Sergey's questions

After a power loss 1 directory (maybe more, I don't know) just became a file on my SSD (ext4 fs):

-rw-------  1 postgres      postgres       16K May 15 20:06 stolon

It was a directory! How could it happen?
And can I make it great directory again?

That's the part:

vars_files:
  - vars/vars.default.yml
  - vars/vars.yml

If a file vars/vars.yml does not exist - here is an error.

ERROR: file could not read: /.../vars/vars.yml

How can I load additional variables from this file only if it exists? (with no errors)

I've just installed uwsgi by pip install uwsgi in a virtual env. In "ini" file I used:

socket = 127.0.0.1:3000
# no pidfile option

And run uwsgi --ini config.ini

But how to stop this instance of uwsgi?
uwsgi --stop ... wants a pid file. I can't use an address:

open("127.0.0.1:3000"): No such file or directory [core/io.c line 505]

And if killing - uwsgi just respawns itself.

Have this in configuration of jobs:

JobDefs {
  Name = "DefaultJob"
  Type = Backup
  Level = Incremental
  Client = "SERVER_1" 
  FileSet = "Full Set"
  Schedule = "Month-each-day cycle at 21:00"
  Storage = "ubuntu-station"
  Messages = Standard
  Pool = Default
  Priority = 10

  Write Bootstrap = "/var/lib/bacula/%c.bsr"
}

And it's ok, but it saves bootstrap files on the same machine I run Bacula server.
Can I specify a Client to save bootstrap files right with the backup archives? (I didn't find how to do it)
Or how it is better done?

Edit:
My backups are going here:

Client {
  Name = "ubuntu-station"
  Address = ip (it's other machine)
  FDPort = 9102
  Catalog = MyCatalog
  Password = ""
  File Retention = 90 days
  Job Retention = 6 months
  AutoPrune = yes
}

I have full access to it, but it's not always up. (So I can't use NFS, can I? try to mount it each time? Will Bacula hang if can't mount it?)

Isn't there an option to save bootstrap files to specific Client? Or only use NFS?

There is a Run After parameter in Bacula configs. But what if I need to wait for several jobs to finish and then run my script?

We have contentregexplist file where we can write all substitutions like "source regex"->"dest string"

And they ALL run for each page. Is it possible somehow to define a domain name(s) for which (only for 1 domain! not every page) some regexps should be looked for?

To be clear:
How to replace "Google"->"garbage" in page source only for host host.example.org?

May be other content filtering system can do this? Then which one?

It writes this in logs:

=INFO REPORT==== 2012-03-14 17:48:54 ===
I(<0.467.0>:ejabberd_listener:281) : (#Port<0.4384>) Accepted connection {{10,254,239,2},51986} -> {{10,254,239,1},5222}

=INFO REPORT==== 2012-03-14 17:48:54 ===
I(<0.1308.0>:ejabberd_c2s:784) : ({socket_state,tls,{tlssock,#Port<0.4384>,#Port<0.4386>},<0.1307.0>}) Failed authentication for USERNAME

=INFO REPORT==== 2012-03-14 17:48:54 ===
I(<0.1308.0>:ejabberd_c2s:649) : ({socket_state,tls,{tlssock,#Port<0.4384>,#Port<0.4386>},<0.1307.0>}) Failed authentication for USERNAME

It doesn't write IP with a failure.
And strings "Accepted connection" and "Failed auth.." may even not stand nearby (as I think on heavily loaded servers) to be able to use fail2ban.
What to do? And how jabber servers (using ejabberd) are protected?

/usr/ports/security/bcrypt

when I'm trying to install it I get this:

cc -O2 -pipe -fno-strict-aliasing  -c main.c
cc -O2 -pipe -fno-strict-aliasing  -c blowfish.c
cc -O2 -pipe -fno-strict-aliasing  -c rwfile.c
cc -O2 -pipe -fno-strict-aliasing  -c keys.c
cc -O2 -pipe -fno-strict-aliasing  -c wrapbf.c
cc -O2 -pipe -fno-strict-aliasing  -c endian.c
cc -O2 -pipe -fno-strict-aliasing  -c wrapzl.c
cc -O2 -pipe -fno-strict-aliasing  -o bcrypt main.o blowfish.o rwfile.o keys.o wrapbf.o endian.o wrapzl.o
wrapzl.o(.text+0x55): In function `douncompress':
: undefined reference to `uncompress'
wrapzl.o(.text+0x149): In function `docompress':
: undefined reference to `compress'
*** Error code 1
1 error
*** Error code 1

In makefile there is:

LDFLAGS+=       -lz

How to trace this error and solve problem?

Edit:
@arved, that is Makefile:

DEFAULTS = Makefile includes.h blowfish.h functions.h config.h
CC?= gcc
CFLAGS?= -O2 -Wall
COMPILE = ${CC} ${CFLAGS}
OBJS = main.o blowfish.o rwfile.o keys.o wrapbf.o endian.o wrapzl.o
LDFLAGS?= -L/usr/local/lib -lz
PREFIX?= /usr/local

I use FreeBSD and working with pf+ALTQ now.
Something doesn't work and I need a tool to view what requests are marked and moved to a queue "queue_name"
Need something like pftop but showing queues. Can anyone help?

I need to have a secure access from the internet to my squid server.
I have:

auth_param basic program /usr/local/squid/libexec/ncsa_auth /usr/local/squid/etc/passwd

that allow 1 user to use squid from outside but:
1) how to protect squid from bruteforcing?
2) how to encrypt passwords that are send to squid from the internet?