Home / user-115761

Bartosz Kowalczyk's questions

Martin Hope
Bartosz Kowalczyk
Asked: 2012-06-16 02:40:04 +0800 CST
  • 3

I have a problem with spam and postfix + postgray. Generally it works fine, but I have these problems:

  • false-positives.
  • good emails get rejected.

Can I configure postfix (and postgray) so that when an email is rejected, then redirect to [email protected] (change recipients).

Or maybe copy each emailand send it to [email protected], and then apply filtering? If hit restriction than just reject (another copy is in [email protected]).

How to do it?

postfix configuration
Martin Hope
Bartosz Kowalczyk
Asked: 2012-05-24 01:12:05 +0800 CST
  • 3

I have several servers. We want to set up new big service (word 'big' came from my boss).

I want to use two Cisco LoadBalancer ACE 4700, but what will it happen if one of ACE is down?

So I want to setup DNS loadbalancing between these two device.

My goal is protect against failure of one Load Balancer using DNS.

How to do? Is using Round robin a good or bad idea?

networking load-balancing
Martin Hope
Bartosz Kowalczyk
Asked: 2012-05-17 05:27:16 +0800 CST
  • 2

I try install nginx. I used to lighttpd but now we must install nginx. Can you help me with configuration nginx?

I use debian 6. My nginx.conf:

user www-data;
worker_processes 4;
pid /var/run/nginx.pid;

events {
    worker_connections 768;
    # multi_accept on;
}

http {

    ##
    # Basic Settings
    ##

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;

    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;

    ##
    # Gzip Settings
    ##

    gzip on;
    gzip_disable "msie6";

    ##
    # Virtual Host Configs
    ##

    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/sites-enabled/*;
}

My site-enable/default look as

server {
    listen   80; ## listen for ipv4; this line is default and implied
    #listen   [::]:80 default ipv6only=on; ## listen for ipv6

    root /var/www; #!
    index index.php index.html index.htm; #1
    access_log      /var/log/nginx/access.log info;
    error_log       /var/log/nginx/error.log info;

    # Make site accessible from http://localhost/
    server_name localhost;

    location / {
            # First attempt to serve request as file, then
            # as directory, then fall back to index.html
            autoindex on;
            # Uncomment to enable naxsi on this location
            # include /etc/nginx/naxsi.rules
    }

    location /doc/ {
            alias /usr/share/doc/;
            autoindex on;
            allow 127.0.0.1;
            deny all;
    }

    location ~ \.php$ {
            fastcgi_split_path_info ^(.+\.php)(/.+)$;
            # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini

            fastcgi_pass 127.0.0.1:9000;
            fastcgi_index index.php;
            include fastcgi_params;
    }

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one

    location ~ /\.ht {
            deny all;
    }
}

I add to php.ini

cgi.fix_pathinfo = 0;

php5-cgi is running as

spawn-fcgi 127.0.0.1 -p 9000 -u www-data -f /usr/bin/php5-cgi

But I get 502 error (bad gateway)
My /var/log/ say

2012/05/16 15:35:25 [error] 13427#0: *12 connect() failed (111: Connection refused) while connecting to upstream, client: 127.0.0.1, server: localhost, request: "GET /ndex.php HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "localhost"

I didn't run sqpwn-fcgi => php-cgi isn't listening on port 9000.

configuration nginx 502-error
Martin Hope
Bartosz Kowalczyk
Asked: 2012-05-07 21:21:33 +0800 CST
  • 1

I have server with debian lenny. I installed vserver on this server a few years ago. Summary I have 5 guest of vservers and main system, now. Each guest is debian lenny.

Now, I'm wanting upgrade from lenny to squeezy on this servers (each Vservers and main machine).

Do you do it? I should upgrade as usually system ? First I should upgrade every vserver next main machines and I have to do reset all machines and vservers?

Please, advise me how to do it ?

linux debian linux-vserver
Martin Hope
Bartosz Kowalczyk
Asked: 2012-03-30 01:23:39 +0800 CST
  • 0

We have computer with 91.221.27.120, 91.221.27.119, 91.221.27.121 and 91.221.27.118. I set in postfix:

smtpd_client_restrictions =
    permit_mynetworks,
    warn_if_reject reject_unknown_client,
    warn_if_reject check_client_access hash:/etc/postfix/access,
    permit_sasl_authenticated,
    permit

When I add reject_unknown_client I get ONLY for 91.221.27.118

Mar 29 09:45:31 fo-mail postfix/smtpd[6132]: NOQUEUE: reject_warning: RCPT from
unknown[91.221.27.118]: 450 4.7.1 Client host rejected: cannot find your hostname, 
[91.221.27.118]; from=<[email protected]> to=<[email protected]> proto=ESMTP 
helo=<[172.16.210.24]>

I writed to access 

91.221.27.118 OK

It doesn't help.

Can you help me?

postfix configuration