516 reputation
47
bio website
location
age
visits member for 4 years, 11 months
seen 20 hours ago

Mar
10
comment Iptables - Bridge and Forward chain
Also, /proc/sys/net/bridge/bridge-nf-call-ip6tables
Oct
18
awarded  Commentator
Oct
18
comment /var/cache/logwatch No such file or directory at /usr/sbin/logwatch line 633
Also Ubuntu help about logwatch says that "Configuration shouldn't be edited in the install directory (/usr/share/logwatch). Copy logwatch.conf to /etc/logwatch before editing"... resulting in that error ("/var/cache/logwatch No such file or directory at /usr/sbin/logwatch line...").
Sep
29
awarded  Necromancer
May
5
comment How to check that an OpenVPN server is listening on a remote port without using OpenVPN client?
Just to state the obvious, this is for Linux/Unix, not for Windows. And it requires netcat (not installed by default in some distros). Also, if your Linux distro does not have the "timeout" command, just use the netcat "-w" parameter, like "nc -w 10 -u openvpnserver.com 1194".
Apr
1
awarded  Revival
Mar
26
comment Securing php on a shared apache
Ah, got it. Sorry, I missed it just reading your answer (you mentioned it in your question).
Mar
22
comment Securing php on a shared apache
but user A (or B) can write a PHP script to read any file in the other user's directory. As the script will be run as www-data and www-data has read access to the both user's content, they still can access any file. There are options like suphp, php-fcgi, mpm-itk, mod_ruid2 and other solutions to handle this, runnung each user's scripts as that user only (some of those solutions will only handle PHP scripts, other files will need to be readable by the Apache).
Mar
22
comment Mod_ruid2 vs. SuPHP
But mod_ruid2 will start as root then switch to the script owner, right (like mpm-itk)? So any vulnerability hitting before the setuid operation may allow an attacked to root the server. This don't happen with mod_php or suphp (as both run as non-root users).
Nov
15
comment Should I use suPHP or DSO (mod_PHP) when php scripts need to manipulate files?
suPHP is indeed slower than mod_php. However I prefer to use it because it's easier to manage permissions (specially for servers hosting scripts from different departments/users). It also uses less memory. Anyway, I think people looking to use suPHP may as well explore the PHP-FPM (FastCGI Process Manager) included in PHP since 5.3.3 (an marked stable since 5.4.0) which offer similar access separation but with better performance.
Oct
29
awarded  Revival
Aug
27
comment Is there a way to make encryption default per contact in Thunderbird?
The OP seems to be asking about S/MIME encryption, not PGP/GPG.
Jul
23
awarded  Yearling
Jul
11
answered Is there any proper documentation for mod-evasive?
Jul
11
answered What 'Attempt to serve directory' error means in apache log?
Jul
6
answered Why is Postfix trying to connect to other machines SMTP port 25?
Jun
19
answered How is the PHP extensions/modules file structure logic based?
Jun
18
awarded  Yearling
Jun
18
revised Why does Microsoft.com have a TXT record with only a hash code?
Added reference to RFC.
Jun
18
answered Why does Microsoft.com have a TXT record with only a hash code?