cm007's questions

I have a thousand web servers writing their logs to a SQL Server 2008 database. The log information can be up to 100 GB per day, and we keep 1 month’s worth of logs.

Each day, we run queries on the log data and store the results of the queries in the database. The total size of the query results for a day is about 10 MB.

Right now, the table which holds the log data and the tables which hold the query results are on different filegroups on different physical drives.

Would it make a different from a performance point of view to have the log data and the query results stored in two separate databases (which would be on separate physical drives)?

I have the following ipfw settings on my Mac OS X 10.4 Tiger:

00100 allow ip from any to 123.123.123.123
00110 allow tcp from any to 123.123.123.123
00120 allow udp from any to 123.123.123.123
00130 allow ip from 123.123.123.123 to any
00140 allow tcp from 123.123.123.123 to any
00150 allow udp from 123.123.123.123 to any
65534 deny ip from any to any
65535 allow ip from any to any

I am trying to ssh to the Mac from a Linux computer which has IP address 123.123.123.123, and sshd is running on the Mac. However, the ssh client outputs the following:

ssh [email protected] -v

OpenSSH_5.5p1, OpenSSL 1.0.0d-fips 8 Feb 2011
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to mac.example.com [10.10.10.10] port 22.
debug1: Connection established.
debug1: identity file /home/me/.ssh/id_rsa type -1
debug1: identity file /home/me/.ssh/id_rsa-cert type -1
debug1: identity file /home/me/.ssh/id_dsa type -1
debug1: identity file /home/me/.ssh/id_dsa-cert type -1
ssh_exchange_identification: Connection closed by remote host

What could cause the Mac to suddenly close the connection before even asking for a password?

I believe it has to do with the IPFW settings, because the ssh worked when I simply had 65535 allow ip from any to any as the IPFW settings. E.g., do I need a rule for a reverse DNS lookup?

I am running NFS on a Mac OS X Server 10.4. I had originally set up the NFS exports in the GUI, and restricted the IP addresses in the GUI to which it can export.

Right now, I only have command-line (ssh) access to the Mac. When I run showmount -e, it returns

/Volumes/Data/myshare             172.18.150.138 172.18.150.130

which is correct. However, I want to change the IP addresses to which it is exported to 172.18.150.134 and 172.18.150.132.

When I run nicl . -list /exports, it prints

116        /Volumes/Data/myshare

but I do not know how to change any information in nicl.

There is no /etc/exports file, and when I run find / -exec grep -H "172.18.150" {} \; nothing comes up. nfsd is running.

How can I change the allowed IP addresses in the command-line on Mac OS X Server 10.4?

I have several clients certificates that my Apache httpd server requires clients to have (made using the instructions at http://www.garex.net/apache/). I would like to have an authentication that also authenticates and allows only a client certificate to match a username/password combination.

For example, if I have two client certificates with CN user1 and user2 and .htpasswd file

user1:passwordA
user2:passwordB

I would like something like

SSLUserName %{SSL_CLIENT_S_DN_CN}
AuthName "Please enter your username and password"
AuthType Basic
AuthUserFile /path/.htpasswd
require valid-user

However, trying this results in 500 errors. What can I do?