CentOS 5 :: Unnecessary Processes For Firewall ?
Jul 20, 2010I'm riding just a firewall. these are the processes running.
I want to remove scsi_eh_x processes, and I have only disk sata.
How do I remove these processes permanently?
I'm riding just a firewall. these are the processes running.
I want to remove scsi_eh_x processes, and I have only disk sata.
How do I remove these processes permanently?
First time Ubuntu user (used to be on debian earlier).
I like that everything works out of the box (had to install codecs etc, but thats standard); but I dont like that there are 260 processes running. Is there a utility to stop unnecessary processes from running in Ubuntu 10.10? I used rcconf but there did not seem to be a whole lot of startup processes that were enabled. Yet somehow I am running 260 processes now.
Even if I log into fluxbox, I get 200+ processes running.
I am getting a strange problem with my new machine (P4 3Ghz, 1 GB RAM DDR333). The machine is an industrial PC. Firstly I had installed Fedora Core 2 on it. It ran superbly without any problem. I tried to load Redhat Enterprise Linux WS4 (Update 2 as well as Update 5) on it. But the PC was giving high CPU utilization for each and every task. With-out any application running both the cores shows utilization around 10 %. But when i try to my application, the CPU utilization in one of the cores goes to 100 % for majority of the time. This is causing my appilcation to run slowly when compared to the same application running on the same machine under fedora core 2. (CPU Utilization around peak 17 % in either of the cores in Fedora Core2) Recently I installed Cent OS 5 on it. But the behavior of the PC remains the same as of Redhat Enterprise Linux WS4. Some-where on the forums I had read about the RAM size. So i tried to downgrade the RAM from 1 GB to 256 MB. But the problem remains the same. I think it has to do with some kernel tweaking.
View 8 Replies View RelatedMy server is really slow. When I did a top -c or ps aux, below shows up. Shouldn't there be only one? Shall I kill all those processes and leave only one?
3135 nobody 15 0 15900 5232 1860 S 0.0 0.1 0:00.17 /usr/local/apache/bin/httpd -k restart -DSSL
3173 nobody 16 0 15900 5244 1848 S 0.0 0.1 0:00.05 /usr/local/apache/bin/httpd -k restart -DSSL
3174 nobody 15 0 15900 5232 1860 S 0.0 0.1 0:00.15 /usr/local/apache/bin/httpd -k restart -DSSL
5153 nobody 15 0 15900 5228 1860 S 0.0 0.1 0:00.04 /usr/local/apache/bin/httpd -k restart -DSSL
7598 nobody 16 0 15900 5228 1872 S 0.0 0.1 0:00.20 /usr/local/apache/bin/httpd -k restart -DSSL .....
I just set up a test CentOS 5.4 host to run the Freeswitch IP PBX. Although the process is up and running and I can connect to the host through SSH, none of the IP phones can connect to Freeswitch:
Does someone know if CentOS comes with a firewall by default that would allow SSH connections but nothing else? "ps aux" returned nothing that looked like a firewall process.
I'm at my wits end at this point.
CentOS 5
iptables 1.4.1.1
APF 9.7
Webmin 1.4.80 (yes i can be a gui noob at times)
I'm currently running a dedicated server that hosts a couple of sites and runs a game server or two. I was using iptables on its own for a while, but recently I'm a target of all sorts of attacks (typically aimed directly at the gameserver on port 7777. UDP flood attacks, etc). I'm also seeing an spike in foreign spam, SSH brutes, and a few people in Turkey thought it would be cute to download files over and over and over I have decided to start banning entire countries, using the subnets listed here [URL]... I'm trying to block Central and South america (189,190,200,201.x.x.x), China, Ukraine, Turkey, Iran, Spain and Italy. I do this because a majority of the traffic from those areas are usually up to no good.
I installed APF so I could easily add these ranges in deny_hosts.rules and be done with it. I added the ranges, which turned out to be too many, and the system tanked. I decreased the amount of ranges to just 4:
189.0.0.0/8
190.0.0.0/8
200.0.0.0/8
201.0.0.0/8
Restarted APF and it loaded fine. Do an apf --list and iptables --list and it shows those 4 ranges as blocked. The only issue...I have people from 190.x and 200.x connecting to the gameserver and PLAYING. Its as if the firewall isnt there. Also, adding those ranges to /etc/hosts.deny (or whatever) doesn't block them either.
I add one of my own ips and I get blocked instantly. WTF?? I look in the iptables for webmin, and it shows an empty firewall. I do iptables --list and it shows the ranges I added in APF. I'm looking at building (or whatever its called) an fresh iptables with the geoip module added in. [URL]...
I've never done anything like this, and I don't want to kill the box. I also don't want to spend the effort if 1) something is wrong with my system to begin with and 2) the geoip module doesn't work. geoip module aside....how exactly should i configure the firewall? Empty iptables completely and then rely on APF for everything? Oh and heres another tidbit: I tried this before 2 years ago and it used to be that anything I put in APF would show when i looked at iptables using the webmin module. Thats no longer the case now. That was also on CentOS 4 when it did that. I don't know if moving to 5 is whats preventing it now.
In a nutshell, I'm new at this and I'm being inundated with terrible people trying to do terrible things and I'm ready to just give up. Can someone just give me a quick rundown on:
1) how to test that my firewall is actually firewalling
2) how I should configure the/a firewall on this CentOS5. Not too specific, I just want to know if I should empty iptables then load apf, should i not bother with APF (i like it when it works), is there a specific order of doing things?
I'm stuck at server with OpenNA installed, which has no relation with CentOS but If anyone knows GIPTABLES firewall to point me somewhere I can get configuring.I need to open 2 custom ports but I just can't get it to work.
View 2 Replies View RelatedI've got a home firewall setup running CentOs 5.2. It's got two wired interfaces: inside and out and I'm successfully using iptables to filter and nat traffic in and out as expected. Recently I've added an AirLink101 AWLH4030 wireless nic that is recognized as the AR5212/AR5213 chipset. It appears that I have everything configured properly and I've eradicated every error encountered so far. Currently, I have my ath0 interface up and essid set but am unable to connect or even see the AP from my laptop. Here is a metric shit ton of debug/output for any networking gurus to ponder over:
Ethernet Devices:
Code:
alias lsEth='lspci -v | grep "Ethernet" -A 7'
Code:
lsEth
01:09.0 Ethernet controller: VIA Technologies, Inc. VT6105 [Rhine-III] (rev 86)
Subsystem: D-Link System Inc Unknown device 1406
Flags: bus master, stepping, medium devsel, latency 64, IRQ 209
[code]...
I have centos with software firewall enable , but i want to set up hardware firewall can anybody guide how to install and configure hardware firewall in centos
View 3 Replies View Relatedhow to setup centos to act as router and firewall at our office i just installed the os now i dont know where to go from here i have all the isp adresses,dns and gateway any assistance coz am really interested in learning linux thanxs iused some instructions on this site [URL] and when i try the /sysctl.config on my terminal now i get the message permission denied
View 5 Replies View RelatedI have installed VMWare inside Windows Server 2003 and inside the VMWare I have Installed CentOS, I am successfully running a web server for local staff to access in this i use Webmin, mySQL, PHP.. my server is working normally.
Now I want to access the MySQL server from another WinXP PC (I have installed MYSQL ODBC 5.1 driver) to access the database to create ODBC connection, unfortunately I can not connect it says "Connection Failed: [HY000][MySQL][ODBC 5.1 Driver]Can't connect to MySQL server on '192.168.0.3' (10060)" I think this is firewall issue or its CentOS is not letting the connection to come in.
My host is blocking port 3960 which I need to use for an SVN server, they are telling me that I will have to install my own firewall. I've not done this before and am not sure of what to do or whether anything I can install will be enough protection.
View 2 Replies View RelatedI am running a centOS 5.5 server and can't synchronize with time servers via ntpd. My server sits behind a firewall with only port 80 open and I suspect this is the issue. Do I need to open other ports to connect to the time servers at [URL]?
View 4 Replies View RelatedHaving just successfully installed fallout 3 (yippee), one question arises.
Is it possible to turn off (and eventually back on) all superfluous process during gaming ? As an ex-win xp user, there was an app called "game booster", i think, that did this.
The process i have in mind are things like fancy compiz settings, dockbar X, and any upgrades that might be taking place in the background.
Again, it is important that i can restart these functions after kicking super-mutant ***.
Small server running 5.3 - stock postfix configured to use Maildir. Dovecot configured but both pop and imap ports blocked by firewall. Access to mail is via Squirrelmail via https. Configured to virus scan via ClamAV. Works just fine. Now I want to add procmail filtering. So I create these two files - ~/.forward and ~/.procmailrc in my user home dir: "|exec /usr/bin/procmail -f- || exit 75 #mpeters"
View 1 Replies View RelatedI have just installed CentOS and it is working fine!I made a masquerade with the document there: I didn't used the script, because right now, I do not completely understand it, and obviously I am not modifying anything by leaving it like that.I was using Mandriva before and I am used to graphical tools My questions are:I add the following lines in my iptables:
[root@localhost ~]# service iptables stop
[root@localhost ~]# iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
[root@localhost ~]# service iptables save
[code]....
I am running KDE 4.4.2 release '241'. I have no clue if that's the latest dev version, but I do know that each day I have to install a 150MB KDE update, so it probably is. Either way it's pretty annoying. The way opensuse handles repositories is different than Ubuntu's, so somehow I ended up creating duplicates too. So basically, I want to remove any duplicates and also stop receiving the daily KDE updates.You can ignore the google repositories. My repositories
[code]...
I'm using ubuntu-linux ( ubuntu 9.10)I use utility autoscan network to scan the systems available in local area network of my hostel.It shows my open TCP ports : like Ssh , Smtp , Http , NetBios-ssn , Microsoft-ds , ipp , Mysql , Postgres.Are all these services need to run all the time or I can manage the ports.Don't know much about it just want to know these ports are by default open or I can manage them.
View 7 Replies View RelatedI suspect this is an initial configuration bug. All firewall logs seem to be going to all
three files. That causes a lot of clutter in the log files, and makes it difficult to see whether there are any serious problems being logged.
I am learning to setup firewall in my home for that i have selected four system(sys1,sys2....sys4) for testing .I have configured sys2 to act as a firewall with two NIC. sys3 and sys4 are inside the firewall . sys1 is not connected to firewall for testing purpose.
the IP assignments are follows :
sys1 : ( fedora, not connected to firewall i am thinking, But i am not sure )
IP : 192.168.2.1 ,
gateway : blank
dns1 : blank
dns2 : blank
sys2 firewall ,IPTABLES )
code....
what happened is that sys1(not connected to firewall) can ssh to sys4(connected,inside firewall),since the rules are written not to ssh form sys1 to sys4..
then I came to know whatever the request I give, It directly goes as sys1 --> sys4. Not as sys1-----> sys2(firewall)---> sys4 .and the firewall is not filtering and processing anything for both inbound and outbound (i think it's my mistake some where). the requests are directly going inside without firewall.
In order to preserve resources and to have more secure machine I want to disable services which are of no use to me. But being relatively new to Linux I want to make sure I'm disabling those really unnecessary and that my actions wont have a negative impact on overall system health / usability.code...
View 13 Replies View Relatedi finally managed to achieve minimal 11.2 system (following tutorial on this forum) but now whenever i try to install additional packages using yast, it automatically selects a whole bunch of unnecessary software. For example, installation of "radeonhd" tries to pull Mozilla Sunbird from repositories.
That's unacceptable behavior and no wonder system gets bloated over time. Is there a way to set yast to pull only crucial dependencies with selected packages (like apt-get's recommended and suggested packages)?
I'd like to eliminate anything unnecessary from my Ubuntu Server box (on a Compact Flash IDE drive) and set it up to boot into RAM. I've seen ways of getting a live CD to do this and seen other distributions that are designed to do this, but since I'm familiar with Ubuntu, I'd like to be able to get rid of my swap space and make the existing installation boot to RAM.
View 2 Replies View RelatedI've got a dual boot PC with windows 7 & Ubuntu. I had installed Ubuntu 10.04 & recently upgraded it to 10.10. Now I have these entries in the boot menu.
Ubuntu with linux 2.6.35-22-generic
Ubuntu with linux 2.6.35-22-generic (recovery mode)
Ubuntu with linux 2.6.32-21-generic
Ubuntu with linux 2.6.32-21-generic (recovery mode)
Memory test (memtest 86+)
Memory test (memtest 86+, serial console 115200)
Windows 7 (loader) (on/dev/sda1)
First & second entries listed above don't work. How can I remove them safely?
I have a JVC Everio video camera that records directly DVD compliant mpeg files. Does anyone have a solution how to prevent re-rendering the files since that takes a lot of time and usually the end result is worse than the original one...If PiTiVi does not enable this can anyone propose some other program to do this?
View 2 Replies View RelatedI have taken the largest chill pill I could find and have reinstalled nutty into a spare partition with a view to taking a more forgiving approach... i'll mostly stand by the rants for the time being... Has anyone found a simple (or complex for that matter - I just want it gone!) way to disable the randomly activated lefthand vertical taskbar in unity?It really is an unnecessary irritation when I can put my essential apps down the bottom where they belong with docky (thus reducing mouse mileage on my widescreen) and have everything else a WinKey+App away.Interesting that typing "Configuration" into the search box returns 0 results on a default natty install **** Additional ****Tweaking the Unity Plugin through Advanced Compiz Manager (and gconf-editor) leads me believe that I am after a "feature" that is not available:in gconf-editor:/apps/compiz-1/plugins/unityshell/screen0/options/launcher_hide_modeis the key I would like to have an additional option of "Always" added the currently available options being "0 = Never, 1 = Autohide, 2 = Dodge Windows, 3 = Dodge Active Window"
View 9 Replies View RelatedI'm trying to build firewall on Debian with 'Firewall Builder'. But it won't let me compile and run unless one interface is set as management. There are two interfaces on my computer: 'eth0' and 'lo'
I don't want to be able to configure firewall remotely, so could I use 'lo' as 'management interface'?
I'm using virtual network (NAT network) for my domU.When I change dom0's firewall setup, the domU will fail to connect to Internet anymore.So far, the only way to bring the network back is reboot dom0 !I try to restart service network and libvirtd on dom0 ... it doesn't work.How can I bring the domU network back without reboot dom0 ?
View 1 Replies View RelatedI was able to install opensuse 11.2 wihtout problems from LiveCD. After installation I noticed there is a cross in Network Connection. But in Live CD it's not there. I opended Network Manager and setp up my DSL Pppoe connecton and it's working. Hope this behaviour is normal ?I am little confused regarding software update. In Yast control centre:
1. Software repositories I will not have to touch default is ok ?
2. Just select Online Update and all the updates will be taken care
3. Is there any settings to avoid unnecessary software downloads
I've been using Ubuntu for quite some time now and my context menu has become cluttered with a lot of applications that I don't use or menu items that I have never used - and most likely won't use.
So I want to remove them, or at least disable them.
So, after searching Google (irrelevant or old results) so then I tried Google with [URL] but nobody has had their problem solved.
Edit: I've looked through GConf-Editor, found nothing, and have looked through the directories .Cache/.Config/.Local/.Nautilus in my home diretory and nothing came up of relevance in the first three and the .Nautilus directory was empty.