- luv-main - luv.asn.au

mailing list servers bouncing email
by Russell Coker 06 May '14

06 May '14

It's a common configuration to have non-member posts to a mailing list be rejected. It seems that most list servers run from /etc/aliases or similar which means that mail has already been accepted by the time the list server sees it. Once mail has been accepted (SMTP code 250) it can be sent on, discarded, or a bounce message can be sent. In the case of spam (which often accounts for most non-member mail to a list) we don't want to generate a bounce message as that hurts innocent third parties. But in the case of members who send mail from their wrong address we want to inform them. Ideally a non-member post to a mailing list would get a SMTP level rejection (SMTP code 55x). When a real person sent the mail they get a bounce message and can re-send if appropriate, if a spam bot sent the mail then it gets discarded. http://postfwd.org/ What's the best way of getting it to work that way? I'm idly considering writing a script to take the list of members from Mailman and automatically generating a Postfwd configuration from it, the above URL describes Postfwd. One benefit of using Postfwd in that manner could be that anyone who subscribes to one list could be allowed to send mail to all lists on the same server, it doesn't have to be that way (Postfwd is configurable and generating more rules isn't difficult) but it seems like a good idea. The Mailman controls seem to only control posting access based on the membership of the list in question. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 2

Ubuntu Trusty upgrade
by Toby Corkindale 02 May '14

02 May '14

Hi all, Just thought I'd share some good news. Upgrading from Saucy to Trusty on a desktop was quite painless. By far and away the easiest one I've had with Ubuntu -- and I do tend to have a moderately customised system with non-free drivers and a whole lot of extra PPAs added to the apt sources. -Toby -- Turning and turning in the widening gyre The falcon cannot hear the falconer Things fall apart; the center cannot hold Mere anarchy is loosed upon the world

1 0

PGP and IPSec
by Peter Ross 02 May '14

02 May '14

Hi, is there an established way of using PGP to assist an IPSec setup? I only found this here http://tools.ietf.org/html/draft-ietf-ipsec-openpgp-01 But it does not seem to be fleshed out. I could imagine to use PGP to create a single connection which is then used to communicate a shared key which is then used for IPSec setup. I somehow think it should be there but have not seen it. Regards Peter

2 1

Disabling Debian/Ubuntu apt archives
by Toby Corkindale 02 May '14

02 May '14

Hi, Linux distros using the apt package management system tend to cache downloaded packages in /var/cache/apt/archives/ If you have many very similar machines set up, then you'll almost certainly have a HTTP proxy cache setup for them to retrieve packages through, to reduce huge duplication of downloads. This essentially obsoletes the /var/cache/apt/archives, though. And when you're running dozens of virtual machines, it'd be nice to avoid storing all these duplicate files. What's the right way to disable it? I see I can adjust the max size and age via the APT::Archives::Max{Age,Size} parameters, but what about just turning it off altogether? Cheers, Toby

4 8

Re: Disabling Debian/Ubuntu apt archives
by Peter Ross 02 May '14

02 May '14

Tim Connors wrote: > I just share /var/cache/apt/archives by nfs between all my systems (and > make sure you don't update 2 hosts at once unless they're different > arches). I am using ZFS for a package repository which is mounted inside the jail or host system I want to upgrade (it's part of a script which can do that on the fly for all jails+host when needed) Transfer between hosts happens via zfs send/receive. Having one mountpoint at the time solves the "two at the time" problem - and scripting others (e.g. the right repository for the right system). I can imagine similar usage when using Linux and btrfs. Regards Peter

1 0

Disabling/bypassing UUID on Ubuntu Trusty
by Carl Turney 30 Apr '14

30 Apr '14

Hi All, Want to disable UUID, and address hardware directly by device and partition specs. Did it on my current system (~ 4 years ago), happy. But see differences in files/contents in Trusty, and want your expert advice, before I start changing things. My knowledge is low. (Barely understand what I'm writing.) Can follow clear simple step-by-step instructions, or grateful for links to same. New system is Gigabyte MB, IntelCore i5 CPU, SATA HDD, dual booting on 64-bit Windoze plus just-released Trusty 64-bit Desktop. Here's what I =would= do... (1) Edit /etc/default/grub to remove the # at the start of line... #GRUB_DISABLE_LINUX_UUID="true" (2) Edit /usr/share/grub/grub-mkconfig_lib to comment out the 3 lines starting... if FS_UUID= (etc.) ... but that line doesn't exist in that file. (3) Edit /etc/fstab and change very instance of UUID= (etc.) into the corresponding drive and partition e.g. /dev/sda2 (4) Edit /etc/initramfs-tools/conf.d/resume and change UUID=RESUME= (etc.) into the corresponding drive and partition e.g. /dev/sda2 (5) Run update-grub (6) Then re-do all the above each time I do a kernel upgrade. So please: Your advice, keeping to my original goal of disabling/bypassing UUID. What am I forgetting? What am I doing wrong? Thanks VERY much, Carl Turney Bayswater, Vic

11 47

python-iview
by Russell Coker 29 Apr '14

29 Apr '14

Recently python-iview stopped working because the ABC apparently started sending unicode characters where the previous code didn't work. The new python-iview in GIT depends on Version 3+ of Python and the Debian/Wheezy Python build system doesn't seem designed for building that - or at least it's well beyong my Python coding ability. I used the below patch to convert the text in question to plain ASCII and make the program work again (the change to the #! line isn't needed). Note that the ABC doesn't want us to create archives of programs downloaded from their web site. But if you do want to create such archives I can recommend a BTRFS RAID-1 array of two cheap SATA disks for that purpose. 3TB SATA disks are dirt cheap nowadays. The worst of the BTRFS problems I described in my last LUV talk only occur when a filesystem is filled and a 3TB RAID array isn't something you'll fill quickly. --- a/iview-cli +++ b/iview-cli @@ -1,9 +1,10 @@ -#!/usr/bin/env python +#!/usr/bin/python from __future__ import print_function import sys, os, getopt import os.path import iview.config +import codecs try: import configparser as ConfigParser # Python 3 @@ -80,7 +81,7 @@ def print_series_items(items, indent=''): url = item['livestream'] else: url = item['url'] - print(indent + item['title'] + '\t(' + url + ')') + print(indent + item['title'].encode('ascii', 'ignore') + '\t(' def print_auth(): config() -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

3 4

Firefox OS phone - Wireless to PABX?
by Peter Ross 29 Apr '14

29 Apr '14

Hi all, I bought a Firefox phone.. and it does not connect to the Telstra network (Optus works, btw, but I have a Telstra contract at the moment). It works using WLAN. However, I wanted to play with it anyway.. Do you know a way to connect it to a PABX as Asterisk? Regards Peter

1 0

Linux PPPoE bridge mode issues - again
by Toby Corkindale 29 Apr '14

29 Apr '14

Hi, I posted last year about a problem I was having with Linux's PPPoE functionality in regards to a specific modem. At the time I put it down to a dodgy modem and moved on, but now I've hit it on another modem, and twice seems more than coincidence. The problem is that path MTU detection seem to break when the "bad" modems are involved. So the Linux box running pppoe is OK, because it knows the interface has an mtu+mru of 1492, but masqueraded clients do not. You can work around the problem a bit, by having an iptables rule with --clamp-mss-to-pmtu, but it's a kludge.. and importantly, only required for two of these four modems. The other two work just fine *with apparently identical configurations* (ie. LLC / bridged) Can anyone think of a reason for this? The rp-pppoe and other mailing lists offer tantalising hints that I'm not alone, but sadly those threads do not lead to any solutions. Modems that work: * TP-Link TD-8817 (Trendchip chipset) * Billion 7300RA (Trendchip chipset) Modems that don't work: * TP-Link TD-8840T (Trendchip) * Billion 7800NL (Broadcom chipset)

3 11

crash on netgear readynas
by James Harper 28 Apr '14

28 Apr '14

We have a few Netgear ReadyNAS 104's, and they all crash under high iscsi load. They are being used to hold backups from a windows server, and the one I've been working on rarely gets through a single overnight backup. I have ssh'd in and it seems that the iscsi backing store is a file sitting on a btrfs mount. The kernel is 3.0.101, which strikes me as a little old for running btrfs although I guess being an appliance they could well have backported everything from a newer more stable release. Or not, going on how much crashing it's doing. I was planning on using netconsole to see if I could capture its dying gasp, but it's not compiled in and not built as a module. A warranty claim is the obvious answer, but that's always a pain so I'm wondering if it's possible to work around the problem by tweaking some things. Netgear are aware of the problem, and have asked things like how full is it getting so I guess they know about the btrfs limitations relating to running out of space. So far the only solution they have offered is to try the latest beta kernel and do yet another factory reset, which we've done. Some info (abridged): # mount /dev/md127 on /data type btrfs (rw,noatime,nodiratime,nodatasum,space_cache) /dev/md127 on /apps type btrfs (rw,noatime,nodiratime,nodatasum,space_cache) /dev/md127 on /home type btrfs (rw,noatime,nodiratime,nodatasum,space_cache) # uname -a Linux RPCV-NAS1 3.0.101.RN_ARM.1 #1 Thu Mar 6 09:31:05 PST 2014 armv7l GNU/Linux Any hints appreciated! Thanks James

3 3