4,112 reputation
613
bio website systemajik.com
location Gatineau, Canada
age 59
visits member for 3 years, 7 months
seen 20 hours ago
I have over 30 years experience in all phases of software development and delivery. I have administered a variety of midrange servers, and worked with systems from PCs to Mainframes.

Jul
16
answered How to find out what is wasting space on “/”?
Jul
14
comment Why is root login via SSH so bad that everyone advises to disable it?
@MichaelKjörling Among the people I work with account has a uid has a username. Relationship is 1 to 1 for all three. Other interpretations may apply.
Jul
12
comment Why is root login via SSH so bad that everyone advises to disable it?
@MichaelKjörling Exactly what I meant. On a corporate net the odds a guessed account has usefull sudo access should be less than 1%. On a home computer odds are likely in the double digits or 100%
Jul
12
comment df command not showing correct values
When I want to know what is on a partition that contains mounts (/ and others), I mount it on an second mount point. This exposes files hidden behind mount points. /mnt is usually available and unused. Remember to unmount it when you are done.
Jul
12
comment Why is root login via SSH so bad that everyone advises to disable it?
As M goes up the likelyhood that the guessed userid is allowed root access usually goes down. Although the cracked id can be used to determine the available userids.
Jul
9
answered How to setup iptables rules to allow skype
Jul
5
comment Are there additional ways to protect SSH connections besides firewall and RSA Keys?
@BruceKirkpatrick The Shorewall documentation describes how it is done, and Shorewall can build the setup for you. This is simpler and less error prone than rolling your own.
Jul
5
answered Are there additional ways to protect SSH connections besides firewall and RSA Keys?
Jul
3
answered Difficulty setting up iptables
Jun
7
answered How can I setup mail server with ipv6, pam and db?
Jun
7
comment How to find power draw in watts?
Startup load can be significantly above the running load. On a previous project we would blow the fuses in the breaker box during startup from a full shutdown. During normal usage our load was about 30% of the fuse rating.
May
30
revised Disadvantages to having www-data able to log in
Provide reasons
May
30
revised Iptable rule to ssh over the internet
Respond to comments.
May
30
comment Iptable rule to ssh over the internet
Either your dyndns entry is incorrect, or your IP address changed after the rule was loaded. If you have a host entry, it may override the DNS entry. The DNS lookup will be done once when you start your rules (and will fail if DNS is not reachable). Consider using port knocking, or reloading the rule when the IP address changes (whenever your dyndns update needs to run. DNS caching may cause the old IP address to be used.
May
25
answered Disadvantages to having www-data able to log in
May
25
answered Iptable rule to ssh over the internet
Feb
6
awarded  Yearling
Dec
2
comment OpenVPN uses wrong IP-Address
@chris I've updated my response.
Dec
2
revised OpenVPN uses wrong IP-Address
Clarify response.
Dec
1
answered OpenVPN uses wrong IP-Address