Comments for skelleton.net https://www.skelleton.net/ Thu, 15 Aug 2019 10:48:03 +0200 hourly 1 https://wordpress.org/?v=5.3 Comment on How to eliminate spam and protect your name with DMARC by Sven Wallman https://www.skelleton.net/2015/03/21/how-to-eliminate-spam-and-protect-your-name-with-dmarc/#comment-11626 Thu, 15 Aug 2019 10:48:03 +0000 https://www.skelleton.net/?p=951#comment-11626 Great post!

About the report_script: My mysql database had strict-mode turned on and I got the following error:
opendmarc-import: failed to create table ID: Field ‘repuri’ doesn’t have a default value

I googled and used https://serverpilot.io/docs/how-to-disable-strict-mode-in-mysql-5-7 to turn it off.
Got an error about it not being able to create reports- google it and added a “cd /var/tmp”. The reports were mailed out successfully after those changes.

]]> Comment on How to eliminate spam and protect your name with DMARC by Kurt Fitzner https://www.skelleton.net/2015/03/21/how-to-eliminate-spam-and-protect-your-name-with-dmarc/#comment-11625 Wed, 08 May 2019 15:13:34 +0000 https://www.skelleton.net/?p=951#comment-11625 I would suggest using unix sockets is more appropriate for a single-machine installation. I don’t want to be critical of this howto, because it’s fantastic and still relevant today, but teaching people how to go through the slightly added difficulty of doing this with unix sockets is, I think, a better approach.

Why unix sockets? Less overhead (you’re not dumping data through the TCP/IP stack), better security, and better readability in your configuration files. There is no doubt which milter is which when you use unix sockets.

How to do it?
1) Create and chown the socket directories (this assumes opendkim and opendmarc are already installed):
sudo mkdir /var/spool/postfix/opendkim
sudo chown opendkim /var/spool/postfix/opendkim
sudo mkdir /var/spool/postfix/opendmarc
sudo chown opendmarc /var/spool/postfix/opendmarc

2) Set opendkim and opendmarc to use unix sockets. This is in the default files mentioned above (/etc/default/opendkim and /etc/default/opendmarc)
SOCKET=unix:/var/spool/postfix/opendkim/opendkim.sock
SOCKET=unix:/var/spool/postfix/opendmarc/opendmarc.sock

3) Give postfix access to the opendkim and opendmarc group so it can access the sockets:
sudo usermod postfix -a -G opendkim
sudo usermod postfix -a -G opendmarc

4) Change the milter settings for postfix in /etc/postfix/main.cfg
smtpd_milters=unix:/opendkim/opendkim.sock,unix:/opendmarc/opendmarc.sock
non_smtpd_milters=unix:/opendkim/opendkim.sock,unix:/opendmarc/opendmarc.sock

See how that improves the readability? Plus, two fewer ports open is two fewer ports you have to check when, say, you look at a list of open ports on your server and are tracking down why on earth those ports are open. In short, there are really good reasons why unix sockets are generally used for inter-process communication.

]]> Comment on How to eliminate spam and protect your name with DMARC by Manjeet https://www.skelleton.net/2015/03/21/how-to-eliminate-spam-and-protect-your-name-with-dmarc/#comment-11623 Thu, 03 Jan 2019 21:26:15 +0000 https://www.skelleton.net/?p=951#comment-11623 Thank you for this detailed explanation.

]]> Comment on How to eliminate spam and protect your name with DMARC by Alexandru https://www.skelleton.net/2015/03/21/how-to-eliminate-spam-and-protect-your-name-with-dmarc/#comment-11622 Sat, 10 Nov 2018 08:28:21 +0000 https://www.skelleton.net/?p=951#comment-11622 Congrats for this website and for trying to teach the people the right way to build an email server.

]]> Comment on Installing Oracle Linux and Apex by chuks https://www.skelleton.net/2013/07/19/installing-oracle-linux-and-apex/#comment-11621 Mon, 23 Jul 2018 17:33:26 +0000 https://www.skelleton.net/?p=636#comment-11621 Thanks bro! The process was flawless.

]]> Comment on How to eliminate spam and protect your name with DMARC by Sunbya https://www.skelleton.net/2015/03/21/how-to-eliminate-spam-and-protect-your-name-with-dmarc/#comment-11620 Fri, 08 Jun 2018 10:19:50 +0000 https://www.skelleton.net/?p=951#comment-11620 Thank you for your explain but i cannot still solve for my domain dewhiteshome.com

]]> Comment on How to escape geoblocking by content providers with Squid by Sam https://www.skelleton.net/2015/10/20/how-to-escape-geoblocking-with-squid/#comment-11618 Fri, 06 Apr 2018 14:58:11 +0000 https://www.skelleton.net/?p=1211#comment-11618 how would you adapt this to do https as well?

]]> Comment on How to escape geoblocking by content providers with Squid by skelleton https://www.skelleton.net/2015/10/20/how-to-escape-geoblocking-with-squid/#comment-11617 Fri, 30 Mar 2018 06:24:01 +0000 https://www.skelleton.net/?p=1211#comment-11617 Probably E-Mail. May mail is: my nickname at mydomain.net

I am not sure how quick i will be able to respond I leave for a business trip to India on the weekend.

]]> Comment on How to escape geoblocking by content providers with Squid by Sam https://www.skelleton.net/2015/10/20/how-to-escape-geoblocking-with-squid/#comment-11616 Thu, 29 Mar 2018 22:24:54 +0000 https://www.skelleton.net/?p=1211#comment-11616 i just dont understand how to setup the routing tables for the vpn adaptor, whats the best way to contact you?

]]> Comment on How to escape geoblocking by content providers with Squid by skelleton https://www.skelleton.net/2015/10/20/how-to-escape-geoblocking-with-squid/#comment-11615 Thu, 29 Mar 2018 16:46:20 +0000 https://www.skelleton.net/?p=1211#comment-11615 I have not used this setup for about a year or so but what is the problem?

]]>