So, a fun one happened the other day. I needed to remove all the old domains from our nameserver cluster which is open to customers who were no longer pointing there domains to our nameservers. Easy eh? Well, unless you have access to a unrestricted IP capable of doing that many lookups on Ausreg (most …
Jan 05
pmacct CentOS 6 with flow-fanout
Sigh, I swear I find all the weird edge cases with every product I touch, hence this blog. The latest being pmacct on CentOS 6 with a flow-fanout
Dec 23
Cisco ASR 1001 Memory
We recently got 2 new ASR 1001s at work to complement 2 we already had. Stupid me but specified 4GB RAM on the order not 8GB that we needed 🙁 The size of the full BGP table now means that 4GB is starting to get to be a bit of a tight squeeze on 4GB …
Nov 26
Qualys A+ Rating with Zimbra
Over the last few months there has been multiple exploits in various SSL libraries, to the point where pretty much every site on the internet has had to tweak something. I recently embarked on making sure my company were Qualys SSL test A+ Rated (https://www.ssllabs.com/ssltest/analyze.html) to all internal and external sites. I’m slowly getting there, …
Oct 27
Asterix, JunOS and NAT
I recently needed to work from home, and I brought home one of my desk phones (A Cisco 7940G) It connected to the PABX fine with NAT mode and worked for all of 60 seconds before it went unreachable to the PABX Now, I’ve fixed this before thanks to help from KungfuMonkeySlayer (http://www.kungfumonkeyslayer.co.uk/index.php/2010/04/sip-through-a-juniper-ssg5-router/) …
