meta user
network profile
| bio | website | |
|---|---|---|
| location | Toronto, Canada | |
| age | 27 | |
| visits | member for | 3 years, 5 months |
| seen | yesterday | |
| stats | profile views | 47 |
system administrator
|
May 17 |
comment |
SSL routines:SSL23_WRITE:ssl handshake failure Sounds good :) Final piece of info, upstream ticket with OpenSSL that seems to be the root cause of the issue: rt.openssl.org/Ticket/… |
|
May 17 |
comment |
SSL routines:SSL23_WRITE:ssl handshake failure More details of the problem on the Debian ticket: bugs.debian.org/cgi-bin/bugreport.cgi?bug=665452 |
|
May 17 |
comment |
SSL routines:SSL23_WRITE:ssl handshake failure D'oh, understood. You're testing the clients against your site. |
|
May 17 |
comment |
SSL routines:SSL23_WRITE:ssl handshake failure What is the version of the SSL client you're using to attempt connection? |
|
May 14 |
comment |
How do I remove a rootkit without an anti-rootkit program? Can you really be certain about the integrity of your server after such a compromise? It may be wiser to rebuild. |
|
May 14 |
comment |
Log tcpdump Output This may be possible with tc, but I don't have specific experience. On FreeBSD it would be possible with a non-GENERIC kernel that has DUMMYNET built in, via ipfw and pipes. |
|
May 10 |
comment |
Log tcpdump Output An unfiltered dump like this during a DDoS is going to capture a lot of traffic. Your server is already likely becoming unresponsive due to the attack, trying to write all that traffic out to disk is just going to load the server even more, and cause it to become unresponsive sooner. If the attack truly is a DDoS, it could be coming from hundreds of hosts, but the tcpdump could be useful to simply get a handle for what is happening during the attack. From there you can analyse the dump and look into appropriate counter measures, like iptable's connlimit module |
|
May 3 |
comment |
ESX 4.1 VLAN for Management Interface When you applied the management IP via console, did you allow ESXi to restart the management network? Does the ESXi network test succeed? |
|
May 3 |
comment |
ESX 4.1 VLAN for Management Interface Your switchport access vlan 250 line is not applicable when the port mode has been changed to trunk. |
|
May 3 |
comment |
Should I hardcode a value for e.g. $NAMESERVERHOSTADDRESS$? Do you define your host's address as an IP in the define host, or FQDNs? |
|
May 3 |
comment |
Should I hardcode a value for e.g. $NAMESERVERHOSTADDRESS$? Could you clarify what you're using check_dns for? Are you testing that your DNS server works, or are you testing that a certain host name resolves properly? |
|
May 3 |
comment |
Bypassing SQUID on freebsd with PF "Also, I am not sure about transparent. It means that I dont have to configure proxy settings on the client side right?" - Yes, that's correct. Your client, say x.233, needs to be using your squid server as its gateway, or your squid server must also run DNS that the host uses and mangles all DNS to point to the squid server. Can you confirm that the client you're testing with is configured in this way, and is not set to use the squid server as a proxy? |
|
Apr 27 |
comment |
CentOS Opening FTP port? The user could be compromised then used to proxy traffic like fraud, blackhat activity, etc. Run any services that are limited to localhost access only? They can access those remotely now as well. |
|
Apr 26 |
comment |
Guideline for `nice` priority number? I don't know if there is any consistency from distro to distro what nice levels are applied to what by default. This is something you can check with ps with a command like ps -eo pid,state,nice,args. I cannot locate any documentation that references some sort of standard for these chosen levels. |
|
Apr 25 |
comment |
CentOS Opening FTP port? This is exactly what I was referring to with security issues. The solution you provided still allows a user to connect via SSH and use it as a proxy |
|
Apr 25 |
comment |
Apache2 on linux - how to track down performance trouble It's hard to say since the problem is spurious. As you're running on a VPS, you don't know what the underlying hardware is. You could talk to your provider to get statistics (if they feel like sharing.) You could try to check the system responsiveness when there's an issue viewing an image. If you have a problem doing anything filesystem related like an ls, it's related to the disk. |
|
Apr 25 |
comment |
Apache2 on linux - how to track down performance trouble This sounds like a disk latency issue. |
|
Apr 25 |
comment |
CentOS Opening FTP port? Someone asking for information on setting up an FTP likely doesn't want to also give those people shell access. Your recommendation is incomplete and could lead to problems for someone ignorantly following this recommendation. There are a multitude of security issues that come with wanting only SFTP access via OpenSSH. |
|
Apr 9 |
comment |
Exim: send every emails with a predefined sender Could you include in an edit the REWRITE CONFIGURATION section of your exim.conf? |
|
Apr 5 |
comment |
Persistent ip rule on Linux (Redhat) Rule is ip rule add fwmark 1 lookup 100 |
