4,254 reputation
1234
bio website
location
age
visits member for 4 years
seen 17 hours ago

A self-loathing despair squid.


Aug
5
comment Add IP range to Cisco ASA 5505
first google hit, looks relevant: supportforums.cisco.com/thread/2042902
Jul
28
reviewed Close strongswan: entirely virtual subnet
Jul
28
reviewed Close Seeking Opinions - Is it a good idea to rely SQL backup 100% on transaction logs?
Jul
28
reviewed Close Anyone know of a good way to sell used servers?
Jul
28
reviewed Close Recommendations for learning network administration
Jul
25
comment Can I use Vagrant for Production Environments
oh, news to me. cool.
Jul
25
comment Can I use Vagrant for Production Environments
what would you want to use it in production for ? It's backed for virtualbox.
Jul
25
comment Fixing services that have been disabled in /etc/default/ with puppet?
use a defined type called something like "defaulted_service" which has a service resource, and also an exec resource that updates the file in place using sed if needed, or a file resource that uses augeas, up to you.
Jul
25
answered Multiple Subnets on OpenVPN
Jul
24
comment What is a “dual-central switch”?
yeah that's my guess also. I think it's a little badly written, but the intention is your central switches which have some form of redundancy.
Jul
22
revised Cron job does not generate expected log file
deleted 3 characters in body
Jul
22
revised Cron job does not generate expected log file
added 92 characters in body
Jul
17
comment How to use Puppet to synchronize user passwords across servers?
if you're dealing soley with linux machines, look into freeIPA. It's basically exactly what you want (and includes an LDAP server within it)
Jul
17
comment How to use Puppet to synchronize user passwords across servers?
Puppet is not designed to do what you want. Put simply, you're trying to weld metal using a sponge cake.
Jul
17
comment How to use Puppet to synchronize user passwords across servers?
This is one of those moments when you need to go to whoever specifically instructed you, and tell them they are wrong. Use LDAP.
Jul
16
comment iptable-restore sets INPUT allow all
iptables -P is the shorthand (just in case you've been doing --policy).
Jul
10
comment How to configure a custom NAT for use in Amazon VPC
yeah, the source/dest check is the thing that tripped me up when i had to do this.
Jul
8
comment SSH prevent accidental lockout after configuration change
a possibly related workaround for iptable firewall changes to prevent lockout; essentially edit a file from a central point and check if it's not been touched for a while, if that's the case insert some iptables rules to recover access: pastebin.com/6h78MHrN
Jul
3
comment Is there redundancy during a RAID build?
I think i'm right in saying you could lose one more from the same section of the raid 0, or up to two more from each of the other sections of the raid 0. How many that is depends on if you have 2x6 disk RAID6's or 3x4 disk RAID6's. I assume 2x6 (as that's more sane imho), which means at worse you can afford to lose one more, and at best you can lose 3 more,
Jul
3
comment Puppet classes out of order despite explicit arrow operator use
We're using the roles and profiles methodology. Google it, there's a really good blog post or two on it.