- admins-discuss@lists.redbrick.dcu.ie

None
by None 23 Oct '25

23 Oct '25

pass { from: 136.206.0.0/16 to: 0.0.0.0/0 port = 22 log: connect error } Colm MacCárthaigh wrote: > man ssh, most versions of ssh will support acting as a local > SOCKS server (version 4) or alternatively have inbuilt support > for SSH_SOCKS_PROXY. Despite all this, I don't think the > CSD SOCKS proxies currently allow outbound connections to > port 22, they used to, but I'm fairly sure that's stopped though > I'm open to correction on that. > > -- > colmmacc(a)redbrick.dcu.ie PubKey: colmmacc+pgp(a)redbrick.dcu.ie > Web: http://devnull.redbrick.dcu.ie/ > _______________________________________________ > Admin-discuss mailing list > Admin-discuss(a)lists.redbrick.dcu.ie > http://lists.redbrick.dcu.ie/mailman/listinfo/admin-discuss

1 0

None
by None 23 Oct '25

23 Oct '25

Phil.

1 0

Re: [Admin-discuss] Virtualizing Secondary Services.
by Eoin Campbell 21 Jul '14

21 Jul '14

On Mon, Jul 21, 2014 at 5:28 PM, Andrew Harford < andrew.harford(a)redbrick.dcu.ie> wrote: > On Mon, Jul 21, 2014 at 03:00:01PM +0100, Cian Brennan wrote: > > On Mon, Jul 21, 2014 at 12:55:19PM +0100, Eoin Campbell wrote: > > > Is it mandatory that you self-host or host within CSD on campus. > > > > > > Have you considered contacting a cloud host provider (AWS, Azure, > > > Rackspace) to see if they'd give you free or reduced > "hey-we're-students" > > > rates to host a bunch of VMs in the cloud ? > > > > > > > What would be the benefit of moving RB stuff to the cloud? > > If a cloud is what we need then lets build our own \o/ > > Jaysus you'd know it was redbrick with people bottom-posting to emails ;-) Fair enough if you've got loads of metal to spare to install it on. We've just virtualised a bunch of dev/qa/prod stuff at work and moved it all out to Azure. Was just a suggestion. Not sure what the compapp courses are covering these days in terms of virtualisation/cloud iaas if anything so just a thought that you could offer something different to the members. best of luck with it ~cambo

1 0

[Admin-discuss] Virtualizing Secondary Services.
by Richard Walsh 21 Jul '14

21 Jul '14

Greetings all, We're replacing Deathray as our secondary services machine. It's one of an ailing batch of Dell Poweredge 2650s and it's about time it were taken behind the barn and put out of its misery. As such we're looking to create a replacement secondary services 'box' but we're looking to virtualize it. We're open to suggestions on Hypervisors and setups that people have used in their own time. I'm going to throw in my €0.02 and say ESXi would be my choice, but I'm a Windows bound admin. We've also looked at oVirt, but only in passing. Let us know what you think, any and all input on the topic is helpful. Cheers, Richard Walsh Redbrick SysAdmin '13/'14 p: (+353)857196403

6 10

[Admin-discuss] DCU proxy change
by Vadim Clyne-Kelly 07 Feb '13

07 Feb '13

Hi, Recently DCU has removed the mandatory use of their proxy (proxy.dcu.ie) for web access and have opened outbound ports 80 and 443. The Redbrick subnet is included in this move. This now means that we don't need to have the proxy env vars setup to connect to the web. This doesn't, however, mean we should not use the proxy. The benefits for using the proxy as I see are: * Possible caching (albeit marginal impact given our connection speed) * Small level of anonymity provided the X-Forwarded header isn't used Disadvantages to using the proxy * A bottleneck for web traffic, slower speeds at peak times * ISS has a very simple log for us - which isn't necessarily a bad thing Thoughts in general? I would sway towards removing the use of the DCU proxy. We will of course still need to keep the SOCKS proxy for ssh and non port 80 and 443 traffic. Vadim

6 6

[Admin-discuss] Test...
by Austin Halpin 29 Sep '11

29 Sep '11

ing...

1 0

[Admin-discuss] Third user managed nameserver
by Vadim Clyne-Kelly 23 Jun '11

23 Jun '11

Hey, This idea came to mind when thinking of features for the new user web services control panel. It would be nice to allow users to have the facility to host their own domains and manage the records themselves (for purposes of vhosts and / or vms etc.). The obvious problem with this is allowing some type of elevated access to our bind configs that in turn could lead to someone editing redbrick's domain records which is definitely something we don't want to happen. This lead me to think some more, why don't we setup a third completely separate dns server that runs from a mysql db, be it mysql-bind or myDNS etc, that will only hold user's domains. MySQL would provide an easy interface to automate domain addition and depending on the database setup it could even allow us to only grand certain tables (a domain) to certain mysql users only. This nameserver could also be used, as brought up earlier today, to host .vm.redbrick.dcu.ie domains, by creating forward zone in our current bind setup to this isolated DNS server for the vm subdomain, creating an easy more secure way to automate vm domain additions. Thoughts? Is there a huge lapse to my thinking? Any recommendations on mysql or database oriented nameserver daemons? Vadim

5 5

[Admin-discuss] Fwd: Third user managed nameserver
by Vadim Clyne-Kelly 23 Jun '11

23 Jun '11

On 23 June 2011 16:40, Eoghan Cotter <eoghan.cotter(a)redbrick.dcu.ie> wrote: > I've looked at something similar before, for the VM domain, DCU will only pick > up stuff the redbrick.dcu.ie domain, they won't pick up sub domains. We wouldnt need DCU to handle the DNS for user's domains as they wouldn't be a subdomain of .dcu.ie. We can setup a primary DNS server for these domains. The idea for subdomains of .vm.rb was to setup a forwarding zone that forwarded to this isolated name server much like dcu do for our sub domain redbrick.dcu.ie. DCU does pickup subdomains *.devnull.redbrick.dcu.ie and *.dev.redbrick.dcu.ie work fine. > DNS is kind of important, and not something I would like to give access to > users, particularly since its such an unsecure protocal I agree it is important, hence the isolation of our domains from this nameserver. > Eoghan > > On Thu, Jun 23, 2011 at 03:18:29PM +0100, Vadim Clyne-Kelly wrote: >> Hey, >> >> This idea came to mind when thinking of features for the new user web >> services control panel. >> >> It would be nice to allow users to have the facility to host their own >> domains and manage the records themselves (for purposes of vhosts and >> / or vms etc.). >> >> The obvious problem with this is allowing some type of elevated access >> to our bind configs that in turn could lead to someone editing >> redbrick's domain records which is definitely something we don't want >> to happen. >> >> This lead me to think some more, why don't we setup a third completely >> separate dns server that runs from a mysql db, be it mysql-bind or >> myDNS etc, that will only hold user's domains. >> >> MySQL would provide an easy interface to automate domain addition and >> depending on the database setup it could even allow us to only grand >> certain tables (a domain) to certain mysql users only. >> >> This nameserver could also be used, as brought up earlier today, to >> host .vm.redbrick.dcu.ie domains, by creating forward zone in our >> current bind setup to this isolated DNS server for the vm subdomain, >> creating an easy more secure way to automate vm domain additions. >> >> Thoughts? Is there a huge lapse to my thinking? Any recommendations on >> mysql or database oriented nameserver daemons? >> >> >> Vadim >> >> _______________________________________________ >> Admin-discuss mailing list >> Admin-discuss(a)lists.redbrick.dcu.ie >> https://lists.redbrick.dcu.ie/listinfo/admin-discuss >> > > -- > Eoghan Cotter > > DCU Networking Society (Redbrick) Sys Admin > >

3 2

[Admin-discuss] Helpdesk mailman privileges and User/MySQL account?
by Paul B 05 May '11

05 May '11

Evening all. It was mentioned in #rbadmins (half-seriously) recently that it might be good to give helpdesk the mailman password so that they can deal with issues that arise. Not entirely sure how much this would help as it seems we don't use the web interface for making new lists, but resetting passwords and changing owners could still be done. Any pros/cons to this that people would like to discuss? Also was thinking of (or remembering the previous mentions of it, more like) creating an account for helpdesk to use for testing stuff, and perhaps a MySQL account for it, so they can mess around with settings and stuff while dealing with questions without having to mess up their own account, perhaps throw on a Wordpress setup and common stuff like that? isaac seems to be using the newb account for some stuff like this, but we can't really set up too much stuff on it or give it a MySQL account since people tend to have access to it on C&S day and stuff. Any thoughts on this too? bunbun.

4 5

[Admin-discuss] Useradm ideas/improvements
by Craig Mac Entee 27 Apr '11

27 Apr '11

Andrew mentioned that he has some ideas for features and I'd love ideas to implement myself, so please, fire ideas at me. Craig/Creadak

4 4