Reputation
221
Top tag
Next privilege 250 Rep.
View close votes
Badges
4 13
Newest
 Caucus
Impact
~71k people reached

Nov
2
comment Why can't a CNAME record be used at the apex (aka root) of a domain?
@HåkanLindqvist Good points. Switching to SRV is not as impossible to change as it seems, though. The first step is adding support for browsers, the second step is major websites (Facebook, Google, etc.) supporting it, the third step is start to add warnings to browsers. That all would take some good 5 to 15 years, but it's pretty feasible.
Sep
30
comment Why can't a CNAME record be used at the apex (aka root) of a domain?
That said, this question was immensely helpful - I now finally understand why I can't (it's not just an implementation bug of the particular version of bind I was using). I can now plan accordingly, so that my DNS rules can fulfull my HTTP needs.
Sep
30
comment Why can't a CNAME record be used at the apex (aka root) of a domain?
This whole no-CNAME-at-apex rule throws a huge spanner in the works of the "no-www" movement. Let's face it, HTTP has far more exposure than DNS, and the DNS implementations' refusal just makes HTTP folks look for workarounds.
Oct
2
comment How useful is mounting /tmp noexec?
@neoice Oracle Enterprise Manager Agent deployer breaks when /tmp is noexec.
Nov
29
comment User Friendly port knocker (port knocking client) for Windows?
This is a question about clients, not servers. Changing the server is out of scope of this question by definition. That's all there is to this.
Nov
23
comment User Friendly port knocker (port knocking client) for Windows?
@gparent Neither of you know whether fixing logs is a better idea or not in my scenario. Enough with the off-topic comments already!
Aug
1
comment How do I smoothly migrate a web server's DNS from one IP address to another?
Nice. How to handle arbitrary subdomains, though?
Apr
12
comment Automatically change UID of file
@Khaled SSH-based methods only (such as standard shell, scp or SFTP).
Apr
12
comment Automatically change UID of file
@ChrisNava I don't want to spend the HD space storing file history; I just want to know who last changed.
Apr
11
comment Bacula alternative?
I find that the problem with Bacula is the configuration bureaucracy. Upon any change that I might want to make, I have to edit the director and the client component, and restart both. This is way too error-prone, and the written-in passwords (as opposed to a bluetooth like pairing that would store an actually secure key generated on the spot) are dumb. That added to the fact that I have to restart the director, the freaking director, upon any and every change (no idea about the effect of this on running jobs) made me decide Bacula seems over-engineered compared to its actual reliability.
Mar
30
comment User Friendly port knocker (port knocking client) for Windows?
In the end I only changed the default port from the default 22 to a non-standard one. Some services such as svn+ssh are a pain, but at least I got some obscurity. I repeat: obscurity is insufficient, yes, but not unnecessary.
Feb
15
comment Add SSH host key to another user's PuTTY cache
I just tested and it works fine. It ended up at HKEY_USERS\S-1-5-18\Software\SimonTatham\PuTTY\SshHostKeys. Thanks.
May
5
comment exim: remote host is local host?
This filter (stalemail) seems to be about, well, stale mail. :) I was having this problem at a filter called dnslookup; I put it there, problem solved!
Apr
8
comment I need folder permissions set to drwxrwxrwt instead of drwsrwsrwx
@jgbelacqua I Skype regularly with my users and they have had the habit of asking me things directly when they want to understand something about our server. I hope this isn't changing. :(
Apr
8
comment I need folder permissions set to drwxrwxrwt instead of drwsrwsrwx
Maybe your system administrator did that for a reason? I made this exact change to my users' web folders yesterday. Has it been bringing you trouble?
Apr
7
comment User Friendly port knocker (port knocking client) for Windows?
@ErikA: I already do. The failed attempts still pollute my logs and use up resources in other ways. Security through obscurity is insufficient, but it isn't unnecessary.
Apr
7
comment How make multiple directories appear as one to a user on linux?
This sounds a bit counter intuitive to me. Why would you want to organize folders, then discard such organization? Is it for searching purposes? If it is, consider using instead search indexers such as Beagle and Tracker.
Apr
7
comment Can you suggest a guide for setting up linux VPS for web application
Well, use the packages I suggested above. :) For mail I recommend postfix (that's the package name), which comes with a decent default configuration for your needs. For FTP, I have no idea, but I would suggest against supporting FTP at all as it's insecure and almost all FTP clients support SFTP anyway. Debian/Ubuntu (agree with Kromey above) have decent defaults and just installing these packages suffice for most starter cases.