All Questions
18,509
questions
2
votes
3
answers
698
views
nmap vulnerability scan reports " smtps on port 465 ssl-dh-params" vulnerability, on Ubuntu 20.04 webserver. How to close the vulnerabilty?
I am running an Ubuntu 20.04 LEMP (Linux, Nginx, MariaDb, PHP) email/web server. I am also doing some nmap vulnerability tests form my MacOS Client machine. On MacOS, I am using Oh My Zsh! with the ...
2
votes
1
answer
420
views
How to restart sshuttle automatically
I am using sshuttle to route some traffic automatically via an ssh jump server.
It works well but in some situations i.e. switching to another Wifi network the connection breaks an i'll have to ...
2
votes
1
answer
7k
views
oracle database move current server to another machine problem
these day i really stress because of oracle server, im quite new to oracle.
i have one old windows 2003 server which installed oracle 10.2.0 version.
and i want to full backup of this oracle then ...
2
votes
2
answers
11k
views
OpenVPN on OpenVZ TLS Error: TLS handshake failed (google suggested solutions not helping)
this is my first post here, hope I made correct formating
I've set up an openvpn server on an openVZ VPS. struggling for 2 days but connection always failed by:
TLS Error: TLS key negotiation failed ...
2
votes
0
answers
161
views
How do I find what domains are using my glue records?
My domain has two (long-since-disused by me) glue records. When I try to delete them, I am told by the domain-registration system that I can't because they are 'in use'. But they're not in use by any ...
2
votes
1
answer
241
views
Ways to make deployment ready pre-compressed brotli files on windows server
I am dynamically generating HTML files, which I use for deployment.
This is what I use to make these HTML file:
function writeFile()
Dim objStream
Set objStream = CreateObject("ADODB....
2
votes
2
answers
3k
views
What does Linux Server Virtualization mean?
Today, I went for an interview and I was told that for a few months, I will be doing Linux server virtualization. I kind of know what virtualization means since I use Virtualbox but I'm not entirely ...
2
votes
1
answer
179
views
What is the difference between `return` in `server`, `if`, and `location`?
return in server block
The Securely Deploy a Django App With Gunicorn, Nginx, & HTTPS uses the following HTTP-to-HTTPS redirect block:
# Redirect HTTP to HTTPS
server {
server_name ....
2
votes
2
answers
953
views
Apache 2.4 on Windows slow to respond to initial first request
I started serving pre-compressed Brotli files on my website https://www.filmfix.com/en/home/. They work; but ever since then, Apache is having response issues along all VirtualHost setups (not just ...
2
votes
2
answers
7k
views
How to compare/diff ACLs on two directory trees?
I have two directory trees that are supposedly copies of each other. I need to compare not the contents of files but the permissions on them. Is there a tool that will compare two dir trees but ...
2
votes
4
answers
755
views
Will international domain names permit "e=mc2.com" as a domain name?
I'm trying to understand the limitations of International Domain names... can someone explain what I can and can't do?
Can I register a neat domain name like e=mc2.com?
Are any of these symbols ...
2
votes
1
answer
2k
views
KVM Networking - assign IP to each VM by outside DHCP
I am new to KVM and am having a problem with setting up the networking. I want each VM to get its IPs assigned by the network's DHCP, not the internal DHCP that the KVM keeps trying to set up. In ...
2
votes
2
answers
6k
views
SSH config file setup for port forwarding AND SSH access to bastion
I have a publicly-accessible bastion host. I am presently able to SSH to the bastion with ssh bastion using this in my ~/.ssh/config:
Host bastion
IdentitiesOnly yes
HostName bastion.foo.com
...
2
votes
1
answer
3k
views
Good, inexpensive 1U pfSense Server Config for 100 Mbps throughput, some IPSec, few VPN
I had asked in another thread about a good 1U firewall.
pfSense in combination with a SuperMicro Atom SuperServer was suggested & upvoted a bunch of times. The Atom D525 build with 4 GB RAM runs ...
2
votes
1
answer
2k
views
Apache MPM workers stuck in G (gracefully finishing) growing - "scoreboard is full"
Running MPM worker, Apache 2.4.46, Debian 9
Gracefully finishing workers just grows over time, they dont seem to ever finish. Eventually I run out of capacity and get "scoreboard is full" ...
2
votes
0
answers
2k
views
Filtering traffic by MAC address with nftables
TL;DR: when spoofing MAC addresses, how can I make sure the real addresses won't be leaked to the rest of the network using nftables ?
Context
For network security training purposes I am currently ...
2
votes
2
answers
4k
views
How to scan for log4j on Windows Server
I have a Windows Server 2012 R2 machine. What is the best way to search for log4j. Is it enough with a simple file search or can these files be used from inside a container. I have done a file search ...
2
votes
3
answers
488
views
Do I need to deploy antivirus and anti-spyware software to all the PCs on my network?
I am already using antivirus on all our PCs, and, of course, we're behind a firewall. Does anti-spyware software like adaware still provide an additional benefit, or does modern antivirus/firewall ...
2
votes
2
answers
3k
views
Serial terminal over ethernet
Well, my idea is I would like to have access to grub over Ethernet/Internet, I've found two possible solutions:
Converter RS232 to Ethernet (1) which looks like to have its own live, I mean it is ...
2
votes
1
answer
2k
views
Is it possible, with Envoy Proxy, to apply an HTTP filter based on the URL?
As the title says, I would like an HTTP filter to apply only if the request is for a certain URL path. Doing this at the route level is not possible, because my route is defined like this:
- match:
...
2
votes
3
answers
2k
views
Are there any tools to do change management with Active Directory / Group Policy?
We seem to be having a lot of problems related to "forgetting some mundane detail" while managing our Group Policy settings in Active Directory, so I am curious as to whether there are any well-...
2
votes
1
answer
2k
views
Finding deleted/imported files in SFTP server using logs
We have an SFTP server, I am trying to find out if some specific files have been deleted from the server or if they have even imported to the server or not. I'm going through the log files under /var/...
2
votes
1
answer
1k
views
Debian: Kernel update using APT - reboot required to take effect?
Suppose I update the kernel of a running Debian system using apt-get upgrade linux-image-amd64 to a higher minor version number (e.g., 5.10.10 to 5.10.11). Do I have to reboot the Debian server in ...
2
votes
1
answer
489
views
What is principial difference between upcoming DNS SVCB RRs and good old SRV records? [duplicate]
In DNS there was SRV record defined long ago, which allowed to direct some services for a domain to different machines. For example, this is how I publish a LDAP service for a domain example.com ...
2
votes
1
answer
4k
views
OpenWrt allow IPv6 rule to access a server with global IPv6 on local area
First of all, I have a domain with dns configured to point to my device global address witch is set to static with my ISP gloabl prefix as xxxx:xxxx:xxxx:de01::3/64 in dhcpcd.conf.
I'm using Openwrt ...
2
votes
1
answer
3k
views
Dsquery nested groups
How would I write a dsquery to get a list of all the members of a d-list, expanding any nested groups to get the members of those groups?
I've written this:
dsquery * -filter "(&(memberOf=cn=...)...
2
votes
1
answer
2k
views
Will a 20 Amp Circuit Work for 2 servers with 2 PSU ea. needing 9.2 Amp Input Requirement per PSU?
I'm a bit new to the power calculations for electricity at a colocation facility.
I have 2 HP DL580s that are pretty maxed out and this is what the HP power calculators gave me for each server.
Total ...
2
votes
0
answers
641
views
iptables REDIRECT to Kubernetes NodePort causes request to hang
I am attempting to direct client traffic to a kubernetes cluster NodePort listening on 192.168.1.100.30000 (https port).
Client's needs to make a request to 192.168.1.100.8000 so I added the following ...
2
votes
2
answers
8k
views
How to enable http/2 from a Centos Package/yum?
I'm running the following version of Apache on Centos 7:
httpd.x86_64 2.4.6-97.el7.centos.5 @updates
httpd-tools.x86_64 2.4.6-97.el7.centos.5 ...
2
votes
1
answer
854
views
How to change default firewalld behaviour to drop all established connections on reload
I have a web-server and sshd services running and listening for connections on their ports. What I want to achieve is when I change my zone from public to something that prohibits ports 22 or 443, my ...
2
votes
1
answer
456
views
Set up to resolve local ips
I have an apache with following settings.
192.168.0.105:8080/site1
192.168.0.105:8080/site2
and,
192.168.0.103/blog
I have 3 other computers in my network. 2 desktops and a laptop.
On every ...
2
votes
1
answer
10k
views
Debian 11 no longer automatically receiving static DHCP IP address, dhclient must be started manually
I am hosting a Debian 11 (no desktop environment) virtual machine on Windows Server 2012 with Hyper-V. This is on a company network with its own DHCP system and the MAC address of the VM is registered ...
2
votes
1
answer
197
views
writing your own openscap scan profile
I am currently checking the remote machine using the command oscap-ssh login@host 22 xccdf eval -- profile xccdf_org.ssgproject.content_profile_standart --report name.html.
But the test templates don'...
2
votes
3
answers
840
views
MySQL keyring component (not plugin) not loading on server startup
Problem:
There is no indication mysqld is actually reading the server manifest and/or the keyring component configuration file. Any help would be greatly appreciated.
System Info:
Ubuntu 20.04
...
2
votes
1
answer
2k
views
How to apply `fq_codel` to balance traffic in multiple VLAN connections?
I have an Ubuntu server connected to multiple VLAN networks over a single physical 1 Gbps network port. The network connections are configured via /etc/network/interfaces like this:
auto lo
iface lo ...
2
votes
1
answer
334
views
Nginx ratelimit on ALL files
I set up a ratelimit in my nginx config. Usually you would define a location and define the rate limit zone. I want the zone to apply on ALL files on the web server.
limit_req_zone $binary_remote_addr ...
2
votes
1
answer
1k
views
How can one run a prologue script as root in gridengine?
In one of our compute clusters, we have systems with unique hardware resources to which access is controlled by device-file permissions. Each node has two or four of these, and multiple CPU cores. We'...
2
votes
3
answers
2k
views
Cisco PIX connected to Active Directory for VPN
I have a Cisco PIX 515E that is currently acting as office's router. We have an MS domain, and utilize MS VPN for remote access. I would like to use the Cisco VPN functionality built into the PIX ...
2
votes
5
answers
6k
views
Inheriting file ownership on linux
We have an ongoing problem here at work. We have a lot of websites set up on shared hosts, our cms writes many files to these sites and allows users of the sites to upload files etc..
The problem is ...
2
votes
0
answers
286
views
ssh via static route on different subnet hangs after approx. 30-40 s
Before I had this setup:
LAN: 192.168.1.0/24 (GW/router: 192.168.1.1) -> router 192.168.1.111 -> LAN2: 192.168.88.0/24
First router/GW pfSense box, second router Mikrotik (with firewall etc.).
...
2
votes
2
answers
3k
views
Application Load Balancer with AWS Elastic Beanstalk - Target Group
I'm using an Application Load Balancer with AWS Elastic Beanstalk
After an AWS automatic server update, I was getting a 503 Service Temporarily Unavailable page. (only this, with near zero server ...
2
votes
2
answers
5k
views
AWS EC2: SSH security group inbound rules do not work
I have the following setup:
Instance A:
security group sgA
sgA inbound rules contains:
Rule1: * All traffic - All protocols - All port ranges - Source: sgB
Rule2: * SSH - TCP - port 22 - Source: ...
2
votes
3
answers
2k
views
revers proxy http -> https?
We have HTTPS test server with a self-signed SSL certificate. Is there any reverse proxy that will enable us to visit the page in HTTP, so our program can send HTTP request and not an HTTPS request??
2
votes
2
answers
3k
views
Where is the Redis module for PHP on CentOS 8 (php-pecl-redis)?
I can't find the package php-pecl-redis on CentOS 8 with EPEL repository enabled. Apparently EPEL no longer provides it.
I've only found it on REMI repository, but I would have to replace my entire ...
2
votes
1
answer
2k
views
Globally disable reverse DNS lookup for Kerberos on Windows?
I know one can disable the reverse DNS lookup made by individual client applications when calculating SPN of the called server during Kerberos authentication. There are various ways, e. g.:
In Java: ...
2
votes
1
answer
6k
views
How can I install the ngx_http_geoip2_module module ? on Centos
I installed the GeoIP package using yum. I got the geoIP files in the /usr/share/GeoIP/ folder. I need to add some rules on some countries in the: /etc/nginx/nginx.conf and to do that i need to load ...
2
votes
0
answers
993
views
mdadm: failed to set writable for /dev/md126: Device or resource busy
yesterday my one of SSDs on my server came into a faulty state. Well at least mdadm --detail /dev/md126 said that. Also mdstat showed [2/1] [_U] on one of raid partitions (md126 specifically). I ...
2
votes
4
answers
8k
views
setting minimum size of accepted rsa key
Is there a way to set the minimum size accepted by sshd as an RSA public key?
I want to restrict users to using RSA keys that are generated with ssh-keygen -b 8196 or greater.
I didn't see any ...
2
votes
1
answer
10k
views
Response packet on the same interface as incoming in LAN
Currently, I'm struggling with the following scenario:
I have a server with 2 interfaces in 2 separate LAN subnets. IF1, IF2
I have a laptop which has an IP address from the first subnet
When I try ...
2
votes
1
answer
641
views
Shared VPC and VPC Peering mix
On Google cloud, I have setup new three projects - dev, research and prod. So, then created an Shared VPC Host and three Service Projects as listed above. Also intend to have separate VPCs for each of ...