735 reputation
819
bio website bitdepth.thomasrutter.com
location Australia
age 34
visits member for 5 years, 5 months
seen 7 hours ago

Web application developer by day who has also dabbled in audio, video and image tools.


Aug
29
awarded  Necromancer
Jul
16
comment Nginx as network edge HTTP cache?
Its support for caching is poor, and it does not support proxying of HTTPS (ie, the CONNECT method). It supports just enough proxying features to make it useful as a reverse proxy, and the fact it works as a forward proxy at all is just a bonus.
Jul
15
comment Nginx as network edge HTTP cache?
You can use nginx as a forward proxy - but it is not as full-featured as something like Squid.
Jul
7
comment How to redirect all mail from one domain to another in Postfix?
The virtual file is the virtual_alias_domains list.
Jul
2
awarded  Curious
Jun
26
answered How do mx records work when there are multiple ones at the same priority?
Jun
25
revised OpenDKIM - verifying mail forwarded by mailing lists
added 4 characters in body
Jun
25
revised OpenDKIM - verifying mail forwarded by mailing lists
deleted 1 character in body
Jun
25
answered OpenDKIM - verifying mail forwarded by mailing lists
Jun
24
comment How can you test a backup / secondary MX server?
@EvanAnderson This is a good general principle until it comes to testing STARTTLS or any AUTH other than PLAIN. But yes in this case you're absolutely right.
Jun
24
comment How can you test a backup / secondary MX server?
@joeqwerty I'm actually thinking of migrating a mail server to another machine which will involve setting up the old server to relay to the new server during the DNS propagation (even with low TTL values, some resolvers will cache for 30 minutes or more). Since I'll need to put in the effort to get this relaying working correctly anyway, I thought I may as well create a backup MX server configuration. And it'll be a learning experience. This was just to give a bit of background about why.
Jun
24
comment How can you test a backup / secondary MX server?
@Halfgaar if the secondary MX server is misconfigured it could lead to loss of mail in the unlikely event that a sender is unable to connect to the primary MX server for any reason (including a connectivity problem at their end). At least if it hasn't been added to the DNS yet then a transient issue with the primary won't cause loss of mail - a sender will just queue the mail and try again later.
Jun
24
accepted How can you test a backup / secondary MX server?
Jun
23
asked How can you test a backup / secondary MX server?
Jun
21
comment Recommended DNS SOA record TTL default?
All those intodns / dnscog / dnsstuff etc type sites just copy the same misinformation from each other. You can tell because a lot of their text is copy-pasted. I've found MXToolbox (mxtoolbox.com/DNSCheck.aspx) to be a more reliable resource. For example, their explanation of the SOA MINTTL value here is accurate - a rare quality.
Jun
21
comment Recommended DNS SOA record TTL default?
Really, there is so much misinformation about what these records mean online that it's hard to find anything that's actually true. In summary, most of the values in the SOA record are meaningless for actual DNS queries, and are intended instead for you to use for your own internal zone transfer mechanism from your primary to secondary nameservers. The exception is the MinTTL but that isn't, as the standards suggest, minimum TTL nor is it a "default" TTL, but instead a suggested TTL for caching negative results. What matters much more are the individual TTLs for records like A and NS.
Jun
7
comment Recommended DNS TTL
Both those standards you quote are referring to the "Minimum" field of the SOA record only, which is no longer used for determining the default or minimum TTL anyway, as was intended back when those standards were written. DNS best practices written 27 and 18 years ago were written when DNS - indeed the internet - was a different beast. Nowadays, 300 seconds (5 minutes) is a fairly common TTL for main A/AAAA records, although only useful when needing fast failover otherwise 6 hours+ would be more appropriate. NS records, and the A/AAAA records for the NS addresses, are usually 1 day or more.
May
31
answered Force dig to resolve without using cache
May
31
comment How to get Ubuntu back into pristine conditions?
Presumably it is always logged in dpkg.log whether you use aptitude, apt-get or anything else is that right?
May
1
comment How can I make an internet facing TFTP server secure?
From wikipedia: "Due to the lack of security, it is dangerous to use it over the Internet. Thus, TFTP is generally only used on private, local networks."