Tag Info

New answers tagged

2

What you missed is that promiscuous mode only captures traffic that your promiscuous NIC sees. It doesn't have magical powers to go out onto the network and collect packets destined for other NICs. Modern networks use switches, which inspect the destination addresses of packets and only send it to the port it needs to go to, rather than broadcasting it to ...


1

You don't say which version of Solaris (and, more importantly, SSH) you're using, but sufficiently up-to-date versions of OpenSSH have addressed this problem. Here are two entries from my known_hosts file, which have the same IP address but different port numbers (one is the implicit 22); as you can see the stored keys are not the same. [10.69.55.47]:2222 ...


0

I used another guide and had the same error message. In the first step I could assure that packets are arriving at the server (by using tcpdump). The verbose log files stated that after some received packets there were no more received. At the end the firewall on the server was the problem. This firewall was blocking packets in iptables FORWARD chain. ...


1

According to the fine manual, copying the config you want into /etc/Bastille/config and then running bastille -b should do the trick.


4

The hostname or IP address is being stored as a hash (or in plain text depending on options and version defaults) in your known_hosts file. The easiest workaround is to add an entry for each host to DNS or /etc/hosts (ugh!) file with the same IP (WAN) address such as in /etc/hosts: your.wan.ip.address servera serverb and then ssh by hostname and ...


7

There are a few ways of fixing this: You can disable host key checking for this particular host. In your ssh_config file (~/.ssh/config), put something like: Host remote.host.name UserKnownHostsFile /dev/null StrictHostkeyChecking no This configures ssh to never store host keys for remote.host.name, but the downside is that now you are open to ...


0

For anyone that still struggles without an answer I found one myself with the following suggestion: You could try updating the ld.so.cache using: sudo ldconfig -v Worked for me.


0

/source/dir /destination/dir none bind 0 0 /source/dir /destination/dir none remount,bind,ro 0 0 by i test this is not use on ubuntu 14.04 X 64 OS


0

Try following: On primary node drbdadm connect all On secondary node drbdadm -- --discard-my-data connect all


0

As long as your bond's IP (192.168.49.11) is reachable VIA either switch, you're fine in mode 1. If you have console access to the server, this is easy enough to test - just bring each of the slave interfaces down one at a time and verify you still have connectivity to the outside world (or wherever you need to reach). However, I wouldn't recommend doing ...


0

Figured it out. Had to edit the LocalSettings.php file $wgServer variable to point to my server name instead of 'localhost'


1

Looks like MySQL connectivity issue. Is there a chance that you MediaWiki settings refer to the MySQL server using address other than 'localhost'?


0

OK, I feel mixed emotions right now. After uninstalling vsftpd and installing proftpd, then uninstalling that and mucking around with a whole bunch of stuff before finally reinstalling vsftpd, I finally... Was still a getting an error. But it was a different error: everything was blank. No files. Nothing. I was very confused until I tried connecting with ...


0

For a temporary operation, copying the whole backup dir to another SD host can be easier and quickier than managing duplicates directly in Bareos. The only thing you need to remember to preserve existing backups (both data and catalog) is never change volume names. I would also be careful changing SD instance name (Name = ...), it's safer to only edit the ...


0

You could write a little script to do it for you (this is ugly but works): #!/bin/bash for f in *; do flag="x" attr=$(getfattr $f) if [ "$attr" = "" ] then flag=" " fi find -name $f -printf "$flag %a _ %c _ %t _ %P\n" done


0

You can also use the synchronise module to do this. This uses rsync and will copy file & directory structures of any depth and is probably a better choice then fetch for this: - name: Fetch stuff from the remote and save to local synchronize: src={{ item }} dest=/tmp/ mode=pull with_items: - "folder/one" - "folder/two" The key is the ...


1

Michael’s answer shows that there doesn’t seem to be a way to distinguish instance disks from EBS volumes inside an AWS instance. In fact, the kernel info for instance and EBS disks, which you can compare with diff -r /sys/block/xvd{f,g}, is identical except for write stats and device name. And the disks don’t respond to smartctl. However, I have noticed ...


1

I have asked myself the same question, since I found clusterssh's dependence on X11 or XQuartz on Mac OS X annoying, and on top of that the terminal windows opened by clusterssh looked uglier than those in Terminal.app That's how I stumbled upon a tmux-based script from Joerg Jaspert on his blog: ...


0

If your public IP is assigned by a RIR (eg. ARIN, RIPE, etc.), you have a public ASN most probably, and you should peer with one or more ISP (Single-Homed, Stub-Multi-Homed, Multi-homed) rather than having a simple subscription. Basically you need to agree the peering policies (ie. BGP parameters) in this case. Otherwise, if it's your ISP that has assigned ...


0

As setting a test environment for your case would be quite a hassle, this answer isn't tested enough. Use on your own responsibility. I can think of these solutions: Create a daemon-like script, constantly updating your client-side iptables rule, changing ports range a few times every second. Like 1., but reset UDP states table using conntrack -D -p udp ...


1

I finally solved the problem. I had to reduce the MTU from 1492 to 1392 of my PPTP connection. In order to find the right MTU size, try different values directly in your shell by executing ifconfig ppp0 mtu 1200 (or any other value / interface). To make the changes permanent, add the following lines to /etc/ppp/pptpd-options : mtu 1392 mru 1392 Then ...


1

This would be better as a comment, but I don't have that privilege. Do you have a proprietary Java package? Did you re-logon? Check what is installed using sudo zypper search -i java. You should be able to see whatever is providing java version 1.7 and remove that package. It is possible to manually install proprietary java packages, and indeed there ...


0

I had to do add_entry -password -p username@CORP.COMPANY.COM -k 1 -e arcfour-hmac write_kt keytab when using kinit that comes with VAS. Notice arcfour-hmac Then kinit -kt keytab username@CORP.COMPANY.COM works like a charm.


1

Not easily. Even /proc/net/arp does not show the details you are looking for. You could sniff traffic to keep track of this yourself. This would take a significant amount of CPU and I/O away from whatever real work you wanted to do.


0

So write a shell script to collect your data into variables. After you have the data in variables, you can reformat and print them exactly how you want.


0

Here the key line from your mail.log NOQUEUE: discard: RCPT from localhost[127.0.0.1]: : Recipient address triggers DISCARD action; from= to= proto=ESMTP helo= In postfix, DISCARD means postfix pretends to accept the email but in reality it will sent the email to /dev/null (in other means, it will discard the email). So, when you check with telnet, ...


0

This is most probably caused by a memory issue. Swapped out memory to be precise. There must be some sort of a memory intensive task running in the idle period, and all your Apaches, phps, and others get swapped out. Once you try to connect, they get swapped in, but it takes a long time. Once they are back in memory, everything works fine. Solution: Add ...


1

Your second try[Edit 2] is having the correct syntax but I think the error occurs as you are using an older version of NGINX. The 'if' in access log was introduced in NGINX 1.7, see the release notes. If you have installed NGINX from Ubuntu repo then they are shipping ver 1.4.x . Run nginx with -V to know which version you are running. $ nginx -V ...


2

The fact is tar is successful, but prints out warning that those socket files are ignored GNU tar actually provides an option to suppress warnings. You could ignore the "socket ignored" errors using the below command which avoids running a find command that could take a long time to complete. tar --warning='no-file-ignored' -cpzf backup_name.tar.gz ...


0

try to pass all traffic from x.x.21.122 to your DNS. If the errors will dissappear - than you should improve your firewall rules. It logs, that you provide, we can't find any connection on port 39132. Also, please post your asa config.


0

Please clarify - what do you want. At first - iptables work only with packets. It can't set user and password for proxy. But you can set redirect traffic from each VM(it's ipadress) to each own proxy server. I think iptables -t nat -A PREROUTING -i eth0 -s vm_ipaddress -p tcp —dport 80 -j DNAT —to proxy_ipaddress:port should help you.


0

If you're using a centralized service such as WSUS to manage Windows patches or hotfixes, you might be able to include the folder on the Linux system if it is running SAMBA (SMB service for Linux). Under 'normal' operation, the Windows Server Update Service (WSUS) downloads service packs, hotfixes, and QFE updates to a single system for sysadmin review, ...


1

According to nginx documentation found here and here, try to use map rule to map your http referer to certain value and then log to specific file according that value. Put this map in your http context (outside the server context): map $http_referer $log_referer { example.com 1; default 0; } This goes to your server, location, etc.; access_log ...


1

I finally found how to make my StartSSL certificate works with Dovecot and OpenSMTPD (5.4.2p1) : For Dovecot, you need to concatenate the key and the certificate into a pem file - thanks @Alexus - and add these lines into your dovecot configuration file : # blablabla ssl = required ssl_key = </home/mail/ssl/dovecot.pem # Key ssl_cert = ...


0

A home directory must be set for the user. If the user doesn't have one, you can specify it directly in the cron.d-file. You probably need to provide PATH=/usr/bin/ too, or specify full path for the command. HOME=/tmp 0 3 * * * apache /usr/bin/php /path/to/my/script.php


1

per that document that you provided, try to put just private key & certificate into .pem and use same for file ssl_cert and ssl_key. following from my own system: [root@j /usr/local/etc/dovecot/conf.d]# grep ^ssl_ 10-ssl.conf ssl_cert = </usr/local/etc/dovecot/alexus.biz.pem ssl_key = </usr/local/etc/dovecot/alexus.biz.pem [root@j ...


0

gdisk should help: have a look at 'c', 'g' and 'f' from the extra functionality menu. See ubuntu trusty gdisk manpage.


0

You should Manage the config file using a concat module. Make each instances of my_module::mysql create a virtual concat snippet Have my_module::flume realize all those virtual snippets This might well be sufficient to solve the whole problem.


0

The definition of an open relay is a smtp server that permits anyone that is not physically bound to your network to send mail through it. So anyone on your internal network should be able to send mail through the server to other smtp servers without authentication. However you do not want to extend that ability to the world. Normally all the permit ...


0

The issue has been solved and this question can be closed. However, i was not able to do this via ssh. I had to turn off the instance on the virtual box and reboot it. Doing this via ssh remains open for discussion. How to solve the issue by rebooting the rhel5 instance: 1.Boot the system into single user mode (do this by pressing esc on the boot screen. ...


1

The file format is specified in RFC1034 and parts of RFC1035. It is very old (1987), and not specifically defined for BIND or in light of current features. There is no great wisdom to be had here; it's like that by convention. The format is also designed to be used for things like caches, I believe, though in practice this usage must be terribly rare. In ...


0

I even reboot the VM, but still, when it gets back, I'm able to log in as user through ssh. Apples and oranges. You're editing the login file, but you're performing tests against sshd. The sshd daemon calls the PAM library directly with a service name of sshd, thus the identically named file is used. In the event that you were not aware that the login ...


0

If you are already using gpg, I would advise you the following process: Create a directory with a meaningless name (eg. use mktemp -d). Copy your file(s) into this directory. Encrypt and compress the archive of this directory with gpg: gpg-zip -c -o file.gpg dirname You may want to write a shell script to automate this easily.


2

ecryptfs.org ecryptfs can encrypt both the file contents and the file names. It's the default home directory encryption scheme supported by Ubuntu.


3

Since you are on Amazon EC2, and it's working local to the instance but not to its IP address, check your host's network ACL (i.e. security group). The wizard guides you to set up a very restrictive policy, and if you try to do something like open up HTTP to the world, it will just open inbound port 80.


1

As mentioned above by shodanshok /usr/local is a good place to store an application that is not a package (deb, rpm). Hovewer, if you would rather have your app in one directory (instead of /usr/local/etc for config files, /usr/local/bin for executables), you can place it in /opt directory. This is often the directory of choice in case of apps that come with ...


1

I met the same issue and found the solution. You need to set the setuid root to the schroot executable file. The step is shown below. cd /usr/bin sudo chmod 4755 schroot enjoy it.


3

Just apt-get update and apt-get upgrade daily and use AWS best practices. Also whatever services you are running should probably be hardened to the best of your ability. There's really nothing all that fancy to it. Note major upgrades may take down services temporarily. Tweak your /etc/apt/sources.list to your liking as well.


5

I am with Maxim and knowhy, allow login as root to MySQL only from localhost. I would go even further allowing login for localhost or specific ips for all users. Something you can do to connect to your remote MySQL server as a local user is ssh tunneling. Something like this Should work for UNIX systems: ssh -fNg -L 9999:127.0.0.1:3306 user@yourhost.com ...


1

One solution would be to make a script that does the following: Fetch network details of the WAN interfaces. Test their connectivity with ICMP probes by binding the probes to their appropriate interface (-I flag on linux ping command) Depending on connectivity status act accordingly (if primary link is down, switch-over to secondary) The above can be ...



Top 50 recent answers are included