| DNS setup with CentOS7 Web Panel Posted: 20 Mar 2021 09:24 PM PDT I need a little bit of help. I have zero previous experience and this is my first VPS. I just got it up and running with CentOS7 running Apache. I installed a CentOS Web Panel using SSH and in that Panel, I set NS1 and NS2 that I've made in my domain panel. Everything is working and my site which I created in the home subfolder of my server is now accessible. What currently troubles me is that when I enter ns1.domain.com or ns2.domain.com or hostname.domain.com in my Chrome address bar, it all leads to my root folder on the server, with an index list. I know I can hide this list with .htacccess but what I really want is that access to this folder is denied to everyone. I want that only my site in home/sitename/index_html is accessible with domain.com I hope I'm not too confusing and that there is a solution to my problem. Please help me out if you can. Thanks, N  |
| how to uses these commands to improve online gaming (VDSL)? Posted: 20 Mar 2021 08:09 PM PDT Hello i want to uses these commands to improve online gaming usage: wan vdsl2 set olr_timing [timing][sos_x][sos_y][sos_z] usage: wan vdsl2 set ginp_sra [on/off/go] usage: wan vdsl2 set ginp_sos [go/off] usage: wan vdsl2 set gsd [value] usage: wan vdsl2 set gso [value] usage: wan vdsl2 set gvt_mode [value] usage: wan vdsl2 set hrt_delay [tx sym] [tx dtu] [rx sym] [rx dtu] usage: wan vdsl2 set sync_sym [val] usage: wan vdsl2 set ginp_test [on|off] usage: wan vdsl2 set tr115 [on|off] usage: wan vdsl2 set cd_us_band_adj [on|off|auto] usage: wan vdsl2 set ds_est_new [on|off] usage: wan vdsl2 set ds_est_new min [x] ,X = (0.1 * x) dB usage: wan vdsl2 set ds_est_new adsl [y], Y = (1/1000 * y) usage: wan vdsl2 set ds_est_new echo [z], Z = z dB(>=0) usage: wan vdsl2 set cd_us_comp_value [value] usage: wan vdsl2 set usbp_check [on|off] usage: wan vdsl2 set kikp [0~13][0~11] usage: wan vdsl2 set rtslog_from [rtslog_state_from] usage: wan vdsl2 set v_noise [on|off] usage: wan vdsl2 set tx_cp_len [val] usage: wan vdsl2 set tx_comp on/off usage: wan vdsl2 tx_comp offsetrelay_tone_psd_comp_offset_non_upbo relay_tone_psd_comp_offset_upbo usage: wan vdsl2 set txgain_deploy [0|1|2] usage: wan vdsl2 set txpsd_drop_check [on|off] usage: wan vdsl2 set txpsd_drop_limit [val] usage: wan vdsl2 set txpwr_diff [val] usage: wan vdsl2 set txpwr_limit [on/off] [value/none] usage: wan vdsl2 set mode_select [on|off] usage: wan vdsl2 set rxpcb [on|off][rxpcb_mask] usage: wan vdsl2 set detect_tone_offset [detect_tone_offset] usage: wan vdsl2 set ds_tone [ds_lowest_tone] [ds_highest_tone] usage: wan vdsl2 set us_tone [us_lowest_tone] [us_highest_tone] usage: wan vdsl2 set tx_pcb [on|off] [pcb_mask] usage: wan vdsl2 set rfi_cancel [on|off] usage: wan vdsl2 set rx_win [on/off] usage: wan vdsl2 set tx_win [on/off][win_len] usage: wan vdsl2 set rxfltr_gain [val] usage: wan vdsl2 set rxfltr_ref [val] usage: wan vdsl2 set ta_offset [val] usage: wan vdsl2 set byte_med[R_MED 1|2][O_MED 1|2] usage: wan vdsl2 set kl0 [val:0~1280] usage: wan vdsl2 set kl0_offset [val] usage: wan vdsl2 set kl0_method [0|1] usage: wan vdsl2 set upbo [on|off] usage: wan vdsl2 set rx_blackout 0 : ds blackout off wan vdsl2 set rx_blackout [blackout_num][start_t1][stop_t1]... usage: wan vdsl2 set teq_fir_coeff [a2] [a3] [a4] usage: wan vdsl2 set rx_fltr_type [fltr_for_cd_phase] [fltr_for_training_phase] usage: wan vdsl2 set tx_fltr_type [fltr_for_cd_phase] [fltr_for_training_phase] usage: wan vdsl2 set tx_fltr_gain [tx_fltr_gain] [tx_fltr_dout_scale] [tx_upshift_bit] usage: wan vdsl2 set tx_gain_offset [value] usage: wan vdsl2 set st_period [period(sec)] usage: wan vdsl2 set st_task [on/off] usage: wan vdsl2 set st_dbg [on/off/olr] usage: wan vdsl2 set tpstc_type [0(ptm only)/1(ptm+atm)] usage: wan vdsl2 set gvector [1|2] usage: wan vdsl2 set amd [0|1|2|3] usage: wan vdsl2 set sync_check [on/off] usage: wan vdsl2 set one_bit [on|off] usage: wan vdsl2 set st_target_snrm [snrm] usage: wan vdsl2 set target_snrm [snrm_dB] usage: wan vdsl2 set manual_pms [on|off] usage: wan vdsl2 set inp_snrm_roc [inp_min(symbol)] [snrm_offset(dB)] usage: wan vdsl2 set roc [on/off] usage: wan vdsl2 set dual_lp [on|off] usage: wan vdsl2 set fake_pms [on|off] usage: wan vdsl2 set search_time_pms [time (# symbols)] usage: wan vdsl2 set rscg_pms [on|off] usage: wan vdsl2 set largedelay_pms [on|off] usage: wan vdsl2 set inpdelay_pms [inp_min0] [inp_min1] [delay_max0] [delay_max1] usage: wan vdsl2 set ndr_pms [msg_min] [ndr_min0] [ndr_min1] [ndr_max0] [ndr_max1] usage: wan vdsl2 set ins_inp [on/off] usage: wan vdsl2 set sos [on/off/go] usage: wan vdsl2 set sra_trans_method [0(non-seg)/1(seg)] usage: wan vdsl2 set sra_l_target off/[bits] usage: wan vdsl2 set sra_step [on|off] usage: wan vdsl2 set sra [on|off] usage: wan vdsl2 set bs_param [snrm] [trigger] [scan_tone_num] [wait_cnt] [scan_start_idx] [scan_end_idx] usage: wan vdsl2 set bs_1bit_change [on|off] usage: wan vdsl2 set autobs [on|off] usage: wan vdsl2 set bs_tx [on|off] usage: wan vdsl2 set bs [on|off] usage: wan vdsl2 set mgcnt_ovhd_test [on|off] usage: wan vdsl2 set agc_vref [val1] [val2] [val3] [val4] usage: wan vdsl2 set tcm [on|off] isso@DEll-OptiPlex-780:~$ strings tc3162_dmt_mt7510.ko | fgrep wan | fgrep vdsl | fgrep set | fgrep pms usage: wan vdsl2 set manual_pms [on|off] usage: wan vdsl2 set fake_pms [on|off] usage: wan vdsl2 set search_time_pms [time (# symbols)] usage: wan vdsl2 set rscg_pms [on|off] usage: wan vdsl2 set largedelay_pms [on|off] usage: wan vdsl2 set inpdelay_pms [inp_min0] [inp_min1] [delay_max0] [delay_max1] usage: wan vdsl2 set ndr_pms [msg_min] [ndr_min0] [ndr_min1] [ndr_max0] [ndr_max1] isso@DEll-OptiPlex-780:~$ strings tc3162_dmt_mt7510.ko | fgrep wan | fgrep vdsl usage: wan vdsl2 show online_snrm usage: wan vdsl2 set olr_timing [timing][sos_x][sos_y][sos_z] usage: wan vdsl2 show st_avg_snrm (tx/rx) usage: wan vdsl2 show errpwr [init|st] usage: wan vdsl2 set ginp_sra [on/off/go] usage: wan vdsl2 set ginp_sos [go/off] usage: wan vdsl2 test ovhd [diag|inv|pm|mgcnt|clreoc|nsf|pmd] usage: wan vdsl2 show vector usage: wan vdsl2 show st_soc_info usage: wan vdsl2 show pms_pmd [tx|rx] usage: wan vdsl2 show pmdtestparam (hlog/qln/snr/attndr) usage: wan vdsl2 show snrm [st] usage: wan vdsl2 show snr [init|st] usage: wan vdsl2 show new_bgtbl rx usage: wan vdsl2 show bgtbl [tx|rx] usage: wan vdsl2 set gsd [value] usage: wan vdsl2 set gso [value] usage: wan vdsl2 set gvt_mode [value] usage: wan vdsl2 set hrt_delay [tx sym] [tx dtu] [rx sym] [rx dtu] usage: wan vdsl2 set sync_sym [val] usage: wan vdsl2 set ginp_test [on|off] usage: wan vdsl2 set tr115 [on|off] usage: wan vdsl2 set cd_us_band_adj [on|off|auto] usage: wan vdsl2 set ds_est_new [on|off] usage: wan vdsl2 set ds_est_new min [x] ,X = (0.1 * x) dB usage: wan vdsl2 set ds_est_new adsl [y], Y = (1/1000 * y) usage: wan vdsl2 set ds_est_new echo [z], Z = z dB(>=0) usage: wan vdsl2 set cd_us_comp_value [value] usage: wan vdsl2 set usbp_check [on|off] usage: wan vdsl2 set kikp [0~13][0~11] usage: wan vdsl2 set rtslog_from [rtslog_state_from] usage: wan vdsl2 set v_noise [on|off] usage: wan vdsl2 set tx_cp_len [val] usage: wan vdsl2 set tx_comp on/off usage: wan vdsl2 tx_comp tone start_tone relay_tone stop_tone usage: wan vdsl2 tx_comp value start_tone_psd_comp relay_tone_psd_comp stop_tone_psd_comp usage: wan vdsl2 tx_comp offsetrelay_tone_psd_comp_offset_non_upbo relay_tone_psd_comp_offset_upbo usage: wan vdsl2 set txgain_deploy [0|1|2] usage: wan vdsl2 set txpsd_drop_check [on|off] usage: wan vdsl2 set txpsd_drop_limit [val] usage: wan vdsl2 set txpwr_diff [val] usage: wan vdsl2 set txpwr_limit [on/off] [value/none] usage: wan vdsl2 set mode_select [on|off] usage: wan vdsl2 set rxpcb [on|off][rxpcb_mask] usage: wan vdsl2 set detect_tone_offset [detect_tone_offset] usage: wan vdsl2 set ds_tone [ds_lowest_tone] [ds_highest_tone] usage: wan vdsl2 set us_tone [us_lowest_tone] [us_highest_tone] usage: wan vdsl2 set tx_pcb [on|off] [pcb_mask] usage: wan vdsl2 set rfi_cancel [on|off] usage: wan vdsl2 set rx_win [on/off] usage: wan vdsl2 set tx_win [on/off][win_len] usage: wan vdsl2 set rxfltr_gain [val] usage: wan vdsl2 set rxfltr_ref [val] usage: wan vdsl2 set ta_offset [val] usage: wan vdsl2 set byte_med[R_MED 1|2][O_MED 1|2] usage: wan vdsl2 set kl0 [val:0~1280] usage: wan vdsl2 set kl0_offset [val] usage: wan vdsl2 set kl0_method [0|1] usage: wan vdsl2 set upbo [on|off] usage: wan vdsl2 set rx_blackout 0 : ds blackout off wan vdsl2 set rx_blackout [blackout_num][start_t1][stop_t1]... usage: wan vdsl2 set teq_fir_coeff [a2] [a3] [a4] usage: wan vdsl2 set rx_fltr_type [fltr_for_cd_phase] [fltr_for_training_phase] usage: wan vdsl2 set tx_fltr_type [fltr_for_cd_phase] [fltr_for_training_phase] usage: wan vdsl2 set tx_fltr_gain [tx_fltr_gain] [tx_fltr_dout_scale] [tx_upshift_bit] usage: wan vdsl2 set tx_gain_offset [value] usage: wan vdsl2 set st_period [period(sec)] usage: wan vdsl2 set st_task [on/off] usage: wan vdsl2 set st_dbg [on/off/olr] usage: wan vdsl2 set tpstc_type [0(ptm only)/1(ptm+atm)] usage: wan vdsl2 set gvector [1|2] usage: wan vdsl2 set amd [0|1|2|3] usage: wan vdsl2 set sync_check [on/off] usage: wan vdsl2 set one_bit [on|off] usage: wan vdsl2 set st_target_snrm [snrm] usage: wan vdsl2 set target_snrm [snrm_dB] usage: wan vdsl2 set manual_pms [on|off] usage: wan vdsl2 set inp_snrm_roc [inp_min(symbol)] [snrm_offset(dB)] usage: wan vdsl2 set roc [on/off] usage: wan vdsl2 set dual_lp [on|off] usage: wan vdsl2 set fake_pms [on|off] usage: wan vdsl2 set search_time_pms [time (# symbols)] usage: wan vdsl2 set rscg_pms [on|off] usage: wan vdsl2 set largedelay_pms [on|off] usage: wan vdsl2 set inpdelay_pms [inp_min0] [inp_min1] [delay_max0] [delay_max1] usage: wan vdsl2 set ndr_pms [msg_min] [ndr_min0] [ndr_min1] [ndr_max0] [ndr_max1] usage: wan vdsl2 set ins_inp [on/off] usage: wan vdsl2 set sos [on/off/go] usage: wan vdsl2 set sra_trans_method [0(non-seg)/1(seg)] usage: wan vdsl2 set sra_l_target off/[bits] usage: wan vdsl2 set sra_step [on|off] usage: wan vdsl2 set sra [on|off] usage: wan vdsl2 set bs_param [snrm] [trigger] [scan_tone_num] [wait_cnt] [scan_start_idx] [scan_end_idx] usage: wan vdsl2 set bs_1bit_change [on|off] usage: wan vdsl2 set autobs [on|off] usage: wan vdsl2 set bs_tx [on|off] usage: wan vdsl2 set bs [on|off] usage: wan vdsl2 set mgcnt_ovhd_test [on|off] usage: wan vdsl2 set agc_vref [val1] [val2] [val3] [val4] usage: wan vdsl2 set tcm [on|off] wan vdsl2 show o_signature wan vdsl2 show o_update wan vdsl2 show o_prm wan vdsl2 show o_taupdate wan vdsl2 show o_msg1 wan vdsl2 show o_tps wan vdsl2 show o_pms wan vdsl2 show o_pmd wan vdsl2 show r_msg1 wan vdsl2 show r_update wan vdsl2 show r_prm wan vdsl2 show r_taupdate wan vdsl2 show r_msg2 wan vdsl2 show r_pms wan vdsl2 show r_pmd wan vdsl2 show dmt wan vdsl2 show pilot_inf wan vdsl2 show tssi wan vdsl2 show pms_pmd tx wan vdsl2 show pms_pmd rx wan vdsl2 show st_soc_info wan vdsl2 show bgtbl tx wan vdsl2 show bgtbl rx wan vdsl2 show errpwr init wan vdsl2 show snrm st wan vdsl2 show snr init wan vdsl2 show snr st wan vdsl2 show st_avg_snrm tx wan vdsl2 show st_avg_snrm rx wan vdsl2 show mgcnt
i noticed that connection improved when i used these commmands: wan vdsl2 set tx_gain_offset 24.2 wan vdsl2 set rx_win on wan vdsl2 set txpsd_drop_limit 255 wan vdsl2 set txpwr_diff -45 wan vdsl2 set txpwr_limit on -435 wan vdsl2 set rxfltr_gain 45 wan vdsl2 set tx_cp_len 37 wan vdsl2 set rx_fltr_type 0x000001f4 0x000001f4 wan vdsl2 set rxfltr_gain 0x000001f4 wan vdsl2 set tx_fltr_gain 0x000010cf 0x00000001 16 wan vdsl2 set cd_us_comp_value 40
 |
| Accessing Docker API with Portainer Posted: 20 Mar 2021 07:25 PM PDT I'm in a situation where I'd like to access a docker installation on a different network with a local Portainer UI. I've looked at the documentation for exposing the docker API over TCP and how to secure it. Also found this answer incredibly helpful. From there, I've decided to go the SSH route but a little more manually. I've forwarded the remote docker socket to a local tcp port so that I can secure the connection but also not scratch my head over TLS (I've tried that as well but haven't had much luck. Might be the same issue). ssh -R 127.0.0.1:3306:/var/run/docker.sock administrator@IP
and have been able to prove that the connection works with docker -H 127.0.0.1:3306 info
and get the infor from the remote host just fine. However, when I try to configure Portainer with a new Endpoint and select the Docker API option with the Endpoint URL of 127.0.0.1:3306, I simply get an error: Failure: Unable to initiate communications with endpoint. Is there addidtional permissions I need to give to the Portainer container to access local connections? I've also tried exposing the endpoint without TLS via the standard daemon configuration and the machine is listening to the open port but still no luck with Portainer. Any recommendations or points in the right direction for where to go from here?  |
| Jenkins github settings without having to provide full repo URL Posted: 20 Mar 2021 07:10 PM PDT Going through a tutorial and found that the author has a different view of github and he doesn't have to provide the full URL of the github repo. 
I see a different layout compared to above and need to provide the full github repo URL. 
Trying to figure how to do the same on my jenkins test server. Any suggestions?  |
| can different pods run different containerization technologies? Posted: 20 Mar 2021 06:36 PM PDT for example, can I have one pod running docker and another running cri-o? I am new to the world of kubernetes and I've not been able to find the answer in the documentation.  |
| Google Cloud, GC Site-to-Site VPNs, OpenVPN, Different Subnets: Best way to connect A to B? Posted: 20 Mar 2021 06:16 PM PDT Sorry, the title isn't great... I have a Google Cloud (GC) VPC subnet 10.1.1.0/24 in region A which has an OpenVPN Access Server at 10.1.1.2. The OpenVpn Access Server provides remote access for clients outside of the cloud. Clients are allocated an IP from the 192.168.3.0/24 subnet, and the routing method can be either NAT or routing (Open VPN Access Server settings). I have a GC VPN gateway (classic) in region B, and another GC VPN gateway (classic) in region C. The tunnels from remote sites to the GC VPN gateways are "dictated" by the remote site, i.e., the routing method is policy based, and the remote site decides what the cloud (local) subnet must be. So: Policy for tunnel from remote site B to GC VPN gateway B is 10.2.2.0/24 (remote) <-> 172.18.22.0/24 Policy for tunnel from remote side C to GC VPN gateway C is 10.3.3.0/24 (remote) <-> 172.18.23.0/24 Hence, for traffic to travel to remote site B / site C, a requirement would be that it has a source inside 172.18.22.0/24 / 172.18.23.0/24 respectively. So, the question is, what is the best way for a remote client to access remote networks B and C? I've considered introducing instances in subnets B and C which run OpenVPN clients, which could provide access to the remote networks via NAT... but I also need the remote network to be able to reach subnet A. I've considered placing A, B and C in different VPCs, such that the the OpenVPN Access Server could have network interfaces to each VPC, and route traffic by NAT. This has some scale issues... instances are limited to 8 interfaces. Also, I'd have to have 1 GC VPN GW per subnet / tunnel. I'm sure there are other issues that I haven't considered. All a bit of a mess to be honest. Unfortunately, I can not request a different routing method from the remote sites (B and C), and I also cannot request specific subnets for the cloud end of the policy based tunnel. Any help would be greatly appreciated!  |
| Prevent docker container from accessing localhost Posted: 20 Mar 2021 04:35 PM PDT I noticed that I can access the host from a docker container by using the docker0 gateway address. For security reasons I want to block / limit this access. I already used the following iptables rule to prevent the container from accessing my local network: iptables -A INPUT -i docker0 -d 192.168.0.0/16 -j DROP iptables -A FORWARD -i docker0 -d 192.168.0.0/16 -j DROP
Running curl 192.168.1.1 inside the container results in a timeout (as expected). I want to achieve the same when accessing my host system using the docker default gateway, i.e. curl 172.17.0.1 should also result in a time out. Furthermore I want to block all ports except one. On my host system runs a mysql server (port 3306) which should be accessible by all containers.  |
| Is vps server or dedicated server possible as fax server? Posted: 20 Mar 2021 05:20 PM PDT I want the mail to fax . I am currently using the alltofax.de to send fax from a mail. I want to know if I can build a fax server on my dedicated server. I studied about Hylafax, but said that modem should be connected. Does this mean a physical modem? I can't install modem equipment because I use cloud hosting server. Can I build a fax (mail to fax) server on a cloud hosting server (dedicated server)?  |
| doveadm replication fails with doveadm: Fatal: setuid(XX(banjo) from userdb lookup) failed with euid=8(mail): Operation not permitted (This binary Posted: 20 Mar 2021 03:52 PM PDT I've been running postfix & dovecot on separate VMs mounting /var/mail over NFS, and trying to replicate with mailsync, but I get a lot of email duplication so I really want to get dsync working on dovecot. I followed the advice at the following blog to get 95% of the configuration correct. As postfix was using user/group=mail/mail and I got errors about that, I did change vmail to mail in the config files (also vmail wasn't added to the passwd file by dnf). The one problem which seems tiny is that I get the following error every time dsync runs: Local: Mar 20 23:10:19 doveadm(banjo): Error: doveadm server disconnected before handshake: EOF Mar 20 23:10:19 doveadm(banjo): Error: sync: Disconnected from remote: EOF Remote: Mar 20 23:11:06 doveadm: Fatal: setuid(XXXX(banjo) from userdb lookup) failed with euid=8(mail): Operation not permitted (This binary should probably be called with process user set to XXXX(banjo) instead of 8(mail))
The closest match I've found to this error suggests running dovecot as root, but doveadm processes already run as root. Furthermore, when I connect via IMAP dovecot has no problem reading/writing mail Inboxes and folders (everything has g+rws and group mail for postfix to work). Has anyone got any other ideas for troubleshooting or even a better blog? PS: Both VMs are - Fedora 33, kernel 5.9.16-200, dovecot-2.3.13-2, HW=qemu-kvm-5.1.0-9.fc33.x86_64 on HP Proliant MicroServers (one Microserver is Gen9 the other Gen10) TIA Banjo.  |
| HPing3 ip header id all the same for every packet Posted: 20 Mar 2021 03:46 PM PDT I am trying to test a VPS I purchased against denial of service attacks, and noticed when testing ICMP flood's, HPing3 gives the same id=0x(random) for all of the packets. If I stop attack and start a new one, it will change the id, but during an attack it is all the same. Is there a way to make it randomize each packet's header id? Also, when I set --icmp-iplen and/or --icmp-iphlen to any number, the ttl= does not increase/decrease no matter what I set the 2 too. wire shark example of what I am getting vs what I am looking for I have a friend who will not tell me how he gets the output I am looking for, I am not sure why... Any tips? Here is the command I am using hping3 -1 --flood --rand-source -K 2 VPSIP
EDIT I managed to get ttl to be consistently 241 by adding --ttl 250. I am not sure how to get it to randomize more instead of hovering around 64...  |
| Mysql High cpu load Posted: 20 Mar 2021 03:59 PM PDT I have a dedicated server with 48 cores, 128 GB of Ram, 2 nvme with RAID. I have a pretty large WordPress site with 5 GB of MySQL database. The concurrent traffic for the site is from 200 to 700 users. The server always shows that MySQL causes high memory and CPU htop screenshot. I have tried many enhancements to reduce the load but I didn't reach a satisfied solution. I found that MySQL consumes the disk at 100% always as shown in the atop picture atop screenshot. I tried to follwo mysqltuner.pl and this its result mysqltuner results and this is my.cnf content: tmp_table_size = 10G query_cache_type=1 query_cache_size = 65M query_cache_limit=256K query_cache_min_res_unit = 2k innodb_buffer_pool_size = 7409M innodb_buffer_pool_instances=8 join_buffer_size = 256M sort_buffer_size = 256M read_buffer_size = 256M read_rnd_buffer_size = 256M innodb_log_file_size = 256M datadir=/var/lib/mysql socket=/var/lib/mysql/mysql.sock symbolic-links=0 log-error=/var/log/mysqld.log pid-file=/var/run/mysqld/mysqld.pid max_allowed_packet=268435456 open_files_limit=40000 innodb_file_per_table=1
Thanks in advanced  |
| Preserving source IP behind double-NAT network Posted: 20 Mar 2021 07:29 PM PDT I have a network scenario where double NAT-forwarding is happening.
Public Firewall and Internal Firewall are doing NAT forwarding. I have only control of the Internal Firewall. Client: X.X.X.X
Public Firewall: 10.10.10.1
Internal Firewall: 192.168.1.10
SSH server: 192.168.1.20 Public Firewall: Forwards all ports to Internal Firewall
Internal Firewall: Configured to forward port 22 to SSH Server My problem is when Client connects to port 22 through the Public Firewall i see the ip of the Internal Firewall (192.168.1.10) on the SSH server instead of the Client's IP
This is how iptables are configured on the Internal Firewall: iptables -A PREROUTING -t nat -p tcp -d 192.168.1.10 --dport 22 -j DNAT --to-destination 192.168.1.20:22 iptables -A POSTROUTING -t nat -p tcp -d 192.168.1.20 --dport 22 -j SNAT --to-source 192.168.1.10 Is there a way of preserving the Client's IP when it reaches SSH server ?  |
| Redirection thru redsocks connecting but not responding Posted: 20 Mar 2021 05:34 PM PDT Am using redsocks to redirect thru a proxy. The problem is that when i use a tool like wget it appears to be connecting but not resolving. What could be the problem and how could i solve it? Executing wget google.com --2020-08-22 17:32:34-- http://google.com/ Resolving google.com (google.com)... 172.217.1.110, 2607:f8b0:4008:810::200e Connecting to google.com (google.com)|172.217.1.110|:80... connected. HTTP request sent, awaiting response...
Executing curl google.com curl -v google.com -o saved % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying 172.217.1.110:80... * Connected to google.com (172.217.1.110) port 80 (#0) > GET / HTTP/1.1 > Host: google.com > User-Agent: curl/7.71.1 > Accept: */* > 0 0 0 0 0 0 0 0 --:--:-- 0:00:14 --:--:-- 0^C
redsocks.conf base { log_debug = on; log_info = on; log = "file:/var/log/redsocks.log"; daemon = on; redirector = iptables; } redsocks { local_ip = 0.0.0.0; local_port = 12345; ip = my.proxy; port = 3128; type = http-connect; login = "myUser"; password = "myPassword"; } redsocks { local_ip = 0.0.0.0; local_port = 12346; ip = my.proxy; port = 3128; type = http-relay; login = "myUser"; password = "myPassword"; }
iptables Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination REDSOCKS tcp -- 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT) target prot opt source destination Chain REDSOCKS (1 references) target prot opt source destination RETURN all -- 0.0.0.0/0 0.0.0.0/8 RETURN all -- 0.0.0.0/0 10.0.0.0/8 RETURN all -- 0.0.0.0/0 100.64.0.0/10 RETURN all -- 0.0.0.0/0 127.0.0.0/8 RETURN all -- 0.0.0.0/0 169.254.0.0/16 RETURN all -- 0.0.0.0/0 172.16.0.0/12 RETURN all -- 0.0.0.0/0 192.168.0.0/16 RETURN all -- 0.0.0.0/0 198.18.0.0/15 RETURN all -- 0.0.0.0/0 224.0.0.0/4 RETURN all -- 0.0.0.0/0 240.0.0.0/4 REDIRECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 redir ports 12346 REDIRECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 redir ports 12345 REDIRECT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:11371 redir ports 12346
 |
| clamav "killed" with no explanation Posted: 20 Mar 2021 08:01 PM PDT On a Debian 10 server I have this problem with clamav: root@vps:~# clamscan -r -v --stdout / Killed
You see I use the verbose flag but that does not give me any information. In years of using clam I have not had this problem. I know it's not a database problem: root@vps:~# freshclam Sun Mar 1 00:18:39 2020 -> ClamAV update process started at Sun Mar 1 00:18:39 2020 Sun Mar 1 00:18:39 2020 -> daily.cvd database is up to date (version: 25737, sigs: 2201376, f-level: 63, builder: raynman) Sun Mar 1 00:18:39 2020 -> main.cvd database is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr) Sun Mar 1 00:18:39 2020 -> bytecode.cvd database is up to date (version: 331, sigs: 94, f-level: 63, builder: anvilleg)
Please suggest steps to test. EDIT: This is an OpenVZ VPS with 512MB RAM. EDIT: strace shows killed by SIGKILL but that doesn't tell me much.  |
| AWS application load balancer 404 Posted: 20 Mar 2021 06:49 PM PDT I'm following tutorial to create an application load balancer and the listener path is as follow: LB -> path -> server1 or -> path -> server2 The problem: I can get to server1 via the LB url ok but when I tried to go to server2 i received 404 page. If i delete & reconfigure the LB & swap the server around then I can get to server2 but will get 404 if i tried to go to server1. I can get to both server just fine directly. Thanks for your help
 |
| Ubuntu 18.04 server failed grub install Posted: 20 Mar 2021 06:06 PM PDT I am trying a fresh install of Ubuntu 18.04 server, without an internet connection (not Live) on my Dell PowerEdge R640. The machine came with a Boot Optimized Storage SSD (RAID 1), which is where I'm trying to install to. I've wiped the partition clean and chosen "Guided - use entire disk". However, when the installer attempts to install the grub boot loader, I get "Unable to install grub in dummy 'grub-install dummy' failed" and I am unable to progress. Has anyone encountered this and/or know what my issue is?  |
| Why does Samba4 fail with NT_STATUS_INTERNAL_ERROR on Ubuntu 18.04 Posted: 20 Mar 2021 07:01 PM PDT I am having trouble setting up Samba as an AD DC. At present I have 1 Ubuntu box which I'd like to use to share files with other computers in my home network. At present the same machine which servers as the DC would also serve the files. This is a home setup, meaning that I am using a consumer-grade router. - OS: Ubuntu 18.04
- Samba: Version 4.7.6-Ubuntu
To begin each iteration of my attempts to get it working I perform the recommended steps to kill any samba processes etc and remove the files discussed in Preparing the Installation from the setup guide https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller $ ps ax | egrep "samba|smbd|nmbd|winbindd"
I then kill all processes as described. I verify that samba is installed $ which samba /usr/sbin/samba $ samba --version Version 4.7.6-Ubuntu
The instructions also read Verify that the /etc/hosts file on the DC correctly resolves the fully-qualified domain name (FQDN) and short host name to the LAN IP address of the DC. For example: The exact contents are 127.0.0.1 localhost localhost.localdomain 192.168.1.1 DC1.samdom.example.com DC1 # The following lines are desirable for IPv6 capable hosts ::1 ip6-localhost ip6-loopback fe00::0 ip6-localnet ff00::0 ip6-mcastprefix ff02::1 ip6-allnodes ff02::2 ip6-allrouters
Note that the Ubuntu box's IP on the local network is 192.168.1.20 192.168.1.1 is the LAN IP found on my router under the LAN tab and IP Address field. Note I do not have DDNS turned on for my router. $ sudo samba-tool domain provision --use-rfc2307 --interactive Realm: SAMDOM.EXAMPLE.COM Domain [SAMDOM]: SAMDOM Server Role (dc, member, standalone) [dc]: dc DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]: SAMBA_INTERNAL DNS forwarder IP address (write 'none' to disable forwarding) [192.168.1.1]: 8.8.8.8 Administrator password: Retype password: Looking up IPv4 addresses Looking up IPv6 addresses No IPv6 address will be assigned Setting up share.ldb Setting up secrets.ldb Setting up the registry Setting up the privileges database Setting up idmap db Setting up SAM db Setting up sam.ldb partitions and settings Setting up sam.ldb rootDSE Pre-loading the Samba 4 and AD schema Adding DomainDN: DC=samdom,DC=example,DC=com Adding configuration container Setting up sam.ldb schema Setting up sam.ldb configuration data Setting up display specifiers Modifying display specifiers Adding users container Modifying users container Adding computers container Modifying computers container Setting up sam.ldb data Setting up well known security principals Setting up sam.ldb users and groups Setting up self join Adding DNS accounts Creating CN=MicrosoftDNS,CN=System,DC=samdom,DC=example,DC=com Creating DomainDnsZones and ForestDnsZones partitions Populating DomainDnsZones and ForestDnsZones partitions Setting up sam.ldb rootDSE marking as synchronized Fixing provision GUIDs A Kerberos configuration suitable for Samba AD has been generated at /var/lib/samba/private/krb5.conf Setting up fake yp server settings Once the above files are installed, your Samba AD server will be ready to use Server Role: active directory domain controller Hostname: zoo-vault NetBIOS Domain: SAMDOM DNS Domain: samdom.example.com DOMAIN SID: …
Great, so far so good. I copy the krb5.conf file as suggested to /etc/krb5.conf. I skip the Setting up the AD DNS back end as I am using SAMBA_INTERNAL My /etc/resolv.conf looks like # Generated by NetworkManager search samdom.example.com nameserver 192.168.1.1
I skip Create a reverse zone and then copy the kerberos file as suggested. This is where it goes wrong. I've started samba with sudo samba, the processes look like they are running but any of the following verification commands given in the documentation do not work. $ smbclient //localhost/netlogon -UAdministrator -c 'ls' Enter SAMDOM\Administrator's password: session setup failed: NT_STATUS_INTERNAL_ERROR $ host -t SRV _ldap._tcp.samdom.example.com. Host _ldap._tcp.samdom.example.com. not found: 3(NXDOMAIN) $ host -t SRV _kerberos._udp.samdom.example.com. Host _kerberos._udp.samdom.example.com. not found: 3(NXDOMAIN) $ host -t A dc1.samdom.example.com. Host dc1.samdom.example.com. not found: 3(NXDOMAIN)
I'm at somewhat of a loss here. A few things to note. My ubuntu machine's static IP on my local network is NOT 192.168.1.1 (the IP I used in the config steps above). It is 192.168.1.20. I've tried using that IP as well, to no avail. I have also tried using none, 192.168.1.1 and 8.8.8.8 as the DNS forwarder IP address during setup to no avail. I have found some articles online variously offering solutions or further test functions but have yet to find anything that solves my problem. In the end I would like to set up Samba to function as a  |
| ./configure: error: no ~/nginx-auth-ldap/config was found Posted: 20 Mar 2021 08:01 PM PDT Trying to build nginx per this guide: https://calvin.me/nginx-ldap-http-authentication/ I'm on Ubuntu 16.04 and used nginx 1.12.2 instead of what he has in that guide. I modified his build script to this: ./configure --user=nginx --group=nginx --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --with-http_gzip_static_module --with-http_stub_status_module --with-http_ssl_module --with-pcre --with-file-aio --with-http_realip_module --add-module=~/nginx-auth-ldap --with-ipv6 --with-debug
I'm getting this as an error but that claimed "not found" really does exist. me@ubuntu:~/nginx-1.12.2$ sudo ./configure --user=nginx --group=nginx --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --with-http_gzip_static_module --with-http_stub_status_module --with-http_ssl_module --with-pcre --with-file-aio --with-http_realip_module --add-module=~/nginx-auth-ldap --with-ipv6 --with-debug checking for OS + Linux 4.4.0-116-generic x86_64 checking for C compiler ... found + using GNU C compiler + gcc version: 5.4.0 20160609 (Ubuntu 5.4.0-6ubuntu1~16.04.9) checking for gcc -pipe switch ... found checking for -Wl,-E switch ... found checking for gcc builtin atomic operations ... found checking for C99 variadic macros ... found checking for gcc variadic macros ... found checking for gcc builtin 64 bit byteswap ... found checking for unistd.h ... found checking for inttypes.h ... found checking for limits.h ... found checking for sys/filio.h ... not found checking for sys/param.h ... found checking for sys/mount.h ... found checking for sys/statvfs.h ... found checking for crypt.h ... found checking for Linux specific features checking for epoll ... found checking for EPOLLRDHUP ... found checking for EPOLLEXCLUSIVE ... not found checking for O_PATH ... found checking for sendfile() ... found checking for sendfile64() ... found checking for sys/prctl.h ... found checking for prctl(PR_SET_DUMPABLE) ... found checking for sched_setaffinity() ... found checking for crypt_r() ... found checking for sys/vfs.h ... found checking for poll() ... found checking for /dev/poll ... not found checking for kqueue ... not found checking for crypt() ... not found checking for crypt() in libcrypt ... found checking for F_READAHEAD ... not found checking for posix_fadvise() ... found checking for O_DIRECT ... found checking for F_NOCACHE ... not found checking for directio() ... not found checking for statfs() ... found checking for statvfs() ... found checking for dlopen() ... not found checking for dlopen() in libdl ... found checking for sched_yield() ... found checking for SO_SETFIB ... not found checking for SO_REUSEPORT ... found checking for SO_ACCEPTFILTER ... not found checking for SO_BINDANY ... not found checking for IP_BIND_ADDRESS_NO_PORT ... found checking for IP_TRANSPARENT ... found checking for IP_BINDANY ... not found checking for IP_RECVDSTADDR ... not found checking for IP_PKTINFO ... found checking for IPV6_RECVPKTINFO ... found checking for TCP_DEFER_ACCEPT ... found checking for TCP_KEEPIDLE ... found checking for TCP_FASTOPEN ... found checking for TCP_INFO ... found checking for accept4() ... found checking for kqueue AIO support ... not found checking for Linux AIO support ... found checking for int size ... 4 bytes checking for long size ... 8 bytes checking for long long size ... 8 bytes checking for void * size ... 8 bytes checking for uint32_t ... found checking for uint64_t ... found checking for sig_atomic_t ... found checking for sig_atomic_t size ... 4 bytes checking for socklen_t ... found checking for in_addr_t ... found checking for in_port_t ... found checking for rlim_t ... found checking for uintptr_t ... uintptr_t found checking for system byte ordering ... little endian checking for size_t size ... 8 bytes checking for off_t size ... 8 bytes checking for time_t size ... 8 bytes checking for AF_INET6 ... found checking for setproctitle() ... not found checking for pread() ... found checking for pwrite() ... found checking for pwritev() ... found checking for sys_nerr ... found checking for localtime_r() ... found checking for posix_memalign() ... found checking for memalign() ... found checking for mmap(MAP_ANON|MAP_SHARED) ... found checking for mmap("/dev/zero", MAP_SHARED) ... found checking for System V shared memory ... found checking for POSIX semaphores ... not found checking for POSIX semaphores in libpthread ... found checking for struct msghdr.msg_control ... found checking for ioctl(FIONBIO) ... found checking for struct tm.tm_gmtoff ... found checking for struct dirent.d_namlen ... not found checking for struct dirent.d_type ... found checking for sysconf(_SC_NPROCESSORS_ONLN) ... found checking for openat(), fstatat() ... found checking for getaddrinfo() ... found configuring additional modules adding module in ~/nginx-auth-ldap ./configure: error: no ~/nginx-auth-ldap/config was found
directory me@ubuntu:~/nginx-auth-ldap$ ls config example.conf LICENSE ngx_http_auth_ldap_module.c README.md
 |
| IIS | PHP Error: No input file specified Posted: 20 Mar 2021 07:01 PM PDT Im running IIS 7.5 / PHP 7.0 CGI. If i open a non exist .php file in my browser, i get this error: No input file specified. IIS don't use the 404 Error Page for .php, like in .html files. I found some solutions, for example set doc_root in php.ini or comment out open_basedir .. but it won't help. I know it's a server issue, but not which. The question is: Why i get "No input file specified." output, if i open a non exist .php file and not the IIS 404 Error Page?  |
| After CentOS 7.4 upgrade samba panic Posted: 20 Mar 2021 09:08 PM PDT Hi we're running a Samba server 4.6.2 with Microsoft Active Directory integration. After upgrading CentOS 7.3 to version 7.4 our Samba server started throwing errors. Some users are unable to copy files from their desktop to the server. Samba is crashing with core dumps and, after a restart, everything worked fine for half an hour and then Samba started logging errors again. Even after rebooting the server, Samba starts throwing errors. I've read the how-to section, but this provides only basic troubleshooting steps, nothing regarding an error quite as severe as this. We're using CentOS 7.4 with the newest kernel version 3.10.0-693.2.2.el7.x86_64. Our fileserver has 16GB ram and 4 cpu cores. I would be happy about any help. Here is my log file (/var/log/messages): Sep 21 17:49:31 fs03 smbd[2160]: [2017/09/21 17:49:31.362559, 0] ../source3/lib/sysquotas.c:461(sys_get_quota) Sep 21 17:49:31 fs03 smbd[2160]: sys_path_to_bdev() failed for path [.]! Sep 21 17:49:31 fs03 smbd[2160]: [2017/09/21 17:49:31.362980, 0] ../source3/lib/sysquotas.c:461(sys_get_quota) Sep 21 17:49:31 fs03 smbd[2160]: sys_path_to_bdev() failed for path [.]! Sep 21 17:49:31 fs03 smbd[2160]: [2017/09/21 17:49:31.363008, 0] ../source3/lib/sysquotas.c:461(sys_get_quota) Sep 21 17:49:31 fs03 smbd[2160]: sys_path_to_bdev() failed for path [.]! Sep 21 17:49:31 fs03 smbd[2160]: [2017/09/21 17:49:31.363034, 0] ../source3/lib/sysquotas.c:461(sys_get_quota) Sep 21 17:49:31 fs03 smbd[2160]: sys_path_to_bdev() failed for path [.]! Sep 21 17:49:31 fs03 smbd[2160]: [2017/09/21 17:49:31.388115, 0] ../source3/lib/sysquotas.c:461(sys_get_quota) Sep 21 17:49:31 fs03 smbd[2160]: sys_path_to_bdev() failed for path [.]! Sep 21 17:49:31 fs03 smbd[2160]: [2017/09/21 17:49:31.388174, 0] ../source3/lib/sysquotas.c:461(sys_get_quota) Sep 21 17:49:31 fs03 smbd[2160]: sys_path_to_bdev() failed for path [.]! Sep 21 17:49:31 fs03 smbd[2160]: [2017/09/21 17:49:31.388212, 0] ../source3/lib/sysquotas.c:461(sys_get_quota) Sep 21 17:49:31 fs03 smbd[2160]: sys_path_to_bdev() failed for path [.]! Sep 21 17:49:31 fs03 smbd[2160]: [2017/09/21 17:49:31.388238, 0] ../source3/lib/sysquotas.c:461(sys_get_quota) Sep 21 17:49:31 fs03 smbd[2160]: sys_path_to_bdev() failed for path [.]! Sep 21 19:34:38 fs03 smbd[4287]: [2017/09/21 19:34:38.472673, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn) Sep 21 19:34:38 fs03 smbd[4287]: smb2_write failed: fnum 3657905683, file IT/tmp-files/10G (7), length=65536 offset=0 nwritten=-1: NT_STATUS_NETWORK_BUSY#012Bad talloc magic value - wrong talloc version used/mixed Sep 21 19:34:38 fs03 smbd[4287]: smb2_write failed: fnum 3657905683, file IT/tmp-files/10G (7), length=65536 offset=0 nwritten=-1: NT_STATUS_NETWORK_BUSY Sep 21 19:34:38 fs03 smbd[4287]: [2017/09/21 19:34:38.473097, 0] ../source3/lib/util.c:791(smb_panic_s3) Sep 21 19:34:38 fs03 smbd[4287]: PANIC (pid 4287): Bad talloc magic value - wrong talloc version used/mixed Sep 21 19:34:38 fs03 smbd[4287]: [2017/09/21 19:34:38.623999, 0] ../source3/lib/util.c:902(log_stack_trace) Sep 21 19:34:38 fs03 smbd[4287]: BACKTRACE: 8 stack frames: Sep 21 19:34:38 fs03 smbd[4287]: #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7fbb77e336ba] Sep 21 19:34:38 fs03 smbd[4287]: #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7fbb77e33790] Sep 21 19:34:38 fs03 smbd[4287]: #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7fbb79f0e95f] Sep 21 19:34:38 fs03 smbd[4287]: #3 /lib64/libtalloc.so.2(_talloc_get_type_abort+0x102) [0x7fbb76c6b702] Sep 21 19:34:38 fs03 smbd[4287]: #4 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3c67) [0x7fbb75857c67] Sep 21 19:34:38 fs03 smbd[4287]: #5 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3341) [0x7fbb75857341] Sep 21 19:34:38 fs03 smbd[4287]: #6 /lib64/libpthread.so.0(+0x7e25) [0x7fbb7a36de25] Sep 21 19:34:38 fs03 smbd[4287]: #7 /lib64/libc.so.6(clone+0x6d) [0x7fbb7657f34d] Sep 21 19:34:38 fs03 smbd[4287]: [2017/09/21 19:34:38.624209, 0] ../source3/lib/dumpcore.c:315(dump_core) Sep 21 19:34:38 fs03 smbd[4287]: dumping core in /var/log/samba/cores/smbd Sep 21 19:34:38 fs03 smbd[4287]: Sep 21 19:35:41 fs03 systemd-logind: New session 29 of user root. Sep 21 19:35:41 fs03 systemd: Started Session 29 of user root. Sep 21 19:35:41 fs03 systemd: Starting Session 29 of user root. Sep 21 19:35:46 fs03 smbd[24327]: [2017/09/21 19:35:46.448052, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn) Sep 21 19:35:46 fs03 smbd[24327]: [2017/09/21 19:35:46.448577, 0] ../source3/lib/util.c:791(smb_panic_s3) Sep 21 19:35:46 fs03 smbd[24327]: PANIC (pid 24327): Bad talloc magic value - wrong talloc version used/mixed Sep 21 19:35:46 fs03 smbd[24327]: [2017/09/21 19:35:46.448961, 0] ../source3/lib/util.c:902(log_stack_trace) Sep 21 19:35:46 fs03 smbd[24327]: BACKTRACE: 8 stack frames: Sep 21 19:35:46 fs03 smbd[24327]: #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7fbb77e336ba] Sep 21 19:35:46 fs03 smbd[24327]: #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7fbb77e33790] Sep 21 19:35:46 fs03 smbd[24327]: #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7fbb79f0e95f] Sep 21 19:35:46 fs03 smbd[24327]: #3 /lib64/libtalloc.so.2(_talloc_get_type_abort+0x102) [0x7fbb76c6b702] Sep 21 19:35:46 fs03 smbd[24327]: #4 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3c67) [0x7fbb75857c67] Sep 21 19:35:46 fs03 smbd[24327]: #5 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3341) [0x7fbb75857341] Sep 21 19:35:46 fs03 smbd[24327]: #6 /lib64/libpthread.so.0(+0x7e25) [0x7fbb7a36de25] Sep 21 19:35:46 fs03 smbd[24327]: #7 /lib64/libc.so.6(clone+0x6d) [0x7fbb7657f34d] Sep 21 19:35:46 fs03 smbd[24327]: [2017/09/21 19:35:46.449544, 0] ../source3/lib/dumpcore.c:315(dump_core) Sep 21 19:35:46 fs03 smbd[24327]: dumping core in /var/log/samba/cores/smbd Sep 21 19:35:46 fs03 smbd[24327]: Sep 21 19:50:41 fs03 smbd[25068]: [2017/09/21 19:50:41.975028, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn) Sep 21 19:50:41 fs03 smbd[25068]: [2017/09/21 19:50:41.975395, 0] ../source3/lib/util.c:791(smb_panic_s3) Sep 21 19:50:41 fs03 smbd[25068]: [2017/09/21 19:50:41.975415, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn) Sep 21 19:50:41 fs03 smbd[25068]: PANIC (pid 25068): Bad talloc magic value - wrong talloc version used/mixed#012Bad talloc magic value - wrong talloc version used/mixed Sep 21 19:50:41 fs03 smbd[25068]: [2017/09/21 19:50:41.975577, 0] ../source3/lib/util.c:791(smb_panic_s3) Sep 21 19:50:41 fs03 smbd[25068]: PANIC (pid 25068): Bad talloc magic value - wrong talloc version used/mixed Sep 21 19:50:41 fs03 smbd[25068]: Sep 21 19:50:41 fs03 smbd[25068]: [2017/09/21 19:50:41.975974, 0] ../source3/lib/util.c:902(log_stack_trace) Sep 21 19:50:41 fs03 smbd[25068]: BACKTRACE: 8 stack frames: Sep 21 19:50:41 fs03 smbd[25068]: #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7fbb77e336ba] Sep 21 19:50:41 fs03 smbd[25068]: #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7fbb77e33790] Sep 21 19:50:41 fs03 smbd[25068]: #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7fbb79f0e95f] Sep 21 19:50:41 fs03 smbd[25068]: BACKTRACE: 8 stlib64/libtalloc.so.2(_talloc_get_type_abort+0x102) [0x7fbb76c6b702] Sep 21 19:50:41 fs03 smbd[25068]: #4 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3c67) [0x7fbb75857c67] Sep 21 19:50:41 fs03 smbd[25068]: #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7fbb77e336ba] Sep 21 19:50:41 fs03 smbd[25068]: #5 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3341) [0x7fbb75857341] Sep 21 19:50:41 fs03 smbd[25068]: #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7fbb77e33790] Sep 21 19:50:41 fs03 smbd[25068]: #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7fbb77e33790] Sep 21 19:50:41 fs03 smbd[25068]: [2017/09/21 19:50:41.976485, 0] ../source3/lib/dumpcore.c:315(dump_core) Sep 21 19:50:41 fs03 smbd[25068]: #5 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3341) [0x7fbb75857341] Sep 21 19:50:41 fs03 smbd[25068]: #6 /lib64/libpthread.so.0(+0x7e25) [0x7fbb7a36de25] Sep 21 19:50:41 fs03 smbd[25068]: Sep 21 19:50:41 fs03 smbd[25068]: #6 /lib64/libpthread.so.0(+0x7e25) [0x7fbb7a36de25] Sep 21 19:50:41 fs03 smbd[25068]: #7 /lib64/libc.so.6(clone+0x6d) [0x7fbb7657f34d] Sep 21 19:50:41 fs03 smbd[25068]: [2017/09/21 19:50:41.976862, 0] ../source3/lib/dumpcore.c:273(dump_core) Sep 21 19:50:41 fs03 smbd[25068]: dump_core() called recursive Sep 21 19:57:18 fs03 smbd[27177]: [2017/09/21 19:57:18.950112, 0] ../lib/util/fault.c:78(fault_report) Sep 21 19:57:18 fs03 smbd[27177]: [2017/09/21 19:57:18.951433, 0] ../lib/util/fault.c:81(fault_report) Sep 21 19:57:18 fs03 smbd[27177]: =============================================================== Sep 21 19:57:18 fs03 smbd[27177]: [2017/09/21 19:57:18.970608, 0] ../source3/lib/util.c:902(log_stack_trace) Sep 21 19:57:18 fs03 smbd[27177]: BACKTRACE: 12 stack frames: Sep 21 19:57:18 fs03 smbd[27177]: #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7fbb77e336ba] Sep 21 19:57:18 fs03 smbd[27177]: BACKTRACE: 12 stack frames:#012smb2_write failed: fnum 3359156866, file IT/tmp-files/10G (5), length=65536 offset=0 nwritten=-1: NT_STATUS_NETWORK_BUSY Sep 21 19:57:18 fs03 smbd[27177]: Sep 21 19:57:18 fs03 smbd[27177]: [2017/09/21 19:57:18.972518, 0] ../source3/lib/dumpcore.c:315(dump_core) Sep 21 19:57:18 fs03 smbd[27177]: dumping core in /var/log/samba/cores/smbd Sep 21 19:57:18 fs03 smbd[27177]: Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 journal: out of memory [2273] Sep 22 09:27:51 fs03 smbd[2273]: [2017/09/22 09:27:51.248367, 0] ../source3/lib/dumpcore.c:315(dump_core) Sep 22 09:27:51 fs03 smbd[2273]: dumping core in /var/log/samba/cores/smbd Sep 22 09:27:51 fs03 smbd[2273]: Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 journal: out of memory [2275] Sep 22 09:27:52 fs03 smbd[2275]: [2017/09/22 09:27:52.305728, 0] ../source3/lib/dumpcore.c:315(dump_core) Sep 22 09:27:52 fs03 smbd[2275]: dumping core in /var/log/samba/cores/smbd Sep 22 09:27:52 fs03 smbd[2275]: Sep 22 09:27:53 fs03 smbd[2280]: [2017/09/22 09:27:53.036463, 0] ../lib/util/charset/codepoints.c:16630(get_conv_handle) Sep 22 09:27:53 fs03 smbd[2280]: dos charset 'CP850' unavailable - using ASCII Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 journal: out of memory [2280] Sep 22 09:28:12 fs03 smbd[2280]: [2017/09/22 09:28:12.927151, 0] ../source3/lib/dumpcore.c:315(dump_core) Sep 22 09:28:12 fs03 smbd[2280]: dumping core in /var/log/samba/cores/smbd Sep 22 09:28:12 fs03 smbd[2280]:
Here is my smbd info: [root@fs03 ~]# smbd -i smbd version 4.6.2 started. Copyright Andrew Tridgell and the Samba Team 1992-2017 Registered MSG_REQ_POOL_USAGE Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[data]" Processing section "[data2]" Processing section "[data3]" Processing section "[data4]" Processing section "[data5]" Processing section "[data6]" added interface eth0 ip=10.10.xxx.xx bcast=10.10.xxx.255 netmask=255.255.255.0 INFO: Profiling turned OFF from pid 15718 ERROR: smbd is already running. File /run/smbd.pid exists and process id 1623 is running. [root@fs03 ~]#
Here is my samba log file: [2017/09/22 11:05:34.330357, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn) Bad talloc magic value - wrong talloc version used/mixed [2017/09/22 11:05:34.330438, 0] ../source3/lib/util.c:791(smb_panic_s3) PANIC (pid 23023): Bad talloc magic value - wrong talloc version used/mixed [2017/09/22 11:05:34.330758, 0] ../source3/lib/util.c:902(log_stack_trace) BACKTRACE: 8 stack frames: #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7fd1088416ba] #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7fd108841790] #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7fd10a91c95f] #3 /lib64/libtalloc.so.2(_talloc_get_type_abort+0x102) [0x7fd107679702] #4 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3c67) [0x7fd106265c67] #5 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3341) [0x7fd106265341] #6 /lib64/libpthread.so.0(+0x7e25) [0x7fd10ad7be25] #7 /lib64/libc.so.6(clone+0x6d) [0x7fd106f8d34d] [2017/09/22 11:05:34.330915, 0] ../source3/lib/dumpcore.c:315(dump_core) dumping core in /var/log/samba/cores/smbd [2017/09/22 11:05:44.061157, 0] ../source3/lib/popt_common.c:67(popt_s3_talloc_log_fn) Bad talloc magic value - wrong talloc version used/mixed [2017/09/22 11:05:44.061224, 0] ../source3/lib/util.c:791(smb_panic_s3) PANIC (pid 23229): Bad talloc magic value - wrong talloc version used/mixed [2017/09/22 11:05:44.061545, 0] ../source3/lib/util.c:902(log_stack_trace) BACKTRACE: 8 stack frames: #0 /lib64/libsmbconf.so.0(log_stack_trace+0x1a) [0x7fd1088416ba] #1 /lib64/libsmbconf.so.0(smb_panic_s3+0x20) [0x7fd108841790] #2 /lib64/libsamba-util.so.0(smb_panic+0x2f) [0x7fd10a91c95f] #3 /lib64/libtalloc.so.2(_talloc_get_type_abort+0x102) [0x7fd107679702] #4 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3c67) [0x7fd106265c67] #5 /usr/lib64/samba/libmessages-dgm-samba4.so(+0x3341) [0x7fd106265341] #6 /lib64/libpthread.so.0(+0x7e25) [0x7fd10ad7be25] #7 /lib64/libc.so.6(clone+0x6d) [0x7fd106f8d34d] [2017/09/22 11:05:44.061655, 0] ../source3/lib/dumpcore.c:315(dump_core) dumping core in /var/log/samba/cores/smbd
 |
| Install subversion client version 1.8 for ubuntu 16.04 Posted: 20 Mar 2021 04:00 PM PDT I need to install subversion client with version something like 1.8. But I need it for ubuntu 16.04. In current repos version is obviously higher. I tried to to find some sources or repos with needed version but I can't found abything useful except for few someonse private repos. Where can I find and install svn 1.8 client for ubuntu?  |
| Apache client denied by server configuration and wrong log Posted: 20 Mar 2021 06:06 PM PDT I'm trying to configure a new virtual host with apache 2.4.16 Premise: I already have other virtual hosts and they work fine, so what I've done is simply duplicate the vhost and change paths and names. The scenario is this one. I created a new vhost that contains this: <VirtualHost *:80> DocumentRoot "/Users/me/Sites/mynewsite/web" ServerName mynewsite.lo <Directory "/Users/me/Sites/mynewsite/web"> Require all granted Options FollowSymLinks </Directory> ErrorLog /var/log/apache2/mynewsite.localhost-error.log CustomLog /var/log/apache2/mynewsite.localhost-access.log combine
At this point I tried to load the page mynewsite.lo/robots.txt ant I get this error Forbidden You don't have permission to access /robots.txt on this server.
Now, I tried to solve the issue looking at the access_log, error_log but nothing was written there. So by ls -latr command I discovered that another logfile was changed, the myoldsite.localhost-error.log Looking in that file I found [Wed Oct 21 16:16:32.979200 2015] [authz_core:error] [pid 283] [client 127.0.0.1:56427] AH01630: client denied by server configuration: /Users/me/Sites/myoldsite [Wed Oct 21 16:16:33.206456 2015] [authz_core:error] [pid 283] [client 127.0.0.1:56427] AH01630: client denied by server configuration: /Users/me/Sites/myoldsite, referer: http://mynewsite.lo/robots.txt [Wed Oct 21 16:16:33.277496 2015] [authz_core:error] [pid 283] [client 127.0.0.1:56427] AH01630: client denied by server configuration: /Users/me/Sites/myoldsite, referer: http://mynewsite.lo/robots.txt
Now I don't know what's happening. The logs are written to the wrong file and when I try to reach mynewsite.lo I get the forbidden error message. What am I doing wrong?  |
| Windows Server 2008R2 IIS Appcrash Posted: 20 Mar 2021 03:06 PM PDT We have a web application hosted on several servers of our customers. Recently on only one of them, apppool is recycled about every 15 minutes. I've checked the event viewer and there is no "Warning" level log that contains some help on any occasional exceptions. I found only some "Information" level logs with source "Windows Error Reporting" which contains contents like this: Fault bucket , type 0 Event Name: CLR20r3 Response: Not available Cab Id: 0 Problem signature: P1: w3wp.exe P2: 7.5.7601.17514 P3: 4ce7a5f8 P4: mscorlib P5: 4.0.30319.17929 P6: 4ffa561c P7: 1098 P8: 0 P9: System.StackOverflowException P10: Attached files: These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_a7ffe533c17adc1b839d5aa19f1af2e61b1d2_0704a515 Analysis symbol: Rechecking for solution: 0 Report Id: 7fc73fce-5389-11e5-9721-7824af3d6615 Report Status: 4
and this: Fault bucket 3263327202, type 1 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: w3wp.exe P2: 7.5.7601.17514 P3: 4ce7a5f8 P4: clr.dll P5: 4.0.30319.17929 P6: 4ffa5753 P7: c00000fd P8: 000010b9 P9: P10: Attached files: C:\Windows\Temp\WERC4A6.tmp.appcompat.txt C:\Windows\Temp\WERC523.tmp.WERInternalMetadata.xml C:\Windows\Temp\WERC524.tmp.hdmp C:\Windows\Temp\WERED7D.tmp.mdmp These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_w3wp.exe_868a5e613d491401176645f115078f3faa98e9_03a912c5 Analysis symbol: Rechecking for solution: 0 Report Id: 4c379387-5388-11e5-9721-7824af3d6615 Report Status: 0
and also some "Error" level log with source "Application Error" with this content: Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7a5f8 Faulting module name: clr.dll, version: 4.0.30319.17929, time stamp: 0x4ffa5753 Exception code: 0xc00000fd Fault offset: 0x00019fe9 Faulting process id: 0xcac Faulting application start time: 0x01d0e79515891375 Faulting application path: C:\Windows\SysWOW64\inetsrv\w3wp.exe Faulting module path: C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll Report Id: dc73f522-5388-11e5-9721-7824af3d6615
I've tried to read the files at C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_w3wp.exe....., but have no success in understanding the problem. How may I found the cause of this errors?  |
| How do I find IIS web application dependencies using powershell and webadministration on Server 2012 Posted: 20 Mar 2021 05:04 PM PDT Wondering if someone can help with this. I have a number of servers that host IIS 7.5 and IIS 8.5 web application of various types. As these are production web applications and servers i can't install any software on the server so i must find a way to remotely interrogate the server to retrieve the windows feature dependencies per web application. I am aware already the i can use msdeploy to get the dependencies but that means i need to install the msdeploy software on the server which i cant do. Also i am aware that i can use the Get-OSFeature to remotely retrieve the Windows features that are installed on a particular server. This also is not useful as i need to connect to the web application to get the dependencies of the application. So can this be done using powershell and Get-WebConfiguration and if so can someone show me as i have so far only been able to get the installed features using this method also eg. Get-WebConfiguration system.webServer/* 'IIS:\sites' -Recurse
Thanks  |
| Access Denied DHCP Tool Posted: 20 Mar 2021 05:04 PM PDT I cannot figure out why this is happening, when opening the DHCP tool on my server, I get the following message. Access Is Denied
You do not have access to this DHCP server. To view information on a DHCP server, you must be logged in as an Administrator, DHCP Administrator, or DHCP User.
If you still cannot access the server, to retry the connection, either press F5 or on the Action menu, click Refresh. 
I've verified that I'm both a Domain Admin and a member of the DHCP Administrars group, and it does this regardless of what account is used to login. This works fine if I log into a different DHCP server on our network. It's only this server that it does not work on. Some other relevant details: - Windows Server 2003 R2 Standard Edition
- Server Roles
- File Server
- Application Server (IIS)
- Domain Controller (Active Directory)
- DNS Server
- DHCP Server
- Additional Software
- Symantec Endpoint Protection (v12.1.1000.157 RU1)
- Altiris (v7.1)
 |
| HAproxy 503 Service Unavailable No server is available to handle this request Posted: 20 Mar 2021 05:58 PM PDT I'm new to this load balancing scenario and I'm being tasked to figure out how to make this load balancing works. My environment: Centos 6.4 64 Bit Webserver: Lighttpd All running in ESXI virtual IP: 192.168.1.6 LB1: 192.168.1.4 LB2: 192.168.1.5 Webserver 1: 192.168.1.12 Webserver 2: 192.168.1.13 Gateway: 192.168.1.1
Trying to run a test in the lab prior production with HAproxy and keepalived. Here is what I have on my keepalived setting: ! Configuration File for keepalived global_defs { notification_email { myemail@gmail.com } notification_email_from keepalived@domain.local smtp_server 192.168.1.4 smtp_connect_timeout 30 router_id 192.168.1.1 } vrrp_script chk_haproxy { script "killall -0 haproxy" interval 1 # check every second weight 2 # add 2 points of prio if OK } vrrp_instance VI_1 { state MASTER interface eth0 virtual_router_id 51 priority 101 #priority 101 for master advert_int 1 authentication { auth_type PASS auth_pass 1111 } virtual_ipaddress { 192.168.1.6 } track_script { chk_haproxy } }
and here is my setting for HAproxy #--------------------------------------------------------------------- # Example configuration for a possible web application. See the # full configuration options online. # # http://haproxy.1wt.eu/download/1.4/doc/configuration.txt # #--------------------------------------------------------------------- #--------------------------------------------------------------------- # Global settings #--------------------------------------------------------------------- global # to have these messages end up in /var/log/haproxy.log you will # need to: # # 1) configure syslog to accept network log events. This is done # by adding the '-r' option to the SYSLOGD_OPTIONS in # /etc/sysconfig/syslog # # 2) configure local2 events to go to the /var/log/haproxy.log # file. A line like the following can be added to # /etc/sysconfig/syslog # # local2.* /var/log/haproxy.log # log 127.0.0.1 local2 chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 4000 user haproxy group haproxy daemon # turn on stats unix socket stats socket /var/lib/haproxy/stats #--------------------------------------------------------------------- # common defaults that all the 'listen' and 'backend' sections will # use if not designated in their block #--------------------------------------------------------------------- defaults mode http log global option httplog option dontlognull option http-server-close option forwardfor except 127.0.0.0/8 option redispatch retries 3 timeout http-request 10s timeout queue 1m timeout connect 10s timeout client 1m timeout server 1m timeout http-keep-alive 10s timeout check 10s maxconn 3000 #--------------------------------------------------------------------- # main frontend which proxys to the backends #--------------------------------------------------------------------- frontend main *:80 # acl url_static path_beg -i /static /images /javascript /stylesheets # acl url_static path_end -i .jpg .gif .png .css .js # use_backend static if url_static # default_backend view #--------------------------------------------------------------------- # static backend for serving up images, stylesheets and such #--------------------------------------------------------------------- #backend static # balance roundrobin # server static 127.0.0.1:4331 check #--------------------------------------------------------------------- # round robin balancing between the various backends #--------------------------------------------------------------------- backend app mode tcp balance roundrobin server server1 192.168.1.12:80 check inter 2000 rise 2 fall 5 server server2 192.168.1.13:80 check inter 2000 rise 2 fall 5
When I started the HAproxy, I got thiss error and I'm not quite sure where to start looking to fix it. Perhaps someone who has done this many times can help me shed some light? 503 Service Unavailable No server is available to handle this request.
However manually connecting to the webserver1 and webserver2 works just fine. All I want is just a simple load balancing for the webserver that sit behind the HAproxy. Any advise or suggestion is absolutely appreciated. Please help? Many thanks.  |
| iptables and NAT/port forwarding not working after server reboot Posted: 20 Mar 2021 04:00 PM PDT I'm new to NAT and iptables, I have my physical server running CentOS 6 with KVM installed, 2 more linux box is started as VM - VM2 and VM3, and their ip is 192.168.122.2 and 192.168.122.3 accordingly. Since I have one real IP only, NAT is used for port forwarding external request to VM's application, e.g. port 30022 to VM3's ssh (port 22). After setup everything work fine, its running for a month already, but then after I done a RAM upgrade and server reboot, NAT/port forward is not working again. More information: - Iptables running at host OS but NOT at guest OSs.
- Host OS iptables has configure NAT as follow:
target prot opt source destination DNAT tcp -- anywhere anywhere tcp dpt:30022 to:192.168.122.3:22 DNAT tcp -- anywhere anywhere tcp dpt:20022 to:192.168.122.2:22(22) - Result of command iptables -t nat -L -v -n:
pkts bytes target prot opt in out source destination 6 304 LOG tcp -- br0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:30022 LOG flags 0 level 4 prefix ROUTE APP3 6 304 DNAT tcp -- br0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:30022 to:192.168.122.3:22 3 152 DNAT tcp -- br0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:20022 to:192.168.122.2:22 - That means package is handled by the NAT rule while I try to telnet 30022 from my local PC (separate network)
Have been struggled for few days..any help?  |
| Edimax Dual WAN: how to sent trafic to a specific destination IP over a specific WAN interface? Posted: 20 Mar 2021 09:08 PM PDT I have a Edimax BR-6624 Dual WAN router in my office. I've enabled load balancing to utilize both internet lines. I want the router to use only one (specific) WAN interface when I connect to a specific IP. The reason is that the connection with the destination IP is much better through one of the two WANs. I dont know how to do this. Is it possible to do this with this kind of router?  |
No comments:
Post a Comment