sh-beta
  • Member for 12 years, 8 months
  • Last seen more than 8 years ago
How can I tell how much RAM is installed on a FreeBSD server?
Accepted answer
50 votes

sysctl hw.physmem

View answer
Is anyone else using OpenBSD as a router in the enterprise? What hardware are you running it on?
Accepted answer
44 votes

We run exclusively OpenBSD routers/firewalls to serve FogBugz On Demand. Unless you're operating in a transit role and need the extremely high pps throughput that purpose-built hardware and integrated ...

View answer
When to turn TCP SACK off?
Accepted answer
39 votes

A basic TCP ACK says "I received all bytes up to X." Selective ACK allows you to say "I received bytes X-Y, and V-Z." So, for instance, if a host sent you 10,000 bytes and bytes 3000-5000 were lost ...

View answer
Enable Ping in Windows Server Firewall?
Accepted answer
34 votes

By default Windows 2008 does not respond to pings. To enable: Administrative Tools Windows Firewall with Advanced Security Inbound Rules File and Printer Sharing (Echo Request - ICMPv4-IN) Enable ...

View answer
What antivirus do you recommend for dev boxes
Accepted answer
28 votes

You NEED antivirus software It's been said a few times in these answers that developers should know better, or should only install software they need from known good sites, etc, so if you need ...

View answer
Would you use ECC RAM in a workstation?
Accepted answer
26 votes

As stuff is stored into, left, and eventually pulled out of RAM, some corruption naturally occurs (theories vary, but the one with the most weight right now is EMI from the computer itself). ECC is a ...

View answer
Authenticating OpenBSD against Active Directory
Accepted answer
17 votes

Preface Authenticating against Active Directory with Kerberos is pretty simple on systems using PAM, but OpenBSD doesn't and makes it more difficult. From a tcpdump, it looks like the PAM systems are ...

View answer
lots of dns requests from China, should I worry?
Accepted answer
17 votes

What is going on here? Is my name server under attack? Can I do something about this? What is going on here? It's impossible to tell from the munged log entries. Here are just a few possibilities: ...

View answer
\Program Files vs. \Program Files (x86) in 64-Bit Windows
Accepted answer
16 votes

It's not just for human readability, there are many programmatic reasons to separate 32-bit apps from 64-bit. Consider the "Common Files" folder. If you have a 32-bit app and 64-bit app that use the ...

View answer
Most efficient RAID configuration with 6 disks?
15 votes

The Short Best: RAID 10 Better: RAID 6 If you must: RAID 5 w/hot spare Whatever you do, consider buying new disks. Older disks are more likely to be near their failure point and rebuilding RAID ...

View answer
Can I use a Mac Mini as a web server and database server? What are the pros and cons?
Accepted answer
13 votes

Pros of using a Mac Mini as a server None Cons of using a Mac Mini as a server No redundancy No rackability No hardware battery-backed RAID Not serviceable Non-ECC memory Crap cooling Not built for ...

View answer
Can OpenOffice replace MS Office?
13 votes

The short OpenOffice doesn't play nicely with SharePoint, Exchange, or Group Policy. Since these are integral parts of your environment, why introduce something that will make your life more ...

View answer
What is VSS and what is it used for?
Accepted answer
12 votes

Volume Shadow Copy Service. It takes a snapshot of files so they can be backed up even while they're in use. It ensures that the file is not modified between the start and end of the backup, but can'...

View answer
Is it safe to mark a disk ok, in a degraded RAID 5 array?
Accepted answer
10 votes

Drives can be marked as failed in an array for many reasons. Maybe there's a few defective sectors. Maybe the drive heads are failing. Maybe cosmic rays hit your drive at the right angle and time to ...

View answer
NOC Situational Awareness
Accepted answer
10 votes

This is a pretty broad question, but I'm assuming we're avoiding service- or logical-level monitoring (ie, SSH listening, web sites responding properly, disk space, CPU usage, etc.). Your NOC should ...

View answer
Blocking Internet Explorer and Outlook Express at router level
10 votes

This cannot be done at the firewall layer without introducing additional software. Out of the suggestions people have made, you have shot down every single one: You can't have a proxy server ...

View answer
How do I make an Exchange 2007 distribution list accept external emails?
Accepted answer
9 votes

By default, Exchange 2007 only allows authenticated users to email distribution lists. To change this: Open the Exchange 2007 Management Console Expand Recipient Configuration, then Distribution ...

View answer
a command to get the lines around a specific line of a text file
Accepted answer
8 votes

Assuming you're running a *nix: grep -C 3 f filename If you want x lines before f and y lines after: grep -A y -B x f filename

View answer
Reclaiming memory from SQL Server
8 votes

The other posters are correct that this is by design, but you absolutely want to limit the max memory to a bit less than your server's RAM. Think about this sequence of events: SQL 2000 runs happily, ...

View answer
What is the maximum memory that an IIS6 web site/app pool can use?
7 votes

Apps under Windows x86 are limited to 2gb/ea. You can change this by adding the /3gb flag to boot.ini, but this can cause unexpected application behavior and should be used with caution. MS officially ...

View answer
What is the Your Favorite Managed Anti-Virus for a Small Workgroup (under 25 Machines)?
Accepted answer
6 votes

I use ESET NOD32 for all our Windows machines in a smallish dev shop. The central management is great: I can disseminate new configuration files with minimal fuss, schedule virus scans, push ...

View answer
Why do some web servers not respond to icmp requests?
6 votes

Apart from the dubious DoS protection and lowered profile, there's a common but overlooked reason a given IP might not respond to pings: it isn't actually assigned to an interface. Redirecting (port ...

View answer
How do I spamtrap with Postfix?
Accepted answer
6 votes

OVERVIEW Bayesian filters and pattern matching and RBLs are all part of the fight against spam. This setup is intended to augment rather than replace those. Note that I'm NOT greylisting. ...

View answer
OpenBSD installation on 2 slices
6 votes

Assuming you're running a recent release, when you get the disklabel setup simply type: D - this blanks the disklabels a b - Give the desired size of your swap partition a a - Assign the rest to / ...

View answer
Any reason to use a rack-mountable server if I lack a rack to mount it on?
5 votes

If you don't anticipate a rack in your near future, rack mountable servers will just be a waste of money. They're designed with a rack environment in mind (form factor, obviously, but also the cooling ...

View answer
Is packet sniffing for passwords on a fully switched network really a concern?
4 votes

You're more likely to be hacked from the inside than the outside. ARP spoofing is trivial with the various prebuilt scripts/tools widely available on the Internet (ettercap was mentioned in another ...

View answer
Reverse DNS - how to correctly configure for SMTP delivery
4 votes

No, the server name and domain don't need to and rarely do match. Reverse DNS lookups simply ensure that the IP is a PTR record to the server name. If you can post the headers/bounce messages of an ...

View answer
Securing Active Directory domains on a potentially hostile network
4 votes

Here are the general methods I use. Hopefully I can add a lot to these: Domain Controllers are on their own network segment. All traffic to or from the Domain Controllers must pass through the ...

View answer
Do you use SSD in a production environment yet?
Accepted answer
4 votes

I don't. I'm not actually concerned about the rewrite issue since the write-life of modern SSD drives is long enough that it's sure to die from other causes before you hit it. I don't use them ...

View answer
Multiple *NIX Accounts with Identical UID
4 votes

Is this ability designed or is it just the way it happens to work? Designed that way. Is this going to be consistent across *nix variants? It should, yes. Is this accepted practice? Depends on ...

View answer