Reputation
2,653
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
9 27
Impact
~152k people reached

Jan
23
awarded  Popular Question
Oct
12
awarded  Notable Question
Sep
23
reviewed Reviewed Is there a downside to installing VNC?
Aug
18
reviewed Looks OK “Software caused connection abort” after removing rule in iptables
Aug
18
comment “Software caused connection abort” after removing rule in iptables
No, the console means the keyboard and screen. Or eventually a remote KVM (if available), IPMI console (if available, through the IPMI controller management IP), VNC server (if the server is a virtual machine running a graphical mode console), etc.
Aug
18
reviewed Approve More than one Remote Desktop Session on Windows Server
Aug
4
comment How to manipulate accented files on Unix?
What terminal were you using ? The terminal is responsible for handling the encoding, the issue might stem from the terminal temporarily falling back to a different encoding, hiding the true nature of the error to you.
Aug
4
reviewed Approve In my /etc/hosts/ file on Linux/OSX, how do I do a wildcard subdomain?
Aug
4
reviewed Approve BIND failing to resolve with 'WARNING: recursion requested but not available'
May
22
answered MX does not work, after setup CNAME
May
22
comment MX does not work, after setup CNAME
Here it is not an issue of having an MX record referencing a CNAME, but instead having a CNAME in combination with other records types, such as in serverfault.com/questions/481243/…
May
21
comment Why is SSH password authentication a security risk?
This is especially relevant when you connect to the wrong server because of a typo. For instance, at some point in time, .cg was a wildcard pointing to a single machine with ssh enabled. Anytime you would mistype .cg for .ch, you would end up connecting to that box and leaking your password...
May
21
comment Why is SSH password authentication a security risk?
If you want to force a password-authenticated user to go through a specific command, change his login shell. Also, "granting temporary access without revealing the password" is a very bad idea. There are hundreds of different ways to keep the access for later.
May
15
comment iptables blocking script using arp table lookup
Yes, i'm only sharing my personal experiences in that direction, as they might have been of interest. The key point is that if you are behind one or several routers, your local ARP table will contain the router's mac for your station's ip addresses, just like you saw in tshark. You have to hit the remote ARP table of the router, to see the actual MACs.
May
15
comment iptables not blocking IP addresses
@zagrisman That's a very personnal opinion, but I think an empty ruleset on a server is perfectly fine in many cases. A private service should not be bound to a public interface anyway, users not allowed to communicate on the network should be denied ip socket creation altogether, and if network filtering is really required, it should be done on a dedicated device.
May
15
answered iptables blocking script using arp table lookup
May
13
answered Tunneling cassandra via ssh gives me a connection closed error
May
13
comment Tunneling cassandra via ssh gives me a connection closed error
So what is the port supplied to cqlsh on the command-line ? What if I want to have two tunnels to separate cassandra instances ? do I have to use different localhost addresses or something ?
May
10
comment BIND9 zone forwarding is not working at all. How can I troubleshoot?
Have you considered using unbound instead ? it's much lighter and more suitable for cases when only the resolver is needed.
May
10
reviewed No Action Needed Port forwarding ssh with iptables