0
votes
0answers
2 views

NAT with IPFW in FreeBSD without divert

I'm using IPFW and trying to do NAT on my LAN (FreeBSD 11). I'm following https://forums.freebsd.org/threads/ipfw-nat-setting.46929/ but I can't get it working. The FreeBSD manual uses divert which is ...
0
votes
1answer
5 views

RHEL Server stuck boot screen on VMware “Wait. Wait”

I keep getting this "wait, wait.." at the message log on my RHEL 6.4 installed on VMware workstation. I'm not sure what it is waiting for. UPDATE: This is after I removed rhbg quiet
0
votes
0answers
3 views

How to backup MySQL (MariaDB) database on dedicated servers to AWS (S3 Object Storage?)

We have a 180GB dedicated production server, which we currently backup daily using Percona xtrabackup to a backup server in our rack. We're looking at moving our backups (not the database itself) to ...
0
votes
1answer
7 views

Serving my index.html file directly from nginx in socketio proxy

My current nginx.conf file looks like this. upstream socket_nodes { ip_hash; server 127.0.0.1:8080; server 127.0.0.1:8080; server 127.0.0.1:8080; server 127.0.0.1:8080; } server ...
0
votes
1answer
11 views

IP Address secondary transpose

I am bit new to cisco and I have assigned 5 static IPs to my serial interface 0/0. I have NATed email in via one of the secondary IPs to the server. However, when I try to send mail out it's sending ...
1
vote
0answers
4 views

How can I view n_lru_nuked in varnish 3.0.5?

I'm trying to monitor varnish cache evictions and can't seem to find out how to view the n_lru_nuked counter on varnish 3.0.5. varnishstat isn't finding the counter: $ varnishstat -f ...
0
votes
0answers
5 views

Resetting mysql password on EC2 Amazon Linux [on hold]

Been fighting with resetting the root password for mysql on Amazon Linux. Version: mysql Ver 14.14 Distrib 5.5.42, for Linux (x86_64) using readline 5.1 When installing, I decided it would be ...
0
votes
0answers
7 views

Windows services privilege separation

When looking at the non-Microsoft services on my computer, most of them are executed as the account SYSTEM. Is there a mechanism in Windows that prevents any service running as SYSTEM from ...
0
votes
0answers
10 views

How to implement Wikipedia's long URL redirection logic?

Does anybody know how Wikipedia implements their long URL to short URL redirection logic? I'm not talking about being able to write both http://example.org/wiki/Page_Title and ...
-4
votes
0answers
11 views

Cisco Firewall Configuration [on hold]

interface Vlan1 nameif inside security-level 100 ip address 192.168.0.254 255.255.255.0 ! interface Vlan2 nameif outside security-level 0 ip address 78.188.96.150 255.255.255.252 ! interface ...
0
votes
0answers
6 views

OpenVPN: Mac client not connecting to Xubuntu server

(Edit: left out main paragraph, this should fix it) I've been trying to configure a VPN connection between a server running on Xubuntu 14.04, and the client running on Mac OSX Yosemite with no luck. ...
1
vote
0answers
11 views

How do I fix a non-starting “Microsoft Key Distribution Service”? (not to be confused with Kerberos KDS)

The Microsoft Key Distribution Service is not starting on my DC (kdssvc.dll) and when I look at the event log under Microsoft\Kdssvc, I see the events: Event ID 4001 Group Key Distribution ...
1
vote
1answer
7 views

BIND server has tons of “no valid RRSIG” errors

I have a forward-only BIND9 server running on the LAN and it logs hundreds of errors per day like: Aug 29 18:38:29 nuc named[850]: error (no valid RRSIG) resolving 'ubuntu.com/DS/IN': 75.75.75.75#53 ...
0
votes
0answers
14 views

Remove active directory certificate services role

I have logged in as Administrator to my windows 2012 server. I just installed active directory certificate services role, now I want to remove it (as this service prevents me from adding my server to ...
1
vote
1answer
5 views

ufw port forwarding not working

I'm trying to set up an ubuntu 14.04 server as a router that also does some port forwarding. I've got the router part working but cannot for the life of me figure out why the port forwarding isn't ...
2
votes
0answers
18 views

ZFS - zfs destroy snapshot during zfs send incremental

How does zfs handle destroying snapshots during an incremental send? Example: 2 servers using ZFS: zfshost1 [root@zfshost1~]# zfs list -t snapshot NAME ...
0
votes
0answers
9 views

Spamassassin always says ALL_TRUSTED

So I've got a mail relay (Postfix/amavis/SpamAssassin) running that seems far too lenient on spam and I'm trying to diagnose why. Some background: we provide internet service to hotels and similar ...
0
votes
0answers
8 views

EC2 + Cloudflare not working

[I speak Portuguese, English is not my native language - sorry for errors of writing.] I'm trying to set up Amazon EC2 with Cloudflare to more than one day. Already added all the information NS ...
0
votes
0answers
8 views

Fastest cloud server to commission [on hold]

I'm building a web app that will require one dedicated server per instance to run a program for short (10 minutes to an hour) periods of time on demand. For cost purposes -- especially in the ...
0
votes
0answers
11 views

When Upgrading My 3.5" HDs To SSD HDs Can I Continue To Still Use RAID 1 (MIRROR)?

I'm upgrading my old 3.5" HDs to a set of SSD HDs. I currently run a RAID 1 (MIRROR) array for the 2 old drives (just in case) and want to know how I should rollout the new SSD drives... I have been ...
0
votes
0answers
7 views

How to troubleshoot an invalid cached response

I've a Google Cloud Engine instance with Suse Linux 13.2 with original network config and without any configured proxy. And I've a problem with an invalid CACHED response I receive from a server. ...
0
votes
0answers
6 views

Overwriting OS disk with dd gives kernal panic error

I am attempting to replace the main hdd windows server OS with Ubuntu Server. However Gparted cannot create a new partition as it is corrupted. end of file while reading argument invalid the primary ...
-2
votes
1answer
36 views

Is it better to hire a system administrator or do it yourself? [on hold]

I previously asked a question on here asking the risks in hiring a sys admin to secure my server. I got some great answers, I appreciate them. What I want to know is, to eliminate the risks Should I ...
2
votes
1answer
14 views

Dovecot SSL: “unknown state”

Two weeks ago I set up a Mailserver using Dovecot and Postfix. It's a server for a organization with about 5000 mails per day. Everything works fine, but today I enabled verbose_ssl in ...
0
votes
1answer
14 views

The Certificate Authority Service is installed on this computer

I'm trying to add my windows server 2012 to a domain but the "Change" button in the "computer Name" tab of the "System Properties" is disabled with a note: Note: The Identification of the computer ...
1
vote
1answer
11 views

Can't start nginx: “code=exited, status=1/FAILURE”

I've just installed nginx on Debian Jessie, and I can't start it: $ sudo /etc/init.d/nginx start [....] Starting nginx (via systemctl): nginx.serviceJob for nginx.service failed. See 'systemctl ...
0
votes
0answers
4 views

openstack installation on vmware

I've successfully installed OpenStack on a virtual machine Ubuntu 14 desktop on vmware workstation and there are 2 different installation methods; cloning the repository or using sudo apt-get ...
-3
votes
2answers
27 views

Modifiying a server securely

I wanted to purchase a dedicated server to host my site. I am a newcomer to this and wanted to know if I hired someone to secure the server and SSH for me, will that put me at risk? Or is there an ...
0
votes
0answers
13 views

CentOS 7 on XenServer 6.5

I am having problem trying to get CentOS 7 Graphical installer to work on XenServer 6.5 (Service pack 1). I have used CentOS 7 template. Graphical installer does not work, getting blank screen with ...
2
votes
1answer
27 views

Upgrading MongoDB 2.x replica set to 3.x

I have a MongoDB replica set consisting of two database nodes and one arbiter. I want to upgrade the replica set by launching new, larger instances (Google compute engine), installing MongoDB 3, then ...
-2
votes
0answers
10 views

Reconfigure Ubuntu from router to server behind router [on hold]

Ubuntu 14.04 originally set up as gateway/router behind a cable modem. I have several services on it that were accessible from both inside the network it created and outside using a FQDN along with ...
1
vote
1answer
23 views

Windows Server Applicaton Administration Best Practice [on hold]

I've recently switched from using a linux server for private hosting (things like a WebServer, Teamspeak, Gameservers etc.) to a Windows Server 2012 R2 machine. Under Debian I installed my services ...
2
votes
2answers
75 views

SATA vs SAS vs SSD for Virtual Machine Automation

We're using SCVMM and Hyper-V hosts to manage our Automated VM environments. Currently we have two servers with 3 7.2k consumer drives each (one for host OS/Storage, two for VMs). It's hard to say ...
0
votes
0answers
45 views

Why is grub not booting from 2nd drive? - boot info says “no valid partition table found”

My volumes look like this /dev/xvda1: LABEL="cloudimg-rootfs" UUID="d4f2aafc-946a-4514-930d-4c45e676f198" TYPE="ext4" /dev/xvdf1: LABEL="permaroot" UUID="afb7e502-ad08-4d6a-8701-2c05863f958e" ...
1
vote
3answers
47 views

Are there any reasons why we should not block unencrypted service ports for mail such as 25,110 & 143?

I want to block smtp 25, pop 110 & imap 143 and only use secured smtps 465, pop3s 995 & imaps 993. Are there good reasons to let port 25,110,143 open?
1
vote
0answers
12 views

Use different client IPs with mod_rewrite and mod_remoteip

I have a reverse proxy that my site points to to help with DDoS protection. I have mod_rewrite set to use a specific header provided by the reverse proxy in order to pull the actual client IPs instead ...
2
votes
0answers
17 views

Is there an extension of host to host ipsec to a many-many configuration?

Having a typical host to host transport mode ipsec configuration, conn appserver01-to-swift01 leftid=@appserver01.server.com left=10.133.176.246 leftrsasigkey=xxxxxxxxxxxxxxxxxxxxxxxx ...
1
vote
0answers
9 views

fdisk and parted won't work on a USB stick with Fedora 23 alpha 2 x86_64

So I burned a Fedora 23 alpha 2 on a 16GB USB stick through dd if=path/to/fedora.iso of=/dev/usb_device bs=512 I used bs=512 because the sectors on the stick are 512 bytes. Opening the stick in ...
0
votes
0answers
8 views

journalctl access for non-root users

The journald documentation says that adding a user to 'systemd-journal' group or 'adm' group allows the user to access system-wide journal. I'm running the latest CentOS 7 and I seem to have problem ...
0
votes
0answers
9 views

How to enforce dnsmasq to use internal dns for apex domain

We host example.com at Amazon and use Route 53 which works well outside VPN. From inside VPN we need to access to multiple internal subdomains, such as test.example.com, dev.example.com etc. which ...
0
votes
0answers
10 views

CoreOS update failed

When running the update command for CoreOS I get an update failed error. According to the documentation this means that there are no updates found. This shouldn't be the case as the version I'm ...
0
votes
1answer
26 views

How can I strip or rewrite the sender's name of a from address when using postfix?

Objective I'm trying to configure a CentOS 7 system so all mail sent to local system accounts gets redirected to an alternate email address. For example, if mail is sent to root I want it to be ...
0
votes
1answer
15 views

Searching for files containing text (not string) in bash

How do I find files containing some particular text containing newlines and plenty of other charachters all sorts of quotes and backslashes using terminal?
2
votes
0answers
23 views

Creating a linux-based black box environment?

This is a subject I've found very little on and while there are theory-based articles out there, I can't find anything with specifics. I also wasn't sure whether this should live on stack overflow or ...
1
vote
0answers
9 views

Apache “httpd fullstatus” when connection limit exceeded

I'm trying to dump "httpd fullstatus" to a log file at the exact moment when the connection limit has been exceeded and Apache stops accepting new connections. Unfortunately "httpd fullstatus" ...
0
votes
1answer
17 views

Are zero byte files an indication of file system corruption?

I recently noticed a strange behaviour. I could not restart a productive webserver running since more than a year because the configuration was invalid: # /etc/init.d/apache2 restart Syntax error on ...
1
vote
1answer
25 views

Where's a browser that supports weak encryption (such as SSL3, RC4, …)? [on hold]

While it may be good for the interwebs as whole that all current versions make it difficult or even impossible to establish a https connection with a web server that supports only weak encryption ...
0
votes
0answers
12 views

UFW - Set correct kernel params

As every system administrator does, one of the first things i did right after booting up my web server was install ufw and tune/set kernel parameters in /etc/sysctl.conf. By the way, this is my ...
0
votes
0answers
7 views

Rewrite subdomains in Nginx

Because I don't want to use CDN anymore I would like to rewrite cdn.example.com to www.example.com. How to do this with Nginx? There is only www.example.com in my server block.
0
votes
0answers
5 views

utf-8 in jboss eap 6 url [migrated]

Have installed JBoss EAP 6.3/6.4 and cannot make it use UTF-8 for URLs. I mean, that unicode characters in forms with "get" method are not working. For example, the following JSP does not work ...

15 30 50 per page