mindthemonkey

802 reputation

bio	website	deployable.co
	location
	age
visits	member for	11 months
	seen	Mar 31 at 15:21
stats	profile views	15

	802 reputation	bio	website	deployable.co	visits	member for	11 months
6 badges		location			seen	Mar 31 at 15:21

summary answers questions tags badges favorites bounties reputation activity

114 Actions

suggestions reviews revisions comments badges posts accepts all

Feb 22	comment	Why are my emails going to spam folder? Do you have an SPF (Sender Policy Framework) record for your domain(s)?
Feb 21	answered	BYOD and Google SSL
Feb 21	comment	BYOD and Google SSL Not sure about illegal, if these are in terms of use for the network that the users have willingly accepted. I've worked for companies that do it, they had the benefit of including their own CA certs in the desktop/laptop builds and it 'just works'.
Feb 21	comment	When would I open Port 53 for DNS? heh.. of course we miss the simple bit @venzen =) the destination port for the dns reply will be random above 1024 so the ops rule won't go near query replies. You'd need conntack or a static sport=53 dport>1024 rule to allow dns queries.
Feb 21	comment	When would I open Port 53 for DNS? Even though UDP is a stateless protocol, conntrack can still maintain state of UDP conversations. If NEW connections are allowed out and you have a `iptables -A INPUT -m conntrack --ctsate ESTABLISHED,RELATED -j ACCEPT` rule like most, UDP will also be managed under this. When you send a UDP request, it will maintain state and allow a reply on the same port/ip. If a reply is received to that packet, the "connection" will become ASSURED and keep state for a larger timeout.
Feb 20	comment	Is there a Linux utility to return an error code for a particular input? I know the question is tagged linux but wanted to note `-q` is gnu, `grep expected >/dev/null` if you want cross platformness.
Feb 20	answered	Sharing proxy-cache among multiple user groups
Feb 20	comment	Fragmentation of packets in networks Jumbo frames are not necessarily a GigE thing but there's more support arriving in GigE as there's more benefits.
Feb 20	answered	Fragmentation of packets in networks
Feb 19	revised	Is it possible to force SFTP rather than allow SCP fallback ? added info for scp
Feb 19	answered	Is it possible to force SFTP rather than allow SCP fallback ?
Feb 18	comment	how to accept only specific “subnets” using iptables? `--src 182.24.137.0/24`
Feb 18	revised	kill script execution grammar
Feb 18	comment	kill script execution A `ps -ef \| grep myscript` can also return the pid of the grep process rather than what you are looking for leading to `ps -ef \| grep mysscript \| grep -v grep \| awk '{ print $2; }'`. The above is equivalent but removes extra calls to grep from the pipeline as awk can do it all.
Feb 17	comment	updating software list in redhat linux.die.net/man/8/yum
Feb 16	comment	Multisite WAN Failover The only "complete" DNS (failover) solution I have used in earnest is F5's Global Traffic Manager, otherwise they have been custom solutions configuring Bind or Djbdns as required. I haven't used PowerDNS and can't see specific support for failover but it allows anything for a backend so you can make it respond with whatever you need with a bit of smarts. In the default config you could update the mysql backend from your service monitoring scripts. There are dns service providers too.
Feb 15	answered	Multisite WAN Failover
Feb 15	comment	Initial connection to static IP is slower The initial description sounds a lot like a dns resolution timeout, then maybe caching of the failure makes it work. But I wouldn't expect a ping to trigger a lookup. In any case, does the printer have a dns server configured it can't connect too?
Feb 14	comment	Multisite WAN Failover A "wan fail over" makes it sounds like you want redundnant links between the offices but the rest of your question leads to a service you want to replicate. Could you flesh out what your doing a bit more. Where are the clients for these services coming from? What services are you failing over between sites? Have the services been designed to be replicated/failed over? Can you get the business to define what 'immediate' really means, i.e. how long can you stand for it to be down.
Feb 14	comment	Need help about DNS Zone I couldn't say for sure, contact OVH support for that but on the surface it sounds that way. It's always possible the DNS servers could be slaved to each other. I have the same type of setup. Domains are with a registrar who provides all the DNS hosting options as well so the web management interface provides the options but use external NS's so I configure elsewhere.