31 reputation
4
bio website gonzaloalvarez.es
location Madrid
age
visits member for 2 years, 5 months
seen Aug 9 at 21:02

Jul
11
awarded  Teacher
Jul
2
comment Chef cookbooks marked as executed
Thanks a lot for your explanation, although, it was not exactly what I was looking for. I understandt that the cookbooks should be idempotent, but some of the ones provided by opscode repository are not (see java cookbook), so my question still stands: is there any way to 'externally' mark cookbooks as run (and maybe change the version to force rerun) or I should change the cookbooks from opscode? Thanks!
Jun
25
answered Website filtering for OpenVPN clients
Jun
25
answered how to monitor multiple systems in nagios
Jun
25
awarded  Supporter
Jun
25
asked Chef cookbooks marked as executed
Sep
28
answered openvpn& iptables — portforwarding and gateway
Sep
22
answered Ubuntu precise, postfix, google apps - outgoing mail
Sep
21
comment Mail delivery failed: returning message to sender
Maybe your mail rely server does not process your request, or you are not allowed to go through it. Any info you can give about the configuration/environment would be really useful...
Sep
21
awarded  Editor
Sep
21
revised Mail delivery failed: returning message to sender
deleted 2 characters in body
Sep
21
answered Mail delivery failed: returning message to sender
Sep
21
comment Iptables hops count filtering
Thanks all for your comments :)
Sep
21
comment Iptables hops count filtering
I've spent some time trying to do some tests, and as you already pointed out in the comments of your answer, it seems more reasonable to filter by MAC. If you don't mind to add this last comment about MAC filtering to your answer I would consider it accepted. Thanks a lot!
Sep
20
comment Iptables hops count filtering
Good point about the TTL counting downward. I completly forgot that. What I don't understand is why am I abusing the purpose of the field. If I can control the servers that belong to the DMZ and the firewall (so I can set the TTL for all packets in these systems), can't I control what is getting inside the internal network using this mechanism? Is just a matter of controlling packets from the shared network I am talking about...
Sep
20
comment Iptables hops count filtering
But, if I can't set the TTL value to a negative one, can I? so, if I limit the TTL number to two, that would limit all packets comming from outside the DMZ, right? Anyway, you are completly right about your second point. If the DMZ is compromized, everything is compromised...
Sep
20
comment Iptables hops count filtering
In our DMZ one of the servers is router for a shared network that uses the same address scheme. The ip of the router changes a lot, and I have to update the firewall configuration to allow the router, but not the systems in that shared network.
Sep
20
awarded  Student
Sep
20
asked Iptables hops count filtering
May
18
comment Connection from Apache to Tomcat via mod_jk not working
Have you tried using 127.0.0.1 instead of localhost in the worker properties? it looks odd to me, though...