I have an openvpn server running and I can connect to it with the following client config file:

client
dev tun
proto udp
remote myremote 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-256-CBC
verb 3
comp-lzo

ca C:\\Users\\Alex\\Downloads\\ca.crt
cert C:\\Users\\Alex\\Downloads\\client.crt
key C:\\Users\\Alex\\Downloads\\client.key
tls-auth C:\\Users\\Alex\\Downloads\\ta.key 1

but I'm not able to do so using this profile:

client
dev tun
proto udp
remote myremote 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
cipher AES-256-CBC
verb 3
comp-lzo
<ca>
-----BEGIN CERTIFICATE-----
-----
-----END CERTIFICATE-----
</ca>
<cert>
-----
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
----
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
----
-----END OpenVPN Static key V1-----
</tls-auth>

I copy & pasted all the certs/keys from the non working one to the separated files and it works as it should.
Using the profile, this error appears:

Fri Feb 08 19:06:01 2019 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Feb 08 19:06:01 2019 TLS Error: TLS handshake failed

Server: Ubuntu 16
Client: Windows 10

So this could also fit @InformationSecurity as some concerns are related to security. We are building the website for our gameserver hosting project and we would like to be as transparent as possible with our customers. One of the ways of doing this would be by sharing real time graphs of resources such as RAM and bandwith usage, and CPU load on the site.

• Security related question: Would it be risky sharing this kind of information?

We are currently monitoring all of our resources with Zabbix which allows user access as guest to the platform and that user can be, in some way, chrooted so he can not see more than we want to, he can not change anything and so on. This way (loging into zabbix panel and finding where the screens are) seems a bit unhealthy for the user experience in my opinion so having a screen showing on our site would be much better.

• Server related question: Does Zabbix supports this? (so far I couldn't find any info even talking about it)

I've been spending some time last weeks researching about dedicated server rentals in Spain and, appart from all of them being really expensive, I found something that's bugging me.

So this is a range of IPs used by one of those providers (51.254.154.0/24). I got some of the ips, used some geo location tools and got back some weird results. While some of the ips seem to be located in Spain, others don't.

I then found out that the company linked to those IPs is OVH, which offers no services in Spain, having the nearest datacenter in France, where some of those IPs seem to be from.

As a final check, I wanted to simply ping these IPs and compare it to some I knew are located in OVH France's datacenter finding out that there was almost no difference, having between 53-54ms of response time.

mtrcheck on "spanish" IP (51.254.154.225) and one of my servers(192.0.2.50) in France from fr1 located there as well:

# mtr -c10 -r -n 51.254.154.225
Start: Mon Feb 27 14:14:23 2017
HOST: fr1                         Loss%   Snt   Last   Avg  Best  Wrst StDev
  1.|-- 192.0.2.10                 0.0%    10  974.0 208.1   0.3 1079. 432.2
  2.|-- 10.95.68.132               0.0%    10    0.3   0.3   0.2   0.3   0.0
  3.|-- 10.95.66.72                0.0%    10    0.2   0.2   0.2   0.4   0.0
  4.|-- 37.187.231.253             0.0%    10    1.8   1.8   1.7   1.8   0.0
  5.|-- 178.33.103.226            80.0%    10    2.0   8.7   2.0  15.5   9.5
  6.|-- 51.254.154.225             0.0%    10    1.8   1.8   1.8   1.9   0.0

# mtr -c10 -r -n 192.0.2.50
Start: Mon Feb 27 14:14:24 2017
HOST: fr1                         Loss%   Snt   Last   Avg  Best  Wrst StDev
  1.|-- 192.0.2.10                 0.0%    10    1.8 156.6   0.3 1069. 342.6
  2.|-- 10.95.68.196               0.0%    10    0.3   0.3   0.2   0.3   0.0
  3.|-- 10.95.66.70                0.0%    10    0.2   0.3   0.2   0.3   0.0
  4.|-- 37.187.232.120            70.0%    10    0.2   0.2   0.2   0.3   0.0
  5.|-- 192.0.2.50                 0.0%    10    0.6   0.6   0.5   0.7   0.0

So...

• Is this spanish provider lying about the location of their servers?
• If so, how can it be possible to show that the IP is located in Spain when it actually isn't?
• Might it be pure coincidence that I get same ping results as I live in the middle of France and Madrid datacenters?

If you got here with the same question I had and not just by clicking on the "Month/Week question feed, don't just read the correct answer, it's worth having a look at everything

The new revolution of DNS records they say but, what's the difference between the current A (AAAA) records and ANAME ones?

This are ANAME records

I've been struggling for a while now with this so maybe someone here is able to help me.
I'm setting up a CS:GO server that's going to be running on port 27059.
(This is a copy&paste from a working server, so I'm not posting config files used)

When I try to start it, I get this error:

WARNING: UDP_OpenSocket: unable to bind socket

Which basically means that the port is already being used, so I do the following:

Stop the server
netstat -punta | grep \.27059 # I get nothing
Start the server
netstat -punta | grep \.27059

And get:

tcp        0      0  192.0.2.178:27059     0.0.0.0:*               LISTEN      21932/./srcds_linux
udp        0      0  192.0.2.178:27059     0.0.0.0:*                           21932/./srcds_linux

So it looks like the server is actually being able to use that port but, somehow, I keep getting the same error.

Scenario:

OS: CentOS 7.2
Zabbix version: 3.0
Trying to monitor some switches using SNMP protocol

I'm able to monitor them without any problem, all items are working and everything is fine but adding every item is a pain in the ass and I'm not into wasting hours right now so I started googling a bit and found Zabbix Extras, which seems to fix my problem, but not yet, as the last version is for Zabbix 2.4. Anyways, I tried to install it but, as expected, no success at all. I've been trying to find an alternative and got anything so far so this is basically my last chance...

hope someone can help or I'm gonna kill myself before adding +500 items/switch lol

I've installed zabbix-server, zabbix-proxy and some zabbix-agents on some of my dedicated servers. Everything is working and I'm quite happy with everything but I was curious about this topic: monitoring processes.

What I want:

I would like Zabbix to monitor processes (cpu and ram usage, uptime, etc.) always the same way it monitors network traffic, CPU usage, and so on, so I would be able to see graphs of them, make screens, etc.

So far:

From googling, I found out that it's possible to create a custom script that you can then execute so you can tell the script to do whatever you want it to do but I'm trying to accomplish something different here as you may have noticed from the above section

Question:

So, is it even possible to do it in any way? If so, where should I begin?

So I did a mysqldump of a pretty huge db and I'm trying to restore it now using:

mysql db_test < db_test.sql

but it looks like it's not gonna end by the end of this year. It's been about an hour now and still "restoring". Making the backup took about 10 minutes so I'm afraid something bad is going on.

So far:

• I've checked that mysqld is consuming my cpu (up to 80% sometimes).
• There's nothing relevant to it in the logs.

• I can see the database created and filled with a ton of tables (not everything tho). Also, when I execute use db_test;, I get the following message:

  Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A

• Original db files where around 25GB, after the whole hour, df -h returns the same free space as before. So I guess it's not doing anything on disk.

Something weird here is that, when checking top, I found out that kworker was consuming up to 100% of cpu sometimes, which shouldn't be happenning

Any idea or anything I could do to see what's going on?

So I'm working with RANCID to monitor some switches and I'm using clogin now to test some modifications.

I'm working in two different computers but both of them from the office. Althought they are on different subnets, both can stablish telnet and ssh connections to the switch I'm working with right now (Alcatel Omni 6248). I've made the default installation of RANCID on both computers and added everything needed.

Don't bother thinking of a missconfiguration yet

So I managed to get the config for some of the switches but two of them failed so I tried to modified clogin so it gets every router configuration. After some changes, executing

./clogin -c "show running-config" alcatel-sw

would lead into the script loging in, executing

terminal datadump

and then waiting on the prompt untill it gets a TIMEOUT. While trying to fix it, I just decided to get the default clogin and start from zero again so I recovered the backup copy and tried to log into a CISCO switch (which perfectly works with the default clogin script). I executed

./clogin -c "show running-config" cisco-sw

and I got a TIMEOUT as if I were using the old script. I checked it and nope, I was using the default one. I even transfered the one I have on the other computer (which I tested before sending) and tried again getting same error.

Any idea on how can this be possible?

I'm on CentOS 7.2 on same machines, both on an almost fresh installation and clogin was working untill I modified it and then replaced it with the backup copy.