Skip to content

Category Archives: security

Quick and Dirty VMware ESX Patching

31-Jul-08

On the ESX console, do the following:

Read the documentation for each patch.
Group patches that can be installed together into a directory, possibly an NFS mount available on all your ESX hosts.
Cd into the patch directory and untar the patches:
for i in `ls *.tgz`; do
tar -xvzf $i
done
Install the patches:
for i in `ls`; do
if [ -d [...]

Thought you fixed that DNS spoofing bug? You might need to think again.

27-Jul-08

So you thought you fixed the DNS spoofing vulnerability that was all over the news this month? You applied the patches and moved on to the other fifty-seven things crowded on your to-do list, thinking that you were safe? If your resolvers are behind a NAT, you might want to think again, smart [...]

My small contribution to the update-your-DNS-server panic

14-Jul-08

How to find the version of BIND that you’re running:
> dig @localhost version.bind txt chaos
; <<>> DiG 9.3.2 <<>> @localhost version.bind txt chaos
; (2 servers found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7775
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;version.bind. [...]

My Developer Litmus Test

03-Jun-08

As a sysadmin, I’ve had the opportunity to interview candidates for software developer positions. While I have done some software development, the coding abilities of these candidates generally surpass my own - or at least that’s what their resumes claim - so it’s somewhat difficult for me to accurately assess their skills. A [...]