Reputation
236
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 3 11
Impact
~22k people reached

  • 0 posts edited
  • 0 helpful flags
  • 23 votes cast
Jul
7
comment What is a saslpasswd2 domain?
So is the purpose of specifying the domain to saslpasswd simply to allow the username to include or not include a domain, or is it somehow related to checking certificates of the domain against a trusted source (e.g. as SSL).
Jul
6
comment postfix - how do you redirect all emails to one user, eg *@example.com → user@example.com
Does this method preserve the To email address? (the virtual maps rewrites it and the original To: address is lost.)
Jun
27
comment What is a saslpasswd2 domain?
Thanks -- have updated the question. So, its sound like sasl is responisble for validating email domains. Is it at all related to the SMTP server login?
Jun
23
comment How to redirect all postfix emails to one external email address?
@basin Is seems like replacing email@gmail.com with root@localhost would do that, no?
Dec
18
comment Possible to configure postfix for authenticated and non-authenticated sending?
Thank you -- this was the missing puzzle piece. It looks like I can generally send email without configuring the SPF record -- so I guess many mail servers fallback to checking the MX is the SPF record is missing.
Dec
18
comment Possible to configure postfix for authenticated and non-authenticated sending?
How then does the receiving email server verify that email From:xxx@example.com is actually from the owner of example.com. If email comes from some IP address and the IP address doesn't match the resolved IP address of example.com's MX record then the email is rejected by the sending server. This is the behavior I see in practice, and it seems reasonable and prevent spoofing the To field of emails.
Dec
12
comment Possible to configure postfix for authenticated and non-authenticated sending?
"To verify that the sending server is an authorized email server, the receiving email server tries to find an MX record that correlates to the sender’s domain. If it cannot find one, it assumes that the email is spam and rejects it." watchguard.com/help/docs/wsm/xtm_11/en-US/…
Dec
10
comment Possible to configure postfix for authenticated and non-authenticated sending?
The final destination is GApps. The postfix server needs to forward mail to the GApps server. Both GApps and the postfix server can send mail from example.com. As a result I think I need to register both servers in the MX record. Although the postfix server is not the desired destination for incoming mail, I believe it needs to be registered in the MX record so that servers it sends mail to can verify that the *@example.com From and ReplyTo header match the senders IP in the MX records for example.com. Its possible to register multiple MX records, correct?
Oct
21
comment How to map multiple AWS LoadBalancer ports to a single instance port?
Nope. That was it. Thank you.
Oct
21
comment How to map multiple AWS LoadBalancer ports to a single instance port?
My bad. Problems still persists though. Updating the question.
Oct
10
comment How to create a local apt package proxy?
This is exactly the right thing.
Apr
12
comment Can I administer Amazon RDS instances with, Chef? Salt? Puppet? Ansible?
Its seems there's a split between "pull" based systems (chef, puppet, salt?) that need stuff installed on the managed resource, and "pull" based systems. Ansible is in the later category. Some useful discussion here: serverfault.com/questions/568187/…
Apr
11
comment Can I administer Amazon RDS instances with, Chef? Salt? Puppet? Ansible?
Thanks -- looking into Ansible. Have been trying to look into Ansible. Looks like their whitepaper is behind an email firewall and they're not responding... :-(
Apr
10
comment Can I administer Amazon RDS instances with, Chef? Salt? Puppet? Ansible?
Maybe some combination (Cloud Formation + Puppet) will be nice. But I suspect it will be a hacky nightmare. I've started a more targetted question here serverfault.com/questions/588237/…
Apr
10
comment Can I administer Amazon RDS instances with, Chef? Salt? Puppet? Ansible?
If that's true -- that sounds great.
Apr
10
comment Can I administer Amazon RDS instances with, Chef? Salt? Puppet? Ansible?
I'm not saying its Ansible's fault. (Well it kind of is -- most of the docs for these tools fail to simply describe the limits of their scope to nOObs so that its clear what possible and what's not). Mostly I'm looking for a practical solution to managing clusters in the cloud. Unfortnately, they're all composed of resources accessible by diverse APIs. Sadly, I'm left with make as my tool of choice.
Apr
10
comment Can I administer Amazon RDS instances with, Chef? Salt? Puppet? Ansible?
...unless you want to defining the scope of resources managed by CM software as "only those resources I can install my custom software onto.". Is that the case? The popular definition of CM tools only applies to this narrow scope? What I'm really after is a tool that's good for managing all these things ... load balancers, routers, DNS tables, virtual machine servers, virtual network configurations, managed databases systems,.... etc... etc... etc... It is absolutely possible.
Apr
10
comment Can I administer Amazon RDS instances with, Chef? Salt? Puppet? Ansible?
@ceejayoz Clearly a specific tool limitation, not an RDS limitation. Facts: 1) RDS provides much flexibility for C&M, 2) I already have C&M tools to C&M RDS: make and shell scripts. 3) I have lots of resources to C&M that (for good reasons) prevent the installation of 3rd party software onto the resource. Examples: load balancers, routers, DNS tables, virtual machine servers, virtual network configurations, ... the list is endless. Tool problem. Its entirely possible to configure and manage all these things.
Apr
10
comment Can I administer Amazon RDS instances with, Chef? Salt? Puppet? Ansible?
Sorry -- SX has reordered the discussion. What's not related to RDS?
Apr
10
comment Can I administer Amazon RDS instances with, Chef? Salt? Puppet? Ansible?
Its been my experience that managing the packages is the easy part of this problem (a shell script works just fine - especially with the availability of on-demand instances where we can toss out an instance, create and new one an run a configure script from start to finish). Having a language to connecting all these machine, keeping track of who is the master, who is the slave, the upgrade ballet of disconnecting instances from a load balancer during upgrades, etc... I was hoping that CM tools would help me out here. Sound like they're the wrong tool.