Reputation
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
8 15
Newest
 Nice Answer
Impact
~600k people reached

  • 0 posts edited
  • 0 helpful flags
  • 39 votes cast
Jul
21
answered Is there any reason to have ntpd sync to Local(0) if server is not used as a time source?
Jul
20
awarded  Critic
Jul
20
comment Is there any reason to have ntpd sync to Local(0) if server is not used as a time source?
Most systems have at least a Time of Year (TOY) clock. While not as accurate as other sources, but usually relatively accurate. It should be fudged to a high stratum as shown so it is only used as a last resort.
Jul
17
comment Run unix command precisely at very short intervals WITHOUT accumulating time lag over time
At various times of the day the system is likely to be quite busy, and unless you use a real-time priority you will get slippage. The busier the system the more slippage to expect.
Jul
3
comment IPv6 in IPv4 over LAN
Not on my network. The only valid incoming addresses on the external network are my external addresses. Likewise for valid sources outgoing.
Jul
2
comment IPv6 in IPv4 over LAN
Route filtering?
Jul
2
comment IPv6 in IPv4 over LAN
@bahamat I am fully aware that fixed NAT does not provide any security. The use of private (non-Internet routeable) addresses does provide security in the absence of any incoming NAT rules. The stateful source NAT typically used for IP masquerading in this case tends to be secure, and to the best of my knowledge is not Linux specific. Firewalling does not provide private addesses access to the Internet, NAT does. I'll leave it at that.
Jul
2
comment IPv6 in IPv4 over LAN
@bahamat I think you are confusing connection tracking for a IP Masquerading (which enables hosts on private addresses to connect to the Internet) with connection tracking for firewalling. IP Masquerading is not firewalling, but both can use the same connection tracking data. DNAT which is not IP Masquerading can be used to pass in through the firewall.
Jun
30
comment IPv6 in IPv4 over LAN
@bahamat On the stateful NAT configurations I have used if you can craft the right packets, you are likely already passing through. The firewall further limits which port can pass in or out.
Jun
30
comment IPv6 in IPv4 over LAN
@bahamat NAT to private addresses does prevent direct access to the devices behind it (except for those that are port forwarded to). As such it is an effective firewall for incoming connections. IPv6 does not offer such protection.
Jun
29
answered IPv6 in IPv4 over LAN
Jun
28
answered How to initiate SMTP outbound traffic via secondary interface - Linux Sendmail
Jun
28
answered Traffic stats per network port
Jun
26
comment CPU stuck at 99% for a few hours. Really need help figuring out logs
If you end up with multiple cleanup processes running, they may interfere with each other by generating locks on the directory when they delete files. Try temporarily removing it from the crontab until the load clears. Then add it with a longer interval between runs. You may want to move it to a script with a locking mechanism to ensure only one instance is running. Kill off any multiple instances of the command for now.
Jun
20
answered How to clean up the RAM memory that is being used as cache memory?
Jun
14
awarded  Enlightened
Jun
14
awarded  Nice Answer
Jun
5
reviewed Reject Can't ping broadcast
Apr
27
revised Reverse DNS lookups slowing down network operations on LAN
Add self-discovery options.
Apr
27
revised Reverse DNS lookups slowing down network operations on LAN
Clarify response.