Skip to content

Instantly share code, notes, and snippets.

View mrballcb's full-sized avatar

Todd Lyons mrballcb

View GitHub Profile
# A manual SELECT needs to return data in order specified bellow:
# username, cryptpw, clearpw, uid, gid, home, maildir, quota, fullname, options
#
MYSQL_SELECT_CLAUSE SELECT CONCAT(email.name, '@', domain.name), \
user.password, \
'', \
503, \
500, \
TRIM(TRAILING '/Maildir/' FROM CASE \
@mrballcb
mrballcb / gist:c096f1a27207a6b58530
Created August 11, 2014 14:40
SpamAssassin local.cf used with Exim
# Adjust headers to indicate which machine in the bank it came through
add_header spam Flag _YESNOCAPS_
add_header all Status _YESNO_, hits=_HITS_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_
add_header all Report _REPORT_
# Adjust report for borderline spams to be vendor neutral
# Modified template. Keep it under 78 columns (inside the the dots below).
# ........................................................................
clear_report_template
report Content analysis details: (_HITS_ points, _REQD_ required)
@mrballcb
mrballcb / gist:93dc046a442b818b1660
Last active August 29, 2015 14:05
Possible authenticator construction
${if and
{
{!eq{$1}{}}
{!eq{$2}{}}
{crypteq
{$2}
{${extract
{2}
{:}
{${lookup{$1}nis{passwd.byname}{$value}{*:*}}}
@mrballcb
mrballcb / gist:443f0b07a01d013c8dd3
Last active August 29, 2015 14:05
Linking Hellcat on Ubuntu 12.04.something, gets a bit further
Linking on Ubuntu 12.04 with g++-4.8, this is what I did
cd ~/projects/hellcat # a git clone
./get_libraries.sh
mkdir build && cd build
cmake -D CMAKE_CXX_COMPILER:TXT=g++-4.8 ..
1. The order of components on the link commandline is important. On the final link, I get tons of undefined reference to uv_* functions. To fix that, change the order of the archives so that libhaywire.a is before libuv.a.
2. I then get tons of undefined reference to clock_* functions, which should be provided by librt. To fix, add "-lrt" to the linker, but only **after** the archives. (You already had it in there, but it didn't get used because it was before the archives on the CLI...I think due to the gcc/g++ commandline ordering requirements, you should move your archives to before the -l commands because IIRC gcc/g++ builds a list of symbols/functions that it should be aware of when it gets to the libs to link in, and it ignores all lib functions it doesn't explicitly need...or something like that). i.e this is what I cha
@mrballcb
mrballcb / gist:fa7cbf416ee0a5c7fc0d
Created August 21, 2014 16:04
Summary of outbound encryption support by remote smtp domains
Outbound Summary: 177147 emails, 7438 networks, 6627 unique domains
Top 20 encrypted traffic domains:
1. google.com 62440
2. yahoodns.net 25148
3. hotmail.com 14132
4. aol.com 7577
5. comcast.net 4758
6. outlook.com 4543
7. psmtp.com 1703
@mrballcb
mrballcb / gist:3d352dd6cc26b6718ddd
Created September 30, 2014 12:44
Exim skip spf from specific IPs
deny message = SPF BLOCK Sender $sender_host_address is not allowed to send mail from $sender_address_domain ($header_from:): $spf_smtp_comment
!authenticated = *
!hosts = +relay_from_hosts : net-lsearch;/etc/exim/spf_skip_ips
sender_domains = !lsearch;/etc/exim/spf_exclude_domains
spf = fail
This is on a machine named ivlog52, and it is a central logging server for several exim machines
$ cat /etc/rsyslog.d/exim_logging.conf
local1.* /disk1/log/imapd.log
if $fromhost == 'ivlog52' and $syslogfacility-text == 'mail' then /var/log/maillog
# Should possibly look for 'not info and not notice and not alert'
if $fromhost != 'ivlog52' and $syslogfacility-text == 'mail' and $syslogseverity-text == 'info' then /disk1/log/exim/main.log
@mrballcb
mrballcb / gist:6501428
Created September 9, 2013 20:58
Setting ldap_require_cert overrides uri parsing to determine TLS options.
diff --git a/src/src/lookups/ldap.c b/src/src/lookups/ldap.c
index f121bce..8c11587 100644
--- a/src/src/lookups/ldap.c
+++ b/src/src/lookups/ldap.c
@@ -416,6 +416,29 @@ if (lcp == NULL)
if (!ldapi)
{
int tls_option;
+ #ifdef LDAP_OPT_X_TLS_REQUIRE_CERT
+ if (eldap_require_cert != NULL)
cookbooks/common/attributes/dns_server.rb:
# List of required packages for a DNS server, CentOS5
node.default[:iv][:packages][:dns]["5"] = %w{bind97 bind97-chroot bind97-libs}
# List of required packages for a DNS server, CentOS6
node.default[:iv][:packages][:dns]["6"] = %w{bind bind-chroot bind-libs}
cookbooks/common/recipes/dns_server.rb:
@mrballcb
mrballcb / gist:8300951
Last active January 2, 2016 12:08
Replication error from 5.0.95 master to new 5.1.73 slave
1) Table definition on the slave where the data is to be inserted:
localhost (ivenue)> show create table website_bv \G
*************************** 1. row ***************************
Table: website_bv
Create Table: CREATE TABLE `website_bv` (
`id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
`website_id` int(10) unsigned NOT NULL DEFAULT '0',
`placement` decimal(9,0) unsigned zerofill NOT NULL DEFAULT '000000000',
`ext` decimal(3,0) unsigned zerofill NOT NULL DEFAULT '001',