Reputation
549
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
4 18
Impact
~34k people reached

Aug
21
comment Nginx regex vhost pattern ends up as PHP server name
Yay! I accepted my own answer :)
Aug
21
accepted Nginx regex vhost pattern ends up as PHP server name
Jul
15
accepted Apache and multiple PHP-FPM pools
Jun
14
revised AWStats error: command for pipe failed
added 27 characters in body
Jun
13
asked AWStats error: command for pipe failed
May
12
awarded  Notable Question
Apr
24
comment Do you need separate ipv4 and ipv6 listen directives in nginx?
Yes, that's the same as I mentioned about deferred, and other per-protocol directives. It would be useful if they could be specified separately from the listen directive for the reason you say.
Feb
26
comment Postfix - Host or domain not found
It's not the connection that fails, but the DNS lookup that precedes it. When I have inet_protocols = all it does not attempt an A lookup if an AAAA lookup fails, which seems pointless. Also, if you change this value, you must restart postfix, not just reload.
Feb
7
awarded  Popular Question
Jan
26
comment Can OpenSSL be used to debug an SSL connection to a MySQL server?
This is the same as how SMTP works when you use STARTTLS, and it also permits you to use encrypted and unencrypted connectiosn on the same port.
Jan
22
comment Prevent postfix appending search domain
@localyodel that sounds like a great idea, you should probably post that as an answer!
Dec
30
accepted Perfect Forward Secrecy (PFS) for mail servers
Dec
30
comment Perfect Forward Secrecy (PFS) for mail servers
Great stats, nice article too, thanks! The "Don't restrict yourself unnecessarily" is the problem - just as with browsers, you can't just disable everything that's considered bad because you might find that you've cut off something critical, but it's hard to tell what that something is. For the German legal example, requiring PFS would mean cutting off 15% of the 60% of servers that support TLS. One key stat from your article is that SSLv3 be disabled without any major deliverability impact.
Dec
19
revised
added 88 characters in body
Dec
19
awarded  Tag Editor
Dec
19
revised
added 67 characters in body
Dec
19
wiki
Dec
19
wiki
Dec
19
suggested approved edit on
Dec
19
suggested approved edit on