Reputation
83,817
Next tag badge:
97/100 score
33/20 answers
Badges
5 92 165
Newest
 Caucus
Impact
~3.7m people reached

Mar
31
comment Can you run Active Directory 2008r2 on Windows Server 2012?
What specific aspects of your systems can't work with newer AD? Some aspects of what the domain's doing are controlled by the functional level or GPO, but some security feature defaults will change with the servers, so it's important to know exactly what's incompatible.
Mar
31
answered Find different switches from cdp output
Mar
30
comment puppet master on CentOS 7 - Gone after reboot
Try setting disabled in /etc/sysconfig/selinux?
Mar
30
comment puppet master on CentOS 7 - Gone after reboot
Those settings should stick, can you determine which one is not holding its setting properly between boots?
Mar
30
comment puppet master on CentOS 7 - Gone after reboot
Ok, looks like it might actually be running. What happens when you run puppet agent --test on an agent?
Mar
30
comment puppet master on CentOS 7 - Gone after reboot
Just run setenforce 0 and test. Also grab that whole log line with service httpd status -l
Mar
30
comment puppet master on CentOS 7 - Gone after reboot
The SELinux error there looks suspicious. Was this working as the puppetmaster service and not the httpd service before? Does it work correctly if you temporary disable SELinux?
Mar
30
comment How to block ApacheBench from sending requests to server?
@MHS Understood! This should get you started: serverfault.com/questions/251988/…
Mar
30
comment How to block ApacheBench from sending requests to server?
@MHS Then it's likely the rate limiting tools were not configured and working correctly, you should work to determine what's broken there and try to get the tools working correctly.
Mar
30
comment How to block ApacheBench from sending requests to server?
What do you mean by saying that "nothing worked"? You can use those tools to block requests from ab - did you try to configure them to block and the attackers evaded the blocks, or the requests didn't get blocked by the configurations you tried?
Mar
30
comment Find different switches from cdp output
Is this a lab setup, then? In a normal network, the switches will have different hostnames and IP addresses configured, which will show in the CDP data.
Mar
29
comment Find different switches from cdp output
Can you clarify what you're seeing there that makes you think that it's two different switches?
Mar
29
answered ASN number basics
Mar
29
comment Proper implementation of Wildcard DNS on top of an A record
@HåkanLindqvist You're right, I was thinking NS record behavior - corrected.
Mar
29
revised Proper implementation of Wildcard DNS on top of an A record
deleted 22 characters in body
Mar
29
answered Proper implementation of Wildcard DNS on top of an A record
Mar
27
comment Can FPM make one RPM package that acts differently if systemd is being used?
Probably best to avoid dropping the unit file in place on EL6 nodes, since the /usr/lib/systemd/system/ directory tree won't exist there and would need to be created.
Mar
26
answered BIND DNS A Record File
Mar
26
comment BIND DNS A Record File
Can you clarify what you're trying to improve with this change? Do you mean moving to smaller component files so that you could add new files instead of editing exist files?
Mar
19
comment Iptables block layer 7 DDoS attacks
Right - in iptables it's by packets and not requests, but yeah - something like this is what you'll want, setting it up for TCP port 80 instead of ICMP.