System Administration

Redundancy helps with scheduled maintenance too

Although many system architects concentrate on redundant systems in case of system failure, redundant systems also help with scheduled maintenance.

Changing nameservers?

If you're going to change the authoritative nameservers for your domain, you need to know the proper procedure to do it. If you don't follow these simple procedures when changing nameservers, and you aren't familiar with the way that DNS caching works, you will end up with unexpected results.

Exclamation marks at end of lines in e-mail

If you're receiving e-mail messages and there are random exclamation marks (!) at the end of lines, you've likely encountered the odd "line length limit indicator" added by Sendmail MTAs.

The Internet standards for SMTP indicate that a single line of an e-mail message can be no longer than 1000 characters. If sendmail encounters a longer line, it wraps it and adds an exclamation point (!) at the end of the line as an indicator of its behavior.

553 5.0.0 .com

If you're recently configured your sendmail daemon and get the following error after a MAIL FROM:

553 5.0.0 .com<TMPF<TMPF>... Unbalanced '<'

Then you likely compiled with mailertable support but don't have a mailertable.db file. The solution is to just create your mailertable file. Usually like this:

makemap hash /etc/mail/mailertable.db < /dev/null

An easy software SSL VPN solution for Linux

When I went on vacation recently, I was looking for a VPN solution that would be easily used from just about anywhere, and that was easy to install. I found the perfect solution in a product from 3SP Limited, a U.K. company.

A VPN is a virtual private network. In the most basic terms, it is a tool that makes a network that is accessible over a public network to be accessible as if you were on that private network. This is usually done by tunneling the traffic, securely, through the public network.

Removing SecuROM

SecuROM has been in the press a lot recently, due to it being installed surreptitiously by Spore, the new game from Electronic Arts. A class action lawsuit has been filed against Electronic Arts claiming that Spore installs SecuROM on the affected system and that SecuROM can't be removed without reformatting or replacing "the drive". I think that's going a little overboard. In this article, I'm going to tell you how to remove SecuROM from your system.

Privileged access and information integrity auditing

Two fundamental principles of information security are privileged access and information integrity auditing. In order to protect data, one needs the records of data access, as well as the records of any alterations or destruction of the data.

DNS problems affecting e-mail delivery: SPF Records

Having outgoing e-mail rejected due to domain name system configuration issues is a common problem that Internet e-mail server administrators face. There are eight things you can check to make sure that you're DNS is configured for optimum delivery. I will be covering a different item in each day of this series.

Network Solutions under DoS attack

Yesterday afternoon, our many servers hosted at SoftLayer, one of the fastest growing data center companies in the U.S. started being unable to resolve names using Nework Solutions' nameservers at worldnic.com. In addition, our e-mail servers at SoftLayer were unable to connect to Network Solutions' hosted e-mail services at netsolmail.com to deliver e-mail. SoftLayer claims that Network Solutions is undergoing a DoS attack.

Linux hangs at SELinux: Disabled at runtime.

I had a system running a Linux operating sytstem that would hang during the boot sequence right after where it said "SELinux: Disabled at runtime". I was able to find the problem and resolve it.

Pages