187 reputation
15
bio website
location
age
visits member for 4 years, 4 months
seen yesterday

Dec
15
comment What's the maximum number of IPs a DNS A record can have?
I learned a while ago that if you ever have to ask "What's the maximum number of X?" you are probably using it wrong...
Sep
12
comment Exim says DNS lookup succeded, but also says “host lookup did not complete”
Your analysis of the strange "succeeded then failed" messages make a lot of sense. That's probably what was happening.
Sep
12
comment Exim says DNS lookup succeded, but also says “host lookup did not complete”
This is indeed what was happening. There is something that I didn't mention because I didn't think it was relevant: Exim runs on an Ubuntu guest VM in a VirtualBox instance managed by Vagrant. It turns out that recent vagrant version enable the --natdnsproxy option of VirtualBox by default, and this option happens to be buggy as hell on Ubuntu hosts. I couldn't find any workarounds that would work correctly within vagrant, so I ended up adding nameserver 8.8.8.8 to my /etc/resolvconf/resolv.conf.d/base and my DNS problems went away.
Sep
12
accepted Exim says DNS lookup succeded, but also says “host lookup did not complete”
Sep
9
comment Exim says DNS lookup succeded, but also says “host lookup did not complete”
Actually I'm investigating a bit further. I'm running all of this inside VirtualBox VM's, and it seems that there is an issue with VirtualBox's proxying of DNS requests... I'll update the question with more info (or an answer when I'll know more about it)
Sep
9
asked Exim says DNS lookup succeded, but also says “host lookup did not complete”
Jul
10
answered How can I verify that my PAM configuration works as expected
Jul
10
answered Switch on PAM debugging to Syslog
Jul
10
comment Switch on PAM debugging to Syslog
Does debian have a /var/log/auth.log file? I recently discovered that Ubuntu has it, and logs all the pam related stuff there. None of the answers here helped me, but looking in /var/log/auth.log helped me fix my problem.
Jul
10
asked How can I verify that my PAM configuration works as expected
Feb
24
accepted Is it a good idea to only allows connections to be established in the LAN->DMZ direction?
Feb
22
comment Is it a good idea to only allows connections to be established in the LAN->DMZ direction?
"Also, if the information you're using/storing is valuable in its own right and it can still be stolen by someone who has rooted the server in the DMZ then again, what you propose won't help much." At least, it will prevent the attacker from obtaining data from the whole LAN, he could only get whatever is exposed by the hijacked connection. Is there a way that if my LAN server tries to connect to a rooted DMZ server, it is actually talking to the legitimate service, and not a hacked one? That's probably going to be my next question.
Feb
22
comment Is it a good idea to only allows connections to be established in the LAN->DMZ direction?
What do you mean by "a session can be faked with relative ease from inside the DMZ"?
Feb
22
asked Is it a good idea to only allows connections to be established in the LAN->DMZ direction?
Oct
20
awarded  Notable Question
Feb
20
awarded  Popular Question
Nov
19
awarded  Student
May
23
awarded  Supporter
May
23
accepted How does Apache merge multiple matching Location sections
May
22
asked How does Apache merge multiple matching Location sections