Reputation
2,613
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
8 26
Newest
 Yearling
Impact
~131k people reached

May
22
answered MX does not work, after setup CNAME
May
22
comment MX does not work, after setup CNAME
Here it is not an issue of having an MX record referencing a CNAME, but instead having a CNAME in combination with other records types, such as in serverfault.com/questions/481243/…
May
21
comment Why is SSH password authentication a security risk?
This is especially relevant when you connect to the wrong server because of a typo. For instance, at some point in time, .cg was a wildcard pointing to a single machine with ssh enabled. Anytime you would mistype .cg for .ch, you would end up connecting to that box and leaking your password...
May
21
comment Why is SSH password authentication a security risk?
If you want to force a password-authenticated user to go through a specific command, change his login shell. Also, "granting temporary access without revealing the password" is a very bad idea. There are hundreds of different ways to keep the access for later.
May
15
comment iptables blocking script using arp table lookup
Yes, i'm only sharing my personal experiences in that direction, as they might have been of interest. The key point is that if you are behind one or several routers, your local ARP table will contain the router's mac for your station's ip addresses, just like you saw in tshark. You have to hit the remote ARP table of the router, to see the actual MACs.
May
15
comment iptables not blocking IP addresses
@zagrisman That's a very personnal opinion, but I think an empty ruleset on a server is perfectly fine in many cases. A private service should not be bound to a public interface anyway, users not allowed to communicate on the network should be denied ip socket creation altogether, and if network filtering is really required, it should be done on a dedicated device.
May
15
answered iptables blocking script using arp table lookup
May
13
answered Tunneling cassandra via ssh gives me a connection closed error
May
13
comment Tunneling cassandra via ssh gives me a connection closed error
So what is the port supplied to cqlsh on the command-line ? What if I want to have two tunnels to separate cassandra instances ? do I have to use different localhost addresses or something ?
May
10
comment BIND9 zone forwarding is not working at all. How can I troubleshoot?
Have you considered using unbound instead ? it's much lighter and more suitable for cases when only the resolver is needed.
May
10
reviewed No Action Needed Port forwarding ssh with iptables
May
10
reviewed Reviewed The differences between libpam-ldap and libpam-ldapd, included packages and modules?
May
10
reviewed Approve IPTABLES block User-Agent
May
10
reviewed Approve Port forwarding ssh with iptables
May
9
reviewed No Action Needed Server Room Temperature Control
May
9
reviewed Reviewed Should I use link-local addresses where a non-routable, internal IP address is required?
May
9
reviewed No Action Needed How does a FreeIPA failed authentication session display browserconfig.html?
May
9
reviewed Looks OK Moodle installation issue on Windows 2012 server
May
9
revised Ubuntu Encryption - Protect data in the case of Physical Server Access
added 187 characters in body
May
9
revised Ubuntu Encryption - Protect data in the case of Physical Server Access
added 515 characters in body