Reputation
639
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
4 16
Newest
 Yearling
Impact
~11k people reached

Jan
20
comment How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
This answer assumes (1) you are using Windows, and (2) you aren't using any software that might try to use AMT-overlapping ports for other reasons. (you may have, for example, a VoIP application that uses random UDP ports) It also makes a claim about how Intel "strips off" the AMT commands, which was clearly shown to be false in my answer. Can you provide a reference to support your claim? I wouldn't be surprised if Intel considered this a bug and fixed it one day, but at the time I posted my answer, they clearly had not.
Oct
24
comment Is it possible to get OpenSSH to log the public key that was used in authentication?
This thread looks relevant. It finds the matching key twice: once to determine if the key would be acceptable or not, then a second time to check the signature the client provides.
Oct
24
comment Linux ssh: allow public-key authentication without giving user read rights to private key
If you need to lock it down in this way, I assume you've taken measures to disallow users from adding new public keys to the ~/.ssh/authorized_keys file?
Oct
24
comment Linux ssh: allow public-key authentication without giving user read rights to private key
+1; I think this option provides good flexibility, in case the user needs to use SSH features other than the terminal, such as port forwarding, secure copy, etc. Even an alternate SSH client should work. The sudo option could be better for a locked-down environment, though...
Sep
2
comment How can I run arbitrarily complex command using sudo over ssh?
Can we assume you've set up sudo so that it does not require a pasword prompt?
Jul
16
comment ip route get recognizes address as anycast
@pawel7318 If you don't want it any more, you should be able to remove it with ip route del anycast 1.2.3.4 dev eth0. I was just experimenting with this on Ubuntu 14.04, and it looks like there are some bugs here. For example, I don't see the anycast route when I just type ip -4 route...
Jul
16
comment ip route get recognizes address as anycast
@pawel7318, it seems like the address is marked anycast but you didn't intend that. Is that correct? what Linux distribution are you using? Can you post your network configuration files? If you restart your networking subsystem (or use the supported way to bounce your interfaces) does the problem go away? As a last resort, does rebooting affect the problem?
Jul
13
comment ip route get recognizes address as anycast
@pawel7318 it might be helpful to show the full output of ip -4 route and ip -4 addr in your question. And clarify what you mean when you say the address "doesn't work". (What, specifically, isn't working? What troubleshooting steps have you tried? Also, what Linux distribution are you using?)
Jun
14
comment How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
@kasperd thanks; I didn't know you could easily do that. I went ahead and ran the test. Not looking good for AMT...
Jun
14
comment How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
I noticed someone voted to close this as off-topic. In that case, I'd like to ask: how is this not relevant to professional server administrators? If you're going to enable an out-of-band management technology, wouldn't you want to know if it will have an effect on your network communications?
Jan
30
comment SSH Error: unknown key type '-----BEGIN'
@HaukeLaging, actually yes you can, but it depends on the key type. If it's a PKCS#8 key, you are correct. But if it's a PKCS#1 key or a DSA key, you'll see something like -----BEGIN DSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,0000000000000000 before the base64 which is the giveaway. Also, if the PKCS#8 key is encrypted, the PEM header should say -----BEGIN ENCRYPTED PRIVATE KEY----- rather than just -----BEGIN PRIVATE KEY-----.
Jan
23
comment SSH Error: unknown key type '-----BEGIN'
After the BEGIN RSA PRIVATE KEY line, do the next few lines indicate that the key is encrypted, or is it just a block of base64?
Jan
23
comment How to undo rm -rf?
Could try something like this... no guarantees though. Keep good backups.
Jan
15
comment site to site vpn between sonicwall and pfsense
Not sure, but if you have completed phase 2 the tunnel should be up. Looks like it stays up for a little over 30 seconds, then dead peer detection shuts it down. What are your DPD timeouts set to? Do you have traffic going over the tunnel? Have you tried capturing packets while establishing the tunnel and then pushing traffic? Can you paste logs from the same time period so we can match up what happens on either side?
Nov
2
comment HP Procurve 2610 intervlan routing
@KenWhite I voted to close as off topic. I thought it may get automatically migrated, but I may be behind the times on that. On second thought though, it might be better to just close it without migration - there is not enough information to really answer the question as-is. I only posted an answer because I had a theory that seemed like a reasonable answer that was too long to post in the comments; really the question should have 2-3x the amount of details to make a good question on another site.
Nov
2
comment HP Procurve 2610 intervlan routing
@KenWhite, the accepted answer says it's OK to answer questions you think will be migrated. ;-)
Nov
2
comment HP Procurve 2610 intervlan routing
@KenWhite, point taken. I didn't realize this was controversial; I figured if the question was migrated, it could still be helpful at the destination site.
Nov
2
comment HP Procurve 2610 intervlan routing
No, I can't transfer it. I don't have the appropriate privilege level. Can you post a route table from one of the machines on VLAN 4 that cannot access the other VLANs?
Nov
2
comment HP Procurve 2610 intervlan routing
Welcome to Stack Overflow. Unfortunately, this question is off topic for Stack Overflow. Server Fault might be a better site for this. But you'll need to be more specific about your question if you'd like an answer (there as well). For example, what troubleshooting steps have you tried? Can you ping the switch at 10.10.1.1 using a device off port 25 configured with a static IP address? Is there a DHCP server on that subnet? How are the hosts configured? If you don't get ping replies, do you see arp entries? What exactly do you mean by "inter vlan routing" not working?
Nov
1
comment How to specify proxy server big ip f5?
I think that's two different concepts. You're talking about setting up a reverse proxy, but then you're asking how to set up a forward proxy. If you're talking about HTTP replies in responses to requests that clients sent, those will already be flowing through the reverse proxy, since the reverse proxy opens a TCP session to the back-end server. What other traffic types do you need to go through the proxy?