1,316 reputation
11128
bio website think.io
location Ireland
age 34
visits member for 5 years, 6 months
seen 6 hours ago
Sysadmin, Gamer, ex-lawyer, admirer of humanity... in a strange kinda way

Feb
16
comment How do you choose your IP addressing?
same for ++; especially as to the removal of conflicts with home networks; multiple 192.168.(1|0).0/24 networks make life merry hell for contractors.
Feb
16
answered What's better for performance: rack-to-endpoint or rack-to-switch-to-endpoint
Feb
16
comment Apple Mac Startup Scripts
normally I'm a huge fan of that (as much as I shouldn't be) but I was curious on how to do it properly.
Feb
16
accepted Apple Mac Startup Scripts
Feb
16
asked Apple Mac Startup Scripts
Feb
15
comment Connect Google Apps Email from Outlook via Linux ipTables
you might want to provide your firewall script and clarify where those ports are open. just generally, more info pls
Feb
12
answered ESXi settings lost following reboot
Feb
12
comment Tracking Users Logged on Hours
Looks like this may need to be the path. Honestly a little surprised there aren't a few apps around to do this. I would have thought it to be relatively common. I suspect I'm just missing the magic word to search for though.
Feb
11
comment Tracking Users Logged on Hours
no ac tool that I'm aware of, the system service may be the best idea but all in all everything to do with logon times seems just so unreliable in windows.
Feb
10
answered Ratio of PC to Mac support hours?
Feb
10
comment Disable local root login, permit root login over ssh
I suppose it entirely depends on your level of paranoia. If you don't encrypt the boot partition you can't be reasonably sure that the system hasn't been tampered with on a reboot (eg rebooted with a root-kit) I suppose you could install tripwire and keep the hashes on a second encrypted partition and only mount the data when your sure the system integrity has been maintained. At some point you just have to take off the tin foil hat though.
Feb
9
comment Disable local root login, permit root login over ssh
do this and encrypt all volumes on the disk and you'll really annoy whoever is trying to get in as it won't come up correctly without you entering a password on boot. So long as someone else has physical access to the machine you can never guarantee security however every little bit helps. If you are going to try this have good backups however as recovery will be difficult/impossible if something goes wrong.
Feb
9
asked Tracking Users Logged on Hours
Jan
29
comment Preferred mail system/server for a company?
I've been both a Lawyer and a Sysadmin and can tell you professionally that many of the hosting enviro's wouldn't cut it. While some of it is FUD in the event of a privacy breach you could be run into serious issues depending on you jurisdiction and "it was our hosts fault" won't save you. Specific areas of law also are subject to greater privacy requirements and as such would not be suitable for outsourcing in this manner as you lose control as to 3rd party access. You also open yourself to issues if your host is subpoenaed and/or hands over your info, too much risk. (Not legal advice etc)
Jan
29
comment Preferred mail system/server for a company?
That entirely depends on your business; if he is talking about a law firm with 20 people it could be criminally negligent to have your email hosted elsewhere. If your bouncing huge attachments internally a n outsourced vendor may not permit that. If your internet connection is intermittent you may need a cached offline solution with a local server. It makes plenty of sense for a lot of small companies without BES to host mail internally.
Jan
29
answered Preferred mail system/server for a company?
Jan
26
awarded  Autobiographer
Jan
18
comment Is it a good idea to encrypt files in unix?
paranoid isn't thinking they are out to get you; they are. paranoid is thinking they are co-ordinated about it... whens this club meet?
Jan
15
comment Amavis and Postfix VirusMails
it looks like it is in the CentOS packages for 2.5.3-2 and I have 2.5.3-1! Just unlucky but pushing the mails to another system running a more recent version and unfreezing them from there with that command has done the trick!
Jan
14
accepted Amavis and Postfix VirusMails