861 reputation
37
bio website sarnold.org
location Lake Oswego, OR
age 36
visits member for 3 years, 9 months
seen Sep 18 at 17:49

Paranoid pragmatic security type; I helped develop the AppArmor mandatory access control system. If AppArmor isn't a good fit for your security requirements, please consider running TOMOYO, SMACK, or SELinux.

For more information about me, including an abridged book list, see my careers2.0 profile. Or if you're old-school and want to see all my LaTeX skills on display, my old-fashioned resume is also available.


Mar
21
awarded  Yearling
Sep
24
answered Linux Firewall & sharing files between computers in different subnets connected to single switch
Mar
21
awarded  Yearling
Nov
8
awarded  Critic
Jul
27
comment Name Based Virtual Hosts in Apache
Okay, good; that's unrelated. (It's a Unix domain socket, not a a TCP socket.)
Jul
27
comment Name Based Virtual Hosts in Apache
Does netstat -anp | grep 80 show any other processes currently bound to 0.0.0.0:80?
Jun
29
comment Socket(TCPIP) Unstable
Are the connections coming from the other side of a NAT firewall?
Jun
27
comment nginx not serving admin static files?
You forgot to include the relevant portions of your nginx configuration.
Jun
22
comment iptables - ruby on rails mailer problems
Hrm, only 14 views in 20 hours. I'll flag this for moderator attention to see if it can be migrated to Server Fault, they may be a better audience.
Jun
22
comment iptables - ruby on rails mailer problems
Somehow the connection has to be established in the first place, right?
Jun
22
comment iptables - ruby on rails mailer problems
You've only got state NEW on ssh and https in OUTPUT. Is this intentional?
May
13
comment SMTP server force outbound traffic
Does the machine have a local MTA? Or does PHP have to make an outgoing connection to some other SMTP system for sending mail?
May
2
comment Server being hit with quite a few requests per second
@kristovaher: in one terminal, I typed date but didn't yet hit enter; then I typed my web page URL into my browser, but didn't yet hit enter; then I swapped between the terminal and browser, hit enter twice quickly, and then scrolled the browser window down as images progressively loaded. At the end, I hit up-arrow enter in the terminal again. Seven seconds difference. I knew it wasn't going to be instant, and with 542 images, half a second here or there isn't going to change the fact that it is well above 50 per second. :) I wouldn't do this daily; date; wget --mirror; date might do...
May
2
comment Server being hit with quite a few requests per second
I just did a quick test on my own shared hosting account at he.net -- I've got a plan they no longer offer, so it's dirt cheap, on a shared machine with 4gigs RAM, dual-CPU Opteron. I got 75 images per second loading an index.html that loads 14 megabytes of 542 images. To my home. 50 per second ought to be doable on 1/10th the hardware, easily.
May
2
comment Server being hit with quite a few requests per second
50 per second sounds downright tame unless you're generating gigantic images on the fly... Why not static files? Can you perhaps locally cache the most frequently used images?
Mar
28
answered Disable remove pemission on linux
Mar
21
awarded  Yearling
Mar
5
comment Run commands in PHP with different user
@siXor: check /var/log/audit/audit.log or dmesg(1) for AppArmor DENIED messages.
Mar
5
comment Run commands in PHP with different user
Are you trying to run individual commands from within PHP scripts as different users or are you trying to execute the entire PHP scripts as different users?
Feb
1
comment Error when restarting Apache
What was line 9 of your configuration? What's the output of ldd /usr/local/apache/modules/libphp5.so? Did you recent change from a distribution-packaged MySQL to a self-compiled MySQL?