456 reputation
26
bio website
location New York, United States
age
visits member for 2 years, 5 months
seen Jun 15 '12 at 4:38

I'm a technologist celebrating 15 years on the Internet. I've worked with organizations large and small and across multiple verticals to include financial, life sciences, consulting, retail, marketing/media, gaming, and the public sector (federal and state).

My experience spans from layer 1 (designing and installing physical infrastructure) to layer 7 (app development) and layer 8 (managing programs and projects).

I enjoy a good conversation, technical or otherwise. Feel free to reach out to me if you have any questions or comments.


May
27
comment Protecting against DDoS attacks?
actually, I think this topic is more relevant to the security@stackexchange. There's a recent thread of syn flooding protection there.
May
24
comment Simple IP load balancer for web service that runs on Windows XP or Windows 7 Professional?
Well, you have to balance cost with time. You can build your own or use an existing solution (FOSS or commercial). If you'd rather not build your own, then you'd have to "learn" linux or settle with DNS RR LB (which doesn't provide HA). To tombull89's point, if you can't afford a NLB license and if HA is important, then perhaps priorities need to be reassessed.
May
23
comment Permanently assigning IP address for an embedded device
Yep - any communication to/from devices could generate a collision. The effect is broken comm until the conflict is resolved. With that said, following the RFC is a good practice IMHO.
May
10
comment What permissions are required to copy folders with security attached on a NAS
Another approach to track down what, if permissions, are denying the copy is to setup auditing and looking at the logs client-side and server-side.
May
9
comment What permissions are required to copy folders with security attached on a NAS
The description's a little vague but here are my thoughts: does the user have any "deny" permissions somewhere? Deny overrules any allow permissions set. With inheritance, a deny somewhere can easily affect effective policies. Add in groups and nesting, tracking down effective permissions can get hairy. Technically, a SAN is a block storage device so I don't think it's possible to assign "domain admin" rights to a block storage device. There may be other "security" software (i.e. endpoint control, dlp) that may be blocking the file transfer action. this happens outside file system permissions
May
9
comment Configuring an ISP in packet tracer
what's the difference between an isp's router and your router? generally nothing. If you're drawing up routing diagrams, then show the isp's router and how it'll be configured to participate in RIPv2. You can delineate the network boundary between you and the isp with a line.
May
9
comment SSL Enabled site refusing connections
Working down the OSI stack, is the port open and accessible? Try telnetting to 443 and see if you're able to establish a connection (note that windows telnet doesn't necessarily open a connection even though it may look open on the console).
May
5
comment Virtual PC Locks Everyone Out with a “To log into this remote computer…” error
How are you connecting to the VM guest? RDP? Console?
May
5
comment Does my small network need a domain name?
Specific to the BIND comment, since it sounds like you're a Windows shop, replace BIND with MS DNS server. It's a service available on most (all?) "Server" operations systems (with the exception of 2008 Web). Backtracking a bit, you may need to point internal clients to the internal DNS server and let the internal DNS forward to public DNS servers for external query resolution. You might be able to setup a .local domain on OpenDNS and set suffix search order on local clients to prefer local first, but that can expose your internal IP scheme to the public.
May
3
comment How to set up an alternate domain while duplicating CNAMEs
Well, if you defined $ORIGIN in your a.com zone file, then changing the value from a.com to b.com would, in essence, replicate the a.com zone to b.com without using CNAMES. Alternatively, you could use a simple regex (or wordpad) find/replace function to edit the zone files.
May
3
comment enable large DNS queries on Microsoft 2008 R2 DNS server
Can you elaborate more on what you're trying to accomplish? DNS usually connects over udp for small queries and uses tcp for larger queries.
May
1
comment Cannot resolve domain from within LAN
can you connect (to a service, i.e. www (assuming you're planning to host some sort of server)) to the dynamic IP (should be a public IP address) from within the local network? In general, you shouldn't have to setup a local dns server for external dns resolution with dyndns to work. You'd need to have your dns resolvers on clients point to a dns server (forwarder) of some sort (public ones are 4.2.2.1-4, and 8.8.8.8).
Apr
30
comment Active directory auth to comprimised machine?
+1 - I'd also add that it makes sense to assume the credential is compromised if such a situation occurs.
Apr
28
comment NFS (with Kerberos) mount failing due to “Server not found in Kerberos database” error
Can you add the correct PTR records into DNS for SOL and MERCURY? in general, the SOL and MERCURY should be an A record with one IP address and the PTR record should also point back to SOL and MERCURY and see if that makes a difference?
Apr
28
comment How to test if DNS information has propagated?
joeqwerty's absolutely correct. dns servers will cache a positive or negative hit for a predefined time. However, in addition to the original post, there are several public name servers you can check against including the old GTE (4.2.2.1, 4.2.2.2, 4.2.2.3, and 4.2.2.4) and google (8.8.8.8, 8.8.4.4). Simple rule of thumb, new changes can take up to the duration of the ttl for positive or negative hit. However, there are instances where apps implement bad logic and cache answers for a longer period of time.
Apr
27
comment When my A web server gets unplugged, how do I automatically redirect all the users to my B web server in another city, and vice versa?
Actually, F5, Citrix/NetScaler both offer virtual appliances for GSLB. A10, radware, zeus, brocade, alteon, and others may very well offer virtual appliances as well. But you're absolutely right that there are GLSB SaaS service providers out there. Probably easier on the pocket book by using opex instead of capex to build infrastructure but SaaS models aren't without its risks (i.e. SLA, operational, support). I've never heard of edgedirector or dnshat, but they are both competitively priced!
Apr
27
comment NFS (with Kerberos) mount failing due to “Server not found in Kerberos database” error
Does the ip addresses for sol.domain.com and mercury.domain.com have a one correct PTR record set?