[BlueOnyx:24861] Re: NewLinQ question

[Jeff Folk]

> On Mar 24, 2021, at 8:30 PM, Michael Stauber  wrote:
> 
> Hi Jeff,
> 
>> PHP and AVSpam are there, but fix-2 and RoundCube are not.
>> 
>> Are they not compatible? Those 2 are older, I suppose.
> 
> Dfix2 isn't available for 5210R, as we replaced it with Fail2ban.
> 
> RoundCube on the other hand? Two years ago when you purchased 5210R
> wasn't yet released. So the oldes 5210R release of RoundCube is perhaps
> newer than the purchase date of your last RoundCube purchase. That's why
> it perhaps doesn't show up for you, sorry.

Roger that.

> 
> -- 
> With best regards
> 
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:24855] NewLinQ question

[Jeff Folk]

Another question regarding a server migration from 5208r to 5210r. I 
uninstalled, and unlinked my purchases (AVSpam, PHP, Dfix-2, and RoundCube) on 
the old server, and have linked them on the new server. Not all of them show in 
Third party software to install. PHP and AVSpam are there, but fix-2 and 
RoundCube are not.

Are they not compatible? Those 2 are older, I suppose.

Thanks,
Jeff
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:24850] Re: EasyMigrate question

[Jeff Folk]

Any way to use easy-migrate to transfer the mysql for a SINGLE site? Asking for 
a friend who destroyed a single database on one site… :-D

> On Mar 23, 2021, at 11:52 AM, Jeff Folk  wrote:
> 
> Looks like ca-certs  was missing. Copied from a site and admserv is up. 
> Trying LE cert again. 
> 
> Jeff
> Sent from my iPhone
> 
>> On Mar 23, 2021, at 11:41 AM, Jeff Folk  wrote:
>> 
>> Update…
>> 
>> This time around, got all sites migrated, changed the server IP, 
>> MassIPChange’d all the sites. Had to make some corrections to index files in 
>> /web to get a couple sites working again. Working.
>> 
>> Moving on to a LetsEncrypt cert for the server - Clicked the button, and it 
>> looked like it was doing its thing, then admserv dies.
>> 
>> lets encrypt log shows many verification and sleeps, then failed. This log 
>> entry is odd:
>> [Tue Mar 23 10:55:40 CDT 2021] box1.qzoneinc.net 
>> <http://box1.qzoneinc.net/>:Verify error:During secondary validation: DNS 
>> problem: query timed out looking up CAA for box1.qzoneinc.net 
>> <http://box1.qzoneinc.net/>
>> 
>> Is this because a bad lookup on my server? I currently only have 8.8.8.8 as 
>> a dns in TCI/IP settings.
>> 
>> Anyway, I need some help trying to get admserv back up. When I try emptying 
>> the /etc/admserv/certs directory, it appears admserv is running, but a 
>> browser can’t connect.
>> 
>> Thanks,
>> Jeff
>> 
>>> On Mar 22, 2021, at 3:49 PM, Jeff Folk >> <mailto:jf...@qzoneinc.com>> wrote:
>>> 
>>> That seemed to correct the file rsync.
>>> 
>>> Having issues changing the hostname and domain via the gui now. Have to 
>>> start over once more as admserv won’t start… Accidentally tried to get a LE 
>>> cert.
>>> 
>>>> On Mar 22, 2021, at 1:37 PM, Jeff Folk >>> <mailto:jf...@qzoneinc.com>> wrote:
>>>> 
>>>> Thanks Michael,
>>>> 
>>>>> On Mar 22, 2021, at 1:09 PM, Michael Stauber >>>> <mailto:mstau...@blueonyx.it>> wrote:
>>>>> 
>>>>> Hi Jeff,
>>>>> 
>>>>>> Trying to move my old 5208r to 5210r. Is it possible to migrate sites to 
>>>>>> the same IP while new server is on LAN, then change the interface to the 
>>>>>> IP of the old server?
>>>>> 
>>>>> The new server currently has an IP that's different from the old server.
>>>>> So have Easy-Migrate move the sites to the same IP that the new server
>>>>> is using.
>>>>> 
>>>>> Then after the migration is done, power down the old server and use
>>>>> /usr/sausalito/sbin/MassIPChange.pl on the new server to change the IPs
>>>>> to what they really should be.
>>>> 
>>>> I didn’t think of that. Starting fresh again. I’ll report back.
>>>> 
>>>>> 
>>>>>> Also, I’m having trouble getting EasyMigrate to rsync the web 
>>>>>> directories of some vsites. What might I be able to see in any logs?
>>>>> 
>>>>> What directory or directories are you having issues with? The /web
>>>>> should synchronize just fine. And no: If there are Rsync-issues, then
>>>>> these will be shown on the screen during the migration.
>>>>> 
>>>>> -- 
>>>>> With best regards
>>>>> 
>>>>> Michael Stauber
>>>>> ___
>>>>> Blueonyx mailing list
>>>>> Blueonyx@mail.blueonyx.it <mailto:Blueonyx@mail.blueonyx.it>
>>>>> http://mail.blueonyx.it/mailman/listinfo/blueonyx 
>>>>> <http://mail.blueonyx.it/mailman/listinfo/blueonyx>
>>>> 
>>>> 
>>>> ___
>>>> Blueonyx mailing list
>>>> Blueonyx@mail.blueonyx.it <mailto:Blueonyx@mail.blueonyx.it>
>>>> http://mail.blueonyx.it/mailman/listinfo/blueonyx 
>>>> <http://mail.blueonyx.it/mailman/listinfo/blueonyx>
>>> ___
>>> Blueonyx mailing list
>>> Blueonyx@mail.blueonyx.it <mailto:Blueonyx@mail.blueonyx.it>
>>> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>> 
>> ___
>> Blueonyx mailing list
>> Blueonyx@mail.blueonyx.it
>> http://mail.blueonyx.it/mailman/listinfo/blueonyx
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:24845] Re: EasyMigrate question

[Jeff Folk]

Looks like ca-certs  was missing. Copied from a site and admserv is up. Trying 
LE cert again. 

Jeff
Sent from my iPhone

> On Mar 23, 2021, at 11:41 AM, Jeff Folk  wrote:
> 
> Update…
> 
> This time around, got all sites migrated, changed the server IP, 
> MassIPChange’d all the sites. Had to make some corrections to index files in 
> /web to get a couple sites working again. Working.
> 
> Moving on to a LetsEncrypt cert for the server - Clicked the button, and it 
> looked like it was doing its thing, then admserv dies.
> 
> lets encrypt log shows many verification and sleeps, then failed. This log 
> entry is odd:
> [Tue Mar 23 10:55:40 CDT 2021] box1.qzoneinc.net:Verify error:During 
> secondary validation: DNS problem: query timed out looking up CAA for 
> box1.qzoneinc.net
> 
> Is this because a bad lookup on my server? I currently only have 8.8.8.8 as a 
> dns in TCI/IP settings.
> 
> Anyway, I need some help trying to get admserv back up. When I try emptying 
> the /etc/admserv/certs directory, it appears admserv is running, but a 
> browser can’t connect.
> 
> Thanks,
> Jeff
> 
>> On Mar 22, 2021, at 3:49 PM, Jeff Folk  wrote:
>> 
>> That seemed to correct the file rsync.
>> 
>> Having issues changing the hostname and domain via the gui now. Have to 
>> start over once more as admserv won’t start… Accidentally tried to get a LE 
>> cert.
>> 
>>> On Mar 22, 2021, at 1:37 PM, Jeff Folk  wrote:
>>> 
>>> Thanks Michael,
>>> 
>>>> On Mar 22, 2021, at 1:09 PM, Michael Stauber  wrote:
>>>> 
>>>> Hi Jeff,
>>>> 
>>>>> Trying to move my old 5208r to 5210r. Is it possible to migrate sites to 
>>>>> the same IP while new server is on LAN, then change the interface to the 
>>>>> IP of the old server?
>>>> 
>>>> The new server currently has an IP that's different from the old server.
>>>> So have Easy-Migrate move the sites to the same IP that the new server
>>>> is using.
>>>> 
>>>> Then after the migration is done, power down the old server and use
>>>> /usr/sausalito/sbin/MassIPChange.pl on the new server to change the IPs
>>>> to what they really should be.
>>> 
>>> I didn’t think of that. Starting fresh again. I’ll report back.
>>> 
>>>> 
>>>>> Also, I’m having trouble getting EasyMigrate to rsync the web 
>>>>> directories of some vsites. What might I be able to see in any logs?
>>>> 
>>>> What directory or directories are you having issues with? The /web
>>>> should synchronize just fine. And no: If there are Rsync-issues, then
>>>> these will be shown on the screen during the migration.
>>>> 
>>>> -- 
>>>> With best regards
>>>> 
>>>> Michael Stauber
>>>> ___
>>>> Blueonyx mailing list
>>>> Blueonyx@mail.blueonyx.it
>>>> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>>> 
>>> 
>>> ___
>>> Blueonyx mailing list
>>> Blueonyx@mail.blueonyx.it
>>> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>> 
>> ___
>> Blueonyx mailing list
>> Blueonyx@mail.blueonyx.it
>> http://mail.blueonyx.it/mailman/listinfo/blueonyx
> 
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:24843] Re: EasyMigrate question

[Jeff Folk]

Update…

This time around, got all sites migrated, changed the server IP, MassIPChange’d 
all the sites. Had to make some corrections to index files in /web to get a 
couple sites working again. Working.

Moving on to a LetsEncrypt cert for the server - Clicked the button, and it 
looked like it was doing its thing, then admserv dies.

lets encrypt log shows many verification and sleeps, then failed. This log 
entry is odd:
[Tue Mar 23 10:55:40 CDT 2021] box1.qzoneinc.net:Verify error:During secondary 
validation: DNS problem: query timed out looking up CAA for box1.qzoneinc.net 
<http://box1.qzoneinc.net/>

Is this because a bad lookup on my server? I currently only have 8.8.8.8 as a 
dns in TCI/IP settings.

Anyway, I need some help trying to get admserv back up. When I try emptying the 
/etc/admserv/certs directory, it appears admserv is running, but a browser 
can’t connect.

Thanks,
Jeff

> On Mar 22, 2021, at 3:49 PM, Jeff Folk  wrote:
> 
> That seemed to correct the file rsync.
> 
> Having issues changing the hostname and domain via the gui now. Have to start 
> over once more as admserv won’t start… Accidentally tried to get a LE cert.
> 
>> On Mar 22, 2021, at 1:37 PM, Jeff Folk > <mailto:jf...@qzoneinc.com>> wrote:
>> 
>> Thanks Michael,
>> 
>>> On Mar 22, 2021, at 1:09 PM, Michael Stauber >> <mailto:mstau...@blueonyx.it>> wrote:
>>> 
>>> Hi Jeff,
>>> 
>>>> Trying to move my old 5208r to 5210r. Is it possible to migrate sites to 
>>>> the same IP while new server is on LAN, then change the interface to the 
>>>> IP of the old server?
>>> 
>>> The new server currently has an IP that's different from the old server.
>>> So have Easy-Migrate move the sites to the same IP that the new server
>>> is using.
>>> 
>>> Then after the migration is done, power down the old server and use
>>> /usr/sausalito/sbin/MassIPChange.pl on the new server to change the IPs
>>> to what they really should be.
>> 
>> I didn’t think of that. Starting fresh again. I’ll report back.
>> 
>>> 
>>>> Also, I’m having trouble getting EasyMigrate to rsync the web 
>>>> directories of some vsites. What might I be able to see in any logs?
>>> 
>>> What directory or directories are you having issues with? The /web
>>> should synchronize just fine. And no: If there are Rsync-issues, then
>>> these will be shown on the screen during the migration.
>>> 
>>> -- 
>>> With best regards
>>> 
>>> Michael Stauber
>>> ___
>>> Blueonyx mailing list
>>> Blueonyx@mail.blueonyx.it <mailto:Blueonyx@mail.blueonyx.it>
>>> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>> 
>> 
>> ___
>> Blueonyx mailing list
>> Blueonyx@mail.blueonyx.it <mailto:Blueonyx@mail.blueonyx.it>
>> http://mail.blueonyx.it/mailman/listinfo/blueonyx 
>> <http://mail.blueonyx.it/mailman/listinfo/blueonyx>
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:24838] Re: EasyMigrate question

[Jeff Folk]

That seemed to correct the file rsync.

Having issues changing the hostname and domain via the gui now. Have to start 
over once more as admserv won’t start… Accidentally tried to get a LE cert.

> On Mar 22, 2021, at 1:37 PM, Jeff Folk  wrote:
> 
> Thanks Michael,
> 
>> On Mar 22, 2021, at 1:09 PM, Michael Stauber > <mailto:mstau...@blueonyx.it>> wrote:
>> 
>> Hi Jeff,
>> 
>>> Trying to move my old 5208r to 5210r. Is it possible to migrate sites to 
>>> the same IP while new server is on LAN, then change the interface to the IP 
>>> of the old server?
>> 
>> The new server currently has an IP that's different from the old server.
>> So have Easy-Migrate move the sites to the same IP that the new server
>> is using.
>> 
>> Then after the migration is done, power down the old server and use
>> /usr/sausalito/sbin/MassIPChange.pl on the new server to change the IPs
>> to what they really should be.
> 
> I didn’t think of that. Starting fresh again. I’ll report back.
> 
>> 
>>> Also, I’m having trouble getting EasyMigrate to rsync the web 
>>> directories of some vsites. What might I be able to see in any logs?
>> 
>> What directory or directories are you having issues with? The /web
>> should synchronize just fine. And no: If there are Rsync-issues, then
>> these will be shown on the screen during the migration.
>> 
>> -- 
>> With best regards
>> 
>> Michael Stauber
>> ___
>> Blueonyx mailing list
>> Blueonyx@mail.blueonyx.it
>> http://mail.blueonyx.it/mailman/listinfo/blueonyx
> 
> 
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it <mailto:Blueonyx@mail.blueonyx.it>
> http://mail.blueonyx.it/mailman/listinfo/blueonyx 
> <http://mail.blueonyx.it/mailman/listinfo/blueonyx>
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:24837] Re: EasyMigrate question

[Jeff Folk]

Thanks Michael,

> On Mar 22, 2021, at 1:09 PM, Michael Stauber  wrote:
> 
> Hi Jeff,
> 
>> Trying to move my old 5208r to 5210r. Is it possible to migrate sites to the 
>> same IP while new server is on LAN, then change the interface to the IP of 
>> the old server?
> 
> The new server currently has an IP that's different from the old server.
> So have Easy-Migrate move the sites to the same IP that the new server
> is using.
> 
> Then after the migration is done, power down the old server and use
> /usr/sausalito/sbin/MassIPChange.pl on the new server to change the IPs
> to what they really should be.

I didn’t think of that. Starting fresh again. I’ll report back.

> 
>> Also, I’m having trouble getting EasyMigrate to rsync the web 
>> directories of some vsites. What might I be able to see in any logs?
> 
> What directory or directories are you having issues with? The /web
> should synchronize just fine. And no: If there are Rsync-issues, then
> these will be shown on the screen during the migration.
> 
> -- 
> With best regards
> 
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:24835] EasyMigrate question

[Jeff Folk]

Trying to move my old 5208r to 5210r. Is it possible to migrate sites to the 
same IP while new server is on LAN, then change the interface to the IP of the 
old server?

Also, I’m having trouble getting EasyMigrate to rsync the web directories of 
some vsites. What might I be able to see in any logs?

Thanks
Jeff
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:23582] Help! Server down!

[Jeff Folk]

Customer told me his 5208R was not allowing mail or webmail (Roundcube PKG), 
and wouldn’t let him log into the AdmServ GUI. This happened today, after 
nothing done on his part. The error trying to log into the GUI:

Fatal error: Call to undefined method System::getConfig() in
/usr/sausalito/ui/chorizo/ci/application/libraries/CCE.php on line 124

Mail, web. DNS is down.

I looked up that error and after restarting admserv and cced.init, reinstalled 
base-alpine-ui and base-admserv-glue.

This got me back into the GUI, but services wouldn’t start up.
I started uninstalling add-on software Firewall and AV-SPAM. Noticed in 
maillog, as services trying to start, an error - Dovecot fatal error: Couldn't 
parse private ssl_key
So… I decided I should remove the Let’sEncrypt SSL cert and replace it with a 
self-signed, in case the cert was corrupt. Well, the GUI page will not load any 
more - stuck with the progress bar filling at the top of the page, even if I 
load a new web session. Dovecot still cries about the private ssl_key, and all 
I have is SSH access.

Can anyone offer any help? Thanks in advance.

Regards,
Jeff Folk
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:22862] Re: automatic Let's Encrypt Renewal was did not happen

[Jeff Folk]

> On Apr 29, 2019, at 9:22 AM, neal pressman  wrote:
> 
> had 2 systems expire today that did not update automatically. both were for 
> the base servers not a vsite. i would not call either a sub domain but a 
> host.domain.com  
> 
> -- 
> Open WebMail Project (http://openwebmail.org ) 

Same here. Base certs for server. Manually renewed fine.

Jeff Folk___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:22471] Changing old of vsite

[Jeff Folk]

Greetings,

Thought I would ask this here, as I have never attempted…

Has anyone changed the TLD of a vsite? I have a .info vsite that we want to 
change to .org, now that we have gained control of that domain. Wondering what 
the process would be other than pointing DNS and entering web aliases. The 
Wordpress site hosted there is another story, but not a BlueOnyx problem… LOL

Thanks!
Jeff Folk


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:22391] Re: Let's Encrypt failed notices

[Jeff Folk]

Hi Robert,

> On Sep 11, 2018, at 7:18 AM, Robert Fitzpatrick  wrote:
> 
> This morning I received failed notices from two separate 5209R servers. For 
> the admserv on one and a vsite on the other. Both say to check 
> /var/log/letsencrypt/letsencrypt.log for more information. But both of the 
> logs are empty. How can I find out what went wrong?

I was just dealing with this issue on a vsite (5208R). My logs were empty also, 
until I went into the SSL config of the vsite and tried to create a new LE 
cert. That page, when saving/creating the cert, showed an error (can’t 
determine path) and the log was no longer empty.

Mine turned out to be a DNS issue after an IP change - @ and www were pointing 
to different IPs with the web alias set to redirect to the site host.

Good luck!

Best regards,
Jeff Folk


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:22305] Re: Barracuda RBL

[Jeff Folk]

Frustrating to be sure. My Spectrum Business Class (actually, ALL the Spectrum 
BC customers here) is listed by TrendMicro. Needless to say, two lists I would 
never personally use...

> On Jul 31, 2018, at 1:06 PM, Michael Stauber  wrote:
> 
> Hi all,
> 
> As recently reported here Barracuda has blacklisted the IP address of
> the BlueOnyx mailing list server for no apparent reasons. I asked for a
> delisting and never heard back.
> 
> Today we're still in the blacklist. I (again) asked for a delisting, but
> as of yet haven't heard anything back.
> 
> As that's a bit ridiculous I just moved the BlueOnyx mailing list server
> to another IP address for the time being.
> 
> -- 
> With best regards
> 
> Michael Stauber
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21948] Re: SMTP freezes with AVSPAM

[Jeff Folk]

> On Apr 12, 2018, at 1:07 PM, Michael Stauber  wrote:
> 
> Please send me the login details via the GUI: "Software Updates" /
> "Support" / "Support Request" and make sure to tick the checkbox "Allow
> Access".
> 
> I'll see what I can do.

Thanks, Michael,

Done. Sorry about this.

Regards,
Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21946] Re: SMTP freezes with AVSPAM

[Jeff Folk]

On Apr 12, 2018, at 11:50 AM, Michael Stauber  wrote:
> 
> Hi Jeff,
> 
>> Ok. I think we are good this time… Only thing I noticed - on first
>> install, the open ports list was EMPTY - explaining why everything got
>> locked.
> 
> Hell, yeah. That is absolutely not supposed to happen and explains why
> you were locked out. :-(
> 
>> This install has a fully populated open ports list, and enabling
>> ssh protection was successful, and all services are available.
> 
> Very well. I'm glad you could solve it.

Well, shucks darn… After all this, I’ve had 2 more instances of SMTP going down 
where I have to issue a avspam_init command.

Am I going to have to abandon AV-SPAM? G

Regards,
Jeff



___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21944] Re: SMTP freezes with AVSPAM

[Jeff Folk]

> On Apr 12, 2018, at 9:48 AM, Jeff Folk  wrote:
> 
> I’ve stopped iptables and am uninstalling APF. Will try to reinstall.
> 
> Jeff

Ok. I think we are good this time… Only thing I noticed - on first install, the 
open ports list was EMPTY - explaining why everything got locked. This install 
has a fully populated open ports list, and enabling ssh protection was 
successful, and all services are available.

Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21943] Re: SMTP freezes with AVSPAM

[Jeff Folk]

> On Apr 12, 2018, at 9:40 AM, Jeff Folk  wrote:
> 
> Hi Michael,
> 
>> On Apr 11, 2018, at 5:26 PM, Michael Stauber > <mailto:mstau...@blueonyx.it>> wrote:
>> 
>> That's why I prefer to have APF (or a firewall in general) in front
>> which makes sure that visitors from "bad countries" are turned around at
>> the fence and before they get to the front door.
> 
> I agree. I was relying on PAM to do this, but clearly we have outgrown.
> 
> I’m in sort of a pickle now… Purchased and installed APF and Fail2Ban. 
> Installed APF, then went to turn on GeoIP in SSH (allowed US) and saved. SSH 
> got turned off, so I enabled and saved. GUI then became unresponsive from my 
> office… as did ssh. I’m now at the customers office, and we can’t access the 
> server locally either. Only access I have is physical console.
> 
> HELP! LOL
> 
> Regards,
> Jeff

I’ve stopped iptables and am uninstalling APF. Will try to reinstall.

Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21942] Re: SMTP freezes with AVSPAM

[Jeff Folk]

Hi Michael,

> On Apr 11, 2018, at 5:26 PM, Michael Stauber  wrote:
> 
> That's why I prefer to have APF (or a firewall in general) in front
> which makes sure that visitors from "bad countries" are turned around at
> the fence and before they get to the front door.

I agree. I was relying on PAM to do this, but clearly we have outgrown.

I’m in sort of a pickle now… Purchased and installed APF and Fail2Ban. 
Installed APF, then went to turn on GeoIP in SSH (allowed US) and saved. SSH 
got turned off, so I enabled and saved. GUI then became unresponsive from my 
office… as did ssh. I’m now at the customers office, and we can’t access the 
server locally either. Only access I have is physical console.

HELP! LOL

Regards,
Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21940] Re: SMTP freezes with AVSPAM

[Jeff Folk]

Thanks Michael,

> On Apr 11, 2018, at 3:13 PM, Michael Stauber  wrote:
> 
> There are several AM components that monitor the components of the
> AV-SPAM (and Sendmail) and fire them up again if they are failing.
> Between AV-SPAM 6.3.0-1 (that you have) and the current 6.3.2-1 that
> mechanism also saw a few more improvements and it already works much
> better.
> 
> So it might help if you upgrade to the latest version.

I will consider this.

> 
>> Clearing the AV-SPAM database helps for a couple days, at the 
>> expense of losing all the learned rules… Not liking that.
>> 
>> Any suggestions?
> 
> There are a couple of other ways. Here is what I do. I have a cronjob
> which (about once a week) does this:
> 
> whois -h whois.radb.net -i origin -T route $(whois -h whois.radb.net
> 103.103.232.23 | grep origin: | cut -d ' ' -f 6 | head -1) | grep -w
> "route:" | awk '{print $NF}' |sort -n > /etc/apf/glob_deny.rules
> 
> However: This is run on a 5209R, where "whois" supports the "-T"
> parameter. On EL6 it doesn’t.

Pretty cool.

> Another option: In the AV-SPAM in the "GeoIP"-Tab tick the checkbox
> "Block Blacklist entirely" and if you're adventurous also tick "Block
> Blacklist with APF" and make sure to have "CN" ticked under "Blacklist”.

Alas, that is pretty much how my GeoIP looks. Only Asia countries allowed are 
Israel and Cyprus. APF isn’t installed on this box, so that option is not 
available. I’m assuming a China attack, as the IPs in Failed logins are all 
China (from ssh attacks). Maybe I’m looking in the wrong room. Seems 
counter-intuitive to me that these ssh attacks would kill SMTP.

Thanks for the suggestions, and anything else you can think of.

Jeff



___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21938] SMTP freezes with AVSPAM

[Jeff Folk]

Hi Michael, and list,

I have a particular 5208R with AV-SPAM 6.3.0-1. We have been experiencing login 
attacks from China (nothing new there) that eventually render our SMTP server 
inoperative.

I get an email from Active Monitor telling me the SMTP server is down, and 
could not be restarted. Have have to ssh into the box, issue a 
"/usr/sausalito/sbin/avspam_init.pl -restart” command, then everything is right 
with the world… Until the next attack.

My question/suggestion: Isn’t there, or could there be, an addition to the SMTP 
swatch routine that tries a AV-SPAM init in the process of trying to get the 
SMTP server running again?

Clearing the AV-SPAM database helps for a couple days, at the expense of losing 
all the learned rules… Not liking that.

Any suggestions?

Regards,
Jeff Folk


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21679] Re: milter-geoip fails a lot

[Jeff Folk]

> I'm having trouble with a particular BlueOnyx (on Aventurin{e}) server 
> generating alarms with our monitoring.  The system has AV-Spam on it.
> 
> Check the maillog, and sure enough:
> Milter (milter-geoip): error connecting to filter: Connection timed out with 
> /var/run/milter-geoip.sock
> 
> In each case, restarting milter-geoip fixes the problem.  Until milter-geoip 
> crashes again.
> 
> We're not seeing this on other systems, and nothing indicating in the maillog 
> or the message log.
> 
> Any ideas what I ought to look for?

I’ll be watching this intently. I also have this issue on a server (not 
Aventurine, though). Originally, Michael suggested for me to clear the spam 
database, and that stopped the crashes for over a week, but also cleared the 
learned spam ‘rules’. Probably not how I want to handle this in the future.

Jeff



___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21610] Re: Device: /dev/sdb [SAT], 1 Currently unreadable (pending) sectors

[Jeff Folk]

Early warning of impending disk failure, would be my guess. 

Jeff
Sent from my iPhone

> On Dec 28, 2017, at 3:04 PM, Fred Bowditch  wrote:
> 
> What does this mean?
>  
> This email was generated by the smartd daemon running on:
>  
>host name: mailserver.xxx.com
>   DNS domain:.com
>   NIS domain: (none)
>  
> The following warning/error was logged by the smartd daemon:
>  
> Device: /dev/sdb [SAT], 1 Currently unreadable (pending) sectors
>  
>  
>  
>  
> Fred B
> Croakies IT
>  
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21603] Re: DNS settings for multiple virtual sites on different servers.

[Jeff Folk]

> On Dec 23, 2017, at 2:06 PM, Fungal Style  wrote:
> 
> Add to that I could technically set up the third IP (10.2.1.1) as a DNS 
> server, say ns3 and add secondary entries for xyz.com  and 
> abc.com  and set up any other additional domains set up as 
> virtual sites on 10.2.1.1 (aka ns3), keeping ns1 for the primary setting up 
> the virtual sites pointing to 10.2.1.1 (or 192.168.1.2, whichever I want to 
> set the virtual site on) etc, etc… same process as before… unless there is an 
> easier way so that I do not have to add secondary entries for all the domains 
> on each of the secondary name servers (like a zone transfer or something 
> allowing them to be copied, unless I misunderstand)? (this is one area I 
> think I am making it hard for myself).

The DNS protocol has this all built-in. On the secondary DNS server, you 
specify the IP address of the primary, and it will attempt to transfer the zone 
file automatically. You do have to enter the IP address of secondary servers 
into the allow list of the primary for this to work.___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21601] Re: 550-5.7.1 this message does not meet IPv6 sending guidelines regarding PTR

[Jeff Folk]

> On Dec 21, 2017, at 5:26 PM, Michael Stauber  wrote:
> 
> That's my experience as well: If CentOS 7 is hooked up to a network that
> supports IPv6 (even if that server only has IPv4 configured), then some
> services might end up using IPv6 as well. At least for outgoing
> connections if the target supports IPv6. In that case it might even
> prefer to use IPv6 even if IPv4 is available at the destination.
> 
> There are some factors that can throw a wrench into that. Like if you
> use a DNS-resolver that only serves IPv4.

This is really starting to chap by backside. On my other 5208R (CentOS 6.9) 
that I’ve not had this issue with - Just had a customer notify me that they 
were having trouble sending to Comcast with this error:

> From: Mail Delivery Subsystem [mailto:mailer-dae...@box1.qzoneinc.net 
> ] 
> Sent: Friday, December 22, 2017 3:03 PM
> To: ag...@davisjohnstone.com 
> Subject: Returned mail: see transcript for details
> 
> The original message was received at Fri, 22 Dec 2017 15:02:56 -0600 from
> cpe-24-243-103-228.rgv.res.rr.com  
> [24.243.103.228]
> 
>   - The following addresses had permanent fatal errors -
> mailto:susanmyersco...@comcast.net>>
>(reason: 554 resimta-po-03v.sys.comcast.net 
> 
> resimta-po-03v.sys.comcast.net  
> 2605:6000:7b44:b00:21d:9ff:fe1e:9f...
> requirement. For more information, refer to:
> http://postmaster.comcast.net/smtp-error-codes.php#554 
> )
> 
>   - Transcript of session follows - ... while talking to
> mx2.comcast.net .:
> <<< 554 resimta-ch2-24v.sys.comcast.net 
>  resimta-ch2-24v.sys.comcast.net 
> 
> 2605:6000:7b44:b00:21d:9ff:fe1e:9fe Comcast requires that all mail servers
> must have a PTR record with a valid Reverse DNS entry. Currently your mail
> server does not fill that requirement. For more information, refer to:
> http://postmaster.comcast.net/smtp-error-codes.php#554 
> 
> ... while talking to mx1.comcast.net .:
> <<< 554 resimta-po-03v.sys.comcast.net 
>  resimta-po-03v.sys.comcast.net 
> 
> 2605:6000:7b44:b00:21d:9ff:fe1e:9fe Comcast requires that all mail servers
> must have a PTR record with a valid Reverse DNS entry. Currently your mail
> server does not fill that requirement. For more information, refer to:
> http://postmaster.comcast.net/smtp-error-codes.php#554 
> 
> 554 5.0.0 Service unavailable
> Reporting-MTA: dns; box1.qzoneinc.net 
> Received-From-MTA: DNS; cpe-24-243-103-228.rgv.res.rr.com 
> 
> Arrival-Date: Fri, 22 Dec 2017 15:02:56 -0600
> 
> Final-Recipient: RFC822; susanmyersco...@comcast.net 
> 
> Action: failed
> Status: 5.5.0
> Diagnostic-Code: SMTP; 554 resimta-po-03v.sys.comcast.net 
>  resimta-po-03v.sys.comcast.net 
>  2605:6000:7b44:b00:21d:9ff:fe1e:9fe 
> Comcast requires that all mail servers must have a PTR record with a valid 
> Reverse DNS entry. Currently your mail server does not fill that requirement. 
> For more information, refer to: 
> http://postmaster.comcast.net/smtp-error-codes.php#554 
> 
> Last-Attempt-Date: Fri, 22 Dec 2017 15:02:58 -0600

Looked to me like Comcast was picking up the IP of the desktop sending the 
message to my server (on rev.res.rr.com), so I enabled ‘hide previous headers’ 
and had my customer try again. Failure with the same message. Acting on a hunch 
that they were blocking my non-PTR IPv6 (and not telling me), I applied the 
faux IPv4/IPv6 CLIENT_OPTIONS line to this server and the mail was accepted.

I swear… Running a well configured mail server has never been easy, but these 
arbitrary requirements of PTR records for mail delivery on a not quite ready 
for prime time IPv6 are making this a nightmare.

I hope everyone has a blessed and merry Christmas!

Cheers,
Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21599] Re: DNS settings for multiple virtual sites on different servers.

[Jeff Folk]

Hi Brian,

> On Dec 21, 2017, at 7:43 PM, Fungal Style  wrote:
> 
>  
> Hi all,
>  
> This may be a “no brainer” and I may have been doing this wrong for some 
> time, with it working due to extra work done….
>  
> Example
> I have:
> - 2 domains “xyz.com ” and “abc.com ”
> - 2 (or more) servers
> - each server capable of dns with glue DNS records for primary and secondary

Sounds good.

> So lets say I set up the following glue records:
> Ns1.abc.com  10.0.0.1
> Ns2.abc.com  192.168.1.2

I assume you are using non-routable private addresses as an example?

> Now the next step I would need to do to get www.abc.com  
> to be a functional site on 10.0.0.1 would be to add the site under the “site 
> management” tab for the virtual site of www.abc.com  and 
> config mail, users, etc…. Then add the domain as a secondary for DNS on 
> 192.168.1.2
>  
> Next if I wanted to set up www.xyz.com  on 192.168.1.2 I 
> would set up the virtual site on 10.0.0.1 as I did forwww.abc.com 
>  except put in the ip address of 192.168.1.2 under 
> “basic settings” and set up a virtual site on 192.168.1.2 for the website, 
> instead of entering a secondary dns entry.
>  
> Would that be the most correct way to do this?

If both of these servers are BlueOnyx machines, you could put BOTH virtual 
sites on either server, or one on each, as you describe. BlueOnyx servers can 
host many virtual sites at the same time, all on the same IP address.

Domain records require a minimum of two name server records, and the easiest 
way to keep these synchronized is having one dns server a primary server, and a 
second as a secondary server pulling the zone file from the primary. 

> I may have a follow up question on this depending on the answer, as I want to 
> keep it as simple as possible first then expand to virtual sites to other IP 
> addresses.
>  
> Regards
> Brian
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it 
> http://mail.blueonyx.it/mailman/listinfo/blueonyx 
> 

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21594] Re: 550-5.7.1 this message does not meet IPv6 sending guidelines regarding PTR

[Jeff Folk]

Michael,

> On Dec 21, 2017, at 3:20 PM, Michael Stauber  wrote:
> 
> It's interesting that you put it into CLIENT_OPTIONS. This sure tells
> Sendmail to not send emails via IPv6 but to use IPv4 instead via that
> hybrid IPv6:IPv4 address. I'll take a look into that and might add it as
> an option.

It truly is confusing to me, how only this one 5208 suffers from this ailment. 
I thought IPv6 was disabled in BlueOnyx, but this box announces IPv6 over 
sendmail anyway… At least it does to Google, and others that 
rediculously deny mail connections from MTAs without reverse DNS…

Merry Christmas!
Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21592] Re: 550-5.7.1 this message does not meet IPv6 sending guidelines regarding PTR

[Jeff Folk]

Lewis,

I get this on one of my 5208R boxes connected to Spectrum business class cable 
also. Interesting that another box also on Spectrum business class doesn’t have 
this issue, but that is another story... And good luck getting reverse dns in 
ipv6 with Spectrum!

The only way I have been able to take care of this is to enter a CLIENT_OPTIONS 
line in the m4 file and rebuild, then restart sendmail. 

CLIENT_OPTIONS(`Family=inet6,Addr=:::1.2.3.4')dnl

Where 1.2.3.4 is your ipv4 address. 

You should also make sure you have reverse dns for your ipv4. 

Michael can add to this, but this has gotten me through. Of course  I have to 
redo this every time a config change is made in the GUI, but thankfully, I only 
have to remember this one box. 

Jeff
Sent from my iPhone

> On Dec 21, 2017, at 10:24 AM, Lewis Gardner  wrote:
> 
> 
> On a 5209R box providing email connected to Insight/Spectrum cable ISP I'm 
> getting complaints of the following error:
> 
>> The original message was received at Wed, 20 Dec 2017 09:37:36 -0500
>> from rrcs-96-11-138-58.central.biz.rr.com [96.11.xx.xx]
>>   - The following addresses had permanent fatal errors -
>> 
>>(reason: 550-5.7.1 [2607:fcc8:bbc1:af00:a6bf:1ff::xxx] Our system has 
>> detected that)
>>   - Transcript of session follows -
>> ... while talking to aspmx.l.google.com.:
> DATA
>> <<< 550-5.7.1 [2607:fcc8:bbc1:af00:a6bf:1ff::xxx] Our system has 
>> detected that
>> <<< 550-5.7.1 this message does not meet IPv6 sending guidelines regarding 
>> PTR
>> <<< 550-5.7.1 records and authentication. Please review
>> <<< 550-5.7.1  https://support.google.com/mail/?p=IPv6AuthError for more 
>> information
>> <<< 550 5.7.1 . s15si3306798ith.152 - gsmtp
>> 554 5.0.0 Service unavailable
> 
> A quick Google shows this may be a problem for at least the last two years:
> 
> http://forums.businesshelp.comcast.com/t5/IPV6/Google-mail-requires-IPv6-PTR-record-but-Comcast-does-not-supply/td-p/27056
> 
> Is this fix, disabling IPV6 in postfix, applicable to 5209R?
> 
> http://tanguy.ortolo.eu/blog/article109/google-ipv6-smtp-restrictions
> 
> Hope I can get this fixed some users are migrating to outside personal 
> accounts...
> 
> 
> TIA! HoHoHo!
> 
> 
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21564] Re: SMTP server going down, connection refused by milter-geoip

[Jeff Folk]

> On Dec 4, 2017, at 9:00 PM, Michael Stauber  wrote:
> 
> Hi Jeff,
> 
>> Been having an issue on a 5208R (av-spam installed, version 6.3.0-1
>> where the SMTP server will stop. Happens multiple times in a day, every
>> week or so. When I get to it, maillog has entries like:
>> 
>> Dec  4 11:27:36 mail sendmail[5482]: vB4HMa56005482: Milter
>> (milter-geoip): error connecting to filter: Connection timed out with
>> /var/run/milter-geoip.sock
> 
> Please go to "Network Services" / "AV-SPAM" and in the "MySQL"-tab tick
> the checkbox "Flush MySQL" and then hit "Save". That will reset the
> AV-SPAM MySQL database tables. That might help.

Wow. That took longer than I expected. I’ll watch and see how things go. Do you 
think there was too much in there?

> 
>> I eventually have to reboot the server, as restarting sendmail or the
>> filter don’t work.
> 
> You don't have to reboot. You can restart all AV-SPAM components in an
> orderly manner this way:
> 
> /usr/sausalito/sbin/avspam_init.pl -restart
> 
> This command will show the status of them:
> 
> /usr/sausalito/sbin/avspam_init.pl -status

I’ll keep those handy, thanks.

Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21559] SMTP server going down, connection refused by milter-geoip

[Jeff Folk]

Been having an issue on a 5208R (av-spam installed, version 6.3.0-1 where the 
SMTP server will stop. Happens multiple times in a day, every week or so. When 
I get to it, maillog has entries like:

Dec  4 11:27:36 mail sendmail[5482]: vB4HMa56005482: Milter (milter-geoip): 
error connecting to filter: Connection timed out with /var/run/milter-geoip.sock

I eventually have to reboot the server, as restarting sendmail or the filter 
don’t work. Any idea how to determine the cause of this and head it off?

Thanks in advance,
Jeff Folk

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21312] Re: retention with automated backup

[Jeff Folk]

Hi PESJA,
> On Aug 30, 2017, at 9:37 AM, PESJA A & A  wrote:
> 
> Hi All,
>  
> I would like to know how to create backups, which last, for example 7 days. 
> So on Monday it’s overwrite the backup of last Monday etc.
> Is this possible within the automated backup utility, or is there a work 
> around to make it so.
>  

I don’t know about the automated backup, but I followed this thread to modify 
my raqbackup script:

http://mail.blueonyx.it/pipermail/blueonyx/2011-July/007884.html 


Mine keeps 5 copies as in the thread, but could be modified to keep as many as 
you like/have room for. The original Neuhaus Internet site is gone, but Chris 
Gebhardt (Virtbiz) has thankfully recreated the pages to create your script:

http://www.virtbiz.com/support/blueonyx/raqbackup-sh/ 

Cheers,
Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21221] Re: FTP login defaultroot wrong path

[Jeff Folk]

Hi Jochen,
> On Jul 31, 2017, at 4:38 AM, Jochen Demmer  wrote:
> 
> please excuse if I ask something that had been asked before, but I can't find 
> a solution.
> Reference:
> http://mail.blueonyx.it/pipermail/blueonyx/2009-July/001575.html 
> 
> http://blueonyx.mail.blueonyx.narkive.com/BXui2MYr/blueonyx-01431-default-ftp-login-to-web-folder
>  
> 
> The other posts tell you have to use the fqdn rather than the IP. In my case 
> there is no difference if I use the IP or the hostname. The problem remains 
> the same.
Are you using the FQDN of the SITE, or server? Is this user a site admin?

Thanks,
Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21126] Re: "naked" domains

[Jeff Folk]

> On Jun 18, 2017, at 2:52 PM, Lewis Gardner  wrote:
> 
> Is there a way to configure Blue Onyx where www.domain.com 
>  and domain.com  render the same 
> site?

Yes, you use the www host name, then use the ‘naked’ domain in the web alias 
field of Site Management -> Services -> Web for the site.___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21108] AV-SPAM

[Jeff Folk]

Good afternoon (well, it is afternoon somewhere),

I am really enjoying the AV-SPAM package on a couple of my servers. Doing a 
very nice job. A number of my users have reported it does TOO GOOD a job.

I’m finding that the greylist-milter foils lots of spam, and most users are 
okay with the small delay when they don’t have to clean out their inbox so much.

I was having trouble receiving anything from AOL, however. AOL users were 
getting bounce messages from AOL saying that the recipient’s server was not 
responding. Not so, I see AOL servers trying to send and the greylist counting 
down. Using my own AOL account I noticed that AOL has been attempting delivery 
only TWICE, then sending the AOL user a delivery failure notice. It looks like 
AOL makes the second attempt 5-7 minutes later, so I had to set the greylist 
delay to 5 minutes (the minimum).

That seems to allow AOL mail into the server again. Anyone else have issues 
with AOL incoming?

Have a great weekend,
Jeff



___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21063] Re: New location for raqbackup.sh

[Jeff Folk]

> On May 23, 2017, at 12:37 PM, Chris Gebhardt - VIRTBIZ Internet 
>  wrote:
> 
> We have published an updated version of the script generation page, which 
> updates some notes from the old Cobalt days to the more modern BlueOnyx.  
> Otherwise, the form that generates the code to drop into the server in order 
> to install raqbackup.sh is still intact and works as it did previously.  
> Long-time users will find it very familiar.

Awesome! Many thanks, Chris!

Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:21059] Re: RaqBackup.sh - did Neuhaus die?

[Jeff Folk]

> On May 23, 2017, at 9:22 AM, Chris Gebhardt - VIRTBIZ Internet 
>  wrote:
> 
> Has anyone else noted that the link to generate raqbackup.sh has died? It was 
> formerly found here:
> http://www.neuhaus-internet.de/cobalt/raqbackup/support/ 
> 
> 
> It's something that I had thought about mirroring some time ago, but never 
> quite got around to.  Now I wish I had.
> 
> From the looks of the http://www.neuhaus-internet.de/ 
>  homepage, it appears they had some sort of 
> catastrophic failure and no good backups. OUCH!   And reminder: have you 
> checked your backups lately?

Yes, ouch. Archive.org  has the pages archived, but I’m 
sure the scripts won’t work because they contact Neuhaus. Can’t even download 
the base script from them… not found.

Way back when, I modified my copy to keep 5 rolling days worth of backups. 
Luckily, I have that script saved in MANY places.

Cheers,
Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:20890] Re: Dovecot shutting down

[Jeff Folk]

> On Apr 10, 2017, at 12:05 PM, Jeff Folk  wrote:
> 
> Is fix doing this?
> 
> Warning: Dovecot process count = 56 processes
> Stopping Dovecot Imap: [  OK  ]
> dovecot: no process killed
> dovecot-auth: no process killed

Turns out DFix was indeed the culprit. Uninstalled.

Sorry for the noise. Looks like bigger fish were being fried today.

Regards,
Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:20869] Dovecot shutting down

[Jeff Folk]

Hello list,

I need a little guidance… One of my 5208R machines is having an issue where 
Dovecot is shutting down, and I can’t determine the issue. I restart the 
service and it runs a while then get the following in the maillog:

Apr 10 09:27:01 mail dovecot: master: Warning: Killed with signal 15 (by 
pid=14763 uid=0 code=kill)
Apr 10 09:27:01 mail dovecot: imap(plans): Server shutting down. in=151 
out=114297
Apr 10 09:27:01 mail dovecot: imap(amanager): Server shutting down. in=74 
out=18022
Apr 10 09:27:01 mail dovecot: imap(plans): Server shutting down. in=2633 
out=151667

Looking at the messages log when Dovecot dies:

Apr 10 09:40:37 mail fcoemon: error 111 Connection refused
Apr 10 09:40:37 mail fcoemon: Failed to connect to lldpad
Apr 10 09:40:41 mail kernel: IN=eth0 OUT= 
MAC=00:e0:4c:01:69:99:00:24:c8:43:01:e0:08:00 SRC=204.188.245.162 
DST=66.138.253.251 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=26125 DF PROTO=TCP 
SPT=58968 DPT=25 WINDOW=14600 RES=0x00 SYN URGP=0 
Apr 10 09:40:42 mail kernel: IN=eth0 OUT= 
MAC=00:e0:4c:01:69:99:00:24:c8:43:01:e0:08:00 SRC=204.188.245.162 
DST=66.138.253.251 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=26126 DF PROTO=TCP 
SPT=58968 DPT=25 WINDOW=14600 RES=0x00 SYN URGP=0 
Apr 10 09:40:44 mail kernel: IN=eth0 OUT= 
MAC=00:e0:4c:01:69:99:00:24:c8:43:01:e0:08:00 SRC=204.188.245.162 
DST=66.138.253.251 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=26127 DF PROTO=TCP 
SPT=58968 DPT=25 WINDOW=14600 RES=0x00 SYN URGP=0 
Apr 10 09:40:47 mail fcoemon: error 111 Connection refused
Apr 10 09:40:47 mail fcoemon: Failed to connect to lldpad
Apr 10 09:40:48 mail kernel: IN=eth0 OUT= 
MAC=00:e0:4c:01:69:99:00:24:c8:43:01:e0:08:00 SRC=204.188.245.162 
DST=66.138.253.251 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=26128 DF PROTO=TCP 
SPT=58968 DPT=25 WINDOW=14600 RES=0x00 SYN URGP=0 
Apr 10 09:40:57 mail fcoemon: error 111 Connection refused

I restarted the llpad service as suggested in another thread (is that installed 
by RoundCube?) to get rid of those entries. Interesting a server restart didn’t 
start that service properly.

Anyway, any help is appreciated for suggestions where else to look, what to 
check, etc.

Cheers,
Jeff

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:20866] Re: Dovecot shutting down

[Jeff Folk]

> On Apr 10, 2017, at 9:59 AM, Jeff Folk  wrote:
> 
> Hello list,
> 
> I need a little guidance… One of my 5208R machines is having an issue where 
> Dovecot is shutting down, and I can’t determine the issue. I restart the 
> service and it runs a while then get the following in the maillog:
> 
> Apr 10 09:27:01 mail dovecot: master: Warning: Killed with signal 15 (by 
> pid=14763 uid=0 code=kill)
> Apr 10 09:27:01 mail dovecot: imap(plans): Server shutting down. in=151 
> out=114297
> Apr 10 09:27:01 mail dovecot: imap(amanager): Server shutting down. in=74 
> out=18022
> Apr 10 09:27:01 mail dovecot: imap(plans): Server shutting down. in=2633 
> out=151667

Is fix doing this?

Warning: Dovecot process count = 56 processes
Stopping Dovecot Imap: [  OK  ]
dovecot: no process killed
dovecot-auth: no process killed


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:20860] Re: Strange fcoemon error

[Jeff Folk]

Lewis,

Did you ever get this sorted? I seem to be having exactly the same issue this 
morning!

Thanks,
Jeff


> On Feb 16, 2017, at 8:17 AM, Lewis Gardner  wrote:
> 
> 
> Messages like this are showing up every 10 seconds:
> 
>> Feb 16 09:10:11 bq180 fcoemon: error 111 Connection refused
>> Feb 16 09:10:11 bq180 fcoemon: Failed to connect to lldpad
>> Feb 16 09:10:11 bq180 kernel: IN=eth0 OUT= 
>> MAC=54:be:f7:0c:f7:f8:00:00:ca:00:00:03:08:00 SRC=173.170.246.211 
>> DST=74.142.59.69 LEN=64 TOS=0x00 PREC=0x00 TTL=47 ID=38106 DF PROTO=TCP 
>> SPT=49646 DPT=143 WINDOW=65535 RES=0x00 SYN URGP=0
>> Feb 16 09:10:21 bq180 fcoemon: error 111 Connection refused
>> Feb 16 09:10:21 bq180 fcoemon: Failed to connect to lldpad
> 
> Fiber Channel Over Ethernet? I don't think I have anything like that hooked 
> up.
> 
> I don't know if this is related to the email troubles on this server. I'm 
> having to restart SMTP, SMTP Auth, IMAP, & POP in the GUI on a regular basis 
> to keep email flowing.
> 
> What to do?
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:20617] Re: DDOS Attack

[Jeff Folk]

Cloud flare has been useful for me in the past.

> On Jan 27, 2017, at 3:06 PM, Richard Barker  wrote:
> 
> We have a friend has  website on Rackspace that got hit with a DDOS Attack 
> what would be his best defense
> to prevent it his hosting is unmanaged by Rackspace.
> 
> Any idea's and thoughts would be appreciated.
> 
> RC
> 
> -- 
> Richard C. Barker Sr. 
> CEO & President 
> 1-813-873-8942 
> ProBass Networks Inc. 
> www.probassnetworks.net  
> www.probass.net  
> *** 
> DISCLAIMER : - 
> This e-mail is confidential and intended only for the use 
> of the individual or entity named above and may contain 
> information that is privileged. If you are not the intended 
> recipient, you are notified that any dissemination, distribution 
> or copying of this e-mail is strictly prohibited. If you have 
> received this email in error, please notify us immediately 
> by return email or telephone and destroy the original message. 
> 
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it 
> http://mail.blueonyx.it/mailman/listinfo/blueonyx 
> 

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:20314] Re: Roundcube Alias

[Jeff Folk]

> On Nov 28, 2016, at 9:31 AM, Colin Jack  wrote:
> 
> Hi Jeff,
> 
>> I thought the xxx/roundcube url was the standard when the package was
>> installed? That’s how my server works…
>> 
>> Jeff
> 
> It is ... and it works.
> If you read my email correctly you would see I want to add an additional 
> alias for one site.
> 
> Colin

I guess I missed the ‘either’ in combination with the ‘or’. I’ve accomplished 
this in the past with a rewrite rule in either the conf.include or a htaccess 
file.

Regards,
Jeff



___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:20312] Re: Roundcube Alias

[Jeff Folk]

> On Nov 28, 2016, at 8:14 AM, Colin Jack  wrote:
> 
> This is really not terribly important but it is bugging me and I was hoping 
> someone could point out what I am doing wrong.
> 
> We use the Solarspeed Roundcube webapp on all our servers.
> We have one client who asked if we could set up an alias so that their users 
> could use either domain.com/roundcube or domain.com/mail to check their mail.
> 'course you can says I ... 
> 
> So I edited the site1.include as follows:
> 
> # /etc/httpd/conf/vhosts/site1.include
> # user customizations can be added here.
> 
> Alias /mail /roundcube
> 
> ## start-roundcubemail
> 
>  AllowOverride Options All
> 
> 
> ## stop-roundcubemail
> 
> And I get an error: AH01630: client denied by server configuration: /roundcube
> 
> Any guidance gratefully received.
> 
> 5209R with Apache/2.4.6
> 
> Thanks
> 
> Colin

I thought the xxx/roundcube url was the standard when the package was 
installed? That’s how my server works…

Jeff



___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:20110] Re: 5209R - tidbit more

[Jeff Folk]

Then something else is messing with it, because the normal BO error is 
something different:

http://www.qzoneinc.com/downloads 

Forbidden
You do not have permission to access the requested file on this server.


> On Sep 23, 2016, at 9:41 PM, webmaster  wrote:
> 
> 
> 
> Tried this. It didn't work
> 
> The directory below has one wave file and a .htaccess file in it that 
> contains one line  of code   Options +Indexes
> 
> http://www.luckylacquers.com/FR66/
> 
> 
> 
> 
> 
> 
>> You can put a simple .htaccess file in the directory you want to allow 
>> indexing, with the following line:
>> 
>> Options +Indexes
>> 
>> That should work.
>> 
>> Regards,
>> Jeff
>> 
>>> On Sep 23, 2016, at 9:19 PM, webmaster  wrote:
>>> 
 After Re-reading this
 When he puts a file up in a "new" directory there is no index.* file in 
 there just a .wav or some .wav files
 "new" directory
 no index.* file in there
 just a .wav or some .wav files
>>> 
>>> NEW NOTE  When you hit the dir with a browser you geta white page 
>>> with words "File not found".
>>> 
>>> When he was on my 5207R he would get a listing of the wave files
>>> 
>>> 
>>> Whew .. Sorry should have included this on first post
>>> 
>>> 
>>> 
>>> 
>>> 
>>> 
>>> Thanks
>>> 
>>> 
>>> 
>>> 
>>> On 9/23/2016 8:35 PM, Michael Stauber wrote:
 Hi Tim,
 
> I have a client who needs to be able to create  DIR(s), put a file(s) in
> them and then give his clients the URL(s) for the DIR(s), they see
> file(s) in the DIR and then can click to download the file(s)
> 
> I CAN get directory listing to work if I add this to the site's conf file
> 
> 
> DirectoryIndex disabled
> Options Indexes
> 
 The thing is that you cannot have both:
 
 A directory with an index file such as index.php/index.html *and*
 directory listing. Because if there is an index.*, then there will be no
 listing.
 
 What you can do: Have a subdirectory beneath without index.* file and
 have the client stuff the files he wants to share into that.
 
 A much better solution might be to install OwnCloud (see:
 https://owncloud.com/) on the Vsite. Or into a subdirectory of it.
 
 That can be used to share files easily with other users. You can set up
 access rights for multiple users, or you can create a link that provides
 authed access to the specific file only for the person that has the link
 that OwnCloud generated for sharing purpose.
 
>>> ___
>>> Blueonyx mailing list
>>> Blueonyx@mail.blueonyx.it
>>> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>> 
>> ___
>> Blueonyx mailing list
>> Blueonyx@mail.blueonyx.it
>> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>> 
> 
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:20107] Re: 5209R - tidbit more

[Jeff Folk]

You can put a simple .htaccess file in the directory you want to allow 
indexing, with the following line:

Options +Indexes

That should work.

Regards,
Jeff

> On Sep 23, 2016, at 9:19 PM, webmaster  wrote:
> 
> >After Re-reading this
> 
> >When he puts a file up in a "new" directory there is no index.* file in 
> >there just a .wav or some .wav files
> 
> > "new" directory
> 
> >no index.* file in there
> 
> > just a .wav or some .wav files
> 
> 
> NEW NOTE  When you hit the dir with a browser you geta white page 
> with words "File not found".
> 
> When he was on my 5207R he would get a listing of the wave files
> 
> 
> Whew .. Sorry should have included this on first post
> 
> 
> 
> 
> 
> 
> Thanks
> 
> 
> 
> 
> On 9/23/2016 8:35 PM, Michael Stauber wrote:
>> Hi Tim,
>> 
>>> I have a client who needs to be able to create  DIR(s), put a file(s) in
>>> them and then give his clients the URL(s) for the DIR(s), they see
>>> file(s) in the DIR and then can click to download the file(s)
>>> 
>>> I CAN get directory listing to work if I add this to the site's conf file
>>> 
>>> 
>>> DirectoryIndex disabled
>>> Options Indexes
>>> 
>> The thing is that you cannot have both:
>> 
>> A directory with an index file such as index.php/index.html *and*
>> directory listing. Because if there is an index.*, then there will be no
>> listing.
>> 
>> What you can do: Have a subdirectory beneath without index.* file and
>> have the client stuff the files he wants to share into that.
>> 
>> A much better solution might be to install OwnCloud (see:
>> https://owncloud.com/) on the Vsite. Or into a subdirectory of it.
>> 
>> That can be used to share files easily with other users. You can set up
>> access rights for multiple users, or you can create a link that provides
>> authed access to the specific file only for the person that has the link
>> that OwnCloud generated for sharing purpose.
>> 
> 
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19858] WIKI down?

[Jeff Folk]

I was trying to lookup an answer to my new site serving php as text and noticed 
the wiki is down with open_basedir restriction problems…

Just letting you know.

Regards,
Jeff


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19654] Re: Automated Server Backup

[Jeff Folk]

On Jun 3, 2016, at 10:55 AM, Richard Barker wrote:

> Hey Jeff,
> Thanks if you don't mind yes I would
> RC
> -- 

The ftp functions. 

function ftptest() {
  if test $TARGET; then
plugin preftp
if test $TARGETDIR; then
  FTPPREPARE1="cd $TARGETDIR"
fi
if test $TARGET && test $TARGETUSER && test "$TARGETPASS"; then
  echo -n "$(date +%T) > Testing connection to $TARGET... "
  ftp -i -n -v $TARGET $TARGETPORT 1> $WORKDIR/logs/output-ftptest.log 2> 
$WORKDIR/logs/errors-ftptest.log < Trying again in 10 minutes..."
  TARGETRETRYCONNECT=`expr $TARGETRETRYCONNECT - 1`
  sleep 10m
  ftptest
else
  if test $DELBACKUP = "1"; then
DELBACKUP="0"
  fi
  errormsg "echo -e \"Failed to transfer test-file to $TARGET!\nCheck 
username, password and hostname of the target machine!\nYou might find more 
information in your logs, see\n$WORKDIR/logs/output-ftptest.log 
and/or\n$WORKDIR/logs/errors-ftptest.log\nYou can find the complete backup on 
this RaQ under $WORKDIR/data\""
fi
  fi
else
  if test $DELBACKUP = "1"; then
DELBACKUP="0"
  fi
  echo "not ok"
  errormsg "echo -e \"Failed to transfer test-file to $TARGET!\nUsername, 
password or hostname are empty!\nYou can find the complete backup on this RaQ 
under $WORKDIR/data\""
fi
  else
echo "$(date +%T) > FYI: No transfer of the backup to another server!"
  fi
}

function ftpbackup() {
  echo "FIRST-FILE-OK" > $WORKDIR/data/ftptest1.txt
  echo "LAST-FILE-OK" > $WORKDIR/data/ftptest2.txt
  echo -n "$(date +%T) > Transferring backup to $TARGET... "
  ftp -i -n -v $TARGET $TARGETPORT 1> $WORKDIR/logs/output-ftptransfer.log 2> 
$WORKDIR/logs/errors-ftptransfer.log < Getting listing from $TARGET... "
  ftp -i -n -v $TARGET $TARGETPORT 1> 
$WORKDIR/logs/output-ftptargetlisting.log 2> 
$WORKDIR/logs/errors-ftptargetlisting.log<

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19648] Re: Automated Server Backup

[Jeff Folk]

On Jun 3, 2016, at 7:56 AM, Joachim Klein wrote:

> Hy Richard!
>  
> I had the same problem like you and haven´t found a solution within raqbackup.
> Then the solution is found with a nas-storage with snapshots.
> On blueonyx I make backups with solbackup / raqbackup and transfer this via 
> ftp
> to this nas. Then with this I was possible to define a daily snapshot and 
> retain 5 or 6 Days.
> Then I defined a weekly snapshot and retain the last 4 weeks.
> The same for month and year.
> The storage isn´t very fast but makes a great job because it does also 
> deduplication.
>  
> The NAS is from ctera (www.ctera.com) for your info
>  
> OTHER solution:
> Make Backups and then create the “snapshots” with rsnapshot (for daily, 
> weekly, montly,..)
> 
> Have a nice weekend
> Joachim

I've modified RaqBackup to keep a rolling 5 days of backups on the receiving 
end via ftp (my ftp is local Gb).

I could share the script if you want.

Regards,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19570] Re: Lets Encrypt certificates

[Jeff Folk]

> On May 14, 2016, at 9:39 PM, Ernie  wrote:
> 
> Anyone managed to get the free Lets Encrypt automated SSL certficates
> working on BX vsites yet?
> 
> 
> If so, did you have to edit the renewal scripts?
> 
> https://certbot.eff.org/
> 
> 
> - Ernie.

Hi Ernie,

I have one on one of my v-sites. I didn’t need to modify anything.

Regards,
Jeff



___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19522] Re: SSL issue

[Jeff Folk]

On Apr 26, 2016, at 1:24 PM, Harm van Houten wrote:

> But,
> 
> Still i get redirected to the first site.. 
> 
> Verzonden vanaf mijn Sony Xperia™-smartphone

I don't. 

I get a certificate error when going to the https site, but a BlueOnyx index 
page for the correct domain in http.

Regards,
Jeff 

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19381] Re: ***SPAM*** Re: Removing Roundcube

[Jeff Folk]

As I read his instructions, yes. Script first, then uninstall the package.

On Mar 21, 2016, at 2:06 PM, Matt James wrote:

> Thanks, Michael.  Should this be done alongside the uninstall that Tom and 
> Jeff directed me to in their replies?
> 
> -Matt
> 
> 
>> On Mar 21, 2016, at 12:58 PM, Michael Stauber  wrote:
>> 
>> Hi Matt,
>> 
>>> I’m writing to see if anyone could provide me the most 
>>> reliable way to remove Roundcube altogether.
>> 
>> Here is a small script for that:
>> 
>> ---
>> #!/usr/bin/perl -I/usr/sausalito/perl
>> 
>> use CCE;
>> $cce = new CCE;
>> $cce->connectuds();
>> 
>> @vhosts = ();
>> (@vhosts) = $cce->findx('WebApplications', '', { "appname" =>
>> "roundcubemail" });
>> 
>> for $app (@vhosts) {
>>   ($ok, $my_vsite) = $cce->destroy($app);
>> }
>> 
>> $cce->bye('SUCCESS');
>> exit(0);
>> ---
>> 
>> Beware of the unintended linewrap in the line starting with "(@vhost) =".
>> 
>> Save, make executable, run. Be sure to uninstall the RoundCube PKG as
>> well, or the next CCEd restart will redeploy it to all Vsites.
>> 
>> -- 
>> With best regards
>> 
>> Michael Stauber
>> ___
>> Blueonyx mailing list
>> Blueonyx@mail.blueonyx.it
>> http://mail.blueonyx.it/mailman/listinfo/blueonyx
> 
> 
> ___
> Blueonyx mailing list
> Blueonyx@mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19375] Re: Removing Roundcube

[Jeff Folk]

On Mar 21, 2016, at 10:14 AM, Matt James wrote:

> Hi everyone,
> 
> I’m writing to see if anyone could provide me the most reliable way to remove 
> Roundcube altogether.  We don’t use email on our BlueOnyx server and there’s 
> no need to leave it around for security reasons.  Any tips?
> 
> Thanks!
> 
> -Matt
> 

I'm assuming you purchased the RoundCube package from a BlueOnyx store? You 
would go to Software Updates -> Installed Software and click the uninstall 
button next to the RoundCube install listing.

Regards,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19238] Re: locate and updatedb

[Jeff Folk]

On Feb 29, 2016, at 5:20 PM, Richard Barker wrote:

> New VPS on adventurin{e} locate and updatedb not found
> updatedb  
> -bash: updatedb: command not found
> locate cced.init
> -bash: locate: command not found
> 
> RC

yum install mlocate

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19067] Re: Help! emu data issue

[Jeff Folk]

On Jan 26, 2016, at 11:58 PM, Michael Stauber wrote:

> Even then: That user looks like he has more than 20GB of data. You got a
> bit-hoarder there. ;-)

There are several… They are a print shop and push attachments around; PDF 
proofs back to customers, etc. The worst part is not deleting mail, and that 
old 5107 can't keep up as they try. Hoping this new i5 machine will help out.

Regards,
Jeff

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19064] Re: Help! emu data issue

[Jeff Folk]

> Possible causes:
> 
> - CMU did run out of memory
> - Unpacking failed due to disk quota issues
> - Tarball was corrupted

Looking at the cmu.log on the receiving server, see couple errors. Suspect 
corrupt tar ball:

ScanIn: Setting namescape ApacheBandwidth ok=1
ScanIn: Error2: = {};
ScanIn:
ScanIn: Error2: = '305 WARN [[base-disk.couldNotSetQuota,name=site1]]
ScanIn: ';
ScanIn:
ScanIn: Error2: = {
ScanIn:   '39' => {
ScanIn: 'username' => '[[base-cce.invalidData]]'
ScanIn:   }
ScanIn: };
ScanIn:
ScanIn: Setting namescape SSI ok=1

And then some checksum errors:

ScanIn: User jmaldonado OK=1
ScanIn: Setting namescape Shell ok=1
ScanIn: Setting namescape subdomains ok=1
ScanIn: Setting namescape Email ok=1
ScanIn: Setting namescape Disk ok=1
ScanIn: Setting namescape Sites ok=1
ScanIn: Setting namescape RootAccess ok=1
ScanIn: User jmaldonado setting crypt passwd OK=1
ScanIn: User jmaldonado setting md5 passwd OK=1
ScanIn: INFO: restoring archive for jmaldonado
ScanIn: xmlFile: /mnt/usb/home/data//users-jmaldonado-public.xml tarFile 
/mnt/usb/home/data//users-jmaldonado-public.tar.gz
ScanIn: xmlFile: /mnt/usb/home/data//1.users-jmaldonado-private.xml tarFile 
/mnt/usb/home/data//1.users-jmaldonado-private.tar.gz
ScanIn: QhVTqE7gJsZ72nDM8+p69DkI9K+Qa4SCKn
ScanIn: 
Ps1WD/bOhYJ30mPeHWBfDJ6jE5B7ZQe2XLQ8umcZlSRUJMf8A7k/OScOwvT7BZN13HHxShFYlSmw
ScanIn: 
NbYQSrvpBkDr8sQ42NrYJM1D+VqbeAUSPdgC+0g+V/5/P3thWV9SQePTZ69o2W/0lygqqZZQppaAlvlLhkg9je/bHcMrTXr/AvJHh+/5G3VKbzRkJcA
ScanIn: UrVcevKPX0whOhzERxnkicq4ndbQ: checksum error.
ScanIn: WvUd2docVVM
ScanIn: 
uIAKHHHG3EnrEgz0tvhMeH2TQ3j9yDxA3/SFKeBllPurB5TaZ+9++DhvQXuVNI6t5okA6Sbg3ufP
ScanIn: 
btg3o6i6yfOBkT+sIUVLgdRPWOR77YDkGSs88SOhbJcVCVuuLKu8R9L4dAXdF5neV+/KB0VyMc76vK2GdXhr3DXN+w2U1aKl59LRB1zpPIjz+Py6Ymr
ScanIn: Z6wWypCap1SQZKHQgDtaT5X+uOJBtlHmFEctTUJdBMPpEgX0G1v: checksum error.
ScanIn: nfbHlOlR6t2U50OoXIkpHbrHpv8sdWjoJVCAyw
ScanIn: 
bHUpUSPifh++KYu2cokcFMrqXUpI3VBHKRMz2iT6YLNTFo58YIKKJ9Bv4TqVEjuYgdcdxKmhc1pl
ScanIn: 
41w2M54jytbQ/wB7aK3FEWA0wPW844pVFr3Oz5T/bAfxgYun8gtnfJcqTw7l7aE39wHaPeUN+tgPhgJvqdnl6FjwdlRfzR3TdBKHDPWDMfTrBwCByOh
ScanIn: lZpUA06rGSVL9T/GGk8Y2Zz9: checksum error.

I should have shared (read) this earlier…

Jeff


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19063] Re: Help! emu data issue

[Jeff Folk]

Hi Michael,

> Hi Jeff,
> 
>> [root@mail home]# /usr/sbin/cmuImport -a -d /home/export/home/data/
>> Reading config file: /etc/cmu/cmuConfig.xml
>> LogFile location is /home/cmu/cmu.log
>> We exported 0 vsites, 0 users, 0 lists
>> Subroutine Compress::Zlib::gzFile::gzseek redefined at 
>> /usr/lib64/perl5/Compress/Zlib.pm line 219.
>> 
>> ===> Checking Virtual Sites <===
>> ===> Checking Users <===
>> Creating virtual site: www.copyzone.net
>> Creating user: selfserve-mac
>> restoring archive for selfserve-mac
>> Creating user: jmaldonado
>> restoring archive for jmaldonado
>> sh: -c: line 0: unexpected EOF while looking for matching ``'
>> sh: -c: line 2: syntax error: unexpected end of file
>> ScanIn: Can't use string (201 OKsh: -c: line 1: unexpected EOF while looking 
>> for matching `"'
>> sh: -c: line 2: syntax error: unexpected end of file
>> sh: -c: line 0: syntax error near unexpected token `)'
>> sh: -c: line 0: `echo -n "ScanIn: ") as a HASH ref while "strict refs" in 
>> use at /usr/cmu/perl/Archive/Tar.pm line 625.'
>> [root@mail home]# 
>> 
>> What can I do? I’ve tried to use the data directly from the external drive, 
>> too. Same problem.
> 
> That error can happen for a couple of reasons. During unpacking of the
> tarball for user selfserve-mac of Vsite www.copyzone.net CMU did run
> into an error.

It was jmaldonado, though, right?

> Possible causes:
> 
> - CMU did run out of memory
> - Unpacking failed due to disk quota issues
> - Tarball was corrupted
> 
> The likely cause is disk quota issues. Like the user using more
> diskspace than allocated for the entire Vsite. That's one of the reasons
> why the CMU Migration guide suggests to make sure that Users and Vsites
> aren't over quota before you do a CMU-Export:
> 
> http://www.blueonyx.it/index.php?page=cmu-migrations

There was an interesting issue with the quota for jmaldonado as I was working 
through the migration guide (after the restore quota/swatch step)… The quota 
displayed as ‘unlimited’, but I set it back to 2, saved. All users and the 
site were in quota.

> Check how big that tarball is.

[root@mail data]# ls -lah | grep jmaldonado
-rw-r- 1 root root 8.2G Jan 23 20:35 1.users-jmaldonado-private.tar.gz
-rw-r- 1 root root  386 Jan 23 20:38 1.users-jmaldonado-private.xml
-rw-r- 1 root root 8.2G Jan 23 21:07 2.users-jmaldonado-private.tar.gz
-rw-r- 1 root root  488 Jan 23 21:09 2.users-jmaldonado-private.xml
-rw-r- 1 root root 765M Jan 23 21:12 3.users-jmaldonado-private.tar.gz
-rw-r- 1 root root  634 Jan 23 21:12 3.users-jmaldonado-private.xml
-rw-r- 1 root root 954M Jan 23 21:16 4.users-jmaldonado-private.tar.gz
-rw-r- 1 root root 4.0K Jan 23 21:16 4.users-jmaldonado-private.xml
-rw-r- 1 root root  416 Jan 23 21:16 users-jmaldonado-private.tar.gz
-rw-r- 1 root root  443 Jan 23 21:16 users-jmaldonado-private.xml
-rw-r- 1 root root 2.3K Jan 23 19:54 users-jmaldonado-public.tar.gz
-rw-r- 1 root root  324 Jan 23 19:54 users-jmaldonado-public.xml

> See if you can unpack it manually to see
> if it's corrupted.

Not sure which one to unpack. I’m confused by the 1, 2, 3, 4 prefixes...

> In your case I would also suggest to import the Vsites (and Users) via
> CMU one by one.

Unfortunately it is a single site server.I had their email down for long enough 
and brought the original 5107R back online. After the 18 hour export, it was 
going to take 77 hours for scp to copy to the new server. Yikes. I’ll probably 
try another export directly to the external disk Saturday (avoiding the time 
consuming copy) and swap the external to the new server for import.

Let me know what you think about the above archive listing.

Thanks for all you do!

Jeff


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:19061] Help! emu data issue

[Jeff Folk]

Hi everyone,

I’m in the middle of migrating a 5106R to a beefier 5208R. Export took 19 hours 
(220GB of data), and finally stopped the scp copy to new server after 36 hours. 
Went on-site to use an external disk to transfer the export directory. External 
drive is formatted ext3.

Data transferred fine. When I attempt to import, I get this error:

[root@mail home]# /usr/sbin/cmuImport -a -d /home/export/home/data/
Reading config file: /etc/cmu/cmuConfig.xml
LogFile location is /home/cmu/cmu.log
We exported 0 vsites, 0 users, 0 lists
Subroutine Compress::Zlib::gzFile::gzseek redefined at 
/usr/lib64/perl5/Compress/Zlib.pm line 219.

===> Checking Virtual Sites <===
===> Checking Users <===
Creating virtual site: www.copyzone.net
Creating user: selfserve-mac
restoring archive for selfserve-mac
Creating user: jmaldonado
restoring archive for jmaldonado
sh: -c: line 0: unexpected EOF while looking for matching ``'
sh: -c: line 2: syntax error: unexpected end of file
ScanIn: Can't use string (201 OKsh: -c: line 1: unexpected EOF while looking 
for matching `"'
sh: -c: line 2: syntax error: unexpected end of file
sh: -c: line 0: syntax error near unexpected token `)'
sh: -c: line 0: `echo -n "ScanIn: ") as a HASH ref while "strict refs" in use 
at /usr/cmu/perl/Archive/Tar.pm line 625.'
[root@mail home]# 

What can I do? I’ve tried to use the data directly from the external drive, 
too. Same problem.

Thanks in advance,
Jeff


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18937] Re: New 5208, interface problems

[Jeff Folk]

On Jan 8, 2016, at 5:55 PM, Jeff Folk  wrote:

> # PCI device 0x14e4:0x1691 (tg3) (custom name provided by external tool)
> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", 
> ATTR{address}=="18:03:73:b1:cf:94", ATTR{type}=="1", KERNEL=="eth*", 
> NAME=“p3p1"
> 
> I’ll try changing those to see what happens.

That seems to have sorted it out after a reboot:

Changed the NAME=“p3p1’\” TO eth1, renamed the if cfg-p3p1 file to if cfg-eth1 
and edited the contents for the IP I wanted, CHMOD +x, and reboot.

Secondary interface now appears in the GUI.

Cheers,
Jeff


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18936] Re: New 5208, interface problems

[Jeff Folk]

On Jan 8, 2016, at 3:29 PM, Chris Gebhardt - VIRTBIZ Internet 
 wrote:

> On 1/8/2016 3:20 PM, Jeff Folk wrote:
>> I don’t know why I have such problems with network interfaces… G
>> 
>> 4th time installing 5208 on this box (Dell XPS 8300, with Realtek PCIe 
>> second NIC).
>> 
>> At the end of the install, I log into the command console, am prompted for 
>> IP settings, but just eth0. When I get to the GUI to finish setup, there is 
>> no eth1. The PCIe add-in card is eth0, built in Broadcom interface is not 
>> enabled. Both interfaces were plugged into a switch during install and 
>> configuration.
>> 
>> What the heck am I doing wrong?
> 
> You're not squinting just right.   You gotta squint at it.  But just right.
> 
> Try this:
> 
> Open up /etc/udev/rules.d/70-persistent-net.rules in your favorite editor.
> 
> You will see lines that begin with something like this:
> # PCI device 0x14e4:0x1639 (bnx2)
> 
> Delete ALL of that.   In fact, delete everything under the message about 
> how the file is automatically generated blah blah blah.
> 
> Save the file, exit your editor.
> 
> Reboot.
> 
> See what happens.

Thanks, Chris,

It is regenerated, probably based on the network-scripts created at discovery? 
Here is the file contents:

# PCI device 0x10ec:0x8168 (r8169)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", 
ATTR{address}=="00:e0:4c:01:69:99", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

# PCI device 0x14e4:0x4727 (bcma-pci-bridge) (custom name provided by external 
tool)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", 
ATTR{address}=="d0:df:9a:75:31:69", ATTR{type}=="1", KERNEL=="wlan*", 
NAME="wlan0"

# PCI device 0x14e4:0x1691 (tg3) (custom name provided by external tool)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", 
ATTR{address}=="18:03:73:b1:cf:94", ATTR{type}=="1", KERNEL=="eth*", NAME=“p3p1"

I’ll try changing those to see what happens.

Jeff


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18931] New 5208, interface problems

[Jeff Folk]

I don’t know why I have such problems with network interfaces… G

4th time installing 5208 on this box (Dell XPS 8300, with Realtek PCIe second 
NIC).

At the end of the install, I log into the command console, am prompted for IP 
settings, but just eth0. When I get to the GUI to finish setup, there is no 
eth1. The PCIe add-in card is eth0, built in Broadcom interface is not enabled. 
Both interfaces were plugged into a switch during install and configuration.

What the heck am I doing wrong? 

Thanks,
Jeff


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18409] Re: Dfix error / pam_abl_gui - fixed!

[Jeff Folk]

On Sep 25, 2015, at 12:26 PM,   
wrote:

> I can confirm DFIX2 is a lot better and worth the upgrade.

Just bought, linked, and installed. Gotta support our guys.

Thanks again, Michael, Greg, et al.

Regards,
Jeff


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18407] Re: 5207R & 5208R: PAM_ABL fixed and reactivated

[Jeff Folk]

On Sep 25, 2015, at 11:48 AM, Michael Stauber  wrote:

> The error message you posted showed that you had an "e" too much in the
> file name. "pam_able" instead of "pam_abl".

Oh, hell!

I’d like to blame that on auto-correct… BUT...



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18405] Re: 5207R & 5208R: PAM_ABL fixed and reactivated

[Jeff Folk]

On Sep 25, 2015, at 11:02 AM, Michael Stauber  wrote:

> But like said: That is actually handled by a constructor that runs
> during cced.init restart. Did you restart CCEd before trying this?

I did. After both yum updates as a matter of fact. Even rebooted the box. Don’t 
know why it wouldn’t do it on its own.

> The correct command for copying it would have been this:
> 
> cp /etc/security/pam_abl.conf.rpmnew /etc/security/pam_abl.conf

cp  , right? I didn’t think I had that wrong… I didn’t use 
full paths, but I was in the security directory. I was trying to first copy the 
existing file to old, which it wouldn’t do.

Looks like full paths are required, though. Commands work that way. LOL. So 
much for shortcuts…

Thanks again,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18403] Re: Dfix error / pam_abl_gui - fixed!

[Jeff Folk]

On Sep 25, 2015, at 10:40 AM, webmaster  wrote:

> 
> I am in the same boat as Jeff  
> 
> 5208R
> 
> dfix ver 1.9.19  (the free one)
> 
> 
> After last night's updated I was getting these
> 
> /usr/local/sbin/dfix.sh: line 161: /usr/sausalito/bin/pam_abl_gui: No such 
> file or directory
> 
> Updated # 2 (today)
> 
> yum clean all
> yum update -y
> 
>  /sbin/service cced.init restart
>  
> 
> Now I am getting
> 
> 
> No such file or directory (2) while reading config file: No db_home dir 
> specified
> 
> 
> 
> Don't want to break something else by trying to hack (yet) so I am just 
> waiting for the all powerful OZ to tell us what to do next
> 
> 
> 
> Thanks
> 
> —Tim
> 
Hi Tim,

Yes, Michael put in some new updates to take care of the dFix 1.9.19 issue, but 
for some reason nothing would allow the pam_able.conf file to update. If you 
look in /etc/security, you’ll probably see a pam_abl.conf.rpmnew file. That has 
the new configuration for the new pam_abl stuff.

I had to use a text editor (nano for me, but you can use vi) to save the 
pam_abl.conf file to pam_able.conf.old (cp wouldn’t work). I then opened the 
.rpmnew conf file and copied the text, then opened the pam_abl.conf file and 
replaced the text with my copied text.

Restarted pam_able and cced:

service pam_able stop
service pam_able start
/sbin/service cced.init restart

That seems to have me back to normal. I don’t know why the normal channels 
wouldn’t update the conf file, however.

Regards,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18401] Re: 5207R & 5208R: PAM_ABL fixed and reactivated

[Jeff Folk]

On Sep 25, 2015, at 9:57 AM, Michael Stauber  wrote:

> Yepp, that's for the old one. Looks like your CCEd didn't get restarted
> after the YUM update. So the fix should be easy:
> 
> /sbin/service cced.init restart
> 
> That should then take care of it and it'll also generate the correct
> /etc/security/pam_abl.conf for you.
> 
> -- 
> With best regards
> 
> Michael Stauber

More strangeness…

I see a new pam_abl.conf saved as .rpmnew, but when I try to backup the 
existing file:

[root@box1 security]# cp pam_able.conf pam_able.conf.old
cp: cannot stat `pam_able.conf': No such file or directory

It doesn’t have the immutable bit set:

[root@box1 security]# lsattr
-e- ./pam_abl.conf
-e- ./pam_abl.conf.rpmnew

I was able to backup the file using a text editor, then copied the contents of 
the rpmnew file into the original conf file after deleting the old text. 
Restarted pam_abl and cced.

Now I can get to the Failed Logins and Login Manager pages. The ddix emails 
also seem to have stopped. Looks all good again.

I’ll certainly look into dFix2. Sometimes free isn’t the best… But it had been 
doing what I wanted in cooperation with Fail2Ban.

Thanks for the help Michael,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18396] Re: 5207R & 5208R: PAM_ABL fixed and reactivated

[Jeff Folk]

On Sep 25, 2015, at 9:41 AM, Jeff Folk  wrote:

> [root@box1 ~]# pam_abl -v
> Reading config from /etc/security/pam_abl.conf
> No such file or directory (2) while reading config file: No db_home dir 
> specified
> 
> Interesting…
 
contents of pam_abl.conf

# /etc/security/pam_abl.conf
# debug
host_db=/var/lib/abl/hosts.db
host_purge=2d
host_rule=*=3/1h
user_db=/var/lib/abl/users.db
user_purge=2d
user_rule=!admin/cced=1/1h,5/1m

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18395] Re: 5207R & 5208R: PAM_ABL fixed and reactivated

[Jeff Folk]

On Sep 25, 2015, at 9:30 AM, Michael Stauber  wrote:

> I just looked at the code for that. Both the lines 194 and 213 have no
> index that could be undefined. So it is likely that you got a
> base-console that's not fully up to date. One of those that I published
> before I realized that some small fixes were needed. Please do another
> "yum clean all" and "yum update" and see if there is an update to
> base-console. Probably there is one.

No packages marked for update

> If there isn't, then please be so kind as to send me the output of
> "pam_abl -v" as text for troubleshooting.

[root@box1 ~]# pam_abl -v
Reading config from /etc/security/pam_abl.conf
No such file or directory (2) while reading config file: No db_home dir 
specified

Interesting…

Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18394] Re: Dfix error / pam_abl_gui

[Jeff Folk]

On Sep 25, 2015, at 9:22 AM, Michael Stauber  wrote:

> Hi Richard,
> 
>> /usr/local/sbin/dfix.sh: line 161: /usr/sausalito/bin/pam_abl_gui: No
>> such file or directory
> 
> /usr/sausalito/bin/pam_abl_gui got removed as we don't need it anymore.
> I wasn't aware that there is a Dfix version still out there that uses it.
> 
> Which version of Dfix is that?
> 
> -- 
> With best regards
> 
> Michael Stauber

My version is 1.9.19

Thanks,
Jeff




smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18391] Re: Dfix error / pam_abl_gui

[Jeff Folk]

On Sep 25, 2015, at 8:52 AM, Richard Barker  wrote:

> After update getting this error every minute
> on 5207R and 5208R 
> /usr/local/sbin/dfix.sh: line 161: /usr/sausalito/bin/pam_abl_gui: No such 
> file or directory
> 
> Thank you
> RC
I just reported that, as well. What happens when you try to view failed logins 
in the server GUI? Security -> Failed logins

Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18388] Re: 5207R & 5208R: PAM_ABL fixed and reactivated

[Jeff Folk]

On Sep 24, 2015, at 10:59 PM, Michael Stauber wrote:

> Hi all,
> 
> Earlier I wrote:
>> I'll be backporting this to 5207R/5208R as soon as possible.
> 
> That has happened now as well and updated CCE and base-console RPMs are
> now available via YUM for 5207R and 5208R as well.
> 
> Should you encounter any problems during or after this YUM update, then
> please do this:
> 
> yum clean all
> yum update -y
> /sbin/service cced.init restart

I'm on 5208R.
My updates applied this morning. I had a lot (59) cron daemon messages from 
dfix (free) every minute complaining about missing pam_abl_gui

So I yum cleaned all and updated again (no updated), then restarted cced. Still 
getting the dfix mails every minute:

"/usr/local/sbin/dfix.sh: line 161: /usr/sausalito/bin/pam_abl_gui: No such 
file or directory"

Also, when I log into the GUI, when I try to go to Security -> Failed Logins or 
Login Manager, I get errors:

For Failed Logins

A PHP Error was encountered

Severity: Notice

Message: Undefined offset: 1

Filename: controllers/ablstatus.php

Line Number: 264


Fatal error: ob_start() [ref.outcontrol]: Cannot 
use output buffering in output buffering display handlers in 
/usr/sausalito/ui/chorizo/ci/system/core/Exceptions.php on line 181

For Login Manager
A PHP Error was encountered

Severity: Notice

Message: Undefined offset: 1

Filename: controllers/ablsettings.php

Line Number: 194

A PHP Error was encountered

Severity: Notice

Message: Undefined index:

Filename: controllers/ablsettings.php

Line Number: 213


Fatal error: ob_start() [ref.outcontrol]: Cannot 
use output buffering in output buffering display handlers in 
/usr/sausalito/ui/chorizo/ci/system/core/Exceptions.php on line 181

Regards,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18379] Re: Chance to batch import user on 5208/5209R?

[Jeff Folk]

On Sep 23, 2015, at 3:50 AM, Dirk Estenfeld wrote:

> Hello,
> 
> I want to create ~ 80 mailusers (for one domain) on a 5209R from a completely 
> different system.
> Is there some chance for me to create any kind of batch to create the users 
> more automatically than creating every user manually in the gui?
> Older Blueonyx / Bluequartz versions had an cvs import tool to create users.
> 
> Best regards,
> Dirk

Hi Dirk,

/usr/sbin/cadduser?

I don't personally remember the CVS import function, but have used that script 
to provision users in the past using ISP systems (i.e. Optigold, etc.).

Usage /usr/sbin/cadduser [OPTION]...
[--admin, -a, --enable-admin] [--adminPassword=string, --adminpw] 
[--aliases=list, -e] [--apop, -o, --enable-apop] [--forward=list, -e] 
[--fqdn=string, --domain, -d] [--fullname=string, -f] [--group=string, -g, 
--groupname] [--help, -h, -?] [--name=list, -n] [--password=string, -p] 
[--quick, -Q] [--quota=integer, -q, --set-quota] [--remarks=string, -r] 
[--shell, -t, --enable-shell] 

Regards,
Jeff

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18180] Re: Amanda backup on blueonyx

[Jeff Folk]

On Aug 19, 2015, at 8:54 AM, Larry Smith wrote:
> 
> We are currently using Amanda in our NOC for local server
> backups and one of the techs asked me why we could not use
> it for the hosting servers also (BlueOnyx).
> 
> Has anyone tried/used this?  What does it break?
> 
> Thinking of using a cron job to cmuExport everything, then using
> Amanda to backup /home/cmu.


Hi Larry,

I don't, sorry. I've found the Neuhaus RaqBackup script to be everything I've 
needed. Granted I have another server as the target of the ftp sending of those 
backups, but I'm sure the script could be modified to instead copy those CMU 
export backups to an attached disk or network target. I've modified my script 
to keep a daily cycle of 5 days of backups for my BlueOnyx server.

Completes in 15 minutes daily, but I'm only backing up around 7 GB at the 
moment.

Regards,
Jeff

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18087] Re: Interface Aliases

[Jeff Folk]

On Jul 23, 2015, at 8:29 AM, Gerald Waugh wrote:
> 
> I believe your server already has one IP address configured for eth0.
> When you now create a new site and put a new IP address, the GUI will 
> automatically create eth0:0 and will associate the new IP as
> an Interface Alias to Eth0. When an "alias" IP becomes free (i.e.: no more 
> sites are using it), then it will be removed automatically.

Ah, thanks Gerald. I really don't have that need at the moment, but wasn't 
understanding the functionality.

Cheers,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18066] Re: Sendmail TLS problem

[Jeff Folk]

On Jul 22, 2015, at 1:25 PM, Michael Aronoff wrote:
> 
>> Srv_Features:199.175.188.52 S
> 
> That did it!!! You are the best. Thanks!!!

Might be sure to add .51 as well, since both have the same precedence as MX 
entries - in case they send out from both MTAs?

Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18063] Re: Sendmail TLS problem

[Jeff Folk]

On Jul 22, 2015, at 12:42 PM, Michael Aronoff wrote:
> 
> I thought the Sendmail TLS problems were solved a while back but I have a few 
> servers that still cannot get email delivered.
>  
> I get these entries in the logs:
> Jul 21 12:18:04 tc sendmail[22201]: STARTTLS=server, error: accept failed=0, 
> SSL_error=1, errno=0, retry=-1, relay= 199.175.188.52
>  
> I even tried setting
> Try_TLS: 199.175.188.52 No
> in /etc/mail/access and it did not help.
>  
> Anyone have any ideas?

Neither of the MTAs at that organization seem to support TLS.  :-(

Did you also makemap the access.db and restart sendmail? (you probably did, but 
just checking)

Regards,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:18060] Interface Aliases

[Jeff Folk]

Hello,

I recently did a CMU migration from a 5107R to a 5208R. Everything has gone 
well (except for a change in internet IP and trusting TWC DNS, bad Jeff!)

The one thing I do notice, is that I am unable to define a Interface Alias for 
the primary (eth0) network interface in the GUI - only the secondary interface 
(eth1) shows in the drop down menu. Is this by design? I thought that I had 
assigned an additional public IP on the old box at one time.

Thanks for the info,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17888] Re: Stupid Question

[Jeff Folk]

On Jun 23, 2015, at 1:21 PM, Phil Hamer wrote:
> 
> Sorry to have to ask default user name and password.

And the admin user is 'admin'.  ;-)

Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17887] Re: Stupid Question

[Jeff Folk]

On Jun 23, 2015, at 1:21 PM, Phil Hamer wrote:
> 
> So, installed it, never read the bit that said "READ THIS" and cant log into 
> the GUI.
> Root is working with the password via the console.
>  
> Sorry to have to ask default user name and password.
> Feel such an idiot

I haven't installed 5209R, but just installed a new 5208R yesterday, maybe it 
is the same…

root/blueonyx is the initial password for the console. The first time you go to 
the GUI http://server/login, I think it finishes the GUI setup - set language, 
password, accept license, etc.

I may be wrong,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17885] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 21, 2015, at 10:29 PM, Michael Stauber wrote:
> 
> Hi Jeff,
> 
>> Maybe I should try disconnecting that, but I thought USB was in a different 
>> letter scheme.
> 
> Yes, please. :-)

Yeah, one I started counting sda, sdb, sdc, sdd, then the SATA disk at sde, and 
saw 4 card reader slots, it became obvious. LOL

Migrated the server last night, and after initially forgetting the user mysql 
databases (oops), all seems to be running rather nicely. I really appreciate 
the excellent migration documentation! And also the fabulous help on this list! 
Not to mention the unending hard work from you and the other BlueOnyx team 
members.

Now we will see if the users notice that RoundCube is gone. haha

Regards,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17882] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 21, 2015, at 9:31 PM, Jeff Folk wrote:
> 
> Maybe I should try disconnecting that, but I thought USB was in a different 
> letter scheme.

It was the memory card readers… I feel so stupid… Creating the VolGroups 
immediately without choosing which drives to install on.

Not likely to forget this lesson any time soon.

Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17881] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 21, 2015, at 5:54 PM, Chuck Tetlow wrote:
> 
> But the BlueOnyx installer identifying them as /sde and /sdf is odd.  What 
> else is plugged into that system's drive ports?  These can't be the only two 
> drives, right? 

Hi Chuck,

I have 4 SATA ports. CD/DVD is plugged into port 4, and the two 1.5 TB drives 
are in ports 1 and 2. No other hard drives are present, although there is a 
memory card reader present in each system. Maybe I should try disconnecting 
that, but I thought USB was in a different letter scheme.

Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17880] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 21, 2015, at 5:57 PM, Tom wrote:
> 
> Where did the drives come from and what brand are they? I believe you said 
> the drives were a part of a RAID5 Array? If they were a part of a hardware 
> RAID5 Array, you may have to put them back in that server, or another 
> server with the same RAID controller, and remove the RAID5 configuration. I 
> ran into this issue when upgrading 4 PowerEdge servers and using the old 
> server's drives and splitting them up. Everything was configured with 
> PERC6i controllers in the old servers. The drives failed to configure in 
> the newer servers. I ended up putting them back in their original servers, 
> backing them up, and used the controller firmware to remove the RAID.
> Another way, if you don't need to save the data, is to get the drive 
> manufacturer's utility software or possible 3rd party software, and low 
> level format and reinitialize the drives back to factory settings. I have 
> done this many times, when I run across a stubborn drive that has been pre 
> configured and will not allow re-partitioning or formatting.
> Tom

Hi Tom,

They were software RAID on CentOS 6 (Actually a SME server install). Was a 
combination of RAID1 /boot group and RAID5 / on 3 1.5 TB drives, and lost one 
of the RAID1 members. All drives are WD15EARS drives.

I have no trouble partitioning, formatting or even installing BlueOnyx. The 
problem is that the installer won't configure the drives in RAID1, instead it 
combines the 2 drives together as one 3 TB install.

Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17872] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 20, 2015, at 3:23 PM, Jeff Folk wrote:
> On Jun 20, 2015, at 2:53 PM, Chris Gebhardt - VIRTBIZ Internet wrote:
>> 
>> Yes, it certainly sounds like you've been fairly thorough so far. 
>> However, have you ruled out an issue with perhaps a DVD that just 
>> doesn't have all the right bits?   It has happened before to me, both in 
>> the download and in the burn.   That's why I recommended starting from 
>> scratch on that.
> 
> Will do. Can't hurt.

Re-downloaded and re-burned. Same thing.

> 
>> ALSO... something I have not thought about in quite some time, but long 
>> ago there used to be RAID issues if the disks were not connected in a 
>> specific fashion.  Confirm that your disks are coming up /dev/sda and 
>> /dev/sdb.   That may have been an old BlueQuartz-ism... it has honestly 
>> been a very long time since I have had to consider something that odd.
> 
> You may be on to something there. I think those disks come up as /dev/sdf and 
> /dev/sdg when booting from GRML, and /dev/sda and /dev/sdf in the BlueOnyx 
> installer. I'll turn off the PATA interface and see what happens.


Yes, GRML live CD is identifying the drives as /dev/sdf and /dev/sdg while the 
BlueOnyx installer is identifying the disks as /dev/sde and /dev/sdf.

Put the disks in a Dell XPS 420 (Intel Core2 Quad) with the same result. I 
don't know what is going on, but the installer refuses to do RAID1.

Thanks for the help thus far,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17867] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 20, 2015, at 2:53 PM, Chris Gebhardt - VIRTBIZ Internet wrote:
> 
> Yes, it certainly sounds like you've been fairly thorough so far. 
> However, have you ruled out an issue with perhaps a DVD that just 
> doesn't have all the right bits?   It has happened before to me, both in 
> the download and in the burn.   That's why I recommended starting from 
> scratch on that.

Will do. Can't hurt.

> ALSO... something I have not thought about in quite some time, but long 
> ago there used to be RAID issues if the disks were not connected in a 
> specific fashion.  Confirm that your disks are coming up /dev/sda and 
> /dev/sdb.   That may have been an old BlueQuartz-ism... it has honestly 
> been a very long time since I have had to consider something that odd.

You may be on to something there. I think those disks come up as /dev/sdf and 
/dev/sdg when booting from GRML, and /dev/sda and /dev/sdf in the BlueOnyx 
installer. I'll turn off the PATA interface and see what happens.



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17865] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 20, 2015, at 11:28 AM, Chris Gebhardt - VIRTBIZ Internet wrote:
> 
> Yup, should run 5x08R without an issue.

Yeah. Installed fine and ran great the first time. That's when I noticed the 
large /home partition.  ;=)

> But try the new ISO / CD first.  It may save you some grief.  Here's the 
> link:
> http://updates.blueonyx.it/pub/BlueOnyx/ISO/BlueOnyx-5208R-SL-6.6-20150304.iso

Yes. That's the one I downloaded and burned to DVD on Friday.



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17862] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 20, 2015, at 9:21 AM, Chris Gebhardt - VIRTBIZ Internet wrote:
> 
> Boot into rescue mode using the CD.  Then fdisk to remove the partitions 
> on the drives, write those changes and reboot to the installer again. 
> That should get you running... if not then you have something very 
> strange happening.  Make sure you have the latest download of the 
> BlueOnyx ISO, and check your hardware to ensure no anomalies there.   If 
> there's a fake-raid controller, ensure it's disabled.

No RAID options in BIOS, and no add-in controller.
This is a HP Pavilion a6417c computer (hobby server), AMD Athlon 64 x2, 4 GB RAM

I blew away the partition map earlier with dd, but wrote a new disk label with 
fdisk on both disks and verified that there were no partitions in rescue mode. 
Rebooted to the installer and started the default partitions choice -> Use all 
space option (reviewing partition layout).

Asks me to choose the install targets, finds both WDC WD15EARS disks (1430799 
MiB capacity on both) in data drive list, which I move to the install list. 
Then I can only choose one drive for the boot loader. Continuing, the review 
screen shows a VolGroup of size 2861092 MB, NOT mirrored. I'm so confused.

I have a couple fresh 3 TB disks laying about. Will the 5208R installer accept 
that large a disk? I've had issues with that large a disk in other anaconda 
installers before - they wouldn't boot afterwards.

Thanks,
Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17860] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 20, 2015, at 8:29 AM, Jeff Folk wrote:
> 
> Rats. Using that line still results in a VolGroup combining the drives 
> instead of mirroring them.
> 
> Back to Google.
> 
> Jeff

Double rats. Even blew away the first and last few sectors of the disks using 
dd, and the installer still insists on grouping the volume/disks as one disk. 
What the heck?

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17859] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 20, 2015, at 7:43 AM, Chris Gebhardt - VIRTBIZ Internet wrote:
> 
>>> vmlinuz initrd=initrd.img ks=cdrom:/ks/kickstart.cfg nodmraid

Rats. Using that line still results in a VolGroup combining the drives instead 
of mirroring them.

Back to Google.

Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17858] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 20, 2015, at 7:43 AM, Chris Gebhardt - VIRTBIZ Internet wrote:
> 
> Or from the menu that comes up when you boot the CD, choose this one:
> "- Install with option 'nodmraid'"

Interesting… I don't have that line item option in my installer. I see:

Install Blueonyx 5208R (Default Partitions)
Install Blueonyx 5208R (Small Servers)
Install Blueonyx 5208R in Expert Mode
Troubleshooting  >

Jeff



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17856] Re: Fresh install 5208R, no RAID1

[Jeff Folk]

On Jun 20, 2015, at 2:03 AM, Chris Gebhardt - VIRTBIZ Internet wrote:
> 
> Yes.  Use the "nodmraid" option.  That will get you the results you're 
> looking for.

Thanks, Chris. That option (since I've never had to do it this way), just 
append "nodmraid" to the end of the parameters when I type a 'tab' to view all 
options?

> vmlinuz initrd=initrd.img ks=cdrom:/ks/kickstart.cfg nodmraid

Thanks,
Jeff

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17854] Fresh install 5208R, no RAID1

[Jeff Folk]

This has come up before, as I see in the archives.

I'm trying to install 5208R on a machine with 2 1.5 TB disks, but the installer 
creates the partitions in a striped format:

VolGroup 2861092 MB in size.

These two disks were part of a RAID5 array, but I thought the installer would 
blow away the former setup?

Is there a special boot parameter for the installer to force RAID1?

Thanks!
Jeff 

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:17824] Re: TLS Error - fact finding tour

[Jeff Folk]

On Jun 17, 2015, at 7:24 AM, Richard Sidlin wrote:
> 
> PORTSTATE  SERVICE
> 465/tcp closed smtps
> 
> Nmap done: 1 IP address (1 host up) scanned in 0.40 seconds
> 
> Not sure what that means!

Looks like port 465 is closed. Is SMTPS enabled in your Network Services -> 
Email section?

Regards,
Jeff

smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:14304] Re: Strange dfix messages

[Jeff Folk]

On Jan 24, 2014, at 10:03 AM, Alan Kline wrote:
> Over the last hour, I've received nearly 50 of these strange messages 
> from dfix. Has anyone else seen anything like this? Things seem to be 
> normal on my 5106R box, so I'm not sure what resource it's referring to.
> 
> Alan


Bet you can't log into the admin GUI either? Need to restart CCEd.
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:14240] Re: Making a single disk install into a RAID1 pair

[Jeff Folk]

On Jan 8, 2014, at 8:48 AM, Neil Watson wrote:
> I did try to inquire about this a while ago but didn't get any 
> responses, so please excuse me for trying again
> 
> 
> When I installed BO on my machine (5107), I only had one disk to hand (I 
> thought I had 2, but couldn't find the second one!!) so did an install to 
> the single disk...
> 
> Subsequently I've obtained a second disk of the same type/model and would 
> like 
> to make the disks into a RAID-1 (mirrored) pair.
> 
> What's the best way to do this?
> 
> I'd rather not use CMU to backup and restore as there are a number of 
> bits and bobs installed that will be time-consuming to reinstate 
> as they aren't backed up by CMU...
> 
> Thanks (and Happy New Year!)
> 
> Neil

This kind of stuff really raises the hairs on the back of my neck! LOL
Trying to convert your ONLY copy of the data is, at best, dangerous. Backup, 
then backup. Did I say BACKUP?!

I see a number of old articles in a cursory Google search, but a script called 
Raider looks interesting:
http://raider.sourceforge.net

Info is sparse, but looks to automate the processes of the other articles I 
read. Maybe it would work. Have no idea if it takes care of swap partition or 
grub. I haven't looked at the script. Michael, of course, is the guru here, and 
I will always defer to him. ;-)

Take it for what it's worth…
Jeff


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:14041] Re: SRV Record

[Jeff Folk]

On Nov 21, 2013, at 12:00 PM, Darryl Mitchell wrote:
> Hello, we have a customer who would like to add an SRV record in 
> BlueOnyx. How can this type of record be added?


Oldie, but a goodie… 
(http://mail.blueonyx.it/pipermail/blueonyx/2009-November/002939.html)

use the .include file for the domain in /var/named/chroot/var/named/

Root has to modify this, as I recall.

Regards,
Jeff
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:13792] Re: BlueOnyx Server setup: System-Settings-page

[Jeff Folk]

On Oct 3, 2013, at 11:02 AM,  wrote:
> 
> (Q: Or must Host be something other than www ? (ie: Server1)

Yes. I always use some special hostname to the server management side.
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:13716] Re: Exclude a DB from raqbackup

[Jeff Folk]

On Sep 21, 2013, at 6:58 PM, Michael Aronoff wrote:
> I use the AV-Spam package from Solarspeed and I use Raqbackup as well.
>  
> The problem I am having is that Raqbackup dumps all the databases and the 
> AV-Spam database can get quote large. There is really no need to backup and 
> restore that database so I am wondering if it is possible to modify Raqbackup 
> to skip just that database during backup?

Hey Michael,

You might be able to fit the trick mentioned in this link into the function 
dumpmysql ():

http://kaslnetwork.com/articles/how-to-exclude-specific-databases-from-an-all-databases-mysql-dump/___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:13597] Re: Yum update file conflict

[Jeff Folk]

On Aug 26, 2013, at 10:19 AM, Matt James wrote:
> Hello all,
> 
> I'm trying to run yum update on one of my servers and hit this error:
> 
>  file /usr/lib/libtdsodbc.so.0.0.0 from install of freetds-0.91-2.el5.i386 
> conflicts with file from package freetds-unixodbc-0.83.dev.20080213-1.i386
> 
> I'm not sure how to resolve it.  Any thoughts?
> 
> For reference - here is the rest of the output:
> 
> ==
> Package Arch  
> Version   
>   Repository  
>   Size
> ==
> Installing:
> kernel  i686  
> 2.6.18-348.16.1.el5   
>   updates 
>   20 M
> rrdtool-perli386  
> 1.2.27-4.el5  
>   epel
>   34 k
> replacing  perl-rrdtool.i386 1.2.23-SOL2
> 
> Updating:
> base-email-capstone noarch
> 1.5.1-0BX13.centos5   
>   BlueOnyx
>   17 k
> base-email-glue noarch
> 1.5.1-0BX13.centos5   
>   BlueOnyx
>   45 k
> base-email-locale-da_DK noarch
> 1.5.1-0BX13.centos5   
>   BlueOnyx
>   20 k
> base-email-locale-de_DE noarch
> 1.5.1-0BX13.centos5   
>   BlueOnyx
>   21 k
> base-email-locale-ennoarch
> 1.5.1-0BX13.centos5   
>   BlueOnyx
>   20 k
> base-email-locale-en_US noarch
> 1.5.1-0BX13.centos5   
>   BlueOnyx
>   20 k
> base-email-locale-janoarch
> 1.5.1-0BX13.centos5   
>   BlueOnyx
>   21 k
> base-email-locale-ja_JP noarch
> 1.5.1-0BX13.centos5   
>   BlueOnyx
>   21 k
> base-email-ui   noarch
> 1.5.1-0BX13.centos5   
>   BlueOnyx
>   22 k
> cczei386  
> 0.2.1-6.el5   
>   epel
>   79 k
> freetds i386  
> 0.91-2.el5
>   epel
>  992 k
> freetds-devel   i386  
> 0.91-2.el5
>   epel
>   39 k
> freetds-doc i386  
> 

[BlueOnyx:12950] Re: Swatch error

[Jeff Folk]

On May 2, 2013, at 9:19 AM, Michael Stauber wrote:
> Hi David,
> 
>> Anyone else see these swatch errors after the recent yum update:
>> 
>> Use of uninitialized value $personal[1] in string eq at 
>> /usr/sausalito/swatch/bin/am_base.pl line 52,  line 25.
> 
> I just checked and I don't recognize "am_base.pl" as part of a stock
> BlueOnyx. So I wonder what software supplied it.
> 
> Please run this command on that server and report back the result:
> 
> rpm -q --whatprovides /usr/sausalito/swatch/bin/am_base.pl


On mine:

[admin@box1 ~]$ rpm -q --whatprovides /usr/sausalito/swatch/bin/am_base.pl
Compass-base-am-1.0-1.i386

I have Roundcube installed

Jeff
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:12857] Re: Blueonyx Backdoor:Perl/Shellbot

[Jeff Folk]

On Apr 15, 2013, at 9:21 PM, Senthil Ramasamy wrote:
> Virus Scanner pick them up as Backdoor:Perl/Shellbot and have removed the 
> above files and suspected backdoor entry was through wordpress. So, to avoid 
> future attacks we have implement .htaccess file to limit specific IP address 
> to access the wp-login.php as mentioned in 
> http://forums.whirlpool.net.au/forum-replies.cfm?t=2085205
>  
> Today again we are seeing same files re-appear. We have removed those files 
> again. But don’t know how they are getting in?
>  
> Has anyone seen this before and have a solution? Or point us to right 
> direction?

Going to have to get that Wordpress install fully patched. Had this happen 
(similar, a bank phishing site installed through old unpatched plugin script) 
to one of my customers. Unfortunately, depending on the security vulnerability, 
the .htaccess file probably won't have any effect.

 Good luck!

Jeff___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

[BlueOnyx:12784] Re: Rookie mistake :)

[Jeff Folk]

On Apr 8, 2013, at 2:12 PM, Dave Park wrote:
> 
> Hi all,
> 
> I searched and didn't find an answer to this. I did this in my last install 
> too, and never found a solution so just re-installed the whole server...
> 
> I did a new 5108R SL install. I named the server www.mysite.com then realized 
> I couldn't then create an account for that domain, so I renamed it to 
> www.box.com and created the site www.mysite.com with an administrator, etc. 
> Everything looks correct in the admin interface and thru ssh.
> 
> Alas, access to www.mysite.com continues to redirect to 
> mysite.com:444/login.php and won't show the site.
> 
> I've checked /etc/sysconfig/network, /etc/hosts and restarted network, no 
> dice.
> 
> I've been googling for a while, no joy. Any suggestions?


I just had a similar problem, although mine was an IP issue and turned out to 
be local dns cache. I'd say, empty any local caches and bypass any local 
proxies in the web browser and give that a try.

Jeff
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx