Reputation
2,636
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
12 25
Newest
 Enlightened
Impact
~144k people reached

Sep
23
reviewed Reject Cannot ping my domain-joined server - Can only ping domain controller - host unreachable
Sep
15
awarded  Nice Answer
Sep
14
reviewed Approve Memcached in Munin
Sep
8
comment How to protect from dangerous bash commands?
@aaron, I have the exact opposite experience. Since we enforced strict sudo, auditd, sshd and pam settings, the amount of mistakes that are going through has decreased drastically. On top of it it makes it so much easier to know who did what. In turn making it easier to do a rollback in case of problems.
Sep
8
answered How to protect from dangerous bash commands?
Sep
8
awarded  Constituent
Sep
1
reviewed Approve monitoring switches with Nagios
Sep
1
reviewed Edit How to set up server/domain name correctly in hosts file with HTTPS
Sep
1
revised How to set up server/domain name correctly in hosts file with HTTPS
easier to read
Sep
1
awarded  Caucus
Aug
14
reviewed Approve Why does my ssh timeout vary with network location?
Aug
14
reviewed Approve Why does my ssh timeout vary with network location?
Aug
14
reviewed Approve Why is RFC 7505 (Null MX) necessary?
Aug
11
revised Routing all traffc though OpenVPN on Windows
Answered questions from comments
Aug
11
answered Routing all traffc though OpenVPN on Windows
Aug
10
answered Sending mail from perl applications with SSMTP
Aug
10
comment Routing all traffc though OpenVPN on Windows
Once connected to the VPN can you show what is the routing table of the client and the IP of the server you are connecting to?
Aug
10
comment Should i disable DNS recursion?
I completely disagree with you when it comes to performance. Going through the Root DNS is slower because you'll be doing the equivalent of a trace. Getting the answer from a DNS server that is closer to you and that might already have the answer cached will be much faster.
Aug
10
comment Should i disable DNS recursion?
I would at the very least remove most of the forwarders you have in place right now. I normally use my ISPs DNS since they usually offer much faster name resolution than Google's public DNS (~200ms vs ~20ms).
Aug
10
reviewed Approve Put a “config-test” step into an ansible playbook