Reputation
2,403
Next privilege 2,500 Rep.
Create tag synonyms
Badges
9 22
Newest
 Caucus
Impact
~109k people reached

Aug
10
comment Routing all traffc though OpenVPN on Windows
Once connected to the VPN can you show what is the routing table of the client and the IP of the server you are connecting to?
Aug
10
comment Should i disable DNS recursion?
I completely disagree with you when it comes to performance. Going through the Root DNS is slower because you'll be doing the equivalent of a trace. Getting the answer from a DNS server that is closer to you and that might already have the answer cached will be much faster.
Aug
10
comment Should i disable DNS recursion?
I would at the very least remove most of the forwarders you have in place right now. I normally use my ISPs DNS since they usually offer much faster name resolution than Google's public DNS (~200ms vs ~20ms).
Aug
6
comment Setting up Google mail server on custom domain
@.example.com in a DNS entry is the same as typing example.com.example.com if the $ORIGIN is set to example.com
Aug
6
comment Setting up Google mail server on custom domain
Are you using a mail client or the webmail from Gmail and Hotmail?
Aug
6
comment Setting up Google mail server on custom domain
@Jenny D, error 550 relay not permitted by X only pertains to SMTP authentication issues. So it would make much more sense that HIS smtp server is returning this error.
Aug
6
comment how to secure an vmware esxi host on a root server?
What's the gain of changing SSHD's port?
Aug
4
comment Two factor SSH authentication on multiple servers
What you are trying to achieve in a pure security perspective is to install a second lock on your doors so you can open wide all your windows. So with that in mind, I think that project would be better justified if the reasoning was to ease the operation's burden, not to increase security.
Aug
3
comment Unstable 10Gb copper links, Broadcom and Intel cards to Cisco 4900M switches
Do you have the proper/supported GBIC on both side of the cables?
Apr
10
comment Someone else points his DNS to my webserver
@wurtel I'm still amazed at the amount of people that goes on google and type www.foobar.com and click on the first link. Ironically enough, the first link is usually a google ad paid by www.foobar.com.
Mar
3
comment Clients connected to “vlan hub” can't access internet on dedicated, natted vlan
And what does the NAT rule look like? Do you NAT behind the external interface of the firewall or behind another IP?
Feb
27
comment Can a Linux Kernel be shared between two operating systems?
I think you should clarify what is the difference for you between OpenVZ and what you are trying to accomplish. Because from the question and your comment, it seems to me you are pretty much describing what OpenVZ does.
Jan
26
comment why cisco VPNC work on the second time each time and not on the first time
What does the log from the other end of the VPN shows? What about the logs from your VPNC client?
Jan
12
comment How to terminate any ip/ip tunnel which has this host as destination
Actually, I see it more as the description of a MITM attack.
Nov
18
comment Get a catch-all DNS and set a MX for a special domain
Did you update the serial of the zone before doing the rndc reload?
Sep
10
comment Clients intermittently cannot reach internal server, Windows network with Watchguard XTM
What does the routing table looks like on the XTM device?
Aug
13
comment Cisco ASA Outside to Outside NAT (forward from one public ip to another public IP)
Could you dump the show run with IP obfuscated? It would be easier to help.
Aug
13
comment Cisco ASA Outside to Outside NAT (forward from one public ip to another public IP)
A NAT rule will not affect routing (unless you are using FWSM).
Aug
11
comment Putty: disable configuration of server terminal length
SSH, Telnet, Serial
Aug
11
comment Putty: disable configuration of server terminal length
Well, the only thing I can tell you is that it does work with Putty. Since you seem to know what we should and shouldn't answer then I don't see the point of asking the question in the first place.