118 reputation
118
bio website
location
age
visits member for 5 years, 6 months
seen Feb 20 '13 at 9:31

1d
awarded  Popular Question
Jan
19
awarded  Commentator
Jan
19
comment How do I configure dd-wrt to forward IP Protocol ID 50 & 51 traffic to an internal machine?
I'm not sure if that's sufficient. I found this mad-hacking.net/documentation/linux/networking/ipsec/… but it's for a site to site VPN. I'm trying to do this for a roadwarrior config. So I figure I probably need some additional FORWARD,INPUT,OUTPUT rules but it's probably not the best idea to try to figure this out at 6am. Any suggestions you have for fleshing this out is appreciated.
Jan
19
answered How do I upgrade from vSphere 4.1 to vSphere 5 without access to vSphere Update Manager?
Jan
19
asked How do I configure dd-wrt to forward IP Protocol ID 50 & 51 traffic to an internal machine?
Oct
24
awarded  Nice Question
Oct
4
awarded  Famous Question
Jan
25
awarded  Popular Question
Aug
30
asked How do I upgrade from vSphere 4.1 to vSphere 5 without access to vSphere Update Manager?
Dec
29
awarded  Notable Question
Mar
18
comment How to use iptables to foward outbound web traffic to a proxy?
Browser does not understand HTTP_PROXY.
Mar
18
asked How to use iptables to foward outbound web traffic to a proxy?
Nov
23
awarded  Popular Question
Jun
15
awarded  Scholar
Jun
15
accepted How to tell what process has a specific port open on Linux?
Jun
14
awarded  Supporter
Jun
14
comment How to tell what process has a specific port open on Linux?
Turns out the cracker installed a cron job.
Jun
14
comment How to tell what process has a specific port open on Linux?
FWIW, the rootkit had installed itself as apache in /var/tmp/... and /var/tmp/.ICE-Unix/* The second one was sneaky since I did not notice it the first time around and I was wondering how the heck a bash process kept spawning itself after being killed.
Jun
14
comment How to tell what process has a specific port open on Linux?
That's a funny graphic. I know the system is compromised (thankfully it's not mine). The question I was more curious about was tracking down how he got in in the first place. I suspect via php/joomla but wanted to understand how/why this port was staying open when none of the root kit detection tools were showing that port.
Jun
14
comment How to tell what process has a specific port open on Linux?
strangely, unhide-tcp does not show any suspicious ports. chkrootkit/rkhunter reported all clear (but mostly because i deleted the suspicious dirs prior to asking this question)