similar to: Mixing FTP and HTTP file transfers

Situation: We are providing hosting services. I've grown tired of the various kiddie scripts/dictionary attacks on various services. The latest has been against vsftpd, on systems that I can't easily control vs. putting strict limits on ssh. We simply have too many users entering from too many networks many with dynamic IP addresses. Enter.... thinking about LIDS or Log Based

Had two nameservers crash in the last few hours... This 'never' happens! On the console was sent an invalid ICMP type 3, code 3 error to a broadcast: 255.255.255.255 on eth0 sent an invalid ICMP type 3, code 3 error to a broadcast: 255.255.254.255 on eth0 with the IP address of the offender? in front of that line. Any ideas? Best, John Hinton

I'm having an odd behavior with vsftp on all CentOS 4 servers... maybe 3 too, but I'm not on those much. I am transferring in port mode as I've never managed to get passive to work with a firewall running. Anyway, this is what happens. During normal transfers with few files.. it works perfectly. During the transfer of like a large website with hundreds of files in various

Anyone had issues when logging into a server that is running vsftpd such as when you go to connect and it never lists the directory or anything but just says connected and just hangs? -- Andrew Rice Jr

I have a vsftp server hosted on custom dyndns site. We have a 4mb ADSL connection. When I tried to download the files from the ftp server with wan IP address or the dyndns address it downloads some files and disconnects. Please find below an extract from the log file (ace ftp client). I would appreciate if someone could guide me, possibly with a solution for this problem. Many thanks

OK, so I did an upgrade to PHP 5.3 on one of my servers. I noticed the uninstall of php also removed SquirrelMail and it won't install under PHP 5.3. Has anybody worked this out with a good RPM or repo solution? -- John Hinton 877-777-1407 ext 502 http://www.ew3d.com Comprehensive Online Solutions

I have Centos3.3 installed, vsftpd, apache2, ports 20&21 open on router, firewall disabled at this time : /etc/passwd looks like this --- ftpadmin:x:502:502::/var/www:sbin/noligin uncommented the lines in /etc/vsftpd/vsftpd.conf : chroot_list_enable=YES chroot_list_file=/etc/vsftpd.chroot_list I can access ftp from within network no problem, but using external ip it will validate login

I've been seeing some random Proliant DL380 G4 64bit crashes. Each time, on the console are messages relating tojbd2/cciss and something about a waitfor 120 seconds. Is anybody else seeing anything like this? Oddly, I can't seem to find this in the logs. I guess it can't write when this happens. -- John Hinton 877-777-1407 ext 502 http://www.ew3d.com Comprehensive Online

Hi All, Please feel free to correct any misconceptions in my premises as I get to my question. I have about 6 ftp services running on a CentOS system that is going down for service, and I want to move the ftp services to a VM on another network. These are all running on Proftpd, with fairly complicated directory/permissions/rate control layouts, as proftpd nicely supports. First, it appears

I'm running bind in a chroot environment. It seems that since the Redhat snafu which wrecked bind (yes, I had caching nameserver running as well but not anymore) I have been having problem with my slave nameservers retrieving updates from the master. Looking at the zone records, some are owned by root, some are owned by named. I'm now confused as to what the ownership should be and

OK, so does anybody have a good firewall rule solution for what we're supposed to be doing with bind these days? Obviously port 53 is no longer enough. TIA John Hinton

Does anybody have a working version of tcptrack running on Centos 6 x64? The rpmforge rpm installs and runs on the -t eth# command, but if you add a port to it, it bombs with a pcap compile error. It runs fine for me on Centos 5 x64, but seems to have what looks like an old bug reintroduced in 6. -- John Hinton 877-777-1407 ext 502 http://www.ew3d.com Comprehensive Online Solutions

Had anybody been successful in getting Pyzor to run on CentOS 6 64bit? I have it running fine on CentOS 6 32 bit, and I 'think' I did identical installs. But, from the command line I keep getting Oct 6 13:36:00.659 [16065] dbg: pyzor: network tests on, attempting Pyzor Oct 6 13:36:06.205 [16065] dbg: pyzor: pyzor is available: /usr/bin/pyzor Oct 6 13:36:06.206 [16065] dbg: pyzor:

For those of you running mailservers on CentOS 6, what are the suggestions for programs to expunge old email? For instance, deleting email from a Spam folder that is 2 weeks old or older. I see that Dovecot does have a solution, but was wondering about what others have landed on. My systems are basically Postfix, Dovecot using Maildir. Thanks, John Hinton

I'm trying to get usable reports out of logwatch on this new system. Looks like the reports are running in an 'unformatted' mode under Postfix/Amavisd. I found a couple of programs, postfix-logwatch and amavisd-logwatch. These sound promising. I am running Amavisd as the frontend to Postfix. Is anybody running either of these as a logwatch filter? If so, is it repetitive to run

I have taken over a number of RH/FC/CentOS servers recently. I am trying to upgrade all of them to CentOS 4.3 and configure them to only use software that can be managed via yum/apt repositories. One of the choices made by my predecessor was the pure-ftpd server over vsftpd. I cannot find a repo to get this rpm from and am wondering if anyone on the list has any practical experience with both and

Hmm.. after all these years I actually have a monitor on my desk beside me going through a couple of KVMs to our racks. So, I hope to make more use of direct console connections instead of shelling in. But, now.... the text has always been huge and the interface clunky. And after a bit of googling around, and file searching on the system, I can't seem to find where or if there is a way to

Seems the script kiddies are now hitting vsftp with dictionary attacks. I had three boxes showing around 12000 attempts from one IP yesterday. My thoughts are that there should be an upstream solution for this which is then supported by the upstream vendor. Yes, I know there are several 'other' solutions, but I'd really like to stay mainstream and use a supported method for

I'm looking into adding a cloud to one of my servers. Criteria: security accessible via Windoze, Android Mobile Devices, iPhones, iPads, Macs Preferably something living under one of the better repos, such as epel An active project doing updates and adding features. I don't suppose any of you have ideas for this? ;) -- John Hinton 877-777-1407 ext 502 http://www.ew3d.com Comprehensive

One of these days, RedHat might actually run me off!!!! AAAARGH!!!! Can anyone tell me how to get CentOS 4 to simply boot to the console in text mode? If I wanted a stinkin' GUI I would have installed winders! Now, my KVM and 25 foot cord is just too long to send a GUI signal across the room and I'm missing 50% of the screen.. striped vertically.. at about 1/8th inch spacing. Not