526 reputation
1313
bio website eidenschink.eu
location Germany
age 41
visits member for 3 years, 11 months
seen yesterday

All true wisdom is printed on T-Shirts.


Dec
27
comment How do I encrypt large (20Gb+) compressed files from a backup?
Ok, I gave it a try. While not giving exactly arguments for gpg being the perfect tool for encrypting LARGE files, I did some measurements of my own. On my server it took about 4 1/2 minutes to encrypt the 20Gig+ file and it was just a matter of seconds to encrypt for more recipients. I also found that the backup utility vzdump offers scripting with various hooks so that I can encrypt right after the backup file is created.
Dec
23
comment Allowing outbound traffic with APF/iptables for OpenVZ container
@David I love you, David. You saved my xmas.
Dec
23
comment How do I encrypt large (20Gb+) compressed files from a backup?
Pardon me? Proxmox creates a huge, compressed backup file. I don't want to split THIS FILE and encrypt the single parts (point is: just because encryption tool x or y only accepts say up to 500MB), I just ask if there is a solution to encrypt this whole existing compressed file.
Dec
23
comment How do I encrypt large (20Gb+) compressed files from a backup?
@MadHatter This is a Proxmox setup that does backups on the fly with lvm-snapshots. They result .lzo compressed in my case. After that I could run whatever fits to encrypt them.
Apr
15
comment Nginx always reports “not found”
Symlinking the whole directory is not necessary. If you add an error on purpose you will immediately see if your file is included or not on nginx-reload :) - updated my answer.
Apr
1
comment Allow IMAP for Roundcube and as external service only for some special users. How to configure?
No problem, it's a good suggestion. But it's good to not have to add complexity by extra fields and values for my many mailboxes. My SQL statement (the part you don't see in my answer) is right now too long anyway :)
Apr
1
comment Allow IMAP for Roundcube and as external service only for some special users. How to configure?
(I can accept my own answer in two days - so for the moment: it works)
Apr
1
comment Allow IMAP for Roundcube and as external service only for some special users. How to configure?
Thanks for the CASE statement suggestion. While you answered I tested a CLAUSE with the %r variable (I'll answer below). Let me (maybe superfluously) add that 'allow_imap' or imap_allowed have no special meaning for dovecot. In the wiki example they are used within the SQL condition itself (as a value of a column).
Sep
8
comment SSH login: automatically goto last directory visited?
+1 for adding "mosh". Looks very interesting. "byobu" could be added on top of screen.
Nov
30
comment Apache config file. Redirect permanent gives 403 error
mod_alias is activated, isn't it? ("Redirect" = mod_alias stuff, "RewriteXY" = mod_rewrite stuff).
May
31
comment Disk full, du tells different. How to further investigate?
Bingo! :-) Thanks.
May
3
comment Sharing apache's error_log with other users (non-root)
Just try to find out if your apache logfiles are log-rotated. If no special file exists, maybe there's a line in /etc/logrotate.conf. This is just to make sure a daily logrotation does not re-set your changed file permissions. If there's no rotation, simply ignore this hint. Btw - what linux are you using?
Apr
21
comment Cron job keeps running!
Ok, then try curl instead of wget: curl -m 90 -o /tmp/curl.log www.example.com.
Apr
15
comment How to set Postfix configuration to cach-all emails in domain but excluding some addresses?
When you send mail you may receive it because you authenticated or sent within your local net: if this is permitted before the check_recipient_access restriction, it is possible. If you implemented the header_checks method, you have to add a similar line to a smtp_header_checks file. The first one is a filter while receiving mails, the latter a filter when mail is delivered.
Apr
15
comment How to set Postfix configuration to cach-all emails in domain but excluding some addresses?
Without further investigation why it doesn't work, I can also think of adding a line to the header_checks file.
Apr
14
comment Plesk and MailScanner
The delay for greylisting will just be for the first individual hit. It remembers the accepted to-from-combinations; and you can whitelist. To see how effective Zen is, do something like grep NOQUEUE /var/log/mail| grep -i spamhaus| wc -l
Apr
11
comment How to interpret these munin stats of nginx?
So if I would turn off keepalive completely I would see 0 waiting connections? Is it really completely related to keepalive connections?
Apr
8
comment Shared storage for VMs without dedicated storage server
Ewan, thanks so far for your answer. I can't setup shared storage, well, I can, but I don't want to dedicate one of the PM's to be a fileserver. Currently I'm looking more into DRBD, LVM and smth. like Proxmox as you guess in your second paragraph.
Apr
5
comment Using LVM Snapshot To Backup Database Servers
You can do it when you prepare the state of the DB before the "freeze" (see answers below) - I just want to add that the LVM snapshot should not be your only backup then because there is some more work involved when going to restore the data back.
Apr
4
comment apache: several ssl vhosts on the same computer and same ip
Your main problem is the one that Douglas gave in his answer. Your other options are: A wildcard SSL certificate or TLS Server name indication (see the nginx page nginx.org/en/docs/http/configuring_https_servers.html#sni - you could place nginx before apache).