How to block UDP packets on all ports except one

Posted by: admin  :  Category: Firewall, Security

This example block all incoming packets except port number 27005.:

 -A INPUT -p udp --dport 27005 -j ACCEPT
iptables -A INPUT -p udp -i lo -j ACCEPT #You may ignore this rule
iptables -A INPUT -p udo -s 0/0 -j DROP
VN:F [1.9.14_1148]
Rating: 10.0/10 (1 vote cast)
VN:F [1.9.14_1148]
Rating: +1 (from 1 vote)

Popularity: 20% [?]

Tips for use Linux as mail server for Mail Marketing Script

Posted by: admin  :  Category: Rack Admins

Script not difficult task, but you will know some rules:

  • Server for only task. Disable a lot of unused services like as cups or samba.
  • Double check for closed relay for unauthentication emails. – direct way to Black List.
  • Keep server load – it will not more than CPU’s count. For Dual Core – not more than 2 LA for example.

Did you know?

Server can sent 12Mbps mail for each . Each 12Mbps request another . Yes, hyperthreading support for this count. For full you ned 4 with hyperthreading.

You may use RRDNS for speedup mail sending.  It used for multiple servers and balanced () MTA.

For Guranteed Delivery to (Yahoo,Hotmail,Google,etc) you need use:

  1. Valid PTR Record
  2. Domain Keys
  3. DNS Record

You may order for 120$.

[si-contact-form form='2']

VN:F [1.9.14_1148]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.14_1148]
Rating: 0 (from 0 votes)

Popularity: 2% [?]

How to Install supermicro IPMI in a linux server

Posted by: admin  :  Category: Hardware
Once Linux has been installed and it boots up, the IP and MAC address of the IPMI card have to be configured. Use the “ to set the MAC and IP address for the card. This command has to be run via and prompts for the new ip and mac address.

For the GPC agent to run, the openIPMI drivers need to be installed on the managed system. The default FC3 build has openIPMI  . The modules are ipmi_devinf and ipmi_si (located in /lib/modules/2.6.9-1.667smp/kernel/drivers/char/ipmi).

The ipmi_si need special parameters for loading. This was tested on a 2.6.10 kernel.

It does not work with the 2.6.9-1.667(smp) kernel in the FC3 package.

modprobe ipmi_si type=kcs ports=0xca8 si_regspacings=4.

Once these modules are up and running, start the smagent.

 $ smagent &
If you tried running this daemon, the system entered the graceful restart state whenever smagent started. Make sure it works before adding to rc.local/login script(this leads to a restart loop).

Use the utility from the remote system to access the IPMI card. Since IPMI is designed to be OS transparent, this utility does not need any modules to be installed in the kernel. If this does not work, run IPMIview in the same LAN and the gateway MAC and IP .

The IPMIview allows power shutdown, reset, and monitoring. The IPMI console redirection did not work though everything seemed to be configured properly. The BIOS on the P8SCi is supposed to detect the IPMI card automatically and set the console redirection options for it. Unfortunately, we were still seeing garbage in the remote console.

The current BIOS version of 1.1 shows the redirection going to “NULL” instead of something understandable like IPMI, COM1, etc.

The solution was to get the latest P8SCI BIOS (rev1.1) and re-flash it on the managed system. We had to do this even though the current BIOS on the board indictated it was already version 1.1.

VN:F [1.9.14_1148]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.14_1148]
Rating: 0 (from 0 votes)

Popularity: 100% [?]