenile1983 at gmail.com>: > So lowering the keylife / ikelifetime didn't solve the problem. I've > enabled debugging and I'll see what it says. > > Unfortunately we can't (easily) upgrade CentOS, do you believe that would > make a huge difference though? Are the newer versio...

Hello, I'm cross posting this from the OpenSwan mailing list, in case someone here can help. We have two sites connected via OpenSwan 2.6.32-9 on CentOS 5, sharing 6 /24 subnets each (so 12 in total). The problem we're having is completely randomly, be it in the middle of the day, or in the middle of the night (so I don't believe it's traffic related), certain (and sometimes

> > On 19 Oct 2015, at 04:22, "John Cenile" <jcenile1983 at gmail.com> wrote: > > When performing a yum update, it fails because it's trying to download from: > > mirror.centos.org/centos/*6.6*/extras/x86_64/repodata/repomd.xml > > Which fails due to the fact that the entire 6.6 directory is empty on all > of the mirrors I...

I have tried yum clean all multiple times, no luck. :( Any other ideas? On 19 October 2015 at 18:01, James Pearson <james-p at moving-picture.com> wrote: > > > > On 19 Oct 2015, at 04:22, "John Cenile" <jcenile1983 at gmail.com> wrote: > > > > When performing a yum update, it fails because it's trying to download > from: > > > > mirror.centos.org/centos/*6.6*/extras/x86_64/repodata/repomd.xml > > > > Which fails due to the fact that the entire 6.6 directory is emp...

Hello, ----- Mail original ----- > De: "John Cenile" <jcenile1983 at gmail.com> > ?: "centos" <centos at centos.org> > Envoy?: Mercredi 24 F?vrier 2016 15:42:36 > Objet: [CentOS] IPtables block user from outbound ICMP > Is it possible at all to block all users other than root from sending > outbound ICMP packets on an interface?...

On 25 Feb 2016 00:30, "John Cenile" <jcenile1983 at gmail.com> wrote: > > Thanks all, that seemed to be the problem (the suid bit). :) Well if you really want to call it a problem... Blocking ICMP via a host based firewall remains pretty silly. Bear in mind that since it's a file permission this will be 'fixed' on any updat...

...^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@ ^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@May 29 07:30:10 *hostname* kernel: imklog 5.8.10, log source = /proc/kmsg started Which seems very concerning. On 29 May 2016 at 10:27, John Cenile <jcenile1983 at gmail.com> wrote: > Hi all, > I had an issue this morning with one of my virtual machines. It wouldn't > boot (into any runlevel), nor could I chroot into the root partition using > a rescue disk. > > Unfortunately I didn't grab a screenshot, however the error(s) wh...

Try setting lower keyexpiry time on other endpoint. -- Eero 2016-02-09 17:04 GMT+02:00 John Cenile <jcenile1983 at gmail.com>: > Hello, > > I'm cross posting this from the OpenSwan mailing list, in case someone here > can help. > > We have two sites connected via OpenSwan 2.6.32-9 on CentOS 5, sharing 6 > /24 subnets each (so 12 in total). > > The problem we're having i...

Centos 5 is also a bit old os. Is it possible to use newer version? (like centos 7 or centos 6?) Eero 2016-02-09 19:52 GMT+02:00 Gordon Messmer <gordon.messmer at gmail.com>: > On 02/09/2016 07:04 AM, John Cenile wrote: > >> does anyone have any suggestions on what the problem might be? >> > > Not off the top of my head, but if I were you, I'd enable debugging

On Wed, February 24, 2016 12:25 pm, Alexander Dalloz wrote: > Am 24.02.2016 um 16:07 schrieb Sylvain CANOINE: >> Hello, >> ----- Mail original ----- >>> De: "John Cenile" <jcenile1983 at gmail.com> >>> ??: "centos" <centos at centos.org> >>> Envoy??: Mercredi 24 F??vrier 2016 15:42:36 >>> Objet: [CentOS] IPtables block user from outbound ICMP >>> Is it possible at all to block all users other than root from sending outbound...

...> Well. Centos 5 is really near of it's end of life. There is not much > updates to kernel or openswan. You should at least try latest openswan > version. > > Your issue looks like a bit network problem. > > -- > Eero > > 2016-02-10 8:34 GMT+02:00 John Cenile <jcenile1983 at gmail.com>: > > > So lowering the keylife / ikelifetime didn't solve the problem. I've > > enabled debugging and I'll see what it says. > > > > Unfortunately we can't (easily) upgrade CentOS, do you believe that would > > make a huge difference...

Hi all, I had an issue this morning with one of my virtual machines. It wouldn't boot (into any runlevel), nor could I chroot into the root partition using a rescue disk. Unfortunately I didn't grab a screenshot, however the error(s) when booting were: /pre-pivot/50selinux-loadpolicy.sh: 14 <other messages> init: readahead main process (425) killed by SEGV signal init:

Hello, I'm having a bit of trouble connecting our current CentOS Openswan server with a Vyos server via IPSec. I've posted this on the VyOS forums, but haven't had many helpful responses, so I thought I would ask here. http://forum.vyos.net/showthread.php?tid=26504&pid=29703#pid29703 Basically our Openswan configuration is as follows: conn VYOS keyingtries=0

So lowering the keylife / ikelifetime didn't solve the problem. I've enabled debugging and I'll see what it says. Unfortunately we can't (easily) upgrade CentOS, do you believe that would make a huge difference though? Are the newer versions of OpenSwan *that *much more reliable? On 10 February 2016 at 04:58, Eero Volotinen <eero.volotinen at iki.fi> wrote: > Centos 5

Hello Clint, Our Centos-base.repo file looks like this: [base] name=CentOS-$releasever - Base mirrorlist= http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os #baseurl=http://mirror.centos.org/centos/$releasever/os/$basearch/ gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6 I also tried yours, however I experienced the same issue. It seems like

Hi all, Does anyone know why when I run the following command, I get thousands of packages in the output, saying they've been excluded? [root at server yum.repos.d]# yum --security check-update | less Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.removed.com * epel: mirror.removed.com * extras: mirror.removed.com * updates: mirror.removed.com