110 reputation
420
bio website
location
age
visits member for 4 years, 4 months
seen May 17 '13 at 15:00

Sep
21
awarded  Popular Question
Jun
21
awarded  Popular Question
Jun
12
revised Ubuntu/Linux: how are startup parameters typically defined for startup scripts (sysvinit)?
added 529 characters in body
Jun
12
asked Ubuntu/Linux: how are startup parameters typically defined for startup scripts (sysvinit)?
Jan
11
answered Public-to-Public IPSec tunnel: NAT confusion
Jan
11
comment Public-to-Public IPSec tunnel: NAT confusion
no. Why would I do that?
Jan
11
comment Public-to-Public IPSec tunnel: NAT confusion
I have port forwarding configured already.
Jan
11
revised Public-to-Public IPSec tunnel: NAT confusion
added 12 characters in body
Jan
11
asked Public-to-Public IPSec tunnel: NAT confusion
Dec
17
awarded  Tumbleweed
Dec
9
asked Scaling up to tens of hundreds of IPSec tunnels and alternative methods of secure transactions
Dec
6
comment Change default from address from Postfix from www-data to something else
This works well, thank you. I usually set the headers properly when sending out through PHP mail(), etc. but wanted to set something as the default in case the headers were incorrect, etc.
Dec
6
accepted Change default from address from Postfix from www-data to something else
Dec
6
comment Change default from address from Postfix from www-data to something else
This had no effect.
Dec
6
asked Change default from address from Postfix from www-data to something else
Sep
8
comment DMZ configuration and firewall throughput
I see your point, and yes, measuring throughput is really the only way you can determine where your bottleneck lies. However, investing in 100Mb equipment today would be pointless as this is a new setup and all new hardware has or will be purchased.
Sep
8
accepted DMZ configuration and firewall throughput
Sep
8
comment DMZ configuration and firewall throughput
I'm going to go with this configuration and create a "data" VLAN that the multi-homed webserver and database server will be the only members of.
Sep
8
comment DMZ configuration and firewall throughput
Only required ports would be open, regardless: the webserver and the MySQL server will be running host-based firewalls (not to mention they won't have services listening for any other ports). My point exactly re: the router/firewall in between: unless there's some ARP spoofing scenario I can't wrap my head around, if the webserver gets owned, it has the auth token to the database server and can (at the very least) read/write to all tables in the database.
Sep
7
comment DMZ configuration and firewall throughput
@Chris: I agree, it is an industry standard (at least as far as simplified high-level DMZ diagrams go), but I can't seem to locate any documentation that supports my throughput vs. perceived security angle I'm trying to unravel here.