1,602 reputation
11322
bio website
location Warsaw, Poland
age 37
visits member for 5 years, 5 months
seen 11 hours ago

I do computer stuff. I administer servers and networks, develop software and web pages, help ordinary users, process some 2d graphics etc. I'm really good at PostgreSQL, CentOS Linux/RHEL, C++ and IT security and know countless other IT technologies.

You can contact me at tometzky(at)ato.waw.pl.


Oct
15
comment Postgresql 9.3 Log Shipping on a Hot Standby
Don't use trigger file in world writable location - it's insecure. You don't need it - you can always use pg_ctl promote if you ever need to initiate failover.
Oct
15
comment What is a minimal useful unattend.xml file for SysPrep on Windows 7
If I undestand correctly from UnsecureJoin documentation you need to have computer account created on server before using it. So this conflicts with "it should create random computer name" requirement.
Oct
15
revised What is a minimal useful unattend.xml file for SysPrep on Windows 7
What do you need to change.
Oct
15
awarded  Notable Question
Oct
10
comment Possible to prevent access to /tmp for a specific user via SELinux?
Maybe you could run your application in some kind of sandbox environment like docker.
Sep
30
answered iptables: match only the first packet of established TCP-connection
Sep
30
awarded  Citizen Patrol
Sep
24
awarded  Autobiographer
Sep
24
comment Issues with file rights in CentOS
You have to login again to make group membership effective.
Sep
4
answered Beyond 1Gb upload on a single linux server
Aug
29
awarded  Necromancer
Aug
13
awarded  Popular Question
Aug
11
comment Cisco IOS switch dropping legit DHCP requests
On some recent Cisco switches this option can be found in "Spanning Tree => STP Interface Settings => Edit". Switch "Edge Port" to "Enabled" for every port not used to connect to another switch.
Aug
6
answered Simple, decentralized, automatically synced, local cached file share for linux server
Aug
6
comment Simple, decentralized, automatically synced, local cached file share for linux server
Free (as in beer) but not free (as in freedom). Closed source.
Aug
5
answered Trying to find bottleneck… 60k onsite visitors
Jul
29
revised Windows 2008 Server on mixed ethernet speeds — download from share slow, but fast plain TCP
Corrected URL of test programs - domain changed
Jul
2
awarded  Curious
Jun
27
comment Lots of users, reverse proxys and problems with both
OpenVPN HOWTO recommends seldom used private networks for this purpose, which means something like 172.27.0.0/16. This is to avoid conflict with internal networks of your clients, as majority of them use 192.168.0.0/24 or 10.0.0.0/8.
Jun
27
comment Lots of users, reverse proxys and problems with both
I'm not a VPN expert but I suppose you can configure it even to use class A (10.0.0.0/8) private network, which would allow 16M of IP addresses. It's just a matter of how many concurrent VPN connections your server can handle reasonably well. You can also use private class B (172.16.0.0/16..172.31.0.0/16).