users March 2012

users@lists.fedoraproject.org

247 participants
305 discussions

FTP and Firewalls
by Lázaro Morales 26 Mar '12

26 Mar '12

Hello, I have a question about FTP service and iptables. This is the default configuration for iptables on Fedora. I just added the 4th rule giving access to port 21 running vsftpd. # iptables -nL Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:21 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT) target prot opt source destination REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT) target prot opt source destination When I connect through a FTP client like `ftp` all work fine but when I try through a web browser for example or through `yum` isn't not work. When I remove the INPUT rules: # iptables -F INPUT all start working. I don't understand what is the problem and I don't wish remove the INPUT rules. Regards, Lázaro. Este mensaje de correo electrónico ha sido procesado por el servidor de Frioclima

3 3

fc15-login-ethernet
by Symersky, Henry 26 Mar '12

26 Mar '12

Dear all, On a system with FC15 and NFS connections, a normal user can login through the default login panel, work, and logout. When I login as root, after logout, the login screen freezes and the ethernet connection to the system is lost. Only reboot recovers that. And than the cycle goes on. Any suggestions how to fix that ? Thanks. Henry

1 0

Human readable document on NFS server on FC16
by Bill Davidsen 26 Mar '12

26 Mar '12

I had an NFS server motherboard go bad, and a quick replacement resulted in the drives coming up in all the wrong places, and no room to do a new install. I'm running at the moment off a USB boot to keep thinks going until I get an SSD so I can install there. A thumb drive on a USB 3.0 port is not a bad substitute for an SSD short term. Anyway, the issue is ID mapping from the server to the clients. The documentation is written using terms like "NFS4_user_object@REALM = local_user_object" and while I have the more recent clients working, machines lacking the rpc.idmap (aka nfs-idmap) capability aren't working. Since I have to support the existing clients rather than having the ability to force sensible upgrades, and many of the clients just don't do idmap, two questions. FIRST - is there a human readable document with examples which just show what client and server mods to /etc/idmapd.conf should be made such that joe(a)foo.demo.org gets access to the joe files on the server, and what the effect of those changes is are on the client and server sides. That's sort of medium critical, since I have that working. It's unclear if and how some of the terms map to OO languages. SECOND - is there a way to get the server to provide NFS3 service for the machines which were put in service before the even was an NFS4? Other than running a whole different server? I see that it is supposed to happen if /proc/fs nsf* are unmounted, but that creates breakage. Is there something simple to make that happen? All I need is some doc so I can be sure I've done things right, as opposed to hacked until they work. -- Bill Davidsen <davidsen(a)tmr.com> "We have more to fear from the bungling of the incompetent than from the machinations of the wicked." - from Slashdot

1 0

Changing timezone configuration
by Lázaro Morales 26 Mar '12

26 Mar '12

Hello, How after a fresh install of Fedora (without UI) it can be changed the timezone configuration? Is the file `/etc/adjtime` the correct? If is, What mean each value? Thanks in advance, Lázaro. Este mensaje de correo electrónico ha sido procesado por el servidor de Frioclima

3 5

pdfedit for Fedora 16
by Cristian Sava 26 Mar '12

26 Mar '12

Hi all, We needed pdfedit for Fedora 16 and is not avaiable anymore. It is present in Fedora <= 15 It was easy to rebuild pdfedit-0.4.5-4.fc16.x86_64.rpm and it works well. So the question: why was it discontinued for Fedora users? For those that need it here are the steps: 1 - get pdfedit-0.4.5-4.fc15.src.rpm 2 - extract from it pdfedit-4.5.4.tar.bz2 pdfedit.spec and pdfedit.desktop 3 - follow the steps shown in http://fedoraproject.org/wiki/How_to_create_an_RPM_package#SPEC_example and install the packages needed for building process Good luck! C. Sava

10 16

question on iptables, port 631 and CUPS
by Paul Allen Newell 26 Mar '12

26 Mar '12

Hello: I am noticing that when I install a printer on my local network, I get an entry added to iptables to the effect of: +++ -A INPUT -m state --state NEW -m udp -p udp --dprot 631 -j ACCEPT +++ It actually shows up multiple times, which makes it look like each time I reinstalled the printer to get things right it did an automatic entry without bothering to check if it already there. Everything I can find online makes it sound like this is "to be expected". However, I am seeing examples of manual additions of this rule adding a "-s 127.0.0.1". I take this to mean that it limits the request to "coming from my machine". Is this a good idea or even necessary? My knowledge of iptables (very limited but getting better) thinks that the default rule allows any source addr or destin addr and the only limitation is that it is restricted to port 631. It would seem that if I wanted to really limit it, I would make the source addr myself/machine and the destin addr limited to my LAN (192.168.2.*) --- I'm still searching my notes from this list for the proper syntax as I know I have been emailed that before. Am I understanding all this correctly? Thanks in advance, Paul

4 7

a new question on iptables and port 5353
by Paul Allen Newell 26 Mar '12

26 Mar '12

To all: With help from Craig and Reindl, I've understood what happens with the automated entry of port 631 for udp/tcp and how to rewrite to not make it a world access (in/out) rule. Waiting for next install of F16 to test when and how the automated entry happens. I saw this entry in iptables but decided to wait on asking about it until I understood port 631: +++ -A INPUT -m state --state NEW -m udp -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT +++ I know I didn't add it. From what I can tell, port 224.0.0.251 has to do with "multicast DNS". Everything I see about port 5353 involves Macs. My gut says that, since I have no Macs, this must be something that got added when I installed my printer and that CUPS/whatever did a blanket automated entry to cover any issues if I had a Mac on my net. Can anyone tell me if I am right (or, if not, what it really is). I feel I should be able to blast it from iptables without having any problems, but want some better minds to comment first. Thanks, Paul

4 4

peer-to-peer home folder synch
by Christopher Svanefalk 26 Mar '12

26 Mar '12

Assume I have a desktop and laptop both running F16+. What I want is a reasonable way for the two computers to keep their respective home folders in synch on request (does not need to be by a daemon i.e. Dropbox, although that would be preferred). Is there any software that accomplishes this, or another way to do it? -- Best, Christopher Svanefalk

5 5

Help with sound on Fc16
by don fisher 25 Mar '12

25 Mar '12

I am trying to find documentation on the alsa/pulse audio system. My goal is to set it up independent of gnome or KDE. If I run KDE the sound works. If I run twm or equivalent, it does not. Why is the sound configuration buried in the window manager? What do I have to do to implement the same function that KDE provides? Thanks, don

8 17

Re: Help with sound on Fc16
by stan 25 Mar '12

25 Mar '12

On Sun, 25 Mar 2012 12:05:41 -0700 don fisher <hdf3(a)comcast.net> wrote: > Thanks. After a reboot, it started working for an as yet unknown > reason. Perversity! ;-) > With my home audio system, I can debug things with a signal generator > starting at the speaker and working back to the source until I find > where the problem is. Is there a way to do similar debugging with > pulse audio and alsa? I would like to inject signals at the sound > card, the back if I knew what the input were. It is easier with RCA > hacks. USB inputs are still beyond my test set:-) (maybe a USB DVD > player?). I'm not completely clear what you want to do here. I think you want to treat a software path like a hardware path. The most basic is to maximize logging from sound applications. Or you could compile alsa-lib with debugging turned on and trace what happens when sound is sent through it using gdb. Or you could run a sound playing application with strace. In a GUI, most things are event driven, so the paths periodically exist and don't exist. I don't think it is possible to do what you want in the way you mean.

1 0

← Newer
1
...
7
8
9
10
11
12
13
...
31
Older →

Jump to page: