403 reputation
35
bio website north-winds.org
location Beaverton, OR
age 31
visits member for 3 years, 6 months
seen Sep 28 at 14:06

Apr
8
answered How to give user permissions on ubuntu server?
Apr
8
answered nfs file access statistics
Apr
8
answered distributed vcs for hp-ux
Apr
8
comment How secure is Remote Desktop Connection?
Oh, I should add this article: mobydisk.com/techres/securing_remote_desktop.html
Apr
7
comment How secure is Remote Desktop Connection?
@Shane WEP was also a bad implementation of RC4, it not entirely RC4's fault when one used only a 40-bit key and 24-bit seed. But, RC4 is getting a little old now.
Apr
7
answered Packet loss between Broadcom NetXreme NIC's on different hosts
Apr
7
answered Why does apt-get install also upgrade unrelated packages?
Apr
7
comment How secure is Remote Desktop Connection?
This specific feature is only available on Server 2003 x64, Vista, and newer. Also, I believe the XP RDC client lacks the ability to verify even if connecting to newer computers so every connection can be at risk.
Apr
7
answered How secure is Remote Desktop Connection?
Apr
7
comment how to copy & gzip files individually over ssh
And quote any variables, of course: find -type f | while read -r fname ; do cat "$fname" | gzip -c | ssh remote "cat > '$fname.gz'" ; done or using dd: find -type f | while read -r fname ; do cat "$fname" | gzip -c | ssh remote dd of="'$fname.gz'"; done When using ssh, it requires two levels of quotes since both the local shell and remote shell have a chance to expand variables. Note: this will break on filenames with single quotes. If you replace the single quotes in the ssh command with \" then it will instead break on filenames with $, ", or ` (back-tick)
Apr
7
awarded  Commentator
Apr
7
comment how to copy & gzip files individually over ssh
As an alternative to file redirection, there's always dd. It tends to require less ugly quoting. cat dafile | gzip -c9 | ssh remote dd of=dafile.gz Also, for a slightly safer read, add -r, it stops read from interpreting any backslashes in the filename should you decide to use them.
Apr
7
answered IPv6 routing problem
Apr
2
comment Noob confused with DNS and WHM /cPanel install
Yes. If you plan to move to a different IP later, you can lower the TTL, say, an hour or more before the move to improve the speed of clients seeing the new A-record once you update it.
Apr
1
comment Using ssh-agent with KDE?
I started doing this once I realized it's not really less secure than running a per-session agent if I never really log out. The recommended way to use ssh-agent is not in Autostart, but use it kinda like sudo to run startkde. For example, "ssh-agent startkde" Before startkde runs, SSH_AUTH_SOCK is setup and when startkde exits, so does ssh-agent. It's more reliable than depending on Autostart, but trickier to set up correctly. Ubuntu has support to make this easy to do and will even generate a chain of commands like this. Looking at ps, I see "ssh-agent gpg-agent dbus-launch gnome-session"
Apr
1
answered virtual vs dedicated server?
Apr
1
answered Using ssh-agent with KDE?
Apr
1
comment apply back firewall after iptables flush
Oops, I completely ignored the tags. I'ved used older Fedora, but never CentOS, but guessing on what I remember, you should have an init script for the firewall at either /etc/init.d/iptables or /etc/rc.d/init.d/iptables. You might have a file that stores the iptables configuration at /etc/sysconfig/iptables. The contains will be RAW arguments to iptables to initialize it. You should also have a local start-up script that runs last on boot at either /etc/rc.local, /etc/rc.d/rc.local, /etc/init.d/local, etc. In that file you can add the above iptables command as a safety net and reboot.
Apr
1
comment Centos running Hudson freezes, what logs to check to find out why?
Analyzing a previous crash? Mostly, logs like /var/log/messages, /var/log/syslog, and /var/log/debug. 99% of logging goes there. If your kernel is panicing, it can be configured to do a dump you your primary swap partition and then saved to /var/log/dump on reboot. You can also enable automatic reboot on panic rather than halting with the sysctl kernel.panic. Add kernel.panic = 30 to /etc/sysctl.conf and run sysctl -p.
Apr
1
comment apply back firewall after iptables flush
Without knowing your Linux distribution, I can't help you with specifics on your firewall, but you could add "iptables -A INPUT -p tcp --dport 22 -j ACCEPT" to some start-up script, like /etc/rc.local that runs at the end of boot. Once you reboot, you can test everything and also see if removing that rule locks you out. Run "sudo shutdown -r +5" and then put the command in the background with Ctrl-Z followed by bg. Lastly, remove the above rule with "iptables -D INPUT -p tcp --dport 22 -j ACCEPT" If you get locked out, your server will reboot in 5 minutes and re-add the rule from rc.local.