4,076 reputation
512
bio website systemajik.com
location Gatineau, Canada
age 59
visits member for 3 years, 6 months
seen 17 hours ago
I have over 30 years experience in all phases of software development and delivery. I have administered a variety of midrange servers, and worked with systems from PCs to Mainframes.

Nov
5
revised Does ntpd default allow query requests through?
Clarify
Nov
4
answered Does ntpd default allow query requests through?
Aug
21
revised How can I change the default gateway?
Comments on O/S varities.
Aug
21
answered How can I change the default gateway?
Aug
18
comment Why the non-root user can't login with a key in putty?
Also check the permissions on all directories in the path. They should be writable only by the owner.
Aug
17
answered Dovecot POP3S & IMAPS SSL Certificate that works for all user domains
Aug
9
comment How to ftp as root?
A safer option would be to use sftp witb a key file.
Aug
8
answered Rsync and take name/path changes into account
Aug
4
comment How to circumvent “Too many open files” in debian
Your patterns look like they will also pick up error logs as well as access logs. This should be a minor issue if you have a single error log. If you leave this running in a shell, you may want to use -F instead of -f so logs get reopened when rotated.
Aug
4
comment How to circumvent “Too many open files” in debian
Exceeding the file limit is often a sign of a problem. As already noted, you may have a problem with log rotation. (Rotated log may drop off your command.) Outside /var/log/apache2 there shouldn't be many (any) logs related to your Apache server. Based on your grep pattern, you likely want to restrict your access to access logs.
Aug
1
answered binding ip address to hostname
Jul
23
comment Where can I find some good documentation for bash printf?
My basic expectation would be that it follows standard printf functionality from the c library. %s is string, %d is decimal, %f is floating point. As per the answer, it does with some extended capability.
Jul
19
comment what is the required ports to be opened on the firewall?
@goldilocks It has been my experience that using an obscure port is seen as having secured the service. As a result not much thought goes into properly securing it. It is better to secure the service well, in which case an obscure port invites forgetting which obscure port it is on, or forgetting that it is running. As soon as your custom entry for secure-ssh gets dropped form /etc/services tools like netstat won't make open connections obvious.
Jul
19
comment what is the required ports to be opened on the firewall?
@goldilocks When I was monitoring scanning on ports 22 and 443, it was 443 that was scanned more frequently. That is one of the reasons I said to leave in on 22. There are a number of ways to secure ssh, and I apply a stack of them. The preferable option, is to use an already open server as a gateway, but failing that security by obscurity generally isn't secure.
Jul
19
answered what is the required ports to be opened on the firewall?
Jul
16
answered How to find out what is wasting space on “/”?
Jul
14
comment Why is root login via SSH so bad that everyone advises to disable it?
@MichaelKjörling Among the people I work with account has a uid has a username. Relationship is 1 to 1 for all three. Other interpretations may apply.
Jul
12
comment Why is root login via SSH so bad that everyone advises to disable it?
@MichaelKjörling Exactly what I meant. On a corporate net the odds a guessed account has usefull sudo access should be less than 1%. On a home computer odds are likely in the double digits or 100%
Jul
12
comment df command not showing correct values
When I want to know what is on a partition that contains mounts (/ and others), I mount it on an second mount point. This exposes files hidden behind mount points. /mnt is usually available and unused. Remember to unmount it when you are done.
Jul
12
comment Why is root login via SSH so bad that everyone advises to disable it?
As M goes up the likelyhood that the guessed userid is allowed root access usually goes down. Although the cracked id can be used to determine the available userids.