LinuxQuestions.org - Uncategorized

Uncategorized Entries with no category

Taken out by Duct Tape!

Posted 07-30-2015 at 05:31 PM by Habitual (Spock's Brain)

Every Week for the last half-year, we have had some kind of issue with ping/icmp-related zabbix checks. We couldn't nail it down.
Finally, in the end, I disabled ping checks via zabbix and (not-so-)silently declared icmp checks in zabbix as 'fluff'. Useless.

This has been ok up until this week. We hit our cap Hard and Fast on Wednesday morning.
It took out my zabbix and Kibana dashboards and caused another client's app portal to stop working.

We found...

Habitual

LQ Veteran

Posted in Uncategorized

Views 1765 Comments 2 Habitual is offline

Amazon query instances script using boto.ec2

Posted 06-05-2015 at 12:36 PM by Habitual (Spock's Brain)
Updated 06-24-2015 at 10:57 AM by Habitual

My very first Python script hatched into existence today, My Birthday!

This script utilizes the boto.ec2 library.
It runs in 2 seconds.
All my past experience has been outright butchery of the bash environment, and if I did this in bash, it would take 45s'ish and be painful.
Be sure to read this wrt the boto config for profiles: eg: ~/.boto:

Code:

[Credentials]

[profile default]
aws_access_key_id = key 
aws_secret_access_key = secret

...

Habitual

LQ Veteran

Posted in Uncategorized

Views 2618 Comments 2 Habitual is offline

shellshock.conf for fail2ban 0.8.10

Posted 09-26-2014 at 12:41 PM by Habitual (Spock's Brain)
Updated 03-17-2017 at 12:28 PM by Habitual

sample file for testing this fail2ban filter

Code:

89.207.135.125 - - [25/Sep/2014:04:14:19 -0400] "GET /cgi-sys/defaultwebpage.cgi HTTP/1.0" 404 411 "-" "() { :;}; /bin/ping -c 1 198.101.206.138"
198.20.69.74 - - [25/Sep/2014:17:42:32 -0400] "GET / HTTP/1.1" 200 288 "() { :; }; /bin/ping -c 1 104.131.0.69" "() { :; }; /bin/ping -c 1 104.131.0.69"
198.20.69.74 - - [25/Sep/2014:17:42:32 -0400] "GET / HTTP/1.1" 200

...

Habitual

LQ Veteran

Posted in Uncategorized

Views 646 Comments 0 Habitual is offline

Getting Started with fail2ban

Posted 05-09-2014 at 09:38 AM by Habitual (Spock's Brain)
Updated 01-31-2017 at 11:43 AM by Habitual

From a user post at https://www.linuxquestions.org/quest...er-4175504270/

The first thing to understand is that fail2ban has two basic mechanisms. Filters and actions on those filters.
I am going to take this opportunity to illustrate and provide a simple setup from stock fail2ban install to scan for <something> in /var/www/logs/ files and show you the steps necessary to get you started.
...

Habitual

LQ Veteran

Posted in Uncategorized

Views 846 Comments 0 Habitual is offline