MacMac's questions -server

MacMac

Asked: 2016-01-21 02:14:44 +0800 CST

Prevent CentOS re-enabling user quotas after reboot/power failure

1

I have a client that has an internal server in their office for their Intranet.

Their office recently been through some power cuts in their area recently. Whenever the power goes back on, the server will boot up, and the user quotas will be reset to a default. This is causing problems when their staff are uploading to their Intranet because they have exceeded their quota.

Every time this happens, I disable the quotas, but this gets enabled when the server reboots.

How can I permanently disable quotas, including when the server reboots?

The server is running CentOS 6.6.

Here's the contents of /etc/fstab

MacMac

Asked: 2013-10-03 10:57:11 +0800 CST

Restarting nginx keeps asking PEM pass phrase

6

I'm trying to reload nginx, I have a wildcard certificate for one domain which I got from namecheap, now I have moved it to my server, and assigned a nginx configuration rule with this:

ssl_certificate             /etc/nginx/certs/website.com.crt;
ssl_certificate_key         /etc/nginx/certs/website.com.key;
ssl_ciphers                 ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!aNULL:!MD5:!EDH;
add_header                  Strict-Transport-Security max-age=15768000;
ssl_session_cache           shared:SSL:10m;

Now when I reload nginx by doing service nginx reload, I keep getting this prompted:

Reloading nginx configuration: Enter PEM pass phrase:

Unfortunately, I don't know the PEM pass phrase, but I do have the pass phrase when I generated the CSR with OpenSSL, but this did not match the PEM pass phrase.

I have no idea what I can do, how can I recover this, or be able to remove it (if it does not affect the security)

I am running Ubuntu 12.04.1 LTS and nginx 1.2.6.

MacMac

Asked: 2013-07-04 11:37:32 +0800 CST

Disable HTTPS for a domain that shares IP with another domain that is under HTTPS

1

I am running into a weird problem trying to disable HTTPS for one domain, but the other domain has HTTPS. They both are different websites running on a dedicated server, sharing the same IP address for the domains. However, I have a domain that does not have a SSL certificate, but the other does. I want to disable HTTPS for the non-certified domain while leaving the other domain with HTTPS on.

I have two different separate vhosts in /etc/nginx/sites-enabled/,

domain1.org (no HTTPS)

server {

    listen                      80;
    server_name                 www.domain1.org domain1.org;
    root                        /var/www/domain1.org;
    index                       index.html index.php index.htm;

    error_log                   /var/www/logs/domain1.errors.log;

    [ ... ]

domain2.com (with HTTPS)

server {

    listen                      443 ssl;
    server_name                 domain2.com www.domain2.com;

    # INCLUDE SSL CERTIFICATE
    include                     sites-enabled/domain2_ssl_include; 

    root                        /home/domain2/www/www;
    index                       index.html index.php index.htm;

    [ ... ]

I've included a listener to the port 443 for domain1.org, but once I do that, I get an aborted error from Firefox saying (when accessing https://domain1.org):

This Connection is Untrusted

You have asked Firefox to connect securely to domain1.org, but we can't confirm that your connection is secure.

I opened the technical data, it appears that the domain1.org is using the domain2.com SSL certificate:

domain1.org uses an invalid security certificate.

The certificate is only valid for the following names: *.domain2.com , domain2.com

(Error code: ssl_error_bad_cert_domain)

So I added this to domain1.org vhost configuration:

server {

    server_name                 domain1.org www.domain1.org;

    listen                      443 ssl;

    rewrite ^ http://domain1.org permanent;
}

Which still gets me prompted with the Firefox error.

Now... when I access to http://domain1.org, I get an 400 error from nginx saying this:

400 Bad Request

The plain HTTP request was sent to HTTPS port

I am not entirely sure what to do, disabling the https with ssl off; has no effect. How can I actually disable HTTPS for domain1.org but not for domain2.com?

I am using Ubuntu 12.04 running nginx 1.2.6.

MacMac

Asked: 2012-11-02 09:02:33 +0800 CST

Compiling passenger-install-nginx-module; "C compiler gcc is not found"

1

I am in the middle of a process of installing Redmine served with passenger and nginx with this tutorial. With the passenger-install-nginx-module, it works fine and during compiling it outputs an error with this,

Compiling and installing Nginx...
# sh ./configure --prefix='/etc/nginx' --with-http_ssl_module --with-http_gzip_static_module --with-cc-opt='-Wno-error' --with-pcre='/tmp/root-passenger-3197/pcre-8.31' --add-module='/var/lib/gems/1.8/gems/passenger-3.0.18/ext/nginx'
checking for OS
 + Linux 3.2.0-32-generic-pae i686
checking for C compiler ... not found

./configure: error: C compiler gcc is not found

--------------------------------------------

It looks like something went wrong

I don't understand why it cannot find gcc, but in the precheck step it said that gcc is found,

Checking for required software...

 * GNU C++ compiler... found at /usr/bin/g++
 * The 'make' tool... found at /usr/bin/make
 * A download tool like 'wget' or 'curl'... found at /usr/bin/wget
 * Ruby development headers... found
 * OpenSSL support for Ruby... found
 * RubyGems... found
 * Rake... found at /usr/bin/rake
 * rack... found
 * Curl development headers with SSL support... found
 * OpenSSL development headers... found
 * Zlib development headers... found

I then apt-get the possible gcc packages, but none were installed/updated because I already have them.

EDIT:

Packages I've tried with gcc,

gcc-4.4 g++-4.4 libstdc++6-4.4-dev gcc

EDIT:

nginx block for the redmine,

server {

    server_name         redmine.domain.com;

    access_log          /var/www/redmine.access.log;
    error_log           /var/www/redmine.error.log;

    root                /var/www/domain.com/redmine/public;

    passenger_enabled   on;
}

EDIT:

Now it looks like the issue is something to do with passenger_root and passenger_ruby, although I have included it in the nginx.conf now, but I'm not certain if they are the correct paths (what could I do to find the correct ones?)

My nginx.conf

user www-data;
worker_processes 4;
pid /var/run/nginx.pid;

events {
    worker_connections 768;
    # multi_accept on;
}

http {

    ##
    # Basic Settings
    ##

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    server_tokens off;

    # server_names_hash_bucket_size 64;
    # server_name_in_redirect off;

    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    ##
    # Logging Settings
    ##

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;

    ##
    # Gzip Settings
    ##

    gzip on;
    gzip_disable "msie6";

    # gzip_vary on;
    # gzip_proxied any;
    # gzip_comp_level 6;
    # gzip_buffers 16 8k;
    # gzip_http_version 1.1;
    # gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;

    ##
    # nginx-naxsi config
    ##
    # Uncomment it if you installed nginx-naxsi
    ##

    #include /etc/nginx/naxsi_core.rules;

    ##
    # nginx-passenger config
    ##
    # Uncomment it if you installed nginx-passenger
    ##

    #passenger_root /usr;
    #passenger_ruby /usr/bin/ruby;

    passenger_root /var/lib/gems/1.8/gems/passenger-3.0.18;
    passenger_ruby /usr/bin/ruby1.8;

    ##
    # Virtual Host Configs
    ##

    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/sites-enabled/*;
}


#mail {
#   # See sample authentication script at:
#   # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
# 
#   # auth_http localhost/auth.php;
#   # pop3_capabilities "TOP" "USER";
#   # imap_capabilities "IMAP4rev1" "UIDPLUS";
# 
#   server {
#       listen     localhost:110;
#       protocol   pop3;
#       proxy      on;
#   }
# 
#   server {
#       listen     localhost:143;
#       protocol   imap;
#       proxy      on;
#   }
#}

How would I fix this issue?

MacMac

Asked: 2012-10-06 10:58:42 +0800 CST

Redirecting wildcard email to one email with postfix

7

I'm creating a bounce email system where addressees can reply to messages on my site.

However when the email are sent to the user containing the previous message, the Reply-To field contains an address like this [email protected] (which contains the ID at the end).

If the user replies, the reply message will be sent back to [email protected] which of course, doesn't have its own mailbox, except the [email protected].

How would I redirect all incoming messages coming from a specific wildcard notification-message-*@mysite.com to [email protected]? I did some research, but no solid part worked, including the luser_relay = [email protected] and putting notification-message-* in the postfix aliases table, the notification@ has a Maildir, so the mail would go into it.

A concept diagram:

enter image description here

I am using Ubuntu 11.04.

MacMac

Asked: 2012-09-18 04:03:43 +0800 CST

Converting Apache's rules to nginx

1

I have this quite large htaccess that I written, but converting to nginx is no luck for me, I tried this site to convert but I had errors when reloading nginx,

Reloading nginx configuration: nginx: [emerg] directive "rewrite" is not terminated by ";" in /etc/nginx/sites-enabled/mywebsite:22

This my full htaccess:

RewriteEngine On

RewriteCond %{HTTP_HOST} ^www.mywebsite.org$ [NC]
RewriteRule ^(.*)$ http://mywebsite.org/$1 [R=301,L]

RewriteBase /

RewriteRule ^lang/(.*?)$ index.php?lang=$1
RewriteRule ^([a-z]{2})/?$ index.php?lang=$1
RewriteRule ^message/(.*?)$ index.php?msg=$1

RewriteRule ^add(/(.*?))?$ index.php?mode=add&msg=$2
RewriteRule ^world/?$ index.php?mode=map
RewriteRule ^advanced(/(.*?))?$ search.php?mode=advanced&msg=$2
RewriteRule ^addrecord/? record.php
RewriteRule ^updaterecord/?$ record.php?mode=edit
RewriteRule ^contributerecord/?$ record.php?mode=edit&contribution=1

RewriteRule ^search/([^/]*)/?([^/]*)/?([0-9]{2,3})/? search.php?q=$1&page=$2&limit=$3
RewriteRule ^search/([^/]*)/?([^/]*)/includes/?([^/]*)/?([^/]*)/?$ search.php?q=$1&page=$2&filter=files&includes=$3&limit=$4
RewriteRule ^search/([^/]*)/?([^/]*)/range/?([^/]*)/?([^/]*)/?([^/]*)/?$ search.php?q=$1&page=$2&filter=range&start=$3&end=$4&limit=$5
RewriteRule ^search/([^/]*)/?([^/]*)/?([^/]*)/?([^/]*)/?([^/]*)/?$ search.php?q=$1&page=$2&filter=$3&order=$4&limit=$5

RewriteRule ^avsearch/(.*?)/(.*?)/?$ search.php?mode=results&q=$1&categories=$2

RewriteRule ^location/(.*?)(/(.*?))?$ view.php?id=$1&msg=$3
RewriteRule ^lock/(.*?)$ record.php?mode=lock&id=$1
RewriteRule ^unlock/(.*?)$ record.php?mode=unlock&id=$1
RewriteRule ^edit/(.*?)$ record.php?mode=edit&id=$1
RewriteRule ^contribute/(.*?)$ record.php?mode=edit&id=$1&contribution=1
RewriteRule ^delete/(.*?)$ record.php?mode=delete&id=$1

RewriteRule ^user/(.*?)(/(.*?))?$ profile.php?mode=view&id=$1&page=$3
RewriteRule ^whoami/?$ ucp.php?mode=whoami
RewriteRule ^resend/?$ profile.php?mode=resend
RewriteRule ^request/?$ profile.php?mode=request

RewriteRule ^thread/(.*?)$ ucp.php?mode=thread&id=$1
RewriteRule ^ucp/front(/(.*?))$ ucp.php?mode=front&msg=$2
RewriteRule ^ucp/security(/(.*?))?$ ucp.php?mode=security&msg=$2
RewriteRule ^ucp(/(.*?))?(/(.*?))?$ ucp.php?mode=$2&page=$4
RewriteRule ^updateprofile/?$ profile.php?mode=update
RewriteRule ^updatepassword/?$ profile.php?mode=password
RewriteRule ^emailchange/?$ profile.php?mode=email
RewriteRule ^logout/?$ profile.php?mode=logout
RewriteRule ^login/?$ profile.php?mode=login
RewriteRule ^register/?$ profile.php?mode=register
RewriteRule ^forgotuser/?$ profile.php?mode=forgotuser
RewriteRule ^forgotpass/?$ profile.php?mode=forgotpass
RewriteRule ^rmvnotification/?$ profile.php?mode=rmvnote
RewriteRule ^updatesubrecord/?$ record.php?mode=pre&rl=1
RewriteRule ^addprerecord/?$ record.php?mode=pre
RewriteRule ^quickregister/?$ profile.php?mode=showregister
RewriteRule ^inlineregister/?$ profile.php?mode=register&return=1
RewriteRule ^activate/(.*?)/?$ profile.php?mode=activate&key=$1
RewriteRule ^reactivate/(.*?)/?(/(.*?))?$ profile.php?mode=reactivate&key=$1&msg=$3
RewriteRule ^resendpass/?$ profile.php?mode=resendpass

RewriteRule ^rss/?$ page.php?mode=rss
RewriteRule ^api/?$ page.php?mode=api
RewriteRule ^help/?$ page.php?mode=help
RewriteRule ^faq/?$ page.php?mode=faq

RewriteRule ^like/?$ profile.php?mode=like
RewriteRule ^unlike/?$ profile.php?mode=unlike

RewriteRule ^approve/?$ record.php?mode=approve
RewriteRule ^disapprove/?$ record.php?mode=disapprove

RewriteRule ^files/(.*?)(/(.*?))?$ record.php?mode=file&fid=$1&preview=$3
RewriteRule ^send(/(.*?))?$ profile.php?mode=message&msg=$2
RewriteRule ^sendmessage/?$ profile.php?mode=sendmessage
RewriteRule ^report/?$ record.php?mode=report

ErrorDocument 404 /404.html
ErrorDocument 403 /403.html
ErrorDocument 500 /500.html

RewriteRule ^sitemap.xml$ sitemap.php
RewriteRule ^privupload/?$ acp/config.php?mode=upload

RewriteRule ^3rdparty/?$ api/3rdparty.php

# Custom pages
RewriteRule ^legal/?$ page.php?mode=legal
RewriteRule ^help/?$ page.php?mode=help
RewriteRule ^about/?$ page.php?mode=about
RewriteRule ^faq/?$ page.php?mode=faq
RewriteRule ^documentation/?$ page.php?mode=documentation

and this is the attempt when converted using the online tool:

server {

    server_name     mywebsite.com mywebsite.org mywebsite.info mywebsite.mobi mywebsite.net;

    root            /var/www/mywebsite.org/www;
    index           index.php index.htm index.html;

    access_log      off;
    error_log       /var/www/mywebsite.org/logs/errors.log;

    if ($http_host ~* "^www.mywebsite.org$"){
        set $rule_0 1$rule_0;
    }
    if ($rule_0 = "1"){
        rewrite ^/(.*)$ http://mywebsite.org/$1 permanent;
    }

    rewrite ^/lang/(.*?)$ /index.php?lang=$1;
    rewrite ^/([a-z]{2})/?$ /index.php?lang=$1;   # THIS IS LINE 22
    rewrite ^/message/(.*?)$ /index.php?msg=$1;
    rewrite ^/add(/(.*?))?$ /index.php?mode=add&msg=$2;
    rewrite ^/world/?$ /index.php?mode=map;
    rewrite ^/advanced(/(.*?))?$ /search.php?mode=advanced&msg=$2;
    rewrite ^/addrecord/? /record.php;
    rewrite ^/updaterecord/?$ /record.php?mode=edit;
    rewrite ^/contributerecord/?$ /record.php?mode=edit&contribution=1;
    rewrite ^/search/([^/]*)/?([^/]*)/?([0-9]{2,3})/? /search.php?q=$1&page=$2&limit=$3;
    rewrite ^/search/([^/]*)/?([^/]*)/includes/?([^/]*)/?([^/]*)/?$ /search.php?q=$1&page=$2&filter=files&includes=$3&limit=$4;
    rewrite ^/search/([^/]*)/?([^/]*)/range/?([^/]*)/?([^/]*)/?([^/]*)/?$ /search.php?q=$1&page=$2&filter=range&start=$3&end=$4&limit=$5;
    rewrite ^/search/([^/]*)/?([^/]*)/?([^/]*)/?([^/]*)/?([^/]*)/?$ /search.php?q=$1&page=$2&filter=$3&order=$4&limit=$5;
    rewrite ^/avsearch/(.*?)/(.*?)/?$ /search.php?mode=results&q=$1&categories=$2;
    rewrite ^/location/(.*?)(/(.*?))?$ /view.php?id=$1&msg=$3;
    rewrite ^/lock/(.*?)$ /record.php?mode=lock&id=$1;
    rewrite ^/unlock/(.*?)$ /record.php?mode=unlock&id=$1;
    rewrite ^/edit/(.*?)$ /record.php?mode=edit&id=$1;
    rewrite ^/contribute/(.*?)$ /record.php?mode=edit&id=$1&contribution=1;
    rewrite ^/delete/(.*?)$ /record.php?mode=delete&id=$1;
    rewrite ^/user/(.*?)(/(.*?))?$ /profile.php?mode=view&id=$1&page=$3;
    rewrite ^/whoami/?$ /ucp.php?mode=whoami;
    rewrite ^/resend/?$ /profile.php?mode=resend;
    rewrite ^/request/?$ /profile.php?mode=request;
    rewrite ^/thread/(.*?)$ /ucp.php?mode=thread&id=$1;
    rewrite ^/ucp/front(/(.*?))$ /ucp.php?mode=front&msg=$2;
    rewrite ^/ucp/security(/(.*?))?$ /ucp.php?mode=security&msg=$2;
    rewrite ^/ucp(/(.*?))?(/(.*?))?$ /ucp.php?mode=$2&page=$4;
    rewrite ^/updateprofile/?$ /profile.php?mode=update;
    rewrite ^/updatepassword/?$ /profile.php?mode=password;
    rewrite ^/emailchange/?$ /profile.php?mode=email;
    rewrite ^/logout/?$ /profile.php?mode=logout;
    rewrite ^/login/?$ /profile.php?mode=login;
    rewrite ^/register/?$ /profile.php?mode=register;
    rewrite ^/forgotuser/?$ /profile.php?mode=forgotuser;
    rewrite ^/forgotpass/?$ /profile.php?mode=forgotpass;
    rewrite ^/rmvnotification/?$ /profile.php?mode=rmvnote;
    rewrite ^/updatesubrecord/?$ /record.php?mode=pre&rl=1;
    rewrite ^/addprerecord/?$ /record.php?mode=pre;
    rewrite ^/quickregister/?$ /profile.php?mode=showregister;
    rewrite ^/inlineregister/?$ /profile.php?mode=register&return=1;
    rewrite ^/activate/(.*?)/?$ /profile.php?mode=activate&key=$1;
    rewrite ^/reactivate/(.*?)/?(/(.*?))?$ /profile.php?mode=reactivate&key=$1&msg=$3;
    rewrite ^/resendpass/?$ /profile.php?mode=resendpass;
    rewrite ^/rss/?$ /page.php?mode=rss;
    rewrite ^/api/?$ /page.php?mode=api;
    rewrite ^/help/?$ /page.php?mode=help;
    rewrite ^/faq/?$ /page.php?mode=faq;
    rewrite ^/like/?$ /profile.php?mode=like;
    rewrite ^/unlike/?$ /profile.php?mode=unlike;
    rewrite ^/approve/?$ /record.php?mode=approve;
    rewrite ^/disapprove/?$ /record.php?mode=disapprove;
    rewrite ^/files/(.*?)(/(.*?))?$ /record.php?mode=file&fid=$1&preview=$3;
    rewrite ^/send(/(.*?))?$ /profile.php?mode=message&msg=$2;
    rewrite ^/sendmessage/?$ /profile.php?mode=sendmessage;
    rewrite ^/report/?$ /record.php?mode=report;
    rewrite ^/sitemap.xml$ /sitemap.php;
    rewrite ^/privupload/?$ /acp/config.php?mode=upload;
    rewrite ^/3rdparty/?$ /api/3rdparty.php;
    rewrite ^/legal/?$ /page.php?mode=legal;
    rewrite ^/help/?$ /page.php?mode=help;
    rewrite ^/about/?$ /page.php?mode=about;
    rewrite ^/faq/?$ /page.php?mode=faq;
    rewrite ^/documentation/?$ /page.php?mode=documentation;

    location ~ \.php$ 
    {
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME /var/www/mywebsite.org/www$fastcgi_script_name;
        include fastcgi_params;
    }
}

What could seem to be the problem?

MacMac

Asked: 2012-08-31 06:18:32 +0800 CST

How to open UDP port 7777 from iptables/firewall on Ubuntu 11.04

1

I need to enable the port 7777 from my VPS which runs Ubuntu 11.04, I have added rules from the iptables which is listed here,

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere            udp dpt:7777 

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere            udp dpt:7777 

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
ACCEPT     udp  --  anywhere             anywhere            udp dpt:7777

However, when I telnet to port 7777, it says connection refused from my side, telnet xx.xx.xx.xx 7777, even if I telnet on the server with telnet localhost 7777.

How should I effectively open it to allow connections to port 7777 to my server?

MacMac

Asked: 2012-04-13 08:25:06 +0800 CST

Error sending email to alias with Postfix

1

I'm on Ubuntu 11.04 64bit.

I'm trying to set up Postfix on my VPS, which has been configured but when I send an email to an alias e.g. [email protected] it will send it to [email protected]. Now when I sent the email from my GMail account, I got this returned:

Delivery to the following recipient failed permanently:

    [email protected]

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 #5.1.0 Address rejected [email protected] (state 14).

----- Original message -----

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
       d=gmail.com; s=20120113;
       h=mime-version:date:message-id:subject:from:to:content-type;
       bh=R1WtjVRWywfkWCR2g4QKbSjAfUaU9DAAMKbg9UAWqvs=;
       b=FiSfdhEaV4pEq/76ENlH4tvOgm35Ow3ulRg06kDYrIQTaDf3eOEgfSEgH25PjZuAj/
        7Hg1CL++o6Rt/tl80ZiR2AWekhA0zIn2JkqE7KssMG7WbBmMmbf8V9KDo2jOw+mZv+C/
        KDKsQ65AudBZ/NYLDDpTT7MkKf8DzqeGCKj9MAct6sHDoC0wCciXYxNfTf+MKxrZvRHQ
        oICTkH5LOugKW9wEjPF2AoO8X0qgYmTLYeSUtXxu46VeNKRBGmdRkkpPOoJlQN9ank7i
        SW6kU6M9bk2bYOgKwV/YPsaantmYlu1XdmYx+kWeJkNJAyYOfXfZZ8WUJhbbFFD9bZCi
        m/hw==
MIME-Version: 1.0
Received: by 10.101.3.5 with SMTP id f5mr783908ani.86.1334247306547; Thu, 12
 Apr 2012 09:15:06 -0700 (PDT)
Received: by 10.236.73.136 with HTTP; Thu, 12 Apr 2012 09:15:06 -0700 (PDT)
Date: Thu, 12 Apr 2012 17:15:06 +0100
Message-ID: <CAN+9S2aB=xjiDxVZx3qYZoBMFD4XuadUyR_3OYWaxw1ecrZmOQ@mail.gmail.com>
Subject: Test Email
From: My Name <[email protected]>
To: [email protected]
Content-Type: multipart/alternative; boundary=001636c597eabfd21504bd7da8fd

Now that I don't understand why it isn't working, my aliases are set up correctly - I see no error messages being produced in /var/log/mail.log or any other mail logs, which makes it harder for me to debug.

This is my postfix configuration (postconf -n):

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
inet_interfaces = all
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
mydestination = $mydomain, $myhostname, localhost, localhost.localdomain, localhost
mydomain = domain.com
myhostname = localhost
mynetworks = 192.168.1.0/24 127.0.0.0/8
readme_directory = no
recipient_delimiter = +
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes

Does anyone know how to solve this specific issue?

EDIT:

I found this in my mail log (/var/log/mail.log):

Apr 13 21:56:03 giTzor postfix/smtp[22260]: 12E761796006: to=<[email protected]>, orig_to=<[email protected]>, relay=mx2.hotmail.com[65.55.37.120]:25, delay=1.5, delays=0/0.01/0.64/0.8, dsn=2.0.0, status=sent (250  <[email protected]> Queued mail for delivery)
Apr 13 21:56:03 giTzor postfix/qmgr[1773]: 12E761796006: removed

EDIT:

This is the MX records at GoDaddy:

enter image description here

EDIT:

I've edited my A records and MX records:

enter image description here

I can send emails to my aliases with Google Mail, but I can't seem to receive emails from other sites such as Facebook, Yahoo, etc - even Hotmail accounts.

MacMac

Asked: 2012-03-30 14:00:04 +0800 CST

How to throttle bandwidth speed from VPS

1

I was wondering if you can throttle/boost the download speed from my VPS to me, because now and often I download a database which is quite big, typically 5-7GB. My side is quite slow (typically I have max speeds of 100Kb/s) so I was wondering if it's possible to throttle the bandwidth speed from my server to me that it could make the download much faster.

If this is possible, how can I do this?

My server is running Ubuntu 11.04 with a 100Mbps line.

MacMac

Asked: 2012-03-03 15:54:27 +0800 CST

Copy files from SVN server to external server via FTP

3

Currently I have about 5 servers, one I would like to use as a SVN server for development reasons, but I want it to be able to update the external server such as copying committed files to the external server via FTP (or any securer transfer).

Basically when I make a commit to my SVN server with the files that are needed changing it should copy those files from the SVN server to my main site. Is there any method I can do this?

I'm running nginx and Ubuntu 11.04.

MacMac

Asked: 2012-01-11 12:33:44 +0800 CST

OpenSSL extension for PHP in Ubuntu?

6

I'm not sure how to recompile PHP with OpenSSL? I've been looking around the OpenSSL PHP page and the OpenSSL tutorials but I don't see any openssl.so or php-openssl.so around my server?

Is there a simple package on apt-get channel so I can install it from there?

I just need to recompile PHP with OpenSSL, but I have no idea how to do this.

EDIT: I run a dedicated server and it's Ubuntu 11.10.

MacMac

Asked: 2011-12-18 13:00:05 +0800 CST

Authentication with specific subdomains

4

Basically I'm trying to enable the authentication module when accessing to a specific part of a subdomain, which are dev.domain.com and pma.domain.com, they both must have the authentication module loaded. I can't seem to figure why my nginx configuration file isn't working.

In the second server block you can see the pma and dev with the authentication module, when I access to pma.domain.com or dev.domain.com, I don't see the authentication module showing from my browser, nor any error logs stored.

Anyway, I just need a fix to enable the authentication on them two subdomains, not an entire rewrite of my nginx configuration file.

server {

    server_name domain.com;

    root            /var/www/domain.com/www;
    index           index.php index.htm index.html;
    error_page      404 /404.html;
    error_page      500 502 503 504  /50x.html;

    access_log      /var/www/domain.com/logs/access.log;
    error_log       /var/www/domain.com/logs/errors.log;

    error_page 404  /index.php;

    location ~ \.php$ 
    {
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME /var/www/domain.com/www$fastcgi_script_name;
        include fastcgi_params;
    }
}

server {

    server_name ~^(.+)\.domain\.com$;

    set $file_path $1;

    root            /var/www/domain.com/www/$file_path;
    index           index.html index.php;

    access_log      /var/www/domain.com/logs/access.log;
    error_log       /var/www/domain.com/logs/errors.log;

    location /
    {
        try_files $uri /$uri /index.php?$args;
    }

    location ~ pma
    {
        auth_basic            "Website development";
        auth_basic_user_file  /var/www/domain.com/www/dev/authfile;
    }

    location ~ dev
    {
        auth_basic            "Website development";
        auth_basic_user_file  /var/www/domain.com/www/dev/authfile;
    }

    location ~ \.php$ 
    {
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME /var/www/domain.com/www$fastcgi_script_name;
        include fastcgi_params;
    }
}

Anyone?

MacMac

Asked: 2011-11-11 08:39:53 +0800 CST

Fixing 'Relay access denied' in Postfix

3

Before you claim about duplicates and so on, I've checked these topics:

The above topics doesn't solve my problems, perhaps this is something to do with my configuration file which totally differs to one of the topics above, so I'm posting a new fresh topic.

I'm trying to set up Postfix to work with sending emails and mail aliases. If I send an email with my hotmail account to [email protected] I get a reply from hotmail saying:

This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed.

      [email protected]



Reporting-MTA: dns;blu0-omc4-s15.blu0.hotmail.com
Received-From-MTA: dns;BLU0-SMTP148
Arrival-Date: Thu, 10 Nov 2011 08:31:02 -0800

Final-Recipient: rfc822;[email protected]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp;554 5.7.1 <[email protected]>: Relay access denied

From: My name <[email protected]>
Subject: Testing
Date: 10 November 2011 16:30:58 GMT
To: [email protected]

This is a typical test

I already have the mail aliases set up, pointing to the correct emails and such.

This is the /etc/postfix/main.cf I have.

# See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = localhost
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mydestination = $mydomain, $myhostname, localhost, localhost.localdomain, , localhost
#relayhost = 
relayhost = $mydomain

#mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mynetworks = 192.168.1.0/24 127.0.0.0/8

mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all

Here's an log when I sent an email:

Nov 10 18:29:42 website postfix/smtpd[3320]: connect from blu0-omc4-s8.blu0.hotmail.com[65.55.111.147]
Nov 10 18:29:42 website postfix/smtpd[3320]: BA882D90044: client=blu0-omc4-s8.blu0.hotmail.com[65.55.111.147]
Nov 10 18:29:42 website postfix/cleanup[3324]: BA882D90044: message-id=<[email protected]>
Nov 10 18:29:42 website postfix/qmgr[3143]: BA882D90044: from=<[email protected]>, size=1107, nrcpt=1 (queue active)
Nov 10 18:29:42 website postfix/cleanup[3324]: E91B9D90047: message-id=<[email protected]>
Nov 10 18:29:42 website postfix/local[3325]: BA882D90044: to=<[email protected]>, relay=local, delay=0.29, delays=0.28/0.01/0/0, dsn=2.0.0, status=sent (forwarded as E91B9D90047)
Nov 10 18:29:42 website postfix/qmgr[3143]: E91B9D90047: from=<[email protected]>, size=1231, nrcpt=1 (queue active)
Nov 10 18:29:42 website postfix/qmgr[3143]: BA882D90044: removed
Nov 10 18:29:42 website postfix/smtp[3326]: warning: relayhost configuration problem
Nov 10 18:29:42 website postfix/smtp[3326]: E91B9D90047: to=<[email protected]>, orig_to=<[email protected]>, relay=none, delay=0.02, delays=0/0.01/0.02/0, dsn=4.3.5, status=deferred (mail for mail.domain.com loops back to myself)
Nov 10 18:29:43 website postfix/smtpd[3320]: disconnect from blu0-omc4-s8.blu0.hotmail.com[65.55.111.147]

After removing relayhosts line:

Nov 10 18:37:23 website postfix/smtpd[3596]: connect from blu0-omc4-s9.blu0.hotmail.com[65.55.111.148]
Nov 10 18:37:23 website postfix/smtpd[3596]: 7DD9DD90044: client=blu0-omc4-s9.blu0.hotmail.com[65.55.111.148]
Nov 10 18:37:23 website postfix/cleanup[3601]: 7DD9DD90044: message-id=<[email protected]>
Nov 10 18:37:23 website postfix/qmgr[3595]: 7DD9DD90044: from=<[email protected]>, size=2223, nrcpt=1 (queue active)
Nov 10 18:37:23 website postfix/cleanup[3601]: B1D59D90048: message-id=<[email protected]>
Nov 10 18:37:23 website postfix/local[3602]: 7DD9DD90044: to=<[email protected]>, relay=local, delay=0.32, delays=0.32/0/0/0, dsn=2.0.0, status=sent (forwarded as B1D59D90048)
Nov 10 18:37:23 website postfix/qmgr[3595]: B1D59D90048: from=<[email protected]>, size=2347, nrcpt=1 (queue active)
Nov 10 18:37:23 website postfix/qmgr[3595]: 7DD9DD90044: removed
Nov 10 18:37:23 website postfix/smtpd[3596]: disconnect from blu0-omc4-s9.blu0.hotmail.com[65.55.111.148]
Nov 10 18:37:24 website postfix/smtp[3603]: B1D59D90048: to=<[email protected]>, orig_to=<[email protected]>, relay=mx4.hotmail.com[65.54.188.126]:25, delay=1.1, delays=0/0/0.51/0.55, dsn=2.0.0, status=sent (250 mail from IP 94.75.251.47 soft failed sender ID check. Please ensure this IP is authorized to send mail on behalf of [hotmail.co.uk])
Nov 10 18:37:24 website postfix/qmgr[3595]: B1D59D90048: removed

MacMac

Asked: 2011-10-01 13:59:35 +0800 CST

connect() failed (111: Connection refused) while connecting to upstream

127

I'm experiencing 502 Gateway errors when accessing a PHP file in a directory (http://example.com/dev/index.php). The logs simply says this:

2011/09/30 23:47:54 [error] 31160#0: *35 connect() failed (111: Connection refused) while connecting to upstream, client: xx.xx.xx.xx, server: domain.com, request: "GET /dev/ HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "domain.com"

I've never experienced this before. What is the solution for this type of 502 Gateway error?

This is the nginx.conf:

user www-data;
worker_processes 4;
pid /var/run/nginx.pid;

events {
    worker_connections 768;
    # multi_accept on;
}

http {

    ##
    # Basic Settings
    ##

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    # server_tokens off;

    # server_names_hash_bucket_size 64;
    # server_name_in_redirect off;

    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    ##
    # Logging Settings
    ##

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;

    ##
    # Gzip Settings
    ##

    gzip on;
    gzip_disable "msie6";

    # gzip_vary on;
    # gzip_proxied any;
    # gzip_comp_level 6;
    # gzip_buffers 16 8k;
    # gzip_http_version 1.1;
    # gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;

    ##
    # Virtual Host Configs
    ##

    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/sites-enabled/*;
}

MacMac

Asked: 2011-10-01 05:24:25 +0800 CST

When accessing PHP files, nginx throws an 404 error

1

Right, sorry for the previous, recent questions I've asked about nginx, this is just doing my head in.

I've enabled PHP using fastcgi_php and it works just fine, however, when I access to a PHP file, e.g.

http://domain.com/info.php

(which applies to var/www/domain.com/www/info.php)

Which includes the phpinfo() and nginx throws an 404 error... if I access to a normal file, e.g.

http://domain.com/index.html

It seems fine... how come nginx won't process with the PHP files?

This is the etc/nginx/sites-enabled/domain.com.

server {
    listen   80;
    server_name  domain.com *.domain.com;

    access_log /var/www/domain.com/logs/nginx_access.log;
    error_log  /var/www/domain.com/logs/nginx_error.log;

    root   /var/www/domain.com/www/;

    location / {
        index  index.html index.htm index.php;
    }

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /var/www/nginx-default;
    }

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    location ~ /\.ht {
        deny  all;
    }

    # Enable PHP
    include /etc/nginx/fastcgi_php;
}

I have no clue what to do further...

EDIT:

My /etc/nginx/fastcgi_php

location ~ \.php$ {
    fastcgi_pass   unix:/var/run/php-fastcgi/php.sock;
    fastcgi_index  index.php;
    fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
    include /etc/nginx/fastcgi_params;
}

MacMac

Asked: 2011-10-01 02:50:49 +0800 CST

How to install nginx and install the configuration files too

16

I've just completely uninstalled nginx 1.0.6 from my server (Ubuntu 11.04) using

apt-get remove nginx 
rm -rf /etc/nginx/
rm -rf /usr/sbin/nginx
rm /usr/share/man/man1/nginx.1.gz
apt-get remove nginx*

Now I want to install it again, however when starting nginx, I get errors such as:

Restarting nginx: nginx: [emerg] open() "/etc/nginx/nginx.conf" failed (2: No such file or directory)

Then I placed my own conf file, then I get a new error:

Restarting nginx: nginx: [emerg] open() "/etc/nginx/mime.types" failed (2: No such file or directory) in /etc/nginx/nginx.conf:12

Now it seems that apt-get install nginx doesn't install it completely, I cleared the apt-get cache, doesn't seem to help. How can I get a full installation of nginx using apt-get?

MacMac

Asked: 2011-09-30 14:36:38 +0800 CST

How to create this type of subdomain: example.test.domain.com

3

I've managed to find a rewrite for making subdomains (which I have a wildcard domain pointed to my server; *.domain.com.

If I go to test.domain.com, it works just fine which transverse to:

/var/www/domain.com/www/test/

If I do example.test.domain.com, it should do this:

/var/www/domain.com/www/test/example/

Which is another directory in the test directory.

This is the rewrite I found to be used, but how should I implement the two directory subdomain in this?

if ($host !~* ^www\.domain\.domain$) {}
if ($host ~* ^([^.]+)\.domain\.com$) {
    set $auto_subdomain $1;
}
if (-d /var/www/domain.com/www/$auto_subdomain) {}
if (-f /var/www/domain.com/www/$auto_subdomain$uri) {
    rewrite ^(.*)$ /$auto_subdomain$uri;
    break;
}

MacMac

Asked: 2011-09-17 10:08:52 +0800 CST

In Webmin (BIND DNS), how do I make ns1.xx.com, ns2.xx.com point to 2 different IPs for multiple domains

2

I have multiple domains which list as:

domain.com
domain.org
domain.biz
domain.mobi

and I also have 2 IP addresses which are:

46.4.198.15
46.4.198.16

The server IP is:

46.4.198.1

Now, I want to set them up to be able to work with the domains I have, which of course has to point to the ns1.domain.com and ns2.domain.com, however I want to set them up in Webmin, which the nameservers will be pointed as:

ns1.domain.com --> 46.4.198.15
ns2.domain.com --> 46.4.198.16

Then all domains will point to ns1.domain.com and ns2.domain.com. I have no idea how to do so.

EDIT:

Okay, I've managed to install BIND DNS module for Webmin, I have done the following:

Created master zone (domain.com).
Created 2 nameservers in Name Server Records
1. domain.com. -> ns1.domain.com
2. domain.com. -> ns2.domain.com
Created 3 addresses in Address Records
1. domain.com. -> 46.4.198.1
2. ns1.domain.com. -> 46.4.198.15
3. ns1.domain.com. -> 46.4.198.16

I've also done it to the following other domains, but they all point to ns1.domain.com and ns2.domain.com, yet I still don't see my DNS being propagated, it's been 3+ days. Even What's my DNS has reported my DNS is not propagated yet. Am I doing something wrong?

MacMac

Asked: 2011-08-27 08:23:11 +0800 CST

ACL allow IP range Squid

8

I'm using Squid and I want to know how to make a specific IP range of allowed connections, I use this

acl permittedips src 77.86.72.49

http_access allow permittedips

But I want to make an range that allows from 70.*.*.* to 90.*.*.*. How can I do this the easiest way?

MacMac

Asked: 2011-07-03 02:37:59 +0800 CST

Memcached problems "failed to listen on TCP port 11211"

3

I just installed memcached on my Mac OS X 10.6.8. It installed perfectly and when I type in memcached in Terminal I get this:

failed to listen on TCP port 11211 tcp
listen: Address already in use

And I have a script in my localhost that contains this:

$memcache = new Memcache();

But I get an error thrown saying Fatal error: Class 'Memcache' not found.

How can I get memcached to work, is it because the port 11211 is not listened to which probably doesn't make memcached work?

Prevent CentOS re-enabling user quotas after reboot/power failure

Restarting nginx keeps asking PEM pass phrase

Disable HTTPS for a domain that shares IP with another domain that is under HTTPS

Compiling passenger-install-nginx-module; "C compiler gcc is not found"

Redirecting wildcard email to one email with postfix

Converting Apache's rules to nginx

How to open UDP port 7777 from iptables/firewall on Ubuntu 11.04

Error sending email to alias with Postfix

How to throttle bandwidth speed from VPS

Copy files from SVN server to external server via FTP

OpenSSL extension for PHP in Ubuntu?

Authentication with specific subdomains

Fixing 'Relay access denied' in Postfix

connect() failed (111: Connection refused) while connecting to upstream

When accessing PHP files, nginx throws an 404 error

How to install nginx and install the configuration files too

How to create this type of subdomain: example.test.domain.com

In Webmin (BIND DNS), how do I make ns1.xx.com, ns2.xx.com point to 2 different IPs for multiple domains

ACL allow IP range Squid

Memcached problems "failed to listen on TCP port 11211"

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

Ping a Specific Port

Check if port is open or closed on a Linux server?

How to automate SSH login with password?

How do I tell Git for Windows where to find my private RSA key?

What's the default superuser username/password for postgres after a new install?

What port does SFTP use?

Command line to list users in a Windows Active Directory group?

What is a Pem file and how does it differ from other OpenSSL Generated Key File Formats?

How to determine if a bash variable is empty?