log

age author description
Sat, 13 Aug 2016 13:44:01 +0100 IBBoard Disable PCRE JIT to stop SELinux giving "denied execmem" for Apache puppet-3.6
Wed, 20 Jul 2016 20:31:22 +0100 IBBoard Blank some Apache configs to prevent httpd update breaking the server puppet-3.6
Tue, 19 Jul 2016 20:25:44 +0100 IBBoard Ban IODC bot, because they can't behave and don't have robots.txt instructions puppet-3.6
Fri, 08 Jul 2016 20:34:29 +0100 IBBoard Redirect dumb bots that removed the ID number to the main module page puppet-3.6
Wed, 29 Jun 2016 20:49:56 +0100 IBBoard Make sure that we're detecting and serving 7zip and RAR files correctly puppet-3.6
Tue, 28 Jun 2016 20:36:42 +0100 IBBoard Make sure that custom config comes before site configs puppet-3.6
Sat, 04 Jun 2016 14:08:19 +0100 IBBoard Update test machine IP again puppet-3.6
Sat, 04 Jun 2016 14:07:37 +0100 IBBoard Make sure our websites load after ALL other Apache config puppet-3.6
Sat, 04 Jun 2016 14:06:15 +0100 IBBoard Make sure that we don't leak PHP source code if something breaks puppet-3.6
Sat, 04 Jun 2016 14:05:14 +0100 IBBoard Make sure that HTTPS redirects have the full set of headers puppet-3.6
Tue, 31 May 2016 22:02:15 +0100 IBBoard Switch to PHP 7 from Webtatic puppet-3.6
Tue, 31 May 2016 22:00:56 +0100 IBBoard Add dev machine entry with correct IPs puppet-3.6
Tue, 31 May 2016 20:57:39 +0100 IBBoard Swap Webtatic to new GPG key puppet-3.6
Sat, 21 May 2016 15:32:13 +0100 IBBoard Add more Postscreen whitelisting, and a private section puppet-3.6
Sat, 14 May 2016 17:10:10 +0100 IBBoard Lock down Apache headers for security, based on https://securityheaders.io/ puppet-3.6
Sat, 23 Apr 2016 16:28:47 +0100 IBBoard Make sure that we're always setting HSTS headers, even when cannonicalising domains puppet-3.6
Thu, 21 Apr 2016 20:53:37 +0100 IBBoard Add PayPal IPs to whitelist so that they don't get delayed puppet-3.6
Sat, 26 Mar 2016 09:05:36 +0000 IBBoard Remove review email, as GG is shutting down puppet-3.6
Tue, 22 Mar 2016 21:09:25 +0000 IBBoard Avoid SELinux warnings by disabling bytecode support puppet-3.6
Sun, 13 Mar 2016 19:58:17 +0000 IBBoard Stop Bind trying IPv6, as we only have a link-local IP puppet-3.6
Wed, 24 Feb 2016 20:21:44 +0000 IBBoard Set up a recursive localhost-only Bind server (assuming RH's safe and sane default configs) puppet-3.6
Tue, 16 Feb 2016 20:26:00 +0000 IBBoard Patch isn't a standard package on a minimal install. Make sure we have it. puppet-3.6
Sun, 14 Feb 2016 20:04:04 +0000 IBBoard Reduce the number of spare servers, because we're quiet and need spare memory puppet-3.6
Wed, 27 Jan 2016 20:18:32 +0000 IBBoard Add another regular command to check that we've not got services requiring a restart puppet-3.6
Tue, 26 Jan 2016 20:15:23 +0000 IBBoard Remove repo checking cruft from potential Yum Check Update cron job output puppet-3.6
Sun, 24 Jan 2016 20:11:51 +0000 IBBoard Make sure that we don't get Yum just emailing us "I updated my metadata for the repos" puppet-3.6
Fri, 22 Jan 2016 20:27:16 +0000 IBBoard Reduce opcache memory usage because it doesn't use that much puppet-3.6
Sat, 16 Jan 2016 15:03:04 +0000 IBBoard Run cron job to notify of available updates puppet-3.6
Sat, 16 Jan 2016 11:01:09 +0000 IBBoard Add body checks to emails for the minority of obvious spam that aren't caught puppet-3.6
Sat, 16 Jan 2016 11:00:38 +0000 IBBoard Follow the documentation properly and specify dport, not just port puppet-3.6
Sat, 16 Jan 2016 10:59:56 +0000 IBBoard Extend blocked files to include backup files puppet-3.6
Sun, 10 Jan 2016 20:24:22 +0000 IBBoard Whitelist Google's IPs so that they don't get greylisted puppet-3.6
Tue, 05 Jan 2016 21:00:52 +0000 IBBoard Put postscreen back (our second SMTP line seems to have overridden it) puppet-3.6
Sun, 03 Jan 2016 20:48:38 +0000 IBBoard Make sure that config file changes for changes trigger a reload puppet-3.6
Sun, 03 Jan 2016 20:13:19 +0000 IBBoard Make sure that Amavis daemon is running so mail gets delivered after reboot! puppet-3.6
Sat, 26 Dec 2015 20:26:22 +0000 IBBoard Fight back against spam puppet-3.6
Wed, 23 Dec 2015 11:16:17 +0000 IBBoard Drop the number of spare servers to save some memory when we normally only have a couple of processes at once puppet-3.6
Tue, 24 Nov 2015 20:48:36 +0000 IBBoard Add mlocate as another core package, since it wasn't on our (very) minimal CentOS 7 install puppet-3.6
Sat, 14 Nov 2015 14:08:32 +0000 IBBoard New LogRotate is picky about usernames for security reasons. Fix it for Trac logs. puppet-3.6
Sun, 01 Nov 2015 21:18:07 +0000 IBBoard Move to CentOS7-based dovecot (with a tweak for "in=…") because it seems to match output better puppet-3.6
Sat, 31 Oct 2015 20:33:05 +0000 IBBoard Require bzip2 - why isn't this a default?! puppet-3.6
Sat, 31 Oct 2015 20:30:31 +0000 IBBoard Hide extra output from Puppet cron job that later Puppet generates puppet-3.6
Tue, 27 Oct 2015 08:53:00 +0000 IBBoard Fix typo (missing single quote) puppet-3.6
Mon, 26 Oct 2015 19:40:00 +0000 IBBoard Add required package for email SPF checking puppet-3.6
Mon, 26 Oct 2015 08:46:22 +0000 IBBoard Do it properly and put a path in our cron job puppet-3.6
Sun, 25 Oct 2015 21:21:13 +0000 IBBoard Fix package name - doing it from memory is bad puppet-3.6
Sun, 25 Oct 2015 20:55:19 +0000 IBBoard Add missing dependency for Trac Subversion support on CentOS 7 puppet-3.6
Sun, 25 Oct 2015 20:28:43 +0000 IBBoard Fix differences in how we allow/deny between Apache 2.2 and 2.4 puppet-3.6
Sun, 25 Oct 2015 20:17:52 +0000 IBBoard Merge latest changes from Default puppet-3.6
Sun, 18 Oct 2015 19:39:46 +0100 IBBoard Be specific about port blocking on Repeat Offender to try to prevent accidental lock-out puppet-3.6
Sun, 18 Oct 2015 18:57:46 +0100 IBBoard Update IP address of clouduk - test VM should use a different name! puppet-3.6
Sat, 17 Oct 2015 15:03:45 +0000 IBBoard Allow for specifying extra PHP packages (e.g. to enable Posix)
Sun, 11 Oct 2015 19:03:30 +0000 IBBoard Add missing fail2ban.local config file
Sun, 11 Oct 2015 18:41:53 +0000 IBBoard "Already Banned" is actually at NOTICE
Sat, 26 Sep 2015 14:28:16 +0000 IBBoard Update/fix Fail2Ban parsing in Logwatch
Sun, 13 Sep 2015 21:03:49 +0100 IBBoard Remove unused Fail2Ban filter puppet-3.6
Sun, 13 Sep 2015 20:48:18 +0100 IBBoard Make sure Fail2Ban rules are in right order (using separate chain) and whitelist Googlebot (which keeps hitting Script Kiddy targets for unknown reasons) puppet-3.6
Sun, 13 Sep 2015 19:48:35 +0100 IBBoard Fix syntax for port range in Fail2Ban rules puppet-3.6
Sat, 12 Sep 2015 21:00:55 +0100 IBBoard Add CentOS 7 config for postfix to take advantage of Postfix 2.10 and Postscreen puppet-3.6
Sat, 12 Sep 2015 16:42:27 +0100 IBBoard Remove "mod_version" from templates as Website module handles it and it isn't site specific puppet-3.6