Max Muster's questions

I installed weblate following the docker instructions from the documentation
https://docs.weblate.org/en/latest/admin/install/docker.html#installing-using-docker

git clone https://github.com/WeblateOrg/docker-compose.git weblate-docker
cd weblate-docker
docker-compose up

my docker-compose.override.yml looks like this

version: '3'
services:
  weblate:
    ports:
      - 127.0.0.1:80:8080
    environment:
      WEBLATE_DEBUG: 1
      WEBLATE_ENABLE_HTTPS: 1
      WEBLATE_EMAIL_HOST: smtp.example.com
      WEBLATE_EMAIL_HOST_USER: [email protected]
      WEBLATE_EMAIL_HOST_PASSWORD: xxxxxxxxxxxxxx
      WEBLATE_SERVER_EMAIL: [email protected]
      WEBLATE_DEFAULT_FROM_EMAIL: [email protected]
      WEBLATE_SITE_DOMAIN: weblate.example.com
      WEBLATE_ADMIN_PASSWORD: xxxxxxxxxxxxxx
      WEBLATE_ADMIN_EMAIL: [email protected]
      IP_BEHIND_REVERSE_PROXY: 1

my apache virtual host looks like this

<VirtualHost 123.123.123.123:80>

    ServerName weblate.example.com

    ProxyRequests off
    ProxyPreserveHost On
    ProxyPass / http://127.0.0.1:80
    ProxyPassReverse / http://127.0.0.1:80

    LogLevel debug
    ErrorLog  ${APACHE_LOG_DIR}/errorr.weblate.example.com.log
    CustomLog ${APACHE_LOG_DIR}/access.weblate.example.com.log combined

</VirtualHost>

and netstat shows this :

root@dark:~# netstat -tulpen | grep apache
tcp        0      0 123.123.123.123:80    0.0.0.0:*         LISTEN      0          84254390   29773/apache2
tcp        0      0 123.123.123.123:443   0.0.0.0:*         LISTEN      0          84254392   29773/apache2
root@dark:~# netstat -tulpen | grep docker
tcp        0      0 127.0.0.1:80          0.0.0.0:*         LISTEN      0          84215870   22655/docker-proxy

from localhost I can connect perfectly to weblate

but for some strage reason it does not work from other locations

the apache error log file shows the following

[Sat Mar 05 16:47:31.484813 2022] [proxy:debug] [pid 5969] proxy_util.c(2122): AH00925: initializing worker http://127.0.0.1 shared
[Sat Mar 05 16:47:31.485042 2022] [proxy:debug] [pid 5969] proxy_util.c(2182): AH00927: initializing worker http://127.0.0.1 local
[Sat Mar 05 16:47:31.485088 2022] [proxy:debug] [pid 5969] proxy_util.c(2230): AH00931: initialized single connection worker in child 5969 for (127.0.0.1)

what is going on here ?

btw. my reputation is not enough to add "weblate" as tag. I whould ask someone to do it for me please.

UPDATE

After switching from Loglevel debug to trace1 and disabling https in weblate

WEBLATE_ENABLE_HTTPS: 0

now I can see the site but all static content is missing this is what the error log is showing

[Sat Mar 05 17:37:47.028955 2022] [proxy:debug] [pid 23458] proxy_util.c(2230): AH00931: initialized single connection worker in child 23458 for (127.0.0.1)
[Sat Mar 05 17:37:47.030834 2022] [proxy:error] [pid 23343] [client 123.123.123.123:57150] AH00898: DNS lookup failure for: 127.0.0.1:80static returned by /static/vendor/prism/prism-rest.js, referer: https://weblate.example.com/
[Sat Mar 05 17:37:47.031211 2022] [proxy:error] [pid 23378] [client 123.123.123.123:57147] AH00898: DNS lookup failure for: 127.0.0.1:80static returned by /static/vendor/prism/prism-markdown.js, referer: https://weblate.example.com/
[Sat Mar 05 17:37:47.034849 2022] [proxy:error] [pid 23381] [client 123.123.123.123:57148] AH00898: DNS lookup failure for: 127.0.0.1:80static returned by /static/vendor/prism/prism-icu-message-format.js, referer: https://weblate.example.com/
[Sat Mar 05 17:37:47.051929 2022] [proxy:error] [pid 23379] [client 123.123.123.123:57151] AH00898: DNS lookup failure for: 127.0.0.1:80static returned by /static/loader-bootstrap.js, referer: https://weblate.example.com/
[Sat Mar 05 17:37:47.261559 2022] [proxy:error] [pid 23378] [client 123.123.123.123:57147] AH00898: DNS lookup failure for: 127.0.0.1:80static returned by /static/weblate-180.png, referer: https://weblate.example.com/
[Sat Mar 05 17:37:47.265804 2022] [proxy:error] [pid 23380] [client 123.123.123.123:57149] AH00898: DNS lookup failure for: 127.0.0.1:80static returned by /static/logo-16.png, referer: https://weblate.example.com/
[Sat Mar 05 17:37:50.040236 2022] [proxy:debug] [pid 23459] proxy_util.c(2122): AH00925: initializing worker http://127.0.0.1 shared
[Sat Mar 05 17:37:50.040294 2022] [proxy:debug] [pid 23459] proxy_util.c(2182): AH00927: initializing worker http://127.0.0.1 local
[Sat Mar 05 17:37:50.040315 2022] [proxy:debug] [pid 23459] proxy_util.c(2230): AH00931: initialized single connection worker in child 23459 for (127.0.0.1)

the access log is showing a 502 error for all static content

123.123.123.123 - - [05/Mar/2022:17:37:46 +0100] "GET /static/vendor/slugify.js?v=4.11 HTTP/1.1" 502 661 "https://weblate.example.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
123.123.123.123 - - [05/Mar/2022:17:37:47 +0100] "GET /static/vendor/tribute.js?v=4.11 HTTP/1.1" 502 661 "https://weblate.example.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
123.123.123.123 - - [05/Mar/2022:17:37:47 +0100] "GET /static/vendor/prism/prism-core.js?v=4.11 HTTP/1.1" 502 661 "https://weblate.example.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
123.123.123.123 - - [05/Mar/2022:17:37:47 +0100] "GET /static/vendor/prism/prism-markup.js?v=4.11 HTTP/1.1" 502 661 "https://weblate.example.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
123.123.123.123 - - [05/Mar/2022:17:37:47 +0100] "GET /static/vendor/prism/prism-rest.js?v=4.11 HTTP/1.1" 502 661 "https://weblate.example.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
123.123.123.123 - - [05/Mar/2022:17:37:47 +0100] "GET /static/vendor/prism/prism-markdown.js?v=4.11 HTTP/1.1" 502 661 "https://weblate.example.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
123.123.123.123 - - [05/Mar/2022:17:37:47 +0100] "GET /static/vendor/prism/prism-icu-message-format.js?v=4.11 HTTP/1.1" 502 661 "https://weblate.example.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
123.123.123.123 - - [05/Mar/2022:17:37:47 +0100] "GET /static/loader-bootstrap.js?v=4.11 HTTP/1.1" 502 661 "https://weblate.example.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
123.123.123.123 - - [05/Mar/2022:17:37:47 +0100] "GET /static/weblate-180.png HTTP/1.1" 502 661 "https://weblate.example.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"
123.123.123.123 - - [05/Mar/2022:17:37:47 +0100] "GET /static/logo-16.png HTTP/1.1" 502 661 "https://weblate.example.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0"

I found this: How can I get apache to serve static content in a reverse-proxied setup? but is does not help me very much because I am using docker and I do not known how to detemine the docker DocumentRoot

I recieve spam emails where the sender server ip does not match the named domain like this examples:

Return-Path: <[email protected]>
[...]
From: "Sparkasse informiert" <[email protected]>
[...]
Received: from amdir.dtfibre.fr (amdir.dtfibre.fr [199.101.190.36])
    by my.example.com (my.example.com) with ESMTPS id 1DDEC74013E
    for <[email protected]>; Wed,  3 Nov 2021 07:16:12 +0100 (CET)
Received: from [127.0.0.1] (unknown [178.159.123.178])
    by amdir.dtfibre.fr (Postfix) with ESMTPSA id 7E85B87E6F
    for <[email protected]>; Wed,  3 Nov 2021 00:36:49 -0400 (AST)

the problem is that the host of 178.159.123.178 is not "unknown", it is "pool.sevtele.com"

what settings can I make to postfix to reject/drop such emails?

when a category of failures called "fatal" happen the service spam all terminals with the failure message every second. This is very annoying and disturbed the work on the server.

in the past this was only for kernel critical things, but today even postfix alerts "fatal" because a spam mail does not reach the victim ..

fatal: file /etc/postfix/main.cf: parameter myhostname: bad parameter value: <your hostname here>

Is there a way to stop this?

There are a lot of reasons why someone want to know the jail that banned an IP address, but I do not find a fail2ban-client command to tell me this. There should be a get command that doesn't require <JAIL>, but instead outputs it.

I am aware that starting with version v0.10.2 I can unban an IP with:

fail2ban-client unban 192.0.2.138

My Question is not how to unban the IP. I ask how can I find out the jail that banned the IP.

I have coturn running on a server and it runs as usual systemd process as user root.

Can someone tell me how I could make coturn run as user coturn ?

p.s. could someone modify the Tags and add coturn , turn and sturn because I need 300 reputation for this, and I have only 225-

So I have a small server with Lighttpd and I have installed PhpMyAdmin on it.

This is the default configuration. The Computer is accessible from the Internet on Port 80.

How can I make phpMyAdmin to listen on another port other then 80 ?

Or how can I make it to listen only on a specific subdomain ?

# Alias for phpMyAdmin directory
alias.url += (
        "/phpmyadmin" => "/usr/share/phpmyadmin",
)

# Disallow access to libraries
$HTTP["url"] =~ "^/phpmyadmin/templates" {
    url.access-deny = ( "" )
}
$HTTP["url"] =~ "^/phpmyadmin/libraries" {
    url.access-deny = ( "" )
}
$HTTP["url"] =~ "^/phpmyadmin/setup/lib" {
    url.access-deny = ( "" )
}

# Limit access to setup script
$HTTP["url"] =~ "^/phpmyadmin/setup" {
        auth.backend = "htpasswd"
        auth.backend.htpasswd.userfile = "/etc/phpmyadmin/htpasswd.setup"
        auth.require = (
                "/" => (
                        "method" => "basic",
                        "realm" => "phpMyAdmin Setup",
                        "require" => "valid-user"
                )
        )
}

I have two email servers: mx1.example.com (IMAP, SMTP) and mx2.example.com (SMTP gateway).

• mx1.example.com is handling email for example.com, example.net and example.org.
• mx2.example.com is configured as a gateway for mx1.example.com
  (I want him to send out all mails that originate from mx1.example.com)

Now I want to send the emails

• from example.com and example.net via mx1.example.com normally
• from example.org via mx1.example.com (password auth) to the gateway mx2.example.com (IP).

How can I configure this?

UPDATE: Please hurry up guys, the bounty expires in 2 days.

To be more clear: I know how to relay via mx2.example.com (how to send everything via mx2.) I just have to put the IP of mx2 in relayhost in the main.cf in mx1. But I want to make this selectively, just for example.org.

I have multiple folders that I rsync now with cron like in this example.

rsync -aqz source1/  user1@machine1:/some/destination1
rsync -aqz source2/  user2@machine2:/some/destination2
... and so on

Everything is running fine, but I have a lot of crontabs as root, and most of the time nothing changes, and I am just blocking processor.

I would like to start the rsync processes only when a file somewhere on source has changed.

So I have read the documentation of the rsync.conf file, but I did not understand how this works. My rsync.conf file right now looks like this :

lock file = /var/run/rsync.lock
log file = /var/log/rsyncd.log
pid file = /var/run/rsyncd.pid

&merge /etc/rsyncd.d
&include /etc/rsyncd.d

and the /etc/rsyncd.d folder is empty.

how do I need to write the config in order that the rsync runs as daemon and just syncs when a file has changed.

So the status is this:

1) The USB Bluetooth Dongle is inserted, and recognized.

root@server:~# lsusb
Bus 002 Device 002: ID 8087:8000 Intel Corp.
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 005: ID 0a12:0001 Cambridge Silicon Radio, Ltd Bluetooth Dongle (HCI mode)
Bus 001 Device 002: ID 8087:8008 Intel Corp.
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

2) I installed the following packages from buster without incidents:

bluez amd64 5.50-1
bluetooth all 5.50-1
libical3 amd64 3.0.4-3
bluez-obexd amd64 5.50-1
bluez-tools amd64 2.0~20170911.0.7cb788c-2
rfkill amd64 2.33.1-0.1

3) bluetooth is not blocked:

root@server:~# rfkill list
0: hci0: Bluetooth
        Soft blocked: no
        Hard blocked: no

4) bluetooth service is running:

root@server:~# service bluetooth start
root@server:~# service bluetooth status
? bluetooth.service - Bluetooth service
   Loaded: loaded (/lib/systemd/system/bluetooth.service; enabled; vendor preset: enabled)
   Active: active (running) since Thu 2020-03-19 12:42:35 CET; 1min 9s ago
     Docs: man:bluetoothd(8)
 Main PID: 29677 (bluetoothd)
   Status: "Running"
    Tasks: 1 (limit: 4333)
   Memory: 1.6M
   CGroup: /system.slice/bluetooth.service
           mq29677 /usr/lib/bluetooth/bluetoothd

I have no access to X, so I cannot run blueman

How can I now make the device visible and start the pairing process with the printer just from console, in order to install the printer on this computer?

UPDATE1: Finally I was able to see the printer with

root@server~# bluetoothctl
Agent registered

okay.

[bluetooth]# help
Menu main:
Available commands:
-------------------
advertise                                         Advertise Options Submenu
scan                                              Scan Options Submenu
gatt                                              Generic Attribute Submenu
list                                              List available controllers
show [ctrl]                                       Controller information
select <ctrl>                                     Select default controller
devices                                           List available devices
paired-devices                                    List paired devices
system-alias <name>                               Set controller alias
reset-alias                                       Reset controller alias
power <on/off>                                    Set controller power
pairable <on/off>                                 Set controller pairable mode
discoverable <on/off>                             Set controller discoverable mode
agent <on/off/capability>                         Enable/disable agent with given capability
default-agent                                     Set agent as the default one
advertise <on/off/type>                           Enable/disable advertising with given type
set-alias <alias>                                 Set device alias
scan <on/off>                                     Scan for devices
info [dev]                                        Device information
pair [dev]                                        Pair with device
trust [dev]                                       Trust device
untrust [dev]                                     Untrust device
block [dev]                                       Block device
unblock [dev]                                     Unblock device
remove <dev>                                      Remove device
connect <dev>                                     Connect device
disconnect [dev]                                  Disconnect device
menu <name>                                       Select submenu
version                                           Display version
quit                                              Quit program
exit                                              Quit program
help                                              Display help about this program
export                                            Print evironment variables

ok, so I went like this:

[bluetooth]# show
Controller 00:15:83:F4:BA:F5 (public)
        Name: server
        Alias: server
        Class: 0x00000104
        Powered: yes
        Discoverable: no
        Pairable: yes
        UUID: Generic Attribute Profile (00001801-0000-1000-8000-00805f9b34fb)
        UUID: A/V Remote Control        (0000110e-0000-1000-8000-00805f9b34fb)
        UUID: PnP Information           (00001200-0000-1000-8000-00805f9b34fb)
        UUID: A/V Remote Control Target (0000110c-0000-1000-8000-00805f9b34fb)
        UUID: Generic Access Profile    (00001800-0000-1000-8000-00805f9b34fb)
        Modalias: usb:v1D6Bp0246d0532
        Discovering: no
[bluetooth]#

and then I started:

[bluetooth]# power on
Changing power on succeeded
[bluetooth]# discoverable on
Changing discoverable on succeeded
[CHG] Controller 00:15:83:F4:BA:F5 Discoverable: yes
[bluetooth]# devices
Device 06:0E:3C:5C:1A:FD ENVY 5000 series
[bluetooth]#

then I go

[bluetooth]# pair 06:0E:3C:5C:1A:FD
Attempting to pair with 06:0E:3C:5C:1A:FD
[CHG] Device 06:0E:3C:5C:1A:FD Connected: yes
[CHG] Device 06:0E:3C:5C:1A:FD Name: OfficeJet 5200 series
[CHG] Device 06:0E:3C:5C:1A:FD Alias: OfficeJet 5200 series
[CHG] Device 06:0E:3C:5C:1A:FD ServicesResolved: yes

and after some seconds ...

[CHG] Device 06:0E:3C:5C:1A:FD ServicesResolved: no
[CHG] Device 06:0E:3C:5C:1A:FD Connected: no
Failed to pair: org.bluez.Error.AuthenticationCanceled
[bluetooth]#

The printer device has something called Smart Bluetooth so I said to myself maybe I must not "pair" but "trust" so i went:

[bluetooth]# trust 06:0E:3C:5C:1A:FD
Changing 06:0E:3C:5C:1A:FD trust succeeded
[bluetooth]#

and so I stuck again I still can not see the printer on http://127.0.0.1:631

Any hint ?

I have some compiled applications on my (Linux) Web server and some of them are "calling home". Is there a tool to find out witch file exactly is calling home?

What I want to find are connections that are not to the IP who requested the site.
Like for example when someone requests a site and that site is including a third party site or is trowing some variables in a API somewhere else...

I want to log all outgoing traffic that is not to the requesting IP.
Is there some special tool fot that or can I cover this with "onboard" tools ?

UPDATE:
=======
Is there a way to log the trafic of just a file/folder ? Is this called a sniffer ?

If a IP is blocked in iptables by its "IP" it is easy to grep iptables like

iptables -L -n | grep "a.b.c.d"

but if the IP has been blocked using a IP range like :

iptables -A INPUT -s "163.172.000.000/16" -j DROP

well, then this method does not work any more. what method could be used?

I have a server that I do not have documentation and I plan to buy a USB Storage Device that is USB3 and now I want to find out if the server has USB2 or USB3.

I tried

dmesg | grep usb

[    1.337094] usbcore: registered new interface driver usbfs
[    1.337101] usbcore: registered new interface driver hub
[    1.337120] usbcore: registered new device driver usb
[    1.545696] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[    1.545699] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.545702] usb usb1: Product: EHCI Host Controller
[    1.545704] usb usb1: Manufacturer: Linux 4.9.0-9-amd64 ehci_hcd
[    1.545707] usb usb1: SerialNumber: 0000:00:1a.0
[    1.565669] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
[    1.565671] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.565674] usb usb2: Product: EHCI Host Controller
[    1.565676] usb usb2: Manufacturer: Linux 4.9.0-9-amd64 ehci_hcd
[    1.565678] usb usb2: SerialNumber: 0000:00:1d.0
[    1.873567] usb 1-1: new high-speed USB device number 2 using ehci-pci
[    1.893527] usb 2-1: new high-speed USB device number 2 using ehci-pci
[    2.021963] usb 1-1: New USB device found, idVendor=8087, idProduct=8008
[    2.021976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    2.041898] usb 2-1: New USB device found, idVendor=8087, idProduct=8000
[    2.041899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    2.309587] usb 1-1.3: new high-speed USB device number 3 using ehci-pci
[    2.447522] usb 1-1.3: New USB device found, idVendor=0bb4, idProduct=2910
[    2.447524] usb 1-1.3: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[    2.447525] usb 1-1.3: Product: portable SSD
[    2.447526] usb 1-1.3: Manufacturer: Intenso
[    2.447527] usb 1-1.3: SerialNumber: 07076349A77F4990
[    2.449093] usb-storage 1-1.3:1.0: USB Mass Storage device detected
[    2.449841] scsi host5: usb-storage 1-1.3:1.0
[    2.450040] usbcore: registered new interface driver usb-storage
[    2.450551] usbcore: registered new interface driver uas
[    2.525517] usb 1-1.5: new high-speed USB device number 4 using ehci-pci
[    2.635029] usb 1-1.5: New USB device found, idVendor=03f0, idProduct=2212
[    2.635034] usb 1-1.5: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[    2.635038] usb 1-1.5: Product: Officejet Pro L7600
[    2.635041] usb 1-1.5: Manufacturer: HP
[    2.635044] usb 1-1.5: SerialNumber: MY768550M5
[    2.635883] usb-storage 1-1.5:1.3: USB Mass Storage device detected
[    2.635995] scsi host6: usb-storage 1-1.5:1.3
[   23.960989] usblp 1-1.5:1.1: usblp0: USB Bidirectional printer dev 4 if 1 alt 0 proto 2 vid 0x03F0 pid 0x2212
[   23.961022] usbcore: registered new interface driver usblp

I do not understand much, but it looks to me as if there is only USB1 und USB2

if there another way to check ?

OK lets admit you connect a display to a computer that runs linux.
The display will show a login screen asking for user and password.
I am logged in via SSH on pts/0

I can now run a program on TTY1 like this

some-program > /dev/tty1 2>&1

But what I am looking for is a possibility to just show my console to tty1 without the user to be able to interfere. I tried:

screen > /dev/tty1 2>&1

but it opened the screen on pts/1 instead ot tty1. I tried

top > /dev/tty1 2>&1

result was a dark screen any hint?

I have a Linux server running and I would like to stream the first four consoles (TTY1,TTY2,TTY3,TTY4) where I have different tails with with my log-files to the network so I can receive the stream in the way I receive a webcam in my network.

The reason is that my NVR (Network Video Recorder) Device can split the screen in 4 and display 4 log-files or even 16 log files in the same time.

The NVR supports the following protocols : N1 and ONVIF

I found different solutions to stream a media file, bit none for streaming the console.

I am searching for a possibility to sync a carddav server with a openldap server. practically i need something that can read the carddav and update the ldap server.

both , the carddav server and the openldap server ar on the same computer. The addresses in the carddav server are either VCARD VERSION 3 (.vcf) or VCARD VERSION2 (.ics) files. The files are located in /var/lib/carddav and the OpenLdap server database is located in /var/lib/ldp/data.mdb.

Q&A Section:

1. What fields are you looking to sync from a CardDAV to an OpenLDAP? Answer: The Fields of a VCARD Version 2 or Version 3. https://de.wikipedia.org/wiki/VCard

2. What is the CardDAV product? Answer: A address-book, or in LDAP language a user-list. The sync tool must connect to carddav and take the user-list and the data and move it to the ldapserver.

3. Are you using plain OpenLDAP or another product that uses it? Answer: plain OpenLDAP

4. Please provide extra info about the context and the objective, maybe the way of accomplishing it are not what you are thinking Answer: I want to sync the user-list. This means when I change something on the carddav it should sync the changing on the openldap. And vice-versa.

Update 2020/07/27 I am still interested in this. I am now able to read the carddav server and detect new cards and copy them to a database. But I am not able to write the records to the openldap server. So now I would be interested to find any open piece of code who can read and write to openldap.

I would like to be able to check the computer's update status by querying the registry. I specifically would like some to check if the computer's update status is "fully updated".

I have looked through a lot of entries in the registry but I could not find one that has the update status of the computer.

What options do I have to check the windows update status?

I have fetchmail collecting from yahoo and passing the mails to the local postfix server. If I have a 4xx Error , because for example the sender domain does not exist, fetchmail will try to pas this email forever to postfix and postfix will reject it forever with

NOQUEUE: reject: RCPT from localhost.localdomain[127.0.0.1]: 450 4.1.8 <[email protected]>: Sender address rejected: Domain not found; from=<[email protected]>

first question:
how do I have to setup fetchmail to fist of all act from a local host I have set-up
fetchmail.localdomain[127.0.0.7]
in order that the logfile looks like this:

NOQUEUE: reject: RCPT from fetchmail.localdomain[127.0.0.7]: 450 4.1.8 <[email protected]>: Sender address rejected: Domain not found; from=<[email protected]>

for this I have setup /etc/hosts

127.0.0.1       localhost.localdomain   localhost
127.0.0.7       fetchmail.localdomain   fetchmail

second question:
how can I setup fetchmail to try a limited nr of times to pass the mail to postfix and after this to skip it?

I was looking whole morning and found nothing.

I have a debian box running dovecot IMAP. I want to train the spamassassin with the users spam folders.

is there something similar like sa-learn-cyrus for dovecot?

I have a debian box with postfix on it.
I checked the mailq and I do not understand how to read the mailq.
I need to know witch user is used to send this emails.

here is a example

0F87797868C     3993 Mon Mar 10 02:15:28  MAILER-DAEMON
     (connect to unknown.interbgc.com[217.9.224.233]:25: Connection timed out)
                                         [email protected]

0273E9786EF     3421 Fri Mar  7 09:13:01  MAILER-DAEMON
             (connect to mail.progys.fr[217.16.11.100]:25: Connection refused)
                                         [email protected]

I am not sure but I suppose that this are bounces from spam emails.
How can I verify this.

I use procmail for filtering emails in combination with postfix. procmail is triggered by postfix via the in the main.cf mailbox_command

mailbox_command = /usr/bin/procmail -t -a "$EXTENSION"

but in the master.cf

procmail unix    n    n    -    20    pipe
    flags=R user=vmail argv=/usr/bin/procmail -o SENDER=${sender} -m USER=${user} EXTENSION=${extension}

I do not understand exactly but it seems to me that the two are not the same command Is it possible that this situation is the reason why procmail is ignoring the user setting un the /home/user/.procmailrc ?

if we take a look to the procmail logs we see that

From info@some_spam_domain.com  Sat Mar  1 17:10:24 2014
 Subject: ***** SPAM 27.4 ***** Hi i'm Masha 22 yo. do you have web camera?
  Folder: /usr/lib/dovecot/deliver -m Junk -d hans                       4202

it is actually using dovecot to deliver the emails. hans is a user and JUNK is a folder defined in the main /etc/procmailrc as

DROPPRIVS=no    
DELIVER="/usr/lib/dovecot/deliver"
SPAMORDNER="$DELIVER -m Junk -d $USER"

:0 w
* ^X-Spam-Status: Yes
| $SPAMORDNER

I have there in my procmailcf

DROPPRIVS=no

DROPPRIVS=no works with -d, but turns off the user .procmailrc DROPPRIVS=yes forced procmail to act as user witch has as result that deliver works without -d and it delivers to /var/mail/ And here we get closer to the point I do not understand.

turning on DROPPRIVS seems to work only if the user has a .prcocmailrc in his home folder, because I can define there to deliver to /home/ else the mails are delivered to /var/mail/ and its in mbox format instead of maildir format

I supose the workaround would be something like this (exemple in pseudocode) in /etc/procmailrc

if exist  /home/<username>/.procmailrc
    set DROPPRIVS=yes
else
    set DROPPRIVS=no

how do I write this in procmail language ?