SysAdmin

It seems that there is some keywords in the central cleaning house and I can’t update the blacklist… Maybe we should create a new one!

I have finally got skeljail implemented through the RCng way. After some test I will post the patch for review.

A skel jail is a jail that share essential binaries/libraries with the base system (optionally, other base template if you want) through mount_nullfs.

出于信任给一个人在服务器还没配置安全设施的情况下开了帐号，没想到那个人居然自作主张地到了他不应该访问的地方去翻东西。很反感这样的行为。

tarsier的配置如下：

Pentium 4 3.0E
1G RAM
250G ATA * 2

tarsier将是我的第一个非职务管理的、同时又使用了jail service的FreeBSD服务器。tarsier上将采用我所提出的fast jail技术。

昨天下午接到通知说这台机器不能往外主动建连接了，本来想说道两句，但后来觉得其实有几个能连出去的端口就足够了，终于等到这一天啦，更何况我觉得那个服务没给我带来任何好处，没有也就没有了，还什么XML RPC，搞笑，traceback是什么呀？申请了没有？

其实不能连出去挺好的，再也不用担心像从前公司的服务器突然被告知「连接了某某网站，根据某某部门的要求，现停闭你公司服务器，特此通知」的事情了。

Traditionally, FreeBSD has many NO_FOO knobs while it also has NOFOO knobs that is quite confusing. Today, Ruslan Ermilov (The Makefile guru at FreeBSD campaus) has started his NOFOO -> NO_FOO conversion, this will make everything consist.

This should be considered as a “security release” somewhat. I’m building package for it at company’s buildbox, and it would be deployed internally.

I’ve finally decided to move out from cnftp as I can’t figure out when, what and why its configuration that can influence my site keeps changed from time to time. Everything pulled out, and the httpd configuration has been removed to reflect this without misleading people who has decent DNS records cached in their DNS mirrors.

Still don’t know why a simple upgrade will cause GB2312 to represent in UTF8 errornously. Maybe when I have time, but not now.

实在是不得已而为之，spammer越来越过分了。comment插件一口气删掉了将近300条垃圾comment。

Kill spam!!

It seems that the official FreeBSD qmail port’s disable-qmail (as well as the Live with Qmail documentation) will need write access to /usr/bin and /usr/libexec, and hence the “fast jail” script I have written has been rendered useless :-(

I will investigate the issue this weekend and hopefully I will be able to work around the issue.