postfix--- via Postfix-users wrote in
<abbe7ca0815a0bf26bb4f987f62a3...@ptld.com>:
|>> Is it worth it?
|>
|> It's easy to do, but I recommend ... have the web server return a \
|> redirect
|> (302 status)
|
|If running Apache it's even easier. Point the DNS. Add the non-www name in
(I thought he just tried that renault.de stuff i had posted,
because that cloudflare managed thing does just exactly that
(akamai ones ditto)). Likely because of having the possibility to
use the plain name for other services too. But it is kind of
absurd in that a truly orchestrated attack can very well be driven
against the one or two "real" A (and/or AAAA) addresses even
though the server behind only redirects; it kinda contradicts the
myriads of managed address redirection service things of
cloudflare / akamai, which all is at least what i thought when
i stumbled upon all that.)
|the host/vhost file.
|
| <VirtualHost *:80>
| ServerName www.postfix.org
| ServerAlias postfix.org
| ...
| </VirtualHost>
|
| <VirtualHost *:443>
| ServerName www.postfix.org
| ServerAlias postfix.org
| ...
| </VirtualHost>
|
|And like Victor said, add the domain root to the SSL cert.
|This is all less than 5 minutes of banging on the keyboard.
dehydrated/lighttpd is even easier, i only have
$HTTP["host"] =~ "^(www\.)?sdaoden\.eu" {
...
--steffen
|
|Der Kragenbaer, The moon bear,
|der holt sich munter he cheerfully and one by one
|einen nach dem anderen runter wa.ks himself off
|(By Robert Gernhardt)
|
|And in Fall, feel "The Dropbear Bard"s ball(s).
|
|The banded bear
|without a care,
|Banged on himself fore'er and e'er
|
|Farewell, dear collar bear
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
