- luv-main - luv.asn.au

Postfix Virtual Users Transport
by Fraser McGlinn 28 Jan '16

28 Jan '16

Hi Guys, I’ve got a domain where i’ve the main hosting for the domain somewhere else (not controlled by me) and then the some users hosted locally. What i’m having issues with is getting the mail from my server to send upstream if it can’t find a user locally. What i’ve got so far: alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no config_directory = /etc/postfix inet_interfaces = all mailbox_size_limit = 0 message_size_limit = 256000000 milter_connect_macros = j {daemon_name} v {if_name} _ milter_default_action = accept mydestination = frodo.iama.geek.nz <http://frodo.iama.geek.nz/>, localhost myhostname = frodo.iama.geek.nz <http://frodo.iama.geek.nz/> mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname non_smtpd_milters = $smtpd_milters readme_directory = no recipient_delimiter = + relayhost = smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) smtpd_milters = unix:/spamass/spamass.sock unix:/clamav/clamav-milter.ctl smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_unverified_recipient smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_tls_cert_file = /etc/ssl/self-sign-star.iama.geek.nz.crt smtpd_tls_key_file = /etc/ssl/self-sign-star.iama.geek.nz.key smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_use_tls = yes tls_random_source = dev:/dev/urandom transport_maps = proxy:mysql:/etc/postfix/mysql-virtual-transport-maps.cf virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf virtual_transport = lmtp:unix:private/dovecot-lmtp With the following in my virtual transport table +----+--------------------+------------------------------------+ | id | source | destination | +----+--------------------+------------------------------------+ | 1 | example.com | smtp:[aspmx.l.google.com <http://aspmx.l.google.com/>] | | 2 | .example.com | smtp:[aspmx.l.google.com <http://aspmx.l.google.com/>] | | 3 | fraser(a)example.com | lmtp:unix:private/dovecot-lmtp | +----+--------------------+------------------------------------+ What I get when i try and email an email on the upstream server is Recipient address rejected: User unknown in virtual mailbox table Does anyone have any ideas on how to resolve this? It doesn’t seem to matter if I have virtual_transport set or not and do it all manually. Cheers, Fraser

2 1

How do I process a large xml file?
by h 28 Jan '16

28 Jan '16

Hi, I am a hobbyist. I have written a style sheet (xslt) which I want to use to process an xml file. I have run some tests, using xsltproc, on a sample xml and it all works well. The xml file I am wanting to process is 650 GB in size. When I run the xsltproc command the response is "Killed". I had hoped that xsltproc would step through the xml file, creating output as it goes. This does not seem to be the case. I am running Mageia x64. I have added a 1T disk to the system and set it as a swap partition. Does anyone know of an xml parser that will work with "limited" memory? - or a method by which I can apply the style sheet. I have experience with C, and if all else fails will write a C program to do what I want the style sheet to do, but I would rather get the style sheet working. Any advice appreciated. Hugh

3 2

special beginners meeting
by Russell Coker 27 Jan '16

27 Jan '16

I've publicised the meeting on Saturday to LCA delegates, so we may get a larger attendance than usual. Also I've suggested meeting for dinner after the meeting, it's not something we usually do but will probably be of interest to people who have visited Australia for LCA. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

2 1

Outlook.com "Smart screen" - SMTP traffic does not arrive.
by Piers Rowan 26 Jan '16

26 Jan '16

Has anyone had success in getting an new IP past the Smart screen content filter? MS support keep sending me canned responses. No messages arrive in the @outlook.com account Here is a manual try: -sh-4.2$ telnet mx1.hotmail.com 25 Trying 65.55.92.168... Connected to mx1.hotmail.com. Escape character is '^]'. 220 SNT004-MC3F13.hotmail.com Sending unsolicited commercial or bulk e-mail to Microsoft's computer network is prohibited. Other restrictions are found at http://privacy.microsoft.com/en-us/anti-spam.mspx. Mon, 25 Jan 2016 20:29:51 -0800 HELO bne.recruitonline.com.au 250 SNT004-MC3F13.hotmail.com (3.21.0.230) Hello [103.16.128.141] MAIL FROM: piers(a)r.id.au 250 piers@r.id.au....Sender OK RCPT TO: piers(a)outlook.com 250 piers(a)outlook.com DATA 354 Start mail input; end with <CRLF>.<CRLF> Testing . 250 <SNT004-MC3F13p7mvjk000d0d99(a)SNT004-MC3F13.hotmail.com> Queued mail for delivery QUIT 221 SNT004-MC3F13.hotmail.com Service closing transmission channel Connection closed by foreign host. And here is a log snippet: Jan 26 15:25:55 bne postfix/smtpd[15845]: 6F53D18344: client=localhost[::1] Jan 26 15:25:55 bne postfix/cleanup[15848]: 6F53D18344: message-id=<20160126042555.6F53D18344(a)bne.recruitonline.com.au> Jan 26 15:25:55 bne postfix/qmgr[15722]: 6F53D18344: from=<support(a)recruitonline.com.au>, size=6837, nrcpt=1 (queue active) Jan 26 15:25:55 bne postfix/smtpd[15845]: disconnect from localhost[::1] Jan 26 15:25:57 bne postfix/smtp[15849]: 6F53D18344: to=<piers(a)outlook.com>, relay=mx3.hotmail.com[207.46.8.167]:25, delay=1.9, delays=0.04/0.01/0.49/1.3, dsn=2.0.0, status=sent (250<20160126042555.6F53D18344(a)bne.recruitonline.com.au> Queued mail for delivery) Jan 26 15:25:57 bne postfix/qmgr[15722]: 6F53D18344: removed I can't see anything in the MTA queue. Thanks for your help Cheers Piers

1 0

DNSSec configuration
by Jason White 25 Jan '16

25 Jan '16

Hello Luv members, I've recently added DNSSec signatures to my domain (jasonjgw.net) and supplied the key to my DNS registrar, gandi.net. Unfortunately, my ISP's name servers, which perform DNSSec validation, now return a SERVFAIL (indicating a validation failure) when I look up the domain. Google's public servers succeed, however, as DNSSec Analyzer appears to do: http://dnssec-debugger.verisignlabs.com/ The primary DNS server is running Bind 9 and I essentially followed the instructions here: https://nocko.se/2012/03/21/dnssec-quickly-and-correctly/ Is there anything that seems amiss? I have friends who are contemplating following in my footsteps with their own domains, thus anything we work out here should be helpful to them also.

4 6

Castrated netbook (Windows 10 only)
by Peter Ross 23 Jan '16

23 Jan '16

Hi all, I bought a Lenovo Ideapad 100S before Christmas. My old netbook is not reliable (loose LVDS connector inside the glued screen frame, it seems) and I need a lightweight and trustworthy laptop when on call. So the idea was installing a proper OS on it but the UEFI is castrated to a point that I cannot even boot from USB (after SecureBoot is off). "System does not have any USB boot option" I get if I jump through all hoops and restart with USB device chosen. With a 32GB eMMC I do not have an option to replace that either it seems..(or do I have another option?) So I went to the Lenovo support website. A form with e-mail support - but the submit button does not work. Firefox is specifically mentioned as compatible with this website. Okay, chat. The support apologized for the system limitations and recommended to return it to the shop. Well, I will try my luck with this in my hands. I claimed that the device violates UEFI specification. Well, I actually do not know,and it may a bit bogus: http://www.uefi.org/faq --- Can all systems disable UEFI Secure Boot? While it is designed to protect the system by only allowing authenticated binaries in the boot process, UEFI Secure Boot is an optional feature for most general-purpose systems. By default, UEFI Secure Boot can be disabled on the majority of general-purpose machines. It is up to the system vendors to decide which system policies are implemented on a given machine. However, there are a few cases—such as with kiosks, ATM or subsidized device deployments—in which, for security reasons, the owner of that system doesn’t want the system changed. --- It does not mention the range of devices to boot from at all. My wife has another Lenovo netbook bought half a year earlier where I am able to boot from USB (well, the FreeBSD 10.2 UEFI memstick kernel panics shortly after that but that may have another reason). In general, I see the lockdown as a serious threat for open source. I wonder whether there are ways to alert the ACCC or other venues. At least locked down devices should be clearly marked to be aware of this. Any ideas in that regard? Should we do something on organisational level (via Linux Australia)? I think this is serious. We loose the ability to run open source on modern hardware completely, if we do not act, I think. Regards Peter

6 7

Linux firewall distribution
by zlinw＠mcmedia.com.au 22 Jan '16

22 Jan '16

I have been asked by a number of windows users for a firewall set up for use on an old PC. The reason for asking is they say most of the items currently commercialy availble have serious problems, like impossible to upgraded, upgrading trashs any alterations one has done to the config or the fire wall has hidden openings allowing certain what they regard is spy traffic through. windows 10 firewall getting many mentions here. I use a PC running debian as a firewall, this as I have set it up would probably not be regarded as easy to use. I use a PC with Debian installed with a custom kernel with all required modules compiled in. This uses a simply fire wall script that allows outgoing connection but blocks all incoming connections except those related to an existing outgoing connections. While most would regard it as to restrictve I am happy with it. I assume something one could look at via a web broswer from inside the secure area would what is required. sugestions very welcome. Lindsay

1 0

ata errors in dmesg/syslog - any pointers from the more ATA/AHCI literate?
by Anthony Hogan 22 Jan '16

22 Jan '16

Hey folks, I have my system (Gigabyte P55A-UD4 r1 F15 firmware) configured in AHCI mode with a 1+3 TB HDDs, and a DVD drive. ata5 = 1TB SATA (msdos partition scheme) ata9 = DVD SATA ata10 = 3TB SATA (GPT scheme to use 3TB as one, but not a boot drive) ata16 = Appears to be virtual "Marvell" device (I am not using hardware or fake RAID, and have disabled eSATA port) I have two 6Gbps SATA ports, and the rest are 3 I think. One of the 6GB ports goes to the 3TB drive, the other goes to a docking bay in the case that I use to do occasional offline backups. The kernel seems to be bitching about the DVD drive all the time (and sometimes my 1TB drive), and I'm not quite sure why. Buggy AHCI? Crappy SATA cables? Something else? Used AHCI mode for ages, but only with upgrade to Ubuntu version that I've noticed more bitching. The other day, my 1TB drive got pushed into read only mode on boot - I did several SMART tests and an fsck from a live environment and nothing out of the ordinary came up (I have recently installed Windows 10 in dual boot, but prior to that had Windows 7 - Windows didn't touch grub at all). Using search: zegrep 'ata([59]|10|16)|status: \{' /var/log/syslog.3.gz I've pulled out two examples of boot time fun: [ 1.062473] ata5: SATA max UDMA/133 abar m2048@0xfbffd000 port 0xfbffd200 irq 37 [ 1.078468] ata9: SATA max UDMA/133 abar m2048@0xfbdff000 port 0xfbdff100 irq 39 [ 1.078470] ata10: SATA max UDMA/133 abar m2048@0xfbdff000 port 0xfbdff180 irq 39 [ 1.078480] ata16: SATA max UDMA/133 abar m2048@0xfbdff000 port 0xfbdff480 irq 39 [ 1.400286] ata16: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 1.400383] ata10: SATA link up 6.0 Gbps (SStatus 133 SControl 300) [ 1.400411] ata16.00: ATAPI: MARVELL VIRTUALL, 1.09, max UDMA/66 [ 1.400689] ata16.00: configured for UDMA/66 [ 1.401396] ata10.00: ATA-8: WDC WD3000FYYZ-01UL1B0, 01.01K01, max UDMA/133 [ 1.401401] ata10.00: 5860533168 sectors, multi 8: LBA48 NCQ (depth 31/32), AA [ 1.403407] ata10.00: configured for UDMA/133 [ 1.404179] ata9: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 1.405880] ata9.00: ATAPI: ATAPI iHAS124 Y, BL0V, max UDMA/100 [ 1.408124] ata9.00: configured for UDMA/100 [ 2.192223] ata5: SATA link up 3.0 Gbps (SStatus 123 SControl 300) [ 2.207881] ata5.00: ATA-8: WDC WD1002FAEX-00Z3A0, 05.01D05, max UDMA/133 [ 2.207887] ata5.00: 1953525168 sectors, multi 0: LBA48 NCQ (depth 31/32), AA [ 2.209995] ata5.00: configured for UDMA/133 [ 3.184967] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.185027] ata9.00: irq_stat 0x40000001 [ 3.200944] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.201002] ata9.00: irq_stat 0x40000001 [ 3.216173] ata16.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.216223] ata16.00: irq_stat 0x40000001 [ 3.216271] ata16.00: cmd a0/01:00:00:00:01/00:00:00:00:00/a0 tag 1 dma 16640 in [ 3.216336] ata16.00: status: { DRDY } [ 3.268939] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.268988] ata9.00: irq_stat 0x40000001 [ 3.284496] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.284545] ata9.00: irq_stat 0x40000001 [ 3.300450] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.300499] ata9.00: irq_stat 0x40000001 [ 3.324919] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.324967] ata9.00: irq_stat 0x40000001 [ 3.340548] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.340596] ata9.00: irq_stat 0x40000001 [ 3.356589] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.356636] ata9.00: irq_stat 0x40000001 [ 3.380945] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.380993] ata9.00: irq_stat 0x40000001 [ 10.885181] ata5.00: exception Emask 0x0 SAct 0x40000007 SErr 0x0 action 0x0 [ 10.885257] ata5.00: irq_stat 0x40000008 [ 10.885322] ata5.00: failed command: READ FPDMA QUEUED [ 10.885382] ata5.00: cmd 60/00:f0:c0:3d:83/01:00:1d:00:00/40 tag 30 ncq 131072 in [ 10.885490] ata5.00: status: { DRDY ERR } [ 10.885545] ata5.00: error: { UNC } [ 10.889441] ata5.00: configured for UDMA/133 [ 10.889571] ata5: EH complete [ 13.185375] ata5.00: exception Emask 0x0 SAct 0x3000000 SErr 0x0 action 0x0 [ 13.185463] ata5.00: irq_stat 0x40000008 [ 13.185526] ata5.00: failed command: READ FPDMA QUEUED [ 13.185585] ata5.00: cmd 60/08:c0:e0:3d:83/00:00:1d:00:00/40 tag 24 ncq 4096 in [ 13.185693] ata5.00: status: { DRDY ERR } [ 13.185749] ata5.00: error: { UNC } [ 13.189954] ata5.00: configured for UDMA/133 [ 13.190146] ata5: EH complete [ 15.037279] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 15.037342] ata9.00: irq_stat 0x40000001 [ 15.053304] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 15.053368] ata9.00: irq_stat 0x40000001 [ 15.073351] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 15.073423] ata9.00: irq_stat 0x40000001 [ 15.097661] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 15.097734] ata9.00: irq_stat 0x40000001 [ 15.117315] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 15.117378] ata9.00: irq_stat 0x40000001 [ 15.137616] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 15.137689] ata9.00: irq_stat 0x40000001 [ 139.870144] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 139.870148] ata9.00: irq_stat 0x40000001 [ 139.890320] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 139.890324] ata9.00: irq_stat 0x40000001 [ 139.897804] ata9: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 t4 [ 139.897807] ata9: irq_stat 0x40000001 [ 1.063019] ata5: SATA max UDMA/133 abar m2048@0xfbffd000 port 0xfbffd200 irq 37 [ 1.078151] ata9: SATA max UDMA/133 abar m2048@0xfbdff000 port 0xfbdff100 irq 39 [ 1.078153] ata10: SATA max UDMA/133 abar m2048@0xfbdff000 port 0xfbdff180 irq 39 [ 1.078163] ata16: SATA max UDMA/133 abar m2048@0xfbdff000 port 0xfbdff480 irq 39 [ 1.396028] ata16: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 1.396046] ata10: SATA link up 6.0 Gbps (SStatus 133 SControl 300) [ 1.396200] ata16.00: ATAPI: MARVELL VIRTUALL, 1.09, max UDMA/66 [ 1.396470] ata16.00: configured for UDMA/66 [ 1.397147] ata10.00: ATA-8: WDC WD3000FYYZ-01UL1B0, 01.01K01, max UDMA/133 [ 1.397153] ata10.00: 5860533168 sectors, multi 8: LBA48 NCQ (depth 31/32), AA [ 1.399072] ata10.00: configured for UDMA/133 [ 1.403953] ata9: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 1.405630] ata9.00: ATAPI: ATAPI iHAS124 Y, BL0V, max UDMA/100 [ 1.407746] ata9.00: configured for UDMA/100 [ 2.191935] ata5: SATA link up 3.0 Gbps (SStatus 123 SControl 300) [ 2.204992] ata5.00: ATA-8: WDC WD1002FAEX-00Z3A0, 05.01D05, max UDMA/133 [ 2.204998] ata5.00: 1953525168 sectors, multi 0: LBA48 NCQ (depth 31/32), AA [ 2.207106] ata5.00: configured for UDMA/133 [ 3.184727] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.184787] ata9.00: irq_stat 0x40000001 [ 3.200768] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.200826] ata9.00: irq_stat 0x40000001 [ 3.215932] ata16.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.215991] ata16.00: irq_stat 0x40000001 [ 3.216044] ata16.00: cmd a0/01:00:00:00:01/00:00:00:00:00/a0 tag 1 dma 16640 in [ 3.216111] ata16.00: status: { DRDY } [ 3.276729] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.276788] ata9.00: irq_stat 0x40000001 [ 3.292414] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.292472] ata9.00: irq_stat 0x40000001 [ 3.308295] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.308343] ata9.00: irq_stat 0x40000001 [ 3.332740] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.332799] ata9.00: irq_stat 0x40000001 [ 3.352472] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.352530] ata9.00: irq_stat 0x40000001 [ 3.372280] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.372328] ata9.00: irq_stat 0x40000001 [ 3.396795] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 3.396854] ata9.00: irq_stat 0x40000001 [ 7.936707] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 7.936770] ata9.00: irq_stat 0x40000001 [ 7.984588] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 7.984652] ata9.00: irq_stat 0x40000001 [ 8.000647] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 8.000714] ata9.00: irq_stat 0x40000001 [ 8.024891] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 8.024958] ata9.00: irq_stat 0x40000001 [ 8.040638] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 8.040700] ata9.00: irq_stat 0x40000001 [ 8.060998] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 8.061060] ata9.00: irq_stat 0x40000001 [ 649.042550] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 649.042557] ata9.00: irq_stat 0x40000001 [ 649.062840] ata9.00: exception Emask 0x1 SAct 0x0 SErr 0x0 action 0x0 [ 649.062846] ata9.00: irq_stat 0x40000001

3 6

LUV server offerings
by Russell Coker 21 Jan '16

21 Jan '16

There is currently discussion on the LCA mailing list about alternative IM software etc. I'm considering the possibility of running things for LUV members. Do people consider that it would be a benefit to have something like an XMPP server for LUV members? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

debugging disk performance problems
by Russell Coker 21 Jan '16

21 Jan '16

http://etbe.coker.com.au/2016/01/21/storage-performance-problems/ The above blog post might be useful for some people. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0