<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Robert Penz Blog</title>
	<atom:link href="http://robert.penz.name/feed/" rel="self" type="application/rss+xml" />
	<link>http://robert.penz.name</link>
	<description>About Linux, IT security,tips and tricks and otherstuff that comes into my mind</description>
	<lastBuildDate>Fri, 21 May 2010 20:24:53 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=abc</generator>
		<item>
		<title>Tether a HTC Desire with Ubuntu 10.04 (Lucid) via USB</title>
		<link>http://robert.penz.name/307/tether-a-htc-desire-with-ubuntu-10-04-lucid-via-usb/</link>
		<comments>http://robert.penz.name/307/tether-a-htc-desire-with-ubuntu-10-04-lucid-via-usb/#comments</comments>
		<pubDate>Fri, 21 May 2010 20:24:53 +0000</pubDate>
		<dc:creator>robert</dc:creator>
				<category><![CDATA[HowTo]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://robert.penz.name/?p=307</guid>
		<description><![CDATA[You&#8217;re as amazed as I&#8217;m how short this article is as I&#8217;m. I looked through the Internet before I tried it myself and did a look at articles like this.  Almost all wrote how complicated that is (e.g. a HTC Software for Windows that works or not) or that you need a software like PDAnet. [...]]]></description>
			<content:encoded><![CDATA[<p>You&#8217;re as amazed as I&#8217;m how short this article is as I&#8217;m. I looked through the Internet before I tried it myself and did a look at articles like <a href="http://www.androidcentral.com/android-internet-tether" target="_blank">this</a>.  Almost all wrote how complicated that is (e.g. a HTC Software for Windows that works or not) or that you need a software like PDAnet. Thats absolutely not true for the HTC Desire with an Ubuntu 10.04 notebook/netbook. I just connected both via the shipped USB cable and selected on the Desire to share the Internet connection. And guess what happend the Network Manager told me that I&#8217;m connected to the network. I couldn&#8217;t believe it so I flipped to my shell windows and did a ping. And yes, I was connected.  I really don&#8217;t understand the problem now the people have. Wrong OS on the notebook? <img src='http://robert.penz.name/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </p>
<p>Some guys in the Linux/Open Source world talked with each other and made it just works out of the box &#8211; no special applications or drivers &#8211; it just worked. Big THX guys!!! I really love my Ubuntu and Android!</p>
]]></content:encoded>
			<wfw:commentRss>http://robert.penz.name/307/tether-a-htc-desire-with-ubuntu-10-04-lucid-via-usb/feed/</wfw:commentRss>
		<slash:comments>8</slash:comments>
		</item>
		<item>
		<title>Automating VMware modules reinstall after Linux kernel upgrades</title>
		<link>http://robert.penz.name/304/automating-vmware-modules-reinstall-after-linux-kernel-upgrades/</link>
		<comments>http://robert.penz.name/304/automating-vmware-modules-reinstall-after-linux-kernel-upgrades/#comments</comments>
		<pubDate>Sat, 15 May 2010 10:15:50 +0000</pubDate>
		<dc:creator>robert</dc:creator>
				<category><![CDATA[HowTo]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://robert.penz.name/?p=304</guid>
		<description><![CDATA[I found a nice blog post for you guys that run Linux systems within Vmware be it Server or ESX. After each kernel update from your distribution you need to manually recompile/reconfigure your Vmware kernel modules. What makes that even worse is that during that time you don&#8217;t have a network connection, so no ssh [...]]]></description>
			<content:encoded><![CDATA[<p>I found a nice blog post for you guys that run Linux systems within Vmware be it Server or ESX. After each kernel update from your distribution you need to manually recompile/reconfigure your Vmware kernel modules. What makes that even worse is that during that time you don&#8217;t have a network connection, so no ssh script magic if you&#8217;ve more than one Linux in a Vmware. But there is a solution for this problem, just take a look at this <a href="http://www.tuxyturvy.com/blog/index.php?/archives/48-Automating-VMware-modules-reinstall-after-Linux-kernel-upgrades.html">blog post</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://robert.penz.name/304/automating-vmware-modules-reinstall-after-linux-kernel-upgrades/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Howto install TeamSpeak 3 server on Ubuntu 10.04 (Lucid)</title>
		<link>http://robert.penz.name/296/howto-install-teamspeak-3-server-on-ubuntu-10-04-lucid/</link>
		<comments>http://robert.penz.name/296/howto-install-teamspeak-3-server-on-ubuntu-10-04-lucid/#comments</comments>
		<pubDate>Sat, 15 May 2010 10:03:35 +0000</pubDate>
		<dc:creator>robert</dc:creator>
				<category><![CDATA[HowTo]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://robert.penz.name/?p=296</guid>
		<description><![CDATA[It has been a long time since my last post &#8211; I&#8217;m sorry for that but I didn&#8217;t have the time. Anyway I just installed TeamSpeak 3 on a Ubuntu 10.04 for a friend and want to share that info. Getting TeamSpeak running is mostly not the problem but you don&#8217;t want to start it [...]]]></description>
			<content:encoded><![CDATA[<p>It has been a long time since my last post &#8211; I&#8217;m sorry for that but I didn&#8217;t have the time. Anyway I just installed TeamSpeak 3 on a Ubuntu 10.04 for a friend and want to share that info. Getting TeamSpeak running is mostly not the problem but you don&#8217;t want to start it after every boot by hand or run it as root. This Howto shows what I did. I assume that all user actions shown in this howto are performed as root or after executing <code>sudo bash</code>.</p>
<p>First you need to create a user under which the TeamSpeak server should run by executing following command:</p>
<p><code>adduser --disabled-login teamspeak</code></p>
<p>Now we need to get the software (64bit in my case)</p>
<p><code>wget http://ftp.4players.de/pub/hosted/ts3/releases/beta-22/teamspeak3-server_linux-amd64-3.0.0-beta22.tar.gz</code>   (Take also a look if a new version is out when you install your server)</p>
<p>and extract it</p>
<p><code>tar xzf teamspeak3-server_linux-amd64-3.0.0-beta22.tar.gz</code></p>
<p>We move it to a nice place with</p>
<p><code>mv teamspeak3-server_linux-amd64 /opt/ts3</code></p>
<p>and give it to the user teamspeak</p>
<p><code>chown -R teamspeak /opt/ts3</code></p>
<p>If you take a look into the <code>/opt/ts3</code> directory you&#8217;ll see that there is a already a start/stop script (<code>ts3server_startscript.sh</code>), we will utilize it. Create a init.d file with pasting the content after executing <code>cat &gt; /etc/init.d/teamspeak </code>:</p>
<p><code><br />
#! /bin/sh<br />
### BEGIN INIT INFO<br />
# Provides:          teamspeak<br />
# Required-Start:    networking<br />
# Required-Stop:<br />
# Default-Start:     2 3 4 5<br />
# Default-Stop:      S 0 1 6<br />
# Short-Description: TeamSpeak Server Daemon<br />
# Description:       Starts/Stops/Restarts the TeamSpeak Server Daemon<br />
### END INIT INFO<br />
</code><code><br />
set -e<br />
</code><code><br />
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin<br />
DESC="TeamSpeak Server"<br />
NAME=teamspeak<br />
USER=teamspeak<br />
DIR=/opt/ts3<br />
DAEMON=$DIR/ts3server_startscript.sh<br />
#PIDFILE=/var/run/$NAME.pid<br />
SCRIPTNAME=/etc/init.d/$NAME<br />
</code><code><br />
# Gracefully exit if the package has been removed.<br />
test -x $DAEMON || exit 0<br />
</code><code><br />
cd $DIR<br />
sudo -u teamspeak ./ts3server_startscript.sh $1<br />
</code></p>
<p>Now press <code>ENTER</code> and <code>CTRL-D</code> and you&#8217;ve inserted the content into the file. Set the permission correctly with</p>
<p><code>chmod 755 /etc/init.d/teamspeak</code></p>
<p>and now you can try it out by calling</p>
<p><code>/etc/init.d/teamspeak start</code></p>
<p>Take note of the login and token as you will need them later. You can also look for them in the log files in <code>/opt/ts3/logs/</code>. The last thing you need to do now is to make sure the init script is executed at boot time by using following command:</p>
<p><code>update-rc.d teamspeak defaults</code></p>
<p>At last if you&#8217;ve a firewall running on your system you need to make sure that you open all your ports. To find out which ports are used by teamspeak use following command:</p>
<p><code><br />
# netstat -lnp | grep ts3<br />
tcp        0      0 0.0.0.0:10011           0.0.0.0:*               LISTEN      30232/ts3server_lin<br />
tcp        0      0 0.0.0.0:30033           0.0.0.0:*               LISTEN      30232/ts3server_lin<br />
udp        0      0 0.0.0.0:9987            0.0.0.0:*                           30232/ts3server_lin<br />
</code></p>
<p>I hope this howto helped someone and write a comment if you found an error or a better way to do something. Now you just need to point your TeamSpeak client to the server and go to the menu entry &#8220;permissions | use token&#8221; and copy and past the token from above into the edit box. (only insert the chars behind &#8220;token=&#8221;) </p>
]]></content:encoded>
			<wfw:commentRss>http://robert.penz.name/296/howto-install-teamspeak-3-server-on-ubuntu-10-04-lucid/feed/</wfw:commentRss>
		<slash:comments>8</slash:comments>
		</item>
		<item>
		<title>Workaround for routing WOL (Wake on LAN) packets with Linux</title>
		<link>http://robert.penz.name/294/workaround-for-routing-wol-packets-with-linux/</link>
		<comments>http://robert.penz.name/294/workaround-for-routing-wol-packets-with-linux/#comments</comments>
		<pubDate>Sat, 16 Jan 2010 15:37:41 +0000</pubDate>
		<dc:creator>robert</dc:creator>
				<category><![CDATA[HowTo]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://robert.penz.name/?p=294</guid>
		<description><![CDATA[If you want to send a WOL packet to a PC within your subnet it is really easy. Just install a program like wakeonlan (apt-get install wakeonlan) and type something like: wakeonlan 01:02:03:04:05:06 But how to you send a WOL packet to an other subnet? Basically you use a UDP packet and send it to [...]]]></description>
			<content:encoded><![CDATA[<p>If you want to send a WOL packet to a PC within your subnet it is really easy. Just install a program like wakeonlan (<code>apt-get install wakeonlan</code>) and type something like:</p>
<p><code><br />
wakeonlan 01:02:03:04:05:06<br />
</code></p>
<p>But how to you send a WOL packet to an other subnet? Basically you use a UDP packet and send it to the broadcast address of the other network. e.g. with wakeonlan it looks like this</p>
<p><code><br />
wakeonlan -i 192.168.1.255 01:02:03:04:05:06<br />
</code></p>
<p>But you need support for this from your router, as normally they don&#8217;t allow sending to the broadcast address from other networks. Professional routers/layer3 switches have support for this (you just need to enable it), but you&#8217;ve a Linux router at home? (e.g. one with Openwrt or Debian/Ubuntu)</p>
<p>The simplest way to get it working is to enter following on the router (rerun it at every boot):</p>
<p><code><br />
arp -s 192.168.1.254 FF:FF:FF:FF:FF:FF<br />
</code></p>
<p>This tells the router that the given IP has a MAC address which is used for broadcasts. Now you only need to send the packet to this new &#8220;broadcast&#8221; address instead of the real one. So your wakeup call looks like this:</p>
<p><code><br />
wakeonlan -i 192.168.1.254 01:02:03:04:05:06<br />
</code></p>
<p><strong>ps:</strong> you should only enable something like this on a trusted network and the IP address you use should be not used by any other device.</p>
]]></content:encoded>
			<wfw:commentRss>http://robert.penz.name/294/workaround-for-routing-wol-packets-with-linux/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>KDE 4.x and Autostart</title>
		<link>http://robert.penz.name/223/kde-4-x-and-autostart/</link>
		<comments>http://robert.penz.name/223/kde-4-x-and-autostart/#comments</comments>
		<pubDate>Thu, 03 Sep 2009 19:17:44 +0000</pubDate>
		<dc:creator>robert</dc:creator>
				<category><![CDATA[HowTo]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://robert.penz.name/?p=223</guid>
		<description><![CDATA[I was told by some fellow Linux guys that with KDE 4.x there is no Autostart possible anymore. I just wanted to write this blog post to show them that it is still possible even if it not in the KDE menu. Just create following directory if it does not exists mkdir ~/.kde/Autostart Some distributions [...]]]></description>
			<content:encoded><![CDATA[<p>I was told by some fellow Linux guys that with KDE 4.x there is no Autostart possible anymore. I just wanted to write this blog post to show them that it is still possible even if it not in the KDE menu. Just create following directory if it does not exists</p>
<p><code>mkdir ~/.kde/Autostart</code></p>
<p>Some distributions may use <code>.kde4</code> instead of <code>.kde</code>. Now just place a symlink into this directory with a command like this one for dropbox.</p>
<p><code>ln -s ~/.dropbox-dist/dropbox ~/.kde/Autostart/dropbox</code></p>
<p>At least on my Kubuntu systems with KDE 4.3.x that works. <img src='http://robert.penz.name/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://robert.penz.name/223/kde-4-x-and-autostart/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Mini-Howto: Restore Windows MBR/Bootloader with Linux</title>
		<link>http://robert.penz.name/221/mini-howto-restore-windows-mbrbootloader-with-linux/</link>
		<comments>http://robert.penz.name/221/mini-howto-restore-windows-mbrbootloader-with-linux/#comments</comments>
		<pubDate>Wed, 26 Aug 2009 13:31:21 +0000</pubDate>
		<dc:creator>robert</dc:creator>
				<category><![CDATA[HowTo]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://robert.penz.name/?p=221</guid>
		<description><![CDATA[I&#8217;m often, at least more than I care, asked how to restore a Windows MBR/bootloader without having a windows install cd or a dos boot disk at hand. It&#8217;s quite easy you need just a Linux live cd like (the Ubuntu live cd or Knoppix) or an installed Linux you want get rid of. I [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;m often, at least more than I care, asked how to restore a Windows MBR/bootloader without having a windows install cd or a dos boot disk at hand. It&#8217;s quite easy you need just a Linux live cd like (the Ubuntu live cd or Knoppix) or an installed Linux you want get rid of. I really don&#8217;t know why you want to do the second, but anyway here are the 2 solutions I know of.</p>
<p>Boot Linux and make sure you&#8217;ve a working Internet connection and type following on the terminal/konsole.</p>
<p><strong>1. Solution</strong></p>
<p><code><br />
sudo apt-get install syslinux<br />
</code></p>
<p>if the package got installed use following to write the MBR.</p>
<p><code><br />
sudo dd if=/usr/lib/syslinux/mbr.bin of=/dev/sda<br />
</code></p>
<p><strong>2. Solution</strong></p>
<p><code><br />
sudo apt-get install mbr<br />
</code></p>
<p>if the package got installed use following to write the MBR.</p>
<p><code><br />
sudo install-mbr -i n -p D -t 0 /dev/sda<br />
</code></p>
<p><strong>Common for both</strong></p>
<p>Replace sda if you want to install the MBR to a different drive. Take a look at your hard disks with <code>sudo fdisk -l</code> if you&#8217;re unsure. Finally reboot and your windows should boot.</p>
]]></content:encoded>
			<wfw:commentRss>http://robert.penz.name/221/mini-howto-restore-windows-mbrbootloader-with-linux/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>Workaround for the Ubuntu problem with KVM switches</title>
		<link>http://robert.penz.name/219/workaround-for-the-ubuntu-problem-with-kvm-switches/</link>
		<comments>http://robert.penz.name/219/workaround-for-the-ubuntu-problem-with-kvm-switches/#comments</comments>
		<pubDate>Wed, 26 Aug 2009 12:45:17 +0000</pubDate>
		<dc:creator>robert</dc:creator>
				<category><![CDATA[HowTo]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://robert.penz.name/?p=219</guid>
		<description><![CDATA[It seems that Ubuntu not only Karmic (9.10), but also older versions have a problem with KVM (Keyboard, Video, Mouse) switches. To be exact the problem is the auto-detection of the capabilities of the monitor. If you connect the monitor directly to the computer everything works, if you use a KVM switch you get only [...]]]></description>
			<content:encoded><![CDATA[<p>It seems that Ubuntu not only Karmic (9.10), but also older versions have a problem with KVM (Keyboard, Video, Mouse) switches. To be exact the problem is the auto-detection of the capabilities of the monitor. If you connect the monitor directly to the computer everything works, if you use a KVM switch you get only 800&#215;600 as the maximum resolution.</p>
<p>The workaround is to tell the xserver the 	Horizsync and Vertrefresh the monitor really supports. With older Ubuntu versions you could just add following lines (for a 1280&#215;1024 LCD) to your <code>/etc/X11/xorg.conf</code> in the monitor section:</p>
<pre><code>
Section "Monitor"
        .....
        Option          "DPMS"
	Horizsync 31.5-64.0
	Vertrefresh 56.0 - 65.0
        .....
EndSection
</code></pre>
<p>But starting with Karmic Ubuntu has no <code>/etc/X11/xorg.conf</code> file by default anymore. So what we need is a complete minimal <code>xorg.conf</code> file so we can include our 3 lines, but we don&#8217;t want to mess anything else up. This is the minimal config I came up with.</p>
<pre><code>
Section "InputDevice"
	Identifier	"Generic Keyboard"
	Driver		"kbd"
	Option		"XkbRules"	"xorg"
	Option		"XkbModel"	"pc105"
	Option		"XkbLayout"	"de"
	Option		"XkbVariant"	"nodeadkeys"
EndSection

Section "InputDevice"
	Identifier	"Configured Mouse"
	Driver		"mouse"
EndSection

Section "Device"
	Identifier	"Configured Video Device"
EndSection

Section "Monitor"
	Identifier	"Configured Monitor"
        Option          "DPMS"
	Horizsync 31.5-64.0
	Vertrefresh 56.0 - 65.0
EndSection

Section "Screen"
	Identifier	"Default Screen"
	Monitor		"Configured Monitor"
	Device		"Configured Video Device"
        SubSection "Display"
                Depth           24
                Modes           "1280x1024" "1024x768"
        EndSubSection
EndSection

Section "ServerLayout"
        Identifier      "Default Layout"
        Screen          "Default Screen"
        InputDevice     "Generic Keyboard"
        InputDevice     "Configured Mouse"
EndSection</code></pre>
<p>Except the Keyboard stuff the should be nothing thats not minimal. Maybe it is also possible to remove some lines there, but I didn&#8217;t test it. I was happy that it worked this way <img src='http://robert.penz.name/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> . If you&#8217;ve an even more minimal config write a comment please!</p>
]]></content:encoded>
			<wfw:commentRss>http://robert.penz.name/219/workaround-for-the-ubuntu-problem-with-kvm-switches/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Fast test if local mail works on a server</title>
		<link>http://robert.penz.name/209/fast-test-if-local-mail-works-on-a-server/</link>
		<comments>http://robert.penz.name/209/fast-test-if-local-mail-works-on-a-server/#comments</comments>
		<pubDate>Tue, 25 Aug 2009 19:18:54 +0000</pubDate>
		<dc:creator>robert</dc:creator>
				<category><![CDATA[HowTo]]></category>
		<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://robert.penz.name/?p=209</guid>
		<description><![CDATA[I just helped a friend whose server did not send cron mails to his mail server, which is this case led almost to data loss as the backup didn&#8217;t work correctly. I looked at the setup and I though I found the problem and correct it, but now I wanted to test it as easily [...]]]></description>
			<content:encoded><![CDATA[<p>I just helped a friend whose server did not send cron mails to his mail server, which is this case led almost to data loss as the backup didn&#8217;t work correctly. I looked at the setup and I though I found the problem and correct it, but now I wanted to test it as easily as possible. Therefore I typed following command:</p>
<p><code>echo "Subject: test" | sendmail -v root</code></p>
<p>Then I looked if the lokal MTA, in this cache ssmtp delivered the mail to mail server. I though at least I find this line again if I search my blog and maybe it helps someone else too.</p>
]]></content:encoded>
			<wfw:commentRss>http://robert.penz.name/209/fast-test-if-local-mail-works-on-a-server/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Free SSL certificates will be supported in IE/Windows [Update]</title>
		<link>http://robert.penz.name/212/free-ssl-certificates-will-be-supported-in-iewindows/</link>
		<comments>http://robert.penz.name/212/free-ssl-certificates-will-be-supported-in-iewindows/#comments</comments>
		<pubDate>Fri, 21 Aug 2009 14:42:12 +0000</pubDate>
		<dc:creator>robert</dc:creator>
				<category><![CDATA[IT Security]]></category>

		<guid isPermaLink="false">http://robert.penz.name/?p=212</guid>
		<description><![CDATA[In the StartCom Blog the head of the company writes that its CA will be included by Microsoft. He states, &#8220;Starting approximately the 22nd of September, Microsoft intends to distribute a non-security update package to the Windows operating systems which includes the trusted StartCom root certificate and the automatic root certificate update service will update [...]]]></description>
			<content:encoded><![CDATA[<p>In the <a href="http://blog.startcom.org/?p=205">StartCom Blog</a> the head of the company writes that its CA will be included by Microsoft. He states, <em>&#8220;Starting approximately the 22nd of September, Microsoft intends to distribute a non-security update package to the Windows operating systems which includes the trusted StartCom root certificate and the automatic root certificate update service will update the cryptographic certificates root store on those systems whenever a StartCom issued certificate is encountered.&#8221;</em></p>
<p>Why is this worth reporting? This CA is with the above mentioned date the first CA which provides a Free SSL certificate which is supported by Microsoft and therefore by all Internet Explorer browsers. Sure this is &#8220;only&#8221; a SSL certificate which only assures the domain name or email address, but this is much more than now. You find many small mail servers where the webmail/IMAP/POP3/SMTP or a small homepage for a few users is self signed. All these can now be protected much better, the only problem seems to be that the CA is not supported by Firefox and other open source players. The other authority I know which provides free SSL certificates is <a href="http://www.cacert.org">CAcert</a>. They are much stronger in the open source world, but with the inclusion of the StartSSL CA by Microsoft, they will have a much lower install base of browsers than <a href="http://www.startssl.com/">StartSSL</a>.</p>
<p><strong>[Update]</strong> Mozilla and Apple support this CA for years already. My error &#8211; sorry. So these Free SSL certs are really something for a small website or mail server.<strong>[/Update]</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://robert.penz.name/212/free-ssl-certificates-will-be-supported-in-iewindows/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Courier-MTA reacts badly if own DNS server goes down [Update]</title>
		<link>http://robert.penz.name/210/courier-mta-reacts-badly-if-own-dns-server-goes-down/</link>
		<comments>http://robert.penz.name/210/courier-mta-reacts-badly-if-own-dns-server-goes-down/#comments</comments>
		<pubDate>Tue, 18 Aug 2009 18:29:46 +0000</pubDate>
		<dc:creator>robert</dc:creator>
				<category><![CDATA[Linux]]></category>

		<guid isPermaLink="false">http://robert.penz.name/?p=210</guid>
		<description><![CDATA[Today my DNS registrar and in my case also the provider of the DNS servers for my domains had a total blackout. He was down for about an hour, none of the 3 DNS servers was reachable. Ok, this was bad, no system could get the IPs for domain names &#8211; nothing I can to [...]]]></description>
			<content:encoded><![CDATA[<p>Today my DNS registrar and in my case also the provider of the DNS servers for my domains had a total blackout. He was down for about an hour, none of the 3 DNS servers was reachable. Ok, this was bad, no system could get the IPs for domain names &#8211; nothing I can to there except using a 4th DNS server operated by me in the future. But this was not the biggest problem, some DNS servers had the IP for my mail servers stored and tried to connect via SMTP to my courier-mta. The problem now is that courier didn&#8217;t accept the connections it tried to lookup its own name via the DNS servers in <code>/etc/resolve.conf</code> and ignored the settings in <code>/etc/hosts</code> (basically its own name). I thought surely I&#8217;ve a configuration error until I found following in the courier-mta FAQ.</p>
<p><em>NOTE: The Courier mail server does not read the hosts file. It needs a DNS server (although it is possible to have a working the Courier mail server configuration in a completely DNS-free environment, this excersize requires changing many configuration files, and perhaps will be its own FAQ entry some day).</em></p>
<p>What the fuck? Courier stops working if the DNS server for the own domain/hostname is not reachable? That must be a bug and not a feature. I will talk to the author and report back what he says.</p>
<p><strong>[update]</strong> I talked with the author and other courier experts. The way courier is written it uses one internal function to all his DNS stuff and as it needs MX,TXT queries it uses a glibc function in it with does ignore the hosts file. There is currently no way around it, and so I&#8217;ll need to deploy an DNS server on my mail server to provide a DNS which can always resolve it&#8217;s own hostname. <strong>[/update]</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://robert.penz.name/210/courier-mta-reacts-badly-if-own-dns-server-goes-down/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
