49
votes
3answers
3k views

Assessing equipment damage following a lightning strike - Should I have planned more?

One of my client's sites received a direct lightning hit last week (coincidentally on Friday the 13th!). I was remote to the site, but working with someone onsite, I discovered a strange pattern of ...
31
votes
5answers
12k views

Debugger for Iptables

I'm looking for an easy way to follow a packet through the iptables rules. This is not so much about logging, because I don't want to log all traffic (and I only want to have LOG targets for very few ...
26
votes
5answers
19k views

How do I differentiate “fake RAID” from real RAID?

The Ubuntu wiki page on FakeRaid says the following: [A] number of hardware products ... claim to be IDE or SATA RAID controllers... Virtually none of these are true hardware RAID ...
15
votes
7answers
20k views

How can I determine what is taking up so much space? [duplicate]

I was using df -h to print out human readable disk usage. I would like to figure out what is taking up so much space. For instance, is there a way to pipe this command so that it prints out files that ...
20
votes
3answers
82k views

How to run VMWare ESX or ESXi in a virtual machine?

Can VMWare ESX or ESXi be installed and used inside a virtual machine? It can be installed inside VMWare Workstation or Server, but then it doesn't work; the main symptoms are: It runs REALLY ...
19
votes
2answers
19k views

How to interpret output from Linux 'top' command?

Following a discussion made HERE about how PHP-FPM consuming memory, I just found a problem in reading the memory in top command. Here is a screenshot of my top just after restarting PHP-FPM. ...
18
votes
3answers
7k views

Naming a new Active Directory forest - why is split-horizon DNS not recommended?

Hopefully, we all know what the recommendations for naming an Active Directory forest are, and they're pretty simple. Namely, it can be summed up in a single sentence. Use a subdomain of an ...
3
votes
1answer
3k views

Openfiler iSCSI performance

Hoping someone can point me in the right direction with some iSCSI performance issues I'm having. I'm running Openfiler 2.99 on an older ProLiant DL360 G5. Dual Xeon processor, 6GB ECC RAM, Intel ...
3
votes
1answer
735 views

Excessive number of sleeping processes in CentOS - howto diagnose? [closed]

I have a a large number of sleeping processes, about 600, the majority of which are Apache processes. Should I kill all these sleeping processes, or will that make Apache fail completely? Why are ...
2
votes
4answers
5k views

How can I stop a currently active DDoS attack? [duplicate]

My VPS is under a DDoS attack. I cannot access RDP, and I cannot take it offline, or access it in any way at all. What can I do? They are not trying to bruteforce, just trying to stop access to the ...
16
votes
4answers
10k views

How is Windows Server different from regular Windows?

I can run IIS on a normal installation, what is so different about windows server?
4
votes
1answer
1k views

How to maintain PCI compliance on a LAMP server when repositories don't keep up with versions

We run Ubuntu Lucid 10.0.4 as the foundation of our LAMP environment. We are trying to become PCI compliant so that we can pass CC info through our server. We have run some third-party scans on our ...
121
votes
12answers
123k views

How to set up Nginx as a caching reverse proxy?

I heard recently that Nginx has added caching to its reverse proxy feature. I looked around but couldn't find much info about it. I want to set up Nginx as a caching reverse proxy in front of ...
43
votes
15answers
19k views

iptables Tips & Tricks

I'm sure Linux sysadmins are quite familiar with iptables, the userland interface to the netfilter packet-filtering framework. Now, this "Question" is meant to be a Community Wiki for collecting ...
119
votes
9answers
64k views

Keeping a linux process running after I logout

I'm connecting to a Linux machine through SSH, and I'm trying to run a heavy bash script that makes filesystem operations. It's expected to keep running for hours, but I cannot leave the SSH session ...
50
votes
9answers
21k views

Company Password Management [closed]

The topic of personal password management has been covered in great detail time after time. This question is aimed at the business or organization that needs to keep track of many unique passwords for ...
60
votes
2answers
4k views

How should an IT department choose a standard Linux distribution?

There is a lot of community feeling about what Linux distributions are appropriate for production server environments and which aren't, however, a lot of this feeling seems religiously based, and ...
52
votes
3answers
87k views

Can IIS be configure to forward request to another web server?

I have several web site set up on one IIS 6 server distinguished by Host Header. However, I wish to have one of the sites served by a Linux / Apache server on my network. Do I need to use a reverse ...
29
votes
5answers
40k views

How do I redirect subdomains to a different port on the same server?

I have some subdomains I want to redirect to specific ports on the same server. Say I have dev.mydomain.com I want dev.mydomain.com to transparently redirect to mydomain.com:8080 and I want to ...
27
votes
3answers
23k views

Linux - How can I see what's waiting for disk IO

I have a server that has a really high load. Nothing is jumping out at me in terms of CPU usage, and it's not swapping. I think it's cause some processes are waiting for disk IO, and I want to see ...
73
votes
14answers
5k views

What's wrong with always being root?

I have a feeling this is a stupid question, but this is something I've wondered for awhile. I have a VPS and this is my first big linux venture. I am the only person who has access to it. My question ...
26
votes
7answers
30k views

Why would a server not send a SYN/ACK packet in response to a SYN packet

Lately, we've become aware of a TCP connection issue that is mostly limited to mac and Linux users who browse our websites. From the user perspective, it presents itself as a really long connection ...
33
votes
5answers
4k views

Smoothest workflow to handle SSH host verification errors?

This is a simple issue that we all face and probably resolve manually without giving much thought. As servers change, are re-provisioned, or IP addresses reallocated, we receive the SSH host ...
27
votes
6answers
132k views

Finding why a user is locked out in Active Directory

A user's account keeps getting locked out in Active Directory. It's probably caused by an app that's using Windows authentication to connect to SQL Server. Is there a way to find out which app is ...
24
votes
4answers
82k views

How to configure vsftpd to work with passive mode

Whenever I install vsftpd on centos, I only setup the jail environment for the users and rest is default configuration of vsftpd. I create user and try to connect with filezila ftp client but I could ...
28
votes
12answers
52k views

VMware Linux Server — how can you tell if you are a vm or real hardware?

An interesting question. I have logged into a Linux (most likely SuSE) host. Is there some way that I can tell programmatically that I am a VM host or not? Also assume that the vmtools are not ...
21
votes
9answers
15k views

Multiple domains with SSL on same IP

I know that a dedicated IP is needed for setting up SSL. What happens if we add SSL for domains sharing an IP ? (Namevirtualhost)
27
votes
6answers
3k views

Linux server out of space

I have been asked this question in two consecutive interviews, but after some research and checking with various systems administrators I haven't received a good answer. I am wondering if somebody can ...
14
votes
5answers
10k views

ZFS best practices with hardware RAID

If one happens to have some server-grade hardware at ones disposal, is it ever advisable to run ZFS on top of a hardware-based RAID1 or some such? Should one turn off the hardware-based RAID, and run ...
23
votes
2answers
9k views

Is dig +trace always accurate?

When the accuracy of a DNS cache is in question, dig +trace tends to be the recommended way of determining the authoritative answer for an internet facing DNS record. This seems to be particularly ...
5
votes
2answers
387 views

What is the role of NS records at the apex of a DNS domain?

$ORIGIN example.com. ; not necessary, using this to self-document $TTL 3600 @ IN SOA ns1.example.com. admin.example.com. ( 1970010100 7200 1800 1209600 300) @ ...
1
vote
1answer
326 views

Lame DNS server

I'm trying to setup my BIND with a domain I own and I'm using dnssy.com and intodns.com to check if everything is ok, but I'm getting errors in both. The error says that my DNS server is "lame" ...
3
votes
2answers
5k views

Non-volatile cache RAID controllers: what kind of protection is there against NVCACHE failure?

The battery back-up (BBU) model: admin enables write-back cache with BBU writes are cached to the RAID controller's RAM (major performance benefit) the battery saves uncommitted and cached data in ...
1310
votes
28answers
311k views

Our security auditor is an idiot. How do I give him the information he wants?

A security auditor for our servers has demanded the following within two weeks: A list of current usernames and plain-text passwords for all user accounts on all servers A list of all password ...
303
votes
21answers
52k views

How do you search for backdoors from the previous IT person?

We all know it happens. A bitter old IT guy leaves a backdoor into the system and network in order to have fun with the new guys and show the company how bad things are without him. I've never ...
65
votes
8answers
134k views

What limits the maximum number of connections on a Linux server?

What kernel parameter or other settings control the maximum number of TCP sockets that can be open on a Linux server? What are the tradeoffs of allowing more connections? I noticed while load testing ...
69
votes
3answers
36k views

How does IPv6 subnetting work and how does it differ from IPv4 subnetting?

This is a Canonical Question about IPv6 Subnetting. Related: How does IPv4 Subnetting Work? I know a lot about IPv4 Subnetting, and as I prepare to (deploy|work on) an IPv6 ...
68
votes
5answers
4k views

Choosing between meaningful and meaningless hostnames [closed]

Assume an environment with a puppet-managed cluster of different servers - various hardware, software, operating systems, virtual/dedicated, etc. Would you choose meaningful hostnames ...
48
votes
2answers
3k views

vSphere education - What are the downsides of configuring VMs with *too* much RAM?

VMware memory management seems to be a tricky balancing act. With cluster RAM, Resource Pools, VMware's management techniques (TPS, ballooning, host swapping), in-guest RAM utilization, swapping, ...
109
votes
4answers
25k views

Should I quit using Ifconfig?

With the servers that mount Infiniband cards, when I use the ifconfig command, I get this warning: Ifconfig uses the ioctl access method to get the full address information, which limits hardware ...
42
votes
16answers
41k views

Is Round-Robin DNS “good enough” for load balancing static content?

We have a set of shared, static content that we serve up between our websites at http://sstatic.net. Unfortunately, this content is not currently load balanced at all -- it's served from a single ...
35
votes
15answers
17k views

Linux - Running The Same Command on Many Machines at Once

I have about a dozen Linux boxes that I occasionally need to run the same command(s) on. Is there an easier way (or automated way) to do this asides from logging on to each machine and running the ...
34
votes
5answers
60k views

What is the difference between SAN, NAS and DAS?

What is the difference between SAN, NAS and DAS?
13
votes
4answers
37k views

iptables - Target to route packet to specific interface?

My home server has two main interfaces, eth1 (a standard internet connection) and tun0 (an OpenVPN tunnel). I'd like to use iptables to force all packets generated by a local process owned by UID ...
41
votes
14answers
6k views

Preventing brute force attacks against ssh?

What tool or technique do you use to prevent brute force attacks against your ssh port. I noticed in my Security logs, that I have millions of attempts to login as various users through ssh. This is ...
36
votes
9answers
22k views

Why not block ICMP?

I think I almost have my iptables setup complete on my CentOS 5.3 system. Here is my script... # Establish a clean slate iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT ...
10
votes
3answers
2k views

LAMP Server Performance Tips [closed]

What performance tips can be offered to someone running a LAMP server? In the instance that something is Distribution specific, I'm targeting Debian.
28
votes
2answers
42k views

How to reduce number of sockets in TIME_WAIT?

Ubuntu Server 10.04.1 x86 I've got a machine with a FCGI HTTP service behind nginx, that serves a lot of small HTTP requests to a lot of different clients. (About 230 requests per second in the peak ...
25
votes
6answers
18k views

CIDR for Dummies

I understand what CIDR is, and what it is used for, but I still can't figure out how to calculate it in my head. Can someone give a "for dummies" type explanation with examples?
21
votes
5answers
31k views

how i can identify which process is making UDP traffic on linux?

my machine is continously making udp dns traffic request. what i need to know is the PID of the process generating this traffic. The normal way in TCP connection is to use netstat/lsof and get the ...

15 30 50 per page