382 reputation
212
bio website
location London, United Kingdom
age 28
visits member for 3 years, 10 months
seen May 13 at 22:35
stats profile views 109

Security consultant for a Big 4 professional services firm.


Nov
19
comment Effective Permissions displays incorrect information
Pricey! I wonder if Gold Finger just implements its own ACL logic based on groups and ACLs or ....
Sep
24
comment Cisco AnyConnect hangs on “Checking for profile updates…”
ASA 841-k8. AnyConnect 300857-k9. It works fantastic if no proxies are involved.
Sep
11
comment Disk / system configuration for log collection / syslog server
Update: the expected log volume is 1-4 gigs/day
Aug
30
comment Partitioning disk I/O on linux
Trying ionice, and point taken.
Jul
10
comment Effective Permissions displays incorrect information
Hi. Nice script. i have somehting properietary myself as well. Unfortunately, the MaxTokenSize is set to 65k and I suspect that it isn't related.
Jul
4
comment Effective Permissions displays incorrect information
Same result, unfortunately :(
Jul
4
comment Effective Permissions displays incorrect information
Thanks, I'll have a look!
May
9
comment Backup solution for road warriors
A splitting headache can make you loose entire day's earning but you wouldn't pay $100 for an aspirin pack.
Feb
23
comment Is it possible to switch to Kerberos only Windows domain
Reviewing the above articles, it is my understanding then that you can not force a server to not do NTLMv2 authentication. I understand that given the opportunity, Kerberos will be negotiated as the stronger protocol.
Feb
8
comment Is it possible to switch to Kerberos only Windows domain
@tony_roth Thanks for pointing that out. One of the reasons I'm looking into this is to prevent replay attacks or password hash cracking. If the NTLMv2 still gets sent along, then that's bad.
Feb
8
comment Is it possible to switch to Kerberos only Windows domain
Hi. Thanks for the link. Unfortunately it only discusses if LM/NTLM is in use, but not if Kerberos only domain is possible.
Dec
6
comment Log in as domain user with local administrator access
@maliq - Eh? What works?
Dec
5
comment Exchange security monitoring tools
Thank you for you answer. A rather disappointing state of afairs though.
Aug
16
comment Best MySQL failover and load-balancing for shared hosting environment
I agree, Master-Master is very painful. I suggest using some disk sync solution like drbd and HA to take over the IP.
Apr
30
comment Firewall rule visualisation tool
This certainly is in the direction that I want, but I've previously looked at it and found it too simple to graph more than say 100 or so rules - the visual clutter is visible even in the screenshot. But thank's for reminding nonetheless!
Apr
26
comment Firewall rule visualisation tool
A directed one :) What is permitted to connect to what, very visually.
Apr
24
comment Firewall rule visualisation tool
OS doesn't matter, firewall types almost don't matter, but cisco pix and checkpoint fw would be the first choices. I am looking to get a graph out of it. I've looked at fwbuilder and sceenshots don't impress me.
Feb
21
comment Exchange / Suppress delivery notices, out of office when sent to distribution list
Can the "Do Not Send Delivery Reports" setting be per DL?
Feb
4
comment Noisy server rooms
What about active noise cancellation?
Jan
5
comment Can't get DHCPd to assign IPs to unknown clients
Drop this line and see if it works:deny dynamic bootp clients;