Tag Info

Hot answers tagged

5

Kerberos tickets granted for authentication are very time sensitive and the mechanism breaks down absent accurate time sync between clients, servers and ticket grantors.


5

If my host were to ("accidentally") assign my IP to someone else, and that server came online and started fighting with mine for control of the IP, would it look like this? Network devices don't "fight" for their ip address. If your server were assigned a static ip address and another server in the same physical network were assigned the same ip address ...


3

If you want to know if another host on the same segment is sending ARP replies when requests for your IP is being sent, the simplest approach is to simply send some requests yourself and verify whether you get a response. Here is an example command (and use your own IP address here): arping -I eth0 198.51.100.241 If you suspect that it only happens ...


2

As @MadHatter commented, it is important to allow DNS for established connections: iptables -I INPUT -p udp --sport 53 -m state --state ESTABLISHED -j ACCEPT ip6tables -I INPUT -p udp --sport 53 -m state --state ESTABLISHED -j ACCEPT


2

This is a very difficult question to answer on a scenario-basis because there are many factors to consider with little information provided. However, in a general sense, here is my insight. Firstly, I agree with the comments against the question that no private address group is any more or less desirable than another based on susceptibility to being ...


2

Its possible to bypass the kernel and use netdirect with hpc installed. see https://msdn.microsoft.com/en-us/library/cc904344(v=vs.85).aspx I cannot locate any perf data (I suspect it would vary per vendor since it uses NIC hardware more directly than the other APIs) but it should be on par with other kernel bypass solutions in Linux (kernel bypass is kernel ...


2

Many authentication protocols check for time skew. Kerberos (AD Auth) being a notable one.


1

I guess the problem not in your host, it is in your container maybe there is no default route in it try: ip route and make sure that there is default route rule


1

In my search I came across old solutions that invovled passing lxc-config parameters to docker, but newer versions of docker don't use the lxc tools any more, so that cannot work. Following the suggestion here: https://groups.google.com/d/msg/docker-user/pL8wlmiuAEU/QfcoFcKI3kgJ a solution was found. I did not look into modifying the pipework script as ...


1

Caused by several different reasons: The client is behind (or using) a firewall that is blocking ports TCP 4500/10000 or UDP 4500/10000 or 500 and/or ESP. Your Internet connection is not stable and dropping packets. The VPN client is behind a NAT device and the VPN Server doesn’t have NAT-T enabled. Possible solutions: If you are using wireless, try to ...


1

I would say that there is no universal answer for this. What’s a good server response time? It is the time your users are ready to wait without disturbing their daily job. As it seems you are talking about a public Website and not a private Web App, some studies have been published : 47% of people expect a web page to load in two seconds or less. ...


1

Change following configuration to your needs. vim /etc/sysconfig/network-scripts/ifcfg-br0 DEVICE=br0 TYPE=Bridge BOOTPROTO=static DNS1=192.168.0.1 GATEWAY=192.168.0.1 IPADDR=192.168.0.100 NETMASK=255.255.255.0 ONBOOT=yes SEARCH=”example.com” Modify eth0 configuration: vim /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE=eth0 HWADDR=00:1e:90:f3:f0:02 ...


1

You should mirror the port showing this symptom and perform a packet capture. That'll give you some more details as to exactly what's going on. When this happens on our network it's usually a compromised router, but it cripples our gigabit switches, so it's more than 6mbps of throughput. it's a bit dated but read this article Update the firmware of the TP ...


1

Horrid. Absolutely that'll be the problem. You need to rewire both ends so that they match either the 568a or 568b standard. Not wiring it correctly will result in the errors you describe because it relies on differential signalling for noise free transmission. Don't worry if you don't understand that. Basically a plus and a minus pair are twisted ...


1

Use a second network for internal communication. You reduce the attack surface on your public-facing interfaces, and can monitor/regulate communications much more easily. You definitely don't want to open your database ports, messaging server, or anything else to the public. In fact, don't put anything except the very front-end server (nginx) within reach ...


1

There are a number of scenarios for each case, but I'm going to list just one for each: You'd add a secondary ip address when you want to communicate with devices that are on the same Layer 2 network but on a different Layer 3 network (devices that are connected to the same physical network but are using a different ip address range/subnet). You'd add a ...



Only top voted, non community-wiki answers of a minimum length are eligible