As you can probably see, this site has been somewhat stagnated for a long while... I am dabbling with so much at the moment, and my working life is also quite busy so I guess this site just got left. I spend a lot of time on github of late, so if y...
My previous ACL postings are not as one complete item, the following list of ACL's are recommended for shared hosting environments where users authenticate locally to send mail from dynamic address space. ...
This is a shameless plug really! I've set up an amazon store, with some useful books that pertain to these tutorials and some that have helped me in the past getting to grips with things My Amazon Store - Music & Books
This tutorial explains how to close an open DNS server and obscure which version you are running. Open /etc/named.conf Undernieth this: include "/etc/rndc.key"; controls { inet 127.0.0.1 allow { localhost; } keys { "rndckey"; };...
When I first started out with shared hosting, I found it difficult to find any comparitive information on the industry standard control panels. ...
Customers often ask me which linux OS they should use... When money is no object, RHEL is my obvious choice, but when cost is a factor thats when CentOS comes in What is CentOS The Official Description is as follows: CentOS is an Enterprise-class...
An easy way to make yourself a little less vulnerable to common attack vendors, is to hide the version numbers of the common daemons running on your boxes, and its relativly simple to do. Hiding the BIND Version If you follow my Closing Open D...
Having recently added an influx of hosting customers and some additional SA rules, I noticed a considerable increase in the amount of load that MailScanner was creating, with a limited spend this year (Too many shiny new servers) I decided to...
At work we all have Dell systems, my 2 happen to be Optiplex GX270's. I thought great, mainstream manufacturer so the default drivers set should cover it, how wrong I was, they happen to have the A03 BIOS and the Intel 865 chipset with the shared...
For RFC compliant mailservers (RFC822 6.3, RFC1123 5.2.7, and RFC2821 4.5.1) you are required to accept mail for postmaster for every domain you host (also accepting abuse@ all domains is considered good practice) the simple way to do this with...
Just a HOWTO to give you a basic insight into deterring SSH brute-force attempts. Nothing is better than a firewall, I am simply just explaining a couple of things you can do to make SSH a tiny bit more secure, I will explain in a later post about...
I, Myself as a paranoid sysadmin like to know when people log into any of the servers that I manage, even when my collegues are the people logging in, setting an e-mail alert on root login is in my opinion needed on any server you run, so you know...
This is a very basic list of procedures commonly used to lock down a linux web server, it is incomplete and very brief, when I have enough time I will lay it all out properly and add the missing pieces, hopefully though its of some use to you. ...
I have had various customers ask me for a partition schema to run a linux cpanel webserver with 73GB/80GB drives, to save me having to dig it up every time and to make it available to anyone it may be of use to, I have posted it here Mount Poi...
With /tmp mounted noexec on red hat based distros, logrotate at the end of every week doesn't actually write to the blank log files it creates, instead it writes new entries to the archived .1 files.Thanks again to Jonathan from way to the web. ...
This proved useful when I implemented MailScanner for Carbide-Finger Limited ...
This is a mirror of http://vamos-wentworth.org/exim-tricks.html (With a few very minor ammendments) I have been unable to get to the site since september so I decided to mirror the above URL, It was very useful information for me when I fir...
Back to top