Category Archives: Uncategorized
Kernel Updates
Over the next week or two, I will be updating system kernels to 5.6 kernels. This provides some additional performance enhancements verses 5.5. It allows server-to-server copies in NFS and it allows peripheral-to-peripheral DMA on the hardware side which should improve the efficiencies of things like disk to disk copies by not requiring the CPU to intervene other than to setup the DMA transfer. On my workstation it has also been somewhat more stable although I have not seen stability issues with 5.5 on the servers.
Web Server Updated
Our web server is now running Apache 2.4.43 and openssl 1.1.1f. This mainly fixes minor security issues in both packages.
Pop Before SMTP Support Discontinued
We recently implemented DMARC, DKIM, and SPF on all of our mail servers to prevent forgeries, reduce spam, and improve mail delivery reliability.
DMARC is incompatible with pop-before-smtp therefore we can no longer support this. It is necessary to authenticate on outbound SMTP connections as well as inbound pop-3 and imap-4 connections.
Pop Before SMTP No Longer Supported
We recently implemented DMARC, DKIM, and SPF on all of our mail servers to prevent forgeries, reduce spam, and improve mail delivery reliability.
DMARC is incompatible with pop-before-smtp therefore we can no longer support this. It is necessary to authenticate on outbound SMTP connections as well as inbound pop-3 and imap-4 connections.
Mail List / Procmail / DMarc
I made an error in opendmarc configuration in which I neglected to add localhost, 127.0.0.1, to the list of servers to ignore. This broke mail lists and procmail recipes that remailed incoming mail back out. It also could potentially break .vacation forwarding.
This has been corrected.
Ubuntu Reboot and Backup
I will be taking Ubuntu down later this evening for about 45 minutes to change the Ethernet emulation in the virtual machine because the Intel it is currently set to has driver bugs. These don’t materially affect service but generate a lot of annoying messages in the logs. I am also going to image the machine at the same time which is why 45 minutes instead of 5 minutes. All other shell servers except OpenSuse, which is broken, will be available during this time, around 2AM.
This is cancelled, the drivers for both the Intel E1000 and the Virtio Ethernet are equally broken in the same manner so no good to change them.
Pop-Before-SMTP
Pop-before-SMTP is no longer supported. It is not compatible with DMARC protocol. To originate e-mail from a computer outside of our shell servers you must configure your e-mail client for plain password authentication.
Incoming Mail
I’ve broken something in our incoming mail servers in the process of implementing DKIM and DMARC. It is causing mail to be stuck in queue and not delivered to your INBOX.
I am working on resolving this. Mail is not being lost it is just stuck in queue and should deliver once I figure out what is wrong.
This has been corrected and all e-mail that was in queue has been delivered.
2446.doc Virus
If you get an e-mail with an attachment claiming to be a contract from a company you’ve never heard of, and the attachment is a “.doc” file, don’t open, “2446.doc” is a Word macro Virus. It won’t hurt Linux because Librewriter is smart enough to recognize it as such but it will break Windows. Unfortunately clamav does not recognize it yet though I have submitted it to them today.