Myside's Spew - Blog of Spontaneous Combustible Spew

Current & Updating Webalizer Search Engine List

02 February, 2012 06:40 CST6CDT

as of 2012-02-02

The Webalizer is a HTTP server log analyzer that generates HTML visual output statistics with graphs about Internet websites and its visitors.  One of the many features of The Webalizer is its search engine query (keywords) referral logging.  Each search engine uses a URL parameter that contains the search query the Internet party or person used to be directed to a resource on you web server.  Webalizer uses the search query keywords to generate one of several reports that may be viewed and referenced.

This article contains a current list of search engines and parameters for Webalizer's SearchEngine parameter.  Feel free to add or modify a search engine (SearchEngine) for The Webalizer search engine query parsing in the comments.

SearchEngine    aolsearch.      q=
SearchEngine    ask.com q=
SearchEngine    bingj.  q=
SearchEngine    bing.   q=
SearchEngine    facebook.       q=
SearchEngine    google. q=
SearchEngine    image.youdao.com        q=
SearchEngine    kvasir.no       q=
SearchEngine    m.yahoo.        p=
SearchEngine    search.alot.    q=
SearchEngine    search.aol.     q=
SearchEngine    search.aol.     query=
SearchEngine    search.comcast.net      q=
SearchEngine    search.conduit. q=
SearchEngine    search.lycos.   query=
SearchEngine    search.pro      q=
SearchEngine    search.yahoo.   p=
SearchEngine    webcache.googleusercontent.com  q=
SearchEngine    altavista.com   q=
SearchEngine    eureka.com      q=
SearchEngine    hotbot.com      MT=
SearchEngine    msn.com         MT=
SearchEngine    infoseek.com    qt=
SearchEngine    webcrawler      searchText=
SearchEngine    excite          search=
SearchEngine    netscape.com    search=
SearchEngine    mamma.com       query=
SearchEngine    alltheweb.com   query=
SearchEngine    northernlight.com  qr=
SearchEngine    sensis.com.au   find=

Software  Projects  Article & Comments

Postfix TLS Fingerprints for MTA to MTA Identification

28 January, 2012 06:39 CST6CDT

edited 2012-01-28 11:30:43

I have a home mail server with a Linux operating system & Postfix that is the primary mail exchange (MX) for its domain.  In addition to the primary MTA, I have a static secondary relay mail server with a FreeBSD operating system & Postfix in the case my home connection were to go down.  I was looking for a way that my secondary or primary MTA (mail transport agent) could relay e-mail to my legitimate dynamic IP address if my home mail server were to go down by doing a verification that my dynamic domain name IP address with an open port 25 was truly its relay destination.

I accomplished simple MTA to MTA verification using Postfix, which is installed on both servers, and my home TLS certificate's fingerprint.  When my backup mail exchange server receives mail, it will relay it to my dynamic home server when it becomes available, though will only be delivered if my home TLS MD5 certificate fingerprint is valid.  If the MD5 fingerprint expected does not match, it is deferred, re-queued, and repeats indefinitely until it is safe to deliver.

The first step is to do a MD5 fingerprint on your home, dynamic Postfix server's TLS PEM file defined in the Postfix main.cf configuration file with the variable smtpd_tls_cert_file=/path/to/ssl-cert.pem using the openssl command:

openssl x509 -noout -in /path/to/ssl-cert.pem -fingerprint -md5

Let's assume the MD5 fingerprint output is: d5:68:da:c4:cd:ee:0d:ba:3a:bc:dd:b6:7b:67:51:88 and our dynamic domain name is domain.not.  Let's also assume the home mail server is setup and ready to receive e-mail for this domain and your users.

On your secondary and static backup MX server, make sure that domain.not is defined in the following parameters:

  • relay_domains=domain.not
  • relay_recipient_maps = hash:${config_directory}/relay_recipient_maps.cf

The configuration file relay_recipient_maps.cf contains a table of your recipients and may look like the following:

first.last@domain.not     first.last@domain.not

Make sure to execute: postmap /etc/postfix/relay_recipient_maps.cf or replace /etc/postfix with your configuration directory.

Your "transport_maps=" may look something like the following:

domain.not   smtp:[domain.not]

If your ISP blocks port 25, you may use the following for port 26, or any upper number port that is open and available:

domain.not smtp:[domain.not]:26

Now that we have the MD5 fingerprint of our home server and the static backup server knows what e-mail to accept and where to deliver it when your home server is up, we may now define in Postfix to only deliver mail if when requested the home Postfix server shows its certificate, and the MD5 fingerprint of the certificate matches.

First tell Postfix to use MD5 hashes for TLS policies: smtp_tls_fingerprint_digest = md5  Next, define your TLS policy configuration file, smtp_tls_policy_maps = hash:${config_directory}/tls_policy.cf

Here is an example SMTP TLS policy map:

[domain.not] fingerprint
    match=d5:68:da:c4:cd:ee:0d:ba:3a:bc:dd:b6:7b:67:51:88

In the above TLS policy, domain.not requires TLS and the MD5 fingerprint of the certificate must match, match=  Be sure to postmap the tls_policy.cf file, reload postfix, and you will now be using simple, low level MTA to MTA identification.

Software  Projects  Article & Comments

Firefox Now Does a Rapid Release (Backport) on Ubuntu

27 January, 2012 16:42 CST6CDT

This morning I noticed APT had a new version of Firefox waiting to be updated.  Firefox 9.0.1 was a welcomed update for my 10.04 LTS Xubuntu installation.  Ubuntu will now be releasing the browser upgrades as Mozilla rolls out it's web browser application with the next generation of Internet technology, such as enhanced HTML5 support, and security enhancements.

"The upstream Mozilla Firefox web browser has moved to a rapid release cycle. New Firefox versions are being released every six weeks and contain new features and security enhancements. Until now, Ubuntu 10.04 LTS and Ubuntu 10.10 have been getting 3.6 point releases of Firefox. As such, users have not been benefiting from new features, support for new web technologies, security enhancements, and performance improvements. Firefox 3.6 will be reaching its end of life soon, so we need to migrate users to rapid release so that they will continue to receive security updates in a timely fashion."

The roll-out was announced to start January 17th, though I thought from the start it was to be the 27th - and it turned out to be so, for me.  Ubuntu 10.04 LTS and Ubuntu 10.10 installations are now on a rapid release cycle as is the latest Ubuntu distribution sets available.  I am sure it is relieving a lot of stress now not having to patch Firefox 3.6 as security issues arise, as this is the default and once permanent version of these older maintained Ubuntu distribution sets.

APT repository add-ons for the previous Ubuntu Firefox branded version will be migrated to the new Firefox version through Mozilla's add-on service, addons.mozilla.org.

Day to Day  Software  Article & Comments

Kwik Trip Coffee

25 January, 2012 14:52 CST6CDT

Kwik Trip is predominantly a Wisconsin and Minnesota convenience store and gas station.  It is king of gas in my area and once the king-quick-stop for morning coffee.

Up until about 3 years ago Kwik Trip brewed a fine roast of well tasting caffeine filled coffee to kick-start the morning.  Out of no where the company decided to package and re-sell their meagerly roasted blends in ground and whole bean packages called Cafe Karuba Coffee.  Around this time is when the grounds went stale.

From what I can see, the employees are now forbidden to put any love into our cup of Joe.  Coffee grounds are grounded exact as well as brew baskets swelled to the bottoms of hell where brewing only turns the color of the water into a hazy brown.  Kwik Trip is no Cafe, even in Karuba, a village in Nord-Kivu, Democratic Republic of the Congo.

It took a good year before I gave up completely drinking Kwik Trip Coffee, now opting to buy a half of a pound of Folgers at the same establishment for a justified 68 cents more.  Woe is an actual refill of a cup of Kwik Trip Java - especially with these fine establishments selling quality cups of coffee on the go: coffee shops near La Crosse, Wisconsin

A year ago I was writing...

Destroy Heater & Air Conditioning Filter Odors
Vikings vs. Packers Loyalty

Day to Day  Article & Comments

Are you ready for SOPA? - January 18th!

17 January, 2012 16:38 CST6CDT

The Stop On-line Piracy Act (SOPA) is in a full forced backlash from Internet giants such as WikipediA and our beloved BoingBoing whom are participating in the SOPA Strike, a 12 hour period in which volunteer domain owners will turn the electric off to their sites.  The SOPA Strike page link above provides several parked pages to point your domains to among information on how to contact your congressional representatives to voice your opinion.

"January 18th is going to be amazing. Sites are striking in all different ways, but they are united by this: do the biggest thing you possibly can, and drive contacts to Congress. Put this on your site or automate it by putting this JS into your header (the Javascript link is available @ http://sopastrike.com/), which will start the blackout at 8AM EST and end at 8PM EST." - http://sopastrike.com/

The SOPA Strike website contains a list of validated participants along with a list of unfiltered participants of the Internet Blackout.  I will not be participating in the blackout, however I wish to make this unfetchable downfall of our existence on the Internet - to be voted on by Congress January 24th (SOPA), and PIPA which is currently in discussion in the Senate, stop DEAD with help from those that this post may help.  Also see: Internet Blacklist for a video and in depth information in relation to SOPA and PIPA.

"On Jan 24th, Congress will vote to pass Internet censorship in the Senate, even though the vast majority of Americans are opposed. We need to kill the bill - PIPA in the Senate and SOPA in the House - to protect our rights to free speech, privacy, and prosperity. We need Internet companies to follow Reddit's lead and stand up for the web, as we Internet users are doing every day." - http://sopastrike.com/

Here is a small list of 3rd party templates and the official sopastrike.com web page and Javascript code available and ready to use during the protest tomorrow:

  1. Black out your website for 12 hours with this page's HTML, or by putting this Javascript into your site's theme (the Javascript link is available @ http://sopastrike.com/). Tucows is doing this and so is BoingBoing.
  2. Other people have made tools to strike. Some other ways to strike:

A year ago I was writing...

Packers Game, CSS Modifications, & Verizon Hoopla
Verizon Admits iPhone Network Hiccups
freenode New Year's Chat Room Channel Logs (#freenode-newyears) 2011

Technology  Software  Article & Comments

1 2 3 ... 106 107 108  Next»
Land where drunk cows swim and home to my daily hand