Re: OT Spamming question

2002-05-03 Thread Roger Oberholtzer

What amazes me is that, even though I see some attemps at relaying on my
server, all of them are failing (I am pretty sure - I only see the transmit
denials and no successes in the transfer logs). Still, some of the same
sources keep trying over and over. Don't they detect when it has not worked?
I need a policy for complaining to their ISPs. To date we have just
ignored them.

BTW, exim is pretty good at dealing with the relay problem. I prefer it as
it is easier to configure than sendmail, yet it recognizes the same command
line options. It can be a drop-in replacement for sendmail. Just a happy
user here.

On Fri, 3 May 2002 05:50:24 -0500
David A. Bandel [EMAIL PROTECTED] wrote:

 On Fri, 3 May 2002 01:00:38 -0400
 begin  Joel Hammer [EMAIL PROTECTED] spewed forth:
 
  There was an article in the Wall Street Journal today about the problems
  posed to small businesses by spammers. Basically, the spammer hijacks
  the mail server or just sends large amount of mail to the business
  everyday.
  
  Is this a special problem just for silly  people? I have a mail server
  going and, except for my early days on linux, have never been exploited
  in this way, even thought I am on line 24/7. So, is this just a problem
  of people who don't know what they are doing?
 
 The most popular mail transport agent (MTA, also known as a mail server),
 is sendmail.  Until sendmail version 8.9.x, the default configuration was
 to relay mail, no questions asked.  While today we are at sendmail 8.12.3
 (sendmail 8.9.x was released years ago), many old installations have never
 been upgraded and still have this problem (among others, like security
 holes big enough to fly 747's through, but that's another story).
 
 Many other MTAs suffered the same problems.  Most have been patched.  But
 all can be easily reconfigured to relay mail from anyone who cares to use
 it, with no brakes on the system (max # of recipients, max # of messages
 you can send at one time, etc.).  Combine the above with know exploders
 (a mail address that is nothing more than an alias for thousands of other
 mail addresses), and the problem is tremendous.
 
 Current estimates place the # of spam messages on the Internet at any
 given time at 20% of the e-mail messages on the Internet.  SPAM has been
 known to bring even BIG mail servers down.
 
 That answer the question?
 
 David A. Bandel
 -- 
 Focus on the dream, not the competition.
   -- Nemesis Racing Team motto
 ___
 Linux-users mailing list -
 http://linux-sxs.org/mailman/listinfo/linux-users
 Subscribe/Unsubscribe info, Archives,and Digests are located at the above
 URL.


-- 
++===+
| Roger Oberholtzer  |   E-mail:[EMAIL PROTECTED] |
| OPQ Systems AB |  WWW:  http://www.opq.se/ |
| Erik Dahlbergsgatan 41-43  |Phone: Int + 46 8   314223 |
| 115 32 Stockholm   |   Mobile: Int + 46 733 621657 |
| Sweden |  Fax: Int + 46 8   302602 |
++===+

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: OT free mags

2002-05-03 Thread M.W.Chang

 agree, it will help driving up the sales volumns as well as generating
wasted trees, postmen's OT hours and gasoline, not to mention additional
CO2 in the atmospher in the end. If it's paperless, then it would wasted
bandwith like spamming. :)

Anyway. There are always people who are TRUELY qualified. I will wait
for that day... thanks. 

 all, don't you help people, answer their questions, make recomendations?
 Aren't those people expecting the very best answer possible from you?
 You owe it to those who you consult for to give them the best 
 possible solution to their problem. The advertiser/vendor wants 
 it to be their product/service. It is a sybiotic relationship. 
 Do not be afraid to abuse it,  that is how it thrives.
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: OT Spamming question

2002-05-03 Thread David A. Bandel

On Fri, 3 May 2002 13:18:56 +0200
begin  Roger Oberholtzer [EMAIL PROTECTED] spewed forth:

 What amazes me is that, even though I see some attemps at relaying on my
 server, all of them are failing (I am pretty sure - I only see the
 transmit denials and no successes in the transfer logs). Still, some of
 the same sources keep trying over and over. Don't they detect when it
 has not worked? I need a policy for complaining to their ISPs. To date
 we have just ignored them.

You should see my logs.  Lots of luck with the ISPs.  Most won't even
respond, much less do anything.

 
 BTW, exim is pretty good at dealing with the relay problem. I prefer it
 as it is easier to configure than sendmail, yet it recognizes the same
 command line options. It can be a drop-in replacement for sendmail. Just
 a happy user here.

Different strokes.  If it fills your requirements ...

[snip]

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
-- Nemesis Racing Team motto
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: RH7.2 CD-Roms Enable scsi emulation.

2002-05-03 Thread James McDonald

Umm I don't know if this will help but I pass a kernel parameter when I boot 
for my CDRW/DVD A Ricoh 9200A...

so in grub I put hdX=ide-scsi where X is the letter of your CD/CDRW 
To tell the kernel to treat it like a scsi device I think it's called 
scsi emulation.

Here is a sample from my /etc/grub.conf
title Red Hat Linux (PreEmpt)
root (hd0,2)
kernel /boot/vmlinuz-2.4.18-2002-04-25preempt ro root=/dev/hda3  
hdc=ide-scsi 
initrd /boot/initrd-2.4.18-2002-04-25.img
# the above lines from kernel to ide-scsi is on one line
if you have another cdrom / cdrw put hdc=ide-scsi hdd=ide-scsi change the 
lettering to suit your install.

if you have to do this in lilo 
put an append=hdc=ide-scsi hdd=ide-scsi in the global configuration area 
(i.e. up the top of the file not in the seperate image sections)

I did the following command as root.

ln -sf /dev/scd0 /dev/cdrom

If you have a cdrom and a cdrw  then do both these...
ln -sf /dev/scd0 /dev/cdrom
ln -sf /dev/scd1 /dev/cdrw

and your fstab should have these entries so you can mount both as CD's
/dev/cdrom /mnt/cdrom iso9660 noauto,owner,kudzu,ro 0 0
/dev/cdrw /mnt/cdrw iso9660 noauto,owner,kudzu,ro 0 0

any of your burning sotware should refer to the
/dev/scd1 device or whatever your cdrw is... number it is

if you do it correctly you will get the following when you do a dmesg | grep 
hd.
Kernel command line: ro root=/dev/hda3 hdc=ide-scsi
ide_setup: hdc=ide-scsi
telling you the kernel has read the parameter and understands that you want 
to treat your IDE CD's like scsi...

On Fri, 3 May 2002 05:30, you wrote:
 On Thu, 2 May 2002, Lee wrote:
  Have same problem as Sebastian. Installed RH7.2 sucessfully. Two CD-ROMs
  icons present on the desktop, but won't mount. Tried dmesg. Found CD-ROM
  and CDRW by manufacture type, but nothing else; except for entry: hdb
  driver not present (1st CD-ROM, primary slave) hdd driver not present
  (Iomega CDRW, secondary slave.) Where do I find the drivers for these?

 what's a hdb and an hdd driver??  IDE supported is traditionally compiled
 into the kernel.  I've never had any of these problems on the box where i
 have RH-7.2 installed.  Then again, when i want to mount a device, i do it
 from the command line as god intended.
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: RH7.2 CD-Roms Enable scsi emulation.

2002-05-03 Thread James McDonald

Ohh there is a SxS already...
http://linux-sxs.org/ide.html
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: OT Spamming question

2002-05-03 Thread Andrew Mathews

Roger Oberholtzer wrote:
 
 What amazes me is that, even though I see some attemps at relaying on my
 server, all of them are failing (I am pretty sure - I only see the transmit
 denials and no successes in the transfer logs). Still, some of the same
 sources keep trying over and over. Don't they detect when it has not worked?
 I need a policy for complaining to their ISPs. To date we have just
 ignored them.
snip

Or you can simply blackhole the bastards like I do. I set
/etc/syslog.conf to log to /var/log/messages then use the following
script to block them after they attempt to relay off of my servers.

--cut here
#!/bin/sh
# Get number of attempts for relaying
cat /var/log/messages | sort | uniq -u | grep Denying \
| cut -f1  /var/log/messages | \
grep 'Relaying denied' /var/log/messages | \
sed -e 's/^.*\[//' -e 's/\].*//' | \
sort -u | \
while read address; do
  # clobber access for this address
  if ! grep $address /etc/hosts.deny  /dev/null ; then
 /sbin/route add -host $address reject 2 /dev/null \
 /usr/bin/logger -p notice Denying $address for relay attempts
  fi
done
cut here-

-- 
Andrew Mathews
-
  9:02am  up 2 days, 19:35,  4 users,  load average: 1.05, 1.15, 1.15
-
Change your thoughts and you change your world.
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Linux StepByStep summary for April

2002-05-03 Thread Douglas J Hunley

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Some interesting items over at the Linux StepByStep this past month. The most 
notable of these probably being the addition of an RSS/RDF feed. You can now 
load our latest additions/updates into your favorite news ticker program. The 
feed can be found at http://www.linux-sxs.org/sxs.rss and is updated every 4 
hours.
April also say the introduction of a new format for our finger results (finger 
[EMAIL PROTECTED]). The finger now returns the 10 latest additions/updates 
to the site. The new format matches our 'What's New' page as well.

During April the following material was added to the site:
setting up Philips USB webcams - New
programming Palm pilots under Linux - updates
installing XFS - updated for latest release
printing under Linux - updates
installing KDE on SuSE (source and RPM) - new
installing Mozilla (source and binary) - new
ALSA on 2.5.x kernels - new
display :0.0 problems on Caldera - updated
iptables HOWTO - new
gentoo distro review - new
compile-time fix for Java bug in KDE3's kdebindings - new
installing ProFTPd from source - updates
configuring AirConnect Wireless Access Point in Linux - new
turning off kernel boot messages - new

We saw a marked increase in site traffic this past month.
We now have over 300 people on our various mail lists and they generated over 
1340 messages on the main list. We had 1.41Gb of web traffic pass through our 
link in the month of April with an average of 4482 hits per day.

Our top 5 referring sites were:
Linmodems.org
Google.com
RedHat.com
www.madchat.org
LinuxandMain.com

Our jobs board (http://jobs.linux-sxs.org) was also busy this past month. We 
had ~225 jobs listings added during the month, 4 new employers, and 25 new 
job seekers register. The site saw 78 hits per day (avg).


- --
Douglas J Hunley (doug at hunley.homeip.net) - Linux User #174778
Admin: Linux StepByStep - http://www.linux-sxs.org
and http://jobs.linux-sxs.org
Wishlist: http://www.amazon.com/o/registry/48D11KZ4BPBQ

Why do programmers get Halloween and Christmas mixed up?
Because OCT(31) == DEC(25)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE80q4tSrrWWknCnMIRAkaIAKC6fbNh6IPzgNFnKYkAxbowG45HugCfTa+f
w8OrnDEfxe0UGVGnX/HOFcg=
=MrbF
-END PGP SIGNATURE-


___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: Klez at it again

2002-05-03 Thread Philip J. Koenig

On 2 May 2002, at 18:24, David A. Bandel boldly uttered: 
 
 NOTE:  Klez, when run, first disables antivirus software, deletes
 signature files from common AV programs, then installs itself as a
 service.  You can't run, you can't hide, all you can do is reformat.


Actually most major A/V vendors have written tools to remove the 
worm.  Here are 2 examples, the first one also includes manual 
removal instructions:

http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_KLEZ.H (overview)
http://www.antivirus.com/vinfo/security/fix_worm_klez_3.11.zip (fix)
http://www.antivirus.com/vinfo/security/readme_worm_klez_3.11.txt (readme)


http:[EMAIL PROTECTED] (overview)
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html




--
Philip J. Koenig   [EMAIL PROTECTED]
Electric Kahuna Systems -- Computers  Communications for the New Millenium

___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: Klez at it again

2002-05-03 Thread David A. Bandel

On Fri, 3 May 2002 14:25:11 -0700
begin  Philip J. Koenig [EMAIL PROTECTED] spewed forth:

 On 2 May 2002, at 18:24, David A. Bandel boldly uttered: 
  
  NOTE:  Klez, when run, first disables antivirus software, deletes
  signature files from common AV programs, then installs itself as a
  service.  You can't run, you can't hide, all you can do is reformat.
 
 
 Actually most major A/V vendors have written tools to remove the 
 worm.  Here are 2 examples, the first one also includes manual 
 removal instructions:
 
 http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_KLEZ.H
 (overview)
 http://www.antivirus.com/vinfo/security/fix_worm_klez_3.11.zip (fix)
 http://www.antivirus.com/vinfo/security/readme_worm_klez_3.11.txt
 (readme)
 
 
 http:[EMAIL PROTECTED]
 (overview)
 http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html
 

Great, but now I'm only getting trickles.  When the faucet was first
turned on, there were no programs to clean infected machines.  Did you
expect folks (business users) to turn their systems off for two weeks
while the AV folks worked out a fix?  Easier and quicker (and frankly
safer) to just reformat.  It is Windoze after all, and needs to be
reinstalled regularly.

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
-- Nemesis Racing Team motto
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



KDE3 compile partial failure

2002-05-03 Thread edj


I tried installing KDE3 from source using checkinstall.  After much ado 
with libraries missing or outdated, much fussing with qt3 and a lot of 
trial and error, things seemed to be going smoothly, until . . . 

kdebase crapped out with:
FontEngine.cpp:55: freetype/ftsnames.h: no such file or directory.

ftsnames.h is in /usr/X11R6/include/freetype2/freetype/ftsnames.h .  I 
added that to PATH and tried again, but no go.  When qt3 compile stopped 
by not finding qname, I added its location to PATH, and qt3 went smoothly. 
 But here, nothing.

kdeartwork failed with:
make [3]: ***No rule to make target `/opt/kde3/lib/kwinla'  needed by 
`kwin-openlook.la.closure' Stop.

kdeaddons failed with missing files, all kate/ :
plugin.h, application.h, docmanager.h,mainwindow.h and viewmanager.h

On WS 3.1.  Any advice appreciated.  Thanks.

-- 
Everywhere I go I'm asked if I think the universities stifle writers. My 
opinion is that they don't stifle enough of them.
--Flannery O'Connor 
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: KDE3 compile partial failure

2002-05-03 Thread Douglas J Hunley

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

edj spewed electrons into the ether that resembled:
 ftsnames.h is in /usr/X11R6/include/freetype2/freetype/ftsnames.h .  I
 added that to PATH and tried again, but no go.  When qt3 compile stopped
 by not finding qname, I added its location to PATH, and qt3 went smoothly.
  But here, nothing.

that's cause qname is an executable, so putting it in the path makes a 
difference. now you're looking for header files. they have nothing to do with 
$PATH. You need to mess w/ --extra-include-dir (or something similar) with 
the ./configure command
- -- 
Douglas J Hunley (doug at hunley.homeip.net) - Linux User #174778
Admin: Linux StepByStep - http://www.linux-sxs.org
and http://jobs.linux-sxs.org
Wishlist: http://www.amazon.com/o/registry/48D11KZ4BPBQ

Why do programmers get Halloween and Christmas mixed up?
Because OCT(31) == DEC(25)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE8008GSrrWWknCnMIRAm/EAJ4zZXOOxysbz/kJWvCN4FdxIaRg5gCgmszl
gKnhP5dL7vkAM3rFX3B5D4c=
=jkdQ
-END PGP SIGNATURE-


___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: Klez at it again

2002-05-03 Thread Douglas J Hunley

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bill Day spewed electrons into the ether that resembled:
 I am also receiving klez'd emails from major places, i.e. driverguide.com,
 and have yet to receive any more klezd emaisl via linux-sxs.org

Not to be arguin Bill, but you *never* should have gotten any from 
linux-sxs.org

This setup has been turning them away from day one..
- -- 
Douglas J Hunley (doug at hunley.homeip.net) - Linux User #174778
Admin: Linux StepByStep - http://www.linux-sxs.org
and http://jobs.linux-sxs.org
Wishlist: http://www.amazon.com/o/registry/48D11KZ4BPBQ

You realize we're all going to go to college as virgins. They probably have 
special dorms for people like us.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE8009+SrrWWknCnMIRAuLWAJwOGrIU5SdEyyqY3Ath3iFmw1L8twCeMW8x
wLGOgf+Etvh969wfXvAau4s=
=S0ta
-END PGP SIGNATURE-


___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.



Re: Klez at it again

2002-05-03 Thread Ken Moffat

I don't think the 'from' addresses are correct, they are spoofed. The
subjects are made up, and the file attachments are random.
wow.

On Fri, 3 May 2002 23:03:26 -0400
Douglas J Hunley [EMAIL PROTECTED] wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Bill Day spewed electrons into the ether that resembled:
  I am also receiving klez'd emails from major places, i.e.
  driverguide.com, and have yet to receive any more klezd emaisl via
  linux-sxs.org
 
 Not to be arguin Bill, but you *never* should have gotten any from 
 linux-sxs.org
 
 This setup has been turning them away from day one..
 - -- 
 Douglas J Hunley (doug at hunley.homeip.net) - Linux User #174778
 Admin: Linux StepByStep - http://www.linux-sxs.org
   and http://jobs.linux-sxs.org
 Wishlist: http://www.amazon.com/o/registry/48D11KZ4BPBQ
 
 You realize we're all going to go to college as virgins. They
 probably have special dorms for people like us.
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.0.7 (GNU/Linux)
 
 iD8DBQE8009+SrrWWknCnMIRAuLWAJwOGrIU5SdEyyqY3Ath3iFmw1L8twCeMW8x
 wLGOgf+Etvh969wfXvAau4s=
 =S0ta
 -END PGP SIGNATURE-
 
 
 ___
 Linux-users mailing list -
 http://linux-sxs.org/mailman/listinfo/linux-users
 Subscribe/Unsubscribe info, Archives,and Digests are located at the
 above URL.
 


-- 
Ken Moffat
[EMAIL PROTECTED]
___
Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users
Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.