2,316 reputation
924
bio website
location
age
visits member for 3 years, 5 months
seen Dec 22 at 23:36

Dec
22
comment Bypass primary DNS for one domain
Given the level of the question I figured it'd be best to be explicit, but alright then.
Dec
22
comment Bypass primary DNS for one domain
Could you specify that this will work if he doesn't add Google's DNS as a secondary? Since otherwise there's no guarantee which server will be used to resolve and it may not use the RPZ one.
Dec
22
comment Bypass primary DNS for one domain
Not only would this not work, it could also hide problems you may be having with your specific domain.
Dec
18
comment HTTPS posts to HTTP URL's insecure?
What do you mean? If you're sending a POST over HTTPS, how could it suddenly transform into HTTP? Where is this HTTP transfer taking place? Do you have a form with a HTTP target URL?
Dec
18
comment SSH tunneling is faster than OpenVPN, could it be?
blowfish is the default cipher shipping with nearly every OpenVPN install to date. If you think it is vulnerable, you should report it to their developers, but I suspect that's not the case.
Dec
18
comment SSH tunneling is faster than OpenVPN, could it be?
Did you try with blowfish cipher rather than AES?
Dec
9
comment Does a wildcard subdomain (*.example.com) in Apache config also include the root (example.com)?
Right away I don't see why a wildcard after a dot would match something that doesn't even have a dot in it. Why not try it? Then you can just answer the question and maybe get some rep out of it.
Dec
5
reviewed Approve How to capture ack or syn packets by Tcpdump?
Dec
5
reviewed Approve How can I audit a file to see who deleted it?
Dec
5
reviewed Approve Tomcat-workers: Session management without stickiness
Dec
5
reviewed Approve Tomcat-workers: Session management without stickiness
Dec
4
comment Tuning Linux TCP for large number of TIME_WAIT
What problem are you trying to solve?
Dec
4
comment Damage control - stolen laptop
shutdown /s /t 0
Dec
4
comment Varnish request throw HTTP 302 instead of 200
You do realize you've changed every domain name and shown no configs, right?
Dec
3
comment Port 53 in Amazon Security Group
What has Amazon told you about the matter?
Dec
3
revised How to isolate Google Gmail SMTP server IPs directly?
deleted 32 characters in body
Dec
2
comment How to block HTTP floods using IP tables and perm block the attacking IP?
Please don't do this. IP addresses do not map to individual human beings.
Dec
1
comment Iptables doesn't open port 53
@Sirex There's more than just the filter table with netfilter. Actually, iptables -L -n -v isn't that great either IMHO - It would be preferable to give the iptables-save output.
Nov
26
comment Why is fail2ban not banning this attack?
Can you please paste the output of iptables-save -c. And it's perfectly fine not to accept the answer if it didn't work - I wasn't 100% certain, it was just my best guess with the current info.
Nov
21
comment Why is fail2ban not banning this attack?
Ok. In the future, never remove such important information from your questions (and thanks for the edit afterwards)