Reputation
897
Top tag
Next privilege 1,000 Rep.
See vote count; VIP usercard
Badges
5 17
Impact
~60k people reached

Jan
24
comment iptables change destination IP without DNAT
Thanks so much! It's still dark matter for me!!!
Jan
22
comment DNAT to 127.0.0.1 with iptables / Destination access control for transparent SOCKS proxy
Did you solve this issue? I have the same problem as you. Thx
Dec
16
comment Keep-alive options not working on Linux for an outgoing connection
@aculich is right, if you have set keepalive in the system, it's your application that doesn't use it properly. I advice to read the TCP Keepalive HOWTO as suggested by aculich or to post the source code of the application or either try to execute an lsof to see what happens
Feb
14
comment The most powerful open source web analytics tools?
Webalizer is no longer actively developed, I'm afraid will lose its market share inexorably.
Feb
14
comment The most powerful open source web analytics tools?
It seems that Analog is not updated since the year 2005, if it's the case could be it doesn't recognize correcthly certain http headers.
Feb
11
comment ss segmentation fault - how to investigate?
I'm pleased you succeeded :-) @Michal
Feb
4
comment tunneling smtp connections from localhost to another port
@MadHatter thx, didn't get it
Jan
28
comment Why can't IPv6 send broadcasts?
Thanks @splattne for corrections.
Jan
25
comment Problems with error_log and Log Rotation
@steven I don't know well Plesk (I know apache), but I think it's http.include
Jan
9
comment Hacking prevention, forensics, auditing and counter measures
+1. Yes, correct.
Jan
6
comment Hacking prevention, forensics, auditing and counter measures
I'm used to grind some billions of lines of logs per day and what I know is that before to understand what the heck was happened, is much more important to fix or workaround, that can be even a temporary server with just a static page explaining to the users blah, blah, ..., blah and apologizes. This is the first step, then you think about what and when you can reestablish the service (or part of it) and finally you investigate and put in place any countermeasures.
Jan
4
comment Tool to assist loading servers into a rack?
+1. Muscles + Brain ---> not common today
Jan
4
comment Hacking prevention, forensics, auditing and counter measures
thanks. Don't forget the user perspective and perception.
Jan
4
comment Hacking prevention, forensics, auditing and counter measures
Still not sure between your and Robert answer.
Jan
4
comment Hacking prevention, forensics, auditing and counter measures
I've chosen your answer because it's the most complete, and it's what companies, like the one we work for, they use and continuously improve, but I wonder how can be simplified also for normal webmasters, that have to find a solution asap, much more without huge amount of money.
Jan
4
comment Hacking prevention, forensics, auditing and counter measures
All correct, I think nothing more is needed, but again, when it happens, because it happens, what exactly you do, what do you need to react fast? Analyzing thousands of lines of logs, much more in a stressing situation, will not provide a quick workaround or temporary solution to at least inform the users.
Jan
4
comment Hacking prevention, forensics, auditing and counter measures
That is what I'd like to discuss here :-)
Jan
4
comment Hacking prevention, forensics, auditing and counter measures
+1. Yes, it's correct, but then, if everything happen it means that your template it's not as safe as you thought, so you cannot use it to deploy a new website. You need at least a maintenance page notifying the customers about a temporary issue and better to host it somewhere else (another server, another IP, and redirection from the old). I think we should always take in consideration the worst case.
Jan
4
comment Hacking prevention, forensics, auditing and counter measures
I agree on almost everything but this apply mainly to medium and large companies. Small sized companies won't need or want such expensive structure.
Jan
4
comment Hacking prevention, forensics, auditing and counter measures
Good point! I didn't know there is one, I thought the full list is in the footer of each stack websites.