Reputation
2,150
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
12 28
Newest
 Custodian
Impact
~167k people reached

Jun
11
comment sshfs mount using sudo'ed account
Take a look here: serverfault.com/questions/158392/how-do-i-sudo-over-sshfs
Jun
11
comment Can't connect to MySQL 5.5 with SSL
Make sure the CN in the CA and Server certs are different
Jun
11
comment libcurl.so.4 no version information available
Do you cron automatic security updates? Do you have any custom packages either from a third party repository, or one you compiled yourself? Have you installed any software from source?
Jun
11
comment Centos 6.6: [yum install *anything*] fails with [protected multilib error]
Do you have alternative repos like EPEL set up?
Jun
11
comment Centos 6.6: [yum install *anything*] fails with [protected multilib error]
Did you install i686 or x86_64 version of CentOS? You can see this in the output of uname -a
Oct
9
comment Dovecot namespace prefix relation to underlying Maildir structure
For Maildir you would still see folders on disk as User/Maildir/.FolderName but in what's returned from LIST it would appear as FOO.FolderName if your prefix was FOO. and Separator was .
Aug
20
comment Apache vhosts not working on Ubuntu 14.04 LTS
How are you determining it's not working?
Aug
20
comment Asterisk relay between multiple subnets
That is not correct, the clients do not need to be able to reach eachother unless directmedia is enabled. Asterisk will use reinvites to get out of the way to reduce load and decrease media latency. I have edited the original comment though as it seems with the change to using directmedia, it is default for it to be enabled
Apr
22
comment Mysqldump not working with SELECT, LOCK TABLES, SHOW VIEW, EVENT, TRIGGER privileges
Can you login to the MySQL console with usr_backup?
May
17
comment SSL routines:SSL23_WRITE:ssl handshake failure
Sounds good :) Final piece of info, upstream ticket with OpenSSL that seems to be the root cause of the issue: rt.openssl.org/Ticket/…
May
17
comment SSL routines:SSL23_WRITE:ssl handshake failure
More details of the problem on the Debian ticket: bugs.debian.org/cgi-bin/bugreport.cgi?bug=665452
May
17
comment SSL routines:SSL23_WRITE:ssl handshake failure
D'oh, understood. You're testing the clients against your site.
May
17
comment SSL routines:SSL23_WRITE:ssl handshake failure
What is the version of the SSL client you're using to attempt connection?
May
14
comment How do I remove a rootkit without an anti-rootkit program?
Can you really be certain about the integrity of your server after such a compromise? It may be wiser to rebuild.
May
14
comment Log tcpdump Output
This may be possible with tc, but I don't have specific experience. On FreeBSD it would be possible with a non-GENERIC kernel that has DUMMYNET built in, via ipfw and pipes.
May
10
comment Log tcpdump Output
An unfiltered dump like this during a DDoS is going to capture a lot of traffic. Your server is already likely becoming unresponsive due to the attack, trying to write all that traffic out to disk is just going to load the server even more, and cause it to become unresponsive sooner. If the attack truly is a DDoS, it could be coming from hundreds of hosts, but the tcpdump could be useful to simply get a handle for what is happening during the attack. From there you can analyse the dump and look into appropriate counter measures, like iptable's connlimit module
May
3
comment ESX 4.1 VLAN for Management Interface
When you applied the management IP via console, did you allow ESXi to restart the management network? Does the ESXi network test succeed?
May
3
comment ESX 4.1 VLAN for Management Interface
Your switchport access vlan 250 line is not applicable when the port mode has been changed to trunk.
May
3
comment Should I hardcode a value for e.g. $NAMESERVERHOSTADDRESS$?
Do you define your host's address as an IP in the define host, or FQDNs?
May
3
comment Should I hardcode a value for e.g. $NAMESERVERHOSTADDRESS$?
Could you clarify what you're using check_dns for? Are you testing that your DNS server works, or are you testing that a certain host name resolves properly?