Uno-Code

Okay, I've been dealing with this problem FOREVER. On one box, my syslog-ng server, logrotate consumes 100% CPU for several hours, but will eventually finish. For this whole time, I've been thinking it's a bad logrotate script, but I've never been able to isolate it. My recent attempt to isolate the problem, I used strace to see what was going on.

I immediately saw it looping on /etc/localtime. Here is a partial output of my strace:

On only two boxes I manage, I had problems updating net-snmp to net-snmp-5.4.2.1. During the compile I would receive the following failure message:

Over the years, I've set up multiple firewalls and fileservers for clients and my own office. What I require is a server platform that is Gentoo Linux friendly with quality components and at an affordable price. Early on, I was a big fan of the Dell PowerEdge 400SC. I remember picking those up (without operating system) for around $200! I stuck with them when they went to the 410SC, 420SC and the 430SC series. The 430SC series is when they changed their look to a sleaker design which is what is available in the new 440SC series.

Dell have been hit and miss when it comes to laptops and workstations, but their switches and SC series servers have been fantastic for me and my clients. If you plan on installing Gentoo on these, you will need to configure SATA in the kernel along with a few other 'gotchas'. If you're interested, I would be more than happy to provide a one of my kernel configs to get you up and running.

I wanted to tighten up my FTP service. Currently, I use and love vsftpd. Unfortunately, as far as I know, it does not support SFTP protocol, but it does support TLS/SSL handling.

You will need to ensure that the vstpd has been compiled with ssl support. Here are my current USE flags for vsftpd:

The first step is to create a self-signed certificate:

Next, we need to add some additional configuration options to /etc/vsftpd/vsftpd.conf

Starting Nov 8, I've been seeing fairly consistent segfaults from amavisd. I'm unable to determine what is causing it. Below is a listing of occurances in /var/log/messages. The server has been running fine (normal load - mail traffic is normal). Also I checked uptime (reboot was Nov.1) and recent emerges. The only emerges close Nov.8 was rrdtool and cacti (11/5 and 11/6). I posted this on the Gentoo forums to see if someone can point me in the right direction. I saw mention that this could be related to hardware. I'm hoping this is not the case, especially since it seems to point to perl5.8.8.

Earlier this year, I was receiving logs stating that dansguardian could not connect to IPC socket. I just recently upgraded dansguardian (2.10-r1) and finally found the problem. I originally posted this issue in February on the Gentoo forums and didn't receive any response. Today, I found the problem and the fix.

Below is an example of the logs:

I was bummed out when the Gentoo maintainers removed osiris from portage due to inactivity. Because of this I had to 'unmask' this package to keep my system somewhat happy. I've been a big fan of osirisd/osirismd for a long long time. I think it's the best file integrity checker out there. I always hated systems that kept the database on the host. These should be stored on a remote host. Samhain does something similar, but osiris is just so simple and clean. It's absolutely perfect.

Today, I saw that osiris is back in portage and with the latest version of 4.2.3. I do have a lot of client hosts, so I figured I would spend most of the day upgrading to this version, but the upgrade went extremely smooth. Simply emerging osiris on all boxes and restarting osirisd on the clients and osirismd on the host and I was back up and running in no time.

Thanks Gentoo for bringing it back!

Started seeing some MSN Featured Offer Spam on one of my mailservers. The annoying part is that has a forged 'from' value to match the recipient. On top of that, it's being sent from a secondary MX server which is allowing relaying to my domains. So I can't block that server from sending it, and we prevented spam filtering on that since users would not be able to retrieve messages if they are quarantined on that box.

The messages look like this:

So a buddy of mine told me about Synergy and I had to try it out for myself. Basically, Synergy allows you to manage keyboard, video and mouse across computers using a single host. Now, when I heard this, I didn't think it was a big deal. Just another KVM or something to that affect. But it's so much cooler than that. To help you understand, I'll break down my basic work station set up.

Currently, I have a little Dell work station with dual monitors and extended desktop running Windows. I also have another monitor next to it that is connected to my Gentoo development server. That server does alot of little things. It's my MP3 server, development server, backup server, gkrellm server, etc. So I usually need to know what's happening with that machine at all times. Normally, I have a KVM installed on that, and when I need to, I switch to that KVM to manage it. It's clunky, but I thought that was my only option.

Basically, here is the monitor line up

Sometimes with Gentoo you'll run across some weird 'blocker' issues. Meaning that certain older packages/libraries/etc are blocked in order to do the update. Sometimes these are super easy to fix, usually by unmerging the blocked packages and emerging the new update package. Sometimes, it's a pain. The e2fsprogs and e2fsprogs-lib blocker problem is an example of a 'sticky' situation. richard.scott posted the solution at the Gentoo Forum, but I'll repost here. It worked like a charm for me.