Quantcast
Channel: linuxadmin: Expanding Linux SysAdmin knowledge
Viewing all 17912 articles
Browse latest View live

Deleting log files

$
0
0

As a linux admin (redhat 6, ubuntu 11), suppose some of the active(opened) logs were deleted (unintentionally or maliciously) in /var/log.
1) What are the implications/results of this? (could disk read/write speed come to a crawl? would swap space be affected?)

2) Would deleted active logs still increase in space (if written to), and unintentionally take more space than indicated? Would "df"/"du" show the space taken up?

3) How would I determine which active logs were deleted?

4) How would I eventually get all this fixed?

Thanks.

submitted by /u/rungker
[link] [comments]

Red Hat Screwed Me The Hell Over (Pure Incompetence)

$
0
0

Months of training, $400, took a day out of work, 2 hours of waiting, and more than an hour just to get to the damn exam center, and Red Hat can't even get their exams to work.

Never been more angry and disappointed, I mean how the hell are you gonna say you provide premier Enterprise support when you can't even successfully provide an exam?

Pure BS

submitted by /u/valleygold
[link] [comments]

Samba4 issue regarding tls and ldaps

$
0
0

Hello Everyone, I'm currently setting up a samba4 server acting as an AD domain controller and have encountered an issue when trying to connect it to other servers.

Fair warning : I am a simple intern working on a small project, my problem might seem trivial to some of you. More than that, I’m not a native English speaker, so expect a grammar mistake here or there.

I installed Samba version 4.7.1 via a tar.gz, created new ca.pem, cert.pem and key.pem, and put TLS_REQCERT to ‘allow’ so as to at least see if an ldapsearch from another server could contact the samba4. Also, the domain is auth.tripase.local. Here are the lines I use to test it and their results :

ldapsearch -H ldaps://192.168.233.30/ -b dc=auth,dc=tripase,dc=local –x 

ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

ldapsearch -H ldap://192.168.233.30/ -b dc=auth,dc=tripase,dc=local –x –ZZ 

ldap_start_tls: Connect error (-11) additional info: (unknown error code)

Meanwhile :

ldapsearch -H ldap://192.168.233.30/ -b dc=auth,dc=tripase,dc=local –x 

extended LDIF

LDAPv3 base <dc=auth,dc=tripase,dc=local> with scope subtree filter: (objectclass=*) requesting: ALL

search result search: 2 result: 1 Operations error text: 00002020: Operation unavailable without authentication

numResponses: 1

My question is, where did I fuck up ?

Thank you in advance for your time.

submitted by /u/ASSRaCo
[link] [comments]

[saltstack] node classification question.

$
0
0

I have the following top.sls

I have two saltenv call centos and debian

My top.sls looks like the following.

{% if grains['os_family'] == 'RedHat' %} centos: '*': - test1 - test2 {% endif %} {% if grains['os_family'] == 'Debian' %} debian: '*': - test1 - test2 {% endif %} 

As you can see I am hardcoding the environment via an if loop. How can I make a case or if where I can determine the saltenv on the get go like the following?

{% if grains['os_family'] == 'RedHat' %} saltenv = centos {% elif grains['os_family'] == 'Debian' %} saltenv = debian {% endif %} {{ saltenv }}: '*': - test1 - test2 

or better yet.

 saltenv = {% grains['os'] %}.lowercase {{ saltenv }}: '*': - test1 - test2 
submitted by /u/juniorsysadmin1
[link] [comments]

Centos7 Connectivity

$
0
0

Hello all. I feel frustrated. I'm working on a lab. I have two Centos7 VMs on oracle virtualbox. Running in GNS3 One is client.cll and the other is samba.cll. I tried pinging each other and its timing out. Both have static IPs. samba.cll is 192.168.10.1 and client.dll is 192.168.10.2. I tried systemctl restart network.services on both, edit both with nmtui and checked start on boot. I can't seen to ping anything. Pinging localhost is pretty darn good. The Nic is configured properly(Not attached) in OracleVritualbox. I even tried setenforce 0 && systemctl stop firewalld. They are both connected to a hub in gns3. Any opinions?

submitted by /u/tynar08
[link] [comments]

UDP is *killing* me...

$
0
0

OK, I'm currently reduced to hoping like hell that someone will point out something brutally obvious that I've overlooked & ask "Did you check ____?"

Overall goal: Enable monitoring of multiple servers using collectd. These servers are all VMs in two different hosting environments (env. A & env. D). There is one monitoring server running CentOS 6.x (in env. D), it is listening on UDP port 25826, the listening process is influxdb (which collects/aggregates the data) which will then -if I ever figure this crap out!- will use Grafana for visualization.

My initial task was to get data from two Windows servers (in env. A) to send their monitoring data (in collectd format) from their location in hosting environment A to the monitoring server in hosting environment D. I was initially trying to use the 'collectm' package, but more recently I have been working with SSC-Serv. When the data failed to appear on the Monitor server, I've used a Windows port of the 'netcat' utility to try to manually generate traffic over UDP 25826 - those attempts seemed to just hang without ever returning a result. I requested help from hosting env. A's support team, the packet captures we've gotten have shown the following (forgive me, but I have to go from memory here):

Windows -> Monitoring server: SYN Windows <- Monitoring server: SYN/ACK Windows -> Monitoring server: ACK *??? need to confirm this one* Windows <- Monitoring server: ACK/RST 

I ran a packet capture overnight on one of the Windows servers, it showed that (as expected) the server was generating packets every five minutes addressed to the correct IP & UDP port number. A subsequent packet capture from env. A's support team appeared to show that no traffic to that IP/port was being seen from either of the Windows servers. ???

Hosting env. A also has a CentOS 6.x server, I have used the native netcat package to try to make a connection (from env. A over the internet to env. D) using the following command:

nc -uz <dest. IP> 25826 

This command returns a 'successful' result 100% of the time - but I have reason to be a bit skeptical of this, as I will show in a moment.

Given the apparent success of the netcat command, I was really baffled as to why the monitoring data wasn't appearing on the Monitor server - so I've run several packet captures on the Monitor server. The first packet captures used a capture filter that only grabbed packets addressed to that UDP destination port, when several minutes of capturing returned zero packets, I then tried a very basic capture filter that grabbed everything, then fed that to the grep command to look for the external/routable IP addresses used by env. A:

tshark -r <capture file> | egrep '<first 3 octets of env. A's public addresses>' 

Zero results returned from 600+ packets captured in each of two capture files - one of which I was logged onto the CentOS server in env. A, using netcat to generate those "successful" results, 12 or 15 times... (And yes, I know how to escape the '.' characters for an IP address in a regex.) ;)

OK, so env. A to env. G isn't working, so how 'bout a different Linux server in env. G to the Monitor server in env. G?? SAME results - netcat at the command line appears to show successful result, but nothing is seen on the Monitor server. I also tried to transfer a file using netcat from the "different Linux server in env. G" to the Monitor server using the following commands:

On the Monitor server: nc -l -u 25826 > filename.out (yes, I stopped influxdb before-hand to free up that port)

On the "different Linux server": nc -u <dest. IP> 25826 < filename (where 'filename' was a file in the local directory)

This was unsuccessful, as the process on both servers seemed to remain open indefinitely. I opened a 2nd terminal window on the Monitor server, ran an 'ls -l' every few seconds, & saw the 'filename.out' file grow steadily until I hit C. When I tried to 'cat' the file, it showed only binary data, & when I tried to grep strings from the original files on the "different Linux server," those strings were never returned (I realize that they could've been written in a different format, but I don't know how to check for that).

At this point, I logged in to env. A's management portal & checked for firewalls, but when I saw the prompt to 'Create a firewall for this host,' I figured that hadn't been set up yet.

I haven't tried to make a connection to UDP port 25826 via localhost/from the Monitor server itself, I'm not sure if that would prove anything. I have added a "quick & dirty" iptables rule to allow any traffic over UDP 25826 into the Monitor server (just as a test to see whether or not the OS/host firewall was blocking/dropping the traffic), but that made no difference, & I deleted that rule immediately afterwards.

I honestly don't know where to go from here. Someone PLEASE GOD tell me I've overlooked something stupid!!

Thanks in advance.

submitted by /u/Dienekes_shade
[link] [comments]

CentOS7 Spacewalk install fail

$
0
0

Hi all,

relatively knew to linux outside some basics and wanted to install a spacewalk server but getting some issues.

Following guide from: https://github.com/spacewalkproject/spacewalk/wiki/HowToInstall

I've run the following commands:

rpm -Uvh http://yum.spacewalkproject.org/2.7/RHEL/7/x86_64/spacewalk-repo-2.7-2.el7.noarch.rpm rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm (cd /etc/yum.repos.d && curl -O https://copr.fedorainfracloud.org/coprs/g/spacewalkproject/java-packages/repo/epel-7/group_spacewalkproject-java-packages-epel-7.repo) yum -y install spacewalk-setup-postgresql firewalld use firewall-cmd --add-service=http ; firewall-cmd --add-service=https ; firewalld --reload spacewalk-setup 

I get the following output:

Setting up SELinux.. Choose your database backend (oracle, postgresql)? postgresql ** Database: Setting up database connection for PostgreSQL backend. Database "rhnschema" does not exist ** Database: Installing the database: ** Database: This is a long process that is logged in: ** Database: /var/log/rhn/install_db.log *** Progress: ### Could not install database. 

When i check the logs i see:

Note: Forwarding request to 'systemctl enable postgresql.service'. /usr/bin/spacewalk-setup-postgresql: line 165: [: 018446744073692774399: integer expression expected Redirecting to /bin/systemctl stop postgresql.service Redirecting to /bin/systemctl start postgresql.service createdb: database creation failed: ERROR: new encoding (UTF8) is incompatible with the encoding of the template database (SQL_ASCII) HINT: Use the same encoding as in the template database, or use template0 as template. 

Given it should create this all for me by default, do i need to be changing my encoding settings for the centos box or am i missing something with the install?

Thanks :)

submitted by /u/icedcougar
[link] [comments]

OpenVPN behind Firewall

$
0
0

Currently I have an OpenVPN client (Fedora 27) running in a LAN. While everything connects, and traffic seems to flow, nothing actually works. I can run an MTR to google.com, but I have up to 90% packet loss at the VPN server (everything else is 0%). The tun0 adapter has a 10.x.x.x IP (the subnet the VPN should use for it's clients). When I check the openVPN log though

MULTI: bad source address from client [172.16.0.160], packet dropped

Hey, that's my machine's LAN IP! I've done some googling and the best I can tell, this has to do with routes, but I'm not entirely sure which routes, and how to correct them. If the packets are going /to/ the openVPN server across the tun0 interface, why is my LAN IP seen outside of my LAN?

edits: behind NAT, not firewall

My machine's only physical interface is eth0, which has a LAN IP of 172.16.0.160
I see tun0 with an IP of 10.8.0.10
When the VPN is connected, I can route to the VPN's "LAN" IP of 10.8.0.1, and mtr says traffic is going past that to google.com

I enabled the fix per u/rfelsburg but this doesn't seem to have worked.

submitted by /u/__deerlord__
[link] [comments]

RHEL 7.4 Kickstart File for use with Cobbler

$
0
0

I just set up Cobbler running on CentOS in order to install RHEL 7.4 onto some headless servers via PXE. I used RHEL's Kickstart file generator, which produced the following:

lang en_US keyboard us timezone America/Los_Angeles --isUtc rootpw XXXXXXXXXXXXXXXX --iscrypted #platform x86, AMD64, or Intel EM64T reboot url --url=https://X.X.X.X/cblr/ks_mirror/RHEL7.4-x86_64 bootloader --location=mbr --append="rhgb quiet crashkernel=auto" zerombr clearpart --all --initlabel autopart auth --passalgo=sha512 --useshadow selinux --enforcing firewall --enabled --ssh skipx firstboot --disable %packages @base %end 

When I PXE boot the VM though, it generates the following error:

dracut-initqueue[629]: Warning: Downloading 'https://X.X.X.X/cblr/ks_mirror/RHEL7.4-x86_64/LiveOS/squashfs.img' failed!

If I go to that URL in a browser it works fine. The target machine drops to a recovery console and the network is working fine. Could this be a problem with my Kickstart file or should I look at something else?

ETA:

I was able to get this working by changing the Kickstart entry from this:

url --url=https://X.X.X.X/cblr/ks_mirror/RHEL7.4-x86_64 

to this:

url --url=https://X.X.X.X/cblr/ks_mirror/RHEL7.4-x86_64 --noverifyssl 

Thanks for all your suggestions. :)

submitted by /u/tiff_seattle
[link] [comments]

How do Subversion and/or TortoiseSVN cache passwords? We're using OTP 2FA, but a single authentication seems to work for all checkouts/commits so far. What is doing the authentication after the first username/password entry, and how long does that "trust" last?

$
0
0

I've tried looking for this specific info so far to no avail.

We have an SVN server that is joined to a windows domain, and SVN authenticates users back through ldap.

So, user enters username and password+otp. Authenticates, does a checkout. And so far everything after that just "works". But I'm wary of trusting that process only to deploy it and find out I missed some rule that now is requiring everyone to hit their usb keys for every single operation on svn.

Does anyone have the info on how this "works"?

submitted by /u/Sysa_Dmin
[link] [comments]

DAE always restart after yum upgrades?

$
0
0

We manage most everything that is persistent through some type of configuration management, so often times most of our base software gets upgraded but some dependencies don't get upgraded. To fix this we just run yum upgrade monthly. Coincidentally this occurs right before we have to run vuln scans and pen testing.

I've found that sometimes this doesn't do it, I'll get warnings about daemons still running old software even though newer software is installed. I can always just restart the specific services but now I've grown to always do a full system restart after any type of mass upgrade. If I'm just upgrading a single service I won't do it, but otherwise I just find it easier.

I also like that this will allow problems to come up faster. I've had a few critical systems blow up on me because they were upgraded via yum and something didn't work right. Nobody found out until that system was rebooted months/years later. When I restart after every upgrade I also validate everything is working properly and will restore properly in the event of a power outage or other failure.

So, does anyone else do this?

Please don't tell me this is some best practice that I ignored for years...

submitted by /u/kaydub88
[link] [comments]

Store shared passwords?

$
0
0

I've been using keepass for storing passwords for years, but now my company is growing, I need a way to safely store and share passwords with a team of engineers.

So, what would be good solutions to that? We already have NextCloud, but it does not have that capability AFAIK, our users are all stored in FreeIPA (LDAP).

Thanks for your suggestions.

submitted by /u/gvs77
[link] [comments]

Centos7 and RHEL 7 important systemd bug

repository distributed through apache

$
0
0

How to create local repository distributed through apache of Red Hat Enterprise Linux 7 using DVD iso for update or installation?

How do I configure a yum local repository distributed through apache to share the contents of a DVD ISO via HTTP on Red Hat Enterprise Linux? What are the steps required to use the Network Installation method for Red Hat Enterprise Linux using http source?

submitted by /u/umairjk
[link] [comments]

Networking: vlan inaccessible after vpn client comes up

$
0
0

I have a situation where this host (proxy01, 192.168.20.62) becomes inaccessible (from desktop01, 192.168.1.10) after I bring up a vpn client (establish tun0). I've copy/pasted a before and after scenario below. My networking knowledge is generally good, but I'm weak with routing --and I believe that's where the issue is here.

What's really important to mention is that configuration works fine with a host that IS NOT in a different network, or separate VLAN (or rather, lives in PVID 1). For example, I can communicate fine between 192.168.1.20 and 192.168.1.10 with or without the VPN up/down.

enp0s3 is a vagrant management interface. I'm 99% certain this is entirely relevant.

There are iptables in place here, but they make no difference up/down on/off. I've included that far below. All they do is drop inbound on tun0.

I'm pretty certain this is not a VLAN issue, but probably a routing issue. I think the answer is in the 'AFTER' routing table below, I just don't know how to trace it / test.

In addition to the pings I've used a netcat test 'nc -l 1234' before and after. Reflects same results. Packets can't get back.

I've modified some octets below to protect the innocent. No insects were harmed while constructing this test.

BEFORE: enp0s3: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.0.2.15 netmask 255.255.255.0 broadcast 10.0.2.255 inet6 fe80::a00:27ff:fe82:deb prefixlen 64 scopeid 0x20<link> ether 08:00:27:82:0d:eb txqueuelen 1000 (Ethernet) RX packets 48913 bytes 35352375 (33.7 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 24347 bytes 2712562 (2.5 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 enp0s8: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::a00:27ff:feb7:10fd prefixlen 64 scopeid 0x20<link> ether 08:00:27:b7:10:fd txqueuelen 1000 (Ethernet) RX packets 41593 bytes 29848105 (28.4 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 22019 bytes 9734282 (9.2 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 enp0s8.20: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.20.62 netmask 255.255.255.0 broadcast 192.168.20.255 inet6 fe80::a00:27ff:feb7:10fd prefixlen 64 scopeid 0x20<link> ether 08:00:27:b7:10:fd txqueuelen 1000 (Ethernet) RX packets 27403 bytes 28425883 (27.1 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 19672 bytes 6716095 (6.4 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 1 (Local Loopback) RX packets 9 bytes 792 (792.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 9 bytes 792 (792.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 AFTER: enp0s3: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.0.2.15 netmask 255.255.255.0 broadcast 10.0.2.255 inet6 fe80::a00:27ff:fe82:deb prefixlen 64 scopeid 0x20<link> ether 08:00:27:82:0d:eb txqueuelen 1000 (Ethernet) RX packets 49696 bytes 35410779 (33.7 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 24794 bytes 2755232 (2.6 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 enp0s8: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet6 fe80::a00:27ff:feb7:10fd prefixlen 64 scopeid 0x20<link> ether 08:00:27:b7:10:fd txqueuelen 1000 (Ethernet) RX packets 50636 bytes 32447956 (30.9 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 28876 bytes 13075393 (12.4 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 enp0s8.20: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.20.62 netmask 255.255.255.0 broadcast 192.168.20.255 inet6 fe80::a00:27ff:feb7:10fd prefixlen 64 scopeid 0x20<link> ether 08:00:27:b7:10:fd txqueuelen 1000 (Ethernet) RX packets 34869 bytes 30811417 (29.3 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 25732 bytes 9003231 (8.5 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 1 (Local Loopback) RX packets 9 bytes 792 (792.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 9 bytes 792 (792.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500 inet 666.666.191.186 netmask 255.255.255.128 destination 666.666.191.186 inet6 fe80::8180:698:63f4:5537 prefixlen 64 scopeid 0x20<link> unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC) RX packets 12 bytes 1163 (1.1 KiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 109 bytes 26850 (26.2 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 BEFORE: proxy01:/root>netstat -nr Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 0.0.0.0 192.168.20.1 0.0.0.0 UG 0 0 0 enp0s8.20 10.0.2.0 0.0.0.0 255.255.255.0 U 0 0 0 enp0s3 192.168.20.0 0.0.0.0 255.255.255.0 U 0 0 0 enp0s8.20 AFTER: proxy01:/root>netstat -nr Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 0.0.0.0 666.666.191.129 128.0.0.0 UG 0 0 0 tun0 0.0.0.0 192.168.20.1 0.0.0.0 UG 0 0 0 enp0s8.20 10.0.2.0 0.0.0.0 255.255.255.0 U 0 0 0 enp0s3 128.0.0.0 666.666.191.129 128.0.0.0 UG 0 0 0 tun0 666.666.191.128 0.0.0.0 255.255.255.128 U 0 0 0 tun0 192.168.20.0 0.0.0.0 255.255.255.0 U 0 0 0 enp0s8.20 23.23.113.36 192.168.20.1 255.255.255.255 UGH 0 0 0 enp0s8.20 --- BEFORE: proxy01:/root>tcpdump -ni enp0s8 -e icmp tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on enp0s8, link-type EN10MB (Ethernet), capture size 262144 bytes 10:05:00.332772 f0:9f:c2:df:16:01 > 08:00:27:b7:10:fd, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.1.10 > 192.168.20.62: ICMP echo request, id 42734, seq 0, length 64 10:05:00.332878 08:00:27:b7:10:fd > f0:9f:c2:df:16:01, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.20.62 > 192.168.1.10: ICMP echo reply, id 42734, seq 0, length 64 10:05:01.342130 f0:9f:c2:df:16:01 > 08:00:27:b7:10:fd, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.1.10 > 192.168.20.62: ICMP echo request, id 42734, seq 1, length 64 10:05:01.342208 08:00:27:b7:10:fd > f0:9f:c2:df:16:01, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.20.62 > 192.168.1.10: ICMP echo reply, id 42734, seq 1, length 64 10:05:02.369852 f0:9f:c2:df:16:01 > 08:00:27:b7:10:fd, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.1.10 > 192.168.20.62: ICMP echo request, id 42734, seq 2, length 64 10:05:02.370100 08:00:27:b7:10:fd > f0:9f:c2:df:16:01, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.20.62 > 192.168.1.10: ICMP echo reply, id 42734, seq 2, length 64 10:05:03.357284 f0:9f:c2:df:16:01 > 08:00:27:b7:10:fd, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.1.10 > 192.168.20.62: ICMP echo request, id 42734, seq 3, length 64 10:05:03.357376 08:00:27:b7:10:fd > f0:9f:c2:df:16:01, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.20.62 > 192.168.1.10: ICMP echo reply, id 42734, seq 3, length 64 AFTER: proxy01:/root>tcpdump -ni enp0s8 -e icmp tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on enp0s8, link-type EN10MB (Ethernet), capture size 262144 bytes 10:05:49.826037 f0:9f:c2:df:16:01 > 08:00:27:b7:10:fd, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.1.10 > 192.168.20.62: ICMP echo request, id 47854, seq 0, length 64 10:05:50.857622 f0:9f:c2:df:16:01 > 08:00:27:b7:10:fd, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.1.10 > 192.168.20.62: ICMP echo request, id 47854, seq 1, length 64 10:05:51.887233 f0:9f:c2:df:16:01 > 08:00:27:b7:10:fd, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.1.10 > 192.168.20.62: ICMP echo request, id 47854, seq 2, length 64 10:05:52.915618 f0:9f:c2:df:16:01 > 08:00:27:b7:10:fd, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.1.10 > 192.168.20.62: ICMP echo request, id 47854, seq 3, length 64 10:05:53.939994 f0:9f:c2:df:16:01 > 08:00:27:b7:10:fd, ethertype 802.1Q (0x8100), length 102: vlan 20, p 0, ethertype IPv4, 192.168.1.10 > 192.168.20.62: ICMP echo request, id 47854, seq 4, length 64 proxy01:/root>iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED LOG all -- anywhere anywhere limit: avg 5/min burst 5 LOG level notice prefix "iptables denied: " DROP all -- anywhere anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination 
submitted by /u/CarolynMartyr
[link] [comments]

No boot found at startup

$
0
0

I somehow cannot boot my OS on my desktop. I am running Ubuntu-gnome. I know how I caused this. I was testing out Linux mint 18.3 on a USB drive from Boot to test it out. I did mount my hard drive just being curious and was browsing my file system. It is encrypted if that means anything. I did not unmount it before shutting down. Now when I boot my desktop normally it cannot find an OS to boot. Right now I am backing up all my import data in case I need to reinstall the OS. I changed the boot order at the BIOS back to hard drive.

"Error: No boot disk has been detected or the disk has failed"

I have performed a fsck on the desk and the results have come back cleaned.

submitted by /u/DreamlessMojo
[link] [comments]

Nginx proxy pass buildbot missing static files

$
0
0

Buildbot webui works without proxy. But behind nginx the console view does not display. When loading the webpage I can see that some js scripts are not loaded.

I installed buildbot as buildbot user via pip install --user buildbot[bundle]

I can see the missing static files in the site packages of the user.

Does someone have any clue?

submitted by /u/Jeettek
[link] [comments]

Late To The Systemd Party / Confusion About NTP

$
0
0

We just retired our final initd cluster of RHEL 5 for new Debian 8 boxes which all utilize systemd vs initd. We've notice a slight bit of time drift and wasn't sure if systemd was not handling time sync or if we should still install the ntp package on top and configure that. Would like to avoid installing redundant applications on the servers if the time is able to be managed via systemd / kernel.

Thanks for any help / clarification.

submitted by /u/cachedrive
[link] [comments]

Trying to forward through ssh an app that directly runs from the notification area

$
0
0

Sorry if the title is not clear: I have a remote linux machine that has a certain app that once you run it, it goes straight to the notification area, and from there, you right click on it and choose the desired option.

The app is urbackupclient

If i ssh -X to the machine and run "urbackupclient &", i get a message:

"Xlib: extension "RANDR" missing on display "localhost:10.0"

I really don't know what to do and I couldn't find a solution at google.

Any clues?

submitted by /u/R3DNano
[link] [comments]

Need help with specific NAT rule in iptables

$
0
0

Hi,

I have linux server which is used for iptables 'Firewall'.

External IP: 200.200.200.201 Internal IP: 192.168.70.1

Now, I have a pool of about 20 IP's directed to 200.200.200.201.

I have another linux server with internal IP: 192.168.70.50

There is apache installed on him with a default site with port 1080.

I want to forward all traffic that comes from 200.200.200.202 to 192.168.70.50.

If I'm correct I need to create a NAT rule?

I would love to get some directions because I'm kinda lost with it...

Thank you!

submitted by /u/MadHackerTV
[link] [comments]
Viewing all 17912 articles
Browse latest View live