Sto provando a configurare Authentik.
Dicono sia intuitivo ma sono tre giorni che cerco di capire il ragionamento che c'è dietro....mah!!!
#SelfHosting #Authentik #SysadminProblems
#SysAdminProblems
Why is the WhoIs information for this spammy and abusive IP range showing that the abuse contact is wstelecom.us with a US admin address but the country is RU 🧐 #SysAdminProblems
Checking a CVE against an asset list is easy. Finding the physical location of the server named "Gandalf" that hasn't been rebooted in 4 years? That’s the hard part. 🧙♂️
We can't find the server for you, but we can help you understand the vulnerability faster.
cvedatabase.com
Why do the biggest vulnerabilities always seem to drop on a Friday afternoon?
Stay ahead of the weekend chaos. Monitor, plan and remediate the latest CVEs here: https://champ.ly/A5jYoSr1
I guess I f'd up when I installed my #rhel8 #vm to replace the #rhel7 one I had for myself at work. /boot couldn't install the latest kernel since it was too large. Even after deleting the only other kernel aside from the latest I was running off of, it was 19MB short.
Looking into it, the consensus was a lot of fearmongering about not touching it and just reinstall the OS. Yeesh. Sure, just do it again and get all my settings together again, no problem.
*DISCLAIMER*: Maybe don't do this unless you are willing to burn your system and start over from scratch (or better yet, reload your snapshot/backup you took before you did this, amirite?)
I just said "f it" and downloaded a #gparted live cd, popped it in the VM after adding 1GB (yeah, I know, overkill for /boot) to storage, then dragged that partition over that unallocated space. #vmware #rhel #linux #sysadmin #sysadminlife #sysadminproblems
Today in "big companies doing dumb shit": Yahoo Japan sent a rejection email to my server because an LY Corp server (the parent of Yahoo Japan) spoofed the MAIL FROM line and my domain sets a hard-fail in the SPF record.
THE WHOLE POINT OF A HARD FAIL IS TO SAY THAT IT'S NOT MY EMAIL AND YOU CAN THROW IT AWAY, YOU FREAKING IDIOTS!
I know of #DigitalOcean as a popular host with geeks. Are they a liability these days? Can they not keep up with the spammers and scammers? Or are they leasing to abusive web-scraping arseholes?
I feel like I shouldn't block them because it will impact legitimate access. But at the same time, they're showing up FAR too much in this load spike 🧐
My server was REALLY sluggish on Wednesday. Finally looking at the load logs and… yeah, load up at 5-15 on a quad-core Raspberry Pi, with transmitted data an order of magnitude higher than usual.
Looking into IPs now to find more bot host ranges to block. One of the top groups is LOTS of different IPs from Digital Ocean's 137.184.0.0/16 range 🧐
For the love of whatever, can #broadcom's damn upgrader for #vmware #vcsa not be so damn rigid? No reason any org would need to add a secondary NIC during the upgrade process so the new VCSA can reach the #esxi host the old one is on?!
I had to quit out of the installer after Stage 1 (standing up the new VCSA server) to manually add the 2nd NIC then manually configure the network files to recognize it as well as add the secondary network's DNS and our proxy before moving on to Stage 2.
Broadcom is awful and has made everything with licencing and pricing complete shite due to their unchecked greed, but from what I've heard and seen, the installer has always been kind of crap. At least we're safe from a another full version upgrade for a while, now (hopefully). #sysadmin #sysadminlife #sysadminproblems
After almost non-stop weekends of selling at art markets with @polarisu since April, on top of my full time sysadmin job, we have a day off. With the exception of some light chores (and some scheduled production patching for work this morning), I'm gonna finally have a lazy Sunday. Which is everyday for these guys. #sysadmin #sysadminlife #sysadminproblems #cats #catsofmastodon #blackcats #blackcatsofmastodon #everydayiscaturday
I guess it's cool that #microsoftteams allows you to use #bash style text in code block now, but it also lowered the character limit, so I can't do a quick share of any #linux terminal output to a SME now.
Even sharing a text file through it won't let them download it and the view option breaks the format.
So now, I have to drop it in a text file, then attach and send via e-mail.
I know in the grand scheme of things, it's not much more time and effort, but...wtf #microsoft?
Given my lack of personal time, the plan for now is to essentially kick the can down the road and air gap those two devices. Not like I have time to use either of those things that much these days anyways, between my day job and helping @polarisu with her art business on the weekends. As well as the 2x a month monthly patching and quarterly patching that is done on the weekends as well (often while helping at her pop up markets), lol. #windows10eol #endof10 #sysadmin #sysadminlife #sysadminproblems
Today, he decided to contribute to a internal wiki page by running across my keyboard again.
His contribution? "][=80o"
He's lucky it's his birthday, otherwise I would have...done what I always do. Just mildly exclaim "Mauuurrrryyyyy" then go about my business and keep coddling him. :blobcatshrug:
#cat #blackcat #catsofmastodon #blackcatsofmastodon #voidboy #sysadmin #sysadminlife #sysadminproblems #wfh #workingwithcats
Thank you, Maury, for running across my keyboard and pausing my upload to a jump server at work. #wfh #workingwithcats #blackcats #blackcat #catsofmastodon #blackcatsofmastodon #sysadmin #sysadminlife #sysadminproblems
I think I've worked out why my string matching in `iptables` hasn't been working.
When I do get it to log, it's reporting 64 byte packets. For packets that Wireshark says are 78 bytes. Because it's just reporting the IP frame size, not the full Ethernet frame size. And so my offsets have been out by an Ethernet header size that I assumed was in the packet calculations.
Because it's IP Tables, of course 😑
I've created a stripped-down template for hgweb so that I can still link to the latest version of files, but not any others 🙂
For example: https://dev.ibboard.co.uk/repos/other/Puppet/file/tip/modules/website/files/greatfirewallagainstchina.conf
#Mercurial #Apache2 #SpamBots #ScraperBots #SysAdminProblems
Deleted the database and recreated it from scratch (rather than updating it) and "page 599 is on free list with type 13", "PANIC: Invalid argument" and "Error string not specified yet" have all gone away. So apparently they mean "I don't like the existing database but can't handle it cleanly" 😐
From a user agent: "In_the_test_phase,_if_the_Thinkbot_brings_you_trouble,_please_block_its_IP_address._Thank_you."
How about you DON'T WRITE A FUCKING SHITTY SCRAPER THAT ABUSES WEBSITES AND THEN RUN IT FROM DOZENS OF IP ADDRESSES 😒
So, apparently "FallbackResource" is the cool and trendy new(ish) way to do "rewrite all missing URLs to this file, which will generate an error page".
Except… there's no way to write it to a _single_ file if you've got subdirectories? Even with "/index.php", it seems to look for that file _within_ the subdirectory 😐
Me: I wonder what caused that spike in server load a few days ago. I've mostly got rid of the abusive bots.
Me: *checks logs and counts IPs*
GoogleBot: Hi! Don't mind us doing TWO ORDERS OF MAGNITUDE more traffic than ANY other IP range!
Me: *checks specific logs*
Me: Oh look. It's crawling my Mercurial repos. Again. And ignoring the 300s crawl delay request. Because apparently Google don't honour that 🙄
Client Info
Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst