Reputation
87,305
Next tag badge:
96/100 score
37/20 answers
Badges
17 151 287
Newest
 Nice Answer
Impact
~6.2m people reached

Aug
25
comment Running ssh as a default gateway?
While you can use SSH to build an IP tunnel using a few methods. You really shouldn't if you can avoid it. It will be fragile, and won't be cross-platform. Your windows and macs would have completely different setups. I strongly suggest you use a tool intended to be used as a VPN. Like @lsd I really like using OpenVPN for this purpose.
Aug
25
comment Linux Server: Too Many Open Files
You really shouldn't increase that value unless you have investigated to be certain that having a large number of files is not a problem. You can see open file descriptors with the lsof command.
Aug
25
comment What services does Nagios notify per contact?
Answers on serverfault really should be more then just a link to a forum that may die. You should at least minimally summarize what you found on the link, that way in the future people can possibly find a relocated page through a search.
Aug
25
comment A good place for application files in Linux
Just for a thought, but look for an applications that uses a similar technologies to what you are creating that are already in the Debian repo. Look at the structure and layout and then follow the examples from other applications.
Aug
24
comment Randomize destination port for *every* packet with iptables
I am confused how you think a packet with an invalid destination is actually going to be successfully delivered to anyone.
Aug
24
comment Check For Licensing Compliance has Failed
If you are out of compliance with the license the only solution we can really give you, is to tell you to buy the proper licenses.
Aug
24
comment Dirvish expire rules doesn't match
I am confused. You say that master.conf is the default, but that expire syntax doesn't look like any default file I am finding on my Debian 8 system. I have never seen the syntax you are using before. Where did you find that syntax?
Aug
18
comment prevent openvpn client from changing ip of tap device
OpenVPN supports two modes routed (L3) or bridged (L2). Also known as tun, or tap mode. With OpenVPN you should almost always be using tun mode. Tap mode has no security is susceptible to arp poisoning, and has more overhead from the extra ethernet headers. community.openvpn.net/openvpn/wiki/BridgingAndRouting
Aug
12
comment How can I create a GPT partition label and mount the partition using it's label in Ubuntu?
GPT has labels in addition to the filesystem label.
Jul
28
comment Configure IPv6 - CentOS OVH - Can't ping
The address 2001:41d0:2:XXXX::/64 has an all-zero host part - And what is the problem with that? It seems to work fine for me?
Jul
28
comment SSH connection refused/error message
@piernov that should probably be an answer.
Jul
22
comment ethtool error for limiting interface speed
See: unix.stackexchange.com/questions/28198/… You probably should be looking at TC, or something else.
Jul
8
comment I cant open a port iptables - The command runs, but port keeps closed
Is something actually listening on that port? What do you see with netstat -ntlp?
Jul
1
comment GNU screen detached cannot write to file after ssh logout
What kind of authentication do you have in place? Are your home directories encrypted, auto-mounted via nfs or something else?
Jul
1
comment openVPN file transfer speed
Well looking at your iperf results in the other direction you seem to be getting somewhere between 0.7-1.5MB/s of bandwidth. Which seems to match exactly the numbers you state in your first sentence. BTW your use of the term download in this question isn't very helpful. The direction of data flow wasn't entirely clear from your question.
Jul
1
comment openVPN file transfer speed
What happens when you perform your Iperf tests the other way around? Remember that iperf is not bidirectional by default.
Jun
29
comment Is it possible to add permissions to an Active Directory account using PowerShell?
Creating a group really is the best way. You really should avoid adding permissions directly to an individual account whenever you can.
Jun
22
comment Reverse Proxy multiple internal FTP Servers
Why ftp? Why not SSH/SFTP? SSH is more secure, and easier to get through your firewall.
Jun
16
comment Puppet change mysql datadir only if it is installed first time
Why are you creating a new mount at /mysql That is not a standard location, anyone using the FHS would look for something. I would expect data like that to be under /var, or possibly /srv/.
Jun
15
comment iptable rule and iftop command
Call your ISP, and have them block it on their equipment. Think it through. Your server cannot decide to block/permit something until it has already arrived. You of course could just turn off your server, then you won't get any packets.