63,564 reputation
771146
bio website stoneyforest.net
location Grand Rapids, MI
age 32
visits member for 4 years, 8 months
seen 5 hours ago

Hello, my name is Chris. I'd love to introduce myself, but how do you summarize a life in a few sentences? I could tell you about the two beautiful women in my life, my wife and daughter; or that I work as a systems administrator; that I help my friends and family at every opportunity; or about the work I've done in my community. Perhaps it's best to leave this short, and say I'm someone who's glad to meeting you and hope I can help with whatever problems.

I'm a Windows administrator by day; but my first passion is FreeBSD and Open Source Software. I put my money where my mouth is on a quarterly basis. I'm inspired everyday by my peers, their abilities, drive, and passion for competent applications of technology and supporting operationals. As a Myers-Briggs INTJ and DISC C/D I value Quality highly and at times can be a purist. Incomplete jobs are loans with high interest (see Technical Debt).


1d
comment Reverse DNS records not registered when using DHCP
I don't have a setup convenient to test, could you try enabling the GPO Computer Config > Templates > Network > DNS Client > Register PTR records and see if that has the desired effect - I'm thinking it might not, but worth a shot.
1d
comment Reverse DNS records not registered when using DHCP
A friend not on SF said: "That's normal, PTR is only updated by DHCP in Win2K+". That doesn't exactly seem to be the case from your experience, but might be close.... I'm trying to dig up a better reference.
Oct
22
comment How switching off SSLv3 in Courier-IMAP server affects old Mail User Agents?
I don't think you'll find a list of software that breaks ask it would include a lot of software nobody uses anymore. I wouldn't be surprised if OE6 breaks, as most XP era software doesn't support TLS. In the case of OE6 I would highly recommend them upgrading to a newer MUA like Thunderbird or even Webmail of some sort. At some point you do need to stop supporting ancient software because of the vulnerabilities it creates. Communicating this fact to your clients is critical to them understanding their responsibilities.
Oct
22
comment What should my SPF record be?
Probably v=spf1 mx -all
Oct
22
comment All my harddrives are around 10 MB/s read/write
Sounds a bit like a misaligned partition or tiny inode size. What's the output of tune2fs -l /dev/sdaX | grep Inode (replace sdaX with one of the drives, or the volume if using LVM)
Oct
21
comment All my harddrives are around 10 MB/s read/write
Add bs=1m to the dd command and test again.
Oct
21
comment Why can my servers not access their own addresses?
No, he's indirectly asking if you're running into the Hairpin NAT problem and don't know how to describe it.
Oct
20
comment Why Apache is delivering .htaccess files
Try removing the Order directive from that other set.
Oct
20
comment Why Apache is delivering .htaccess files
Is there another Files type directive in the configuration, or in a .htaccess file (particularly near the data root)?
Oct
20
comment Why Apache is delivering .htaccess files
Do you have mod_authz_host still loaded?
Oct
19
comment How to build a Layer 2 VPN across an uncontrolled network using cisco router?
L2TP and IPSec are the same for the purposes of this discussion. L2TP is the connection and routing procotol, IPSec is the encryption and authentication, they work together to provide a whole VPN solution in this case.
Oct
19
comment How to build a Layer 2 VPN across an uncontrolled network using cisco router?
Get a static IP at your office and use L2TPv3.
Oct
19
comment Linux Logs Intrusion Detection
This question appears to be off-topic because these aren't the droids you're looking for. Please don't try to reinvent the wheel until you've completely studied available wheels and can expertly comment on their deficiencies, strengths, and why they cannot fulfill your specific requirements.
Oct
19
comment Linux Logs Intrusion Detection
You're looking for an IDS, try Snort or the lightweight favorite Fail2Ban. Proactively, you could scan for known vulnerabilities and simple configuration issues. MS BPA is a good place to start for Windows systems. Just want to tinker with the security tools? Try Kali Linux - the best turnkey security distribution out there (includes other excellent tools like Metasploit, John, and more).
Oct
17
comment Disabling SSLv3 but still supporting SSLv2Hello in Apache
However, in Apache, if you disable SSLv3 support, this apparently removes support for the SSLv2Hello protocol. I'm running Apache 2.2 with SSLProtocol all -SSLv2 -SSLv3 and the SSL 2 handshake works. What configuration are you running exactly that you're having a problem. The only way I know to disable the SSL 2 Handshake is to enable FIPS mode.
Oct
17
comment In response to the OpenSSL Poodle vulnerability should I disable SSLv3?
Could you be more specific as to how Shane's answer is incorrect? Thanks!
Oct
17
comment How can I check the partition name in FreeBSD?
Firewall issue? Why not just boot in Single User Mode???
Oct
17
comment In response to the OpenSSL Poodle vulnerability should I disable SSLv3?
@QuestionOverflow Trying to raise awareness of yet another OpenSSL vulnerability.
Oct
16
comment SSLProtocol: Illegal protocol 'TLSv1.2'
Yep. TLSv1.1 and 1.2 was introduced in 1.0.1, the old 0.9.x branch only supports 1.0
Oct
16
comment SSLProtocol: Illegal protocol 'TLSv1.2'
I'm not sure how the official packaged version is compiled, but you can explicitly tell the ports system to compile again the base OpenSSL or the Ports OpenSSL by specifying WITH_OPENSSL_BASE= yes or WITH_OPENSSL_PORTS= yes in /etc/make.conf (respectively).