| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 8 months |
| seen | May 11 at 18:13 | |
| stats | profile views | 17 |
|
May 8 |
answered | Mail spam sending script injected |
|
Apr 11 |
comment |
Is it possible for a spammer to tamper with the received time of an email? Any of the timestamps or other headers that were added before it got to your trusted server (say gmail) might be forged. |
|
Apr 11 |
comment |
Is it possible for a spammer to tamper with the received time of an email? I disagree. I think the only headers you can trust are the ones put in by your MTA. The reason being that one can include all the headers they want in a session - for example I can connect to your mail server and submit a message with headers i forget on behalf of google, hotmail, the whitehouse, then back to google - the only thing that will be real is what your server records about the session [came from my IP at the time your server observed]. |
|
Apr 11 |
awarded | Custodian |
|
Apr 11 |
reviewed | Approve suggested edit on Is it possible for a spammer to tamper with the received time of an email? |
|
Apr 11 |
answered | Syncing Google Apps Directory Information to Mac Contacts over cardDAV |
|
Apr 11 |
answered | Is it possible for a spammer to tamper with the received time of an email? |
|
Sep 9 |
awarded | Yearling |
|
Jul 15 |
awarded | Peer Pressure |
|
Jul 14 |
comment |
Enforce sshd key algorithm I'm curious - why would you want to require the use of DSA (instead of say RSA or other options)? |
|
Jul 12 |
comment |
Setting up SSL with 389 Directory Server for LDAP authentication Are you saying it is not listening with TLS on 389? In any case the easiest way to ensure that your certs are setup right is to use a webbrowser (say firefox) to connect to the service... just point your web browser at host:636 ; if you get a successful connection (click to view the cert) that the SSL/TLS stuff is fine otherwise it is not. |
|
Jul 12 |
comment |
SSH proxy and MySQL on 3rd machine what is the -q0 in the proxycommand 'nc' call? |
|
Jul 11 |
answered | SSH proxy and MySQL on 3rd machine |
|
Jul 10 |
comment |
Setting up SSL with 389 Directory Server for LDAP authentication "389 side looks fine: server is answering with public certificate and proposing TLSv1" - that's a config problem. It should not be offering TLS on port 389. Port 389 is for ldap while 636 is for ldaps (ldap through TLS/SSL). Do you mean something by 389DS or is that just a way of writing ldap running on port 389? |
|
Jul 10 |
comment |
Setting up SSL with 389 Directory Server for LDAP authentication Isn't this guy on Fedora or something and certutil an MS proprietary tool? |
|
Jul 9 |
comment |
SSH proxy and MySQL on 3rd machine Where is the port forwarding from A to B? |
|
Jul 9 |
answered | Encrypt temporary password using public ssh key |
|
Jun 25 |
comment |
ISAPI filter with LDAP over SSL only works as administrator I imagine that the intermediate CA you had to add was already present in the other account as it had been seen before and was cached (as is typical in browsers). |
|
Jun 22 |
comment |
ISAPI filter with LDAP over SSL only works as administrator Is LDAP_SSL_PORT properly defined in all your scenario? |
|
Jun 22 |
comment |
SSL connection errors from Apache What country are you wgetting from? there is more than one IP or server for that domain name / web-server? What happens if you use openssl s_client -connect host:port -showcerts five times in a row do you get similar error messages to wget? Do you get the same errors each of the five runs? |