u/meowffy

hi
ive general cloud experience but limited hands on experience with GCP
is three days enough? (ive already booked the exam) also are there any reliable and up to date practice tests or exam d(you)Ⓜ️🅿️s?

hello hello.. im having a weird SSH issue and im running out of ideas

we have multiple servers using a tenable image across different VCNs and we added our SSH key during provisioning
initially SSH was asking for a password and i logged in through the tenable web interface, changed the default credentials, then checked the server and noticed the .ssh setup was missing so i created it, added our public key/user, fixed the permissions and after that SSH from our jump server worked fine for all servers except one (w new subnet)

for this one server SSH just hangs no password prompt no error

ssh -vvv stops here:
$ ssh -vvv <user>@10.x.x.x
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips
debug1: Connecting to 10.x.x.x [10.x.x.x] port 22.
debug1: Connection established.
...
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.4

the interesting part is that SSH to the exact same server works from our PAM server!! but not from our jump server

the affected server is on a new subnet so im suspecting something network related, we checked the routing and it looks correct also checked the firewall but strangely we couldn’t see any traffic coming from the jump server

i ran sudo tcpdump -nn -i ens3 host <target_ip> and port 22 on the jump server while trying to SSH. the TCP connection gets established and the jump server sends a 21-byte packet (looks like the SSH client banner), but it keeps retransmitting it and gets no response back

i also tested MTU 1500 with ping -M do -s 1472 and got 0% packet loss

could this be asymmetric routing or some subnet/firewall/ACL issue specific to the path from the jump server?

hello hello.. im having a weird SSH issue and im running out of ideas

we have multiple servers using a tenable image across different VCNs and we added our SSH key during provisioning
initially SSH was asking for a password and i logged in through the tenable web interface, changed the default credentials, then checked the server and noticed the .ssh setup was missing so i created it, added our public key/user, fixed the permissions and after that SSH from our jump server worked fine for all servers except one (w new subnet)
for this one server SSH just hangs no password prompt no error

ssh -vvv stops here:
$ ssh -vvv <user>@10.x.x.x
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips
debug1: Connecting to 10.x.x.x [10.x.x.x] port 22.
debug1: Connection established.
...
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.4

the interesting part is that SSH to the exact same server works from our PAM server!! but not from our jump server
the affected server is on a new subnet, so im suspecting something network related we checked the routing and it looks correct also we checked the firewall, but strangely we couldn’t see any traffic coming from the jump server
since TCP/22 is showing connection established but the client never seems to receive the server’s SSH banner, im not sure what im missing here
could this be asymmetric routing or some subnet/firewall/ACL issue specific to the path from the jump server?

السلام عليكم ورحمة الله
بدون مقدمات، أنا صار لي سنة وشهر تقريبًا أحمل مشاعر اتجاه أحد زملاء العمل
وضحت مشاعري كذا مرة بتصرفاتي، اثنينا اشخاص محترمين ما نتعدى حدود العمل لكن تعاملي معه ودّي ومميز أكثر من أي زميل/ة
بقائي حتى ساعات متأخره للتواصل معه هذا بحد ذاته اعتراف

السؤال هو.. كيف اتزوجه؟
زميلي هذا شخص جدًا لطيف معي حتى بعد ما حاولت ابين له، ما زال يستلطفني! ويحاول يدخلني معه بالشغل مع العلم انه من قسم وانا قسم ثاني.

كيف اتزوجه منجد انا ابيه هو
صراحه تصير بيننا مواقف كثييير لكن ما اقدر اذكرها هنا، وما اعتقد الاعتراف بينفعني

hi everyone

about 6 months ago we provisioned new servers for nessus on OCI using the tenable core ol8 custom image
during creation i injected our standard SSH public key as we always do
since then we haven't been able to access these servers via ssh.. the web applications running on them are working perfectly fine! but ssh is completely blocked(?)
every time we try to connect it prompts us for a password instead of accepting our ssh key

someone from our enterprise architecture team mentioned that ssh might be disabled by default on this specific tenable image, but we are stuck because we cannot log in to change anything

im looking for suggestions official documentation orrr workarounds for this this is becoming urgent because if the storage fills up tomorrow we won't be able to increase it nor can we install any security agents on the servers..

has anyone faced this with Tenable Core on OCI? how can we gain access to these servers?
any documentation or advice would be highly appreciated 🙏🏼🙏🏼🙏🏼🙏🏼🙏🏼

thanks!

hi everyone
i followed this documentation https://docs.oracle.com/en-us/iaas/Content/DNS/Tasks/dnssec-alarm.htm to create a DNSSEC alarm and setup an email subscription ok? okayy
however the status is stuck on "pending**"** and im not receiving the confirmation email at all..!
even after hitting "resend confirmation" multiple times 🤔
has anyone faced this issue before or knows a workaround to fix it?
thanksss

السلام عليكم
هذي عباره اقراها دايم بخصوص المواضيع اللي نفس موضوعي لكن..

والله ما اعرف كيف ابدأ هذا الموضوع ومب من عادتي اكتب بوست للعلن زي كذا بس احتجت اكتبه..

الموضوع بدأ من سنه تقريبًا فبحاول اختصره
انا الصيفيه اللي فاتت بديت تدريبي مع تيم والتيم كان جدًا متعاون وطيبين الله يسعدهم واحد واحد، اللي حصل اني انجذبت لواحد منهم صار عندي فضول اتجاهه واعجبت فيه وتعلقت فيه
والله اني ما افكر بهذي السخافات ابدًا لكن الرجال ذكي وطيب وشخص محافظ وبشوش ومحبوب ودايم يقدم لي المساعده
عالعموم انا خلصت فتره تدريبي وتوظفت بقسم ثاني مب معه (صراحه كنت ابي اتوظف بقسمه عشان اصير معه 😇 لكن مب هو المجال اللي اشوف نفسي فيه)
والله علاقتي فيه كلها تتمحور حول الشغل، ممكن تشيك على كذا؟ ممكن تسوين لي كذا.. وهكذا
بدت تقل عن قبل اكيد لاني ما صرت معه لكني كل مره احاول اختلق مشكله عشان اتواصل معه او اذا شفت تيمي يحتاجونهم على طول اطق الصدر واتواصل معهم انا
فيه سبيشل تريتمنت لكن ما اعرف كيف ممكن افسره؟ هل هو يحمل نفس المشاعر؟ او هو بس مستلطفني؟

اقدر اتكلم عن كل مواقفي معه موقف موقف من اول يوم ما راح اوقف بس بطول عليكم

انا بنت متستره وما اخذ واعطي مع الجنس الاخر باستثناءه (اكشلي ما "اخذ واعطي" لكن اتواصل معه كثييييير خصوصًا اذا خلص دوام التيم حقه)
والله اني ما خليت ليله وتريه ما دعيت فيها ولا عشر اواخر ولا يوم عرفه كل مره ادعي لنفسي ادعي له معي وادعي الله يجمعنا بالحلال والله ما ابي شيء غير الحلال
اقسم بالله شيء يقطع قلبي تعبت والله ما ادري وش اسوي ☹️

btw امي تدري عنه وعن مشاعري وحتى هي تحبه وتدعي له معي

هل هذي فضفضه؟ او اطلب مساعده؟ ما اعرف

شكرًا لحسن قراءتكم 🙏🏼

helloooooo
im a cloud engineer (not from the security team) and a few months ago we created some tenable nessus servers in OCI based on a request from our ISD/security team ok? okaayy
we used the tenable image/OS they requested and added our usual ansible SSH key same as all our other servers
however.. SSH access is not working at all it keeps asking for a password instead of accepting the SSH key and none of us can access the servers
now we need to install agents on them but we cannot even log in
ha anyone faced this before with tenable images on OCI? any idea what the issue could be? 😿🙏🏼

Hi everyone, I’m trying to enable Flow Logs on an OCI subnet in our DR environment, but the log keeps failing during creation
I already tested using a completely new Log Group and Log name in the same compartment as the subnet and I also verified that I have full admin permissions
I tried both with and without a Capture Filter, and confirmed that the filter type is a valid Flow Log Capture Filter
The behavior is always the same: the log stays in “Creating” for a short time, then changes to “Failed.” Since this is happening even with fresh resources and correct permissions, I’m wondering if this could be related to an OCI backend issue, DR-specific limitation, or maybe a known bug. Has anyone experienced something similar before or found a workaround?
Thanks

we typically enable VCN Flow Logs at the subnet level and filter them through a Connector to Splunk

we now need to enable logging for a VLAN and we can't find a similar native option as we do with subnets..
there're no OCI compute instances attached to this VLAN to use as a reference point, so is there a way to enable logs directly for the VLAN in the OCI console? any advice on the best path to get these logs into our splunk connector would be great 🙏🏼