Most active questions
73 questions from the last 30 days
Score of 5
1 answer
913 views
Does any CA still issue certificates compatible with Starfield Class 2 Certification Authority?
I have a fleet of legacy IoT devices that trust only the root certificate:
Starfield Class 2 Certification Authority
I need to host a temporary HTTPS endpoint for a one-time firmware update, but the ...
Score of 5
3 answers
556 views
What are the names of the various parts of a SMTP `Received:` header?
In this SMTP Received: header:
Received: from mail.dgfip.finances.gouv.fr (bdmprod002-1.dgfip.finances.gouv.fr. [145.242.11.193]) by ... (truncation mine),
there are two "FQDNs" (maybe am I ...
Score of 7
1 answer
289 views
VLAN not working anymore, Debian 13
The server is running the latest version of Debian 13. It has an Intel X540-AT2 10Gbps network adapter. The server is not running systemd-networkd or networkmanager. I have had a VLAN working on this ...
Score of 1
2 answers
210 views
How workaround SPF - Too many included lookups
I'm having a problem with my SPF. Looking in mxtoolbox.com for my SPF record, I get the error Too many included lookups. I should have to remove some of my 'include' options or try to flatten some of ...
Score of 1
5 answers
238 views
SPF hardening - can I remove mx/ip6/ip4 and go DKIM-only?
I am wondering how feasible it is to send email with a DKIM-only setup, with an SPF record of v=spf1 -all.
If my DMARC policy requires DKIM alignment then recipients who understand DMARC will still ...
Score of 5
1 answer
131 views
Debian CIS - partition or multiple EBS on EC2
I'm currently going through each CIS checks to create an hardened Debian 13 AMI on AWS to launch EC2 instances. Rules from 1.1.2.1.1 to 1.1.2.7.4 are about configuring filesystem partitions. I don't ...
Score of 1
1 answer
117 views
Apache web server: Is it possible to pass arguments to ScriptAlias scripts?
Due to various environmental complexities which are not relevant to the question, I need to launch PHP via a batch file (Windows) and so have set up a ScriptAlias, which looks something like this:
...
Score of 2
2 answers
171 views
Moved WordPress site to Windows Server 2022 using direct method for updates
I'm moving a bunch of WordPress sites from Linux to Windows Server 2022. The sites are functioning just fine but I'm getting:
"Some files are not writable by WordPress:
xmlrpc.php
wp-blog-header....
Score of 0
2 answers
113 views
AI bots crawling servers in the last months, what is the best tool or approach to counter?
Since February 2026, I am seeing huge spikes in (Spain located) Internet accesible servers (nginx, apache, tomcat) due to AI bots crawling for content.
Is there a recommended way to address this?
I am ...
Score of 2
2 answers
111 views
Linux nft firewall: overlapping set elements
I have a question regarding overlapping elements in nft firewall sets. Let's have a set:
table ip filter {
set iponly {
type iface_index . ipv4_addr
flags ...
Score of 0
1 answer
227 views
PowerMTA: Yahoo/AOL TSS04 and TSS05 on Freshly Warmed IPs Since Last 2 Days – Anyone Else Seeing This?
We are using PowerMTA and have recently warmed up new IPs. During the last 2 days, Yahoo/AOL has been returning TSS04 and TSS05 temporary deferrals even on the first emails sent from these IPs.
...
Score of 0
0 answers
169 views
Group Policy for Windows Taskbar settings
I need to use Group Policy to modify: Settings > Personalisation > Taskbar > Show the app with a badge notification when Resume is available
Is this possible?
If so, where can I find it in ...
Score of 1
2 answers
136 views
How to run an SSH server in Docker and on the host machine on the same port?
I want to run a Git server in Docker, and have a regular SSH server on the host, with both sharing the same port.
The Git server uses git@ip while the SSH server uses user@ip.
Is it possible to bounce ...
Score of 2
1 answer
226 views
Windows client doesn't use server-side content search when searching index share on Windows Server
A Windows server has the Indexing service active, and is indexing some folder (and subfolders) that are exposed as a file share. You can use File Explorer to search for content in the shared folders ...
Score of 0
1 answer
84 views
Use cases for bluestore_dio = false in Ceph
What are sensible use cases for the bluestore_dio = false in Ceph 19?
I already know that it activates RAM cache instead of writing new data directly into mass storage.
I would like to accelerate bulk ...