detecting what does a reboot

[ik]

Hello

I have a server (old centos 5) that does sometimes few times a reboot, in
random hours.
I removed non root permissions to execute halt, reboot and shutdown, but I
wish also to try and track down what causing that reboot.

Is there a way to audit-trail or just log any kind of rebooting request
(including system calls), and finding out what or whom execute it ?

Thanks,

Ido
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

self mail hosting

[Efraim Flashner]

I've registered a domain and set up my raspberry pi to recieve and send
emails.  Everything seems to be working fine, except that emails that I
send to gmail get rejected by google.  I've been told that google
rejects email where the reverse-dns doesn't match the dns record, and
because I don't have a static IP address there's not much I can do.

Has anyone had success getting a static IP address without too much
hassle? Currently I'm getting my internet through netvision, but we
were planning on switching to 018 for their cheaper prices.

Getting a static IP address seems like it would be the easiest option,
followed by reconfiguring postfix to use a SMTP relay to send mail
through another server, but I'd need to make sure that the header isn't
changed (too much) if I do that.  Also I've found keeping my sanity
involves interacting with Israeli beaurocracy as little as possible, so
I'd rather not call netvision for a static IP since I'm planning on
leaving them anyway.

If anyone has any experience doing their own mail and want to share,
I'd love to hear about it.

-Efraim


signature.asc
Description: PGP signature
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[geoffrey mendelson]

On 6/8/2014 12:27 PM, Efraim Flashner wrote:

I've registered a domain and set up my raspberry pi to recieve and send
emails.  Everything seems to be working fine, except that emails that I
send to gmail get rejected by google.  I've been told that google
rejects email where the reverse-dns doesn't match the dns record, and
because I don't have a static IP address there's not much I can do.

Has anyone had success getting a static IP address without too much
hassle? Currently I'm getting my internet through netvision, but we
were planning on switching to 018 for their cheaper prices.

Getting a static IP address seems like it would be the easiest option,
followed by reconfiguring postfix to use a SMTP relay to send mail
through another server, but I'd need to make sure that the header isn't
changed (too much) if I do that.  Also I've found keeping my sanity
involves interacting with Israeli beaurocracy as little as possible, so
I'd rather not call netvision for a static IP since I'm planning on
leaving them anyway.

If anyone has any experience doing their own mail and want to share,
I'd love to hear about it.





Gmail has a pro option where for a small fee they will act as your mail 
server. It may be worth it.


Geoff.

--
Geoffrey S. Mendelson 4X1GM/N3OWJ
Jerusalem Israel.


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Vitaly]

You can get static IP for just about 15NIS/month, I have one from 012.
Regards
Vitaly


On Sun, Jun 8, 2014 at 12:27 PM, Efraim Flashner 
wrote:

> I've registered a domain and set up my raspberry pi to recieve and send
> emails.  Everything seems to be working fine, except that emails that I
> send to gmail get rejected by google.  I've been told that google
> rejects email where the reverse-dns doesn't match the dns record, and
> because I don't have a static IP address there's not much I can do.
>
> Has anyone had success getting a static IP address without too much
> hassle? Currently I'm getting my internet through netvision, but we
> were planning on switching to 018 for their cheaper prices.
>
> Getting a static IP address seems like it would be the easiest option,
> followed by reconfiguring postfix to use a SMTP relay to send mail
> through another server, but I'd need to make sure that the header isn't
> changed (too much) if I do that.  Also I've found keeping my sanity
> involves interacting with Israeli beaurocracy as little as possible, so
> I'd rather not call netvision for a static IP since I'm planning on
> leaving them anyway.
>
> If anyone has any experience doing their own mail and want to share,
> I'd love to hear about it.
>
> -Efraim
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: detecting what does a reboot

[Jonathan Ben Avraham]

Hi Ido,
If the reboot occurs as a result of a hardware fault, you might never see 
anything in the logs. AFAIK nothing in the Centos 5 configuration does 
a reboot on its own.


 - yba


On Sun, 8 Jun 2014, ik wrote:


Date: Sun, 8 Jun 2014 12:11:15 +0300
From: ik 
To: linux-il 
Subject: detecting what does a reboot

Hello

I have a server (old centos 5) that does sometimes few times a reboot, in 
random hours.
I removed non root permissions to execute halt, reboot and shutdown, but I wish 
also to try and track down what causing that reboot.

Is there a way to audit-trail or just log any kind of rebooting request 
(including system calls), and finding out what or whom execute
it ?

Thanks,

Ido




--
 9590 8E58 D30D 1660 C349  673D B205 4FC4 B8F5 B7F9  ~. .~  Tk Open Systems
=} Jonathan Ben-Avraham ("yba") --ooO--U--Ooo{=
mailto:y...@tkos.co.il tel:+972.52.486.3386 http://tkos.co.il skype:benavrhm___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: detecting what does a reboot

[Rabin Yasharzadehe]

you can try with auditctl

auditctl -w /tmp/1 -p wa -k write_or_access
>


*--Rabin*


On Sun, Jun 8, 2014 at 12:11 PM, ik  wrote:

> Hello
>
> I have a server (old centos 5) that does sometimes few times a reboot, in
> random hours.
> I removed non root permissions to execute halt, reboot and shutdown, but I
> wish also to try and track down what causing that reboot.
>
> Is there a way to audit-trail or just log any kind of rebooting request
> (including system calls), and finding out what or whom execute it ?
>
> Thanks,
>
> Ido
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Moish]

  
  
I'm using static ip from Netvision. 40+nis inc vat for 10mb/0.8 mb.
What kind of storage do you use (usb disk, mem card..)?  How does RP
perform?

On 08/06/2014 12:27, Efraim Flashner
  wrote:


  I've registered a domain and set up my raspberry pi to recieve and send
emails.  Everything seems to be working fine, except that emails that I
send to gmail get rejected by google.  I've been told that google
rejects email where the reverse-dns doesn't match the dns record, and
because I don't have a static IP address there's not much I can do.

Has anyone had success getting a static IP address without too much
hassle? Currently I'm getting my internet through netvision, but we
were planning on switching to 018 for their cheaper prices.

Getting a static IP address seems like it would be the easiest option,
followed by reconfiguring postfix to use a SMTP relay to send mail
through another server, but I'd need to make sure that the header isn't
changed (too much) if I do that.  Also I've found keeping my sanity
involves interacting with Israeli beaurocracy as little as possible, so
I'd rather not call netvision for a static IP since I'm planning on
leaving them anyway.

If anyone has any experience doing their own mail and want to share,
I'd love to hear about it.

-Efraim

  
  
  
  ___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il



-- 
Moish
  



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[E.S. Rosenberg]

If you use your ISPs' smart host you should also be OK...


2014-06-08 12:45 GMT+03:00 Vitaly :

> You can get static IP for just about 15NIS/month, I have one from 012.
> Regards
> Vitaly
>
>
> On Sun, Jun 8, 2014 at 12:27 PM, Efraim Flashner <
> efraim.flash...@gmail.com> wrote:
>
>> I've registered a domain and set up my raspberry pi to recieve and send
>> emails.  Everything seems to be working fine, except that emails that I
>> send to gmail get rejected by google.  I've been told that google
>> rejects email where the reverse-dns doesn't match the dns record, and
>> because I don't have a static IP address there's not much I can do.
>>
>> Has anyone had success getting a static IP address without too much
>> hassle? Currently I'm getting my internet through netvision, but we
>> were planning on switching to 018 for their cheaper prices.
>>
>> Getting a static IP address seems like it would be the easiest option,
>> followed by reconfiguring postfix to use a SMTP relay to send mail
>> through another server, but I'd need to make sure that the header isn't
>> changed (too much) if I do that.  Also I've found keeping my sanity
>> involves interacting with Israeli beaurocracy as little as possible, so
>> I'd rather not call netvision for a static IP since I'm planning on
>> leaving them anyway.
>>
>> If anyone has any experience doing their own mail and want to share,
>> I'd love to hear about it.
>>
>> -Efraim
>>
>> ___
>> Linux-il mailing list
>> Linux-il@cs.huji.ac.il
>> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>>
>>
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[matanya]

 

I got Static ip from netvision for 9NIS/Month before I left them. Just
say you have camera's and file servers. 

 ___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[E.S. Rosenberg]

Do those static IPs include setting the PTR record to whatever you want it
to be?
Otherwise there is really no point since a part (though not all) of the
security is "is the PTR and the claimed hostname.domain.tld the same?"
Since the IP is theirs you have no control over the PTR unless they give
that to you as well.

Regards,
Eliyahu - אליהו


2014-06-08 13:35 GMT+03:00 matanya :

>  I got Static ip from netvision for 9NIS/Month before I left them. Just
> say you have camera's and file servers.
>
>
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[matanya]

 

You should be able to set that in your domain dns panel from your
provider. It should point to your Static IP 

On 2014-06-08 13:55, E.S. Rosenberg wrote: 

> Do those static IPs include setting the PTR record to whatever you want it to 
> be? Otherwise there is really no point since a part (though not all) of the 
> security is "is the PTR and the claimed hostname.domain.tld the same?" Since 
> the IP is theirs you have no control over the PTR unless they give that to 
> you as well.
> 
> Regards,
> Eliyahu - אליהו 
> 
> 2014-06-08 13:35 GMT+03:00 matanya :
> 
>> I got Static ip from netvision for 9NIS/Month before I left them. Just say 
>> you have camera's and file servers. 
>> 
>> ___
>> Linux-il mailing list
>> Linux-il@cs.huji.ac.il
>> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il [1]
 

Links:
--
[1] http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Efraim Flashner]

using netvision's smart host shouldn't change my from or reply-to
something@netvision?


On Sun, 8 Jun 2014 13:31:24 +0300
"E.S. Rosenberg"  wrote:

> If you use your ISPs' smart host you should also be OK...
> 
> 
> 2014-06-08 12:45 GMT+03:00 Vitaly :
> 
> > You can get static IP for just about 15NIS/month, I have one from
> > 012. Regards
> > Vitaly
> >
> >
> > On Sun, Jun 8, 2014 at 12:27 PM, Efraim Flashner <
> > efraim.flash...@gmail.com> wrote:
> >
> >> I've registered a domain and set up my raspberry pi to recieve and
> >> send emails.  Everything seems to be working fine, except that
> >> emails that I send to gmail get rejected by google.  I've been
> >> told that google rejects email where the reverse-dns doesn't match
> >> the dns record, and because I don't have a static IP address
> >> there's not much I can do.
> >>
> >> Has anyone had success getting a static IP address without too much
> >> hassle? Currently I'm getting my internet through netvision, but we
> >> were planning on switching to 018 for their cheaper prices.
> >>
> >> Getting a static IP address seems like it would be the easiest
> >> option, followed by reconfiguring postfix to use a SMTP relay to
> >> send mail through another server, but I'd need to make sure that
> >> the header isn't changed (too much) if I do that.  Also I've found
> >> keeping my sanity involves interacting with Israeli beaurocracy as
> >> little as possible, so I'd rather not call netvision for a static
> >> IP since I'm planning on leaving them anyway.
> >>
> >> If anyone has any experience doing their own mail and want to
> >> share, I'd love to hear about it.
> >>
> >> -Efraim
> >>
> >> ___
> >> Linux-il mailing list
> >> Linux-il@cs.huji.ac.il
> >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> >>
> >>
> >
> > ___
> > Linux-il mailing list
> > Linux-il@cs.huji.ac.il
> > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> >
> >



-- 
Efraim Flashner
efraim.flash...@gmail.com 4096R/CA3D8351 created: 2013-10-08
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351


signature.asc
Description: PGP signature
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Efraim Flashner]

I have a 256MB modelB with an 8GB SD card and an external harddrive.
Postfix and dovecote don't take a lot of processing power, spamassassin
a bit more, but not so much.  I also have it running deluge, which
crashes a little too often for me, so I have a cron job running to
relaunch it if it crashes.  Fileserving works well.  I tried using it
as a SIP host but something wasn't working so I gave up on that one.  I
also tried owncloud, but it was way too laggy and also prone to
crashing, so I gave up on it also.

I haven't tried running a mumble or irc server, but I'm guessing it
should work.  mpd should work but it isn't something I particularly
need.  With how low the demand is on the server with postfix and
dovecot, I'm assuming that it should be able to run mailman for a
mailinglist easily.


On Sun, 08 Jun 2014 13:08:19 +0300
Moish  wrote:

> I'm using static ip from Netvision. 40+nis inc vat for 10mb/0.8 mb.
> What kind of storage do you use (usb disk, mem card..)?  How does RP
> perform?
> 
> On 08/06/2014 12:27, Efraim Flashner wrote:
> I've registered a domain and set up my raspberry pi to recieve and
> send emails.  Everything seems to be working fine, except that emails
> that I send to gmail get rejected by google.  I've been told that
> google rejects email where the reverse-dns doesn't match the dns
> record, and because I don't have a static IP address there's not much
> I can do.
> 
> Has anyone had success getting a static IP address without too much
> hassle? Currently I'm getting my internet through netvision, but we
> were planning on switching to 018 for their cheaper prices.
> 
> Getting a static IP address seems like it would be the easiest option,
> followed by reconfiguring postfix to use a SMTP relay to send mail
> through another server, but I'd need to make sure that the header
> isn't changed (too much) if I do that.  Also I've found keeping my
> sanity involves interacting with Israeli beaurocracy as little as
> possible, so I'd rather not call netvision for a static IP since I'm
> planning on leaving them anyway.
> 
> If anyone has any experience doing their own mail and want to share,
> I'd love to hear about it.
> 
> -Efraim
> 
> 
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> 



-- 
Efraim Flashner
efraim.flash...@gmail.com 4096R/CA3D8351 created: 2013-10-08
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351


signature.asc
Description: PGP signature
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Gabor Szabo]

Instead of getting a static IP and doing this at home, have you considered
renting a VPS?
For example at Digital Ocean you can get one for $5/month which is not much
more than
the 15 NIS / month that was mentioned here for static IP and it is very
easy to handle.

Such server can do way more than just handling your e-mail.  I have two
"droplets" there.

https://www.digitalocean.com/

Gabor

and if you are in the mood, use my refcode to give me some credit

https://www.digitalocean.com/?refcode=0d4cc75b3a74
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Efraim Flashner]

On Sun, 8 Jun 2014 14:39:19 +0300
Gabor Szabo  wrote:

> Instead of getting a static IP and doing this at home, have you
> considered renting a VPS?
> For example at Digital Ocean you can get one for $5/month which is
> not much more than
> the 15 NIS / month that was mentioned here for static IP and it is
> very easy to handle.
> 
> Such server can do way more than just handling your e-mail.  I have
> two "droplets" there.
> 
> https://www.digitalocean.com/
> 
> Gabor
> 
> and if you are in the mood, use my refcode to give me some credit
> 
> https://www.digitalocean.com/?refcode=0d4cc75b3a74

Thats my plan B or so.  It is more powerful than the RPi and it
would free me up to play with the RPi as a desktop system.

-- 
Efraim Flashner
efraim.flash...@gmail.com 4096R/CA3D8351 created: 2013-10-08
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351


signature.asc
Description: PGP signature
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[E.S. Rosenberg]

Re:All


2014-06-08 13:59 GMT+03:00 matanya :

>  You should be able to set that in your domain dns panel from your
> provider. It should point to your Static IP
>
You can't set a PTR record for an IP that is in a block you don't own, PTR
records are unique, only one per IP is supposed to exists, so if your
domain provider and your ISP are not the same there is no way for you to
set a PTR without your ISPs' cooperation.
(PTR lookups go to the nameserver of whoever owns the IP block, not of some
random nameserver that happens to have a PTR record for that block)

Also note that though you can get a fixed IP at home the IP may still be
flagged in anti-spam databases as "non-server" space and therefor
suspicious/no-accept.
Regards,
Eliyahu - אליהו

>
>
>
> On 2014-06-08 13:55, E.S. Rosenberg wrote:
>
>   Do those static IPs include setting the PTR record to whatever you want
> it to be?
> Otherwise there is really no point since a part (though not all) of the
> security is "is the PTR and the claimed hostname.domain.tld the same?"
> Since the IP is theirs you have no control over the PTR unless they give
> that to you as well.
>
> Regards,
> Eliyahu - אליהו
>
>
> 2014-06-08 13:35 GMT+03:00 matanya :
>
>>  I got Static ip from netvision for 9NIS/Month before I left them. Just
>> say you have camera's and file servers.
>>
>>
>>
>> ___
>> Linux-il mailing list
>> Linux-il@cs.huji.ac.il
>> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>>
>>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[E.S. Rosenberg]

2014-06-08 14:22 GMT+03:00 Efraim Flashner :

> using netvision's smart host shouldn't change my from or reply-to
> something@netvision?
>
No, as long as you are an authenticated user it should pass whetever mail
you want, it may or may not be flagged as 100% trustworthy since it won't
be your "official" smtp server, but you may be able to set policies that
declare that it is a trusted origin server. (
You can for instance also send you @gmail mail through a smarthost, but it
will result in a warning showing in gmail that the mail may not be from the
person since the mail came from a non-google smtp server.
Also note that the smart host will most likely not use TLS for
communication between smtp servers (it may use it for you>smarthost,
depending on how good your ISP is), but you would anyhow only be able to do
that if you are willing to shell out the required money to get a signed
certificate (self signed is nice for testing but 3rd parties will never
accept them [as they should]).

By the way does your ISP even allow incoming port 25 traffic? They
generally block that in an attempt to stymie spam.
(Outgoing is often only through the smarthost while incoming is generally
completely blocked).
Regards,
Eliyahu - אליהו

>
>
> On Sun, 8 Jun 2014 13:31:24 +0300
> "E.S. Rosenberg"  wrote:
>
> > If you use your ISPs' smart host you should also be OK...
> >
> >
> > 2014-06-08 12:45 GMT+03:00 Vitaly :
> >
> > > You can get static IP for just about 15NIS/month, I have one from
> > > 012. Regards
> > > Vitaly
> > >
> > >
> > > On Sun, Jun 8, 2014 at 12:27 PM, Efraim Flashner <
> > > efraim.flash...@gmail.com> wrote:
> > >
> > >> I've registered a domain and set up my raspberry pi to recieve and
> > >> send emails.  Everything seems to be working fine, except that
> > >> emails that I send to gmail get rejected by google.  I've been
> > >> told that google rejects email where the reverse-dns doesn't match
> > >> the dns record, and because I don't have a static IP address
> > >> there's not much I can do.
> > >>
> > >> Has anyone had success getting a static IP address without too much
> > >> hassle? Currently I'm getting my internet through netvision, but we
> > >> were planning on switching to 018 for their cheaper prices.
> > >>
> > >> Getting a static IP address seems like it would be the easiest
> > >> option, followed by reconfiguring postfix to use a SMTP relay to
> > >> send mail through another server, but I'd need to make sure that
> > >> the header isn't changed (too much) if I do that.  Also I've found
> > >> keeping my sanity involves interacting with Israeli beaurocracy as
> > >> little as possible, so I'd rather not call netvision for a static
> > >> IP since I'm planning on leaving them anyway.
> > >>
> > >> If anyone has any experience doing their own mail and want to
> > >> share, I'd love to hear about it.
> > >>
> > >> -Efraim
> > >>
> > >> ___
> > >> Linux-il mailing list
> > >> Linux-il@cs.huji.ac.il
> > >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> > >>
> > >>
> > >
> > > ___
> > > Linux-il mailing list
> > > Linux-il@cs.huji.ac.il
> > > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> > >
> > >
>
>
>
> --
> Efraim Flashner
> efraim.flash...@gmail.com 4096R/CA3D8351 created: 2013-10-08
> GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Efraim Flashner]

On Sun, 8 Jun 2014 17:47:18 +0300
"E.S. Rosenberg"  wrote:

> 2014-06-08 14:22 GMT+03:00 Efraim Flashner
> :
> 
> > using netvision's smart host shouldn't change my from or reply-to
> > something@netvision?
> >
> No, as long as you are an authenticated user it should pass whetever
> mail you want, it may or may not be flagged as 100% trustworthy since
> it won't be your "official" smtp server, but you may be able to set
> policies that declare that it is a trusted origin server. (
> You can for instance also send you @gmail mail through a smarthost,
> but it will result in a warning showing in gmail that the mail may
> not be from the person since the mail came from a non-google smtp
> server. Also note that the smart host will most likely not use TLS for
> communication between smtp servers (it may use it for you>smarthost,
> depending on how good your ISP is), but you would anyhow only be able
> to do that if you are willing to shell out the required money to get
> a signed certificate (self signed is nice for testing but 3rd parties
> will never accept them [as they should]).

I have my certificate signed by CACert, but if that doesn't look like
enough then I'll probably decide if it's worth it based on the price.
 
> By the way does your ISP even allow incoming port 25 traffic? They
> generally block that in an attempt to stymie spam.
> (Outgoing is often only through the smarthost while incoming is
> generally completely blocked).
> Regards,
> Eliyahu - אליהו
> 

Incoming works completely, I test mailed myself from gmail using my
cellphone.

> >
> >
> > On Sun, 8 Jun 2014 13:31:24 +0300
> > "E.S. Rosenberg"  wrote:
> >
> > > If you use your ISPs' smart host you should also be OK...
> > >
> > >
> > > 2014-06-08 12:45 GMT+03:00 Vitaly :
> > >
> > > > You can get static IP for just about 15NIS/month, I have one
> > > > from 012. Regards
> > > > Vitaly
> > > >
> > > >
> > > > On Sun, Jun 8, 2014 at 12:27 PM, Efraim Flashner <
> > > > efraim.flash...@gmail.com> wrote:
> > > >
> > > >> I've registered a domain and set up my raspberry pi to recieve
> > > >> and send emails.  Everything seems to be working fine, except
> > > >> that emails that I send to gmail get rejected by google.  I've
> > > >> been told that google rejects email where the reverse-dns
> > > >> doesn't match the dns record, and because I don't have a
> > > >> static IP address there's not much I can do.
> > > >>
> > > >> Has anyone had success getting a static IP address without too
> > > >> much hassle? Currently I'm getting my internet through
> > > >> netvision, but we were planning on switching to 018 for their
> > > >> cheaper prices.
> > > >>
> > > >> Getting a static IP address seems like it would be the easiest
> > > >> option, followed by reconfiguring postfix to use a SMTP relay
> > > >> to send mail through another server, but I'd need to make sure
> > > >> that the header isn't changed (too much) if I do that.  Also
> > > >> I've found keeping my sanity involves interacting with Israeli
> > > >> beaurocracy as little as possible, so I'd rather not call
> > > >> netvision for a static IP since I'm planning on leaving them
> > > >> anyway.
> > > >>
> > > >> If anyone has any experience doing their own mail and want to
> > > >> share, I'd love to hear about it.
> > > >>
> > > >> -Efraim
> > > >>
> > > >> ___
> > > >> Linux-il mailing list
> > > >> Linux-il@cs.huji.ac.il
> > > >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> > > >>
> > > >>
> > > >
> > > > ___
> > > > Linux-il mailing list
> > > > Linux-il@cs.huji.ac.il
> > > > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> > > >
> > > >
> >
> >
> >
> > --
> > Efraim Flashner
> > efraim.flash...@gmail.com 4096R/CA3D8351 created: 2013-10-08
> > GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
> >
> > ___
> > Linux-il mailing list
> > Linux-il@cs.huji.ac.il
> > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> >
> >



-- 
Efraim Flashner
efraim.flash...@gmail.com 4096R/CA3D8351 created: 2013-10-08
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351


signature.asc
Description: PGP signature
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Baruch Siach]

Hi Eliyahu, Matanya,

On Sun, Jun 08, 2014 at 05:38:12PM +0300, E.S. Rosenberg wrote:
> Also note that though you can get a fixed IP at home the IP may still be
> flagged in anti-spam databases as "non-server" space and therefor
> suspicious/no-accept.

These are called RBLs or DNSBLs (http://en.wikipedia.org/wiki/DNSBL).

You can use a multi-RBL service like http://multirbl.valli.org/ to check 
whether your own static IP address is listed in any of 200+ RBLs.

baruch

-- 
 http://baruch.siach.name/blog/  ~. .~   Tk Open Systems
=}ooO--U--Ooo{=
   - bar...@tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[E.S. Rosenberg]

2014-06-08 17:58 GMT+03:00 Efraim Flashner :

> On Sun, 8 Jun 2014 17:47:18 +0300
> "E.S. Rosenberg"  wrote:
>
> > 2014-06-08 14:22 GMT+03:00 Efraim Flashner
> > :
> >
> > > using netvision's smart host shouldn't change my from or reply-to
> > > something@netvision?
> > >
> > No, as long as you are an authenticated user it should pass whetever
> > mail you want, it may or may not be flagged as 100% trustworthy since
> > it won't be your "official" smtp server, but you may be able to set
> > policies that declare that it is a trusted origin server. (
> > You can for instance also send you @gmail mail through a smarthost,
> > but it will result in a warning showing in gmail that the mail may
> > not be from the person since the mail came from a non-google smtp
> > server. Also note that the smart host will most likely not use TLS for
> > communication between smtp servers (it may use it for you>smarthost,
> > depending on how good your ISP is), but you would anyhow only be able
> > to do that if you are willing to shell out the required money to get
> > a signed certificate (self signed is nice for testing but 3rd parties
> > will never accept them [as they should]).
>
> I have my certificate signed by CACert, but if that doesn't look like
> enough then I'll probably decide if it's worth it based on the price.
>
If CAcert is referring to an accepted authority and not to the signing
script provided by openssl you should be fine, otherwise you would need to
convince the 3rd parties that they should trust you as a signing body...
If I'm not mistaken there is a free ssl signing auth for applications like
this, I just don't remember their name.

>
> > By the way does your ISP even allow incoming port 25 traffic? They
> > generally block that in an attempt to stymie spam.
> > (Outgoing is often only through the smarthost while incoming is
> > generally completely blocked).
> > Regards,
> > Eliyahu - אליהו
> >
>
> Incoming works completely, I test mailed myself from gmail using my
> cellphone.
>
> > >
> > >
> > > On Sun, 8 Jun 2014 13:31:24 +0300
> > > "E.S. Rosenberg"  wrote:
> > >
> > > > If you use your ISPs' smart host you should also be OK...
> > > >
> > > >
> > > > 2014-06-08 12:45 GMT+03:00 Vitaly :
> > > >
> > > > > You can get static IP for just about 15NIS/month, I have one
> > > > > from 012. Regards
> > > > > Vitaly
> > > > >
> > > > >
> > > > > On Sun, Jun 8, 2014 at 12:27 PM, Efraim Flashner <
> > > > > efraim.flash...@gmail.com> wrote:
> > > > >
> > > > >> I've registered a domain and set up my raspberry pi to recieve
> > > > >> and send emails.  Everything seems to be working fine, except
> > > > >> that emails that I send to gmail get rejected by google.  I've
> > > > >> been told that google rejects email where the reverse-dns
> > > > >> doesn't match the dns record, and because I don't have a
> > > > >> static IP address there's not much I can do.
> > > > >>
> > > > >> Has anyone had success getting a static IP address without too
> > > > >> much hassle? Currently I'm getting my internet through
> > > > >> netvision, but we were planning on switching to 018 for their
> > > > >> cheaper prices.
> > > > >>
> > > > >> Getting a static IP address seems like it would be the easiest
> > > > >> option, followed by reconfiguring postfix to use a SMTP relay
> > > > >> to send mail through another server, but I'd need to make sure
> > > > >> that the header isn't changed (too much) if I do that.  Also
> > > > >> I've found keeping my sanity involves interacting with Israeli
> > > > >> beaurocracy as little as possible, so I'd rather not call
> > > > >> netvision for a static IP since I'm planning on leaving them
> > > > >> anyway.
> > > > >>
> > > > >> If anyone has any experience doing their own mail and want to
> > > > >> share, I'd love to hear about it.
> > > > >>
> > > > >> -Efraim
> > > > >>
> > > > >> ___
> > > > >> Linux-il mailing list
> > > > >> Linux-il@cs.huji.ac.il
> > > > >> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> > > > >>
> > > > >>
> > > > >
> > > > > ___
> > > > > Linux-il mailing list
> > > > > Linux-il@cs.huji.ac.il
> > > > > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> > > > >
> > > > >
> > >
> > >
> > >
> > > --
> > > Efraim Flashner
> > > efraim.flash...@gmail.com 4096R/CA3D8351 created: 2013-10-08
> > > GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
> > >
> > > ___
> > > Linux-il mailing list
> > > Linux-il@cs.huji.ac.il
> > > http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
> > >
> > >
>
>
>
> --
> Efraim Flashner
> efraim.flash...@gmail.com 4096R/CA3D8351 created: 2013-10-08
> GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>

Re: self mail hosting

[Geoff Shang]

Hi,

We use a VPS for this.  This is much easier than trying to do it on an 
ISP-hosted IP address/setup and is likely to remain so.


It is worth checking that the IP address you get for a VPS isn't on any 
DNSBLs before you set it up.


Geoff.


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Baruch Siach]

Hi Efraim,

On Sun, Jun 08, 2014 at 05:58:50PM +0300, Efraim Flashner wrote:
> On Sun, 8 Jun 2014 17:47:18 +0300
> "E.S. Rosenberg"  wrote:
> 
> > 2014-06-08 14:22 GMT+03:00 Efraim Flashner
> > :
> > 
> > > using netvision's smart host shouldn't change my from or reply-to
> > > something@netvision?
> > >
> > No, as long as you are an authenticated user it should pass whetever
> > mail you want, it may or may not be flagged as 100% trustworthy since
> > it won't be your "official" smtp server, but you may be able to set
> > policies that declare that it is a trusted origin server. (
> > You can for instance also send you @gmail mail through a smarthost,
> > but it will result in a warning showing in gmail that the mail may
> > not be from the person since the mail came from a non-google smtp
> > server. Also note that the smart host will most likely not use TLS for
> > communication between smtp servers (it may use it for you>smarthost,
> > depending on how good your ISP is), but you would anyhow only be able
> > to do that if you are willing to shell out the required money to get
> > a signed certificate (self signed is nice for testing but 3rd parties
> > will never accept them [as they should]).
> 
> I have my certificate signed by CACert, but if that doesn't look like
> enough then I'll probably decide if it's worth it based on the price.

CAcert's certificate are not generally trusted (see 
http://lwn.net/Articles/590879/). A free alternative is StartCom's StartSSL. 
See 
http://arstechnica.com/information-technology/2014/03/taking-e-mail-back-part-2-arming-your-server-with-postfix-dovecot/
 
for a detailed description.

baruch

-- 
 http://baruch.siach.name/blog/  ~. .~   Tk Open Systems
=}ooO--U--Ooo{=
   - bar...@tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Shachar Shemesh]

On 08/06/14 14:39, Gabor Szabo wrote:
> Instead of getting a static IP and doing this at home, have you
> considered renting a VPS?
> For example at Digital Ocean you can get one for $5/month which is not
> much more than
> the 15 NIS / month that was mentioned here for static IP and it is
> very easy to handle.
>
> Such server can do way more than just handling your e-mail.  I have
> two "droplets" there.
>
> https://www.digitalocean.com/
>
> Gabor
>
> and if you are in the mood, use my refcode to give me some credit
>
> https://www.digitalocean.com/?refcode=0d4cc75b3a74
> 
>
>
>
I personally use contabo (http://contabo.com/?show=vps). Their cheapest
plan is slightly more expensive (8Euro/month), but provide oh so much
more (comparing with the similarly priced plan at digital ocean: 200GB
storage vs. 30GB, 4GB memory vs. 1GB, Unlimited traffic (so long as the
average isn't over 20Mb/s) vs. 2TB).

To be fair, assuming completely uniform traffic distribution, that last
number translates to a bit over 6TB/month. Since no one's traffic is
really uniform, I think we can assume that the traffic cap is, more or
less, the same.

I'd send a syndicated link, but I don't think they have such a program.
I have absolutely zero stake in whether you use their service or not.

Shachar
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[E.S. Rosenberg]

Slightly OT, but if I went for a VPS for my mail I'd probably want them to
be outside of US jurisdition, are these?


2014-06-08 19:00 GMT+03:00 Shachar Shemesh :

>  On 08/06/14 14:39, Gabor Szabo wrote:
>
> Instead of getting a static IP and doing this at home, have you considered
> renting a VPS?
> For example at Digital Ocean you can get one for $5/month which is not
> much more than
> the 15 NIS / month that was mentioned here for static IP and it is very
> easy to handle.
>
> Such server can do way more than just handling your e-mail.  I have two
> "droplets" there.
>
>  https://www.digitalocean.com/
>
>  Gabor
>
>  and if you are in the mood, use my refcode to give me some credit
>
> https://www.digitalocean.com/?refcode=0d4cc75b3a74
>
>
>  I personally use contabo (http://contabo.com/?show=vps). Their cheapest
> plan is slightly more expensive (8Euro/month), but provide oh so much more
> (comparing with the similarly priced plan at digital ocean: 200GB storage
> vs. 30GB, 4GB memory vs. 1GB, Unlimited traffic (so long as the average
> isn't over 20Mb/s) vs. 2TB).
>
> To be fair, assuming completely uniform traffic distribution, that last
> number translates to a bit over 6TB/month. Since no one's traffic is really
> uniform, I think we can assume that the traffic cap is, more or less, the
> same.
>
> I'd send a syndicated link, but I don't think they have such a program. I
> have absolutely zero stake in whether you use their service or not.
>
> Shachar
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Shachar Shemesh]

On 08/06/14 19:11, E.S. Rosenberg wrote:
> Slightly OT, but if I went for a VPS for my mail I'd probably want
> them to be outside of US jurisdition, are these?
>
It is #%$*!@# difficult to answer whether anything is outside the US
jurisdiction. I can tell you that these servers are hosted in Germany,
by what appears to be a German company. These are better opening
conditions than most, but that is as far as I can assure you.

Shachar
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Guy Gold]

On Sun, Jun 8, 2014 at 5:27 AM, Efraim Flashner 
wrote:

>
> If anyone has any experience doing their own mail and want to share,
> I'd love to hear about it.
>
> -Efraim
>

Efraim,
Using a globally recognized smart host makes the most sense, technically
and financially.
If you do end up getting a static IP, no one can assure you that it would
not have a bad record somewhere, is some span engine. (many times, they
do), and, if it was ever used to send spam, you'll have to go through the
ranks of each spam data provider, to convince them you're actually a nice
guy.

When I was doing my own email, I was using smtp.com as my smarthost, they
cost (about 2 years ago), 5$/month, for a high volume of email. My emails
never ended up in anyone's Spam folder after using them, AFAIK.
They're U.S based, so, I wonder (and hope), that someone closer to ISR
offers the same service.
My exim.conf  (on debian) file had this:


smarthost:
  driver = manualroute
  domains = ! +local_domains
  transport = remote_msa
  route_data = smtp.com:25025
  no_more

and also , the authentication string.

And that was is it.


-- 
Guy Gold
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[shimi]

On Sun, Jun 8, 2014 at 7:42 PM, Guy Gold  wrote:

>
> Using a globally recognized smart host makes the most sense, technically
> and financially.
>
>
 And then, there's The Cloud (TM). http://aws.amazon.com/ses/

-- Shimi
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Efraim Flashner]

On Sun, 8 Jun 2014 19:11:15 +0300
"E.S. Rosenberg"  wrote:

> Slightly OT, but if I went for a VPS for my mail I'd probably want
> them to be outside of US jurisdition, are these?
> 

DigitalOcean lists on the bottom of their page that they're "Proudly
Made in NY" so I assume that their servers are physically located in
the USA.

> 
> 2014-06-08 19:00 GMT+03:00 Shachar Shemesh :
> 
> >  On 08/06/14 14:39, Gabor Szabo wrote:
> >
> > Instead of getting a static IP and doing this at home, have you
> > considered renting a VPS?
> > For example at Digital Ocean you can get one for $5/month which is
> > not much more than
> > the 15 NIS / month that was mentioned here for static IP and it is
> > very easy to handle.
> >
> > Such server can do way more than just handling your e-mail.  I have
> > two "droplets" there.
> >
> >  https://www.digitalocean.com/
> >
> >  Gabor
> >
> >  and if you are in the mood, use my refcode to give me some credit
> >
> > https://www.digitalocean.com/?refcode=0d4cc75b3a74
> >

I have $10 credit there from a promotion from jupiterbroadcasting, and
I do like their pricing by the hour setup, but 20GB doesn't seem like a
lot.  Its plenty for me for git-annex, but I need to think of more
reasons to use it before i spin up my first droplet.

> >
> >  I personally use contabo (http://contabo.com/?show=vps). Their
> > cheapest plan is slightly more expensive (8Euro/month), but provide
> > oh so much more (comparing with the similarly priced plan at
> > digital ocean: 200GB storage vs. 30GB, 4GB memory vs. 1GB,
> > Unlimited traffic (so long as the average isn't over 20Mb/s) vs.
> > 2TB).
> >
> > To be fair, assuming completely uniform traffic distribution, that
> > last number translates to a bit over 6TB/month. Since no one's
> > traffic is really uniform, I think we can assume that the traffic
> > cap is, more or less, the same.
> >
> > I'd send a syndicated link, but I don't think they have such a
> > program. I have absolutely zero stake in whether you use their
> > service or not.
> >
> > Shachar
> >

The larger size sounds great, and with that much storage and ram
there's a lot more options for playing with.  Even if its not based in
the US I'd still prefer to encrypt it, since I wouldn't have sole
physical access to it.

-- 
Efraim Flashner
efraim.flash...@gmail.com 4096R/CA3D8351 created: 2013-10-08
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351


signature.asc
Description: PGP signature
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Geoff Shang]

On Sun, 8 Jun 2014, E.S. Rosenberg wrote:


Slightly OT, but if I went for a VPS for my mail I'd probably want them to
be outside of US jurisdition, are these?


US jurisdiction is something that is likely to change with the wind and 
also probably is yet to be fully tested in court.  But certainly being 
outside the US would be a good start.


I have a VPS with Gandi (gandi.net) and am pretty happy with it.  They 
have boxes in Paris and Baltimore so make sure you pick the right one.


Linode also have boxes in places like London and Japan, but as I believe 
they're a US company, it may not be such a good idea.


Of course, non-US hosting will probably not be as cheap as US hosting, but 
that's just life.


Geoff.


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Dotan Cohen]

On Sun, Jun 8, 2014 at 8:40 PM, shimi  wrote:
>  And then, there's The Cloud (TM). http://aws.amazon.com/ses/
>

This is what I use. I think I pay something like $1 monthly. I'm very
happy with AWS in general.

-- 
Dotan Cohen

http://gibberish.co.il
http://what-is-what.com

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Gabor Szabo]

On Sun, Jun 8, 2014 at 9:04 PM, Efraim Flashner 
wrote:

> On Sun, 8 Jun 2014 19:11:15 +0300
> "E.S. Rosenberg"  wrote:
>
> > Slightly OT, but if I went for a VPS for my mail I'd probably want
> > them to be outside of US jurisdition, are these?
> >
>
> DigitalOcean lists on the bottom of their page that they're "Proudly
> Made in NY" so I assume that their servers are physically located in
> the USA.
>
>
DO has servers in New York, San Francisco, Amsterdam and Singapore, but
AFAIK they are a US-based company,
so even if you select a server in one of the other locations, I think they
are still somewhat under
US jurisdiction. Who knows. IANAL.

Gabor
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Shachar Shemesh]

On 08/06/14 21:04, Efraim Flashner wrote:
> The larger size sounds great, and with that much storage and ram
> there's a lot more options for playing with.  Even if its not based in
> the US I'd still prefer to encrypt it, since I wouldn't have sole
> physical access to it.
Yeah, good luck with that. Don't forget that your hosting company has
access not only to your hard disk, but also to your RAM. Encryption
doesn't buy you much protection.

Shachar

___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: detecting what does a reboot

[ik]

Hi Jonathan,

We ruled out that it happens from hardware, and at the messages log, you
see a normal reboot, we just can't place the finger who or what does it.

Thanks,
Ido


On Sun, Jun 8, 2014 at 1:04 PM, Jonathan Ben Avraham  wrote:

> Hi Ido,
> If the reboot occurs as a result of a hardware fault, you might never see
> anything in the logs. AFAIK nothing in the Centos 5 configuration does a
> reboot on its own.
>
>  - yba
>
>
> On Sun, 8 Jun 2014, ik wrote:
>
>  Date: Sun, 8 Jun 2014 12:11:15 +0300
>> From: ik 
>> To: linux-il 
>> Subject: detecting what does a reboot
>>
>>
>> Hello
>>
>> I have a server (old centos 5) that does sometimes few times a reboot, in
>> random hours.
>> I removed non root permissions to execute halt, reboot and shutdown, but
>> I wish also to try and track down what causing that reboot.
>>
>> Is there a way to audit-trail or just log any kind of rebooting request
>> (including system calls), and finding out what or whom execute
>> it ?
>>
>> Thanks,
>>
>> Ido
>>
>>
>>
> --
>  9590 8E58 D30D 1660 C349  673D B205 4FC4 B8F5 B7F9  ~. .~  Tk Open Systems
> =} Jonathan Ben-Avraham ("yba") --ooO--U--Ooo-
> ---{=
> mailto:y...@tkos.co.il tel:+972.52.486.3386 http://tkos.co.il
> skype:benavrhm
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: detecting what does a reboot

[Diego Iastrubni]

And when everything else fails - good old serial console and another 
machine to capture the last dieing words of this server.


On 06/08/2014 01:21 PM, Rabin Yasharzadehe wrote:

you can try with auditctl

auditctl -w /tmp/1 -p wa -k write_or_access


*--
Rabin*


On Sun, Jun 8, 2014 at 12:11 PM, ik > wrote:


Hello

I have a server (old centos 5) that does sometimes few times a
reboot, in random hours.
I removed non root permissions to execute halt, reboot and
shutdown, but I wish also to try and track down what causing that
reboot.

Is there a way to audit-trail or just log any kind of rebooting
request (including system calls), and finding out what or whom
execute it ?

Thanks,

Ido

___
Linux-il mailing list
Linux-il@cs.huji.ac.il 
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il




___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il



___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: detecting what does a reboot

[Oron Peled]

On Sunday 08 June 2014 22:43:49 ik wrote:
> We ruled out that it happens from hardware, and at the messages log, you
> see a normal reboot, we just can't place the finger who or what does it.

It's easy to confirm/reject that's the "reboot" command itself:
 * Move original command to new name (e.g: /sbin/reboot.orig)
 * Put in its place (e.g: /sbin/reboot) a short script.
 * The script would simply run: "pstree -p >> /root/reboot.log"

Look at the process hierarchy in the log to find the culprit.

If this log isn't generated, that means somebody doesn't run "reboot"
but do an equivalent operation from software...

-- 
Oron Peled Voice: +972-4-8228492
o...@actcom.co.il  http://users.actcom.co.il/~oron
“If I have seen a little further it is by standing on the shoulders of Giants."
 --Isaac Newton.


___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[E.S. Rosenberg]

The physical location of a server is afaik irrelevant if you are dealing
with a US company, an EU company which is subject to the more strict EU
privacy laws would seem to be better in this case...


2014-06-08 22:23 GMT+03:00 Shachar Shemesh :

>  On 08/06/14 21:04, Efraim Flashner wrote:
> > The larger size sounds great, and with that much storage and ram
> > there's a lot more options for playing with.  Even if its not based in
> > the US I'd still prefer to encrypt it, since I wouldn't have sole
> > physical access to it.
> Yeah, good luck with that. Don't forget that your hosting company has
> access not only to your hard disk, but also to your RAM. Encryption doesn't
> buy you much protection.
>
> Shachar
>
>
> ___
> Linux-il mailing list
> Linux-il@cs.huji.ac.il
> http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il
>
>
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il

Re: self mail hosting

[Amos Shapira]

On 8 June 2014 21:38, Efraim Flashner  wrote:

> a bit more, but not so much.  I also have it running deluge, which
> crashes a little too often for me, so I have a cron job running to
> relaunch it if it crashes.  Fileserving works well.  I tried using it


Consider runit (http://smarden.org/runit/) - a supposedly better iteration
of daemontools (http://cr.yp.to/daemontools.html) - for process watchdog.
___
Linux-il mailing list
Linux-il@cs.huji.ac.il
http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il