Kernel Upgrade

Thursday, February 14. 2008
There was a pretty nasty bug discovered in the Linux kernel version I was using that allowed those with SSH access to create a program that escalated their privileges and allowed them to take control of the server. I've upgraded the kernel and resolved the issue successfully, with a very minimal amount of downtime.

Information regarding the exploit: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464953

Exim: The Mail Transfer Agent

Friday, May 25. 2007
I ordered Exim: The Mail Transfer Agent from Half.com, so I can learn more about The Beast.

If you couldn't tell already, Exim (or any mail server, for that matter) isn't my strong point and it has become one big mess. The configuration files are all a jumble, and I could barely figure it out by following step by step instructions where I needed to stray from the directions.

I'm going to mirror the setup locally here and test it out before I move it to the main server, so don't worry too much, but anticipate better email service. Possible improvements include a webmail front-end.. we'll see.

This all started when I was trying to figure out how to fix the problem I've been having with Google. Since many domains have multiple mail servers, it would be difficult to catch them all. I struck up a conversation with Trii from Freenode about it, and he suggested SQLGrey, a similar implementation that will automatically detect mail servers from the same domain and allow them as valid re-tries. I wanted to try to implement this, but the Exim configuration was quite overwhelming and messy. I'm going to try to clean it up and resolve this.

Graham