Reputation
11,582
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
6 32 74
Impact
~638k people reached

Jun
20
comment Auditing in linux
You're asking a couple of different questions here. First user auditing through what commands are being run. I'm pretty sure we can do that with auditd but I'll have to do some research. The other question is a file auditing through a FIM. I'd split these out for better results. Also check out pur sister site for Information Security folks at security. stackexchange.com
May
23
comment DNS event ID 4000 on SBS 2011
While this answer may be factually correct it would be much more useful if you explained what this command does.
May
16
comment Why OpenVPN client fails to start (TLS timeout) when wifi signal is not ideal?
While this may be correct it would transition from being correct to being useful were you to explain what that command is doing and why it may fix the issue.
May
2
comment Server room door automatic opener
@ewwhite I find that pretty terrible for all kinds of reasons.
May
2
comment Server room door automatic opener
@ewwhite Doorstop kind of violates the whole principle of being able to open the door while carrying something heavy and then having the door close automatically. A doorstop is a fine idea for an unsecured environment but a terrible one for someplace that needs to be locked down.
Apr
29
comment Cannot login to OpenManage Server Administrator
Please stop Cargo Culting the Green Button.
Apr
18
comment How to mount an ISO file in Linux?
Trying to be helpful is awesome! Reposting already existing answers ends up being the forum equivalent of "Me too!" which ends up being not helpful. That's why I was pointing at the Unanswered list. Lots of stuff in there deserves answers, they just haven't found them yet.
Apr
18
comment Is there a way to rate limit connection attempts with firewalld?
Surely this is natively available in firewalld? Personally fail2ban annoys me because the polling interval is so high that the scan is finished before it blocks.
Apr
18
comment How to mount an ISO file in Linux?
This question already received a more generally usable version this answer (in fact several copies of the same answer) 5 years ago. I don't really see this adding anything new. May I recommend trawling the Unanswered tab? There's gobs in there.
Apr
17
comment Trying to add group to the security tab of an extended right
@JimB As it stands, yes, but I see some potential here so I wanted to give it a chance to get awesome first.
Apr
17
comment Trying to add group to the security tab of an extended right
I think this has the makings to be a good question. Instead of referencing back to something else include what you're trying to accomplish and what you're starting with.
Apr
11
comment How do I find out if a uid exists?
@dawud has hit on the most correct part of this question. Who created mysql with such a high id? Do you actually have a collision internally somewhere in your puppet manifests?
Feb
8
comment Lync Server 2010 with Hosted VoIP PBX
Considering Lync 2010 only has 14 months of mainstream support left why not go with 2013?
Jun
19
comment dump tcp connections without tcpdump
@ewwhite: Any good change management policy should have the ability to exempt specific, or classes of, changes from going through the full process. If this one doesn't....
May
12
comment Extended ACLs Not Always Being Inherited
Interesting. That's pretty cute. I'll have to see if i can get my hands on that software and mock up a test again. I should be able to track it with auditd
May
4
comment Designing a computer network of > 100 devices, dividing server responsibilities
I'm with @EEAA on this. Given the maturity of virtualization platforms you're screwing yourself with backups, change management, disaster recovery, system management, everything.
Feb
8
comment Can you change the virtual NIC type after building a VM?
Uncontested. The first rule of Internet advice is to pour out a bowl of salt. The second is to analyze it against your environment to see what actually makes sense. With a sufficiently advanced environment doing any host maintenance without vCLI is probably bad juju.
Feb
7
comment Can you change the virtual NIC type after building a VM?
@JamesRyan: I suppose, but just using vi seems easier. Unless sed is available on there....
Feb
6
comment What is the risk in turning off Base Filtering System on Windows Server…?
My questions would be what is it about BFE and WFP that you don't trust? These are pretty well tested, and industry understood, systems. Do you not trust the packet processing subsystem or do you not trust the administrator? Those are very different problems with very different solutions.
Jan
31
comment Does filling up disk with dd removes files securely?
It's worth noting that Secure Erase is inconsistently, or not at all, implemented between vendors and can't actually be trusted for SSDs. The only currently acceptable practice for SSDs is destruction.