Latest Server related questions

Score: 0
GID avatar
Oracle 19c: EM console issue
th flag
GID

On a non-CDB installation I have port 5500 configured as I see using the command:

select dbms_xdb_config.gethttpsport() from dual;

...and yet the server is not listening on port 5500 as I see with netstat, and of course I can't connect to https://server:5500/em

What could I be missing?

Here is my listener.ora:

> LISTENER =   (DESCRIPTION_LIST =
>     (DESCRIPTION =
>       (ADDRESS = (PROTOCOL  ...
Score: -1
Sandeep Kumar avatar
How to improve my current HA design
us flag

I am trying to create high availability application. My current design has two VMs, both have public IPs, both are running in same subnet and both VMs have same web application running in docker. ssl certs and traffic to the app in docker is managed by Traefik. The first VM is master so its ip is updated to Cloudflare. There is a third VM running which has a script which hits the application over IP of  ...

Score: 3
How is this email passing DMARC?
in flag

Today we received a spoofed email: it was sent to us "from us". (Assume we own foo.com -- real domain redacted.)

enter image description here

This is disturbing, as it shows as "from foo.com", yet the sender is definitely not from "foo.com".

The mailbox "hello@foo.com" is a Google Group, set to allow anyone to "publish posts" (i.e. so people on the internet can send it messages, like a regular mailbox) but only members of "foo.com"  ...

Score: 44
gilex avatar
Does Apache Webserver use log4j (CVE-2021-44228)?
cn flag

Does the apache webserver (apache2) use log4j?

I have Apache2 2.4.38 (debian) installed on Raspberry Pi OS (64bit) and found some strange records in my log regarding CVE-2021-44228 from kryptoslogic-cve-2021-44228.com (honeypot/scanner), dataastatistics.com (offline & malicious?) and a8fvkc.dnslog.cn (I dont know what this is)

What should I do now?

  • nothing because apache2 is not affected by CVE-202 ...
Score: 0
How to remove myself as an editor in a GCP project?
jp flag

I had joined a GCP project as an editor role long time ago and I'd like to leave it now, but I can't since it says that only project owner role can remove an user. And the project owner is not responding my request to remove me there.

Is there a way to remove myself?

Score: 0
MongoDB won't start on AWS instance using Bitnami Parse Package instance
jp flag

I have parse server running on an Ubuntu AWS instance when I attempted to restart my mongoDb it won't start. I pinged my local host and there didn't seem to be any issues with that but my apache log did have some warnings/errors about port 4040 that I wasn't clear how to interpret:

[Sun Dec 12 06:51:58.821980 2021] [proxy_http:error] [pid 10239] (-102)Unknown error -102: [client 15x.xxx.xxx.xx:503 ...
Score: 0
Lawrence avatar
Better understand inter-VPC vs. "public" traffic: Public IPs and PrivateLink Interface Endpoints
mc flag

I'm trying to get a deeper understanding of traffic flows and routing in different scenarios when resources in a VPC are communicating with one another and with AWS Services. I recently came across this FAQ in the AWS docs and it threw a small wrench in my understanding:

Q. Does traffic go over the internet when two instances communicate using public IP addresses, or when instances communicate with a pub ...

Score: 0
ZFS/ZoL: Consequences of increasing zfs_vdev_async_write_min_active?
mx flag

By default zfs_vdev_async_write_min_active=2, with a corresponding max of 10. The same default max of 10 applies to the sync read and write queues, but for them the min is also 10.

I've seen configs that boost all of these minimums to the same number (> 10). Why does it help to equalize the balance between async writes and sync reads/writes in this way? It seems to go against what one of the d ...

Score: 1
ZFS/ZoL: Consequences of increasing zfs_vdev_async_read_min_active (and max)?
mx flag

Vdev async read queues have min=1 and max=3 by default. All sync read/write queues are defaulted to min=max=10, while async writes get min=2 and max=10.

Async reads are described as "prefetch reads" in the docs. So I take it that by design, when i/o is heavy, prefetch activity should be kept relatively low. Yet I have seen a lot of recommended configs which raise zfs_vdev_async_read_min_active an ...

Score: 0
Transform Broadcast packet in Unicast packet with iptables and ebtables
in flag

I've been struggling with this problem for months, and my limited networking knowledge doesn't allow me to progress further, so here I am asking for an advice.

I have an OpenWRT Router with two subnets, 192.168.1.x and 192.168.2.x. On 192.168.1.x I have a client PC running an application I don't have sources of, and on 192.168.2.x runs a server of the same software. In order to discover other ser ...

Score: 0
OpenVPN iptables forwading
us flag

Following setup:

openvpn server with public ip, mobile clients and at home a raspberry that act as vpn gateway. All mobile clients get a route from the openvpn server so that they I can connect into my homenetwork via openvpn, thats works fine.

But the openvpn server cant.

I think its a configuration problem with openvpn-server, but actually I have no idea what to do. The problem will be the entry in i ...

Score: 2
Is it possible to repair a ZFS snapshot by re-sending it?
fr flag

Given two ZFS pools where snapshots from one are sent to the other, is it possible to automatically repair a damaged snapshot using a copy of that snapshot stored on the other pool?

I'm hoping this will only ever be a hypothetical question, but it seems worth knowing! As far as I can tell zfs scrub only works for a single pool, and only repairs if there is redundancy in that one pool; I guess what I'm l ...

Score: 0
SSL certificate error minio-server and windows server
cn flag
HvH

I've installed minio on a VPS (running Ubuntu 20) with SSL via CERTBOT. When I connect to this site from my laptop, everything works fine, the certificate is valid. If I try to connect to this site from my windows server 20019 from which I want to connect to the storage location, I get an error that the certificate is not valid. When I check who has issued the certificate it says credo02-fw01.belbone.lo ...

Score: 0
how to negotiate a transport-udp-esp-natt SA with a strongswan server
cn flag

I have writen an IKE client to negotiate IPsec SAs with some IKE servers, such as racoon and strongswan.

When the negotiate finished, I send a IPsec-packets(udp-esp packets) from the client machine, the strongswan server machine receives the packet but not handles it.

my transport-udp-natt network scenes: machine A (centos7) machine B(win7) Vmware machine in machine B(centos7) 172 ...

Score: 0
Networking with nginx reverse proxy
va flag

I have configured a nginx reverse proxy on a debian 11 which I can reach the application server with the subdomain from the internet. But on the internal network it does not work.

The reserve proxy is in the same subnet as the application server 172.3.0.1/24. The domain controllers are entered as DNS. The clients are in a different subnet and cannot reach the subdomain via the browser. The client ...

Score: 1
Securing SSH access with YubiKey: ed25519-sk vs. pam_yubico
cn flag

I just got some YubiKeys to secure my important accounts and am now wondering about the best way of securing access to some VPS boxes I have. Up until now, I have disabled password-based login and used SSH keys to connect to the servers.

As far as I can tell from some research, there are two ways to secure SSH access with a YubiKey:

  1. Generating a ed25519-sk key pair which can only be used together wit ...

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.