When I use locate on my server and the result is in my rsnapshot backup then I get all those duplicates.
I could use grep to filter out all rsnapshot files:
locate something_in_backup | grep -v /var/cache/rsnapshot
but then I would miss files in the backup that are coming from other servers.
How could I filter the output to show only results from the rsnapshot/daily.0/ folder?
The postgrey manual sais:
--auto-whitelist-clients=N whitelist host after first successful delivery N is the minimal count of mails before a client is whitelisted (turned on by default with value 5) specify N=0 to disable.
As I understand, this would for example automatically whitelist gmail.com completely, whenever I get 5 emails from different gmail users. Isn't that dangerous?, because there are a lot of spammers sending from that host.
I want to create only daily backups in my server using sync_first option. How do I have to setup my server to backup once a day?
I configured rsnapshot so it would not backup hourly by commenting out the hourly cronjob in /etc/cron.d/rsnapshot:
#0 */4 * * * root /usr/bin/rsnapshot hourly
30 3 * * * root /usr/bin/rsnapshot daily
0 3 * * 1 root /usr/bin/rsnapshot weekly
30 2 1 * * root /usr/bin/rsnapshot monthly
But this gives the error:
/.snapshots/hourly.5 not present (yet), nothing to copy
And it doesn't backup anything any more ever since.
As a workaround, I called this manually now once:
/usr/bin/rsnapshot -v hourly
But how do I configure this correctly so backups only are done once a day at 3:30 am?
The site weakdh.org explains how to fix postfix against the weak Diffie-Hellman attack called "logjam".
But don't I have to fix courier too? Or do I have to migrate to dovecot to be logjam-safe?
My server has multiple IPs on which only one is mapper to the inbound physical interface eth0. Other IPs are handled in a virtual manner via iptables/DNAT.
I want to limit the traffic to one of my lxc containers called "service1" (192.168.123.2 internally) to max 50MBit/s.
From external I reach my main server "hypervisor" via x.x.x.90 but the Firewall routes all needed ports for x.x.x.89 to "service1" (I only use Port 10000 and 5666)
How can I shape the traffic with tc to a max limit of 50Mbit/s for traffic that reaches service1 contianer on the IP x.x.x.89?
I would start with
DEV=eth0
IPT=/sbin/iptables
TC=/sbin/tc
$IPT -t mangle -F
# clear old rules:
$TC qdisc del dev $DEV ingress > /dev/null 2>&1
$TC qdisc del dev $DEV root > /dev/null 2>&1
$TC qdisc del dev lo root > /dev/null 2>&1
# initialize shaping and set default to channel 12:
$TC qdisc add dev $DEV root handle 1:0 htb default 12 r2q 6
# set max limit to 1GBit
$TC class add dev $DEV parent 1:0 classid 1:1 htb rate 1Gbit ceil 1Gbit
These are my iptables rules (iptables-save):
-A PREROUTING -d x.x.x.89/32 -i eth0 -p tcp -m tcp --dport 5666 -j DNAT --to-destination 192.168.123.2:5666
-A PREROUTING -d x.x.x.89/32 -i eth0 -p udp -m udp --dport 5666 -j DNAT --to-destination 192.168.123.2:5666
-A PREROUTING -d x.x.x.89/32 -i eth0 -p tcp -m tcp --dport 10000 -j DNAT --to-destination 192.168.123.2:10000
-A PREROUTING -d x.x.x.89/32 -i eth0 -p udp -m udp --dport 10000 -j DNAT --to-destination 192.168.123.2:10000
-A POSTROUTING -s 192.168.123.0/24 -o eth0 -j SNAT --to-source x.x.x.89
Now how would I have to define rules to limit traffic to max 50Mit for only those two ports 10000 and 5666 from and to "service1"?
I would like to reach this address via an IPv6 address:
http://downloads.openwrt.org/attitude_adjustment/12.09/ar71xx/generic/packages/
In our Freifunk routers there is no DNS available, so the name downloads.openwrt.org cannot be resolved. All servers in the internet are only reacheable via ipv6 addresses. Now we cannot reach this package-mirror from inside the router t install packages via opkg install.
It would be a solution, if we could add this to our config for example:
http://[2001:db8::1]/attitude_adjustment/12.09/ar71xx/generic/packages/
Our routers are running OpenWRT and are IPv6-only and I would like to add an entry into /etc/hosts so that the domain name downloads.openwrt.org will resolve to an appropriate IPv6 address
Is it possible to redirect an IPv6 to a domain?
I would like to check all binaries on my server against
dpkg -e <path_to_deb_package> <destination>
(for example rkhunter could do this check against the originals when doing probupdate)
How could I check all packages with one script?
rkhunter complains about this:
Warning: Suspicious file types found in /dev:
/dev/.udev/queue.bin: data
/dev/.udev/data/c13:66: ASCII text
/dev/.udev/data/c13:64: ASCII text
/dev/.udev/data/c13:65: ASCII text
/dev/.udev/data/c13:67: ASCII text
/dev/.udev/data/+input:input2: ASCII text
/dev/.udev/data/+input:input1: ASCII text
/dev/.udev/data/+input:input3: ASCII text
/dev/.udev/data/+input:input0: ASCII text
/dev/.udev/data/b9:1: ASCII text
/dev/.udev/data/b9:2: ASCII text
/dev/.udev/data/b9:0: ASCII text
/dev/.udev/data/c116:2: ASCII text
/dev/.udev/data/b7:7: ASCII text
/dev/.udev/data/b7:6: ASCII text
/dev/.udev/data/b7:5: ASCII text
/dev/.udev/data/b7:4: ASCII text
/dev/.udev/data/b7:3: ASCII text
/dev/.udev/data/b7:2: ASCII text
/dev/.udev/data/b7:1: ASCII text
/dev/.udev/data/b7:0: ASCII text
/dev/.udev/data/+serio:serio0: ASCII text
/dev/.udev/data/c189:0: ASCII text
/dev/.udev/data/c189:512: ASCII text
/dev/.udev/data/c189:384: ASCII text
/dev/.udev/data/c189:256: ASCII text
/dev/.udev/data/c189:128: ASCII text
/dev/.udev/data/b8:19: ASCII text
/dev/.udev/data/b8:18: ASCII text
/dev/.udev/data/b8:17: ASCII text
/dev/.udev/data/b8:16: ASCII text
/dev/.udev/data/b8:3: ASCII text
/dev/.udev/data/b8:2: ASCII text
/dev/.udev/data/b8:1: ASCII text
/dev/.udev/data/b8:0: ASCII text
/dev/.udev/data/n2: ASCII text
/dev/.udev/data/c226:0: ASCII text
/dev/.udev/rules.d/61-dev-root-link.rules: ASCII text
/dev/.mdadm/map: ASCII text
why is this happening since the upgrade to debian wheezy?
And why would it be bad, that they are ascii?
I have a raid system on debian:
Disk /dev/sda: 320.1 GB,...
Device Boot Start End Blocks Id System
/dev/sda1 * 1 2432 19535008+ fd Linux raid autodetect
/dev/sda2 2433 2918 3903795 fd Linux raid autodetect
/dev/sda3 2919 38913 289129837+ fd Linux raid autodetect
Disk /dev/sdb: 320.1 GB, ...
Device Boot Start End Blocks Id System
/dev/sdb1 * 1 2432 19535008+ fd Linux raid autodetect
/dev/sdb2 2433 2918 3903795 fd Linux raid autodetect
/dev/sdb3 2919 38913 289129837+ fd Linux raid autodetect
# df -h
/dev/md0 19G 12G 6,0G 66% / type ext3 (rw)
/dev/md2 272G 245G 25G 91% /var type ext3 (rw)
I would like to check if everything is running fine and configure it, so I will get an email if any error occurs.
the only line in my /etc/smartd.conf is:
DEVICESCAN -d removable -n standby -m root -M exec /usr/share/smartmontools/smartd-runner
will that scan those 2 raid devices?
And in my /etc/cron.d/mdadm there is this line:
57 0 * * 0 root if [ -x /usr/share/mdadm/checkarray ] && [ $(date +\%d) -le 7 ]; then /usr/share/mdadm/checkarray --cron --all --idle --quiet; fi
in /usr/share/mdadm/checkarray it sais: it initiates a check run of an MD array's redundancy information
I use monit on my server to monitor apache and mysql running.
Now I want to add an alert if the disk gets too full. I added this for testing in /etc/monit/monitrc:
check device rootfs with path /dev/md0
if space usage > 10% then alert
I have two partitions I want to check: / and /var:
mount
/dev/md0 on / type ext3 (rw)
/dev/md2 on /var type ext3 (rw)
What are useful checks in this configuration apart from diskspace?
I installed etckeeper on my ubuntu 11.10 server, and after creating the etckeeper repository with:
etckeeper init
etckeeper commit "Initial version"
I got the error:
bzr: ERROR: No changes to commit. Please 'bzr add' the files you want to commit, or use --unchanged to force an empty commit.
So I added a test file and then I could create the etckeeper repository:
touch /etc/test
etckeeper commit "Initial version"
rm /etc/test
But still there seems to be no git repository there:
cd /etc
git status
How can I use git to watch changes?
I tried this bash command:
find /var/www/ -path '*wp-admin/index.php' -exec mv {} $(dirname {})/index_disabled
But the second {} is not executed.
It results in just ./index_disabled instead.
How can I use the found parameter twice in the execute command?
I would like to create something like identicons but not with images but with a unique word for each IP-Addresses and MAC-Addresses.
create an easy to remember alias for a mac address, that is unique and reverse lookupable, for example:
IP 123.456.789.132 will result in an alias for that IP, that is connected to an existing word from a wordlist, that is unique.
Background of this idea: this way we could identify our Routers in our Opennet in Hamburg easily in a graphical NodeGraph.
There are a lot of sites, that generate graphical avatars:
gravatar (Identicon, MonsterID, Wavatar), Retro, vanillicon, VisiGlyphs or unicornify
Is there some site already, where I can convert MAC-Adresses to unique human readeable synonyms?
I would like to remove with purge all entries of locate and its database.
I tried
apt-get purge locate
and
rm /etc/updatedb*
But is the database gone also?
Where is the updatedb database located on debian squeeze?
I would like to delete it manually too, so I can cleanly reinstall it
The updatedb database on my debian (squeeze) server is quite slow.
*/.git/*, */.svn/* and similar?PRUNEPATHS ?my /etc/updatedb.conf looks like this:
...
# filesystems which are pruned from updatedb database
PRUNEFS="NFS nfs nfs4 afs binfmt_misc proc smbfs autofs iso9660 ncpfs coda devpts ftpfs devfs mfs shfs sysfs cifs lustre_lite tmpfs usbfs udf"
export PRUNEFS
# paths which are pruned from updatedb database
PRUNEPATHS="/tmp /usr/tmp /var/tmp /afs /amd /alex /var/spool /sfs /media /var/backups/rsnapshot /var/mod_pagespeed/"
...
EDIT:
/var/cache/locate/locatedblocate / will list all files and directories in the database (I looked through the results by exporting it in a file: locate />/tmp/locatedb.txt, download this txt-file and find large amount of useless stuff)
I am registering domains on behalf of customers and host their websites on my server.
I have complete control over the DNS setup of my customer domains. I still want to host their websites, but I don't want to be responsible for their emails
Now they need forwarding of some emails of their domains to existing mail accounts on other hosters (hotmail, gmail, etc.).
What I need is the following:
I would set the MX-record to a provider, where I can configure forwarding rules for the emails of my customers.
Would a service provider charge you for that kind of forwarding-service? There would be no storage needed at that provider, only some throughgoing traffic from the forwarded emails.
A minimal webserver on port 80 would be
python -m SimpleHTTPServer 80
but I would like to show only one page all the time called maintenance.html, no matter what page was requested.
The url in the browser should still stay the url, that the visitor requested, but no error page.
I want to keep my whole /etc folder in a git repository to track unauthorised changes by intruders and find out mistakes I could have done myself.
What would be the right way to achieve this?
I would like to use this tutorial: http://www.jsimmons.co.uk/2010/06/08/using-ipset-with-iptables-in-ubuntu-lts-1004-to-block-large-ip-ranges/
In Ubuntu 12.04 the package ipset-source is removed from the repository I guess that's why I only get an error when I try installing it like this:
apt-get install module-assistant ipset
m-a a-i ipset
How would I do that in Ubuntu precise?