Newest Questions
329,254 questions
3 votes
0 answers
126 views
Migration of dictionary configuration with message's count and storage limits (plugin: quota/quota-imap) in mysql/mariadb - backend
I'm having a major problem converting my Dovecot configuration file to version 2.4.x. What I'm struggling with is using a dictionary to handle quotas within the MySQL backend (dict - plugin - Dovecot)....
1 vote
1 answer
171 views
Unable to connect to Windows Server 2025 with Sophos firewall for authentication
We are trying to connect to a new Windows Server 2025 host to act as an authenticator for Sophos XG firewall 21.5.0. After adding DNS name, username and passwords, the "Test Connection" ...
1 vote
1 answer
20 views
Apache2 mod-qos QS_ErrorPage causes redirect loop
I'm using mod_qos (11.74-1build3) on apache (2.4.58) to discourage brute force hacks with: <IfModule mod_qos.c> QS_ErrorPage /qos-error.html # Identify login attempts SetEnvIf ...
2 votes
1 answer
73 views
Failing using autoFS with windows server 2019
From Ubuntu Server 24.04LTS I am able to mount a Windows 2019 shared folder named: //myserver.edu/wshared which has "Encrypt data access" enabled at the windows server 2019 while using in ...
0 votes
0 answers
22 views
Firewall - Lightsail AWS
Currently I’m working with a server running in an AWS Lightsail instance. This instance runs Alma Linux with lightspeed, WHM and cPanel. Well, I saw this on the firewall on instance management: ...
3 votes
0 answers
86 views
Could not load file or assembly error on ASP.NET IIS sites
I am trying to deploy two IIS sites to a new server. The sites are both running fine on another server, and were copied directly. I tried both via web deploy and simply setting up sites and copying ...
1 vote
1 answer
202 views
Hardening UNC Paths
I use Windows Server 2019 DC in my environment. All updates are installed. We use Windows 10/11 clients. We use a mix of 2012R2 - 2022 OS on other servers. I will set the UNC paths in the Default ...
2 votes
1 answer
114 views
Prevent WDigest Authentication Exploit
I use Windows Server 2019 DC in my environment. All updates are installed. We use Windows 10/11 clients. We use a mix of 2012R2 - 2022 OS on other servers. I will disable WDigest Authentication in ...
1 vote
0 answers
90 views
Get AD FS Relying Part Signature Certificate expiration within powershell
I'm working on automating some certificate rotation tasks. Specifically, we still have some applications using AD FS SAML authentication, and so I'm converting this to use powershell run by a ...
1 vote
0 answers
21 views
Can not increase External IPv4 address quota [closed]
My Quota increase requests are auto-denied and sales team is ignoring me since I'm not a business customer. I can not open a technical support ticket. What else there to do?
1 vote
0 answers
58 views
SSH Python Script to Windows Server Connection
I am trying to connect to a Windows Server using SSH in a python script. I am able to connect with my username and password, but connecting with an SSH key fails with: Check username, key file path, ...
2 votes
2 answers
153 views
Kubernetes for VMs
I want to setup a Kubernetes Cluster, for testing and later for prod purpose. but I am stuck with the concept of VMs running in Kubernetes. First I want to mention that I don't have a shared storage, ...
7 votes
1 answer
842 views
How do I notify Azure that we intend to do penetration testing on our App Services?
Although the Microsoft documents on penetration testing I have found advise one to inform Azure of upcoming penetration testing, it has proven quite impossible to do so. All links to a 'Penetration ...
1 vote
0 answers
65 views
Can’t delete file via FTP connection
A domain user cannot delete a file in their own folder via an FTP connection (tested with Total Commander and WinSCP), even though they are the owner of the file. The server is in the same domain. In ...
1 vote
0 answers
103 views
Synology + SMB: can't create directories if delete is prohibited
Imagine the following scheme: +--------------+ +----------+ | Synology NAS | <------- | Client 1 | +--------------+ +----------+ ^ | | +---------+ ...
1 vote
1 answer
202 views
NF Tables : why this last check is failing?
I am trying to setup some very specific rules with NF tables, but I am stuck at some point. There is obviously something I am missing. Here is the script I am using: #!/usr/sbin/nft -f flush ruleset ...
1 vote
0 answers
28 views
Trying to set HttpOnly but no changes are working
After a PenTest was told to set the HttpOnly flag on all of our cookies. We have an Ubuntu Server 22.04 & 24.04 LAMP stack with a WordPress website. I have made changes to /etc/apache2/apache2....
0 votes
0 answers
46 views
How to get tshark JSON output in a single line?
I'm capturing packet using tshark -i INTERFACE -f FILTER -T json and I correctly see the output accordingly to the selected INTERFACE and FILTER. The output looks like this: { "_index"...
0 votes
0 answers
25 views
RabbitMQ Cluster weird as hell after a node reinstall
I had a 3 node cluster with nodes: rabbitmq-01 rabbitmq-02 rabbitmq-03. The hosts file contains the names and the IP address of those hosts so they are able to reach each other via those names. The ...
2 votes
1 answer
574 views
Windows 11 installation has failed
My use case issue was an in place windows 10 pro 64 bit upgrade to windows 11 pro 64 bit on a live OS. I received the message "windows 11 installation has failed" with very little ...
0 votes
1 answer
77 views
control socket usage on a dual-socket server with slurm
I would like to run two concurrent jobs on the same dual-socket server and that each job in run on its own socket exclusively. The jobs are multi-threaded. Is there a way to control this without ...
1 vote
2 answers
157 views
How can I speed up Kubernetes deployment scaling? Pods take minutes to become Ready
How can I improve the scaling speed of my Kubernetes deployments? When I increase the replica count, it takes multiple minutes until new pods become ready. They are staying for a very long time in ...
1 vote
1 answer
50 views
Open LDAP configured as N-Way Multi-Master Replication but replicate only first started node (any node which is started frst)
I have two LDAPS configured with script described in OpenLDAP N-Way Multi-Master Replication with olcMirrorMode replaced with olcMultiProvider or as described in OpenLDAP : Replication section 18.3.3. ...
2 votes
1 answer
232 views
MTLS is not working on AWS EC2 with Apache Proxy installed behind AWS Network Load Balancer
I've implemented a cloud infrastructure for IIoT devices with Network Load Balancer with listener on 443 and Apache Proxy 2.4.37 installed on RedHat EC2 instance with Virtual host listening on 443 ...
1 vote
0 answers
47 views
Using Chocolaty to install Visual Studio 2022 Build Tools on Windows using the command line fails
Problem statement I need an automated way of installing Visual Studio 2022 Build Tools on any version of Windows Server (on an EC2 instance). The intention is to use the server as a Gitlab Runner (...
0 votes
1 answer
75 views
Force log off a user if their AD account is disabled
We have a classroom with computers. Students can use them at any time (even at night). All students have an account in Active Directory. Some students misuse the computers: playing online FPS, ...
2 votes
0 answers
75 views
How to setup a VPN inside a Docker container? [closed]
I need to redirect all traffic inside a container to my proxy. I have two scripts using tun2socks and badvpn-tun2socks. The latter is outdated, but here it is: #!/usr/bin/env bash set -euo pipefail ...
1 vote
1 answer
113 views
mariabackup --prepare keeps backup state at "log-applied", not "full-prepared"
I'm performing a full backup on a MariaDB 10.6.8 instance on linux and encountering an issue where the --prepare step finishes successfully but fails to transition the backup state to full-prepared. ...
1 vote
0 answers
118 views
Unable to login to Mariadb as root
I have a mariabd 11.8.3 server running on debian trixie and I am unable to login to root account. I want to login as root using sudo mariadb without specifying any password. However, it always fail ...
1 vote
1 answer
67 views
Error 400 redirect_uri mismatch - how to obtain access_token for a desktop application?
I'm trying to write a desktop application which will read my GMail inbox. I've registered a Desktop application in the Google Console, and verified a domain. The problem is that I have no settings for ...
2 votes
1 answer
159 views
Log files not truncated Exchange server 2019
Initial Issue Exchange DAG environment with mailbox databases. Logs are not truncating even though: Replication health is good (CopyQueueLength and ReplayQueueLength = 0). No lagged copies. ...
1 vote
0 answers
38 views
How can I find out which IP addresses are using a lot of data from Cloudfront? [closed]
I'm seeing unexpected high traffic in Cloudfront and suspect someone is scraping our site. How can I find their IP address and block them?
3 votes
1 answer
226 views
Debian 13 NFS Server: Client Connection Problems
Debian 13, Kernel Version: 6.12.48+deb13-amd64 (64-bit) nfs.conf enabled settings: [general] pipefs-directory=/run/rpc_pipefs [lockd] port=32769 udp-port=32803 [...
1 vote
0 answers
86 views
How to make BIND serve RPZ overrides even when forwarders are unreachable
Context We host a few services like gitlab on-prem which are accessible from the outside at gitlab.example.com which points to origin.example.com and is registered on an external DNS server. On our ...
2 votes
1 answer
43 views
Filter rsyslog messages by domain name
We have a number of hosts with domain names (the hosts are not aware of this domain name and do not send it.) We accept logs from those hosts based on their IP address: if ($fromhost-ip == '192.168.1....
1 vote
0 answers
71 views
How do I specify multiple ports for the same host in Windows Credential Manager?
I am using Windows Credential Manager to store Windows Credentials for a remote SQL Server on a different domain. The server has multiple instances, each of which is accessed through a different port. ...
4 votes
1 answer
380 views
How to restrict access to an EC2 instance on AWS to only users on a certain VPN?
I have an EC2 instance on AWS which is currently accessible to anyone who has the URL. I want to restrict access to only users who are connected to my company's VPN. How can I do that?
2 votes
0 answers
152 views
Prevent Microsoft 365 Companion applications from starting automatically on Windows 11
I need to prevent Microsoft 365 Companion Apps such as People, FileSearch, Calendar from automatically starting. I am administrator for several hundred Windows 11 clients, so I need to do this ...
1 vote
1 answer
67 views
Best network interface assignment for Apache NiFi cluster with multiple networks (service, management, backup)
We have an 8-node Apache NiFi cluster with an external Zookeeper cluster, running on three separated networks: Service Management Backup Currently all NiFi and Zookeeper communication runs through ...
0 votes
1 answer
122 views
Proxmox Unallowed MACs forwarded from client
My server is blocked by the provider due to unauthorized MAC addresses are originating from the host. However, Proxmox and the Windows guests are not using the MAC addresses. The following command on ...
8 votes
1 answer
536 views
Do NMAP connectivity results confirm application-level connectivity over the same route?
I have a host on an internal network that needs to connect to an external ip to perform application level functions. It has been suggested by the application's support that our firewall configuration ...
1 vote
1 answer
126 views
BTRFS RAID1: puzzled by my benchmarks results
I recently compared the performances of two solutions: 1) a MDADM based RAID 1 with EXT4 on top of it and 2) a RAID 1 BTRFS, since it now appears stable and it is gaining in popularity. Here are the ...
0 votes
0 answers
18 views
Why is Kafka Connect failing with `Class "org.apache.kafka.connect.storage.StringConverter" could not be found`?
I'm currently trying to test Kafka Connect inside a Docker container, built from confluentinc/cp-kafka:6.0.0 image. I'm following the documentation, and I have the following connector configuration ...
0 votes
0 answers
31 views
Apache htaccess allow TYPO3 and other WEB pages
It's my first time to setup TYPO3 on a LInux (Proxmax/Debian) system. Since Typo3 V3 I used Windows. My target is to use TYPO3 and other WEB content on the same server. Under Windows I had the other ...
0 votes
1 answer
100 views
How to configure Postfix for multiple sending options
I am installing on a Debian 12 server running Apache2 and PHP. I installed Postfix, and now I get the following configuration screen: No configuration: Should be chosen to leave the current ...
0 votes
0 answers
38 views
Kubernetes Flannel default CIDR 10.244.0.0/16 and real network IP 10.244.128.11
I have Kubernetes cluster set up on SLES using Flannel network plugin with standard 10.244.0.0/16 CIDR for a few years. I need to connect to an external LDAPS server that is using an overlapping IP ...
0 votes
0 answers
41 views
Azure Blob NFS Protocol Kubelet unmount issue
We have deployed Azure Blob with NFS protocol. Below is storageClass code. It was working fine when we had public with limited access. Not when we had private endpoint few pods are coming up. But we ...
0 votes
1 answer
135 views
Auto install a Certificate on Windows Server
I have Windows Server on AWS running a WebApp that uses a REST server. I am using IIS. I need the certificate on ports 443 - Normal port 2003 - Port for the REST server I am trying to get the ...
0 votes
1 answer
34 views
Restrict port access with FirewallD and docker
I'm trying to allow requests to a port only from specific IPs. I use the Strict Forward Ports feature to block any published ports by docker by setting StrictForwardPorts=yes in /etc/firewalld/...
0 votes
1 answer
95 views
Monitor backend of httpd's load balancer
I have a httpd load balancer with the following configuration (extracted from the example Clusters and Balancers): <Proxy balancer://myset> BalancerMember http://www2.example.com:8080 ...