Category Archives: Installing and Configuration

Raspberry PI as a Router and WIFI Hotspot

Using a Raspberry PI as a Router and Wifi hotspot with a firewall for your internal LAN or household network is now possible. The Wifi hotspot can function as a hotspot for guests. This can be more secure then the cheap nasty routers supplied by your ISP with hard coded passwords.

Continue reading

Mail Server on Ubuntu 18.04 Part 5

Welcome to Mail Server on Ubuntu 18.04 Part 5. This is the fifth part of a series of blog posts. We will be adding Roundcube, allowing your users to access their email over a secure HTTPS connection from any browser. We will also briefly talk about monitoring.

Mail Server on Ubuntu 18.04 Part 1
Mail Server on Ubuntu 18.04 Part 2
Mail Server on Ubuntu 18.04 Part 3
Mail Server on Ubuntu 18.04 Part 4

Continue reading

Self-signed SSL Certificates

We can create self-signed SSL certificates when used in-house, when setting up Apache or a mailserver. We should always be using HTTPS and encrypted connections whenever we can. You know it makes sense. The majority of the time we can now use SSL certificates from Let’s Encrypt. They are free and once setup trouble free. Sometimes though we need a quick some self-signed SSL certificates while testing. This post takes you though how to create self-signed SSL certificates with OpenSSL. It also shows how to create one with multiple alternate names or SANs. Read the SSL documentation, its on the internet :).

Continue reading

Using chrony on Ubuntu 18.04

Using chrony on Ubuntu 18.04 will show how to setup chrony for clients and servers within your LAN. Chrony replaces NTP which in now depreciated. Using chrony on Ubuntu 18.04 will show how to setup chrony for clients and servers within your LAN.

Chrony is an implementation of the Network Time Protocol (NTP). It is used to keep the system clocks of PCs synchronized with the clock of NTP servers. It can also be used to setup your own NTP server to provide time for your LAN. Chrony replaces ntp and ntpdate which are now deprecated.

Continue reading

Using LDAP on Synology

I wrote this HOWTO, using LDAP on Synology so I could try out the Synology Directory Server. This is how I managed to get Linux machines to authenticate against it. At the time of writing, Synology was on DSM 6.2-23739 Update 2. I will be using Ubuntu 18.04 as the Linux clients

The Synology documentation for Directory Server is appalling only stating the blindingly obvious. That is all assuming the page has been updated, most having missing options or features.

Continue reading

Mail Server On Ubuntu 18.04 Part 4

Welcome to Mail Server on Ubuntu 18.04 Part 4. This is the fourth part of a series of blog posts. We will be adding some extra checking to postfix. This will allow you to effectively blacklist some domains and email addresses. We will also be adding checks for properly formatted domain names and checking the IP address against their DNS lookup.

Mail Server on Ubuntu 18.04 Part 1
Mail Server on Ubuntu 18.04 Part 2
Mail Server on Ubuntu 18.04 Part 3

Continue reading

Mail Server on Ubuntu 18.04 Part 3

Welcome to Mail Server on Ubuntu 18.04 Part 3. This is the third part of a series of blog posts. In this post we will be adding anti-virus and anti-spam along with some other tools to stop spam and viruses getting through to our mailserver.

Mail Server on Ubuntu 18.04 Part 1
Mail Server on Ubuntu 18.04 Part 2

  • Emails will be checked with anti-virus service ClamAV
  • Emails will be checked with anti-spam filters from Spamassassin
  • Grey listing of incoming mail servers with Postgrey

Continue reading

Mail Server on Ubuntu 18.04 Part 2

Welcome to Mail Server on Ubuntu 18.04 Part 2. This is the second part of a series of blog posts. The mailserver will use Postfix, Dovecot and Amavis. To see Mail Server on Ubuntu 18.04 Part1 follow the link.

In Mail Server on Ubuntu 18.04 Part 2 we will turn on the ability for any user to send and receive emails once they are known to the system via a MySQL database. This is called using virtual users. We will also turn on the ability to use encrypted connections with TLS.

Continue reading