Frankie's questions

Having some trouble connecting clients from one office to the other.

  (10.1.1.0/24)             (192.168.5.0/24)
   Office ONE  <--- IPSec ---> Office TWO
        ^
        |
        v
  Road Warrior 1 (OpenVPN client)
    (10.1.2.2)

I've added an extra P2:
VPN / IPsec / Tunnels / Edit Phase 2
tunnel 10.1.2.0/24 192.168.5.0/24 ESP

And I've also added to OpenVPN custom Options:
VPN / OpenVPN / Servers / Edit
push "route 192.168.5.0 255.255.255.0";

But still Road Warrior 1 can only ping servers in the 10.1.1.0/24 subnet.

Any idea what I'm missing or what I've done wrong? Both pfsense boxes.

I couldn't find any info on this short of spinning up a Nomad cluster and experimenting so maybe someone here may be able to help.

Saying you want to run 100 iterations of a batch java job, each with a different set of parameters and get the resulting output files back.

1) does Nomad accept the concept of input_files where you point to a local file on your computer and it will distribute such file?

# in HTCondor would be something like this
transfer_input_files = MyCalculator.jar,logback.xml

2) does Nomad bring back the results of such calculation, say *.csv files that were produced?

# this would do it in HTCondor
should_transfer_files = YES
when_to_transfer_output = ON_EXIT
transfer_output_files = /output_dir

3) does nomad allow the usage of parameters in the way condor does, allowing you to send a job with n params that will then be distributed as multiple jobs to the cluster?

# this would do it in HTCondor
Arguments    = x=1
Queue 
(...)
Arguments    = x=100
Queue

I've been using HAProxy for quite a while but recently got this issue that I don't really know how to implement/solve.

                   +---------------------------+
client-europe \    | HAProxy europe (10.1.0.1) |   / data-center-europe
               |---|                           |->
client-states /    | HAProxy states (10.2.0.1  |   \ data-center-states
                   +---------------------------+

User's will mainly connect via IP stating both proxys in the configuration; something in the likes of app.servers=10.1.0.1,10.1.0.2. What I would like to achieve:

• if only one HAProxy is up use that
• if both HAProxy's are up route client to the nearest one
• prefer data-center closer to HAProxy (solved)

So having HAProxy chose a backend is solved. What I can't do is route the user to another HAProxy. Something in the likes of (hey, I've detected you're connecting from Europe so I'm re-directing you to the 10.1.0.1 ip address).

+--------------------------+                   +--------------------------+
|  Office A                |                   |  Office B                |
| Technicolor TG784n v3    |                   | (router model not known  |
| 192.168.1.1 (router)     |                   | 192.168.5.257 (router)   |
| 86.3.12.12 (external ip) |  <- powerline ->  | 82.1.9.79 (external ip)  |
|                          |                   |                          |
| DHCP Server:             |                   | DHCP Server:             |
| 192.168.1.*              |                   | 192.168.5.*              |
| Mask: 255.255.255.0      |                   | Mask: 255.255.255.0      |
+--------------------------+                   +--------------------------+

I have two distinct spaces, each with it's own router and internet connection. I would like to keep everything as-is but allow computers from 192.168.1.x to be able to talk with computers from network 192.168.5.x.

On top of that both DHCP servers should keep serving each network as they previously were. A new computer that connects to Office B should get the IP 192.168.5.x and access the Internet via the external IP 82.1.9.79.

Is this possible?

(the powerline works as an ethernet cable)

Many thanks.

I currently have postfix configured so that all users get relayed by the local machine with the exception of one user that gets relayed via gmail. To that extent I've added the following configuration:

/etc/postfix/main.cf

# default options to allow relay via gmail
smtp_use_tls=yes
smtp_sasl_auth_enable = yes
smtp_tls_CAfile = /etc/ssl/certs/ca-bundle.crt
smtp_sasl_security_options = noanonymous

# map the relayhosts according to user 
sender_dependent_relayhost_maps = hash:/etc/postfix/relayhost_maps

# keep a list of user and passwords
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd

/etc/postfix/relayhost_maps

user-one@localhost   [smtp.gmail.com]:587

/etc/postfix/sasl_passwd

[smtp.gmail.com]:587  [email protected]:user-one-pass-at-google

I know I can map multiple users to multiple passwords using smtp_sasl_password_maps but that would mean that all relay would be done by gmail where I specifically want all relay to be done by the localhost with the exception of some users.

Now I would like to have a user-two@localhost (etc) relay via google with their own respective passwords. Is that possible?

On copying directory "home" (from remote machine) to local machine using the following command:

ssh [email protected] 'tar -cz -C /home/*' | tar -zxv

The number of files after the transaction doesn't match. Some files were never copied.

Anyone has experienced similar problems?

I'm tried to build a grid-cluster based on CentOS. All the machines will have a somewhat similar structure (some with more processors than others) and I will just need to push jobs to a queue and have then run on the available nodes. One job per CPU and the rest stays in line waiting.

John T has been exceptionally helpful pointing me on Gnu Queue that seams to be a hit on what I pretend (the jobs will be essentially bath scripts). I'm still studying the issue before accepting his answer but am asking the comunity for some feedback as Gnu Queue site seams to indicate the project is dead for several years now.

I've also taken a look into Sun Grid Engine and it also seam like a candidate for the job, unfortunatelly Oracle is now killing the project and Univa is yet to release their port.

I just want to start with the right foot so my question would be, have you had any practical experience with this sort of clustering (grid computing). What would your recomendations be.

Thank you in advance.

The files opened by XYZ process can be found with the command

ls -l /proc/PID/fd

Is there anyway that can be done in a more interactive way like tail auto-refreshing every x seconds?

Given the recent attack on SSH port I'm trying my best to keep my servers at bay. Of course changing the default port would be the number 1 rule to go but that is not feasible.

We've got denyhosts will set up some iptables rules, maybe fail2ban. Appart from than and considering that the least possible ways you have to get in the saffer you are, my SSHD has set up:

ssh -v example.com
debug1: Authentications that can continue: publickey,password,keyboard-interactive

I started wondering, what sould I keep? keyboard-interactive (KI) or password?

Public key is needed. Both KI and password seam to do the same thing but KI, according to the docs, would do it better. Can anyone shed some lights here, please?

Thank you in advance.

Does anyone know if it's possible to switch from a hardware based RAID0 to a software one? Have a broken raid controller (vintage, wont find it anywhere) but I know the Array is in good conditions.

Has anyone tried this, and/or know if its possible?

Edit 1

The actual situation goes as follow: A LaCie external HDD 2 disks RAID0 array broke. No backups were ever made (yes, path for disaster). The actual case broke down, the HDD's seam to be working fine. I didn't find any similar case on eBay.

My best course of action will probably be to make images of the disks (to play on the safe side) and then mount them on Linux mdadm. I'm just looking out for someone that has tried something similar.

Thank you for your time.