Reputation
7,365
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
3 21 44
Newest
 Nice Answer
Impact
~837k people reached

Jul
7
comment SSH server zero-day exploit - Suggestions to protect ourselves
Kerberized telnet is actually reasonably safe. The nice thing about kerberos is you can centrally revoke a key if you want to, unlike ssh where you have to visit each host and remove a key from each authorized_keys file.
Jul
7
comment SSH server zero-day exploit - Suggestions to protect ourselves
How real is this? A little googletrolling turned up seclists.org/fulldisclosure/2009/Jul/0028.html as the most original source of this rumor. Anyone have independent verification of this?
Jul
7
comment Virtual-domain mail server installation on Ubuntu 9.04
@womble: I only ask because you implied that you were changing OSes and that forced a change of MTAs while changing one doesn't necessarily mandate changing the other. I personally try to change only one big thing at a time. I'm not really a qmail fanboy -- for instance, recently I thought about switching to postfix so I could do outgoing mail via smtpauth to my ISP via a smtproute and didn't feel like eating patchsoup, but whenever I install a new OS, I usually just carry forward my old email config because it (kinda) works and I'm lazy.
Jul
6
comment SED Find&Replace with “OR”
and of course: find . -type f
Jul
6
comment Why is Linux more popular than BSD?
Let me just clarify the gpl "disadvantage" statement -- it is only that if I incorporate GPL code into my product I take on an added cost of keeping track of it to make sure I don't mix it with other parts of the code (and lose control of those), I have to package and publish those parts of the code, etc. This compared to BSD where I just dump it into my codebase and forget about it. I don't have any real opinion on which license is "better" for whatever ambiguous definition of "better" someone may want to flame on about.
Jul
6
comment Why is Linux more popular than BSD?
These observations are clearly 100% spot on, but they are specific to why users and admins chose linux vs bsd. I find it interesting that even in the embedded space, linux dominates. Tivo, wrt, maemo, gphone, pre, f5 -- all these companies had product managers that evaluated linux vs windriver vs bsd vs opensolaris. It is interesting to me that linux still comes out ahead even given GPL "disadvantage" (from the perspective of the company selling a product).
Jul
6
comment Why is Linux more popular than BSD?
Yes, absolutely there are many appliances based on BSD. The license is more favorable for that sort of application than the gpl. Easy examples include juniper routers and the trapeze wireless network controllers. In the embedded space, though, I do see lots and lots of linux based systems and I suspect that has to do with the RT kernel enhancements in linux. (see my original comment about fancy kernel enhancements in linux vs Xbsd)
Jul
4
comment Exchange server replacement that runs on Linux
Does it work with outlook?
Jul
4
comment Choosing network topology for top performance
I would switch over to 3 links between each of the devices in the primary path and 1 link to the secondary path.
Jul
3
comment Choosing network topology for top performance
If you're using spanning tree I believe all the traffic will follow one path through your network. You should to LACP between each of the switches, at the very least.
Jul
3
comment Choosing network topology for top performance
@gregc: How are you managing L2 redundancy? Are the clients on lots of different switches or are they split between the 2 switches the server is attached to? Are you using spanning tree?
Jul
3
comment Choosing network topology for top performance
I don't think in this case you'd ever be able to load balance across more than 2 links. You can't do LACP to 2 different remote switches, so you'd be doing 2 LACP groups and the server would only ever use one of those links at a time. I'd switch to a 3 and 1 and see if win2k3 allows you to bias to the 3 link LACP. Better performance in most situations and the system is still reliable if a single switch fails.
Jul
2
comment Running TFTP Server on specified port
does the client accept instructions that it connect on a different port? How hard would it be to update the client to use a different port? Changing the server's port is trivial -- it typically runs out of inetd/xinetd and can be told to start on any port you want.
Jul
2
comment Running TFTP Server on specified port
The trick is getting the client to connect to the tftp server on the non-standard port. It's either trivial or really really hard, depending on the level of stupidity of the client.
Jul
1
comment Are there any vendors making a Gigabit Fiber solution for laptops?
@romandas: Ethernet isn't like an old modem that varies the speed according to the available bandwidth. Ethernet works or it doesn't. If it doesn't you either get media errors which cause your throughput to fall through the floor or you don't get a link. If you get no errors with cat 5, you'll have the same bandwidth as if you use cat6. Bet you a beer on that one... Wish this silly interface had private messages...
Jul
1
comment Are there any vendors making a Gigabit Fiber solution for laptops?
That's the boring way to solve the problem! He'd need to make sure to get the proper sort of converter (multimode / single mode / etc)
Jul
1
comment Are there any vendors making a Gigabit Fiber solution for laptops?
@romandas: the gigabit ethernet spec requires that it function over cat5. Many older cat5 sites are not actually cat5 and still work at 100mb because it is more tolerant than gig, but if the wire plant tests out fine at cat5 specs, it will work at gig just as well as if you use cat6. networkworld.com/news/tech/2000/1016tech.html and en.wikipedia.org/wiki/Gigabit_Ethernet#1000BASE-T
Jul
1
comment Are there any vendors making a Gigabit Fiber solution for laptops?
laptop expresscards are 1 lane of pci express, which is 250MB/sec in each direction, which should allow you to snoop up to 2 flat out 1gig ethernet links. If you use a card that does IP in the card and allows you to put filters on the card, that should even allow useful monitoring of 10gig links, though clearly not the full pipe.
Jul
1
comment Are there any vendors making a Gigabit Fiber solution for laptops?
Do you have the shiny briefcase? If you go with the magma box and already have gig pci express cards it's actually not too pricy... Get a card with 2 interfaces so you can tap both directions at the same time.
Jun
30
comment How to diagnose network speed issues in a Microsoft environment?
The parent needs to test performance from one subnet to the next and from hosts inside the each subnet to each-other. That will isolate if it is an L3 problem or an L2 / L1 problem. Swapping cables isolates an L1 problem and looking at the interface error counters on each side of the link (switch & host) to isolate L2. Even 10/half is way way faster than the speed one of the hosts observed, which leads me conclude L2 errors which will destroy TCP/IP throughput under load.