I have an abuse report for an email which only contains a message ID. How can I find the recipient email address in Postfix sent emails?
I searched the logs with cat /var/log/mail.log } grep [ID] -C 20 but the message details I see do not appear to be the right email because the mail server host does not match the abuse report.. I can't determine if I'm getting the queue ID or the message ID.
I have a test rails 5.2.2 app running in docker and reports no errors in console but when I run docker-compose stop there is 1 container which doesn't stop. My o/s is macos running Docker for Mac. The container which doesn't stop is db_data.
docker-compose up will restart the stopped container and the app continues to run normally.
Here is my docker-compose file
version: '3'
services:
postgres:
image: postgres
env_file:
- '.env'
environment:
- PGDATA=/var/lib/postgresql/data
db_data:
image: postgres
volumes:
- /var/lib/postgresql/data
command: /bin/true
redis:
image: redis
ports:
- "6379:6379"
web:
build: .
command: "bin/bundle exec rails s -p 3000 -b 0.0.0.0"
depends_on:
- redis
- postgres
env_file:
- '.env'
environment:
- RAILS_ENV=development
- REDIS_URL=redis
- REDIS_PORT=6379
volumes:
- .:/usr/src/app
- gem_cache:/gems
ports:
- "3000:3000"
environment:
- WEBPACKER_DEV_SERVER_HOST=webpack_dev_server
webpack_dev_server:
build: .
command: ./bin/webpack-dev-server
ports:
- "3035:3035"
env_file:
- '.env'
environment:
- RAILS_ENV=development
- REDIS_URL=redis
- REDIS_PORT=6379
- WEBPACKER_DEV_SERVER_HOST=0.0.0.0
volumes:
- .:/usr/src/app
- gem_cache:/gems
volumes:
gem_cache:
On a Digital Ocean Kubernetes Cluster I am trying to create a pod using a Docker image pulled from Docker Hub but it keeps failing with CrashLoopBackOff and restarting. The image is a Rails app in a docker container and is quite large. I suspect that Kubernetes is restarting the pod before the image can load.
Here are the errors:
kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE exactpos-deployment-864c768bff-zr86t 0/1 CrashLoopBackOff 10 27m 10.244.66.4 sleepy-nobel-3v8a nginx-deployment-7d69d57649-97w92 1/1 Running 0 40m 10.244.66.7 sleepy-nobel-3v8a
Events: Type Reason Age From Message
---- ------ ---- ---- ------- Normal Scheduled 27m default-scheduler Successfully assigned default/exactpos-deployment-864c768bff-zr86t to sleepy-nobel-3v8aNormal Pulled 26m (x4 over 27m) kubelet, sleepy-nobel-3v8a Successfully pulled image "index.docker.io/markhorrocks/exactpos_web:prod"
Normal Created 26m (x4 over 27m) kubelet, sleepy-nobel-3v8a Created container
Normal Started 26m (x4 over 27m) kubelet, sleepy-nobel-3v8a Started container
Normal Pulling 26m (x5 over 27m) kubelet, sleepy-nobel-3v8a pulling image "index.docker.io/markhorrocks/exactpos_web:prod"
Warning BackOff 2m (x117 over 27m) kubelet, sleepy-nobel-3v8a Back-off restarting failed container
Here is my yaml file
apiVersion: apps/v1
kind: Deployment
metadata:
name: exactpos-deployment
spec:
replicas: 1
selector:
matchLabels:
app: exactpos-deployment
template:
metadata:
labels:
app: exactpos-deployment
spec:
containers:
- name: exactpos
image: index.docker.io/markhorrocks/exactpos_web:prod
imagePullPolicy: Always
command: [ "echo", "SUCCESS" ]
imagePullSecrets:
- name: dockerhub-cred
I have an Ubuntu 16.04 server and using Puppet 5 with Asterisk 14.6.0 running. I'm trying to implement the string rate limiting rules as described in the link below but it's not working. The CLI console is showing rapid scripted REGISTER requests. Note also the single quote inside the double quote in the string parameter.
https://www.voip-info.org/asterisk-firewall-rules
Here is my puppet manifest:
firewall { "005 asterisk-set-rate-limit-register":
dport => '5060',
proto => 'udp',
recent => 'set',
rname => 'VOIPREGISTER',
string => 'REGISTER sip:',
string_algo => 'bm',
rsource => 'true';
}
firewall { "006 asterisk-drop-rate-limit-register":
dport => '5060',
proto => 'udp',
action => 'drop',
recent => 'update',
rseconds => '600',
rhitcount => '5',
rname => 'VOIPREGISTER',
rsource => true,
string => 'REGISTER sip:',
string_algo => 'bm',
rttl => true;
}
firewall { "007 asterisk-set-rate-limit-invite":
string => 'INVITE sip:',
string_algo => 'bm',
dport => '5060',
proto => 'udp',
recent => 'set',
rname => 'VOIPINVITE',
rsource => 'true';
}
firewall { "008 asterisk-drop-rate-limit-invite":
string => 'INVITE sip:',
string_algo => 'bm',
dport => '5060',
proto => 'udp',
action => 'drop',
recent => 'update',
rseconds => '600',
rhitcount => '5',
rname => 'VOIPINVITE',
rsource => true,
rttl => true;
}
These are the resulting iptables rules
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -p udp -m multiport --dports 5060 -m recent --set --name VOIPREGISTER --mask 255.255.255.255 --rsource -m string --string "'REGISTER sip:'" --algo bm --to 65535 -m comment --comment "005 asterisk-set-rate-limit-register"
-A INPUT -p udp -m multiport --dports 5060 -m recent --update --seconds 600 --hitcount 5 --rttl --name VOIPREGISTER --mask 255.255.255.255 --rsource -m string --string "'REGISTER sip:'" --algo bm --to 65535 -m comment --comment "006 asterisk-drop-rate-limit-register" -j DROP
-A INPUT -p udp -m multiport --dports 5060 -m recent --set --name VOIPINVITE --mask 255.255.255.255 --rsource -m string --string "'INVITE sip:'" --algo bm --to 65535 -m comment --comment "007 asterisk-set-rate-limit-invite"
-A INPUT -p udp -m multiport --dports 5060 -m recent --update --seconds 600 --hitcount 5 --rttl --name VOIPINVITE --mask 255.255.255.255 --rsource -m string --string "'INVITE sip:'" --algo bm --to 65535 -m comment --comment "008 asterisk-drop-rate-limit-invite" -j DROP
My server's easy-rsa file structure was accidentally deleted from the server during an os upgrade. I still have the ca.crt but no longer have ca.key or the client keys.
What are the ramifications for OpenVPN? Can I make new client certificates or revoke existing client certificates?
Does puppet firewall support the string module? I need help to implement the following iptables rules in puppet but can't find any documentation or examples on how to do this.
iptables -I INPUT -p udp -m udp --dport 5060 -m string --string "User-Agent: VaxSIPUserAgent" --algo bm --to 65535 -j DROP
iptables -I INPUT -p udp -m udp --dport 5060 -m string --string "User-Agent: friendly-scanner" --algo bm --to 65535 -j REJECT --reject-with icmp-port-unreachable
iptables -I INPUT -p udp -m udp --dport 5060 -m string --string "REGISTER sip:" --algo bm -m recent --set --name VOIP --rsource
iptables -I INPUT -p udp -m udp --dport 5060 -m string --string "REGISTER sip:" --algo bm -m recent --update --seconds 60 --hitcount 12 --rttl --name VOIP --rsource -j DROP
iptables -I INPUT -p udp -m udp --dport 5060 -m string --string "INVITE sip:" --algo bm -m recent --set --name VOIPINV --rsource
iptables -I INPUT -p udp -m udp --dport 5060 -m string --string "INVITE sip:" --algo bm -m recent --update --seconds 60 --hitcount 12 --rttl --name VOIPINV --rsource -j DROP
iptables -I INPUT -p udp -m hashlimit --hashlimit 6/sec --hashlimit-mode srcip,dstport --hashlimit-name tunnel_limit -m udp --dport 5060 -j ACCEPT
iptables -I INPUT -p udp -m udp --dport 5060 -j DROP
I'm trying to set up an openVPN server and connect to it with Tunnelblick. My OpenVPN version is 2.4.3. and I'm using EastRSA-3.0.1. My certificates are using elliptical curve secp521v1.
openvpn log
Thu Jul 6 14:56:25 2017 999.222.18.250:37144 TLS error: The server has no TLS ciphersuites in common with the client. Your --tls-cipher setting might be too restrictive. Thu Jul 6 14:56:25 2017 999.222.18.250:37144 OpenSSL: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher Thu Jul 6 14:56:25 2017 999.222.18.250:37144 TLS_ERROR: BIO read tls_read_plaintext error Thu Jul 6 14:56:25 2017 999.222.18.250:37144 TLS Error: TLS object -> incoming plaintext read error Thu Jul 6 14:56:25 2017 999.222.18.250:37144 TLS Error: TLS handshake f
Here is my server.conf
dev tun
proto udp
port 1194
user nobody
group nogroup
ca ca.crt
cert server.crt # SWAP WITH YOUR CRT NAME
key server.key # SWAP WITH YOUR KEY NAME
dh none
server 192.168.8.0 255.255.255.0
ifconfig-pool-persist ipp.txt
# ncp-disable
cipher AES-256-CBC
auth SHA512
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-128-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA
tls-version-min 1.2
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
compress lz4-v2
push "compress lz4-v2"
keepalive 10 120
persist-key
persist-tun
tls-server
tls-auth /usr/local/share/ca-certificates/ta.key 0
key-direction 0
status /var/log/openvpn2-status.log
log /var/log/openvpn2.log
verb 3
daemon
client.ovpn
client
proto udp
dev tun
remote vpn.mydomain.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-CBC
tls-version-min 1.2
tls-client
ping 15
ping-restart 120
route 10.0.0.0 255.0.0.0
route-nopull
key-direction 1
daemon
user nobody
group nogroup
<ca>
[Security-related line(s) omitted]
</ca>
<cert>
[Security-related line(s) omitted]
</cert>
<key>
[Security-related line(s) omitted]
</key>
<tls-auth>
[Security-related line(s) omitted]
</tls-auth>
I have a new OpenVPN config which runs Ok on the server but the client fails to connect with the following error:
Options error: Unrecognized option or missing parameter(s) in /Library/Application Support/Tunnelblick/Users/Mark/markhorrocks.tblk/Contents/Resources/config.ovpn:28: tls-crypt (2.3.17)
Tunnelblick Log:
*Tunnelblick: OS X 10.12.5; Tunnelblick 3.7.2beta03 (build 4840); prior version 3.7.2beta02 (build 4830) 2017-07-06 23:54:08 *Tunnelblick: Attempting connection with markhorrocks using shadow copy; Set nameserver = 771; monitoring connection 2017-07-06 23:54:08 *Tunnelblick: openvpnstart start markhorrocks.tblk 1337 771 0 1 0 1065264 -ptADGNWradsgnw 2.3.17-openssl-1.0.2k 2017-07-06 23:54:08 *Tunnelblick:
Could not start OpenVPN (openvpnstart returned with status #251)
Contents of the openvpnstart log: *Tunnelblick: openvpnstart log: Warning: Tunnelblick is using 'openvpn-down-root.so', so the route-pre-down script will not be used. You can override this by providing a custom route-pre-down script (which may be a copy of Tunnelblick's standard route-pre-down script) in a Tunnelblick VPN Configuration. However, that script will not be executed as root unless the 'user' and 'group' options are removed from the OpenVPN configuration file. If the 'user' and 'group' options are removed, then you don't need to use a custom route-pre-down script.OpenVPN returned with status 1, errno = 0: Undefined error: 0
Command used to start OpenVPN (one argument per displayed line): /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.17-openssl-1.0.2k/openvpn --daemon --log /Library/Application Support/Tunnelblick/Logs/-SUsers-SMark-SLibrary-SApplicationSupport-STunnelblick-SConfigurations-Smarkhorrocks.tblk-SContents-SResources-Sconfig.ovpn.771_0_1_0_1065264.1337.openvpn.log --cd /Library/Application Support/Tunnelblick/Users/Mark/markhorrocks.tblk/Contents/Resources --verb 3 --config /Library/Application Support/Tunnelblick/Users/Mark/markhorrocks.tblk/Contents/Resources/config.ovpn --verb 3 --cd /Library/Application Support/Tunnelblick/Users/Mark/markhorrocks.tblk/Contents/Resources --management 127.0.0.1 1337 --management-query-passwords --management-hold --script-security 2 --up /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw --plugin /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.17-openssl-1.0.2k/openvpn-down-root.so /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -d -f -m -w -ptADGNWradsgnw
Contents of the OpenVPN log: Options error: Unrecognized option or missing parameter(s) in /Library/ApplicationSupport/Tunnelblick/Users/Mark/markhorrocks.tblk/Contents/Resources/config.ovpn:28: tls-crypt (2.3.17) Use --help for more information.
More details may be in the Console Log's "All Messages"================================================================================
"Sanitized" full configuration file
client
proto udp
dev tun
remote vpn.mydomain.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA512
cipher AES-256-GCM
tls-version-min 1.2
tls-client
ping 15
ping-restart 120
route 10.0.0.0 255.0.0.0
route-nopull
daemon
# Downgrade privileges after initialization (non-Windows only)
user nobody
group nogroup
<ca>
[Security-related line(s) omitted]
</ca>
<cert>
[Security-related line(s) omitted]
</cert>
<key>
[Security-related line(s) omitted]
</key>
<tls-crypt>
[Security-related line(s) omitted]
</tls-crypt>
I have setup an Asterisk server (14.0.2) on Ubuntu 14.04. I can get sound from Twilio using ulaw and from Zoiper (no STUN or ICE). In each case the asterisk server plays gsm files.
I can't get any sound from either Linphone or Blink software phones although both register fine. These are installed on an Ubuntu 16.04 laptop (Dell Inspiron-13-7359). I have enabled every codec available on the phones and tried all available audio device settings for my laptop. Any help would be appreciated.
Here is my Asterisk PJSIP config.
[transport-udp-nat]
type = transport
protocol = udp
bind = 0.0.0.0
; NAT settings
local_net = 10.0.0.0/8
external_media_address = 12.345.67.254
external_signaling_address = 12.345.67.254
[endpoint-internal](!)
type = endpoint
transport = transport-udp-nat
context = Local
disallow=all
allow=ulaw
allow=alaw
allow=slin
allow=g729
allow=g722
allow=opus
allow=gsm
direct_media = no
trust_id_outbound = yes
device_state_busy_at = 1
dtmf_mode = rfc4733
Here is core show codecs in asterisk (redacted)
3 audio alaw alaw (G.711 a-law)
19 audio speex speex (SpeeX)
20 audio speex speex16 (SpeeX 16khz)
21 audio speex speex32 (SpeeX 32khz)
23 audio g722 g722 (G722)
18 audio g729 g729 (G.729A)
8 audio slin slin (16 bit Signed Linear PCM)
9 audio slin slin12 (16 bit Signed Linear PCM (12kHz))
10 audio slin slin16 (16 bit Signed Linear PCM (16kHz))
11 audio slin slin24 (16 bit Signed Linear PCM (24kHz))
12 audio slin slin32 (16 bit Signed Linear PCM (32kHz))
13 audio slin slin44 (16 bit Signed Linear PCM (44kHz))
14 audio slin slin48 (16 bit Signed Linear PCM (48kHz))
15 audio slin slin96 (16 bit Signed Linear PCM (96kHz))
16 audio slin slin192 (16 bit Signed Linear PCM (192kHz))
2 audio ulaw ulaw (G.711 u-law)
4 audio gsm gsm (GSM)
redundancy)
28 audio opus opus (Opus Codec)
I'm having trouble configuring an apache 2.4 vhost for kibana 4.1.1 in puppet 3 on ubuntu 14.04.
proxy_pass => 'http://localhost:5601',
proxy_pass_reverse => 'http://localhost:5601',
Error 400 on SERVER: Invalid parameter proxy_pass_reverse on Apache::Vhost
I can't find anything on the web even in the puppet apache module readme. Does anybody know how to get this done?
I have set up an OpenVPN server for access to my work LAN. It appears that all traffic routes through the vpn server when it's connected but I only want LAN traffic to go to it. How can I stop this? Specifically, I want only a single website with a public dns which is resolves to a 10.* subnet IP to go through the vpn and everything else to go via my regular ISP.
Here is my server.conf
port 1194
proto udp
dev tun
ca ca.crt
cert my.crt
key my.key
dh dh2048.pem
server 192.168.7.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
Here is my ovpn file
client
dev tun
proto udp
remote mydomain.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert my.crt
key my.key
remote-cert-tls server
ping 15
ping-restart 120
route 10.0.0.0 255.0.0.0
route-nopull
comp-lzo
daemon
verb 3
user nobody
group nogroup
Softether works the way i want it to, not routing all traffic through the vpn server. I need to either change the metric for the OpenVPN gateway or mark it as not the default gateway. route
SOFTETHER
default 192.168.1.1 0.0.0.0 UG 600 0 0 wlp1s0
10.0.0.0 10.0.1.1 255.0.0.0 UG 0 0 0 vpn_vpn
OPENVPN
default 192.168.7.5 0.0.0.0 UG 50 0 0 tun0
default 192.168.1.1 0.0.0.0 UG 600 0 0 wlp1s0
The following is from the OpenVPN howto, it indicates that the default is not to direct all traffic through the vpn which is what I want but my configuration at least makes this seem to be the opposite.
By default, when an OpenVPN client is active, only network traffic to and from the OpenVPN server site will pass over the VPN. General web browsing, for example, will be accomplished with direct connections that bypass the VPN.
I'm trying to setup mailslurper for email testing but I keep getting a connection timeout after 6 seconds whether using telnet or netcat.
I have left the config as default and mailserver creates the database on startup.
connecting with telnet
$ telnet localhost 2500
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 Welcome to MailSlurper!
221 Bye
Connection closed by foreign host.
The mailslurper console gives this:
MailSlurper: INFO - 2016/03/11 22:24:06 libmailslurper: INFO - Worker 2 queued to handle connection from 127.0.0.1:41756
MailSlurper: INFO - 2016/03/11 22:24:06 libmailslurper: INFO - Reading data from client connection...
MailSlurper: INFO - 2016/03/11 22:24:12 libmailslurper: INFO - Connection timeout. Terminating client connection
I have also written a script to send an email but the mail is not saved or recorded in the log so not seen.
I have written a custom ruby script to check disk usage for each volume on an ubuntu server. The servers are controlled by puppet and the nagios system has been running for years and contains a number of other custom checks. When I run my new script script on the nagios server it returns the expected output but when I run it for another server it returns NRPE:unable to read output. Running a standard plugin works on any server.
I have only loaded the file into /usr/lib/nagios/plugins and included a command in nrpe.cfg to enable me to run it from the command line in a terminal.
Do I need to set a host name (or host group) and service for my custom check for the client server to make it work on that server, even from the command line?
Here is the command in nrpe.cfg
command[check_disk_usage]=/usr/lib/nagios/plugins/check_disk_usage.rb
Here are some examples of commands which illustrate the issue.
nagios@nagios-server:~$ /usr/lib/nagios/plugins/check_nrpe -H nagios-server
NRPE v2.15
nagios@nagios-server:~$ /usr/lib/nagios/plugins/check_nrpe -H client-server
NRPE v2.15
nagios@nagios-server:~$ /usr/lib/nagios/plugins/check_nrpe -H nagios-server -c check_users
USERS OK - 2 users currently logged in |users=2;5;5;0
nagios@nagios-server:~$ /usr/lib/nagios/plugins/check_nrpe -H client-server -c check_users
USERS OK - 2 users currently logged in |users=2;5;5;0
nagios@nagios-server:~$ /usr/lib/nagios/plugins/check_nrpe -H nagios-server -c check_disk_usage
OK - '/backups' 79% of disk space used | '/'=37% '/tmp'=1% '/srv'=62% '/backups'=79%
nagios@nagios-server:~$ /usr/lib/nagios/plugins/check_nrpe -H client-server -c check_disk_usage
NRPE: Unable to read output
Here is my custom check script:
#!/usr/bin/env ruby
def largest_hash_key(hash)
hash.max_by{|k,v| v}
end
filesystem = %x(df -h)
perfdata = filesystem.split("\n")
.grep(/\A\/dev/)
.map(&:split)
.map{ |e| "'%s'=%s" % [ e[-1], e[-2] ] }
.join(" ")
volumes = Hash[perfdata.split(" ").map {|str| str.split("=")}]
volumes = volumes.map{ |k, v| [k, v.to_i] }
full_disk = largest_hash_key(volumes)
pc_full = full_disk[1]
message = "#{perfdata} | #{perfdata}"
if pc_full > 94
puts "DISK CRITICAL - #{message}"
exit 2
elsif pc_full > 89
puts "DISK WARNING - #{message}"
exit 1
else
puts "DISK OK - #{message}"
exit 0
end
I have written a custom nagios plugin which is returning a command not defined error. I have not yet placed the command in nrpe.cfg or defined the service, etc as this is controlled by puppet and any failure sends an sms to all the tech staff every 5 minutes.
I think I should be able to test it from the command line before doing so. Here is output from terminal on ubuntu 14.04 which illustrates my problem.
nagios@myserver:/usr/lib/nagios/plugins$ ./check_nrpe -H localhost -c check_users
USERS OK - 2 users currently logged in |users=2;5;5;0
nagios@myserver:/usr/lib/nagios/plugins$ ./check_nrpe -H localhost -c disk_usage.rb
NRPE: Command 'disk_usage.rb' not defined
nagios@myserver:/usr/lib/nagios/plugins$ ./disk_usage.rb
OK - '/backups' 84% of disk space used | '/'=37% '/tmp'=1% '/srv'=62% '/backups'=84%
I have implemented a softether vpn server on one aws server connected to other instances in a LAN. I can ssh into the server with ssh [email protected] without problem. I followed this guide
My goal is to allow me to access remote aws servers on a LAN with ssh [email protected] or http://hostname.domainname.com from my laptop using the vpn. ssh is now working but I can't figure out how to get a web page. My reason for wanting a web page through a vpn is that the website is an admin backend which I want to limit access to users coming from the vpn IP addresses.
I added net.ipv4.ip_forward = 1 to sysctl and
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -A FORWARD -i eth0 -o tun0 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i tun0 -o eth0 -j ACCEPT
route add -net 10.0.0.0/8 gw 10.0.1.10
ifconfig -a
vpn_tun0 Link encap:Ethernet HWaddr 00:ac:a3:58:1f:78
inet addr:10.0.1.11 Bcast:10.0.1.255 Mask:255.255.255.0
inet6 addr: fe80::2ac:a3ff:fe58:1f78/64 Scope:Link
netstat -nr
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth0
10.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 vpn_tun0
10.0.1.0 0.0.0.0 255.255.255.0 U 0 0 0 vpn_tun0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
on the server in vpnserver:
DhcpTable
ID |21
Leased at |2015-06-08 (Mon) 08:49:46
Expires at |2015-06-08 (Mon) 14:23:06
MAC Address |00-AC-A3-58-1F-78
Allocated IP |10.0.1.11
Client Host Name|Inspiron-1564
on my laptop vpnclient
VPN Client>accountlist
AccountList command - Get List of VPN Connection Settings
Item |Value
----------------------------+----------------------------------------------------
VPN Connection Setting Name |my_connection
Status |Connected
VPN Server Hostname |hostname.domainname.com:5555 (Direct TCP/IP Connection)
Virtual Hub |lan-internal
Virtual Network Adapter Name|tun0
I followed this guide in setting up a Softether VPN server on a Digital Ocean Ubuntu 14.04 instance. I installed Softether vpn client and openvpn on my laptop (ubuntu 14.10).
The server logs indicate that both clients can connect OK but I am unable to ping or telnet to the server. Also, when I connect with openvpn, I lose all internet, except skype.
With openvpn client netstat -nr reports as the following.
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 192.168.30.14 128.0.0.0 UG 0 0 0 tun0
0.0.0.0 192.168.4.1 0.0.0.0 UG 0 0 0 eth0
54.158.28.151 192.168.4.1 255.255.255.255 UGH 0 0 0 eth0
128.0.0.0 192.168.30.14 128.0.0.0 UG 0 0 0 tun0
192.168.4.0 0.0.0.0 255.255.252.0 U 0 0 0 eth0
192.168.30.14 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
With Softether client, netstat -nr reports the following:
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 192.168.4.1 0.0.0.0 UG 0 0 0 eth0
192.168.4.0 0.0.0.0 255.255.252.0 U 0 0 0 eth0
Ping to telnet to 192.168.30.14 times out.
Softether vpn client ifconfig -a reports the following.
vpn_markadapter Link encap:Ethernet HWaddr 00:ac:c5:ff:ce:ec
inet6 addr: fe80::2ac:c5ff:feff:ceec/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1620 errors:0 dropped:0 overruns:0 frame:0
TX packets:1234 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:118928 (118.9 KB) TX bytes:104989 (104.9 KB)
openvpn client, ifconfig -a:
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:192.168.30.13 P-t-P:192.168.30.14 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:280 errors:0 dropped:0 overruns:0 frame:0
TX packets:534 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:38199 (38.1 KB) TX bytes:60461 (60.4 KB)
Openvpn console:
Thu May 28 19:10:12 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Thu May 28 19:10:12 2015 Socket Buffers: R=[87380->131072] S=[16384->131072]
Thu May 28 19:10:12 2015 Attempting to establish TCP connection with [AF_INET]128.199.126.151:5555 [nonblock]
Thu May 28 19:10:13 2015 TCP connection established with [AF_INET]128.199.126.151:5555
Thu May 28 19:10:13 2015 TCPv4_CLIENT link local: [undef]
Thu May 28 19:10:13 2015 TCPv4_CLIENT link remote: [AF_INET]128.199.126.151:5555
Thu May 28 19:10:13 2015 TLS: Initial packet from [AF_INET]128.199.126.151:5555, sid=16ccbc28 f3c5eca8
Thu May 28 19:10:13 2015 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Thu May 28 19:10:14 2015 VERIFY OK: depth=0, CN=[128.199.126.151], O=[128.199.126.151], OU=[128.199.126.151], C=US
Thu May 28 19:10:14 2015 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu May 28 19:10:14 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu May 28 19:10:14 2015 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Thu May 28 19:10:14 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu May 28 19:10:14 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Thu May 28 19:10:14 2015 [[128.199.126.151]] Peer Connection Initiated with [AF_INET]128.199.126.151:5555
Thu May 28 19:10:16 2015 SENT CONTROL [[128.199.126.151]]: 'PUSH_REQUEST' (status=1)
Thu May 28 19:10:16 2015 PUSH: Received control message: 'PUSH_REPLY,ping 3,ping-restart 10,ifconfig 192.168.30.13 192.168.30.14,dhcp-option DNS 192.168.30.1,route-gateway 192.168.30.14,redirect-gateway def1'
Thu May 28 19:10:16 2015 OPTIONS IMPORT: timers and/or timeouts modified
Thu May 28 19:10:16 2015 OPTIONS IMPORT: --ifconfig/up options modified
Thu May 28 19:10:16 2015 OPTIONS IMPORT: route options modified
Thu May 28 19:10:16 2015 OPTIONS IMPORT: route-related options modified
Thu May 28 19:10:16 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu May 28 19:10:16 2015 ROUTE_GATEWAY 192.168.4.1/255.255.252.0 IFACE=eth0 HWADDR=b8:ac:6f:50:18:af
Thu May 28 19:10:16 2015 TUN/TAP device tun0 opened
Thu May 28 19:10:16 2015 TUN/TAP TX queue length set to 100
Thu May 28 19:10:16 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu May 28 19:10:16 2015 /sbin/ip link set dev tun0 up mtu 1500
Thu May 28 19:10:16 2015 /sbin/ip addr add dev tun0 local 192.168.30.13 peer 192.168.30.14
Thu May 28 19:10:16 2015 /sbin/ip route add 128.199.126.151/32 via 192.168.4.1
Thu May 28 19:10:16 2015 /sbin/ip route add 0.0.0.0/1 via 192.168.30.14
Thu May 28 19:10:16 2015 /sbin/ip route add 128.0.0.0/1 via 192.168.30.14
Thu May 28 19:10:16 2015 Initialization Sequence Completed
I have added a new user in Ubuntu using puppet with a hard coded uid of 10017. The uids must be the same across workstations so that when user data is restored everything lines up.
Now I find out that uid is not unique. Mysql is using it. How can I test a server to find out if a uid (10018) exists?
I am setting up a puppet master and want to distribute nagios core 4 and nagios-plugins to each of my agents and the master itself.
Nagios core 4 is currently not available from the Ubuntu repositories so i used fpm to create debs from the tarballs and added them to the master sources.list by following these instructions : How to make my own local repository?
However, this does not propagate the debs to the puppet agents. How can I set up a repository to allow apt-get on the agents to use the debs?
How can I cal a custom recipe from my default recipe? If I try
recipe 'my-base-server'
I get an error 1 argument for 0
What I want to achieve is a logical division of my recipe into base, web-server and app-server. I will setup each recipe as described in the answer below but I want to include these recipes in my default recipe. What I can't figure out is probably dead simple, is how to call the web-server recipe I write from the default recipe. The web server recipe will in turn call the nginx recipe as described below. I am using Berkshelf. I don't want to use roles and nodes. I can't find documentation about how to do this with only wrapper recipes.
Essentially, all I want to know is very basic, how to define a run list in a recipe. I can't find a reference anywhere that doesn't do it from a role or node.