Reputation
510
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
4 6
Newest
 Supporter
Impact
~24k people reached

  • 0 posts edited
  • 0 helpful flags
  • 5 votes cast
Jun
18
comment Keeping mutliple Linux instances up to date
Yup... ansible would be my number one choice here too. Simple and efficient.
Jun
18
comment Centos 5.8 - firewall blocking Virtualizor staff
Also... is there a firewall or NAT box between your KVM host and the internet ? As in... is the IP of your box in a RFC1918 range (10.x.x.x, 172.16-31.x.x or 192.168.x.x)
Jun
18
comment Is there any lower bound on DHCP lease time?
Various wifi accesspoints will give default short leasetimes, as the clients are likely to be gone a few minutes later. Clients that remain will get longer lease-times on renewal. Still, 5 minutes would sound like a somewhat sane minimum leasetime.
Jun
18
comment Centos 5.8 - firewall blocking Virtualizor staff
If you want to allow all traffic, turn the firewall off (service iptables off, service ip6tables off). Putting the policy on accept won't work when there is a block-rule.
Jun
18
comment Centos 5.8 - firewall blocking Virtualizor staff
The default policy is accept... but there are rules to still block all traffic. Please look at your firewall rules (iptables -L -n -v -x) to see what rules there are, and what might be blocked.
Apr
20
comment Filter HTTPS content & enforce Captive Portal without MITM proxy
Also... would you WANT to intercept any possible banking traffic... which you have now decrypted on your gateway.
Apr
20
comment Filter HTTPS content & enforce Captive Portal without MITM proxy
I would recommend against any solution that required end-users to accept a new root-certificate... If/when this cert leaks, all your users will be in trouble. Basically you are MITM-ing. If you don't want to allow traffic to certain sites, block them on IP, not on SSL level.
Apr
20
comment Nagios bash syntax error
Please repost the error messages with the LC_LANG setting set to 'C' or en_US.
Apr
20
comment Install GNU/Linux No System Disk Error — HP Smart Array
Since you state that the server is incapable of EFI/UEFI... this would probably also mean it doesn't do GPT. I would recommend doing an install with a regular old-skool MBR/Partition Table. Make sure to mark the boot partition as 'bootable'. You should be able to use lilo/grub/syslinux after that.
Mar
23
awarded  Supporter
Mar
23
comment Apache - protect a subdirectory but not the root
Also... you should not put your .htpassword file under the documentroot
Mar
21
awarded  Necromancer
Feb
13
awarded  Nice Answer
Jan
13
awarded  Yearling
Jan
13
answered How to exit after starting a service in Linux for loop
Jan
13
awarded  Commentator
Jan
13
answered How to grep directly to ftp?
Jan
13
comment How to grep directly to ftp?
On (gnu-) grep you can use "grep -r 'some sting' /somedir" ... as a slightly easier syntax. Also, as stated, you can't output-redirect to ftp, but you can do it with ssh.
Jan
13
answered Starting lighttpd from nagios renders lighttpd broken
Jan
13
answered Open port only on OpenVPN network with iptables