Stephan Paukner :: syslog

Recently I wrote about a history of my cell phones and wondered whether I still own my very first cell phones. Yes I do! I took some pictures of my Philips Fizz and my Motorola StarTAC 75. Unfortunately, I don’t have any battery chargers anymore, so I couldn’t verify their function.

Geheim! Aber sofort!
Geleise! Und nicht so laut!
This is the reason. Das ist der Riese.
I fall in love. Ich falle in Lava.
Nokia. Keine Kühe.
Afterwards. Arschlings.
Kaschmir. Keine Schmiere.

It really works! This post has been created automatically by Flickr.

I successfully switched my hosting from my real-hardware machine ‘daemon’ to my new virtual-hardware machine ‘gauss’ which is hosted by HostEurope.de. After turning off the services on ‘daemon’ and doing a final sync, I started the services on ‘gauss’ and activated the TCP-forwarding on ‘daemon’ with rinetd. I forwarded FTP, HTTP(S) and IMAP(S) such that users could connect to the old IP where those connections got forwarded to the new IP. With this, the new host only saw connections originating from the old IP although they actually belonged to strangers. Therefore I didn’t also forward the SMTP-port directly, because in that case the realtime blacklisting would have failed.

So I configured Postfix to keep doing RBL lookups and SPAM and virus scanning, and to forward mails destined for the local domains to the new host. I did it this way:

Zuerst demonstrieren’s gegen Schwarz-Blau, und jetzt, wo endlich die Roten Bundeskanzler sind, gehen’s wieder demonstrieren. Typisch! Nix hackeln und Zeit haben. Von “Zwangsarbeit” reden’s. Dass die Studenten nix hackeln wollen, is ja eh nix neix. Die junge ÖVP oder die AG gehen nie demonstrieren. Linkes G’sindl! Die ham ja schon verzweifelt nach einem Grund gesucht, endlich wieder demonstrieren gehen zu können. Und wir sollen’s derhalten. Wir, die arbeiten gehen und keine Zeit für sowas haben. Zahlen sollen’s, die Gfrasta! Zahlen sollen’s dafür, anstatt dass mit unserem Geld demonstrieren gehen! Anstatt den Vormittag zu verschlafen sollten’s auch mal was hackeln! Aber bitte net bei mir. Sonst sag ich: Haut’s jedem Student ane in die Zent, damit er schneller rennt!!

We’re writing the year 1996. TV commercials start to add something like “www.companyname.com” at the bottom corners of the screen. Cell phones start to become popular. Some mates I met at the Austrian Federal Armed Forces used such things to phone with their girlfriends. As I didn’t have a girlfriend, I didn’t need a cell phone. It was the time when cell phones began to drop down from the managers to the rednecks, who carried them on their belts as if they were revolvers, always ready to draw.

It took me until October 1997 to receive my first one, due to opening a student’s account at a local bank. It was a Philips Fizz. I think I still have it somewhere at my parents, and it still should work, except for the display which has been broken by my brother. It was a cute thing. Philips seemed to have different designs which they didn’t distinguish. The antenna could be pulled out and the SIM-card had the size of a credit card. As I only had a prepaid card at that time, calls became rather expensive. I’m not quite sure if everyone was worth it.

I finally wanted to enable my users to relay mails via my own MTA, as it’s quite comfortable to be able to use the same outgoing mail server no matter what computing device you currently use or where you currently are. About three years ago there were no solutions enabling SMTP AUTH for Postfix without recompiling packages, so I had to wait until today where such features are now officially available within Debian. I found several HOWTOs about configuring SMTP AUTH with Postfix on Debian Woody or Debian Sarge, but things have changed (or will change, as Etch hasn’t been released yet). The Postfix version in Sarge is 2.1, whereas in Etch it’s 2.3. This is how I did it:

First, note that you don’t have to patch or (re-)compile anything. Etch’s Postfix package already supports TLS! First, I cared about configuring authentication with SASL, and after that I restricted authentication to TLS only. This makes debugging easier during the process. Because encryption already happens at the TLS-layer, I don’t need MD5 authentication and can stay PLAIN.

I’m planning to move my hosted domains to a virtual root-server. As more and more people are more and more relying on more and more services, I have to move the hardware-responsibility away from me. I don’t want to care anymore for breaking harddisks, aging CPUs or dying modems. I don’t want to care about network connection or power supply. I don’t want to hear my phone ringing because of such failures. I have better things to do than rushing out for new (old) hardware. I just want to care for the software. I’m interested in SPAM, not RAM.

Therefore I’ll finally move my server out of my house, maybe even out of my country. These are the possible candidates, in order of highest probability, all at a cost of about €15/month: HostEurope.de’s 15,000MB vServer, ARWeb.at’s 7,500MB vServer or Server4You.de’s 7,500MB vServer. As the first one offers a twice as high storage capacity than the others, it might be the one of choice. It even includes service monitoring. I want to set it up during January and migrate the services in February.