Is it possible to disable default gateway in WireGuard VPN client? I used "allowed IP" to my own subnet, but still whenever I try to connect to VPN server, the client sets default gateway to the WireGuard server IP.
Any other way to disable default gateway in WireGuard?
i have some R scripts, which only can run in sequential way, cannot be broken into chunks or any parallel library for R or any other language cannot be used.
Is there any way i can distribute the Sequential execution of code to multiple cores or may be multiple servers in network? to speed up execution ?
I tried to use inotify notifications, to check for filesystem events, but it does not work. no file-system vent notifier worked.
Is there any inotify utility available for remote file system like EFS, NFS, GFS etc?
I have 2 Nginx Load balancers, running on AWS, each with an elastic IP address. I want to implement fail-over on them.
Can I use Route53 to setup health check, so whenever one server goes down, then the traffic is routed to another server, based on IP? If this isn't possible then can I use CNAME or domain name to point to other IP in case one goes down?
I am a beginner so asking this silly question. Is docker swarm free to use for building cluster of docker containers? i heard it is $15/hr ? We can use swarm in production without paying anything? any limitations on it?
Also can i run specific docker containers on dedicated hosts and run some selected containers on other hosts?
Is there any way to run Postfix in foreground?
I want to run Postfix as PID 1 in docker. I don't want to use any bash shell, supervisorD, or any wrapper to start it.
I just want to know if there is any way to start it in foreground so I can check its logs from "docker logs 'container-name'"
When I manually run "postfix start" it runs and then starts in background. Any way to keep it in foreground?
Thanks
Strangely on few on my linux servers, intermittently, when i try to login through ssh and run commands, they take about 15-30 secs to execute every command. Every commands is executed very slow. But as soon as the command executes, then it performs normal funtion, (i mean does not slows down).
I have checked, CPU, RAM, IO, Network, everything is in normal condition. so what could be the issue?
I am getting huge amount of these in my mail log, and unable to find its originator. What could be the reason? Here is log entry:
postfix/cleanup[9626]: 4413082E40: message-id=<[email protected]>
postfix/qmgr[9367]: 4413082E40: from=<[email protected]>, size=255, nrcpt=1 (queue active)
I have an iSCSI volume of 96GB on SAN, which has ZFS pool implemented on it. i have resized the size of SAN volume from 96 to 120GB, but the zpool list only shows the old space (96GB). how to achieve the space of 120G or resize zfs pool to utilize or identify 120GB of space?
I want to know that is it possible that using postfix or any other MTA, i can apply a restriction that email sender cannot change/spoof his sender email, and email is only sent from the email ID, through which it was authenticated.
thanks
Is it possible to issue a command from master puppet, to a node, to run agent and apply the latest configuration to it?
Like, I have lost password for a user and i am not able to login, but puppet agent is installed on the server and I can apply the changes on the server by running the puppet agent, but as its not running automatically and I cannot login to run it manually, how to run it and apply configuration through the puppet master? (if possible)
Is there a way to dis-able mod-security for all websites? except one? i have more than 500 websites hosted, only want to turn it on for one website, which is having attacks on it.
On my Linux server, i am getting a suspicious perl process, which is trying to send spam from my server, using a perl script. Here is the ps -aux output.
apache 10078 0.0 0.0 4028 705 pts/1 S+ 15:50 0:00 [perl]
apache 10079 0.0 0.0 4023 433 pts/1 S+ 15:50 0:00 [perl]
apache 10080 0.0 0.0 4024 432 pts/1 S+ 15:50 0:00 [perl]
.
.
.
There are more than 20 of such processes running and each one of them is consuming a lot of Sockets.
unable to find the script's location, path and detail as its just "perl" written there. I tried to use lsof to see its opened files, it shows a big number of sockets and files opened by one website hosted on my server. but i cannot get a clue from there that which script is this, so that i can track and remove it.
Thanks
I have a folder on server, which has a website in it. the server has been cutoff from the internet, but after some time, few folders are automatically created in it with some suspicious files inside each of them.
I have checked Cron jobs for all users, nothing is running through the Crons. After i tried to check the system calls to folder using Inotify tools, i got this result:
./Lq1Lbs/ MODIFY index.html
./Lq1Lbs/ CLOSE_WRITE,CLOSE index.html
./nmt08u/ MODIFY index.html
./nmt08u/ OPEN index.html
./nmt08u/ ATTRIB index.html
./nmt08u/ ATTRIB index.html
./nmt08u/ MODIFY index.html
./nmt08u/ CLOSE_WRITE,CLOSE index.html
But i need to know that which Exact utility, Script, User or what created the folders and files in it. I have already tried tripwire, ossec, AIDE, all of them Just notify of the creation/delection or modification of file, but does not tell me that Which exact script, file, script or utility did this action. Is it possible to know it?
In short, which process changed or created which file/folder, thats what i want to know. Thanks
I have hosting service hosted on more than 20+ Plesk servers, version 11. As in the previous versions, the passwords were not encrypted, then if i had to design some tools to manage the hosting accounts, i just picked up the cleartext passwords from the Database. but as now the passwords are encrypted, is there any way i can decrypt the passwords? through API or any other way so that i can integrate my php based hosting management with plesk 11?
I want a ModSecurity rule, which block the access to any url or any Body request Post/Get, if it contains a specific string.
For example i want to block this string : "km0ae9gr6m"
I have this rule in placse but it doesnt seems to be working.
SecRule ARGS "km0ae9gr6m" "log,deny,msg:'Access Denied'"
On my CentOS server, both of the commands are showing different usage for disk / , df shows this output:
Filesystem Size Used Avail Use% Mounted on
/dev/xvda2 16G 14G 952M 94% /
/dev/xvda6 996M 258M 687M 28% /tmp
/dev/xvda3 16G 6.5G 8.3G 45% /var
/dev/xvda1 251M 25M 213M 11% /boot
tmpfs 4.0G 0 4.0G 0% /dev/shm
and du -sh shows
6.9M /bin/
15M /boot/
123M /etc
212K /home/
233M /lib
27M /lib64/
16K /lost+found/
8.0K /media/
8.0K /mnt/
399M /opt/
959M /root/
35M /sbin/
8.0K /srv/
0 /sys/
2.5G /usr/
4.2G total
Also tried with NCDU tool, which reports only 5.6GB usage.
How to find hidden disk space?
For example I have a log file having this entry:
[Wed Aug 08 11:39:41 2012] [error] [client 155.94.70.224] ModSecurity: [file "/etc/httpd/modsecurity.d/rules/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "271"] [id "960020"] [rev "2.2.5"] [msg "Pragma Header requires Cache-Control Header for HTTP/1.1 requests."] [severity "NOTICE"] [tag "RULE_MATURITY/5"] [tag "RULE_ACCURACY/7"] [tag "https://www.owasp.org/index.php/ModSecurity_CRS_RuleID-960020"] [tag "PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "http://www.bad-behavior.ioerror.us/documentation/how-it-works/"] Warning. String match "HTTP/1.1" at REQUEST_PROTOCOL. [hostname "webmail.white-art.co.uk"] [uri "/horde/themes/graphics/tree/plusonly.png"] [unique_id "UCJB7VveCGYAAG@BHJgAAAAQ"]
I want to extract all the string pairs starting with character [ and ending in ]. I can use cut or awk to extract using single delimiter, but I need to extract string between starting [ and ending ].
how to accomplish it?
For example, I need to extract:
"[tag "RULE_ACCURACY/7"]"
and
"[severity "NOTICE"]"
from the log.
I found a solution that first I have to explode the log by add new line after every ] and then using grep to search for required string. Is there any better way to do it?
Is there any way to block IP address of an intruder (or any IP), when our server is behind a Load balancer. For example if my servers are behind ELB (Amazon ELB) or Rackspace Load balancer, i am getting attacks, and i know the Actual attacker IP. how can i block those IP addresses?
Regards,
I need to know what does VC stand for in the PHP version:
VC9 x86 Non Thread Safe (2011-Nov-10 19:52:12)