31
votes
Speed up SFTP uploads on high latency network?
With OpenSSH sftp client (which you seem to use), you can use:
-R switch to increase request queue length (default is 64)
-B switch to increase read/write request size (default is 32 KB)
For a start,...
- 7,524
19
votes
Equivalent of logrotate on OSX
You can get logrotate via Homebrew. Here are my notes from setting this up.
Install
brew install logrotate
Configure log rotation
Log rotation config files are in /usr/local/etc/logrotate.d/
...
- 291
9
votes
Accepted
Root chmod operation not permitted on file
Root is root, even on OS X Unix. That is why they disable it by default.
A quick google has shown that your file could be potentially locked. If you go and issue the command:
chflags nouchg /path/...
- 574
5
votes
Speed up SFTP uploads on high latency network?
(You mention "high latency" in the question title, but not in the body text. Have you measured the actual latency, and what are the results?)
There's a patch to OpenSSH that explicitly improve ...
5
votes
Speed up SFTP uploads on high latency network?
I'm trying to transfer a set of large files internationally using SFTP
It hasn't been mentioned as an answer yet, but when transferring multiple files over a high-latency link, there's one really ...
- 1,262
4
votes
Why can Apache access most of my file system?
Try looking for a <Directory /> section and make sure that any settings within that tag are restrictive.
Also check if mod_userdir is enabled and configured. Look for tags like UserDir
- 4,766
4
votes
On-site and off-site OS X Sever
Do not host your own email. Especially on an OSX server. Period.
I know this isn't the answer you want, but it is what you need to hear. Hosting email is incredibly challenging. Doing it yourself ...
- 109k
3
votes
Accepted
How to change the sshd listen address on Mac OS X?
The answer is similar to the one you linked to.
In the file /System/Library/LaunchDaemons/ssh.plist, you need to edit the Listeners item. The IP address can be specified with they key SockNodeName. ...
- 27.6k
3
votes
Accepted
Routing FQDN to Web Server on Specific Port
No, you can't do this with DNS, IPtables or the hosts file.
You'd need to point those domains to a proxy, or something that has knowledge of what you want done, which will in turn re-direct the ...
- 9,250
3
votes
Listing group members using ldapsearch
ldapsearch -x \
-b "cn=<your group name>,ou=group,dc=<your org>,dc=com" \
-H ldaps://<ldap server>:<port>
This works very well.
- 143
3
votes
Speed up SFTP uploads on high latency network?
You could try and enable compression, and see if that helps.
From man sftp:
-C Enables compression (via ssh's -C flag).
And from man ssh:
-C Requests compression of all data (...
- 3,618
3
votes
Speed up SFTP uploads on high latency network?
Speed up sftp transfers
Assuming your issues are network tuning and/or throttling per TCP connection, take a look at sftp using the lftp mirror subsystem
Network tuning on each end is a much bigger ...
- 2,849
3
votes
How to setup a bonded ethernet connection directly between macOS and Windows Server 2019?
I was able to get this working by setting up a bonded set on macOS with the following command:
# First get your network interfaces:
$ networksetup -listallhardwareports
# Then create the bond with ...
- 1,131
3
votes
SMTP Untrusted TLS connection still sending emails
In TLS the term “untrusted” is not the same as “not encrypted“. As you can see from the subsequent cipher and key strength in your log the communication is encrypted.
In TLS the trust relates to how ...
- 5,615
2
votes
Having Mac OS X on a XEN virtual machine
Useful links:
https://github.com/kholia/OSX-KVM
https://github.com/foxlet/macOS-Simple-KVM
https://github.com/munki/macadmin-scripts
Mojave:
#!/usr/bin/env bash
#==================================...
2
votes
How do I get disabling SMTP plaintext authentication to stick on OS X 10.10 Yosemite's Server.app
I can--with some futzing--get SMTP plaintext auth disabled via Server.app, though it doesn't stick very well (certainly doesn't survive a reboot or restart of the Mail service, and sometimes even gets ...
- 1,470
2
votes
Accepted
How does data flow in a password change with Open Directory?
Not sure how much Apple has changed things from a typical LDAP/Kerberos setup. In LDAP, a password change would involve TCP client:highport -> server:389 (or the LDAPS equivalent port, or possibly ...
- 1,636
2
votes
How to set route table priority on OS X
The effect you are after can be had with the route command using the -hopcount value.
route add -net 1.2.3.0 123.123.123.123 0.0.0.0 -hopcount 4
The larger a hopcount, the lower the priority.
...
- 447
2
votes
OS X Yosemite Server - Wiki stops working
The Wiki service in Server.app uses PostgreSQL as a database. This just happened to me and I was able to fix it without restarting the server.
Turn off Wiki service in Server.app.
Verify that the ...
- 121
2
votes
What are the ports needed for L2TP VPN on Mac OS X Server 5.0.15?
First off, what protocol of VPN are you using? OS X Server offers both L2TP (over IPSEC) and PPTP protocols, both of which use different ports.
For L2TP you need ports 500 (UDP), 1701 (UDP), and ...
- 403
2
votes
Accepted
Access Domain through Browser Works but Ping to the same Domain Fails
Ping uses ICMP, not TCP. ICMP has to be especially allowed through a firewall for ping to work, plus the server needs to be configured to respond to ping.
Given you've tagged AWS I guess that's where ...
- 31.2k
2
votes
Access Domain through Browser Works but Ping to the same Domain Fails
Ping operates by sending Internet Control Message Protocol (ICMP)
echo request packets to the target host and waiting for an ICMP echo
reply.
On the other hand, while browsing you are using in ...
- 8,941
2
votes
Accepted
Disabling SSLv2 on Dovecot v1
SSLv2 is a protocol, not a cipher. The "SSLv2" in the cipher list represents several ciphers associated with SSLv2, not the protocol itself.
In dovecot, the undocumented parameter ssl_protocols is ...
- 241k
2
votes
Accepted
Using a network mount as user home in Mac OS X Server App (v5)
This should only be a matter of changing a simple option first, in Server.app.
Click on the left-hand pane where there is a section called "File Sharing."
You will then see, among the choices there, ...
- 219
2
votes
Accepted
Postfix before-queue spam reject with amavis without sending out a bounce on OS X Server
The problem here is that it's amavis, not postfix, that's rejecting the message. Here's the standard flow for incoming messages:
postfix receives the message from the sending MTA (or spambot)
postfix ...
- 11.2k
2
votes
HTTPS doesn't work anymore after adding SSLRequireSSL directive
You are not accessing https.
The error you are showing clearly says:
"Apache Server at www.example.com Port 80"
Make sure you really access https, make sure there are not redirects that send you to ...
- 2,330
2
votes
Accepted
Reconfigure Apache to serve a Subversion repository over HTTPS (instead of HTTP)
This is now working. It turns out that the Apache config had been changed to include the line DAV Off inside the <Location "/svn"> directive. This should really be DAV svn (see http://www....
2
votes
Accepted
OpenVPN for Macosx got .ovpn from Windows user but need own key and crt files?
Your ovpn file should contain ca certificates, openvpn crt and private key. All this information should be received from openvpn provider.
- 4,558
2
votes
Accepted
OSX high sierra time machine server
From release notes :
Caching Server, Time Machine Server, and File Sharing advanced options are now built directly into macOS.
Time Server option has moved to the Preferences pane. Right-click on a ...
- 197
1
vote
Does script execution time cut into idle logout time with ssh?
I believe an idle connection is no keyboard interaction. I have this set on my servers, but if I want to run scripts or processes that take longer, i use screen.
HTH
Kobus
- 57
Only top scored, non community-wiki answers of a minimum length are eligible