New answers tagged

0

You could clear the previous key with the following command. cisco(config)# crypto key zeroize rsa Then sanitise the vty lines. Simple SSH Config cisco(config)# hostname <name> cisco(config)# ip domain-name <domain> cisco(config)# crypto key generate rsa cisco(config)# ip ssh version 2


1

Your colleague is correct. The ? wildcard character is indeed used to match a single non . character valid for dns names. You can poke around at several other documents that mention the ? character, and if they describe its use they always say something like In a wild-card string, ? matches any single character, and * matches any sequences of characters. ...


1

HSTS preload is a list of sites that are hard coded into Chrome, Firefox, Safari, IE 11 and Edge as being HTTPS only. You can include a domain in to the HSTS preload list in https://hstspreload.appspot.com/ see more: Preloading HSTS Firefox HTTP Strict Transport Security comes to Internet Explorer 11 on Windows 8.1 and Windows 7


1

This line: proxy_pass http://$server_name:9000; Should be: proxy_pass http://127.0.0.1:9000; That change will efficiently and securely route the traffic to the backend through the local loopback interface. Also, Gunicorn should be configured to bind to port 127.0.0.1, since it only intended to be accessed through Nginx. You are inviting additional ...


3

You keep UsePAM as yes because when PasswordAuthentication is set to no PAM does not call the 'auth' section of the PAM service: UsePAM Enables the Pluggable Authentication Module interface. If set to “yes” this will enable PAM authentication using ChallengeResponseAuthentication and PasswordAuthentication in addition to PAM account and session ...


2

You can define a variable and then use that Define droot /var/www/html and then use it later DocumentRoot ${droot}/site1 and so on.


0

The SO 30 characters minimum rule is ridiculous. rewrite ^/blog/abc$ /blog;


0

My best guess is the problem is the alias you have in your blog location is a problem, plug your config looks messy. I have one site that serves random PHP on the document root and Wordpress single site in the blog folder, here's the important parts of the config I use. Note I've removed all caching and header manipulation, and I use HHVM not PHP. I also ...


0

I think you should use a plus php section in location /blog: location /blog { alias /var/www/blog; location ~ \.php$ { fastcgi_pass unix:/var/run/php5-fpm.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } } And you don't need location ~ ...


0

Here's a pure bash solution. This is a new and improved version of what chilladx posted: https://github.com/albfan/bash-ini-parser For a really easy to follow initial example: After you download this, just copy the files bash-ini-parser, and scripts/file.ini to the same directory, then create a client test script using the example I've provided below to ...


3

Your problem happens because you're not using proper indentation and not separating out your server blocks into separate files so that you could enable and disable configs for testing. Regardless, nginx actually tells you exactly where the problem is. nginx: [emerg] "location" directive is not allowed here in /home/admin/conf/web/nginx.conf:100 The :100 ...


1

There is no such option for querying rsyslog config, see the rsyslogd(8) man page and that's why you can't find anything. If you want to check rsyslog config, you may use the following command: rsyslogd -N1 This tells rsyslog to do a config check. It does NOT run in regular mode, but just check configuration file correctness. This option is meant ...


1

I believe I've found the answer. It was necessary to run nodetool repair on the original node in order to get the new node working correctly. Running nodetool repair on the new node may seem more intuitively correct, but attempting to do that just caused the repair process to hang forever with no log output. Once the repair process completed, the data ...


0

Several problems: REMOTE_HOST is a name not an IP address. You want REMOTE_ADDR. "ctl:ruleRemovebyID=.*" is not valid syntax and, even if it was, should not be necessary (though see point 4 below). Don't need the semi-colon at the end. "Allow" is ignored in DetectionOnly mode, which I think is counter intuitive and can lead to a lot of false detections if ...


0

Just as I posted, I thought there must be an 'include' function :) So I looked it up (https://httpd.apache.org/docs/2.4/mod/core.html#include) and have now created a few separate '.conf' files that I can include as appropriate. So the second site's ssl.conf now looks like this: <IfModule mod_ssl.c> <VirtualHost *:443> ServerAdmin xx@zz.com ...


0

Is there a way to have the rundeckd service bind to port 80 as root and then drop down to the rundeck user? There is no out of the box solution for this as far as I can see. For what you want to achieve, the program should use Privilege separation: In computer programming and computer security, privilege separation is a technique in which a ...


0

Finally, I've managed to resolve it. In bug of 5.6.10 version I've found a solution: to comment line table_definition_cache = 1K Although I have version 5.6.27 it works greatly. Now MySql consumes less than 70MB.


0

I was able to download today, on the official web site of G-WAN, the last version 7.12.2 and all is now working perfectly !


1

This can be achieved quite easily by changing default email notification properties. Under Control Panel -> Notification -> E-Mail, change the Subject Prefix field according to each DiskStations's name or whatever you think will be useful for you to identify the device and then Apply. All emails sent from the diskstations afterwards will have the Subject ...



Top 50 recent answers are included