Networking, system administration and more
Networking, system administration and more
The following IDP rule will block SSH brute force attacks. It will be triggered by more than 3 consecutive SSH connections in a row. After the rule has been triggered, the source IP will be banned for a period of 1 hour and the connection to both the client and […]
Read moreThe following settings should be used on Linux devices with a SSD. The instructions are Debian specific and taken from the SSDOptimization page on the Debian wiki. Automatic Trim/Mount Options Make sure the file system(s) are mounted with these options: discard,noatime,defaults As an example: Scheduler Set the scheduler for the […]
Read moreThese steps will get RADIUS authentication working for a Dell switch. After this is configured, you will be able to login to the switch (SSH/HTTP(S)/telnet etc.) using credentials that are validated by your RADIUS server. Switch Configuration These configuration settings are all set on the switch. Generic These steps should […]
Read moreI upgraded a Debian Squeeze server to Wheezy recently which was running iSCSI with a Windows 7 initiator. When I started writing to the iSCSI device it would drop out and the server would show an oops message on screen like this: iscsi_trgt: BUG at /var/lib/dkms/iscsitarget/1.4.20.2/build/kernel/iscsi.c:392 assert(req->tio) In /var/log/messages the […]
Read moreI hate getting this prompt: root@home:~# ssh server.somehost.com The authenticity of host ‘server.somehost.com (123.123.123.123)’ can’t be established. RSA key fingerprint is e6:fa:89:4d:c4:03:8e:09:1b:e5:b1:3c:ec:5f:8e:a3. Are you sure you want to continue connecting (yes/no)? If you see it often enough you probably ignore it – it then loses its purpose if you find […]
Read moreIf you are running VMware ESX/vSphere with a Linux VM that is running out of disk space it is usually a trivial task. Assuming you have a simple partition layout like this: /dev/sda1 – 128M – /boot /dev/sda2 – 2G – swap /dev/sda3 – 25G – / If you want […]
Read moreAfter upgrading some load balancers to Debian Wheezy I noticed this error (happens when dpkg-reconfigure ipvsadm) is ran: If you encounter this error you can run this sed command to fix up the template:
Read more