All Questions

78,531 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
0 votes
0 answers
51 views

running systemd-run with some bpf-firewall rules as regular user does not work

I'm trying to run a program with restricted networking via systemd-run as root systemd-run -p IPAddressAllow=192.168.253.1 -p IPAddressDeny=any PROGRAM works nicely but as regular user none of the IP ...
Felipe Alvarez's user avatar
0 votes
1 answer
233 views

Why is certificate request invalid from Exchange 2019?

I am creating a cert request in powershell on an exchange 2019 server as follows: $binrequest = New-ExchangeCertificate -Server "exchange" -BinaryEncoded -GenerateRequest -FriendlyName "...
TSG's user avatar
  • 1,852
0 votes
1 answer
90 views

How do I setup Postfix to discard email sent to an alias in a MySQL virtual alias table?

I'm trying to setup Postfix to discard mail when there is an alias record in the MySQL address that forwards the mail to user nobody. All mail that is sent to [email protected] should be black-...
Nick's user avatar
  • 4,656
0 votes
1 answer
1k views

Windows group policy settings are not replicating to other DC (windows 2019)

I have a scenario where group policy settings are not replicating from primary DC01 to backup DC02. Please see in the picture attached below showing the same exact GPO policy being viewed from both ...
jodlgc's user avatar
  • 25
0 votes
0 answers
56 views

Trying to use HTTPS to multiple host ports

I'm trying to configure Nginx to serve my application on both port 443 and 5501 with SSL. I have the following Nginx configuration: upstream pixel { server pixel.example.com:8080 weight=1; ...
Henrique Hefler's user avatar
0 votes
0 answers
29 views

Can I hide aliased email addresses in a Postfix reject message?

[email protected] is an alias for [email protected]. When Postfix rejects a message, it replies with the expanded alias: <[email protected]>: host smtp.domain.com[xx.xx.xx.xx] said: 550 5.7....
Nick's user avatar
  • 4,656
0 votes
1 answer
94 views

Digital Ocean Load Balancer, can't use doctl to modify load balancer rules

I have a managed kubernetes environment on Digital Ocean. It has a load balancer. I am trying to assign the target_port to tcp:3000. I want the outside port to be tcp:80, and the inside port to be ...
jwP54's user avatar
  • 1
0 votes
2 answers
99 views

Using Active Directory only for authenticating logins

Unlike: Linux + Active directory authentication + only letting certain groups login Which is a full AD solution for Linux, limited to groups. What I want is: A simple way a random internal Linux box ...
user3696153's user avatar
0 votes
1 answer
259 views

How to add ip address to a whitelist wfa rule in azure using azure cli?

I tried adding like below but getting error with syntax as below. az network application-gateway waf-policy custom-rule update --resource-group rp-licaltcs-aks-prod --policy-name waf-licaltcs-prod-...
uday kiran reddy's user avatar
0 votes
0 answers
29 views

How can I detect an exe installed from an HTTP server using SNORT

alert tcp any any -> any 80 (msg:"HTTP File Download Detected"; flow:to_server,established; content:"GET "; http_method; content:".exe"; http_uri; sid:1000001;) On ...
John Adams's user avatar
0 votes
1 answer
38 views

Access Forbidden 403 no search permission for the directory

I installed the Apache server on Manjaro (no tag for it, Arch is the closest). It works well. I added a virtualhost and tried to set directory permissions with chmod, but no luck. I got 403 error when ...
inf3rno's user avatar
  • 408
0 votes
0 answers
42 views

Unable to ping the vm running with ebpf program

I am using an eBPF program which counts the number of packets received on its interface on my destination vm. At first I can able to ping the vm running with eBPF program that is destination from the ...
Manideep G's user avatar
0 votes
0 answers
191 views

Wireguard with VPS for mobile clients for all traffic routing

I have been trying to configure Wireguard as a VPN for accessing my home network which partially I have been successful. But I still am experiencing problems when trying to make two things happen. I ...
Luke Keude's user avatar
0 votes
0 answers
30 views

Reasons for high disk time but minimal IOPS

Can anyone possibly suggest scenarios on a large database system where system stats show a rapidly increasing disk time stats, but next to no actual disk IO? When working with lots of large files, ...
Chris Phillips's user avatar
0 votes
0 answers
152 views

Google cloud storage bucket [GCS bucket total bytes]- metrics missing for a specific bucket

Update: The metrics appeared after more than 24 hours I have a lot of buckets in my GCP project (some regional and some multi-region) and I'm able to get the metric: 'storage.googleapis.com/storage/...
wiktor's user avatar
  • 1
0 votes
0 answers
178 views

TLS cipher suites ordering

I have nginx configured to use ssl_ciphers PROFILE=SYSTEM;. And I have Alma Linux configured to use the DEFAULT crypto policy: ~$ update-crypto-policies --show DEFAULT From the RHEL 9 documentation: ...
McLayn's user avatar
  • 193
0 votes
0 answers
42 views

What is correct modprobe.d logic?

I have two different systems, rhel7 and rhel9. I've been curiously looking at CIS benchmarks for both of these. However, when it comes to disable kernel modules I get confused. When I look at CIS for ...
N. J's user avatar
  • 125
0 votes
0 answers
53 views

File is immediately deleted after using cat

I'm currently facing an extremely strange issue I'm not sure where to begin to diagnose. I have a directory of log files written using winston (and its daily rotate transport). When I go in that ...
Maximilian Krause's user avatar
0 votes
1 answer
159 views

Apache + PHP with mod_php No timeout

I am actually working on Apache server 2.4 with PHP 8.2 (mod_php) & debian 11.2 Recently I sent a HTTP Request with more than 100 seconds without a timeout. This request executed a large MySQL ...
2Max's user avatar
  • 101
0 votes
1 answer
88 views

Best practices for deploying ASP.NET Core components across multiple VMs

I'm working on a project that requires deployment both on the cloud and on private virtual machines. The customer provided 4 VMs with the stipulation that the database should be on one VM, the ...
Asim Khan's user avatar
  • 101
0 votes
0 answers
42 views

"lxc-create: lxc-helpers-bullseye: utils.c: get_template_path: 898 No such file or directory - bad template: debian" error on Forgejo actions

I have a Forgejo server and I'm trying to setup the Forgejo runner to execute actions. The "Set up job" script worked before, but I don't know why, it's not working now. Here's all the log: ...
Mateu Saiós's user avatar
0 votes
1 answer
203 views

How to push files from Azure blob storage to GitHub?

I am in need to push the files from azure blob container folder to GitHub. I have a .sh script which works fine on my laptop. Now how can I run the same script in the azure cloud ?. The script itself ...
P S's user avatar
  • 1
0 votes
1 answer
50 views

IIS Rewrite is not matching plus sign in URL Path

I have the below IIS rewrite rule, <rule name="React Routes" stopProcessing="true"> <match url=".*" /> <conditions ...
Imran Qadir Baksh - Baloch's user avatar
0 votes
0 answers
61 views

Cloud Flare Certificate - Origin server NET::ERR_CERT_AUTHORITY_INVALID

I've a private container registry, thats exposed with a dns proxied with CloudFlare. So far everything was working fine, now we are migrating our services devops to github actions and while I try to ...
Vinicius Andrade's user avatar
0 votes
1 answer
151 views

Reply traffic lost when using an NVA to SNAT

I am trying to implement the following in a lab subscription, as described in https://learn.microsoft.com/en-us/azure/architecture/guide/networking/ipv4-exhaustion#implement-snat-via-third-party-nvas (...
jimbobmcgee's user avatar
  • 2,685
0 votes
0 answers
151 views

proxy causes "Name Error: The domain name does not exist" Apache2

When I activate a proxy by entering the address in /etc/environment, the website I host on my webserver becomes inaccessible with the following error message (snippet): <div id="content"&...
sysad noob's user avatar
0 votes
0 answers
88 views

AWS CloudFront for multiple subdomain

I have CloudFront for example.com & www.example.com with *.example.com wildcard certificate. But now I want to add w.example.com, ww.example.com & wwww.example.com so i have added these new ...
rp346's user avatar
  • 131
0 votes
0 answers
322 views

Forwarding traffic from OpenVPN through Cloudflare WARP

I have an Ubuntu 22 node, and I'm trying new ideas to implement using Cloudflare WARP. Let's say I want to have an OpenVPN server running on the node, while Cloudflare WARP is installed and connected. ...
nightlover's user avatar
0 votes
0 answers
75 views

How to Prevent FreeSWITCH from Adding Reason Header to SIP BYE and CANCEL?

I noticed that freeswitch adds a Reason header automatically to SIP BYE and CANCEL requests. I've successfully used the disable_q850_reason parameter to prevent FreeSWITCH from adding Reason headers ...
Mohamed's user avatar
0 votes
0 answers
129 views

How to backup an Azure PostgreSQL Single Server instance which is available on a private endpoint with Azure Backup Vault

I'd like to back up an Azure PostgreSQL Single Server instance using the Azure Backup Vault, which is only available through a Private Endpoint. I've created the Backup Vault and the Backup Instance ...
Nagy Vilmos's user avatar
0 votes
0 answers
60 views

Permission problems with uWSGI and Modoboa

I have run a manual installation of Modoboa (https://modoboa.readthedocs.io/en/latest/installation.html#manual-installation), which runs a webapp in uWSGI. I moved the static content to /var/www/html ...
daydr3amer's user avatar
0 votes
0 answers
64 views

How to set TCP flags "&syn!=syn" in iptables?

I have requirement where am getting parameters to set in iptables as below: Rate Limit = 1/sec Source port = 5432 Source IP = 203.0.113.0 Protocol = tcp TCP flags = &syn!=syn iptables -A PRIO_IN -...
Karma Yogi's user avatar
0 votes
0 answers
147 views

Openstack: Can't launch instances when GPU passtrough is enabled

I installed openstack using devstack in a single node configuration on Ubuntu 22.04 (Jammy) LTS. I followed the following tutorial to setup GPU passthrough on my openstack: https://superuser.openinfra....
dmat_pravaig's user avatar
0 votes
1 answer
192 views

Can I generate and log output alerts for SMTP traffic using Suricata 7.0.2?

I have Suricata 7.0.2 IDS installed on a Linux Ubuntu 20.04 virtual machine. In my virtual environment, I have two virtual networks. In the first network, I have a mail user agent (Attacker) that ...
Stephen Jacob's user avatar
0 votes
0 answers
332 views

Web application not responding on IIS 10 after OS Upgrade

I upgraded to Windows 2022 and IIS 10 from Windows 2016 and IIS 8. But after the upgrade my 2 sites are badly affected. In the evening, when the traffic on the server increases, it goes into non-...
Anees's user avatar
  • 1
0 votes
0 answers
133 views

How to track PersistentVolume usage with prometheus for non gp2 storage class?

I am running a kubenetes cluster in an ubuntu node. I have created a persistent volume (storage class: openebs-hostpath) and corresponding claim. I want to track how much of the claim is being used by ...
sachinks's user avatar
0 votes
0 answers
35 views

strace restart apache server does not log accept/accept4 syscalls

We are using the following command to gather syscalls for apache server start (run as root): strace -e trace=open,close,read,write,connect,accept -f -o /home/sacumen/syscalls_start_apache.txt ...
Mahesh's user avatar
  • 101
0 votes
1 answer
56 views

What event IDs correspond to changes in Windows Add or Remove Programs dialog?

What event does Windows log when a component is registered with Windows "Add or Remove Programs" or more recently "App & features" dialog? While events with ID 11707 represent ...
Tenders McChiken's user avatar
0 votes
0 answers
214 views

Linux network OS boot from grub bootloader ISO

I have an idea to boot the system with network files for automated installation of OS I have created an ISO with gub-mkrescure with just a grub inside it, so when it boots the grub menu will appear ...
Atif Faraz's user avatar
0 votes
0 answers
40 views

How do I convert freedict file (.dict.dz) to XML?

I tried to follow the instructions from the "Installation" section of: https://github.com/freedict/fd-dictionaries It says "For building make should be enough, at least if you have both ...
shantanuo's user avatar
  • 3,619
0 votes
0 answers
19 views

Mongodb example non working in their docs

How do I run this example? It completely not working. The syntax is wrong I think, at least when I paste it into my IDE, it's all red.
Jenia Ivanov's user avatar
0 votes
0 answers
76 views

How to rotate secrets in an untrusted Kubernetes environment

I'm automating the provisioning of Kubernetes environments for developer users. I'd like to regularly rotate the resources of kind 'secret' that are inside these environments. Furthermore, I'd only ...
Dave Welling's user avatar
0 votes
0 answers
266 views

ansible proxmox inventory plugin vault

Hope you're doing well. I got a very basic question about ansible inventory plugins , specifically the proxmox one : https://docs.ansible.com/ansible/latest/collections/community/general/...
infoman33's user avatar
0 votes
0 answers
9 views

Do cassandra contact nodes act as proxies

I am using a very large cluster with hundreds of nodes. I only specify several nodes as contact points. My question is, do I have to open a firewall to all of the cluster's nodes, or can I only open ...
f.khantsis's user avatar
0 votes
1 answer
307 views

Windows security event ID 4769 Kerberos Error on single user Domain

I have a test lab with a single Windows Server 2019 and a single Windows 10 Pro PC that connects to it, with a single user, me. I test our own software on it and that's it. As of the past few days I ...
SKidd's user avatar
  • 61
0 votes
0 answers
51 views

What is the equivalent of /etc/apache2/envvars in EL-based systems?

In Debian-based systems, it's possible to source a bash script in /etc/apache2/envvars to dynamically set an environment variable. Here is an example: Create a file (/etc/profile.d/myenv.sh) with the ...
H M's user avatar
  • 1
0 votes
0 answers
22 views

NIPS appliance 100 MB limit pcap find vlan id tag

Background I have a Network IPS Appliance at work. The configuration is not well documented and I want to work out what traffic has been configured to flow through which interfaces. The network is ...
user3223819's user avatar
0 votes
0 answers
37 views

Why no operations on subtrees are allowed in "Child references"

Why no operations on subtrees are allowed in Model Tree Structures with Child References?
Jenia Ivanov's user avatar
0 votes
0 answers
559 views

context deadline exceeded when deleting a etcd member

I have an unhealthy etcd cluster because a member that failed to join. That member doesn't exist and etcd stuck in selecting a leader. I.e., there were a cluster with 3 nodes, one tried to join but ...
Igor Artamonov's user avatar
0 votes
0 answers
216 views

OpenDKIM gets installed without RSA-SHA256 support

I compiled opendkim from source with the following commands: mkdir /opt/opendkim cd /opt/opendkim wget https://sourceforge.net/projects/opendkim/files/opendkim-2.10.3.tar.gz tar -xzvf opendkim-2.10.3....
daydr3amer's user avatar

15 30 50 per page
1
684 685
686
687 688
1571