Re: OT Spamming question
What amazes me is that, even though I see some attemps at relaying on my server, all of them are failing (I am pretty sure - I only see the transmit denials and no successes in the transfer logs). Still, some of the same sources keep trying over and over. Don't they detect when it has not worked? I need a policy for complaining to their ISPs. To date we have just ignored them. BTW, exim is pretty good at dealing with the relay problem. I prefer it as it is easier to configure than sendmail, yet it recognizes the same command line options. It can be a drop-in replacement for sendmail. Just a happy user here. On Fri, 3 May 2002 05:50:24 -0500 David A. Bandel [EMAIL PROTECTED] wrote: On Fri, 3 May 2002 01:00:38 -0400 begin Joel Hammer [EMAIL PROTECTED] spewed forth: There was an article in the Wall Street Journal today about the problems posed to small businesses by spammers. Basically, the spammer hijacks the mail server or just sends large amount of mail to the business everyday. Is this a special problem just for silly people? I have a mail server going and, except for my early days on linux, have never been exploited in this way, even thought I am on line 24/7. So, is this just a problem of people who don't know what they are doing? The most popular mail transport agent (MTA, also known as a mail server), is sendmail. Until sendmail version 8.9.x, the default configuration was to relay mail, no questions asked. While today we are at sendmail 8.12.3 (sendmail 8.9.x was released years ago), many old installations have never been upgraded and still have this problem (among others, like security holes big enough to fly 747's through, but that's another story). Many other MTAs suffered the same problems. Most have been patched. But all can be easily reconfigured to relay mail from anyone who cares to use it, with no brakes on the system (max # of recipients, max # of messages you can send at one time, etc.). Combine the above with know exploders (a mail address that is nothing more than an alias for thousands of other mail addresses), and the problem is tremendous. Current estimates place the # of spam messages on the Internet at any given time at 20% of the e-mail messages on the Internet. SPAM has been known to bring even BIG mail servers down. That answer the question? David A. Bandel -- Focus on the dream, not the competition. -- Nemesis Racing Team motto ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL. -- ++===+ | Roger Oberholtzer | E-mail:[EMAIL PROTECTED] | | OPQ Systems AB | WWW: http://www.opq.se/ | | Erik Dahlbergsgatan 41-43 |Phone: Int + 46 8 314223 | | 115 32 Stockholm | Mobile: Int + 46 733 621657 | | Sweden | Fax: Int + 46 8 302602 | ++===+ ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Re: OT free mags
agree, it will help driving up the sales volumns as well as generating wasted trees, postmen's OT hours and gasoline, not to mention additional CO2 in the atmospher in the end. If it's paperless, then it would wasted bandwith like spamming. :) Anyway. There are always people who are TRUELY qualified. I will wait for that day... thanks. all, don't you help people, answer their questions, make recomendations? Aren't those people expecting the very best answer possible from you? You owe it to those who you consult for to give them the best possible solution to their problem. The advertiser/vendor wants it to be their product/service. It is a sybiotic relationship. Do not be afraid to abuse it, that is how it thrives. ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Re: OT Spamming question
On Fri, 3 May 2002 13:18:56 +0200 begin Roger Oberholtzer [EMAIL PROTECTED] spewed forth: What amazes me is that, even though I see some attemps at relaying on my server, all of them are failing (I am pretty sure - I only see the transmit denials and no successes in the transfer logs). Still, some of the same sources keep trying over and over. Don't they detect when it has not worked? I need a policy for complaining to their ISPs. To date we have just ignored them. You should see my logs. Lots of luck with the ISPs. Most won't even respond, much less do anything. BTW, exim is pretty good at dealing with the relay problem. I prefer it as it is easier to configure than sendmail, yet it recognizes the same command line options. It can be a drop-in replacement for sendmail. Just a happy user here. Different strokes. If it fills your requirements ... [snip] Ciao, David A. Bandel -- Focus on the dream, not the competition. -- Nemesis Racing Team motto ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Re: RH7.2 CD-Roms Enable scsi emulation.
Umm I don't know if this will help but I pass a kernel parameter when I boot for my CDRW/DVD A Ricoh 9200A... so in grub I put hdX=ide-scsi where X is the letter of your CD/CDRW To tell the kernel to treat it like a scsi device I think it's called scsi emulation. Here is a sample from my /etc/grub.conf title Red Hat Linux (PreEmpt) root (hd0,2) kernel /boot/vmlinuz-2.4.18-2002-04-25preempt ro root=/dev/hda3 hdc=ide-scsi initrd /boot/initrd-2.4.18-2002-04-25.img # the above lines from kernel to ide-scsi is on one line if you have another cdrom / cdrw put hdc=ide-scsi hdd=ide-scsi change the lettering to suit your install. if you have to do this in lilo put an append=hdc=ide-scsi hdd=ide-scsi in the global configuration area (i.e. up the top of the file not in the seperate image sections) I did the following command as root. ln -sf /dev/scd0 /dev/cdrom If you have a cdrom and a cdrw then do both these... ln -sf /dev/scd0 /dev/cdrom ln -sf /dev/scd1 /dev/cdrw and your fstab should have these entries so you can mount both as CD's /dev/cdrom /mnt/cdrom iso9660 noauto,owner,kudzu,ro 0 0 /dev/cdrw /mnt/cdrw iso9660 noauto,owner,kudzu,ro 0 0 any of your burning sotware should refer to the /dev/scd1 device or whatever your cdrw is... number it is if you do it correctly you will get the following when you do a dmesg | grep hd. Kernel command line: ro root=/dev/hda3 hdc=ide-scsi ide_setup: hdc=ide-scsi telling you the kernel has read the parameter and understands that you want to treat your IDE CD's like scsi... On Fri, 3 May 2002 05:30, you wrote: On Thu, 2 May 2002, Lee wrote: Have same problem as Sebastian. Installed RH7.2 sucessfully. Two CD-ROMs icons present on the desktop, but won't mount. Tried dmesg. Found CD-ROM and CDRW by manufacture type, but nothing else; except for entry: hdb driver not present (1st CD-ROM, primary slave) hdd driver not present (Iomega CDRW, secondary slave.) Where do I find the drivers for these? what's a hdb and an hdd driver?? IDE supported is traditionally compiled into the kernel. I've never had any of these problems on the box where i have RH-7.2 installed. Then again, when i want to mount a device, i do it from the command line as god intended. ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Re: RH7.2 CD-Roms Enable scsi emulation.
Ohh there is a SxS already... http://linux-sxs.org/ide.html ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Re: OT Spamming question
Roger Oberholtzer wrote: What amazes me is that, even though I see some attemps at relaying on my server, all of them are failing (I am pretty sure - I only see the transmit denials and no successes in the transfer logs). Still, some of the same sources keep trying over and over. Don't they detect when it has not worked? I need a policy for complaining to their ISPs. To date we have just ignored them. snip Or you can simply blackhole the bastards like I do. I set /etc/syslog.conf to log to /var/log/messages then use the following script to block them after they attempt to relay off of my servers. --cut here #!/bin/sh # Get number of attempts for relaying cat /var/log/messages | sort | uniq -u | grep Denying \ | cut -f1 /var/log/messages | \ grep 'Relaying denied' /var/log/messages | \ sed -e 's/^.*\[//' -e 's/\].*//' | \ sort -u | \ while read address; do # clobber access for this address if ! grep $address /etc/hosts.deny /dev/null ; then /sbin/route add -host $address reject 2 /dev/null \ /usr/bin/logger -p notice Denying $address for relay attempts fi done cut here- -- Andrew Mathews - 9:02am up 2 days, 19:35, 4 users, load average: 1.05, 1.15, 1.15 - Change your thoughts and you change your world. ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Linux StepByStep summary for April
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Some interesting items over at the Linux StepByStep this past month. The most notable of these probably being the addition of an RSS/RDF feed. You can now load our latest additions/updates into your favorite news ticker program. The feed can be found at http://www.linux-sxs.org/sxs.rss and is updated every 4 hours. April also say the introduction of a new format for our finger results (finger [EMAIL PROTECTED]). The finger now returns the 10 latest additions/updates to the site. The new format matches our 'What's New' page as well. During April the following material was added to the site: setting up Philips USB webcams - New programming Palm pilots under Linux - updates installing XFS - updated for latest release printing under Linux - updates installing KDE on SuSE (source and RPM) - new installing Mozilla (source and binary) - new ALSA on 2.5.x kernels - new display :0.0 problems on Caldera - updated iptables HOWTO - new gentoo distro review - new compile-time fix for Java bug in KDE3's kdebindings - new installing ProFTPd from source - updates configuring AirConnect Wireless Access Point in Linux - new turning off kernel boot messages - new We saw a marked increase in site traffic this past month. We now have over 300 people on our various mail lists and they generated over 1340 messages on the main list. We had 1.41Gb of web traffic pass through our link in the month of April with an average of 4482 hits per day. Our top 5 referring sites were: Linmodems.org Google.com RedHat.com www.madchat.org LinuxandMain.com Our jobs board (http://jobs.linux-sxs.org) was also busy this past month. We had ~225 jobs listings added during the month, 4 new employers, and 25 new job seekers register. The site saw 78 hits per day (avg). - -- Douglas J Hunley (doug at hunley.homeip.net) - Linux User #174778 Admin: Linux StepByStep - http://www.linux-sxs.org and http://jobs.linux-sxs.org Wishlist: http://www.amazon.com/o/registry/48D11KZ4BPBQ Why do programmers get Halloween and Christmas mixed up? Because OCT(31) == DEC(25) -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE80q4tSrrWWknCnMIRAkaIAKC6fbNh6IPzgNFnKYkAxbowG45HugCfTa+f w8OrnDEfxe0UGVGnX/HOFcg= =MrbF -END PGP SIGNATURE- ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Re: Klez at it again
On 2 May 2002, at 18:24, David A. Bandel boldly uttered: NOTE: Klez, when run, first disables antivirus software, deletes signature files from common AV programs, then installs itself as a service. You can't run, you can't hide, all you can do is reformat. Actually most major A/V vendors have written tools to remove the worm. Here are 2 examples, the first one also includes manual removal instructions: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_KLEZ.H (overview) http://www.antivirus.com/vinfo/security/fix_worm_klez_3.11.zip (fix) http://www.antivirus.com/vinfo/security/readme_worm_klez_3.11.txt (readme) http:[EMAIL PROTECTED] (overview) http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html -- Philip J. Koenig [EMAIL PROTECTED] Electric Kahuna Systems -- Computers Communications for the New Millenium ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Re: Klez at it again
On Fri, 3 May 2002 14:25:11 -0700 begin Philip J. Koenig [EMAIL PROTECTED] spewed forth: On 2 May 2002, at 18:24, David A. Bandel boldly uttered: NOTE: Klez, when run, first disables antivirus software, deletes signature files from common AV programs, then installs itself as a service. You can't run, you can't hide, all you can do is reformat. Actually most major A/V vendors have written tools to remove the worm. Here are 2 examples, the first one also includes manual removal instructions: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_KLEZ.H (overview) http://www.antivirus.com/vinfo/security/fix_worm_klez_3.11.zip (fix) http://www.antivirus.com/vinfo/security/readme_worm_klez_3.11.txt (readme) http:[EMAIL PROTECTED] (overview) http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html Great, but now I'm only getting trickles. When the faucet was first turned on, there were no programs to clean infected machines. Did you expect folks (business users) to turn their systems off for two weeks while the AV folks worked out a fix? Easier and quicker (and frankly safer) to just reformat. It is Windoze after all, and needs to be reinstalled regularly. Ciao, David A. Bandel -- Focus on the dream, not the competition. -- Nemesis Racing Team motto ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
KDE3 compile partial failure
I tried installing KDE3 from source using checkinstall. After much ado with libraries missing or outdated, much fussing with qt3 and a lot of trial and error, things seemed to be going smoothly, until . . . kdebase crapped out with: FontEngine.cpp:55: freetype/ftsnames.h: no such file or directory. ftsnames.h is in /usr/X11R6/include/freetype2/freetype/ftsnames.h . I added that to PATH and tried again, but no go. When qt3 compile stopped by not finding qname, I added its location to PATH, and qt3 went smoothly. But here, nothing. kdeartwork failed with: make [3]: ***No rule to make target `/opt/kde3/lib/kwinla' needed by `kwin-openlook.la.closure' Stop. kdeaddons failed with missing files, all kate/ : plugin.h, application.h, docmanager.h,mainwindow.h and viewmanager.h On WS 3.1. Any advice appreciated. Thanks. -- Everywhere I go I'm asked if I think the universities stifle writers. My opinion is that they don't stifle enough of them. --Flannery O'Connor ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Re: KDE3 compile partial failure
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 edj spewed electrons into the ether that resembled: ftsnames.h is in /usr/X11R6/include/freetype2/freetype/ftsnames.h . I added that to PATH and tried again, but no go. When qt3 compile stopped by not finding qname, I added its location to PATH, and qt3 went smoothly. But here, nothing. that's cause qname is an executable, so putting it in the path makes a difference. now you're looking for header files. they have nothing to do with $PATH. You need to mess w/ --extra-include-dir (or something similar) with the ./configure command - -- Douglas J Hunley (doug at hunley.homeip.net) - Linux User #174778 Admin: Linux StepByStep - http://www.linux-sxs.org and http://jobs.linux-sxs.org Wishlist: http://www.amazon.com/o/registry/48D11KZ4BPBQ Why do programmers get Halloween and Christmas mixed up? Because OCT(31) == DEC(25) -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE8008GSrrWWknCnMIRAm/EAJ4zZXOOxysbz/kJWvCN4FdxIaRg5gCgmszl gKnhP5dL7vkAM3rFX3B5D4c= =jkdQ -END PGP SIGNATURE- ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Re: Klez at it again
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bill Day spewed electrons into the ether that resembled: I am also receiving klez'd emails from major places, i.e. driverguide.com, and have yet to receive any more klezd emaisl via linux-sxs.org Not to be arguin Bill, but you *never* should have gotten any from linux-sxs.org This setup has been turning them away from day one.. - -- Douglas J Hunley (doug at hunley.homeip.net) - Linux User #174778 Admin: Linux StepByStep - http://www.linux-sxs.org and http://jobs.linux-sxs.org Wishlist: http://www.amazon.com/o/registry/48D11KZ4BPBQ You realize we're all going to go to college as virgins. They probably have special dorms for people like us. -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE8009+SrrWWknCnMIRAuLWAJwOGrIU5SdEyyqY3Ath3iFmw1L8twCeMW8x wLGOgf+Etvh969wfXvAau4s= =S0ta -END PGP SIGNATURE- ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.
Re: Klez at it again
I don't think the 'from' addresses are correct, they are spoofed. The subjects are made up, and the file attachments are random. wow. On Fri, 3 May 2002 23:03:26 -0400 Douglas J Hunley [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bill Day spewed electrons into the ether that resembled: I am also receiving klez'd emails from major places, i.e. driverguide.com, and have yet to receive any more klezd emaisl via linux-sxs.org Not to be arguin Bill, but you *never* should have gotten any from linux-sxs.org This setup has been turning them away from day one.. - -- Douglas J Hunley (doug at hunley.homeip.net) - Linux User #174778 Admin: Linux StepByStep - http://www.linux-sxs.org and http://jobs.linux-sxs.org Wishlist: http://www.amazon.com/o/registry/48D11KZ4BPBQ You realize we're all going to go to college as virgins. They probably have special dorms for people like us. -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE8009+SrrWWknCnMIRAuLWAJwOGrIU5SdEyyqY3Ath3iFmw1L8twCeMW8x wLGOgf+Etvh969wfXvAau4s= =S0ta -END PGP SIGNATURE- ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL. -- Ken Moffat [EMAIL PROTECTED] ___ Linux-users mailing list - http://linux-sxs.org/mailman/listinfo/linux-users Subscribe/Unsubscribe info, Archives,and Digests are located at the above URL.