Tag Info

New answers tagged

0

I faced with same problem, so this works at my web-server: iptables -I INPUT -m string --string "announce.php" --algo kmp --to 65535 -j TARPIT I've added this rule at the top. You cat use DROP instead of TARPIT(yes, I'm a bad and forced —Āhinese to suffer :-D).


0

Update for year 2015: Add this to (or uncomment in) /etc/apt/sources.list deb http://us.archive.ubuntu.com/ubuntu/ trusty multiverse deb-src http://us.archive.ubuntu.com/ubuntu/ trusty multiverse deb http://us.archive.ubuntu.com/ubuntu/ trusty-updates multiverse deb-src http://us.archive.ubuntu.com/ubuntu/ trusty-updates multiverse Then run this: sudo ...


1

I've got satisfied with the following approach to disable su (tested in Lubuntu 14.10). Open file /etc/pam.d/su. Then uncomment line: # auth required pam_wheel.so After this nobody (except users which are in 'root' group) can use su. But it is still possible to start root session using sudo su.


1

A bit late to the party, but in case it still helps you or others searching... Linux audit logs aren't really meant to be looked at directly in the raw log file--they're meant to be viewed and analyzed using tools like "ausearch" and "aureport". Many things (including even time/date stamps) are stored in hex format, but you can tell ausearch to interpret ...


0

try running the following command on your server sudo date -s "`date`" Source: http://www.redmine.org/boards/2/topics/31731


0

This is the stupidest thing, but through testing I had tried proxy_pass with https and nginx failed restart. It seems that was another problem. Solution: proxy_pass https://10.0.3.103:8080; [sigh]


0

... as I mention in my comment: doing ssh -v -p 40004 0 from host itself, will provide that you are able to connect to sshd on non-standard port and rest would fall to networking (assuming your part is okay, then most likely your isp).


1

You said: My sshd_config file has two changes from the default UsePAM was set to no and PasswordAuthentication was set to yes. I don't think that had anything to do with it. Actually that almost certainly is your problem. On a Linux system with PAM, attempting to login bypassing PAM is not guaranteed to work, and generally does not. Set UsePAM yes and ...


0

Unless I am mistaken regarding the issue here, simply allowing ip forwarding on the OSX host will resolve the issue: sudo sysctl -w net.inet.ip.forwarding=1


0

We had the same problem, and we found out that our hardware showed broken behaviour with IPv6. You could double check with curl and force IPv4 like so: $ time curl -4 www.google.com ... real 0m0.074s user 0m0.011s sys 0m0.000s


0

Once you have shut down the Ethernet interface the only way to bring it back online is either explicitly by running ifup on the console or rebooting the instance. There is no remote way to bring up an interface that has been shut down. (Assuming this is a single if device, which seems fair given if another up if existed you would already have connected ...


0

I don't think there is anything to do other than rebooting the machine or connect to the console...


0

If mydestination is empty or does not contain $myhostname then the /etc/aliases will be ignored because postfix thinks the email is not a local delivery and will therefore not apply the local aliases. So, leave mydestination at the default (postconf -d mydestination or remove it from main.cf) and the logs should show the to=<...> as your aliased ...


0

like this: #!bin/sh # $Id$ # sshd sed -i 's/PermitRootLogin yes/PermitRootLogin no/' /etc/ssh/sshd_config service ssh reload # sudo echo '%wheel ALL=(ALL) ALL' > /etc/sudoers.d/wheel # user useradd new-user -d /home/new-user mkdir /home/new-user/.ssh cp /root/.ssh/authorized_keys /home/new-user/.ssh/authorized_keys chown -R new-user:new-user ...


0

To me it looks good enough (more experience people, please correct me!), just few caveats. You don't need to reconfigure sshd_config for every user and it would be better to manually set up the authorized keys for the user, as every user can have different keys (but the behaviour you coded might be the one you want). You also don't need to restart ssh ...


1

Using username/password authentication disables any Common Name use by OpenVPN. So it doesn't set the client Common name when logging in. The solution is to set the following flag in the server.conf file and restart the OpenVPN server: username-as-common-name This tells OpenVPN to set the username to the client's Common Name when connecting. Since the ...


2

First, do you have a client-connect script in place? If so, any IP directives from that take precedence. Secondly, according to the OpenVPN documentation, the client-config-dir only uses the client's X.509 common name to determine which file to use. You can validate if the joel file is not matching by creating a DEFAULT file. It appears that you are not ...


1

redirect-gateway is meant to tell the client to send all traffic through to the server. It redirects your default gateway through the VPN. If you want to disable it for one client, you can put the following in the client config to override redirect-gateway: route 0.0.0.0 192.0.0.0 net_gateway route 64.0.0.0 192.0.0.0 net_gateway route 128.0.0.0 192.0.0.0 ...


0

Try a dpkg-reconfigure rabbitmq-server (or whatever the specific package name happens to be). It appears the install partially failed. If this doesn't work, you may need to do an apt-get remove rabbitmq-server; apt-get install rabbitmq-server Pay close attention to the output. If you don't want to do this, check the logfiles in /var/log/apt/ for any ...


4

A workaround is to edit /etc/fstab to use the _netdev mount option. From mount man page: _netdev The filesystem resides on a device that requires network access (used to prevent the system from attempting to mount these filesystems until the network has been enabled on the system). Other possibilities are to use the ...


0

Here is the problem: SSLCertificateKeyFile /etc/apache2/ssl/domain.csr You put your certificate signing request (CSR) file here by mistake. You should put there the private key file you used to generate the CSR instead. That private key file should not be password-protected, otherwise you would need to type a password every time you (re-)start Apache. ...


2

If you don't want to restart the server and just send a signal to postgreSQL, just type command: pg_ctl reload


0

try to enable your GUI of virtual box as reported in this post Vagrant stuck connection timeout and follow steps in comments. if it doesn't work try to add this modification to your vagrantfile: create a file named "script.sh" that contains the following commands: mkdir /home/vagrant/.ssh wget --no-check-certificate -O authorized_keys ...


0

I experienced a similar issue. Here is what I did. Enabled virtualization in BIOS Ran ssh-add ~/.vagrant.d/insecure_private_key Added config.vm.boot_timeout = 600 to my ~/Homestead/Vagrantfile It's working fine now.


0

The "find" solutions above lose some of the capabilities of ls - for example: list only files, sorted in descending modification time. The "ls -p | grep" answers do not elegantly deal with other elements of ls such as -R should they be desired The following answer, while more verbose, in my opinion reflects the truest ls behaviour and most flexibility for ...


2

All of your location blocks need to be in the https server block since that's what is handling your requests. The only logic that needs to be in the http server section is what's required to perform the redirect. Edit: Now that we have the hostname in question, I can see that port 443 on your server is closed: $ nmap www.boilerplaza.co.uk -p 443 Starting ...


0

Idea 1 A VM is meant to be quite isolated from its host, and thus the design is to make this sort of superspection difficult. But, you could do this using the guest-info functionality. You would need to script the host-side, to populate the mappings of guest-hardware topology information (PowerShell etc). and them use the vmtools to get that information ...


2

update-rc.d -f nginx remove This command removes all /etc/rc*/nginx symbolic links. At next boot, the service is not started.


0

if you hard drive is on local RAID - check if the battery status is fine - and the local cache is enabled - otherwise your writes are going to be much slower also use mpstat -P ALL to see if all the cores are equally busy at peak time


2

To get started, check out What permissions should my website files/folders have on a Linux webserver? - I'm not certain what specific tweaks to that you might need to do when using nginx instead of Apache, but I think that post and the answer(s) will give you a good foundational understanding.


-2

I think you can use listen in nginx to listen to different ports, so that you can visit your website via different ports.


2

Recognize that Ubuntu 14.04 uses Apache 2 with PHP running through an mpm_prefork module, of which an editable file is in /etc/apache2/mods-enabled/mpm_prefork.conf. Also, recognize that starting in Apache 2.4, MaxClients is now renamed as MaxRequestWorkers, and so any documentation regarding MaxClients needs to be switched to MaxRequestWorkers. Stop the ...


1

Be sure to either add another user to sudoers first or set a password on the ubuntu account (I would advise the former). Failure to do that could lock you out of sudo on your instance! You may notice that the ubuntu user is not actually listed in /etc/sudoers Check /etc/sudoers.d/90-cloud-init-users Be sure to edit any sudoers file with visudo. e.g. ...


0

Hey this may be a little late....but I had the exact same problem and solved it with this shortcut! http://askubuntu.com/questions/66195/what-is-a-tty-and-how-do-i-access-a-tty as soon as I pressed it it opened up a shell for me (mind you I am running ubuntu server and not desktop so you might want to use the "7" option)


0

After contacting Netgear support, it appears that: If you use 2 stations (1 client/1 server), it will actually only use one link (hence the 1Gbps/940mbps), the link used is decided by the LACP hashing algorithm. To go above the 1Gbps limit, you will need to test with more that 1 client. Source: Netgear support ticket response The same ticket ...


1

Three possibilities: Your VPC route table for the subnet is missing an entry pointing 0.0.0.0/0 to the IGW Your instance was launched into the default or wrong security group that is missing the incoming ssh rule You have a NACL on the subnet that is blocking the traffic


2

What you can raise MaxRequestWorkers to depends on how much RAM each of your httpd / apache processes takes up. If each one takes up 50MB (just picking a random number), then every 20 request workers you have in use at once (i.e. concurrent connections) will take up 1GB. So in that example, you could have at most 8GB * 20 = 160 MaxRequestWorkers. However, ...


1

If you ran the command as is, wget didn't save anything anywhere. The option -O- writes to standard output, in this case to the pipe connecting to gunzip. Any data downloaded is fed to gunzip. gnuzip extracts whatever it gets from standard input, and writes the extracted content to standard output, this time to the pipe connecting to dd. dd writes to ...


-2

Normally, wget would save to whatever directory you are currently working in so run ls to see the contents, or pwd to see what directory (or just look at the beginning of the line`. EDIT: If you know the name of the file, or part of the name, you can run sudo find / -name 'filename'* to find it, replacing what's inside the quotes with what you know of the ...


1

Noticed that you have: ServerName "sitea.com" So is the site sitea.com.au or is it sitea.com? And more importantly, how are you attempting to access the site(s) in a browser? Are you using the FQDN's that are properly defined in your conf file? As mentioned above, you should change your VirtualHost lines to be as it should be IP:Port, it is the ...


0

But first you need to have needed language pack installed. On my German based VPS there was no english language pack pre-installed. So first you check that you have it installed: aptitude install language-pack-en


2

I think you can use the nginx you have for GitLab and, as @moebius_eye suggests, configure it as a reverse proxy for Etherpad and GemInABox. Also, to incorporate the functionality you wanted to approach via DNS, you could use what in nginx is called Server Blocks (a concept similar to Virtual Hosts on apache). You would have to modify your nginx configuring ...


3

What you're looking for is the nginx reverse proxy feature. Read the docs.


1

As long as the specific server app/protocol doesn't support it (in the form of SRV records, wiki link), DNS can't be used for this purpose.


0

The message in question is not related to dpkg and so it is not possible to control it with dpkg options. There are two viable options as I found them: First, completely reinstall PHP: remove PHP 5.3 first and then install 5.5 on "blank system". In my case this is not good solution as removing PHP 5.3 will take very long time (more than 500.000 files and ...


0

It can help to install mcelog and run it as a daemon, it can help provide better reports. They are still cryptic but there is slightly more information to go with to find the culrpit DIMM. mcelog can also handle real-time issues by disabling pages with excessive memory errors and thus giving you more chance to keep the machine running longer until you can ...


0

There are several standards for web SSO. LDAP is not an SSO mechanism, just information lookup. Reach out to your vendors to find out if these applications support Kerberos (Apache uses mod_auth_kerb) or SAML (such as Shibboleth). Each will require some infrastructure, such as Active Directory, FreeIPA, Shibboleth, Oracle Identity Federation, etc.


0

I would suggest using Kerberos/GSSAPI authentication if you want single sign on for your applications. With an Identity Management server with centralized storage for your users and groups, you can hook your Apache web applications, gerrit or Redmine. For the IdM server, you can use FreeIPA project which comes for free and is open source.


1

Old question, but no one really answered you and I have had the same question: Where does this configuration come from? It originates from cloudinit, precisely in cc_ssh.py within /usr/lib/python2.7/dist-packages/cloudinit/config This in turn is directly dependant on the file /etc/cloud/cloud.cfg. The you find a line disable_root: true. You should be ...


4

You can check this page https://launchpad.net/ubuntu/trusty/+source/openssl It will show you the exact security updates that have been backported, even though the overall version date appears old. If you have installed the latest openssl via apt-get upgrade, you are current (on security updates) as of 2015-03-19, which happens to be 2 days after the ...



Top 50 recent answers are included