4,387 reputation
612
bio website systemajik.com
location Gatineau, Canada
age 59
visits member for 3 years, 9 months
seen yesterday
I have over 30 years experience in all phases of software development and delivery. I have administered a variety of midrange servers, and worked with systems from PCs to Mainframes.

Oct
13
comment How do I find out if I am sudoer?
Your password for sudo is your login password. sudo will ask for your password to verify it is you checking. Passwords are usually remembered for a few minutes if you are few minutes.
Sep
21
awarded  Custodian
Sep
8
answered Why updating a running Linux system is not problematic?
Jul
31
comment Problems setting up web server in CentOS
@bev The <Directory /> could allow access but it is more secure for it to deny from all. The /var/www should match the directory specified as your site's DocumentRoot.
Jul
27
answered Problems setting up web server in CentOS
Jul
21
revised Is there any reason to have ntpd sync to Local(0) if server is not used as a time source?
added 237 characters in body; added 126 characters in body
Jul
21
answered Is there any reason to have ntpd sync to Local(0) if server is not used as a time source?
Jul
20
awarded  Critic
Jul
20
comment Is there any reason to have ntpd sync to Local(0) if server is not used as a time source?
Most systems have at least a Time of Year (TOY) clock. While not as accurate as other sources, but usually relatively accurate. It should be fudged to a high stratum as shown so it is only used as a last resort.
Jul
17
comment Run unix command precisely at very short intervals WITHOUT accumulating time lag over time
At various times of the day the system is likely to be quite busy, and unless you use a real-time priority you will get slippage. The busier the system the more slippage to expect.
Jul
3
comment IPv6 in IPv4 over LAN
Not on my network. The only valid incoming addresses on the external network are my external addresses. Likewise for valid sources outgoing.
Jul
2
comment IPv6 in IPv4 over LAN
Route filtering?
Jul
2
comment IPv6 in IPv4 over LAN
@bahamat I am fully aware that fixed NAT does not provide any security. The use of private (non-Internet routeable) addresses does provide security in the absence of any incoming NAT rules. The stateful source NAT typically used for IP masquerading in this case tends to be secure, and to the best of my knowledge is not Linux specific. Firewalling does not provide private addesses access to the Internet, NAT does. I'll leave it at that.
Jul
2
comment IPv6 in IPv4 over LAN
@bahamat I think you are confusing connection tracking for a IP Masquerading (which enables hosts on private addresses to connect to the Internet) with connection tracking for firewalling. IP Masquerading is not firewalling, but both can use the same connection tracking data. DNAT which is not IP Masquerading can be used to pass in through the firewall.
Jun
30
comment IPv6 in IPv4 over LAN
@bahamat On the stateful NAT configurations I have used if you can craft the right packets, you are likely already passing through. The firewall further limits which port can pass in or out.
Jun
30
comment IPv6 in IPv4 over LAN
@bahamat NAT to private addresses does prevent direct access to the devices behind it (except for those that are port forwarded to). As such it is an effective firewall for incoming connections. IPv6 does not offer such protection.
Jun
29
answered IPv6 in IPv4 over LAN
Jun
28
answered How to initiate SMTP outbound traffic via secondary interface - Linux Sendmail
Jun
28
answered Traffic stats per network port
Jun
26
comment CPU stuck at 99% for a few hours. Really need help figuring out logs
If you end up with multiple cleanup processes running, they may interfere with each other by generating locks on the directory when they delete files. Try temporarily removing it from the crontab until the load clears. Then add it with a longer interval between runs. You may want to move it to a script with a locking mechanism to ensure only one instance is running. Kill off any multiple instances of the command for now.