Search results

  1. quintessence

    Running a jail with sysvipc_allow="YES"

    Hello, https://www.freebsd.org/doc/en_US.ISO8859-1/books/arch-handbook/jail-restrictions.html Also you can run all your instances in only single jail.
  2. quintessence

    How to allow direct root access via SSH on certain IP range?

    Hello, You need only PermitRootLogin yes AllowUsers root@192.168.1.0/24 in your sshd_config. Those lines will allow root login from 192.168.1. network, and will deny root login from any other networks. Edit: And you should match any other users with AllowGroups or more elegant would be...
  3. quintessence

    HP Gen9 arrays support

    Hello, No, even in CURRENT: https://www.freebsd.org/relnotes/CURRENT/hardware/support.html
  4. quintessence

    From rrdgraph to highcharts

    I'm sorry for double post, but on edit I don't find how to attach new file. Example graphs on chosed server X and type of graphs all: Conclusion on graph: Zooming of external network interface will show that we have collected data from ~ Oct 2008 year when the server was powered on (or when...
  5. quintessence

    From rrdgraph to highcharts

    Hello, phoenix, highcharts is just a javascript API which you can use for graphing your charts. I don't like to use ready software for graphs like Collectd, Cacti, Symon or others, so yes it is a custom software for collecting and storing the data. Of course I have almost all of them installed...
  6. quintessence

    nginx valid_referers is not working any more...

    Hello, valid_referers cannot prevent accessing 'versioning' of static resources. It can prevent access to the static resource, but not to its 'version' (I mean here URIs like file.js?timestamp, file.css?timestamp, and your example with the pictures). CORS always is an option depending on your...
  7. quintessence

    From rrdgraph to highcharts

    ~ 2 years ago I moved to highcharts, pretty graphs, modern graphs, 'web 2.0' graphs. :D Old graph: New graph: Old graph: New graph: New zoomed graph:
  8. quintessence

    phpmyadmin - forbidden

    Hello, This block: should look like: Alias /phpmyadmin "/usr/local/www/phpMyAdmin/" <Directory "/usr/local/www/phpMyAdmin/"> Order deny,allow Deny from all Allow from 192.168.1.0/24 # your IP address(es) from which you would like to access PHPMyAdmin </Directory>...
  9. quintessence

    Solved [Solved] Apache 2.4 + PHP-FPM problem

    Re: Apache 2.4 + PHP-FPM problem Hello, Here is the official guide: https://wiki.apache.org/httpd/PHP-FPM You may check both access and error logs, also you may start with default php-fpm.conf, since I don't see you are using SuExec, your section should look like: [www] user = www group =...
  10. quintessence

    Spamd not return msg on spamd.conf

    Hello, You have a missing : in the end of your file in file section, also messages for custom blacklists should be loaded from a file. For example: blacklist:\ :black:\ :msg=/home/mycustommessage.txt:\ :method=file:\ :file=/var/db/blacklist.txt: (you have missed...
  11. quintessence

    IPFW NAT setting

    Hello, This "specialized case of DNAT, called redirection" may be used not only for NAT purposes (and cases). Since you didn't give the whole ruleset from your firewall and how your network is organized (how many interfaces and so on), let us assume that you just want to redirect all incoming...
  12. quintessence

    10G Network Card - number of irq queues

    Hello, Check your boot screen for errors/warning during boot, or uncomment the line *.err;kern.warning;auth.notice;mail.crit;console.info /var/log/console.log from /etc/syslog.conf, perform newsyslog or reboot, then check for any warnings in console.log after reboot. As I see in the...
  13. quintessence

    Apache24 + vHost UID + GID

    Hello, Try to set SuexecUserGroup inside each virtual host definition. From documentation http://httpd.apache.org/docs/current/suexec.html:
  14. quintessence

    Trouble with Postfix and SMTPS

    Hi, The information you provided is almost none. Debug the connection from the client side with OpenSSL or from the server side by placing -vvv args after the command smtpd for the service smtps in master.cf. Also check all your certificates (for which you don't provide any info) both on client...
  15. quintessence

    Install Debian GNU/Linux using debootstrap on a FreeBSD Jail with ZFS

    Hi, You have an (copy/paste may be) error in point 10 last row. Regarding point 7 correct mount should be: root@morsa:/root # mount -t tmpfs none /jailz/deb-master/lib/init/rw instead: root@morsa:/root # mount -t tmpfs none /jailz/deb-master
  16. quintessence

    Postfix SASL

    Hi, Just tested to enable Sasldb instead Saslauthd (btw, I've also had problems with crashing in the past on one old box, since then I didn't meet any problems with Saslauthd, so I'm using it). However, this warning is harmless, don't worry if you authenticate successfully. :) After checking...
  17. quintessence

    Postfix SASL

    Hi, Can you authenticate against your local domain from your configuration, i.e. smtpd_sasl_local_domain = proxy.domain.local instead of localhost? smtptest -a {username} proxy.domain.local You can check also if your <username> exist in the database with sasldblistusers2. Some...
  18. quintessence

    Fail2ban - error message

    Hi, Where did you get these strange configs? :) Your don't have <HOST> in the regexes. Replace regex in your nginx-filenotfound.conf with for example: .* is not found in .*, client: <HOST> which will perfectly match entries from Nginx's error log like (some bots trying to search phpmyadmin on...
  19. quintessence

    Naxsi Firewall help

    Hi, This is an example to start Naxsi in learning mode from its documentation. For example: http { ... include /usr/local/etc/nginx/naxsi_core.rules; ... } cat /usr/local/etc/nginx/naxsi_core.rules; ################################## ## INTERNAL RULES IDS:1-10 ##...
Back
Top