Reputation
239
Next privilege 250 Rep.
View close votes
Badges
3 8
Impact
~17k people reached

  • 0 posts edited
  • 0 helpful flags
  • 5 votes cast
Feb
16
comment CentOS 6 IPTables commands not responsive, firewall is down
Just incase anyone else has this issue... if iptables says it is applying firewall rules, but then 'service iptables status' says "Firewall modules are not loaded", it is because /etc/sysconfig/iptables is an empty file. It doesn't bother loading the firewall modules since there is nothing for it to do (you have no rules defined).
Feb
13
comment accessing ip_conntrack causes concurrency problems after yum update
Yeah I agree. Sadly I need to squeeze another few months out of C5 as I need to focus elsewhere
Feb
9
comment accessing ip_conntrack causes concurrency problems after yum update
Thanks, I had no idea this existed. It seems to hook into iptables to get the data, so Im hoping its much more efficient than catting /proc/net/ip_conntrack. Unfortunately I'm still on Centos 5.11 for this server, so Ive a bit of voodoo to get conntrack-tools working (EPEL doesnt provide it for such old Centos)
Feb
7
comment lighttpd + PHP-fcgi slow response
@Stefan I think you're right, although I imagine its only synchronised when the opcode cache is written to. Unless his scripts are changing frequently, I don't think it should be a bottleneck. At least, I have never seen any concurrency issues attributed to the opcode cache, and Im pushing quite a lot of constant traffic through my 1 proc, 120 children setup
Feb
6
comment Executing a remote command over an SSH tunnel
Why not redirect the sudo to a file too, so you can see what output its generating when you hit it from your iPhone?
Feb
6
answered lighttpd + PHP-fcgi slow response
Feb
6
asked accessing ip_conntrack causes concurrency problems after yum update
Feb
6
comment Google PageSpeed suggests compression - but my site is https
My understanding (based on breachattack.com) is that for a particular REQUEST to be vulnerable to BREACH, it has to reflect some user input in the response. This is unlikely to be the case for static css and js, so I believe its not an issue to selectively compress those, so long as any dynamic output remains uncompressed.
Jan
23
comment OS X Not Trusting Thawte Primary Root CA - G3
I have seen this issue in the wild too, with OSX and a Thawte issued cert. For me it appears to be resolved, possibly by an OSX update in the past few days
Dec
10
awarded  Notable Question
Sep
13
awarded  Popular Question
Jul
23
comment weird characters being appended to requests
%22 is an encoded " (quote) character. There is some malformed link in the HTML, and so instead of requesting absolute urls from your external cdn, its ending up hitting your main webserver
Mar
24
comment OSX nslookup can resolve a lan hostname, but ping cannot?
Thanks, you helped me look into this further as I had been focusing purely on the dns server config. It turns out it was my DHCP server at fault, which was telling client to use a secondary DNS of 8.8.8.8
Mar
22
awarded  Yearling
Mar
22
revised OSX nslookup can resolve a lan hostname, but ping cannot?
added 285 characters in body
Mar
22
asked OSX nslookup can resolve a lan hostname, but ping cannot?
Feb
10
accepted Serving image content over https, must encryption strength match that of the main website?
Jan
25
asked Serving image content over https, must encryption strength match that of the main website?
Sep
4
awarded  Notable Question
Jan
31
awarded  Popular Question