All Questions

Filter by
Sorted by
Tagged with
2 votes
3 answers
698 views

nmap vulnerability scan reports " smtps on port 465 ssl-dh-params" vulnerability, on Ubuntu 20.04 webserver. How to close the vulnerabilty?

I am running an Ubuntu 20.04 LEMP (Linux, Nginx, MariaDb, PHP) email/web server. I am also doing some nmap vulnerability tests form my MacOS Client machine. On MacOS, I am using Oh My Zsh! with the ...
DanRan's user avatar
  • 123
2 votes
1 answer
420 views

How to restart sshuttle automatically

I am using sshuttle to route some traffic automatically via an ssh jump server. It works well but in some situations i.e. switching to another Wifi network the connection breaks an i'll have to ...
Chris's user avatar
  • 161
2 votes
1 answer
7k views

oracle database move current server to another machine problem

these day i really stress because of oracle server, im quite new to oracle. i have one old windows 2003 server which installed oracle 10.2.0 version. and i want to full backup of this oracle then ...
user avatar
2 votes
2 answers
11k views

OpenVPN on OpenVZ TLS Error: TLS handshake failed (google suggested solutions not helping)

this is my first post here, hope I made correct formating I've set up an openvpn server on an openVZ VPS. struggling for 2 days but connection always failed by: TLS Error: TLS key negotiation failed ...
chakoshi's user avatar
2 votes
0 answers
161 views

How do I find what domains are using my glue records?

My domain has two (long-since-disused by me) glue records. When I try to delete them, I am told by the domain-registration system that I can't because they are 'in use'. But they're not in use by any ...
dballing's user avatar
2 votes
1 answer
241 views

Ways to make deployment ready pre-compressed brotli files on windows server

I am dynamically generating HTML files, which I use for deployment. This is what I use to make these HTML file: function writeFile() Dim objStream Set objStream = CreateObject("ADODB....
MeSo2's user avatar
  • 274
2 votes
2 answers
3k views

What does Linux Server Virtualization mean?

Today, I went for an interview and I was told that for a few months, I will be doing Linux server virtualization. I kind of know what virtualization means since I use Virtualbox but I'm not entirely ...
James Tijua's user avatar
2 votes
1 answer
179 views

What is the difference between `return` in `server`, `if`, and `location`?

return in server block The Securely Deploy a Django App With Gunicorn, Nginx, & HTTPS uses the following HTTP-to-HTTPS redirect block: # Redirect HTTP to HTTPS server { server_name ....
toraritte's user avatar
  • 260
2 votes
2 answers
953 views

Apache 2.4 on Windows slow to respond to initial first request

I started serving pre-compressed Brotli files on my website https://www.filmfix.com/en/home/. They work; but ever since then, Apache is having response issues along all VirtualHost setups (not just ...
MeSo2's user avatar
  • 274
2 votes
2 answers
7k views

How to compare/diff ACLs on two directory trees?

I have two directory trees that are supposedly copies of each other. I need to compare not the contents of files but the permissions on them. Is there a tool that will compare two dir trees but ...
DaveBurns's user avatar
  • 205
2 votes
4 answers
755 views

Will international domain names permit "e=mc2.com" as a domain name?

I'm trying to understand the limitations of International Domain names... can someone explain what I can and can't do? Can I register a neat domain name like e=mc2.com? Are any of these symbols ...
makerofthings7's user avatar
2 votes
1 answer
2k views

KVM Networking - assign IP to each VM by outside DHCP

I am new to KVM and am having a problem with setting up the networking. I want each VM to get its IPs assigned by the network's DHCP, not the internal DHCP that the KVM keeps trying to set up. In ...
Hubert Oliver's user avatar
2 votes
2 answers
6k views

SSH config file setup for port forwarding AND SSH access to bastion

I have a publicly-accessible bastion host. I am presently able to SSH to the bastion with ssh bastion using this in my ~/.ssh/config: Host bastion IdentitiesOnly yes HostName bastion.foo.com ...
Nick K9's user avatar
  • 161
2 votes
1 answer
3k views

Good, inexpensive 1U pfSense Server Config for 100 Mbps throughput, some IPSec, few VPN

I had asked in another thread about a good 1U firewall. pfSense in combination with a SuperMicro Atom SuperServer was suggested & upvoted a bunch of times. The Atom D525 build with 4 GB RAM runs ...
AX1's user avatar
  • 1,289
2 votes
1 answer
2k views

Apache MPM workers stuck in G (gracefully finishing) growing - "scoreboard is full"

Running MPM worker, Apache 2.4.46, Debian 9 Gracefully finishing workers just grows over time, they dont seem to ever finish. Eventually I run out of capacity and get "scoreboard is full" ...
Hayden Thring's user avatar
2 votes
0 answers
2k views

Filtering traffic by MAC address with nftables

TL;DR: when spoofing MAC addresses, how can I make sure the real addresses won't be leaked to the rest of the network using nftables ? Context For network security training purposes I am currently ...
Kate's user avatar
  • 485
2 votes
2 answers
4k views

How to scan for log4j on Windows Server

I have a Windows Server 2012 R2 machine. What is the best way to search for log4j. Is it enough with a simple file search or can these files be used from inside a container. I have done a file search ...
Jan Lauridsen's user avatar
2 votes
3 answers
488 views

Do I need to deploy antivirus and anti-spyware software to all the PCs on my network?

I am already using antivirus on all our PCs, and, of course, we're behind a firewall. Does anti-spyware software like adaware still provide an additional benefit, or does modern antivirus/firewall ...
user avatar
2 votes
2 answers
3k views

Serial terminal over ethernet

Well, my idea is I would like to have access to grub over Ethernet/Internet, I've found two possible solutions: Converter RS232 to Ethernet (1) which looks like to have its own live, I mean it is ...
Ency's user avatar
  • 1,241
2 votes
1 answer
2k views

Is it possible, with Envoy Proxy, to apply an HTTP filter based on the URL?

As the title says, I would like an HTTP filter to apply only if the request is for a certain URL path. Doing this at the route level is not possible, because my route is defined like this: - match: ...
Pablote's user avatar
  • 207
2 votes
3 answers
2k views

Are there any tools to do change management with Active Directory / Group Policy?

We seem to be having a lot of problems related to "forgetting some mundane detail" while managing our Group Policy settings in Active Directory, so I am curious as to whether there are any well-...
Tim Lara's user avatar
  • 187
2 votes
1 answer
2k views

Finding deleted/imported files in SFTP server using logs

We have an SFTP server, I am trying to find out if some specific files have been deleted from the server or if they have even imported to the server or not. I'm going through the log files under /var/...
Matrix's user avatar
  • 261
2 votes
1 answer
1k views

Debian: Kernel update using APT - reboot required to take effect?

Suppose I update the kernel of a running Debian system using apt-get upgrade linux-image-amd64 to a higher minor version number (e.g., 5.10.10 to 5.10.11). Do I have to reboot the Debian server in ...
manifestor's user avatar
  • 6,409
2 votes
1 answer
489 views

What is principial difference between upcoming DNS SVCB RRs and good old SRV records? [duplicate]

In DNS there was SRV record defined long ago, which allowed to direct some services for a domain to different machines. For example, this is how I publish a LDAP service for a domain example.com ...
Nikita Kipriyanov's user avatar
2 votes
1 answer
4k views

OpenWrt allow IPv6 rule to access a server with global IPv6 on local area

First of all, I have a domain with dns configured to point to my device global address witch is set to static with my ISP gloabl prefix as xxxx:xxxx:xxxx:de01::3/64 in dhcpcd.conf. I'm using Openwrt ...
JB_DELR's user avatar
  • 121
2 votes
1 answer
3k views

Dsquery nested groups

How would I write a dsquery to get a list of all the members of a d-list, expanding any nested groups to get the members of those groups? I've written this: dsquery * -filter "(&(memberOf=cn=...)...
Simon's user avatar
  • 121
2 votes
1 answer
2k views

Will a 20 Amp Circuit Work for 2 servers with 2 PSU ea. needing 9.2 Amp Input Requirement per PSU?

I'm a bit new to the power calculations for electricity at a colocation facility. I have 2 HP DL580s that are pretty maxed out and this is what the HP power calculators gave me for each server. Total ...
Ian's user avatar
  • 21
2 votes
0 answers
641 views

iptables REDIRECT to Kubernetes NodePort causes request to hang

I am attempting to direct client traffic to a kubernetes cluster NodePort listening on 192.168.1.100.30000 (https port). Client's needs to make a request to 192.168.1.100.8000 so I added the following ...
tiger_groove's user avatar
2 votes
2 answers
8k views

How to enable http/2 from a Centos Package/yum?

I'm running the following version of Apache on Centos 7: httpd.x86_64 2.4.6-97.el7.centos.5 @updates httpd-tools.x86_64 2.4.6-97.el7.centos.5 ...
Aussie's user avatar
  • 37
2 votes
1 answer
854 views

How to change default firewalld behaviour to drop all established connections on reload

I have a web-server and sshd services running and listening for connections on their ports. What I want to achieve is when I change my zone from public to something that prohibits ports 22 or 443, my ...
Maksat Baigazy's user avatar
2 votes
1 answer
456 views

Set up to resolve local ips

I have an apache with following settings. 192.168.0.105:8080/site1 192.168.0.105:8080/site2 and, 192.168.0.103/blog I have 3 other computers in my network. 2 desktops and a laptop. On every ...
bcrawl's user avatar
  • 193
2 votes
1 answer
10k views

Debian 11 no longer automatically receiving static DHCP IP address, dhclient must be started manually

I am hosting a Debian 11 (no desktop environment) virtual machine on Windows Server 2012 with Hyper-V. This is on a company network with its own DHCP system and the MAC address of the VM is registered ...
ccj9874's user avatar
  • 21
2 votes
1 answer
197 views

writing your own openscap scan profile

I am currently checking the remote machine using the command oscap-ssh login@host 22 xccdf eval -- profile xccdf_org.ssgproject.content_profile_standart --report name.html. But the test templates don'...
Сергей Пешков's user avatar
2 votes
3 answers
840 views

MySQL keyring component (not plugin) not loading on server startup

Problem: There is no indication mysqld is actually reading the server manifest and/or the keyring component configuration file. Any help would be greatly appreciated. System Info: Ubuntu 20.04 ...
nerdgeekdork's user avatar
2 votes
1 answer
2k views

How to apply `fq_codel` to balance traffic in multiple VLAN connections?

I have an Ubuntu server connected to multiple VLAN networks over a single physical 1 Gbps network port. The network connections are configured via /etc/network/interfaces like this: auto lo iface lo ...
Mikko Rantalainen's user avatar
2 votes
1 answer
334 views

Nginx ratelimit on ALL files

I set up a ratelimit in my nginx config. Usually you would define a location and define the rate limit zone. I want the zone to apply on ALL files on the web server. limit_req_zone $binary_remote_addr ...
0xPenis's user avatar
  • 21
2 votes
1 answer
1k views

How can one run a prologue script as root in gridengine?

In one of our compute clusters, we have systems with unique hardware resources to which access is controlled by device-file permissions. Each node has two or four of these, and multiple CPU cores. We'...
mattdm's user avatar
  • 6,670
2 votes
3 answers
2k views

Cisco PIX connected to Active Directory for VPN

I have a Cisco PIX 515E that is currently acting as office's router. We have an MS domain, and utilize MS VPN for remote access. I would like to use the Cisco VPN functionality built into the PIX ...
JPrescottSanders's user avatar
2 votes
5 answers
6k views

Inheriting file ownership on linux

We have an ongoing problem here at work. We have a lot of websites set up on shared hosts, our cms writes many files to these sites and allows users of the sites to upload files etc.. The problem is ...
John Hunt's user avatar
  • 429
2 votes
0 answers
286 views

ssh via static route on different subnet hangs after approx. 30-40 s

Before I had this setup: LAN: 192.168.1.0/24 (GW/router: 192.168.1.1) -> router 192.168.1.111 -> LAN2: 192.168.88.0/24 First router/GW pfSense box, second router Mikrotik (with firewall etc.). ...
ppenguin's user avatar
  • 116
2 votes
2 answers
3k views

Application Load Balancer with AWS Elastic Beanstalk - Target Group

I'm using an Application Load Balancer with AWS Elastic Beanstalk After an AWS automatic server update, I was getting a 503 Service Temporarily Unavailable page. (only this, with near zero server ...
Ben in CA's user avatar
  • 143
2 votes
2 answers
5k views

AWS EC2: SSH security group inbound rules do not work

I have the following setup: Instance A: security group sgA sgA inbound rules contains: Rule1: * All traffic - All protocols - All port ranges - Source: sgB Rule2: * SSH - TCP - port 22 - Source: ...
Henry Henrinson's user avatar
2 votes
3 answers
2k views

revers proxy http -> https?

We have HTTPS test server with a self-signed SSL certificate. Is there any reverse proxy that will enable us to visit the page in HTTP, so our program can send HTTP request and not an HTTPS request??
Data-Base's user avatar
  • 185
2 votes
2 answers
3k views

Where is the Redis module for PHP on CentOS 8 (php-pecl-redis)?

I can't find the package php-pecl-redis on CentOS 8 with EPEL repository enabled. Apparently EPEL no longer provides it. I've only found it on REMI repository, but I would have to replace my entire ...
Rodrigo Renie's user avatar
2 votes
1 answer
2k views

Globally disable reverse DNS lookup for Kerberos on Windows?

I know one can disable the reverse DNS lookup made by individual client applications when calculating SPN of the called server during Kerberos authentication. There are various ways, e. g.: In Java: ...
Petr Bodnár's user avatar
2 votes
1 answer
6k views

How can I install the ngx_http_geoip2_module module ? on Centos

I installed the GeoIP package using yum. I got the geoIP files in the /usr/share/GeoIP/ folder. I need to add some rules on some countries in the: /etc/nginx/nginx.conf and to do that i need to load ...
Attila Naghi's user avatar
2 votes
0 answers
993 views

mdadm: failed to set writable for /dev/md126: Device or resource busy

yesterday my one of SSDs on my server came into a faulty state. Well at least mdadm --detail /dev/md126 said that. Also mdstat showed [2/1] [_U] on one of raid partitions (md126 specifically). I ...
N. G.'s user avatar
  • 21
2 votes
4 answers
8k views

setting minimum size of accepted rsa key

Is there a way to set the minimum size accepted by sshd as an RSA public key? I want to restrict users to using RSA keys that are generated with ssh-keygen -b 8196 or greater. I didn't see any ...
user avatar
2 votes
1 answer
10k views

Response packet on the same interface as incoming in LAN

Currently, I'm struggling with the following scenario: I have a server with 2 interfaces in 2 separate LAN subnets. IF1, IF2 I have a laptop which has an IP address from the first subnet When I try ...
libbkmz's user avatar
  • 151
2 votes
1 answer
641 views

Shared VPC and VPC Peering mix

On Google cloud, I have setup new three projects - dev, research and prod. So, then created an Shared VPC Host and three Service Projects as listed above. Also intend to have separate VPCs for each of ...
Rag K's user avatar
  • 21

15 30 50 per page
1
253 254
255
256 257
371