9,259 reputation
2354
bio website eric.eisenhart.name
location Santa Rosa, CA
age
visits member for 5 years, 5 months
seen 12 mins ago

When I'm not bicycling, I'm a Linux SysAdmin. I'm on the board of my local bicycle advocacy group.

Bikes are my primary transportation. A 2009 Surly Long Haul Trucker, set up as a commuter and a 2012 Trek Ion CX. I also take the bus, but do not own a car.

profile for freiheit on Stack Exchange

@freiheit, Google+, Facebook, LinkedIn


Dec
15
comment Launch Nginx on startup
Welcome to Server Fault! While this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference.
Dec
12
comment Exchange email eavesdropping issue
Also: there's so many ways that it's possible that there's no good way to be sure it hasn't happened.
Nov
11
comment Can access SSH but can't access cPanel web server
Is totally disabling the firewall really a good idea?
Nov
3
comment bind: blackhole for invalid recursive queries?
@UdoG: The server failure packet is only 31 to 32, while the referral to the root servers was probably several hundred bytes. If your server's reply is the same size as the query, or only a tiny bit larger, your server is useless in a DNS DDoS attack, since the attackers will consume as much bandwidth as they get you to send to their target. I tested against a number of likely well-configured authoritative name servers (such as google's), and they replied with "recursion requested but not available".
Nov
3
comment bind: blackhole for invalid recursive queries?
@TheLQ: The question refers to this being a DDoS attack. The common DNS-based DDoS attack is to send DNS queries with the IP forged of the target. Since the DNS reply packet is larger than the query, it provides a multiplier. If your server doesn't respond with a significantly larger packet, you've eliminated the reason they're using your server in the attack.
Nov
2
comment Possible to ignore the users shell in “su” command?
The shell puts it's own identity into the $SHELL environment variable, but /etc/passwd is where su is looking for which shell to run. ` - ` is passed on to the shell invocation telling it to act as a "login" shell (bash runs a profile file instead of a bashrc file, changes working directory, etc)
Nov
2
comment Possible to ignore the users shell in “su” command?
That will still attempt to use the shell that's in /etc/passwd, which seems to be the bigger problem.
Oct
31
comment Updating to Exchange 2013 - any way to do it now?
@RobM: I think it's just waiting on SPs for the older Exchange releases that are compatible with the AD schema for 2013.
Oct
30
comment bind: blackhole for invalid recursive queries?
@UdoG: Have you tried adding allow-query "none"; to the zone "." config?
Oct
28
comment bind: blackhole for invalid recursive queries?
Wouldn't it be better to identify the hex strings for all domains that the server should be responding to, do the above to allow those, and drop all other udp/53 trafic?
Jun
29
comment What do I need to mount devices with threaded round holes in a server rack with square holes?
Our cage-nut puller looks sorta like oversized nail clippers, like the bottom picture here: dalvenjah.foxfire.net/2010/01/the-real-cage-nut-tool
Jun
8
comment How to restrict mailman list subscriptions to certain domains?
Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. Simply put ^(?!.*example\.edu) or ^(?!.*(example\.edu|example\.com)) in the ban list?
Jun
8
comment How to restrict mailman list subscriptions to certain domains?
@Zoredache: yes. Might do that for some, but when "internal" is a population of thousands, list advertisement is useful I'm also assuming the spammers have the list names saved now.
May
15
comment How to use a custom status command for a service in puppet?
@ShaneMadden: Puppet doesn't necessarily need full paths to commands, though assuming it needs them doesn't hurt anything. In addition to a some sort of default path (PATH in environment daemon was started in?) exec accepts a path param and you can set a default path with Exec { path => '/usr/bin:/bin' } or Exec { path => ['/usr/bin'],['/bin']}. There's a similar 'path' on Service, but it appears to be primarily used with certain providers for finding init scripts, rather than as a normal shell-style command search path.
Jan
29
comment Puppet Ubuntu remove packages no longer required
Wouldn't it be clearer how to extend this to more packages if the package had notify => Exec['autoremove'] instead of the subscribe in the exec?
Jan
28
comment How to install mcrypt on RHEL5
@Jamie: Feel free to make an edit to the answer itself to make that clearer
Jan
28
comment How to install mcrypt on RHEL5
@Jamie: The question was about RHEL5, not RHEL6. Just now I updated the example URL and made it clearer that somebody should really check that EPEL FAQ to get the right URL.
Jan
24
comment Odd entries in DNS lookup log
@WilliamMorris: The numbers for ip→name lookups are backwards so that hierarchy works out right.
Jan
21
comment Good personal proxy for OpenSUSE - Squid?
"should I use squid?", "should I use OpenSUSE?", "where can I find a tutorial?"
Jan
20
comment Good personal proxy for OpenSUSE - Squid?
You seem to be asking multiple different questions here. The Q&A format used here is intended for one question per question.