Server Fault Weekly Newsletter
Server Fault Weekly Newsletter

Top new questions this week:

Is it valid for a hostname to start with a digit?

Is it valid for a hostname to start with a digit? e.g. 8server From reading RFC 1123 it would appear that this is a valid hostname. However, I'm not clear on whether a hostname can only start with a ...

asked by Mark 25 votes
answered by Xavier Lucas 16 votes

Poodle: Is disabling SSL V3 on server really a solution?

I've been reading all day about the Poodle vulnerability and it I am bit confused now vs Security and Revenue. If I disable SSL V3 on Server (SSL V2 and V3 both will be disabled for Apache) clients ...

linux ssl poodle  
asked by sandeep.s85 20 votes
answered by Bob 24 votes

Is it possible to have sshd accept passwords only on certain ports?

I know it's possible to have sshd listen on multiple ports by using multiple Port directives. Is it possible to independently adjust the settings per port, however? In particular, is it possible to ...

asked by Laurence Gonsalves 19 votes
answered by Laurence Gonsalves 27 votes

On IIS, how do I patch the SSL 3.0 POODLE vulnerability (CVE­-2014­-3566)?

How do I patch CVE­-2014­-3566 on a Windows Server 2012 system running IIS? Is there a patch in Windows Update, or do I have to do a registry change to disable SSL 3.0?

windows iis ssl  
asked by Eric Lathrop 12 votes
answered by Evan Anderson 21 votes

How to mitigate POODLE but keep SSLv3 support for old clients

How do I mitigate the POODLE attack, but still keep support for old clients such as IE6 on Windows XP or an e-mail client. I've noticed that google does this: ...

nginx ssl poodle  
asked by cypres 12 votes
answered by cypres 13 votes

How can I tell if my website is vulnerable to CVE-2014-3566 (POODLE)?

Google announced a vulnerability in the SSLv3 protocol that ... allows the plaintext of secure connections to be calculated by a network attacker. This vulnerability has been given the ...

security https  
asked by Jason Owen 10 votes
answered by Jason Owen 12 votes

Protecting against POODLE SSL on stunnel

How can I mitigate POODLE SSL vulnerability when using stunnel as HTTPS reverse proxy?

ssl openssl stunnel  
asked by Sergey 9 votes
answered by Sergey 14 votes

Greatest hits from previous weeks:

What port does SFTP use?

Does SFTP use port 21 or port 22?

asked by Daniel 69 votes
answered by Jeremy Bouse 112 votes

MySQL: Bind to more than one IP address?

Is there a secret way to bind MySQL to more than one IP address? As far as I can see the bind-address parameter in the my.cnf does not support more than one IP and you can't have it more than once.

linux mysql ip config  
asked by BlaM 112 votes
answered by Christian Lescuyer 109 votes

Can you answer these?

DHCPD does not allow filename option with a colon in it

For some reason, tftpboot does not work with a colon in filename parameter: group { filename "node7:linux/pxelinux.0"; host machine_7a { hardware ethernet 02:01:02:02:01:11; ...

dhcp-server isc-dhcp dhcpd  
asked by Amumu 2 votes

Exchange 2013 OWA White Screen Out of the Blue

The OWA for my Exchange 2013 has been working fine up until today, now I get a white screen when I login. The ECP side works fine. I have restarted the app pool, the default web site, even the ...

exchange exchange-2013 owa  
asked by box86rowh 2 votes

How to determine domain controller used for authentication

I run several web sites using IIS on both Windows Server 2003 and Windows Server 2008. These web sites use windows authentication with only the NTLM option specified (no Kerberos). These servers are ...

windows-server-2008 active-directory windows-server-2003 iis  
asked by GemCer 3 votes
Subscribe to more Stack Exchange newsletters

Unsubscribe from this newsletter or change your email preferences by visiting your subscriptions page on

Questions? Comments? Let us know on our feedback site. If you no longer want to receive mail from Stack Exchange, unsubscribe from all emails.

Stack Exchange, Inc. 110 William St, 28th Floor, NY NY 10038 <3