Reputation
822
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
2 13
Newest
 Custodian
Impact
~63k people reached

  • 0 posts edited
  • 0 helpful flags
  • 8 votes cast
May
30
comment Windows 8.1 No picture password option, despite enabling in policies
Officially tapped out on ideas, then. I don't use picture passwords (or indeed any 8.x in AD yet) and so was only suggesting what I could immediately see as the remaining obstacle. Sorry.
May
11
comment DNS going back and forth
Okay, well, you've got a TTL of 10 minutes which explains why it would change "every 10 minutes" (though not why it changes at all, if you follow me), and if it happens to other users on other connections it rules out a problem with say, your router's or ISP's DNS resolvers, so it seems like the only thing left is some sort of problem at godaddy's side that's causing the records to change. Right now, querying ns19 and ns20.domaincontrol.com, I see 23.251.132.209, though.
May
11
comment DNS going back and forth
Because right now if you got from a page on www.notecampus.com to a page on blog.notecampus.com, sure, it'll be pointing at the other server, because blog.notecampus.com is pointed at the mailserver IP.
May
11
comment DNS going back and forth
The DNS records as above only point @ (the bare domain) and www at a single IP (and it is the same for both). This should work fine. It certainly should not switch back and forth. I assume your blog subdomain is supposed to be on a different server?
May
11
comment DNS going back and forth
Sounds like you need to contact godaddy support, if their nameservers are actually inconsistently serving different records.
May
11
answered Windows 8.1 No picture password option, despite enabling in policies
May
11
comment I think my server was hacked - how do i know what has been changed?
"Some rootkits even survive formatting of a drive" [citation needed] - in the context of this discussion (a remote exploit), I do not believe this is currently possible. The only rootkits that can survive a complete reformat involve physical access to inject code into the BIOS, no?
May
11
comment How could this hack have been possible unless the host itself was compromised?
I've updated my answer. TL;DR: I'm not sure I believe your host can tell the difference between you logging in and anyone else logging in on shell unless you've given them a list of your IPs you've used for the last n weeks, unless the suspicious login was from, say, Egypt, or whatever.
May
11
revised How could this hack have been possible unless the host itself was compromised?
updated for new information
May
10
comment PHP-FPM not working on Apache2 (Failed to connect to FastCGI server)
Probably because his pool config wasn't set to listen to a socket. He never said whether he had checked it.
May
9
comment How could this hack have been possible unless the host itself was compromised?
Maybe several sites were exploited at different times. It is very common now for exploiters to upload files and only return to use them a month or more later when the evidence of their intrusion has likely been deleted from the access logs (if they haven't deleted them themselves). Also, in my experience lately these attacks have been manually driven, not done by a script looking to drop files everywhere, so human-element of randomness is to be expected. In any event, the inconsistency of the file drops does not change the "how" of them getting there.
May
9
awarded  Custodian
May
9
reviewed No Action Needed SyncToy Failed in Task Scheduler
May
9
comment How could this hack have been possible unless the host itself was compromised?
Done (I don't think you get notified of edits).
May
9
revised Routing: why do I need to add an extra route in the 2nd router
added 52 characters in body
May
9
comment Routing: why do I need to add an extra route in the 2nd router
If the 3g router has 192.168.101.36 as it's default gateway, there must be a more specific (more specific than 0.0.0.0, I mean) route on there that is causing traffic for 10.10.0.0/16 to be sent elsewhere in the absence of a specific static route. Many 3G networks issue WAN IPs in the 10 range and use carrier grade nat, so it could be related to that.
May
9
comment Routing: why do I need to add an extra route in the 2nd router
The first route, or the second route? I was talking about the "second route" eg the static route on the RRAS that points 192.168.101.0/24 to the gateway 192.168.101.36. This routing information should be known (unless RRAS has it's own routing table that we're talking about?)
May
9
revised Routing: why do I need to add an extra route in the 2nd router
added 42 characters in body
May
9
answered Routing: why do I need to add an extra route in the 2nd router
May
9
revised How could this hack have been possible unless the host itself was compromised?
expanded on PHP running as system user and implications thereof