Latest Server related questions

Score: 0
EDO avatar
Can we determine from email headers that these two IP6 addresses came from the same person?
cc flag
EDO

I'm trying to determine whether the emails came from the same office or person, but lack the in-depth knowledge of IP6 and understanding of the meaning of the same "subnet prefix".

From the email header, the IP6 from:

Sender A: 2a01:111:f403:7005::72f
Sender B: 2a01:111:f403:7005::609

What can we conclude with certainty from the senders? What can be assumed beyond reasonable doubt?

diffchecker results o ...

Score: 0
ph3ro avatar
Configure Secondary Interface on EC2 using Ubuntu 22.04
ro flag

I have launched a EC2 instance having OS Ubuntu 22.04 which has a primary interface ens5 I have attached a secondary Interface ens6.

This is the output of ifconfig -a

root@ip-172-31-7-213:/home/ubuntu# ifconfig -a
ens5: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 9001
        inet 172.31.7.213  netmask 255.255.240.0  broadcast 172.31.15.255
        inet6 fe80::879:bdff:fe2d:2a5e  prefixlen 64   ...
Score: 0
N. J avatar
Rhel 9 pam_mkhomedir vs pam_oddjob_mkhomedir
cn flag

I've had a read at the following https://access.redhat.com/discussions/903523. However doesn't RHEL9 support the creation of homedir unless oddjobd.service is running?

Score: 0
airdogvan avatar
Having trouble with ipset behaviour
ml flag

Have a script to populates ipsets and then I do:

/sbin/iptables -I INPUT -m set --match-set ipsum src -j DROP

Now not sure how this works out for other ports but I know that if I want the addresses included in "ipsum" not to access 80 and 443 i have to add the last 2 commands.

/sbin/iptables -A FORWARD -p tcp --dport 443 -m set --match-set ipsum dst -j DROP

/sbin/iptables -A FORWARD -p tcp --dport 80 -m s ...

Score: 13
lolc avatar
Why does my Let's Encrypt certificate contain references to Cloudflare?
in flag

I own a website that uses a Let's Encrypt certificate. It's not behind Cloudflare, it's hosted at OVH and I'm accepting direct traffic from it.

Now, I set up an apache2 webserver and used certbot to automatically generate a certificate. The problem here is that when I look at the certificate information on Firefox, I can see at the bottom of the page that it contains references to "Cloudflare Nim ...

Score: 0
SSL error "unexpected eof while reading" on same server as the originating request
ph flag

First, I'm aware of the SSL Library Error: error:0A000126:SSL routines::unexpected eof while reading error stemming from OpenSSL 3 reintroducing a feature to prevent truncation attacks.

The question I have is why I'm seeing this error when I'm making a curl call via PHP from the very same server that's reporting the error?

I'm running Rocky Linux 9.1, PHP 8.0.27, and have OpenSSL 3.0.1 (latest ve ...

Score: 1
Eric Jonas avatar
Unable to check mail from other accounts in Gmail using Dovecot/POP3
bq flag

I have a VPS running on AlmaLinux. For SMTP, I use sendmail, which successfully sends and received emails for both of my domain names. I have Dovecot set up to handle IMAP/POP3. I want to allow a Gmail account to get emails from one of my domain names (let's call it example.com) using the "Check mail from other accounts" feature Gmail provides. Unfortunately, I cannot get this to work.

Here is wh ...

Score: 0
Smoke avatar
Mikrotik Ovpn with RADIUS
eg flag

I need to setup OpenVPN server on a Mikrotik router. The authentication for the clients needs to be done by a Windows RADIUS server.

My problem is that the Mikrotik uses the unencryptrd PAP protocol to comunicate with the RADIUS server when authenticating on behalf of the Ovpn server. It works but is insecure. Meanwhile, for the L2TP server the Mikrotik uses encrypted protocols.

I enabled the PAP on ...

Score: 0
Sankaran Ramalingam avatar
publish over ssh plugins in jenkins shows error post build
lb flag

SSH: Remote root is not absolute, getting absolute directory from PWD SSH: cd [/home/ansadmin] SSH: OK SSH: mkdir [] SSH: FAILED: Message [] SSH: Disconnecting configuration [] ... ERROR: Exception when publishing, exception message [Could not create or change to directory. Directory []] Build step 'Send files or execute commands over SSH' changed build result to UNSTABLE Finished: UNSTABLE

Score: 0
Arati Jagadeesan avatar
Trouble starting by service: Linux 3.10.0-1160.62.1.el7.x86_64 #1 SMP Wed Mar 23 09:04:02 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
at flag
Linux XXXXXXXX 3.10.0-1160.62.1.el7.x86_64 #1 SMP Wed Mar 23 09:04:02 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

cat -vetn rc.service
     1  [Unit]$
     2  Description=Script Daemon$
     3  $
     4  [Service]$
     5  Type=simple$
     6  ExecStart=/opt/xxx/bin/rc$
     7  Restart=on-failure$
     8  $
     9  [Install]$
    10  WantedBy=default.target$

As user xxx, wen I run nohup /opt/xxx/bin/rc &a ...

Score: -1
Rumira Daksith avatar
How to configure the OpenVPN like a CTF network
us flag

I currently configure an OpenVPN server on ubuntu 20 using this config; It will give private subnet (172.31.40.0 255.255.240.0) access to the clients, But this VPN redirect the client's internet traffic through my VPN. I want to disable this while preserving the private subnet access to the clients.

I tried removing these line as per the docs # push "redirect-gateway def1 bypass-dhcp" But the client cant  ...

Score: 0
RomanYa avatar
Does OpenLDAP olcAccess support quorum of users
se flag

For example, we have role with sensitive access or privileges. And have two users with less sensitive privileges' role. We want to grant to this users permission to set more sensitive role to user, but only in a quorum of exact two users. Can we do this?

I think, we can use olcAccess "sets", but these is poorly documented...

Score: 0
user3018558 avatar
Linux: Automatically remove routing reference when next-hop is unreachable
ca flag

I'm setting up the routing for my site-to-site wireguard VPN. Everything seems to be working fine but I have noticed that if a remote destination (next-hop) becomes unreachable the Linux kernel doesn't remove the reference to it from the routing table.

root@router:/# ip route
...
10.0.0.0/24 via 192.168.192.10 dev wg0
...

I have tried to define the destination in multiple way e.g. specifying only the  ...

Score: -1
berinaniesh avatar
Use cloud server's network to serve local server's content
ug flag

I am trying to build a web application for a local community. I'd like to host a postgres database, a SSR frontend server, a REST backend server. The internet and electricity are pretty cheap here and I have a PC lying around. I have a few hard disks and I can raid them for redundancy. A similar spec AWS machine comes out to 170 USD and I think I can do much cheaper than that. I don't expect the applica ...

Score: 0
Grandmaster Og avatar
Dovecot auth-worker logs fails but log in works
cn flag

Everytime a log in occurs I get three log lines:

Mar 19 15:29:05 auth-worker(6379): Info: pam([email protected],124.1.1.1,<AL/fkjf3yr98xTrl>): pam_authenticate() failed: Authentication failure (Password mismatch?)
Mar 19 15:29:05 auth-worker(6379): Info: passwd([email protected],124.1.1.1,<AL/fkjf3yr98xTrl>): unknown user
Mar 19 15:29:05 imap-login: Info: Login: user=<[email protected]>, m ...
Score: 0
FLY avatar
php-fpm high load Unexpected character
yt flag
FLY

The load is not high and everything is ok When the load came up that day, it suddenly became abnormal. some mistakes:

[error] 29935#0: *88148841767 FastCGI sent in stderr: "PHP message: PHP Fatal error: Uncaught Exception: The Response content must be a string or object implementing __toString(), "boolean" given.

[error] 29932#0: *88149069848 FastCGI sent in stderr: "PHP message: PHP Warning: Da ...

Score: -4
prd avatar
Is there any way to access Hyper-V host from a network adapter not shared with host?
jp flag
prd

I am considering to move my firewall inside Hyper-V. There will be only one Guest OS that is connected to the virtual Switch, and the guest OS is the Firewall OS. While the second adapter at the firewall OS will be connected to internal network Virtual Switch.

But I am concerned with the security, especially because this interface is facing public network.

So, is there any way, a way to access the h ...

Score: 0
radio_24 avatar
How to exclude a domain from being routed through tor using iptables
tw flag

I'm running a tor router on a Raspberry Pi with following iptables rules (wlan0: internal net with clients / wlan1: Internet):

:INPUT DROP [12:3771]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [544:242321]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -m state --state INVALID -j DROP
-A INPUT ! -s 192.0.0.0/8 -i wlan0 -j LOG --log-prefix "SPOOFED PKT "
-A INPUT ! -s 192.0.0.0/8 -i wlan0 -j DR ...
Score: 1
H.Arslan avatar
Linux bridge does not propagate multicast ntp messages
sd flag

My hardware, based on imx8, has two ethernet interfaces. These are connected together as a bridge, all messages not for this he are forwarded. Everything works as expected except multicast messages: ntp server sends time as a multicast message (ff05::101). When I use tcpdump (tcpdump -i br0), I see the NTP messages arriving, but the local NTP client does not seem to receive them. When I delete the brid ...

Score: 0
lastnoob avatar
Can't enable the PHP DOM extension
fo flag

I have a server that has PHP 7.4.3 installed, but it doesn't load PHP-DOM.

It's not listed in php -m or php -i, nor when I load PHP on a page.

Here's what I tried so far:

  1. Ran sudo apt-get install php-xml several times, it installs without a problem and shows the newest version is already installed.

  2. Ran sudo apt-get install php7.4-xml, it's unable to locate the package.

  3. Added extension=dom.so to ...

Score: 1
Oye avatar
FreeRadius server not responding to Access-Request
ua flag
Oye

I currently deployed freeradius and radtest looks good for local host but when I sent Access-Request from external server, FreeRadius server doesn't reply. see below output of radsniff

[root@pgw-radius tmp]# radsniff -i ens192
2023-03-18 17:29:17.588990 (1) Access-Request Id 91 ens192:10.0.34.13:48791 -> 10.0.33.108:1812 +0.000
2023-03-18 17:29:22.788990 (1) ** norsp ** Access-Request Id 91 ens1 ...
Score: 0
Niyaz avatar
How to downgrade php-fpm from php-fpm8.1 to php-fpm7.4 in Ubuntu 22.04?
us flag

I installed php-fpm8.1 with nginx in Ubuntu 22.04, but php-fpm8.1 is incompatible with some old code; I want to downgrade to php-fpm7.4 without damaging anything. How can I do that?

Score: 0
Sujal Singh avatar
Server randomly shutsdown and blows fan at full speed with no video output
uz flag

Cross-posting this from superuser because they suggested it might get a better response here

Specs

  • Model: HP Z230
  • CPU: Intel Xeon e3 1230 v3
  • RAM: 1x8GB DDR3 Non-ECC RAM
  • GPU: Radeon HD 8570
  • NIC: Intel 82571 Dual Port NIC
  • Storage: 1x128GB SATA SSD, 1X1TB 7.2k RPM HDD

The problem

It randomly shuts down and starts blowing fans at full speed. When it's in the phase of blowing the fans at full speed, there  ...

Score: 1
Homer512 avatar
Upgrade from SATA to SAS: Expected speedup?
no flag

My current setup is this:

  • Megaraid 9361-16i
  • 12 x 12 TB SATA disks WD DC HC520
  • Connected to the controller via 3 of the 4 SAS ports
  • Configured either Raid-10 or Raid-6 without spares. Raid-6 in write-back mode
  • Formatted with ext4
  • Ubuntu 22.04

My benchmarking application uses sequential direct IO to a single file. I tested it with up to 8 concurrent writes of 4-6 MiB each until the file size reaches mul ...

Score: 0
Bani avatar
How to view the used space of a volume in OpenStack
sg flag

In OpenStack, is there a way to view the used space of a volume? In another words, what is the equivalent of the virt-df <domain> --human command in OpenStack api?

Score: 0
Bram avatar
Laravel in php-fpm is not connection to new mysql pods in service of k8s in digitalocean
ci flag

I have a k8s cluster running in digitalocean. Within this cluster we have several pods running php-fpm (7.4) with a laravel application (v8.18) connected to a number of mysql database replica's.

When i load test the system the php and database nicely scale up but the already existing php pods only query to the already existing. To nicely balance everything i need to restart all the php-fpm pods.  ...

Score: 0
BrianD avatar
VPN started with Network Manager doesn't configure routing table correctly
nu flag

I have a Debian 11 system that has been configured to connect to a remote network via VPN. This has been functioning fine for a long time (since Debian 9).

Recently, the remote network made some changes that broke my access to some sites when I was connected via the VPN. While discussing the issue with the people responsible for the remote network, they suggested I make sure my vpnc-script was updated,  ...

Score: 0
benjimin avatar
Dynamic propagation from AWS SSM Parameters (to EC2 ASGs etc)
in flag

In AWS, can a Systems Manager Parameter Store parameter (with the aws:ec2:image data type) be referenced directly in the AMI field of a Launch Template used by an EC2 Auto Scaling Group, so that the new EC2 instances will automatically start with the most current AMI specified by that parameter? (Or is it necessary to separately configure EventBridge to monitor for parameter update events and trig ...

Score: 0
Asken avatar
nginx as a web proxy with ssl
ve flag

I have installed proxmox and am running a simple ubuntu server where I have installed nginx. How and where do I setup ssl? I only want to use nginx to forward location to another web server. Can I set up Let's Encrypt ssl on the nginx server and forward to port 80 on the other web server or do I have to set up ssl on each of the targets?

I will have many dns names passing through the nginx proxy

 ...
Score: -1
NS record of subdomain does not propagate
au flag

UPDATE: resolved, answer at the end of the question

May I know if I had done something wrong? or if something has changed in the last 3~4 years regarding the practice of dns record propagations? the NS record of a subdomain I have setup does not seem to propagate to any public DNS server

I have setup a new subdomain which I plan to delegate its DNS to a specific server.

This was done by setting up a NS re ...

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.