1,544 reputation
216
bio website networksavvy.org
location Down Under
age
visits member for 1 year, 11 months
seen 15 hours ago

A system administrator by trade, living in a land Down Under with knowledge of network administration gleaned from years of working with niche market ISP's.


Jan
7
comment SSH Negotiation Failing To some sites
I've found a workaround - by specifying MACs=hmac-md5 in /etc/ssh/ssh_config or passing it as a parameter with -o lets me in, however I really want to know WHY this has suddenly become a requirement - and why it is only a requirement across the VPN.
Jan
7
revised SSH Negotiation Failing To some sites
added 62 characters in body
Jan
7
revised SSH Negotiation Failing To some sites
Added more test cases.
Jan
7
asked SSH Negotiation Failing To some sites
Jan
1
answered If a sub domain is secure with a SSL certificate, will the sub-subdomain also be secure?
Dec
27
awarded  Self-Learner
Dec
23
answered Emails never arrive at recipient but spam tests show no problems
Dec
23
comment Changing an `A` record to a `CNAME` without downtime
If you were to shift your domain to another registrar, I would imagine you would not have any downtime as cached information would go to your old provider and new information to your new one. Once everything is shifted across you could just remove your domain from your old provider. Your current provider does not sound "fit for purpose" for you anyway.
Dec
23
comment Changing an `A` record to a `CNAME` without downtime
I don't see why it should result in downtime - save for the actual tiny amount of time the system does not have an A record or a CNAME. I agree with @Wesley - but the alternative might be to set up on a new DNS provider, then shift your domain name to them. [Not what I would do, but I control my own nameservers ]
Dec
20
awarded  Tumbleweed
Dec
16
comment Iptables: Filtering string encrypted by ssl
I don't see how PFS does anything if you are, in effect, performing a man in the middle attack in realtime, so I don't think this is correct. PFS is, I believe, used to ensure that if the private key of a session is compromised at some point after the communication it can't be used to decrypt the communication. Certainly PFS does not prevent MITM attacks. see the section at "Limits of forward Secrecy" at randomoracle.wordpress.com/2013/10/14/… also the second post at sla.ckers.org/forum/read.php?6,7024
Dec
15
comment free shows more memory used than top process total
Its saying you have used 1692 megs (7840-6148), and 6148 megs is being used as cache.
Dec
15
answered Iptables: Filtering string encrypted by ssl
Dec
15
answered free shows more memory used than top process total
Dec
14
answered DRBD Proxy / WAN experiences
Dec
13
awarded  Tag Editor
Dec
13
revised perdition wiki excerpt
added 128 characters in body
Dec
13
revised perdition wiki description
added 1004 characters in body
Dec
13
answered nmap port 3128 shows open but no squid running
Dec
13
wiki created perdition description