Ok, one more question on nameserver security. So I was reading this post and it recommended not setting a defined outgoing port for your nameserver due to the Kaminsky vulnerability.What is the proper way to lock down a nameserver, but avoid the vulnerability of only allowing incoming and outgoing requests on port 53
View 3 Replies
I know that Ubuntu doesn't need antivirus, and a firewall isn't imperative.
I would, however, like to know what I could do to make my Lucid box a bit more secure, as I'm using it as my work system.
I installed DansGuardian. In order for it to work I set the system wide proxy. However it is really easy to get around DansGuardian by going to preference proxy setting. How do I password protect this setting so it requires a password to change proxy setting? Preferably a different password than the normal sudo password if possible. If not I at least want the sudo password protecting it! I run multiple browsers so doing it via the system rather than the browser made the most since.
View 5 Replies View RelatedI need a file locking software or atleast any command for file locking
View 1 Replies View RelatedI have a 500 gb external hard drive with tons of personal files on it. Other people at home just grab my hard drive whenever they need to transfer files. I feel so disrespected. I also want to protect myself from actually losing my hard drive to a stranger who will compromise my data.
I'm thinking of encrypting, but I'm currently too busy to explore (the options seem to be hard to use) and it seems to be too much to encrypt a 500gb hard drive
What are my options in "locking" my hard drive. I don't mind if it's going to be readable only on Ubuntu. That could actually be a plus
I run a compute cluster with only a few users. Occasionally a user will accidently run a job on the master node that runs out RAM/swaps then hanges up for a while.In /etc/security/limits.conf I have set memlock to 7.5GB (master has 8GB RAM) and maybe that is what lets the machine come back rather than hanging completely? Is this the right setting to physocally limit a single user from asking for more RAM than the system has and bringing down the system? Should I set this to 2GB or so or is there something else I can do??
View 4 Replies View RelatedA server at which I have an account has changed things. The new /etc/resolv.conf fails to resolve a lot of addresses. I can use dig @ with OpenDNS and resolve them successfully, but how do I get apps, such as sendmail, to use a nameserver I specify? It'd be nice if a user could have his own additions to resolv.conf, but I don't see that in the docs, or a way to get sendmail to use a specified nameserver.
View 2 Replies View Relatedi've just setup a vps server with 11.4 everything is almost look fine now, but i couldn't setup a nameserver, i've searched on the internet about that but directories is different in suse. anyway i registered a domain on onlinenic yesterday and i want to use this domain as a nameserver and my hostname. how can i do that ? and do i need to have at least 2 ip for that ?
View 7 Replies View RelatedWhen I edit /etc/resolv.conf, it is overwritten right away with the old configuration. How do I really change the nameserver on Ubuntu Server 9.10?
View 1 Replies View RelatedAccording to the man page, host ought to query "the server or servers listed in /etc/resolv.conf," but it only uses the first entry in that file:
thefourthtower:$cat /etc/resolv.conf
nameserver 8.8.8.8
nameserver 8.8.4.4
[code]....
I have a own firewall which is also acting as a nameserver for my own network. From Windows machines everything works perfectly i.e. I can access my computers / equipments with the defined names instead of ip-addresses. But not with Ubuntu machines! Below example taken from my Ubuntu machine.
[code]...
I have a domain name and I want to host it on my ISP.What my goal is is to have 2 nameservers:NS1.mydomain.com
NS2.mydomain.comI want to be able to put www.mydomain.com and have DNS do its thing. I want to use BIND to do this. This is a new realm for me, and i know exactly what I want to do, but I struggle putting it in words
i get this error whi trying to configure caching DNS namerver
[Code]....
I want to configure DNS Server on Fedora14. So I install caching-nameserver cause any template files.I can't install caching-nameserver on my Fedora14 by this command: [but i can do it on Fedora5]
View 4 Replies View RelatedI just switched ISPs from a local vendor to Wild Blue. All my Windows boxes adopted automatically. My Ubuntu 10.10 workstation can find no sites, period. My old resolv.conf said:
# Generated by NetworkManager
domain sdc.org (<- my old local ISP)
search sdc.org (<- my old local ISP)
nameserver 192.168.0.1 (<- correct IP V4 address for my router's front end)
This has not changed, and I guess my IP stack is searching for sdc.org domain addresses on WildBlue.net, which don't exist there. After many hours trying to speak with WildBlue Tech Support people, I've decided that domain search questions are beyond their ability to comprehend or discuss. If I could ascertain the domain(s) to search I'd just edit the silly file.
Has anyone else connected with Ubuntu 10.10 on WildBlue?
today i found out that my bind9 on debian 5 suddenly failed and it also consumed 100mb of RAM at most times.
nameserver daemon with smaller memory footprint to replace bind9.
As I understand it, /etc/resolv.conf is rewritten at boot time by NetworkManager (a script?)I have a problem in the order the nameserver entries are written by my system (F13). This is:
Code:
nameserver 192.168.1.1
nameserver xxx.233.0.4
[code]....
How can I have /etc/resolv.conf point to my router address as the nameserver nameserver 192.168.1.1
instead of picking up the ISP's DNS servers and using that as the nameserver entries? Reason being I have more than one ISP account, and when I change I do not want to have to remember to restart the networking service. because i often forget.
I have a small webserver running ubuntu server 10.4. It runs fine except after every reboot, I get DNS errors. I have to manually edit /etc/resolv.conf to add:
Code:
nameserver 192.168.1.1
The address of my internet gateway on my LAN. Obviously I am ignoring the warning in resolv.conf that this will be overwritten.
I tried installing gnome-desktop, which wiped out /etc/resolv.conf (and ultimately failed to install). A comment was left in resolv.conf saying "do not edit..". Where is the proper place to list nameservers in debian?
View 2 Replies View RelatedI'm trying to query the second nameserver on a local network to resolve local domain names to IP's.
Code:
$ ping ids.mydomain.loc
ping: unknown host mydomain.loc
[code]....
I use red hat Es 5.5 64 bit.. I find the item nameserver in resolv.conf cannnot be saved. Everytime ,reboot or restart the netwrok service . The data in resolv.conf will be removed and clear . I need to edit it again . I also try to add DNS1=XX.XX.XX.Xx in ifcfg-eth2 but the same problem. in it , the resolv.conf is still need to edit every network service restart . So, how to save the resolve.conf about nameserver forever ??
[root@vls etc]# cat resolv.conf
# Generated by NetworkManager
# No nameservers found; try putting DNS servers into your
# ifcfg files in /etc/sysconfig/network-scripts like so:
#
# DNS1=xxx.xxx.xxx.xxx
# DNS2=xxx.xxx.xxx.xxx
[Code]...
My configuration: CentOS in a VPS environment, I have 2 static IPs at my disposal.I'm having trouble setting up my nameservers. I've registered the nameservers with my registrar and supplied the GLUE records, however my registrar has not yet applied this information into the DNS zone, because my nameservers fail to generate a response on port 53.DNS check says the following about my nameserver address:Checking SOA records for domain. Domain server is not answering to UDP requests on port 53. Possible problems: A firewall is blocking port 53, server is down, server is not running software for handling dns requests.So the only two possibilities I see is that my port 53 is somehow blocked or not properly set to accept and send the correct traffic or that I've misconfigured BIND.
View 2 Replies View RelatedI just installed F10 from a Live download iso on a Sony VAIO laptop with an Intel PRO/Wireless LAN2100 3B Mini PCI Adapter. The linux driver is ipw2100 and functions without problems.
After the install I accepted the update downloads offer and downloaded somewhere around 170 updates. The kernel version is 2.6.27.19-170.2.35.fc10.i686.
I am using a Linksys WRT55AG as a DHCP server. Using NetworkManger it assigns IP addresses without incident.
My problem is that I can't get name resolution to function without manual intervention.
I can ping other wireless nodes on my network and the response to $ dig -q www.yahoo.com is: ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 30153
The /etc/resolv.conf file contains no entry for 'nameserver=' and if I manually edit /etc/resolv.conf, it is overwritten on reboot or restarting the NetworkManager service. I am aware of /etc/sysconfig/networking/profiles/default/resolv.conf.
Additionally, in the var/log/messages file I can see that NetworkManager makes links between /etc/resolv.conf and the default version.
However, after either rebooting or restarting the NetworkManager service, if I manually enter a DNS address 192.168.1.1 (my wireless router) under the DNS tab of the system-config-network 1.5.95 application. This address does not persist after either rebooting or restarting NetworkManager.
If I disable NetworkManager, I can't get the WRT55AG to assign the wilreless adapter an IP address.
So the bottom line and my question is what do I need to do in order to simply boot and have wireless connectivity?
To what file does system-config-network 1.5.95 write the DNS address entered from it's GUI?
This continues a thread started in the applications forum:mc hangs temporarily when network is downmc (Midnight Commander) hangs on my desktop but not on my laptop. When I compared desktop and laptop configurations, I found the following differences:
/etc/hosts files:
Code:
Laptop: 127.0.0.2 linux-4xt8.site, linux-4xt8
[code]....
does anyone know of a good site/book/guide to learn about linux web server administration?
and also how do you find the your own nameserver numbers? would that just be the IP of my web server?networking isn't my forte, but i do intend to learn with this project.
Like many others I'm running into some reverse lookup issues with SSH. Setup is as follows:
localnet setup
myserver - 192.168.0.x
myworkstation - 192.168.0.y
[Code].....
nslookup tests show that my reverse lookup is functioning correctly. However, if I use "myworkstation" to connect to myserver.mydomain.com using an external nameserver SSH says: "Address 84.162.xx.yy maps to myserver.mydomain.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!"
On myserver the /etc/hosts has the internal address for the server which seems the normal way to go to me. Changing this to the servers external address solves the issue.
Apparently a connection originating from myworkstation arrives from/with my external address, and when its reverse is checked by the server it apparently finds its own internal address for that name in /etc/hosts before doing a nameserver query and thus concludes that internaladdress <> externaladdress which gives the error.
Is there any way to have the server check external DNS before /etc/hosts? Another solution would probably be running an internal DNS, so myworkstation doesn't connect through the 'outside'.
How do I know the reply was from caching-nameserver, master nameserver or slave nameserver in BIND DNS.? Can I trace the nameserver that replied my dns query? Like I have a master nameserver, a slave nameserver and a caching nameserver in my network. Is it possible to know that which of these servers replied my dns query? Also can i trace back that replying server exactly?
View 3 Replies View RelatedI've recently installed F15 on my old thinkpad X41 to give it a go after sticking to ubuntu for quite a bunch of years now.
Somehow there seems to be a problem with the installation tho: the screen freezes up (as does the keyboard) after a while using it - not many programs open, a couple of workspaces enabled, no memory or CPU stress whatsoever - and all i'm left with is a moving mouse cursor. Ctrl + alt + F2 doesn't work and the only solution is to restart the laptop again.
Tried the fallback mode and same thing still happens, so maybe its not a graphic card issue.
My computer keep locking up when I try to open a new tab in Google Chrome. It locks up when I do other stuff too but it does not stay locked up. When it gets locked up from Chrome I have to fix it by doing Ctrl + Alt + Backspace. It only happens sometimes though. I can open new tabs sometimes without it locking up. I know it has something to do with my graphics driver (I have an ati). When it locks up I can't do anything and then like 10 seconds later I can move my mouse but that's it, everything else is still frozen. That's when I do Ctrl + Alt + Backspace. Here is what the messages log file says:
Quote:
Jun 22 17:47:31 hostname kernel: [12767.018056] radeon 0000:01:00.0: GPU lockup CP stall for more than 10000msec
Jun 22 17:47:31 hostname kernel: [12767.018058] ------------[ cut here ]------------
[Code].....
I changed the real host name of my computer to hostname.
