similar to: network disconnection after several hours

Thanks Simon, Of course we are not sure but we have a strong feeling : - We tried the restore in loop (14) and all worked fine when firewall is disabled.- We tried the restore several times but no more 2? succeed restore at a row when firewall is enabled. We also tried : - - iptables avec nftables en backend - - firewalld avec nftables en backend - - nft avec nftables en backend

> Hello, > Here is the context during the problem occurs : > > We have a new machine running on centos 8.From this machine, we restore a > postgresql dump on an other machine runnning on centos 7.After several > hoursof running, restore fails due to a disconnection (no route to > host).But, if we disable the firewall on centos 8, restore succeed. > Before having this new

I will check with firewall-cmd. Regarding hardware problem I have doubt as we use VMWare (but I keep in a corner of my mind).At this moment, we have compiled kernel and have installed it and have tried 4 restore passed.We need to do more tests and understand why 4 restores passed. Thanks Thomas Poty Le jeudi 28 mai 2020 ? 23:58:22 UTC+2, hw <hw at adminart.net> a ?crit : On

Hi, > Thanks Simon, > Of course we are not sure but we have a strong feeling : > - We tried the restore in loop (14) and all worked fine when firewall is > disabled.- We tried the restore several times but no more 2? succeed > restore at a row when firewall is enabled. > We also tried : > > - - iptables avec nftables en backend > - - firewalld avec nftables en

Are there any RPM wizards out there that know how to specify a different architecture for a subpackage in a spec file? I have a package that has a binary component and a non-binary component that I would like split into 2 packages one, the binary which is architecture dependant and the other 'noarch'. I haven't found a spec file that does this yet :-( Ross S. W. Walker

Joel Freeman wrote on 10/24/2018 9:06 PM: > On a similar note, Is there any reason to use Firewalld over IPTables? > > I'm incredibly new to Linux administration, and would like to your guys' > opinions on it. > > Many thanks, > Joel. My first impression was that firewalld and NetworkManager had a more desktop oriented/plug-n-play type feel compared to traditional

I see that there are a plethora of php extensions available as rpms, from the centos repositories, but not the php-mcrypt extension. I'm trying to stick to an rpm-only system and haven't found one that provides this, yet, for my 4.4 system. Is there any plan to add this to the repository in the near future (if at all)? Does anyone know where I can get it, otherwise? I see there is one for

We have a strange problem since we are using Samba 4. On our domain controller (Samba 4.1.4) we have a share called "programs" where we have installed all programs that our employees need. When a domain user (Windows 7 client) is connected round about 10 hours to our Samba DC, all open programs that are installed on the "programs" share seems to get lost the connection to

On 1/30/19 10:05 PM, Simon Matter via CentOS wrote: > Did you look at Shorewall? IMHO that's what is best used in such > situations and it works since many years now. shorewall doesn't support nftables, which is largely the point of firewalld:? The Linux firewall system is currently undergoing yet another deprecation and migration from iptables to nftables. firewalld should

On 9/24/19 4:23 PM, Richard W.M. Jones wrote: > The cover letter was rather brief, let me try to explain this change > some more ... > > When we created libnbd, we needed the definitions of various NBD > protocol things (like protocol message layouts, constants etc). We > copied a header file from nbdkit which provided these. Over time this > header file has diverged from

Despite that the migration of our applications comes with a significant workload. It seems that also every aspect of common services had changed with EL8. In EL8 firewalld uses nftables as backend. I wonder why iptables does not list any rules while also configured to use nftables as backend. # iptables -V iptables v1.8.2 (nf_tables) # firewall-cmd --list-all |egrep -o '22|ssh' ssh

hello, yesterday I tried to package dovecot-2.0beta5 + pigeonhole from Mercurial repository. I put pigeonhole as a subdir in the dovecot sourcetree. Following http://hg.rename-it.nl/dovecot-2.0-pigeonhole/raw-file/tip/INSTALL I called ./autogen.sh; ./configure --with-dovecot=..; make In the buildprocess I saw this output ( from autogen.sh ): Putting files in AC_CONFIG_AUX_DIR, `..'.

Once upon a time, Jonathan Billings <billings at negate.org> said: > 'iptables' and 'nftables' are competing technologies. In CentOS 8, > firewalld's backend was switched from iptables to nftables. So it > would be expected that the iptables command wouldn't have any rules > defined, it isn't being used by firewalld. That is partially incorrect.

initviocons package provides tools to resize the terminal. Having it in the appliance will allow SUSE users to have proper line wrapping in their terminal when using virt-rescue. --- appliance/packagelist.in | 1 + 1 file changed, 1 insertion(+) diff --git a/appliance/packagelist.in b/appliance/packagelist.in index f278f66..bbbe4b2 100644 --- a/appliance/packagelist.in +++

Hi list, I'm studying nftables. I'm using CentOS 8.1 (Gnome) and I disabled firewalld. I noticed that a default policy is created with tables and chains probably for firewalld. So I created a .nft script where I stored my rules with a flush for previous ruleset, then saved on /etc/sysconfig/nftables.conf and the enabled nftables service. Running the script with nft -f script.nft all

Hi There, I am using Libvirt 1.2.1 on Fedora 20. So, Libvirt is well installed and started but the weird thing is that the 'default' virtual network is not automatically defined and started, knowing that I can define/start it manually and everything goes fine. previously I was using libvirt 1.0.4 and the 'default' virtual network was defined/started at Libvirt startup. so,

On 7/27/07, dragoran <drago01 at gmail.com> wrote: > On 7/27/07, Matthias Clasen <mclasen at redhat.com> wrote: > > Given that test1 is around the corner, I thought it might be a good idea > > to give a little status update on the features that the desktop team has > > been working on for F8: > > what happend to compiz-fusion? I've been punting this

Hilko, This is an experimental patch showing how to split libguestfs into subpackages, so the main libguestfs0 doesn't depend on everything. Splitting packages only works for packages which are in the appliance (ie. in appliance/packagelist or supermin.d/packages). In this patch, only zfs-fuse [which previously caused trouble for users: https://bugs.launchpad.net/bugs/1053911] has been

On Thu, April 13, 2017 3:05 am, Nicolas Kovacs wrote: > Le 13/04/2017 ? 04:27, Robert Moskowitz a ?crit : >> But make sure to have SELinux enabled if you do not run it chrooted. >> >> I have mine running that way. > > I bluntly admit not using SELinux, because until now, I mainly used more > bone-headed systems that didn't implement it. Maybe this is the right

Hi everyone, I use Debian 9.5 Stretch and NFTABLES as a firewall. Using NFTABLES together with IPTABLES is not recommended, but libvirt depends on IPTABLES. Is it safe to run libvirt + kvm + virsh without IPTABLES? By the doc https://libvirt.org/firewall.html, IPTABLES are used for settingup filtering which I do not need. Thanks, Roman