Dr Fragen in the operating room

osx-server

  • Updating DNS settings

    ·

    Just to document. I’ve updated the settings in /etc/named/named.ca by using the following command and then restarting DNS. sudo curl ftp://ftp.internic.net/domain/named.root -o /var/named/named.ca Not sure how often this should be done. I also added the following to /etc/named.conf to reduced the error logging. I got that tidbit from google groups logging { category lame-servers {…

    Read More

  • Fail2ban Problems and Solutions

    ·

    If you use Fail2ban then you are probably aware of the fact that you must add a rule number to the ipfw deny rule for actionban in ipfw.conf. If you don’t add a rule number then there is no way for fail2ban to delete the rule after it expires. The problem lies in that you…

    Read More

  • Checking Fail2ban regex

    ·

    I’ve just stumbled across a great command in Fail2ban to check whether or not your filter will actually score a hit from your log file. From the command line. [code lang=bash] $ fail2ban-regex /path/to/logfile /etc/fail2ban/filter.d/myfilter.conf regex_to_ignore [/code] As an example. [code lang=bash] $ fail2ban-regex /var/log/secure.log /etc/fail2ban/filter.d/sshd.conf (myusername|myIPaddress) [/code] This seems like a great way to…

    Read More

  • Printopia

    ·

    AirPrint is one of the most welcome additions of late to iOS 4.2. Unfortunately Apple removed the ability to print to shared printers. Fortunately, creative software developers such as Ecamm have created Printopia as a solution for those of us with networked or shared printers. The simplicity of this Preference Pane is amazing. It takes…

    Read More

  • Fail2ban and OS X Server, Part Deux

    ·

    As some of you might know I run my own installation of OS X Server. I’ve since updated it to Snow Leopard Server and I think I’ve got most of it running well. As I check my server logs frequently I find that there are all sorts of script kiddies attempting to log in to…

    Read More

  • Setting up Snow Leopard iCal Server

    ·

    After scouring through the official documentation, and finding that lacking, Google has found the answers. Make sure Wiki Server is set to 127.0.0.1 and that Use SSL is checked. Here’s how I was finally able to get my groups into iCal SL/Lion client (no SSL) userName password server.com/principals/__uids__/wiki-groupName/ (no http://) To get this group calendar…

    Read More