ISPConfig 3 Spam training

nano /bin/sa_learn

ln -s /etc/letsencrypt/live/server.domain.com/fullchain.pem /etc/postfix/CAfile.pem
ln -s /etc/letsencrypt/live/server.domain.com/cert.pem /etc/postfix/smtpd.cert
ln -s /etc/letsencrypt/live/server.domain.com/privkey.pem /etc/postfix/CAfile.pem
service postfix restart
service dovecot restart

cat /etc/letsencrypt/live/server.domain.com/privkey.pem /etc/letsencrypt/live/server.domain.com/fullchain.pem > /etc/ssl/private/pure-ftpd.pem

ln -s /etc/letsencrypt/live/server.domain.com/chain.pem /usr/local/ispconfig/interface/ssl/ispserver.bundle
ln -s /etc/letsencrypt/live/server.domain.com/cert.pem /usr/local/ispconfig/interface/ssl/ispserver.crt
ln -s /etc/letsencrypt/live/server.domain.com/privkey.pem /usr/local/ispconfig/interface/ssl/ispserver.key
service apache2 restart

pfSense Traffic Shaping

Being democratic doesn’t seem to have worked with traffic-shaping in a family of stream-loving and gaming teenagers/young adults.  Unfortunately it interferes with serious adult pursuits like also wanting to stream entertainment.  CNN on the AppleTV is an upstairs favourite, but is a real bandwidth-hog and requires lots of ack’s. Ive tried  HFSC shaping, but downstairs gaming and other streaming  just takes over, even relegated to a medium-priority queue.  Streaming requires a fairly responsive ack queue, but we have not found the magic formula.   So, attempt #2 is IP specific bandwidth limiting. Continue reading “pfSense Traffic Shaping”