[BlueOnyx:26441] Re: easy-backup ftp problem and question

[JW Ronken via Blueonyx]

Hi Michael
Don't worry about the subdirs in the remote directory path, I already did
it in the way you proposed.
Regarding the notification sending, I noticed that after the easy-backup
finishes the log file is still in /home/.easy-backup/
(on all 4 5210R where Easy-Backup is currently installed).
Running a full backup from the CLI gives this at the end:

Error parsing time at
/home/solarspeed/easy-backup/tmp/par-726f6f74/cache-f1214cafafa8c3fccb2fe571fe0f283e2a94c809/inc/lib/Time/Piece.pm
line 481,  line 1703.


Can it be that this causes the mail issue and/or not deletion of the log
file?
I think you still have alter-admin access to one of the servers, so feel
free to check if you have time or I happily open a new ticket.

Thanks
janwillem



On Mon, Sep 4, 2023 at 8:51 PM Michael Stauber via Blueonyx <
blueonyx@mail.blueonyx.it> wrote:

> Hi Janwillem,
>
> > So far Easy-Backup works very well (haven't tried a restore yet) but the
> > only issue I see is that the email notification are not working on any
> > server.
> > there is not even an attempt to email visible in /var/log/maillog
> > Am I missing something?
>
> No idea. So far the email notification in Easy-Backup has been rock
> solid for me, aside from some UTF-8 and Mime-Encoding related issues
> during development. Easy-Backup uses the same mechanism for sending
> emails as "Active Monitor" does (the MIME::Lite Perl-module), so this is
> fairly straightforward.
>
> If "Email Alerts" is set, an Email Address (or username) has been
> specified and the logfile /home/.easy-backup/easy-backup.log is present?
> Then the email will be sent. That logfile is deleted when Easy-Backup
> exits, so it will only be present while Easy-Backup does and export or
> import.
>
> > Ah and another feature request: would it be possible to add subdirs to
> > the remote directory (now it only allows myremotedir and I would
> > really love to have myremotedir/server01 etc
>
> I don't think I will add this anytime soon. Duplicity will not create
> the toplevel directory for these subdirectories (at least not on 5209R)
> and me having to check if it exists and then create it via the plentiful
> of protocols is way too much hassle.
>
> You can still backup various servers to the same account. Just use the
> server-name of the server you're backing up as target directory. And
> voila: Each server then backs up into his own directory.
>
> --
> With best regards
>
> Michael Stauber
>
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26436] Re: easy-backup ftp problem and question

[JW Ronken via Blueonyx]

So far Easy-Backup works very well (haven't tried a restore yet) but the
only issue I see is that the email notification are not working on any
server.
there is not even an attempt to email visible in /var/log/maillog
Am I missing something?
thanks
Janwillem
Ah and another feature request: would it be possible to add subdirs to the
remote directory (now it only allows myremotedir and I would really love to
have myremotedir/server01 etc


On Sun, Sep 3, 2023 at 8:36 AM Michael Stauber via Blueonyx <
blueonyx@mail.blueonyx.it> wrote:

> Hi Michael,
>
> > I did "/usr/sausalito/sbin/easy-backup --check" and it appears that it
> > is not compatible with a # in my ftp password. Is that correct? If so
> > can it be fixed or must I get the ftp password changed?
>
> Hmmm. I don't know - yet. I'll test it out and will check what the
> problem might be. Many thanks for pointing it out.
>
> > I also have a question about extra folders. raqbackup allowed extra
> > folders to be backed-up. I liked that for a few reasons. Is that
> > something that might be added in future versions?
>
> Yeah, that will be added in one of the next versions. I didn't want to
> over-complicate things in the initial release as it was already stacked
> with quite a lot of intricacies.
>
> --
> With best regards
>
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26415] 5210R hostname change hangs on 17%

[JW Ronken via Blueonyx]

Hi
When changing the hostname/domain and/or DNS servers in the System Settings
-> TCP/IP menu item the changes don't happen, the task progress bar hangs
at 17% forever.
I could set the hostname via the CLI and the new hostname is reflected in
the GUI (under the BlueOnyx Logo) but in the System Setttings it's still
the old one.
Seems CCED is not updating.
Any idea how to fix this?
thanks
Janwillem
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26389] Re: Internet issues

[JW Ronken via Blueonyx]

Sounds a lot like Mexico where the garbage truck killed my fiber.
Repair: 1 week
New contract with same provider: we connect you this evening before 9.00pm


On Wed, 2 Aug 2023 at 19:00, Michael Stauber via Blueonyx <
blueonyx@mail.blueonyx.it> wrote:

> Hi all,
>
> Just a quick heads up: Since Monday I'm without reliable internet
> connection and am on a mobile line that also craps out or slows to a
> crawl every now and then.
>
> I'm trying to respond to emails, but even that is really dodgy right now.
>
> What happened? We have three big internet providers in Colombia. We're
> with a shack called Tigo and and their competitor MoviStar (subsidiary
> of Telefonica) installed fiber-optics in our complex last week. On
> Monday when they left they "accidentally" (yeah, rright!) caused a
> damage that affected all internet installations of their competitors in
> our complex. And as things go with all three providers: You can get a
> new contract (with same day install) lined up in fifteen minutes, or you
> have to wrestle with support for days until they send a technician to
> fix damage in an existing installation. Just spent three hours again in
> the waiting line in front of their office until it was my turn to
> "enthusiastically" rave about their stellar support. After all: A black
> hole is a stellar object, too. :p
>
> --
> With best regards
>
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26226] Re: 5209 Letsyncrypt issue

[JW Ronken]

Hi Michael
I had restarted Apache indeed but no luck.
After a full reboot all seems fine again and certs show correctly.
Thanks!!

On Mon, 22 May 2023 at 19:51, Michael Stauber  wrote:

> Hi Janwillem,
>
> > I have a few vsites with letsencrypt certificates, in the BO Gui they
> > all show with a valid certificate expiration date, however going to the
> > site with a browser throws a certificate expired error.
> > 5209 is fully up to date.
> > Any clues?
>
>
> I just had this as well the other day and now I wonder if it really was
> just a one-off problem, or if it's a general issue. I'll check.
>
> I guess your Apache hasn't been restarted after the cert was renewed.
>
> Please try this and see if it helps:
>
> systemctl restart admserv httpd dovecot sendmail
>
> That will restart all four services and afterwards you might see that
> they are now using the renewed certificates.
>
> --
> With best regards
>
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26221] 5209 Letsyncrypt issue

[JW Ronken]

Hi
I have a few vsites with letsencrypt certificates, in the BO Gui they all
show with a valid certificate expiration date, however going to the site
with a browser throws a certificate expired error.
5209 is fully up to date.
Any clues?
thanks
janwillem
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26019] Re: Active monitor

[JW Ronken]

Hi Michael

Disk integrity was already disabled….
For now I’ve disabled the monitoring and tomorrow I’ll just disable each
component until I find the guilty one.
In /var/log/messages I don’t see anything abnormal compared to the other
5210’s.

If I am unable to fix it do you mind if I open a ticket for remote checking?
Thanks!
Janwillem

On Sat, 11 Mar 2023 at 20:36, Michael Stauber  wrote:

> Hi Janwillem,
>
> > Just installed a new 5210R, had some issues with Easy Migrate but
> > finally all working.
>
> Very well!
>
> > Only thing which is pretty annoying is that it triggers every 15 minutes
> > an Active Monitor email with following body, no description on what is
> > up or down.
> >
> > Active Monitor has detected recent changes in the state of your server
> > appliance. For more details, please see the Active Monitor section of
> the Server
> > Desktop.
> >
> > Summary of changes:
> >
> > *
> > -
> >
> > any idea?
>
>
> That is most likely the component that monitors RAID. Go to Active
> Monitor, Settings and disable monitoring of the RAID status and the
> message should go away.
>
> I've been meaning to troubleshoot this for a while now, but I've been
> too busy or too lazy to set up a VM with two disks to simulate a
> software RAID. :p
>
> --
> With best regards
>
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26017] Active monitor

[JW Ronken]

Hi
Just installed a new 5210R, had some issues with Easy Migrate but finally
all working.
Only thing which is pretty annoying is that it triggers every 15 minutes an
Active Monitor email with following body, no description on what is up or
down.
All services are running so there should be no reason to trigger the mail.

Active Monitor has detected recent changes in the state of your server
appliance.
For more details, please see the Active Monitor section of the Server
Desktop.

Summary of changes:

*
-

any idea?
thanks
Janwillem
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26005] Re: Active monitor warnings after AV-Spam update 5210R

[JW Ronken]

Hi Michael
Do you never sleep ;)

In /var/log/maillog I only see these many time
Feb 26 07:00:01 ds30 postfix/smtpd[138336]: warning: connect to Milter
service unix:/run/spamass-milter/postfix/sock: No such file or directory
I've now rebooted the server one time and will keep an eye on it.
If it happens again  I'll send you the support request.
Many thanks and have a great Sunday.

Janwillem


On Sun, Feb 26, 2023 at 8:19 AM Michael Stauber 
wrote:

> Hi Janwillem,
>
> > updated yesterday 2 x 5210R with the latest AV-Spam but one of of the
> > servers I get every x hours the mail from Active Monitor:
> > Active Monitor has detected recent changes in the state of your server
> > appliance.
> > For more details, please see the Active Monitor section of the Server
> > Desktop.
> >
> > Summary of changes:
> >
> > * The email system is operating normally.
> > - The SMTP server is operating normally.
>
> There should also be an Active Monior entry for the AV-SPAM itself which
> lists any issues it may have.
>
> > I do see a lot of;
> >
> > Feb 26 07:50:46 ds30 postfix/smtpd[145531]: warning: connect to Milter
> > service unix:/run/spamass-milter/postfix/sock: No such file or directory
> >
> >
> > And checking /usr/sausalito/sbin/avspam_init.pl 
> > -status shows:
>  >
> > | Spamass-Milter | 1 |1 | 0|
>
> The next time this happens, could you please check with this command and
> report what it shows:
>
> systemctl status spamass-milter
>
> I'm especially interested at the log entries at the bottom of that command.
>
> Or you can also find them in /var/log/maillog. That would help with the
> debugging. Or you can send a "Support Request" via the GUI and tick the
> checkbox "Allow Access" and I'll take a look at it.
>
> --
> With best regards
>
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:26003] Active monitor warnings after AV-Spam update 5210R

[JW Ronken]

Hi all
updated yesterday 2 x 5210R with the latest AV-Spam but one of of the
servers I get every x hours the mail from Active Monitor:
Active Monitor has detected recent changes in the state of your server
appliance.
For more details, please see the Active Monitor section of the Server
Desktop.

Summary of changes:

* The email system is operating normally.
- The SMTP server is operating normally.

I don't get the mail that there is an issue though.. (likely because the
mailserver is down but it's also not queued).

I do see a lot of;

Feb 26 07:50:46 ds30 postfix/smtpd[145531]: warning: connect to Milter
service unix:/run/spamass-milter/postfix/sock: No such file or directory

And checking /usr/sausalito/sbin/avspam_init.pl -status shows:

==

| Service:   | GUI:  | AutoStart: | Running: |

==

| Postfix|   1   |  1 | 1|

| Greylist   |   0   |  0 | 0|

| GeoIP  |   1   |  1 | 1|

| Spamassassin   |   1   |  1 | 1|

| Spamass-Milter |   1   |  1 | 0|

| ClamAV |   0   |  0 | 0|

| ClamAV-Milter  |   0   |  0 | 0|

==

AV-SPAM Email service are in failed state.


A /usr/sausalito/sbin/avspam_init.pl -restart brings them back (and I
suspect this is what Active Monitor does the whole time).


For now, I disabled the Spamass milter but that kind of defeats the purpose
;)


Anyone else seeing this?

thanks

Janwillem
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:25888] Re: The GoAccess daemon is currently not running

[JW Ronken]

Hi Michael
Both working fine now! Many thanks for the quick fix!
Happy New Year!
Janwillem

On Tue, 3 Jan 2023 at 21:02, Michael Stauber  wrote:

> Hi Janwillem,
>
> A "yum clean all" and "yum update" should fix both issues, as I just
> published a fix.
>
> The fact that one box wasn't showing the item in Active Monitor? That
> sounds like CCEd hadn't been automatically restarted at the end of the
> update, which would have solved it. Either way: The YUM updates should
> address this now. If not, then please let me know.
>
> --
> With best regards
>
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:25883] Re: The GoAccess daemon is currently not running

[JW Ronken]

More or less the same issue on two 5210’s:

Server 1: has the Usage Information Services item under system status and
Monitorix works OK but GoAccess has the same error.

Server2: doesn’t have the Usage Information Service item under system
status. However it has the Monitorix menu item under Usage Information but
it shows a 404 error page not found.
GoAcces also not working here.

Janwillem

On Tue, 3 Jan 2023 at 20:24, Martin Schepers  wrote:

> Hi,
>
> > Am 03.01.2023 um 21:10 schrieb Colin Jack :
> >
> > Unit goaccess.service could not be found.
>
> Same here. I have also problems with firewalld since 2 or 3 days,
> no idea if this is connected to each other.
>
> Martin
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:25574] Issue with SSL certs on 5210R

[JW Ronken]

Hi
Trying to upload a custom wildcard SSL cert and the root certs for it but
getting

Unable to read uploaded certificate. Only files with the file extension
'*.txt', '*.csr', '*.cert' or '*.crt' are allowed. Please try again.

The certs are RapidSSl .crt and a DigicertCA.crt but no luck (not even when
renaming to anything else.
Any clues?
thanks
Janwillem
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:25313] Re: 5210r and iptables -> not working?

[JW Ronken]

Hi Michael
That explain why my IPtables rules had no effect (feeling stupid :)

Just saw in the shop that APF doesn’t use the GeoIP modulenon 5210, are
there alternatives?
If not I’ll setup a PfSense instance for that purpose.

Thanks again for the clarification!
Janwillem

On Mon, 24 Jan 2022 at 17:00, Michael Stauber  wrote:

> Hi Janwillem,
>
> > I've setup a 5210 a few days ago, in the past (since 5206/5208/5209) I
> > could add an iptables rule like:
> >
> > iptables -I INPUT 1 -s 5.34.205.0/24  -j DROP
> >
> > and save it and it would block all traffic from that IP.
> >
> >
> > On 5210 it seems to do nothing, maillog still shows:
> >
> > Jan 24 15:11:01 ds01 postfix/submission/smtpd[2286356]: warning:
> > unknown[5.34.207.58]: SASL LOGIN authentication failed: authentication
> > failure
> >
> >
> > Any idea why it doesn't block the IP? I will get the APF package and
> > fail2ban but need also a working iptables if possible.
>
> BlueOnyx 5210R comes with Firewalld enabled by default. You can either
> use Firewalld *or* IPtables. But not both at the same time.
>
> In the Shop we have the old APF for 5210R, but when you buy that and
> link it to a 5210R, it will offer you two PKGs instead of one:
>
> - APF
> - Firewalld
>
> The Firewalld package for 5210R provides a GUI to manage the firewalld
> rules on 5210R. If you also install Fail2ban for 5210R, it will detect
> if you have APF or Firewalld enabled and will use whatever is enabled to
> block offending IPs. You should not enable both APF and Firewalld, as
> they get in each others ways.
>
> If you want to manually block an IP via Firewalld, then you can do so
> with the "firewall-cmd" command. Here is a good set of instructions on
> how to use it:
>
> https://kb.vander.host/security/how-to-block-an-ip-address-using-firewalld/
>
> --
> With best regards
>
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx