I’ve been using Bacula since early 2004. I’ve been using FreeBSD since 1998. Jails are a relatively newcomer. I starting using it later in 2004. But it’s only recently that I’ve started using them intensively. Backups are always a touchy subject. With ezjail, the files you need to backup are greatly reduced. You’re not backing […]
ezjail-jail: making a full backup of a FreeBSD jail with Bacula Read More »
I’ve taken to the concept of sending a copy of each incoming email to a second server, for backup. This could be achieved by an alias. Store them in mbox format. Use newsyslog to rotate it over time. UPDATE: this strategy is mentioned in Scenic BGP Route | TechSNAP 137 at about 0:47:30. As part
Using mbox for mail backup Read More »
My mail server of choice is Postfix. I’ve been using it since 1992. It is what I install on all my servers. But that is going go change today. I just installed nullmailer on my DHCP server. When your machine just sends outgoing email, just as notices, you don’t need a full blown MTA. Something
Using nullmailer instead of a full blown mail server Read More »
I use FreeBSD Jails. I use them a lot. I have jails for websites. I have jails for regression testing, mail servers, OpenVPN servers, etc. I like jails for many reasons. One of which is being able to create a new jail which is pretty much identical to another jail, except for a few things.
Using ezjail-admin archive to create a new jail, almost like an existing jail Read More »
Following on from the StartCOM verus Apple issues I mentioned yesterday, I have created a new 4K certificate from StartCOM. Apple has no problem with that certificate. I was in the process of setting up some test servers: Dovecot with a 2048-bit cert Dovecot with a 4096-bit cert Cyrus with a 2048-bit cert Cyrus with
One StartCOM cert works; the other does not Read More »
I decided to set up some of my mail servers to require certification authentication on the submission port (587). In my case, I want to forward mail from my server at home to my public servers out there on the Internet. I don’t want just anyone to be able to submit mail here, so the
Postfix client certificate verification Read More »
Last week, while at EuroBSDCon in Malta, I noticed that one of my servers had the wrong time. It was Bacula who told me, through this message in one of the backup jobs: 28-Sep 21:59 nyi-fd JobId 144899: DIR and FD clocks differ by -5 seconds, FD automatically compensating Fixing the time I connected to
different times despite running ntpd Read More »
I have a number of things I want to get done in the short term: remove the mail server on my gateway box at home and start using a mail server on an internal box Configure my external mail servers (out there on the Internet) to use TLS when talking to each other Configure those
My ZFS system hits a high load average every week during its scrub. Here is what top looks like after I pressed i and then S: last pid: 42049; load averages: 3.78, 3.26, 3.42 up 18+13:47:14 11:43:01 220 processes: 3 running, 216 sleeping, 1 waiting CPU: 7.5% user, 0.0% nice, 12.8% system, 1.2% interrupt, 78.5%
ZFS system hits high load during scrub Read More »
In your named.conf, you will find this: I have always turned that on. I like to use my upstream hosts. Today, I turned it of, because of this: $ host lkjsdf lkjsdf has address 199.101.28.20 Host lkjsdf not found: 3(NXDOMAIN) What’s that IP address? That’s not relevant, but it is important. It’s the hostname of
named and forwarding Read More »