AFP548 Changing the world one server at a time.

Security

Stop PPTP dictionary attacks in MOSXS 10.5.x

Mac OS X Server's adaptive firewall (afctl) does a good job of catching brute-force login attacks on most services, but it doesn't catch PPTP attacks. The script below checks the system log for such attacks, and then uses afctl to block offending hosts for a week (you can, of course, change the parameters if you wish).

By jgardner 1 min read

Networking

Resetting the VPN service on Tiger Server

This may work on Leopard Server as well, but I haven't tested it. There are several brute-force VPN protocol attacks rampant on the internet, and they may leave your VPN service in an unusable state by flooding it with connection requests.

By jgardner 1 min read

Files and Storage

Spotlight indexing and RsyncX

After upgrading my home system to Tiger, I noticed that my RsyncX backups to an external FireWire drive were no longer working. Much consternation and hair-pulling later, I realized that the Spotlight indexing was causing problems with RsyncX.

By jgardner 1 min read

Apps

ADmitMac vs. Tiger

Thursby's ADmitMac is a full-featured SMB/CIFS client that contains a lot of great features to hook Mac OS X into an Active Directory infrastructure. Be aware, though, that there is a downside involved. Thursby chose to implement a different method of handling resource forks on non-AFP filesystems than Apple uses in its samba-based SMB client.

By jgardner 1 min read

Mail

Procmail on Panther Server

For those of us who either don't want to use sieve, or haven't been able to make it work properly--despite Mr. Rennich's best efforts to help--setting up procmail filtering is not too difficult.

By jgardner 2 min read