tftd提出的问题 -server

tftd

Asked: 2024-03-28 05:34:05 +0800 CST

如何获得 SPF 对齐以通过子域的 DMARC？

8

我有以下 DNS 配置：

$ dig +noall +answer -t txt example.com
example.com.    626 IN  TXT "v=spf1 +a +mx include:sendgrid.net include:_spf.google.com -all"

$ dig +noall +answer -t txt google._domainkey.example.com
google._domainkey.example.com.  600 IN TXT "v=DKIM1; k=rsa; ......"

$ dig +noall +answer -t txt _dmarc.example.com
_dmarc.example.com. 300 IN  TXT "v=DMARC1; p=none; pct=100; rua=mailto:report@email; aspf=s; adkim=r;"

$ dig +noall +answer -t txt em1234.example.com
em1234.example.com. 358 IN  CNAME   1234.xyz.sendgrid.net.
1234.xyz.sendgrid.net. 358 IN   TXT "v=spf1 ip4:149.72.253.162 -all"

当我发送电子邮件时，example.com一切正常，DMARC 也通过了。通过 SendGrid 和子域发送的电子邮件也是如此em1234.example.com。然而，发送报告的报告工具声称 100% SPF 对齐失败，这很奇怪，因为 Gmail 和电子邮件标头的情况恰恰相反：

ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass [email protected] header.s=s1 header.b=Rv669YsQ;
       spf=pass (google.com: domain of bounces+4746099-3d38-recipient_email=recipient.com@em1234.example.com designates 149.72.253.162 as permitted sender) smtp.mailfrom="bounces+4746099-3d38-recipient_email=recipient.com@em1234.example.com";
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=example.com

所以我在这里遇到的问题是如何 SPF 对齐 SendGrid 使用的子域？aspf修复此设置的唯一方法relaxed还是有其他方法？

tftd

Asked: 2020-10-23 16:20:06 +0800 CST

nginx中是否有包含域名的变量？

0

我正在对 nginx/1.14.1 服务器进行配置重构，该服务器充当 PHP-FPM 的反向代理。

现在的配置方式，我可以做到

# in a server {} section at a vhost there's
# set $base_domain domain.com;
# and then it includes another config file which has something like this: 
if ($php_logs_path = '') {
    set $php_logs_path /a/b/$base_domain/logs/$server_name.php_www_errors.log;
}
fastcgi_parma PHP_ADMIN_VALUE "error_log=$php_logs_path"

这工作正常，日志文件出现在正确的路径：

/a/b/domain.com/logs/some-sub-domain.domain.com.php_www_errors.log

但是，我并不特别喜欢我现在需要超过一百个虚拟主机来设置$base_domain变量的事实。我浏览了nginx 文档，但我找不到只给出domain没有子域的段的变量。

有没有一种简单的方法可以使用自定义变量来做到这一点？

tftd

Asked: 2017-09-07 15:39:29 +0800 CST

是否可以将 Active Directory 添加到 Windows 容器？

8

在我的公司，我们目前正在开发一种最终将支持通过 OpenLDAP 和 Active Directory 进行身份验证的产品。我们已经配置了 Windows Server 2016，并希望通过 Windows 容器创建一个隔离环境来测试我们的应用程序。

不幸的是，在容器中安装/启用 AD 功能时，我碰壁了。我收到的错误是：

Add-WindowsFeature : The request to add or remove features on the specified server failed.
The operation cannot be completed, because the server that you specified requires a restart.
At line:1 char:1
+ Add-WindowsFeature AD-Domain-Services
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo          : DeviceError: (@{Vhd=; Credent...Name=localhost}:PSObject) [Install-WindowsFeature], Exception
+ FullyQualifiedErrorId : DISMAPI_Error__Failed_Reboot_Required,Microsoft.Windows.ServerManager.Commands.AddWindowsFeatureCommand

我错过了什么还是这不起作用？

这是我的 Dockerfile

FROM microsoft/windowsservercore

RUN powershell Get-WindowsFeature
RUN powershell -Command Add-WindowsFeature AD-Domain-Services

完整的构建日志：

PS C:\windows-ad> docker build --no-cache -t win-test .
Sending build context to Docker daemon   2.56kB
Step 1/3 : FROM microsoft/windowsservercore
 ---> be84290c2315
Step 2/3 : RUN powershell Get-WindowsFeature
 ---> Running in 5e5f83bb2c86

Display Name                                            Name
------------                                            ----
[ ] Active Directory Certificate Services               AD-Certificate
    [ ] Certification Authority                         ADCS-Cert-Authority
    [ ] Certificate Enrollment Policy Web Service       ADCS-Enroll-Web-Pol
    [ ] Certificate Enrollment Web Service              ADCS-Enroll-Web-Svc
    [ ] Certification Authority Web Enrollment          ADCS-Web-Enrollment
    [ ] Network Device Enrollment Service               ADCS-Device-Enrollment
    [ ] Online Responder                                ADCS-Online-Cert
[ ] Active Directory Domain Services                    AD-Domain-Services
[ ] Active Directory Federation Services                ADFS-Federation
[ ] Active Directory Lightweight Directory Services     ADLDS
[ ] Active Directory Rights Management Services         ADRMS
    [ ] Active Directory Rights Management Server       ADRMS-Server
    [ ] Identity Federation Support                     ADRMS-Identity
[ ] Device Health Attestation                           DeviceHealthAttestat...
[ ] DHCP Server                                         DHCP
[ ] DNS Server                                          DNS
[X] File and Storage Services                           FileAndStorage-Services
    [ ] File and iSCSI Services                         File-Services
        [ ] File Server                                 FS-FileServer
        [ ] BranchCache for Network Files               FS-BranchCache
        [ ] Data Deduplication                          FS-Data-Deduplication
        [ ] DFS Namespaces                              FS-DFS-Namespace
        [ ] DFS Replication                             FS-DFS-Replication
        [ ] File Server Resource Manager                FS-Resource-Manager
        [ ] File Server VSS Agent Service               FS-VSS-Agent
        [ ] iSCSI Target Server                         FS-iSCSITarget-Server
        [ ] iSCSI Target Storage Provider (VDS and V... iSCSITarget-VSS-VDS
        [ ] Server for NFS                              FS-NFS-Service
        [ ] Work Folders                                FS-SyncShareService
    [X] Storage Services                                Storage-Services
[ ] Host Guardian Service                               HostGuardianServiceRole
[ ] Hyper-V                                             Hyper-V
[ ] Network Controller                                  NetworkController
[ ] Print and Document Services                         Print-Services
    [ ] Print Server                                    Print-Server
    [ ] LPD Service                                     Print-LPD-Service
[ ] Remote Access                                       RemoteAccess
    [ ] DirectAccess and VPN (RAS)                      DirectAccess-VPN
    [ ] Routing                                         Routing
    [ ] Web Application Proxy                           Web-Application-Proxy
[ ] Remote Desktop Services                             Remote-Desktop-Services
    [ ] Remote Desktop Connection Broker                RDS-Connection-Broker
    [ ] Remote Desktop Licensing                        RDS-Licensing
    [ ] Remote Desktop Virtualization Host              RDS-Virtualization
[ ] Volume Activation Services                          VolumeActivation
[ ] Web Server (IIS)                                    Web-Server
    [ ] Web Server                                      Web-WebServer
        [ ] Common HTTP Features                        Web-Common-Http
            [ ] Default Document                        Web-Default-Doc
            [ ] Directory Browsing                      Web-Dir-Browsing
            [ ] HTTP Errors                             Web-Http-Errors
            [ ] Static Content                          Web-Static-Content
            [ ] HTTP Redirection                        Web-Http-Redirect
            [ ] WebDAV Publishing                       Web-DAV-Publishing
        [ ] Health and Diagnostics                      Web-Health
            [ ] HTTP Logging                            Web-Http-Logging
            [ ] Custom Logging                          Web-Custom-Logging
            [ ] Logging Tools                           Web-Log-Libraries
            [ ] ODBC Logging                            Web-ODBC-Logging
            [ ] Request Monitor                         Web-Request-Monitor
            [ ] Tracing                                 Web-Http-Tracing
        [ ] Performance                                 Web-Performance
            [ ] Static Content Compression              Web-Stat-Compression
            [ ] Dynamic Content Compression             Web-Dyn-Compression
        [ ] Security                                    Web-Security
            [ ] Request Filtering                       Web-Filtering
            [ ] Basic Authentication                    Web-Basic-Auth
            [ ] Centralized SSL Certificate Support     Web-CertProvider
            [ ] Client Certificate Mapping Authentic... Web-Client-Auth
            [ ] Digest Authentication                   Web-Digest-Auth
            [ ] IIS Client Certificate Mapping Authe... Web-Cert-Auth
            [ ] IP and Domain Restrictions              Web-IP-Security
            [ ] URL Authorization                       Web-Url-Auth
            [ ] Windows Authentication                  Web-Windows-Auth
        [ ] Application Development                     Web-App-Dev
            [ ] .NET Extensibility 3.5                  Web-Net-Ext
            [ ] .NET Extensibility 4.6                  Web-Net-Ext45
            [ ] Application Initialization              Web-AppInit
            [ ] ASP                                     Web-ASP
            [ ] ASP.NET 3.5                             Web-Asp-Net
            [ ] ASP.NET 4.6                             Web-Asp-Net45
            [ ] CGI                                     Web-CGI
            [ ] ISAPI Extensions                        Web-ISAPI-Ext
            [ ] ISAPI Filters                           Web-ISAPI-Filter
            [ ] Server Side Includes                    Web-Includes
            [ ] WebSocket Protocol                      Web-WebSockets
    [ ] FTP Server                                      Web-Ftp-Server
        [ ] FTP Service                                 Web-Ftp-Service
        [ ] FTP Extensibility                           Web-Ftp-Ext
    [ ] Management Tools                                Web-Mgmt-Tools
        [ ] IIS 6 Management Compatibility              Web-Mgmt-Compat
            [ ] IIS 6 Metabase Compatibility            Web-Metabase
            [ ] IIS 6 Scripting Tools                   Web-Lgcy-Scripting
            [ ] IIS 6 WMI Compatibility                 Web-WMI
        [ ] IIS Management Scripts and Tools            Web-Scripting-Tools
        [ ] Management Service                          Web-Mgmt-Service
[ ] Windows Server Essentials Experience                ServerEssentialsRole
[ ] Windows Server Update Services                      UpdateServices
    [ ] WID Connectivity                                UpdateServices-WidDB
    [ ] WSUS Services                                   UpdateServices-Services
    [ ] SQL Server Connectivity                         UpdateServices-DB
[ ] .NET Framework 3.5 Features                         NET-Framework-Features
    [ ] .NET Framework 3.5 (includes .NET 2.0 and 3.0)  NET-Framework-Core
    [ ] HTTP Activation                                 NET-HTTP-Activation
    [ ] Non-HTTP Activation                             NET-Non-HTTP-Activ
[X] .NET Framework 4.6 Features                         NET-Framework-45-Fea...
    [X] .NET Framework 4.6                              NET-Framework-45-Core
    [ ] ASP.NET 4.6                                     NET-Framework-45-ASPNET
    [X] WCF Services                                    NET-WCF-Services45
        [ ] HTTP Activation                             NET-WCF-HTTP-Activat...
        [ ] Message Queuing (MSMQ) Activation           NET-WCF-MSMQ-Activat...
        [ ] Named Pipe Activation                       NET-WCF-Pipe-Activat...
        [ ] TCP Activation                              NET-WCF-TCP-Activati...
        [X] TCP Port Sharing                            NET-WCF-TCP-PortShar...
[ ] Background Intelligent Transfer Service (BITS)      BITS
    [ ] Compact Server                                  BITS-Compact-Server
[ ] BitLocker Drive Encryption                          BitLocker
[ ] BranchCache                                         BranchCache
[ ] Client for NFS                                      NFS-Client
[ ] Containers                                          Containers
[ ] Data Center Bridging                                Data-Center-Bridging
[ ] Enhanced Storage                                    EnhancedStorage
[ ] Failover Clustering                                 Failover-Clustering
[ ] Group Policy Management                             GPMC
[ ] Host Guardian Hyper-V Support                       HostGuardian
[ ] I/O Quality of Service                              DiskIo-QoS
[ ] IIS Hostable Web Core                               Web-WHC
[ ] IP Address Management (IPAM) Server                 IPAM
[ ] iSNS Server service                                 ISNS
[ ] Management OData IIS Extension                      ManagementOdata
[ ] Media Foundation                                    Server-Media-Foundation
[ ] Message Queuing                                     MSMQ
    [ ] Message Queuing Services                        MSMQ-Services
        [ ] Message Queuing Server                      MSMQ-Server
        [ ] Directory Service Integration               MSMQ-Directory
        [ ] HTTP Support                                MSMQ-HTTP-Support
        [ ] Message Queuing Triggers                    MSMQ-Triggers
        [ ] Routing Service                             MSMQ-Routing
    [ ] Message Queuing DCOM Proxy                      MSMQ-DCOM
[ ] Multipath I/O                                       Multipath-IO
[ ] MultiPoint Connector                                MultiPoint-Connector
    [ ] MultiPoint Connector Services                   MultiPoint-Connector...
    [ ] MultiPoint Manager and MultiPoint Dashboard     MultiPoint-Tools
[ ] Network Load Balancing                              NLB
[ ] Peer Name Resolution Protocol                       PNRP
[ ] Quality Windows Audio Video Experience              qWave
[ ] Remote Differential Compression                     RDC
[ ] Remote Server Administration Tools                  RSAT
    [ ] Feature Administration Tools                    RSAT-Feature-Tools
        [ ] BitLocker Drive Encryption Administratio... RSAT-Feature-Tools-B...
        [ ] DataCenterBridging LLDP Tools               RSAT-DataCenterBridg...
        [ ] Failover Clustering Tools                   RSAT-Clustering
            [ ] Failover Cluster Module for Windows ... RSAT-Clustering-Powe...
            [ ] Failover Cluster Automation Server      RSAT-Clustering-Auto...
            [ ] Failover Cluster Command Interface      RSAT-Clustering-CmdI...
        [ ] IP Address Management (IPAM) Client         IPAM-Client-Feature
        [ ] Shielded VM Tools                           RSAT-Shielded-VM-Tools
        [ ] Storage Replica Module for Windows Power... RSAT-Storage-Replica
    [ ] Role Administration Tools                       RSAT-Role-Tools
        [ ] AD DS and AD LDS Tools                      RSAT-AD-Tools
            [ ] Active Directory module for Windows ... RSAT-AD-PowerShell
            [ ] AD DS Tools                             RSAT-ADDS
                [ ] Active Directory Administrative ... RSAT-AD-AdminCenter
                [ ] AD DS Snap-Ins and Command-Line ... RSAT-ADDS-Tools
            [ ] AD LDS Snap-Ins and Command-Line Tools  RSAT-ADLDS
        [ ] Hyper-V Management Tools                    RSAT-Hyper-V-Tools
            [ ] Hyper-V Module for Windows PowerShell   Hyper-V-PowerShell
        [ ] Windows Server Update Services Tools        UpdateServices-RSAT
            [ ] API and PowerShell cmdlets              UpdateServices-API
        [ ] DHCP Server Tools                           RSAT-DHCP
        [ ] DNS Server Tools                            RSAT-DNS-Server
        [ ] Network Controller Management Tools         RSAT-NetworkController
        [ ] Remote Access Management Tools              RSAT-RemoteAccess
            [ ] Remote Access module for Windows Pow... RSAT-RemoteAccess-Po...
[ ] RPC over HTTP Proxy                                 RPC-over-HTTP-Proxy
[ ] Setup and Boot Event Collection                     Setup-and-Boot-Event...
[ ] Simple TCP/IP Services                              Simple-TCPIP
[X] SMB 1.0/CIFS File Sharing Support                   FS-SMB1
[ ] SMB Bandwidth Limit                                 FS-SMBBW
[ ] SNMP Service                                        SNMP-Service
    [ ] SNMP WMI Provider                               SNMP-WMI-Provider
[ ] Software Load Balancer                              SoftwareLoadBalancer
[ ] Storage Replica                                     Storage-Replica
[ ] Telnet Client                                       Telnet-Client
[ ] VM Shielding Tools for Fabric Management            FabricShieldedTools
[X] Windows Defender Features                           Windows-Defender-Fea...
    [X] Windows Defender                                Windows-Defender
[ ] Windows Internal Database                           Windows-Internal-Dat...
[X] Windows PowerShell                                  PowerShellRoot
    [X] Windows PowerShell 5.1                          PowerShell
    [ ] Windows PowerShell 2.0 Engine                   PowerShell-V2
    [ ] Windows PowerShell Desired State Configurati... DSC-Service
    [ ] Windows PowerShell Web Access                   WindowsPowerShellWeb...
[ ] Windows Process Activation Service                  WAS
    [ ] Process Model                                   WAS-Process-Model
    [ ] .NET Environment 3.5                            WAS-NET-Environment
    [ ] Configuration APIs                              WAS-Config-APIs
[ ] Windows Server Backup                               Windows-Server-Backup
[ ] Windows Server Migration Tools                      Migration
[ ] Windows Standards-Based Storage Management          WindowsStorageManage...
[ ] WinRM IIS Extension                                 WinRM-IIS-Ext
[ ] WINS Server                                         WINS
[X] WoW64 Support                                       WoW64-Support


 ---> b891a0f5b277
Removing intermediate container 5e5f83bb2c86
Step 3/3 : RUN powershell -Command Add-WindowsFeature AD-Domain-Services
 ---> Running in 22724bfb2ee4
Add-WindowsFeature : The request to add or remove features on the specified
server failed.
The operation cannot be completed, because the server that you specified
requires a restart.
At line:1 char:1
+ Add-WindowsFeature AD-Domain-Services
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : DeviceError: (@{Vhd=; Credent...Name=localhost}:
   PSObject) [Install-WindowsFeature], Exception
    + FullyQualifiedErrorId : DISMAPI_Error__Failed_Reboot_Required,Microsoft.
   Windows.ServerManager.Commands.AddWindowsFeatureCommand

Success Restart Needed Exit Code      Feature Result
------- -------------- ---------      --------------
False   No             Failed         {}


The command 'cmd /S /C powershell -Command Add-WindowsFeature AD-Domain-Services' returned a non-zero code: 1

tftd

Asked: 2014-04-24 05:52:26 +0800 CST

是否可以创建需要身份验证的 ssh socks 服务器？

1

当我试图为 linux 找到一个易于配置的好的 socks 服务器时，我正在查看这个问题。

以下命令工作正常：

ssh -f -N -D 0.0.0.0:1080 localhost

不过，我想知道，socks 代理是否有可能需要某种身份验证才能工作 - 即现有的 unix 用户和正确的密码？

tftd

Asked: 2014-03-27 09:51:42 +0800 CST

我创建了一个 slackware 构建脚本，因此我可以构建一个特定的包，然后将它安装在运行相同版本的几个服务器上。我知道您可以doinst.sh在安装软件包后使用它来执行操作，但是是否有类似的脚本在卸载时执行？例如，安装软件包时，doinst.sh我有几个特定的环境变量附加到/etc/profile. 我想知道如果/etc/profile包被删除是否可以自动删除它们（即创建一个douninst.sh可以这样做的）？

tftd

Asked: 2013-11-21 08:54:14 +0800 CST

如何使用 mtr 监控特定接口

4

所以，我有两个来自不同 ISP 的接口，我正在尝试使用mtr. 这是我目前正在尝试使用的命令：

mtr --no-dns --address $MY_REAL_IP_HERE $A_DESTINATION_IP

不幸的是，这不是我想要的界面。目前我有eth1和ppp0，我只想监控ppp0。任何想法我做错了什么？

tftd

Asked: 2012-09-23 08:07:56 +0800 CST

让 Squid 传递 X-Requested-With 标头

1

我配置了一个squid 3.1代理服务器。除了标题
，一切都很好。我无法弄清楚如何将该标头传递到我试图通过代理打开的站点。X-Requested-With

这是我当前的配置：

request_header_access Allow allow all
request_header_access Authorization allow all
request_header_access WWW-Authenticate allow all
request_header_access Proxy-Authorization allow all
request_header_access Proxy-Authenticate allow all
request_header_access Cache-Control allow all
request_header_access Content-Encoding allow all
request_header_access Content-Length allow all
request_header_access Content-Type allow all
request_header_access Date allow all
request_header_access Expires allow all
request_header_access Host allow all
request_header_access If-Modified-Since allow all
request_header_access Last-Modified allow all
request_header_access Location allow all
request_header_access Pragma allow all
request_header_access Accept allow all
request_header_access Accept-Charset allow all
request_header_access Accept-Encoding allow all
request_header_access Accept-Language allow all
request_header_access Content-Language allow all
request_header_access Cookie allow all
request_header_access Mime-Version allow all
request_header_access Retry-After allow all
request_header_access Title allow all
request_header_access Connection allow all
request_header_access User-Agent allow all
request_header_access All deny all #remove all other headers


# delete "x-forwarder-for.." headers
forwarded_for delete
request_header_access Via deny all
request_header_access X-Forwarded-For deny all

我试图将这一行添加request_header_access X-Requested-With allow all到配置中，但显然X-Requested-With是一个未知的标头名称……显然我遗漏了什么？

tftd

Asked: 2012-09-04 06:52:27 +0800 CST

是否可以从 apache LocationMatch 指令中获取匹配的正则表达式？

5

我想知道下面的代码是否应该工作：

<LocationMatch "/(.*)([/])?(.*)">
    Order allow,deny
    Allow from all

    AuthType Basic
    AuthName "Git"
    AuthUserFile  /git/.htpasswd
    AuthGroupFile /git/.htgroup
    Require group $1
</LocationMatch>

我试图以此实现的是需要一个基于第一个正则表达式变量的组。因此，如果用户转到http://localhost/a-repository-name他必须在组a-repository-name中才能打开 url。

出于某种原因，我无法使此代码正常工作并且 apache 返回： Authorization of user **** to access /a-repository-name failed, reason: user is not part of the 'require'ed group(s).
我猜它与Require group $1.
这是正确的方法还是我遗漏了什么？

如何获得 SPF 对齐以通过子域的 DMARC？

nginx中是否有包含域名的变量？

是否可以将 Active Directory 添加到 Windows 容器？

是否可以创建需要身份验证的 ssh socks 服务器？

在 Slackware 中 removepkg 后执行脚本

如何使用 mtr 监控特定接口

让 Squid 传递 X-Requested-With 标头

是否可以从 apache LocationMatch 指令中获取匹配的正则表达式？

新安装后 postgres 的默认超级用户用户名/密码是什么？

SFTP 使用什么端口？

命令行列出 Windows Active Directory 组中的用户？

什么是 Pem 文件，它与其他 OpenSSL 生成的密钥文件格式有何不同？

如何确定bash变量是否为空？

tftd's questions