Difference between revisions of "IT/Benchfile"

From CA Greens wiki
Jump to: navigation, search
(Email server)
(Email server)
Line 17: Line 17:
 
The blocklist file is /var/lib/rbldns/iparanges.  It's maintained on another server, and pushed here by rsync via ssh.  Configuration is in /etc/default/rbldnsd.  This is one of two servers of the "dnsbl.cagreens.org" blocklist.  At least four hosts refer to this DNSBL.
 
The blocklist file is /var/lib/rbldns/iparanges.  It's maintained on another server, and pushed here by rsync via ssh.  Configuration is in /etc/default/rbldnsd.  This is one of two servers of the "dnsbl.cagreens.org" blocklist.  At least four hosts refer to this DNSBL.
  
== Email server ==
+
== Email server: Postfix and Mailman ==
 
The "Debian Way" has Postfix' configuration files in /etc/postfix and the mapfiles they use in /etc/postfix/maps.  Tradition has the email aliases file in /etc/, so we have a symlink there pointing at the real one.   
 
The "Debian Way" has Postfix' configuration files in /etc/postfix and the mapfiles they use in /etc/postfix/maps.  Tradition has the email aliases file in /etc/, so we have a symlink there pointing at the real one.   
 
  apt-get install postfix postfix-pcre mailman
 
  apt-get install postfix postfix-pcre mailman
Line 23: Line 23:
 
  apt-get install mailman
 
  apt-get install mailman
 
when there's an update, without losing/breaking anything.
 
when there's an update, without losing/breaking anything.
 +
 +
Mailman generates two files /var/lib/mailman/data/aliases and /var/lib/mailman/data/aliases.db which are nentioned in /etc/postfix/main.cf.  That's where the aliases for Mailman posting and admin functions are.
 +
 +
There's a popular script for further integration between Postfix and Mailman.  Debian distributes it with Mailman but we're not using it.  It makes Postfix depend on Python.  The main advantage would be pre-queue rejection of rejectable messages, reducing backscatter and administrative noise.

Revision as of 14:51, 18 December 2011

Benchfile

A "benchfile" is the book you leave in your desk drawer for your replacement in case you suddenly get a better job.

Provisioning

The Green Party of California rents a virtual private server (VPS) from Godmama's Forge. It's Ubuntu-9.0 ("Karmic Koala") based on Debian-5.0 ("Squeeze") plus some work-in-progress from Debian Unstable ("Sid"). The virtual host is named wangari.cagreens.org and runs under Vmware Enterprise.

LAMP Stack

apt-get install apache2-mpm-prefork php5-pear php5-gd php5-cli libapache2-mod-php5 mysql-server mysql-client

Backups

apt-get install rsync

Backup is a nightly rsync via ssh to a host in Cameron's garage. Authentication is by a key in ~root/.ssh/authorized_keys.

DNS block list

apt-get install rbldnsd

The blocklist file is /var/lib/rbldns/iparanges. It's maintained on another server, and pushed here by rsync via ssh. Configuration is in /etc/default/rbldnsd. This is one of two servers of the "dnsbl.cagreens.org" blocklist. At least four hosts refer to this DNSBL.

Email server: Postfix and Mailman

The "Debian Way" has Postfix' configuration files in /etc/postfix and the mapfiles they use in /etc/postfix/maps. Tradition has the email aliases file in /etc/, so we have a symlink there pointing at the real one.

apt-get install postfix postfix-pcre mailman

Mailman runs as the "list" user. GNU Mailman installs into its data directories and runs there. Debian installs the software in /usr/lib/cgi-bin/mailman and /usr/lib/mailman/, with data files in /var/lib/mailman/. They've done a nice job of separating the files their package maintainer updates from those Mailman updates as it runs, so you can do

apt-get install mailman

when there's an update, without losing/breaking anything.

Mailman generates two files /var/lib/mailman/data/aliases and /var/lib/mailman/data/aliases.db which are nentioned in /etc/postfix/main.cf. That's where the aliases for Mailman posting and admin functions are.

There's a popular script for further integration between Postfix and Mailman. Debian distributes it with Mailman but we're not using it. It makes Postfix depend on Python. The main advantage would be pre-queue rejection of rejectable messages, reducing backscatter and administrative noise.