very helpful answer from ServerFault