1,283 reputation
69
bio website
location Albany, NY
age 38
visits member for 4 years, 4 months
seen 4 hours ago

Just your standard geek. Part programmer, part network wonk..


Nov
4
comment trace security hole for culprit random “post” mail files
I am guessing that it probably vulnerable versions of software (Most people tend to upload a copy then never update). The way I normally handle it, is look at the domain in question. if running vulnerable software, or the like, disable it, and tell the owner to fix /update
Nov
4
comment trace security hole for culprit random “post” mail files
are they hitting random domains, the same domain. Do each of the domains that get the file uploaded do them have anything in common (same software installed, ie wordpress, joomla, etc..that could be vulnerable)
Nov
4
comment trace security hole for culprit random “post” mail files
need to look at ftp logs, access logs, etc.. to see where/how the file is being upload to the server.
Nov
4
comment I can't connect to mysql on a remote server
are you 100% sure there are no other firewalls in between? Assuming you can Ssh between the two
Oct
24
comment Ssh without password to Embedded read only device
could also use expect scripting language or something like sshkit in ruby to automate the connecting and retrieval from the device, what lang in current script written in.
Oct
19
comment Does Qmail utilize any of Sendmail's own configuration files?
just curious as to why you need both if your program is just calling sendmail to deliver email the qmail wrapper should work the same way?
Oct
9
comment What determines which of a DHCP Relay Agent's IP addresses are attached to relayed requests?
well the problem with 172.17.5.0/23 is that it isn't a valid subnet, since it would need to fall on a bit boundary 172.17.4.0/23, and 172.17.6.0/23 are both valid /23's Perhaps that is why windows wouldn't let you resize it?
Oct
8
comment What determines which of a DHCP Relay Agent's IP addresses are attached to relayed requests?
@pauska If those hosts on each Subnet need to communicate directly with each other, it should work ok. assuming the procurve can route. And if they need to talk to each other and the procurve can hairpin, it should still work. but not sure why you would do it.
Oct
8
comment What determines which of a DHCP Relay Agent's IP addresses are attached to relayed requests?
are you in the process of renumbering this subnet? Else not sure why you would have to 2 L3 networks on the same port. I am not familiar with the procurve, but see if there is an option to specify one as a secondary
Oct
8
comment What determines which of a DHCP Relay Agent's IP addresses are attached to relayed requests?
My guess is that it is switch dependent. Most switches I've dealt with don't allow you to set 2 ip addresses, without making the others secondary
Oct
8
revised Need help routing Cisco network- IP routing
added 3 characters in body
Oct
8
answered Need help routing Cisco network- IP routing
Oct
4
comment 3com switch has been set to forwarding state
the forwarding state messages just mean that spanning tree calculation has completed and that path was found not to contain any loops, so the port is set to forwarding. If there where loops MSTP would put it into a blocking state
Oct
3
comment Can a computer route IP trafic between two LAN if it is not configured as gateway?
it could possibly be done with bridges. but it would be really really complex, scary and difficult (and detrimental to the kitten population)
Oct
3
comment Can a computer route IP trafic between two LAN if it is not configured as gateway?
well if you want to remove routing out of the way, you are going to have to do weird stuff with bridging, and the even then I not sure how you would do ti.
Oct
3
answered Can a computer route IP trafic between two LAN if it is not configured as gateway?
Oct
2
comment Restricting our server access to our office IP and using SSH tunnel when not at office
I never said it improved security. It doesn't protect against a dedicated attack where a person is actively looking to compromise your box, but against the tons of owned *nix boxes that go out and actively look for vulnerable / exploitable ssh servers, it cuts down on the amount of log entries as your server is harmlessly probed(the log spam I was referring to). Making login failures on a non-standard port worth more investigation, as they are less likely to be bots.
Sep
30
comment Restricting our server access to our office IP and using SSH tunnel when not at office
well I would go so far as move ssh to a non standard port, and only allow key auth. The non standard port cuts down on the massive amount of log spam / auth attempts by bots looking for vulnerable servers on port 22. Another option would be to look into something like OPenVPN.
Sep
11
comment How can a Linux Administrator improve their shell scripting and automation skills?
actually I think the safe place today is in the vms, since you don't need all the physical hardware. Now time/etc. yes that is in short supply :) But given the availability of free / low cost hypervisors, and the malleability of *nix OSes You can build some pretty complex setups to learn.
Sep
11
comment How can a Linux Administrator improve their shell scripting and automation skills?
You practice. Try automating everything, build vms, etc..