8,846 reputation
21247
bio website dmourati.blogspot.com
location United States
age 40
visits member for 3 years, 10 months
seen 33 mins ago

Here to learn


Jan
27
comment TTL and Google DNS
Anycast ftw. google.com/…
Jan
25
comment 124 emails sent at once while one should be sent every five minutes by cron if a certain web service stops running
Problems with mail delivery? Check the email timstamps and your mailserver logs.
Jan
22
comment How can I send visitors to the closest server using DNS?
Also worth noting that DNS has this feature natively. Put a DNS server in a region with a record pointing to a webserver in that region. Repeat in other regions. Profit.
Jan
22
comment Split tunneling through two VPNs simeltaneously
Not sure I fully grok what you are trying but these may help: lartc.org/howto/lartc.rpdb.multiple-links.html linux-ip.net/html/adv-multi-internet.html unix.stackexchange.com/questions/104830/…
Jan
22
comment TTL in ping vs dig
This is a legitimate question. Not sure why all the downvotes. Also, re ping TTLs: map.meteoswiss.ch/map-doc/ftp-probleme.htm
Jan
17
comment Hitting Ephemeral TCP Port Exhaustion
tech.blog.box.com/2014/06/…
Jan
12
comment Nagios - check_ntp_time - Offset Unknown
This answer is a blast from my past. Same workaround deployed many years ago. Sigh.
Jan
7
comment How to disable automatic scheduled Puppet runs that occur every 30 minutes?
That's what you wanted: Administratively disabled. If you need to run manually while administratively disabled: puppet agent --enable; puppet agent --test; puppet agent --disable
Jan
7
comment How to disable automatic scheduled Puppet runs that occur every 30 minutes?
should be puppet agent --disable
Dec
30
comment rsyslog - configuration help - logrotate and compression
sudo apt-get install tcpdump
Dec
30
comment rsyslog - configuration help - logrotate and compression
Upvoted yours too b/c you put more thought into the templates while I just pointed to the docs. I've moved on to syslog-ng b/c I hate all the changes to Ranier script and the conf files in rsyslog.
Dec
30
comment rsyslog - configuration help - logrotate and compression
Double check with tcpdump on your rsyslog server like so:fir3net.com/UNIX/Linux/…
Dec
30
comment rsyslog - configuration help - logrotate and compression
While specifying the IP address in the config may work, consider whether this is a long term good idea. As in, what about when you add a new switch?
Dec
30
comment rsyslog - configuration help - logrotate and compression
Your rsyslog server sees the facility and can act on it. Something like local4.* /var/log/prd/rslog local7.* /var/log/prd/fwlog
Dec
30
comment rsyslog - configuration help - logrotate and compression
Additional comment re: date strings in filenames for rsyslog. You probably want templates: rsyslog.com/doc/master/configuration/templates.html
Dec
29
comment Best practices in keeping older versions of RHEL secure?
Ouch, okay. My answer was a little flip.
Dec
28
comment OpenVPN + DNScrypt
Be careful executing arbitrary shell commands on scripts you download from the internet. At the bare minimum, read the .sh script before executing it.
Dec
20
comment Share /home between datacenters
rsync ftw 123456
Dec
19
comment Population of /etc/resolv.conf upon new server installation
It would be on the dhcp server from which your servers got their IPs.
Dec
9
comment Block all incoming DNS requests EXCEPT from IPs x,y,
Add two more allow rules (one udp, one tcp) on the primary allowing the source IP of the secondary.