Most Popular

1500 questions
82
votes
4 answers

nginx real_ip_header and X-Forwarded-For seems wrong

The wikipedia description of the HTTP header X-Forwarded-For is: X-Forwarded-For: client1, proxy1, proxy2, ... The nginx documentation for the directive real_ip_header reads, in part: This directive sets the name of the header used for…
Kirk Woll
  • 923
  • 1
  • 7
  • 7
82
votes
2 answers

How to configure a Windows machine to allow file sharing with a DNS alias

What process is necessary to configure a Windows environment to allow me to use DNS CNAME to reference servers? I want to do this so that I can name my servers something like SRV001, but still have \\file point to that server, so when SRV002…
82
votes
7 answers

OpenVPN vs. IPsec - Pros and cons, what to use?

Interestingly I have not found any good search results when searching for "OpenVPN vs IPsec". So here's my question: I need to set up a private LAN over an untrusted network. And as far as I know, both approaches seem to be valid. But I do not know…
jens
  • 1,001
82
votes
10 answers

How to check the physical status of an ethernet port in Linux?

I want to check if a specified ethX is physically up or down. How do I do that with the command line?
Jader Dias
  • 4,745
82
votes
11 answers

Dealing with HTTP w00tw00t attacks

I have a server with apache and I recently installed mod_security2 because I get attacked a lot by this: My apache version is apache v2.2.3 and I use mod_security2.c This were the entries from the error log: [Wed Mar 24 02:35:41 2010] [error]…
Saif Bechan
  • 11,000
81
votes
5 answers

Does each server behind a load balancer need their own SSL certificate?

If you have 5 web servers behind a load balancer (such as haproxy) and they are serving up content for the same domain, do you need SSL certificates for all the servers, or can you use the same certificate on each server? I know you can put all SSL…
81
votes
8 answers

Copy directory structure intact to AWS S3 bucket

I want to use the AWS S3 cli to copy a full directory structure to an S3 bucket. So far, everything I've tried copies the files to the bucket, but the directory structure is collapsed. (to say it another way, each file is copied into the root…
agentv
  • 1,000
81
votes
5 answers

Nginx redirect one path to another

I'm sure this has been asked before, but I can't find a solution that works. A website has switched CMS services, but has the same domain, how do I set up an nginx rewrite for a single page? E.g. Old…
SteveEdson
  • 1,549
  • 3
  • 14
  • 23
81
votes
10 answers

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not match ‘blogname.com’ I think lftp is checking the…
patrick
  • 912
81
votes
6 answers

How to scan local network for SSH-able computers?

I am often on one computer in my house and I would like to SSH to another one, but often don't know the IP address of the one I want to connect to. Is there a way, from the command line, to scan the local network so I can find the computer I want to…
Andrew
  • 3,573
81
votes
2 answers

what does "***" mean when traceroute

this is the result of my traceroute traceroute 211.140.5.120 1 141.1.31.2 (111.1.31.2) 0.397 ms 0.380 ms 0.366 ms 2 141.1.28.38 (111.1.28.38) 3.999 ms 3.971 ms 3.982 ms 3 142.11.124.193 (112.11.124.133) 1.315 ms 1.533 ms 1.455 ms 4 …
larry
  • 4,107
81
votes
5 answers

Best location to keep SSL certificates and private keys on Ubuntu servers?

On Ubuntu, it looks like the best place for a private key used to sign a certificate (for use by nginx) is in /etc/ssl/private/ This answer adds that the certificate should go in /etc/ssl/certs/ but that seems like an unsafe place. Do .crt files…
Adam Nelson
  • 1,677
81
votes
3 answers

Install openssl-dev on Ubuntu server

In order to compile NGinx in need to install openssl and openssl-dev (I'am following a book guide). So i'am doing this : sudo apt-get install openssl openssl-dev But i get an error telling me that it's impossible to find openssl-dev. Also after…
OXMO456
  • 913
81
votes
9 answers

How to restart Nginx on Mac OS X?

I just installed Nginx on Mac OS X (thanks http://www.kevinworthington.com/nginx-mac-os-snow-leopard-2-minutes/), but how do I restart Nginx on Mac OS X? Thanks!
80
votes
8 answers

AWS RDS connection limits

RDS server come up with 40 connection max, as in the following documentation I am using Magento 1.9, and at some points, i reach the max number then website is out of service. Do you have any recommended way to solve this issue? From my…