Reputation
Next privilege 200 Rep.
See reduced ads
Badges
7
Newest
 Supporter
Impact
~4k people reached

  • 0 posts edited
  • 0 helpful flags
  • 1 vote cast
Jan
26
comment Automation and full-disk encryption
It isnt useless. If you read the Original question, its about secure wipe. During normal usage, theres no need to protect the data, thus the encryption can have a auto random password. But when its time to decommission the server, you dont need to securely wipe the whole drive. You just need to wipe the sector(s) where the key is stored, preferable with gutmann 35. Then the rest of disk can be erased with dd if=/dev/zero of=/dev/(diskname) bs=1024 . If someone recovers one of the zeroed sectors, it wont matter since they are encrypted with a key that has been gutmann 35:ed.
May
6
comment Have postfix to reply with 2 different hostnames?
however, the SMTP box is behind a multiWAN firewall, so the SMTP box itself does not know which IP the request received on. Thats why I need a different port, so I can NAT all requests arriving at 193. to port 25 on 192.168.1.x and NAT all requests arriving at 95. to port 26 on 192.168.1.x.
Jun
26
comment Spoof IPP response in firewall?
The idea is that I have a printer which is only able to do auth by username/password, but what I want is auth by single sign on. Since the firewall does the auth task, the firewall does have the record of which IPs are logged in the network and can then permit the IPs who are logged in, to print. But I finally found a protocol example and solved the question.
Mar
28
comment Getting bind9 to answer on a Dual NIC machine?
Thanks, solved the problem perfectly. Now I have 2 "Virtual" DNS servers on the same physical machine and my registrar are happy now. Now my domain is alive :-)
Mar
28
comment Getting bind9 to answer on a Dual NIC machine?
Done. Added the tcpdump outputs to the main post. However "port dns" did not work, had to do "port 53".
May
10
comment Scale X software
Im have tried to lower bit depth, but that introduces "dithering" (dots in different colors) and making it veeeery sloooow because it kills the JPEG compression.
May
10
comment Scale X software
SvenW: It does not seem to support XDMCP. Thats required for the whole thing to be multisession (eg support multiple users connected at the same time). What the server does when a client connects, is autologging in the user "kiosk" with a simple X window manager that kicks off a second software. This "second software" does only support 640x480, thats why I need something to shrink (scale) the window to 320x240. So in other words, I simply share the software in a "cloud" fashion.
May
10
comment Scale X software
symcbean: The software does not support running 320x240 natively. So I could scale down the software, and then run the software on a 320x240 screen. Thats what im asking for. In other words, I need something like a negative magnifying glass software.
May
10
comment Scale X software
The problem is that NX is not well suited for being used in situations where untrusted users will have access to the NX server. The NX has too many options on the client side. The whole thing is supposed to run without authentication, and in a "kiosk" setting (tightly locked down desktop) where anyone on internet can access this public server. So Xvnc is the only thing that works.
May
10
comment Scale X software
It gets very slow then. Since the network between client and server is slow.
Dec
20
comment Problems forwarding zone to another DNS server
Seems that changing the line allow-recursion {"none";}; into allow-recursion {"any";}; fixes the problem, but does it not open a security hole allowing anyone to use the DNS server to do lookup to another hosts than those that has a valid zone-line? Also, how can I do for the server to always answer authoratively for all queries?
Dec
20
comment Problems forwarding zone to another DNS server
Glen: No, theres no ACL. The 83.248.21.18 is allowing queries fron anywhere so there should not be problem. Yep I have reloaded both servers. (/etc/init.d/bind9 restart)
Nov
1
comment VNC application/terminal server
Ill stick with the VNC. Any ideas?
Nov
1
comment VNC application/terminal server
Nope, FreeNX is not a solution. Too much settings on client side which gives too much work to lock down on server side.
Oct
27
comment VNC application/terminal server
OK, how I do to make FreeNX launch a application in a new session when a user connects? It should be "kiosk-like", so if the application crashes or exits, client should be disconnected. I just want to share a single application to the public.
Oct
27
comment VNC application/terminal server
NX only allows 2 concurrent connections. I want up to 10 concurrent connections.
Oct
27
comment VNC application/terminal server
You know RDP, I want that functionalty, but on my linux-server.
Oct
27
comment VNC application/terminal server
What do you mean? think of a web server accepting multiple simultanous connections on port 80. In the same way, I would want to do with VNC, where each client has its "own" desktop.
Aug
30
comment Make wildcard certificate valid for ALL sites over the globe?
I understand your comment. But here, the certificate is not meant to provide any security, but to make the browser happy. I have a solution like this: [Client] --A-- [Antivirus Proxy] --B-- [SSL Site] The SSL cert I have maked does only apply for connection A, which means this connection actually does not need any security. The only reason to provide SSL is to make the browser, and any javascript at internet bank sites happy.
Aug
30
comment Make wildcard certificate valid for ALL sites over the globe?
What is the commonName_default extension called in the certificate? Im not generating with OpenSSL, but with a software called XCA Portable, xca.hohnstaedt.de