You know 'security questions'; they are the extra questions thatwebsites (and other services) attach to your account that willtheoretically let you regain access to the account if you forget yourpassword. I really don't like them, and it's not because they are aterrible security idea. Well, not directly.

Hopefully everyone already knows the primary problem with securityquestions: if you pick questions and answers that you can remember, it'squite likely that an attacker can work out the answers

One of the things that you usually want to do with MTAs is have somelimit on how many things that they'll try to do at once. This isespecially important if, like us, you allow users to run programs fromtheir .forward s; people do every so often have runaway programs, orjust programs that sit there endlessly (trying to get a lockfile, forexample).

Unfortunately, Exim only has limited support for load limiting. Whatyou really want to do is limit the number of

Back in DualIdentityIsolation , I described how I set up a dualidentity machine so that it had isolatedinterfaces . In it I wrote:

Alas, I am now left with a mystery: according to the policy routingrules, it looks like a packet from IP1 to an address on that subnetshould get routed via the gateway (and similarly for the othernetworks), [....]

You know what? I should have paid more attention to the mystery,because as it turns out such packets were