4,742 reputation
11739
bio website redbrick.dcu.ie/~lil_cain
location Dublin, Ireland
age 27
visits member for 5 years, 7 months
seen Dec 18 at 10:29

Sysadmin, working with Rackspace. Computers break and I fix them.


Jul
31
comment Should I run my own DNS recursor or local cache daemon?
I've previously found NSCD to be quite buggy. It may be worth looking at unscd, or (actually, probably and) running your own nameserver. None of the issues godaddy hilight should affect you as long as the nameserver is firewalled so as to only accept incoming queries from your EC2 servers.
Jun
25
comment Proxying while preserving URI with mod_security2
The SecRule entry shoudln't matter - SecAction triggers it too. But, the SecRule I have is SecdRule ARGS:Arg1 PROD \ proxy:10.1.1.1/someurl/someotherurl.do
May
28
comment Proxying while preserving URI with mod_security2
I'm not actually using SecAction - I'm using a SecRule with a proxy action: SecAction is a slightly easier way to illustrate. Either way though, github.com/SpiderLabs/ModSecurity/wiki/… indicates that proxy is a legitimate action though.
May
28
comment Linux machines cause network to freeze
Is there a bridge configured on the linux machine? If so, does disabling it fix the problem?
May
28
comment Apache listed in runlevels, not starting at boot (OpenSuse 12.3)
Does your init script actually work if you try to run it manually?
May
28
comment What is the best way in Puppet to add a piece of text to the /etc/hosts file?
This answer is quite a bit better than mine :-)
May
27
comment centos private key and root login
ssh forcecommand lets you ignore what a user wants to do, and run a pre-specified command. That means you can have root login, and be forced to run something like rsync to do backups.
May
23
comment Uninstalling a package from Ubuntu (sendmail-base) issue
You probably want to install that package then, and retry the removal.
May
20
comment Unable to verify the first certificate (RapidSSL/GeoTrust/Ubuntu)
Have you tried adding the intermediate cert to /etc/ssl/certs?
May
20
comment Force clients to use proxy
Where are you actually putting this rule?
May
20
comment curl fails to take self signed certificate
This is answered in this question : serverfault.com/questions/291466/…
May
20
comment Unable to verify the first certificate (RapidSSL/GeoTrust/Ubuntu)
What have you done to try and get ubuntu to recognise the cert?
May
18
comment Why is there a total length field in the IPv4 header?
It can't be ignored - lots of people are almost certainly checking it, since checking it is faster than subtracting the header length from the total length of the link layer.
May
17
comment Files permission issue
Can you add the output of ls -lZ? Also, is SElinux set to enforcing?
Dec
23
comment Chown operation not permitted for root
chattr +i <file>
Jun
16
comment IP ACL for SPAN port on 3560
Surely you won't be able to capture only the correct traffic in any case - the traffic above the 1Gb/s mark will never be seen by the ACL. You'll just see that proportion of the traffic below 1Gbp/s which matches the ACL.
Jun
15
comment Load on linux system is High but CPU is idle
You still haven't answered what you're trying to achieve? Load is a very poor metric for performance of a modern server, and if there's no performance issues, I'd not be inclined to pay that massive an amount of intention to it. But, before you go limiting nproc, I'd definitely try and find out why you've got so many processes (if the issue is numbers of processes {and there's a decent chance you can do this just by eyeballing the output of ps}), and/or why they're blocking (this may require attaching an strace to some of them.
Apr
26
comment Cisco port not forwarding
sh int stuats Gi1/0/6 connected 1 full 100 10/100/1000BaseTX interface GigabitEthernet1/0/6 switchport mode access
Apr
8
comment Cannot get xinetd to start on a RHEL server
Can we get teh output of file /usr/sbin/xinetd, stat /usr/sbin/xinetd, and uname -a ?
Feb
22
comment SFTP logging: is there a way?
Is it possible to do this using the internal sftp server?