zozo's questions

I am trying to route the traffic from an nginx, to a specific IP, corresponding to a path.

Basically if I am accessing http://example.com/192.168.0.2/something, I want to redirect the traffic to the pod with that specific IP (the result should be https://192.168.0.2/something).

I tried this (and multiple variations) but it doesn't seem to work.

location ~* "([0-9]{0,3}\.[0-9]{0,3}\.[0-9]{0,3}\.[0-9]{0,3})\/(.*)" {
       proxy_pass http://192.168.219.174:8080$uri;
       proxy_set_header Host $host;
}

I even tried a static version (and multiple variations) like below

location ~* "/test/" {
       rewrite "/test/(.*)" /$1 break;
       proxy_pass http://192.168.219.174:8080
       proxy_set_header Host $host;
} 

Is there any way to achieve this?

So... I have a router (wireless, ASUS RT-N18U), connected to 4 pcs via cable and 1 tablet wireless.

After I noticed some performance drops in my network speed, I checked the traffic manager. The problem seems to be that my router is sending and receiving multiple TB (no, not GB, TB) per day. So I checked for example last 24h and it looked like this:

The image was taken a few minutes ago, as you can see there is a huge spike about 1h ago, that never dropped back.

So I disconnected all the devices except one, and nothing changed (same send / receive ratio). Then I closed the last pc, and opened one of the others (so if something was wrong with this one I should see at least a temporar drop). But nothing happened, not even a tiny spike.

Then I checked the real time tab, that looks like this:

As you can see there is nothing there (as I would expect since I had nothing going on).

Any idea what's going on there? I really don't get it.

EDIT: I rebooted and everything started well. Then after I downloaded something to test stuff it got stuck at maximum speed I achieved during download (the graph started to look the same as this one). Is like it keeps resending over and over the data somewhere. Although that should be pretty much impossible since I disconnected its antennae and he can't connect to anything that's further than 1 meter apart, and I shut down everything wired to it.

After some (failed it seems, can't be sure since if someone actually got access can erase the trails) hack attempts during last few days over one of my servers I decided to tighten the security a bit.

The project is on symfony 4, with a rather standard structure. Server is nginx, with php-fpm as interpretor.

One of the (many) changes I want to make is not allowing any .php calls (since all traffic is routed towards index.php anyway that should be the only file that is directly interpreted by php). So I came up with the following config:

server {
    listen       80 443;
    # https config here
    server_name  epicServer.com;
    root   /var/www/html/epicProject/public;

    location / {
        try_files $uri /index.php$is_args$args; # This should route towards index.php
    }

    location ~ index\.php$ {
        try_files $uri =404;
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass unix:/var/run/php/php7.3-fpm.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param APPLICATION_ENV "production";
        include fastcgi_params;
        fastcgi_read_timeout 300;
        # This should interpret index.php and do stuff
    }

    location ~ \.php$ {
        deny all; # This should deny any other php file directly accessed
    }
}

I have 2 questions regarding this config:

1. Is there any way for someone to still execute a php file that is not matched to a symfony route (basically... did I miss anything?)? The case I'm trying to mitigate is "ok, someone somehow managed to upload a php-shell (I took different measures against that, another topic); he should not be able to execute it".

2. Is it vulnerable to CVE-2019-11043? At first glance it doesn't seem to be but I'm not sure (I did upgrade php to 7.3.11 so should not matter anyway but just for my peace of mind, even on 7.3.9, is this vulnerable?)

I want to create a svn repository on CentOS 5.5 and connect to it with TortoiseSVN.

I tried many ways. The last one was this (logged in as root):

# mkdir /home/me/myrepo/
# svnadmin create /home/me/myrepo/

Then I edited (as many posts suggested /home/me/myrepo/conf/svnserve.conf) and added

 anon-access = read
 auth-access = write
 realm = My First Repository
 password-db = passwd

to [general].

The problem is that when I try to do the checkout on the computer I want to access it from (or any other for that matter) the following things happen:

1. Ask for username (correct)
2. Ask for password (again correct)

I insert both correctly (tried with 3 different accounts)

3. Asking for username again (...)
4. Asking for password again (not so logical...)
5. Failing to connect with message (the connection was closed unexpectedly)

I want to make a DVD with some useful packages (for example php-common). The only problem is that if I try to install on a computer that's not connected to internet, I can't validate the public key.

The scenario is like this:

1. I download the RPMs, I copy them to DVD.
2. I install CentOS 5.5 on my laptop (it has no internet connection).
3. I try install one using yum (or rpm -i, or whatever).

I get the following error: public key for "package" is not installed.

How can I bypass that?

I am creating a shell script that should do some local settings and echo the IP of the machine in a text file. The reason I need to do this is to get the IP in a PHP script and use it from there as root for a site.

I can get the IP using ifconfig but I need to strip the useless information. I'd like to do this in the shell script not in the PHP file.

The OS is CentOS 5.5, I need the IP of eth0.

I need to create some subdomains for a domain but I can't use cpanel to do that. The server that I'm working on just doesn't have it so don't suggest anything related to cpanel as I've seen on most forums.

Can anyone help me with that? I have root access, anything I want. The O.S. is a CentOS 5.5.

I am using ssh (WinSCP) to transfer some files from a server to my workstation.

The problem is that at some files I get disconnected. Always same files. I am the owner of the directory so I guess the file permissions is not a problem. (Also I set the permissions to 777). Is there a size limit or something like that?

Protocol is SFTP, server is 32bit machine. Files are 100MB tops.

Added:

Worked with Filezilla using ftp. This temporarily fix the problem but is not exactly a solution since maybe next time I won't have root access to create a ftp account

Is there any other application similar to wget?

If yes can you post a link?

I have ssh root access at a server and I need to download, then upload a file to it.

I use putty on my local machine, connect and can do anything. But I don't know how to download the file :). I know that a way would be to set a ftp account but I don't want to do that just for a file.

I have a virtual machine running CentOS 5.5 that I use as a streaming server.

If I open 4 terminals and do this:

terminal 1:

 # mkfifo pipe1.avi
 # mkfifo pipe2.avi
 # ffserver &
 # ffmpeg -probesize 164000 -i pipe1.avi -async 1 -r 25 http://localhost:8090/feed1.ffm

terminal 2:

 # ffmpeg -i pipe2.avi -async 1 -r 25 -vcodec flv -f flv somename.flv

terminal 3:

 # mplayer -dumpstream rtp://someIp:somePort -dumpfile pipe1.avi

terminal 4:

 # mplayer -dumpstream rtp://someIp:somePort -dumpfile pipe2.avi

Everything is working great. No problems nowhere.

Now I'm trying to make a script and run it from a cron. This is the script:

ffserver &
ffmpeg -probesize 164000 -i pipe1.avi -async 1 -r 25 http://localhost:8090/feed1.ffm &
ffmpeg -i pipe2.avi -async 1 -r 25 -vcodec flv -f flv somename.flv &
mplayer -dumpstream rtp://someIp:somePort -dumpfile pipe1.avi &
mplayer -dumpstream rtp://someIp:somePort -dumpfile pipe2.avi &
exit 0

The crontab line is:

10 * * * * script.sh > /dev/null 1>&2

The problem is that when the cron is run, the system crashes Actually, it doesn't really crash the stream, which I see from another computer and is working perfectly. But, I can't do anything on the machine. The screen becomes black and I can't do anything except restart it. I have a script that kills the anterior processes. If I use it the stream stops, but I still don't regain access to the system (same black screen whatever I do).

I have a little problem with the cron daemon. I want to stop it from sending mail for a specific command. For example if I have:

10 * * * * someScript1.sh
15 * * * * someScript2.sh

I want to get the mail from someScript1 but not from someScript2. I tried setting the MAILTO="" but that just blocks everything.

I need to periodically empty a text file without deleting it (I know how many lines it has).

I tried this:

Created a cron that executes the following script

other lines from the script here

sed '1,14d' file.txt>file.txt

If I run it from a terminal it works fine, but when I run the cron it executes the first part (the "other lines from script here" part) but it doesn't empty the file.

Note: The file has 777 permissions so I don't think it's permissions related.

I created a script to do something (after I reduced it just to echo "IS FINALLY WORKING" for testing purpose). If I type

#bash /var/www/html/somedir/script.sh

it works ok.

The problem is that I need a cron to access it and it doesn't work.

To set up the cron I used:

crontab -e

15 * * * * /var/www/html/somedir/script.sh 

or

15 * * * * bash /var/www/html/somedir/script.sh

I see no result at all.

Also I tried to log it

15 * * * * /var/www/html/somedir/script.sh > cronscriptlog.log

The log is empty.

The os is CentOS 5.5.

I need to make a back-up of a database on CentOS 5.5, running MySQL server from the command line. Basically I need to export everything in it.

I have a CentOS machine, and I opened a port on witch I should get a stream (actually it is the 5004 port - rtp). However, seems like the stream is not received.

Is there anyway to check on status of a port? (I mean not on/of... but if anything is received).