Reputation
2,360
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
1 6 12
Newest
 Yearling
Impact
~319k people reached

Jun
5
comment When Google DNS (or Open DNS) is a good fit
Note that Google did introduce a means to convey to the auth servers information about where the request comes from and the auth servers to respond back with information about granularity of the answer, to solve issues like this. In 2009, when I wrote the reply, nobody used that, it was shiny new from Google. Today, most still don't use it but the biggest caching providers probably are, because it solves their problems. Ultimately, the only way to be sure is to measure it, or try it and see if it works for you, which is why that's what I recommended.
Jun
5
comment When Google DNS (or Open DNS) is a good fit
The authoritative DNS server can see the IP address coming from the recursor, in this case Google or OpenDNS. The recursor can see your IP address and know roughly where you are. With Google and shared caches, you don't know who, in which country, originally requested the content, where that query to the auth DNS originated, or whether a problem inside Google is resulting in them handling your DNS traffic in a different country through route injection. [to be continued]
Apr
17
comment Does the OS X DHCP client support classless static routes (RFC3442)?
DHCP is modelled on the client saying "give me this list of options" and the server only returning the values it has for that list of options. You can tell the server to forcibly include a parameter even when not included in the parameter request list. For ISC dhcpd, this might be done with option dhcp-parameter-request-list = concat(option dhcp-parameter-request-list, 79) to add 0x79 (121, CIDR route list) to the list. For dnsmasq, you'd specify the option with dhcp-option-force=... instead of dhcp-option=...
Jun
20
comment Most simple way of extracting substring in Unix shell?
Yes, expr(1) is the obvious example of "use external commands", but it gets "interesting" to safely capture values which can contain arbitrary characters.
Apr
13
comment Encrypt git repository on server (safe against theft of physical hardware)
Try github.com/AGWA/git-crypt instead -- uses CTR mode and understands crypto rather better; it leaves the local repo unencrypted in the working tree, via the smudge/clean filters.
Jan
31
comment Exim ACL to limit sender to send mail only to localdomain
nwildlsearch only treats entries as regexps if they start with a circumflex ^
Oct
25
comment Exim forwards not going out through TLS
No, hosts_require_tls is an SMTP Transport option, it needs to be set on a particular transport, it can not be set in the main section of the configuration. There are no general rules that Transport options can be set in Main.
Oct
9
comment tar leading period slash
If you don't have a tar with --xform, then you might have the pax(1) command instead, which has a similar option.
Sep
17
comment exim4 smarthost with sender verification
Sounds as though, if your domain is example.org, you are relaying for example.org but are also primary MX. You can add a second verify_only router for domains = example.org and figure out how to verify only the left-hand-sides you want. This will also fix a second problem which you must then currently have: you're accepting email for anything@example.org and leaving it until later for a bounce to be generated if anything is not valid. If you avoid accepting responsibility for mail that can't ever be delivered, you avoid becoming a source of backscatter.
Dec
5
comment Option 82 and dhcpd. “No free leases” for second computer
No, and it's not my property, it was written for and so belongs to that employer.
May
25
comment How do i setup exim4 to deliver email to my cyrus (sasl) and forward a copy of them to gmail?
That ${expand:} wrapper is probably a security glitch waiting to bite and should be unneeded. Also, with that driver, you should be able to just make the value of the entry be a colon-separated list of email addresses, where one is the same as the original address. Exim will avoid expanding the same value twice, so there's no loop.
May
25
comment Any idea about Exim 4 account auth settings
server_advertise_condition is a boolean option, not a host pattern; the {}{*} is working only because "" is treated as false and "*" is a string with some length not explicitly detected as false, so is true. Simpler to just write: ${if def:tls_cipher}
Jan
14
comment zsh printf quote bug
${1//%/_} but you may find this informative: printf '%s %s\n' ${(%):-'%n %m foo'} '%n %m bar' -- note that (%) causes the variable expansion to have prompt escape sequences expanded. So perhaps: preexec () { printf '\e]0;%s (%s)\a' ${(%):-'%m - %~'} "$1" }
Aug
30
comment Is there any reason to use bash over zsh?
nb: ${foo:offset:len} is now supported in zsh, for compatibility.
Jul
13
comment partial shutdown of loadbalanced app
pstanton: The loadbalancer distributes new requests across the "healthy" backends, but should keep an existing request going (until timeout), even if the backend is marked unhealthy. So when TomcatA starts failing the health requests, the pool of healthy backends drops to just TomcatB and only TomcatB gets new requests.
Jun
7
comment Bash script to count number of files
You probably want to quote '*.zip' in case there are any .zip files in the current directory when this is invoked, in which case the shell will have expanded the *.zip for you, while you want it passed through to find(1).
Jun
7
comment Bash script to count number of files
This fails if there are too many files in the directory to fit in argv for the ls invocation.
May
26
comment fedora can not boot - sendmail sm-client exim abandoned
Sendmail has a -L option, which Exim doesn't have, and Fedora assume that the MTA will understand that option. Given that Fedora allow switching the MTA, this is a Fedora bug and should be reported as such. For Exim, I've filed bugs.exim.org/1117 to implement -L. We'll look into it.
Mar
3
comment Migrating from VExim to Postfix
I'm one of the Exim Maintainers and I'd never heard of that OID before. It's not used anywhere in Exim. There is one mention of it in the list archives and that's someone asking about it. This looks like a rogue registration by someone unconnected with Exim. AFAIK anything other than 1.3.6.1.4.1 under 1.3.6.1.4 is rogue.
Mar
1
comment Migrating from VExim to Postfix
Exim supports Maildir directly, and Maildir++, so Exim does deal directly with Maildir.