Differences

This shows you the differences between two versions of the page.

--- computers:serverconfig [2008/11/13 12:46] – david
+++ computers:serverconfig [2010/12/10 16:02] (current) – david
@@ Line 110: / Line 110: @@
 files are in: **/etc/cron.hourly/**
+==== Check NFS Mounts ====
+After the last power outage, the NWN servers were not speaking as I hadn't mounted the NFS mounts which share the drives to one another.  So, it occurred to me to write a little script to test if the NFS directories were mounted (and if not, go ahead and try and mount them).
+NOTE:  I moved this to hourly so it will reconnect after a power off / reboot in a more reasonable time.
+**/etc/cron.hourly/check_nfs_mounts.sh**:
+<code bash>
+#!/bin/bash
+#
+# check_nfs_mounts.sh
+# quick check if we have our NFS directories mounted... if not... mount them!
+# - dlr 2008/11/12
+MOUNTEDTEST=`df | grep '/mnt/nfs/sage/space' | wc -l`
+if [ $MOUNTEDTEST -ne 1 ]; then
+  mount /mnt/nfs/sage/space
+fi
+MOUNTEDTEST=`df | grep '/mnt/nfs/sage/local/home' | wc -l`
+if [ $MOUNTEDTEST -ne 1 ]; then
+  mount /mnt/nfs/sage/local/home
+fi
+</code>
 ==== dovecot alive? ====
@@ Line 194: / Line 222: @@
   fi
 done
-</code>
-==== Check NFS Mounts ====
-After the last power outage, the NWN servers were not speaking as I hadn't mounted the NFS mounts which share the drives to one another.  So, it occurred to me to write a little script to test if the NFS directories were mounted (and if not, go ahead and try and mount them).
-**/etc/cron.daily/check_nfs_mounts.sh**:
-<code bash>
-#!/bin/bash
-#
-# check_nfs_mounts.sh
-# quick check if we have our NFS directories mounted... if not... mount them!
-# - dlr 2008/11/12
-MOUNTEDTEST=`df | grep '/mnt/nfs/sage/space' | wc -l`
-if [ $MOUNTEDTEST -ne 1 ]; then
-  mount /mnt/nfs/sage/space
-fi
-MOUNTEDTEST=`df | grep '/mnt/nfs/sage/local/home' | wc -l`
-if [ $MOUNTEDTEST -ne 1 ]; then
-  mount /mnt/nfs/sage/local/home
-fi
 </code>
@@ Line 541: / Line 542: @@
 ===== dovecot =====
+==== Upgrading ====
+  - Downloaded latest version (1.2.16)
+  - Uncompress in **/usr/local/src**
+  - Build:  <code>
+./configure
+make
+make install
+</code>
+  - Fix the certificate (make a new one)
+    - <code>cd /usr/local/src/dovecot-1.2.16/doc</code>
+    - <code>mv dovecot-openssl.cnf dovecot-openssl.cnf.orig</code>
+    - <code>nano dovecot-openssl.cnf   ### and paste in your values</code>
+    - <code>chmod 755 mkcert.sh</code>
+    - <code>mv /etc/ssl/certs/dovecot.pem /etc/ssl/certs/dovecot.pem.20101210</code>
+    - <code>mv /etc/ssl/private/dovecot.pem /etc/ssl/private/dovecot.pem.20101210</code>
+    - <code>./mkcert.sh</code>
+    - <code>chmod 600 /etc/ssl/private/dovecot.pem  # it already was, but just in case </code>
+    - Restart **dovecot** (i just killed the process and then run it again)
+==== Initial Install ====
   * Download the source from [[http://www.dovecot.org/download.html|Dovecot home page]].
@@ Line 1175: / Line 1201: @@
 Someone found a way through the firewall once to hit the Samba server.. so I added these lines to **/etc/rc.d/rc.local** to just drop any samba packets at the WAN interface.
-I also blocked the slim server access from outside, just seemed like a bad idea 8-)
+I also blocked the slim server access from outside, just seemed like a bad idea 8-)  (and just now added apcupsd to the list of blocked from the outside //2008/11/13 10:43//)
 <code bash>
@@ Line 1197: / Line 1223: @@
 iptables -A OUTPUT -o eth0 -p tcp --dport 445 -j DROP
 iptables -A OUTPUT -o eth0 -p tcp --sport 445 -j DROP
+# block port 3551 so that apcupsd cannot be seen from outside
+iptables -A OUTPUT -o eth0 -p tcp --dport 3551 -j DROP
+iptables -A OUTPUT -o eth0 -p tcp --sport 3551 -j DROP
 # block port 9000 so slimserver can't be accesed from outside