New answers tagged

8

That means hardware routing on this machine depends on whether anything is plugged into Thunderbolt socket. Remember, Thunderbolt's logical interface is PCIe, so you essentially plugging another device into the computer's system bus. In your Mac it happened that you plugging somewhat in the middle of the system bus, so it "pushes" everything past ...


0

Moved this from comment to answer, since I wanted to add a sentence and ran out of characters. Not accessing doesn't necessarily mean fail. Nevertheless, can't you determine which subnets you use when you connect to the VPN? For example, if you access a server with 10.20.30.40 IP, you could add a static route for 10.20.30.0/24 through the vpn gateway and set ...


0

I know the question is old, but... it was necessary to set the allmulti flag on your network card ifconfig enp3s0 allmulti


0

You need an & stop after each line. The & means apply the same filter, and if it matches stop further handling of this event. :fromhost-ip, isequal, "192.168.2.1" -?NetworkLog1 & stop :fromhost-ip, isequal, "192.168.2.124" -?NetworkLog1 & stop :fromhost-ip, isequal, "192.168.2.160" -?NetworkLog1 & stop


1

In this situation, I recommend using the IP address bound the interface you want to send from, rather than the interface itself (for your config). ping -I <ens5 IP address> <ens7 IP address> The reason the ping isn't working as expected, is that the resultant IPv4 datagram's destination IP address is that of the interface passed to ping, rather ...


1

Thanks for the tips above, I was able to resolve the top level problem and handle the issues I faced on the other side. The reason for the "NO-CARRIER" interface status was, embarrassingly, that I had configured the bond to use NIC interfaces from an older 10GbE card in the same server and then I plugged the Ethernet cables into the interfaces on ...


0

...better late to the party than to never show up at all The changes are separate from Macvtaps and Macvlans. We need to create the vlan interface prior to creating the macvtap for the KVM bridge. https://manpages.debian.org/buster/vlan/vlan-interfaces.5.en.html So I'm actually creating the vlan interface in my /etc/network/interfaces config allow-hotplug ...


1

The source port for each browser's TCP connection(s) is/are different. https://www.oreilly.com/library/view/http-the-definitive/1565925092/ch04s01.html A TCP connection is distinguished by four values: <source-IP-address, source-port, destination-IP-address, destination-port> Together, these four values uniquely define a connection. Two different ...


0

With simply tweaking configuration, you can't achieve what you want. The problem here is that arp entries are created only if the kernel receives a request to send packages. In this case, if the MAC address of the target is unknown, the kernel will send ARP requests, and parse the answers. When packages (other than responses to the ARP request) arrive, no ...


0

I suggest you to use docker with nginx to proxy all requests, and then two different containers one with apache the other with nginx as well. There is a really nice guide in this post Manage a multiple websites server with Docker Compose, NGINX and auto SSL certificates.


1

This is completely normal. Let me explain a little bit more detail. An idle kernel (no process with work to do) puts the CPU in power saving mode, and possibly decreases the CPU's core frequency. Whenever a packet arrives on the network card, the network card raises an interrupt which gives a signal to the kernel "a network packet has arrived". ...


0

I have drawn some sketches The machine, where the ssh tunnel command is typed is called »your host«. Introduction local: -L Specifies that the given port on the local (client) host is to be forwarded to the given host and port on the remote side. ssh -L sourcePort:forwardToHost:onPort connectToHost means: connect with ssh to connectToHost, and forward all ...


0

You could consider using ZeroTier for this purpose: https://www.zerotier.com It will do what you want within reason, and it is likely free for the environment you've described.


0

SSH command syntax ssh your_username@host_ip_address_or_domain_points_to_the_server_ip_address usage: ssh [-1246AaCfGgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec] [-D [bind_address:]port] [-E log_file] [-e escape_char] [-F configfile] [-I pkcs11] [-i identity_file] [-J [user@]host[:port]] [-L address] [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o ...


0

You can use netstat command. the switches that need to be used with netstat command to show you the program name, port number, protocol, which the daemon is listening on the server is as below. netstat -ntlp


2

Hi and welcome to ServerFault. How about this? ss -tulpen | grep -vEe "\s+127[.]|::1" This drops 127.0.0.0/8 and ::1 addresses from the output. While this does list all TCP and UDP ports listening on addresses reachable on this box, it doesn't tell you if they are actually reachable. A firewall (IPTables/Netfilter, external device) or security ...


2

You may not be finding an easy answer to this, because it's a more complex question than you might realize. There's at least 3 possible points of interest to look at: The ports being listened for on the server. netstat -an | grep LISTEN will give you a general idea. Look for source addresses of 0.0.0.0 or specific "outside" interfaces (don't ...


0

Figured out the answer to this problem with the help of this blog. After running the following command, the tcp session from the special IP can get processed. ip netns exec pcapReplay1 sysctl -w net.ipv4.conf.all.rp_filter=0 ip netns exec pcapReplay1 sysctl -w net.ipv4.conf.default.rp_filter=0 ip netns exec pcapReplay1 sysctl -w net.ipv4.conf.enp1s0f1....


3

Your user name on the client machine is used as default for ssh connection to remote machines. You say it works when you do: ssh user@subdomain.mydomain.com but not when you do: ssh subdomain.mydomain.com Therefore we must assume that your user name locally is not user. If that is the case you can either specify user every time or you can add an entry to ...


2

It's not the kernel's job to update nameservers based on RDNSS. It's done via whatever you use to manage your network connections. edit Misunderstood what you wanted, thought of a way too complicated scenario. Rephrasing it slightly: "Having a static ipv4 and v6 setup, netplan does SLAAC anyway. Why?" To fix this, include accept-ra: false in your ...


Top 50 recent answers are included