Home / user-173751

Pol Hallen's questions

Martin Hope
Pol Hallen
Asked: 2020-12-01 13:06:21 +0800 CST
  • 1

win10 has disabled SMB2 guest account. If I try samba standard config below works with win7.

The workaround on win10 is re-enable SMB2 guest account from clients:

Open the Local Group Policy editor
Go to Computer Configuration\Administrative Templates\Network\Lanman Workstation
For the setting, "Enable insecure guest logons" right click and choose Edit.
Choose "Enabled" and click Ok

works!

My problem is that I don't want change this key to all windows clients but If I don't make any changes I cannot totally connect to my fileserver:

"Windows cannot access \\DEBIAN10-1"

My goal (for some win 10 clients) access to password protected shared folders without make changes to local group policy editor

cat /etc/samba/smb.conf

[global]
        security = user
        map to guest = Bad User 
        nobody = guest
        netbios name = debian10-1
        guest account = nobody 
        log file = /var/log/samba/%m.log

[public]
        comment = Public share
        path = /home/user/
        guest ok = yes
        read only = no
        force user = nobody
        force group = nobody
        create mask = 0664
        directory mask = 0775

[no public]
        path=/home/nopublic
        guest ok = no
        admin users = root 
        valid users = user1, user2, user3, user4, user,5
windows linux samba file-server
Martin Hope
Pol Hallen
Asked: 2020-07-16 01:12:39 +0800 CST
  • 1

on both computer same version of rsync:

rsync --version
rsync  version 3.1.2  protocol version 31

cat /etc/rsnapshot.conf

[...]
backup  root@IP:/etc/     localhost/      ssh_args=-i /root/.ssh/id_rsa -p 4378
[...]

protocol version mismatch -- is your shell clean? (see the rsync man page for an explanation) rsync error: protocol incompatibility (code 2) at compat.c(178) [Receiver=3.1.2]

linux ssh rsync rsnapshot
Martin Hope
Pol Hallen
Asked: 2017-11-07 05:04:35 +0800 CST
  • 1

On debian 9 I configurated bind9 (v.9.10.3) as cache server, later as forwarders server. For testing purpose I don't have any firewall and I make test from internal lan gigabit. Bind works but performances are not so good, for example:

dig aruba.it @192.168.50.35 (my BIND)
Query time: 129 msec

dig aruba.it @8.8.8.8
Query time: 20 msec

nmap -sT -p 53 192.168.50.35

Starting Nmap 7.60 ( https://nmap.org ) at 2017-11-06 14:31 CET
Nmap scan report for 192.168.50.35
Host is up (0.0014s latency).

ping -c5 192.168.50.35

PING 192.168.50.35 (192.168.50.35) 56(84) bytes of data.
64 bytes from 192.168.50.35: icmp_seq=1 ttl=64 time=1.31 ms
64 bytes from 192.168.50.35: icmp_seq=2 ttl=64 time=1.34 ms
64 bytes from 192.168.50.35: icmp_seq=3 ttl=64 time=1.33 ms
64 bytes from 192.168.50.35: icmp_seq=4 ttl=64 time=5.56 ms
64 bytes from 192.168.50.35: icmp_seq=5 ttl=64 time=1.32 ms

--- 192.168.50.35 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4005ms
rtt min/avg/max/mdev = 1.312/2.177/5.561/1.692 ms

This happens with all domains. Switching bind config with forwarders I've same problem: queries are slowes.

Is this correct a query time for a local DNS?

cat /etc/bind/named.conf.options

options {
        directory "/var/cache/bind";

// uncomment these to switch to forwarders
//        forwarders {
//                8.8.8.8;
//                8.8.4.4;
//         };


        dnssec-validation auto;
        listen-on port 53 { localhost; 192.168.50.0/24; };
        allow-query { localhost; 192.168.50.0/24; };
        recursion yes;

};

Disabling IPv6 doesn't change anything.

debian
Martin Hope
Pol Hallen
Asked: 2017-11-02 02:26:41 +0800 CST
  • 1

I've BIND on my lan and I created a zone:

$ORIGIN example.com.
$TTL 604800 ; 1 week
@       IN SOA  ns1.example.com. max.example.com. (
                2017103151 ; serial
                604800     ; refresh (1 week)
                86400      ; retry (1 day)
                2419200    ; expire (4 weeks)
                604800     ; minimum (1 week)
                )
        IN  NS  ns1.example.com.
        IN  NS  ns2.example.com.
            MX  10 mx1.example.com.

server1         A   192.168.1.100
ns1         A   192.168.1.101
ns2         A   192.168.1.102
mx1         A   192.168.1.100
ftp         CNAME   server1
pop3            CNAME   server1
imap            CNAME   server1

REVERSE ZONE:

$ORIGIN 1.168.192.in-addr.arpa.
$TTL 604800     ; 1 week
@       IN SOA  ns1.example.com. max.example.com. (
                                2017103136 ; serial
                                604800     ; refresh (1 week)
                                86400      ; retry (1 day)
                                2419200    ; expire (4 weeks)
                                604800     ; minimum (1 week)
                                )
                IN      NS      ns1.example.com.
                IN      NS      ns2.example.com.
100                     PTR     ftp.example.com.
100                     PTR     mx1.example.com.
100                     PTR     www.example.com.
100                     PTR     smtp.example.com.
100                     PTR     mail.example.com.
100                     PTR     pop3.example.com.
100                     PTR     imap.example.com.
101                     PTR     ns1.example.com.
102                     PTR     ns2.example.com.

Everything works, but there's a strange behavior with ping command:

ping mx1.example.com
64 bytes from www.example.com (192.168.1.100): icmp_seq=1 ttl=64 time=0.102 ms

ping imap.example.com
64 bytes from pop3.example.com (192.168.1.100): icmp_seq=1 ttl=64 time=0.102 ms
bind
Martin Hope
Pol Hallen
Asked: 2017-09-23 05:24:38 +0800 CST
  • 2

I done a script to automatically download some packages:

LIST="tcpdump nmap wifite"

apt-get --ignore-missing install $LIST

"Package wifite is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source"

I didn't find a way to force the download of all packages. apt stops from all download because there's a missing package. I can't modify the list.

Also with -f option I can't solve the problem.

using something like:

LIST="tcpdump nmap wifite"
for a in $LIST; do apt-get install $a ; done

works but it too slow

also with -y doesn't work

debian
Martin Hope
Pol Hallen
Asked: 2017-09-14 10:07:13 +0800 CST
  • 0

I've a script that syncs files between my server to my mobile via sshpass:

sshpass -p password rsync -vrz source1 source2 -e ssh user@ip:dest

using 

-vrz

rsync everytime checks all files to mobile,

using

-vrz --update --modify-window=1

rsync doesn't update newer files from server to mobile

how are the correct options to use rsync with fat32?

rsync
Martin Hope
Pol Hallen
Asked: 2017-09-02 08:33:51 +0800 CST
  • 9

On a debian stable I've a network printer connected and shared (epson hp1536dnf):

socket://ip:9100

from linux clients I've:

ipp://ip/printers/printer1

The logs of server are:

D [01/Sep/2017:18:21:29 +0200] cupsdSetBusyState: newbusy="Not busy", busy="Active clients"
D [01/Sep/2017:18:21:29 +0200] [Client 33] HTTP_STATE_WAITING Closing for error 32 (Broken pipe)
D [01/Sep/2017:18:21:29 +0200] [Client 33] Closing connection.

The printing goes to server but none print on printer. From server the printer works correctly.

EDIT: changing printer driver I solved the problem.

cups
Martin Hope
Pol Hallen
Asked: 2017-08-27 07:22:43 +0800 CST
  • 2

doveadm quota get -u [email protected]

Quota name Type    Value Limit                                                               %
User quota STORAGE  1323 10240                                                              12
User quota MESSAGE     2     -                                                               0

/home/vmail/domain01.org/user01/Maildir/du -h|sort -h

4.0K    ./.Drafts/new
4.0K    ./.Drafts/tmp
4.0K    ./.INBOX/cur
4.0K    ./.INBOX/new
4.0K    ./.INBOX/tmp
4.0K    ./.Trash/cur
4.0K    ./.Trash/new
4.0K    ./.Trash/tmp
4.0K    ./new
4.0K    ./tmp
24K     ./.INBOX
24K     ./.Trash
1.4M    ./.Drafts
1.4M    ./.Drafts/cur
16M     ./cur
17M     .

new emails go to ./cur/ (I sent two emails with 8Mb each one) and dovecot doesn't count ./cur/ as quote but saving draft message dovecot upgrade quotas

I have real PAM unix email users

/home/user/Maildir/

and virtual users

/home/vmail/domain1.org/user1/Maildir

in /etc/dovecot/conf.f/10-mail

[...]
mail_location = maildir:~/Maildir
mail_home = maildir:/home/vmail/%d/%n/Maildir:INBOX=/home/vmail/%d/%n/Maildir/.INBOX
[...]

doveconf -n

auth_debug = yes
auth_debug_passwords = yes
auth_mechanisms = login plain
auth_verbose = yes
auth_verbose_passwords = yes
debug_log_path = /var/log/dovecot.debug
disable_plaintext_auth = no
info_log_path = /var/log/dovecot.info
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c
mail_debug = yes
mail_home = maildir:/home/vmail/%d/%n/Maildir:INBOX=/home/vmail/%d/%n/Maildir/.INBOX
mail_location = maildir:~/Maildir
mail_plugins = " quota"
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify
namespace inbox {
  inbox = yes
  location = 
  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox Junk {
    special_use = \Junk
  }
  mailbox Sent {
    special_use = \Sent
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }
  mailbox Trash {
    special_use = \Trash
  }
  prefix = 
  subscriptions = yes
  type = private
}
passdb {
  driver = pam
}
passdb {
  args = scheme=SHA256 username_format=%u /etc/dovecot/users
  driver = passwd-file
}
plugin {
  mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename append flag_change
  mail_log_fields = uid box msgid size from subject vsize
  quota = maildir:User quota
  quota_rule = *:storage=10M
  quota_rule2 = Junk:storage=+1M
  quota_rule3 = SPAM:storage=+1M
  quota_warning = storage=90%% quota-warning 90 %u
  sieve = file:~/sieve;active=~/.dovecot.sieve
  sieve_extensions = +notify +imapflags
}
protocols = " imap sieve pop3 sieve"
quota_full_tempfail = yes
service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0666
    user = postfix
  }
}
service imap-login {
  inet_listener imap {
    port = 143
  }
  inet_listener imaps {
    port = 993
    ssl = yes
  }
}
service managesieve-login {
  inet_listener sieve {
    port = 4190
  }
  service_count = 1
  vsz_limit = 64 M
}
service pop3-login {
  inet_listener pop3 {
    port = 110
  }
  inet_listener pop3s {
    port = 995
    ssl = yes
  }
}
service quota-warning {
  executable = script /root/bin/quota-warning.sh
  unix_listener quota-warning {
    mode = 0666
    user = vmail
  }
  user = root
}
ssl_cert = </etc/dovecot/dovecot.pem
ssl_dh_parameters_length = 2048
ssl_key =  # hidden, use -P to show it
userdb {
  driver = passwd
}
userdb {
  args = scheme=SHA256 username_format=%u /etc/dovecot/users
  driver = passwd-file
}
userdb {
  args = uid=vmail gid=vmail home=/home/vmail/%d/%n
  driver = static
}
verbose_proctitle = yes
protocol lda {
  mail_plugins = " quota sieve quota"
}
protocol imap {
  mail_plugins = " quota imap_quota"
}
dovecot
Martin Hope
Pol Hallen
Asked: 2017-08-24 11:32:08 +0800 CST
  • 1
plugin {
  quota_rule = *:storage=10M
  quota          = maildir:User quota
  quota_rule2     = Junk:ignore
  quota_rule3    = Trash:storage=+100M
  quota_warning = storage=50%% quota-warning 50 %u
  quota_exceeded = storage=100%% quota-exceeded 100 %u
}

plugin {
  quota_warning = storage=50%% quota-warning 50 %u
  quota_exceeded = storage=100%% quota-exceeded 100 %u
}

service quota-warning {
  executable = script /root/bin/quota-warning.sh
  user = root
  unix_listener quota-warning {
    user = vmail
    mode = 0666
  }
}

service quota-exceeded {
  executable = script /root/bin/quota-exceeded.sh
  user = root
  unix_listener quota-exceeded {
    user = vmail
    mode = 0666
  }
}

I sent an email with 8Mb (limit is 10Mb) but quota-warning executed when I delete that message (moved it to trash) instead of quota-exceeded being executed.

cat /root/bin/quota-warning.sh
touch /tmp/quota-warning-executed
cat /root/bin/quota-exceeded.sh
touch /tmp/quota-exceeded-executed
dovecot
Martin Hope
Pol Hallen
Asked: 2017-08-20 09:27:54 +0800 CST
  • 2

ps aux|grep spamd

root     12207  0.0  1.0 159920 83460 ?        Ss   17:38   0:01 /usr/sbin/spamd -d --pidfile=/var/run/spamassassin.pid --create-prefs --max-children 5 --helper-home-dir
root     12208  0.0  0.9 160484 79996 ?        S    17:38   0:00 spamd child
root     12209  0.0  0.9 159920 77788 ?        S    17:38   0:00 spamd child
postfix  16307  0.0  0.1 104608  8816 ?        S    19:18   0:00 smtpd -n smtp -t inet -u -o stress= -o content_filter=spamassassin

telnet 127.0.0.1 783

Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
SPAMD/1.0

cat /etc/postfix/master.conf

smtp      inet  n       -       -       -       -       smtpd
        -o content_filter=spamassassin
#smtp      inet  n       -       y       -       2       postscreen
#smtpd     pass  -       -       y       -       -       smtpd
#dnsblog   unix  -       -       y       -       0       dnsblog
#tlsproxy  unix  -       -       y       -       0       tlsproxy
#submission inet n       -       y       -       -       
#  -o syslog_name=postfix/submission
#  -o smtpd_tls_security_level=encrypt
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
smtps     inet  n       -       -       -       -       smtpd   -v
        -o content_filter=spamassassin
        -o syslog_name=postfix/smtps
        -o smtpd_tls_wrappermode=yes
        -o smtpd_sasl_auth_enable=yes
#       -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#628       inet  n       -       y       -       -       qmqpd
pickup    unix  n       -       y       60      1       pickup
cleanup   unix  n       -       y       -       0       cleanup
qmgr      unix  n       -       n       300     1       qmgr
#qmgr     unix  n       -       n       300     1       oqmgr
tlsmgr    unix  -       -       y       1000?   1       tlsmgr
rewrite   unix  -       -       y       -       -       trivial-rewrite
bounce    unix  -       -       y       -       0       bounce
defer     unix  -       -       y       -       0       bounce
trace     unix  -       -       y       -       0       bounce
verify    unix  -       -       y       -       1       verify
flush     unix  n       -       y       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       y       -       -       smtp
relay     unix  -       -       y       -       -       smtp
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       y       -       -       showq
error     unix  -       -       y       -       -       error
retry     unix  -       -       y       -       -       error
discard   unix  -       -       y       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       y       -       -       lmtp
anvil     unix  -       -       y       -       1       anvil
scache    unix  -       -       y       -       1       scache

spamassassin unix - n n - - pipe        user=debian-spamd argv=/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}

from server I send an email test:

echo hello|mutt -s test [email protected]

cat /var/log/mail.log

Aug 19 19:23:04 server12 postfix/pickup[16252]: 96BEF281AEC: uid=0 from=<root>
Aug 19 19:23:04 server12 postfix/cleanup[16384]: 96BEF281AEC: info: header Subject: test from local; from=<root@server12> to=<[email protected]>
Aug 19 19:23:04 server12 postfix/cleanup[16384]: 96BEF281AEC: message-id=<20170819172304.sxkpxikicu7snioq@server12>
Aug 19 19:23:04 server12 postfix/qmgr[16253]: 96BEF281AEC: from=<root@server12>, size=417, nrcpt=1 (queue active)
Aug 19 19:23:04 server12 clamsmtpd: 100057: accepted connection from: 127.0.0.1
Aug 19 19:23:04 server12 postfix/smtpd[16388]: connect from localhost[127.0.0.1]
Aug 19 19:23:04 server12 postfix/smtpd[16388]: B2600281780: client=localhost[127.0.0.1]
Aug 19 19:23:04 server12 postfix/cleanup[16384]: B2600281780: info: header Subject: test from localhost[127.0.0.1]; from=<root@server12> to=<[email protected]> proto=ESMTP helo=<server12.org>
Aug 19 19:23:04 server12 postfix/cleanup[16384]: B2600281780: message-id=<20170819172304.sxkpxikicu7snioq@server12>
Aug 19 19:23:04 server12 clamsmtpd: 100057: from=root@server12, [email protected], status=CLEAN
Aug 19 19:23:04 server12 postfix/qmgr[16253]: B2600281780: from=<root@server12>, size=633, nrcpt=1 (queue active)
Aug 19 19:23:04 server12 postfix/smtp[16386]: 96BEF281AEC: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.26, delays=0.1/0.01/0.05/0.11, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as B2600281780)
Aug 19 19:23:04 server12 postfix/smtpd[16388]: disconnect from localhost[127.0.0.1] ehlo=1 xforward=1 mail=1 rcpt=1 data=1 quit=1 commands=6
Aug 19 19:23:04 server12 postfix/qmgr[16253]: 96BEF281AEC: removed
Aug 19 19:23:04 server12 postfix/smtp[16390]: B2600281780: to=<[email protected]>, relay=192.168.50.212[192.168.50.212]:25, delay=0.21, delays=0.1/0.01/0.02/0.09, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as D3A0164038F)
Aug 19 19:23:04 server12 postfix/qmgr[16253]: B2600281780: removed

No info/error logs but spamassassin doesn't filter any email

postfix
Martin Hope
Pol Hallen
Asked: 2017-08-19 07:11:23 +0800 CST
  • 2

cat /etc/dovecot/conf.f/10-auth.conf

[...]
disable_plaintext_auth = no
auth_username_format = %n-AT-%d
[...]

or also using %u variable (full username (e.g. user@domain)

cat /etc/dovecot/conf.f/auth-passwdfile.conf.ext [...]

passdb {
  driver = passwd-file
  args = scheme=SHA256 username_format=%n /etc/dovecot/users
}

userdb {
  driver = passwd-file
  args = scheme=SHA256 username_format=%n /etc/dovecot/users
}

cat users

[email protected]:{SSHA256}wr4SgH6sH5hNrSQhbVX/zUQqJrmO63aYI9Ograx+N0gZ1lAG
[...]

cat /var/log/dovecot.info

Aug 18 16:56:22 auth: Debug: passwd-file(domain1_info,192.168.50.212,<cGn/VAhX9YrAqDLU>): lookup: user=domain1.org_info file=/etc/dovecot/users                                                                                                                                                                                                                             ==> /var/log/dovecot.info <==                                                                                                                                                                Aug 18 16:56:22 auth: Info: passwd-file(domain1_info,192.168.50.212,<cGn/VAhX9YrAqDLU>): unknown user (given password: test)                                                                                                                                                                                                                                                     ==> /var/log/dovecot.debug <==                                                                                                                                                               Aug 18 16:56:24 auth: Debug: client passdb out: FAIL    1       user=domain1.org_info      [email protected]                                                          Aug 18 16:56:24 pop3-login: Debug: Ignoring unknown passdb extra field: original_user
[...]

I'd like connect to dovecot using [email protected] because if I modify 

/etc/dovecot/users

removing the domain after username, dovecot accepts username authentication

dovecot
Martin Hope
Pol Hallen
Asked: 2016-09-22 10:08:31 +0800 CST
  • 1

After upgraded isc-dhcp-server and keep my config I've a strange error like logs below:

Sep 21 20:02:03 asia isc-dhcp-server[24548]: key DDNS_UPDATE;
Sep 21 20:02:03 asia isc-dhcp-server[24548]: ^

ping-check true;
one-lease-per-client true;
get-lease-hostnames true;
update-conflict-detection false;
ddns-updates on;
ddns-update-style interim;
update-static-leases on;
allow unknown-clients;
use-host-decl-names on;
include "/etc/dhcp/rndc.key";

zone bunker.org. {
        primary localhost;
        key DDNS_UPDATE;
        }

zone 1.168.192.in-addr.arpa. {
        primary localhost;
        key DDNS_UPDATE;
        }

and logs here:

Sep 21 20:02:03 asia isc-dhcp-server[24548]: /etc/dhcp/dhcpd.conf line 30: unknown key DDNS_UPDATE
Sep 21 20:02:03 asia isc-dhcp-server[24548]: key DDNS_UPDATE;
Sep 21 20:02:03 asia isc-dhcp-server[24548]: ^
Sep 21 20:02:03 asia isc-dhcp-server[24548]: /etc/dhcp/dhcpd.conf line 35: unknown key DDNS_UPDATE
Sep 21 20:02:03 asia isc-dhcp-server[24548]: key DDNS_UPDATE;
Sep 21 20:02:03 asia isc-dhcp-server[24548]: ^
bind
Martin Hope
Pol Hallen
Asked: 2016-07-17 02:44:02 +0800 CST
  • 2

server1 - eth0 - 192.168.1.212 (192.168.1.0/24) - eth1 - 192.168.5.1 (192.168.5.0/24) --> router2 --> DSL

server2 - eth0 - 192.168.1.223 (192.168.1.0/24) - eth1 - 192.168.123.223 (192.168.123.0/24)

(DSL)router2 <--> server1 <--> server2

on server1

route add -net 192.168.123.0/24 gw 192.168.1.223 dev eth0
iptables -A FORWARD -s 192.168.123.0/24 -d 0/0 -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -d 192.168.123.0/24 -j ACCEPT

So, network 192.168.123.0/24 reachable 192.168.1.0/24 and router2 too. That's ok

I'd like deny network 192.168.123.0/24 to see all hosts on 192.168.1.0/24.

iptables route
Martin Hope
Pol Hallen
Asked: 2013-12-02 11:41:41 +0800 CST
  • 1

Many hours to check this script but nothing of good... I've a linux rsync server and with linux client I use:

rsync --password-file=/usr/home/user/.rsync.pass --log-file=/var/log/docs.log --progress --stats -avr --delete [email protected]::docs /home/user/docs

everything ok, the problem is with FreeBSD rsync client:

msg checking charset: ASCII
rsync: safe_read failed to read 1 bytes [Receiver]: Connection reset by peer (54)
[Receiver] _exit_cleanup(code=12, file=io.c, line=251): entered
rsync error: error in rsync protocol data stream (code 12) at io.c(251) [Receiver=3.1.0]
[Receiver] _exit_cleanup(code=12, file=io.c, line=251): about to call exit(12)

ssh port on linux server is 10321

also using 

--rsh='ssh -p10321'

I've same problem :-(

linux
Martin Hope
Pol Hallen
Asked: 2013-07-06 11:45:38 +0800 CST
  • 2

I configurated postfix to force uses TLS. When an external client try to send an email using this server there is not any problems. But using webmail (127.0.0.1) postfix wants TLS:

delivery temporarily suspended: TLS is required, but was not offered by host 127.0.0.1[127.0.0.1])

Which changes I need to do to master.cf?

smtp_use_tls = yes
smtp_tls_security_level = encrypt
smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtpd_tls_key_file = /etc/postfix/ssl/xxx.key
smtpd_tls_cert_file = /etc/postfix/ssl/xxx.crt
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
postfix