users December 2005

users@lists.fedoraproject.org

673 participants
1095 discussions

Re: Automatic email relay agent?
by John Gallagher 01 Dec '05

01 Dec '05

>Message: 3 >Date: Thu, 1 Dec 2005 16:07:36 -0600 (CST) >From: "Hongwei Li" <hongwei(a)wustl.edu> >The Symantec Antivirus checks port 25 for outgoing emails. So, if we could set port 587 for SMTP on the server side, then it may work with Symantec >antivirus. Is it true? If yes, how to set the port 587 on the server side for SMTP? Will that work anyway? >Thanks! >Hongwei By default it will set up SMTP using TLS on port 465. What SBC yahoo has published in the post above is irrelevant and I have used this with all of the Symantec products. Also, I can send you a detailed doc on integrating spam filters, ClamAV and also exporting the self signed keys that are generated below and importing them into Outlook for both Postfix and dovecot IMAP. If you want them email me off line and I will send them along. Good Luck, John ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ cat /etc/services |grep smtp smtp 25/tcp mail smtp 25/udp mail smtps 465/tcp # SMTP over SSL (TLS) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Generate the certificate files needed for TLS Fedora Postfix implementation: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ mkdir /etc/postfix/certs cd /etc/postfix/certs/ openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 <- Enter a password for smtpd.key. (something) chmod 600 smtpd.key openssl req -new -key smtpd.key -out smtpd.csr <- Again, enter your password for smtpd.key. Something <- Enter your Country Name (e.g., "DE"). US <- Enter your State or Province Name. California <- Enter your City. Felton <- Enter your Organization Name (e.g., the name of your company). Your Name <- Enter your Organizational Unit Name (e.g. "IT Department"). Nothing <- Enter the Fully Qualified Domain Name of the system (e.g. "server1.example.com"). systemname.domainname.com <- Enter your Email Address. your-email(a)someplace.com The following information is optional: <- Enter a challenge password. Not Entered <- Enter an optional company name. Not Entered openssl x509 -req -days 9999 -in smtpd.csr -signkey smtpd.key -out smtpd.crt <- Again, enter your password for smtpd.key. openssl rsa -in smtpd.key -out smtpd.key.unencrypted <- Again, enter your password for smtpd.key. mv -f smtpd.key.unencrypted smtpd.key openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 9999 <- Again, enter your password for smtpd.key. Something <- Enter your Country Name (e.g., "DE"). US <- Enter your State or Province Name. California <- Enter your City. Felton <- Enter your Organization Name (e.g., the name of your company). Your Name <- Enter your Organizational Unit Name (e.g. "IT Department"). Nothing <- Enter the Fully Qualified Domain Name of the system (e.g. "server1.example.com"). systemname.domainname.com <- Enter your Email Address. your-email(a)someplace.com +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Modify /etc/postfix/main.cf adding the following lines: +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ #smtpd_recipient_restrictions=permit_sasl_authenticated,permit_mynetworks,ch eck_relay_domains smtpd_tls_auth_only = no smtp_use_tls = yes smtpd_use_tls = yes smtp_tls_note_starttls_offer = yes smtpd_tls_key_file = /etc/postfix/certs/smtpd.key smtpd_tls_cert_file = /etc/postfix/certs/smtpd.crt smtpd_tls_CAfile = /etc/postfix/certs/cacert.pem smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Uncomment TLS and SASL lines in /etc/postfix/master.cf +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ #DO NOT SHARE THE POSTFIX QUEUE BETWEEN MULTIPLE POSTFIX INSTANCES. # # ========================================================================== # service type private unpriv chroot wakeup maxproc command + args # (yes) (yes) (yes) (never) (100) # ========================================================================== smtp inet n - n - - smtpd smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes submission inet n - n - - smtpd #Default -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes #628 inet n - n - - qmqpd pickup fifo n - n 60 1 pickup cleanup unix n - n - 0 cleanup #qmgr fifo n - n 300 1 qmgr qmgr fifo n - n 300 1 nqmgr tlsmgr fifo - - n 300 1 tlsmgr rewrite unix - - n - - trivial-rewrite bounce unix - - n - 0 bounce defer unix - - n - 0 bounce flush unix n - n 1000? 0 flush proxymap unix - - n - - proxymap smtp unix - - n - - smtp relay unix - - n - - smtp # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 showq unix n - n - - showq error unix - - n - - error local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - n - - lmtp # # Interfaces to non-Postfix software. Be sure to examine the manual # pages of the non-Postfix software to find out what options it wants. # # maildrop. See the Postfix MAILDROP_README file for details. # maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} # # The Cyrus deliver program has changed incompatibly, multiple times. # old-cyrus unix - n n - - pipe flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user} # Cyrus 2.1.5 (Amos Gouaux) cyrus unix - n n - - pipe user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user} uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient ++++++++++++++++++++++++++++++++++++++++++++++++++++++++ #Service postfix restart

1 0

SIOCADDRT?
by Jonathan Carpenter 01 Dec '05

01 Dec '05

I have setup one server for multiple ips. But when I bring eth0 down and then back up I get and error of: SIOCADDRT network is unreachable I am not exactly sure why I am getting this message everything seems to work fine. I can access anything from this server and I can access this server from anywhere. I have noticed some collisions and transmit errors. I am not sure what would be causing this. ifconfig returns eth0 Link encap:Ethernet HWaddr 01:10:26:19:12:B5 inet addr:10.1.4.2 Bcast:10.1.4.30 Mask:255.255.255.192 inet6 addr: fe80::214:22ff:fe17:15a9/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:248569 errors:0 dropped:0 overruns:0 frame:0 TX packets:71281 errors:66 dropped:0 overruns:0 carrier:66 collisions:180 txqueuelen:1000 RX bytes:80778446 (77.0 MiB) TX bytes:14645178 (13.9 MiB) Base address:0xecc0 Memory:fe6e0000-fe700000 eth0:0 Link encap:Ethernet HWaddr 01:10:26:19:12:B5 inet addr:10.1.4.1 Bcast:10.1.4.30 Mask:255.255.255.192 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 Base address:0xecc0 Memory:fe6e0000-fe700000 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:6762 errors:0 dropped:0 overruns:0 frame:0 TX packets:6762 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:274642 (268.2 KiB) TX bytes:274642 (268.2 KiB) route -n shows Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 10.1.4.0 0.0.0.0 255.255.255.192 U 0 0 0 eth0 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0 0.0.0.0 10.1.4.35 0.0.0.0 UG 0 0 0 eth0 Thanks, -- Jonathan Carpenter Linux System Administrator Windows System Administrator <The Unix Geek>

2 2

Xine
by Don Springall 01 Dec '05

01 Dec '05

I am trying to get xine dowloaded with a yum install xine* from the livna repo but am having no luck with droken dependencies listed below. I have development ,extra's-development, livna-testing and livna turned on. Does anyone know of a site where I can get Xine without the hassles ? Or how about plugins to get totem to play DVD's ? Error: Missing Dependency: libMagick.so.6 is needed by package xine-lib Error: Missing Dependency: libgs.so.7 is needed by package xine-lib Error: Missing Dependency: libWand.so.6 is needed by package xine-lib Error: Missing Dependency: libssl.so.5 is needed by package xine Error: Missing Dependency: libcrypto.so.5 is needed by package xine

3 2

building firefox 1.5 on FC4
by Jack Howarth 01 Dec '05

01 Dec '05

Has anyone managed to build the Firefox-1.5-1 src rpm from the development try under current FC4? I was able to build both the required cairo and nspr src rpms (with a slight mod to avoid the modular X11 changes). However I find that the firefox build fails at... c++ -o nsNativeThemeGTK.o -c -I../../../dist/include/system_wrappers -include .. /../../config/gcc_hidden.h -DNATIVE_THEME_SUPPORT -DMOZILLA_INTERNAL_API -DOSTYP E=\"Linux2.6.14-1\" -DOSARCH=\"Linux\" -DBUILD_ID=0000000000 -DUSE_POSTSCRIPT -I ../.. -I./. -I./.. -I./../shared -I./../x11shared -I/usr/X11R6/include -I/usr/in clude/freetype2 -I/usr/include/freetype2/config -I../../../dist/include/xpcom -I../../../dist/include/string -I../../../dist/include/widget -I../../../dist/i nclude/view -I../../../dist/include/util -I../../../dist/include/pref -I../../.. /dist/include/uconv -I../../../dist/include/unicharutil -I../../../dist/include/ locale -I../../../dist/include/necko -I../../../dist/include/content -I../../../ dist/include/layout -I../../../dist/include/gfx -I../../../dist/include -I/usr/i nclude/nspr4 -I../../../dist/sdk/include -I/usr/X11R6/include -fPIC -I/usr /X11R6/include -fno-rtti -fno-exceptions -Wall -Wconversion -Wpointer-arith -Wca st-align -Woverloa ded-virtual -Wsynth -Wno-ctor-dtor-privacy -Wno-non-virtual-dt or -Wno-long-long -pedantic -fshort-wchar -pthread -pipe -DNDEBUG -DTRIMMED -Os -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -m32 -march=i386 -mtune=pentium4 -fasynchronous-unwind-tables -DXTHREADS -D_REENTRANT -DXUSE_MTSAFE_API -I/usr/i nclude/gtk-2.0 -I/usr/lib/gtk-2.0/include -I/usr/X11R6/include -I/usr/include/at k-1.0 -I/usr/include/pango-1.0 -I/usr/include/freetype2 -I/usr/include/freetype2 /config -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/X11R6/incl ude -DMOZILLA_CLIENT -include ../../../mozilla-config.h -Wp,-MD,.deps/nsNativeTh emeGTK.pp nsNativeThemeGTK.cpp mozilla-decoder.cpp: In function 'int mozilla_decoders_init()': mozilla-decoder.cpp:211: error: 'pango_cairo_font_map_get_default' was not decla red in this scope gmake[5]: *** [mozilla-decoder.o] Error 1 gmake[5]: *** Waiting for unfinished jobs.... nsFontMetricsPango.cpp: In member function 'virtual PRInt32 nsFontMetricsPango:: GetPosition(const PRUnichar*, PRUint32, nsPoint)': nsFontMetricsPango.cpp:984: warning: suggest parentheses around assignment used as truth value ../../../dist/include/layout/nsIMenuParent.h:101: warning: 'DirectionFromKeyCode _lr_tb' defined but not used ../../../dist/include/layout/nsIMenuParent.h:114: warning: 'DirectionFromKeyCode _rl_tb' defined but not used gmake[5]: Leaving directory `/home/howarth/rhdev/BUILD/mozilla/gfx/src/gtk' gmake[4]: *** [libs] Error 2 gmake[4]: Leaving directory `/home/howarth/rhdev/BUILD/mozilla/gfx/src' gmake[3]: *** [libs] Error 2 gmake[3]: Leaving directory `/home/howarth/rhdev/BUILD/mozilla/gfx' gmake[2]: *** [tier_9] Error 2 gmake[2]: Leaving directory `/home/howarth/rhdev/BUILD/mozilla' gmake[1]: *** [default] Error 2 gmake[1]: Leaving directory `/home/howarth/rhdev/BUILD/mozilla' make: *** [build] Error 2 error: Bad exit status from /var/tmp/rpm-tmp.95074 (%build) Could this be a problem due to the recent upgrade to gcc 4.0.2? Jack

5 4

Re: need help with clamd, freshclam & clamav-milter setup...
by Mike Leahy 01 Dec '05

01 Dec '05

Hey there. I followed the installed readmes to get clamd/clamav-milter working, as you suggested. I 'think' clamd is working, but still nothing happens when I send the eicar virus through my sendmail. My sendmail.mc is below. As before, all the services run fine, after a bit of debugging. Clamav-milter was writing to the log when I had file permissions wrong on the clamd.milter/clamd.sock file - I fixed that, now it writes nothing to the log when the service starts, and there's no errors to see. Would it help to see the milter.conf file as well? Thanks for the help. Mike ============================================================================= DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl FEATURE(delay_checks)dnl FEATURE(masquerade_envelope)dnl FEATURE(allmasquerade)dnl FEATURE(masquerade_entire_domain)dnl FEATURE(`dnsbl', `ipwhois.rfc-ignorant.org',`"550 Mail from " $&{client_addr} " refused. Rejected for bad WHOIS info on IP of your SMTP server - see http://www.rfc-ignorant.org/"')dnl FEATURE(`dnsbl', `bl.spamcop.net', `"450 Mail from " $`'&{client_addr} " refused - see http://spamcop.net/bl.shtml"')dnl FEATURE(`dnsbl',`sbl.spamhaus.org',`Rejected - see http://spamhaus.org/')dnl LOCAL_DOMAIN(`mydomain')dnl MASQUERADE_AS(`mydomain')dnl MASQUERADE_DOMAIN(localhost)dnl MASQUERADE_DOMAIN(localhost.localdomain)dnl MASQUERADE_DOMAIN(mydomain)dnl MASQUERADE_DOMAIN(127.0.0.1)dnl MASQUERADE_DOMAIN(192.168.1.102)dnl MAILER(smtp)dnl MAILER(procmail)dnl INPUT_MAIL_FILTER(`clamav', `S=local:/var/run/clamd.milter/clamd.sock, F=, T=S:4m;R:4m')dnl define(`confINPUT_MAIL_FILTERS', `clamav')dnl ============================================================================= Original message: From: Alexander Dalloz <ad+lists uni-x org> To: For users of Fedora Core releases <fedora-list redhat com> Subject: Re: need help with clamd, freshclam & clamav-milter setup... Date: Thu, 01 Dec 2005 12:50:46 +0100 Am Do, den 01.12.2005 schrieb Mike Leahy um 12:40: > I'm wondering if anyone knows a fairly straightforward way to get ClamAV > running on FC4. I got the rpms through yum, but this did not actually > install a daemon for clamd. I was eventually able to hack a script into > the init.d folder that runs clamd, and I have clamav-milter running with Did you read through the documentation the packages ship with? The Fedora Extras packages have extra readmes. > sendmail. While I have all of this stuff running without errors > (services are all ok, as far as I can tell, sendmail is hooked into > clamav-milter). However I have two problems. > > First, I'm getting emails sent to root with the following warning: > > WARNING: update of clamav database is disabled; please see > '/etc/sysconfig/freshclam' > for information how to enable the periodic update resp. how to turn > off this message. > > I've looked at that file, and it's not very explanatory...does anyone > know how to get freshclam enabled? The clamav-update package ships with a cron job, running every 3 hours. As explained in the /etc/sysconfig/freshclam file you have to remove or comment the line FRESHCLAM_DELAY=disabled-warn to activate automatic signature updates. > Second, I tried sending the eicar test virus through my sendmail server, > but as far as I can tell, nothing was detected...and no logs 'at all' > are being generated by the clamav-milter service (even though the config > is telling it to). What do I need to get sendmail/clamav-milter working > in harmony? In this case, I'd almost prefer errors, so I'd have an idea > what might be the problem. Without seeing your sendmail.mc configuration regarding the clamav-milter setup it is hard to say what is going wrong. > Mike Alexander

2 1

Fw: Where is the IPTABLES rule set?
by Richard E Miles 01 Dec '05

01 Dec '05

Begin forwarded message: Date: Thu, 1 Dec 2005 10:31:20 -0500 From: Phil <plabonte(a)gmail.com> To: For users of Fedora Core releases <fedora-list(a)redhat.com> Subject: Where is the IPTABLES rule set? Hi I have enable the firewall in FEDORA CORE 4. Now I want to make some rule changes... where is the iptables file that is called that I can make changes in? Thanks. The rule set is kept in /etc/sysconfig/iptables -- Richard Miles Federal Way WA. USA registered linux user 46097

1 0

Re: Compusa 54MB Wireless G PC Card for Fedora4
by David G. Miller (aka DaveAtFraud) 01 Dec '05

01 Dec '05

mcfreemind(a)gmail.com wrote: > On 11/27/05, *David G. Miller (aka DaveAtFraud)* < dave(a)davenjudy.org > <mailto:dave@davenjudy.org>> wrote: > > mcfreemind(a)gmail.com <mailto:mcfreemind@gmail.com> wrote: > > > On 11/27/05, *Rey Cruz* < crxtasy_13(a)sbcglobal.net > <mailto:crxtasy_13@sbcglobal.net> > > <mailto: crxtasy_13(a)sbcglobal.net > <mailto:crxtasy_13@sbcglobal.net>>> wrote: > > > > On Sun, 2005-11-27 at 19:04 -0800, Min Chen wrote: > > > Dave, > > > > > > Thanks for the info! I did "lspci -v" as root but got > > "-bash:lspci: > > > command not found". > > > I have Kernel 2.6.11-1.1369_FC4 on an i686. > > > > > > Thanks, > > > Min > > > > > > It looks like you just did su instead of su - (gives full > path). I > > think you can just do /sbin/lspci -v as a regular user > instead of > > changing to root. > > > > Rey Cruz > > > > > > Thanks, Rey. > > /sbin/lspci works but I couldn't find any subsystem for > "wireless > > adaptor". > > > > -Min > > With the card inserted you can also try: > > sudo cardctl ident > > or su to root (su -) and try the same command. I had a similar > problem > with earlier FC4 kernels (no PCMCIA support for my chipset) so be > sure > you are running the most recent kernel. If FC4 still doesn't identify > the card, it's possible that your PCMCIA controller isn't supported. > The card may not be either but "cardctl ident" should tell you > something > > Dave > > I got "Socket 0: no product info available" so FC4 doesn't > identify the card. > Which kernel version did you use? > > -Min > !DSPAM:438abc93295674065619034! # uname -a Linux fubar.local.davenjudy.org 2.6.14-1.1637_FC4 #1 Wed Nov 9 19:01:56 EST 2005 x86_64 x86_64 x86_64 GNU/Linux You should be able to get the latest kernel by just doing "yum update" as long as you have another way to get on-line with the system (wire, built-in wireless and ndiswrapper). If not, you may want to look into pulling down the iso images for one of the unofficial FC4 updates that are available. Dave

2 1

CLI line speed test?
by Robert Bell 01 Dec '05

01 Dec '05

Is there a way to test line speed via cli? Something similar to DSL reports? -- Robert Bell Ne Desit Virtus

6 6

Re: newest(-3.19) selinux?
by Ian Malone 01 Dec '05

01 Dec '05

Christoph Wickert wrote: > Am Montag, den 28.11.2005, 22:34 -0600 schrieb Steven Stern: >> Ian Malone wrote: >> > I see there's an updated selinux-policy-targeted. >> > I'm currently 1.17.30-3.16, newest is 1.17.30-3.19 >> > Has anyone had any trouble with this? (i.e. can >> > I install now or should I wait till the weekend?) >> > >> >> Problems. >> >> After installation, I get this when running yum, between the download >> and the installation: >> >> Transaction Test Succeeded >> Running Transaction >> /etc/selinux/targeted/contexts/files/file_contexts: line 825 has >> invalid context system_u:object_r:lvm_exec_t >> /etc/selinux/targeted/contexts/files/file_contexts: line 1572 has >> invalid context system_u:object_r:slapd_lock_t >> /etc/selinux/targeted/contexts/files/file_contexts: line 1579 has >> invalid context system_u:object_r:slapd_cert_t >> > > # reboot >> Thanks, I've now updated (and rebooted), and not observed this yum problem. -- imalone

2 1

how to set standard system include directory
by Gavin Li 01 Dec '05

01 Dec '05

I want to add /usr/mylocal/include to standard system include directory, but don't want to use -I/usr/mylocal/include, How can I make it. The problem is I compiled library A, and installed to /usr/mylocal/include, and then compile library B, which depends on A, so I have to make sure configure program search headers in /usr/mylocal/include first, then other standard system include directory. My system has another version A which comes from the Fedora release, and I don't want B to use headers from this Fedora release. Thanks.

2 1

Jump to page: