clarkk

Asked: 2019-09-29 13:46:03 +0800 CST

SPF and IPv6 fails even if the reverse DNS is created

1

When sending mails to Gmail I get this error

Received-SPF: fail (google.com: domain of [email protected] does not designate 2a01:4f8:xxx::2 as permitted sender) client-ip=2a01:4f8:xxx::2;

When I test the IPv6 2a01:4f8:xxx::2 reverse DNS (https://network-tools.webwiz.net/reverse-dns.htm) it maps to the correct host smtp.domain.com

SPF record

v=spf1 a mx -all

DNS records

A record smtp targeting the IPv4 88.133.xxx.xxx
MX record targeting smtp

clarkk

Asked: 2018-06-10 12:13:31 +0800 CST

gzip not working on nginx

4

conf

gzip  on;
gzip_vary  on;
gzip_min_length  100;
gzip_buffers  16 8k;
gzip_proxied  any;
gzip_types
    text/plain
    text/css
    text/javascript
    application/json
    application/javascript;

clarkk

Asked: 2017-10-30 05:20:07 +0800 CST

DMARC only get reports if emails fails authentication

4

I have setup DMARC on DNS

v=DMARC1; p=none; sp=none; fo=1; ri=3600; rua=mailto:[email protected]; ruf=mailto:[email protected]

I have set fo to 1 but I still get reports about emails that passed the authentication!? Why?

clarkk

Asked: 2016-07-12 08:04:58 +0800 CST

setup nginx with IP as server name

5

How to setup nginx with IP address as server name?

server {
    listen  80;
    server_name  xx.xx.xx.xx;

    location /test {
        root  /var/www/test;
    }

    location ~ \.php$ {
        include  /var/ini/nginx/fastcgi.conf;
        fastcgi_pass  php;
        fastcgi_index  index.php;
        fastcgi_param  SCRIPT_FILENAME /var/www/test$fastcgi_script_name;
    }
}

So I want to access the server like this

http://xx.xx.xx.xx/test/ => index.php
http://xx.xx.xx.xx/test/foo.php => foo.php

clarkk

Asked: 2015-12-27 07:57:22 +0800 CST

nginx reverse proxy send output before connection close

2

I have setup a reverse proxy with nginx to webmin.. But it looks like nginx doesn't sends the HTTP response before after the connection has closed?!

If a long request (cronjob) is requested the output will first be received by the end user after the request has ended? How to setup nginx so the reponse is sent as soon as the first byte is sent back to the proxy (nginx)?

location / {
    proxy_pass  https://xx.xx.xx.xx:10000/;
}

clarkk

Asked: 2015-05-22 01:35:07 +0800 CST

slow SSL apache server

2

I have a problem with a slow Apache server with SSL 256bit cert

ab -n 500 https://example.com/
Time per request 29 ms

ab -n 500 http://example.com/
Time per request 10 ms

52 Bytes is sent in both requests and the tests are done from a server in the same datacenter

conf

SSLEngine on
SSLProtocol All -SSLv2
SSLHonorCipherOrder On
SSLCipherSuite ALL:!ADH:!EXP:!LOW:!RC2:!3DES:!SEED:!RC4:+HIGH:+MEDIUM

Is it normal that SSL is 3 times slower than plain HTTP requests?

clarkk

Asked: 2014-08-04 10:38:34 +0800 CST

proFTPD with FTPS (openssl)

1

Have installed proFTPD from webmin and it works...

Then I would like to support FTPS

command line

apt-get install openssl
mkdir /etc/proftpd/ssl
cd /etc/proftpd/ssl
openssl req -x509 -nodes -days 9999 -newkey rsa:2048 -keyout private.key -out public.crt

/etc/proftpd/proftpd.conf

<IfModule mod_tls.c>
TLSEngine                  on
TLSLog                     /var/log/proftpd/tls.log
TLSProtocol                SSLv23
TLSOptions                 NoCertRequest
TLSRSACertificateFile      /etc/proftpd/ssl/public.crt
TLSRSACertificateKeyFile   /etc/proftpd/ssl/private.key
TLSVerifyClient            off
TLSRequired                on
</IfModule>

nmap localhost

Starting Nmap 6.46 ( http://nmap.org ) at 2014-08-03 22:50 CEST
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000010s latency).
Not shown: 995 closed ports
PORT      STATE SERVICE
21/tcp    open  ftp
22/tcp    open  ssh
80/tcp    open  http
3306/tcp  open  mysql
10000/tcp open  snet-sensor-mgmt

Log FileZilla (client)

Status: Connecting to domain.com...
Response:   fzSftp started
Command:    open "[email protected]" 22
Command:    Pass: ******
Status: Connected to domain.com
Error:  Connection closed by server with exitcode 1
Error:  Could not connect to server

clarkk

Asked: 2014-08-04 08:46:00 +0800 CST

proFTPD unable to determine IP address

7

When starting the server this error is returned

Starting ftp server: proftpd2014-08-03 18:39:22,045 web-amd-3700-2gb proftpd[22126]: warning: unable to determine IP address of 'web-amd-3700-2gb'
2014-08-03 18:39:22,045 web-amd-3700-2gb proftpd[22126]: error: no valid servers configured
2014-08-03 18:39:22,045 web-amd-3700-2gb proftpd[22126]: fatal: error processing configuration file '/etc/proftpd/proftpd.conf'
 failed!

/etc/proftpd/proftpd.conf

#
# /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.
# To really apply changes, reload proftpd after modifications, if
# it runs in daemon mode. It is not required in inetd/xinetd mode.
# 

# Includes DSO modules
Include /etc/proftpd/modules.conf

# Set off to disable IPv6 support which is annoying on IPv4 only boxes.
UseIPv6             off
# If set on you can experience a longer connection delay in many cases.
IdentLookups            off

ServerName          "Debian"
ServerType          standalone
DeferWelcome            off

MultilineRFC2228        on
DefaultServer           on
ShowSymlinks            on

TimeoutNoTransfer       600
TimeoutStalled          600
TimeoutIdle         1200

DisplayLogin                    welcome.msg
DisplayChdir                .message true
ListOptions                 "-l"

DenyFilter          \*.*/

# Use this to jail all users in their homes 
# DefaultRoot           ~

# Users require a valid shell listed in /etc/shells to login.
# Use this directive to release that constrain.
# RequireValidShell     off

# Port 21 is the standard FTP port.
Port                21

# In some cases you have to specify passive ports range to by-pass
# firewall limitations. Ephemeral ports can be used for that, but
# feel free to use a more narrow range.
# PassivePorts                  49152 65534

# If your host was NATted, this option is useful in order to
# allow passive tranfers to work. You have to use your public
# address and opening the passive ports used on your firewall as well.
# MasqueradeAddress     1.2.3.4

# This is useful for masquerading address with dynamic IPs:
# refresh any configured MasqueradeAddress directives every 8 hours
<IfModule mod_dynmasq.c>
# DynMasqRefresh 28800
</IfModule>

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances            30

# Set the user and group that the server normally runs at.
User                proftpd
Group               nogroup

# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask               022  022
# Normally, we want files to be overwriteable.
AllowOverwrite          on

# Uncomment this if you are using NIS or LDAP via NSS to retrieve passwords:
# PersistentPasswd      off

# This is required to use both PAM-based authentication and local passwords
# AuthOrder         mod_auth_pam.c* mod_auth_unix.c

# Be warned: use of this directive impacts CPU average load!
# Uncomment this if you like to see progress and transfer rate with ftpwho
# in downloads. That is not needed for uploads rates.
#
# UseSendFile           off

TransferLog /var/log/proftpd/xferlog
SystemLog   /var/log/proftpd/proftpd.log

# Logging onto /var/log/lastlog is enabled but set to off by default
#UseLastlog on

# In order to keep log file dates consistent after chroot, use timezone info
# from /etc/localtime.  If this is not set, and proftpd is configured to
# chroot (e.g. DefaultRoot or <Anonymous>), it will use the non-daylight
# savings timezone regardless of whether DST is in effect.
#SetEnv TZ :/etc/localtime

<IfModule mod_quotatab.c>
QuotaEngine off
</IfModule>

<IfModule mod_ratio.c>
Ratios off
</IfModule>


# Delay engine reduces impact of the so-called Timing Attack described in
# http://www.securityfocus.com/bid/11430/discuss
# It is on by default. 
<IfModule mod_delay.c>
DelayEngine on
</IfModule>

<IfModule mod_ctrls.c>
ControlsEngine        off
ControlsMaxClients    2
ControlsLog           /var/log/proftpd/controls.log
ControlsInterval      5
ControlsSocket        /var/run/proftpd/proftpd.sock
</IfModule>

<IfModule mod_ctrls_admin.c>
AdminControlsEngine off
</IfModule>

#
# Alternative authentication frameworks
#
#Include /etc/proftpd/ldap.conf
#Include /etc/proftpd/sql.conf

#
# This is used for FTPS connections
#
#Include /etc/proftpd/tls.conf

#
# Useful to keep VirtualHost/VirtualRoot directives separated
#
#Include /etc/proftpd/virtuals.conf

# A basic anonymous configuration, no upload directories.

# <Anonymous ~ftp>
#   User                ftp
#   Group               nogroup
#   # We want clients to be able to login with "anonymous" as well as "ftp"
#   UserAlias           anonymous ftp
#   # Cosmetic changes, all files belongs to ftp user
#   DirFakeUser on ftp
#   DirFakeGroup on ftp
# 
#   RequireValidShell       off
# 
#   # Limit the maximum number of anonymous logins
#   MaxClients          10
# 
#   # We want 'welcome.msg' displayed at login, and '.message' displayed
#   # in each newly chdired directory.
#   DisplayLogin            welcome.msg
#   DisplayChdir        .message
# 
#   # Limit WRITE everywhere in the anonymous chroot
#   <Directory *>
#     <Limit WRITE>
#       DenyAll
#     </Limit>
#   </Directory>
# 
#   # Uncomment this if you're brave.
#   # <Directory incoming>
#   #   # Umask 022 is a good standard umask to prevent new files and dirs
#   #   # (second parm) from being group and world writable.
#   #   Umask               022  022
#   #            <Limit READ WRITE>
#   #            DenyAll
#   #            </Limit>
#   #            <Limit STOR>
#   #            AllowAll
#   #            </Limit>
#   # </Directory>
# 
# </Anonymous>

# Include other custom configuration files
Include /etc/proftpd/conf.d/

ifconfig

eth0      Link encap:Ethernet  HWaddr 00:11:6b:3c:61:b9
          inet addr:88.198.61.237  Bcast:88.198.61.255  Mask:255.255.255.224
          inet6 addr: fe80::211:6bff:fe3c:61b9/64 Scope:Link
          inet6 addr: 2a01:4f8:131:2a::2/64 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:44239400 errors:375 dropped:391 overruns:375 frame:0
          TX packets:41717433 errors:0 dropped:0 overruns:1 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:12419358975 (11.5 GiB)  TX bytes:16170232918 (15.0 GiB)
          Interrupt:17 Base address:0x6000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:19799205 errors:0 dropped:0 overruns:0 frame:0
          TX packets:19799205 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:3252682909 (3.0 GiB)  TX bytes:3252682909 (3.0 GiB)

hostname

web-amd-3700-2gb

cat /etc/hosts

### Hetzner Online AG installimage
# nameserver config
# IPv4
127.0.0.1 localhost
88.198.61.237  Debian-70-wheezy-64-minimal
#
# IPv6
::1 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts
2a01:4f8:131:2a::2  Debian-70-wheezy-64-minimal

clarkk

Asked: 2014-08-02 02:16:22 +0800 CST

sshdOpenSSL version mismatch - update sshd from rescue mode

2

After upgrading with apt-get upgrade then sshd is not starting at boot

upgrade

apt-get update && apt-get upgrade

error on boot

enter image description here

Have tried to boot in rescue mode and run the following command to update sshd but it doesn't work. After rebooting sshd still fails to load at boot and return the same error about version mismatch

apt-get update && apt-get install openssh-server openssh-client

How to update the openssl version in sshd from rescue mode so the versions match?

clarkk

Asked: 2013-06-20 04:28:46 +0800 CST

After installing Mysql 5.6 the server can't start

5

The mysql server is installed on a clean install of Debian 7

Have tried this serveral times each time on a clean install of Debian

installation

# apt-get update && apt-get upgrade
# groupadd mysql
# useradd -r -g mysql mysql
# apt-get install libaio1
# wget http://cdn.mysql.com/Downloads/MySQL-5.6/mysql-5.6.12-debian6.0-x86_64.deb
# dpkg -i mysql-5.6.12-debian6.0-x86_64.deb
# cd /usr/local
# ln -s /opt/mysql/server-5.6 mysql
# cd mysql
# scripts/mysql_install_db --user=mysql --datadir=/var/lib/mysql
# rm /opt/mysql/server-5.6/my.cnf
# ln -s /var/ini/my.cnf /opt/mysql/server-5.6/my.cnf
# cp support-files/mysql.server /etc/init.d/mysql
# service mysql start

error

root@Debian-70-wheezy-64-minimal /usr/local/mysql # service mysql start
/opt/mysql/server-5.6/bin/my_print_defaults: Can't read dir of '/etc/mysql/conf.d/' (Errcode: 2 - No such file or directory)
Fatal error in defaults handling. Program aborted
Starting MySQL
.[....] The server quit without updating PID file (/opt/mysql/server-5.6/data/De[FAIL70-wheezy-64-minimal.pid). ... failed!

error log (not existing)

root@Debian-70-wheezy-64-minimal ~ # updatedb
root@Debian-70-wheezy-64-minimal ~ # locate .err
/var/log/mail.err
/var/log/news/news.err

my.cnf

#
# The MySQL database server configuration file.
#
# You can copy this to one of:
# - "/etc/mysql/my.cnf" to set global options,
# - "~/.my.cnf" to set user-specific options.
# 
# One can use all long options that the program supports.
# Run program with --help to get a list of available options and with
# --print-defaults to see which it would actually understand and use.
#
# For explanations see
# http://dev.mysql.com/doc/mysql/en/server-system-variables.html

# This will be passed to all mysql clients
# It has been reported that passwords should be enclosed with ticks/quotes
# escpecially if they contain "#" chars...
# Remember to edit /etc/mysql/debian.cnf when changing the socket location.
[client]
port        = 3306
socket      = /var/run/mysqld/mysqld.sock

# Here is entries for some specific programs
# The following values assume you have at least 32M ram

# This was formally known as [safe_mysqld]. Both versions are currently parsed.
[mysqld_safe]
socket      = /var/run/mysqld/mysqld.sock
nice        = 0

[mysqld]
#
# * Basic Settings
#
user        = mysql
pid-file    = /var/run/mysqld/mysqld.pid
socket      = /var/run/mysqld/mysqld.sock
port        = 3306
basedir     = /usr/local/mysql
datadir     = /var/lib/mysql
tmpdir      = /tmp
lc-messages-dir = /opt/mysql/server-5.6/share/english
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address        = 127.0.0.1
#
# * Fine Tuning
#
key_buffer      = 16M
max_allowed_packet  = 16M
thread_stack        = 192K
thread_cache_size       = 8
# This replaces the startup script and checks MyISAM tables if needed
# the first time they are touched
myisam-recover         = BACKUP
#max_connections        = 100
#table_cache            = 64
#thread_concurrency     = 10
#
# * Query Cache Configuration
#
query_cache_limit   = 1M
query_cache_size        = 16M
#
# * Logging and Replication
#
# Both location gets rotated by the cronjob.
# Be aware that this log type is a performance killer.
# As of 5.1 you can enable the log at runtime!
#general_log_file        = /var/log/mysql/mysql.log
#general_log             = 1
#
# Error logging goes to syslog due to /etc/mysql/conf.d/mysqld_safe_syslog.cnf.
#
# Here you can see queries with especially long duration
#log_slow_queries   = /var/log/mysql/mysql-slow.log
#long_query_time = 2
#log-queries-not-using-indexes
#
# The following can be used as easy to replay backup logs or for replication.
# note: if you are setting up a replication slave, see README.Debian about
#       other settings you may need to change.
#server-id      = 1
#log_bin            = /var/log/mysql/mysql-bin.log
expire_logs_days    = 10
max_binlog_size         = 100M
#binlog_do_db       = include_database_name
#binlog_ignore_db   = include_database_name
#
# * InnoDB
#
# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
# Read the manual for more InnoDB related options. There are many!
#
# * Security Features
#
# Read the manual, too, if you want chroot!
# chroot = /var/lib/mysql/
#
# For generating SSL certificates I recommend the OpenSSL GUI "tinyca".
#
# ssl-ca=/etc/mysql/cacert.pem
# ssl-cert=/etc/mysql/server-cert.pem
# ssl-key=/etc/mysql/server-key.pem



[mysqldump]
quick
quote-names
max_allowed_packet  = 16M

[mysql]
#no-auto-rehash # faster start of mysql but no tab completition

[isamchk]
key_buffer      = 16M

#
# * IMPORTANT: Additional settings that can override those from this file!
#   The files must end with '.cnf', otherwise they'll be ignored.
#
!includedir /etc/mysql/conf.d/

update

Now the server is starting, but can't connect to mysql

root@Debian-70-wheezy-64-minimal ~ # mysql -u root
ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/tmp/mysql.sock' (2)

clarkk

Asked: 2013-06-17 11:15:17 +0800 CST

How to install Mysql 5.6 on Debian 7 wheezy

5

I'm trying to install Mysql 5.6 on Debian 7 Wheezy..

After installing the mysql database/folder /var/lib/mysql/mysql is empty

# groupadd mysql
# useradd -r -g mysql mysql
# apt-get install libaio1
# wget http://cdn.mysql.com/Downloads/MySQL-5.6/mysql-5.6.12-debian6.0-x86_64.deb
# dpkg -i mysql-5.6.12-debian6.0-x86_64.deb
# cd /usr/local
# ln -s /opt/mysql/server-5.6 mysql
# cd mysql
# scripts/mysql_install_db --user=mysql --datadir=/var/lib/mysql
# rm /opt/mysql/server-5.6/my.cnf
# rm /etc/mysql/my.cnf
# ln -s /var/ini/my.cnf /opt/mysql/server-5.6/my.cnf
# chown -R root .
# chown -R mysql /var/lib/mysql
# cp support-files/mysql.server /etc/init.d/mysql
# alias mysql=/opt/mysql/server-5.6/bin/mysql
# alias mysqladmin=/opt/mysql/server-5.6/bin/mysqladmin

# service mysql start
# update-rc.d mysql defaults

my.cnf

#
# The MySQL database server configuration file.
#
# You can copy this to one of:
# - "/etc/mysql/my.cnf" to set global options,
# - "~/.my.cnf" to set user-specific options.
# 
# One can use all long options that the program supports.
# Run program with --help to get a list of available options and with
# --print-defaults to see which it would actually understand and use.
#
# For explanations see
# http://dev.mysql.com/doc/mysql/en/server-system-variables.html

# This will be passed to all mysql clients
# It has been reported that passwords should be enclosed with ticks/quotes
# escpecially if they contain "#" chars...
# Remember to edit /etc/mysql/debian.cnf when changing the socket location.
[client]
port        = 3306
socket      = /var/run/mysqld/mysqld.sock

# Here is entries for some specific programs
# The following values assume you have at least 32M ram

# This was formally known as [safe_mysqld]. Both versions are currently parsed.
[mysqld_safe]
socket      = /var/run/mysqld/mysqld.sock
nice        = 0

[mysqld]
#
# * Basic Settings
#
user        = mysql
pid-file    = /var/run/mysqld/mysqld.pid
socket      = /var/run/mysqld/mysqld.sock
port        = 3306
basedir     = /usr/local/mysql
datadir     = /var/lib/mysql
tmpdir      = /tmp
lc-messages-dir = /opt/mysql/server-5.6/share/english
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address        = 127.0.0.1
#
# * Fine Tuning
#
key_buffer      = 16M
max_allowed_packet  = 16M
thread_stack        = 192K
thread_cache_size       = 8
# This replaces the startup script and checks MyISAM tables if needed
# the first time they are touched
myisam-recover         = BACKUP
#max_connections        = 100
#table_cache            = 64
#thread_concurrency     = 10
#
# * Query Cache Configuration
#
query_cache_limit   = 1M
query_cache_size        = 16M
#
# * Logging and Replication
#
# Both location gets rotated by the cronjob.
# Be aware that this log type is a performance killer.
# As of 5.1 you can enable the log at runtime!
#general_log_file        = /var/log/mysql/mysql.log
#general_log             = 1
#
# Error logging goes to syslog due to /etc/mysql/conf.d/mysqld_safe_syslog.cnf.
#
# Here you can see queries with especially long duration
#log_slow_queries   = /var/log/mysql/mysql-slow.log
#long_query_time = 2
#log-queries-not-using-indexes
#
# The following can be used as easy to replay backup logs or for replication.
# note: if you are setting up a replication slave, see README.Debian about
#       other settings you may need to change.
#server-id      = 1
#log_bin            = /var/log/mysql/mysql-bin.log
expire_logs_days    = 10
max_binlog_size         = 100M
#binlog_do_db       = include_database_name
#binlog_ignore_db   = include_database_name
#
# * InnoDB
#
# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
# Read the manual for more InnoDB related options. There are many!
#
# * Security Features
#
# Read the manual, too, if you want chroot!
# chroot = /var/lib/mysql/
#
# For generating SSL certificates I recommend the OpenSSL GUI "tinyca".
#
# ssl-ca=/etc/mysql/cacert.pem
# ssl-cert=/etc/mysql/server-cert.pem
# ssl-key=/etc/mysql/server-key.pem



[mysqldump]
quick
quote-names
max_allowed_packet  = 16M

[mysql]
#no-auto-rehash # faster start of mysql but no tab completition

[isamchk]
key_buffer      = 16M

#
# * IMPORTANT: Additional settings that can override those from this file!
#   The files must end with '.cnf', otherwise they'll be ignored.
#
!includedir /etc/mysql/conf.d/

error

130619 14:28:13 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql
2013-06-19 14:28:14 0 [Warning] TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).
2013-06-19 14:28:14 6582 [Warning] Using pre 5.5 semantics to load error messages from /opt/mysql/server-5.6/share/english/.
2013-06-19 14:28:14 6582 [Warning] If this is not intended, refer to the documentation for valid usage of --lc-messages-dir and --language parameters.
2013-06-19 14:28:14 6582 [Note] Plugin 'FEDERATED' is disabled.
/usr/local/mysql/bin/mysqld: Table 'mysql.plugin' doesn't exist
2013-06-19 14:28:14 6582 [ERROR] Can't open the mysql.plugin table. Please run mysql_upgrade to create it.
2013-06-19 14:28:14 6582 [Note] InnoDB: The InnoDB memory heap is disabled
2013-06-19 14:28:14 6582 [Note] InnoDB: Mutexes and rw_locks use GCC atomic builtins
2013-06-19 14:28:14 6582 [Note] InnoDB: Compressed tables use zlib 1.2.3
2013-06-19 14:28:14 6582 [Note] InnoDB: Using Linux native AIO
2013-06-19 14:28:14 6582 [Note] InnoDB: Not using CPU crc32 instructions
2013-06-19 14:28:14 6582 [Note] InnoDB: Initializing buffer pool, size = 128.0M
2013-06-19 14:28:14 6582 [Note] InnoDB: Completed initialization of buffer pool
2013-06-19 14:28:14 6582 [Note] InnoDB: Highest supported file format is Barracuda.
2013-06-19 14:28:14 6582 [Note] InnoDB: 128 rollback segment(s) are active.
2013-06-19 14:28:14 6582 [Note] InnoDB: Waiting for purge to start
2013-06-19 14:28:14 6582 [Note] InnoDB: 5.6.12 started; log sequence number 1600637
2013-06-19 14:28:14 6582 [Note] Server hostname (bind-address): '127.0.0.1'; port: 3306
2013-06-19 14:28:14 6582 [Note]   - '127.0.0.1' resolves to '127.0.0.1';
2013-06-19 14:28:14 6582 [Note] Server socket created on IP: '127.0.0.1'.
2013-06-19 14:28:14 6582 [ERROR] Fatal error: Can't open and lock privilege tables: Table 'mysql.user' doesn't exist
130619 14:28:14 mysqld_safe mysqld from pid file /var/run/mysqld/mysqld.pid ended

clarkk

Asked: 2012-06-30 22:19:21 +0800 CST

htaccess not found

1

I have installed a Apache 2 (from webmin) server on Debian 6..

I have setup a virtual host db.domain.com on the server which works fine, but .htaccess doesn't work if you get access from the ip address and the directory is listed if no index.php is found?

db.domain.com -> 403 forbidden
xxx.xxx.xxx.xxx -> gets access to the server

Why is .htaccess omitted when you get access from the servers ip address?

httpd.conf

<Directory *>
    Options -Indexes FollowSymLinks
</Directory>

<VirtualHost *:80>
    ServerName db.domain.com
    DocumentRoot /var/www
</VirtualHost>

htaccess

order deny,allow
deny from all

clarkk

Asked: 2012-04-12 00:39:39 +0800 CST

deleting/creating apache error log > log not updating

2

The error log file was quite big so I deleted it and created it again.. But now the error log is not logging/updating on errors?

Have tried to respart apache, but still the same..

I remember I experienced this a while ago.. Can't remember how it was fixed?

clarkk

Asked: 2012-03-28 03:21:20 +0800 CST

optimize mod_rewrite in htaccess

1

I got some mod_rewrite conditions in a .htaccess file which I have extended from time to time.. But I don't think its very well written (I'm still quite new to mod_rewrite)

Some times requests end up in infinite loops

And just now I added SSL to the file..

When requesting https:// I get a 404 error The requested URL /_secure/_secure/ was not found on this server. Somehow it adds an extra _secure to the path?

.htaccess

#   redirect non-active subdomain to 'www'
RewriteCond %{HTTP_HOST}        !^(admin|api|demo|files|secure|www)\.([^\.]+\.[^\.]+)$ [NC]
RewriteRule ^(.*)$              http://www.domain.com [L,R=301]

#   put 'www' as subdomain if none is given
RewriteCond %{HTTP_HOST}        ^([^\.]+\.[^\.]+)$ [NC]
RewriteRule ^(.*)$              http://www.%1/$1 [L,R=301]

#   redirect to subdomain
RewriteCond %{HTTP_HOST}        ^www\.([^\.]+\.[^\.]+)$ [NC]
RewriteRule ^_([^/]+)/          http://$1.%1/ [L,R=301]

#   start SSL on 'secure' subdomain if not started
#RewriteCond %{HTTPS}           !=on
#RewriteCond %{HTTP_HOST}       ^(secure)\.([^\.]+\.[^\.]+)$ [NC]
#RewriteRule ^(.*)$             https://%1.%2/$1 [L,R=301]

#   set language
RewriteCond %{REQUEST_URI}      ^/(da|en)/(.*)(\?%{QUERY_STRING})?$ [NC]
RewriteRule ^(.*)$              /%2?%{QUERY_STRING}&set_lang=%1 [L]

    #   subdomains
    # --------------------------------------------------------------------------------

    #   rewrite subdomain
    RewriteCond %{HTTP_HOST}        ^(admin|files)\.[^\.]+\.[^\.]+$ [NC]
    RewriteCond %{REQUEST_URI}      !^/_(admin|files)/ [NC]
    RewriteRule ^(.*)$              /_%1/$1 [L]

    #   rewrite 'secure' subdomain
    RewriteCond %{HTTP_HOST}        ^(demo|secure)\.[^\.]+\.[^\.]+$ [NC]
    RewriteCond %{REQUEST_URI}      !^/_secure/ [NC]
    RewriteRule ^(.*)$              /_secure/$1 [L]

    #   rewrite 'api' subdomain
    RewriteCond %{HTTP_HOST}        ^api\.[^\.]+\.[^\.]+$ [NC]
    RewriteCond %{REQUEST_URI}      !^/_api/ [NC]
    RewriteRule ^(?:([^/]+)/)?(?:([^/]+)/)?(?:([^/]+)/)?(?:([^/]+)/)?(?:([^/]+)/)?(?:([^/]+)/)?             /_api/?%{QUERY_STRING}&v=$1&i=$2&k=$3&a=$4&t=$5&f=$6 [L]

#   translate SEO-friendly URL's
RewriteCond %{HTTP_HOST}        ^www\. [NC]
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !\.php$ [NC]
RewriteCond %{REQUEST_URI}      ^/([^/]*)/(?:([^/]*)/)?(?:([^/]*)/)?$ [NC]
RewriteRule ^(.*)$              /%1.php?%{QUERY_STRING}&subpage=%2&subsection=%3 [L]

clarkk

Asked: 2011-11-12 06:58:37 +0800 CST

tar - Remove leading directory components on extraction

153

How can you extract only the target dir and not the complete dir tree?

compress

tar cf /var/www_bak/site.tar /var/www/site

extract

tar xf /var/www/site.tar -C /tmp

This will produce:

/tmp/var/www/site

How is it possible to avoid the whole dir tree to be created when the file is extracted?

What I want it to extract to:

/tmp/site

clarkk

Asked: 2011-07-07 00:31:19 +0800 CST

disable error.log for specific directory

1

how to disable error reporting to error.log in Apache for a specific directory (phpmyadmin) ?

in httpd.conf
in .htaccess

clarkk

Asked: 2011-05-28 00:56:50 +0800 CST

ssl and vhost with æøå

2

I get an error when trying setting up a subdomain with SSL..

I think it's because the servername isn't typed correct (with the 'ø') in the vhost?

Have just moved from a webhosting solution to a dedicated server.. Before migrating to the new server, the SSL worked on the subdomain, but I don't know how the vhost was setup on the webhosted server!? Probably not like this..? (if the vhost even is the problem?)

Domain

secure.online-økonomi.dk

vhost

<VirtualHost _default_:443>
    ServerName secure.xn--online-konomi-hnb.dk
    DocumentRoot /var/www/online-okonomi.dk

    SSLEngine on
    SSLCertificateFile /var/ini/ssl/secure.xn--online-konomi-hnb.dk/public.crt
    SSLCertificateKeyFile /var/ini/ssl/secure.xn--online-konomi-hnb.dk/private.key
    SSLCACertificateFile /var/ini/ssl/secure.xn--online-konomi-hnb.dk/intermediate.crt
    SSLVerifyDepth 1
    SetEnvIf User-Agent ".*MSIE.*" \
    nokeepalive ssl-unclean-shutdown \
    downgrade-1.0 force-response-1.0
    SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
</VirtualHost>

Error

[Fri May 27 09:46:38 2011] [warn] RSA server certificate CommonName (CN) `secure.online-\xc3\xb8konomi.dk' does NOT match server name!?
[Fri May 27 09:46:38 2011] [error] Unable to configure RSA server private key
[Fri May 27 09:46:38 2011] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

clarkk

Asked: 2011-05-26 07:10:39 +0800 CST

dynamic rewrites using $1, %1, %2 etc

1

how to make more complex and dynamic rewrites using $1, %1, %2 etc.

I'm trying to make a more dynamic rewrite (got a lot of domians pointing to the same server/site)

#   put 'www' as subdomain if none is given
RewriteCond %{HTTP_HOST}        ^([^\.]+\.[^\.]+)$ [NC]
RewriteRule ^(.*)$          http://www.%1/$1 [L,R=301]

#   rewrite subdomains
RewriteCond %{HTTP_HOST}        ^(admin|files|imap|mysql)\.[^\.]+\.[^\.]+$ [NC]
RewriteCond %{REQUEST_URI}      !^/_(admin|files|imap|mysql)/ [NC]
RewriteRule ^(.*)$          /_%1/$1 [L]

#   redirect to subdomain
RewriteCond %{HTTP_HOST}        ^www\.([^\.]+\.[^\.]+)$ [NC]
RewriteCond %{REQUEST_URI}      ^/_([^/]*)/ [NC]
RewriteRule ^(.*)$          http://%1.domain.com/ [L,R=301]

#   rewrite 'secure' subdomain
RewriteCond %{HTTP_HOST}        ^(demo|secure)\.[^\.]+\.[^\.]+$ [NC]
RewriteCond %{REQUEST_URI}      !^/_secure/ [NC]
RewriteRule ^(.*)$          /_secure/$1 [L]

but now I'm confronting a problem..

by #redirect to subdomain I can't figure out how to solve the condition and rule like the other I have made.. somehow I need to extract the domain from the first condition and then use it in the rule with %1, but how can you do that when you got another condition in between?

clarkk

Asked: 2011-05-26 06:27:36 +0800 CST

redirect not-active subdomains

1

EDIT:

How can you redirect all non-active subdomains to 'www'?

Here I try to redirect all subdomains not listed to 'www'.. I can't make it work properly because %1 and %2 doesn't return anything.. Here I'm trying to redirect to google.com just to check the returned %2 value.., but it doesn't return anything and the redirect url is http://www.google.com/

RewriteCond %{HTTP_HOST}        !^(admin|demo|www)\.([^\.]+\.[^\.]+)$ [NC]
RewriteRule ^(.*)$          http://www.google.com/%2 [L,R=301]

this is what I really want to do

RewriteCond %{HTTP_HOST}        !^(admin|demo|www)\.([^\.]+\.[^\.]+)$ [NC]
RewriteRule ^(.*)$          http://www.%2/$1 [L,R=301]

clarkk

Asked: 2011-05-25 13:56:47 +0800 CST

mod_rewrite in each vhost with wildcard subdomain

1

:: EDIT ::

How to setup wildcard subdomains and then rewrite the adress?

directory structure

/var/www/domain.com        // .htaccess with rewrite rules is placed here
/var/www/domain.com/_admin
/var/www/domain.com/_admin/tst
/var/www/domain.com/_files
/var/www/domain.com/_mysql

.htaccess

RewriteCond %{HTTP_HOST}        ^(admin|files|mysql)\.domain\.com$ [NC]
RewriteCond %{REQUEST_URI}      !^/_(admin|files|mysql)/ [NC]
RewriteRule ^(.*)$               /_%1/$1 [L]

when you request http://admin.domain.com/tst the adress is rewritten to http://admin.domain.com/_admin/tst

how to fix it so /_admin is hidden?

clarkk's questions

SPF record

DNS records

conf

conf

command line

/etc/proftpd/proftpd.conf

nmap localhost

Log FileZilla (client)

/etc/proftpd/proftpd.conf

ifconfig

hostname

cat /etc/hosts

upgrade

error on boot

installation

error

error log (not existing)

my.cnf

update

my.cnf

error

httpd.conf

htaccess

.htaccess

compress

extract

Domain

vhost

Error

directory structure

.htaccess