Reputation
Next tag badge:
99/100 score
37/20 answers
Badges
21 173 307
Newest
 Yearling
Impact
~7.7m people reached

12h
comment Route all network traffic through an openvpn connection and also accepting incoming requests on the hosts' real IP-address
It isn't easy. Most of the OpenVPN configuration is pushed from the server, and with options in the configuration OpenVPN can be configured to pass routes, and network configuration information to scripts. You would need to write scripts that populate alternate route tables. I don't have any example scripts or anything to give you though. Sorry.
1d
comment Route all network traffic through an openvpn connection and also accepting incoming requests on the hosts' real IP-address
OpenVPN doesn't have a split tunneling option that magically deals with the routing for you.
1d
comment Route all network traffic through an openvpn connection and also accepting incoming requests on the hosts' real IP-address
lartc.org/howto/lartc.rpdb.multiple-links.html You basically have two network connections in your setup.
1d
comment Where can I see ntpd working status (log or message)
Why do you think it isn't working? What symptoms are you seeing?
Apr
26
comment Composer works as Common User but not root
If it works with the full path, then give the full path. Anyway, you mentioned changing the path, whose path did you change?
Apr
26
comment OpenVPN Client Config Dir - where common name includes non-utf8 characters?
Honestly, I would be very tempted to simply use strace/ktrace and watch what filenames OpenVPN tries to access in the ccd when the client connects.
Apr
21
comment Batch Shutdown Linux Machines from Windows Server
Why not set a cronjob? That would be the 'normal' way to have a *nix do something on a schedule.
Apr
21
comment Howto configure Ipset to block entire countries IPs
add set -x as the first line of your script, and see exactly what is being executed? That will help you debug.
Apr
20
comment how can we run multiple applications with different domain & port numbers in apache
You didn't mention it, but did you add the Listen 8000 near the Listen 80?
Mar
30
comment refreshonly not working with Puppet exec resource
Basically if you define a password in the user object, then that password will not be changeable. Messing around with the refreshonly on an exec resource will not have any effect.
Mar
30
comment refreshonly not working with Puppet exec resource
docs.puppetlabs.com/puppet/latest/reference/… The command should only be run as a refresh mechanism for when a dependent object is changed. Changed means the state of the system, was different then the state described in the manifests so puppet applied a change for an object. So if the password for the user on the system is not exactly '$1$T7iMiuVY$bVjrtyWV4diXBKlCgcDKT0' during any puppet run then the user is changed to have that password, and that will trigger the exec refresh.
Mar
29
comment Debian: How to upgrade MONIT correctly?
Well the instructions (in the script form) would be part of the Debian source package for monit. You could see exactly what is being done to build the binary packages.
Mar
25
comment OpenSSH daemon ignores ServerKeyBits directive
@TimeSheep got it straight from the ssh-keygen manpage. For ECDSA keys, the -b flag determines the key length by selecting from one of three elliptic curve sizes: 256, 384 or 521 bits. Attempting to use bit lengths other than these three values for ECDSA keys will fail. manpages.debian.org/cgi-bin/…
Mar
25
comment OpenSSH daemon ignores ServerKeyBits directive
Trying to run ssh-keygen -q -f ecdsa_key -N '' -b 512 -t ecdsa results in an error Invalid ECDSA key length - valid lengths are 256, 384 or 521 bits.
Mar
23
comment increase debian server VM system partition while server is running
Your fdisk transcript looks good from what I can see though it would have helped if you had use the (p)rint function before and after you made the partition changes. But you did get the critical part correct (the start sector).
Mar
22
comment Can't Connect to some Hyper-V 2012 R2 servers after Windows 10 Updrade on Domain
Did you ever find a solution? There are some suggestions about how to fix it, but also reports that the fix breaks other things. social.technet.microsoft.com/Forums/en-US/…
Mar
18
comment Can unjacketed cable handle gigabit speeds?
BTW I can find lots of articles on the internet suggesting a suggested jacket removal length of 2-3", but there don't seem to be hard rules. siemon.com/us/white_papers/99-07-05-twistpairprep.asp Though the official TIA specs are behind paywalls. global.ihs.com/doc_detail.cfm?item_s_key=00378460
Mar
18
comment Can unjacketed cable handle gigabit speeds?
Without the jacket it sure seems like the the pairs would do a good job of maintaining the appropriate twists. Each pair is twisted, at a different frequency, and all 4 pairs are twisted around each other all to minimize cross-talk between the pairs. So, can that setup handle gigabit speeds? - This is one of those things where I would want to rent/borrow/buy a cable-tester (w/TDR) and run some tests and see if it tests out to spec.
Mar
18
comment Active Directory + Google Authenticator - Native support in Windows Server?
help me understand why MS would make such a decision - speculating about why Microsoft does, or doesn't do something isn't on topic here.
Mar
17
comment Can I move a software RAID5 array from one system to another system?
The lines displayed by mdadm --examine --scan can be placed in your mdadm.conf. You may need to regenerate your initial ramdisk image for this to be used during the system boot.