Tag Info

Hot answers tagged

4

I used chain which logs everything with limits so it won't spam your syslog $IPT -N DUMP > /dev/null $IPT -F DUMP $IPT -A DUMP -p tcp -m limit --limit 3/minute --limit-burst 3 -j LOG --log-prefix "TCP DUMP: " $IPT -A DUMP -p udp -m limit --limit 3/minute --limit-burst 3 -j LOG --log-prefix "UDP DUMP: " $IPT -A DUMP -p tcp -j REJECT --reject-with ...


4

The Linux login process is primarily ruled by PAM (Pluggable Authentication Modules for Linux) which is a suite of shared libraries that enable the local system administrator to choose how applications authenticate users. By default some PAM messages are already logged to syslog so by monitoring that you can trigger notifications. Specifically login events ...


3

If you simply want to answer the question, "what files on this system have changed", then use a tool that generates checksums for all your files. Run it before the consultant makes any changes, run it afterwards, and look for files that have changed. Store the results someone other than on the system. And of course, be aware that some files change ...


3

Dovecot allows you to configure a master user which can be used to access user mailboxes without knowing their passwords. The master user can be used with imapsync (as well as most other IMAP tools) to copy the messages between servers. From the dovecot configuration file on my server: By adding master=yes setting inside a passdb you make the passdb a ...


3

The warning is telling you that sda/b/c/d where part of another RAID array which left some metadata on the disks themselves. They where probably used in another RAID system (maybe only for testing). The new server very intelligently skip these disks, as they may contain valuable data. If you are sure that these disks do NOT contain valuable data, you can ...


2

As firewalld is based on XML configuration, some might think that it's easier to configure the firewall in a programmatic manner. This can be achieved by iptables just as well, but with a different way, which is not XML. If you are already familiar with the way iptables works, why would you migrate all your configuration to firewalld? If you consider your ...


1

When both mail servers use the same mail format (mbox, Maildir, MBX), the simplest solution is to just copy over the directory structures containing the mails, e.g. using scp. This also preserves the Message-IDs, as opposed to tools like doveadm copy. Another possibility is to use the IMAP-protocol itself for IMAP copying using tools like imapsync. But in ...


1

This is usually accomplished by combining HAproxy with keepalived. HAproxy handles the load balancing, keepalived handles the HA failover. To clarify, only one HAproxy instance is active at a time, but if the primary node fails, the other takes over.


1

Need more information to be able to help (all the relevant apache config from httpd.conf and modsecurity.conf). However here's some pointers which might help you solve your issue yourself: Are you using the correct IfModule command? I use mod_security2.c but not sure if that matters: <IfModule mod_security2.c> Include conf/modsecurity.conf ...



Only top voted, non community-wiki answers of a minimum length are eligible