Hallo Leute. Ich habe einen Windowsserver in Virtualbox mit Hyper V installiert. Nun versuche ich eine VM mit Windows auf diesen Server zu installieren, kriege aber immer einen Error. Wie kriege ich eine VM drauf installiert?


"Set-VMProcessor -ExposeVirtualizationExtensions $true" hab ich schon probiert, funktioniert nicht.

Hello nice people!

I have a hardware RAID 0+1 made from four disks ob 3TB each.

Now one drive was temporarily disconnected, now online again. In the BIOS the RAID array status is "Rebuild". But this seems to take very long. Is there any software out there to manage RAIDs? I can't find anything at all.

The attached image shows the RAID before one disk was disconnected, now the status is yellow and shows "Rebuild".

Thank you very much!

I have been looking for a simple monitoring program for our website for some time. Thanks to the help of our users I found in a post the monitoring software Uptime Kuma.

Uptime Kuma is a web server that uses different types of monitors ( HTTP(s), TCP ports, keywords, ping, DNS, push, etc.) to store and check the status of the hardware or software being monitored and, if necessary, alert you via notifications of various types (Telegram, Discord, Signal, Slack, Pushover, Email (SMTP), etc.). The software is easy to use and can additionally create its own status overviews. You can install it via Docker or directly. Here are my instructions for the installation without Docker.

Requirements

• Ubuntu Linux 22.04.1 LTS on a machine or VM that is always running (you want continuous monitoring).
• The installation should be run as a standalone user and not as root user. In my example it is always the user 'frank'.
• node, npm, nvm, pm2
• git

Installation: Version Manager (nvm), Node (node) and Node Package Manager (npm)

If you already have Node and npm installed on your system, you can skip this step.

Node and npm should be installed with a version manager (nvm). This way you can keep an overview of the many versions. See also: https://github.com/nvm-sh/nvm


The terminal must be restarted for the environment variables to work. After that the command "nvm" should be available. Short check:


Now we install the current version of Node:


After the automatic download and install we check it with:


Now all requirements are met (nvm, npm and node).

Installation: Uptime Kuma

Details, source code and configuration can be found at: https://github.com/louislam/uptime-kuma

Now we check again for the current npm version and install the latest version if necessary:


Then we load the source code from Git and start the installation:


When the message "Done" appears, it still takes a few minutes until the input appears again. Do not abort before!

The "Uptime Kuma" server is ready to start. You can start it directly with the following command:

Installation: Process Manager (pm2)

I personally find it better if the server runs and is managed in the background. For this we install a process manager (pm2):


Now we start the "Uptime Kuma" server using pm2:

The default settings for this are: "localhost" and port "3001":


You can of course customize the port and the host:

After the start it should now look like this:


The installation is finished. You can reach the Uptime Kuma Admin web page at:


With the process manager pm2 you can control the server:

Start automatically at boot time

To make Uptime Kuma start automatically on the next reboot, enter the following command:


Now a generated command appears. Now paste this command completely into the shell via Copy&Paste and execute it:


This will start the server at the next reboot.

Tip: To get rid of the autostart of the server enter the following:

Ubuntu Firewall (ufw)

If the Ubuntu firewall is active, you have to release port 3001:

Call GUI

At the first start the GUI asks for the language and creates a new user:


After that you start in the Dashboard. Here you can create a new monitor:




That's it

Feedback, questions and additions are welcome. If you like the tutorial, I am happy about every Like (click on the heart).

Greeting
Frank

Hi all,

We are trying to create an expression that matches, if the sequence is containing the string "test123".
However it should not match, if the sequence also contains the string "nowEXCLUDE".

Example sequences:
1. "abc def ghi jkl mno" --> should not match
2. "abc def ghi test123 jkl mno" --> should match
3. "abc def ghi test123 jkl nowEXCLUDE mno" --> should not match
4. "abc def ghi jkl nowEXCLUDE mno" --> should not match*

We are using the library CATLRegExp and tried a lot on https://regex101.com/ but are not successful.

Any help is greatly appreciated. Thank you.

This tutorial is a short extension to the more comprehensive local Cisco Tutorial.
Due to several requests regarding port forwarding and operation with a DMZ segment it quickly shows a more detailed configuration of the modern, onboard Zone Based Firewall (ZFW) in IOS and IOS-XE.

Basic configuration

The basic configuration is kept intentionally simple, so that it can be used for more sophisticated ZFW setups as a blueprint.
The example shows a webserver in the DMZ zone which is accessible via port forwarding from the Internet. (HTTP with port translation)
Example zone rules are as follows and must be set to individual requirements:

• LAN -> Internet: All allowed with extended protocol inspection
• LAN -> DMZ: Only HTTP and HTTPS traffic allowed, no Ping
• DMZ -> Internet: Only HTTP, HTTPS, DNS, NTP and ICMP (Ping etc.) traffic allowed
• Internet -> DMZ: Only HTTP and HTTPS traffic allowed

ZFW firewall setup

Relevant content related maps and profiles as well as zone pairings use the same color to show their relationship.

service timestamps debug datetime localtime
service timestamps log datetime localtime show-timezone year
!
hostname cisco
!
aaa new-model
!
clock timezone CET 1 0
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
!
!
ip dhcp excluded-address 192.168.1.1 192.168.1.10
ip dhcp excluded-address 192.168.1.250 192.168.1.254
ip dhcp excluded-address 10.1.2.1 10.1.2.10
ip dhcp excluded-address 10.1.2.50 10.1.2.254
!
ip dhcp pool LAN
network 192.168.228.0 255.255.255.0
default-router 192.168.1.1
domain-name cisco.home.arpa
dns-server 192.168.1.1
!
ip dhcp pool DMZ
network 10.1.2.0 255.255.255.192
default-router 10.1.2.1
domain-name cisco.home.arpa
dns-server 10.1.2.1
!
ip dhcp pool Server
host 10.1.2.55 255.255.255.0 -> Optional: Server gets static IP via Mac address reservation.
client-identifier 0102.42ba.67fb.4a
!
!
ip domain lookup source-interface GigabitEthernet4
ip domain name cisco.home.arpa
ip host server.cisco.home.arpa 10.1.2.55
!
lldp run
no cdp run
!
!
class-map type inspect match-any ALLOW_IN
match access-group name ALLOWv4
match access-group name ALLOWv6

class-map type inspect match-any ROUTER
match protocol tcp
match protocol udp
match protocol icmp

class-map type inspect match-any PORTFW
match access-group name PORTFW_ACL

class-map type inspect match-any LAN
match protocol dns
match protocol http
match protocol https
match protocol pop3s
match protocol pop3
match protocol imaps
match protocol imap3
match protocol imap
match protocol smtp
match protocol sip
match protocol sip-tls
match protocol rtsp
match protocol ssh
match protocol ntp
match protocol tcp
match protocol udp
match protocol icmp

class-map type inspect match-any DMZ
match protocol dns
match protocol http
match protocol https
match protocol ntp
match protocol icmp

class-map type inspect match-any LAN_DMZ
match protocol http
match protocol https

(class-map type inspect match-any DHCPv4 -> Optional: only if WAN port in DHCPv4 client mode!
match access-group name DHCPv4)
!
!
policy-map type inspect LANtoInternet
description Traffic LAN to Internet
class type inspect LAN
inspect
class class-default
drop

policy-map type inspect LANtoDMZ
description Traffic LAN to DMZ
class type inspect LAN_DMZ
inspect
class class-default
drop

policy-map type inspect DMZtoInternet
description Traffic DMZ to Internet
class type inspect DMZ
inspect
class class-default
drop

policy-map type inspect InternetToDMZ
description Traffic Internet to DMZ
class type inspect PORTFW
inspect
class class-default
drop

policy-map type inspect RouterToInternet
description Router a. DHCPv4 traffic to Internet
(class type inspect DHCPv4 -> Optional: only if WAN port in DHCPv4 client mode!
pass)
class type inspect ROUTER
inspect
class class-default
drop

policy-map type inspect InternetToRouter
description Permitted traffic Internet to router
class type inspect ALLOW_IN
pass
class class-default
drop
!
zone security Internet
zone security LAN
zone security DMZ
!
zone-pair security LanToInternet source LAN destination Internet
description Traffic LAN to Internet
service-policy type inspect LANtoInternet

zone-pair security LanToDMZ source LAN destination DMZ
description Traffic LAN to DMZ
service-policy type inspect LANtoDMZ

zone-pair security InternetToRouter source Internet destination self
description Traffic Internet to Router
service-policy type inspect InternetToRouter

zone-pair security RouterToInternet source self destination Internet
description Traffic Router to Internet
service-policy type inspect RouterToInternet

zone-pair security DMZtoInternet source DMZ destination Internet
description Traffic DMZ to Internet
service-policy type inspect DMZtoInternet

zone-pair security InternetToDMZ source Internet destination DMZ
description Traffic Internet to DMZ
service-policy type inspect InternetToDMZ
!
!
!
interface Vlan1
description Local LAN
ip address 192.168.1.1 255.255.255.0
ip nat inside
zone-member security Local
!
interface Vlan10
description DMZ
ip address 10.1.2.1 255.255.255.0
ip nat inside
zone-member security DMZ
!
interface GigabitEthernet4
description Internet Port
ip address dhcp
ip nat outside
zone-member security Internet
!
ip dns server
ip nat inside source static tcp 10.1.2.55 80 interface GigabitEthernet4 58080 -> Port forwarding and translation
ip nat inside source static tcp 10.1.2.55 443 interface GigabitEthernet4 443 -> Static NAT
ip nat inside source route-map NONAT interface GigabitEthernet4 overload
!
!
ip access-list extended ALLOWv4
remark Allowed to WAN ip address (VPN)
(permit udp any eq bootps any eq bootpc) -> Optional: only if WAN port in DHCPv4 client mode!
permit udp any any eq 1701
permit udp any any eq isakmp
permit udp any any eq non500-isakmp
permit esp any any
!
ipv6 access-list ALLOWv6
remark Allowed v6 to Firewall
permit udp any eq 547 any eq 546
!
(ip access-list extended DHCPv4 -> Optional: only if WAN port in DHCPv4 client mode!
remark Pass DHCPv4 WAN traffic
permit udp any eq bootpc any eq bootps)

ip access-list extended NAT
remark Allowed IPs for NAT
permit ip 192.168.228.0 0.0.0.127 any
permit ip 10.1.2.0 0.0.0.127 any

ip access-list extended PORTFW_ACL
remark Pass portforwarded traffic
permit tcp any host 10.1.2.55 eq 80
permit tcp any host 10.1.2.55 eq 443
!
route-map NONAT permit 10
match ip address NAT
!
ntp source GigabitEthernet4
ntp server de.pool.ntp.org
!
end

Links with further information

Cisco ZFW design guide:
https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-z ...

ZFW firewall secured VPNs with Mikrotik and AVM FritzBox:
https://administrator.de/en/cisco-ipsec-vpn-with-mikrotik-or-fritzbox-21 ...

Cisco configuration tutorial:
https://administrator.de/tutorial/cisco-880-890-und-isr-router-konfigura ...