Why does the helmet only have padding on the inside? Padding on the inside makes it like a construction workers helmet that is meant to protect you from hard objects like girders and falling buckets of nails. Padding on the outside of the helmet would (slightly more) cushion the repeated sudden shocks that can damage the brain. The hard candy shell should be in the middle to distribute the shock over a larger area, which in football doesn't help much because that area is your braincase, but the shell will help the helmet keep its shape. Of course padding outside the helmet would also eliminate the loud hit sounds that the spectators enjoy and make the players look like little cream puffs that can't play rough. We should just give the players weapons and release lions during the game.

I remember installing Red Hat 5.x in the 90s and wondering how Linux should be pronounced. Linus had uploaded a mp3 of himself saying "it is pronounced Linux". I listened to it over a dozen times. I still do not know the correct pronunciation. On Mondays I call it "line-ex", on Tuesdays I call it "lyn-ex", on Wednesdays I call it "line-icks", and the rest of the week I call it "lyn-icks". I guess I don't really give a crap. I never liked the name Debian either. My brother named his daughter using the same method, merging his name and his wife's name. His daughter hates it. I wonder how Debian feels. Debian is probably happy it is not named "Devuan". I wouldn't even name my goldfish that, much less an a spoon or a fork.

Dear Hawkbug, I'm apologize for my fellow posters spewing forth knee-jerk postings. I have examined your situation and I must say I am puzzled. Your MX and rDNS records are all in order. The domain in question passes the generic email server tests. Your system can obviously communicate out via port 25 or you would not be getting deferred errors from servers and it does not "look like" it is being altered by any proxy. So... Comcast is not blocking your port, nor is your email server defunct. Everything seems in order. What can we conclude? You say the email server was working up until two weeks ago. What has changed? Either the servers offering up the deferred messages have implemented a new policy against you, or Comcast is altering your outgoing port 25 (to test the proxy/manipulation theory, find a friend who has an SMTP server and examine the SMTP logs). Whatever the case, it is something that has changed recently. Did you changed anything on the server? SMTP Banner? FQDN response? Any modifications to your DKIM or SPF? The "Deferred Errors" to me say greylisting. What would get you greylisted? Someone you sent an email to marked it as spam perhaps. Were any sent to the wrong person? Were any profane? Would anyone have mistakenly reported it as spam? Examine the emails you sent right before it stopped working, they may contain clues. My experience says follow the trail of "what changed when it stopped working." Good luck.

So they were attacked, on average, 8,149 times per second for a year? I thought my logs were bad. They should call that guy and tell him to stop!

That's the point. "Nothing exists" is a very old joke for more reasons than what you gracefully stated.

So, nothing does exist!

I can't get people to shut the dinky windows when I try to sleep on flights now. I hate those sleep masks. I hate flying and I am afraid of heights. For a few years now I joked about how they should make glass-bottom airplanes. I joked because it is ridiculous, just as this is.

Port 465 is for encrypted SMTP, and port 587 is for message submission. Port 25 is for server communications. No consumer grade line should allow outgoing port 25 unless you request to be white-listed and pass a technical competence test, you know, like knowing that non-business customers should not be using SMTP over port 25.

Uh, why not just block outgoing port 25? Do you have a reason for leaving it open to non-business customers?

As an IT security guy, I don't used my credit card at Target, Sears, Kmart, Walmart, Home Depot, or any of the large targets (no pun intended). I use cash at those places (and gas stations) because it is obvious they were employing on the cheap. Low paid employees+massive transactions=easy target. They are the low hanging fruit. I use my credit card at Newegg and my favorite small restaurant where I know the owner. At least if they get hacked I will get an apology. When I setup my customers/clients to accept credit cards, I fill out the mandatory PCI compliance form for them. What a joke! Half the time the never follow up, like they say they have to, and the form basically asks if you have antivirus on the computer. Can I get an audit please? Where does the tax money go?

Use fiber for everything, setup a pfsense box, set the switches to unmanaged, and use one collision domain. I suggest 10.0.0.0/8.

Not good enough. There are many:
0.0.0.0 ad.doubleclick.net
0.0.0.0 ad.uk.doubleclick.net
0.0.0.0 ad.n2434.doubleclick.net
0.0.0.0 doubleclick.net
0.0.0.0 a.doubleclick.net
0.0.0.0 b.doubleclick.net
0.0.0.0 c.doubleclick.net
0.0.0.0 d.doubleclick.net
0.0.0.0 e.doubleclick.net
0.0.0.0 h.doubleclick.net
0.0.0.0 i.doubleclick.net
0.0.0.0 j.doubleclick.net
0.0.0.0 k.doubleclick.net
0.0.0.0 l.doubleclick.net
0.0.0.0 m.doubleclick.net
0.0.0.0 n.doubleclick.net
0.0.0.0 o.doubleclick.net
0.0.0.0 p.doubleclick.net
0.0.0.0 q.doubleclick.net
0.0.0.0 r.doubleclick.net
0.0.0.0 s.doubleclick.net
0.0.0.0 ad.ar.doubleclick.net
etc...

I have been blocking doubleclick on the corporate firewall for years, and in every hosts file I come in contact with. No one ever complained, but now if they do, I have ammunition. If you serve up a web site, you should personally vouch for not only the product you are advertising, but the source of the advert as well. I blame Google for placing advertising dollars above their users (I know, they don't have users, they have sheep for fleecing).

Does EMET stop Tinba?

Why is anyone surprised about this? I've been reading articles for over a year about No-IP and the abuse that they seemingly allow. They say they are working hard to stop the malicious software plowing through their service, but obviously they are not working hard enough. No one contacted No-IP to tell them that their service was being used to spread malware?

Bullshit.

April 2013: http://labs.opendns.com/2013/0...

Sept 2013: No-IP is a preferred choice for other similar attacks for command and control infrastructure: http://threatpost.com/njw0rm-a...

Feb 2014: Even Cisco said their domains were being abusive and they posted to complain that Cisco didn't contact them. http://www.noip.com/blog/2014/...

Looks to me like they should have contacted Microsoft and asked them for help. I guess they waited too long.