Re: MTA experts: address rewriting depending on next hop

2009-07-22 Thread Izak Burger
On Tue, Jul 21, 2009 at 7:31 PM, Siggy Brentrupdeb...@psycho.i21k.de wrote:
 Here's the question again: which one of the abundance of MTAs in
 Debian is capable of address rewriting depending on destination?

I am pretty sure exim can do this. Chapter 24 in the manual describes
headers_rewrite which is a generic option for transports, ie it will
work for all transports including the smtp transport that is generally
the last one in the config and handles all non-local email (ie those
leaving the lan).


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: [SOLVED] MTA experts: address rewriting depending on next hop

2009-07-22 Thread Izak Burger
On Wed, Jul 22, 2009 at 10:20 AM, Siggy Brentrupdeb...@psycho.i21k.de wrote:
 No, exim4 can't do it either, the reason given in
  http://wiki.exim.org/FAQ/Rewriting_addresses/Q0807
 is convincing.

Ok, your question wasn't too clear on that. I didn't know you needed
to rewrite the envelope sender based on the target domain, and quite
correctly, exim cannot do that.

I do recall doing something pretty similar at a previous employer, in
a slightly different manner. I will try and explain the setup, maybe
this can serve as inspiration.

We had three machines participating in a sort of mail network. One
machine was in a data center, receiving mail from the big bad world.
The other two lived in the offices, one in Johannesburg and one in
Cape Town, connected to the external mail server by VPN.

We also had an LDAP directory that was replicated over all three
machines, indicating what employee was in what office. We had an email
address mapping in LDAP for each employee that would map
emplo...@company.co.za to either emplo...@jhb.company.co.za or
emplo...@cpt.company.co.za, with a rewrite rule configured in exim to
do the rewrite on the recipient. This only affected the envelope.

Finally each machine had appropriate routers so that the relevant
domain was delivered locally, the other one was sent to the other
office over the vpn, and anything outside company.co.za was sent to a
smart host.

This way, people didn't have to know about their internal email
address. They simply sent email using their official external
address as the sender, using the other person's external address as
the recipient. If the recipient happened to be in the same office as
the sender, exim would rewrite the recipient to an internal address
and it would get delivered locally. Since the headers were never
touched, nobody was the wiser about all the trickery going on in the
background.

Unfortunately I didn't keep a copy of the configuration files, and
I've left that employer some five years ago, so an explanation is the
best I can do here.

regards,
Izak


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Accepted python-webunit 1.3.8-1 (source all)

2008-04-22 Thread Izak Burger
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Fri,  7 Mar 2008 11:57:13 +0200
Source: python-webunit
Binary: python-webunit
Architecture: source all
Version: 1.3.8-1
Distribution: unstable
Urgency: medium
Maintainer: Izak Burger [EMAIL PROTECTED]
Changed-By: Izak Burger [EMAIL PROTECTED]
Description: 
 python-webunit - Unit test your websites with code that acts like a web 
browser.
Closes: 475517
Changes: 
 python-webunit (1.3.8-1) unstable; urgency=medium
 .
   * Initial Release (closes: #475517)
Files: 
 9852d470372874e3c0ac3c2199697034 661 python optional python-webunit_1.3.8-1.dsc
 97b9e6b5149dadce48b86adbf2db3b0a 22950 python optional 
python-webunit_1.3.8.orig.tar.gz
 cf4cca0580cc9d2c8d02934670957368 2172 python optional 
python-webunit_1.3.8-1.diff.gz
 ddda9da8056771bff6a7843c89274e3d 21022 python optional 
python-webunit_1.3.8-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIBbE9foEUoHXLGtIRAtD+AJwP0JIc1zz9NUhKRAc3JuG+U8HSrACeOHXE
3ze2XO/TMZ3ACuFbY21W60Y=
=wkEF
-END PGP SIGNATURE-


Accepted:
python-webunit_1.3.8-1.diff.gz
  to pool/main/p/python-webunit/python-webunit_1.3.8-1.diff.gz
python-webunit_1.3.8-1.dsc
  to pool/main/p/python-webunit/python-webunit_1.3.8-1.dsc
python-webunit_1.3.8-1_all.deb
  to pool/main/p/python-webunit/python-webunit_1.3.8-1_all.deb
python-webunit_1.3.8.orig.tar.gz
  to pool/main/p/python-webunit/python-webunit_1.3.8.orig.tar.gz


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Bug#427297: ITP: sturmbahnfahrer -- simulated obstacle course for automobiles

2007-06-04 Thread Izak Burger

On 6/4/07, Adrian von Bidder [EMAIL PROTECTED] wrote:

Just some trivia since we're speaking about .ch ... it's Kampfbahn here.
Never heard the combination with Fahrer, though. (I'm doing military
service, but not on troops where the Kampfbahn is our business)


In Afrikaans (descendant of Dutch) it is hindernisbaan, which is
actually very similar to the german hindernisbahn.  Hindernis ==
obstacle.

If there is one thing this longish thread did is to make me feel
better about my poor german, considering some of the english produced
by the germans.  Eg: non-constitunional (should be unconstitutional).
But no-one said english was logic :-)  What with unkempt (no such word
as kempt though) and disheveled (no such word as sheveled) :-)

Groete,
Izak


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Bug#427297: ITP: sturmbahnfahrer -- simulated obstacle course for automobiles

2007-06-04 Thread Izak Burger

On 6/4/07, Darren Salt [EMAIL PROTECTED] wrote:

You mean dishevelled, unless you're using American English.


I have the wrong dictionary installed in my mail client... we South
Africans actually use british english rather than American english.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Allowing @ in user names?

2006-10-07 Thread Izak Burger

On 10/7/06, Marc Haber [EMAIL PROTECTED] wrote:

Is there any potential breakage to allow adduser --force-badname to
create accounts with @ in user names?


The only thing that immediately comes to mind is that of a MTA that
has to deliver mail for this user.   For example, when cron runs a job
and needs to send the output to the owner of the cronjob, there will
be some ambiguity as to whether the part after the @ is part of the
username or in fact a domain name.  This is especially true when
setting MAILTO in a crontab.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: new mplayer

2006-10-07 Thread Izak Burger

On 10/6/06, Anthony DeRobertis [EMAIL PROTECTED] wrote:

Not true. Mplayer is the only one with proper support for ASS subtitles.


It is also the only one that plays dvd's without halting halfway (and
in the case of xine, telling me there is a codec problem).  Luckily
Ubuntu has had  player in universe for ages, so on the one box where I
actually watch dvd's it is not a problem :-)


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: xv and xorg

2006-10-05 Thread Izak Burger

On 10/5/06, Adam D. Barratt [EMAIL PROTECTED] wrote:

xv was removed from Debian over five years ago due to licensing issues, so
I'm afraid you're likely to have to rebuild it yourself against xorg in
order to make it work.


Oh yes, I remember it now.  It is an image viewer/manipulator isn't
it?  I don't think I've used it since the 90's.  There are so many
other image viewers out there that should do the job just fine.
Personally I like gqview most (for simple viewing).

Look at this article: http://lwn.net/Articles/76391/

Depending on what you use xv for, you might be able to get away with a
combination of imagemagick and/or some other image viewer.  A quick
google however finds this:

http://bok.fas.harvard.edu/debian/xv/index.html

Enjoy.

Cheers,
Izak


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: how to deal with packages depending on mysql-server

2006-07-25 Thread Izak Burger

On 7/25/06, Frank Küster [EMAIL PROTECTED] wrote:

An alternative would be to have a pseudo-package (or however we name it)
mysql-server-remote that a local admin installs to tell dpkg that it
should never install a local server.  I'm not sure this is a typical use
case, but the principle might be worth considering for more general use.


It is possible that you might want a local installation of mysql for
whatever reason (or any other database for that matter), yet still
want to use a remote installation for one or more packages on the
system.  The same argument can be made for postgresql and openldap as
well.

Personally I feel Suggests is fine.  At most such a package might
need to additionally and specifically state this requirement in
README.Debian.

The only other solution I can think of is a pseudo package that
depends on both mysql-server and wordpress, but I'm sure that approach
has problems of it's own.

regards,
Izak



Re: Jubiläum Angebot.

2006-07-20 Thread Izak Burger

On 7/20/06, Barbara Bloch [EMAIL PROTECTED] wrote:

Streichen Sie mich unverzüglich aus Ihrer Liste!


You can unsubscribe here:

http://lists.debian.org/debian-devel/



Which kernels are vulnerable?

2006-07-17 Thread Izak Burger

Hi all,

Had an argument over the weekend about which kernels are vulnerable to
the exploit that was used to take gluck down.  I maintained that only
kernels = 2.6.13 and = 2.6.17.4 are vulnerable, but in the end I
proved myself wrong when I took the exploit code, changed the line
that says:

   prctl(PR_SET_DUMPABLE, 2)

to

   prctl(PR_SET_DUMPABLE, 1)

and ran it on a sarge box running 2.6.8 (not sure exactly which
version), and STILL got a root prompt back.  This sarge machine runs
the kernel it was installed with, that is the one on the 3.1r0a cd
image (I need to upgrade it obviously).

I then tried the same modified exploit on a vulnerable 2.6.15, and it
failed (ie, on 2.6.15 it only succeeds if you call it with
PR_SET_DUMPABLE argument = 2).

My questions: is this a different bug?  When was it fixed and what are
the relevant advisory numbers?

regards,
Izak


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Broken applications: Could we be honest?

2006-07-13 Thread Izak Burger

On 7/12/06, Thierry Chatelet [EMAIL PROTECTED] wrote:

Please answer only to the list the mail is originating.


Agreed.  Cross posting is bad form.


On top, I am
wondering why we have so many ' tell the truth mail lately.


Dan Brown started it!


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]