523 reputation
212
bio website michael.kjorling.se
location
age
visits member for 3 years, 5 months
seen yesterday

2d
comment Cannot access / on server
Try adding DirectoryIndex index.pl to the VirtualHost container.
Apr
10
comment ZFS RAID and LUKS encryption in Linux
"If you need crypto, you should use the ZFS cryptography instead." Which ZFS implementations that run on Linux implement ZFS encryption?
Apr
9
comment Heartbleed: What is it and what are options to mitigate it?
I'd suggest restarting the host after updating OpenSSL, not because it is strictly necessary but for peace of mind that at least everything that loads the OpenSSL libraries dynamically is using the new version. (Statically linked is another matter.) That said, I recognize that some servers can't easily be rebooted in all situations where a service restart might be acceptable.
Apr
8
comment Do I Need to Replace Keys for OpenSSH in Response to Heartbleed?
Your first and third paragraphs seem contradictory.
Apr
8
comment Heartbleed: What is it and what are options to mitigate it?
If you're getting updates from wheezy/security then you'll be good with apt-get update && apt-get upgrade. Or, use an interactive package manager to only update the packages openssl, libssl1.0.0, libssl1.0.0-dbg and libssl-dev (as installed on your system).
Mar
13
comment How to configure fail2ban for constant refreshes
Expanding on @Brian's comment, there's no reason why e.g. ping (ICMP echo request) floods would show up in your web server's logs, so you'd just configure fail2ban to look for (at) one but not the other. There's really nothing more to it than that.
Mar
11
comment Do snapshots + RAID count as a good on-site backup solution?
Assuming btrfs snapshots are anything like ZFS snapshots in terms of consistency guarantees (and with how much inspiration btrfs draws from ZFS, I don't see why that would not be the case), the snapshot will represent the on-disk moment-in-time data. So the file system will be in a consistent state if you roll back to a snapshot, but if data is kept in RAM and only flushed periodically and that data is needed to make sense of what's on disk (c.f. database server software) then those particular files will very likely be in an inconsistent state after (or before!) the rollback.
Feb
13
awarded  Custodian
Feb
13
comment Raid partitions not listed in /dev
What does /proc/mdstat say?
Feb
13
reviewed No Action Needed Remotely running a program
Feb
12
comment Thousands of robots.txt 404 errors from bots trying to crawl old multisite
@Beatchef I have no idea. You'll have to ask them.
Feb
12
answered Thousands of robots.txt 404 errors from bots trying to crawl old multisite
Feb
12
comment Thousands of robots.txt 404 errors from bots trying to crawl old multisite
What sort of redirect are you using? Specifically, are you using HTTP response code 301, 302, 303 or 307? (See RFC 2616 section 10.3 and subsections.) For the use case you are describing, only HTTP/1.1 301 Moved Permanently should be used; 302 (which is very often used for redirects), 303, 304 and 307 are explicitly termed as temporary redirects and UAs are explicitly prohibited from storing the redirected-to location; 300, 305 and 306 are not applicable.
Dec
30
comment iptables error: unknown option --dport
Additionally, it must specify a protocol that has the concept of ports, as @FalconMomot pointed out in a comment earlier.
Dec
30
comment Setting Bind9 DNS Server on CentOS 5.9
Related: Clarification of why DNS zone files require NS records
Dec
30
comment Is there a Linux/Ubuntu tool to measure total writes performed to SSD
ATA-6 48-bit LBA (introduced in 2003) allows addressing up to 128 PiB of disk locations through a 48-bit LBA address. Calculating 128*2^50 / 2^48 yields 512, indicating that disk-level addressing is done in 512-byte chunks. (2^50 / 2^48 = 2^(50-48) = 2^2, 128 * 2^2 = 512.)
Dec
24
awarded  Excavator
Dec
24
revised Why is RAID not a backup?
Link is dead; provide an alternative
Dec
24
suggested suggested edit on Why is RAID not a backup?
Dec
24
comment Why is RAID not a backup?
This isn't really an issue with RAID, though. Well, the "same use patterns" might be exacerbated by RAID, but multiple drives exposed to the same conditions isn't a function of RAID.