4,428 reputation
1436
bio website
location
age
visits member for 4 years, 6 months
seen 1 hour ago

A self-loathing despair squid.


Dec
18
comment Share /home between datacenters
You'll probably want either glusterfs, or ceph. A distributed filesystem. Also, you can mount drbd multiple times, but only one read-write, and its a scary bad idea anyhow.
Dec
16
comment How to get monit to only alert once when a check fails, not when it comes back successful?
does sound like a bad check. You should be monitoring the service it provides. If at some point you cluster this service so a reboot does not equal an outage you'll get someone out of bed for nothing.
Dec
7
comment Linux 'df' command not showing root filesystem?
does the uuid for your root fs match the one for it in /etc/fstab ?
Dec
4
comment One line script to check and react to memory usage
@Zoredache is that worse than a XY problem ?
Dec
1
comment How do I get anycast for my servers?
putting some more thought into it, we do own a /19 and /22 which are also on the bgp tables as our isp do our anycast also, but only the /29 is anycasted. i guess if we'd not had the larger blocks they'd have complained about table space, dunno though, was set up before I got here. You may well be right though.
Dec
1
comment How do I get anycast for my servers?
Just making sure it's understood that only most AS filter on a /24. We're using a /29.
Dec
1
comment Iptables doesn't open port 53
yeah, that's true i guess.
Dec
1
comment How can I get a report of all MAC addresses nearby?
i usually do a broadcast ping anyhow, ping 255.255.255.255 -b
Dec
1
comment How can I get a report of all MAC addresses nearby?
the sudo password will be your own password, if you're allowed admin rights on the machine it'll let you run stuff as root.
Dec
1
comment Configuring Synology NAS as freeIPA client
sssd isn't a show stopper. For your use case it just caches the credentials so you can still login if the network to the ldap server went away. Centos 5 and older don't have sssd either.
Dec
1
comment Iptables doesn't open port 53
@MadHatter actually, these are the last lines he did and they're -I they'll be the first in the chain so it's probably ok to assume there's no preceding drops or rejects.
Nov
30
comment Is my site getting hacked (Bluehost)?
fwiw; if anything is connected to the internet you can be sure someone/something is trying to break into it in a matter of seconds.
Nov
30
comment Is there a way to set a static IP's last 3 digits only in linux?
why is the last octet (the fourth number) significant at all ? dns updated from dhcp is your friend. You'll need to put a static reservation on each router for that device though.
Nov
26
comment Public overrideable DNS
this question is very unclear and could do with clarification.
Nov
26
comment How to override the hostname that DHCP configures on a CentOS7 box in AWS?
I tend to agree. I didn't find it when searching for the issue myself (google) a week ago, so others probably aren't, either.
Nov
26
comment How to override the hostname that DHCP configures on a CentOS7 box in AWS?
I know right ? I tried every frikking method of changing a hostname i knew over like an entire day... Yeah post that up, would be good for others to see. Just hunted around and seen the user-data item during instance launch myself. face-palm. ;-/
Nov
26
comment Debian Secure Network
it sounds like you're trying to allow only related and established traffic over the vpn link, but its just too vague to know for sure if that's what you're trying to do; let alone what your current setup is.
Nov
25
comment Get number of TCP established connections
seomthing like a diff of the output of ss over time ?
Nov
25
comment Internet access from private VPC subnet?
and rereading your question, that wasn't what you wanted ! Yeah, don't do that. I thought your question was saying you wanted port 80 redirected (which'd be odd as its a private subnet machine but i chalked that up as a weird requirement), but its actually saying that's just something you tried in efforts to get them online (which wont work, as it actually does a function as per my previous comment). Yeah, you won't need port 80 or 443 open in the security groups of either subnet or instance inbound-wise, as you're not hosting a website, you just want net access.
Nov
25
comment Internet access from private VPC subnet?
masquerading is saying 'let traffic from the private subnet go to the internet as if from me' and the dnat is saying 'traffic arrving from the internet to my port 80 should go to the private subnet machines port 80'....