Tag Info

New answers tagged

1

There are many different ways to do this. What's best depend on your situation. rsync etc. Networked file system like NFS to store the data Deployment scripts tied into your VCS (or standalone) ... My first look would be into hooks for your VCS - if done right, a simple git push can make all this happen.


0

To find any expired repository keys and their IDs, use apt-key as follows: apt-key list | grep expired You will get a result similar to the following: pub 4096R/BE1DB1F1 2011-03-29 [expired: 2014-03-28] The key ID is the bit after the / i.e. BE1DB1F1 in this case. To update the key, run sudo apt-key adv --recv-keys --keyserver keys.gnupg.net ...


0

My assumption would be because it mirrors both 'amd64' and 'all', both of which are >90GB ( https://www.debian.org/mirror/size ). My ARCH_EXCLUDE is the same as what you've posted, and my mirror is ~162GB currently. If you don't need a full mirror you'll probably save a LOT of space if you use a proxy server - ...


0

Ok, so as Zoredache stated, modifying debconf default answers is not the solution. So to change my config, I did the following : Change /etc/exim4/update-exim4.conf.conf (eg. sed -i "s/dc_eximconfig_configtype=.*/dc_eximconfig_configtype='internet'/" /etc/exim4/update-exim4.conf.conf) Run dpkg-reconfigure exim4-config -fnoninteractive


2

It is a question that requires a detailed answer and there are many resources on the web that will be elaborate. I would be succinct. If there are static resources such as js, css then nginx / apache can take care of it. If SSL termination / compression is required then nginx / apache can offload that. Also, nginx / apache provide for more bells and ...


1

Your approach looks fine; I do something similar. Two remarks: Using --dbpath is good, that prevents a common setup error where SA uses a DB in ~amavis and sa-learn writes to a different DB in ~root. One design limitation regarding multi-user operation: SpamAssassin uses a single global Bayes DB -- not a DB per user.


0

You might want to take a look at dspam. It integrates with Dovecot and does basically exactly what you want, but on the fly, as the move operations happen (moving into Junk => spam, moving out of Junk => false positive).


0

Couple options which works for me. 1) find the all MySql processes running on your debian: ps -A | grep mysql And if is any running, kill it: kill -9 <ps_number which is second column number> 2) other option is to start mysql with local host and typical port number for it sudo mysql -h 127.0.0.1 -P 3306 -u root -p <database> ...


1

Well, I think there may be two causes: You log in to the FTP server as anonymous, but the uploaded directories are chown'ed to another user, and they have permissions 0600, so they become unavailable to ftp (or another user set by ftp_username) to which anonymous users are mapped by the vsftpd daemon. Try to set the following in your vsftpd.conf: ...


0

Figured out my problem. An IP conflict. :( Wonderful.


1

I can confirm the same issue exists with the Nexus 7 and the isc-dhcp-server. I was able to circumvent the problem to some degree by giving the device's MAC a reserved address. This doesn't help when you have guests connect to the network and they don't have a reservation, however. Following the request/response flow with iptables logging I could see that ...


0

The short answer is NO. As you have discovered the %0 expansion is specific to the mod_vhost_alias directives and not supported in other modules. The main problem is that Apache's design is based on a static configuration, where mod_vhost_alias is simply put an exception, a hack. That makes it dynamic configuration of other modules and directive ...


0

After much tweaking and coffee, I figured out what I did wrong. I had the "ansible_ssh_user" parameter duplicated amongst my hosts.ini and my deployment file - but not the private key parameter. That said, I am going without a passphrase on my ssh key! I had to enter the phrase WAY too many times. Thanks for the insight guys


0

Since you say that rc.local executes properly when you run it manually, the two things that immediately come to mind are: Something is going wrong at boot time but works when you run it yourself. Perhaps you're trying to run a program that's not in the PATH at boot time. /etc/rc.local really isn't being run at boot. In both cases, the first thing I'd do ...


0

Well, that was easy - my init-script was borked: # priority can be overriden and "-s" adds output to stderr ERR_LOGGER="logger -p daemon.err -t /etc/init.d/mysql -i" Changed it and everything is fine. Didn't come to think of actually checking the init script... well... next time ;)


2

Running table checks implicitly locks the table (equivelant to executing 'LOCK TABLES') to prevent concurrency issues. The log engine is a table type (just like myisam and innodb) that was introduced in 5.1 which do not need - and thus do not support - locking. The slow log and general log use said engine by default. The message you are seeing is harmless. ...


1

iftop is equivalent to top for processes, which shows everything, you can press p to toggle to show port.


1

From the documentation for Google Compute Engine, section "Networking and Firewalls": Blocked traffic Google Compute Engine blocks or restricts traffic through all of the following ports/protocols between the Internet and virtual machines, as well as between two virtual machines when traffic is addressed to their public IP addresses (this also ...


0

Sorry, guys, I've found out that I work not with original Apache but with its custom build in which work without authorization is disabled. Thanks for your comments.


-2

Thanks for all your hints and tipps! I ended up reinstalling the machine with the most recent version of debian. Cheerio!


1

With bind 9.9, "rndc sync" is not enough; you also need the "-clean" flag: sync [-clean] [zone [class [view]]] Sync changes in the journal file for a dynamic zone to the master file. If the "-clean" option is specified, the journal file is also removed. If no zone is specified, then all zones are synced.


0

I also encountered slowness with squid (v3.3.3 from Cygwin), and solved the problem by putting the following directive in my squid.conf: dns_v4_first on


0

Increasing RAM solved the problem.


1

If you check apt-cache search linux-image you can install one of those if the version matches what you need. Otherwise check backports, if they don't provide it either you'll need to compile.


1

You should follow HowTo/ChangeHostname - Debian Wiki and set it to whatever you want, however it sounds like Webmin and/or Virtualmin is misbehaving (try to update it to latest version, if problem still there you might want to submit bug report).


3

First off, you mustn't use sudo in a bash script, it's non-interactive and so if you're required to use a password you won't be able to elevate. Below would be a basic example to install several packages, to install more you would add a package to the "for package in" line. The output is set to append to the existing file. #!/bin/bash apt-get update for ...


0

Well, that is one of the main reason, why debian is moving to systemd. sysvinit (/etc/init.d) is not able to detect, if a service is down/not responding. This means you have to monitor these services and escalate if a service won’t do his job anymore. probably the easiest thing to do would be to migrate to another daemonhandler like systemd (default in ...


2

You could add it to /etc/inittab with respawn: d1:2345:respawn:/path/to/your/first_daemon arg1 arg2 d2:2345:respawn:/path/to/your/second_daemon arg1 arg2 It's a dirty hack, but I've used it succesfully in the past on older sysv-init systems.


0

Debian will eventually have systemd, so this is the way to do it on a Linux system which uses systemd (and many do already; you might consider switching distributions). Systemd can handle keeping the service alive for you automatically; no other tools are required. Simply make sure that Restart=always is set in the service file's [Service] section. # vi ...


0

The standard approach for me is to use the Monit utility for this. I can't quite tell from your description if you've written something like Monit and are trying to make sure it's running, or if you need something to watch the daemon you've created.


0

Best practice is to ensure that your daemons DO NOT STOP in the first place. Failing that you might want to have a look at DJB's daemontools


0

I needed to setup 2 instances of VSFTPD. So I created a 2nd conf file /etc/vsftpd-2.conf and a 2nd init script /etc/init.d/vsftpd-2 I edited the contents of /etc/vsftpd-2.conf to include the following line listen_port=1123. I also needed to edit the /etc/init.d/vsftpd-2 file so when the start-stop-daemon is starting up the application, it uses a different ...


0

There are at least 2 ways of doing this run in standalone mode setup several different vsftpd conf files. In each set a different listen_port and call each with vsftpd /path/to/conf/file make sure to also enable standalone mode in each conf file (set listen to YES and disable vsftpd in inet/xinet) using systemd.unit to control the different ...


0

Read the manual man 5 vsftpd.conf listen_port If vsftpd is in standalone mode, this is the port it will listen on for incoming FTP connections. Default: 21


0

This is a nice little write up for getting this working on CentOS. But should work for Debian based OS's as well. https://www.centos.org/docs/5/html/5.1/Deployment_Guide/s2-ftp-vsftpd-start-multi.html If you cannot run two instances on the same server for whatever reason you could just use iptables to redirect all traffic on port 1123 to 21. iptables -t nat ...


1

Can I fix this at a system level, or is this something going wrong with each individual process? It is difficult to say because its unknown what is happening at the protocol level. Basically the read(2) will block indefinitely providing:- The TCP connection remains open. You expect at least 1 byte of data to arrive. The sender is not ready to send you ...


1

You can customise error text/documents with Apache (http://httpd.apache.org/docs/current/custom-error.html) but that wouldn't help you here. The error messages are embedded in to the client source (subversion/libsvn_ra_serf/util.c): svn_ra_serf__error_on_status(serf_status_line sline, const char *path, ...


0

Doing this manually is going to be a nightmare and definitely a case of whack-a-mole. The real question is: what kind of spam attacks? In nearly all cases these things are widespread and common enough that it can be mitigated in at least half of cases through using a public blacklist or tweaking some settings. If it's: comment spam, see if your ...


3

Reinstall the purged package (sysv-rc). If that isn't enough, try to recreate the links using insserv /etc/init.d or something similar.


0

IPtables is pretty easy. First do iptables --list to get a list of your chains and rules. The default is pretty simple. If the below doesn't work or you don't see an INPUT rule, post the output of that command with the IP's removed for security. The following adds a rule to log traffic from a server and then drop it and saves your chains so that they ...


0

Check this out for squid configuration: http://www.krizna.com/centos/how-to-install-squid-proxy-on-centos-6/


1

First and foremost, if your system is generating messages that are ending up in your queue because they are to email addresses that are not deliverable, it's FAR better to detect it during injection instead of only after attempting to deliver the email. Big email providers negatively colour your sending reputation if you are sending to too many invalid ...


0

May be you want to have a simple bash script or your prefered shell script. #!/bin/bash shit="/tmp/null_ips" ips=$(grep -Ev "^#" $shit) for ip in $ips do ip route add blackhole $ip done further: Check if you already blocked those ip.. ip route show


1

Is there a reason you want to null route the hosts vs. just blocking them with IP tables? Either way both IPtables rules and static routes can be managed via set config files in ubuntu. You could write a script to parse a text file and then modify the route or iptables config files, but that seems circular. It would essentially be creating a config file ...


1

So in looking at your logs we can pretty clearly see that your system is attempting to use an IPv6 address for mail.google.com (DIRECT/2607:f8b0:4004:803::1015). This would happen if you have an IPv6 somewhat configured on your system. But I suspect you don't have it completely configured, or perhaps your ISP doesn't have IPv6 fully configured. The point ...


0

Don't know if the same than which happens with Cyrus IMAPd can happen with Dovecot. Let's try. The Linux kernel gathers real randomness, entropy, from multiple sources and events. This data can be read by any program from /dev/random. Well, sometimes if there's not enough 'real' randomness generated (for example, the server does not contain a hardware ...


1

Option one: You did not set the softlimit higher aswell. Possible solution: in /etc/security/limits.conf add * soft nofile 2048 test with ulimit -n 2048 Option two: You are logged in as user and in some "config" file (profile, bashrc, something like this) the soft limit is set to a lower value. Possible solution f.e. grep for ulimit in your etc ...


0

I've figured it out. I was having problems with my symbolic links... thanks for your help. For those of you experiencing similar issues, make sure your simbolic link in /etc/nginx/sites-enabled/ is pointing to the right file in /etc/nginx/sites-available/


0

I had a similar issue with response time, until I found out that the SpamAssassin database requires some minimal ongoing maintenance. Are you issuing sa-learn --force-expire on a daily basis? It could be that a lack of maintenance has made the database unweildy and it needs to be "trimmed up a bit". Try placing it in a daily cron job and see if the ...


0

Create the run files in /etc/sv/pants/ not /etc/service/pants/. Then a symlink should be created in /etc/service to /etc/sv/pants to activate the service. ln -s /etc/sv/pants /etc/service/ While creating the files directly in /etc/service works for just the service, it seems to cause problems when using logging as well. A service can be deactivated by ...



Top 50 recent answers are included