Reputation
81,244
Next tag badge:
91/100 score
33/20 answers
Badges
5 81 157
Newest
 Enlightened
Impact
~3.1m people reached

Feb
24
comment Load Balancing DNS Servers: UDP / TCP
Good point - I was assuming authoritative in my answer but you're right, it may be a recursor.
Feb
24
comment Load Balancing DNS Servers: UDP / TCP
@MoshPit vrrpd or keepalived are good options.
Feb
24
awarded  php
Feb
24
answered Is there a way to force permissions to update when removing user from admins?
Feb
23
comment Permissions set to 555. How can another user modify the files?
@AD7six Ahh, I see what you mean.
Feb
23
comment Permissions set to 555. How can another user modify the files?
@sam_pan_mariusz Well, we don't even know whether it's a package install or compiled from source.
Feb
23
comment Permissions set to 555. How can another user modify the files?
@AD7six Which comment do you mean? I got the opposite impression from Apache is run by root. Php master process is run by root.
Feb
23
answered Permissions set to 555. How can another user modify the files?
Feb
23
comment Permissions set to 555. How can another user modify the files?
What user is PHP running as? It seems the attacker has been able to make changes with root permissions, which they've either done directly or through a local privilege escalation vulnerability after taking over a less privileged process.
Feb
23
answered Why is Puppet creating these files after every run?
Feb
22
answered Is Arbitrary code execution vulnerability in Firefox a myth?
Feb
20
comment LVM module from puppet forge randomly breaks applying manifest
Can you show us what's in that modules/sge/manifests/init.pp file?
Feb
20
comment Wget, self signed cert and --no-check-certificate not working
It's warning about the cert but that isn't preventing it from sending a request - it looks like instead of responding to the HTTP request, the server is cutting off the connection - can you do a packet capture to verify, and maybe look in the server's logs to determine what's going on there? Are you making the exact same request, for /index.html, in the browser?
Feb
20
revised Wget, self signed cert and --no-check-certificate not working
added 36 characters in body
Feb
20
awarded  domain-name-system
Feb
20
awarded  domain-name-system
Feb
19
comment Is it possible to change filesystem properties for an existing ZFS pool?
@Pavel Unfortunately, no - not that I know of.
Feb
18
comment Cisco ASA firewall blocking requests to internally hosted DNS server
That's TCP, you really should be testing UDP as it's the vast majority of DNS traffic. Verify that the results for UDP are the same?
Feb
18
comment Cisco ASA firewall blocking requests to internally hosted DNS server
I have tried to change TCP to UDP - did you change it both for the NAT rule and for the ACL? What's packet-tracer say when you simulate a DNS packet to the system from outside?
Feb
18
awarded  email