Common Server issues – FAQs and answers from those in the know
WSUS Physical Isolation Update Issue
27 January 2026 @ 12:43 am
The company network has a physical separation between the internal and external networks. WSUS servers are deployed on both networks. Updates are transferred from the external network to the internal network server using a combination of copying and overwriting the WSUS content and using the wsusutil export/import commands. This process has been working correctly, but recently a strange problem has occurred. Previously, after copying the patch files and metadata to the internal server and the server stabilized, the WSUS overview page showed the status as "Download Status: Updates requiring files: 0". This was always the case before, but recently it changed to "Download Status: Updates requiring files: 1765, Downloaded 108.34MB, Total 154,393.54MB". After two weeks, the screen remains unchanged. Running wsusutil.exe reset several times did not resolve the issue. I hope someone can help me solve this problem.
How can I visualize the hierarchy of all Azure resource groups, resources and models in my Azure subscription?
26 January 2026 @ 11:59 pm
I am currently managing a complex Azure subscription that contains a large number of Resource Groups, Resources and various models (mostly AI models/deployments).
Navigating through the portal list-view is becoming difficult. I am looking for a way to visualize these components in a hierarchical or graphical representation. How can I visualize the hierarchy of all Azure resource groups, resources and models in my Azure subscription?
How to debug EXIM4 output message headers?
26 January 2026 @ 10:29 am
I have some issue with DKIM signature of my EXIM4 server. For some domains it works for others it doesn't work and I want to start checking what is wrong.
Is there any way to get the output message in testing mode? I could get all debug informations for a delivery but I cannot get the final output message with all its headers.
For example if I run:
echo -e "Subject: Test01\nno body" | exim -d+all-f [email protected] -N [email protected]
How can I see all added headers?
Forwarding OpenVPN server traffic with firewalld
26 January 2026 @ 8:39 am
Recently I switched from ufw to firewalld and faced an issue that connected OpenVPN server clients do not have internet access. As I researched it became clear that ufw and firewalld forwarding rules have a great difference and firewalld rules are somehow need to be set up.
So in ufw I used before.rules like this:
# START OPENVPN RULES
# NAT table rules
*nat
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -s 10.8.0.0/8 -o enp1s0 -j MASQUERADE COMMIT
# END OPENVPN RULES
listing iptables -L -n -v --line-numbers:
Chain FORWARD
1 43059 25M DOCKER-USER all -- * * 0.0.0.0/0 0.0.0.0/0
2 43059 25M DOCKER-FORWARD all -- * * 0.0.0.0/0 0.0.0.0/0
3 1030 501K ufw-before-logging-forward all -- * * 0.0.0.0/0 0.0.0.0/0
4 1030 501K ufw-before-forward all -- * * 0.0.0.0/0 0.0.0.0/0
5 32 2027 ufw-after-forward all -- * * 0.0.0.0/0 0.0.0.0/0
iptables -t nat -L POSTROUTING -n -v
0 0 M
How can I set the capacity or Tokens Per Minute (TPM) rate limit to the minimum for all model deployments across an entire Azure subscription?
25 January 2026 @ 11:48 pm
The capacity or Tokens Per Minute (TPM) rate limit of the model deployments across in my Azure subscription are a mess:
[table is chopped]
How can I set the capacity or Tokens Per Minute (TPM) rate limit to the minimum for all model deployments across an entire Azure subscription? I don't want to do it manually one by one.
[table is chopped]
How can I set the capacity or Tokens Per Minute (TPM) rate limit to the minimum for all model deployments across an entire Azure subscription? I don't want to do it manually one by one.SNMP not responding over specific interface
25 January 2026 @ 5:16 pm
I have a Ubuntu server that I have installed snmpd on. I have disabled v1 and v2 and have setup v3. I am connecting to it over a Wireguard tunnel so I have limited it to the wireguard interface's ip, and when I updated ufw to allow 161 I bound it to the wireguard interface.
It looks good on the server, snmpwalk -l authPriv -v 3 -u snmp -a SHA -A "PASWORD" -x AES -X "PASSWORD" 10.8.0.1 (with the passwords swapped with actual) responds just fine when I run it on the server. But when I run it on the client on the other end of the wireguard connection, it times out.
My ufw status looks right, I am using this server as backup a DNS server and have it also bound to the wg0 interface so it is only accessible through the wireguard tunnel and it works fine.
Status: active
To Action From
-- ------ ----
OpenSSH ALLOW Anywhere
How to let Postfix use Dovecot to check quotas for virtual aliases
25 January 2026 @ 11:22 am
Issue
Receiving an email for an alias, I got those errors:
<[email protected]>Recipient address rejected: Unknown user;
I realized this happened when postfix queries dovecot about user quota.
Basically, what happens is that postfix queries dovecot using the virutal alias as name, not the virtual user. And since dovecot doesn't find a user under that name, it returns an error and postfix rejects the mail.
Configuration
I followed the docs at https://doc.dovecot.org/latest/core/plugins/quota.html when setting up the server.
/etc/postfix/main.cf
smtpd_recipient_restrictions =
check_policy_service unix:private/quota-status
/etc/dovecot/conf.d/90-quota.conf
service quota-status {
executable = quota-status -p postfix
unix_listener /var/spool/postfix/private/quota-s
How to install Ansible man pages with pipx?
25 January 2026 @ 9:25 am
Installing ansible-core from Debian repositories provides man pages for commands (ansible, ansible-playbook…). However, when installing with pipx, no man page is available.
Is there a way to obtain Ansible commands man pages when installing with pipx?
Note that:
I am using pipx 1.7.1, and that pipx should install man pages since version 1.3.0
Source code only seems to contain a template for all man pages
I could not find any man page in the distributed .whl
Setup Grafana PostgreSQL datasource
25 January 2026 @ 7:53 am
I am trying to configure PostgreSQL as data source in my new grafana service
and get an error:
stat /home/grafana/.postgresql/postgresql.crt: permission denied
We used to have grafana service on specific AWS ec2 instance, we are in the process of cleaning it and separating the services to multiple machines. I tried to move grafana to a new service, I copied all the data from all the sub folders to new AWS ec2 instance and ran the grafana service and started to get a error and can't find what the source cause of the error.
I can't find the file in the source AWS ec2 and provisioning folder is empty, one file and is all commented out '#'.
Before you say grafana save all it's inner data in local sqlite3 database (that's located in /etc/grafana/grafana.ini [database] section). I tried to setup a clean Grafana instance and the error persists.
I would like to hear any ideas you have, I am totally stuck.
Grafana version was the lates
Display quota in Roundcube when using count quota driver in Dovecot with Maildir
24 January 2026 @ 11:56 pm
Setting up a new dovecot install. Docevot docs says the recommended quota driver is count.
Roundcube apparently gets the quota information form the maildirsize file in the maildir directory. When using count driver, this file is not updated.
Using maildir driver does update the file and things work but since count is recommended, I'm trying to evaluate my options.
quota-clone is the recommended way to "export" quota information. Should I use this to write to a database? How may I tell Roundcube to read there instead of the maildirsize file?