Average Services

List of services

Connectivity

IPv4 and IPv6 (native)

DNS

BIND9; IPv4 and IPv6; DNSSEC supported. Can host your zone but there is no UI to edit it.

SSH

Authentication by password in conjunction with google authenticator or by public key. For the first login, you have to use public key (send it to the owner). When you are logged in, use passwd and google-authenticator commands to set up password access to your account.

OpenVPN

Download this configuration file. It is in the format suitable for Android OpenVPN app. For non-Android use, take configuration parameters from that file and put them to where your implementation expects them. Use unix userid and password for authentication.
Note that the server assigns an IPv6 address to the client, but IPv6 VPN does not work on Android 4.x due to this bug. On Ubuntu up to 14.10, DNS configuration provided by the server is disregarded by NetworkManager due to this bug.

Proxy

HTTP and CONNECT (for HTTPS) supported via Apache forward proxy, configure with the PAC similar to this:

function FindProxyForURL(url, host) {
  if ((shExpMatch(host, "*.local")) ||
      (shExpMatch(host, "*.lan")) ||
      (shExpMatch(host, "localhost"))) {
    return "DIRECT";
  }
  if ((isInNet(host, "192.168.0.0", "255.255.0.0")) ||
      (isInNet(host, "172.16.0.0", "255.240.0.0")) ||
      (isInNet(host, "10.0.0.0", "255.0.0.0")) ||
      (isInNet(host, "127.0.0.0", "255.0.0.0"))) {
    return "DIRECT";
  }
  return "HTTPS www.average.org:8443";
}

Use Unix userid and password for authentication on the proxy. Note that client-to-proxy connection needs to be over TLS. One way to use the PAC is to put the file somewhere on the local file system, e.g. /etc/average-proxy.pac, and in the Firefox/Chrome configuration, specify the "Automatic proxy configuration URL" as file:///etc/average-proxy.pac. Neither Firefox nor Chrome allows to specify HTTPS proxy type in the "Manual proxy configuration".

HTTP

$HOME/public_html translates to http://www.average.org/~user/, CGI allowed, PHP allowed. Whole domain hosting possible. Data transfer over ssh only (scp, rsync).

Email

SMTP, submission (authentication only with STARTTLS), IMAP (only with STARTTLS). Also webmail at https://www.average.org/webmail/. Use Unix password. Content scanning inserts the header X-CRM114-Status:, you can use the value for sorting spam. Local delivery via procmail, you are welcome to create your own .procmailrc. Dovecot uses $HOME/INBOX directory as the root of the folder namespace.

It is recommended to include these recipes in .procmailrc:

:0:
* ^X-CRM114-Status: SPAM
INBOX/Junk

:0:
* ^X-CRM114-Status: UNSURE
INBOX/Unsure

If you do, moving messages between one of these and any of the "normal" folders will re-train system-wide spam detection. Folders must me named exactly as specified above.

XMPP (née Jabber)

Use Unix userid and password. ICQ transport gateway present. Also web client exists at https://www.average.org/jwchat/.

SIP (VoIP)

Asterisk. Contact the owner for setup.

Source Code Control

CVS, Subversion, Git. Use over SSH; anonymous read-only access possible, contact the owner.

P2P file sharing

FORBIDDEN BY THE HOSTING PROVIDER. Please do not run any!

SSL Certificates

Support

• The owner is more than keen to fix problems with this system.
• The owner is less than keen to help users with generic troubles, not related to this system.