1,428 reputation
612
bio website ve7cxz.ca
location Victoria, British Columbia, Canada
age 32
visits member for 5 years, 1 month
seen Mar 6 at 8:49

Seasoned UNIX, Security and Network engineer. I'm here to answer questions I can help with, and to learn new things in the process.

Experience with:-

  • Linux (Debian, Slackware, RHEL/CentOS, SuSE) - RHCE certified.
  • Solaris (2.6 and up)
  • Windows Server (2000 upwards)
  • Can write in Perl, bash, PHP, C#
  • Cisco switching/routing (both IOS and CatOS) and security gear (PIX, ASA, FWSM, etc.)
  • Checkpoint Firewall-1 and Provider-1
  • F5 BIG-IP LTM and GTM

...and much more. My CV is available on request, and my LinkedIn profile is here.

Thanks for stopping by!


Feb
3
awarded  Yearling
Jan
18
comment Cisco ASA - difference between inside_access_in and inside_access_out?
I'm assuming inside_access_in and inside_access_out are the names of access-lists on the ASA? Can you post the output of sh run access-group?
Jan
18
comment Rebooted and now apache2 is listening on port 80 after startup but not responding to requests
Are you sure it wasn't just a process hanging around from before the restart? It's possible that the process didn't die off fully when the upgrade was done.
Dec
11
comment Massive blockingof ips done right
Have a read of this: github.com/SpiderLabs/ModSecurity/wiki/…
Dec
10
revised Enabling TLS1.0? Cannot communicate securely with peer: no connection encryption algorithms
TSL -> TLS
Dec
10
suggested approved edit on Enabling TLS1.0? Cannot communicate securely with peer: no connection encryption algorithms
Dec
10
comment Enabling TLS1.0? Cannot communicate securely with peer: no connection encryption algorithms
AWS security groups work at a network-level, so they are unlikely to be your problem. You can use openssl s_client from a shell and play with the -tls1_2, -tls1_1, etc. options to see what they actually support.
Dec
10
answered Massive blockingof ips done right
Dec
9
answered Centos Yum Repo Issues
May
12
answered Are Amazon VPC private IPs constant?
May
12
answered RewriteRule Not Rewriting URL properly
May
1
answered LVM: Duplicate VG name VolGroup00
Feb
3
awarded  Yearling
Dec
27
awarded  Announcer
Feb
3
awarded  Yearling
Jun
8
awarded  Constituent
Jun
8
awarded  Caucus
May
7
comment iptables: Port forwarding with masquerading is not working
You might want to add a log line to the end of the FORWARD chain (iptables -A FORWARD -j LOG) to see if it's getting dropped or not.
Feb
10
comment Forward (all 80) to Debian server then have Debian delegate where?
Which I would have suggested, however the initial question asked about it from a port forwarding point of view.
Feb
10
answered Forward (all 80) to Debian server then have Debian delegate where?