Tag Info

Hot answers tagged

5

First of all, you don't install any backdoors on your customer's system. It would be amoral, most likely illegal, and possibly a breach of contract. If the customer ever found out, it would be a really good reason for them not to pay you. You can configure the system such that you have root access through a number of methods which are generally regarded as ...


4

Almost anything puts you at risk. You just need to decide what level of risk is acceptable to you. In this case, the risks of hiring someone are potentially: They might have inflated their credentials and not be as good at the work as they say they are. They might be dishonest and make unauthorized changes to your system. (This is much less common than ...


3

The right thing to use for this is TLS with machine client certificates. rsyslog is doing this since about 2008, and has great instructions: http://www.rsyslog.com/doc/v8-stable/tutorials/tls_cert_summary.html The process is extremely simple, as these things go: Set up a CA Issue certificates to all your computers that you want logs from Configure ...


2

Webmin's integrated miniserv doesn't AFAIK have a feature like this. It seems to be a job for a proper reverse proxy with name-based virtual host support. This isn't hard to configure and is well described in Webmin documentation. A good choice for a proxy is ie. Apache httpd.


2

To paraphrase @reaces from another answer earlier today, if you don't trust your customer to pay you, you've got bigger problems. If you had a backdoor, what would you do with it? Disable the customer's site until they paid you? That's going to be a criminal offence in pretty much any jurisdiction on earth, and a pissed-off customer is not, in general, ...


2

From Apple support document #HT203609: Unable to use Apple Push Notification service (APNs) The APNs servers use load balancing. Your devices will not always connect to the same public IP address for notifications. The entire 17.0.0.0/8 address block is assigned to Apple, so it's best to allow this range in your firewall settings. Developer tech note ...


2

Let me try to answer your question by providing two cases. In both cases, you will still need to verify that you are the owner, it is just a security step. 1) www.yourdomain.com is not being visited and not in production 2) www.yourdomain.com is currently in production and is heavily being used 1) If your domain is now being setup or is not in ...


1

This is a great question. I use logstash to accomplish something like what you're proposing. Using logstash (or logstash-forwarder) to ship logs to your central collection system, add a logstash configuration to add a key field to the message, with its value being a long, random string that is unique to each server. Then on the receiving side, you can ...


1

The directive must be given for the directories containing the shtml files (typically in a <Directory> section, but this directive is also valid in .htaccess files if AllowOverride Options is set).


1

Not possible, sorry. As per my statement on The Apache Modules Guide: Thus, the server itself does not presume to know which module is responsible for handling a specific request, and will ask each module whether they have an interest in a given request or not. It is then up to each module to either gently decline serving a request, accept serving it or ...


1

I belive it's connected with login_grace_time which means that sshd service will close connection when user is not authed properly in peroid of time given by directive login_grace_time. Since you disabled logging with password user cannot be authed with password so the connection is closed rapidly (which indicates [preauth] part in your log). It's a ...



Only top voted, non community-wiki answers of a minimum length are eligible