cmeerw
cmeerw
Not much happening here, yet.
About
- Username
- cmeerw
- Joined
- Visits
- 16,941
- Last Active
- Roles
- Member
- Karma
- 628
Comments
-
(Quote) I have also seen those request attacks coming from Chinese networks - the interesting thing with these is that they are all using HTTP/1.1, while most browsers use HTTP/2.0 nowadays. At least for my Python-based web apps, I can pretty easily…
-
So the update seems to have overwritten /etc/rc.conf - the main thing that I had changed in there was setting httpd_flags= (from httpd_flags=NO - the old file was backed up in /var/backups/etc_rc.conf.backup). I have made that change again now. @No…
-
(Quote) That sounds like a lot of marketing BS.
-
(Quote) Can this be clarified, please. To what extent is it allowed to advertise services that are more expensive than the maximum price? I think I have seen something like "see web site for other offers", but also including specific serv…
-
My plan here is to fingerprint the request headers (to hopefully tell browsers and bots apart) and delay or potentially block bots based on that.
-
I am seeing two kinds of bots: * those that request a page every few seconds - so far they still seem pretty harmless (although annoying) * bots that hit your server at full speed over several concurrent connections (usually using Scrapy) - those a…
-
(Quote) Some people do care. And some people also care about Reverse DNS (for IPv4 and IPv6). Also, any ports blocked? Any test IPs (IPv4/IPv6)?
-
Actually, I have now added an OpenBSD menu entry in grub (with that chainloader (hd0,msdos3)+1 in /etc/grub.d/40_custom) and set grub to boot that by default (in /etc/default/grub)
-
(Quote) In grub, press c and then chainloader (hd0,msdos3)+1boot Edit: There should be a way to add it to the grub menu (maybe even just an update-grub in Debian would do that?)
-
Just did the reboot to OpenBSD: (Image)
-
(Quote) Sorry, didn't get around to properly adding OpenBSD to grub, but I did mention some time ago how to boot OpenBSD: (Quote)
-
(Quote) I am busy with other things this week. At some point I want to re-run tilemaker to see if it crashes the server again under OpenBSD (but that can also be done under OpenBSD-current).
-
FreeBSD 14.3 has been released.
-
(Quote) Please read the discussions starting with https://lowendspirit.com/discussion/comment/198134/#Comment_198134 - you seem to be suggesting something very similar here.
-
(Quote) Maybe I need that as well: https://github.com/systemed/tilemaker/blob/master/get-coastline.sh
-
The generated mbtiles file for Europe seems to be fine - map of Europe
-
Oops, so I let it run overnight, as everything seemed to be fine. And this morning the server didn't respond with the console showing scsi_xfer pool exhausted!. Rebooted now. Edit: dmesg (and in /var/log/messages) there also is: Jun 4 01:05:…
-
I have changed my login class to staff using chpass - see /etc/login.conf: ## Staff have fewer restrictions and can login even when nologins are set.#staff:\ :datasize-cur=1536M:\ :datasize-max=infinity:\ :maxproc-max=512:\ …
-
(Quote) Not sure a debugger will really help. Maybe it's just a configuration setting on OpenBSD that can be adjusted. Maybe just one of the ulimit settings? hlcs$ ulimit -atime(cpu-seconds) unlimitedfile(blocks) unlimitedcoredump(b…
-
Tried to use tilemaker on Europe, but this doesn't seem to work on OpenBSD: Store size 24G | Block 445856/445929 libc++abi: terminating due to uncaught exception of type std::bad_alloc: std::bad_allocAbort trap (core dumped) I did give it a …
-
(Quote) Got the SSL certificate created with acme-client - seems to be very similar in spirit to acme-tiny
-
(Quote) Which provider acts on that? Have you asked that provider to explain the abuse report (if they act on it, they must have understood it). Never heard of an ENTRO protocol either.
-
(Quote) That's actually this one - it's based on my socket abstractions for epoll/kevent. (Quote) The acme-client is from OpenBSD: https://man.openbsd.org/acme-client.1 (still haven't looked at it yet) For now I am serving a map of …
-
(Quote) But that's the shell for root, not tom (the /etc/passwd entry for tom does show /bin/sh) (Quote) The 6995 p2 Ip 0:00.01 -ksh (ksh) one is from my tmux session that's running fcgisrv (just trying the bundled httpd - it'…
-
The server is now running OpenBSD. During installation I chose network autoconfig for both IPv4 and IPv6 - only IPv4 seems to work with autoconfig (DHCP), so I have now statically configured the IPv6 address (and IPv6 default route) in /etc/hostname…
-
(Quote) I think we can move to OpenBSD for some time then. The way it's currently set up is that if it's running OpenBSD, the ssh daemon is listening on a different port (Linux ssh port + 1), but I have copied all the root authorized ssh k…
-
Tried booting a NetBSD HEAD kernel, but doesn't seem to make a difference compared to 10.1. Replaced FreeBSD again with OpenBSD (installed 7.6 via netboot.xyz, and then upgraded to 7.7). But booted into Debian trixie again now.
-
Managed to install FreeBSD now (via netboot.xyz) But now back to Debian trixie. Maybe I should also try OpenBSD, or probably NetBSD HEAD...
-
Tried installing NetBSD, but didn't really get that far. Making some space available went according to plan: * resizing the physical volume: pvresize /dev/nvme0n1p5 --setphysicalvolumesize=500G (just use a conservative guess, so we don't…
-
Just wanted to quickly try the FreeBSD image on my @linveo VPS, but it failed to set up networking. Anyway, then tried my NetBSD images, and they also failed to set up networking... :o Ok, had a look at the config data, and it looks like with one …
-
(Quote) Right, but using the provider provided template will hit you later (most likely at the most inconvenient time): when something breaks (probably because you are upgrading to a new version) and you have to figure out why, and then you have to …
-
(Quote) Do people keep the password set by the panel during installation (and/or set the root password through the panel)? Is this ever a good idea? Or if you are using the VPS for something important - shouldn't you install the VPS from scrat…
-
(Quote) Sure. I was actually already wondering where it went.
-
(Quote) I am now thinking of trying to install NetBSD in some of the remaining disk space, so we could dual-boot either Linux or NetBSD (I am kind of curious how the tilemaker stuff I was trying earlier would work on NetBSD compared to Linux). If t…
-
(Quote) My image already has the EFI system partition set up (as long as you have a similar set up, it should work). # gpt show ld0 start size index contents 0 1 PMBR 1 1 Pri GPT header …
-
Just a quick note: in the @linveo VirtFusion control panel you can now set the boot mode to UEFI, and at last the NetBSD image also works with that boot mode.
-
(Quote) Just run your own primary and let HE sync from there.
-
The server has been upgraded to Debian trixie now. @Not_Oles @babywhale The upgrade went fairly well; initially, I thought it was almost boring, but then after rebooting, ssh took a long time (a few minutes) to become available again. So I did pani…
-
Just updated to Debian 12.11, but will soon move the server to Debian trixie.
-
(Quote) Complain to those mail servers that are sending bounced spam mails (and maybe block them if they don't fix it) - those mail severs are part of the problem by enabling that abuse and need to be fixed.
-
A mail server sending bounces is unlikely to care about your DMARC records - so I wouldn't expect this to change anything.
-
(Quote) I'll then plan to do the upgrade to Debian trixie (likely) next weekend (mainly just to test the upgrade), unless anyone is opposed to that. We can then still move to another OS a bit later.
-
@caasify it would really help if the links would actually link to the specific product being described.
-
(Quote) Can you show the corresponding tcpdump for that? (and then also the tcpdump for the wireguard traffic) And then compare that with the tcpdump for the non-wireguarded ssh connection. And then you can do some ping tests between the nodes wit…
-
(Quote) mss 1460 is asking for trouble - why isn't it lower? (shouldn't it be something like 1380 with the default wireguard MTU of 1420?) To me it looks like an MTU problem. You did say "Adjusting MTU didn't work." - how di…
-
Do a tcpdump on both sides on the wireguard interfaces for the ssh traffic, and then maybe also do a tcpdump on both sides on the wireguard traffic (and match up the packets each time).
-
Can you clarify "fair use"?