All Questions
78,531
questions with no upvoted or accepted answers
0
votes
0
answers
51
views
running systemd-run with some bpf-firewall rules as regular user does not work
I'm trying to run a program with restricted networking via systemd-run
as root
systemd-run -p IPAddressAllow=192.168.253.1 -p IPAddressDeny=any PROGRAM works nicely
but as regular user none of the IP ...
0
votes
1
answer
233
views
Why is certificate request invalid from Exchange 2019?
I am creating a cert request in powershell on an exchange 2019 server as follows:
$binrequest = New-ExchangeCertificate -Server "exchange" -BinaryEncoded -GenerateRequest -FriendlyName "...
0
votes
1
answer
90
views
How do I setup Postfix to discard email sent to an alias in a MySQL virtual alias table?
I'm trying to setup Postfix to discard mail when there is an alias record in the MySQL address that forwards the mail to user nobody.
All mail that is sent to [email protected] should be black-...
0
votes
1
answer
1k
views
Windows group policy settings are not replicating to other DC (windows 2019)
I have a scenario where group policy settings are not replicating from primary DC01 to backup DC02.
Please see in the picture attached below showing the same exact GPO policy being viewed from both ...
0
votes
0
answers
56
views
Trying to use HTTPS to multiple host ports
I'm trying to configure Nginx to serve my application on both port 443 and 5501 with SSL. I have the following Nginx configuration:
upstream pixel {
server pixel.example.com:8080 weight=1;
...
0
votes
0
answers
29
views
Can I hide aliased email addresses in a Postfix reject message?
[email protected] is an alias for [email protected]. When Postfix rejects a message, it replies with the expanded alias:
<[email protected]>: host smtp.domain.com[xx.xx.xx.xx] said: 550
5.7....
0
votes
1
answer
94
views
Digital Ocean Load Balancer, can't use doctl to modify load balancer rules
I have a managed kubernetes environment on Digital Ocean. It has a load balancer. I am trying to assign the target_port to tcp:3000.
I want the outside port to be tcp:80, and the inside port to be ...
0
votes
2
answers
99
views
Using Active Directory only for authenticating logins
Unlike: Linux + Active directory authentication + only letting certain groups login
Which is a full AD solution for Linux, limited to groups.
What I want is:
A simple way a random internal Linux box ...
0
votes
1
answer
259
views
How to add ip address to a whitelist wfa rule in azure using azure cli?
I tried adding like below but getting error with syntax as below.
az network application-gateway waf-policy custom-rule update
--resource-group rp-licaltcs-aks-prod --policy-name waf-licaltcs-prod-...
0
votes
0
answers
29
views
How can I detect an exe installed from an HTTP server using SNORT
alert tcp any any -> any 80 (msg:"HTTP File Download Detected"; flow:to_server,established; content:"GET "; http_method; content:".exe"; http_uri; sid:1000001;)
On ...
0
votes
1
answer
38
views
Access Forbidden 403 no search permission for the directory
I installed the Apache server on Manjaro (no tag for it, Arch is the closest). It works well. I added a virtualhost and tried to set directory permissions with chmod, but no luck. I got 403 error when ...
0
votes
0
answers
42
views
Unable to ping the vm running with ebpf program
I am using an eBPF program which counts the number of packets received on its interface on my destination vm.
At first I can able to ping the vm running with eBPF program that is destination from the ...
0
votes
0
answers
191
views
Wireguard with VPS for mobile clients for all traffic routing
I have been trying to configure Wireguard as a VPN for accessing my home network which partially I have been successful. But I still am experiencing problems when trying to make two things happen.
I ...
0
votes
0
answers
30
views
Reasons for high disk time but minimal IOPS
Can anyone possibly suggest scenarios on a large database system where system stats show a rapidly increasing disk time stats, but next to no actual disk IO? When working with lots of large files, ...
0
votes
0
answers
152
views
Google cloud storage bucket [GCS bucket total bytes]- metrics missing for a specific bucket
Update: The metrics appeared after more than 24 hours
I have a lot of buckets in my GCP project (some regional and some multi-region) and I'm able to get the metric: 'storage.googleapis.com/storage/...
0
votes
0
answers
178
views
TLS cipher suites ordering
I have nginx configured to use ssl_ciphers PROFILE=SYSTEM;.
And I have Alma Linux configured to use the DEFAULT crypto policy:
~$ update-crypto-policies --show
DEFAULT
From the RHEL 9 documentation:
...
0
votes
0
answers
42
views
What is correct modprobe.d logic?
I have two different systems, rhel7 and rhel9. I've been curiously looking at CIS benchmarks for both of these. However, when it comes to disable kernel modules I get confused.
When I look at CIS for ...
0
votes
0
answers
53
views
File is immediately deleted after using cat
I'm currently facing an extremely strange issue I'm not sure where to begin to diagnose. I have a directory of log files written using winston (and its daily rotate transport). When I go in that ...
0
votes
1
answer
159
views
Apache + PHP with mod_php No timeout
I am actually working on Apache server 2.4 with PHP 8.2 (mod_php) & debian 11.2
Recently I sent a HTTP Request with more than 100 seconds without a timeout. This request executed a large MySQL ...
0
votes
1
answer
88
views
Best practices for deploying ASP.NET Core components across multiple VMs
I'm working on a project that requires deployment both on the cloud and on private virtual machines. The customer provided 4 VMs with the stipulation that the database should be on one VM, the ...
0
votes
0
answers
42
views
"lxc-create: lxc-helpers-bullseye: utils.c: get_template_path: 898 No such file or directory - bad template: debian" error on Forgejo actions
I have a Forgejo server and I'm trying to setup the Forgejo runner to execute actions. The "Set up job" script worked before, but I don't know why, it's not working now. Here's all the log:
...
0
votes
1
answer
203
views
How to push files from Azure blob storage to GitHub?
I am in need to push the files from azure blob container folder to GitHub. I have a .sh script which works fine on my laptop. Now how can I run the same script in the azure cloud ?. The script itself ...
0
votes
1
answer
50
views
IIS Rewrite is not matching plus sign in URL Path
I have the below IIS rewrite rule,
<rule name="React Routes" stopProcessing="true">
<match url=".*" />
<conditions ...
0
votes
0
answers
61
views
Cloud Flare Certificate - Origin server NET::ERR_CERT_AUTHORITY_INVALID
I've a private container registry, thats exposed with a dns proxied with CloudFlare.
So far everything was working fine, now we are migrating our services devops to github actions and while I try to ...
0
votes
1
answer
151
views
Reply traffic lost when using an NVA to SNAT
I am trying to implement the following in a lab subscription, as described in https://learn.microsoft.com/en-us/azure/architecture/guide/networking/ipv4-exhaustion#implement-snat-via-third-party-nvas (...
0
votes
0
answers
151
views
proxy causes "Name Error: The domain name does not exist" Apache2
When I activate a proxy by entering the address in /etc/environment, the website I host on my webserver becomes inaccessible with the following error message (snippet):
<div id="content"&...
0
votes
0
answers
88
views
AWS CloudFront for multiple subdomain
I have CloudFront for example.com & www.example.com with *.example.com wildcard certificate. But now I want to add w.example.com, ww.example.com & wwww.example.com so i have added these new ...
0
votes
0
answers
322
views
Forwarding traffic from OpenVPN through Cloudflare WARP
I have an Ubuntu 22 node, and I'm trying new ideas to implement using Cloudflare WARP.
Let's say I want to have an OpenVPN server running on the node, while Cloudflare WARP is installed and connected. ...
0
votes
0
answers
75
views
How to Prevent FreeSWITCH from Adding Reason Header to SIP BYE and CANCEL?
I noticed that freeswitch adds a Reason header automatically to SIP BYE and CANCEL requests. I've successfully used the disable_q850_reason parameter to prevent FreeSWITCH from adding Reason headers ...
0
votes
0
answers
129
views
How to backup an Azure PostgreSQL Single Server instance which is available on a private endpoint with Azure Backup Vault
I'd like to back up an Azure PostgreSQL Single Server instance using the Azure Backup Vault, which is only available through a Private Endpoint. I've created the Backup Vault and the Backup Instance ...
0
votes
0
answers
60
views
Permission problems with uWSGI and Modoboa
I have run a manual installation of Modoboa (https://modoboa.readthedocs.io/en/latest/installation.html#manual-installation), which runs a webapp in uWSGI. I moved the static content to /var/www/html ...
0
votes
0
answers
64
views
How to set TCP flags "&syn!=syn" in iptables?
I have requirement where am getting parameters to set in iptables as below:
Rate Limit = 1/sec
Source port = 5432
Source IP = 203.0.113.0
Protocol = tcp
TCP flags = &syn!=syn
iptables -A PRIO_IN -...
0
votes
0
answers
147
views
Openstack: Can't launch instances when GPU passtrough is enabled
I installed openstack using devstack in a single node configuration on Ubuntu 22.04 (Jammy) LTS. I followed the following tutorial to setup GPU passthrough on my openstack: https://superuser.openinfra....
0
votes
1
answer
192
views
Can I generate and log output alerts for SMTP traffic using Suricata 7.0.2?
I have Suricata 7.0.2 IDS installed on a Linux Ubuntu 20.04 virtual machine. In my virtual environment, I have two virtual networks. In the first network, I have a mail user agent (Attacker) that ...
0
votes
0
answers
332
views
Web application not responding on IIS 10 after OS Upgrade
I upgraded to Windows 2022 and IIS 10 from Windows 2016 and IIS 8. But after the upgrade my 2 sites are badly affected. In the evening, when the traffic on the server increases, it goes into non-...
0
votes
0
answers
133
views
How to track PersistentVolume usage with prometheus for non gp2 storage class?
I am running a kubenetes cluster in an ubuntu node. I have created a persistent volume (storage class: openebs-hostpath) and corresponding claim. I want to track how much of the claim is being used by ...
0
votes
0
answers
35
views
strace restart apache server does not log accept/accept4 syscalls
We are using the following command to gather syscalls for apache server start (run as root):
strace -e trace=open,close,read,write,connect,accept -f -o /home/sacumen/syscalls_start_apache.txt ...
0
votes
1
answer
56
views
What event IDs correspond to changes in Windows Add or Remove Programs dialog?
What event does Windows log when a component is registered with Windows "Add or Remove Programs" or more recently "App & features" dialog?
While events with ID 11707 represent ...
0
votes
0
answers
214
views
Linux network OS boot from grub bootloader ISO
I have an idea to boot the system with network files for automated installation of OS
I have created an ISO with gub-mkrescure with just a grub inside it, so when it boots the grub menu will appear ...
0
votes
0
answers
40
views
How do I convert freedict file (.dict.dz) to XML?
I tried to follow the instructions from the "Installation" section of:
https://github.com/freedict/fd-dictionaries
It says "For building make should be enough, at least if you have both ...
0
votes
0
answers
19
views
Mongodb example non working in their docs
How do I run this example? It completely not working. The syntax is wrong I think, at least when I paste it into my IDE, it's all red.
0
votes
0
answers
76
views
How to rotate secrets in an untrusted Kubernetes environment
I'm automating the provisioning of Kubernetes environments for developer users. I'd like to regularly rotate the resources of kind 'secret' that are inside these environments. Furthermore, I'd only ...
0
votes
0
answers
266
views
ansible proxmox inventory plugin vault
Hope you're doing well.
I got a very basic question about ansible inventory plugins , specifically the proxmox one :
https://docs.ansible.com/ansible/latest/collections/community/general/...
0
votes
0
answers
9
views
Do cassandra contact nodes act as proxies
I am using a very large cluster with hundreds of nodes. I only specify several nodes as contact points. My question is, do I have to open a firewall to all of the cluster's nodes, or can I only open ...
0
votes
1
answer
307
views
Windows security event ID 4769 Kerberos Error on single user Domain
I have a test lab with a single Windows Server 2019 and a single Windows 10 Pro PC that connects to it, with a single user, me. I test our own software on it and that's it.
As of the past few days I ...
0
votes
0
answers
51
views
What is the equivalent of /etc/apache2/envvars in EL-based systems?
In Debian-based systems, it's possible to source a bash script in /etc/apache2/envvars to dynamically set an environment variable. Here is an example:
Create a file (/etc/profile.d/myenv.sh) with the ...
0
votes
0
answers
22
views
NIPS appliance 100 MB limit pcap find vlan id tag
Background
I have a Network IPS Appliance at work. The configuration is not well documented and I want to work out what traffic has been configured to flow through which interfaces. The network is ...
0
votes
0
answers
37
views
Why no operations on subtrees are allowed in "Child references"
Why no operations on subtrees are allowed in Model Tree Structures with Child References?
0
votes
0
answers
559
views
context deadline exceeded when deleting a etcd member
I have an unhealthy etcd cluster because a member that failed to join. That member doesn't exist and etcd stuck in selecting a leader.
I.e., there were a cluster with 3 nodes, one tried to join but ...
0
votes
0
answers
216
views
OpenDKIM gets installed without RSA-SHA256 support
I compiled opendkim from source with the following commands:
mkdir /opt/opendkim
cd /opt/opendkim
wget https://sourceforge.net/projects/opendkim/files/opendkim-2.10.3.tar.gz
tar -xzvf opendkim-2.10.3....