536 reputation
1613
bio website
location
age
visits member for 4 years, 6 months
seen Aug 10 '10 at 21:42

Aug
7
comment How to SECURELY “open up” a home machine behind a firewall, so a remote machine can access it?
+1 for the really usefull tips. I am already using ssh to login to the remote machine from my home computer, so ssh is available on the local machine. What you suggest is definitely the way to go. However, there are 2 things not clear to me. 1. How to make sure my home router forwards a port to my home computer (I am using an OLD Draytek Vigor 2200 USB router). 2. How to make an SSH key on the sender machine and how to install that on my home machine.
Aug
7
comment Is it a security risk to run my crontab jobs as root?
BTW, if I create the user group and user as you suggest, will I be able to access /etc/apache/sites-available and other folders which are (quite rightly), limited to root access only?. How do I get around that problem?
Aug
7
comment Is it a security risk to run my crontab jobs as root?
+1 for the useful, step by step instructions. Your answer has been extremely helpful. I was intending to go down this path anyway, but since it was the first time I was doing it, it is reassuring to see that it is being recommended on here (and quite a few people seem to agree with your recommendation).
Aug
6
comment what are the minimal user permissions required to scp files to a remote server?
can you provide some more information on how to do this?. I don't particularly like the idea of running an FTPS server on the server because 1). It is an extra potential security risk 2). It consumes (already limited) resources on the server
Aug
5
comment what are the minimal user permissions required to scp files to a remote server?
I'm not using sftp
Aug
5
comment backing up a website - recommended strategy and steps for a newbie sysadmin
on closer reflection. what you suggest is probably to complicated for me (just starting out as a reluctant sysadmin). I have decided to use a solution cobbled together by automysqlbackup and duplicity. Thanks for your offer to help though, much appreciated.
Aug
3
comment Do I need to bring my website down just in order to use mysqldump?
unless I am mistaken, both (MASTER and SLAVE) servers have to started with binary logging switched on and mysqldump has to be run with --single-transaction?. Can you confirm this?
Aug
2
comment Do I need to bring my website down just in order to use mysqldump?
john: +1 for anticpating and understanding my nervousness. I think I would much prefer to use replication and take a backup on the slave server. I would like to run both the master and the slave on the same machine - could you please provide some hints (or links) on how to do this? thanks
Jul
31
comment backing up a website - recommended strategy and steps for a newbie sysadmin
this sounds very much like what I'm trying to do. I'd be grateful if you could shed some more light on how I can go about implementing this. A small bareframe script outline with some useful notes/comments will be extremely helpful
Jul
19
comment fail2ban and denyhosts constantly ban me on Ubuntu
This is YOUR ANSWER? Surely, that's a joke right?
Jul
19
comment fail2ban and denyhosts constantly ban me on Ubuntu
Thank you for asking this question!. I asked the same question - but for some reason, was unable to get a sensible answer. I will use the answer you accepted to help me solve the same problem I am having
Jul
17
comment apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName
This is counter-intuitive. If I add the ServerName outside of any virtual hosts - how can I serve multiple virtual hosts from the same Apache server? (this afterall, is the point of named virtual servers) - UNLESS, you are saying that I can have more than 1 ServerName entry in (say) /etc/apache2/httpd.conf
Jul
11
comment Serving multiple domains from a third party website
Hmm - not so sure. I thought the CNAME records would be the way to implemnt this functionality. Could you explain the precise steps by which a web server on www.example.com can handle requests sent to www.domain1.com and www.domain2.com?. Generating HTML requests with special header information is trivial (speaking as a coder), so what you suggest would suit me better - but I dont see how it would work. For what you propose to work (IIUC), the user will have to manually change their nameservers. Google etc dont require manual intervention.
Jul
11
comment Serving multiple domains from a third party website
tx for the answer. This is unlikely to be the correct answer though because it dosen't address several issues like DNS server resolution etc.
Jun
3
comment Is it advisable to run Apache in a chroot jail?
thanks for the snippet. much obliged!
Jun
3
comment Is it advisable to run Apache in a chroot jail?
+1 for good, straight answer. could you please elaborate some more (i.e. explain) what you mean by 'link to the socket inside the chroot'. can you provide an example?
May
21
comment How can I install ubuntu server in a chroot environment?
To clarify, yes, it is a whole Ubuntu 8.04 LTS server distro I want to install in a "chroot jail" (if thats the correct terminology). the whole idea is so that I can test out my packages before deploying them to my remotely hosted server which is running Ubuntu 8.04 server LTS
May
21
comment How can I install ubuntu server in a chroot environment?
@Stanicpuppy: +1 for answering. Yes, its a virtualized server instance I want, so I can test my packages on the server before deploying the packages onto my remotely hosted server. What is the correct terminology for what I am trying to do. I have not been able to get any help anywhere and Google is not finding anything either (leading me to suspect that the terms I am searching on are incorrect)
May
14
comment question about chroot
fair enough - sound advice. I think I'll simply rename the folder for now.
May
12
comment How to backup a remote VPS machine?
+1 thanks for the info. I'm doing some backup reading on some of the items you mentioned and I'll be back later if anything is not clear