Create DMARC-Reports 1

After the DMARC Records checks in DMARC check on Debian Wheezy, I show how reports can be created and sent. First, we need a mysql database and a user to save the DMARC checks. Invoke mysql and run: CREATE DATABASE opendmarc; CREATE USER ‘opendmarc’@’127.0.0.1’ IDENTFIED BY ‘top_secret’; GRANT ALL PRIVILEGES […]


mysqldump –ignore-databases 2

With mysqldump it is not possible by the parameters to exclude individual databases. However, the database can be easily queried from the information_schema and this makes an exclude. mysqldump –databases `mysql –skip-column-names -e “SELECT GROUP_CONCAT(schema_name SEPARATOR ‘ ‘) FROM information_schema.schemata WHERE schema_name NOT IN (‘mysql’,’performance_schema’,’information_schema’, ‘db_test’);”` >/dump.sql Thanks to Ronald […]


Report Spam comments from WordPress to blocklist.de

The script wp-spamreport.php (as a download here in my git) reports at any time the spam comments of the last 48 hours to blocklist.de. It does not matter when a comment was marked as spam (manually or automatically by example Antispam Bee), but only that the comments are posted in […]


The purpose of a Sender Policy Framework (SPF) record 1

I use SPF records for many years. My implementation of SPF records in ISPConfig occurred to me to point out the advantages again. SPF is an authentication method that is stored in the DNS. This entry specifies which server can send mail for a particular domain. And why do I […]


Dovecot and Postfix with PFS (Perfect Forward Secrecy)

Perfect Forward Secrecy (PFS) is a data encoding property that ensures the integrity of a session key in the event that a long-term key is compromised. PFS accomplishes this by enforcing the derivation of a new key for each and every session. Setup Dovecot Dovecot (at least from 2.1.x) already […]


versioning etc directory with etckeeper 2

The configuration directory / etc should be versioned for documentary reasons and for backup. All changes are visible at a glance and a previous state can be restored easily. In / etc are also security-related information. Therefore, care should be taken when transferring and backup the repository on encrypting and […]


update ownership for files

To transfer the ownership of files in a directory recursively from a user / group to another, you can use this simple one-liner: find . -user old_user -group old_group -print0 | xargs -0 chown -v -h new_user:new_group I have found it here. There also the individual parameters are explained in […]


secure MySQL-replication with ssl 1

To secure replication over ssl, mysql must support ssl. mysql -u root -p show variables like ‘%ssl%’; If the result looks like this ssl is not configured yet. have_openssl DISABLED have_ssl DISABLED ssl_ca ssl_capath ssl_cert ssl_cipher ssl_key First, the directory for the ssl-keystore is created on both servers. mkdir -p […]