Reputation
326
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 6
Newest
 Critic
Impact
~4k people reached

  • 0 posts edited
  • 0 helpful flags
  • 9 votes cast
Dec
4
revised One line script to check and react to memory usage
process ram consumption draft
Dec
4
answered One line script to check and react to memory usage
Nov
10
comment new dkim config -> opendkim-testkey: record not found
Ensure that the user "milter" can actually fetch the keys, because right now, it should not be able to. Try su - milter; cd /; cat /etc/opendkim/keys/default._domainkey.domain.com for instance.
Nov
10
comment new dkim config -> opendkim-testkey: record not found
can you provide ls -la output on the key directory? Also, what does the log say?
Oct
27
comment One Domain, two web applications
FYI, my solution is more reliable because there is no SPOF. The DNS balancing relies on the DNS architecture (primary and secondary/ies + cache), and does not require dedicated hosting. This is why I found it an interesting alternative to /blog.
Oct
26
answered One Domain, two web applications
May
26
answered How In Running multiple Web Server on Multi Server at one static IP
May
11
comment Multiple users, Multiple servers, SSH key management
It's not a proper answer, but more a suggestion, so I won't post an answer for that, but I think you can manage to authenticate ssh against kerberos, which could use ldap directory, to allow, or not user to access a given server. I'm sure about the kerberos stuff, not about the granularity though. Another idea is to use the AuthorizedKeysCommand against a database, which would ease the process of adding a user, if you don't want to get into kerberos or ldap. A simple php / mysql app should be able to help you, then the AuthorizedKeysCommand would juse use mysql cli. Hope this helps.
May
3
comment How to change protected config files via web/php interface?
for instance, feed a database with the wanted password (hashed), and have a script which updates the /etc/dovecot/passwd with that password. Or use dovecot against MySQL for authentication.
May
3
answered How to change protected config files via web/php interface?
Apr
27
comment Unix processes wasn't killed but is not running
Looks like the process is blocked on IO. So if the file gets missing, only timeout or signal can unblock it. But it depends a lot on the code. This is just a supposition.
Apr
27
comment bind9 in a chroot jail - necessary or not?
I didn't know which answer to comment, but it's a quite general one. Chroot may indeed, have security issues. *BSD and *Linux distros have different behaviour. I would recommand you to have a look on grsecurity.net/features.php where they explain what's wrong with chroot before patch.
Apr
21
comment Install application/HTTP services to “/srv”?
using /srv may be a good way to apply partition wide policies, such as se-linux, or noexec, whereas /var might need defaults flags. I've seen a use of /srv which was read only, and the admin justified the use of a dedicated mointpoint rather than /var for that purpose.
Dec
25
awarded  Critic
Dec
25
comment Mail server: can't connect via POP/IMAP
seems like your postfix config and courier config don't use the same storage format or storage path, which explains why courier can't chdir in the Maildir folder.
Dec
25
awarded  Commentator
Dec
25
comment Suspected server or data vulnerability and reporting a fraud site
I was told that an erroneous whois information could be a sufficient reason for a takedown. Might be the simplest way.
Nov
29
comment ip forwarding using iptables
When prerouting, you need to specify the input interface. How will the kernel redirect to 10.42.43.174? Just by looking up in the routing table which should contain an entry like 10.42.43.0 255.255.255.0 eth1 if your network is a /24 (which is not important here, just to illustrate the routing table)
Nov
29
answered ip forwarding using iptables
Nov
19
answered How to make jailed shell?