5,805 reputation
1633
bio website topher.zyp.org
location Omaha, NE
age 37
visits member for 5 years, 7 months
seen Nov 28 at 15:45
Geek.

Sep
30
comment iptables: match only the first packet of established TCP-connection
While I have no doubt that IPTables can be shoehorned into performing this function, I'd recommend you consider other options. This sort of filtering is best done at a Web Application Firewall (like ModSecurity for locally installed, or CloudFlare for hosted; F5, Citrix, and many other companies offer commercial solutions, too). Using IPTables to do a string match against a specific packet in a TCP connection to catch a web request is like using a hammer as a flyswatter. Sure, you could kill the fly, but you're going to do a lot of extra work and risk collateral damage.
Sep
30
answered Is there any solution to make OpenVPN authentication with Google ID?
Sep
8
comment Cron not launching python script
The problem is almost certainly your problematic use of screen. What is the purpose you are trying to accomplish with that? Have you tried it without using screen anywhere?
Sep
8
reviewed Approve windows server 2012 remote desktop - Send messages between standard users
Sep
8
awarded  Custodian
Sep
8
reviewed Edit How long should resize2fs take on a 1TB partition?
Sep
8
revised How long should resize2fs take on a 1TB partition?
some minor spelling issues, highlighted -p option
Jul
25
comment strongswan vs openswan
As of RHEL7, it looks like the default IPSec system is Libreswan, a fork of OpenSwan.
Jul
25
comment NFS performance woes on Debian
@anarcat - For modern releases, you're correct, nfsvers=3 won't matter as much. Linux NFS mounts used to default to NFS version 2, unless you specified version 3. In those cases, it was very worthwhile to explicitely set the version. In modern releases, mount will negotiate, starting with v4, then trying v3, then falling back to v2.
Jul
24
awarded  Revival
Jul
4
awarded  Nice Answer
Jul
1
comment postgres server fails to start, produces no log, how to to troubleshoot?
@chrismarx - The service command is just a convenient wrapper around the /etc/init.d/ script that actually starts and stops the process. You'll need to look at that script to see what it's doing differently from when you manually run it. Doing something like bash -x /etc/init.d/postgresql start might be a good place to start your research.
Jun
9
revised Getting NFS clients to retry mount if NFS server down when client boots
Correcting a grammatical error..
Jun
8
awarded  Guru
Jun
2
comment Linux Centos with dmesg timestamp
Using rc.local is really kind of an ugly solution for this (using rc.local is almost always an ugly solution to anything). A better solution would be to put printk.time = 1 into /etc/sysctl.conf or a file in /etc/sysctl.d/. That's the reason these files exist. Cramming stuff into rc.local will eventually leave you with a fragile, convoluted, messy, unreliable start-up.
May
4
awarded  Yearling
Apr
23
comment Cannot remove or list directory (ls or rm) Linux - Debian
@mpez0 - Good point. I usually jump to find for the flexibility and filtering features that I typically want for handling large directories, but ls -f handles simple needs quite well, too.
Apr
21
revised Cannot remove or list directory (ls or rm) Linux - Debian
Updated to account for the comment from the original poster including directory size.
Apr
21
answered Cannot remove or list directory (ls or rm) Linux - Debian
Apr
7
answered postgres server fails to start, produces no log, how to to troubleshoot?