324 reputation
617
bio website
location Paris, France
age 29
visits member for 4 years, 4 months
seen Jul 2 at 17:41

I am a student at UPMC, France studying computer science.


May
20
comment Can you configure SNAT with multiple source IP's and use static DNAT (port forwarding)?
So if I understand correctly, the connection tracking table would remember that the destination address was 203.0.113.1 and would use this same IP when doing SNAT for the remainder of the connection? At this stage I'm just designing the solution so the problem is 'imaginary' you could say. Any explanation would be greatly appreciated.
Dec
6
comment How to prevent PHP update from creating generic config file and changing permissions
Thanks works for me, thanks Michael.
Dec
6
comment How to prevent PHP update from creating generic config file and changing permissions
Thanks, great solution, I should have remembered that! Any idea about the permission issue on the sessions folder?
Aug
1
comment How to use nDPI as iptables module (like ipp2p) to block P2P
Did you try and fail or never tried? Also, I'd be very interested in your opinion on how much better OpenDPI is than ipp2p at classifying P2P. Obviously encryption evades both of them but is OpenDPI significantly better?
Aug
1
comment How to use nDPI as iptables module (like ipp2p) to block P2P
We run CentOS and with some small mods we can compile the module but it wont load. Have you ever got it working on CentOS?
May
6
comment Dovecot ignoring maximum number of IMAP connections
That seemed to work! Not sure why its not loading /etc/dovecot/conf.d/20-imap.conf, perhaps I need to explicitly define this in some load path. Thanks!
May
6
comment Querying a web API vs local database during a traffic spike?
Thanks for your input. Yes, it's clear to me that the lookup would be faster but under load hitting the database would be more ram/CPU intensive than processing an additional http request. I would imagine that over a certain number of connections per second, the server would be less likely to become unavailable querying a webapi than its local database. And yes, we have a subscription to keep the database up to date.
Nov
29
comment Freeradius - How to disable 'detail' accounting logs
The 'detail' module is in the modules folder and being loaded, but I'm assuming there must be the 'detail' directive in the 'accounting' section for it to be active right?
Mar
15
comment Windows script to change from DHCP to Static IP addressing
This script doesn't work. It only detects an ipv6 address since it just records the last ip in the objAdapter.IPAddress array. Also why does it need to know the DNS search order, DNS suffix search order, DHCP lease times?
Feb
24
comment Windows script to change from DHCP to Static IP addressing
The script needs to be executed by our home customers to whose machines we have no access to. We intend to distribute it via a downloads page on our website. Our application requires that the customer switches to static networking before running the app and then switching back afterward.
Feb
23
comment How to securely partition blog folder on existing Apache website
Suexec is indeed the obvious solution however the problem is that suexec is configured at the virtual host level and how are we supposed to create a /blog directory under a different virtual host?
Feb
16
comment Extract number of users connected to IPSsec/L2tpd server
Actually that helped me find the solution. netstat -i | grep "ppp" | wc -l gives me a count of connected users since pppd creates a new virutal interface for each connected user. Thanks!
Feb
7
comment Disconnected after connecting to VPN when using remote desktop
Hi yes, that works, I no longer get disconnected but then none of the traffic is routed through the VPN. Any way to fix that?
Oct
2
comment Forcing scripts on apache to run under different accounts to enhance security?
It is not setup like this, each app is in its own folder, not subdomain. What can I do in this situation?
Jun
13
comment How to document linux server configuration?
I like this solution, very flexible. It would be nice if there were already some scripts available to update the wiki.
Jun
13
comment How to document linux server configuration?
Thanks but cfg2html is overkill for my requirements. Great script though!
May
27
comment How to grant secure access to an untrusted developer to an exisiting virtual host?
This is the best solution except on Centos 5.x it requires manually upgrading openssh to version 5+. I built openssh 5.2 source rpm's and its all working now!
May
26
comment How to grant secure access to an untrusted developer to an exisiting virtual host?
Yes, sorry it was a mistake, I meant sftp. I have edited it.
May
9
comment Encrypt remote linux server
The client is afraid of sensitive competitive data being stolen via some form of coercion against staff of the data center. They want additional security to prevent someone walking off with their data. There is no possiblity of human assistance with key management at the data center. I would need to input the passphrase on reboot to decrypt the neccessary partitions. A FDE solution would be ideal as it gaurds against attacks like those mentioned with the trojan however I do not know how this could be achieved using remote access. All I can think of is using XEN and encrypting a domu VM. Thanks