Latest Server related questions

Score: 0
Gill-Bates avatar
Do I have to enter the public IP into the HOME_NET variable?
ps flag

Do I have to enter the public IP of eth0 as HOME_NET in the suricata.yaml?

vars:
  # more specific is better for alert accuracy and performance
  address-groups:
    HOME_NET: "[192.168.0.0/16,10.0.0.0/8,172.16.0.0/12]"

My understanding is that only private addresses belong in the variable HOME_NET

Score: 1
Renegade avatar
Apache Reverse Proxy rewrite rule for complex URL. "Too Many Redirects" error
br flag

I am trying to configure a reverse proxy to my backend server.

This is my previous configuration which is working.

Define REMOTE_ADDR proxyserver.domain.com

<VirtualHost *:443>
    ProxyRequests Off
    KeepAlive On
    ProxyPreserveHost Off

    RewriteEngine On

    RewriteCond %{HTTP:Upgrade} =websocket
    RewriteRule /prefix/(.*) wss://${REMOTE_ADDR}/prefix/$1 [P,L]
    RewriteCond %{HTTP: ...
Score: 0
Spirited Warrior avatar
Active Directory migrations and profile security translation (something's going wrong)
br flag

This is a general post not seeking a technical resolution to a precise problem. I just want to warn industry colleagues. My career focus has been on AD for 20 years. The precise niche I concentrate on is Migrations and Consolidation projects. I currently work at an organization where I'm migrating 4 domains into one larger one. We've had no end of issues. I've been dealing with a host of challenges for  ...

Score: 0
Ritesh Mathur avatar
App contains exposed Google Cloud Platform (GCP) API keys
eg flag

I am getting "Leaked GCP API Keys" error in my google play console. I have followed this article https://support.google.com/faqs/answer/9287711 . And my key is already restricted but still i am getting this error.

Score: 3
Active Directory: how to get rid of NTLM when we have remote users (road warriors)?
de flag

I want to disable NTLM completely. I don't want password hash to be stored in memory because of pass-the-hash attack (people don't have SeDebugPrivilege but anyway NTLM is not good)

But people connect to workspace via RDP from their homes. I can use VPN + RD Gateway, but still people will use passwords and NTLM for RDP.

Is there any way to fix it?

If no, can I configure RD gateway somehow to get Kerber ...

Score: 0
Darrell Raynard avatar
Trying to raise quotas in Compute
in flag

We're running a very time sensitive migration that requires a good number of VM's, but we hit our limit on the very first one and we can't continue with our configuration until this is resolved.

Resources required:

Current Use: VM's = 1 vCPUs = 8 vRAM = 16GB Persistent Balanced Boot Disk = 250GB

Additional Use: VM's = 10 vCPUs = 40 vRAM = 80GB Persistent Balanced Boot Disk = 2.5TB (250GB per VM)

Score: 0
Manoj Agarwal avatar
CentOS Linux and CentOS Stream! Is upgrade from CentOS 6.0 to CentOS stream 9.0 a good option?
ng flag

We have CentOS 6.8 production machines and we had a plan to migrate to CentOS 8.0. Having come to know that CentOS Linux 8 EOL: 2021-12-31, also that, CentOS Project produces two variants: CentOS Linux and CentOS Stream, where CentOS Stream is the upstream, public development branch for RHEL. I wonder, in such a situation, for production machines, where we need a more reliable and stable OS, will CentO ...

Score: 1
Maestro223 avatar
Enabling PHPMYADMIN Logging & Fail2ban Default Filter
cn flag

I am on Debian 10.5 LAMP with ISPConfig, running PHPMYADMIN 4.9.0.1.

I installed phpmyadmin following this tutorial I can only guess that somehow ISPConfig may be interrupting something.

In any case, I am trying to setup the default phpmyadmin-syslog.conf filter for fail2ban to protect phpmyadmin.

Problem:
pma logging doesn't appear to work according to documentation.

I have tried 3 methods to enable log ...

Score: 2
DKIM for subdomain in Cloudflare
ru flag

I have example.com configured cPanel and I do not use it as mail server. I have created new subdomain in Cloudflare called mailer.example.com and installed Virtualmin on new Ubuntu server with hostname as mailer.example.com.

I have setup MX record for mailer.example.com in Cloudflare. It is working fine.

Now I have generated DKIM for my host called mailer.example.com.

Its selector is 202111.

Now I have ad ...

Score: 0
Mnemosyne avatar
In rsync the "bwlimit" parameter is explicitly ignored, how to fix this
fr flag

I have rsyncd version 3.1.2 listening on port 873 and I want to limit the bandwidth with which my files are downloaded by a client connecting to me. I added a bwlimit both in the config file:

uid = nobody
gid = nogroup

[data]
path = /var/data/files/
comment = Repo
read only = yes
bwlimit = 10

and tried it on the daemon config file

[Unit]
Description=fast remote file copy program daemon
Condition ...
Score: 0
Niels Hofmans avatar
Create ingress firewall rule for GKE API
bt flag

For testing purposes I want to make the GKE API endpoint publicly available. However, I can't seem to be able to create a firewall rule to allow this. I receive the error "source_ranges": conflicts with destination_ranges with the following terraform code to create it.

Any idea why I can't allow internet traffic but filter on destination IP? Thanks.

resource "google_compute_firewall" "gke_api_allow ...
Score: 1
scheduled task to logon to remote windows 10
cn flag

I need to start some services on another Win10 machine every day which is not available as Service, and requires that someone logs on to the windows machine. The only way to do this is to login to this win machine and then locks it.

Is there any way to create a scheduled task (on another machine) to connect and logon to remote computer?

Score: 0
No Access to Cisco ESA from different VLAN
cn flag

I am in the process to migrate to separate Vlans from a single 10.1.0.0/16 subnet on VLAN1

In the existing /16 subnet is our Cisco Mail Security (ESA).

In a new Vlan Segment for clients (10.101.10.0/24, VLAN6 ) I can do pretty much everything but access the ESA. No ping and also no access via HTTP(s). Other servers and services are fully accessible like from VLAN1

The Cisco support said there is no iss ...

Score: 0
Roundcube Address book configuration from slave database
us flag

I am installing RC version..... on Debian .......

We are using PostgreSQL for authentication, ie all our email ids & passwords are in a Postgres table. We query local roundcube database as

<$config['db_dsnw'] = 'pgsql://roundcube:Password@tcp(localhost:5434)/roundcubemail';> It works, we are able to login & access email, send/receive, etc.

I have added Global Address Book as: <$config[ ...

Score: 1
OpenLDAP: interpreting username@domainname as uid=username,ou=domainname
au flag

Is that possible to tweak some settings that would make OpenLDAP always interpreting uid=username@domainname as uid=username,ou=domainname in authentication queries?

Of course, making the clients to do this job would be a much more ecological way, but this would be a less preferable option in my case.

Score: 0
Is it required to install Oracle Client before installing OracleDataAccessComponents and OraOleDB?
us flag

I have a Windows Server 2019 intended to be a web server IIS running ASP.Net MVC applications that store data on Oracle 10g database.

The apps were developed on 32bit machines, and rely on existence of OracleOleDb provider.

When I tried to install ODAC on Win2019, the list of providers did not get updated.

Is it mandatory to install Oracle Client before installing ODAC?

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.