Most Popular

1500 questions
49
votes
8 answers

Are zipped EXE files harmless for Linux servers?

I ran a malware scanner on my site, and it marked a bunch of zipped EXE files as potential risk files (these files got uploaded by users). Since I'm able to uncompress the files on my Mac I assume these are real ZIP files and not just something like…
Xavin
  • 592
49
votes
2 answers

What does the at-sign "@" mean in nginx location blocks?

I've encountered a few questions and answers on here that use this syntax: location @default { # ... } location /somewhere { try_files $uri @default; } I've searched high and low on the Googles and I can't seem to find any documentation of…
ccnokes
  • 729
49
votes
3 answers

Recommended DNS SOA record TTL default?

We currently have our DNS SOA record set to the following for stackoverflow.com: primary name server = ns1.p19.dynect.net serial = 2009090909 refresh = 3600 (1 hour) retry = 600 (10 mins) expire = 604800 (7 days) default…
Geoff Dalgas
  • 2,516
  • 5
  • 31
  • 32
49
votes
5 answers

How to disable AAAA lookups?

... to compensate for broken DNS servers that are outside our control. Our problem: We deploy embedded devices that collect sensor data at various, mostly IPv4-only sites. Some sites have poorly maintained networks, e.g. misconfigured or otherwise…
49
votes
4 answers

Linux - How can I see what's waiting for disk IO

I have a server that has a really high load. Nothing is jumping out at me in terms of CPU usage, and it's not swapping. I think it's cause some processes are waiting for disk IO, and I want to see what's waiting. Is there any programme that'll show…
Amandasaurus
  • 32,281
  • 69
  • 194
  • 263
49
votes
5 answers

Redirect non-www requests to www on Amazon Route 53

I want to redirect all requests from example.com to www.example.com. Preferably, this should happen at DNS level. I tried using PTR records, but that simply fails, returning a 404. wwww.example.com is an ALIAS for an Elastic Load Balancer. What’s…
flavian
  • 645
49
votes
8 answers

Should I expose my Active Directory to the public Internet for remote users?

I have a client whose workforce is comprised entirely of remote employees using a mix of Apple and Windows 7 PCs/laptops. The users don't authenticate against a domain at the moment, but the organization would like to move in that direction for…
ewwhite
  • 198,150
49
votes
7 answers

If a Windows shop moves "everything" to the cloud, does it still need Active Directory?

Taking a spin off of this question: Do I really need MS Active Directory? in a new direction for 2014. Taking into account a basic Windows infrastructure: domain controllers Exchange 2007/2010/2013 Sharepoint SQL File Servers / Print Servers AD…
TheCleaner
  • 32,822
49
votes
4 answers

What's the maximum URL length in Tomcat?

And is it configurable? Can I set up Tomcat so that a URL with, say, 200K of query params goes through successfully to the contained servlet? Yes, I know one should use POST when you have lots of data; that's a less pleasant option in this…
Michael Gundlach
  • 1,291
  • 1
  • 9
  • 7
49
votes
4 answers

Can't get bower working - bower ESUDO Cannot be run with sudo

I get the following error when I run bower: bower ESUDO Cannot be run with sudo Thing is, I'm not running bower with sudo. The command I run is: bower install foo or bower search cats I am logged in as root to an Ubuntu 12.04 server but I am not…
49
votes
13 answers

How can an unauthenticated user access a windows share?

I have a directory shared on my computer, which is part of the domain. Is it possible to set up the share so that a user logged on to a different machine which is not part of the domain can access my share? From the machine not on the domain, I…
Jeremy
  • 923
49
votes
6 answers

Why does a hardware router perform better than a Linux router with better specs (RAM & CPU)?

I have a minimal CentOS 6.3, 64 bit acting as gateway with 4 NIC (1 Gbps), each bonded together one for public traffic and other for private, which performs NATing. It has 6 GB RAM and 4 logical cores. We have been using this for the past two years…
Blue Gene
  • 635
49
votes
7 answers

Default CA Cert Bundle Location

I need to add a .pem cert file to my default CA cert bundle but I don't know where the default CA Cert bundle is kept. I need to append my new .pem file to this default bundle. I'd rather do that than specify my own location using --capath cURL…
Slinky
  • 1,047
49
votes
8 answers

What are best practices for managing SSH keys in a team?

I work with small teams (<10) of developers and admins with the following characteristics: Most members of the team have >1 personal computer, most of which are portable Team members have access to 10-50 servers, usually with sudo I think this is…
49
votes
10 answers

Learning to compile things from source (on Unix/Linux/OSX)

While I install software from packages (MacPorts / apt-get) where-ever possible, I often find myself needing to compile packages from source. ./configure && make && sudo make install is usually enough, but sometimes it doesn't work - and when it…
Simon Willison
  • 655
  • 1
  • 7
  • 8