similar to: Migrating users to new server

Slashdot carried this story yesterday on a BIND vulnerability: <http://it.slashdot.org/story/09/07/29/0028231/New-DoS-Vulnerability-In-All-Versions-of-BIND-9> The upstream report: <https://www.isc.org/node/474> Red Hat's Bugzilla: <https://bugzilla.redhat.com/show_bug.cgi?id=514292> >From what I'm reading, if one has an Internet-facing master for a zone, one is

Once upon a time, Kenneth Porter <shiva at sewingwitch.com> said: > How would you implement the section here titled "Sendmail > workaround" using Postfix? http://www.postfix.org/postconf.5.html#recipient_delimiter -- Chris Adams <linux at cmadams.net>

On 4 Oct 2017 3:13 pm, "Kenneth Porter" <shiva at sewingwitch.com> wrote: On 10/3/2017 8:14 PM, Phil Manuel wrote: > systemd-networkd doesn't use those files at all. > > If you look at the appropriate ifcfg files eg > /etc/sysconfig/network-scripts/ifcfg-em1 do you see IPV6_FAILURE_FATAL=no > ? > Where does systemd-networkd store its settings, then?

On Wed, Aug 26, 2020 at 2:54 PM Kenneth Porter <shiva at sewingwitch.com> wrote: > > Is there some way to see the RPM changelog entries for a prospective yum > update? Ideally I'd like to see just the entries that are newer than the > version of the package I already have. > > I saw a new kernel in today's yum-cron email and I'd like to know what it's >

On Mon, Jan 7, 2019 at 5:49 PM Kenneth Porter <shiva at sewingwitch.com> wrote: > On 1/6/2019 10:51 PM, Kaushal Shriyan wrote: > > the product does not support the latest CentOS Linux > > release 7.6.1810 (Core) version as of now. > > What product and what, specifically, about 7.6 does it not support? > Could you not just exclude the incompatible packages? You could

I have a Bash script, currently run a couple times an hour from cron, that pulls data from an old Windows DB by rsync, converts it to SQL, and injects it into a MySQL DB for display in a LAMP-based app. (Make and Perl are also involved to minimize the number of tables touched and to clean up the SQL generated by Pxlib.) I'd like to add the ability to refresh the data immediately from the

with ipv6, you just allow the specific ports destined to the specific local machine(s) in on your WAN side, they don't need translating. same sort of rule as if you had a internet-facing service running on the routing system On Tue, May 26, 2020 at 11:55 AM Kenneth Porter <shiva at sewingwitch.com> wrote: > I finally got an ISP connection with working IPv6 and now I need to add

I found a bug in Webmin when using Webmin with SELinux in Permissive Mode. The author of Webmin, asked me, in their bug tracker on SourceForge: > Ok, thanks ... I see the problem. Webmin opens the log file > /var/webmin/miniserv.error and connects STDERR to it, then runs other > commands like iptables, which inherits the STDERR file descriptor. > This is generally a good thing, as any

On Fri, 6 Dec 2019 at 04:40, Kenneth Porter <shiva at sewingwitch.com> wrote: > > <https://www.bleepingcomputer.com/news/security/new-linux-vulnerability-lets-attackers-hijack-vpn-connections/> > Thanks for the heads up > This affects all VPNs and is a consequence of using "loose" reverse path > filtering for anti-spoofing. The default CentOS setting is

Once upon a time, Kenneth Porter <shiva at sewingwitch.com> said: > Perfect. I think the only other significant customizations I have > are lines to use the MIMEDefang and OpenDKIM milters. When last I > looked into migrating, I recall that Postfix handled milters just > fine. Milters work a little different under postfix IIRC... I haven't tried them (which is a little sad,

I was unable to build the whole Mumble system on CentOS but it's available for Fedora Development. I just wanted the server part on my headless server, and a static build is available from the Mumble project on Sourceforge. So I grabbed the Mumble SRPM from Fedora Development, the static build from Sourceforge, and stripped the spec file down to the minimum needed to just install the

What's available to remotely monitor services? What I'd like is something that can run scripts for each service to connect to a port and verify that it's up, and then send me an SMS message (phone text) to let me know which, if any, are down. Also, does a script exist that checks all the services listed by chkconfig and reports those that should be up but are down?

On Wed, 28 Sep 2016 16:11:23 +0000 Charish Patel via samba <samba at lists.samba.org> wrote: > Hi folks, > > I've been tasked with a migration of our servers and, as the subject > implies, part of it involves a PDC and BDC that were set up before my > time. However, I'm trying to accomplish a little bit more to give > myself, the sysadmin, a little bit more

--On Monday, November 18, 2019 6:06 PM +0100 Leon Fauster via CentOS <centos at centos.org> wrote: > I dont see if it was mentioned; but "network scripts" are deprecated in > C8. So better start the mental migration today before the packages get > removed totally :-) What file holds all those settings, now? As a rule, I prefer to edit text files to finding the right

> On Nov 20, 2019, at 16:17, Kenneth Porter <shiva at sewingwitch.com> wrote: > (How does systemd know the difference between generated files and hand-crafted ones? Can one just remove the fstab entry once the generated one is present? That would make migration easier.) Mount units created by the systemd generator are dynamically created each boot. You can create a persistent one in

On Wed, Apr 8, 2020 at 2:01 AM Kenneth Porter <shiva at sewingwitch.com> wrote: > Some useful info for the list. Release notes! ;) > > < > https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index > > > > _______________________________________________ > CentOS mailing list > CentOS at centos.org >

On 5/17/2017 11:26 AM, Adam Shostack wrote: > Also, procmail is way out of date, no longer maintained, and there are > "semi" known vulnerabilities that haven't been fixed. See > http://marc.info/?l=openbsd-ports&m=141634350915839&w=2 & the > wikipedia page. What alternatives exist for server-side filtering into folders? Is there anything as powerful?

I'm setting up certbot/letsencrypt to provide a certificate for dovecot and sendmail. Is it necessary to restart dovecot to load the new certificate, as shown in most examples I find in blogs? That seems rude to established connections. When does dovecot read the cert and key files? Once at startup or each time a connection requests SSL? Is there a preferred locking protocol when changing

--On Friday, October 25, 2019 6:39 PM -0700 Kenneth Porter <shiva at sewingwitch.com> wrote: > I may have to pull the coreutils-8.30-6.el8.x86_64 sources to see how ls > makes these decisions. I pulled the coreutils SRPM and it won't build because it wants texinfo and dnf says it doesn't exist, using either the builddep or search subcommands. (There may be other builddep

Found it. It happens from the process buffer inside Lugaru Epsilon. I think ls thinks it's doing a DIRED output instead of a shell output. Now I need to figure out why it thinks that. This wasn't happening in CentOS 7.