@black3dynamite Good call. I had to make some adjustments to SELinux.

I might put this on my project list one of these days.

@stacksofplates said in Open Firewall Ports on CentOS 7 and RHEL 7:

@coliver said in Open Firewall Ports on CentOS 7 and RHEL 7:

@stacksofplates said in Open Firewall Ports on CentOS 7 and RHEL 7:

@coliver said in Open Firewall Ports on CentOS 7 and RHEL 7:

@scottalanmiller said in Open Firewall Ports on CentOS 7 and RHEL 7:

@coliver said in Open Firewall Ports on CentOS 7 and RHEL 7:

Did anyone ever figure out if there was a way to setup files for firewalld? Or was the XML service files the way to go?

XML I think.

That's what I was afraid of. We're using IPTables on all of our OEL7 servers right now but I think moving to the default firewalld may be a good idea. I'll have to look into the XML config and see how much more difficult, if at all, it is over the IPTables file. It's a shame we can't just copy a single file around anymore but the XML files probably won't be too much more difficult.

Ya it's not bad at all. Here's the config from my Identity Management server. It's pretty similar to /etc/sysconfig/system-config-firewall on RHEL 6, just in zone specific XML files.

<zone> <short>Public</short> <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description> <service name="http"/> <service name="https"/> <service name="ntp"/> <service name="dhcpv6-client"/> <service name="kerberos"/> <service name="ldaps"/> <service name="ssh"/> <service name="dns"/> <service name="ldap"/> </zone>

Those services are predefined right? You can also build your own services via the same process.

Ya and you can define specific ports. I prob could have grabbed a better example.

No, I think I've got it just need to investigate actually setting these up.

@jaredbusch said in ScreenConnect High CPU Usage:

@scottalanmiller said in ScreenConnect High CPU Usage:

Have another system doing this this week. Been about eight hours so far. We are thinking that it is just doing the database rebuild and compression work. But it is insane how much CPU gets used for this.

Do you not have it doing this on a regular schedule?

Not my system, it was moved to a different server and had to be rebuilt.

@scottalanmiller said in Installing Linux Malware Detect and ClamAV on CentOS 7:

@travisdh1 said in Installing Linux Malware Detect and ClamAV on CentOS 7:

Any reason to use LMD instead of or in addition to rkhunter?

Doesn't rkhunter focus only on root kits?

Mostly, but this was the first time I remember hearing about LMD.

Looks like def more than minimal.

[root@bna-cmty ~]# yum -y install nano wget firewalld yum-cron epel-release Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.rackspace.com * epel: mirror.steadfast.net * extras: centos.mirrors.tds.net * updates: cosmos.illinois.edu Package nano-2.3.1-10.el7.x86_64 already installed and latest version Package wget-1.14-10.el7_0.1.x86_64 already installed and latest version Package firewalld-0.3.9-14.el7.noarch already installed and latest version Package epel-release-7-8.noarch already installed and latest version Resolving Dependencies --> Running transaction check ---> Package yum-cron.noarch 0:3.4.3-132.el7.centos.0.1 will be installed --> Finished Dependency Resolution

Not going to bother making a comparison, just noting that nano and wget are not part of a minimal install. Neither is epel, but firewalld actually is back in the minimal package if you go look at the monthly releases instead of the last "release" which was 1511.

@travisdh1 said in Install NextCloud 10.X on CentOS 7 Minimal:

@JaredBusch said in Install NextCloud 10.X on CentOS 7 Minimal:

Post to be updated with setting up SSL.

sudo yum install python-certbot-apache sudo certbot --apache

Accept defaults in certbot, and I forget the update options off the top of my head.

Just FYI for anyone finding this thread. The above does not work because there is not a vhost file.

Call certbot like this.

certbot --apache --email [email protected] --domain nexcloud.domain.com --agree-tos --non-interactive

Yes if you installed gnome, it probably installed gnome-boxes which is an application to manage vms so that's why it installed libvirt.

After some further testing I am beginning to think that the problem didn't have anything to do with the vnic's, though.

Yeah, probably nothing to do with the outage, hope you find the true problem.

@scottalanmiller Add virualhosts to the list too 😉

@scottalanmiller said in Installing a Basic LAMP Stack on CentOS 7:

@NashBrydges said in Installing a Basic LAMP Stack on CentOS 7:

@scottalanmiller I haven't yet. About to give it a try. Stuck to legacy since that was what I was reading everywhere.

Where is everywhere? Technet says to not use legacy.

https://technet.microsoft.com/en-us/windows-server-docs/compute/hyper-v/supported-centos-and-red-hat-enterprise-linux-virtual-machines-on-hyper-v

Legacy is a fallback driver that you never want to use, it's low performance and high overhead. If you needed that for CentOS, it would make Hyper-V a silly, non-production ready platform. But Hyper-V is a good, solid performer.

Not only that, but I install all of my CentOS 7 VM's as Generation 2 when on Hyper-V they work perfectly with default settings for everything except secure boot. Uncheck secure boot. Everything else is 100% default settings.

Got it. The node list needs to be master nodes only, but by default the non-master local 127.0.0.1 is left in the list. You have to remove it but keep the other nodes in for it to work.

@hobbit666 said in Install Zabbix on CentOS 7:

@VoIP_n00b said in Install Zabbix on CentOS 7:

https://computingforgeeks.com/how-to-install-zabbix-server-on-rhel-8-centos-8/

Followed that yesterday and all went OK

Thanks for feedback!

Great job @scottalanmiller and welcome aboard!

Hope you enjoyed the experience!

Now if you want to play with it, I recommend you to use our CLI (http://docs.openio.io/cli-reference) or you can deploy our S3/Swift implementation (https://github.com/open-io/oio-sds/wiki/Install-Guide---OpenIO-Swift-S3-gateway).

Feel free to send me some feedbacks, I'm here to help!

Guillaume.
Product Manager & Co-Founder @ OpenIO

@scottalanmiller said in Elastix login page gives error HTTP ERROR 500 when login:

@dbeato said in Elastix login page gives error HTTP ERROR 500 when login:

@denny said in Elastix login page gives error HTTP ERROR 500 when login:

systemctl stop firewalld disable selinux find /var/www/html/var/ -type d -exec chmod 755 {} ; find /var/www/html/var/ -type f -exec chmod 755 {} ;

🙂

Way to necro a post, security and firewall ar of the upmost importance. No system ever needs to be setup open this way....

I think that he was being tongue in cheek.

Okay, I didn't get it LOL

Question: have you tried setting up the DHCP server as the time master, and having the Centos system sync time to the DHCP server (with said DHCP server syncing to NIST or whatever time source you prefer) instead of the NTP Pool? That way theoretically DHCP server and Centos should be at the same time. Just a thought.