do you guys recommend using Fail2Ban in production? I use it currently on our publicly exposed dev boxes. We have a need for some form of active alerting and reaction, but no resources for purchasing or even learning anything new and complex
I'm referring to more than just SSH protection. Our SSH port is not visible externally
Considering how often I see it recommended whenever anyone asks a question even remotely related to "how do I keep my logfiles small from all of the SSH scanners out there", I'd say it's safe for production.
@packs had a box go down hard because of denyhosts. The host.deny list grew to a few thousand IPs and it caused sshd to use insane amounts of memory and time with each connection attempt. It eventually caused it to swap and crap started getting killed by the OOM killer
something to be aware of at least :)
we got hit with a nasty attack last Friday on our open (sigh) SIP port, they were bruteforcing passwords for 40+ hours
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Etiam quam mi, sollicitudin ac viverra aliquam, tincidunt at erat. Nulla luctus nibh vel risus fringilla ut eleifend est auctor. Sed dolor ligula, malesuada ut vestibulum nec, fermentum a risus. Nunc dignissim, erat ac dignissim ultricies, ...
I wonder if I should ask a new question on meta, or if my update to my existing question about the url filter was enough... meta.serverfault.com/questions/1193
I really wish some company would develop a good type 1 hypervisor for the desktop.
That way you can have the best of both, Give dev limited access to one VM, and full admin access on a couple dev VMs that are forced to a different vlan.
Found one that was pretty close on SF, and one that was nearly identical on SO. I wish I could vote as duplicate of the SO post.
I'm glad they got it fixed but is anyone else struck dumb by the idea of trying to fix XP by breaking out wireshark before thinking "Hey, it's desktop Windows, lets try a reboot"?
Anyone here have experience with Ghost-like software for tanking up multiple pc's at once (ie multicast), without having to pay the US budget as a fee in licenses? One of our companies is a school, where they buy used $300 laptop to perform courses with.. using $46 in symantec ghost license on each laptop (1600 laptops) just for one single ghost session is a bit steep
Hrm, maybe this should be posted as a question on the site instead
Well if they're Windows, we use WDS for multicast deployment in my college and it works really well
And relatively cost neutral to set up at school licence prices, possibly even free if they have a server box with the capacity available. (The one that was just doing Ghost?)
Just gotta check out the licensing rules then.. if they can get away with user cals for just the laptops in the process of being imaged then it'll be cheap
we went WDS but I know a hell of a lot of UK schools and colleges use FOG and do very well with it. If you look on the edugeek website they have a forum there supporting it
I have a question, currently my VPS is hosting one website through a single IP, now I am planning to run one more website on that same IP, which is multiple, my website directory is /www/html/all_my_current_website_files now if I am going to add a new website, which will be in a folder, will the current websites location do I have to change?
yeah... it seems the front reception of our shiny new campus building has been designed in a huge parabolic arc that catches and gathers sunlight from wherever it is in the sky on a sunny day like this
so i'm trying to stay out of that part of the building...
I used to work on bank trading floors and in most of them there's a competition for who can enter with the most interesting/abusive profanity-laden welcome - some of them were astonishingly offensive
@RobertMoir Oh cool, my son's looking around at 6th forms right now - although the school he's at probably has the best for miles so if he can he'll stay there I think
@RobertMoir I was very "focussed" so knew where I wanted to go but I imagine many of them decide that way - my son's pretty focussed too so will probably pick the place that gives him the best chance to get the degree course he wants (I hope/think)
I have a VPS which has a single website associated with a single IP,
This website is in wordpress and it is directly placed or installed into the /html directory, which means inside /www/html/ my wordpress folders files, are placed, I mean to say its not in this form /www/html/wordpress/wp-conten...
You really have two questions here. The first is how to set up a site where people can purchase hosting and have the site automatically set up the hosting accounts in WebHost Manager. The second is how to create an online domain name registration system. I think these are both on topic here at Se...
I'm sure "don't recommended godaddy" will be one :-)
I am creating a bandwidth quota program in PHP, however I am finding that to create it with PHP is a bit hard. As an example of what I am trying to do, the user can download 10GB per day, and after they have reached the bandwidth cap the user should be unable to connect.
I would like to find a ...
I'm aiming for 12k SF rep by the end of the year, but if I don't get my lazy ass out of the MSO Tavern and start answering questions it'll never happen, LOL
@packs Since I decided to try it, something strange has happened. Instead of gaining rep on SF, I have started gaining it by leaps and bounds on MSO! My rep nearly doubled since the start of the year, LOL. I think I'm doing it wrong!
Should they? That's up to the corporation. Personally I think it's fine as long as there are some understood rules.
Being admin on your box is a privilege NOT a right.
Catching viruses on multiple occasions will get the right revoked
Disabling corporate agents will get the right revoked - AV/...
You really have two questions here. The first is how to set up a site where people can purchase hosting and have the site automatically set up the hosting accounts in WebHost Manager. The second is how to create an online domain name registration system. I think these are both on topic here at Se...
I expected 10,000 more comments, "But Josh how do I do... and what about... PLS SEND TEH COEDZ!"
hello.
Im facing the same problem.
I am trying to calculate the total bytes sent to the user before he actually stopped the download at certain point.
How can I accomplish it ?
I know how to use headers to download files and resume etc.
I just want to calculate the bandwidth he used.
lets say I...
@Iszi It would depend a lot on their development process, and how many environments are actually in use. But yeah, in general admin rights in dev? Sure, np. Test and Production? Let's tighten up the rights a bit.
Unless you really NEED it then just wait it out - guess there's either something up with their site or your link to their site - either way nothing you can do about it other than try a different connection
@Chopper3 Am I the only one looking forward to #3? All I want out of it is a marginal storyline, robots, "cool" graphics, well choreographed fight scenes, and lots of explosions... that alone would put it miles ahead of the 80's TV version.
@ChrisS Yes, my son calls the first one "Attack of the Easily-Rendered Polygons" and the second one "Revenge of the Blurry Cube, Cone, Sphere and Teapot"
A lot of times I will get a URL for an application that has some sort of problem. In order to fix it I need to find out what server it's running on which usually involves running around and asking a few people. Is there some way that I can look this up from the command line? I tried NSLOOKUP b...
actually scratch that - what the hell was spielberg THINKING - has he been taking "Crap on your legacy" lessons off Lucas!!!! ahhhhhaahhhahhhhahhhagghh
I have a tricky dilemma. I've got some files on two different destination drives, copied from the same source drive. The source drive had been failing, so I used dd to copy over the data to one destination (with options conv=noerror,sync which fills error'd blocks with zero bytes) and I used ddre...
"Dear ServerFault, does anyone have a magical happy tool that will tell me which bits should be zeros and which bits should be 1s in a file to make be into the program I want?"
I don't have the heart to tell him that his algorithm in the question will result in a file that is all 1s
(at least in the pathological case where one file is the bitwise NOT of the other file)
whup, now his comment made me break out the "pathological case" stick. sigh
Today's News New Video from Microsoft IT: Customizing the User Experience with FAST Search Jeannine Dealy, MSFT http://technet.microsoft.com/en-us/edge/customizing-the-user-experience-with-fast-search.aspx
Today's News App Compat Toolkit 5.6 Screencast: Collecting Inventory and Compatibility Data (Part 2 of 6)
There are four compatibility evaluators that are included in the Data Collection Packages (DCP’s). In this screencast, we will create DCP packages that collects inventory, evaluates User Account Control (UAC) issues, and looks for general Windows 7 compatibility issues. Blain Barton, MSFT http://bit.ly/gcysj0
@Zoredache that's how I read it too, except a bitwise OR won't "fix" data loss -- there's no guarantee data didn't turn up a 1 instead of a 0, or that the bitwise OR of two files will give the "correct" original file
I see Drobo have a 12 bay box now - only 3 x 1Gb NICs and it's retailing at $8.5k - does that seem steep to you guys, for a product that comes from a so-far predominently consumer-oriented company?
actually it either only has 2 x NICs or they've not updated their specs right - I suspect the latter as the tech specs state 8 slots when it's clearly a 12 slot box
Just three criticals. None of them look to be remote exploits. MS11-003 has patched all the IE zero-days.
Anyone got any info on when 2008 R2 SP1 is coming - I could really do with using Dynamic Memory on live servers (been testing in the lab) but I don't want to go live on the RC if I can avoid it.
unless something has changed drasticall last time i looked at it they where pretty price comparable when you matched up the licensing for all the features
@RichardGadsden yet 3-4 years behind functionally, it might be cheaper but I get such a good discount from vmw and would need 50%+ more hosts using HV anyway that it's not worth considering
not single-handedly - just the data centres, network, san, server farm and overall design - MS did the main software, though not for its replacement (called YouView), much to their annoyance
@Chopper3, I have given up on the erotic services years ago.
This is actually for a buddy of mine, hes a programmer and is looking for side work, and i seem to remember the sysadmin site also had programming gigs.
@Chopper3 My virtualisation deployment is two physical servers and about 40 virtual ones for miscellaneous services in the office - completely different worlds.
@RichardGadsden it's not launched yet due to BBC Trust delays but from our side it's all HP BL490c's, virtual connect flex-10s, EVA 8400's, ESXi 4.1, Cisco Nexus/MDS, Oracle Linux, then some custom code by Massive and theplatform with a bit of W2K8 in for DRM stamping
@DanBig it was mentioned on here once, can't remember by who - Warner perhaps?
@Chopper3 Any smaller and I'd be over to Xen, but if I'm paying for Windows licenses for the virtual machines anyway, Hyper-V comes along for the ride for next-to-nothing.
@Chopper3 Isn't YouView the thing that lots of STBs and TVs are supposed to be supporting in the near future? I love the fact that the only thing you use MS for is DRM. Pretty much sums them up.
Totally understand - I do big/expensive/high-profile but I can't do what 95% of what people on SF can, it's much easier when you have DNS people, DB people, offshore minions etc. but you get away from the coalface, that's why I come to SF, to keep an eye on what's really going on
@RichardGadsden yes, bbc, itv, c4, five etc. standard STB defs, portals etc. technically it's not hard but politically it's like running in treacle - nobody can agree on anything
Re:DRM we're doing multiple flavours, MS is one - we use Windows for some other things too - vCenter and CommandView leap to mind but most is OEL (which is just rebadged RHEL)
Oh I read that wrong, sorry, got it the wrong way around - no I don't believe they will unblock any time soon - their licencing agreements are way too complex yet similar to change without enormous work - and there's no support from the Trust so it won't happen for AGES
heh, I'm strange about real estate -- I refuse to rent unless it's substantially cheaper than buying. You can get nice places in queens/brooklyn for slightly-less-than-rapacious prices
that's where I was, mind you barclays were picking up the bill - actually you've just reminded me, I'm over your side the week after next for a couple of days, so no mod'ing for me sorry
yeah but you build no equity :-) Buy a nice condo in Queens, pay what you'd pay to rent in Manhattan, and in 10 years sell it for more than you paid (especially with the market still in the tank)
I am creating a bandwidth quota program in PHP, however I am finding that to create it with PHP is a bit hard. As an example of what I am trying to do, the user can download 10GB per day, and after they have reached the bandwidth cap the user should be unable to connect.
I would like to find a ...
Should they? That's up to the corporation. Personally I think it's fine as long as there are some understood rules.
Being admin on your box is a privilege NOT a right.
Catching viruses on multiple occasions will get the right revoked
Disabling corporate agents will get the right revoked - AV/...
hello.
Im facing the same problem.
I am trying to calculate the total bytes sent to the user before he actually stopped the download at certain point.
How can I accomplish it ?
I know how to use headers to download files and resume etc.
I just want to calculate the bandwidth he used.
lets say I...
A lot of times I will get a URL for an application that has some sort of problem. In order to fix it I need to find out what server it's running on which usually involves running around and asking a few people. Is there some way that I can look this up from the command line? I tried NSLOOKUP b...
