6,694 reputation
62544
bio website kilroy.chi.il.us
location Illinois
age 50
visits member for 5 years, 11 months
seen 12 hours ago

Physicist by training, now a programmer by choice. My languages of preference are Java and C, although I am also skilled in C# and many assembly languages, and competent in Perl, general shell scripting, and a handful of other languages I use less often. I can speak basic SQL. I write my HTML by hand and prefer table-free page layout.

I use Linux by preference, but also develop extensively under Windows. I've developed under various embedded and custom OS's and RTOS's (primarily Microware OS-9 and VxWorks), assorted UNIXes, VAX/VMS, and assorted Windows releases. I've played with RSTS/E and a few other operating systems that are unknown today.

My home website is pretty sparse, but will some day be populated. Really.


Oct
20
comment How to determine what traffic is being dropped / blocked base on iptables log
For ipv6 you need to use ip6tables. It's separate.
Oct
20
comment How to determine what traffic is being dropped / blocked base on iptables log
OK, editing my answer to answer that question
Oct
20
comment How to determine what traffic is being dropped / blocked base on iptables log
This rule -m limit --limit 5/min -j LOG --log-prefix "iptables denied: will log all packets matching it but no more than five per minute. It doesn't actually deny them, despite what the log prefix is set to. Do you want to log and block all traffic from a certain IP?
Oct
20
comment How to determine what traffic is being dropped / blocked base on iptables log
Yes, something is most likely wrong with your configuration. What are you trying to do exactly? Yes, port 22 is SSH and 80 is HTTP and DPT is destination port, so you are logging some HTTP and SSH traffic. What is your goal? Are you trying to log traffic without affecting it? Are you trying to reject traffic? The "limit" module is used to match in a rate limited fashion.
Nov
6
comment “POSSIBLE BREAK-IN ATTEMPT!” in /var/log/secure — what does this mean?
What is the downside to disabling sshd reverse lookups on a server connected to the public Internet? Is there any upside at all to leaving this option enabled?
May
4
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
I'm not trying to circumvent anything. I have full admin rights on this development box, but I am not the network admin for this network. If my question is more appropriate for SuperUser, I'd expect it to get moved there, not closed as "not constructive."
May
4
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
It's true that I could have worked around this apparent missing feature of Windows by manually applying my DNS, including the search list. Except oddly, even doing that the search list configuration is greyed out. I can change anything else in there except that, via the UI you show above.
May
1
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
Your answer lead me via Google to something that seems to work. I edited the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList, then I did ipconfig /registerdns, and after that point I saw the new search list entry.
May
1
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
I have the ability to edit my hosts file. But if I go that route, I have to edit this file regularly as servers are added and removed from the lab domain. If I can add a DNS search list entry, I only have to do that one time and it works forever, for every lab server ever added to that domain.
May
1
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
So there is no command-line utility or WSH way to append to the DNS search list?
May
1
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
People are voting to close this as "not constructive" which I don't understand. I'm not asking, "What is the best practice." I'm asking, "How do you do this very specific configuration in Windows 7?" How is that not constructive, or likely to elicit discussion or debate?
May
1
comment In a Win7 computer that belongs to a domain, how do I append DNS search list entries?
The goal is that I don't have to type the fully-qualified name for certain lab domains.
Apr
8
comment How do you find what process is holding a file open in Windows?
sure this works for a text file. It doesn't care what kind of file is open.
May
6
comment Hard drive read errors that… stop?
If the bad blocks found were all successfully mapped out, and no additional sectors went bad, then your results are what you expect to see. Your last paragraph is still the right answer though.
Oct
18
comment Do you think NAT is largely responsible for the delay in IPv6 adoption?
@Richard Gadsen, how can you have a full NAT firewall that is default -allow? If an incoming connection arrives to the firewall itself (which isn't running any services, just the firewall) it has no destination in its NAT tables to send the connection. It's still a default-deny for new incoming connections. Clarification: NAT is not a great security tool for a business. It's more reasonable for a home where the average user will use the default config. For a business, it is still "belt-and-suspenders," an extra layer of default-unreachability for internal machines.
Oct
18
comment Do you think NAT is largely responsible for the delay in IPv6 adoption?
@Richard Gadsen, @Cristian Ciupitu, I understand what you both say. I'm just reacting to the absolutist statement that NAT does not in any way enhance security, which is silly.
Jul
15
comment Why can't I print from Windows on CUPS from a single application?
What authentication does your CUPS require for printing to this printer? Can anyone who knows the IP address print to it? The one server that has this problem, is it a Vista or XP one? Most likely the problem is some configuration setting for IE on that one server.
Jul
3
comment Why are Linux-based operating systems considered safer than Windows?
OK, I've been using Linux for 12+ years and UNIX-like operating systems for even longer. As much as I like Linux, you cannot say that it has a stronger permissions system than Windows. It has a better security model than early Windows versions (i.e., don't always be admin), but WinNT and later has a strong permissions system that just wasn't used to good effect. Recent Linux versions have selinux, which is even stronger, but this is a relatively recent (if very powerful) addition.
Jun
25
comment Unable to understand the connections between FQDN and DNS
Most likely, that means you DO NOT have a search list. If you do not have a search list, then you must always provide the FULL domain name of a computer you want to reach. The nameserver lines show the IP addresses (NEVER NAMES!!!) of the DNS servers you will connect to to resolve names.
Jun
23
comment Silent Install of MSI
Not all MSIs will allow silent installation, I don't think.