Kura

Kura

(62 comments, 65 posts)

Systems Engineer, Technical Architect, Linux Developer, Debian/Ubuntu Maintainer, Pythonista, Djangonaut, Musician, Petrolhead, Gamer, Goth, Geek & a cunt.

Home page: https://syslog.tv

Posts by Kura

nginx config for reverse proxying WordPress & WP Super Cache and keeping the load off Apache2

0
September 30, 2011
by Kura in ,
The point

The whole point of this is to get as much load off of Apache as possible to keep the server running nice and smoothly.

Configuration

The configuration below will mean that nginx will serve basically everything;

  • static files
  • uploaded files and
  • cached content
simply replace the VARIABLES below and everything should be good to go, if copy-pasting from below isn't working properly you can download a full copy from here.

server {

listen 80; server_name DOMAIN_HERE;access_log /var/log/nginx/access.DOMAIN_HERE.log;

gzip on; gzip_disable msie6; # disable gzip for IE6 gzip_static More >

Load balancing HTTP/HTTPS with Pound on Debian 6/Ubuntu

0
September 29, 2011
by Kura in , , ,

Pound is a great little load balancer, it's fast, opensource and supports SSL termination, which is great!

Install

apt-get install pound

Configuration

The default configuration should be pretty good for most purposes, but feel free to tweak as you require.

HTTP

We'll first look at load balancing HTTP, in case you don't want or need HTTPS load balancing.

We'll need delete all the content within ListenHTTP  block, once done it should look like this

ListenHTTP

End

Now we add an address and port to listen on and finally a line to remove an HTTP header

ListenHTTP

Address 0.0.0.0 # all More >

Postfix spam protection with greylisting using Postgrey on Debian 6/Ubuntu

4
September 24, 2011
by Kura in , , ,

A simple yet effective method for protecting your mail server from spam is to use greylisting. In simple terms, when an email is received the server will temporarily reject it with a 450 response code claiming that the server is busy, the sending server should then attempt to try to deliver at a later point in time, if enough time has passed the recipient server will then accept the incoming mail and whitelist the send address for a period of time.

This is effective because most spam servers are configured not to retry the send whereas real mail servers generally will retry. This sadly does More >

Postfix spam protection with blacklists

0
September 24, 2011
by Kura in , ,

This really should be quite a quick and simple post.

I use several tools to protect my mail servers from spam, the most effective of these I've found is using external lists in conjunction with reject_rbl_client and reject_rhsbl_client. (more...)

SpamAssassin + Razor + Pyzor on Debian 6/Ubuntu

4
September 22, 2011
by Kura in , , , ,

This is part 4 of my series on configuring a mail server, please see part one, part two and part three if you're not familiar with them.

The content of this article was written to work with the previous three articles but should work on any SpamAssassin set-up.

Razor

First off we need to install Razor.

apt-get install razor

Now we need to run three commands to register and configure Razor.

razor-admin -home=/etc/spamassassin/.razor -register razor-admin -home=/etc/spamassassin/.razor -create razor-admin -home=/etc/spamassassin/.razor -discover

These 3 commands should be pretty self More >

Debian/Ubuntu upgrade security packages only – a better way to do it

0
September 21, 2011
by Kura in , ,

I have created a scripts that handle these tasks for you, available here.

First thing we need to do is create an sources list specifically for security.

sudo grep "-security" /etc/apt/sources.list | sudo grep -v "#" > /etc/apt/security.sources.list

Now that this is done we can simply continue to use the command below to trigger security-only upgrades

sudo apt-get upgrade -o Dir::Etc::SourceList=/etc/apt/security.sources.list

Note

This will work until you upgrade your distro (e.g. 10.04 -> 12.04), at which point you will need to re-run the first command to regenerate the security.sources.list More >

Postfix + DK (DomainKeys) + DKIM + SPF on Debian 6/Ubuntu

51
September 17, 2011
by Kura in , , , ,

This is part 3 of my guide to getting a mail server configured with all the sexy bits to improve deliverability, spam and virus protection.

Part 1 can be found here and part 2 here.

The key pair

We need to create a key pair to sign emails with

openssl genrsa -out private.key 1024

openssl rsa -in private.key -out public.key -pubout -outform PEM

mkdir /etc/dk/

cp private.key /etc/dk/dk.key

Now we can move on to DK and DKIM signing, make sure you keep the public key for later.

DKIM

First we'll need to install an application to sign our emails.

apt-get install dkim-filter

Once installed we need More >

Postfix + SpamAssassin + ClamAV + Procmail on Debian 6/Ubuntu

11
September 16, 2011
by Kura in , , , ,

This is part 2 of my series on mail servers on Debian 6/Ubuntu 10.04, it should work on other versions of each though. For part 1, go here.

SpamAssassin

First off we'll get SpamAssassin installed and configured.

apt-get install spamassassin

We'll be configuring SpamAssassin as a daemon that Postfix interfaces with using spamc.

SpamAssassin on Debian and Ubuntu runs as root which is NOT a good thing so we'll need to make some changes.

We'll add a group called spamd with GID 5001.

groupadd -g 5001 spamd

Next we add a user spamd with UID 5001 and add it to the spamd group, as well as set it's More >

Postfix + Dovecot (IMAP/IMAPS) + SASL + Maildir on Debian 6/Ubuntu

2
September 15, 2011
by Kura in , , , ,

This guide is part 1 of what I plan will be a couple of guides that take you through installing a base mail system, SpamAssassin, DKIM and much more. Stay tuned.

This guide was written for Debian 6 but should be the same or similar for Debian 5 and Ubuntu 10.04 and above.

The installation

apt-get install dovecot-imapd postfix sasl2-bin libsasl2-2 libsasl2-modules

Choose "Internet site" when prompted and enter the fully qualified name of your server.

Once all this is done installing we'll need to make some changes, first off will be Postfix.

Postfix

Open up /etc/postfix/main.cf and add the More >

Installing kernel headers for current kernel version with ease on Debian/Ubuntu

0
September 15, 2011
by Kura in , ,

This is a simple one but I found out that there are people out there that don't know about it, so here we go.

apt-get install linux-headers-$(uname -r)

This will install kernel headers for your current active kernel on Debian/Ubuntu.

Kura's RSS Feed
Go to Top