#fqdn — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #fqdn, aggregated by home.social.
-
Доменные объекты Check Point: почему «то работает, то нет» и как это чинить
Привет, Хабр! Делюсь ниже статьей моего коллеги, Алексея Евсеева, который работает инженером технической поддержки в К2 Кибербезопасность в составе Центра экспертизы по комплексному сервису К2Тех и занимается администрированием средств защиты информации. Уже несколько лет он поддерживает Check Point в самых разных инсталляциях, от офисных шлюзов до крупных кластеров, и примерно раз в два-три месяца решает тикеты типа: «правило с доменом не работает», «сайт открывается через раз». Свежий случай — месяц мучений из-за прерывистого доступа к одному крупному государственному сервису — сподвиг его написать отдельную статью про доменные объекты. Так что давайте разберемся, как устроены изнутри доменные объекты Check Point, чем FQDN отличается от non-FQDN, при чем тут DNS Passive Learning и почему штатная работа этих механизмов порой вызывает массу проблем на практике. Передаю слово Алексею.
https://habr.com/ru/companies/k2tech/articles/1073814/
#checkpoint #доменные_объекты #dns #fqdn #nonfqdn #dns_passive_learning #межсетевые_экраны #сетевое_администрирование #диагностика_сетей #устранение_неполадок
-
Доменные объекты Check Point: почему «то работает, то нет» и как это чинить
Привет, Хабр! Делюсь ниже статьей моего коллеги, Алексея Евсеева, который работает инженером технической поддержки в К2 Кибербезопасность в составе Центра экспертизы по комплексному сервису К2Тех и занимается администрированием средств защиты информации. Уже несколько лет он поддерживает Check Point в самых разных инсталляциях, от офисных шлюзов до крупных кластеров, и примерно раз в два-три месяца решает тикеты типа: «правило с доменом не работает», «сайт открывается через раз». Свежий случай — месяц мучений из-за прерывистого доступа к одному крупному государственному сервису — сподвиг его написать отдельную статью про доменные объекты. Так что давайте разберемся, как устроены изнутри доменные объекты Check Point, чем FQDN отличается от non-FQDN, при чем тут DNS Passive Learning и почему штатная работа этих механизмов порой вызывает массу проблем на практике. Передаю слово Алексею.
https://habr.com/ru/companies/k2tech/articles/1073814/
#checkpoint #доменные_объекты #dns #fqdn #nonfqdn #dns_passive_learning #межсетевые_экраны #сетевое_администрирование #диагностика_сетей #устранение_неполадок
-
Доменные объекты Check Point: почему «то работает, то нет» и как это чинить
Привет, Хабр! Делюсь ниже статьей моего коллеги, Алексея Евсеева, который работает инженером технической поддержки в К2 Кибербезопасность в составе Центра экспертизы по комплексному сервису К2Тех и занимается администрированием средств защиты информации. Уже несколько лет он поддерживает Check Point в самых разных инсталляциях, от офисных шлюзов до крупных кластеров, и примерно раз в два-три месяца решает тикеты типа: «правило с доменом не работает», «сайт открывается через раз». Свежий случай — месяц мучений из-за прерывистого доступа к одному крупному государственному сервису — сподвиг его написать отдельную статью про доменные объекты. Так что давайте разберемся, как устроены изнутри доменные объекты Check Point, чем FQDN отличается от non-FQDN, при чем тут DNS Passive Learning и почему штатная работа этих механизмов порой вызывает массу проблем на практике. Передаю слово Алексею.
https://habr.com/ru/companies/k2tech/articles/1073814/
#checkpoint #доменные_объекты #dns #fqdn #nonfqdn #dns_passive_learning #межсетевые_экраны #сетевое_администрирование #диагностика_сетей #устранение_неполадок
-
I can’t believe I never heard of trailing dots in domain names before, but here we are. This was a very interesting read: https://lacot.org/blog/2024/10/29/the-trailing-dot-in-domain-names-a-detail-that-is-often-poorly-managed.html
-
I can’t believe I never heard of trailing dots in domain names before, but here we are. This was a very interesting read: https://lacot.org/blog/2024/10/29/the-trailing-dot-in-domain-names-a-detail-that-is-often-poorly-managed.html
-
I can’t believe I never heard of trailing dots in domain names before, but here we are. This was a very interesting read: https://lacot.org/blog/2024/10/29/the-trailing-dot-in-domain-names-a-detail-that-is-often-poorly-managed.html
-
I can’t believe I never heard of trailing dots in domain names before, but here we are. This was a very interesting read: https://lacot.org/blog/2024/10/29/the-trailing-dot-in-domain-names-a-detail-that-is-often-poorly-managed.html
-
I can’t believe I never heard of trailing dots in domain names before, but here we are. This was a very interesting read: https://lacot.org/blog/2024/10/29/the-trailing-dot-in-domain-names-a-detail-that-is-often-poorly-managed.html
-
It's funny how letting go of the past is really hard sometimes, even with simple, silly things. After 16 years, I'm finally letting go of a domain I centered my identity around.
After today, I'll be down to 3 personal domains and 1 shared, from a peak of 16.
Feels good, if not a little sad.
-
It's funny how letting go of the past is really hard sometimes, even with simple, silly things. After 16 years, I'm finally letting go of a domain I centered my identity around.
After today, I'll be down to 3 personal domains and 1 shared, from a peak of 16.
Feels good, if not a little sad.
-
It's funny how letting go of the past is really hard sometimes, even with simple, silly things. After 16 years, I'm finally letting go of a domain I centered my identity around.
After today, I'll be down to 3 personal domains and 1 shared, from a peak of 16.
Feels good, if not a little sad.
-
It's funny how letting go of the past is really hard sometimes, even with simple, silly things. After 16 years, I'm finally letting go of a domain I centered my identity around.
After today, I'll be down to 3 personal domains and 1 shared, from a peak of 16.
Feels good, if not a little sad.
-
It's funny how letting go of the past is really hard sometimes, even with simple, silly things. After 16 years, I'm finally letting go of a domain I centered my identity around.
After today, I'll be down to 3 personal domains and 1 shared, from a peak of 16.
Feels good, if not a little sad.
-
Ổn định homelab! ✔️ Hiện tại đang dùng Proxmox + Nginx Proxy Manager trên cổng 80/443. Dự định nâng cấp: Sử dụng FQDN nội bộ, tắt SSH trên LXCs, chuyển sang SSH-key. ✅ Cần tư vấn nên dùng NPM hiện có hay thiết lập NPM riêng cho FQDN? Xin chia sẻ kinh nghiệm thực tế về cấu hình FQDN & bảo mật proxy! #NginxProxyManager #HomelabSecurity #FQDN #MạngMáyTinh #HomeLab
https://www.reddit.com/r/selfhosted/comments/1pxml3n/security_nignx_proxy_manager_for_fqdn/
-
"A. Pollock" (debian.org), had an idea for a very useful feature (thx, btw! 🌻️) for molly-guard: Prevent accidential shutdown of distributed and virtual #GNU #Linux PCs by #FQDN.
"F. Marier" (debian.org), confirmed merging it back upstream.
Meaning: **From /then on/ that use-case is solved. for all IT.**
For good. #NoNeedToUpdate ☮️ 🗿> I'd love to see stories and best-practices like that at schools and unis.
> Real people, no bullshit. -
"A. Pollock" (debian.org), had an idea for a very useful feature (thx, btw! 🌻️) for molly-guard: Prevent accidential shutdown of distributed and virtual #GNU #Linux PCs by #FQDN.
"F. Marier" (debian.org), confirmed merging it back upstream.
Meaning: **From /then on/ that use-case is solved. for all IT.**
For good. #NoNeedToUpdate ☮️ 🗿> I'd love to see stories and best-practices like that at schools and unis.
> Real people, no bullshit. -
Filerun hoạt động nhưngrouting ngược/FQDN khó cấu hình ở trường double NAT. Người dùng dùng entirely server Unraid, lounge travel router (không tiếp cận router chủ nhà). Cần giải pháp giúp FQDN/reactivities effectively. #SelfHosting #Networking #Unraid #Filerun #Help #ReverseProxy #FQDN #Hosting tự do #Cách giải double NAT
-
Academic research finds economic, technical and operational harms from Italy’s Piracy Shield
Walled Culture first wrote about Piracy Shield, Italy’s automated system for tackling alleged copyright infringement in the streaming sector, two years ago. Since then, we have written about the serious problems that soon emerged. But instead of fixing those issues, the government body that runs the scheme, Italy’s AGCOM (the Italian Authority for Communications Guarantees), has extended […]
#agcom #albania #cdn #dnsBlocking #eu #fqdn #google #ipBlocking #ipv4 #italy #leasing #nunnery #overblocking #piracyShield #streaming #telecomItalia #tv
-
Academic research finds economic, technical and operational harms from Italy’s Piracy Shield
Walled Culture first wrote about Piracy Shield, Italy’s automated system for tackling alleged copyright infringement in the streaming sector, two years ago. Since then, we have written about the serious problems that soon emerged. But instead of fixing those issues, the government body that runs the scheme, Italy’s AGCOM (the Italian Authority for Communications Guarantees), has extended […]
#agcom #albania #cdn #dnsBlocking #eu #fqdn #google #ipBlocking #ipv4 #italy #leasing #nunnery #overblocking #piracyShield #streaming #telecomItalia #tv
-
Academic research finds economic, technical and operational harms from Italy’s Piracy Shield
Walled Culture first wrote about Piracy Shield, Italy’s automated system for tackling alleged copyright infringement in the streaming sector, two years ago. Since then, we have written about the serious problems that soon emerged. But instead of fixing those issues, the government body that runs the scheme, Italy’s AGCOM (the Italian Authority for Communications Guarantees), has extended […]
#agcom #albania #cdn #dnsBlocking #eu #fqdn #google #ipBlocking #ipv4 #italy #leasing #nunnery #overblocking #piracyShield #streaming #telecomItalia #tv
-
Academic research finds economic, technical and operational harms from Italy’s Piracy Shield
Walled Culture first wrote about Piracy Shield, Italy’s automated system for tackling alleged copyright infringement in the streaming sector, two years ago. Since then, we have written about the serious problems that soon emerged. But instead of fixing those issues, the government body that runs the scheme, Italy’s AGCOM (the Italian Authority for Communications Guarantees), has extended […]
#agcom #albania #cdn #dnsBlocking #eu #fqdn #google #ipBlocking #ipv4 #italy #leasing #nunnery #overblocking #piracyShield #streaming #telecomItalia #tv
-
Internet is a service that you do not need 24 hours a day. In fact you should be able to turn on and turn off your Connection when you need it just like in the PPP days
In the past couple of days, when I was without an active internet connection, I was able to deduct the reason why sudo asks for a connection to the internet when my Gateway, one of my gateways, has none.
It turns out that for some reason sudo is looking for a FQDN {fully qualified domain name} on the Internet.
I wonder why, because on my SBC the name of the Server ends with .local
In order not to get this extremely annoying error, which slows down everything that you need to do with sudo, with a delay of Sixty to One Hundred Twenty seconds, you just need to turn off any network connection on the machine.
It was extremely annoying on the SBC, because I was making a duplicate of a USB stick, which constantly needed to invoke the sudo command, in order to write the data, with commands that needs root access to the device.
To give you an indication of the scope of the delay; a task which normally needs thirty minutes, took twelve hours and still failed, simply because it took way too long.
I am however a Bèta Tester. I love these interesting levels of troubleshooting with things that seem to be totally unrelated.
TLDR:
Disconnect your network when you need to use sudo if your gateways has no internet heartbeat
#SUDO #SBC #RaspberryPi #FQDN #Debian #internet #permission #troubleshooting #programming #OpenSource #POSIX
-
Internet is a service that you do not need 24 hours a day. In fact you should be able to turn on and turn off your Connection when you need it just like in the PPP days
In the past couple of days, when I was without an active internet connection, I was able to deduct the reason why sudo asks for a connection to the internet when my Gateway, one of my gateways, has none.
It turns out that for some reason sudo is looking for a FQDN {fully qualified domain name} on the Internet.
I wonder why, because on my SBC the name of the Server ends with .local
In order not to get this extremely annoying error, which slows down everything that you need to do with sudo, with a delay of Sixty to One Hundred Twenty seconds, you just need to turn off any network connection on the machine.
It was extremely annoying on the SBC, because I was making a duplicate of a USB stick, which constantly needed to invoke the sudo command, in order to write the data, with commands that needs root access to the device.
To give you an indication of the scope of the delay; a task which normally needs thirty minutes, took twelve hours and still failed, simply because it took way too long.
I am however a Bèta Tester. I love these interesting levels of troubleshooting with things that seem to be totally unrelated.
TLDR:
Disconnect your network when you need to use sudo if your gateways has no internet heartbeat
#SUDO #SBC #RaspberryPi #FQDN #Debian #internet #permission #troubleshooting #programming #OpenSource #POSIX
-
Internet is a service that you do not need 24 hours a day. In fact you should be able to turn on and turn off your Connection when you need it just like in the PPP days
In the past couple of days, when I was without an active internet connection, I was able to deduct the reason why sudo asks for a connection to the internet when my Gateway, one of my gateways, has none.
It turns out that for some reason sudo is looking for a FQDN {fully qualified domain name} on the Internet.
I wonder why, because on my SBC the name of the Server ends with .local
In order not to get this extremely annoying error, which slows down everything that you need to do with sudo, with a delay of Sixty to One Hundred Twenty seconds, you just need to turn off any network connection on the machine.
It was extremely annoying on the SBC, because I was making a duplicate of a USB stick, which constantly needed to invoke the sudo command, in order to write the data, with commands that needs root access to the device.
To give you an indication of the scope of the delay; a task which normally needs thirty minutes, took twelve hours and still failed, simply because it took way too long.
I am however a Bèta Tester. I love these interesting levels of troubleshooting with things that seem to be totally unrelated.
TLDR:
Disconnect your network when you need to use sudo if your gateways has no internet heartbeat
#SUDO #SBC #RaspberryPi #FQDN #Debian #internet #permission #troubleshooting #programming #OpenSource #POSIX
-
Internet is a service that you do not need 24 hours a day. In fact you should be able to turn on and turn off your Connection when you need it just like in the PPP days
In the past couple of days, when I was without an active internet connection, I was able to deduct the reason why sudo asks for a connection to the internet when my Gateway, one of my gateways, has none.
It turns out that for some reason sudo is looking for a FQDN {fully qualified domain name} on the Internet.
I wonder why, because on my SBC the name of the Server ends with .local
In order not to get this extremely annoying error, which slows down everything that you need to do with sudo, with a delay of Sixty to One Hundred Twenty seconds, you just need to turn off any network connection on the machine.
It was extremely annoying on the SBC, because I was making a duplicate of a USB stick, which constantly needed to invoke the sudo command, in order to write the data, with commands that needs root access to the device.
To give you an indication of the scope of the delay; a task which normally needs thirty minutes, took twelve hours and still failed, simply because it took way too long.
I am however a Bèta Tester. I love these interesting levels of troubleshooting with things that seem to be totally unrelated.
TLDR:
Disconnect your network when you need to use sudo if your gateways has no internet heartbeat
#SUDO #SBC #RaspberryPi #FQDN #Debian #internet #permission #troubleshooting #programming #OpenSource #POSIX
-
Internet is a service that you do not need 24 hours a day. In fact you should be able to turn on and turn off your Connection when you need it just like in the PPP days
In the past couple of days, when I was without an active internet connection, I was able to deduct the reason why sudo asks for a connection to the internet when my Gateway, one of my gateways, has none.
It turns out that for some reason sudo is looking for a FQDN {fully qualified domain name} on the Internet.
I wonder why, because on my SBC the name of the Server ends with .local
In order not to get this extremely annoying error, which slows down everything that you need to do with sudo, with a delay of Sixty to One Hundred Twenty seconds, you just need to turn off any network connection on the machine.
It was extremely annoying on the SBC, because I was making a duplicate of a USB stick, which constantly needed to invoke the sudo command, in order to write the data, with commands that needs root access to the device.
To give you an indication of the scope of the delay; a task which normally needs thirty minutes, took twelve hours and still failed, simply because it took way too long.
I am however a Bèta Tester. I love these interesting levels of troubleshooting with things that seem to be totally unrelated.
TLDR:
Disconnect your network when you need to use sudo if your gateways has no internet heartbeat
#SUDO #SBC #RaspberryPi #FQDN #Debian #internet #permission #troubleshooting #programming #OpenSource #POSIX
-
UK ISPs Blocked 7,000+ Piracy Domains in the First Six Months of 2024
https://torrentfreak.com/uk-isps-blocked-7000-piracy-domains-in-the-first-six-months-of-2024-240701/
#PublishersAssociation #dynamicinjunction #PremierLeague #SiteBlocking #siteblocking #Anti-Piracy #fqdn #bpi #MPA #sky
-
UK ISPs Blocked 7,000+ Piracy Domains in the First Six Months of 2024
https://torrentfreak.com/uk-isps-blocked-7000-piracy-domains-in-the-first-six-months-of-2024-240701/
#PublishersAssociation #dynamicinjunction #PremierLeague #SiteBlocking #siteblocking #Anti-Piracy #fqdn #bpi #MPA #sky
-
UK ISPs Blocked 7,000+ Piracy Domains in the First Six Months of 2024
https://torrentfreak.com/uk-isps-blocked-7000-piracy-domains-in-the-first-six-months-of-2024-240701/
#PublishersAssociation #dynamicinjunction #PremierLeague #SiteBlocking #siteblocking #Anti-Piracy #fqdn #bpi #MPA #sky
-
UK ISPs Blocked 7,000+ Piracy Domains in the First Six Months of 2024
https://torrentfreak.com/uk-isps-blocked-7000-piracy-domains-in-the-first-six-months-of-2024-240701/
#PublishersAssociation #dynamicinjunction #PremierLeague #SiteBlocking #siteblocking #Anti-Piracy #fqdn #bpi #MPA #sky
-
UK ISPs Blocked 7,000+ Piracy Domains in the First Six Months of 2024
https://torrentfreak.com/uk-isps-blocked-7000-piracy-domains-in-the-first-six-months-of-2024-240701/
#PublishersAssociation #dynamicinjunction #PremierLeague #SiteBlocking #siteblocking #Anti-Piracy #fqdn #bpi #MPA #sky
-
💻FQDN - Tecno-Acrónimo #fqdn #tecnologia #tecnoacronimo #tech #geektok #hardware #software #redes #sistemas #darkentech
-
💻FQDN - Tecno-Acrónimo #fqdn #tecnologia #tecnoacronimo #tech #geektok #hardware #software #redes #sistemas #darkentech
-
💻FQDN - Tecno-Acrónimo #fqdn #tecnologia #tecnoacronimo #tech #geektok #hardware #software #redes #sistemas #darkentech
-
💻FQDN - Tecno-Acrónimo #fqdn #tecnologia #tecnoacronimo #tech #geektok #hardware #software #redes #sistemas #darkentech
-
Question for any interested in domain names.
In Norway there are a bunch of "sub" domains to the .no domain you can register.
Example: [your domain].Oslo.no
Are there other top level domains that do this? Offering sub-level domains for registration.
-
Question for any interested in domain names.
In Norway there are a bunch of "sub" domains to the .no domain you can register.
Example: [your domain].Oslo.no
Are there other top level domains that do this? Offering sub-level domains for registration.
-
Question for any interested in domain names.
In Norway there are a bunch of "sub" domains to the .no domain you can register.
Example: [your domain].Oslo.no
Are there other top level domains that do this? Offering sub-level domains for registration.
-
Question for any interested in domain names.
In Norway there are a bunch of "sub" domains to the .no domain you can register.
Example: [your domain].Oslo.no
Are there other top level domains that do this? Offering sub-level domains for registration.
-
Question for any interested in domain names.
In Norway there are a bunch of "sub" domains to the .no domain you can register.
Example: [your domain].Oslo.no
Are there other top level domains that do this? Offering sub-level domains for registration.
-
Doch, tatsächlich.
OBWOHL ich über den #FQDN zugreifen möchte, haspp10opt.desy.de, schafft Tango/omniORB/Corba/whoever es nur, wenn in der /etc/resolv.conf auch dieser Eintrag ist:
search desy.de*grmpft sich das Gesicht
-
Protect Office365 and Windows365 with Azure Firewall
"Traffic from the organization’s network to the required Office 365 endpoints should be managed and secured, which could be a time-consuming ongoing task. With the recent announcement of Azure Firewall integration with Office 365, you can now easily manage this traffic and leverage the firewall’s security features to secure it"
#azure #office365 #security #network #windows #azurefirewall #microsoftsecurity #microsoft #firewall #network #networksecurity #firewallpolicy #fqdn #cloudsecurity #cloudnetworking #soc #azurenetworksecurity
-
Protect Office365 and Windows365 with Azure Firewall
"Traffic from the organization’s network to the required Office 365 endpoints should be managed and secured, which could be a time-consuming ongoing task. With the recent announcement of Azure Firewall integration with Office 365, you can now easily manage this traffic and leverage the firewall’s security features to secure it"
#azure #office365 #security #network #windows #azurefirewall #microsoftsecurity #microsoft #firewall #network #networksecurity #firewallpolicy #fqdn #cloudsecurity #cloudnetworking #soc #azurenetworksecurity
-
Frage an die Fachwelt: Früher war der Common Name in einem #Zertifikat maßgebend. Mittlerweile verlangt entweder der Standard oder der faktische Industrie-Quasi-Standard #SAN-Einträge. (SAN: #SubjectAlternateName). Welcher codierte Standard ist maßgebend? Welche #Browser setzen den Standard wie um? Wenn im Common Name z.B. der #FQDN steht, im SAN nur der einfache Hostname ohne Domain, was versucht welcher Browser zuerst? DIese Konstellation scheint gerade flackernde Probleme zu verursachen, je nachdem, welche #URL eingegeben wird, wirft ein Aufruf Fehler, der nächste Aufruf der gleichen URL geht sauber durch und zeigt ein geschlossenes oder grünes Schloss. Wo finde ich hierfür belastbare Info? (FQDN: #FullyQualifiedDomainName, URL: Unified Resource Locator, auch: #Link, im einfachsten Fall ein https-Link einer Webseite)
-
Frage an die Fachwelt: Früher war der Common Name in einem #Zertifikat maßgebend. Mittlerweile verlangt entweder der Standard oder der faktische Industrie-Quasi-Standard #SAN-Einträge. (SAN: #SubjectAlternateName). Welcher codierte Standard ist maßgebend? Welche #Browser setzen den Standard wie um? Wenn im Common Name z.B. der #FQDN steht, im SAN nur der einfache Hostname ohne Domain, was versucht welcher Browser zuerst? DIese Konstellation scheint gerade flackernde Probleme zu verursachen, je nachdem, welche #URL eingegeben wird, wirft ein Aufruf Fehler, der nächste Aufruf der gleichen URL geht sauber durch und zeigt ein geschlossenes oder grünes Schloss. Wo finde ich hierfür belastbare Info? (FQDN: #FullyQualifiedDomainName, URL: Unified Resource Locator, auch: #Link, im einfachsten Fall ein https-Link einer Webseite)
-
Another small Blog Posts; This time about DNS: Why using .local or .home as local Domainname is a bad practise and how to improve it. #fqdn #dns #homelab
https://tcpip.wtf/en/why-your-local-dns-name-does-matter.htm
-
Another small Blog Posts; This time about DNS: Why using .local or .home as local Domainname is a bad practise and how to improve it. #fqdn #dns #homelab
https://tcpip.wtf/en/why-your-local-dns-name-does-matter.htm
-
If you need to find the fully-qualified domain name (FQDN) of your server in Linux (e.g., you want to know whether to accept or deny an ACME challenge for Let’s Encrypt TLS certificates.):
* hostname --fqdn # OR
* cat /etc/hostnameAnd to get the IP:
* hostname --ip-address
Source: https://serverfault.com/questions/490825/how-to-set-the-domain-name-on-gnu-linux