Category: Linux

  • Edgerouter IPsec tunnel to Fritzbox

    So, I have an EdgeRouter Lite in Singapore (Starhub) and a FritzBox in Belgium (EDPnet). This is mostly stuff that I have found from several articles, mostly from here. ERL: eth0 is WAN, eth1 (10.60.111.0/24) and eth2 (unused, not VPN’ed) are LAN FritzBoz: 192.168.1.0/24 This is the FritzBox config (go to VPN and them Import…

  • Postfix & Courier & Letsencrypt

    First of all, create your certificates (the regular way). I created one with multiple domains: webmail.rootspirit.com, mail.rootspirit.com, smtp.rootspirit.com. In my case, as the mailserver and webserver are behind a proxy (postfix, imap, Roundcube Webmail), I create the certificate on the proxy (nginx) and scp the cert to the mail server. All this is automated with…

  • Postfix delete mails from/to one address

    Postfix delete mails from/to one address

    Monit suddenly sending 18.000 e-mail? Gmail blocking your mx IP & getting all other incoming emails to your Gmail account (as it’s getting forwarded to Gmail) delayed? Have no fear… mailq | grep [email protected] | cut -d’ ‘ -f1 | xargs -rn1 postsuper -d Edit the e-mail address. Note: mainly a reminder for myself. 😉

  • Gmail & Postfix: unencrypted emails?

    If you’re running Postfix, add this line to main.cf: smtp_tls_security_level = may Restart Postfix, and retry. PS: You can set encrypt instead of may — but this can cause issues with Amavis and/or SpamAssassin.

  • Belgian banks & SSL — part 5

    Minor end of year update. No big SSL exploits have been released since (bar DH, see below). Once again, this is testing the public websites I can access. There might be other gateways, APIs, etc that are not (as) secure. It’s worthy to note that some banks are serious about security and fixing their SSL.…

  • Mobile: It Changes Everything

    (Source)

  • CIFS: mount error(13): Permission denied

    You’ve just updated your Raspberry Pi (or whatever Linux) and you’re noticing your CIFS (smb) mounts aren’t getting auto mounted anymore. You curse and start noticing this error: # mount -t cifs //192.168.1.100/public -o username=public,password=public sam/ mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) The solution is to add after…

  • All in One display prototype v2.0

    22″ Ilyama LCD panel, Atom based NUC (board only) with Low Voltage RAM, USB WiFi adapter (could have used half sized PCIe + antenna — but I’ve got a ton of USB WiFi left), extended ethernet. Mostly made out of plastic (hardened polyester) and metal, unlike the wooden version. 3D render: Actual design: Pictures at the…

  • T-EBBR55 antenna (@Flightradar24)

    Flightradar24 (T-EBBR55) antenna being installed right next to BRU airport. Due to interference (GSM? WiFi (very very unlikely)? High voltage power lines?) we moved it to the side, as seen below. While it is blind from half a side, it can see all the way up to London and beyond. This is the result: As…