All Questions
323,732
questions
0
votes
1
answer
11
views
Why is it advised to disable relayhost when hosting mail server behind firewall?
I am trying to setup MTA. While reading documentation I came across "Standard Configuration" for postfix when the server is behind firewall. URL for same: 'https://www.postfix.org/...
- 155
0
votes
0
answers
7
views
Create Asterisk config
I have to build Asterisk on my own on Debian 12.
As part of the installation, Asterisk offers to generate a large amount of long config files in /etc/asterisk, incluing an example PBX scenario (e.g. ...
- 153
0
votes
0
answers
11
views
SSD read/write error ASUS Vivobook S15 S533 (11th Gen Intel) Ubuntu 22.04 issue after update
I have Ubuntu 22.04 upgraded from 20.04 installed in 2020. This machine]1 worked well with kernel 5.15.0-43. After recent update (2023.11.28) it often crashes random with I/O error. While crashing it ...
- 1
-1
votes
0
answers
11
views
My company is planning for an ISP migration for one of our clients. Is it possible to have zero downtime during the migration process? [closed]
The real challenge is that the client only has one primary link to the existing ISP. Our new proposal will include a primary and secondary links. How can I achieve a zero downtime during the migration ...
0
votes
1
answer
25
views
See https sites in local with Debian / Apache2
I'm working on Debian Testing. I see local http sites at localhost/~myhome/... To this end I made the classic change to /etc/apache2/mods-available/php8.2.conf
To re-enable php in user directories ...
- 101
0
votes
0
answers
19
views
user not able to login remotely to sssd configured linux host
I have a RHEL host. I have configured sssd to connect to ldap server. The ldap user are not able to connect remotely to the host. However ever if i do su - username it work for me. but if the user ...
0
votes
0
answers
15
views
dns (udp) proxy using kong
I need to proxy DNS requests based on hostname.
I've configured the Kong to stream 53 udp.
I can create service:
curl -X POST http://localhost:8001/services \
-H "Content-Type: application/json&...
0
votes
1
answer
16
views
How to serve static files for Docker Nextcloud-fpm behing nginx reverse proxy?
I have a similar problem to NextCloud FPM Docker Image behind an NGinX Docker Container as Proxy Reverse
I have multiple web apps running in Docker containers behing a Nginx reverse-proxy.
I'm trying ...
- 43
0
votes
0
answers
7
views
How to exclude dnsmasq used by libvirt from Mullvad VPN's "local network sharing" block
I don't use the local network expect dnsmasq for libvirt. With blocking local network I have no DNS on my VM. For that reason I want to exclude dnsmasq from the local network sharing block with split ...
- 1
0
votes
1
answer
28
views
MS Entra users incorrectly marked as completing proofup and can't complete MFA setup
We've having trouble onboarding a new set of users for MFA authentication with Entra/AD FS.
The environment is an on-premise AD/AD FS server (2019), synching to Entra with P1 to support MFA. This is ...
- 13k
0
votes
0
answers
5
views
pfSense. Alias URL Table with TAR.GZ list on FTP
In pfSense, can I create a "Table URL" alias that points to a TAR.GZ file downloadable via FTP?
Or does it necessarily have to be a full list accessible via HTTP?
- 23
0
votes
1
answer
31
views
Custom Script-based Backups
I'm a believer in having multiple restore solutions in place for the environment I support.
I have a production backup solution for my Windows Server environment. It includes an agent on each box and ...
- 1
0
votes
0
answers
9
views
haproxy stick table entry length
I'm using string stick table:
not specifying entry length (default 32 characters for len is exactly what i need)
there is a note for store keyword stating: "For each
item specified here, the ...
- 101
0
votes
1
answer
16
views
Share macvlan ip address with docker-compose container group
In a docker-compose container group, containers don't need addresses as they can communicate with each other using this pseudo-DNS provided by Docker only for the members of that group. Then, to ...
- 133
0
votes
0
answers
16
views
Windows Certification Authority Autoenrollment when Issuance Requirements is set
I have domain computers CA template which autoenrolls to machines without issues
I activated Issuance Requirements
I can automatically renew existing certificates, but cannot automatically/manyally ...
- 115
0
votes
1
answer
28
views
How can I change the default permissions for `/run/named/session.key` in Bind9?
I'm using nsupdate -l from a local script to update DNS records in Bind9.
It's working, except, I need for PHP to have read access to the key at /run/named/session.key.
I can give PHP access by ...
- 107
0
votes
0
answers
8
views
Linux server management debian 10 and centos dhcp service host-name based Client Classing
I want to allocate a client's IP address based on the host-name provided by the client, but the results are often unpredictable.
I have tried to imitate the Client Classing in dhcpd.conf(5) by ...
0
votes
0
answers
13
views
ingress-nginx helm chart upgrade failed 'could not get information about the resource ValidatingWebhookConfiguration'
I'm trying to upgrade my ingress-nginx helm chart from v4.8.3 to v4.8.4 with this command:
helm upgrade \
--reuse-values \
--set controller.admissionWebhooks.patch.networkPolicy....
0
votes
0
answers
16
views
why the meilisearch index disappear
I have already add the project_id index in meilisearch https://github.com/meilisearch/meilisearch, but after some peroiod of time. The meilisearch project_id disappears automatically. and the search ...
- 375
0
votes
0
answers
13
views
Stunnel keeps hanging and then needs to be restarted
I am running Stunnel on Ubuntu 22.04.
Every now and then it will start hanging(but the service shows as active if I check the status) and I then if I restart the service it will start working again.
...
- 181
0
votes
1
answer
47
views
bypass proxy setting in windows service
In windows I have a system variable http_proxy=a.b.c.d:8080
I need to bypass these proxy when I boot a service but I check and always has these variable.
How could I bypass?
0
votes
0
answers
20
views
Error trying to get disak space usage from discovered VMS using Zabbix
I am trying to create a trigger on a template called Template Virt VMware Guest in order to extract the % of free space of the VMWARE VM that has the template inherited.
What I did was:
Going to the ...
0
votes
0
answers
18
views
NFS mount becoming unbearably slow over time with high number of test_stateid RPC calls
At work, we have several workstations in a computer pool with user homes on our central NAS, mounted via NFS. We're facing the issue that file access on these shares sometimes becomes unbearably slow ...
- 101
0
votes
0
answers
22
views
Unable to delete local user in RHEL [closed]
I want to delete user test.
cat /etc/passwd | grep test gives no output
id test shows user id as output
userdel test gives output, userdel: user does not exist.
Whether user exist or not, if existing ...
- 1
0
votes
1
answer
47
views
Isass.exe memory leak on Windows Server 2008 R2
I found one of our Windows Server(2008 R2) use 98% memory(16GB in all). In Task manager, lsass.exe was found using about 15GB memory. After restart the server, lsass.exe occupy about 10MB memory, and ...
- 1
1
vote
0
answers
31
views
Internal network exception on the k8s following VMWare vMotion
Our k8s cluster uses VMware VM as worker nodes. K8s version is 1.22.9, network is flannel, kube-proxy mode is iptables.
A worker node with storage was moved with vMotion. After the migration is ...
- 11
0
votes
0
answers
27
views
SSH access to my AWS EC2 container
C:\Users\javac>ssh -i "DemoServer.pem" [email protected]
The authenticity of host 'ec2-52-15-253-230.us-east-2.compute.amazonaws.com (52.15.253.230)'...
0
votes
0
answers
14
views
Parsing TCP flag Data for IP Tables
I have input file which has data like below
chain:VARIABLE_IN ip_version:v4 proto:tcp sport:5401 dst_ip:18.159.158.206 dport:5432 decision:a tcpflags:&syn!=syn
My code reads above data to form ...
- 103
0
votes
1
answer
49
views
IIS FTP - unencrypted access even when "Require SSL connections"
I have set up the FTP server from IIS in a Windows 10 Pro machine.
Even though I have the following settings, unencrypted access is still possible. I could simply telnet in and submit USER and PASS ...
- 397
-1
votes
0
answers
22
views
Fiber Channel Issue in Windows Server
I installed Windows Server 2022 LTSC 21H2 Build 20348.643 on a server and Windows started normally. After that, I connected two FC links (from the Windows server to the SAN switch) and restarted the ...
- 1
1
vote
2
answers
24
views
Can I log when the message arrival rate exceeds the message delivery rate in postfix?
I am trying to implement a MTA, on reading documentation of the postfix I found a parameter 'in_flow_delay' whose description in sort says 'Time to pause before accepting a new message, when the ...
- 11
0
votes
0
answers
34
views
Visitors get automatically connected anonymously, how to prevent that?
I had Moodle 3.11 i upgraded to 4.2 following the procedure from the docs. But after the upgrade, (i also moved it to a new VM) i notice that when ever I go to the platform, on the top right corner it ...
- 185
0
votes
0
answers
21
views
What is behaviour of opendkim while verifying an email with multiple dkim signatures?
I am trying to implement DKIM verification using Opendkim and postfix. The doubt I am struck by is what will happen if the email has more than one DKIM signature and one of them fails (as like failed ...
- 11
0
votes
1
answer
38
views
What difference does it make to implement a feature as policy service vs as milter in postfix?
I am trying to implement MTA using postfix. I am struck at how to implement standard services like spf, dkim etc. as well as some custom services. I mean they can be implemented as policy delegation ...
- 155
0
votes
0
answers
14
views
What are typically the headers which I should oversign?
I am trying to setup MTA using Postfix and using opendkim for dkim signing. When I went through opemdkim documentation it have a field which is named 'OversignHeaders' document describes it as: "...
- 11
0
votes
3
answers
55
views
How can I setup a DNS server for a subdomain behind a dynamic IP address?
I'm working on a secure/isolated service that manages TLS certificates using the ACME protocol. The server needs to respond with a TXT record on a specific subdomain. This server won't service ...
- 107
0
votes
0
answers
20
views
sendmail setup and config
I am trying to figure out how to setup sendmail to allow for mail to be sent between two machines. In my case here's what I did.
Installed sendmail
commented the line where sendmail was servicing ...
0
votes
1
answer
17
views
What does "--[no]subdomains" option in opendkim-genkey mean?
Based on the documentation --nosubdomains "Disallows subdomain signing by this key". But didn't we need to create separate DKIM records for subdomains regardless?
- 11
0
votes
2
answers
51
views
configuring SSL for two different applications on same server: web server and python
I want to run SSL for web server https://www.domainname.com on port 443 and python REST api server https://mgmt.domainname.com with Flask. I have configured Apache SSL and it is running on 443. I ran ...
- 107
1
vote
1
answer
37
views
Ubuntu server 23.10 100% CPU cannot ssh - how to diagnose?
I have a ubuntu 23.10 server running on an arm board. Occasionally it seems to get into a situation where it appears to run at 100% (judging by the pwm fan speed). I can ping it, but I cant ssh to it. ...
- 193
0
votes
0
answers
22
views
Is it possible to disallow external IPs from accessing a page of a React site?
I'm currently learning React to host a personal website (on an Ubuntu server) and am port forwarding it to allow access from the internet.
However, for security reasons, I'd like one or more pages to ...
Omaro_IB
1
vote
0
answers
22
views
Apache: require with satisfy, and v2.5 compatibility
I want to protect an entire server with Require valid-user, but I want to allow certain resources to be accessible without a login. For the sake of argument, say that files A, B, and C should be ...
- 433
-1
votes
0
answers
12
views
VPS hosting: React + Java (SpringBoot) + MySql application does not load data from the database
I have an application developed in React, Java (with SpringBoot) and Mysql. On my local machine it is working perfectly. When upgrading to VPS hosting with Linux Ubuntu does not load the database data....
- 1
0
votes
1
answer
34
views
Postfix rejecting my email from a "Contact Us" form, with "SMTPRecipientsRefused"
I made a "Contact Us" form in Django, and the Django part of it seems to be working. But sending of the email it generates fails with
SMTPRecipientsRefused at /contact/
{'[email protected]'...
0
votes
0
answers
22
views
why the nexus did not download the newest package from npmjs official site when package did not exists in local
I have update the package to 0.1.148, but when I update the package in macOS using this pnpm command:
> pnpm update --force
WARN using --force I sure hope you know what you are doing
...
- 375
-1
votes
0
answers
26
views
How to access hard drives of a broken DS 416 SLIM 4-BAY
My Synology DS 416 SLIM 4-BAY NAS broke. It doesn't seem to get any power anymore.
How can I access the hard drives which are configured in a RAID5? I can't buy a new identical device, since they are ...
- 483
3
votes
2
answers
201
views
What is difference between using smtp vs relay transport type in postfix?
I am trying to setup MTA which should submit different intranet mail gateways based on the recipient's domain. For that I thinks transport_maps in postfix should be setup for selective domains; if ...
- 155
0
votes
0
answers
34
views
Managed FTP / SFTP / FTPS front end for AWS S3 [closed]
I am looking for an affordable service that is capable of receiving about 100,000 files a day and storing them in an S3 bucket. Each file will be about 30K in size.
I have looked at the AWS File ...
0
votes
0
answers
23
views
SSD Crucial P3 driver not accepted by Windows 11 system installation [migrated]
I'm installing Windows 11 on a Dell Latitude 5500 with replaced SSD (Crucial P3 PCIe 3.0).
Installation doesn't detect the HW, so I used Shf+F10 to initiate partition (HW is detected by BIOS and ...
- 101
-2
votes
0
answers
26
views
Static IP directs to hosted service behind a proxy server but the mapped Domain name directs to Router GUI
I have a domain name (eg. example.com) that is mapped to a static IP say 245.125.145.155. I have some services in a hosted server in my LAN and proxied by a proxy manager. When I type the static IP ...
