345 reputation
218
bio website ushr.com
location Cambridge, MA | Montreal | Capbreton France
age
visits member for 4 years
seen Jun 22 at 8:35

Psychologist turned programmer, developing on the JVM with the Typesafe stack (Akka, Play, and Slick) server-side, and Coffeescript + GruntJS client-side.

Currently hacking on the U.S. Hockey Report, an amateur hockey scouting news service.

For contracting gigs email: admin '@' newmindit.com


May
21
comment Publicly available black list for web servers
@Iain yes, I can see why it was flagged as off-topic, but then again this is not an uncommon scenario, at least putting some ideas on the table such as you and Grumpy have done can help others in future.
May
21
comment Publicly available black list for web servers
@Grumpy true, however being able to see a list, most likely grouped by IP range and targeted for web servers only, would give me an idea of the potential performance impact.
May
21
comment Publicly available black list for web servers
How on earth is this off-topic? If this were Stackoverflow, sure, not a programming related question, but this is most definitely server related and addresses a specific problem that anyone running a web server has certainly hit. How else shall I, "describe your situation and the specific problem you're trying to solve"?
May
21
comment Publicly available black list for web servers
@Iain thanks. Denyhosts seems more geared toward building up an RBL via recording failed ssh logins and the like. Looking for more of a pre compiled bad bots type RBL for web servers that one can download.
Aug
17
comment Cisco: Route Outbound SMTP Traffic on Same IP as Inbound
it's all or nothing with object-groups, you can't specify a single static route as you are suggesting. I would have to specify smtp, http, ftp, etc. separately and it will do nothing to solve the problem, have already tried the explicit track. The problem, as stated in the linked thread, is that outbound smtp port is not at all guaranteed to be port 25; and when it's not 25 (like always), the implicit static route for smtp protocol is ignored, and the default is used instead, which just so happens to be the external ASA IP -- totally f-ing useless as far as serving legit mail is concerned ;-(
Aug
16
comment Cisco: Route Outbound SMTP Traffic on Same IP as Inbound
Thanks but check out the object-group, it already does that implicitly for services listed (smtp, www, https, etc.). The problem I think is that the ASA takes inbound smtp on port 25, but sends outbound on a huge port range (i.e. not necessarily 25). See article I linked to
Feb
16
comment Is Firmware OS Independent?
@tombull89 thanks for the clarification, forgot about SuperUser.
Feb
15
comment Is Firmware OS Independent?
In what way on earth is this question off topic? While the answer is likely obvious to those who voted to close it, the question might be of some value to those of us who, while google'ing for an answer to said question, were not able to find any definitive answer as to the dependency relationship between OS and installed firmware.
Feb
15
comment Is Firmware OS Independent?
+1, fair enough, nothing critical listed, but sounds like there may be some benefit. It's now or never as Fedora is going on to-be-formatted drive shortly.
Feb
15
comment Is Firmware OS Independent?
+1, great, helpful
Feb
15
comment Is Firmware OS Independent?
BIOS update taken care of already, talking about device firmware (wireless card, SSD, etc.)
Jan
26
comment MySQL: Increased buffer pool, ibdata1 corrupt?
sorted, additional mysqltuner.pl created mysqld process must have been the culprit
Jan
25
comment MySQL: Increased buffer pool, ibdata1 corrupt?
Going to wait until this evening before I attempt a restart as the service is up & running reads/writes "seem" fine. When I made the my.cnf change I did notice several mysql processes running, at least 1 of which was a separate mysql> terminal session. The culprit may have been mysqltuner.pl which I had run a few times today; it requires one to login for the script to run, so there may have been a couple of extra mysql process running as a result
Jan
25
comment MySQL: Increased buffer pool, ibdata1 corrupt?
Perhaps mysqltuner.pl or being logged in to a separate terminal to mysql> session had something to do with the locking, not sure. At any rate lsof shows "mysqld 23922 mysql 3uW REG 253,5 144703488 104 ibdata1" root mysqld_safe and mysql mysqld are the current running processes
Jan
15
comment How to tell if mod_deflate is actually working?
apache 2.4 upgrade doc seems to indicate that it will automagically determine whether or not to gzip a given resource: "mod_deflate will now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed" -- httpd.apache.org/docs/2.4/upgrading.html
Nov
21
comment CentOS 6 Kickstart Minimal Install: for JVM, MySQL, and Apache VMs
I wound up going with base + a few odds & ends -- works fine, great in fact, kickstarts are so very useful in VM environment ;-)
Sep
2
comment CentOS 6 Kickstart Minimal Install: for JVM, MySQL, and Apache VMs
Thanks, I'll go with minimal install (REMI must be quite up-to-date if it has latest httpd, mysqld, and jdk)
Sep
2
comment CentOS 6 Kickstart Minimal Install: for JVM, MySQL, and Apache VMs
"relative bloat", mostly due to the fact that I don't know the actual footprint; if minimal installation is under 1GB, fine, can roll with that, but like the idea of having a streamlined set of packages suited to the VM in question, particularly the primary (and only) service that it will run (httpd, mysqld, and java respectively)
Sep
2
comment CentOS 6 Kickstart Minimal Install: for JVM, MySQL, and Apache VMs
errr, because I have heard of neither ;-) Thanks for the tip, will explore...
Sep
2
comment CentOS 6 Kickstart Minimal Install: for JVM, MySQL, and Apache VMs
+1, but yikes, that may be a bit too lean; how about networking, ntpd, logrotate and likely many other necessary packages to run the virtual stack I have in mind? Fairly noob-ish as a Linux sysadmin, but I know enough to know that it might be a good idea to actually kickstart with some packages ;-)