The list of TLS ciphers is changing quite rapidly, old ciphers are considered insecure, and new ciphers are added. When you configure a virtual server on an F5 you can add a TLS client profile, which means F5 is doing TLS to the client. I think this is a bit misleading because with “SSL client profile” […]
Configure F5 TLS (SSL) Cipher String Read More »
Linux support from dell is still very poor. They still support only RedHat$ and SuSE$. But there are ways to check the Raid status of Dell server on debian. http://hwraid.le-vert.net/ is doing a good job in collecting information and building Debian style packages. Example: A Dell server “PowerEdge T130” with “LSI Logic / Symbios Logic MegaRAID SAS-3
Check Raid Status for Dell Raids on Linux Read More »
Problem: PaloAlto firewall is dropping packets in small bursts of some seconds, and sometimes it drops TCP connections. It only happens on HA clusters on interfaces in active/passive (fail over) mode. Solution: disable the following check box in the Ethernet interface Advanced – LLDP settings: “Enable in HA Passive State” Discussion: Palo Alto uses only one MAC address
PaloAlto Packet Loss of 1% and More Read More »
Problem: Cisco ASR router is loosing connectivity to its directly attached Ethernet neighbors. In this situation interface status is still up, packets are going in and out on both ends, even IPv6 was still working. The actual problem was that the Cisco ASR was ignoring all ARP responses from its neighbors and the ARP table to this
ARP is not working on Cisco ASR 1001 X Read More »
Problem: for some PDF files cups does not print the page, the web gui just tells “filter failed” and in the cups logfile you find [Job 528] PID 19521 (gs) crashed on signal 11! Discussion: cups on debian uses ghostscript as pdf renderer. The pdf renderer of ghostsciprt crashes on many files. You can test by simply running
Cups PDF Filter Crashes Read More »
I believe that it’s a good idea that vi does not auto save during editing. Think of config files or src files that should never be in an inconsistent state. The programmer or sysadmin should decide when he wants to save data. But sometime auto save is handy, while typing lists like todo lists or
I had to upgrade several F5 load balancers from 11.5 to 12.1 in the last weeks. Usually updating F5 is quiet easy, but there are bugs or annoyances you should know: Sometimes F5 asks for re-activating after the first boot into the new version. It seems that you have to install the new version in a
Annoyances while updating F5 Read More »
Problem: after upgrading from Debian 6 to Debian 8 some of the machines lose their ethernet network connection under heavy load for some seconds rarely. You find lines like these in syslog: [2333099.217735] NETDEV WATCHDOG: eth1 (tg3): transmit queue 0 timed out [2333099.217966] tg3 0000:03:04.1 eth1: transmit timed out, resetting [2333099.384391] tg3 0000:03:04.1 eth1: 0: Host
Rare Connection Resets after Linux Upgrade Read More »
Problem: after compiling sendmail on Debian7 with “./Build” sendmail does not recognize hash .db files. You see the following error message: readcf: map access: class hash not available Discussion: ./Build should detect the berkley DB automatically. When devtools/bin/configure.sh finds libdb.so it adds -DNEWDB as compile option. On Debian7 the libdb.so file moved to /usr/lib/x86_64-linux-gnu/ and configure.sh fails to
Compiling Sendmail on Debian7 Read More »
Problem: A responsive webapp shows a google map with markers that are clickable. On desktop everything works as expected, but on mobile the markers are not clickable. Discussion: After debugging with chrome remote inspector, I found that a div->frame with opacity:0 was lying above (explicit z-index:2) the clickable markers. I don’t know what this frame is for,
Google Maps Marker on Mobile Read More »