1,591 reputation
610
bio website
location
age
visits member for 5 years, 5 months
seen Jun 14 '13 at 23:21
Jack of all trades UNIX admin, with FreeBSD and Linux being my preferred operating systems.

Aug
13
comment Hotmail and Live.com rejecting all emails
Does it reject all messages or just particular ones you are trying to send? Register yourself accounts with Live/Hotmail and try sending yourself messages manually via telnet with SMTP commands for the IP addresses you are working with. If the simple test messages make it through, but "real" messages do not, then the mail content itself (anything from headers to HTML tags) could be increasing the spamminess of your mail past a certain threshold.
Jan
22
comment How can I log users' bash commands?
Start with the man pages for auditd and go from there. It might not be part of the base Debian install, but the audit facility is a Linux kernel component, so the userland tools can be installed and used on any distribution.
Jan
21
comment Any Available Versioning File Systems like VMS used to have
While I agree with your sentiment of VMS's "versioning" it is a nice feature from the end-user's point of view, and one that I regularly go looking for every year or so, just to see if any of the new file systems implement such a handy feature. "foo;verion" is so much more elegant (and easier to grasp for a novice, IMO) than "/mountpoint/.zfs/snapshot/five_days_ago/full/path/to/foo". It was about the only thing I liked of VMS when I was forced to endure it in college.
Jan
21
comment customer wont provide ssh access - ftp only
I think the key word is customer. We can choose to accept their business or not, and while we are obliged to offer our best professional advice, ultimately we get paid to do what they want to pay us to do. That the customers may choose to pay us to do what's against their own best interest is often no fault of our own.
Jan
20
comment Incoming SSH stopped working on FreeBSD 7.2
What does "sshd -d" give you?
Jan
8
comment I Want an Affordable Snapshot-Saving Crypto-Backupping RAID NAS
ZFS includes various forms of data redundancy. You can use type "mirror" or "raidz" (a form of RAID-5) with the zpool command. Say you have 3 devices to use for your main data repo: sda, sdb, and sdc. First, you would use GELI to encrypt them, setting them up so you'd need a password or keyfile (or both) upon boot-up (study "man geli"). That would give you the devices: sda.eli, sdb.eli, and sdc.eli. Then, you'd do something like: "zpool create nasdev raidz sda.eli sdb.eli sdc.eli". There is a bit of minutia in such a setup, but it's not overly difficult.
Jan
6
comment Lightweight Linux DNS
NSD runs on our public (hosted) name servers, the ones that provide the internet with our host names. Unbound runs both on other hosted public servers to cache recursive queries, as well as running on an internal server to handle queries of office PCs. As they both bind to port 53, you can't run them on the same machine unless it has multiple interfaces (or multiple IP aliases). Unbound, since it caches queries, takes up a lot more memory, though it is tunable. For example, on one server, Unbound is taking about 72MB in resident memory, but it caches lookups for the mail server.
Jan
5
comment Problem with Postfix
Is that an equivalent to "postsuper -s" (which is what I was going to suggest)?
Jan
4
comment use the cli of winrar to backup outlook pst
Outlook has a mechanism for backing up or archiving data (at least it did the last time I messed with it). Just configure it to do a nightly archive to a known PST file and location, RAR up the resulting files, then delete them.
Dec
17
comment is git any more or less effecient than subversion? (server load wise)
@wzzrd -- Based on my limited use of svn, I'd say the overhead of all the extra files really adds up. The consumption of inodes alone is a waste of resources, plus the slack wasted on all those extra files. For grins, I checked out the SAMBA_3_0 branch, and of the 6593 file/directory entries under that tree, 4239 (64%) are under a .svn directory. I stripped out the .svn directories, then initialized a git repo on the sources. Even before a "git repack" the svn repo was about 50% heavier in both file count and space usage than the git repo. Nothing against svn, but it is heavier than git.
Dec
14
comment Is a writable file security hole?
The use of quotas on the account the PHP process runs as (same as the web httpd process, most likely).
Dec
14
comment Scripting Directory Services without passwords
Any reason why NIS wasn't used? NFS-mounted /etc files just seems... wrong.
Dec
14
comment banned IP addresses when buying a dedicated server and email spam
+1 I went through this, and after wasting my time fighting with individual blacklist maintainers (some helpful, most not), I decided that the IP space I was rented was defective and told the provider as much. They first tried to fix things themselves with the blacklists, but they, too, grew tired of it so they gave me a fresh, untainted subnet.
Dec
14
comment create image from hard disk without free space (linux)
For a filesystem-agnostic solution, you can fill the filesystem with nulls ("dd if=/dev/zero of=/some/file ; rm /some/file") and then use dd's "conv=sparse" option. The downsides are: 1) This will be less efficient than a tool which knows the filesystem; and 2) so far as I can tell, using anything other than dd's default 512-byte block size will cause this to not work (or at least miss enough sparse space as to be useless), which will dramatically increase the time for dd to do its job.
Dec
2
comment Using subdomains for test-site
That's cool! I always like to explicitly name everything (I don't like surprises), so this option was unknown to me. I'll have to jot this one down for future reference. I can see where it might come in handy.
Dec
2
comment Resize /var partition on a remote system (Linux Debian Lenny)
Try "umount -f" -- just make sure your current working directory isn't somewhere under /var or your shell will get killed (never hurts to have a backup login shell standing by, especially on remote machines).
Dec
2
comment install SSH2 (server?) on FreeBSD
What version of FreeBSD? What's the output of "uname -srm"? How about the version of ssh: "ssh -v"?
Dec
2
comment install SSH2 (server?) on FreeBSD
FreeBSD's SSH server uses tcp_wrappers. Make sure that /etc/hosts.allow allows ssh access from the server running the php/ssh script.
Dec
2
comment install SSH2 (server?) on FreeBSD
OpenSSH (the ssh server/client included in the base FreeBSD system) supports the SSH2 protocol (and only SSH2) by default since SSH1 has security issues. The installation of the ssh2 port shouldn't be necessary.
Dec
2
comment Compressing Encrypted files
That just wouldn't work. At best, you'd get the same size as before. At worst, your resulting file would be bigger than the original encrypted file. His best bet it to compress the data before it gets encrypted in the first place.