Tag Info

New answers tagged

0

Where you are going, you don't need iptables. What I understand you want to do is to have the gateway forward IP packets between two interfaces without the gateway performing any NAT on the forwarded packets. You can do this without any iptables rules. My knowledge of LTE is lacking. So if there turns out to be any LTE specific caveats, I won't be able to ...


0

I guess this rule will do the job : iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE


0

If you run a different program, you'll get different results. /usr/local/bin/uwsgi and /usr/bin/uwsgi are different programs. My first thought would be that /usr/bin/uwsgi is perhaps an older version, which doesn't support the chdir parameter.


-1

I had the same problem. My symptoms were that getent passwd works, but logging in with samba and setquota didn't. After running dpkg-reconfigure libnss-ldapd with passwd, group and shadow enabled it now works fine.


1

I'm trying to do something similar, however, if you are simply trying to simulate the load on a server I would look at something like a load-testing framework. I've used locust.io in the past and it worked really well for simulating a load on a server. That should allow you to simulate a large number of clients and let you play with the configuration of the ...


0

The authorized_keys file contains the public key(s). If you want to change that, per user, you could alter your /etc/ssh/sshd_config and add something like... Match User sftpuser AuthorizedKeysFile /path/to/ftpuser_public_key I've never done this but I suspect the path to the file must be readable by the user. I also don't know if this is the best way, ...


0

MySQL backend is standard for most mail-related software that makes easy general tasks. For example, postfixadmin allow to maintain a lot of domains/users by number of admins. Then dovecot's auth service can use that database to fetch user's credentials. Also exim can use the same database for queries. As far as it has single maintenance point, the risk of ...


1

If your VM 1 has an IP in the network 10.10.0.0/24 then there's no need for any route to communicate with 10.10.0.99, since both hosts are in the same network. You must ensure that the host with IP 10.10.0.99 is in the same switching domain and has a 24 bit subnet mask, i.e. 255.255.255.0. If it's not the case please provide more info about the switching ...


0

Unplug its ethernet cable or do route add -net 0.0.0.0/0 gw 127.0.0.1 lo


0

You are correct, by not having a default gateway will not allow the machine to communicate with external hosts, but still allow communication within the same subnet. What is it you want to accomplish? If you want to make the server unreachable on the LAN, just pull the plug on it. You can use iptables if you need more fine-grained policies, like allowing ...


2

You had to check your BIOS, because the CPU P-states seems to be only partly recognized. If found that many server BIOS (mainly DELL) are really broken when dealing with power saving. So, enter in your BIOS and disable any CPU powersaving features. The only ones I suggest you to leave enabled are the one regarding C states (es: C1E, C6/E, ecc.). If your ...


0

We were able to fix our connection problems by forcing the use of a non-Diffie-Hellman SSL cipher. With our mysql 5.5.42 Linux client we had success with specifying the --ssl-cipher=AES256-SHA command line option, as specified in this bug report. Our (Java7) MySQL 5.1.35 jdbc client, however, did not like that cipher, but worked when we specified ...


0

The Mozilla wiki has an excellent article on configuring the ciphers used by Apache. They provide example strings for three different levels of compatibility depending on your needs. You should also check that your version of Apache supports elliptic curve crypto. You can find more detail here. Lastly, try using SSL Labs to check your site for cipher ...


0

No, you can't. The DNS name is translated to an IP address, and at the time your client connects to the server, it is connecting to an IP address + port number. You can use another IP addresses (two IP addresses on the same server), and allow connections to only one IP address (and that's the one to which you point the mc.domain.com record). Or just live ...


4

If I recall correctly, echo mydomain.com > /etc/mailname


0

As far as I see: Have root, then don't use root when you don't need it. Have a user you log in with. This shouldn't be root, but rather a secure sudoer account. Go ahead and run your app in a user similar to www-data if you can. It's made when you install your web server. If someone pops a shell on your server, they'd end up with www-data permissions. ...


1

I have manually stopped all my important services like LDAP, Postgresql and MySQL. And I have run : reboot -f The -f force to ignore the init system. After the reboot I was able to make a simple "reboot" without force mode. Another solution could be more agressive but useful to know, send a magic sysreq remotely with : echo b > /proc/sysrq-trigger More ...


1

I suspect that at some point you accidentally did something like: ....command... > /usr/bin/mail instead of ....command... | /usr/bin/mail thus replacing /usr/bin/mail with a copy of some data. I would suggest that you reinstall the mail program. Because Debian ships several alternatives, you can find the one you have installed with: root@www:~# ...


0

You could try setting the hidepid=0 in /etc/fstab just to see what happens. Add this line to /etc/fstab and reboot. proc /proc proc rw,nosuid,nodev,noexec,relatime,hidepid=0 It would be interesting to see if the problem persists with hidepid actually set to zero. Running debian 7.8 with the above stanza in /etc/fstab "mount | grep -i proc" does not show ...


0

XubuntuY part of the version e.g. 1ubuntu1 That was also asked at: http://askubuntu.com/questions/620533/how-does-ubuntu-name-packages X is the Debian package version. Most Ubuntu packages are based on Debian packages, which is an "upstream" distro. If 0, this means that there is no Debian package: it only exists in Ubuntu. X resets when the real ...


0

The bug that causes this specific issue has been in the libpam-ldap source for a long time, but it's effect was only seen after a separate bug was fixed in the gnutls library that libldap-2.4-2 uses. The specifics can be found in an enlightening email from Ryan Tandy in the Debian bug page for this issue. ( Debian Bug 790488 ). I had already known that ...


0

At least I generated and tested my own script: it runs flawlessly! I hope it can help someone else! #!/bin/sh # A Script which syncronizes debian packages from this server to a second server # ssh must be able to log from user root to user root with key, without password # Execute as root mail=mymail@myprovider.com server2=otherserver ...


1

Well, after a lot of unlucky tries, I've managed to find a way to correct the problem. For people having the same problem or similar, here's how I proceeded : Update your wordpress Connect to your wordpress admin panel if you can and uninstall all unused themes and plugins If you can't, delete them from your server (default path is [your web ...


0

Had to install the linux-headers too before running sudo apt-get install linux-headers-3.16.0-4-amd64 then grub-mkconfig -o /boot/grub/grub.cfg and finally reboot the system. Thanks Mark from the previous answer... Can't up vote right now... don't have enough point :)


0

several things I can think of, 1) make sure your server is a router, e.g it will forward packages from your clients to other networks.. .this is done like this: echo 1 > /proc/sys/net/ipv4/ip_forward or to make this more permanent: pico /etc/sysctl.conf uncomment or add something like this: net.ipv4.ip_forward=1 also, does the client get ip ...


0

Existence of file: /dev/net/tun (character device) is not equal to existence of kernel module called 'tun'. Solution: add tun device to kernel configuration and recompile the kernel.


0

Turns out the serial cable being used was duff. Replaced and now working as should be.


1

After much debugging I found the answer in another SE answer over at unix.SE. It turns out that this error was triggered because there were too few watchers for inotify. In my case, this problem was not logged in any error log anywhere in the system. Simply editing the file /etc/sysctl.conf adding: fs.inotify.max_user_watches = 262144 ...and then ...


0

Looks like I forgot to move the client.conf from the /etc/openvpn/ directory so when I uncommented those lines it just looped all the traffic of the server within the server! Doh!


1

From the error message Jul 20 17:15:55 smtp postfix/smtp[12812]: A61FAD4323: to=<user@domain1.com>, relay=mail.domain1.com[REMOTE IP]:25, delay=0.08, delays=0.05/0/0.01/0.02, dsn=5.0.0, status=bounced (host mail.domain1.com[REMOTE IP] said: 530 SMTP authentication is required. (in reply to RCPT TO command)) looks like your remote server use ...


1

Write cache: disabled. Do you want the write cache disabled? If not, execute hdparm -W1 /dev/sdb and verify it was changed with hdparm -W /dev/sdb. Rerun your test. If it looks better add write_cache = on to /etc/hdparm.conf.


0

Stop using the directory's RootDN as the dn for the local system's root account. The directory's rootdn is not subject to access controls. Use (create if necessary) a dn entry with the appropriate permissions with your LDAP server to modify passwords correctly.


-1

host mail.domain1.com[REMOTE IP] said: 530 SMTP authentication is required. (in reply to RCPT TO command) It looks like you're not authorizing local users to send mail. Do you have any setting for "smtpd_relay_restrictions" in main.cf? I use smtpd_relay_restrictions = permit_sasl_authenticated, reject_unauth_destination Postfix SMTPd Relay ...


1

You have to add your IP to the relay_from_hosts variable. relay_from_hosts = : localhost : 1.2.3.4 : 2.3.4.5


0

http://askubuntu.com/questions/28733/how-do-i-run-a-script-after-openvpn-has-connected-successfully tells how you can execute custom scripts after connection going up or down. So, you should create a down script, which would clean up the routes and make OpenVPN execute that when connection goes down.


0

As Michael Hampton mentioned in the comments on the OP, I adjusted my interfaces file to use a single interface with multiple IP's. Here is the updated interfaces: allow-hotplug eth0 iface eth0 inet static address 10.1.1.3 netmask 255.255.255.0 gateway 10.1.1.1 dns-nameservers 10.1.1.6 allow-hotplug eth1 iface eth0:0 inet static ...


1

In Debian Wheezy, service networking restart seems to do what is expected and doesn't complain. I guess in Jessie with systemd it may be different again.


1

Do you have an auth_mechanisms line in your dovecot configuration? If so, post it, if not that's probably the issue. default for reference: auth_mechanisms = plain login But you're probably going to want something else because of your postfix sasl security options, both plaintext and login are considered plaintext. More: ...


0

I would remove network-manager and resolvconf and try again, verify that /etc/resolv.conf still has the right contents. These two packages don't have a place on servers and are known to mess with network and dns configurations when you least want it. I use --purge to fully erase them, leave it out if you want. You may also want to verify ...


0

For me, changing fs.inotify.max_user_watches did the trick. root@grostruc:/# service ssh restart Error: No space left on device root@grostruc:/# sysctl fs.inotify.max_user_watches fs.inotify.max_user_watches = 65536 root@grostruc:/# sysctl fs.inotify.max_user_watches=262144 fs.inotify.max_user_watches = 262144 root@grostruc:/# service ssh restart Fix ...


0

In your certificate request, you must add "Subject Alternate Names" (SAN). Your certificate CN will still be site.com, but the SAN will have the other names your website is reachable with, such as: site.com www.site.com anything-other-as-long-as-it-works.example.com You'll notice that the I've added the CN in the list of CN and that hosts name need not ...


1

I would not change the server name, since that would mean that all your search engine results would need updating, and that will take time. When purchasing server certificates, the standard way is to send the .csr with www. prefix. The certificate provider will then issue a certificate both with and without the prefix.


3

When you shutdown or reboot your system, systemd tries to stop all services as fast as it can. That involves bringing down the network and terminating all processes that are still alive -- usually in that order. So when systemd kills the forked SSH processes that are handling your SSH sessions, the network connection is already disabled and they have no way ...


2

This is something you need to set on the client side, not the server side. Edit your ~/.ssh/config to contain ServerAliveInterval 15 ServerAliveCountMax 5 This means that after 15 seconds of inactivity, your client will send a message to the server. If it doesn't get any response, it will try again up to 5 times, and when it still doesn't get an answer, ...


1

as the root user: /usr/sbin/a2enmod php5 /etc/init.d/apache2 restart


1

If you can try to use readelf in this way readelf -a /boot/vmlinuz-2.6.18-308.el5 | egrep "(Class:|Machine:)" Class: ELF64 Machine: Advanced Micro Devices X86-64 For 32 bit binary readelf -a test | egrep "(Class:|Machine:)" Class: ELF32 so using readelf you can query ...


1

It is most likely the 'hidepid' option to the mounted /proc filesystem. Check grep proc /proc/self/mounts. If hidepid=1 or hidepid=2, remove the mount option and try again.


1

You can use rsync to essentially clone the whole system via SSH while running. You create the local VM with the specs you need, install a minimal debian (same version) with the same partitioning schema as your VPS and then boot into a live CD (ubuntu-desktop has pretty much anything you will need). Then from the live CD you mount the partition(s) to a ...


1

There are multiple ways to setup chroot jails. Personally I've seen over 50 different scripts for that. All jails are similar, but have smaller or bigger differences, so there is no generic way to do anything inside them. The most common usage of chroot jails regarding installing software, is installing everything from source. Sometimes chroot jails are ...


0

The simplest solution I found over all those years for charting of resource usage and monitoring was munin and mon. While the first excels in graphing usage over days, weeks, and years, the latter excels in very flexible monitoring, tracking failures (and recoveries), and sending out notification. Both can be easily extended using shell scripts or other ...



Top 50 recent answers are included