Here is what you need to prepare before proceed with the backup.

1. Create a directory for backup. i.e folder name of ServerBackup. Go to “Control Panel” -> “Shared Folder”.

2. Enable SSH on Synology. Go to “Control Panel” -> “Terminal & SNMP” -> “Enable SSH Service”. If you option to change the SSH port or not

3. Try to ssh into Synology with username “root”. The root password is the same with “admin”.

If are you done, let’s do it.

Generate SSH Key

You wouldn’t want to key in password whenever want to access to the server to grab the file. Generate a “custom” ssh key which will be used for synology. Remember, please do not set the password. Give you ssh file a “special name”, DO NOT use the default. I.e we used synobackup, there are 2 files will be generate

1. synobackup – This is the private key files
2. synobackup.pub – This is the public key which will be placed on the remote server.

Next, we will copy this 2 files into Synology folder ServerBackup. We create a folder name “scripts”, and the file will be placed in synology

1. /Volume/ServerBackup/scripts/synobackup
2. /Volume/ServerBackup/scripts/synobackup.pub

We will copy the key on synobackup.pub into remote server’s ssh directory “.ssh/authorized_keys” for the user’s home directory where you will login with the username later. i.e “/home/takizo/.ssh/authorized_keys”

Ok.. we are done with ssh thingy. Let’s write some script.

Simple Scripting

Next, we will do some scripting as below.

#!/bin/ash

#This is the private key
PRIVKEY="/volume/ServerBackup/scripts/snology"

#This is the folder you would like to backup from
HOSTFOLDER=/backup/*

#This is the folder you would like to backup to Synology
DESTFOLDER="/volume/ServerBackup/database/server-godzilla/"

#We will be using rsync in synology, this will do the rync! 
/usr/syno/bin/rsync -avz -e "ssh -p7777 -i $PRIVKEY" takizo@godzilla.takizo.com:$HOSTFOLDER $DESTFOLDER

Save the script above into your Synology backup folder which created earlier “/volume/ServerBackup/scripts/database.backup.sh”

Please take note that the remote folder is define by yourself. We are done with the script, it’s time to Execute it!

Configure the Backup Script

Due to it’s the first time access to the remote server, you need to manually run the script in shell to accept the SSH session. We are almost there.

SSH to Synology server

ssh -p2222 root@your_synology_ip
mydisk> cd /volume/ServerBackup/scripts
mydisk> ./database.backup.sh
The authenticity of host '[godzilla.takizo.com]:2222 ([123.456.123.111]:2222)' can't be established.
ECDSA key fingerprint is f7:9b:d6:92:7b:33.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[godzilla.takizo.com]:2222,[123.456.123.111]:2222' (ECDSA) to the list of known hosts.
receiving incremental file list
20150721122502.dbbackup.tar.gz

sent 42 bytes  received 18901016 bytes  1021678.81 bytes/sec
total size is 18997573  speedup is 1.01

The important part for this action is this line

Warning: Permanently added '[godzilla.takizo.com]:2222,[123.456.123.111]:2222' (ECDSA) to the list of known hosts.

This will add the host into /root/.ssh/known_hosts, when the script is run next time, it will not prompt the message again.

Setup the Task on Synology

Since the script is working perfectly fine. The last step is add it into Synology’s Task Schedule.

1. Go to “Control Panel” -> “Task Schedule”
2. Create “User defined-script”
3. Give a meaningful name for your “Task”
4. User choose “root” or any user you prefer
5. User-defined script: The script you created earlier inside Synology folder, “/volume/ServerBackup/scripts/database.backup.sh”
6. Put up a schedule for this, how often it should run and at what time.

After the schedule has been created, try run it again and check is the files transfer into your Synology folder (if you don’t have new copy of file in the server, delete the files earlier being rsync into synology).

Yep, basically you have another copy of backup on synology! Enjoy backup more stuff from remote server

I am still using Sublime Text 2, Sublime Text 3 still in Beta version. To install Package Control;

1. Go to Sublime Text’s console. View -> Show Console

2. Paste the line into the console as shown on “Package Control” website. in my case it pasting this;

import urllib2,os,hashlib; h = 'eb2297e1a458f27d836c04bb0cbaf282' + 'd0e7a3098092775ccb37ca9d6b2e4b7d'; pf = 'Package Control.sublime-package'; ipp = sublime.installed_packages_path(); os.makedirs( ipp ) if not os.path.exists(ipp) else None; urllib2.install_opener( urllib2.build_opener( urllib2.ProxyHandler()) ); by = urllib2.urlopen( 'http://packagecontrol.io/' + pf.replace(' ', '%20')).read(); dh = hashlib.sha256(by).hexdigest(); open( os.path.join( ipp, pf), 'wb' ).write(by) if dh == h else None; print('Error validating download (got %s instead of %s), please try manual install' % (dh, h) if dh != h else 'Please restart Sublime Text to finish installation') 

It will looks like below and hit enter.

After the installation has been done, try to install a package name BeautifyRuby.

1. Launch Package Control: Install Package by “AppleCommand + Shift + P” or in Windows “Ctrl + Shift + p”

2. Search for BeautifyRuby and hit enter to install

3. You may notice the status bar showing the installation status on the package.

I am going to explore packages offer by Package Control in Sublime Text

There were a lot email queue in Exim’s queue, due to the blockage from recipient server. Unfortunately WordPress doesn’t have SMTP setting for outgoing email notification, it has to rely on third party plugins.

Here is what we implement on SMTP MTA to deny/rate limit outgoing from PHP’s mail() function.

On Exim config file, before hitting ACL configuration, place this config for non-smtp setting

acl_not_smtp = acl_check_not_smtp

After “begin acl” section, place this config

acl_check_not_smtp:

  deny
        senders = www@domain.com
        message = sorry server is offline

  deny
        ratelimit = 20 / 1h / strict / $sender_address_domain
        senders = *@domain.com
        message = sorry server is offline

  accept

The first rule is totally deny anything from apache’s vhost. It means non of the apache’s vhost can send outgoing email with PHP mail() function. If you are not comfortable with this. Can try on the second rules, which is rate limit the outgoing email, which can help to eliminate the massive outgoing email happened on apache web server UID.

Have fun controlling and fight with the spam

Before flashing your Android phone with custom ROM, you need custom Recovery ROM such as

• ClockworkMod Recovery (CWM)
• Team Win Recovery Project (TWRP)

The default “Recovery ROM’ comes with your phone does not allow to flash/install custom ROM. Hence, before flashing your phone with custom ROM, custom “Recovery” is needed. Before flashing custom “recovery ROM”, you need tools to do that.

adb & fastboot are the tools which will use to flash Android’s “recovery” ROM. Let’s see how to install ADB & FASTBOOT in Mac OSX.

1. Download Android SDK

Android SDK can be downloaded at Android Developer website. Click the link here to visit the website. Choose “Download the SDK. ADT bundle for Mac”

2. Install and Configure

After ADT bundle has been downloaded, extract the file into download folder.

I have Android SDK store in my “Work” directory and renamed it from adt-bundle-mac-x86_64-20131030 to AndroidDevel “~/Document/Work/AndroidDevel”

adb and fastboot command tool can be found at “sdk/platform-tools” folder. You will need to run this 2 command tools in order to flash your phone.

3. Configure with Terminal

Open up your “Terminal” and open .profile shell profile.

# vi .profile 

Look for the “export PATH” and expand further by adding in platform-tools folder

export PATH=/usr/local/bin:~/Document/Work/AndroidDevel/sdk/platform-tools 

Depend on where do you store the tools. It may not me same with my configuration. Please do not miss the “:” semicolon, it means to expand and include other folder. Save your file and refresh your bash environment with command below

# source ~/.profile 

4. Complete and Look For Your Device

Plugin your device with USB cable and prompt for your device with command below

# adb devices 

You should be able to see the list of device as below

Congrats, adb & fastboot are installed on your Mac OSX Next post I will show how to flash recovery ROM on a HTC ONE M7 device.

I’ve been maintaining a customer mailserver since 2003, growing from 30 users to 200+ users today, it seems how big and fast the company grown, good thing they still engaged me on maintaining their mail/web server.

Turn On Subject Header on Exim Logging

Turning on Subject Header on Exim logging make your life easier for troubleshooting purpose. By default, exim’s logging on mainlog does not provide Subject Header, to turn on follow the steps below;

• 1. Edit Exim’s main config file, using /usr/local/exim/configure
• 2. On the main/global config, usually before ACL section, add the line below

log_selector = +subject +delivery_size +size_reject

• Above log_selector include logging the delivery size of the email, and size_reject. If the email is rejected by the server, you can find out what was the rejected size.

That’s it. Will try to pen down stuff more often

With the new release of Apple Mac OS X Lion, there are a lot of changes on the kernel and backends. Therefore I don’t think it’s possible to do port upgrade on Macports in order to upgrade your existing or installed ports in OS X Snow Leopard.

I have tried several times to upgrade ports previously installed in Snow Leopard, unfortunately no luck to getting it works in OS X Lion Macports, some library couldn’t load and some library cannot be found. Failed miserably with tons of error messages.

I have decided to re-install, or rather clean install Macports on my newly installed Mac OS X Lion.

OS X Lion Macports with XCode 4.1

Before installing OS X Lion Macports, you need to download and install latest Xcode 4.1 which designs for Mac OS X Lion. Xcode 4.1 can be downloaded at App Store, the file size is around 2.96GB, it might take some time for user who has slow internet access.

The existing Xcode on your Snow Leopard will not support latest version of Macports.

OS X Lion Macports, Before Clean Install

Before proceed with OS X Lion Macports clean install, I suggest you do a few things as I listed below.

1. Dump current installed packages database. Run “port installed > installed.ports.log” to keep a list of packages currently install on your Macports. Which later you will need to re-install all the packages. Below is the sample of my current installed packages.

  apache2 @2.2.19_0+preforkmpm (active)
  apr @1.4.5_1 (active)
  apr-util @1.3.12_0 (active)
  atk @1.32.0_0 (active)
  autoconf @2.68_2 (active)
  autoconf213 @2.13_1 (active)
  automake @1.11.1_0 (active)
  axel @2.4_0 (active)
  bison @2.5_0 (active)
  bzip2 @1.0.6_0 (active)
  c-ares @1.7.4_0 (active)
  cacti @0.8.7g_1 (active)
  cairo @1.10.2_3 (active)
  ctags @5.8_0 (active)
  curl @7.21.7_0+ssl (active)
  curl-ca-bundle @7.21.7_0 (active)
  cyrus-sasl2 @2.1.23_3+kerberos (active)
  db46 @4.6.21_6 (active)
  dbus @1.4.12_0 (active)
  dia @0.97.1_2 (active)
  docbook-xml @5.0_0 (active)

2. Dump or backup your database data such as PostgreSQL and MySQL.

3. Backup your old directory, which is “/opt/local”, rename it to “/opt/local-snowleopard”, this is to keep all your data in order to migrate over to newly installed Macports later on.

OS X Lion Macports Clean Install

Macports team has not release latest Macports package/installer for OS X Lion (as when I written this post). If the official download is not available for OS X Lion, you need to install it from latest subversion built.

Create a new directory to check out latest subversion built for OS X Lion Macports

# mkdir /opt/lion-macports 
# cd /opt/lion-macports
# svn co http://svn.macports.org/repository/macports/trunk

This will download the latest build of subversion, next we will proceed with OS X Lion Macports installation

# cd /opt/lion-macports/trunk/base
# ./configure --enable-readline
# make
# sudo make install
# make distclean 

After installation, make sure OS X Lion Macports binary is exported into your environment path, existing user should not have this problem, for new user, edit your environment path as show below; Search for export path line

#sudo vi ~/.bash_profile
export PATH=/opt/local/bin:/opt/local/sbin:$PATH

Add /opt/local/bin and /opt/local/sbin into export PATH.

After environment path has been configured, get the latest update port tree and your are done

# sudo port -d selfupdate 

OS X Lion Macports. Install package

You are basically you done Macports installation on Mac OS X Lion. Refer to your dump file I mentioned earlier “installed.ports.log”, re-install all the packages or the packages you need in newly installed OS X Lion Macports

I know it’s a little PITA (Pain In the Ass), but so far this is the only solution which can fix my problem by migrating into OS X Lion Macports.

OS X Lion Macports. Re-install MySQL

This is an example how I reinstall and load MySQL database which previously installed on Snow Leopard Macports into OS X Lion Macports.

1. Firstly, clean install MySQL5.1 database

# sudo port -v install mysql5-server 

You might see error with plist conflict

Error: Target org.macports.activate returned: Image error: /Library/LaunchDaemons/org.macports.mysql5.plist already exists and does not belong to a registered port.  Unable to activate port mysql5-server. Use 'port -f activate mysql5-server' to force the activation.
Warning: the following items did not execute (for mysql5-server): org.macports.activate
Log for mysql5-server is at: /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_databases_mysql5-server/mysql5-server/main.log
Error: Status 1 encountered during processing.
To report a bug, see 

To fix it, force plist replacement.

# sudo port -f activate mysql5-server
--->  Computing dependencies for mysql5-server
--->  Activating mysql5-server @5.1.57_0
Warning: File /Library/LaunchDaemons/org.macports.mysql5.plist already exists.  Moving to: /Library/LaunchDaemons/org.macports.mysql5.plist.mp_1311315120.
--->  Cleaning mysql5-server

2. Move database into data directory, it required root privileges

# sudo su 
# cp -RPa /opt/local-snowleopard/var/db/mysql5 /opt/local/var/db/

3. Start MySQL Server

# sudo /opt/local/etc/LaunchDaemons/org.macports.mysql5/mysql5.wrapper start

Please also share how you migrate existing Macports into OS X Lion Macports.

It is always better to have MySQL Data Directory store in a specific partition/drive. It will help on performance and better management and scalability. You change change the data store directory in Linux by editing /etc/my.cnf file.

Edit /etc/my.cnf file

# vi /etc/my.cnf

Change the data directory structure

datadir=/db/mysql
socket=/db/mysql/mysql.sock

After the file has been updated, restart MySQL service.

So which DNS server do you resolve it from? For example we run a query on DNS F Root Server

$ dig @f.root-servers.net hostname.bind  txt ch +short
"lga1a.f.root-servers.org"

On the result, it shows that I am using lga1a.f.root-servers.org as resolver. Some DNS server does reply “chaos” (ch) request but some refuse; for example Google DNS and Open DNS Server. So if your ISP is running Anycast DNS, you can try to lookup where is the DNS server locate.

There is another command perform checking via “id.server” query, it only helpful when the DNS has server-id configured.

dig @k.root-servers.net id.server txt ch +short
"k2.tokyo.k.ripe.net"

In Exim mail MTA, it can restricts at the SMTP authenticated transport.

accept  authenticated = *
          sender_domains = < the_domain_name_1 > : < the_domain_name_2 >  
          control       = submission
          control       = dkim_disable_verify

Usually local_domains is the list of the domain hosted on Exim mail server, it can be configured as below too.

accept  authenticated = *
          sender_domains = +local_domains
          control       = submission
          control       = dkim_disable_verify

OURMON Version 2.81

On the recent released of OURMON, the topn graphs didn’t show the traffic by Mbit/s instead of bit/s. The long no. is confusing when the NOC engineer is doing the monitoring(minimal 7 digits will show up). I have made some changes on omupdate.pl, one of OURMON script that generate html static page, to show extra value – Mbit/s. Our current OURMON graph looks something like below;

Below will show you how to add extra Mbit/s value on your OURMON Topn section;

edit omupdate.pl file

vi /usr/local/mrourmon/bin/omupdate.pl

On line 3137, add the code looks like below;

my $uappf = $items[$i+2];       # old hw app flags
my $uappl = $items[$i+3];       # app lower case
my $uapph = $items[$i+4];       # app upper case
my $bps = int(($items[$i+1] * 8)/30);
my $mbps = sprintf("%.2f", ($bps/1024)/1024); # convert bits to mbits
my $uaf = get_appflag($uappf, $uappl, $uapph);

this line of code my $mbps = sprintf(“%.2f”, ($bps/1024)/1024); is to declare the new variable $mbps and convert the bit/s value to Mbit/s by dividing 1024*1024.

Next is to display the value on the page, do something on line of code 3146;

"bits/sec: $bps, Mbits/sec: $mbps, "

Done, wait for a few second for the web page to refresh with extra Mbit/s value. Btw, you can remove bit/s if you want to, to save some extra space