Common Server issues – FAQs and answers from those in the know
SRS doesn't work on Exim4
8 January 2026 @ 5:41 pm
I have an Exim4 server on Ubuntu24 server.
This mx has a mysql connection to get list of mailboxes and redirects to serve, in case of redirect I need SRS to avoid SPF failure on redirect.
To enable SRS I followed these steps: https://ente.limmat.ch/kb/exim/exim_v4_srs.html
It seems that after migration from Ubuntu 20 to 24 my exim config is no more valid.
This is my config:
CHECK_RCPT_VERIFY_SENDER = yes
CHECK_DATA_VERIFY_HEADER_SENDER = yes
CHECK_RCPT_LOCAL_LOCALPARTS = ^[.] : ^.*[@%!|`#&?]
MAIN_LOG_SELECTOR = +tls_peerdn +address_rewrite +return_path_on_delivery +sender_on_delivery +smtp_confirmation +smtp_connection +smtp_incomplete_transaction +smtp_no_mail
daemon_smtp_ports=25 : 587 : 465
DKIM_SIGN_HEADERS = subject:to:from
exim_path = /usr/sbin/exim4
.ifndef CONFDIR
CONFDIR = /etc/exim4
.endif
UPEX4CmacrosUPEX4C = 1
####################################
Configure a DNS server per nic interface without systemd
8 January 2026 @ 4:34 pm
As per explained in this answer https://serverfault.com/a/835588/118396 it is possible to setup DNS per interface. This can be scripted to assign DNS per new VPN interface which comes in very handy when there is a use case requiring :
the base search domains & DNS server from your intranet always set (this is set by dhcp client) and then
dynamically add additional search domains & corresponding DNS servers per extra VPN interface (yes, I connect to multiple vpns for work simultaneously) using:
sudo systemd-resolve -i ${iface} --set-dns=1.2.3.4 --set-domain=example.com
This is fine and works great in systemd enabled Linux distros (debian, arch, *ubuntu, ...) through systemd-resolve.
However, I am now looking for a similar solution that's independent of systemd (for slackware specifically). What is there available ?
thank you !
Nextcloud axios send email error in Postfix local server
8 January 2026 @ 2:47 pm
This postfix install is working for relaying email addresses in a virtual file. Now I want it to send emails from a local Nextcloud web site. It errors with the next message:
postfix log:
Jan 8 14:37:56 vps postfix/smtpd[478184]: connect from vps.example.com[1.2.3.4]
Jan 8 14:37:56 vps postfix/smtpd[478184]: SSL_accept error from vps.example.com[1.2.3.4]: -1
Jan 8 14:37:56 vps postfix/smtpd[478184]: warning: TLS library problem: error:0A000418:SSL routines::tlsv1 alert unknown ca:ssl/record/rec_layer_s3.c:916:SSL alert number 48:
Jan 8 14:37:56 vps postfix/smtpd[478184]: lost connection after STARTTLS from vps.example.com[1.2.3.4]
Jan 8 14:37:56 vps postfix/smtpd[478184]: disconnect from vps.example.com[1.2.3.4] ehlo=1 starttls=0/1 commands=1/2
I have Lets Encrypt certificates
postfix log:
Jan 8 14:37:56 vps postfix/smtpd[478184]: connect from vps.example.com[1.2.3.4]
Jan 8 14:37:56 vps postfix/smtpd[478184]: SSL_accept error from vps.example.com[1.2.3.4]: -1
Jan 8 14:37:56 vps postfix/smtpd[478184]: warning: TLS library problem: error:0A000418:SSL routines::tlsv1 alert unknown ca:ssl/record/rec_layer_s3.c:916:SSL alert number 48:
Jan 8 14:37:56 vps postfix/smtpd[478184]: lost connection after STARTTLS from vps.example.com[1.2.3.4]
Jan 8 14:37:56 vps postfix/smtpd[478184]: disconnect from vps.example.com[1.2.3.4] ehlo=1 starttls=0/1 commands=1/2
I have Lets Encrypt certificatesHow can I remotely revoke Google Cloud Platform (GCP)'s Application Default Credentials (ADC) from a machine?
8 January 2026 @ 1:12 pm
I recently used a remote CLI to authenticate with Google Cloud Platform (GCP) using the following command:
gcloud auth application-default login --no-launch-browser
I no longer have access to that specific computer/CLI environment. Since this command stores a refresh token locally in a JSON file (typically in ~/.config/gcloud/application_default_credentials.json), I want to ensure that those credentials can no longer be used to access my GCP resources.
Since I cannot run gcloud auth application-default revoke on that machine, how do I invalidate that session/token remotely?
Understand potential resource limits with cloned processes which become orphaned
8 January 2026 @ 12:53 pm
I'm trying to find out which resource limits apply here and why:
So there is
initial process P which clone()s itself into child C1
then C1 clone()s itself into C2
(don't ask me why it does this, that's all I see using strace)
now C2 execve()s a new image,
C1 exit()s
as such, C2 gets reparented to PPID 1 (systemd or init).
It seems that when this process occurs many times, resource limits somehow still apply, i.e. P can't create/fork any more processes.
Since all C2 are orphaned why would it be that resource limits of parent still somehow apply? How would system keep track of how many processes were created like described above? According to ps, P does not have any children (and is itself orphaned).
(Note: I am sure that systemd control groups do not interfere here as TasksMax is set much higher than ulimit in this case)
Maybe the answer is it can't track this, and thus I'
Can't get Exchange mail rule to match subject - regex issue?
8 January 2026 @ 10:18 am
I've set up a rule in Exchange online to forward all emails sent by a mailbox to forward to specific users.
It works fine if I don't specify any conditions other than than the "sender", and correctly forwards all emails to the other users.
However, I'm trying to modify the rule so that it only forwards certain emails based on subject. I have the condition AND "The subject or body" - "subject matches these text patterns" set, which I understand needs a regex.
I want to match any emails with the phrase "New Ticket Logged" in the subject. So far, I've tried the following patterns:
New Ticket Logged
^New Ticket Logged$
^New\ Ticket\ Logged$
"^New\ Ticket\ Logged$"
And none of them have worked. Is there a different pattern I should be using? Or am I doing something else wrong?
Edit: So, I think the last three aren't working are because the ^ requires the string to be at the begin
Rack server grounding: connecting the yellow-green earth wire via a 3-pin plug
7 January 2026 @ 12:18 pm
I have a question regarding the connection of the yellow-green earth wire of a server rack.
The current setup is as follows:
All metallic devices in the rack are connected to each other via a yellow-green wire, which converges at a common grounding point (Point A inside the rack).
From Point A, a yellow-green wire extends that must be connected to earth.
Inside the rack, there is an UPS, which is connected to an external wall outlet near the rack.
Nearby the rack, there is a PC connected to a power strip C1, which in turn is connected to the UPS inside the rack.
Switch and router installed in the rack are powered via a rack-mounted power strip C2.
The external wall outlet has two sockets: one dedicated to the UPS and the other to a power strip C3, which powers a printer.
All power strips (C1, C2, C3) and the wall outlet have properly connected grounding.
DHCP command with RegEdit setting
7 January 2026 @ 10:08 am
Is there a setting or command that can make the client computer release its IP address at assignment time, such as a configuration option or a registry setting?
How Can I Access My WebServer's Public-Facing [External] Website from My Company's Internal LAN? [closed]
7 January 2026 @ 4:46 am
Problem
Internal users cannot access my website MyWebDomain.com, but external users can.
Desired Solution
Give internal users access to my website.
Network Limitations
No NAT on Gateway/Router
No Configurable DNS Settings on Gateway (ie, I can't set the router's DNS Address)
I've disabled navigation to my Public IP (ie, https://Z.Z.Z.Z:80 will not work) – due to my SSLs.
Needed Method
Using an Internal DNS Server
I can't rely on the drivers\etc\hosts\ file, because: (i) some of my LAN clients can't utilize it; and (ii) it is a suboptimal method for me (too many client devices; moderate frequency of network changes)
Current Setup
Public DNS (via Registrar) {@.MyWebDomain.com → Z.Z.Z.Z}
Port-Forwarding (via personal gateway) {Port 80 �
ceph orch device ls declares a freshly-zapped NVMe drive "not available"
6 January 2026 @ 2:59 pm
I'm preparing a 4-way Ceph cluster. All four nodes are equipped with one 7.5 TB NVMe SSD each. On all nodes, the respective SSD is listed as "available" by ceph-volume inventory, but according to sudo ceph orch device ls, I can't use the SSD as mass storage. This is what I get (irrelevant output omitted):
mixtile@blade3n1:~$ sudo ceph orch device ls --refresh
HOST PATH TYPE DEVICE ID SIZE AVAILABLE REFRESHED REJECT REASONS
blade3n1 /dev/nvme0n1 ssd Lexar_SSD_NM790_8TB_QDB384R000565P220J 7630G No 25m ago Has a FileSystem, Insufficient space (<10 extents) on vgs, LVM detected
blade3n2 /dev/nvme0n1 ssd Lexar_SSD_NM790_8TB_QCS704R000132P220J 7630G No 3w ago Has a FileSystem, Insufficient space (<10 extents) on vgs, LVM detected
blade3n3 /dev/nvme0n1 ssd Lexar_SSD