Reputation
700
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
4 21
Impact
~37k people reached

  • 0 posts edited
  • 1 helpful flag
  • 46 votes cast
May
10
comment What tangible security are gained by blocking all but a few outgoing ports in a firewall
For 1, if you are trying to prevent bittorrent (or other protocol) use, realize that people can still proxy/VPN to another machine and bypass your restrictions. Eg, in a school, adding firewall/hostname restrictions is a great way to teach kids about how to use proxy and VPN servers (which can be run on port 80, thereby not getting filtered by your simple firewall). SMTP is an exception, since malware can't proxy/VPN (it would defeat the purpose of sending spam from millions of random IPs), and 25/tcp is absolutely required for delivering messages to any mail hosts on the internet.
May
10
comment What tangible security are gained by blocking all but a few outgoing ports in a firewall
It will prevent naive malware - if they're using port 80 or 443, chances are those aren't blocked so it will still operate. Blocking port 25 to all but your own SMTP server is a very good idea though, since port 25 is actually the only port that can be used to deliver mail directly (without relaying) and thus will make spam trojans ineffective.
Apr
29
comment Recommendation on remote access setup for accessing customer systems
I didn't know about their OneClick thing -- thanks. It gets a little pricey though if you have a lot of OneClick clients -- 10 included (@ $500/yr), then $50/yr for each additional.
Apr
29
revised Recommendation on remote access setup for accessing customer systems
added 134 characters in body
Apr
29
asked Recommendation on remote access setup for accessing customer systems
Apr
20
comment Adding a virtual directory IIS 7.5 Windows 7 Ultimate x64
Had the same problem, this fixed it. Thanks
Mar
12
comment Xeon X5550 vs Six-core Opteron for database server
You're right, and I agree -- but I did the disk part first. Disks are 15K RPM SAS, RAID10 for data, and separate dedicated drives for system, swap, and tempdb. This question I was trying to concentrate very specifically on what CPU would be better, assuming all else is equal and optimized. It's a tough enough question as it is, it would be many magnitudes harder if I were also asking for advice on disk, server config, etc..
Mar
12
answered Implement DNS filtering
Mar
11
comment Xeon X5550 vs Six-core Opteron for database server
As bad as I feel saying this, I'm really not concerned about energy in this application. It's a server going in a datacenter, I don't really have to think about it beyond that.
Mar
11
awarded  Student
Mar
11
revised Xeon X5550 vs Six-core Opteron for database server
added 73 characters in body
Mar
11
asked Xeon X5550 vs Six-core Opteron for database server
Mar
11
answered Apache2 benchmarks - very poor performance
Mar
11
asked Dante (SOCKS server) not working
Feb
5
comment FreePBX: Basic config?
No audio on SIP is a fairly common problem, caused by NAT firewalls. Google "SIP no audio", or try asteriskguru.com/tutorials/…
Feb
5
answered Is a short delay before I can hear the person I'm calling a “known issue” with Asterisk?
Feb
5
answered Should a sys admin backup important data in anyway he can, even if he disagrees with the backup strategy?
Feb
5
answered Recommend a USB Flash copier (Software or Hardware based) for Keep-it-simple-stupid bitwise copy
Feb
3
comment subversion 1.6 for ubuntu?
Should be noted, Ubuntu 9.10 has Subversion 1.6.5 (in case anyone stumbles across this)
Oct
1
awarded  Scholar