serverfault.com

VN:F [1.9.22_1171]
Rating: 6.0/10 (1 vote cast)

Common Server issues – FAQs and answers from those in the know

SRS doesn't work on Exim4

8 January 2026 @ 5:41 pm

I have an Exim4 server on Ubuntu24 server. This mx has a mysql connection to get list of mailboxes and redirects to serve, in case of redirect I need SRS to avoid SPF failure on redirect. To enable SRS I followed these steps: https://ente.limmat.ch/kb/exim/exim_v4_srs.html It seems that after migration from Ubuntu 20 to 24 my exim config is no more valid. This is my config: CHECK_RCPT_VERIFY_SENDER = yes CHECK_DATA_VERIFY_HEADER_SENDER = yes CHECK_RCPT_LOCAL_LOCALPARTS = ^[.] : ^.*[@%!|`#&?] MAIN_LOG_SELECTOR = +tls_peerdn +address_rewrite +return_path_on_delivery +sender_on_delivery +smtp_confirmation +smtp_connection +smtp_incomplete_transaction +smtp_no_mail daemon_smtp_ports=25 : 587 : 465 DKIM_SIGN_HEADERS = subject:to:from exim_path = /usr/sbin/exim4 .ifndef CONFDIR CONFDIR = /etc/exim4 .endif UPEX4CmacrosUPEX4C = 1 ####################################

Configure a DNS server per nic interface without systemd

8 January 2026 @ 4:34 pm

As per explained in this answer https://serverfault.com/a/835588/118396 it is possible to setup DNS per interface. This can be scripted to assign DNS per new VPN interface which comes in very handy when there is a use case requiring : the base search domains & DNS server from your intranet always set (this is set by dhcp client) and then dynamically add additional search domains & corresponding DNS servers per extra VPN interface (yes, I connect to multiple vpns for work simultaneously) using: sudo systemd-resolve -i ${iface} --set-dns=1.2.3.4 --set-domain=example.com This is fine and works great in systemd enabled Linux distros (debian, arch, *ubuntu, ...) through systemd-resolve. However, I am now looking for a similar solution that's independent of systemd (for slackware specifically). What is there available ? thank you !

Nextcloud axios send email error in Postfix local server

8 January 2026 @ 2:47 pm

This postfix install is working for relaying email addresses in a virtual file. Now I want it to send emails from a local Nextcloud web site. It errors with the next message: enter image description here postfix log: Jan 8 14:37:56 vps postfix/smtpd[478184]: connect from vps.example.com[1.2.3.4] Jan 8 14:37:56 vps postfix/smtpd[478184]: SSL_accept error from vps.example.com[1.2.3.4]: -1 Jan 8 14:37:56 vps postfix/smtpd[478184]: warning: TLS library problem: error:0A000418:SSL routines::tlsv1 alert unknown ca:ssl/record/rec_layer_s3.c:916:SSL alert number 48: Jan 8 14:37:56 vps postfix/smtpd[478184]: lost connection after STARTTLS from vps.example.com[1.2.3.4] Jan 8 14:37:56 vps postfix/smtpd[478184]: disconnect from vps.example.com[1.2.3.4] ehlo=1 starttls=0/1 commands=1/2 I have Lets Encrypt certificates

How can I remotely revoke Google Cloud Platform (GCP)'s Application Default Credentials (ADC) from a machine?

8 January 2026 @ 1:12 pm

I recently used a remote CLI to authenticate with Google Cloud Platform (GCP) using the following command: gcloud auth application-default login --no-launch-browser I no longer have access to that specific computer/CLI environment. Since this command stores a refresh token locally in a JSON file (typically in ~/.config/gcloud/application_default_credentials.json), I want to ensure that those credentials can no longer be used to access my GCP resources. Since I cannot run gcloud auth application-default revoke on that machine, how do I invalidate that session/token remotely?

Understand potential resource limits with cloned processes which become orphaned

8 January 2026 @ 12:53 pm

I'm trying to find out which resource limits apply here and why: So there is initial process P which clone()s itself into child C1 then C1 clone()s itself into C2 (don't ask me why it does this, that's all I see using strace) now C2 execve()s a new image, C1 exit()s as such, C2 gets reparented to PPID 1 (systemd or init). It seems that when this process occurs many times, resource limits somehow still apply, i.e. P can't create/fork any more processes. Since all C2 are orphaned why would it be that resource limits of parent still somehow apply? How would system keep track of how many processes were created like described above? According to ps, P does not have any children (and is itself orphaned). (Note: I am sure that systemd control groups do not interfere here as TasksMax is set much higher than ulimit in this case) Maybe the answer is it can't track this, and thus I'

Can't get Exchange mail rule to match subject - regex issue?

8 January 2026 @ 10:18 am

I've set up a rule in Exchange online to forward all emails sent by a mailbox to forward to specific users. It works fine if I don't specify any conditions other than than the "sender", and correctly forwards all emails to the other users. However, I'm trying to modify the rule so that it only forwards certain emails based on subject. I have the condition AND "The subject or body" - "subject matches these text patterns" set, which I understand needs a regex. I want to match any emails with the phrase "New Ticket Logged" in the subject. So far, I've tried the following patterns: New Ticket Logged ^New Ticket Logged$ ^New\ Ticket\ Logged$ "^New\ Ticket\ Logged$" And none of them have worked. Is there a different pattern I should be using? Or am I doing something else wrong? Edit: So, I think the last three aren't working are because the ^ requires the string to be at the begin

Rack server grounding: connecting the yellow-green earth wire via a 3-pin plug

7 January 2026 @ 12:18 pm

I have a question regarding the connection of the yellow-green earth wire of a server rack. The current setup is as follows: All metallic devices in the rack are connected to each other via a yellow-green wire, which converges at a common grounding point (Point A inside the rack). From Point A, a yellow-green wire extends that must be connected to earth. Inside the rack, there is an UPS, which is connected to an external wall outlet near the rack. Nearby the rack, there is a PC connected to a power strip C1, which in turn is connected to the UPS inside the rack. Switch and router installed in the rack are powered via a rack-mounted power strip C2. The external wall outlet has two sockets: one dedicated to the UPS and the other to a power strip C3, which powers a printer. All power strips (C1, C2, C3) and the wall outlet have properly connected grounding.

DHCP command with RegEdit setting

7 January 2026 @ 10:08 am

Is there a setting or command that can make the client computer release its IP address at assignment time, such as a configuration option or a registry setting?

How Can I Access My WebServer's Public-Facing [External] Website from My Company's Internal LAN? [closed]

7 January 2026 @ 4:46 am

Problem Internal users cannot access my website MyWebDomain.com, but external users can. Desired Solution Give internal users access to my website. Network Limitations No NAT on Gateway/Router No Configurable DNS Settings on Gateway (ie, I can't set the router's DNS Address) I've disabled navigation to my Public IP (ie, https://Z.Z.Z.Z:80 will not work) – due to my SSLs. Needed Method Using an Internal DNS Server I can't rely on the drivers\etc\hosts\ file, because: (i) some of my LAN clients can't utilize it; and (ii) it is a suboptimal method for me (too many client devices; moderate frequency of network changes) Current Setup Public DNS (via Registrar) {@.MyWebDomain.com → Z.Z.Z.Z} Port-Forwarding (via personal gateway) {Port 80 �

ceph orch device ls declares a freshly-zapped NVMe drive "not available"

6 January 2026 @ 2:59 pm

I'm preparing a 4-way Ceph cluster. All four nodes are equipped with one 7.5 TB NVMe SSD each. On all nodes, the respective SSD is listed as "available" by ceph-volume inventory, but according to sudo ceph orch device ls, I can't use the SSD as mass storage. This is what I get (irrelevant output omitted): mixtile@blade3n1:~$ sudo ceph orch device ls --refresh HOST PATH TYPE DEVICE ID SIZE AVAILABLE REFRESHED REJECT REASONS blade3n1 /dev/nvme0n1 ssd Lexar_SSD_NM790_8TB_QDB384R000565P220J 7630G No 25m ago Has a FileSystem, Insufficient space (<10 extents) on vgs, LVM detected blade3n2 /dev/nvme0n1 ssd Lexar_SSD_NM790_8TB_QCS704R000132P220J 7630G No 3w ago Has a FileSystem, Insufficient space (<10 extents) on vgs, LVM detected blade3n3 /dev/nvme0n1 ssd Lexar_SSD