Latest Server related questions

Score: 0
webstackoverload avatar
Bind9 and Web Server on the same machine + domain setup
fr flag

I want to ask can I setup for example LAMP with all domains and Bind9 on the same machine ?

If yes, ok.

Now I have one .com domain for example : site.com

Now I want to understand the steps to do to have in the end this:

ns1.site.com

ns2.site.com

In particularly I need yours help to understand a logic to setup all this software.

Thanks

Score: 0
Charles Duffy avatar
Caddyfile header directive unable to override file_server ETag
cn flag

Invoking caddy run against the Caddyfile:

http://localhost
header ETag forcedValue
file_server

I expect curl -v http://localhost/Caddyfile to show a response with the ETag forcedValue.

Instead, a generated tag based on the Caddyfile's mtime and size is returned.


Things attempted:

  • order header before file_server / order header after file_server
  • tested whether header -ETag can remove the etag al ...
Score: 1
LaurentD avatar
Cannot ping internal IPv6 addresses of VM instances in Google Cloud
pa flag

I'm testing a connection between two VM instances in the same subnet. The VPC has enabled dual stack with internal IPv6 addresses and both VMs received a IPv6 Unique Local Address. The VMs cannot ping eachother via ICMPv6 while it works with ICMPv4.

I've added the following firewall rules to be sure that nothing gets denied.

Name Type Destination Filter Protocols/Ports Action
ipv6-in Egre ...
Score: 0
Firouziam avatar
share two network interfaces on linux
cn flag

I have a Linux PC (ubuntu 22.04) with a network layout as below:

Internet <-> Router <-> PC <-> edge device <-> Switch <-> APs <-> devices

And with two Lan interfaces as below:

  • eno1: Connected to the internet (directly connected to the router), gets IP: 192.168.1.165 from the router (DHCP)
  • enx3c: connected to an edge device and that edge device is connected to a sw ...
Score: 0
Dave avatar
Iptsbles site to site vpn
hk flag

I have installed strongswan site-to-site vpn,thats working fine. On server I have configured iptables with this commans iptables -t nat -A POSTROUTING -s 10.9.141.0/24 -d 10.10.27.0/24 -j MASQUERADE.

Is another way to set up this without masquarade?

I want use routing between network1 and network2 for monitoring of running clients by ip.

Thank you

Score: 0
akastack avatar
Iptable traversal with docker chains
xk flag

Using this as a reference and this previous post, I attempted at creating a iptable packet processing flowchart when docker containers on the bridge network are considered. The flowchart is shown below

flowchart

I had omitted some of the tables to keep the flowchart more concise. For example, I understand that before the first routing decision, a packet technically also passes through mangle and nat.

Howeve ...

Score: 3
fusillibips avatar
Let's Encrypt certificate on SQL Server 2019 - "The target principal name is incorrect"
bg flag

Summary

I'm having trouble getting a certificate issued by Let's Encrypt R3 to work on SQL Server 2019. When using the certificate for SSL but not trusting the server certificate explicitly (In SSMS, I check "Encrypt connection" but not "Trust server certificate"), all authentication fails with the following error message:

A connection was successfully established with the server, but then an error occur ...

Score: 1
KatiaSisHost avatar
Proxmox in Hetzner with 1 IP i loss connection from outside to CT
ng flag

I have a problem with my installation of proxmox... until yesterday everything was working correctly and today a website that I had hosted there has stopped working, the problem is the following:

I have the proxmox with 1 public ip... and I configured the iptables to redirect the traffic except port 22 and 8006 of the proxmox to the ip 192.168.10.100 (Container with CPanel) now well... until yest ...

Score: 0
knagode avatar
Cloud66 cx command returns exit status 255 / Permission denied (publickey)
br flag

I am trying to connect to my Cloud66 server via

cx ssh -s 'My First Server' -e staging chimpanzee

And I am receiving exit status 255.

I tried to connect via ssh:

ssh [email protected] -i ~/.ssh/id_rsa -o UserKnownHostsFile=/dev/null -o CheckHostIP=no -o StrictHostKeyChecking=no -o LogLevel=VERBOSE -o IdentitiesOnly=yes -A -p 22

And I receive Permission denied (publickey). ...

Score: 0
Liero avatar
Output file is empty when running powershell script from Task Scheduler
ba flag

I have a powershell script, that write http response body to output.

When I run it from command line like this, it writes the response to Emails.log file

powershell "./InvokeMyApi.ps1 /api/emails/SendEmails" > Emails.log

However, when I invoke it from Task Scheduler, it only writes empty file.

To rule out missing permission, I granted write access to the folder to everyone

<?xml version="1.0" en ...
Score: 0
falste avatar
Conditionally setting nginx directives inside location blocks
kh flag

What I want

I want to be able to set multiple nginx directives conditionally inside location blocks. For example, for a location /example, I want to set proxy_cache_revalidate on if $http_method is POST, otherwise I want to set proxy_cache_revalidate off. I also want more directives like proxy_cache_valid and add_header to be set conditionally based on different variables like the remote ip, cookies ...

Score: 0
Arthur avatar
How do I redirect a subdomain to another internal webserver without affecting the RDP Gateway
mn flag

we have a standard windows server 2022 running IIS 10 and remote desktop gateway. we use rdp.domain.com for the gateway address for external RDP Users.

we would like to run another internal windows server with IIS 10 for a wedbased app for external users at app.domain.com

what would be the best solution to allow users to access the new app webserver externally.

have tried IIS Rewrite but just cant get  ...

Score: -2
trash2 avatar
postfix-gmail problems: This mail is unauthenticated, which poses a security risk to the 550-5.7.26 sender
my flag

Can someone help, who had that problem too? Postfix and Dovecot is freshed installed and configurated for SSL but if i try to send an email to my gmail account i get that error msg.

Diagnostic-Code: smtp; 550-5.7.26 This mail is unauthenticated, which poses a
security risk to the 550-5.7.26 sender and Gmail users, and has been
blocked. The sender must 550-5.7.26 authenticate with at least one of SP ...
Score: 0
Patrick Teng avatar
Tracing / Solving a sudden spike in Apache2
la flag

My server is running on Ubuntu20.04, a pure LAMP stack with Apache 2.4.41. In the last few weeks, there was a total of 2 occurrence where Apache2 was not responsive (users can't load our website), and we can't solve why, but it started working again after I restarted Apache2 (systemctl restart apache2). I checked and MySQL is up, so I feel it's purely due to Apache2 reaching the limit and being unrespon ...

Score: 0
robokonk avatar
Should I use a Squid on the host machine or a virtual machine?
cd flag

I have a server from SoYouStart and 32 failover IPs.

I need these IPs for proxy (for scraping). Should I set up Squid on the host machine (Proxmox) or on a virtual machine like Ubuntu + Squid?

I read the Proxmox documentation and saw that if I want to add 32 failover IPs (in one block), I must add each IP as a separate network interface?

Score: 0
Alexandre Rey avatar
Certificates issue during RADIUS authentication using NPS server with PEAP MSCHAPv2
sv flag

I am using NPS as a RADIUS server to authenticate some devices using PEAP MSCHAPv2. I have an issue during the server authentication, I am using a chain of trust certificates, with 1 server cert, 1 intermediate cert and 1 CA cert. The problem is that my device doesn't support chain of trust certificates, but only accepts 1 certificate : the server certificate. I've been looking in the documentation but  ...

Score: 0
user3534080 avatar
nginx/swag and FULLY ignoring unknown subdomains
co flag

I have a domain, let's call it foo.dev.

If someone navigates to anything other than the subdomains I have site-confs for, I want it to look like there's nothing at all set up on the domain. If someone goes to http://foo.dev or http://www.foo.dev or http://gibberish.foo.dev, or tries to go directly to my IP address, I want them to get a not found error. Same with https.

Every search hit I've found says "j ...

Score: 0
Dan avatar
Using CloudFlare's Load Balancer with Wordpress Multisite Across Domains
cn flag
Dan

I currently have a single Wordpress site, example.com on CloudFlare with Load Balancing. I'm transitioning this site over to a Wordpress Multisite install so it'll host example.com, foobar.com, and example2.com.

Cloudflare's guide mentions that You can share your load balancer with other sites in your account... just by adding a CNAME. But this doesn't make any sense, as under my Cloudflare site

Score: 0
amaes avatar
installing IBM Tivoli Directory Server
bw flag

I am trying to install IBM Tivoli Directory Server, but I am getting these errors, I am using Centos7 and trying to install Tivoli 7.4 from the below exceptions "cannot run program", it seems like a permission issue while I am using the root user.

the exceptions:

java.io.IOException: Cannot run program "/tmp/ismp001/db2lscmd.sh" (in directory "/tmp/ismp001"): java.io.IOException: error=2, No such  ...

Score: 0
How to have multiple instances of filebeat load balance Netflow input?
id flag

I have a very high volume Netflow input stream, and I was hoping that I could run multiple instances of Filebeat and load-balance the Netflow traffic over the Filebeat instances, and then write to a single remote Elasticsearch.

I've read about load-balancing to multiple outputs, but I'm looking for load-balancing from multiple inputs.

I can split the Netflow input over 2 physical ports, but I'm not  ...

Score: 0
Sandy avatar
IIS https certificates
ma flag

I’m migrating the c# web applications and data apis I've developed that are hosted on IIS to use http to use SSL / TSL (https).

I have not setup certificates with https before and was wondering if it’s possible to use the same certificate on all apps / data apis on the IIS server or if I need to have 1 certificate per site?

I was hoping I can register a single certificate at the IIS server level ...

Score: 0
Luke R avatar
Malicious Requests routed through 'Feedfetcher-Google' and Google Proxy IP
ht flag

We're struggling with a unique situation where malicious/unauthorized requests are being made to our site via 'Google Proxy' IP addresses.

Someone is using Google servers to 'proxy' our website and serve up all the same content, stripping scripts and adding their own advertisements.

Request User Agent:

Mozilla/5.0 (compatible) Feedfetcher-Google; (+http://www.google.com/feedfetcher.html)

Request IP Add ...

Score: 0
bicyclesonthemoon avatar
wget doesn't accept HTTPS certificate (from letsencrypt) on some computers but does on others
sj flag

I have the following situation:

On my www server (Apache2, Debian armhf) I have HTTPS certificate from letsencrypt.org by certbot.
When accessing the server from a browser (Firefox, Chromium) everything was fine, but when I tried git or wget then the HTTPS certificate was not acccepted.

But this I could observe only on some of the computers I tried this but not on others.
Output from 5 computers:

Score: 0
borog1852 avatar
Fork connections out from a single socat connection
bl flag

I have an old legacy application I’m trying to get to work with our semi-modern network. This application sends log messages as HTTP requests (one log per request) but does so over a single TCP connection. If that TCP connection dies, the logs get messed up as there is no queue for them.

I decided to use socat to try and hold a TCP session open while breaking up the HTTP requests on the other e ...

Score: 0
mostafa ahmadi avatar
SSH port forwarding using python
eu flag

I have a VPS that serves as my VPN server, and I want to use this VPS as a VPN using forwarding for my laptop which uses windows as OS. Is it possible to do so without using software like PuTTY, Bitvise SSH client, etc.? For example, can I use Python code?

Score: 1
Georgi Yankov avatar
OpenVPN and dhcp-option domain-route for Windows/Linux
jo flag

I am trying to understand the dhcp-options usage for Windows and Linux (Ubuntu).

There seems to be difference between the implementation.

Using OpenVPN 2.4 server and client, i test on Windows 10 21H2 and Ubuntu 20.04. I have a domain foo.bar, which is a DNS server, followed by multiple subdomains x.foo.bar, which are with private IPs and not public DNS records.

The options that are of interest t ...

Score: 0
Yuri avatar
AWS: routing back from VPC to an instance
gs flag

I'm relatively new to AWS and need to set up some internal infrastructure. Example: a VPN server that routes people into a VPC.

I have a VPN server instance bound to an elastic IP that has a subnet carved out for VPN users. Now how do I tell the VPC that the route back to our VPN users should go through this instance?

I tried editing route tables, but I keep getting an error saying that the route de ...

Score: 0
Aviran avatar
EKS service SSL endpoint
mn flag

When creating a service using EKS, it is exposed using http through a AWS load balancer.

kubectl apply -f service.yaml - Will create a load balancer that's managed by EKS, and can not be modified. any modification, valid or not will be overriden by AWS at some point.

I'm going down the rabbit hole of trying to expose the service as HTTPS.

Modifying the aws load balancer to listen on 443 in https  ...

Score: 0
Maxime Chupin avatar
Redirect a subdirectory to external domain
td flag

I want to redirect all the entries for a certain subdirectory to another (external) domain with the "rest" of the address. I have tried something but it does not work...

server {
    listen [::]:443 ssl;
    listen 443 ssl;

    server_name cahiers.example.fr cahiers.example.eu.org;

    return 301 https://publications.example.fr/cahiers;
    ssl_certificate /etc/letsencrypt/live/publications.exampl ...
Score: 0
Siauz avatar
how to prevent redirect cloudflare origin domain when we do reverse proxy on nginx
cn flag

im having problem with my reverse proxy config on nginx, how can i stop domain that using cloudflare to not redirecting to their original domain when we reversing proxy ?

    listen 443 ssl;
server_name 234.234.234.234;
ssl_certificate /etc/ssl/cert.crt;
ssl_certificate_key /etc/ssl/private.key;
error_log /var/log/nginx/sports_error.log;
location / {
    proxy_ssl_server_name on;
    proxy_pass htt ...

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.