Reputation
10,521
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
1 22 49
Newest
 Necromancer
Impact
~1.0m people reached

Jan
11
comment Can't connect to WebServer inside (Vagrant) Virtualbox
Yes, if you disable NAT. But then to give access to Internet for the VM, you need to add a static route on your router and you need to enable routing on your host machine. Another solution would be to put the VM in the same network as your host and enable bridging between VM and the hosts NIC.
Jan
11
comment Can't connect to WebServer inside (Vagrant) Virtualbox
Check also the Windows firewall inside VM.
Jan
11
comment Can't connect to WebServer inside (Vagrant) Virtualbox
Because you have NAT for that private network. Any incoming packets are allowed only for existing connections. You need to punch holes in that NAT to allow incoming traffic for VM.
Dec
10
comment Why is server FIN'ing after starting TLS session?
Use Wireshark. It has a protocol dissector for TLS. If it doesn't recognize the stream as SSL/TLS, you can change this with: "Decode As..." from the context menu of a SSL/TLS packet.
Dec
8
comment How to prevent a symlink from being removed?
When you delete a symlink, is the same as you delete a normal file. The only permission checked are on the folder. You can limit access to the folder with a SELinux policy, or other mechanisms. But the main question is what is the real problem you are trying to solve?
Nov
11
comment OpenVPN-server disappointing performance
Encryption is done in CPU or, sometimes, offloaded in specialized co-processors (ASICs). It could be that only one CPU is saturated and that could be your bottleneck, even if the overall CPU average is low. When looking for performance problems you have to monitor both the guest and the host.
Nov
8
comment OpenVPN-server disappointing performance
It is interesting to see how the latency is degrading when you do a network test over VPN. It is important to see the if the degradation is only inside the OpenVPN link or also outside. If the degradation is only in OpenVPN, then you should focus on OpenVPN performance.
Nov
8
comment OpenVPN-server disappointing performance
How is the CPU usage on both OpenVPN endpoints (client and server) during the speed test? How much is the latency between endpoints? Test the latency when the link is saturated and when it is not saturated. 4 test in total.
Oct
12
comment ProLiant DL360p Gen8 and ProLiant DL360p Gen9 and ProLiant DL360p Gen7 servers vulnerability of ILO
Rebooting the server will not reboot the ILO. You need to find the reboot option in ILO interface. Also rebooting the ILO has no impact on the main server. Think of ILO like another computer inside the same case. It has its own OS and a different HW platform than your server.
Oct
9
comment ProLiant DL360p Gen8 and ProLiant DL360p Gen9 and ProLiant DL360p Gen7 servers vulnerability of ILO
I do not know how is for HP, but for other servers you need to reboot the out of band management system. ILO is actually another small computer located on the server motherboard.
Oct
9
comment ProLiant DL360p Gen8 and ProLiant DL360p Gen9 and ProLiant DL360p Gen7 servers vulnerability of ILO
You should also contact HP may be they can help in securing the IMPI service.
Oct
9
comment ProLiant DL360p Gen8 and ProLiant DL360p Gen9 and ProLiant DL360p Gen7 servers vulnerability of ILO
You can either disable IPMI and lose remote access to the console. Or you can put the IPMI interface in a separate VLAN that is secured by a firewall and that the access is provided via a VPN server or a secure jump-point server.
Oct
9
comment Docker: running several contaners accessible from the Web
Which problem are you trying to solve by using containers?
Oct
7
comment Why was I able to delete a file owned by root in my home directory without being root?
Immutable attribute protects a file for any changes even from root.
Oct
7
comment Why was I able to delete a file owned by root in my home directory without being root?
It is an attribute specific to ext2, ext3, and ext4. Example: sudo touch test_file;sudo chattr +i test_file;rm -f test_file See: man chattr
Oct
6
comment Why was I able to delete a file owned by root in my home directory without being root?
If you run sudo mkdir d;sudo touch d/f;chmod 777 d/f then rm -rf d;rm -f d/f will fail because the f file can not be deleted from d folder because user has no access to d folder owned by root. But you will be able to run: echo hello> d/f because any user has permission to change the file.
Oct
5
comment Need advice on Apache 2.2.22 Win Server 2003, memory leak
What is the server maximum bandwidth?
Oct
2
comment Increasing Network IP range/scope
There will be no problems in short term. The biggest problem is that you are using static IP allocation instead of DHCP. As the network grows you will have more and more problems with typos in network config spread on each device. With DHCP you can have reservations so the you can keep the same IP for servers that need this. Now is the time to switch to DHCP. And you can roll it out one machine at a time.
Sep
30
comment OpenVPN ssl VERIFY ERROR: depth=0, error=certificate signature failure in TI am335x-evm platform
You should add this as an answer to your question and accept it.
Sep
30
comment Mount LVM in rescue mode
Could you run pvscan and again those 3 commands?