Search results

  1. P

    What is the best way to ban IPs scanning my ports on Linux?

    OFFTOPIC POST about this stalker/internet bully (maybe wrong word, it is just well known word a bit similar to what he is doing) It is so unusual and interesting fenomenon for me that i spend time writing this and even publishing even it is not my nature to write things like this (since this...
  2. P

    CPU iowait due to HDD overload is lagging the video recording saved on fast SSD

    This is something new to me. Video being recorded and saved to a fast SSD, normally it affects my CPU like +10% maybe and the CPU utilization is around 20%, but when there was a high CPU iowait (likely due to a overload of the external USB data HDD), the recorded video seemed like skipping...
  3. P

    What is the best way to ban IPs scanning my ports on Linux?

    I was using denyhosts and now fail2ban to block IPs, but what is most simple and good way to block IPs that is scanning my open ports? If possible, how to do it in either f2b or in iptables please? UPDATE: I liked denyhosts more than f2b for SSH bruteforce baning since it was simple to setup...
  4. P

    Extract URLs out of the network traffic on Linux how?

    Hello, the web browser has no developer console and web page is made to refuse work if it is enabled. The web page source does not show any streamed video URL, so i was thinking i may run some Linux command to capture network trafic for lets say 5 minutes during video play and extract all...
  5. P

    iptables multiple ips PRErouting? (--to-destination & -dst)

    Hello, my iptables v1.4.21 rule is: -A PREROUTING -i eth0 -p udp -m udp --dport 1234:1234 -j DNAT --to-destination 10.8.0.2,10.55.55.2 but i get error: Bad IP address "10.8.0.2,10.55.55.2" How do i define --to-destination parameter for two IPs please? In the man page on my CentOS 7 i am...
  6. P

    LetsEncrypt says "DNS validation failed". Site is behind Cloudflare

    Thanks @captain-sensible , that helped. So i tried to select only main domain, www and mail to be SSL protected instead of a wildcard and then it used "https://acme-v02.api.letsencrypt.org" and succeeded and Gmail can now get mail via SSL. Yet if someone else have feedback or some solutions to...
  7. P

    LetsEncrypt says "DNS validation failed". Site is behind Cloudflare

    Hello, i tried to disable FULL SSL option in my cloudflare account to become "Off" and then attempt to setup wildcard free LetsEncrypt certificate from within DirectAdmin control panel. But it continue to fail. "DNS validation failed" I would rather think it is problem related to Cloudflare...
  8. P

    iptables NAT prerouting rule does not forward the traffic?

    Hello, on one server, the iptables rule like: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 48280 -j DNAT --to 10.8.0.2:48280 worked to forward server's incoming traffic at mentioned port into the VPN tunnel where the VPN client network interface has IP 10.8.0.2. Port appeared as open...
  9. P

    How to update (incremental) large file on Linux while being on Windows?

    I do not know how differently to write it. Simply need to synchronize the Linux file with the Windows one with minimum overheads (CPU, HDD work, data transfer where data transfer saving is the most important priority in this case).
  10. P

    How to update (incremental) large file on Linux while being on Windows?

    The file on Windows and on Linux is both like 95GB. The Windows file is a bit adjusted by the chkdsk which modified maybe a few bytes of data or maybe a few megabytes and i want the update take shortest time possible and take least resources. I am having SCP and physical access to both...
  11. P

    Connection timeout, IP not blocked in iptables, where else can be blocked?

    Hello, i tried traceroute, ping, curl, ssh one particular server in the internet, but all timeout from my CentOS 7 Linux computer. Computer with different public IP can connect that server without problem. i checked IPtables policies (default ACCEPT) and REJECT/DROP rules and /etc/hosts.deny...
  12. P

    Protect authorized_keys and known_hosts?

    i would think that at least the public key in ~/.ssh/authorized_keys (or in known_hosts) is an unique identifier that allows to prove some person had access to that computers (which for someone may be nothing to be concerned about). You mean this file: when accessed by unwanted person, then...
  13. P

    Protect authorized_keys and known_hosts?

    /home/me/.ssh/known_hosts /home/me/.ssh/authorized_keys I would like to put these files to an €ncrypt€d folder that is being decrypted manually after Linux Raspbian 10 start. Why? i do not want anyone to discover that files contents (consider someone steal the drive - my Raspbian installed from...
  14. P

    Exim mainlog meaning of the auth_relay log line

    That reply was useless for me. You failed to understand my question. I need explanation on how to read that lines so i understand what exactly is going on. Please do not reply if you have no clue on how to read the values in that log entries in context of the web server.
  15. P

    Exim mainlog meaning of the auth_relay log line

    In /var/log/exim/mainlog was two lines related to my hosting account with username "user" and account domain "domain.net". it is claimed to be related to SPAM and i want to ask if you can please explain in detail how to read these log lines so i can find exactly how the site is exploited by the...
  16. P

    Remote host closed connection in response to end of data (354 End data with <CR><LF>.<CR><LF> - writing message and terminating "."

    Thanks, I am no longer using that server, but i think you were right. It was possibly something with wrong IP in SPF record or wrong IP in mail. or MX record or something like that - maybe. Or the mail was relayed thru antispam system and i missed their hostname in SPF record.
  17. P

    DNS system - Nameservers vs A record. Can use any of these two to change my hosting?

    Yes, changing A record for the domain and www. subdomain on provider 1 was enough to "redirect" web traffic to provider 2. First i changed TTL of the DNS A records and a MX record to 300 (5 minutes) and after like 30 minutes (was previous TTL value) i changed the IP value. The change was live...
  18. P

    DNS system - Nameservers vs A record. Can use any of these two to change my hosting?

    Hello, when on my domain i am using nameservers of the provider 1 and in the hosting control panel of the provider 1 in DNS section i set A record to point to a IP address of the hosting provider 2, is there any issue with this way of setup or it will just work? How it will work? Will it add...
  19. P

    Remote host closed connection in response to end of data (354 End data with <CR><LF>.<CR><LF> - writing message and terminating "."

    Hello, i am sending an e-mail from my Linux server with Exim and this is what i see on the unsent e-mail: Please what is the cause of this? It fails for numerous messages and starting to happen once i switched IP of the mailserver hostname and in SPF record. Then i switched back before around...
  20. P

    Common domain forgery when he sent e-mail to me

    Hello, i given a person ([email protected]) my e-mail ([email protected]) and he received back following message: This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The...
Top