80,831 reputation
13130254
bio website plus.google.com/…
location Anacortes, WA
age 38
visits member for 5 years, 7 months
seen 2 hours ago

Real Name: Chris Francy

I work as a Senior Network Analyst at Northwest Educational Service District #189 in the Technology Services department.

The Technology Service department, in addition to supporting the staff at NWESD, provides network support services to 35 K-12 school districts in Northwest Washington region.

In my free time, when I am not at work or answering questions, I play a lot of video games on the PC (Steam Profile).

You can find more links to various websites and social networks on my Google profile.

profile for Zoredache on Stack Exchange, a network of free, community-driven Q&A sites


Oct
31
comment Is using self-signed certificates an option for this m2m scenario
How are you remotely managing these devices? I would be strongly tempted to manage them with puppet, which also happens to include a CA infrastructure and creates per-computer certs on every client. With that in place you simply need to trust your Puppet CA.
Oct
31
comment NFS fails to mount through openvpn tunnel
Just a thought, but you might want to do a capture on your server primary interface. Is your NFS server attempting to do reverse DNS lookups for 10.0.0.6 and failing perhaps? Sure all the communication between the client and server should be across the tunnel, but don't assume that is what is happening. I would be tempted to do something like tcpdump -ni any on the server. BTW are you certain you have ruled out any firewalls? Are you certain routing is correct, do you see client sending packets out the non-tunneled interface?
Oct
31
comment Using Server 2008 Terminal Services licenses with Server 2012
No, probably not. Also licensing questions are considered off-topic.
Oct
31
comment Disable autoconfiguration of new network interface on Linux
` If I plug in a network card, shouldn't linux automatically try to get an IP address via DHCP` - Absolutely not. At least not any system intended for usage as a server. Ubuntu server certainly doesn't do this. I assume this is a server since you are asking on a systems administration site. If you are running a desktop then you probably should be asking over on superuser.
Oct
31
comment Only allow SSH from specific IP to evade VPN connection?
This is about routing, not about firewalling. Just add a static route for the particular destination host to use the pre-vpn default gateway. If you think you must make this change only based on the particular protocol, your config will get very complex. See: lartc.org/howto/lartc.rpdb.multiple-links.html
Oct
31
revised Windows Server Program Restrictions for Administrator?
edited tags
Oct
31
comment Windows Server Program Restrictions for Administrator?
Is that a member of a domain, or a standalone system. You should be able to remotely manage it using RSAT tools from a Windows 7 workstation or another 2008r2 system.
Oct
31
comment Disable autoconfiguration of new network interface on Linux
but also instantly giving the interface an IP address. - Is it a valid address within your network or what? That is not normal behaviour. You have something unusual going on your network, or system.
Oct
31
comment Compare package versions of different debian releases
There isn't really any automated methods. Why not just setup a VM really quick and install all the requirements into the VM and issue a dpkg -l.
Oct
31
awarded  Good Answer
Oct
31
answered Controlling catalog pull by puppet agents
Oct
30
comment Regular and repetitive sudo alerts from several Linux hosts
BTW, I assume that this is happening over SSH, can you see how the user is authenticating? You might want to bump your SSH verbosity so the fingerprint of any keys being used is logged, once you do that, track it down to who or what owns that key. Do you have a good idea of who owns what keys that are authorized on this system?
Oct
30
comment Regular and repetitive sudo alerts from several Linux hosts
sessions appear to come from the same source host on the LAN - Does the source host happen to be some kind of monitoring system? Periodically Looking at open TCP sessions and the partition
Oct
30
comment Hundreds of failed ssh logins
OpenSSH 6.7 drops tcpwrappers support, which is what is being used in your answer.
Oct
30
comment Hundreds of failed ssh logins
OpenSSH 6.7 drops tcpwrappers support, which is what denyhosts uses.
Oct
30
revised Hundreds of failed ssh logins
added 197 characters in body
Oct
30
comment IPTables only solution to block any IP address who has made too many connections or reconnections
See: serverfault.com/a/17879.
Oct
30
comment New to virtualization, new hardware, and Server 2012 Standard w/ Hyper-v role
You should strongly consider using the Server Core install instead of a full desktop install. Hyper-V, and Windows in general is a bit more difficult to remotely manage without an Domain.
Oct
30
comment How do I consolidate multiple virtual disks attached to a VM guest?
Ack, sorry about that, technet.microsoft.com/en-us/library/dn495044.aspx also blogs.technet.com/b/askds/archive/2010/09/07/…
Oct
30
answered How to run “apt-get” in chroot from systemrescuecd?