2,065 reputation
1126
bio website
location Toronto, Canada
age 29
visits member for 5 years
seen Dec 23 at 16:14

system administrator


Oct
9
comment Dovecot namespace prefix relation to underlying Maildir structure
For Maildir you would still see folders on disk as User/Maildir/.FolderName but in what's returned from LIST it would appear as FOO.FolderName if your prefix was FOO. and Separator was .
Aug
20
comment Apache vhosts not working on Ubuntu 14.04 LTS
How are you determining it's not working?
Aug
20
comment Asterisk relay between multiple subnets
That is not correct, the clients do not need to be able to reach eachother unless directmedia is enabled. Asterisk will use reinvites to get out of the way to reduce load and decrease media latency. I have edited the original comment though as it seems with the change to using directmedia, it is default for it to be enabled
Apr
22
comment Mysqldump not working with SELECT, LOCK TABLES, SHOW VIEW, EVENT, TRIGGER privileges
Can you login to the MySQL console with usr_backup?
May
17
comment SSL routines:SSL23_WRITE:ssl handshake failure
Sounds good :) Final piece of info, upstream ticket with OpenSSL that seems to be the root cause of the issue: rt.openssl.org/Ticket/…
May
17
comment SSL routines:SSL23_WRITE:ssl handshake failure
More details of the problem on the Debian ticket: bugs.debian.org/cgi-bin/bugreport.cgi?bug=665452
May
17
comment SSL routines:SSL23_WRITE:ssl handshake failure
D'oh, understood. You're testing the clients against your site.
May
17
comment SSL routines:SSL23_WRITE:ssl handshake failure
What is the version of the SSL client you're using to attempt connection?
May
14
comment How do I remove a rootkit without an anti-rootkit program?
Can you really be certain about the integrity of your server after such a compromise? It may be wiser to rebuild.
May
14
comment Log tcpdump Output
This may be possible with tc, but I don't have specific experience. On FreeBSD it would be possible with a non-GENERIC kernel that has DUMMYNET built in, via ipfw and pipes.
May
10
comment Log tcpdump Output
An unfiltered dump like this during a DDoS is going to capture a lot of traffic. Your server is already likely becoming unresponsive due to the attack, trying to write all that traffic out to disk is just going to load the server even more, and cause it to become unresponsive sooner. If the attack truly is a DDoS, it could be coming from hundreds of hosts, but the tcpdump could be useful to simply get a handle for what is happening during the attack. From there you can analyse the dump and look into appropriate counter measures, like iptable's connlimit module
May
3
comment ESX 4.1 VLAN for Management Interface
When you applied the management IP via console, did you allow ESXi to restart the management network? Does the ESXi network test succeed?
May
3
comment ESX 4.1 VLAN for Management Interface
Your switchport access vlan 250 line is not applicable when the port mode has been changed to trunk.
May
3
comment Should I hardcode a value for e.g. $NAMESERVERHOSTADDRESS$?
Do you define your host's address as an IP in the define host, or FQDNs?
May
3
comment Should I hardcode a value for e.g. $NAMESERVERHOSTADDRESS$?
Could you clarify what you're using check_dns for? Are you testing that your DNS server works, or are you testing that a certain host name resolves properly?
Apr
27
comment CentOS Opening FTP port?
The user could be compromised then used to proxy traffic like fraud, blackhat activity, etc. Run any services that are limited to localhost access only? They can access those remotely now as well.
Apr
26
comment Guideline for `nice` priority number?
I don't know if there is any consistency from distro to distro what nice levels are applied to what by default. This is something you can check with ps with a command like ps -eo pid,state,nice,args. I cannot locate any documentation that references some sort of standard for these chosen levels.
Apr
25
comment CentOS Opening FTP port?
This is exactly what I was referring to with security issues. The solution you provided still allows a user to connect via SSH and use it as a proxy
Apr
25
comment Apache2 on linux - how to track down performance trouble
It's hard to say since the problem is spurious. As you're running on a VPS, you don't know what the underlying hardware is. You could talk to your provider to get statistics (if they feel like sharing.) You could try to check the system responsiveness when there's an issue viewing an image. If you have a problem doing anything filesystem related like an ls, it's related to the disk.
Apr
25
comment Apache2 on linux - how to track down performance trouble
This sounds like a disk latency issue.