Search found 162 matches

by hawkmage
2017/09/08 01:55:07
Forum: CentOS 7 - General Support
Topic: [SOLVED] IP grabbing ssl Certificate
Replies: 12
Views: 5757

Re: IP grabbing ssl Certificate

What do you mean by:
My Issue is when I search for my servers Info itself
by hawkmage
2017/09/06 23:04:10
Forum: CentOS 7 - General Support
Topic: [SOLVED] IP grabbing ssl Certificate
Replies: 12
Views: 5757

Re: IP grabbing ssl Certificate

In general only what is the the CN (Common Name) of the certificates certificate as well as an items in the SAN (Subject Alternative Name) of the certificate are what a client will accept as being a valid host to connect to. Most clients do not do reverse DNS lookup to avoid poisoned DNS entry attac...
by hawkmage
2014/05/02 02:20:42
Forum: CentOS 6 - General Support
Topic: heartbleed openssl bug, need 1.0.1g openssl version
Replies: 52
Views: 111387

Re: heartbleed openssl bug, need 1.0.1g openssl version

I support over 100 linux server running either RHEL and CentOS. We do build out own OpenSSL and various services for our needs. This is a full time job to mange the patching and versions releases. Unless you are willing and able to devote a lot of time to doing this you are far better off leaving it...
by hawkmage
2014/02/06 18:09:36
Forum: CentOS 6 - General Support
Topic: 6.5 has very old versions of servers
Replies: 9
Views: 3856

Re: 6.5 has very old versions of servers

I work on 120+ linux servers maintaing environments for Web and Java applications. We run a mixture of RedHat, CentOS and Oracle Linux, mainly CentOS but RedHat or Oracle Linux only if required. These were chosen for their stability and vender certification for their applications. When dealing with ...
by hawkmage
2014/01/16 04:00:19
Forum: CentOS 6 - General Support
Topic: Problem with sudo in 6.5 (final)
Replies: 7
Views: 4239

Re: Problem with sudo in 6.5 (final)

I deal with many CentoOS servers that have been updated to 6.5 and we rely heavily on sudo for developers to access application UIDs and we have not see any issues.
by hawkmage
2014/01/16 03:56:23
Forum: CentOS 6 - Networking Support
Topic: BIND Routing Tables
Replies: 3
Views: 1403

Re: BIND Routing Tables

All BIND does is resolve a name to an IP address or IP address to a name. There is no routeing involved.

If you are hosting multiple domains in BIND you need to have individual zone files for each domain you are going to resolve for.
by hawkmage
2014/01/16 03:41:15
Forum: CentOS 5 - Server Support
Topic: Question about LDAP and DNS
Replies: 2
Views: 3306

Re: Question about LDAP and DNS

The "dc=example,dc=com" is normally used to define the LDAP search base not the host to bind to and doesn't require DNS entry.

Is there a host entry on the phone configuration for LDAP user lookup? Or does it look for a _ldap._tcp SRV entry in DNS?
by hawkmage
2013/12/27 02:36:48
Forum: CentOS 6 - Security Support
Topic: Installed SSL Missing .pem /Intermediate/chain certificate
Replies: 3
Views: 6176

Re: Installed SSL Missing .pem /Intermediate/chain certifica

This kind of error is usually caused by the server not providing the entire CA chain to a client. Most browser trust stores have the CA Root certificates of the public CAs. When a browser connects to an SSL site the the server will send the host certificate as well as the whole CA chain and if the r...
by hawkmage
2013/11/30 03:40:23
Forum: CentOS 6 - Networking Support
Topic: Firewall box setup in front of sonicwall
Replies: 8
Views: 3784

Re: Firewall box setup in front of sonicwall

As someone who is new to linux it is probably not a good thing to try and setup your own firewall. Hardened appliances like the SonicWall are inherently more secure that a general purpose computer. If you still want to move away from the SonicWall I would suggest using something like pfSense instead...
by hawkmage
2013/11/30 03:26:26
Forum: CentOS 6 - Networking Support
Topic: why my dhcp server assign ip address on eth0 and eth1 both
Replies: 1
Views: 1614

Re: why my dhcp server assign ip address on eth0 and eth1 bo

You need to bind the dhcpd service to the eth1 interface only. You do this in /etc/sysconfig/dhcpd by adding the name of the interface to the list of DHCPDARGS:
DHCPDARGS=eth1