This may seem super trivial for some of your Linux veterans, but I am working through a couple of projects that are broadening my Linux skill set. I ran into an issue where I would try to connect via SSH to an Ubuntu server, running OpenSSH and when logging in, it would take about 10 seconds to prompt for the password and about 30 seconds to complete the login after authenticating me. This also affected trying to use SFTP via filezilla to grab a file from the server.

After some Googling and trial and error, I found that what fixed my problem was to add a line to the sshd_config file that apparently disables the default behavior of trying to use reverse IP resolution.

The steps I took:

• sudo nano /etc/ssh/ssh_config

• Add this line to the end of the file:
  UseDNS no

• Ctrl X to exit.

• Y to save.

• "Enter" to overwrite the existing file.

• I restarted the SSH service but I don't know if it was necessary.
  sudo service ssh restart

I think they pulled IPv6 support awhile back. All my Pertino devices are IPv4. Also, note that I have problems with builds 520+ when installing it on Windows DCs/DNS servers. The DNS records do not dynamically update when Pertino is installed. 510 works OK, though. I have a custom 529 build that support gave me that is basically 510 but enables some more verbose logging so they can find out what is going on.

@Jason I didn't know USPS would ever do that. Good to know.

I also love the tracking that shows delivered on Sunday for an Amazon package that I don't end up getting until Monday. Then I am looking on my neighbors' porches and can't find it.

@aaronstuder said:

@wrx7m Nice. We have the same and are looking to do the same!

How do you connect this to other stuff? I have never user SPF before...

With Direct Attached, you are basically using a short run copper cable going from device to device or device to switch.

This is a little dated but has some good overview info on the different 10Ge choices (Page 4 on).
http://wiki.networksecuritytoolkit.org/nstwiki/images/NETGEAR_Whitepaper_10_Gigabit.pdf

@aaronstuder Well, I only have a little experience with the optical side of things. I am trying to dig up as much info as possible.

I was looking at the DA as posted above but realized that DA was for Direct Attached (it's been a long week) and so I shifted search to the SR version. So far it looks like the transceivers come in the card with LC connections.

http://www.staples.com/intel-E10G42BFSR-Converged-Network-Adapter-2-x-LC/product_IM1BH2870

@aaronstuder Yes. Dell 2 - R720XD and 1- R710

I chatted with fs.com and they say that they ensure the compatibility with the NIC before it ships. I guess I can order the transceiver first and see what happens.

@brianlittlejohn Are you running to a switch?

I am upgrading my my ESXi6 hosts to 10GE and would like to know which NIC you would recommend. I will be connecting them to Extreme Summit x450-G2 switches via SFP+ and hope to use off-brand "compatible" transceivers and cables from fs.com. I was looking at this one
http://www.newegg.com/Product/Product.aspx?Item=9SIA24G1XA6455 but saw the firmware locking comments. Not sure if that is only for direct connections or if it also applies to NIC-to-switch, as well.

I would appreciate any advice.

@Brett Depending on what FFL or DFL you are on, you won't even be able to use GPP to create a user because of the lack of password access in newer versions. I tried and it wouldn't work because I had to have a password per the policy but I couldn't add one per the change in GPP. The workaround was a script that I have for new machines that adds a local account via GPO startup script then adds it to the local administrators group. The new PC stays in a temporary OU for a few things to be installed, then moved to the permanent OU where the remaining items are run, including the installation of LAPS, which then changes the newly-created local admin password.

Here is the bat file that is called in the startup:

net user "My Admin" mypassword /add /passwordreq:yes /fullname:"My Admin"
net localgroup Administrators "My Admin" /add

@scottalanmiller He might mean that the ZT clients would need to know which gateway to use if it is a different gateway on the same network.

@FATeknollogee said:

@Dashrender You have a "how to" instruction set?

I think @dafyre created a script for it. I am pretty sure you can only install the bridge on a connector, which has to be a Linux box.

Would you say that the biggest difference between ZT and Pertino in terms of logistics is that Pertino routes traffic across its network, whereas ZT just performs the initial connection and the "clients" then communicate with each other until a loss of connectivity occurs?

Pertino does have smartzones that allows you to tell it when it should just route traffic locally/across the non pertino interface but I don't think it would be encrypted.

@Dashrender Laps assigns a DIFFERENT password on every machine.

I had way too many problems with virus issues and computer performance with letting users have admin access on desktop and laptop computers. I have pretty much eliminated these issues by making them all users and only installing pre-apporved software. I have Ninite Pro running as SYSTEM in a GPO/logon script to update 3rd party software and also I use it to push software remotely on demand.

I did run into a problem with UPS Worldship that needed to update several times a week and needed local admin rights to do so. The problem was solved by running the Microsoft Application Compatibility toolkit.

https://www.microsoft.com/en-us/download/details.aspx?id=7352

It allows you to create a database for the files that you would like to be whitelisted to run as admin so they can be executed if the user doesn't have admin access to it. You can also limit by file version (which is the default, so be careful).

@scottalanmiller said:

Here is the blog response to that...

https://blog.linode.com/2016/01/29/christmas-ddos-retrospective/

This was really interesting.

@wrx7m said:

@LAH3385 said:

We have Veeam Endpoint 1.1.2.119. How do we upgrade it to 1.5? Reinstall? Will that break the backup sequence?

I just ran the installer and it upgraded the existing installation, in place.

Just ran a backup and it completed successfully.

@LAH3385 said:

We have Veeam Endpoint 1.1.2.119. How do we upgrade it to 1.5? Reinstall? Will that break the backup sequence?

I just ran the installer and it upgraded the existing installation, in place.