Eric Gearhart

Server Administrator

Responsible for the setup from scratch of a Gentoo Linux based web server, running the following services:

• Apache 2.0, later switched to lighttpd for security and performance
• PHP 5, with Apache and later lighttpd support
• mySQL, which provides a reliable relational database
• phpMyAdmin, providing a web-based frontend to mySQL
• Advanced Web Statistics, for analyzing visitor statistics on the site
• Multi-router traffic grapher, for monitoring server traffic, database load, etc.
• OpenSSH, for remote administration
• qmail/courier-imap, which provide secure SMTP, POP3 & IMAP-SSL services
• tinydns, for simple, secure DNS services
• The Horde framework with IMP over SSL, for secure web-based e-mail
• vsftpd, a secure FTP server
• Squid and Privoxy, web proxy servers. Privoxy provides ad blocking
• Gallery, as a web-based photo album (see here for an example)

Planned and executed a transition of this server to a virtualized solution using an OpenVZ Node and two Virtual Environments (VE) for better security, portability and manageability. OpenVZ is the underlying technology used by Virtuozzo-based VPSs (Virtual Private Servers). See examples of real websites running on this server (other than nixwizard.net) at aerno.com, la.gg and unicellonline.com

Information Systems Operator/Analyst

In Iraq I was assigned to a Joint Network Node Regional Hub. While there I served on a team that was responsible for the 24 by 7 monitoring and maintaining of over 150 links over a period of 15 months. The hub I worked at comprised a vital part of the support of communications throughout the Iraq theater during Operation Iraqi Freedom. Many of the improvements I made at the hub to better accomplish the mission were under my own initiative.

• Completely revamped the monitoring system in place, to one that fully took advantage of SNMP for link monitoring and Cacti for bandwidth usage monitoring
• Installed local caching DNS servers to increase the responsiveness of Internet access to the customers we provided services to
• Configured and monitored Cisco CallManagers, version 3.3 and later version 4
• Received hands on training outside of my job in microwave transmission systems that provided TDMA and FDMA connectivity in order to better support the mission
• Monitored and configured an array of Cisco routers and switches. The routers used VPN tunnel modules to support secure, encrypted tunnels that were configured in the routers themselves
• Monitored and configured various classified cryptographic communication systems

Also while in Iraq I worked briefly at an "Internet cafe" that was setup for soldiers to communicate back home. While there I completely reinstalled the client computers to rid them of spyware and adware, locked them down using Group Policy and ensured that the computers there would not create a risk of identity theft. I created a custom menu system for the client computers and installed various open source software suites such as Mozilla Firefox and OpenOffice.org. This entire project was also done under my own initiative - the Army expected me to just handle signing people in to the Internet cafe.

Information Systems Operator/Analyst

Was responsible for the setup and continued operation of a 'data package' that consists of Tier 1 and Tier 2 Cisco 3725 routers, a Cisco 515 PIX, and Dell 1750 and 2950 Servers.

Managed software installation, security configuration and accounts on the Dell servers that ran Windows Server 2003 with Active Directory and Group Policy. The Domain consisted of two domain controllers, a server running Exchange 2003, and a WSUS / Antivirus server that runs Symantec Antivirus Corporate Server. The clients' software and Antivirus updates were pushed out by this server.

Managed the IP scheme on the data package through the use of VLANs on switch modules on the routers, and OSPF for intranet routing.

Managed route redistribution through BGP on the Tier 1 router to allow for access to the Internet through the Tier 1 router.

Provided VOIP (Voice over IP) services with Cisco Call Manager Server 3.3 and 4.0 and Cisco 7940 / 7941 VOIP phones.

Was trained at Fort Huachua as an operator with the Promina 400 and 800 series of multiplexers, which mux together both voice and data signals to a Satellite transmission uplink from the above mentioned data package.

Assisted civilian consultants with the penetration testing and analysis of vulnerabilities in the data package and the use of Nessus, nmap, Group Policy, and regedit to correct the vulnerabilities found.

Network Defense (Information Assurance) and Network Engineer

Served on the Brigade Information Assurance team under the Officer in Charge (MAJ Lee) and NCOIC (SFC Davis)

Was responsible for the scanning of and corrective action for various vulnerabilities on the network using Harris STAT Scanner.

Hand wrote scripts to update both clients and servers on the network.

Hand wrote scripts to migrate all machines from Office 2000 to Office XP, and later to Office 2003.

Wrote scripts that enabled machines on the network to be remotely administered via VNC, software that functions similar to Remote Desktop for remote management and administration.

Managed the patching and continued maintenance of a 600 workstation Brigade, that included Windows 2000 Server and Workstation, Windows XP, Windows Server 2003, a SCO Unix server, and various other devices on the network such as HP Printers/Digital Senders, and ISDN-based Video Teleconferencing equipment.

Upgraded clients and servers in said Brigade from Windows NT-based systems on a Windows NT 4 style Domain to Active Directory on Windows Server 2003.

Tested an implementation of SharePoint Portal Server on Windows Server 2003, later taught and assisted soldiers and officers with adding content and building web portals on SharePoint.

Taught soldiers basic static and RIP routing, serial port configration and CIDR IP address subnetting on Cisco 2501 and 2514 series routers.

Helped users with day-to-day tasks such as functions in Excel, Word, Access and Powerpoint, and maintenance such as repairing corrupt Personal Folders (PST) files, and assisted soldiers with numerous other miscallaneous day-to-day tasks (Excel funtions/graphs, PowerPoint presentations, working with Adobe Acrobat Professional forms, etc).

Windows and Linux Network Solutions Developer / Engineer

Developed thin clients that booted off the network and were Linux based for local hotels, that would be both secure and performed well. These clients were based on the Linux Terminal Server Project (TSP) on the software side and the "NIC"; the "New Internet Computer" thin client hardware platform.

Implemented Active-Directory based servers as a single sign on solution for client companies, and provided support for said servers. Also developed reliable backup solutions for those servers.

Network Engineer

Worked as a network administrator and engineer, involved in all aspects of networking and troubleshooting PCs, networks, internet connections (T1, DSL, Cable Modem, dial-up, etc.)

Built, installed and maintained a range of Windows-based clients and severs (running Windows 9x / NT / 2000). Most servers installed were configured as Active Directory Domain Controllers, and they were setup to perform a variety of functions such as file and print sharing, SQL database, and IIS web serving.

Built, configured and maintained Linux (Debian based) and FreeBSD file, print and web servers that ran various services such as samba for file sharing, the qmail MTA, Apache web server, and mySQL and PostgreSQL database servers.

Network Administrator

Responsible for the installation of Apache, Bind (for DNS services), ProFTPd, and all aspects of setup and administration of a FreeBSD-based Internet Web server.