3,991 reputation
512
bio website systemajik.com
location Gatineau, Canada
age 59
visits member for 3 years, 5 months
seen yesterday
I have over 30 years experience in all phases of software development and delivery. I have administered a variety of midrange servers, and worked with systems from PCs to Mainframes.

Jul
5
comment Are there additional ways to protect SSH connections besides firewall and RSA Keys?
@BruceKirkpatrick The Shorewall documentation describes how it is done, and Shorewall can build the setup for you. This is simpler and less error prone than rolling your own.
Jul
5
answered Are there additional ways to protect SSH connections besides firewall and RSA Keys?
Jul
3
answered Difficulty setting up iptables
Jun
7
answered How can I setup mail server with ipv6, pam and db?
Jun
7
comment How to find power draw in watts?
Startup load can be significantly above the running load. On a previous project we would blow the fuses in the breaker box during startup from a full shutdown. During normal usage our load was about 30% of the fuse rating.
May
30
revised Disadvantages to having www-data able to log in
Provide reasons
May
30
revised Iptable rule to ssh over the internet
Respond to comments.
May
30
comment Iptable rule to ssh over the internet
Either your dyndns entry is incorrect, or your IP address changed after the rule was loaded. If you have a host entry, it may override the DNS entry. The DNS lookup will be done once when you start your rules (and will fail if DNS is not reachable). Consider using port knocking, or reloading the rule when the IP address changes (whenever your dyndns update needs to run. DNS caching may cause the old IP address to be used.
May
25
answered Disadvantages to having www-data able to log in
May
25
answered Iptable rule to ssh over the internet
Feb
6
awarded  Yearling
Dec
2
comment OpenVPN uses wrong IP-Address
@chris I've updated my response.
Dec
2
revised OpenVPN uses wrong IP-Address
Clarify response.
Dec
1
answered OpenVPN uses wrong IP-Address
Dec
1
comment How to make sense of an iptables chain configuration
@Lumi Shorewall is an tool to build rules for iptables. It uses the same model for rule sets as I see in your description above. I pointed to the documentation as it describes this sort of configuration.
Dec
1
comment Allow IP packet forwarding from LAN to modem via router
@Lumi As all your ports have the same MAC address, the WAN and LAN ports are would be on the same network. Normally, routes like this have two default VLANs configured. Try ifconfig | less to get a list of configured network devices.
Nov
30
answered Allow IP packet forwarding from LAN to modem via router
Nov
30
answered How to make sense of an iptables chain configuration
Nov
25
comment Is it better to archive/move mail based on mtime or ctime?
@timoto Added a date verifier I use to check my archive directories. Matches date format rather than specific headers.
Nov
25
revised Is it better to archive/move mail based on mtime or ctime?
Correct code.