How to configure OpenDKIM on Linux with Postfix and setup bind zonefile

This guide assumes you have a working Postfix server and want it to sign with DKIM. There are a few things we have to understand to make all of this work though, which require you to be familiar with DNS as well. 1.) Install OpenDKIM apt install opendkim systemctl enable opendkim 2.) Edit /etc/opendkim.conf Syslog yes SyslogSuccess yes Mode&nbs........

Debian Ubuntu 10/11/12 Linux how to get tftpd-hpa server setup tutorial

apt install tftpd-hpa #change TFTP_ADDRESS to by setting address to 192.168.1.1:69 or the IP you need, otherwise it will listen on all IPs and interfaces which could be a security risk. # edit /etc/default/tftpd-hpa TFTP_USERNAME="tftp" TFTP_DIRECTORY="/srv/tftp" TFTP_ADDRESS="192.168.1.1:69" TFTP_OPTIONS="--secure"........

ImageMagick error convert solution - convert-im6.q16: cache resources exhausted

convert-im6.q16: DistributedPixelCache '127.0.0.1' @ error/distribute-cache.c/ConnectPixelCacheServer/244. convert-im6.q16: cache resources exhausted `/tmp/magick-27777Al6FGY7dhyKt10' @ error/cache.c/OpenPixelCache/3984. convert-im6.q16: DistributedPixelCache '127.0.0.1' @ error/distribute-cache.c/ConnectPixelCacheServer/244. convert-im6.q16: cache resources exhausted `/tmp/magick-277772Y_-pJnMdT2r1' @ error/cache.c/OpenPixelCache/3984. convert-im6.q16: Distr........

REFUSED unexpected RCODE resolving bind/named error

Are you getting this error when trying to connect to a site/domain/service and then you checked your router/nameserver's logs to see what's wrong? You may see something like this: named[3025898]: REFUSED unexpected RCODE resolving This is not usually an error with named or bind, at least not on your end but NORMALLY this is an issue with the remote nameserver. A lot of times this is a misconfigured remote nameserver. A classi........

Postfix / sendmail config for DKIM, SPF and DMARC Tutorial Guide E-mail Delivery for Hotmail.com Gmail.com and More HowTo

This will be the goto to help solve e-mail delivery issues and talk about many practical issues that happen between developers, admins and scripts that send e-mail and do things that may not be acceptable or cause deliverability problems. Sendmail Stuff Edit /etc/mail/sendmail.mc The problem is that if you send directly out from the server using the mail function, the Return-path of the e-mails will be username@thehostnameoftheserver.com. Let........

Linux dhcp dhclient Mint Redhat Ubuntu Debian How To Use Local Domain DNS Server Instead of ISPs

If you are running a local DNS server like named/bind and don't want to use the ISPsupplied DNS servers that are announced via a DHCP request (using dhclient) then the solution is simple. The reason should be obvious, but normally running your own DNS server will provide a more reliable, and fast DNS response and you won't have to worry about filtering as much (unless your upstream filters or proxies outgoing DNS requests). Edit /etc/dhcp/dhclient.conf........

Linux Ubuntu Mint how to check nameservers when /etc/resolv.conf disabled solution

You'll notice that /etc/resolv.conf contains dire warners on most Linux Desktops. # This file is managed by man:systemd-resolved(8). Do not edit. # # This is a dynamic resolv.conf file for connecting local clients to the # internal DNS stub resolver of systemd-resolved. This file lists all # configured search domains. # # Run "resolvectl status" to see details about the uplink DNS servers # currently in use........

Translating "cisco" ...domain server (255.255.255.255) Cisco Router/Switch Solution

If you are in enable mode and make a typo, the router will treat it as a domain name and try to resolve it, and if it can't resolve it, you'll have to wait until it times out. Here's how to solve the Translating domain server error in Cisco Enter this in config mode: no ip domain-lookup Be sure to sav........

Docker Tutorial HowTo Install Docker, Use and Create Docker Container Images Clustering Swarm Mode Monitoring Service Hosting Provider

The Best Docker Tutorial for Beginners We quickly explain the basic Docker concepts and show you how to do the most common tasks from starting your first container, to making custom images, a Docker Swarm Cluster Tutorial, docker compose and Docker buildfiles.........

EFI PXE grub2 Howto guide for Linux EFI PXE Booting on Debian, Mint, Ubuntu, RHEL

Just a quick note and warning is that if you are testing to see if EFIPXE booting works on a VM, MAKE SURE it actually works. For example Iinitially tested using my Distro's QEMU 2.5+dfsg-5ubuntu10.46 and ovmf BIOS firmware (OVMF supports EFI). However, I found on old versions of QEMU (like 2.5), EFIbooting with GRUB NEVER works so it may appear that you have made a mistake when everything is fine when you boot a physi........

Juniper JunOS Command Overview and Howtos Switch, Router, Firewall Tutorial Guide

Enable "cli" mode equivalent in JunOS cli Configure Mode configure So rather than going to the console on a Cisco switch and typing "enable" and then "conf t", the equivalent in JunOS is "cli" and "configure". How Do You Apply Changes You've Made? You can make all kinds of changes to the switch, but remember they are not........

How To Install OpenProject on Centos 7 Step-by-Step Guide

There are a few caveats that may not be obvious to everyone so I am going to cover them here but keep this in mind before starting. Before starting install epel or you will be missing tesseract: yum -y install epel-release #1) When you specify your SSL certificate with a full path, it really needs to exist where you tell it to (including the default location of /etc/ssl/certs and /etc/ssl/c........

Linux Console Login Screen TTY Change Message

This is all controlled by /etc/issue You can basically enter anything in there that you like, but there are preset variables that are mentioned at the end of the page that discuss this. Some examples of /etc/issue: Centos 7: S Kernel r on an m Ubuntu 16.04: Ubuntu 16.04.6 LTS n l You can also insert any of t........

Wordpress overwrites and wipes out custom htaccess rules and changes soluton

cat .htaccess RewriteEngine On RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . index.php [L] I keep reading there is a "# BEGIN WordPress" and a "# END WordPress" in the wordpress htaccess above but there is clearly not. Even more strange is that my permissions are just 444 (read only). so i changed it........

Apache htaccess and mod_rewrite how to redirect and force all URLs and visitors to the SSL / HTTPS version

It is really simple using .htaccess with mod_rewrite. Here is all you need: RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://site.com/$1 [R=301,L] Another more graceful way is to use the %{SERVER_NAME}variable to make it dynamic. Just be careful that the server name will always match what you expect. (eg. if you are doing load balancing or clustering what if the server name may be somethi........

ImageMagick Convert PDF Not Authorized

You'll have to edit the policy.xml file to fix this: convert -density 300 output.pdf agreement.jpg convert.im6: not authorized `output.pdf' @ error/constitute.c/ReadImage/454. convert.im6: no images defined `agreement.jpg' @ error/convert.c/ConvertImageCommand/3044. sudo vi /etc/ImageMagick*/policy.xml Change policy domain="coder" rights="no........

Cisco Unified Communications Manager 12 Install Errors on Proxmox/KVM

The strange thing is that usually the first install or two will work on any new machine but then it suddenly won't. I had this experience on QEMU 2.13 on a different machine. There is something finicky or buggy about the CUCM installer even when choosing the same virtual hardware specs. qemu-kvm command: /usr/libexec/qemu-kvm -version QEMU PC emulator version 0.12.1 (qemu-kvm-0.12.1.2-2.506.el6_10.1), Copyright (c) 2003-2008 Fabrice Bellard ........

the sign-in method you're trying to use isn't allowed. For more info, contact your network administrator - solution for active directory

This is usually because the Group Policy forbids that user or group from logging in. run "gpmc" (not "gpedit.msc" as that is for local computer settings when you are not using Active Directory) or go to Administrative Tools and Group Policy Management. Edit the default domain policy like below........

SSH proxy/command in the background or from cron script

If you have an SSHproxy that you need to run automatically from cron you will need it in the background to work. ssh -N -D 22000 user@domain.com Basically the -N let's it continue running in the background.........

Cisco Router Setup Guide and Tutorial Howto With Commands and Examples

In most of the Cisco router IOS I find the ports like ge0/0 ge0/1 and ge0/2 or whatever your ports are down. They will not even give you a link light. So one of the first tasks should be getting the port you are working with up. In my case the first goal is often connectivity with the LAN and WAN. LAN = your local area network (eg. in the office/home ) WAN= your ISP/public internet (eg. fiber/cable/dsl/ethernet).........

letsencrypt certbot error "Unable to find a virtual host listening on port 80 which is currently needed for Certbot to prove to the CA that you control your domain. Please add a virtual host for port 80."

./certbot-auto --apache certonly Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator apache, Installer apache No names were found in your configuration files. Please enter in your domain name(s) (comma and/or space separated) (Enter 'c' to cancel): yourdomain.com Obtaining a new certificate Performing the following challenges: http-01 challenge for yourdomain.com Cleaning........

X11 SSH Linux Forwarding Error

Jan 30 17:16:10 localhost sshd[25385]: error: Failed to allocate internet-domain X11 display socket. The solution for me on the server side was the following in sshd_config: AddressFamily inet *Remember to restart sshd and also reconnect from the client side. Ihad all the normal X11 settings on the server but it just stopped........

Using Microsoft's Group Policy Management Editor (GPME) To Change Default Permissions and Internet Explorer Security Settings

The defaults in Windows 2016 server leave clients crippled so they can't even download basic files or software. But Group Policy Management Editor comes to our rescue! Use cmd or Powershell and run: gpme.msc Choose your domain/computer and then navigate like below and create a new menu entry for IE11 or whatever your version is. Don't be worried if the highest version is IE10 it means that it applies to IE10 AND above.........

Linux named / bind how to dump, view and clear the cache!

Do you hate it when your ISPhas old cached records because of a high TTLon the DNS record of the relevant domain? In plain English this means you often can't connect to a site or service because your ISP's DNS servers haven't gotten word of the new IP address (probably because they haven't checked). There are also some that are notorious for ignoring TTL and not updating records for days! But if you are lucky and smart enough to have your own Linux based DNS se........

Centos 6 / 7 / 8 How To Change Default nameservers in /etc/resolv.conf when using DHCP / dhclient

First we need to create dhclient.conf if it doesn't exist or edit it: vi /etc/dhclient/dhclient.conf #add this line at the top add the IPs as commas they will be the highest priority nameservers and whatever your ISP gives you will be used after these one (good for DNS backup) prepend domain-name-servers 127.0.0.1,10.10.25.8; After you restart your network or run dhclient again you should see the contents of........

What DNS Options Does Active Directory Offer in Windows Server 2008,2012,2016 ?

What Is Active Directory? Active Directory is essentially an enhanced, centralized database with a set of objects that make user management, authorization, and data management simpler. Active Directory is synonymous with "Domain Controllers" where a single "domain" often consists of multiple sites and members of the domain. Multiple domains can also be joined to belong to a tree ( a collection of domains). And the highest layer is the forest whi........

systemd management using systemctl and journalctl to check systemd logs

systemd is like the service manager for your Centos and other modern Linux distributions (including Debian/Mint/Ubuntu) allows you to enable services, stop them, restart them, check their status and even reboot your system. The key commands or arguments you will use with systemctl are the following: Unit Commands: list-units [PATTERN...] List loaded units &nbs........

Firefox An error occurred during a connection to some-ip-or-domain. SSL peer reports incorrect Message Authentication Code. Error code: SSL_ERROR_BAD_MAC_ALERT Solution

An error occurred during a connection to some-ip-or-domain. SSL peer reports incorrect Message Authentication Code. Error code: SSL_ERROR_BAD_MAC_ALERT The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. **Solution** Go to about:config........

Cannot install moodle

After starting the install it stalls here: admin/index.php?cache=0&agreelicense=1&confirmrelease=1&lang=en If you manually refresh you get a Plugins check screen: Installation System Moodle second step fails just blank screen: https://domain.la/user/editadvanced.php?id=2 Solution: give up and choose something else it shouldn't be thi........

prosody xmpp server "Failed in all attempts to connect to proxy.eu.jabber.org"

Aug 13 13:46:33 s2sout2d45040 info Failed in all attempts to connect to proxy.eu.jabber.org Aug 13 13:46:33 s2sout2d45040 info Sending error replies for 1 queued stanzas because of failed outgoing connection to proxy.eu.jabber.org No clue why it tries to use a proxy not explicitly specified. This could be because the proxy specified for the domain fails when someone is trying to se........

VMWare ESXi 6.7 SSH/PowerShell CLI Commands

[root@localhost:~] BootModuleConfig.sh echo host-ind nfcd........

gmail.com address failing in Postfix

Aug 10 01:11:54 mailserver postfix/smtp[6180]: 020AE17C2BD1: to=, relay=none, delay=0.29, delays=0.28/0/0/0, dsn=5.4.4, status=bounced (Host or domain name not found. Name service error for name=gmail.con type=A: Host not found) A user complained that their e-mails weren't being delivered but they actually made a small typo and used gmail.con so it wasn't working as expected of course........

Debian Mint Ubuntu compiling xmr-stak

sudo apt-get install libcurl4-openssl-dev git build-essential autotools-dev autoconf libcurl3 sudo apt-get install libcurl4-gnutls-dev git clone https://github.com/wolf9466/cpuminer-multi sudo apt-get install cmake libpthread-* libmicrohttpd-dev libssl-dev libhwloc-dev git clone https://github.com/fireice-uk/xmr-stak-cpu.git make install cd bin chmod +x xmr-stak-cpu ./xmr-stak -O xmr........

[warn] VirtualHost 10.2.5.101:443 overlaps with VirtualHost 10.2.5.101:443, the first has precedence, perhaps you need a NameVirtualHost directive

[root@thetor2017 conf]# service httpd restart Stopping httpd: [ OK ] Starting httpd: WARNING: MaxClients of 3000 exceeds ServerLimit value of 300 servers, lowering MaxClients to 300. To increase........

VMWare 6.7 VCSA VSphere ESXi Management SSO Install Guide on Linux using the CLI

#mount the VCSA DVD mount /dev/sr0 /mnt/cd #alternatively you could mount the iso directly mount -o loop vcsa.iso /your/mount/path #for this purpose we are using the CLI installer on Linux cd /mnt/cd/vcsa-cli-installer/lin64 #no it's not going to be that easy you can't just run vcsa-deploy like that you need to use a template or configured .json file ./vcsa-deploy Usage: vcsa-deploy [-h] [--version] [--supported-deploymen........

mail command line examples of how to send an email using Linux / Unix and the Bash Shell or Scripting

A simple way that may work for a lot of people who just need basic output for their scripts or daemons to announce an action is this: echo "body or message" | mail -s "realtechtalk.com" user@domain.com If you want to send a text file as the body just do this instead: mail -s "realtechtalk.com" user@domain.com < /tmp/sometxtfile.txt These are some ve........

named [FAILED] - zone 1.168.192.in-addr.arpa/IN: not loaded due to errors. - bind error solution

Centos when copying old files and restarting it seems load everything fine and then says [FAILED] with no log or other message. service restart named named [FAILED] Check more thoroughly you may have missed the error if you have lots of zones! service named restart|grep error zone 1.168.192.in-addr.arpa/IN: not loaded due to errors. zone 2.168.192.in-addr.arpa/IN: no........

Maximum number of connections from user+IP exceeded (mail_max_userip_connections=10) Dovecot Solution

This happens because Dovecot limits the maximum IMAPconnections per IPto just 10. This may be fine for a single client side IPbut if an entire office or multiple users are behind one IPor a single heavy user is active then you will get bizarre errors in your e-mail clients such as "Password Incorrect" or similar in Thunderbird. It won't be obvious on the client side as to what the problem is and they will probably just think the server is misconfi........

No comments are allowed here Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request.

Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, root@localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. Apache/2.2.15 (CentOS) Server at testdomain.com Port 80........

SMF Forums / Simple Machines Forums Not Displaying Images Theme or Styles Properly using 127.0.0.1

This is one thing that has me wondering about SMF. It is apparently a known issue but in the latest version and new install nothing looked right because it was using http://127.0.0.1 to find everything! How on earth would it ever do this or think it is normal? Excerpt of crazy html code it produces that causes the issue: ........

Apache htaccess Custom ErrorDocument not working properly for root home page 403 Error Issue and Solution

So I have a domain "testdomain.com". Inside test domain.com's root is the following .htaccess: Options +FollowSymLinks -Indexes ErrorDocument 403 /launch/index.html Order Deny,Allow Deny From All Allow From 192.168.1.2 When you visit anything other than root things work fine. Eg. if you visit http://testdomain.com/somedirfile.html It will show the right error in /launch/........

Installing SSL Certificate with Chain Intermediary CA File

Some of the cheaper or newer SSL suppliers will require this to work properly (otherwise you may be prompted that the cert is invalid when it's not the case but it will certainly scare off your users!). In the Apache vhost conf for the domain here is what you add: SSLCACertificateFile /path/to/your/cafile.pem Here is a full example of an SSL Vhost config in Apache using a CA Certificate file ........

dhcpd.conf how to secure so only known and allowed clients will be given dhcpd IP address leases

It's really simple and just a matter of the following line within the subnet declaration. deny unknown-clients; See example below: subnet 10.25.20.0 netmask 255.255.255.0 { range 10.25.20.11 10.25.20.254; deny unknown-clients; option routers 10.25.20.10; option domain-name-servers 208.67.222.222; ........

Linux how to whois query other gTLDs such as .club solution

whois in Linux is incredibly out of date and does not seem to recognize most new TLDs domains, but there is a quick and easy tip/hack/tweak for this. An example of new TLD's site as .review .site .club whois somesite.club No whois server is known for this kind of object. bash to the rescue Now I did try to apply this in .bashrc but DONOT! Ithink the * wil........

How to verify SSL SHA-1 Certificate Fingerprnit Signature of your mail/web server to avoid hijacking/man-in-the-middle attacks

This is especially helpful if you run your own servers. If you are presented with an error message or warning that the signature has changed or does not match the IP/domain you are connecting to you always want to verify manually. So your e-mail/web client will show you an SHA-1 fingerprint like this: "Could not verify this certificate because the issuer is unkown" or other reasons such as a mismatch in IP/domain. It will also show you........

ENOM how to do a 301 redirect to another domain/site

Just manage your domain in Enom and choose "Host Records" Choose "URL Redirect" as the record type. As shown below choose the URL and add "?redir_mode=301" to the end of it. To test the 301 and make sure it is a 301 (unlike Godaddy which really did a 302 when I chose 301!). ........

ENOM TRANSFER passwords do not match - solution

The "passwords do not match" implies or makes it appear that your auth code is wrong but actually you have to click "View additional settings" and then see there are 2 password fields to manage the domain once it is transferred (the password is typed twice for confirmation). Simply fill out a password twice or remove the first password fields contents and all will be well.........

Linux how to check http headers using bash/curl for SEO

What code is being returned or where is a URL/domain redirecting you to? Curl makes this easy and simple: curl -Iyourdomain.com........

K9 Mail Android Cannot See or View E-mails Disappear after reading - with Dovecot server. Solution

This actually only happened after an e-mail server ran out of space due to run away log files. Normal Desktop clients were not affected. It appeared to be a bug in K9 mail but even reinstalling/wiping all settings did not fix it (read e-mails would still not reappear). This is moreso a bug in Dovecot where it probably messes up the index files. How do you fix this in Dovecot/your e-mail server? You need to delete the do........

Apache Centos Stopping httpd: [ OK ] Starting httpd: [Wed Jun 29 19:29:44 2016] [warn] _default_ VirtualHost overlap on port 80, the first has precedence [Wed Jun 29 19:29:44 2016] [warn] _default_ Virtual

Stopping httpd: [ OK ] Starting httpd: [Wed Jun 29 19:29:44 2016] [warn] _default_ VirtualHost overlap on port 80, the first has precedence [Wed Jun 29 19:29:44 2016] [warn] _default_ VirtualHost overlap on........

Apache Vhost HowTo Serve Same Content using a different domain and IP

There are a few ways of doing this and all basically involve using the reverse proxy or "ProxyPass" feature of Apache to accomplish it. 1.) Create a normal vhost and simply symlink the root directory of the site you want to mirror. Eg. originalsite.com and newsite.com /vhosts/originalsite.com/httpdocs You would symlink like this: ln -s /vhosts/originalsite.com/httpdocs vhosts/originalsite.com/........

Redirect www host to non-www Linux Apache modrewrite

The below forces all request to your domain to go to the main non-www root domain. Updated code: RewriteCond %{HTTP_HOST} !=domain.com RewriteRule ^(.*)$ https://newurl.com/subdir/$1 [R=301,L] If you don't want it to go to a subdirectory: RewriteCond %{HTTP_HOST} !=domain.com RewriteRule ^(.*)$ https://newurl.com/$1 [R=301,L] Bad code: This code is bad beca........

Force SSL for all URLs Apache htaccess modrewrite

The best way is as below in .htaccess using modrewrite, any request that is not SSL will be redirected to https://domain.com and the exact same URL RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://domain.com/$1 [R=301,L]........

Location of cPanel apache access logs

It is very handy to remember this and nice that the logs for all domains are in a central location: /usr/local/apache/domlogs........

openvz yum problem Centos 6.5 cannot find file on mirror:

#solution Edit /etc/yum.repos.d/openvz.repo For the first two entries comment out #mirrorlist and uncomment #baseurl and then it worked openvz yum problem Centos 6.5 cannot find file on mirror: yum update Loaded plugins: fastestmirror Determining fastest mirrors * openvz-kernel-rhel6: mirrors.ustc.edu.cn * openvz-utils: mirrors.ustc.edu.cn base ........

yum how to blacklist and exclude mirrors

vi /etc/yum/pluginconf.d/fastestmirror.conf exclude=.hk,.cn You could also use specific domains but as you can see above we are blacklisting all Hong Kong and Chinese mirrors in this example.........

cPanel How to set SSL and Dedicated IP in cPanel

Account Functions -> Change Site's IP Address Choose the domain and then click "Change" Choose the new IP 1.) Setup SSL Certificate in cPanel Click on "SSL/TLS Manager" under the "Security" section. 2.) Under " Private Keys (KEY)" Click "Generate, view, upload, or delete your private keys." Choose "Key Size: 4096........

Postfix how to secure outgoing authenticated e-mails for privacy and hide the IP address, mailer and other things

The most common solution is to use the /etc/postfix/header_checks but this is a big problem. Why is header_checks a problem? Because it does it to all mail whether incoming or outgoing and whether authenticated or not. We of course want as much header information for incoming as we can get for many reasons but many organizations want to secure and make their mail clients as secure as possible. I adapted this solution to the client's custom config, they are configur........

.htaccess mod_rewrite preserve access to custom query string solution

I struggled with this for awhile because sometimes you have rewritten URLs that you want to pass a query string but most of the info and examples do not support this. Take a typical example like this: RewriteRule ^(.*)-(.*)-(.*) /?module=$3&id=$2 You need to add the QSA flag to make it work like below: RewriteRule ^(.*)-(.*)-(.*) /?module=$3&id=$2 [QSA] The QSA preserves the original query string but also appends it wit........

SolusVM error error: Failed to create domain from /home/kvm/kvm101/kvm101.xml error: cannot open file '/dev//dev/kvmcontainer/kvm101_img': No such file or directory

error: Failed to create domain from /home/kvm/kvm101/kvm101.xml error: cannot open file '/dev//dev/kvmcontainer/kvm101_img': No such file or directory This is caused by what we consider a quark in SolusVMthat Ihelped a client with. SolusVMhas as config for the "LVMvolume name" and does not enforce any convention. Naturally most technical people would use the actual path eg "/dev/kvmcontainer". However th........

Wordpress Security Hole, Plug it by manually installing themes and plugins

It's always bothered me how Wordpress basically forces the user to provide their hosting credentials to install themes and plugins. How do know for sure the data is not being saved, intercepted and being provided backdoor access to the NSA or other agencies or even just being misused by others with access? Here's how to close the security hole above and if you're already given Wordpress your credentials make sure you change everything associated it with it. Eg. change your........

CPanel Log File Locations for access_log,error_log, mysql

All Errors (CPanel does not report by domain, but puts everything in a single log which Ithink is a bit silly and annoying): /usr/local/apache/logs/error_log Access_Logs They are found within the home directory of the site user eg.: /home/admin/access-logs/yoursite.com MySQL Logs /var/lib/mysql/yourhostname.err........

Apache SNI is not needed what is the issue?

Iread this article and still don't understand the issue. If I understand correctly the client negotiates after the first SSLconnection and then gets the correct hostname and thus correct certificate. http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI To their credit I know I'm not using SNIbecuase Iget this message in the Apache log :) [warn] Init: You should not use name-based virtual hosts in conjunction with SSL!! B........

CPanel How To Create/Edit Default Nameservers

CPanel ->Basic cPanel &WHMSetup At the bottom you'll see them, set the nameservers you want to use and the corresponding A record if needed. Then all new domains will use those settings/nameservers. It's strange that there's no section for this specifically.........

GoDaddy How To Register and Create/Use Your Own DNS Name Servers

http://support.godaddy.com/help/article/668/registering-your-own-nameservershosts?pc_split_value=1 Log in to your GoDaddy Account. Click on "My Account" at the top left. Click on "Domains". Click on the "Launch" button for the domain you want to create the nameservers for. Find........

CPanel How To Add A Domain Name Solution "Sorry, you must enter a domain. Please try again."

Add a DNS Zone Results of adding zone Sorry, you must enter a domain. Please try again. Fill this out at the top (Imissed it) Domain Selection Ip Domain The issue was I didn't realize the form above had to be used,I thought it should work where you click on the user, domain and then click on the submit button and you'd go to the next step. But it doesn't, you need to........

CPanel domain not working properly: http://vps.thedomain.com/domainnotknown.html Solution

The Cause Basically it's usually because your Cpanel has new IPs and the old IPs it knows are no longer available/working/valid. The solution is to change the site's IP but you may run into issues for various reasons. Here is what I encountered below. It redirects there even though public_html is empty and doesn't have any index or htaccess redirect. --- This issue happened after a CPanel migration, the site is bein........

How to use the Linux mail command to attach a file

The key here is to use the "uuencode" command but note that we specify the file name twice (this must be done at least on Centos or it won\'t work). The first file.zip is the actual file we want to send. The second file.zip i........

stat=Deferred: 451-Non-existent domain mailserver.com

Jul 11 15:20:58 tor sendmail[9617]: r6AKjOD07: to= mailserver.com was the hostname of the server, sendmail sends this by default and many mailservers will reject mail to a hostname that does not resolve or exist. The easiest way is just to change the hostname and make sure it does resolve to something. I read there is a way in sendmail.mc to manually set a hostname but I never got it working: vi /etc/mail/sendmail.mc define(`confDOMAIN........

Directadmin Log File Locations

This is a handy link and list of all the relevant Directadmin log files and related servers. http://help.directadmin.com/item.php?id=11 DirectAdmin: /var/log/directadmin/error.log /var/log/directadmin/errortaskq.log /var/log/directadmin/system.log /var/log/directadmin/security.log Apache:........

Login and download all files script

This is very handy if you're too busy and don't have time to download whatever files you need. The -D specifies the domains allowed, this is because I specified -H which means foreign hosts are allowed, if you don't restrict them you'll end up going to the whole internet via ads and other links just like a search Engine would follow. -l 0 specifies to go deep, to as many levels as possible/as exist. -e robots=off is important because robots.txt often says you can't vie........

Setup PXE Boot using Centos and dhcpd, tftp and syslinux

This is something I often setup for clients because it's very helpful for people in datacenters, this allows custom OS installs on demand, you can customize it more by using kickstart etc.. but here's a base I use before customizing more: This little script below will install everything you need to get booting by PXE Linux. It also assumes you set a local IP (be sure not to overwrite your existing IP) on eth0:0 (note the :0) as 192.168.1.10 and it........

Error code: sec_error_unknown_issuer Solution Valid SSL Certificate Throwing Error in Firefox

So you've just purchased your SSL cert, renewed it and installed it or maybe you've had it installed and working fine all the time with all other browsers but you've upgraded to a recent version of Firefox and suddenly get the warning "Error code: sec_error_unknown_issuer" error. This is terrible since if you bought an SSL cert, you are most likely using it for trust purposes for your business and obviously that message will scare away most potential customers.........

How To Install CPanel

wget -N http://httpupdate.cpanel.net/latest;sh latest That one command above will do it all (and it takes a long time to install/compile). After that you can access CPanel with your root login information by visiting https://yourdomain-or-ip.com:2087 I personally don't like CPanel (bloated, full of bugs, no shared SSL, difficult to use etc..)but I admit it's easier to install than........

LOG: MAIN PANIC failed to expand condition "${if eq {$authenticated_id}{}{0}{${if eq {$sender_address}{$local_part@$domain}{0}{${if match{$received_protocol}{N^e?smtps?a$N}{${perl{checkbx_autowhitelist}{$authenticated_id}}}{${if eq{$received_prot

I experienced this with CPanel's Exim after an auto-update (a Google of this error produces lots of complaints with few clear solutions). In this case I'll put the solution at the top. Run /scripts/buildeximconf to rebuild the Exim config and it should be fine after that. mail -vs "from test" user@dest.com < .bash_history LOG: MAIN cwd=/root 4 args: send-mail -i -v user@dest.com LOG: MAIN &........

postfix lopback error solution

This is the mail system at host mail.postmail.com. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to If you do so, please include this problem report. You can delete your own text from the attached returned message. &........

How to view UDP and other protocol connections?

netstat is weak and can't show udp connections and most other protocols, use "ss" which is what netstat should have been: The "-u" switch stands for udp, here's a list of other options: Usage: ss [ OPTIONS ] ss [ OPTIONS ] [ FILTER ] -h, --help this message -V, --version output ver........

Apache High CPU Usage Enable Mod_Status Guide Solution - Find Cause of High CPU Usage Script/Domain

mod_status is a great way to track down the source of high CPU usage and to find what vhost/script is the cause of it. It gives you a live view of bandwith usage, CPU usage, and memory usage broken down by domain/vhost and script/URI. Enable mod_status vi /etc/httpd/conf/httpd.conf ExtendedStatus On SetHandler server-status Order Deny,Allow Deny from all All........

Yahoo Mail (email) DNS Server Out Of Date Problems

I don't expect this to be solved soon but some of Yahoo's DNS servers are out of whack. I changed the IPs of some nameservers of some domains and now most Yahoo users can't e-mail to those domains! As you can see below by the "No MX or A records for mychangedomain.com", now Yahoo's DNS/mailserver DNS cache is wrong. You would think they would at least have cached the old incorrect records, but instead for some reason their DNS cache has no entry and doesn't seem........

Linux - mptbase/MPT Fusion LSI Logic Error mptbase: ioc0: ERROR - didn't initialize properly! (-1)

kernel 2.6.27.54 Fusion MPT base driver 3.04.07 Copyright (c) 1999-2008 LSI Corporation Fusion MPT SPI Host driver 3.04.07 mptbase: ioc0: Initiating bringup mptbase: ioc0: WARNING - Unexpected doorbell active! mptbase: ioc0: ERROR - Doorbell ACK timeout (count=4999), IntStatus=80000001! mptbase: ioc0: ERROR - Diagnostic reset FAILED! (102h) mptbase: ioc0: WARNING - NOT READY! mptbase: ioc0: ERROR - didn't initialize proper........

Enable SPAMASSASSIN on Postfix in 5 minutes

Centos 5 Postfix and SPAMASSASSIN Tutorial yum install spamassassin chkconfig spamassassin on vi /etc/mail/spamassassin/local.cf ############## #required_hits 5 #report_safe 0 #rewrite_header Subject [SPAM] #5 is the least restrictive (means only the most obvious SPAM is caught. 0 is obviously the most restrictive/sensitive and would have lots of false positives require........

Postfix header_checks using regexp and multiple lines

I'm posting this because it wasn't easy or obvious how this would be accomplished and the man page leaves it to guesswork. Multi-line body_checks Example 1 /........

Plesk Get List of E-mail Users & Aliases

When migrating away from Plesk I couldn't figure out an easy way to get a straight list of all e-mails, but here is where I found the solution: http://nakuls77.wordpress.com/2008/08/30/details-of-email-ftp-database-users-from-psa-database/ mysql> SELECT mail.mail_name, accounts.password, domains.name FROM mail, accounts, domains WHERE domains.id=mail.dom_id AND mail.account_id=accounts.id; mysql> SELECT CONCAT(mail.mail_name,’@’,domains.name) AS Em........

Understanding /etc/aliases from sendmail when using with postfix or other MTA's

understanding /etc/aliases *remember to apply changes you need to run "newaliases" after editing /etc/aliases one thing I don't get is that it doesn't allow you to specify the whole e-mail address on the left-hand side eg: yourfullemail@domain.com: someotheremail@domain.com postalias: warning: /etc/aliases, line 109: name must be local (if you try the above) It works more like this: your........

Apache Forbidden You don't have permission to access / on this server.

Forbidden You don't have permission to access / on this server. [Sun Jan 23 15:28:12 2011] [crit] [client 96.44.31.12] (13)Permission denied: /www/vhosts/domain.com/httpdocs/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable Solution I've done a chmod 755 .htaccess and index.php and restarted Apache That wasn't the only issue, the issue was the httpdocs direc........

named/bind cannot find zone file, load zone files without specifying full directory path/loading master file genuine.com.zone: file not found

genuine.com/IN: loading master file genuine.com.zone: file not found _default/genuine.com/IN: file not found I always found it silly that no one really talks about this and apparently many like me and even control panels like Plesk were still using hard paths. I always thought "why can't I just specify the name of the zone file and have bind find it". Surely the default search path must be /var/named or somewhere else but there is no such thing.........

Failed to save enabled features : The Suexec command on your system is configured to only run scripts under /var/www, but the Virtualmin base directory is /home. CGI and PHP scripts run as domain owners will not be executed.

Apache/httpd Failed to save enabled features : The Suexec command on your system is configured to only run scripts under /var/www, but the Virtualmin base directory is /home. CGI and PHP scripts run as domain owners will not be executed. This is because I never edited the Apache Config and Virtualmin config to reflect my new/current updated structure.........

Plesk: Backup Domains from the CLI - it's quicker

Plesk 8.6 CLI backup: /usr/local/psa/bin/pleskbackup domains domain.com This is a much better way of doing it and of course it can be scripted, it's a real pain to point, click and wait for Plesk to backup domains (and yes Iknow you could do all of them in a single client file but this is not desirable for my situation).........

Importing Plesk 8.6 Backup to Virtualmin: Validating migration file .. .. validation failed : XML::Simple Perl module is not installed

Importing Plesk 8.6 Backup to Virtualmin: Validating migration file .. .. validation failed : XML::Simple Perl module is not installed Solution is to install the correct module: perl -MCPAN -e 'install XML::Simple' Migrating a single domain works just fine, but it doesn't work with a full client backup containing multiple domains.........

Virtualmin/Webmin Postfix Error: The status of your system is being checked to ensure that all enabled features are available, that the mail server is properly configured, and that quotas are active ..

Virtualmin Postfix Error: The status of your system is being checked to ensure that all enabled features are available, that the mail server is properly configured, and that quotas are active .. A problem was found with your Postfix virtual maps : No map sources were found in the Postfix configuration .. your system is not ready for use by Virtualmin. ........

PHP CURL SSL won't work or connect

I spent so much time debugging this, most sites don't tell you a very important option to use with CURL and you will only find out this is the problem by running the PHP script from the command line you get the following output that shows the issue (I don't see any way to get this output from Apache itself). * About to connect() to ip.ip.ip.ip port 25000 * Trying ip.ip.ip.ip... * connected * Connected to ip.ip.ip.ip (ip.ip.ip.ip) port 25000 * succes........

How not to change an IP address in CPanel during a migration

/usr/local/cpanel/bin/swapip domain(s) It simply doesn't work, the Apache VHOSTS remain 100% unchanged, why does this script exist? I'm sure it would work from the control panel but I am locked out because my IP was changed and it doesn't match the CPanel license. I wish CPanel would make it easier to update the license IP. I even took it a step farther, I manually edited the vhosts and restarted Apache and it........

sed script to automatically update IPs in named/BIND and httpd/Apache

Always make a backup of the original file before trying this, I find this kind of thing when updating IPs etc.. to use a script. Where the old IP is "192.168.5.8" and the new IP is "10.10.5.8" sed -i s/192.168.5.8/10.10.5.8/g testdomain.org.db The -i with sed means "inline" meaning we edit the file directly, but without the -i we could just use >and output the results to another file or do whatever else we wanted.........

FUSE/Curlftpfs mount ftp account as drive partition in Linux

This is a great way to use your ftp server space, for example on your web hosting account (althoughI believe many hosts don't allow storage like this), but if you have a VPS/Dedicated Server etc.., this would be perfect. Imagine how easy it is to work with an ftp account that you can just mount as a normal partition or directory in Linux, it would be great for backups etc.. Name curlftpfs - mount a ftp host as a local directory Synopsis........

Unixbench Score on Core i5 750 with OpenVZ Kernel vs Xen/Openvz

This was unbelievable how much the Xen kernel slows things down, keep in mind both tests were done on the hostnode, one was with the Openvz-Xen hybrid kernel and the other was just OpenVZ. You can see the performance difference is nearly 300% better when not using the Xen kernel. OpenVZ-Xen Kernel Test Results (I was wondering what was wrong/so slow with my Core i5!) # # # # # #&n........

Canel Default VHOST DocumentRoot/Contents Directory is /usr/local/apache/htdocs

This can be very annoying and CPanel doesn't seem to document it, or it's not found or made as obvious as it should be. It's always funny when I find it more difficult to work with a control panel than to do everytihng manually without CPanel or even Plesk. So once again, the default serve path for contents is: /usr/local/apache/htdocs and this is especially applicable when accessing Apache by just an IP which is unbound to any domain at this point.........

Quick Tutorial On Starting A Web Site

Quick Tutorial On Starting A Web Site[b:3cef3c01b6]Step 1.[/b:3cef3c01b6] Purchase a Domain Name (eg. yoursite.com) [b:3cef3c01b6]Step 2.[/b:3cef3c01b6] Design your site using a program such as Microsoft Frontpage or Macromedia Dreamweaver. If you are unable or unfamiliar with doing this you may want to hire a company to create your site (many of them will handle each aspect of setting up your site). [b:3cef3c01b6]Step 3.[/b:3cef3c01b6] Host your site........

E-Mail Tip

E-Mail TipI just thought I'd give you guys a good tip about e-mail. It seems a lot of people like to use a Hotmail or ISP (eg. Telus) account for their e-mail but the problem is what happens if you switch ISPs, then your e-mail address no longer works and old friends might not be able to contact you. The same thing has happened for excite.com e-mail addresses where they just shut down. Whether you are a business owner or personal user can you afford to lose an e-mail........

How to avoid web content hijacking/copying/Force content to be accessed by only 1 domain name

This is something that happens a lot and it is very dirty, as you probably know each site is hosted on a certain IP address. Sometimes a domain is hosted by a single IP address and the IP address defaults to this very same domain. This means that if someone buys domain abcd.com and enters your IP address (the one of your website) as the A record, your content will show up on their domain as if it was their own. There is an easy way to prevent this by using .htacces........

Fake PR Pagerank Identification - How do you know/check/verify the real PR(Pagerank)?

Here is an example that I recently found, most PR checkers will say this domain is PR8 or will say "cannot analyze PR". The example is domain "bonserotica.com" view Google's cache of the homepage and you'll see as in the picture below, it lists a different URL, which means they used a redirect to a high PR site to fool you and the PR checkers.........

Samba SMB Error - Server not using user level security and no password supplied. tree connect failed: NT_STATUS_WRONG_PASSWORD

Server not using user level security and no password supplied. tree connect failed: NT_STATUS_WRONG_PASSWORD That happens when trying to use smbclient to connect to a share. The weird thing is that I can authnenticate just fine from Windows XP. It is partially my mistake, I forgot this share does have a password. I've tried authenticating with the correct user and also with "Guest" because this works in Windows. In Linux I ........

Viewing and Connecting to an SMB Samba Share on Windows/Linux/Unix

This will give you the basic info needed to browse and connect to Samba shares from the command line. From the GUI of Gnome or KDE etc, it is pretty standard and straight forward. However, I've found very little guides on how to do it from the command line and if you're like me, a nerd who prefers command line for its simplicity and for remote use, this is the way to go. First get a list of all the Samba/SMB shares on the target. smbclient -L hostname........

BIND/NAMED woes

Feb 5 01:39:33 server named[19768]: zone myzone.com/IN: serial number (12331465) received from master 127.0.0.2#53 < ours (200901281) The above is taken from /var/log/messages This can be annoying, it can happen for a variety of reasons. What seems to be happening here is that the slave realizes the time on the slave is ahead of the master, so it therefore assumes it has the most up to date copy and won't actually transfer the zone. The solutio........