37 reputation
6
bio website daniel-marschall.de
location Germany
age 27
visits member for 4 years
seen Jul 13 '12 at 4:49

May
1
awarded  Popular Question
Jul
13
awarded  Editor
Jun
13
awarded  Supporter
Jun
13
accepted Iptables: Block all countries except my own for specific port
Jun
13
comment Iptables: Block all countries except my own for specific port
Thank you very much for your edited verison. That seems to be a perfect example and template to build custom firewall rules. Btw, why did you comment "Drop rules to prevent them from entering the logs" for rules which excluded NetBIOS and SMB ports?
Jun
8
comment Iptables: Block all countries except my own for specific port
Thanks for your answer. So your script does allow IP "10.1.1.1" to access the ports 22,80,443,5666 . But what's the meaning of the rule for "10.2.2.2" at port 443? The problem is that I also want to serve a HTTP webserver, so the default rule for all ports may not the DROP, only for specific ports the default rule should be DROP.
Jun
8
asked Iptables: Block all countries except my own for specific port
Feb
27
comment Debian DNSSEC - howto secure a domain?
I meant "Respectively, which person/organisation do I have to ask to?"
Feb
27
awarded  Student
Feb
26
accepted Debian DNSSEC - howto secure a domain?
Feb
26
comment Debian DNSSEC - howto secure a domain?
Thank you very much for your answer. Now it is more clear to me. So, I have to wait until the DNS-Provider AND the registrar support this new technology (sigh). At the beginning, I was confused because many tutorials on the web actually described what to do if you are running an own DNS server. Now I see that there is actually no setup by your own necessary (except the copy of the DS RR).
Feb
26
comment Debian DNSSEC - howto secure a domain?
They said they will support it soon. Also I can switch the provider. My question is, to know what to do exactly WHEN it is available (without running an own DNS server).
Feb
26
asked Debian DNSSEC - howto secure a domain?
Mar
20
comment subversion: enforce TLS
Thanks. This worked. :-) Important is also to not forget the ServerName attribute resp. adding the location to the VirtualHost of the existing "htdocs" 443 VirtualHost.
Mar
20
awarded  Scholar
Mar
20
accepted subversion: enforce TLS
Mar
19
asked subversion: enforce TLS
Jan
6
awarded  Tumbleweed