9,863 reputation
1154122
bio website stefanco.com
location Berkeley, CA
age
visits member for 4 years, 10 months
seen yesterday

profile for Stefan Lasiewski on Stack Exchange, a network of free, community-driven Q&A sites
Stefan Lasiewski

Daddy, Linux Guy, Bicyclist, Tinkerer, Fixer & Breaker of things.

I work as a Senior Server Team Engineer at the National Energy Research Scientific Computing Center (NERSC) Division at Lawrence Berkeley National Laboratory (LBNL) in Berkeley, CA.

Father of 3 cute children. Yes I'm a sysadmin and a parent.

Heavy user of CentOS, RHEL & FreeBSD for production services at work. I also run Ubuntu at home, for the simplicity. I'm a fan of Apache HTTP Server, Nagios & Cacti.

Original proposer of unix.stackexchange.com (Yes, this proposal predated askubuntu.com, and I wish they would have merged with the Unix proposal.).


Dec
9
comment FreeBSD Ports: How can I see all dependencies for a port, and all subdependencies for those dependencies?
Thanks for the response. However, I need to point out that the pkg_* tools were deprecated and replaced with pkgng
Nov
27
comment How disabled log apache for image file missing?
When viewing the logs, you can exclude the unwanted noise with a command like tail -f /var/log/httpd/error.log | egrep -v "JPG|jpg|gif|png". egrep -v will exclude the pattern from the output.
Nov
15
comment FreeBSD 10 won't boot to ZFS root after power failure
Those are very large zpools. The ZFS docs recommend that zpools be a maximum of 10 drives per pool. You can combine pools to get a larger array.
Nov
11
comment How do I monitor RAID status when using an external eSATA RAID5 SATA port multiplier?
Sorry to say, you would need a driver for Linux to support this feature. Without the driver, there is no way that Linux will be able to see the devices which are 'multiplexed' (e.g. Many channels combined into one). It will only see the single device. The same problem exists with a number of cheap RAID controllers.
Oct
29
comment What version of RHEL am I using?
/etc/issue also works on other OSes as well, such as Debian & Ubuntu, and works with Linux OSes that don't conform to the Linux Standards Base, and lightweight OSes that don't have the lsb* utilities installed.
Oct
25
comment How switching off SSLv3 in Courier-IMAP server affects old Mail User Agents?
You cannot mitigate Poodle on your IMAP server because Poodle does not apply to IMAP. Poodle/CVE-2014-3566 only applies to HTTPS, not other services. While SSLv3 has other flaws, those other flaws (including yet-to-be-discovered flaws), these other flaws are not the same thing as 'Poodle'.
Oct
23
comment In response to the OpenSSL Poodle vulnerability should I disable SSLv3?
Considering that HTTPS & SSL have been used interchangeably for years in technical discussions and in configuration files, many admins, including those with "a minimal understanding of the problem being solved", could have the same question. Again, this question is legitimate after the editing and should be re-opened.
Oct
23
comment How to route specific IPv6 address & port to another port?
While it may be easier to install a new application to function as a proxy, it's not necessarily simpler as it adds complexity to the software stack. Adding Apache + mod_proxy to replace a basic functionality of iptables seems rather klunky.
Oct
23
comment How to route specific IPv6 address & port to another port?
As I read your question, you are saying that ip6tables cannot forward to an IPv4 target. That makes sense, since we're talking about *ip6&tables. I simply want to use ip6tables to direct one port to a different port. I inherited this software, I need to enable it for IPv6 with as few changes as possible, and I'd like to avoid using yet-another-piece-of-software like xinetd or an Apache proxy.
Oct
23
comment How to route specific IPv6 address & port to another port?
(Side note: I read that Kernel >= 3.9.0 & ip6tables version 1.4.18 provides NAT again)
Oct
23
comment How to route specific IPv6 address & port to another port?
How would one do this with ip6tables only? Can ip6tables direct [specific IPv6-address]:443 to either [specific IPv6-address]:8443 or to the localhost/loopback address [::1]:8443? iptables did this using the NAT table, but NAT isn't supported in the CentOS5 version of netfilter.
Oct
17
comment How do I disable SSLv3 support in Apache Tomcat?
FYI, sslEnabledProtocols didn't work for us on Tomcat 6. sslProtocols = "TLSv1,...." did.
Oct
17
comment Fastest way to move a large file from an ESXi host to another
Is your network 1Gbps, 10Gbps, two bonded links, etc? Have you tried a temporary, dedicated link between the two hosts? Keep in mind that the Disk I/O & Network I/O from the other VMs on this same host will be competing for resources with your data transfer, which will slow down your data transfer.
Oct
17
comment How do I disable SSLv3 support in Apache Tomcat?
rmeisen: The answers will vary depending on your Tomcat and Java versions, and if you are using JSSE verses AJP. The differences are as subtle as sslProtocols=TLSv1 verses sslProtocol="TLS" (Notice that s?). Specifying your Tomcat & Java versions will save you from insanity.
Oct
17
comment In response to the OpenSSL Poodle vulnerability should I disable SSLv3?
With the new edits, this becomes a perfectly legitimate question for this site and doesn't deserve the down-voting. Shane Madden's answer (With +5 votes currently) shows how valuable this question is. Another possible answer would explain that HTTPS may use SSL and/or TLS, and what are the differences between the two.
Oct
17
comment In response to the OpenSSL Poodle vulnerability should I disable SSLv3?
In addition, some older commandline clients & older appliances might only support SSLv3.
Oct
16
comment POODLE: SSLv3 vulnerability (CVE-2014-3566) with Apache24 on FreeBSD-9.2
SSLv2 is also highly insecure, and I believe that the Apache config file included with FreeBSD Ports/pkgs disabled it by default a few years ago.
Oct
14
comment freebsd-update from 8.3-RELEASE to 9.0-RELEASE: How to deal with dozens of diffs?
I updated the link for you. forums.freebsd.org/viewtopic.php?&t=33166
Oct
13
comment Linux: Print all messages to primary console *and* secondary console (monitor/KVM)?
Quanta (and others) any idea where this rule about the 'last listed console device' is documented, other then on the Serial Console HOWTO? I would love to understand this better.
Sep
29
comment Shellshock - “pkg upgrade bash” doesn't update bash to latest 4.3.25
The downvoters were simply voting to move this to unix.stackexchange.org .