Average Services

Average.org does not provide any commercial services. Friends of the owner of this system use it gratis; if you are personally acquainted with the owner, you are welcome to join.

List of services

IPv4 and IPv6 (native)
BIND9; IPv4 and IPv6; DNSSEC supported. Can host your zone but there is no UI to edit it.
Authentication by password in conjunction with google authenticator or by public key. For the first login, you have to use public key (send it to the owner). When you are logged in, use passwd and google-authenticator commands to set up password access to your account.
Download this configuration file. It is in the format suitable for Android OpenVPN app. For non-Android use, take configuration parameters from that file and put them to where your implementation expects them. Use unix userid and password for authentication.
Note that the server assigns an IPv6 address to the client, but IPv6 VPN does not work on Android 4.x due to this bug. On Ubuntu up to 14.10, DNS configuration provided by the server is disregarded by NetworkManager due to this bug.
HTTP and CONNECT (for HTTPS) supported via Apache forward proxy, configure with the PAC similar to this:
function FindProxyForURL(url, host) {
  if ((shExpMatch(host, "*.local")) ||
      (shExpMatch(host, "*.lan")) ||
      (shExpMatch(host, "localhost"))) {
    return "DIRECT";
  if ((isInNet(host, "", "")) ||
      (isInNet(host, "", "")) ||
      (isInNet(host, "", "")) ||
      (isInNet(host, "", ""))) {
    return "DIRECT";
  return "HTTPS www.average.org:8443";
Use Unix userid and password for authentication on the proxy. Note that client-to-proxy connection needs to be over TLS. One way to use the PAC is to put the file somewhere on the local file system, e.g. /etc/average-proxy.pac, and in the Firefox/Chrome configuration, specify the "Automatic proxy configuration URL" as file:///etc/average-proxy.pac. Neither Firefox nor Chrome allows to specify HTTPS proxy type in the "Manual proxy configuration".
$HOME/public_html translates to http://www.average.org/~user/, CGI allowed, PHP allowed. Whole domain hosting possible. Data transfer over ssh only (scp, rsync).

SMTP, submission (authentication only with STARTTLS), IMAP (only with STARTTLS). Also webmail at https://www.average.org/webmail/. Use Unix password. Content scanning inserts the header X-CRM114-Status:, you can use the value for sorting spam. Local delivery via procmail, you are welcome to create your own .procmailrc. Dovecot uses $HOME/INBOX directory as the root of the folder namespace.

It is recommended to include these recipes in .procmailrc:

* ^X-CRM114-Status: SPAM

* ^X-CRM114-Status: UNSURE
If you do, moving messages between one of these and any of the "normal" folders will re-train system-wide spam detection. Folders must me named exactly as specified above.

XMPP (née Jabber)
Use Unix userid and password. ICQ transport gateway present. Also web client exists at https://www.average.org/jwchat/.
Asterisk. Contact the owner for setup.
Source Code Control
CVS, Subversion, Git. Use over SSH; anonymous read-only access possible, contact the owner.
RSS aggregator
Tiny Tiny RSS at https://www.average.org/tt-rss/. Use Unix userid and password for authentication.
P2P file sharing

SSL Certificates

All SSL-enabled services on this system use certificates signed by the Average CA. It is completely "unofficial", no software vendors include its root certificate in the products. That said, it is one of the oldest on the Net (younger than RSA/Verisign but older than Thawte). If you want to avoid the need to add server certificate exceptions all the time, you could consider importing the root certificate into your system(s) certificate repository. Follow the above link to do it.


Running this system is a hobby. This means two things: So if you are a user, and something does not work, please try to collect as much detail as you can, to help the owner not to spend time on generic troubleshooting.