588 reputation
1616
bio website
location
age
visits member for 2 years, 11 months
seen Oct 16 at 15:17

Jun
12
comment Why are some ports reported by nmap filtered and not the others?
@Mark: then if I got it backwards my original question stands: on my server, using iptables, I'm dropping everything besides port 22 and 80. How comes only 3 ports appear as "filtered"!?
Jun
12
comment Why are some ports reported by nmap filtered and not the others?
thanks for the explanation! So "filtered" basically means there's the equivalent of an iptables's REJECT somewhere (ISP, router, etc.)? And the ISP / router or whatever is REJECTing instead of DROPping because it is cleaner? Regarding port 25: it is filtered for me for, say, slashdot.org too (when I nmap it from my home connection, but not when I nmap it from my dedicated server).
Jun
12
comment Why are some ports reported by nmap filtered and not the others?
@Creek: ah, just tried on slashdot.org and got 80 and 443 open but 25/smtp filtered as well. But then you gave me the idea to try to nmap that same server not from my home machine but from another server I own: I don't get the 3 filtered ports but then I get 53/domain/closed, 443/https/closed and 953/rndc/closed. (both my dedicated servers are hosted at OVH / France).
Apr
25
comment How to reset password on an encrypted fs?
@AndreasWiese: worked perfectly. At first I wasn't too sure about which line I was supposed to add "init=/bin/sh" inside Grub but things went smoothly. I simply recopied (which was kinda painful) character by character an entry of an /etc/passwd/ from another system, for the root user. Everything is smooth again. Thanks again.
Apr
23
comment How to reset password on an encrypted fs?
@AndreasWiese: +1, thanks... Indeed, it's the users passwords I need to change! I'll try what you suggested ASAP: I really like the approach without a live CD.
Apr
23
comment How to reset password on an encrypted fs?
It wouldn't be a big deal for me to reinstall a whole Debian system (there's nothing of value and I can install Debian) but it seems a bit overkill and, moreover, I may learn something in the process by mounting the encrypted filesystem and changing the passwords...
Nov
15
comment Weird SSH/SCP progress meter behavior
@GregHewgill: +1, thanks for that explanation. So you mean that when scp is "stuck" at 100% it's because 100% of the data has already been sent to the OS? And then it begs another question: how does scp know that it's not done yet? I mean, if scp believes that 100% of the transfer has left, how comes it knows that the file ain't transfered fully yet? And if scp knows that it's not fully transferred, why can't it display the "correct" percentage !? (as a sidenote in a way it'd be "better" if it showed 99% instead of 100%: it would be a little less confusing)
Nov
15
comment Weird SSH/SCP progress meter behavior
@terdon: oh I see... It's weird because I'm pretty sure I didn't have the problem (at least not that bad) with other systems. I've also read posts about people having this issue with only certain hosts (despite all the hosts being on the same network). It's a bit weird :-/ But then seen that you (and others) do see the same, I'm a bit less worried. I'd still like to know why it's that way and if it can be "fixed" somehow.
Nov
15
comment Weird SSH/SCP progress meter behavior
@terdon: yup, the transfer finishes if I let it run long enough (I can see the file "growing" on the remote host). The smaller the file, the less the system is "stuck" at 100%, but it's still stuck. For tiny files it's near instantaneous so I can't really tell. So it "works", but the numbers (both the %, the ETA and the speed) are all just totally bogus. It's conforting to read your comment that high speed at the beginning are normal. Download works normally: starts at the correct speed right away, with correct estimates, etc.
Oct
23
comment Are disks interchangeable in a mirrored RAID setup?
+1, thanks a lot for the detailed explanation and the caveat about the old mkraid and /etc/raidtab doscs! It's a bit clearer now. I'm still not sure if it's worth to configure on my desktop / workstation but I'll look into it.
Oct
22
comment What's the difference between SSH and Squid when using them as proxies?
+1, thanks a lot for this detailed answer! I don't absolutely need to hide my real IP: I take it that that "ssh -D ..." SOCKS method is good enough. I haven't found a way to make it work yet under Chrome but from Firefox it's fine.
Jul
26
comment How to take sha-1, sha-256 or MD5 of CDs / DVDs?
thanks a lot, using cmp I've been able to compare the .iso and the DVD and, indeed, it ends "correctly" with an EOF. Now I understand better what's going on : )
Jul
26
comment How to take sha-1, sha-256 or MD5 of CDs / DVDs?
+1... oh gotcha and thanks a lot. So I may be taking into account trailing zero bytes or garbage. I'll see if I can use cmp instead. (now to be honest I don't know what's more obfuscated between using the pipe symbol and </dev/sr0 ) ; )
May
2
comment SVN wants to commit everything after server re-install
oh damn... Years of Git ended up corrupting me. I was 100% I could just tar all the SVN repos and that it was enough : ) Will try the svnadmin dump/load too.
May
1
comment SVN wants to commit everything after server re-install
@derobert: (and jofel) : I don't have any old projects checked out on my system (I don't work on these, I just helped configure the server). The devs are remotely located, I'll ask them to try "svn status" (but they're not super experienced with SVN, nor am I, they simply use it from Eclipse). Good to know it's purely a client-side decision: it's weird because one dev told me he compared the files and they were identical, yet Eclipse / SVN wanted everything to be commited again. I'll have them "svn status" and report to me : )
Mar
30
comment Encrypted disk filesystem compatibilities
thanks a lot! I'm using Linux since the early days of Slackware but it's the first time I'm using this encryption thinggy and the first time I'm using LVM so it's all new to me : ) It's clearer now and I'll read more on all this.
Dec
1
comment Cannot switch to console anymore after using Alt_R as mod4
Ivan Zakharyasch: thanks a lot... I got your xmodmap / xkb point! I ended up doing something very similar, only using xkb. No more xmodmap here : )
Aug
26
comment Which of VPN or IPSec or xxx can I use here?
@derobert: I think I'll go the OpenVPN route then. I'll first test with spare machines before doing the "real thing" on production systems.
Aug
24
comment Which of VPN or IPSec or xxx can I use here?
@derobert: sadly I need to use commercial apps using a lot of (mostly undocumented) ports and this is outside my control. In other words: I need to use/test these apps and they require several ports.
Aug
2
comment How to find which process is regularly writing to disk?
that you can't query SMART readings without spinning up the drive leaves me speechless :-/ Now obviously the "spinning down" issue can become quite complicated. Regarding disabling the spinning down: wouldn't that in itself cause the HD to wear out faster? I mean: it's never ever "resting" as long as the system is on then?