-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am 18.04.2014 21:18, schrieb Martin Papik: > On 04/18/2014 09:24 PM, Simon Lange wrote: > > yesterday i learned i have to give up control who is using his > > domain with my services. :/ > > Please explain, I'm not aware of such a requirement and if there is > such I would like to know about it so I can make informed decisions.
Ive been told that it is required to allow ALL incoming traffic to the IP of my keyserver for port 11371 no matter what hostname is requested. that would - of course - allow everyone on this planet to pinpoint his FQDN to my server using my service. usually i use hostname directives. e.g. keys.s-l-c.biz or keys.bundes.it or (.*)pool.sks-keyservers.net i prefer that because that way i can avoid that ppl use my services with their fqdn i dont like (like raccists facists and other bad ppl). i opened it temporaly so we are enlisted in the pool again. but in a couple of days i close that door again allowing ONLY those fqdm who did contact me before. so i got at least a minimum control who is using my services with their fqdn and who not. ;) in a couple of days the fqdn written above will work. others not. > > Thank you > > Martin best regards Simon - -- ________________________________________________________ Simon Lange Consulting - Gaudystr. 6 - DE-10437 Berlin Telefon: +49(0)30/89757206 Mobil: +49(0)151/22640160 - ----------------------------------------http://s-l-c.biz -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTUX7qAAoJELCfvQa91QO+bjEH/j+j1Y7EUXVNqkQrEi0QLOxt 6387q2q9LuC8c+Kpa4EgZJLB6Tpptedz31y+bq+hhN53qmoNy6a2mNV399MY0iDa Sx5khJ7gd5713vJCNlGuiyfK4Hz4NdoHZPMyVKu/2B9p1Od4LHehukGNmCAAQDS5 LyNRMlqy9cMXz+YijLrL5gvZ597YML1fbA3aTottCfbm2AJGXiSBxYvZiL/apJvl T24nDR60CndUEbsKp/O4IjZiBFQvZdVKjRxzik1ujx4ahUfcs1AFfWZrO6vORAlV xVqWJJDAWns5Pdi/VmevWDS7H6HIo/onQ8ZuLHqqA7HRnQiTDdFPJgEzRi/QxMw= =DV8h -----END PGP SIGNATURE----- _______________________________________________ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel