sh-beta
  • Member for 12 years, 7 months
  • Last seen more than 8 years ago
6 answers
24 votes
60k views
How can I tell how much RAM is installed on a FreeBSD server?
Accepted answer
50 votes

sysctl hw.physmem

View answer
11 answers
26 votes
19k views
Is anyone else using OpenBSD as a router in the enterprise? What hardware are you running it on?
Accepted answer
44 votes

We run exclusively OpenBSD routers/firewalls to serve FogBugz On Demand. Unless you're operating in a transit role and need the extremely high pps throughput that purpose-built hardware and integrated ...

View answer
3 answers
31 votes
44k views
When to turn TCP SACK off?
Accepted answer
37 votes

A basic TCP ACK says "I received all bytes up to X." Selective ACK allows you to say "I received bytes X-Y, and V-Z." So, for instance, if a host sent you 10,000 bytes and bytes 3000-5000 were lost ...

View answer
7 answers
25 votes
57k views
Enable Ping in Windows Server Firewall?
Accepted answer
34 votes

By default Windows 2008 does not respond to pings. To enable: Administrative Tools Windows Firewall with Advanced Security Inbound Rules File and Printer Sharing (Echo Request - ICMPv4-IN) Enable ...

View answer
16 answers
27 votes
6k views
What antivirus do you recommend for dev boxes
Accepted answer
28 votes

You NEED antivirus software It's been said a few times in these answers that developers should know better, or should only install software they need from known good sites, etc, so if you need ...

View answer
10 answers
25 votes
35k views
Would you use ECC RAM in a workstation?
Accepted answer
26 votes

As stuff is stored into, left, and eventually pulled out of RAM, some corruption naturally occurs (theories vary, but the one with the most weight right now is EMI from the computer itself). ECC is a ...

View answer
2 answers
24 votes
8k views
Authenticating OpenBSD against Active Directory
Accepted answer
17 votes

Preface Authenticating against Active Directory with Kerberos is pretty simple on systems using PAM, but OpenBSD doesn't and makes it more difficult. From a tcpdump, it looks like the PAM systems are ...

View answer
6 answers
7 votes
5k views
lots of dns requests from China, should I worry?
Accepted answer
17 votes

What is going on here? Is my name server under attack? Can I do something about this? What is going on here? It's impossible to tell from the munged log entries. Here are just a few possibilities: ...

View answer
3 answers
11 votes
14k views
\Program Files vs. \Program Files (x86) in 64-Bit Windows
Accepted answer
16 votes

It's not just for human readability, there are many programmatic reasons to separate 32-bit apps from 64-bit. Consider the "Common Files" folder. If you have a 32-bit app and 64-bit app that use the ...

View answer
11 answers
9 votes
65k views
Most efficient RAID configuration with 6 disks?
15 votes

The Short Best: RAID 10 Better: RAID 6 If you must: RAID 5 w/hot spare Whatever you do, consider buying new disks. Older disks are more likely to be near their failure point and rebuilding RAID ...

View answer
11 answers
4 votes
10k views
Can I use a Mac Mini as a web server and database server? What are the pros and cons?
Accepted answer
13 votes

Pros of using a Mac Mini as a server None Cons of using a Mac Mini as a server No redundancy No rackability No hardware battery-backed RAID Not serviceable Non-ECC memory Crap cooling Not built for ...

View answer
12 answers
7 votes
1k views
Can OpenOffice replace MS Office?
13 votes

The short OpenOffice doesn't play nicely with SharePoint, Exchange, or Group Policy. Since these are integral parts of your environment, why introduce something that will make your life more ...

View answer
5 answers
4 votes
5k views
What is VSS and what is it used for?
Accepted answer
12 votes

Volume Shadow Copy Service. It takes a snapshot of files so they can be backed up even while they're in use. It ensures that the file is not modified between the start and end of the backup, but can'...

View answer
5 answers
5 votes
940 views
Is it safe to mark a disk ok, in a degraded RAID 5 array?
Accepted answer
10 votes

Drives can be marked as failed in an array for many reasons. Maybe there's a few defective sectors. Maybe the drive heads are failing. Maybe cosmic rays hit your drive at the right angle and time to ...

View answer
5 answers
6 votes
501 views
NOC Situational Awareness
Accepted answer
10 votes

This is a pretty broad question, but I'm assuming we're avoiding service- or logical-level monitoring (ie, SSH listening, web sites responding properly, disk space, CPU usage, etc.). Your NOC should ...

View answer
12 answers
0 votes
2k views
Blocking Internet Explorer and Outlook Express at router level
10 votes

This cannot be done at the firewall layer without introducing additional software. Out of the suggestions people have made, you have shot down every single one: You can't have a proxy server ...

View answer
3 answers
3 votes
41k views
How do I make an Exchange 2007 distribution list accept external emails?
Accepted answer
9 votes

By default, Exchange 2007 only allows authenticated users to email distribution lists. To change this: Open the Exchange 2007 Management Console Expand Recipient Configuration, then Distribution ...

View answer
1 answers
1 votes
140 views
a command to get the lines around a specific line of a text file
Accepted answer
8 votes

Assuming you're running a *nix: grep -C 3 f filename If you want x lines before f and y lines after: grep -A y -B x f filename

View answer
7 answers
10 votes
12k views
Reclaiming memory from SQL Server
8 votes

The other posters are correct that this is by design, but you absolutely want to limit the max memory to a bit less than your server's RAM. Think about this sequence of events: SQL 2000 runs happily, ...

View answer
6 answers
8 votes
35k views
What is the maximum memory that an IIS6 web site/app pool can use?
7 votes

Apps under Windows x86 are limited to 2gb/ea. You can change this by adding the /3gb flag to boot.ini, but this can cause unexpected application behavior and should be used with caution. MS officially ...

View answer
10 answers
3 votes
3k views
What is the Your Favorite Managed Anti-Virus for a Small Workgroup (under 25 Machines)?
Accepted answer
6 votes

I use ESET NOD32 for all our Windows machines in a smallish dev shop. The central management is great: I can disseminate new configuration files with minimal fuss, schedule virus scans, push ...

View answer
4 answers
9 votes
10k views
Why do some web servers not respond to icmp requests?
6 votes

Apart from the dubious DoS protection and lowered profile, there's a common but overlooked reason a given IP might not respond to pings: it isn't actually assigned to an interface. Redirecting (port ...

View answer
5 answers
6 votes
4k views
How do I spamtrap with Postfix?
Accepted answer
6 votes

OVERVIEW Bayesian filters and pattern matching and RBLs are all part of the fight against spam. This setup is intended to augment rather than replace those. Note that I'm NOT greylisting. ...

View answer
4 answers
1 votes
443 views
OpenBSD installation on 2 slices
6 votes

Assuming you're running a recent release, when you get the disklabel setup simply type: D - this blanks the disklabels a b - Give the desired size of your swap partition a a - Assign the rest to / ...

View answer
8 answers
7 votes
6k views
Any reason to use a rack-mountable server if I lack a rack to mount it on?
5 votes

If you don't anticipate a rack in your near future, rack mountable servers will just be a waste of money. They're designed with a rack environment in mind (form factor, obviously, but also the cooling ...

View answer
9 answers
27 votes
3k views
Is packet sniffing for passwords on a fully switched network really a concern?
4 votes

You're more likely to be hacked from the inside than the outside. ARP spoofing is trivial with the various prebuilt scripts/tools widely available on the Internet (ettercap was mentioned in another ...

View answer
5 answers
16 votes
190k views
Reverse DNS - how to correctly configure for SMTP delivery
4 votes

No, the server name and domain don't need to and rarely do match. Reverse DNS lookups simply ensure that the IP is a PTR record to the server name. If you can post the headers/bounce messages of an ...

View answer
7 answers
7 votes
1k views
Securing Active Directory domains on a potentially hostile network
4 votes

Here are the general methods I use. Hopefully I can add a lot to these: Domain Controllers are on their own network segment. All traffic to or from the Domain Controllers must pass through the ...

View answer
4 answers
5 votes
2k views
Do you use SSD in a production environment yet?
Accepted answer
4 votes

I don't. I'm not actually concerned about the rewrite issue since the write-life of modern SSD drives is long enough that it's sure to die from other causes before you hit it. I don't use them ...

View answer
10 answers
15 votes
12k views
Multiple *NIX Accounts with Identical UID
4 votes

Is this ability designed or is it just the way it happens to work? Designed that way. Is this going to be consistent across *nix variants? It should, yes. Is this accepted practice? Depends on ...

View answer