Wandering Thoughts archives

2016-08-01:	My new key binding hack for `xcape` and dmenu
2016-07-31:	I've become mostly indifferent to what language something is written in
2016-07-19:	How not to set up your DNS (part 23)
2016-07-17:	A good solution to our Unbound caching problem that sadly won't work
2016-07-16:	A caching and zone refresh problem with Unbound
2016-07-12:	How we do MIME attachment type logging with Exim
2016-07-10:	Some options for logging attachment information in an Exim environment
2016-07-09:	How Exim's `${run ...}` string expansion operator does quoting
2016-07-06:	Keeping around an index to the disk bays on our iSCSI backends
2016-07-01:	How backwards compatibility causes us pain with our IMAP servers
2016-06-29:	Modern DNS servers (especially resolvers) should have query logging
2016-06-26:	How not to maintain your DNS (part 22)
2016-06-24:	Our new plan for creating our periodic long term backups
2016-06-19:	A lesson to myself: know your emergency contact numbers
2016-06-11:	I accept that someday I'll give up MH and move to IMAP mail clients
2016-06-10:	An email mistake I've made as a long-term university sysadmin
2016-06-06:	I work in what is increasingly a pretty different sysadmin environment
2016-05-23:	How fast fileserver failover could matter to us
2016-05-16:	Discovering my personal limit on how much I care about security
2016-05-11:	We're never going to be able to have everyone use two factor authentication
2016-04-30:	I should keep and check notes even on my own little problems
2016-04-20:	How to get Unbound to selectively add or override DNS records
2016-04-15:	Unbound illustrates the Unix manpage mistake with its ratelimits documentation
2016-04-12:	There's a spectrum of 'pets versus cattle' in servers
2016-04-04:	The three types of challenges that Let's Encrypt currently supports
2016-04-03:	Let's Encrypt certificates can be used for more than HTTPS
2016-03-31:	My initial experience of using NSD as a simple authoritative DNS server
2016-03-28:	Why I don't think upgrading servers would save us much power
2016-03-25:	There's a relationship between server utilization and server lifetime
2016-03-23:	How old our servers are (as of 2016)
2016-03-03:	My views on clients for Lets Encrypt
2016-03-02:	Some notes on OpenSSH's optional hostname canonicalization
2016-02-27:	Sometimes brute force is the answer, Samba edition
2016-02-20:	My two usage cases for Let's Encrypt certificates
2016-02-19:	We can't use Let's Encrypt on our production systems right now
2016-02-11:	My current views on using OpenSSH with CA-based host and user authentication
2016-02-06:	You can have many matching stanzas in your `ssh_config`
2016-01-31:	The tradeoffs of having `ssh-agent` hold all of your SSH keys
2016-01-30:	Some good practices for handling OpenSSH keypairs
2016-01-29:	What SSH identities will be offered to a remote server and when
2016-01-26:	Low level issues can have quite odd high level symptoms (again)
2016-01-18:	Today I learned that a syslog server can be very silent on the network A limitation of `tcpdump` is that you can't tell in from out
2016-01-17:	My theory on how network loop caused the problem we observed
2016-01-15:	Network loops can have weird effects (at least sometimes)
2016-01-13:	What I want out of backups for my home machine (in the abstract) Your system's performance is generally built up in layers
2016-01-04:	How I do per-address blocklists with Exim

(Previous year)

By month for 2016: Jan Feb Mar Apr May Jun Jul Aug; before 2016.