@ewwhite had two splunk guys over from sanfran yesterday and over dinner got talking about santorum - says a lot when I'd take that plastic thought-vacuum over the alternative, a mormon
@ewwhite I'm not a big fan of any religious person being able to vote let alone be elected but followers of the newer, utterly bullshit religions worry me far far more
Upon going to a couple of our websites this morning that we host for clients and have designed ourselves, I was prompted by Chrome that there is malware.
About two weeks ago I ran rkhunter and ckhunter on the server, but it only came up with false postives. Server is running CentOS.
The follow...
@Joel I think they read the newspapers too much. Even the most-Liberal Dems in Buffalo are pretty conservative because of the huge Catholic community. They're still getting used to the difference in culture.
@Joel They also have an intent document, which apparently I didn't have downloaded. It's really handy for when you have trouble determining exactly what they want, or if what you do actually addresses it.
@BartSilverstrim fun fact: we were attached to the uni's nagios that sends sms when something borks, there is one server I wasn't responsible for, the new guys were taking care of it, it sent out 504 text messages before they responded
@Joel @qroberts Looking through the v2.0 doc, I'm not seeing anything that directly addresses screen locking timeouts. The closest thing I see is 2.2 which requires that you develop a configuration standard consistent with industry. They specifically call out CIS, ISO, NIST, and SANS. It's probably rolled up in that.
@Joel @qroberts That being said, 12.3.8 requires auto-disconnect of remote access. It does not, however, specify inactivity periods. Just that you must do it.
There are a lot of users with 1 reputation... and I'm really unsure as to where they're coming from. Did Experts Exchange get a lot of these questions before ServerFault?
I have a NIC with 2 aliases on it. The network interface has 3 IPs configured on it. Think about it like this: i can ping the same server by hitting .100 .101 and .102.
I want the outgoing connections to be load-balanced among these ip. So if i have 3 opened connections, one connection will have...
@voretaq7 you understand that he doesn't really want to load-balance, he wants to distribute his outgoinig connections, probably to bypass some quota for an web API.
@voretaq7 Yes. He's basically explained his upstream router is limited to 200 connections per source IP and he wants to get around that by paying for more IPs... Doesn't make me want to help him anymore, and someone already posted the normal answer...
@Zoredache Probably, I just want him to admit he's being a douche and trying to steal services from someone. Whenever someone answers "Nothing for you to worry about" I want to cockpunch them so hard their great-grandfathers feel it.
When you cd into the original directory your shell grabs on to that location as its working directory. When you mount the replacement your shell's working directory doesn't change, but if you reference the full path the OS says "That's mounted on this (new) device". So if you copy/move from ./ to /path/to/here you move the files from the old device to the new one.
@voretaq7 I figured it was similar to working in the directory you're trying to remove. When it tells you to lsof you're like "wtf I already killed apache."
caveat #1: If your OS is brain-damaged and doesn't let you over-mount on a mountpoint it dunt work - You get yelled at that you can't mount something there because it's already occupied (I don't know any unix that has this brain-damage)
Caveat #2: Remember to unmount the old filesystem (by device ID) and update fstab, or you'll cry later.
More technically: your shell's cwd is a file descriptor open to the inode of the underlying directory. Mounting something at the location doesn't change that inode, it just changes path traversal to that directory.
It seems that U 10.04 has better ruby support than 10.10.
Should I downgrade? Would it be a lot of trouble?
If I do want to, what is the best way to do it?
I basically know nothing about server admin...
I've got an application I'd like to move to EC2. It will likely spend more than half the day completely dormant, so I'm trying to come up with a good solution for starting and stopping it as needed. It takes a few minutes to start up from nothing, so it would be nice if i could hibernate the OS f...
My answer to that is "Well thank you for destroying all the state information we would have needed to actually help you fix the problem. It's working now, so we consider this problem closed."
(which leads to the inevitable "Well congratulations. Your machine is bricked. Ship it back to us and we'll wipe it and reinstall. Next time follow the fucking instructions on the screen, idjit!"
@BartSilverstrim Oh god… "So, where do I drop this certificate/key?" "Well, you run this program to create a keystore and then convert the certificate to pkcs12 then import it into the keystore…"
@Joel powering off Windows is slightly less traumatic than it is to our box. radmind getting interrupted in the middle of writing out a new kernel can pretty much fuck up your whole week.
... convoluted? Create file containing cert, key and trust chain. Point Apache at it. Seems legit to me.
Yes, I want code highlighting.
This has been enabled, and at this time these tags inherited syntax highlighting and have it enabled.
powershell
sharepoint
http
python
sql
database
java
asp.net
.net
plsql
mono
jboss
vb
coldfusion
android
regex
vb6
wcf
vbscript
c#
hibernate
django
ruby
javascri...
are there any tags in this list we can turn code highlighting off for
We have a hard disk that is 600 Gigs and nearly full. It's been filled up with 18,501,765 million files (mostly small 19k images) and 7,142,132 folders. It's very difficult to find out where exactly all the space has gone too. Our regular cleanup procedures are not clearing up enough space which ...
@Chopper3 We're going to force that user to RDP to the TS rig. ALL the software is already there and their co-workers use it just fine. They fight us tooth and nail until their local hardware dies as some kind of weird status symbol.
@Joel Ah, that might work. Our people are usually clamoring for Office 2K10 under Wine so that they can open the new Office docs without using OpenOffice.
Ah, found the suckage. I got commissioned to find a way to run IE9 in a Wine session to allow staff to do direct data-entry for a hideous state-run website.
@Joel Well, this is the group that thinks "good security" means eliminating any non-essential Debian packages while relying on PHP escape_chars functions to sanitze their input and leaving the IPTables wide open.
@Joel Did I mention that the app is exposed to the internet? Thankfully the publicly-accessible one is through another server that I control the network connectivity for. So it's firewalled at least.
@TylerShads OTOH, I'm discovering that the information Libvirt/KVM provides me is often wrong unless the VM instance has been cold-stopped recently. =/
@Zoredache Long story short, have a test server that is a PoS left from the past that used to be production. Want to use it to test out VMWare, specifically the ESXi free thingie, now that I have everything finally done, when I open up vSphere Client, its screaming at me to activate licenses that are no where comprehensively found on vmware's site.
Just frustrating to me when a site is not straightforward about anything :)
Well, there's your problem. Most of us only get through the day because of the anticipation of forgetting everything in a few hours of rum and vodka fueled bliss.
@Joel And as much as I bitch about Mark Shuttleworth (may Allah whack him in the stones with a shovel 1000 times), Ubuntu mostly just works for our users.
@Joel The autoconfigured and default configuration are horrible messes. There's only a few required sections and most of them can be trimmed down to a few lines each... Once you start cutting out the crap it gets a lot easier.
My workstation's xorg.conf file is 83 lines long and now that I'm looking at it I think I'm going to trim more of that out.
@Zoredache I think hardware support for autodetecting things is a heck of a lot better now too, but yeah, getting xfree86 working could take days if you were using an oddball setup.
And heaven forbid you use multiple monitors! You'd have to pull out special extension for that.
A current xorg.conf file needs the basic "Files" and "modules" section. Files is pretty much just fonts. Modules is optional if you don't need support for things like putting your monitor to sleep or OpenGL; but I consider that mandatory for a modern computer. Then you need a keyboard and mouse "InputDevice" sections. Montor, Device (video card), and Screen (resolution, colors) sections round out the computer's "hardware". One last "ServerLayout" section to tie them all together.
Bonus points for using the same configuration file for a multi-seat setup. You can connect 2 keybaords/mice/screen for instance and use multiple ServerLayout sections to start two separate X servers on the same computer, one for each setup.
Write a 'cron' script and add the rules for iptables to allow you access and set it to run it 5/10 min after you flush your command. That way, you will again re-gain access after 5 minutes.
@Joel The way things are going we wont need a xorg.conf file pretty soon. As it is I only edited the auto-detected configuration file for my sanity; it picked everything up correctly on the first try.
@voretaq7 Just think of all the community members that benefit from your toil though. WHY WONT YOU THINK OF THE CHILDREN?!
Doesn't iptables have multiple sets? Like can't you have your "current" set and a set you're "working on"; and easily switch back and forth (and set a "sleep 15; ${switch back to "normal" set}" command)?
I suppose, but you could just make another save I guess.
Generally I just put all my rules in a script, then just re-run the script, which updates the ruleset. I have the script in a VCS, so I can revert as needed.
Upon going to a couple of our websites this morning that we host for clients and have designed ourselves, I was prompted by Chrome that there is malware.
About two weeks ago I ran rkhunter and ckhunter on the server, but it only came up with false postives. Server is running CentOS.
The follow...
It seems that U 10.04 has better ruby support than 10.10.
Should I downgrade? Would it be a lot of trouble?
If I do want to, what is the best way to do it?
I basically know nothing about server admin...
Yes, I want code highlighting.
This has been enabled, and at this time these tags inherited syntax highlighting and have it enabled.
powershell
sharepoint
http
python
sql
database
java
asp.net
.net
plsql
mono
jboss
vb
coldfusion
android
regex
vb6
wcf
vbscript
c#
hibernate
django
ruby
javascri...
Write a 'cron' script and add the rules for iptables to allow you access and set it to run it 5/10 min after you flush your command. That way, you will again re-gain access after 5 minutes.
