14,487 reputation
2753
bio website storyinmemo.com
location Redwood City, CA
age 29
visits member for 4 years, 11 months
seen Apr 11 at 18:28

Moderator♦ on Security StackExchange

Production Engineer at Facebook

Twitter: @jbferland


Sep
20
comment How to set up VLAN network
@voretaq7 Today I learned that proxy arp might look like a school of piranha eating an elephant. Nice.
Sep
20
comment Iptables hops count filtering
I no longer understand what you're trying to argue.
Sep
20
comment Iptables hops count filtering
Then base the rules on the router's MAC address.
Sep
20
comment Ubuntu “No space left on device” for /home, df shows 100% full, ds shows much, much less
possible duplicate of Linux different size for df and du for root partition and du vs. df difference
Sep
20
comment Remove large file on Mountain Lion when disk is full
Any explanation for why this would be faster?
Sep
20
comment Iptables hops count filtering
TTL counts downward. You would need to set the TTL on all your DMZ devices to the maximum of 255 and then reject anything that isn't 254. Then you'd have shot yourself in the foot by not using a reasonable TTL and abusing the purpose of the field. It is better to screen martian packets and other network addresses that aren't where they are expected to be at your router interfaces.
Sep
20
comment How to set up VLAN network
I removed the security wording from this. The question of security of VLans is something we can discuss on Security.SE (or here), but not in the same question as the implementation / how to do it with limited downtime. I focused this question to the latter.
Sep
18
comment Amazon EBS for web site files
Just use an EBS-backed instance instead of an ephemeral instance, then.
Sep
18
comment Amazon EBS for web site files
Are you talking about one instance or a collection of them?
Sep
14
comment How to mount /tmp in /mnt on EC2?
I can't figure out what you're asking me to do. Can you provide an example of the expected output using touch and ls -l?
Sep
13
comment is there a way to run a command before puppet implements a change?
+1 for better method and working function in Puppet.
Sep
1
comment Best way to override 1024 process ulimit
@CamelBlues Just go with limits.d/ since the directory is there. That keeps you from having to fight against the system scripts and write up definitions to turn them off.
Aug
27
comment Removing vg and lv after physical drive has been removed
This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post.
Aug
27
comment Effective way to ensure “clean slate system” for continuous integration service
@AlexanderGladysh It's handy if you're using many machines to build from / lots of CI work. It's useless if you don't have enough workload to warrant a cluster of at least 3 machines.
Aug
25
comment Apache unresponsive on OS X Mountain Lion after upgrade
@SarahVessels Do you perhaps have your install of Apache conflicting with the OS X default install? Check under the sharing control panel that "Web Sharing" is unchecked.
Aug
23
comment Add S3 Bucket as a network drive
That's way more than a single Q&A question. Start here: google.com/search?q=writing+windows+filesystem+driver
Aug
23
comment Add S3 Bucket as a network drive
@AliBZ Yes, they must install their own driver software to function.
Aug
23
comment Stop duplicate icmp echo replies when bridging to a dummy interface?
@mbrownnyc Usually with something this complex I spin up a few virtual machines and test it before opening my mouth. Today I'm a little bit behind the curve on things... I'll try and come up with a test soon.
Aug
23
comment Syslog produces hundreds of lines
@Markus filesystem degradation never gets better on its own, only worse. Now's a good time to make sure you have good backups and consider your appetite for the system possibly becoming unavailable.
Aug
23
comment Increasing disk size of Linux guest in VMware?
@Paddington how about accepting some answers to your questions?