http://blog.gmane.org/gmane.linux.gentoo.server hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://comments.gmane.org/gmane.linux.gentoo.server/5848 <pre>Hello, I'm running a postfix mail filtering gateway in a hardened gentoo box and I really don't know what to do with double-bounced messages. Since we have a lot of spam bots attacking our infrastructure, the double bounce messages cannot be ignored and mail mail queue is growing with undeliverable double bounce messages. Any thoughts on what should be done to handle this? Thanks in advance, Vinícius Ferrão </pre> Vinícius Ferrão 2012-05-14T16:38:52 http://comments.gmane.org/gmane.linux.gentoo.server/5840 <pre>Hello list, I just want to know, what is your recommendation(s) to implement Active Directory authentication on Gentoo? I want to use AD not only for logins, but also for running daemons/services. *Ideally*, it would also allow me to manage my boxen using GPO, but I can live without that. Rgds, </pre> Pandu Poluan 2012-05-11T03:36:08 http://comments.gmane.org/gmane.linux.gentoo.server/5831 <pre>What's recommended for MySQL backups these days ? I've been using zmanda, which I found very easy to install and use, but it doesn't seem to be in portage anymore ? Thanks, Gerry Smith </pre> Gerry Smith 2012-04-15T17:56:05 http://comments.gmane.org/gmane.linux.gentoo.server/5816 <pre>Hello, Stuck with starting DomU. :( I've compiled bzImage with Xen frontend drivers, modules, installed them, added some extra parameters about console -------------------------------------------------- kernel = "/etc/xen/DomU-kernels/kernel-3.2.12-domU" memory = 1024 name = "vm0" disk = ['phy:/dev/vg01/vm0,xvda,w'] root = '/dev/xvda ro' extra = 'xencons=tty' vif = ['vifname=veth1, bridge=xenbr0'] vcpus=2 -------------------------------------------------- then started DomU with: # xl create /etc/xen/vm0 -c and console output freezes somewhere after: -------------------------------------------------- device-mapper: ioctl: 4.22.0-ioctl (2011-10-19) initialised: dm-devel&lt; at &gt;redhat.com TCP cubic registered blkfront: xvda: flush diskcache: enabled xvda: unknown partition table -------------------------------------------------- What am i doing wrong? ;) P.S.: Also before that I got some not critical errors. I guess it related to RTC or HPET somehow. Is it a big problem for DomU system? -------------------------------------------------- PCI: System does not support PCI PCI: System does not support PCI Switching to clocksource xen CE: xen increased min_delta_ns to 150000 nsec CE: xen increased min_delta_ns to 225000 nsec CE: xen increased min_delta_ns to 337500 nsec CE: xen increased min_delta_ns to 506250 nsec CE: xen increased min_delta_ns to 759375 nsec CE: xen increased min_delta_ns to 1139062 nsec CE: xen increased min_delta_ns to 1708593 nsec CE: xen increased min_delta_ns to 2562889 nsec CE: xen increased min_delta_ns to 3844333 nsec CE: xen increased min_delta_ns to 5766499 nsec CE: xen increased min_delta_ns to 8649748 nsec CE: xen increased min_delta_ns to 10000000 nsec CE: Reprogramming failure. Giving up CE: Reprogramming failure. Giving up hrtimer: interrupt took 5163 ns CE: xen increased min_delta_ns to 150000 nsec CE: xen increased min_delta_ns to 225000 nsec CE: xen increased min_delta_ns to 337500 nsec CE: xen increased min_delta_ns to 506250 nsec CE: xen increased min_delta_ns to 759375 nsec CE: xen increased min_delta_ns to 1139062 nsec CE: xen increased min_delta_ns to 1708593 nsec CE: xen increased min_delta_ns to 2562889 nsec CE: xen increased min_delta_ns to 3844333 nsec CE: xen increased min_delta_ns to 5766499 nsec CE: xen increased min_delta_ns to 8649748 nsec CE: xen increased min_delta_ns to 10000000 nsec CE: Reprogramming failure. Giving up CE: Reprogramming failure. Giving up CE: Reprogramming failure. Giving up pnp: PnP ACPI: disabled -------------------------------------------------- </pre> Konstantin 2012-04-12T07:53:16 http://comments.gmane.org/gmane.linux.gentoo.server/5802 <pre>Hello fellas, I'm considering to implement some Gentoo Servers on top of VMWare vSphere ESXi. But perhaps this is not the best option. I was googling about performance issues in this scenario and started to consider some OS-Level VT, like OpenVZ or Linux-vserver, or whatever else. So I'm here to ask some opinions about virtualization. My restricted set of rules (LOL): 1. I will not run anything else than Linux. 2. I don't care about GPL, BSD, Icecream, Bacon, or whatever license, since it's free, it's fine. 3. Don't need to be an Opensource solution. Thanks for any help, </pre> Vinícius Ferrão 2012-04-08T17:47:24 http://comments.gmane.org/gmane.linux.gentoo.server/5791 <pre>Hi all, Would anyone here be interested in being paid to create a hardened VM image for me that will run on a Microsoft Hyper-V host? If so, what would you be willing to do this for? If you may be interested, but not for Hyper-V, what would you recommend for a VM hypervisor that must run both a gentoo VM and one or two Microsoft Server VM(s) (no option there for this client)? Feel free to email me directly... I may also be interested in an ongoing relationship to support the VM infrastructure (only the VM infra) until I get more familiar and comfortable with it, so if you are interested in that too, let me know... Thanks Charles </pre> Tanstaafl 2012-03-04T16:48:01 http://comments.gmane.org/gmane.linux.gentoo.server/5787 <pre>Hi peeps, I would like to know if someone successfully implemented a Local CA to sign services and servers using Gentoo or other Linux. I'm currently in a Mixed Environment (we have: Windows 2008R2, OS X Lion, Linux and FreeBSD), and I really want a single solution, since I need certs for my servers, as example: a Postfix Mail Gateway, a W2k8 Domain Controller, Exchange Server, Mac OS X Time Machine Server, etc. Thanks in advance, Vinícius</pre> Vinícius Ferrão 2012-02-10T01:03:33 http://comments.gmane.org/gmane.linux.gentoo.server/5786 <pre>Hello ppl, I've implemented a postfix mail filtering gateway and I have an stupid question. How can I check if my before-queue filtering through amavisd-new is working correctly? I can see the spam handled correctly, but I always see proxy-accept in logs. Is this correct? As example: Feb 1 14:50:23 ironforge postfix/smtpd[25299]: proxy-accept: END-OF-MESSAGE: 250 2.7.0 Ok, discarded, id=25810-05 - spam; from=&lt;atendimento&lt; at &gt;imailing.com.br&gt; to=&lt;lolcat&lt; at &gt;autolol.com&gt; proto=SMTP helo=&lt;smtp6.hospedagem-de-site.info&gt; Feb 1 14:50:23 ironforge postfix/smtpd[25299]: proxy-accept: END-OF-MESSAGE: 250 2.7.0 Ok, discarded, id=25810-05 - spam; from=&lt;atendimento&lt; at &gt;imailing.com.br&gt; to=&lt;lolcat&lt; at &gt;autolol.com&gt; proto=SMTP helo=&lt;smtp6.hospedagem-de-site.info&gt; Feb 1 14:50:50 ironforge postfix/smtpd[25353]: proxy-accept: END-OF-MESSAGE: 250 2.7.0 Ok, discarded, id=25810-06 - spam; from=&lt;dixsaude&lt; at &gt;host20.anuncioforte.com.br&gt; to=&lt;lolcat&lt; at &gt;autolol.com&gt; proto=ESMTP helo=&lt;host20.anuncioforte.com.br&gt; A proxy-reject error should not be more reasonable? Thanks in advance, Vinícius Ferrão</pre> Vinícius Ferrão 2012-02-01T19:10:03 http://comments.gmane.org/gmane.linux.gentoo.server/5774 <pre>My boss, being the... uh, cost-controlling person that he is, asked me if there's an open source alternative for Exchange. Specifically, he's looking for something that allows him to share his Outlook calendar with the corporate secretaries. Anyone knows what alternatives are available out there? Needless to say (but I'll say it anyway), my preferences would be: something stable in portage tree, something unstable (but not masked) in portage tree, something stable in some overlay tree. Rgds, </pre> Pandu Poluan 2011-12-12T02:18:44 http://comments.gmane.org/gmane.linux.gentoo.server/5768 <pre>Okay, I promise this will be the last question re: "add-ons choice" for Postfix :-P I've installed Postfix, activated Postscreen on the world-facing "smtp" port, turned on TLS and SASL on the "submission" port... ... and now I come to the final steps of my installation saga: Integrating SpamAssassin into PostFix. Gentoo is wonderful. It gave us lots of choice. And the *huge* amount of choice is currently overwhelming me. So, I again implore on your admirable experiences in integrating SpamAssassin with PostFix: What method to use? * spamd ? * spampd ? * SA + Amavisd-new as after-queue content filter? * SA + Amavisd-new as before-queue smtpd_proxy filter? * SA + Amavisd-new + Amavis-milter? * SA + MIMEDefang? ... * Other? Thank you very much in advance. Rgds, </pre> Pandu Poluan 2011-12-09T12:05:45 http://comments.gmane.org/gmane.linux.gentoo.server/5767 <pre>The pieces are falling into place, now one final touch : Most howto's I found use alterMIME to add disclaimer to outgoing messages. Is it the only game in town? And if not, what other packages can give me the same functionality? TIA Rgds, </pre> Pandu Poluan 2011-12-04T09:05:24 http://comments.gmane.org/gmane.linux.gentoo.server/5734 <pre>So, here I am preparing to build a mailfiltering gateway, when I run into a dilemma: Mailscanner or amavisd-new? Any thoughts, suggestions, experiences? Rgds, </pre> Pandu Poluan 2011-11-28T06:02:43 http://comments.gmane.org/gmane.linux.gentoo.server/5730 <pre>I'm going to setup a mailfiltering gateway for my company use. After some careful considerations, I decided to use PostgreSQL instead of MySQL. Unfortunately, the only available mailfiltering gateway guide I can find uses MySQL [http://www.gentoo.org/doc/en/mailfilter-guide.xml]. In addition, I also don't need ClamAV. Just postfix + amavisd-new + spamassassin + postgrey. With a PostgreSQL back-end. Can someone point me to resources to implement the mailfiltering gateway? Resources I have found up to now: * http://www.ijs.si/software/amavisd/README.sql.txt * http://www.ijs.si/software/amavisd/README.sql-pg.txt * http://www.tuxj0b.de/HOWTO_Mailserver_mit_Postfix_Dovecot_Antispam_und_PostgreSQL_Backend (I'll need to translate this first; it's in German) * http://www.lxtreme.nl/index.pl/docs/linux/dovecot_postfix_pam (but I'll ignore the Dovecot parts) * http://en.gentoo-wiki.com/wiki/Complete_Virtual_Mail_Server/White_and_Black_Lists Any other good resources? Plus, any gotchas I should be aware of? Rgds, </pre> Pandu Poluan 2011-11-25T06:37:30 http://comments.gmane.org/gmane.linux.gentoo.server/5716 <pre>Hello all, I'm in need of some suggestions. You see, I have 2 Internet connections with public IP addresses, let's say ISP A 11.22.33.44 and ISP B 22.33.44.66 Now, I want outside parties trying to connect to "target.example.com" by default resolves to 11.22.33.44, but if ISP A's connection goes down for any reason, the DNS server will instead return "22.33.44.66". The nameserver itself will be located in the company, accessible from the world via "ns1.example.com" = 11.22.33.44:53 or "ns2.example.com" = 22.33.44.66:53. This allows the nameserver to monitor the state of the connections to ISP A and ISP B. I've been perusing pages discussing BIND, and came to the conclusion that BIND is incapable of doing that. Anyone can recommend me a DNS server that has such capability? Or how to implement this ability with maybe Python or (*shivers*) Perl? Rgds, </pre> Pandu Poluan 2011-11-21T09:52:09 http://comments.gmane.org/gmane.linux.gentoo.server/5710 <pre>I want to know if I can configure virtual users in postfix, yet still have postfix perform mail relay? To illustrate: I want postfix to reject all RCPT TO whose destination address is not part of a list, but if the destination address *is* part of the list, postfix should relay the mail to a final destination server. Rgds, </pre> Pandu Poluan 2011-11-16T06:39:30 http://comments.gmane.org/gmane.linux.gentoo.server/5695 <pre>Hi all! Long live the gentoo masters! I'd like to hear from anybody who uses (or tried) git on production servers for saving the points of possible restore. Please, share your practices, like commit patterns, .gitignore contents, etc. I've begun to use it a couple of days ago for that, and pointed out some issues. I control the whole root fs with git. The problematic part is bunch of files that update frequently, but i am not familiar with them and i'm not sure if system will load without them. Namely, these are files in /usr/lib64/portage/pym/ Also wtmp, utmp files hurt - likely without them box won't boot, but they shouldn't be in git control, too, coz they update often. Thus, backup restoring requires not git repo only, but also some tar of base? </pre> Andrey Utkin 2011-11-01T21:16:27 http://comments.gmane.org/gmane.linux.gentoo.server/5684 <pre>Hello dudes, First sorry any english mistakes, since it's not my native language. And sorry about the long text. I'm planning a complete migration and restructuration of our servers. I was not planning to use Gentoo, since our legacy use the "Red Hat Terrorism" and many users are skeptical about other Linux distros. But with Scientific Linux (another RHEL clone), I was unable to set features like Active Directory Authentication through Samba and Winbind because RHEL5 uses Samba 3.0 (old and deprecated) and the AD Server is running at Windows 2008 R2, and no, since it's a new installation I don't want to use old software. So if I need to recompile almost every package from the source I will use Gentoo. Let-me explain my actual environment and what I want to be with the new approach. Running: Router / Firewall: Heavily loaded iptables with a lot of rules and deprecated gated binary for routes and RIP. Mail Server: obsolete Sendmail as MTA with Dovecot for IMAP. DNS Server: named running in Scientific Linux 5. VPN Server: gentoo running poptop PPTPd. Radius: FreeBSD 7.2 with FreeRADIUS 1.1.7 Generic Server 1: Scientific Linux 5 with secondary named (DNS), DHCP server, netatalk (compiled from source with all dependencies), broken SMB, broken CUPS, another poptop server, LAMP, NIS Server, NFS Server, WebDAV Server. Generic Server 2: SSH entrance with Scientific Linux 5, NIS Client. Generic Server 3: Mailman, Webmail (with SquirrelMail and Horde IMP), LAMP and once again: Scientific Linux 5. Generic Server 4: Time Server, LAMP Server, SVN Server, Nagios and Cacti Servers. SL5. We have a most mixed software and hardware environment, with obsolete hardware. Like Pentium's 3, Pentium's 4, Athlon MP and XP. Some machines are from 2008 with Core 2 Duo or Pentium Dual-Core (the same Core 2 core with reduced L2). About the problems? Various: heavy loaded mail server due limitations of Sendmail (1GB plain text files for example), old software thanks to RHEL approach, aging hardware, no single-sing on solution, no Windows control, indiscriminate printer usage, ridiculous approach with WPA2 Enterprise due limitations of FreeRADIUS 1; and a lot of problems. What I want to do: Directory Server with Active Directory Domain Services; it's implemented and running. So it can serve: Microsoft's LDAP, AD, DNS, Time Server. Mail Server: Exchange Server 2010 SP1. To be implemented, I don't even have the hardware for it. Linux Authentication Machine: I've done some tests and it's working to authenticate through AD, so my getent function works, people can authenticate with SSH and Samba/Winbind takes control of UID and GID mappings. It's really awesome. FreeRADIUS 2 is already installed and working with NTLM_AUTH. So I finally get the "single-sing on approach". What's missing: OpenLDAP replication from AD? Is this possible? Is this needed? Since I want another machines (running Linux) to authenticate it will be a good idea only ONE machine get information from AD and everyone else authenticate natively on this Gentoo Machine. What's wrong: Not running a hardened profile. And I think this necessary. But I need to use genkernel to have easy hardware migration if something went wrong. And about the Generic Servers: Put Gentoo on it. With better defined services, such: Routing Services (Route, DHCP, DNS) and File Services (SMB, AFP, NFS, WebDAV). Thanks for your attention and patience. This is a huge project and I really want to hear the feedback, critics and everything else, even the hate mails about Microsoft Servers. Vinícius Ferrão. PS: We already have MS Licenses, since I'm in a university with MSDNAA program. </pre> Vinícius Ferrão 2011-10-29T16:05:09 http://comments.gmane.org/gmane.linux.gentoo.server/5670 <pre>Sure we hava a success story with Gentoo! At the moment there is no other dist that I would think about for a server, nor for a desktop system. Well I do use DSL on my tiny old computers.... ;) You ask for some love, well there is hate too.... Updating on a irregular basis is not to recomend, and all this blocked packages... especially the looped ones that have no way around.... But the Love is greater and I am an old fan of Gentoo! Mårten --- in reply to: Hello! Does anyone in this list has a 'Gentoo server success story'? Especially Gentoo in the Enterprise. C'mon, let's see some love for ol' Gentoo :) (If your story is particularly great, I'll contact you personally to put your story in a blog of mine) Rgds, --- </pre> Mårten Persson 2011-08-21T08:01:37 http://comments.gmane.org/gmane.linux.gentoo.server/5669 <pre>Hello! Does anyone in this list has a 'Gentoo server success story'? Especially Gentoo in the Enterprise. C'mon, let's see some love for ol' Gentoo :) (If your story is particularly great, I'll contact you personally to put your story in a blog of mine) Rgds, </pre> Pandu Poluan 2011-08-21T06:24:49 http://comments.gmane.org/gmane.linux.gentoo.server/5663 <pre>Can anyone here recommend either: *) A server-grade motherboard with *lots* of PCI slots, or *) A NIC that supports VLAN (802.1Q) Of course, either should be Linux- (hence, Gentoo-) compatible. Thank you beforehand. </pre> Pandu Poluan 2011-08-19T07:58:16 http://comments.gmane.org/gmane.linux.gentoo.server/5653 <pre>So, anyone have any experience using kernel 3.0 as Xen Dom0? (I have some idea of starting a Gentoo-variant-based Xen platform in the vein of XCP/XenServer) Rgds, </pre> Pandu Poluan 2011-08-13T08:15:44 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.linux.gentoo.server