Reputation
765
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
1 8 17
Newest
 Yearling
Impact
~35k people reached

May
3
comment Postfix Postscreen: how to use postscreen for smtp and smtps both
@mailq I guess it was mostly a matter of time.. because I'm seeing an increase of these types of connections. I'm probably just going to disable smtps altogether, but if I could use postscreen that would be a nice option too.
Apr
5
comment What is the best webinterface to manage BIND?
Sorry, I can't resist responding to this. While PowerDNS is fine software, even now in 2014 it still does not provide many of the features that ISC BIND does provide. Sure, it's alright to have a personal preference towards PDNS, but labelling it as a "better alternative" to BIND might cause clue seekers to be disappointed later on, when the feature they require is unsupported, undocumented or even unwanted in PDNS.
Feb
14
comment How can I do traffic shaping in Linux by xen guests?
But this is not the question asked...
Oct
6
comment Varnish config rules to cache large MP3 and PDF files?
How do you do prewarming?
Sep
20
comment serving mp3s to mobile devices is flooding nginx with partial requests
I did. This came directly out of the logs, I only removed the IP address and referer.
Sep
20
comment serving mp3s to mobile devices is flooding nginx with partial requests
Yes, but we don't embed the files, we serve them via a 'DirectoryIndex'
Sep
20
comment serving mp3s to mobile devices is flooding nginx with partial requests
Good point, I forgot to tell you about the problem that did occur. I have added it to my question.
Jul
18
comment How can the little guys effectively learn and use Puppet?
Thank you for your suggestions, especially augeas and hiera are two components we have started to implement and this made us much more aware, even confident of Puppet's capabilities. So thanks :-)
May
17
comment Understanding NFS4 (Linux server)
This is about nfs4, which requires a "pseudo file system" i.e. a one tree file system hierarchy. Can you clarify what you mean, please?
May
7
comment How do I disable nginx sending messages to syslog?
On FreeBSD it's an option when you run 'make config.' Maybe that's what OP did. Just like I, which is why I found this post. :-)
Apr
22
comment Puppet: how to create and manage unix users and groups
But the question was about more than just managing users, it was about managing unix users with Puppet and grasping how to work with virtual declarations. So it's not an answer to my question but a valid point to put in the margins. I'm relatively new here but don't those belong in the comments rather than being posted as original answers?
Apr
22
comment Puppet: how to create and manage unix users and groups
Thanks. You're right about the first part, I did become overwhelmed. But your second answer helped, it seemed to set other thoughts in motion and now I have manifest that works properly, with virtually defined users that are being realised at their proper locations. Thanks for helping me with that. :)
Sep
10
comment Openvpn: iroute for all theoretically reachable [public] IPs
Ha, yes. The answers also contain a link to cidr-report.org/bogons/allocspace-prefix.txt and this seems to be exactly what I need. (I wonder if it can be made more compact.) Thank you!
Sep
10
comment Openvpn: iroute for all theoretically reachable [public] IPs
Yes, I understand your question. I am using this because the setup actually goes via two openvpn connections: one of the clients of the OpenVPN server must route these. That is why I have to use iroute. In your case, you could also choose to use 'push "redirect-gateway"' and, for clients you want to except from this, use 'push-reset'
Sep
10
comment Openvpn: iroute for all theoretically reachable [public] IPs
I should add two things. 1) I am using Linux. 2) OpenVPN has an internal routing table. So simply adding the routes into Linux' routing tables is not enough. Believe me, I tried.
Sep
5
comment Linux router - how to send icmp unreachable messages to LAN clients
Yes, I expected this. Thanks a lot for your answer.