The Craving Mind

Check interface status: <Quidway>display interface brief Check current-configuration: <Quidway>display current-configuration Check version: <Quidway>display version Check cpu-usage: <Quidway>display cpu-usage Check clock: <Quidway>display clock Show mac address: <Quidway>display mac-address Ethernet 0/0/16 Shut/unshut an interface: <Quidway>system-view [Quidway]interface Ethernet 0/0/16 [Quidway-Ethernet0/0/16]shutdown [Quidway-Ethernet0/0/16]undo shutdown [Quidway-Ethernet0/0/16]quit

The default main.cf file lists only a portion of the nearly 300 Postfix parameters. You can edit main.cf with the postconf command.  Comment lines start with the # character and continue to the end of the line. Blank and comment lines are ignored by Postfix. Topic:-1 Parameters can appear in any order within the file, and are written as you would expect: parameter = value A parameter definition must start in the first column of the line. The spaces around the equals sign are optional. Here is an example parameter assignment with a comment: # The myhostname value must be a fully qualified hostname. myhostname = mail.example.com You cannot have a comment on the same line as a parameter.  # This is a bad parameter assignment. Never do this. # myhostname = mail.example.com # must be fully qualified hostname Do not use quotation marks around values. They have no significance in the Postfix configuration, so they would be considered part of the value. Topic:-2 A line that start...

DomainKeys Identified Mail (DKIM) lets an organization take responsibility for a message that is in transit. The organization is a handler of the message, either as its originator or as an intermediary. Their reputation is the basis for evaluating whether to trust the message for further handling, such as delivery. Technically DKIM provides a method for validating a domain name identity that is associated with a message through cryptographic authentication.  DKIM signing is done at the domain level, including alias domains. Setting up signing consists of two parts:  I. Running zmdkimkeyutil to generate the DKIM keys and selector. The generated data is  stored in the LDAP server as part of the domain LDAP entry. II. Updating the DNS server with the public DNS entry.  DKIM needs to be generated per domain in the MTA Server, and needs to be configured in the public DNS of each domain.  Part I: (Adding DKIM in MTA server)  Step 1: Modify DKIM generator  a....

INFORMATION SMTP Relay      : mailrelay.example.com username            : relay@example.com password            : RelayExample port                        : 587/465 echo mailrelay.example.com relay@example.com:RelayExample > /opt/zimbra/conf/relay_password postmap /opt/zimbra/conf/relay_password postmap -q mailrelay.example.com /opt/zimbra/conf/relay_password zmprov ms `zmhostname` zimbraMtaSmtpSaslPasswordMaps lmdb:/opt/zimbra/conf/relay_password zmprov ms `zmhostname` zimbraMtaSmtpSaslAuthEnable yes zmprov ms `zmhostname` zimbraMtaSmtpCnameOverridesServername no zmprov ms `zmhostname` zimbraMtaSmtpTlsSecurityLevel may zmprov ms `zmhostname` zimbraMtaSmtpSaslSecurityOptions noanonymous zmprov ms `zmhostname` zimbraMtaRelayHost mailrelay.example.com:587 Ref: https://imanudin.net/2014/09/18/how-to-configure-outgoing-smtp-authentication-o...

Step:- 01 # sudo apt-get update && sudo apt-get upgrade # sudo apt-get install libsasl2-modules postfix #vi /etc/posttfix/main.cf myhostname = mail.drbdtest.com Step:-02 Generate app password for postfix Step:-03 Add Gmail username and password to postfix vi /etc/postfix/sasl/sasl_passwd [smtp.gmail.com]:587 username@gmail.com:password #sudo postmap /etc/postfix/sasl/sasl_passwd sudo chown root:root /etc/postfix/sasl/sasl_passwd /etc/postfix/sasl/sasl_passwd.db sudo chmod 0600 /etc/postfix/sasl/sasl_passwd /etc/postfix/sasl/sasl_passwd.db Configure postfix relay server #vi /etc/opstfix/main.cf relayhost = [smtp.gmail.com]:587 # Enable SASL authentication smtp_sasl_auth_enable = yes # Disallow methods that allow anonymous authentication smtp_sasl_security_options = noanonymous # Location of sasl_passwd smtp_sasl_password_maps = hash:/etc/postfix/sasl/sasl_passwd # Enable STARTTLS encryption smtp_tls_security_level = encrypt # Location of CA certificates smtp_tls_CAfile = /etc/ss...

General Configuration and Administration Postfix default directories: /etc/postfix                        [Configuration files and lookup tables] /usr/libexec/postfix         [ Postfix daemons] /var/spool/postfix           [ Queue files] /usr/sbin                              [ Postfix commands] Starting Postfix the First Time 1. Set hostname properly Postfix uses a configuration parameter called myhostname, which must be set to the fully qualified hostname of the system Postfix is running on. Once Postfix knows the fully qualified hostname, it can use that hostname to set default values for other important parameters, such as mydomain. If the parameter myhostname is not set, Postfix defaults to the hostname reported by the system itself. $hostname #postconf -e myhostname=mail.drb...

Step:01 Blocking Memcached Exploit ################################## For Zimbra Single Server Installation Configure memcached to listen on 127.0.0.1 only to avoid this attack.  Use below commands. su - zimbra /opt/zimbra/bin/zmprov ms `zmhostname` zimbraMemcachedBindAddress 127.0.0.1  /opt/zimbra/bin/zmprov ms `zmhostname` zimbraMemcachedClientServerList 127.0.0.1 Restart memcached: zmmemcachedctl restart Ref: https://wiki.zimbra.com/index.php?title=Blocking_Memcached_Attack