主页 / user-20381

Vladislav Rastrusny's questions

Martin Hope
Vladislav Rastrusny
Asked: 2014-09-21 11:42:02 +0800 CST
  • 0

为什么 CentOS/RedHat 7 没有 MariaDB 10.x RPM？我该如何安装它？

我正在尝试在我的服务器上安装最新的稳定版本，但似乎没有官方 repo。

5.5 包含在发行版中，没错，但是在 CentOS/RHEL 7 上安装 10.x 呢？

centos
Martin Hope
Vladislav Rastrusny
Asked: 2012-08-21 00:36:36 +0800 CST
  • 0

我可以使用 RASDIAL 命令建立 VPN 连接。但是如何在连接VPN后自动添加到192.168.254.0/24的路由？每次建立VPN 连接后，Windows 可以为VPN 连接分配不同的接口ID（ROUTE 命令的IF 参数）。

我可以使用以下方法手动执行此操作。ROUTE PRINT 命令显示接口列表，我可以记下 VPN 的接口 ID（例如 42），然后发出命令

route ADD 192.168.254.0 MASK 255.255.255.0 192.168.0.200 IF 42

但是如何在 .bat 文件中自动执行此操作？

我正在使用 PPTP VPN（它不能自动将路由推送到客户端）。

由于每次 VPN 连接时接口 ID 都不同，我不能使用 route -p（在客户端上添加持久路由）。顺便说一句，这不是一个好的解决方案，因为办公室员工的笔记本电脑有时会使用 VPN 连接。有时他们的笔记本是网络的一部分，已经是 VPN 的一部分，有时他们自己建立 VPN 连接。

这是 PowerShell 的解决方案，对我来说没问题。但我很好奇，是否可以通过简单的 .bat 文件完成同样的操作？

vpn
Martin Hope
Vladislav Rastrusny
Asked: 2012-08-13 12:09:46 +0800 CST
  • 1

我有两个商店和办公室。商店通过同一互联网提供商连接到互联网，但它们位于城市的不同地区，当然使用不同的连接。该互联网提供商使用 NAT，因此我的两家商店都具有相同的外部可见 IP 地址。

Office 使用不同的提供商连接到 Internet 并具有静态 IP。

这里的文字说

PPTP 协议不允许来自同一远程 IP 地址的两个 VPN 连接

真的是这样吗？这是身体上的限制吗？我尝试从家里连接到同一个 PPTP VPN 服务器，我的笔记本电脑和笔记本电脑都使用一个路由器连接到互联网。两台机器的两个连接都已成功建立。

两台设备连接到同一台VPN服务器并且具有相同的外部IP的情况是否有问题？我需要我的每个商店都能看到办公室网络，办公室网络才能看到每个商店的网络。商店之间没有必要互相看到。

vpn
Martin Hope
Vladislav Rastrusny
Asked: 2010-04-19 11:23:12 +0800 CST
  • 0

如您所知，即使可以在 CentOS/RedHat 下以工作模式启动 httpd，默认 rpm 存储库中的 php 也不是线程安全的。稳定性的默认配置是 mpm_prefork。所以，两个问题：

  • 是否有能够在 mpm_prefork 模式下工作的 PHP 加速器（使用 shm 或其他）？

  • 如果没有，可以做些什么来提高 CentOS/RedHat 系统上的 PHP 速度（我想使用 rpm，最好来自默认的 CentOS 存储库；从源代码构建自定义 PHP 对我来说不是一个好选择）

php
Martin Hope
Vladislav Rastrusny
Asked: 2010-04-15 22:33:42 +0800 CST
  • 1

我有以下问题：

我的服务器获得了来自 [b] 不同 [/b] 子网的两个 IP。现在我正在尝试配置系统以使其正常工作。我创造了

[root@server ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
# Intel Corporation 80003ES2LAN Gigabit Ethernet Controller (Copper)
HWADDR=00:30:48:DA:B1:0E
DEVICE=eth0
BOOTPROTO=none
BROADCAST=79.174.69.255
IPADDR=79.174.69.241
NETMASK=255.255.254.0
NETWORK=79.174.68.0
ONBOOT=yes
GATEWAY=79.174.68.1
TYPE=Ethernet

[root@server ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0:0
# Intel Corporation 80003ES2LAN Gigabit Ethernet Controller (Copper)
HWADDR=00:30:48:DA:B1:0E
DEVICE=eth0
BOOTPROTO=none
BROADCAST=79.174.69.255
IPADDR=79.174.71.74
NETMASK=255.255.255.0
NETWORK=79.174.71.1
ONBOOT=yes
GATEWAY=79.174.71.1
TYPE=Ethernet

但是在“服务网络重启”和“重启”之后

[root@server ~]# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:30:48:DA:B1:0E
          inet addr:79.174.71.74  Bcast:79.174.71.255  Mask:255.255.255.0
          inet6 addr: fe80::230:48ff:feda:b10e/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:910284 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2924 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:257964879 (246.0 MiB)  TX bytes:232450 (227.0 KiB)
          Memory:df220000-df240000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:27 errors:0 dropped:0 overruns:0 frame:0
          TX packets:27 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:6976 (6.8 KiB)  TX bytes:6976 (6.8 KiB)

设备 eth0:0 未显示为活动状态。如果我尝试

[root@server ~]# ifconfig eth0:0
eth0:0    Link encap:Ethernet  HWaddr 00:30:48:DA:B1:0E
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Memory:df220000-df240000

它显示为已启动并正在运行，但未为其分配 IP。

同样奇怪的是，在配置文件中分配给 eth0:0 的 IP 地址被 eth0 使用。

/var/log/messages 没有显示 eth0 或 eth0:0 上的网络配置错误。system-config-network 似乎正确理解所有设置并重新保存它们也可以。

“ifup eth0:0”执行正常，但之后 ifconfig 显示没有 eth0:0 设备。

我做错了什么？问题可能是IP来自不同的子网？

networking ifconfig eth0
Martin Hope
Vladislav Rastrusny
Asked: 2010-01-15 04:30:13 +0800 CST
  • 6

我有确切的问题，就像在这篇文章中一样：Sendmail to local domain ignoring MX records。我还在使用像 GMail For Your Domain 之类的电子邮件提供商（它存储并管理您的邮件）。我直接从我的服务器发送邮件，但接收邮件是通过 Yandex（电子邮件提供商）完成的。由于服务器托管了一个论坛，我更喜欢直接从它发送邮件，因为使用另一个邮件提供商会减慢速度。此外，当我向我的订阅者发送 300.000 封电子邮件时，另一个电子邮件提供商肯定会阻止我认为我正在发送垃圾邮件。

我的 DNS 区域现在是：

;
; GSMFORUM.RU
;

$TTL 1H

gsmforum.ru. SOA ns1.hc.ru. support.hc.ru. (
               2009122268 ; Serial
               1H         ; Refresh
               30M        ; Retry
               1W         ; Expire
               1H       ) ; Minimum

gsmforum.ru.          NS      ns1.hc.ru.
gsmforum.ru.          NS      ns2.hc.ru.
@                     A       79.174.68.223
*.gsmforum.ru.        CNAME   @
ns1                   A       79.174.68.223
ns2                   A       79.174.68.224
@                     MX      10 mx.yandex.ru.
mail                  CNAME   domain.mail.yandex.net.
yamail-xxxxxxxxx      CNAME   mail.yandex.ru.

服务器主机名是 server.gsmforum.ru。可能是这个原因吗？有人可以解释事情的原因（使 sendmail 认为域是本地的规则）吗？我能轻易改变吗

*.gsmforum.ru.        CNAME   @

进入

*.gsmforum.ru.        A   79.174.68.224

解决这个问题？

[root@server ~]# cat /etc/mail/local-host-names
localhost
localhost.localdomain

该服务器托管 gsmforum.ru，因此我无法像 David Mackintosh 建议的那样将其放入另一个域。将域放入 mailertable 也不能解决问题： sendmail -bt 仍然显示地址是本地的。DontProbeInterfaces 在 sendmail 配置中也设置为 true。

M4文件如下：

divert(-1)dnl
dnl #
dnl # This is the sendmail macro config file for m4. If you make changes to
dnl # /etc/mail/sendmail.mc, you will need to regenerate the
dnl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package is
dnl # installed and then performing a
dnl #
dnl #     make -C /etc/mail
dnl #
include(`/usr/share/sendmail-cf/m4/cf.m4')dnl
VERSIONID(`setup for linux')dnl
OSTYPE(`linux')dnl
dnl #
dnl # Do not advertize sendmail version.
dnl #
dnl define(`confSMTP_LOGIN_MSG', `$j Sendmail; $b')dnl
dnl #
dnl # default logging level is 9, you might want to set it higher to
dnl # debug the configuration
dnl #
dnl define(`confLOG_LEVEL', `9')dnl
dnl #
dnl # Uncomment and edit the following line if your outgoing mail needs to
dnl # be sent out through an external mail server:
dnl #
dnl define(`SMART_HOST', `smtp.your.provider')dnl
dnl #
define(`confDEF_USER_ID', ``8:12'')dnl
dnl define(`confAUTO_REBUILD')dnl
define(`confTO_CONNECT', `1m')dnl
define(`confTRY_NULL_MX_LIST', `True')dnl
define(`confDONT_PROBE_INTERFACES',`True')
define(`PROCMAIL_MAILER_PATH', `/usr/bin/procmail')dnl
define(`ALIAS_FILE', `/etc/aliases')dnl
define(`STATUS_FILE', `/var/log/mail/statistics')dnl
define(`UUCP_MAILER_MAX', `2000000')dnl
define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
define(`confAUTH_OPTIONS', `A')dnl
dnl #
dnl # The following allows relaying if the user authenticates, and disallows
dnl # plaintext authentication (PLAIN/LOGIN) on non-TLS links
dnl #
dnl define(`confAUTH_OPTIONS', `A p')dnl
dnl # 
dnl # PLAIN is the preferred plaintext authentication method and used by
dnl # Mozilla Mail and Evolution, though Outlook Express and other MUAs do
dnl # use LOGIN. Other mechanisms should be used if the connection is not
dnl # guaranteed secure.
dnl # Please remember that saslauthd needs to be running for AUTH. 
dnl #
dnl TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
dnl #
dnl # Rudimentary information on creating certificates for sendmail TLS:
dnl #     cd /usr/share/ssl/certs; make sendmail.pem
dnl # Complete usage:
dnl #     make -C /usr/share/ssl/certs usage
dnl #
dnl define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl
dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl
dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/sendmail.pem')dnl
dnl define(`confSERVER_KEY', `/etc/pki/tls/certs/sendmail.pem')dnl
dnl #
dnl # This allows sendmail to use a keyfile that is shared with OpenLDAP's
dnl # slapd, which requires the file to be readble by group ldap
dnl #
dnl define(`confDONT_BLAME_SENDMAIL', `groupreadablekeyfile')dnl
dnl #
dnl define(`confTO_QUEUEWARN', `4h')dnl
dnl define(`confTO_QUEUERETURN', `5d')dnl
dnl define(`confQUEUE_LA', `12')dnl
dnl define(`confREFUSE_LA', `18')dnl
define(`confTO_IDENT', `0')dnl
dnl FEATURE(delay_checks)dnl
FEATURE(`no_default_msa', `dnl')dnl
FEATURE(`smrsh', `/usr/sbin/smrsh')dnl
FEATURE(`mailertable', `hash -o /etc/mail/mailertable.db')dnl
FEATURE(`virtusertable', `hash -o /etc/mail/virtusertable.db')dnl
FEATURE(redirect)dnl
FEATURE(always_add_domain)dnl
FEATURE(use_cw_file)dnl
FEATURE(use_ct_file)dnl
dnl #
dnl # The following limits the number of processes sendmail can fork to accept 
dnl # incoming messages or process its message queues to 20.) sendmail refuses 
dnl # to accept connections once it has reached its quota of child processes.
dnl #
dnl define(`confMAX_DAEMON_CHILDREN', `20')dnl
dnl #
dnl # Limits the number of new connections per second. This caps the overhead 
dnl # incurred due to forking new sendmail processes. May be useful against 
dnl # DoS attacks or barrages of spam. (As mentioned below, a per-IP address 
dnl # limit would be useful but is not available as an option at this writing.)
dnl #
dnl define(`confCONNECTION_RATE_THROTTLE', `3')dnl
dnl #
dnl # The -t option will retry delivery if e.g. the user runs over his quota.
dnl #
FEATURE(local_procmail, `', `procmail -t -Y -a $h -d $u')dnl
FEATURE(`access_db', `hash -T<TMPF> -o /etc/mail/access.db')dnl
FEATURE(`blacklist_recipients')dnl
EXPOSED_USER(`root')dnl
dnl #
dnl # For using Cyrus-IMAPd as POP3/IMAP server through LMTP delivery uncomment
dnl # the following 2 definitions and activate below in the MAILER section the
dnl # cyrusv2 mailer.
dnl #
dnl define(`confLOCAL_MAILER', `cyrusv2')dnl
dnl define(`CYRUSV2_MAILER_ARGS', `FILE /var/lib/imap/socket/lmtp')dnl
dnl #
dnl # The following causes sendmail to only listen on the IPv4 loopback address
dnl # 127.0.0.1 and not on any other network devices. Remove the loopback
dnl # address restriction to accept email from the internet or intranet.
dnl #
DAEMON_OPTIONS(`Name=MTA,Port=smtp')
dnl #
dnl # The following causes sendmail to additionally listen to port 587 for
dnl # mail from MUAs that authenticate. Roaming users who can't reach their
dnl # preferred sendmail daemon due to port 25 being blocked or redirected find
dnl # this useful.
dnl #
dnl DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl
dnl #
dnl # The following causes sendmail to additionally listen to port 465, but
dnl # starting immediately in TLS mode upon connecting. Port 25 or 587 followed
dnl # by STARTTLS is preferred, but roaming clients using Outlook Express can't
dnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use STARTTLS
dnl # and doesn't support the deprecated smtps; Evolution <1.1.1 uses smtps
dnl # when SSL is enabled-- STARTTLS support is available in version 1.1.1.
dnl #
dnl # For this to work your OpenSSL certificates must be configured.
dnl #
dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl
dnl #
dnl # The following causes sendmail to additionally listen on the IPv6 loopback
dnl # device. Remove the loopback address restriction listen to the network.
dnl #
dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')dnl
dnl #
dnl # enable both ipv6 and ipv4 in sendmail:
dnl #
dnl DAEMON_OPTIONS(`Name=MTA-v4, Family=inet, Name=MTA-v6, Family=inet6')
dnl #
dnl # We strongly recommend not accepting unresolvable domains if you want to
dnl # protect yourself from spam. However, the laptop and users on computers
dnl # that do not have 24x7 DNS do need this.
dnl #
FEATURE(`accept_unresolvable_domains')dnl
dnl #
dnl FEATURE(`relay_based_on_MX')dnl
dnl # 
dnl # Also accept email sent to "localhost.localdomain" as local email.
dnl # 
LOCAL_DOMAIN(`localhost.localdomain')dnl
dnl #
dnl # The following example makes mail from this host and any additional
dnl # specified domains appear to be sent from mydomain.com
dnl #
dnl MASQUERADE_AS(`mydomain.com')dnl
dnl #
dnl # masquerade not just the headers, but the envelope as well
dnl #
dnl FEATURE(masquerade_envelope)dnl
dnl #
dnl # masquerade not just @mydomainalias.com, but @*.mydomainalias.com as well
dnl #
dnl FEATURE(masquerade_entire_domain)dnl
dnl #
dnl MASQUERADE_DOMAIN(localhost)dnl
dnl MASQUERADE_DOMAIN(localhost.localdomain)dnl
dnl MASQUERADE_DOMAIN(mydomainalias.com)dnl
dnl MASQUERADE_DOMAIN(mydomain.lan)dnl
MAILER(smtp)dnl
MAILER(procmail)dnl
dnl MAILER(cyrusv2)dnl
FEATURE(`dnsbl',`zen.spamhaus.org',`Rejected - your IP is blacklisted by http://www.spamhaus.org')
sendmail cname-record gmail localhost