219 reputation
312
bio website
location
age 30
visits member for 4 years, 8 months
seen Jun 4 at 15:16

Oct
2
comment How useful is mounting /tmp noexec?
@neoice Oracle Enterprise Manager Agent deployer breaks when /tmp is noexec.
Nov
29
comment User Friendly port knocker (port knocking client) for Windows?
This is a question about clients, not servers. Changing the server is out of scope of this question by definition. That's all there is to this.
Nov
23
comment User Friendly port knocker (port knocking client) for Windows?
@gparent Neither of you know whether fixing logs is a better idea or not in my scenario. Enough with the off-topic comments already!
Sep
21
comment Most scalable way of serving a small set of static HTTP content
Well, fancy that. As far as I care, the question was answered satisfactorily by everyone including the one who bothered to close answers for it. Thanks guys.
Aug
1
comment How do I smoothly migrate a web server's DNS from one IP address to another?
Nice. How to handle arbitrary subdomains, though?
Apr
12
comment Automatically change UID of file
@Khaled SSH-based methods only (such as standard shell, scp or SFTP).
Apr
12
comment Automatically change UID of file
@ChrisNava I don't want to spend the HD space storing file history; I just want to know who last changed.
Apr
11
comment Bacula alternative?
I find that the problem with Bacula is the configuration bureaucracy. Upon any change that I might want to make, I have to edit the director and the client component, and restart both. This is way too error-prone, and the written-in passwords (as opposed to a bluetooth like pairing that would store an actually secure key generated on the spot) are dumb. That added to the fact that I have to restart the director, the freaking director, upon any and every change (no idea about the effect of this on running jobs) made me decide Bacula seems over-engineered compared to its actual reliability.
Mar
30
comment User Friendly port knocker (port knocking client) for Windows?
In the end I only changed the default port from the default 22 to a non-standard one. Some services such as svn+ssh are a pain, but at least I got some obscurity. I repeat: obscurity is insufficient, yes, but not unnecessary.
Feb
15
comment Add SSH host key to another user's PuTTY cache
I just tested and it works fine. It ended up at HKEY_USERS\S-1-5-18\Software\SimonTatham\PuTTY\SshHostKeys. Thanks.
May
5
comment exim: remote host is local host?
This filter (stalemail) seems to be about, well, stale mail. :) I was having this problem at a filter called dnslookup; I put it there, problem solved!
Apr
11
comment Adding Subject Alternate Names (SAN) to an existing Cert Signing Request (CSR)
If you don't have power over the key or the request, then the request is theoretically not yours to amend. You'll have to keep depending on the other guys at signing time. :/
Apr
8
comment I need folder permissions set to drwxrwxrwt instead of drwsrwsrwx
@jgbelacqua I Skype regularly with my users and they have had the habit of asking me things directly when they want to understand something about our server. I hope this isn't changing. :(
Apr
8
comment I need folder permissions set to drwxrwxrwt instead of drwsrwsrwx
Maybe your system administrator did that for a reason? I made this exact change to my users' web folders yesterday. Has it been bringing you trouble?
Apr
7
comment User Friendly port knocker (port knocking client) for Windows?
@ErikA: I already do. The failed attempts still pollute my logs and use up resources in other ways. Security through obscurity is insufficient, but it isn't unnecessary.
Apr
7
comment How make multiple directories appear as one to a user on linux?
This sounds a bit counter intuitive to me. Why would you want to organize folders, then discard such organization? Is it for searching purposes? If it is, consider using instead search indexers such as Beagle and Tracker.
Apr
7
comment Can you suggest a guide for setting up linux VPS for web application
Well, use the packages I suggested above. :) For mail I recommend postfix (that's the package name), which comes with a decent default configuration for your needs. For FTP, I have no idea, but I would suggest against supporting FTP at all as it's insecure and almost all FTP clients support SFTP anyway. Debian/Ubuntu (agree with Kromey above) have decent defaults and just installing these packages suffice for most starter cases.