Ubuntu

VirtualBox DHCP nameserver for NAT network

VirtualBox is a great environment for testing networking tools such as opDNS. However, I did not get the VirtualBox DHCP server for NAT network to provide nameserver information, even though the client asks for it. Here’s a simple solution to this problem.

March 7, 2015

Securing fetchmail with improved TLS parameters

fetchmail is the workhorse for downloading mail from legacy addresses. This does not mean that you want to be limited to legacy security for your passwords or mail contents. TLS Interposer helps upgrade security.

November 15, 2013

Upgrade ejabberd to the latest TLS security [UPDATE#2, 2014-06-05]

ejabberd is a very fine XMPP server. However, it has very few options to configure its SSL and TLS security settings away from the very weak OpenSSL defaults. The TLS Interposer makes securing TLS used by ejabberd a breeze.

November 14, 2013

Upgrading Apache 2.2 OpenSSL security with TLS Interposer

Undoubtedly, you will have heard about the weaknesses of old SSL and TLS protocol versions and ciphers. Web browsers have been updated; but the server administrators are left alone: For stability reasons, many run long-term support editions such as Ubuntu 12.04 LTS. Even without that, most will stick to the reliability of Apache 2.2, hesitant…

November 14, 2013

Eliminate BEAST, CRIME, Lucky13, RC4, SSLv3 weaknesses from binary/legacy applications

Security is hard. Security that works with a variety of platforms under a flurry of circumstances with an endless choice of applications is practically impossible. SSL and TLS, the Internet security workhorses, try to achieve this feat … and fail from time to time. While some software has been updated, not all of it has.…

November 14, 2013

Keep Time Machine backups from slowing down your server

Time Machine backups to a Linux machine running Netatalk is a very convenient way of safeguarding your data. However, the I/O load on the server machine can sometimes become very high. Here is a quick hack to improve this, if you need AppleTalk AFP services mostly for TimeMachine.

October 10, 2013

Ubuntu Apache update broke “Listen” command

[Updated 2013-07-28: Corrected “https” to “http” in Listen] After a recent Apache update, Apache 2.2.22 (on Ubuntu 12.04 LTS “precise”) the following message appeared in the Apache error log: [error] Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0)

July 23, 2013

Netfuture: The future is networked

Tag: Ubuntu