Hot answers tagged

79

Just create this script /usr/bin/nginx_modsite and make it executable. #!/bin/bash ## # File: # nginx_modsite # Description: # Provides a basic script to automate enabling and disabling websites found # in the default configuration directories: # /etc/nginx/sites-available and /etc/nginx/sites-enabled # For easy access to this script, ...


36

The A-record alias you create has to be the same as the name of the bucket, because virtual hosting of buckets in S3 requires that the Host: header sent by the browser match the bucket name. There's not really another practical way in which virtual hosting of buckets could be accomplished... the bucket has to be identified by some mechanism, and that ...


34

Lack of IPv6 support on your site will hurt some of your users. According to stats published by Google 20-25% of users currently have IPv6. A large fraction of those users will need to go through some kind of NAT to reach IPv4-only services, which will make connectivity less reliable. The fraction of users without any IPv4 connectivity whatsoever is ...


28

It sounds like you're getting a bit of misleading jargon. The technical definitions for these types of firewalls are: Layer 3 firewalls (i.e. packet filtering firewalls) filter traffic based solely on source/destination IP, port, and protocol. Layer 4 firewalls do the above, plus add the ability to track active network connections, and allow/deny traffic ...


24

As you already said: If I change my DNS to google DNS, the site can be viewed normally. So it has something to do with DNS. Your ISP provides his own DNS-Servers and he has a list of blocked domains. When you now query the IP-address of a blocked domain your ISP will not respond with the correct ip-address but with a ip-address of his own servers (or FBI ...


21

The author lists their reasoning, although it's a bit disjoint. Their primary argument is that it's easy to accidentally check in a config file, and that config files have varying formats and may be scattered around the system (all three of which are at best mediocre arguments for security related config like auth tokens and credentials). Given my own ...


18

https://pkgs.org/ provides a "Linux Packages Search" for several distributions, including CentOS 5–7.


13

Environment variables will be inherited by every child process of the web server. That's every session that connects to the server, and every program spawned by them. The secrets will be automatically revealed to all of those processes. If you keep secrets in text files, they have to be readable by the server process, and so potentially by every child ...


12

I just hit F12 in Google Chrome and loaded up your sites. This is what I learned: Your dedicated server is much faster than your VPS. It returned all of its resources almost twice as fast as the VPS. The problem with your slow speed doesn't lie there. The problem is this: You are loading some of your resources from www.elitereviewing.com, which loads fast,...


10

Some research shows that what EEAA says is actually true. Network Solutions is actually diverting my unused domains to an advertising nexus in the British Virgin Islands. The Register actually published a whole article about this practice (Entitled: "Network Solutions hijacks customer sub-domains for ad fest-- Your site. Their marketing filth.") http://www....


9

I just made static pages from an old Joomla with this command: wget --adjust-extension --mirror --page-requisites --convert-links http://my.domain.com It's short version is: wget -E -m -p -k http://my.domain.com This save pages with .hml extension and will get (almost) all css, js and images files the pages need. But I wanted my static mirror to have ...


9

Lets' say that you have the website http://example.org. When you use your ISP's DNS servers it would resolve that domain to an IP address Since the ISP doesn't want you to see the website, they will let their DNS servers give you a different IP. On that IP address, they can host the page that shows you the warning message. The ISP does not alter your ...


9

CNAMES are not redirections, they are aliases. CNAME also includes all other resource records such as A,MX,TXT. so if you query for an A record, the cname will send you to the A record of it's alias. Many registrars include additional options such as redirect services, godaddy and Google for example. also, be careful entering values for CNAMES, some ...


7

You asked: "Is there some way to determine what exactly is being blocked?", and the answer is yes. Definitely, the most effective way to check what is going wrong within your browser is... to ask directly to the browser :-) Recent version of modern browsers (like Firefox and Chromium/Chrome) includes a "Developer tool" which, among lots of other things, ...


7

With the Azure App Service announcement Web Sites were renamed to Web Apps. Here's a list of old and new service names as well as changes introduced with App Services.


6

Generally, a separate IP is required for each SSL site, so if you attempt to bind to the same IP you will see the above error. This is due to the way SSL works. The server is unable to read the HTTP host header during the handshake process, so it can't use that header information to choose which site (and certificate) to use. Thus certificates in IIS are ...


6

Firstly, one dosen't simply walk into mordor, I mean copy databases. You need to do this right. You'll want to make sure there's no ongoing writes, then make sure everything is copied in a ACID manner. You could shut down the database, move it, then get hit with the realisation things went horribly wrong cause they're different versions... Luckily mysql ...


6

So, how is it that my domain name is getting directed to the Virgin Island and being virtual hosted to ads. Is this something Network Solutions is doing without my consent? Possibly. Domain registrars participate in all manner of unethical and deceptive behavior. Just sign into your NS account and change the domain settings. It's really that easy.


6

Network Solutions will by default point your domain to what they call a "Standard Under Construction" page unless and until you change that. Is it deceptive? Possibly Is it unethical? Possibly The point I'd like to make is that while their practice of doing this may be considered deceptive and unethical it doesn't absolve the domain name owner of taking ...


6

You asked: how can the ISPs redirect other people into another directory Strictly speaking, they're not. They're redirecting people to another server. This has to do with how DNS works. Other answers have covered this broadly, so I'll go into a little more detail: When someone goes to http://www.example.com/, the browser first makes a DNS request to ...


5

www. is just a sub-domain and is usually created as a CNAME to the plain domain name. There's nothing inherently special about www other than it was the unofficial standard prefix for web traffic way back in the day. You can have it say www-i-am-awesome.ibm.com if you control the authoritative name servers for ibm.com, it really doesn't matter. www. ...


5

Running everything on a single EC2 instance defeats the whole point of a cloud-based deployment: the ability to autoscale and self-heal. As I've written before, autoscaling is the heart and soul of AWS and if you're not using it, you'd be better off using a traditional co-lo server or VPS. It would be both cheaper and more durable. I just completed an AWS ...


5

I would use a dynamic DNS service just for their provided hostname. Say they give you dvr-103.dyndns.com You can create a CNAME record in dns to point a hostname at that dyndns.com hostname. It would look something like subdomain IN CNAME dvr-103.dyndns.com. Pretty much in cpanel create a new host of type CNAME and just point it to the the hostname ...


5

We know that we can go in DNS and manually change the website IP to failover IP, but is there a more elegant and faster solution? Not unless a) both your providers support BGP and b) they'd be willing to advertise your routes and c) you have your own ASN. Otherwise DNS is your only option. It's not a horrible choice though if you set your TTL really low ...


5

From what I've read on other answers, it feels like you're asking specifically how your ISP is managing to add "blocked.aspx" to the end of your domain. If that's the case, let's look at a case study: You have a web server running on http://mysite.mine/, which a public, completely trustworthy DNS resolves to public IP 10.0.0.1. You can browse to http://...


5

Sure. You need one IP address per Certificate. SNI is there for a reason and I would slap the idiot if provider around who does not support SNI in the year 2018. Heck, it was standard in 2010 or so. MS was late to the party server wise, IIRC.


4

wget usually works. GNU page: https://www.gnu.org/software/wget Wiki: http://wget.addictivecode.org Example: wget.exe -x -r http://www.acmecorp.com Would create a directory called www.acmecorp.com under your current directory, and recursively download all of the content. There are a myriad of options. wget --help GNU Wget 1.11.1, a non-...


4

NGINX If you're using one of the official upstream packages of nginx from http://nginx.org/packages/, the best way is to navigate to the /etc/nginx/conf.d directory, and rename the affected file from having a .conf suffix to having a different one to disable the site: sudo mv -i /etc/nginx/conf.d/default.conf{,.off} Or the opposite to enable it: sudo mv -...


4

You can try to configure your web browser to navigate to the client's website through some web proxies of Saudi Arabia. There are lists of free proxies available in the Internet such as this. Then you can confirm that you're accessing the website through a Saudi Arabian IP in here. Just try some of the proxies of Saudi Arabia and check if the web site is ...


4

If you are using google chrome or chrome based browser right click anywhere in the page and click inspect element or (Control + Shift + I) if on windows, the click the "network" tab, change the no throttling option to the speed of your choice... Am sure you will be fine as long as the DevTools are open. you will find similar option on other browsers.


Only top voted, non community-wiki answers of a minimum length are eligible