Latest Server related questions

Score: 1
NK-cell avatar
Iptables -C (--check) doesn't work
in flag

I have the following Iptables version:

sh# iptables --version
iptables v1.4.21

The help page contains this line:

--check   -C chain      Check for the existence of a rule

I have such a rule in iptables-save:

-A PREROUTING -p udp -m udp --dport 5060 -j CT --helper sip

But when I'm trying to check (-C) it I see such output:

sh# iptables -C PREROUTING -p udp -m udp --dport 5060 -j CT --helper sip
ip ...
Score: 0
Jenia Glijenski avatar
Squid proxy's specific ports don't work for a short preiod of time, then start working again
gd flag

I am using Squid version 4.6 on a Raspberry Pi 4 which has 7 Huawei Wifi Modems connected to it through a hub. After successfully setting up squid to work with all 7 ports and redirect traffic to the modems, everything worked well and I could connect to it from every single port. However, as time went on, some ports/connections just casually stop working for a few minutes or even entire hours and then g ...

Score: 1
bakar avatar
Exclude google doc embed iframe from nginx rewrite rule?
ua flag

I hope that someone can help me here as I have very limited knowledge about server related stuff.

I have a WordPress site where I want to limit the /wp-content/uploads/ directory access to logged in users only. For this I have used the workaround as specified in the following link on an nginx server:

https://wordpress.stackexchange.com/questions/37144/how-to-protect-uploads-if-user-is-not-logged-in

Score: 0
Sentrigan avatar
How to expose services in private AKS cluster?
in flag

I've created a private cluster on AKS and deployed some workloads to it, but I'm not sure how to connect to the services. They are all NodePort services, both TCP & UDP.

Initially, I thought that the endpoint AKS provides could be used to interact with the cluster as a whole, but this isn't the case -- this only exposes the Kubernetes API (probably why they call it the API endpoint)

I also tried ...

Score: 0
getattrib: NT_STATUS_NOT_SUPPORTED
id flag

This used to work but after a samba server upgrade anything that I am trying to "get" via an smbclient is returning "getattrib: NT_STATUS_NOT_SUPPORTED"

In my client, I simply execute smbclient //mypc//sharename -Uusername and then I key in the password. This works ok and I can see directory listing and traverse into the directories.

As soon as I try to pull a file using smb's get command, it gives  ...

Score: 1
AbreQueVoy avatar
Providing a flag to NGINX Ingress Controller that doesn't run as a Deployment
in flag

In general, my question about setting up a default certificate is answered here: Kubernetes ingress How to set default-ssl-certificate?.

What I don't understand is this part: I'm supposed to add the flag --default-ssl-certificate=kube-system/host-cert as the Ingress' argument. And to discover the YAML config file settings of the NGINX Ingress Controller I should check it with command like: kubectl  ...

Score: 0
saladzic avatar
How to listen on the same port multiple times with Kubernetes?
bd flag

I want 2 or more applications to listen on the same port and for that I would need multiple external IP-addresses. Am I correct?

How do I can achieve Kubernetes (on a LoadBalancer for example) to listen on multiple IP-addresses on the same port?

For example:

a) 192.168.0.2:80
b) 192.168.0.3:80
...
Score: 0
Can WAL be turned of on CoW file systems?
cn flag

As far as I understand WAL in PostgreSQL designed for control of the integrity of Database. On File System same purpose is served by CoW (Copy-on-Write) mechanism.

So WAL look like some overhead. So can it be safely turned off? After all, the integrity of data can provide the file system itself.

Score: 0
Omar Bishtawi avatar
S3 life cycle policy - move to SIA only if size bigger than 128KB
in flag

Usecase description:
I'm planning to set a life cycle policiy to move objects from frequent access to infrequent access automatically after 30 days. but in the bucket, there are some small files that are less than 128KB and I don't want to switch their tiring because of the following limitation in Standard - IA:

"Standard - IA is designed for larger objects and has a minimum object size of 128KB. Objec ...

Score: 0
user3782114 avatar
IIS 10.0.14393.0 window server 2016, remove server header "Microsoft-HTTPAPI/2.0"
au flag

I have application running on window server 2016, IIS 10.0, when i am sending curl request to my domain

curl request :

curl -i X TRACE -d "test" https://example.com

I am getting following response headers :

HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 09 Nov 2021 10:54:15 GMT
Connection: close
Content-Length: 311

I want to remove informatio ...

Score: 0
Wireguard not working with enpoint included in AllowedIps
cn flag

I run a wireguard enpoint as a docker container on my server with roadwarrior clients connecting to it via LTE:

wireguard network diagram

The real server address is a static public IP. The client config is as follows (irrelevant parts excluded):

[Interface]
Address = 10.254.99.2

[Peer]
AllowedIps = 10.254.99.1/32
Endpoint = 192.168.5.55

This works fine if I ping the client from within the docker container. But since I a ...

Score: 1
Ruth Edges avatar
How do I disable sshd algorithms?
ge flag

From my vulnerability scanning software I get this flag/message

The following weak key exchange algorithms are enabled : 

  diffie-hellman-group-exchange-sha1
  diffie-hellman-group1-sha1

I want to disable these two algorithms.

I queried the sshd_config...

[root@vm01 ~]# sshd -T | grep "\(ciphers\|macs\|kexalgorithms\)"
gssapikexalgorithms gss-gex-sha1-,gss-group1-sha1-,gss-group14-sha1-
ciphers ch ...
Score: 0
actomobile avatar
Apache is not using SSLProtocol & SSLCipherSuite directive configuration
ne flag

I am trying to set up HTTPS in my web server. I got error Error code: SSL_ERROR_NO_CYPHER_OVERLAP in firefox and ERR_SSL_VERSION_OR_CIPHER_MISMATCH in chrome. I looked it up and i found that my SSL protocols or ciphers are unsupported. Test in ssllab (https://www.ssllabs.com/ssltest/) resulted inNo secure protocol supported. GeekFlare's TLS test (https://gf.dev/tls-test) says that none of TLS protocols ar ...

Score: 1
henry86 avatar
GCP: no redirect of domain to ip
ma flag

I'm using google cloud platform, have a vm instance with external ip 34.141.104.0 and a domain charec.net, which should be redirecting to that ip.

I have created a cloud DNS Zone (public, DNSSEC off) and have four records in it:

charec.net.       A              34.141.104.0
charec.net.       SOA            ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 1 21600 3600 259200 300
charec.n ...

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.