Bind : validating : dlv.isc.org SOA: got insecure response; parent indicates it should be secure

Have you notified this error message in the logs since bind-9.8.2 update? named: validating @0x7fc170001550: dlv.isc.org SOA: got insecure response; parent indicates it should be secure named: error (insecurity proof failed) resolving ‘dlv.isc.org/DLV/IN’: 0.0.0.0#53 This is related to the new DNSSEC feature which is now enabled by default. This might indicate the DNS resolvers/forwarders you… Read More »

ScreenOS : Upgrading firmware from CLI

Juniper ScreenOS for SSG security appliance can be managed either through the Web UI or command line interface (CLI). Upgrade through the Web interface can be endless and painful. The best way to do it is through the CLI. To accomplish this task, you’ll need : – SSH or Telnet client – TFTP server Here… Read More »

FreeBSD : vsftpd not configured for standalone, must be started from inetd

Getting this error message trying to start vsFTPd on FreeBSD? 500 OOPS: vsftpd: not configured for standalone, must be started from inetd Then you missed the important part shown at the end of “vsftpd.conf”! # If using vsftpd in standalone mode, uncomment the next two lines: listen=YES background=YES Just uncomment “listen=YES”, “background=YES” and start the… Read More »

Networking : 92 bytes from 0.0.0.0 Time to live exceeded

If you experience issue with your subnet or receiving the following message when you try to ping an IP address, this mean you have a routing loop on your network. The same subnet might be configured on another router and the network is confused due to the different destination. You need to remove the bad… Read More »

JunOS : RT DEST 0.0.0.0 MASK 255.0.0.0 mask too short

You might notice this error trying to add a static route to your Juniper switch stack : root@ir01# set routing-options rib inet.0 static route 0.0.0.0/00 next-hop 0.0.0.0 {master:0}[edit] root@ir01# commit synchronize [edit protocols] ‘bgp’ [edit protocols] ‘ospf3’ [edit routing-options rib inet.0 static] ‘route 0.0.0.0/00’ RT: DEST: 0.0.0.0 MASK: 255.0.0.0 mask too short error: configuration check-out… Read More »

Windows : Plesk dependency for msi45 required by mssql2008

You might encounter this issue when installing Plesk 11 with Microsoft SQL Server on Windows : Unable to install the “mssql2008_configurator-1.0.noarch” package. The following could cause the installation failure: 1) mssql2008_configurator-1.0.noarch: No suitable solutions were found for the “msi45 >= 4.5.0000.0000” dependency. 2) The dependency for “msi45 >= 4.5.0000.0000” required by the “mssql2008_configurator-1.0.noarch” package could… Read More »

Linux : Restrict recursive lookup on BIND name server

To restrict as much as possible attack on your name server and avoid your resources consumed by tons of illegitimate queries, it’s wise to disable recursive lookup from the Internet for domains that are not served by your DNS server. To achieve that, simply add those parameters to named.conf “options” section : recursion yes; allow-recursion… Read More »