Here are a few posts for future reading: How to add a jailed server to OpenVPN? Running OpenVPN in a ezjail jail Restarting OpenVPN in jail erase tun0 configuration OpenVPN Client in a jail
Interesting jail/OpenVPN reading Read More »
I’ve been meeting a few challenges with running an instance of bacula-fd in each of my jails. Most of them are related to networking. Perhaps my deployment strategies are imposing too many restrictions. The challenges arise on the jail hosts which are not behind my firewall at home. Each of those servers is accessible through
Accessing every jail from a VPN Read More »
I’ve been using Bacula since early 2004. I’ve been using FreeBSD since 1998. Jails are a relatively newcomer. I starting using it later in 2004. But it’s only recently that I’ve started using them intensively. Backups are always a touchy subject. With ezjail, the files you need to backup are greatly reduced. You’re not backing
ezjail-jail: making a full backup of a FreeBSD jail with Bacula Read More »
I first mentioned this idea yesterday. This morning I started implementing it. UPDATE: this strategy is mentioned in Scenic BGP Route | TechSNAP 137 at about 0:47:30. I back up my mail. On a regular and frequent basis. However, I wanted something more. What about the email which comes in between backups? How can I
Mail backups using newsyslog.conf for rotation Read More »
I’ve taken to the concept of sending a copy of each incoming email to a second server, for backup. This could be achieved by an alias. Store them in mbox format. Use newsyslog to rotate it over time. UPDATE: this strategy is mentioned in Scenic BGP Route | TechSNAP 137 at about 0:47:30. As part
Using mbox for mail backup Read More »
My mail server of choice is Postfix. I’ve been using it since 1992. It is what I install on all my servers. But that is going go change today. I just installed nullmailer on my DHCP server. When your machine just sends outgoing email, just as notices, you don’t need a full blown MTA. Something
Using nullmailer instead of a full blown mail server Read More »
I use FreeBSD Jails. I use them a lot. I have jails for websites. I have jails for regression testing, mail servers, OpenVPN servers, etc. I like jails for many reasons. One of which is being able to create a new jail which is pretty much identical to another jail, except for a few things.
Using ezjail-admin archive to create a new jail, almost like an existing jail Read More »
Following on from the StartCOM verus Apple issues I mentioned yesterday, I have created a new 4K certificate from StartCOM. Apple has no problem with that certificate. I was in the process of setting up some test servers: Dovecot with a 2048-bit cert Dovecot with a 4096-bit cert Cyrus with a 2048-bit cert Cyrus with
One StartCOM cert works; the other does not Read More »
I decided to set up some of my mail servers to require certification authentication on the submission port (587). In my case, I want to forward mail from my server at home to my public servers out there on the Internet. I don’t want just anyone to be able to submit mail here, so the
Postfix client certificate verification Read More »
NOTE: this post title is inaccurate. It was not until later that I discovered the problem was related to 4908-bit certs, not 4096-bit certs. I appear to have found a bug with OSX and iOS. Neither one can handle a 4096-bit certificate by StartCom. Changing to a 2048-bit cert allowed the connection. I have not
mail.app on Apple OSX and IOS fail when connecting to 4096-bit StartCOM certificates Read More »