81,311 reputation
13133255
bio website plus.google.com/…
location Anacortes, WA
age 38
visits member for 5 years, 8 months
seen 19 hours ago

Real Name: Chris Francy

I work as a Senior Network Analyst at Northwest Educational Service District #189 in the Technology Services department.

The Technology Service department, in addition to supporting the staff at NWESD, provides network support services to 35 K-12 school districts in Northwest Washington region.

In my free time, when I am not at work or answering questions, I play a lot of video games on the PC (Steam Profile).

You can find more links to various websites and social networks on my Google profile.

profile for Zoredache on Stack Exchange, a network of free, community-driven Q&A sites


Dec
17
revised Order of resource/class execution in puppet manifest file
added 37 characters in body; edited tags
Dec
17
comment SSH tunneling is faster than OpenVPN, could it be?
It seems unlikely for a AWS hosted system, but there is a small possibility that UDP is getting rate limited or something. Have you tried doing OpenVPN over TCP?
Dec
17
comment SSH tunneling is faster than OpenVPN, could it be?
SSH supports compression as well, so that isn't necessarily something different between OpenVPN and SSH. Have you tried disabling compression on both side? When you perform the transfer over OpenVPN, run top or something on your client/server. Are there any obvious signs that you are maxing your CPU/Memory/etc with the VPN connection?
Dec
17
comment Windows 2012R2 hyper-v guest diskless - boot from iscsi guide?
Are you going to be able to use a Type-2 VM if chainloading via iPXE is required?
Dec
15
comment openvpn forward internet client to client
Yes it should be possible. You only have to get the routing setup properly.
Dec
15
comment When iptables is started, there is no ftp access because of timeout
Is this box an ftp client or ftp server. It isn't clear from your question? If it is a server then look closer at your rules. An incoming connection will be new.
Dec
13
awarded  Good Question
Dec
12
comment VPC DHCP Option Sets Missing Option 3 Router
The implied question behind what you asked seemed to be "Why did Amazon, not give me that feature", and the answer could be, "there wasn't a good reason for them to give it to you." You haven't really made a very good case that you actually need this.
Dec
12
comment VPC DHCP Option Sets Missing Option 3 Router
I can't imagine why you think you need that functionality. Amazon is almost certainly already setting that option behind the scenes... If you really don't want to have a default gateway set, you could configure your clients to simply not request/accept a gateway when it is provided by the DHCP server. Equally I think if Amazon did leave that option available, people would find wasy to abuse it in weird and annoying ways.
Dec
12
revised OpenVPN - Route and iptables configuration
added 16 characters in body
Dec
11
comment Openvpn ip conflicts
If you can't find a network range another less-commonly known range that you can probably get away with using is the CGN range 100.64.0.0/10 RFC6598
Dec
11
comment start sshd with /usr/sbin/sshd in centos
Well that is important information that should have been in your question. Have you created ssh host keys within your container? Your error messages strongly indicates that you haven't.
Dec
11
comment Does PHP mail function need a mail server?
The mail() can use a local sendmail or it can be pointed at an external smtp server. What option you use completely depends on your requirements. php.net/manual/en/mail.configuration.php As for how to pick the right option. See the linked question.
Dec
11
comment How to open unmounted luks volume which believes it is open
Try lsof -n | grep /dev/hdd. Check to see if anything actually has it open. If so, stop the other thing. BTW are you sure you have that device name correct? /dev/hdd/luksCrypted is an unusual name.
Dec
11
comment OpenVPN No ping to one client's network (with client-to-client)
the output of a tcpdump capture filtered for that specific source/destination host would likely be more far useful for diagnosing a problem.
Dec
11
answered Dnsmasq: Redirect entire domain to localhost only for specific MAC Addresses
Dec
10
revised Why is Linux reporting “free” memory strangely?
deleted 100 characters in body
Dec
10
comment IPv6 issues with Server 2012
Can you control the route advertisements in your Comcast router? You probably should enable the 'Managed' flag and setup your IPv6 Scope including the correct DNS options on your DHCP server.
Dec
10
comment Improve openvpn bandwidth Debian 7
I strongly suggest you test with iperf then. It will be a far more useful test since it will directly measure the link link between you and the server.
Dec
10
revised Improve openvpn bandwidth Debian 7
added 140 characters in body