1,080 reputation
42033
bio website xeoncross.com
location
age
visits member for 5 years, 5 months
seen 17 hours ago
Another PHP programmer responsible for things like the MicroMVC PHP framework.

You may notice that some of my questions run very deep into the heart of certain issues because I strive for the highest optimization that is possible in my apps.

Sep
25
comment A secure, standard iptables rule-set for a basic HTTP(s) webserver
@hobodave I just started with DenyHosts so I'll keep this mind as the first thing to switch when this becomes a problem.
Sep
25
comment A secure, standard iptables rule-set for a basic HTTP(s) webserver
Good point, given that most VPS are in a VM with others possibly accessible from LAN I would say that not-trusting them would be the smart starting place. If you have additional VPS then you could add rules later to access them (i.e. webserver to database).
Sep
25
comment A secure, standard iptables rule-set for a basic HTTP(s) webserver
I actually use DenyHosts since it saves 15MB or so over fail2ban. However, fail2ban is more powerful and works with many applications (not just SSH like DenyHosts). Given that attackers are banned, should I still worry about the log files filling up to fast? Is there a way to rotate files when they get to full? If I disable logging in fail2ban will Denyhosts/Fail2ban still have log entries to scan? Also, the source option would be good for some people - but since I'm aiming for a default ruleset people like myself that move around a lot can't use that option.
Sep
25
comment Default sudo group for Debian Linux?
Then "sudo" it is.
Sep
22
comment Removing Apache from Debian 5
Ah, perfect! Cleaned it right up.
Sep
21
comment How to strip a Linux server distro to the core?
What I mean is that before I used svn/git/scp over pure SSH I used SFTP which just added another unneeded piece to the transfer.
Sep
21
comment How to strip a Linux server distro to the core?
Linux From Scratch looks like the prefect resource for learning what is needed and why. That should help me in removing what isn't needed on my systems. Though I'm sure I'll continue to use full destros for their communities and support. It's not like I need to go off and start yet another linux flavor.
Sep
21
comment How to strip a Linux server distro to the core?
I'm sure that since I'm still new to this there is a lot I am misunderstanding. However, I know that in every OS there are always packages that aren't needed - or that can be replaced with faster, smaller apps. I want to learn what those are and how I can use them.
Sep
21
comment How to strip a Linux server distro to the core?
Well, I remember running across some really DSL distros (including DSL) and that while that does give the end result. I'm interested in learning what is or is not needed and why along the way. So I'd rather stick to full destros that I know will be around to offer support in the future. I just want to learn what isn't needed so I can remove that after each install and the easiest way seemed to be to read a guide or find someone's script on the subject.
Jun
22
comment Setting up Git over SSH on Windows using a non-standard port
Not having pagent running was half my problem - thanks!
Jun
21
comment Setting up Git over SSH on Windows using a non-standard port
Thats just it, my private key doesn't have a passphrase yet it's still asking for one.
Jun
13
comment Stopping a DOS attack
This is a great question but apparently there is no real answer. Wow, I never knew that the DoS brick wall was so thick.
Jun
3
comment What is the lightest, basic Email Server for Linux?
I found an article using Exim library.linode.com/email/exim/send-only-mta-ubuntu-10.04-lucid
May
24
comment Can't bind spawn-fcgi to address
netstat returns nothing and I think if the port was used spawn-fcgi would say something like "port already in use". I tried strace and ended up with a file thousands and thousands of lines long. O_o
May
23
comment Where should the web server root directory go in linux?
hmmm.. good point. I wonder how much help that would actually be in an attack. Kind of like switching the SSH port from 22. Should I create a root level nonstandard path like /www-data or just add to an existing path like /srv/www-data/?
Mar
27
comment Putty hangs for a while
Actually, I would say superuser would be a better place since it's about using an application.
Mar
27
comment How to setup linux permissions for the WWW folder?
Very good point. For apache you need to sudo vim /etc/apache2/envvars and add umask 002 to the bottom of the file. I'm still trying to figure out how to do it with nginx.
Mar
27
comment How to setup linux permissions for the WWW folder?
Yes, root would remain the owner. However, since the group owner is now "developer" (and has wrx permission) then all the devs (and apache/nginx) could also read. No need for sudo.
Mar
26
comment How to setup linux permissions for the WWW folder?
Good. Maybe if I can confirm this with a couple more people I'll be using this approach. It seems to be the best answer I have been able to squeeze out of people.
Mar
26
comment How to setup linux permissions for the WWW folder?
I just said, git doesn't have a user - it runs as the current user using it.