Reputation
303
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 6 20
Impact
~47k people reached

  • 0 posts edited
  • 0 helpful flags
  • 36 votes cast
Jul
9
comment Fixing invalid DNS records for mail server with SSL certificate
@SteffenUllrich Ah right. SPF records look interesting, I'll look into that, thanks.
Jul
9
comment Fixing invalid DNS records for mail server with SSL certificate
I think I might be misunderstanding what's required here. When I looked up Google's mail server, the PTR record for the IP address that it points to does not match the name in the MX record, nor the name that the server provides when connected to over SMTP. Is this not what you are referring to?
Jul
8
comment Fixing invalid DNS records for mail server with SSL certificate
As mentioned in my comment above, I'd prefer not to update my PTR record as such as mail.example.com is "the canonical name" for the IP address. Furthermore, none of Apple, Google, Microsoft, or StackOverflow have such a PTR record so I don't think it will be a problem.
Jul
8
comment Fixing invalid DNS records for mail server with SSL certificate
In theory yes, but the PTR record is supposed to be "the canonical name" for the IP address, and in my case foo.example.com is the canonical address.
Jul
8
comment Fixing invalid DNS records for mail server with SSL certificate
At this point I'm not convinced it is necessary. I did a quick look at Apple, Google and Microsoft's DNS records and none of their PTR records matched the A records for their mail servers so I think I'm fine with not changing mine. If you'd like to put your first comment as an answer I'll gladly accept it.
Jul
8
comment Fixing invalid DNS records for mail server with SSL certificate
Mmm, that's potentially a problem as the machine is primarily foo.example.com and it wouldn't make logical sense for it's PTR record to say mail.example.com. Is it documented anywhere that this is a requirement?
Jul
8
comment Fixing invalid DNS records for mail server with SSL certificate
Ah right. I didn't think of that, that should be fairly straightforward. Would it matter that the reverse DNS record would not match?
Jan
27
comment Creating missing Maildir++ folders in Dovecot
Uh, there are a lot of config files and most of it probably isn't relevant; were there any particular directives you were interested in? Yes, the folder icons are probably grey. I think this is a more of a Maildir thing than Dovecot.
Jan
23
comment Creating missing Maildir++ folders in Dovecot
2.1.7 I think, mail_location = maildir:/var/mail/%u, files are 600 and directories are drwx--S---, all owned by vmail:vmail, although I have root privileges so that's not a problem.
May
27
comment How do I get cURL errors to go into the correct log file?
Nope, I'm still getting cURL output in error.log, and this occurs even if I unset error_log in php.ini.
Dec
30
comment How to use usernames instead of e-mail addresses for Dovecot login?
Got it! You need to set $rcmail_config['username_domain'] = 'example.com'; to get Roundcube to work properly.
Dec
30
comment How to use usernames instead of e-mail addresses for Dovecot login?
Most excellent! Any idea how I get Roundcube webmail to do the same thing? Now when I login with username to Roundcube I get the e-mail for username@example.com but the identity is username@localhost.
Dec
16
comment How to use usernames instead of e-mail addresses for Dovecot login?
Nope. It would just be a convenient shorthand login for certain domain users. It would still be associated with the domain mailbox.
May
21
comment Configuring client certificate authentication in apache
Apache is version 2.4.2 and OpenSSL is 0.9.8r (Feb 2011, not that recent afterall).
May
21
comment Configuring client certificate authentication in apache
Hi Kevin, I did end up fixing this issue by upgrading both Apache and OpenSSL to (I think) the latest versions as of when this question was asked. I'll have a look when I get to work and I'll get back to you.
Nov
11
comment Dynamic DNS updates for Linux and Mac OS X machines with a Windows DNS server
Yea, that's what I'm trying to find.
Nov
11
comment Dynamic DNS updates for Linux and Mac OS X machines with a Windows DNS server
@joeqwerty On the Windows machine that is not part of the domain I had to tick the box for "Use this connection's DNS suffix in DNS registration" to make it work so I assume that this means it is the connection specific DNS suffix. And yes I did allow secure and unsecure updates to the zone.
Nov
10
comment Dynamic DNS updates for Linux and Mac OS X machines with a Windows DNS server
@MDMarra Yes it is, most of the working machines are, but there is one Windows machine that is not joined to the domain that still successfully sends a dynamic DNS update to the server. I think it is using DHCP DNS update delegation.
Nov
10
comment Dynamic DNS updates for Linux and Mac OS X machines with a Windows DNS server
@JohnSiu That information is available in the question.
Nov
3
comment IPtables SNAT eats packets
Definitely the source port.