301 reputation
110
bio website douglasfcalvert.net
location Syracuse, NY
age 34
visits member for 2 years, 6 months
seen yesterday

dfc


Apr
15
comment How to securely manage etckeeper from gitolite?
I apologize for asking but you said you were not very adept at sysadmin work: How are you anticipating using etckeeper? Is this different from your current usage? Are you planning on pushing changes to live /etc/'s from a remote machine? (similar to the way some people deploy code with git?)
Apr
12
revised FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
added 214 characters in body
Apr
11
answered FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
Apr
11
comment FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
With all due respect I have to say that "not secure by default" is BS. 4.2.6p5 can be configured securely or insecurely. You can use the noquery restriction or disable monitor. Vulnerable to traffic spoofing is nonsensical. Plain DNS (not curve/dnssec) is also vulnerable to traffic spoofing. ICMP is vulnerable to traffic spoofing.
Apr
11
comment FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
I do not understand what is wrong with using the reference implementation and a proper configuration?
Mar
26
comment Why is ntpd listening on most of 192.168.1.X/192.168.2.X
Did you paste the full output of ifconfig -a ? How is ntp listening on tun0 and tun1 if you do not have those devices configured?
Mar
26
comment Strip specific option from a response in dhclient
Did you file a bug report? I was really surprised that supersede did not work when I tried it. it seems like supersede "" should behave like a reject statement.
Mar
20
comment How to shutdown Linux at a specific datetime from terminal?
This is the linux/unix answer. It is unfortunate that the "install this gtk application" was chosen.
Mar
17
answered Strip specific option from a response in dhclient
Mar
12
comment timed out, nothing received
You updated your /etc/ntp.conf to what is shown above and resstarted ntp and you got the timed out message? what is the output of netstat -laun ?
Mar
12
awarded  Editor
Mar
12
revised timed out, nothing received
added 698 characters in body
Mar
10
answered timed out, nothing received
Mar
10
comment timed out, nothing received
@slm The command ntpq -p ntp1.inrim.it does not do what you think it does. that command asks the server for a list of its configured peers/timesources. It does not ask the remote server for the time. You can have a "perfectly functioning" public time server that serves time to clients but does not respond to remote peer requests. It is also known as noquery in the restric line.
Mar
10
comment timed out, nothing received
@Gilles add this to the experience pile: askubuntu.com/questions/429306/…
Mar
10
comment timed out, nothing received
@BojanVidanovic It does not make any sense that it works with ntpdate and not with ntp. When it works with ntpdate you should make note of the IP address that returned ann answer and try putting that into ntp.conf. The DNS response for pool.ntp.org address will vary depending on how many servers the pool monitor thingks are currently healthy in addition to some pseudo randomization in the dns daemon.
Mar
10
comment timed out, nothing received
@Gilles is "your experience" taking into consideration the recent wave of DDoS attacks that use ntp? A year ago I would agree with your comment. However after the recent waves of attacks egress ntp filtering is a lot more common than you think.
Mar
10
comment timed out, nothing received
External NTP traffic is likely being blocked by your hosting provider /ISP. This is a heavy handed approach to prevent DDOS. Ask your ISP what internal ntp servers you can connect to.
Feb
28
awarded  Citizen Patrol
Feb
20
answered Why doesn't NTP increase polling interval when using a GPS/PPS receiver and internet servers?