https://braindump.mrzesty.net/ 2026-04-17T06:59:14+00:00 https://braindump.mrzesty.net/ https://braindump.mrzesty.net/lib/tpl/dokuwiki/images/favicon.ico text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/adatas599firmwareupdate?rev=1581652503&do=diff Adata s599 Firmware Update I had an almost impossible time updating the firmware on 2 disks from 3.1 to the latest 3.4.6. Everything I read said that the firmware updates would solve the problems I was having. <p>The largest problem is that the firmware update tool is only available for Windows.</p><p>What worked for me:</p> <list><ul><li>Dell Optiplex 960 with drive connected to eSATA port</li><li>BIOS set to Autodetect Raid/AHCI mode for SATA</li><li>Windows 7 (32-bit) [right-click ssdupdate… text/html 2020-10-01T21:15:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/ansible-metadata?rev=1601586919&do=diff Get VM Metadata with Ansible I needed to get VM Metadata and store it in a variable I could use later as a in an Ansible playbook. pre_tasks: - name: Get ResourceGroup name from metadata service uri: url: http://169.254.169.254/metadata/instance/compute/resourceGroupName?api-version=2017-08-01&format=text headers: metadata: true return_content: yes register: resourcegroup - debug: var: resourcegroup.content text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/apache2mod_jk2tomcat?rev=1581652503&do=diff Apache2 mod_jk2tomcat <toc></toc> mkdir -p /usr/local/java ln -s j2sdk1.4.1_01 j2se export JAVA_HOME=/usr/local/java/j2se export PATH=$PATH:$JAVA_HOME/bin export CLASSPATH=$JAVA_HOME/lib Download jakarta-tomcat unzip into /usr/local/java, and create symlink tomcat to jakarta-tomcat-4.1.xx text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/augeas?rev=1581652503&do=diff Augeas / augtool Uncomment a Line augtool --backup <<END rename /files/etc/ssh/sshd_config/#comment[. =~ regexp('PermitRootLogin.*')] PermitRootLogin set /files/etc/ssh/sshd_config/PermitRootLogin without-password save END Load a File with A Specific Lens text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/awk95thpercentile?rev=1581652503&do=diff Awk 95th Percentile 95th percentile tends to be a more accurate representation when capacity planning because the top 5% of largest numbers are discarded. Unlike calculating a straight average/mean which would inlude these numbers and skew the results. text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/bacula?rev=1581652503&do=diff Bacula Generate certificates cd /etc/bacula The first time, generate a new CA certificate for signing sed -i "s/365'/3650'/" /usr/lib/ssl/misc/CA.pl /usr/lib/ssl/misc/CA.pl -newca Generate a CSR signing request, and then sign it. The challenge password can be empty, but be sure the Common Name matches the text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/blacklistcountrieswithshorewallandipset?rev=1581652503&do=diff Blacklist Countries with Shorewall and IPset I run SSH on standard port 22 with fail2ban to prevent brute-force logins. Despite this I am still annoyed by the frequency of fail2ban alerts for countries like China. <toc><ul><li><link topicref=“2” text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/boxbackupinstallation?rev=1581652503&do=diff Boxbackup Installation <toc><ul><li><link topicref=“2”>Build RPMS for SuSE</link></li><li><link topicref=“3”>Build RPMS for Mandrake</link></li><li><link topicref=“4”>Configure Box Backup Server</link></li><li><link topicref=“5”>Configure Box Backup Client</link></li></ul></toc> text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/calibreonlinuxfordrme-books?rev=1581652503&do=diff Calibre for DRM I bought a Kobo Touch, but I use linux as my desktop OS. For that reason I am trying to streamline the process of getting Ebooks from the local library but being able to transfer them to by kobo. I hate being forced to use Windows but since the ebooks have DRM encryption, it can't be avoided. <p>The purpose of this procedure is not to enable piracy, it is to remove proprietary bits from data which I have legitimate ownership to.</p><p>1. Install the Kobo Desktop software in Wi… text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/check_raid_mdstat.pl?rev=1581652503&do=diff check_raid_mdstat.pl <toc></toc> Description: Nagios plugin (current 1.x) that will return the status of a software raid device. <p><tt>check_raid_mdstat.pl md3</tt></p><p><em>Jan 5, 2005</em> Corrected bug where the status returned would be the status of the last device in the /proc/mdstat file instead of the device asked for.</p> text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/citrixxenserver?rev=1581652503&do=diff Citrix XenServer <toc><ul><li><link topicref=“2”>Missing login prompt</link></li><li><link topicref=“3”>Change a VM from HVM fully-emulated to PV</link></li><li><link topicref=“4”>Find the VNC port</link></li><li><link topicref=“5”>Connect to the text console</link></li><li><link topicref= text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/connectubuntutowindowsmobile3g?rev=1581652503&do=diff Connect ubuntu to Windows Mobile 3G I connected a netbook running Ubuntu Jaunty 9.04 (UNR) to a Windows Mobile 6.1 (WM6) phone using bluetooth to get mobile broadband access. The Windows Mobile phone has &quot;Internet Sharing&quot; which allows the phone to act as a wireless router and dhcp server giving bluetooth devices access to the phone's data plan. text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/convertpolarisdocumentstolibreoffice?rev=1581652503&do=diff Convert Polaris Documents to LibreOffice Polaris Office on the Asus Transformer TF-101 saves files only as &quot;bad&quot; .doc files compatible with newer versions of MS Office only. Fortunately the files can be opened with Abiword, so you can use it to convert the files for reading with LibreOffice (OpenOffice). text/html 2020-09-26T16:24:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/cron.daily?rev=1601137478&do=diff Anacron A system that goes to sleep (suspend) cannot run regularly scheduled cronjobs. Fortunately anacron is already installed, and runs the scripts in /etc/cron.daily, /etc/cron.weekly, and /etc/cron.monthly in the hour after the system wakes up. text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/disableapcupsbeeper?rev=1581652503&do=diff Disable APC UPS Beeper I was about to go to bed, and my UPS started beeping once per second to tell me to get a new battery. I began searching for how to disable the beeping so I could get some sleep - starting with searching the UPS for an STFU button. <p>I already had NUT (Network UPS Tools) installed, so the command was actually very easy once I knew what I was looking for.</p><p><strong>/etc/nut/ups.conf</strong>:</p> text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/disableiptablesreportinlogwatch?rev=1581652503&do=diff Disable IPtables Report in Logwatch In my smaller environments I have logwatch enabled to send me a daily status email from the server. I find that the list of blocks by iptables on an Internet-connect host is very noisy. --------------------- iptables firewall Begin ------------------------ Listed by source hosts: Dropped 4397 packets on interface eth0 From 1.93.55.131 - 1 packet to tcp(3306) From 1.93.55.159 - 1 packet to tcp(1322) From 1.229.35.65 - 1 packet to udp(23509) … text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/dspamv3.0forqmail?rev=1581652503&do=diff dspam v3.0 for qmail <toc></toc> This is my unofficial gadoyanspam v0.3 package, which is based on the original from <uri strref=“<http://oss.mdamt.net/gadoyanspam/>,”/> with modifications to support DSPAM v3 by Chris Atlee &lt;chris -at- atlee -d0t- ca&gt;, and a few minor tweaks by myself. text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/exim_smtp_authentication_against_ldap?rev=1581652503&do=diff Exim SMTP Authentication against LDAP I wanted to block repeated failed attempts against SMTP auth using fail2ban, and the easiest way for to achieve that was to have fail2ban block based on the exim4 mainlog. 2017-09-09 13:19:03 login authenticator failed for (User) [80.82.77.175]: 535 Incorrect authentication data (set_id=admin@domain.ca) 2017-09-09 13:24:19 login authenticator failed for (User) [80.82.77.175]: 535 Incorrect authentication data (set_id=support@domain.ca) 2017-09-09 13:29:34… text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/fail2ban?rev=1581652503&do=diff Fail2ban I use fail2ban on services which are public facing to monitor logs and block remote IP's which are attempting to brute force attack for usernames and passwords. <toc><ul><li><link topicref=“2”>Debian Installation</link></li><li><link topicref= text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/fuzzyocrforspamassassinondebian?rev=1581652503&do=diff FuzzyOCR for Spamassassin on Debian <toc><ul><li><link topicref=“2”>Installation</link></li><li><link topicref=“3”>Create a FuzzyOCR home</link></li><li><link topicref=“4”>Maintenance</link></li></ul></toc> Image spam has seen an increase in use lately, and getting SpamAssassin to recognize keywords from attached images is best done with OCR (Optical Character Recognition). text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/glusterfs?rev=1581652503&do=diff GlusterFS I use glusterfs to mirror a directory between cluster members. cd /usr/src wget -c ftp://gluster.org/pub/gluster/glusterfs/3.0/LATEST/glusterfs-3.*.tar.gz aptitude install build-essential flex bison fuse-utils tar xvzf glusterfs-3.*.tar.gz cd glusterfs-3.* ./configure --sysconfdir=/etc --localstatedir=/var &amp;&amp; make -j2 &amp;&amp; make install cd /etc/glusters glusterfs-volgen -n data -r 1 -a 10.1.1.* server1:/data server2:/data ln -s server1-data-export.vol glusterfsd.vo… text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/ipv6ondebian?rev=1581652503&do=diff IPv6 on Debian If you have a static public IP, you already have an IPv6 address as part of the reserved network starting with 2002: (If you do not have a static publicly routable IPv4 IP on your Debian/Ubuntu box, you should instead look at a tunnel broker like <uri strref= text/html 2025-11-14T20:48:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/k3s?rev=1763153299&do=diff k3s $ curl -sfL https://get.k3s.io | sudo sh -s - server --cluster-init --write-kubeconfig-mode "0644" [INFO] Finding release for channel stable [INFO] Using v1.33.5+k3s1 as release [INFO] Downloading hash https://github.com/k3s-io/k3s/releases/download/v1.33.5+k3s1/sha256sum-amd64.txt [INFO] Downloading binary https://github.com/k3s-io/k3s/releases/download/v1.33.5+k3s1/k3s [INFO] Verifying binary download [INFO] Installing k3s to /usr/local/bin/k3s [INFO] Skipping installation of SELi… text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/letsencrypt?rev=1581652503&do=diff Let's Encrypt <https://letsencrypt.org/> offers free signed 90 day SSL certificates which are trusted by the browser, just like a pay-for certificate signed by other CA's - with the option to create multi-domain certs if you control all the domains. (This site uses a Let's Encrypt certificate). text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/linksysreviveconnectionscript?rev=1581652503&do=diff Linksys Revive Connection Script <em>Jan 5, 2005</em> Script to revive a dead PPPoE link when the Linksys gives up trying (authenitcation failure or timeout). # cat /root/bin/deadlinksys.sh #!/bin/bash ping -c 1 -n 64.56.237.48 &gt; /dev/null [ $? -gt 0 ] &amp;&amp; sleep 5 || exit ping -c 1 -n 64.56.239.2 &gt; /dev/null [ $? -gt 0 ] &amp;&amp; sleep 10 || exit ping -c 1 -n 64.56.239.1 &gt; /dev/null [ $? -gt 0 ] &amp;&amp; sleep 15 || exit curl -s --user admin:admin 'http://192.168.1… text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/loadthechannelmappingofcableclearqam?rev=1581652503&do=diff Load the Channel Mapping of Cable Clearqam <toc><ul><li><link topicref=“2”>Steps</link></li><li><link topicref=“3”>More detailed reading</link></li></ul></toc> Cogeco Cable also uses the standard &quot;scte65&quot; to send the channel mapping for clearQAM channels to their digital adapter boxes for analog TV's. text/html 2025-10-31T16:40:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/losetup?rev=1761928808&do=diff losetup for LVM When using a loop file for backing LVM, it is necessary to start losetup before LVM can start. This is easily done using systemd and putting it into startup. This example service unit uses Ubuntu 24.04 Create the file /etc/systemd/system/loops-setup.service text/html 2020-02-26T00:40:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/megacmd?rev=1582677634&do=diff mega.nz MEGA provides up to 50 GB of free, fully-encrypted cloud storage They also provide a number of CLI tools that allow you to connect and manage your cloud storage from the command-line. Install from <https://mega.nz/cmd> rclone would be my preference, just because of familiarity and the abstraction that it provides - but it does not allow the use of the 2FA/MFA configured on my MEGA account text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/migratevpopmailaccountstoldap?rev=1581652503&do=diff Migrate vpopmail Accounts to LDAP <toc></toc> 1. Dump the accounts from MySQL mysqldump -u root -p vpopmail vpopmail &gt; vpopmail.mydump 2. Convert mysql dump to LDIF with reformatting awk -F\' 'BEGIN {OFS=&quot;\n&quot;;} NF==15 {print &quot;dn: cn=&quot;$8&quot;,ou=&quot;$4&quot;,ou=qmail,o=company&quot;,&quot;cn: &quot;$8,&quot;objectClass: top&quot;,&quot;objectClass: person&quot;,&quot;objectClass: qmailUser&quot;,&quot;mail: &quot;$2&quot;@&quot;$4,&quot;sn: &quot;$8,&quot;uid: &qu… text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/monitoringzfszpoolwithopsviewnagios?rev=1581652503&do=diff Monitoring ZFS zpool With Opsview or Nagios The paths below are in reference to using Opsview to monitor, but the plugin is perfectly compatible with nagios - just adjust the paths as needed. 1. Create the script <strong>/usr/local/nagios/libexec/check_zfs.sh</strong> text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/mrtgwithlocalsnmp?rev=1581652503&do=diff MRTG With Local SNMP If your switch or router won't report SNMP data so you can graph bandwidth usage with MRTG, then you'll have to install an SNMPd to track the bandwidth on your network card. 1. Grab Net-SNMP from <uri strref="http://www.netsnmp.org"/> text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/mysqlnotes?rev=1581652503&do=diff MySQL Notes <toc><ul><li><link topicref=“2”>Upgrade MySQL script</link></li><li><link topicref=“3”>Extract a single database from a dump file of all databases</link></li></ul></toc> <tt>GRANT SELECT,INSERT,UPDATE,DELETE,ALTER,INDEX,CREATE,DROP ON database.* TO user@'10.1.1.%' IDENTIFIED by 'password';</tt> text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/nagiosdeliverytest?rev=1581652503&do=diff Nagios Delivery Test <toc></toc> I put together the following python script in order to verify that mail is being delivered through a server and can be retrieved by IMAP-SSL on the next Nagios test cycle. #!/usr/bin/python # $Id: check_delivery_imap.py,v 1.3 2015/05/16 19:48:11 root Exp root $ import sys import re import imaplib import smtplib from email.Utils import formatdate date = formatdate(localtime=True) host = sys.argv[1] recipient = sys.argv[2] password = sys.argv[3] warning = 0 … text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/openhab?rev=1581652503&do=diff OpenHAB OpenHAB is a server for Home Automation tasks. It is written in Java and makes use of some OOB properties and syntax. Rules are configured in one or more text files, “when change happens, then invoke the configuration block” The goal here was in my East facing apartment, if the Sun is north of 110 degrees or if the TV is on, then close the blinds using the RFXCOM binding instead of the radio remote and the Omnia Go roller shade motor. text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/openmanageondellwithdebianamd64?rev=1581652503&do=diff OpenManage on Dell With Debian amd64 OpenManage has already been packaged into a deb file: <uri strref=“<http://linux.dell.com/debian_9g.shtml>”/> <p>Add</p> deb ftp://ftp.sara.nl/pub/sara-omsa dell sara to your /etc/apt/sources.list file You will need 32-bit versions of the pam libraries. To keep things neat, I created a simple package of the required libs text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/opensslcertificates?rev=1581652503&do=diff OpenSSL Certificates <toc><ul><li><link topicref=“2”>X509v3 Subject Alternative Name</link></li></ul></toc> Instructions to generate a self-signed certificate using OpenSSL for use with Apache mod_ssl, stunnel, etc. cd /etc/apache2; mkdir ssl.key ssl.csr ssl.crt text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/openvpnbridgetoanothercountry?rev=1581652503&do=diff OpenVPN Bridge to Another Country Certain content is only available to other country's IP addresses. Set up a Virtual Access Point on your DD-WRT router which is bridged to an OpenVPN server in the other country. The focus here will be configuring the client bridge on your router. I am assuming you already have the server portion configured and working with IP masquerading (NAT) configured. <p>1. Use easy-rsa scripts to generate a new client certificate on the OpenVPN server.</p><p>Edit the … text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/openvpnondebian?rev=1581652503&do=diff OpenVPN on Debian <strong>/etc/openvpn/server.conf</strong>: port 1194 proto udp dev tap0 ca ca.crt cert server1.crt key server1.key dh dh1024.pem server-bridge client-to-client keepalive 10 120 comp-lzo persist-key persist-tun verb 3 <strong>/etc/openvpn/client.conf</strong>: text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/opsview?rev=1581652503&do=diff Opsview Opsview is a nice wrapper for Nagios, but the opsview_web_server.pl perl interface sometimes forks out of control. Limit the number of processes that can start. <pre> if [ &quot;$USE_LIGHTTPD&quot; = &quot;0&quot; ] &amp;&amp; [ &quot;$USE_PREFORK&quot; = &quot;0&quot; ]; then text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/oraclenotes?rev=1581652503&do=diff Oracle Notes <toc></toc> <list><ul><li>To view the current connections to Oracle:</li></ul></list> sqlplus&gt; select machine, osuser, count(*) &quot;Connections&quot; from v$session group by machine, osuser; text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/postgresqlnotes?rev=1581652503&do=diff PostgreSQL Notes <toc><ul><li><link topicref=“2”>Compile from source</link></li><li><link topicref=“3”>Client-only installation:</link></li><li><link topicref=“4”>Create user and database</link></li><li><link topicref=“5”>Create a certificate and install</link></li><li><link topicref= text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/puppetdockerdirectlvm?rev=1581652503&do=diff Using Puppet to Install Docker with Direct-LVM Using 2 puppetforge modules it is possible to configure LVM and docker engine. <https://forge.puppet.com/puppetlabs/lvm> <https://forge.puppet.com/puppetlabs/docker> I was unable to find any documentation on configuring direct-lvm though, but in the end it's not as complicated as I thought: text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/qmail-ldap?rev=1581652503&do=diff qmail-ldap Installation You will need to get the following software: * qmail <http://cr.yp.to/software/qmail-1.03.tar.gz> * qmail-ldap patch <http://www.nrg4u.com/qmail> From your distro install slapd (openldap), phpldapadmin, daemontools-run, and ucspi-tcp-ipv6. Optional: * <uri strref=“<http://cr.yp.to/software/ezmlm-0.53.tar.gz>”/> [ezmlm notes|#ezmlm] - mailing list manager ( Requires the dash-trick patch if you plan to set up LDAP users to have mailing lists, rather than just rea… text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/qmail-ldapwithbincimap?rev=1581652503&do=diff qmail-ldap With Binc Imap Courier-imap 4.x no longer supports external authentication. With courier-imap 3.x we used auth_imap from qmail-ldap. We can use binc imap instead and it will work with auth_pop. aptitude install bincimap rsync -axvPS --delete /usr/share/doc/bincimap/etc/bincimap.daemontools/ /var/qmail/supervise/bincimap/ rsync -axvPS --delete /usr/share/doc/bincimap/etc/bincimaps.daemontools/ /var/qmail/supervise/bincimaps/ find /var/qmail/supervise/ -name run | xargs chmod 755… text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/qmail-ldapwithdovecotondebian?rev=1581652503&do=diff qmail-ldap With Dovecot 2 on Ubuntu Reference: <http://wiki2.dovecot.org/AuthDatabase/LDAP> aptitude install dovecot-imapd dovecot-pop3d dovecot-ldap /etc/dovecot/conf.d/10-auth.conf: ... !include auth-ldap.conf.ext .. /etc/dovecot/conf.d/10-mail.conf: ... mail_uid = 200 mail_gid = 200 ... first_valid_uid = 200 ... text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/qmail-ldapwithsimscan?rev=1581652503&do=diff qmail-ldap With Simscan Simscan is an alternative to the qmail-scanner.pl which is written in C and will reject viruses and spam above a certain score. <uri strref=“<http://www.inter7.com/index.php?page=simscan>”/> <p>The use of perl in qmail-scanner has always bothered me for performance reasons, so I am happy to see something written in C which will do the same and more than the qmail-scanner.</p><p>You need to install spamassassin and clamav <link idref= text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/qmail-scanner?rev=1581652503&do=diff qmail-scanner <toc><ul><li><link topicref=“2”>Using SpamAssassin and ClamAV Anti-Virus</link></li><li><link topicref=“3”>GreyListing</link></li><li><link topicref=“4”>Using SpamAssassin without qmail-scanner</link></li></ul></toc> Using SpamAssassin and ClamAV Anti-Virus text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/raspberrypi4docker?rev=1581652503&do=diff Docker install on the Raspberry Pi 4 The default docker.io package in Debian 10 (buster) is broken. I used puppet and the puppetlabs-docker module to install the testing version of docker-ce. I then configured the Plex Media Server as a docker container also using puppet. text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/scalixinstallondebian?rev=1581652503&do=diff Scalix Installon Debian I prefer Exim for spam filtering. We will configure Scalix to listen on port 587 and require SMTP Authentication. Incoming mail will flow to Exim on port 25 and be sent to port 26 (Scalix) for local delivery. <toc><ul><li><link topicref= text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/screenandothersettingsforanewhost?rev=1581652503&do=diff Screen and Other Settings For a New Host <toc><ul><li><link topicref=“2”>GNU/screen</link><ul><li><link topicref=“3”>auto-title for screen</link></li></ul></li><li><link topicref=“4”>SSH keepalive</link></li><li><link topicref=“5”>TCP keepalive</link></li></ul></toc> text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/spamassassinonubuntu?rev=1581652503&do=diff SpamAssassin Installation aptitude update aptitude install spamc spamassassin clamav-daemon clamav-freshclam pyzor razor libmail-dkim-perl Install DCC-client from source since the Debian package is old aptitude install build-essential /usr/sbin/useradd -c &quot;DCC&quot; -s /bin/bash -d /var/dcc -m -k /dev/null -K UID_MIN=50 -K UID_MAX=100 dcc cd /usr/src wget -c http://www.rhyolite.com/dcc/source/dcc.tar.Z tar xzf dcc.tar.Z cd dcc* ./configure --with-uid=dcc --disable-server --disable… text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/splitafilewithawk?rev=1581652503&do=diff Split a File Using Awk I needed to split a large file (in this case a mysql dump of all databases combined) into individual files each consisting of the SQL statements related to that DB. [Remember COBOL batch processing?] Each section of the mysql database starts with: text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/ssldisableweakciphers?rev=1581652503&do=diff SSL Disable Weak Ciphers Apache 2 SSLProtocol all -SSLv2 -SSLv3 SSLCipherSuite HIGH:!ADH IIS [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELCiphersDES 56/56] &amp;#8220;Enabled&amp;#8221;=dword:00000000 [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELCiphersNULL] &amp;#8220;Enabled&amp;#8221;=dword:00000000 [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELCiphersRC2 40/128] &amp;#8220;Enabled&amp;#8221;=dword… text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/start?rev=1581652503&do=diff Mr Zesty's BrainDump index ---------- text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/syslogngek?rev=1581652503&do=diff Syslog-ng / Elasticsearch / Kibana Elasticsearch is used index and make all logs searchable. Kibana provides a web interface to the search and configure visualization. Syslog-ng can send logs directly to elasticsearch, so the setup is like ELK without using logstash. text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/systemd-resume?rev=1581652503&do=diff systemd Suspend Resume Hook On my laptop, the connected external monitor does not come out of sleep unless I run xset dpms force off. Since this annoys me, I was looking to run this command automatically on every resume. I found that I was able to create the file text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/ubuntu_upgrade_pg?rev=1581652503&do=diff Upgrade of PostgreSQL and Ubuntu upgrade 1. Create a snapshot with XenServer Stop the database to make sure snapshot is consistent. # service postgresql stop * Stopping PostgreSQL 9.3 database server ...done. postgresql xenserver# xe vm-snapshot new-name-label="Pre PG 9.4 install" vm=exampleVMname 26441bbe-9e47-5590-a93f-5b3cd2ddf9b7 text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/upgradespamassassinto3.1.0?rev=1581652503&do=diff Upgrade Spamassassin to 3.1.0 <toc></toc> perl -MCPAN -e 'install Mail::SpamAssassin' perl -MCPAN -e 'install Mail::SPF::Query' perl -MCPAN -e 'install Mail::DomainKeys::Message' perl -MCPAN -e 'install Crypt::OpenSSL::Bignum' cd /usr/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/Plugin/ wget -c 'http://issues.apache.org/SpamAssassin/attachment.cgi?id=3210&amp;action=view' patch -p4 &lt; attachment.cgi\?id\=3210\&amp;action\=view text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/x2goserver?rev=1581652503&do=diff x2go Server with VDI Mate Note: Using Ubuntu 16.04 LTS Xenial add-apt-repository ppa:x2go/stable apt update apt install x2goserver x2goserver-xsession cups-x2go x2goserver-printing apt install mate-desktop mate-icon-theme mate-session-manager mate-applets text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/xenvirtualmachines?rev=1581652503&do=diff Xen Virtual Machines Xen Server dom0 You should create a partition a bit larger than the amount of ram allocated to domU guests. If you shutdown the dom0, the domU guests are saved state to '/var/lib/xen/save' lvcreate --size 16.1g --name xen vg01 mkdir /var/lib/xen text/html 2020-04-08T15:56:39+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/zfs-encryption?rev=1586361399&do=diff ZFS on Linux Encryption ZoL supports native encryption since version 0.8.0 I'm sure it's coming from Ubuntu in a future release, but I wanted to encrypt /home now with Focal Fossa 20.04. There is the option to install on a full ZFS root, but it does not give the option to use encryption (yet). text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/zfs?rev=1581652503&do=diff Using ZFS on Linux (Ubuntu 14.04 LTS) Zpool Import Because I am using a partition (sdX3) of the disks, and ZFS assumes you are using the whole disk (when it searches /dev by default), it was necessary to symlink the partition names to a new directory and zpool import referencing devices in that new directory. text/html 2020-02-14T03:55:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/zfs_snapshot_send_receive?rev=1581652503&do=diff ZFS Snapshot Send/Receive Local ZFS snapshots are uploaded to a remote server (backup) over SSH, using the utility znapzend to manage the snapshot schedule. <http://www.znapzend.org/> 1. znapzend is installed as a deb package (systemd service) using: <https://github.com/Gregy/znapzend-debian> 2. Create a shared key for SSH to allow password-less login from source to dest server as the receiver backupuser text/html 2026-03-13T14:28:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://braindump.mrzesty.net/doku.php/zmninja?rev=1773412118&do=diff zmNinja for Raspberry PI display $ sudo apt install xserver-xorg lightdm lxde-core lxterminal unclutter wget curl jq unattended-upgrades $ wget -c $(curl -s https://api.github.com/repos/ZoneMinder/zmNinja/releases/latest | jq -r '.assets[].browser_download_url' | grep linux-arm64.AppImage) -O /home/tvpi/zmninja-latest-linux-arm64.AppImage $ chmod u+x /home/tvpi/zmninja-latest-linux-arm64.AppImage $ mkdir ~/.config/autostart/ $ vi .config/autostart/zmninja.desktop