Skip to main content

Posts

security - SSL Subject Alternative Name and Man in the Middle attacks

My company "ourcompany" owns a 2nd level DNS domain name: ourcompany.org . We currently use this domain, as well as www.ourcompany.org and feature1.ourcompany.org , and have an SSL certificate generated for both these 3rd level domains. Then we subscribed to a third party hosted service, hosted at ourcompany.thirdparty.org . They handle SSL and have a certificate whose subject is thirdparty.org and have the Subject Alternative Name *.thirdparty.org . This 3rd party company also provides a functionality to add a custom domain. So we added a CNAME record in our DNS configuration, and now we have feature2.ourcompany.org pointing to ourcompany.thirdparty.org . Obviously at this point SSL is not working when accessing feature2.ourcompany.org . Then the 3rd party company also asked us to ad TXT DNS entries to prove we are owners of the domain, and they were somehow able to update their SSL certificate and add the following Subject Alternative Names: ourcompany.org and *.ourcomp...

dns zone - Setup multiple VPS with single domain name and two set of nameservers (glue records)

I am stuck in a bit complicated situation(complicated for me, might not be for you). What I have: I have 2 virtual private servers on two different IPs eg. 192.0.0.1, 192.0.0.2(let's name these vps1 and vps2) and one domain name eg. foo.com. What I want to produce: I want to host multiple websites on these two vps eg. on vps1, I want to host one-bar.com, two-bar.com and, on vps2, I want to host three-bar.com, four-bar.com. What have I done: I have created 4 glue records with my registrar of foo.com ie. ns1.foo.com, n2.foo.com, ns3.foo.com, ns4.foo.com, ns1.foo.com and n2.foo.com resolve to IP address of vps1 (192.0.0.1) ns2.foo.com and n3.foo.com resolve to IP address of vps2 (192.0.0.2) I updated, nameservers for foo.com, one-bar.com and two-bar.com to ns1.foo.com and n2.foo.com. and, nameservers for three-bar.com and four-bar.com to ns3.foo.com and n4.foo.com. I have installed webmin on both vps to manage websites and dns, This is stripped down copy of my zone files, vps1 and dom...

domain name system - Windows Server 2008 using wrong IP address in IIS7

I have a Windows Server 2008 box with two static IP addresses (192.168.xxx.120 and 192.168.xxx.118) running IIS7 thay hosts ~30 websites. The DNS server on the network is configured to point website traffic to 192.168.xxx.120. Public DNS resolution is done outside the building by a number of third parties. In the web logs I've noticed that the actual logged address is 192.168.xxx.118 ie not the one pointed to by the DNS. What's going on here, and how can I make the websites use the address pointed to by the DNS records? The correct IP address has become important to me for SSL certificate resolution. Crispin EDIT: I aplolgise because I initially wrote Windows Server 2003, but that was wrong, it's Windows Server 2008. I have both on my network. Answer Sounds like DNS doesn't point where you think it does. That sounds vaguely confirmed by the behaviour you describe when you bind the site to a specific IP. If it's just one group of clients, eg, external ...

Remove or Hide Exim version

Have looked around the Internet and at ServerFault the similar question has no solution: Remove Exim version number Neither received_header_text in options config or smtp_banner is working. Seems a receiver detect Exim version in another way and don't care about my header that I specifying. Any ideas to change information in Received header for free mailbox providers?

ip address - Why is ARIN (etc.) allocating such large blocks of IPv6 addresses?

The whole issue of IPv4 depletion and waste seems to be finally getting behind us with the (somewhat) increased deployment of IPv6. The sole purpose of IPv6 was to solve the issue of IPv4 address space running out. If that is the case then why are governing organisations allocating such large blocks of v6 addresses that are purely and utterly overkill and an obvious waste? Is there logical reasoning behind the allocations or is it more of a case of a "I'm rich, Lets share them all around!" sort of thing? For example, I was recently allocated a /48 block of v6 addresses with a single server. That's a staggering 1,208,925,819,614,629,174,706,176 addresses for my single server. I doubt the kernel would let me allocate that many addresses to an interface and I doubt any available NIC would support even a 10000th of them. Why are IPv6 addresses being handed out in such large blocks? Answer The main reason is that stateless address autoconfiguration as per RF...

SMTP server problem

Our requirement is to send weekly newsletters to our website customers. For which we wanted to have local hosted SMTP server in our office. We are not using SMTP server provided by website hosting provider, as we wanted to reduce the network traffic and avoid IP blocking due to bulk mails. We are sending newsletters on weekly basis from our local SMTP server. But due to some reasons, some emails are going to spam and some are not reaching to customers and sometimes there are bounce messages to follow bulk email guidelines (mainly from Gmail). Can you please suggest me, how to achieve my problem. I also wanted to know what type of technology generally Linkedin or banks uses to send notifications emails to all its customers. When they send bulk emails, they will always reach inbox with out any problem. I want the same solution to implement for my website. Please suggest me. Thank you very much in advance.

How can I tell what user account is being used by a service to access a network share on a Windows 2008 server?

I've got a third-party app/service running on a Windows 2003 SP2 server that is trying to fetch something from a network share on Windows 2008 box. Both boxes are members of an AD domain. For some reason, the app is complaining about having insufficient permissions to read/write to the store. The app itself doesn't have any special options for acting on the authority of another user account. It just asks for a UNC path. The service is running with a "log on as" setting of Local System account. I'd like to confirm what account it's using when trying to communicate with the network share. Conversely, I'd also like more details on if/why it's being rejected by the Windows 2008 network share. Are there server-side logs on 2008 that could tell me exactly why a connection attempt to a share was rejected? Answer The security event-log on the 2008 server should record the denied login attempt, which should also include whatever name it attem...

linux - How do you read load averages? (eg: Load Averages: 0.60 0.60 0.55)

My hosting company provides "Load Average" stats when I login. There is no link to more information about them, and no explanation as to what they mean. I'm guessing they are a percentage, but I have no clue why there are three numbers, or what the percentage is actually out of (processor, memory, bandwidth, combination?), and is that this instant or over time? Is this a standard statistic that I should know about? What are high / low / normal numbers? Perhaps someone can shed some light on this for me. Examples: Load Averages: 0.60 0.60 0.55 Answer The three numbers represent the number of processes, on average, that are ready to run but are blocked, over the last one, five, and fifteen minutes, respectively. https://secure.wikimedia.org/wikipedia/en/wiki/Load_average It varies very slightly from one unix-like OS to the next (e.g., different criteria for "waiting"), but they all work basically the same way.

apache 2.2 - Upgrading from php 5.3 to php 5.4 with Macport

PHP5.4 has been available for sometime now and Macport recently caught up with the release of port php54 but the process of upgrading is not as clear as possible. Even worst for those who are new to maintaining multiple versions of PHP on the same machine. I am keen on trying out some of the new features in PHP5.4 like traits, new array form etc but falling back on to php5.3 for other compatibility stuff. So i sudo port install php5+ (all the variants, apache2 etc) Then i tell it what PHP port to use as default sudo port select --set php php54 Check what version of PHP is active in the terminal using php -v outputs php 5.4.3. But i seem to be having issues with choosing the right non cli version as in the version of the module run by apache etc is still php5.3.12. Do i have to change the reference to the libphp5 in apache httpd.conf? Any advice on the right workflow for switching between php version on macport greatly appreciated! Answer I uninstalled and reinstalled ever...

apache2 - why do we have to use ServerName for our websites in apache?

I would like to understand the need for ServerName in apache. Lets say that I have a web site with IP 12.13.14.15. In DNS zone I call it example.com and refer the Ip to it with an A record. Why isn't this enough? It tells the www that whenever anyone writes example.com, it needs to go to 12.13.14.15 ip. So why do I need to set it also in apache with NameServer attribute? Answer You don't need to use it, but it allows you to have multiple virtual hosts with different server names to listen on the same IP address. In the early days of the web, before HTTP/1.1 was introduced, you only could host one domain on any IP address, as there was no way to differentiate the domains. HTTP/1.1 added the Host header that told the server which domain the client wants to talk to and the ServerName tells Apache for which domains the current virtual host should answer. http://httpd.apache.org/docs/2.2/en/vhosts/name-based.html