Force reboot of a remote Linux machine Rumi, June 6, 2019 To force the kernel to reboot the system we will be making use of the magic SysRq key. The magic_SysRq_key provides a means to send low level instructions directly to the kernel via the /proc virtual file system. To enable the use of the magic SysRq option type the following… Continue Reading
Add a Static Route on CentOS Rumi, May 30, 2019 To add a temporary route: ip route add 172.16.5.0/24 via 10.0.0.101 dev eth0 To make it persist system or network settings restart, create a route-ifname file for an interface through which the subnet is accessed, in this case eth0: nano /etc/sysconfig/network-scripts/route-eth0 Add the line with the network settings for the other subnet:… Continue Reading
Set Hostname in Centos 7 Rumi, May 11, 2019 CentOS 7 only allows Fully Qualified Domain Names (FQDN’s). Acceptable values include lower-case letters a to z, numbers 0 to 9, the period, and the hyphen, and between 2 and 63 characters. At the console, type: hostnamectl set-hostname my.new-hostname.server NOTE: Replace my.new-hostname.server with your chosen hostname. Check the Hostname hostnamectl Continue Reading
SOLVED Zimbra 8.6 HTTP ERROR 404 Problem accessing /public/error.jsp. Reason: /public/error.jsp Rumi, May 10, 2019 Do a quick search under the usual jetty folders: find /opt/zimbra/jetty/ -type f -name *jsp -mtime -30 If you find files like: /opt/zimbra/jetty/webapps/zimbra/js/zimbra/csfe/XZimbra.jsp /opt/zimbra/jetty/webapps/zimbra/public/Ajax.jsp you’re actually hacked. Unlike the previous “zmcat” and “dblaunchs” that actually exploit the vuln and load some sh*t this looks like a bad childish attack. It… Continue Reading
SOLVED Debian Wheezy Letsencrypt error /opt/eff.org/certbot/venv/bin/python: No module named pip.__main__; ‘pip’ is a package and cannot be directly executed Rumi, May 10, 2019 My case and solution: Debian 7.11 wheezy python2.7 python-pip NOT installed My steps: #ln -fs /usr/lib/python2.7/plat-x86_64-linux-gnu/_sysconfigdata_nd.py /usr/lib/python2.7/ #wget https://raw.githubusercontent.com/certbot/certbot/75499277be6699fd5a9b884837546391950a3ec9/certbot-auto #chmod +x ./certbot-auto #certbot-auto renew –no-self-upgrade it download some files and works fine. Src: https://github.com/certbot/certbot/issues/6824 Continue Reading
Fixing Rainloop Can’t get message list error Rumi, April 29, 2019 For large mailbox when you have some mailbox having more than 100k mails in inbox, for those account you are getting error “Can’t get message list”. Here I got my fix, however can’t guarantee it works for you as well. My Rainloop version is 1.11.3. Following settings might help to… Continue Reading
Installing a Comodo SSL on Zimbra using CLI Rumi, April 14, 2019April 14, 2019 1. Get the bundle from Comodo in crt format, or sometimes like a zip file. 2. Place the bundle on your Zimbra mailbox server. You should receive, or download, the next files: AddTrustExternalCARoot.crt COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt my_domain_com.crt or since comodo is acquired by Sectigo, the updated zip might appear as below: Continue Reading
Setup a Site to Site IPsec VPN With Strongswan and PreShared Key Authentication Rumi, March 25, 2019March 25, 2019 Today we will setup a Site to Site ipsec VPN with Strongswan, which will be configured with PreShared Key Authentication. After our tunnels are established, we will be able to reach the private ips over the vpn tunnels. Get the Dependencies: Update your repository indexes and install strongswan: $ apt… Continue Reading
Zimbra authentication without domain Rumi, March 20, 2019 In the admin interface go to Global Settings -> General Information -> Default domain and enter the name of your domain. Users in that domain can now login without the @domain part. Continue Reading
Endian IP Blocking Firewall Rule Rumi, March 14, 2019 You can make a general IP ban list. You need to go to Port forwarding / Destination NAT Create a new rule Click on the advanced mode Incoming IP: Type: Zone/VPN/Upllink. Select Uplink main – IP:All known. Incoming service port, Service: Any, Port: Any. In the Translate To section set… Continue Reading