Search results

  1. S

    How to follow cipher sequence for mail?

    Don't know anymore. You can compare them with your own.
  2. S

    How to follow cipher sequence for mail?

    Both a 100% score. No issues here. What's the domainname you're trying? If you're using tlsa, there's a bug in the ../scripts/tlsa.sh at line 168 where it needs another dot (.) after the domainname to pass the internet.nl dane/tlsa check
  3. S

    How to follow cipher sequence for mail?

    I'm using DA and get a perfect 100% score on website and email, using these ciphers...
  4. S

    Solved FYI: Missing dot in tlsa.sh

    In the tlsa.sh script a dot is missing in the generation of the _25._tcp.mail.domain.com record in the "." check at line 168 HOST_TLSA="_25._tcp.${DOMAIN}" should be HOST_TLSA="_25._tcp.${DOMAIN}."
  5. S

    php_fpm cgroups

    A systemctl set-property user-1029.slice CPUQuota=5% results in the first image, a systemctl set-property user-1029.slice CPUQuota=25% in the second. So it does work, but a php patch is the way to go to limit the number of active php-fpm pools.
  6. S

    php_fpm cgroups

    It's not the only thing I did. See the rest of the thread and yes, it works. The example in the post is my first 'what-if' thought, remember. My first solution was to run a php-fpm for each user with their pid placed in the cgroup using the systemd start. I've made a '[email protected]' (Notice...
  7. S

    php_fpm cgroups

    I've added cgroups a few months ago already to my da servers and I have pretty much the same patch. My early 'what-if' is here: https://forum.directadmin.com/threads/tstemd-cgroups-cpu-ram-io-tasks-made-easy.62353/page-2#post-324546
  8. S

    php_fpm cgroups

    Ah, I missed that. It's pretty much the same as my own patch. Good to know we're on the same page ;)
  9. S

    php_fpm cgroups

    First of all I'm happy to see DA has made a first step to integrate cgroups in the fpm_children.c function like I mentioned a while ago, but is there any documentation about this or is it supposed to be part of the payed extension? @scriptkitty
  10. S

    How can I combine multiple IP pools from different locations

    Actually, this has nothing to do with DirectAdmin but with your infra and network. That's why you find little about it on this forum. But Google is your friend https://serverfault.com/questions/441721/ftp-through-haproxy
  11. S

    How can I combine multiple IP pools from different locations

    Don't add the ip in da. Just use the server's ip in the da-box. The only other place where you need the DA box ip is in the backend server section of you haproxy config. There are a lot of good haproxy tutorials around. domain.com -> resolves to 1.1.1.10 -> is routed bij your hostingprovider to...
  12. S

    How can I combine multiple IP pools from different locations

    Still, if you have multiple blocks, you already have your gateways setup. Just install haproxy on the vps and use the da-server as a backend server.
  13. S

    How can I combine multiple IP pools from different locations

    If you have your own /24 network then your hostingproviders will route anything for that /24 to e.g. your 1.1.1.1 gateway. There you'll forward the traffic to the x.x.x.x with your DA installation. On your DA setup you can add all your sites with the same ip. I think this is to setup a cheap...
  14. S

    [Security] sudo - Privilege escalation via command line argument parsing - (CVE-2021-3156)

    Well, never assume anything. But it's your own server so you should know it best ;)
  15. S

    [Security] sudo - Privilege escalation via command line argument parsing - (CVE-2021-3156)

    sudo en su are different tools. 'su' is simply to switch between users and 'sudo' is to execute a command as a different user.
  16. S

    [Security] sudo - Privilege escalation via command line argument parsing - (CVE-2021-3156)

    In case you have no update available or your os is a bit older: # yum -y install git # cd /opt # git clone https://github.com/sudo-project/sudo.git # cd sudo # ./configure --prefix=/usr # make # make install test with: sudoedit -s '\' `perl -e 'print "A" x 65536'` A 'usage' message is ok, a...
  17. S

    Reseller overuse quota, and still can create new files and users?

    And check the soft vs hard limit and grace period (7 days by default)
  18. S

    Reseller overuse quota, and still can create new files and users?

    Do you have quotas enable on the partition? https://help.directadmin.com/item.php?id=557
  19. S

    Solved Load Balancing LVM Drives

    Correct. You'll end up with 2 raid arrays in raid 1 taking care of the redundancy and the lvm stripe (-i 2) to possible duplicate the iops of a single array or an unstriped LV. But keep in mind that blocksizes and type of access will ultimately determine the effectiveness of the load balancing.
Back
Top