"we have nnn,000 users and we know cause we get every smoothie to phone home" but what does that mean for the classic installed for two hours and rejected machines! do they actually have 1000 live systems even"
Very interesting. Anyone run a sniffer to see what tales its telling when it allegely "phones home" ? If the above comment is true. I would suggest that anyone who has this product in production find a replacement immediately.
Astaro should go a long way to meeting what you need. Of whats out there at the moment its the only bundled solution AFAIK that uses 2.4/IPTables.
Initial impressions have been good. I wouldnt want to manage a whole enterprise of them given the way somethings have been implemented. But as a one off installation its sweet.
Speaking as a long term abuser of CKPs products, Astaro have some way to go to get the same ease of security policy management and logging close to CKP. But its a good start.
Personally I prefer IPFilter to IPTables, crafting a security policy from scratch with IPF is a damn sight easier. Its just I have to much Sys V muscle memory built up over a decade to switch the the *BSDs:-)
> The problem is that I don't think any security > professional would disagree with c't on these
> points.
Yep and it would be one of the many reasons why the product in question would fail pre-installation audit at the first hurdle and not be used in any security solution I would have anything to do with.
Well I suppose if the source of whatever product they were reviewing committed an utterly hilarious PR faux-pas by calling C't "No-nothings! how dare you question the mighty dick@how-f*cking-stupid-can-you-be.org" (politely or otherwise).
One can see their dilemma. Given their most excellent track record (shame my German is not much better). I would tend to give the benefit of the doubt to C't on this occasion.
Thanks for the large concentrated dose of Security 101 Clue that certain firewall developers seem to have been completely unaware of.
I remember seeing quotes from elsewhere about alleged unchecked arguments being passed to system() (3) calls. Of course this could all be malicious rumour, but......
When I was looking to firewall off a DSL connection over 12 months ago, what put me off both Mr Morrels b*stard stepchild and Astaro and the time was lack of SCSI support. My immediate requirement was the need to work on the collection of spare parts (NCR 810 controller and 1gb DEC scsi disk) that became a firewall.
Glad to say that in the meantime, Astaro got SCSI support and very nicely to. Squid runs like shite off a shovel with a Cheetah 9LP holding the cache.
> If I were them, I would have pounded your IP
> with a day of DoS for good measure.
Hmmm obviously another member of the Mr Morrell fan club. Any/. admin care to post what IP that enligtening comment came from ? Is it the same as any AC posts to this thread ?
Maybe you should go out and shovel concrete, fix steel, pick potatoes or work on a trawler for 10-12 hours/day, 6 days/week, and then see if your hands hurt.
It just cracks me up to see young no-nothing pups (whose most strenous labour every day is scratching the back of their ballbag first thing in the morning) cry and whinge about how tough it is to bash a keyboard in a nice comfortable office all day.
You miserable scrotes dunno how f*cking easy your lives are.
Now lets start on all those pampered middle class wasters pining away, telling us how terrible their poor miserable lifes are with ME/CFS.
F*cking freeloading b*stards! 'tis a running kick up the arse they need. They would soon get motivated & all the energy they need if there wasnt some idiot stupid enough to fall for that crap. Hunger beats CFS anyday.
> If you want a timesheet program,
> write a timesheet program (web
> frontend, VB, C+Gnome, whatever).
Oh F*CK OFF! What F*CKING alternate reality did you just beam in from arsehole ? 99.99% of folks out there use computers and the software therein as a tool, nothing more nothing less.
The majority of staff will be handed and required to use the timesheet tool developed by HR. The opportunity the roll your own does not enter the equation, or is that concept too C*nting complex for your addled brain to handle f*ckwit? Makework has nothing to do with it.
> Using Excel+Email as a timesheet system has
> always been the height of Microsoft office
> automation braindamage in my book
That maybe something to do with your repeated attempts to pull the mickey off yourself (thats "whacking off" to our american brethern who may not understand colloquial Irish dialect), wanking furiously over the changelogs of 2.4. "- Fix loop device deadlock (AA) Urrghhh!!!! - Correctly mark ext2 sb as dirty and sync it (AM) Oh Jesus! Arrgghh! DIRTY FS I'M Coming"
Its sick b*stards like you who crawl out of the woodwork and make it plain and obvious to all, that you have absolutely no f*cking clue to what happens in the real word.
Life sucks sometimes, but dont exacerbate that fact coming over as a holier than thou Open Sores onanist.
Until a 100% compatible Office is developed for linux or any other *nix, it will have zero penetration on the desktops of any large corporate period.
Thats the hard fact. All the mindless bollocks over what toolkit is politcally correct is f*cking inane when applications cant even agree on what consitutes a common file dialog. Way to go people, this is way to win friends and interest people. The solution is obvious. But completely beyond the average 2 hundredweight xenophobe with a personal hygiene problem that compromises the vanguard of the/. Taliban.
The amount of complete shite I have seen uttered in the name of so called Open Source over the past 6-9 months is just mindless beyond belief.
Get a f*cking job idiots in real world idiots, one that does not involve gobbling ( translation: Blowing) RMS & grow up!
What ignorant onanists modded this arsehole up as a 5 *interesting*. Listen up f*ckwit, I personally would have sh1tcanned the sorry SOB with my fist if he dared to vaporise a machine with my hardwork on it. Her work was worth a DAMN sight more to the company than some sad excuse who should have been selling burgers rather than holding down such a position. How dare he.
You sad excuse for a human being, you obviously have never held down a real job if you rationalise treating a user in that despicable manner. I would have ensured that my size 12s (UK) would impact his managers knackers & from there on down he could share the pain with this sorry f*cking scrote.
You lack even the merest modicum of understanding if you are sad enough to rationalise the lack of facility in the software as being somehow HER fault.
greg (Customer of Torvalds Software since 0.99 PL 4)
> don't know how to do this... I'm not a >programmer, I'm a sysadmin.
you really are a sad excuse for an SA if you cannot build & install bash on any unix system. With./configure its childs play.
I was building/installing GCC & bash on SCO back in 1994. How much linux knowledge do you really have, if any ?
greg
Re:Failure to implement open standards.
on
Linux Failover?
·
· Score: 1
>Oh, that was a good joke. Yes, Nokia uses it. >And nobody else
You are talking complete bollocks, just ask Bay, Alteon etc. VRRP works, easy to configure & a lifesaver operationally.
>But of course they didn't even bother to >contribute it back to the FreeBSD Project. Talk >about clueless corporate idiots.
The only clueless idiot around here is the gobshite who posted the prior article.
>Ah, whatever. Sorry for the rant - this whole HA >scene seems to be more annoying than the rest of >the bunch. They all operate in "a customer who >needs that must have money to burn - let's >charge him hefty" mode.
Hmmm you have a peculiar notion of what is HA. Banks etc are not interested in mickey mouse h0x3r solutions with no support.
Slashdot Mirror
Cornice
Drop me an e-mail & we'll discuss.
getjpi(at)yahoo.com
Curmudgeon
Deconstructing Katz
Says all that needs to be said.
Why is this modded flamebait ? Funniest comment yet!
Curmudgeon
Whois
Cue frantic whois entry changes of course.
Streetmap
Curmudgeon
"we have nnn,000 users and we know cause we get every smoothie to phone home" but what does that mean for the classic installed for two hours and rejected machines! do they actually have 1000 live systems even"
Very interesting. Anyone run a sniffer to see what tales its telling when it allegely "phones home" ? If the above comment is true. I would suggest that anyone who has this product in production find a replacement immediately.
Curmudgeon
Dont forget forget the connections limit. The main reason why I went looking for something else about 10 minutes later after installing it.
Curmudgeon
Astaro should go a long way to meeting what you need. Of whats out there at the moment its the only bundled solution AFAIK that uses 2.4/IPTables.
Initial impressions have been good. I wouldnt want to manage a whole enterprise of them given the way somethings have been implemented. But as a one off installation its sweet.
Speaking as a long term abuser of CKPs products, Astaro have some way to go to get the same ease of security policy management and logging close to CKP. But its a good start.
Personally I prefer IPFilter to IPTables, crafting a security policy from scratch with IPF is a damn sight easier. Its just I have to much Sys V muscle memory built up over a decade to switch the the *BSDs
Curmudgeon
> The problem is that I don't think any security > professional would disagree with c't on these
> points.
Yep and it would be one of the many reasons why the product in question would fail pre-installation audit at the first hurdle and not be used in any security solution I would have anything to do with.
Curmudgeon (erstwhile security professional)
Well I suppose if the source of whatever product they were reviewing committed an utterly hilarious PR faux-pas by calling C't "No-nothings! how dare you question the mighty dick@how-f*cking-stupid-can-you-be.org" (politely or otherwise).
One can see their dilemma. Given their most excellent track record (shame my German is not much better). I would tend to give the benefit of the doubt to C't on this occasion.
Curmudgeon
Amen brother.
Thanks for the large concentrated dose of Security 101 Clue that certain firewall developers seem to have been completely unaware of.
I remember seeing quotes from elsewhere about alleged unchecked arguments being passed to system() (3) calls. Of course this could all be malicious rumour, but......
Curmudgeon
When I was looking to firewall off a DSL connection over 12 months ago, what put me off both Mr Morrels b*stard stepchild and Astaro and the time was lack of SCSI support. My immediate requirement was the need to work on the collection of spare parts (NCR 810 controller and 1gb DEC scsi disk) that became a firewall.
Glad to say that in the meantime, Astaro got SCSI support and very nicely to. Squid runs like shite off a shovel with a Cheetah 9LP holding the cache.
Curmudgeon
I'll second those sentiments, it has one or two rough edges internally, but nothing life threatening.
Curmudgeon
> If I were them, I would have pounded your IP
/. admin care to post what IP that enligtening comment came from ? Is it the same as any AC posts to this thread ?
> with a day of DoS for good measure.
Hmmm obviously another member of the Mr Morrell fan club. Any
Curmudgeon
Dont let one bad experience put you off m8. If you want a nice self contained firewall solution Astaro ASL
http://www.astaro.com/products/
is very nicely engineered. Dont let the published hardware requirements put you off, thats only if you want to run a 10000 odd users through it.
Curmudgeon
Which for 99.99% of likely users is completely irrelelvant.
Curmugeon
> it survived a $19,000 security audit where our
> Cisco PIX boxes didnt.
IMHO you must had an idiot configuring your PIXen in that case.
Curmudgeon
Maybe you should go out and shovel concrete, fix steel, pick potatoes or work on a trawler for 10-12 hours/day, 6 days/week, and then see if your hands hurt.
It just cracks me up to see young no-nothing pups (whose most strenous labour every day is scratching the back of their ballbag first thing in the morning) cry and whinge about how tough it is to bash a keyboard in a nice comfortable office all day.
You miserable scrotes dunno how f*cking easy your lives are.
Curmudgeon
Now lets start on all those pampered middle class wasters pining away, telling us how terrible their poor miserable lifes are with ME/CFS.
F*cking freeloading b*stards! 'tis a running kick up the arse they need. They would soon get motivated & all the energy they need if there wasnt some idiot stupid enough to fall for that crap. Hunger beats CFS anyday.
Curmudgeon
> If you want a timesheet program,
/. Taliban.
> write a timesheet program (web
> frontend, VB, C+Gnome, whatever).
Oh F*CK OFF! What F*CKING alternate reality did you just beam in from arsehole ? 99.99% of folks out there use computers and the software therein as a tool, nothing more nothing less.
The majority of staff will be handed and required to use the timesheet tool developed by HR. The opportunity the roll your own does not enter the equation, or is that concept too C*nting complex for your addled brain to handle f*ckwit? Makework has nothing to do with it.
> Using Excel+Email as a timesheet system has
> always been the height of Microsoft office
> automation braindamage in my book
That maybe something to do with your repeated attempts to pull the mickey off yourself (thats "whacking off" to our american brethern who may not understand colloquial Irish dialect), wanking furiously over the changelogs of 2.4. "- Fix loop device deadlock (AA) Urrghhh!!!! - Correctly mark ext2 sb as dirty and sync it (AM) Oh Jesus! Arrgghh! DIRTY FS I'M Coming"
Its sick b*stards like you who crawl out of the woodwork and make it plain and obvious to all, that you have absolutely no f*cking clue to what happens in the real word.
Life sucks sometimes, but dont exacerbate that fact coming over as a holier than thou Open Sores onanist.
Until a 100% compatible Office is developed for linux or any other *nix, it will have zero penetration on the desktops of any large corporate period.
Thats the hard fact. All the mindless bollocks over what toolkit is politcally correct is f*cking inane when applications cant even agree on what consitutes a common file dialog. Way to go people, this is way to win friends and interest people. The solution is obvious. But completely beyond the average 2 hundredweight xenophobe with a personal hygiene problem that compromises the vanguard of the
The amount of complete shite I have seen uttered in the name of so called Open Source over the past 6-9 months is just mindless beyond belief.
Get a f*cking job idiots in real world idiots, one that does not involve gobbling ( translation: Blowing) RMS & grow up!
greg
What ignorant onanists modded this arsehole up as a 5 *interesting*. Listen up f*ckwit, I personally would have sh1tcanned the sorry SOB with my fist if he dared to vaporise a machine with my hardwork on it. Her work was worth a DAMN sight more to the company than some sad excuse who should have been selling burgers rather than holding down such a position. How dare he.
You sad excuse for a human being, you obviously have never held down a real job if you rationalise treating a user in that despicable manner. I would have ensured that my size 12s (UK) would impact his managers knackers & from there on down he could share the pain with this sorry f*cking scrote.
You lack even the merest modicum of understanding if you are sad enough to rationalise the lack of facility in the software as being somehow HER fault.
greg (Customer of Torvalds Software since 0.99 PL 4)
> don't know how to do this... I'm not a >programmer, I'm a sysadmin.
./configure its childs play.
you really are a sad excuse for an SA if you cannot build & install bash on any unix system. With
I was building/installing GCC & bash on SCO back in 1994. How much linux knowledge do you really have, if any ?
greg
>Oh, that was a good joke. Yes, Nokia uses it. >And nobody else
You are talking complete bollocks, just ask Bay, Alteon etc. VRRP works, easy to configure & a lifesaver operationally.
>But of course they didn't even bother to >contribute it back to the FreeBSD Project. Talk >about clueless corporate idiots.
The only clueless idiot around here is the gobshite who posted the prior article.
>Ah, whatever. Sorry for the rant - this whole HA >scene seems to be more annoying than the rest of >the bunch. They all operate in "a customer who >needs that must have money to burn - let's >charge him hefty" mode.
Hmmm you have a peculiar notion of what is HA. Banks etc are not interested in mickey mouse h0x3r solutions with no support.
greg