Reputation
951
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
5 29
Impact
~66k people reached

  • 0 posts edited
  • 1 helpful flag
  • 51 votes cast
May
24
comment Starting to learn about IPtables, why do I need this rule?
No worries :) glad it can help!
May
23
comment Can I run a cron job more frequently than every minute?
it has been asked: without a sleep command
May
22
comment Server only reachable over VPN
I don't understand why this question would be downvoted, as I have never seen nowhere explaining why RP should not be used in professional environment. However, there is a lack of information provided with this question which does not help to solve it. If connection is refused, the port is generally closed. What is your network configuration? Output of netstat -lapute? of route -n? is there any fw configured?
May
19
comment Tcpdump/Iptables on bridge interface without assigned IP address
what does the brctl show command return?
May
18
comment Pound SSL Wrapper Wordpress Login Issue
Could you provide relevant parts of varnish configuration? the output of netstat -laputen when all bricks work together? can you launch tcpdump -elnXi lo port 6081 when pound is working, and tcpdump -elnXi eth0 port 80without it? As to compare both situations, to track credentials, with and without pound.
May
17
comment SSH by key incredibly slow
Ah, OK, you client was trying to negotiate IPv6 first! haven't though of it.
May
16
comment Block smtp service to a IP centos 7 Firewall
I really don't understand your question. You are trying to block a remote IP address from using your mail-server? I don't know much about firewall-cmd, but I would suggest using iptables for this purpose if this is what you need.
May
16
comment Reverse DNS does not contain the hostname error from MXToolBox
You need to provide more information about the tests you conduct, those which succeeded and those which didn't as well. What action did you perform that lead to the error you're having? Furthermore, it would be helpful to get informations about your DNS server, and how you set it up.
May
16
comment Lighttpd static file server 403 forbidden error
chown -R www-data:www-data is bad practice as it gives the whole control to the user www-data which does not need write privileges. furthermore sudo chown -R www-data:www-data /media/storage/www/* would not have solved the issue, as only files and folders after /media/storage/www would have been affected, and not /media/storage/www itself. 775 rights is again bad practice as other world does not need any read/exec access, and www-data does not need to erase/move www folder. 710 Would have been sufficient.
May
16
comment Lighttpd static file server 403 forbidden error
I don't understand why this is down-voted. I +1
May
16
comment Ubuntu broken machine (backup mysql via FTP)
Is your mysql server running? Is it reachable remotely, or does it only listen locally? In the first case, you can reach your mysql server and backup from the network with mysql tools. Filesystem backup might work if there is no write update during the process. Which solution of virtualisation do you use? Do you have access to the host?
May
10
comment Change Mail Password, leave user system password
@sebix: Ok, I didn't get your point. This is clearer indeed now. SSH works better with key authentication; and regarding this aspect, sebix gets the point: enforcing public-key authentication avoids connexion even if password leeks
May
10
comment Change Mail Password, leave user system password
LDAP may be over-sized. And for less than 30 users, MySQL also. postfix.org/VIRTUAL_README.html#local provide a way to use system account; but I think then reaching users from a text file does not look too bad neither (lukas-schulze.de/2012/02/…)
May
10
comment Change Mail Password, leave user system password
Creating another account while conserving a sudo-user reaching emails does not sound like a good idea. Furthermore, speendo never speaks about SSH, public-key-authentication looks like off-topic.
May
9
comment Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?
Maybe serverfault.com/questions/20202/… can help. If you only need authentication for a single service, such as OpenSSH, have a look at blog.scottlowe.org/2006/10/16/no-broad-openbsd-ad-integration
Jul
18
comment LXDE Desktop shortcuts layout configuration files
Thanks for the +1; I would prefer any kind of remark/help/hint/tip :/
May
21
comment Why arp cache is stored in both machine and switch?
Thanks for the guy who voted negatively on my answer, if an explanation could have been given, he wouldn't look like such a jackass. And thanks kasperd for editing my post and correcting my orthography, this is so useful and necessary; You might earn the editor badge for this one, so proud would be your Mum; Don't forget to tell her about it.
May
20
comment iptables blocks ip address even though it is specified to allow it. Why?
Whouaou that's an edition, Andrew Schulman! You're such a life saver!
May
19
comment apache forward REMOTE_USER to X-Forwarded-User
Cameron Kerr, thanks for your help; what I want to do is forward the REMOTE_USER variable IF this one is getting set by apache (when apache authentication succeeds). As the application will redirect anyway for authentication if transmitted variable is empty, this is not necessary. Same result occurs when changing X-Forwarded-User with HTTP_REMOTE_USER
May
19
comment apache forward REMOTE_USER to X-Forwarded-User
I'm afraid this doesn't work neither; the authentication is still correctly provided, but the variable is not sent to the backend server. I don't know if there is an other way to see it without using a network sniffer such as tcpdump; But in tcpdump trace, I see X-forwarded-For for instance but not the X-Forwarded-User I set Thanks for your reply anyway