<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
<?xml-stylesheet type="text/css" href="http://blog.cihar.com/styles/feed.css"?>
<title type="html">Configs</title>
<link rel="alternate" type="text/html" href="http://blog.cihar.com" />
<link rel="self" type="application/atom+xml" href="http://blog.cihar.com/archives/configs/index-atom.xml" />
<updated>2008-01-23T16:45:53+09:00</updated>
<author>
<name>Michal Čihař</name>
<uri>http://blog.cihar.com</uri>
</author>
<id>http://blog.cihar.com/</id>
<generator uri="http://nanoblogger.sourceforge.net" version="3.4 RC1">NanoBlogger</generator>
<entry>
<title type="html">Munin and OpenWrt</title>
<author>
<name>Michal Čihař</name>
</author>
<link rel="alternate" type="text/html" href="http://blog.cihar.com/archives/2006/07/28/munin_and_openwrt/" />
<id>http://blog.cihar.com/archives/2006/07/28/munin_and_openwrt/</id>
<published>2006-07-28T11:15:23+09:00</published>
<updated>2006-07-28T11:15:23+09:00</updated>
<category term="Linux" />
<category term="Configs" />
<content type="xhtml">
<div xmlns="http://www.w3.org/1999/xhtml">
<p>Last thing which was missing was to add new router to monitoring using Munin which I use for this purpose. The only reasonable way seemed to be SNMP so I installed it to OpenWrt.</p>
<p>And the rest was incredibly simple! Just add snmp host to 
<code>munin.conf</code>:</p>
<pre>
<code>[openwrt.lan]
    address localhost
</code>
</pre>
<p>And run SNMP discovery on monitoring host (the one which runs munin-node):</p>
<pre>
<code>munin-node-configure-snmp openwrt.lan | sh
</code>
</pre>
<p>It automatically creates symlinks for everything it detects (network interfaces, load, disk space and users) and only remaining thing is to restart munin-node.</p>
</div>
</content>
</entry>
<entry>
<title type="html">GnuPG path grabbing</title>
<author>
<name>Michal Čihař</name>
</author>
<link rel="alternate" type="text/html" href="http://blog.cihar.com/archives/2006/05/29/gnupg_path_grabbing/" />
<id>http://blog.cihar.com/archives/2006/05/29/gnupg_path_grabbing/</id>
<published>2006-05-29T22:12:54+09:00</published>
<updated>2006-05-29T22:12:54+09:00</updated>
<category term="Configs" />
<category term="Coding" />
<content type="xhtml">
<div xmlns="http://www.w3.org/1999/xhtml">
<p>Many times I needed "intelligent" way to grab key path from my key (and others I somehow trust for signing purposes) to other random key that gets to me.</p>
<p>Receiving keys for all signatures is quite expensive operation and you soon end with most of PGP keys on the world in your database. The best seems to fetch only needed keys. You can find path using 
<a href="http://www.cs.uu.nl/people/henkp/henkp/pgp/pathfinder/">PGP pathfinder &amp; key statistics</a>by Henk P. Penning. It's extremely useful site, where you can find many information about PGP keys.</p>
<p>So the logical step seems to be to write down script which will grab needed keys:</p>
<pre>
<code>#!/bin/sh

if [ "$#" -lt 1 -o "$#" -gt 2 ] ; then
    echo usage `basename $0` ID [gpgparam]
    exit 1
fi

url=http://www.cs.uu.nl/people/henkp/henkp/pgp/pathfinder/mk_path.cgi

(
links -dump "$url?FROM=36E75604&amp;TO=$1"
links -dump "$url?FROM=B3B2A12C&amp;TO=$1"
links -dump "$url?FROM=65D0FD58&amp;TO=$1"
) | grep -o '[0-9A-F]\{8\}'  | sort -u | xargs gpg --recv-keys --no-auto-check-trustdb $2

gpg --check-trustdb $2
</code>
</pre>
<p>And special bonus for Sylpheed-Claws users. Here is action to call above script:</p>
<pre>
<code>ID=`gpg --verify %p /dev/null 2&gt;&amp;1 | \
grep "key ID" | tr -d "[:space:]" | \
tail -c8`;echo "==== Fetching $ID ===="; \
~/bin/gpg_get_path $ID --no-tty
</code>
</pre>
</div>
</content>
</entry>
<entry>
<title type="html">DNS blacklists in Exim</title>
<author>
<name>Michal Čihař</name>
</author>
<link rel="alternate" type="text/html" href="http://blog.cihar.com/archives/2006/05/11/dns_blacklists_in_exim/" />
<id>http://blog.cihar.com/archives/2006/05/11/dns_blacklists_in_exim/</id>
<published>2006-05-11T23:22:50+09:00</published>
<updated>2006-05-11T23:22:50+09:00</updated>
<category term="Configs" />
<category term="Debian" />
<content type="xhtml">
<div xmlns="http://www.w3.org/1999/xhtml">
<p>Well I expected this would be more complicated than defining DNS blacklist servers list. Hower thanks to great defaults, all you need is to put list into user defines (separate file which is included early like 
<code>/etc/exim4/conf.d/main/000_localdefs</code>should be best place):</p>
<pre>
<code>CHECK_RCPT_DOMAIN_DNSBLS = dnsbl.njabl.org : \
                            bl.spamcop.net : \
                            blackholes.five-ten-sg.com : \
                            cbl.abuseat.org : \
                            smtp.dnsbl.sorbs.net : \
                            spam.dnsbl.sorbs.net : \
                            zombie.dnsbl.sorbs.net : \
                            web.dnsbl.sorbs.net : \
                            rhsbl.sorbs.net : \
                            sbl-xbl.spamhaus.org : \
                            psbl.surriel.com : \
                            list.dsbl.org
</code>
</pre>
</div>
</content>
</entry>
</feed>
