368 reputation
111
bio website douglasfcalvert.net
location Syracuse, NY
age 34
visits member for 2 years, 11 months
seen Sep 21 at 3:49

dfc


Sep
19
answered How do you deal with unreliable NTP peers?
Sep
14
accepted Use case for /usr/bin/lessecho
Sep
12
answered ntpd installed to local directory, now have two versions
Sep
12
comment ntpd installed to local directory, now have two versions
If you "actually" read the security notice you will see that the vulnerability is the result of configuration defaults. You can "patch this vulnerability" by adding restrict default......noquery or disable monitor in you ntp.conf
Sep
12
asked Use case for /usr/bin/lessecho
Sep
12
comment ntpd installed to local directory, now have two versions
There are no vulnerabilities in the ntp binaries shipped with Debian.
Jun
4
comment Properly configuring symmetric active NTP?
You really need to paste more information in order to get an answer. Please post the contents of ntp.conf and ntpq -p from each machine
May
21
awarded  Nice Question
May
17
comment Force less to display a file as text
What is LHS? It is new to me.
May
5
answered A question about wlan0 / eth0 and wireshark
Apr
15
comment How to securely manage etckeeper from gitolite?
I apologize for asking but you said you were not very adept at sysadmin work: How are you anticipating using etckeeper? Is this different from your current usage? Are you planning on pushing changes to live /etc/'s from a remote machine? (similar to the way some people deploy code with git?)
Apr
12
revised FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
added 214 characters in body
Apr
11
answered FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
Apr
11
comment FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
With all due respect I have to say that "not secure by default" is BS. 4.2.6p5 can be configured securely or insecurely. You can use the noquery restriction or disable monitor. Vulnerable to traffic spoofing is nonsensical. Plain DNS (not curve/dnssec) is also vulnerable to traffic spoofing. ICMP is vulnerable to traffic spoofing.
Apr
11
comment FreeBSD's net/ntp port is forbidden due to CVE-2013-5211, with no support upstream
I do not understand what is wrong with using the reference implementation and a proper configuration?
Mar
26
comment Why is ntpd listening on most of 192.168.1.X/192.168.2.X
Did you paste the full output of ifconfig -a ? How is ntp listening on tun0 and tun1 if you do not have those devices configured?
Mar
26
comment Strip specific option from a response in dhclient
Did you file a bug report? I was really surprised that supersede did not work when I tried it. it seems like supersede "" should behave like a reject statement.
Mar
20
comment How to shutdown Linux at a specific datetime from terminal?
This is the linux/unix answer. It is unfortunate that the "install this gtk application" was chosen.
Mar
17
answered Strip specific option from a response in dhclient
Mar
12
comment timed out, nothing received
You updated your /etc/ntp.conf to what is shown above and resstarted ntp and you got the timed out message? what is the output of netstat -laun ?