{"id":203,"date":"2010-08-12T16:28:22","date_gmt":"2010-08-12T14:28:22","guid":{"rendered":""},"modified":"2010-09-21T11:35:23","modified_gmt":"2010-09-21T09:35:23","slug":"0402-configuration-container-st1","status":"publish","type":"post","link":"https:\/\/drfugazi.eu.org\/en\/0402-configuration-container-st1\/","title":{"rendered":"04.02 Configuration of container st1"},"content":{"rendered":"

After installation and initial configuration of st1<\/b> container you need to look on working services and disable those, which are not necessary. But at first I will set up more comfortable environment to work. I will change default shell to zsh<\/b> and home directory of root user. I will use GNU sed<\/b> for this purpose. Remember that \/usr\/local directory is inherited from global zone in read-only mode.<\/p>\n

\r\nroot@feniks:~# cp \/etc\/zshrc \/zones\/st1\/root\/etc\r\nroot@feniks:~# zlogin st1 \r\n[Connected to zone 'st1' pts\/4]\r\nSun Microsystems Inc.\tSunOS 5.10\tGeneric\tJanuary 2005\r\n# \/usr\/local\/bin\/gsed -i \"\/^root:\/ s\/:\\\/:\\\/sbin\\\/sh\/:\\\/root:\\\/bin\\\/zsh\/\" \/etc\/passwd\r\n# echo \"PATH=\/usr\/local\/apache\/bin:\/usr\/local\/bin:$PATH\" >> \/etc\/zshrc\r\n# echo \"export PATH\" >> \/etc\/zshrc\r\n# mv \/.sunw \/root\r\n# exit\r\n<\/pre>\n
On next login \/bin\/zsh<\/code> is called and it reads \/etc\/zshrc<\/code>, which I copied from global zone. I set there PATH and so on. Zsh is exemplary of course, you can use bash or other if you like.<\/p>\n
\r\nroot@feniks:~# zlogin st1\r\n[Connected to zone 'st1' pts\/4]\r\nLast login: Thu Aug 12 13:40:01 on pts\/4\r\nroot@st1:~# mv \/.histfile \/root\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.111                               Idle\r\n      *.*                                 Unbound\r\n      *.46901                             Idle\r\n      *.*                                 Unbound\r\n      *.*                                 Unbound\r\n      *.46902                             Idle\r\n      *.4045                              Idle\r\n      *.6481                              Idle\r\n      *.46922                             Idle\r\n      *.46923                             Idle\r\n      *.46925                             Idle\r\n      *.514                               Idle\r\n\r\nUDP: IPv6\r\n   Local Address                     Remote Address                   State      If\r\n--------------------------------- --------------------------------- ---------- -----\r\n      *.6481                                                        Idle       \r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.111                *.*                0      0 49152      0 LISTEN\r\n      *.*                  *.*                0      0 49152      0 IDLE\r\n      *.43667              *.*                0      0 49152      0 LISTEN\r\n      *.43668              *.*                0      0 49152      0 LISTEN\r\n      *.4045               *.*                0      0 49152      0 LISTEN\r\n      *.5987               *.*                0      0 49152      0 LISTEN\r\n      *.514                *.*                0      0 49152      0 LISTEN\r\n      *.6481               *.*                0      0 49152      0 LISTEN\r\n      *.513                *.*                0      0 49152      0 LISTEN\r\n      *.43669              *.*                0      0 49152      0 LISTEN\r\n      *.79                 *.*                0      0 49152      0 LISTEN\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n      *.23                 *.*                0      0 49152      0 LISTEN\r\n      *.43712              *.*                0      0 49152      0 BOUND\r\n127.0.0.1.6788             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.6789             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.43706            *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.514                             *.*                             0      0 49152      0 LISTEN      \r\n      *.513                             *.*                             0      0 49152      0 LISTEN      \r\n      *.79                              *.*                             0      0 49152      0 LISTEN      \r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n      *.23                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n60039b36758 stream-ord 30077930300 00000000 \/var\/run\/.inetd.uds \r\n<\/pre>\n
There is a lot of opened ports, this is not good for security. For what is telnet opened, who use this nowadays? If you initially configure system with sysidcfg<\/code> file, you can choose profile limited_net, and this will constrain runing services, but if your system is configured \"by hand\" then you will see something similiar to this above. You can disable services one by one with use of svcadm<\/code> command, because there are managed by another Solaris 10 innovation named Service Management Facility<\/b> (SMF).<\/p>\n
\r\nroot@st1:~# svcs\r\nSTATE          STIME    FMRI\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S20sysetup\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S72autoinstall\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S73cachefs_daemon\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S89PRESERVE\r\nlegacy_run     15:41:36 lrc:\/etc\/rc2_d\/S98deallocate\r\nlegacy_run     15:41:36 lrc:\/etc\/rc3_d\/S16boot_server\r\ndisabled       15:41:35 svc:\/system\/filesystem\/volfs:default\r\nonline         15:41:31 svc:\/system\/svc\/restarter:default\r\nonline         15:41:31 svc:\/system\/filesystem\/root:default\r\nonline         15:41:31 svc:\/network\/loopback:default\r\nonline         15:41:32 svc:\/network\/pfil:default\r\nonline         15:41:32 svc:\/system\/boot-archive:default\r\nonline         15:41:32 svc:\/system\/installupdates:default\r\nonline         15:41:32 svc:\/network\/physical:default\r\nonline         15:41:32 svc:\/system\/filesystem\/usr:default\r\nonline         15:41:33 svc:\/system\/identity:node\r\nonline         15:41:33 svc:\/system\/keymap:default\r\nonline         15:41:33 svc:\/system\/device\/local:default\r\nonline         15:41:33 svc:\/milestone\/devices:default\r\nonline         15:41:33 svc:\/system\/filesystem\/minimal:default\r\nonline         15:41:33 svc:\/system\/cluster\/cl_boot_check:default\r\nonline         15:41:33 svc:\/system\/name-service-cache:default\r\nonline         15:41:33 svc:\/system\/rmtmpfiles:default\r\nonline         15:41:33 svc:\/system\/cryptosvc:default\r\nonline         15:41:33 svc:\/system\/identity:domain\r\nonline         15:41:33 svc:\/network\/ipsec\/ipsecalgs:default\r\nonline         15:41:33 svc:\/system\/pkgserv:default\r\nonline         15:41:33 svc:\/network\/ipsec\/policy:default\r\nonline         15:41:33 svc:\/system\/manifest-import:default\r\nonline         15:41:33 svc:\/system\/coreadm:default\r\nonline         15:41:33 svc:\/system\/patchchk:default\r\nonline         15:41:33 svc:\/milestone\/network:default\r\nonline         15:41:33 svc:\/milestone\/single-user:default\r\nonline         15:41:33 svc:\/network\/initial:default\r\nonline         15:41:33 svc:\/network\/routing-setup:default\r\nonline         15:41:33 svc:\/system\/filesystem\/local:default\r\nonline         15:41:33 svc:\/network\/service:default\r\nonline         15:41:33 svc:\/network\/shares\/group:default\r\nonline         15:41:34 svc:\/network\/dns\/client:default\r\nonline         15:41:34 svc:\/system\/sysidtool:net\r\nonline         15:41:34 svc:\/system\/boot-archive-update:default\r\nonline         15:41:34 svc:\/milestone\/name-services:default\r\nonline         15:41:34 svc:\/network\/rpc\/bind:default\r\nonline         15:41:34 svc:\/system\/cron:default\r\nonline         15:41:34 svc:\/network\/nfs\/mapid:default\r\nonline         15:41:34 svc:\/network\/nfs\/cbd:default\r\nonline         15:41:34 svc:\/system\/sysidtool:system\r\nonline         15:41:34 svc:\/network\/nfs\/status:default\r\nonline         15:41:34 svc:\/milestone\/sysconfig:default\r\nonline         15:41:34 svc:\/network\/nfs\/nlockmgr:default\r\nonline         15:41:34 svc:\/application\/stosreg:default\r\nonline         15:41:34 svc:\/system\/sac:default\r\nonline         15:41:34 svc:\/network\/inetd:default\r\nonline         15:41:34 svc:\/application\/management\/wbem:default\r\nonline         15:41:34 svc:\/system\/utmp:default\r\nonline         15:41:35 svc:\/network\/rpc\/gss:default\r\nonline         15:41:35 svc:\/network\/security\/ktkt_warn:default\r\nonline         15:41:35 svc:\/network\/shell:default\r\nonline         15:41:35 svc:\/network\/stlisten:default\r\nonline         15:41:35 svc:\/network\/stdiscover:default\r\nonline         15:41:35 svc:\/network\/nfs\/client:default\r\nonline         15:41:35 svc:\/network\/login:rlogin\r\nonline         15:41:35 svc:\/network\/rpc\/rusers:default\r\nonline         15:41:35 svc:\/network\/rpc\/rstat:default\r\nonline         15:41:35 svc:\/system\/filesystem\/autofs:default\r\nonline         15:41:35 svc:\/network\/rpc\/smserver:default\r\nonline         15:41:35 svc:\/network\/nfs\/rquota:default\r\nonline         15:41:35 svc:\/network\/finger:default\r\nonline         15:41:35 svc:\/network\/ssh:default\r\nonline         15:41:35 svc:\/system\/system-log:default\r\nonline         15:41:35 svc:\/network\/telnet:default\r\nonline         15:41:35 svc:\/network\/rpc-100235_1\/rpc_ticotsord:default\r\nonline         15:41:36 svc:\/milestone\/multi-user:default\r\nonline         15:41:36 svc:\/milestone\/multi-user-server:default\r\nonline         15:41:47 svc:\/system\/webconsole:console\r\nonline         15:50:44 svc:\/system\/console-login:default\r\n<\/pre>\n
There is lot of that, and probably you do not know what can you safely disable. RPC processes? Finger, Telnet? What else? I suggest you that we will apply limited_net<\/code> profile for beginning, and we will check what was done:<\/p>\n
\r\nroot@st1:~# svccfg apply \/var\/svc\/profile\/generic_limited_net.xml\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.111                               Idle\r\n      *.*                                 Unbound\r\n      *.46901                             Idle\r\n      *.514                               Idle\r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.111                *.*                0      0 49152      0 LISTEN\r\n      *.*                  *.*                0      0 49152      0 IDLE\r\n      *.5987               *.*                0      0 49152      0 LISTEN\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n      *.43712              *.*                0      0 49152      0 BOUND\r\n127.0.0.1.6788             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.6789             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.43706            *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n60039b36758 stream-ord 30077930300 00000000 \/var\/run\/.inetd.uds \r\n<\/pre>\n
Now is better, but we can disable all rpc\/*, autofs and volfs if they are not used<\/p>\n
\r\nroot@st1:~# svcs|grep rpc                 \r\nonline         14:39:51 svc:\/network\/rpc\/bind:default\r\nonline         14:39:52 svc:\/network\/rpc\/gss:default\r\nonline         14:39:52 svc:\/network\/rpc\/smserver:default\r\nonline         14:39:52 svc:\/network\/rpc-100235_1\/rpc_ticotsord:default\r\nroot@st1:~# svcs|gawk '\/rpc\/ { print $3 }'|xargs svcadm disable\r\nroot@st1:~# svcs|grep rpc\r\nroot@st1:~# svcs -xv\r\nsvc:\/network\/rpc\/bind:default (RPC bindings)\r\n State: disabled since Thu Aug 12 14:46:32 2010\r\nReason: Disabled by an administrator.\r\n   See: http:\/\/sun.com\/msg\/SMF-8000-05\r\n   See: man -M \/usr\/share\/man -s 1M rpcbind\r\n   See: \/var\/svc\/log\/network-rpc-bind:default.log\r\nImpact: 1 dependent service is not running:\r\n        svc:\/system\/filesystem\/autofs:default\r\nroot@st1:~# svcadm disable autofs\r\nroot@st1:~# svcadm disable volfs\r\nroot@st1:~# svcs -xv\r\n<\/pre>\n
From my experience I can prompt you, that you should now reboot your container (not system) and check services after login.<\/p>\n
\r\nroot@st1:~# reboot\r\n\r\n[Connection to zone 'st1' pts\/4 closed]\r\nroot@feniks:~# zlogin st1\r\n[Connected to zone 'st1' pts\/4]\r\nLast login: Thu Aug 12 14:47:55 on pts\/4\r\nroot@st1:~# svcs -xv            \r\nsvc:\/network\/security\/ktkt_warn:default (Kerberos V5 warning messages daemon)\r\n State: maintenance since Thu Aug 12 14:47:56 2010\r\nReason: Restarter svc:\/network\/inetd:default gave no explanation.\r\n   See: http:\/\/sun.com\/msg\/SMF-8000-9C\r\n   See: man -M \/usr\/share\/man -s 1M ktkt_warnd\r\nImpact: This service is not running.\r\n\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.514                               Idle\r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.5987               *.*                0      0 49152      0 LISTEN\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n      *.40180              *.*                0      0 49152      0 BOUND\r\n127.0.0.1.6788             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.6789             *.*                0      0 49152      0 LISTEN\r\n127.0.0.1.40174            *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n30040ed8bd0 stream-ord 300397d2380 00000000 \/var\/run\/.inetd.uds\r\n<\/pre>\n
If you will not use webconsole to manage, you can disable those services too. And Kerberos warning daemon.<\/p>\n
\r\nroot@st1:~# svcadm disable wbem webconsole\r\nroot@st1:~# svcadm disable ktkt_warn\r\nroot@st1:~# svcs -xv\r\nroot@st1:~# netstat -an\r\n\r\nUDP: IPv4\r\n   Local Address        Remote Address      State\r\n-------------------- -------------------- ----------\r\n      *.514                               Idle\r\n\r\nTCP: IPv4\r\n   Local Address        Remote Address    Swind Send-Q Rwind Recv-Q    State\r\n-------------------- -------------------- ----- ------ ----- ------ -----------\r\n      *.22                 *.*                0      0 49152      0 LISTEN\r\n\r\nTCP: IPv6\r\n   Local Address                     Remote Address                 Swind Send-Q Rwind Recv-Q   State      If\r\n--------------------------------- --------------------------------- ----- ------ ----- ------ ----------- -----\r\n      *.22                              *.*                             0      0 49152      0 LISTEN      \r\n\r\nActive UNIX domain sockets\r\nAddress  Type          Vnode     Conn  Local Addr      Remote Addr\r\n3000a4dcd38 stream-ord 30022517c00 00000000 \/var\/run\/.inetd.uds\r\n<\/pre>\n
Only syslog 514\/UDP and SSH on 22\/TCP remained. If you do not want to use SSH for connect to container and you will use only zlogin<\/code> from global zone, you can safaly disable SSH.<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
After installation and initial configuration of st1<\/b> container you need to look on working services and disable those, which are not necessary. But at first I will set up more comfortable environment to work. I will change default shell to zsh<\/b> and home directory of root user. I will use GNU sed<\/b> for this purpose. Remember that \/usr\/local directory is inherited from global zone in read-only mode.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[],"tags":[10,28,27],"jetpack_publicize_connections":[],"acf":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7M9Tz-3h","jetpack-related-posts":[{"id":202,"url":"https:\/\/drfugazi.eu.org\/en\/0401-installation-container-st1\/","url_meta":{"origin":203,"position":0},"title":"04.01 Installation of container st1","author":"drfugazi","date":"Thursday August 12th, 2010","format":false,"excerpt":"Creation of container named st1, without resource control, with inherited standard directories and additionally inherited \/usr\/local dir (read only mode). Configured two network Quad Fast Ethernet cards: qfe4 and qfe5 in shared mode. Added ZFS pool (zpool) named studmail.","rel":"","context":"In \"Solaris\"","block_context":{"text":"Solaris","link":"https:\/\/drfugazi.eu.org\/en\/tag\/solaris\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":201,"url":"https:\/\/drfugazi.eu.org\/en\/0402-konfiguracja-kontenera-st1\/","url_meta":{"origin":203,"position":1},"title":"04.02 Konfiguracja kontenera st1","author":"drfugazi","date":"Thursday August 12th, 2010","format":false,"excerpt":"Po instalacji kontenera i wst\u0119pnym skonfigurowaniu \u015brodowiska, sieci itp. czas przyjrze\u0107 si\u0119 temu co domy\u015blnie dzia\u0142a i wy\u0142\u0105czy\u0107 zb\u0119dne us\u0142ugi. Wcze\u015bniej jednak ustawi\u0119 sobie wygodniejsze \u015brodowisko do pracy zmieniaj\u0105c shella i katalog domowy roota. U\u017cyj\u0119 do tego GNU seda (gsed), kt\u00f3rego ju\u017c wcze\u015bniej poleca\u0142em zainstalowa\u0107 wraz z innymi narz\u0119dziami GNU\u2026","rel":"","context":"In \"Kontenery\"","block_context":{"text":"Kontenery","link":"https:\/\/drfugazi.eu.org\/en\/tag\/kontenery\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":200,"url":"https:\/\/drfugazi.eu.org\/en\/0401-instalacja-kontenera-st1\/","url_meta":{"origin":203,"position":2},"title":"04.01 Instalacja kontenera st1","author":"drfugazi","date":"Thursday August 12th, 2010","format":false,"excerpt":"Tworzenie kontenera o nazwie st1, bez kontroli zasob\u00f3w, z dziedziczonymi katalogami standardowymi i dodatkowo z dziedziczonym \/usr\/local (w trybie tylko do odczytu). Skonfigurowane dwie karty sieciowe: qfe4 i qfe5 w trybie wsp\u00f3\u0142dzielonym oraz dodana pula ZFS (zpool) o nazwie studmail.","rel":"","context":"In \"Kontenery\"","block_context":{"text":"Kontenery","link":"https:\/\/drfugazi.eu.org\/en\/tag\/kontenery\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":212,"url":"https:\/\/drfugazi.eu.org\/en\/how-remove-dataset-solaris-zone-and-mount-it-lofs\/","url_meta":{"origin":203,"position":3},"title":"How to remove dataset from Solaris zone and mount it as lofs","author":"drfugazi","date":"Tuesday August 17th, 2010","format":false,"excerpt":"Because of building mail system I need to export ZFS filesystem via NFS to other node, where postfix with deliver will save messages to mail boxes. As you can see in this installation transcript I configured whole zpool \"studmail\" as ZFS dataset for zone st1. Unfortunatelly, you can not simply\u2026","rel":"","context":"In \"Solaris\"","block_context":{"text":"Solaris","link":"https:\/\/drfugazi.eu.org\/en\/tag\/solaris\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":213,"url":"https:\/\/drfugazi.eu.org\/en\/jak-zamienic-w-kontenerze-dataset-na-lofs\/","url_meta":{"origin":203,"position":4},"title":"Jak zamieni\u0107 w kontenerze dataset na lofs","author":"drfugazi","date":"Tuesday August 17th, 2010","format":false,"excerpt":"Poniewa\u017c konfiguruj\u0119 system pocztowy, potrzebuj\u0119 wyeksportowa\u0107 filesystem ZFS przez NFS do innego noda, gdzie postfix poprzez delivera b\u0119dzie zapisywa\u0142 wiadomo\u015bci do skrzynek. Jak wida\u0107 w tym zapisie sesji, skonfigurowa\u0142em ca\u0142\u0105 zpoole \"studmail\" jako dataset ZFS dla kontenera st1. Niestety w prosty spos\u00f3b nie da si\u0119 wsp\u00f3\u0142dzieli\u0107 systemu plik\u00f3w ZFS przez\u2026","rel":"","context":"In \"Kontenery\"","block_context":{"text":"Kontenery","link":"https:\/\/drfugazi.eu.org\/en\/tag\/kontenery\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":219,"url":"https:\/\/drfugazi.eu.org\/en\/dovecot-203\/","url_meta":{"origin":203,"position":5},"title":"dovecot-2.0.3","author":"drfugazi","date":"Wednesday October  6th, 2010","format":false,"excerpt":"Dovecot is an open source IMAP and POP3 email server for Linux\/UNIX-like systems, written with security primarily in mind. Dovecot is an excellent choice for both small and large installations. It's fast, simple to set up, requires no special administration and it uses very little memory. Source: http:\/\/dovecot.org\/ Below you\u2026","rel":"","context":"In \"Mail system\"","block_context":{"text":"Mail system","link":"https:\/\/drfugazi.eu.org\/en\/tag\/mail_system\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/posts\/203"}],"collection":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/comments?post=203"}],"version-history":[{"count":0,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/posts\/203\/revisions"}],"wp:attachment":[{"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/media?parent=203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/categories?post=203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/drfugazi.eu.org\/en\/wp-json\/wp\/v2\/tags?post=203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}