amuck-landowner

Search results

  1. splitice

    SQL Injections and WAFs

    If only people could learn to write secure code, its not hard either use an ORM (e.g Doctrine, Readbean etc) or atleast use PDO (correctly). Almost makes me cry when I still see SQL injection in this day and age with all the tools at our disposal. ;*(
  2. splitice

    Multihomed DDoS Protection - VPSBoard special BETA

    Hi RiotSecurity, First let me say we have not and will not advertised on HF. I am unsure if we are discussed there my ISP is banned there (I doubt that I am missing much). We have a fully functioning abuse department (including forwarding from our rented ranges) which is handled by staff and...
  3. splitice

    New PHP exploit CVE-2012-1823

    Pretty old bug by the looks of it, dotdeb is on PHP 5.4.21 now.
  4. splitice

    Multihomed DDoS Protection - VPSBoard special BETA

    Apologies for the late reply, I missed the notification. It depends on the location, most servers are on 1gbit. Those that aren't will eventually be silently upgraded if / when the need arises. Because our billing is directly based on bandwidth you need not worry since its in our best interest...
  5. splitice

    Zabbix Series 4: Low Level Discovery

    The example script makes numerous assumptions (e.g that a tunnel must be in the 10.0. range) and is generally poorly written. I used it in the past without an issue, however I would recommend someone write a cleaner solution :P I am no AWK god as can be seen by the multiple chained awk calls...
  6. splitice

    Zabbix Series 4: Low Level Discovery

    For this tutorial I will be showing how to get Zabbix to automatically create items and triggers for you... sound too good to be true? Its entirely possible, we just have to tell Zabbix how to create those triggers and for this we use Low Level Discovery (LLD) rules - not to be confused with...
  7. splitice

    Zabbix Series 2: Trappers

    "This can be useful where there are many items receiving updates at different intervals or to feed the output from one command into multiple items on the server." You definitely do not want to connect to mysql, execute SHOW GLOBAL STATUS and extract the 80 odd MySQL status variables I am...
  8. splitice

    Buying HDD's in USA? Recommendations needed

    I have 10 WD Greens in my home nas (and 8 other drives of mixed brands). I am yet to see any die and most are more than 2 years old. Although these are on a ram cached raid controller and I am not running a database server off them or anything that would put them under excessive load. I think...
  9. splitice

    Zabbix Series 3: Trigger Anti Flap and Cascading failures

    So have you created your first trigger yet?  If I have made any mistakes in this post let me know. Flapping Presuming you have created your first triggers, you might have noticed that unlike Nagios Zabbix does not include automatic Anti-Flap detection, that is triggers can go on and off...
  10. splitice

    Zabbix Series 2: Trappers

    Part 3 (in case you havent figured it out by now there is no particular order to my ramblings). I will probably bug a mod to rename these into order when I am done. What are trappers? Instead of asking the agent for the values defined on the server side, the monitored location can decide what...
  11. splitice

    Zabbix Series 1: Scalability

    While Nagios does have quite an extensive set of scripts, so does Zabbix. Not quite the same amount, but for relatively new (compared to Nagios) its quite acceptable. Ive never had any difficulty creating tiny bash scripts to do my dirty work so its a moot point for me...
  12. splitice

    Zabbix Series 0: Introduction to Zabbix

    I am writing this second, but so be it. Scalability was just more interesting to write about. What is Zabbix? Free, enterprise quality monitoring software. Based on the Server / Agent model (with optional Proxy) it can either operate in Passive (connect to server) or Active (connect to agent)...
  13. splitice

    Zabbix Series 1: Scalability

    For one, you do not need to implement your own housekeeper. That is an option one that may be needed in the future. I am currently cleaning up 1,324,800 items per housekeeper cycle (hour) without issues on the discussed configuration. Two I would like to see stock nagios scale to 200+ items a...
  14. splitice

    Multihomed DDoS Protection - VPSBoard special BETA

    Hi, There is a control panel behind all of our functionality. You would however only forward public facing ports, you would not forward 22 (ssh). e.g ports.
  15. splitice

    Zabbix Series 1: Scalability

    This is the first of what I hope will be a series of posts on the topic of Zabbix. For those not in the know, Zabbix is a free and open source piece of monitoring software with all the features of an enterprise solution. All this advice should be taken with a grain of salt and is based on our...
  16. splitice

    Multihomed DDoS Protection - VPSBoard special BETA

    Hi all, This has been a long time coming. So without further ado let me announce the public beta of our multi-homed, Geolocated DDoS protection platform. How does it work? To those familiar with our existing single-homed service, this is very similar. We have bundled a monitoring system and...
  17. splitice

    DDOS Protection

    Sucks to be him. I guess no one noticed :)
  18. splitice

    DDOS Protection

    @Kruno, in that location Layer 4/5 filtering is done via BuyVM. Its a bit more than "just a VPS" though :P
  19. splitice

    DDOS Protection

    Since I am about to wrap OVH's protection into a separate service I can talk as to their quality. I like to call their filtering "basic" as apposed to the "premium" filtering offered by CNServers, Black Lotus etc (or anyone with a decent hardware to customer ratio). But for 1 euro more (if you...
  20. splitice

    DDOS Protection

    @rds100: No this is not an option, it is neither compatible with our methodology or with our contract (due to the pricing we wanted its a bit restrictive in what we are allowed to do in Romania). We may allow blocks of /27's or something of our IPs to be leased to providers in the future however...
Top
amuck-landowner