DoS

2002-05-06 Thread Oki DZ
Hi, I have the following lines in one of my startup scripts: echo -n Starting $DESC: iptables -t nat -N DROPILOG iptables -t nat -A DROPILOG -j LOG --log-level info iptables -t nat -A DROPILOG -j DROP iptables -t nat -N iflood iptables -t nat -A

RE: html spam

2002-05-06 Thread Thomas Buhk
If you don't want any spam, it's up to *you*. i don't think so. i think spam is a problem *all* have! a first step would be if mailinglist (this include) drop any html mail. next step could be to remove those with 'unsubscibe' in the subject ; I recommend visiting URL:

Re: snort not recognizing dns server correctly

2002-05-06 Thread Jeff
dafr, 2002-May-03 10:52 -0700: Jeff, I had this problem initially as well when I reconfigured snort, until I restarted the service. Quite obvious in retrospect, but when I missed it initially, I could see others doing the same. There is also a section towards the bottom of the snort.conf

Re: Putty 0.45 vs. SSH Login

2002-05-06 Thread Bernhard R. Link
* Tim van Erven [EMAIL PROTECTED] [020505 19:21]: On Sun, May 05, 2002 at 12:15:49PM -0300, Henrique de Moraes Holschuh [EMAIL PROTECTED] wrote: The best bet would have to move the delay out of PAM (always using nodelay in the ssh PAM file) into ssh, I suppose. I don't know much about

named problem

2002-05-06 Thread Jan Räther
Hi there, during the last few days i get a lot of messages like this: May 6 17:09:12 mink named[18150]: Malformed response from [134.100.33.240].53 (out of data in final pass) Is there something to worry about? Jan - Jan Räther Universität Hamburg Zentrum für Molekulare Neurobiologie

Re: named problem

2002-05-06 Thread InfoEmergencias - Luis Gómez
A week ago or so I also got some strange responses in UDP packets. They came from DNS servers to my DNS server. Maybe something's screwed up out there... I dunno, but I think root DNSs will give us a bad surprise soon... El lun, 06-05-2002 a las 16:37, Jan Räther escribió: Hi there, during

sendmail

2002-05-06 Thread Vladimir Velikov
Hi there! In the last weeks I`ve installed twice Debian 3.0 * with sendmail .12.3-5 ). And I get some stupid error every few minutes: May 6 16:40:01 velikov sm-msp-queue[26216]: STARTTLS=client: file /etc/mail/ssl/sendmail-server.crt unsafe: No such file or directory May 6 16:40:01 velikov

Re: Putty 0.45 vs. SSH Login

2002-05-06 Thread Bernhard R. Link
* Tim van Erven [EMAIL PROTECTED] [020506 16:02]: I rather think ssh should check also earlier for root and not even call PAM when root login is not permitted and someone tries to log in as root. This will reveal that root login is never permitted. Probably no big deal, but it would be

CNAME, iptables and qmail

2002-05-06 Thread Gary MacDougall
I'm setting up a Deb (woody) box with qmail and iptables. I've got both installed, both seem be operating fine. Incidently, other than 25, 110 and of course 22 (ssh). The problem I'm running into is iptables is causing e-mail to be allowed through the server and I get this message in the

RE: CNAME, iptables and qmail

2002-05-06 Thread Gary MacDougall
Damn!! I hit send before editing this message. Sorry! Please read this instead of my previous message. ... I'm setting up a Deb (woody) box with qmail and iptables. I've got both installed, both seem be operating fine. Iptables is setup to no allow traffic other than 25, 110 and of course 22

Re: sendmail

2002-05-06 Thread Blars Blarson
In article [EMAIL PROTECTED] [EMAIL PROTECTED] writes: In the last weeks I`ve installed twice Debian 3.0 * with sendmail .12.3-5 ). And I get some stupid error every few minutes: May 6 16:40:01 velikov sm-msp-queue[26216]: STARTTLS=client: file /etc/mail/ssl/sendmail-server.crt unsafe: No

RE: CNAME, iptables and qmail

2002-05-06 Thread Rishi L Khan
You need to open port 53 for tcp and udp. Another way you can look at it is to log all packets you DENY (or REJECT) and see what your DNS is trying to do. -rishi On Mon, 6 May 2002, Gary MacDougall wrote: Damn!! I hit send before editing this message. Sorry! Please read this

Re: CNAME, iptables and qmail

2002-05-06 Thread Michal Melewski
Hello Try to add following lines into your firewall script: iptables -A INPUT -p udp -i $DEV -s 0/0 --sport 53 -j ACCEPT iptables -A INPUT -p udp -i $DEV -s 0/0 -j DROP iptables -A OUTPUT -p udp -i $DEV -d 0/0 --dport 53 -j ACCEPT Works fine with my firewall... -- Michael carstein Melewski

stat=I/O error: Input/output error in Sendmail on Debian

2002-05-06 Thread Informasjon
Hello! Can anyone help me find a solution to this message I get in my logfile in Sendmail. stat=I/O error: Input/output error It happens only when I send to one special host/recipient. Please! Stian Kristoffersen

Re: CNAME, iptables and qmail

2002-05-06 Thread Michal Melewski
On Mon, May 06, 2002 at 01:47:54PM -0700, Vineet Kumar wrote: This setup will work fine most of the time, but mysteriously fail when replies to your DNS queries are long. Your resolver tries to ask udp/53, but will need to connect to tcp/53 if the result is longer than can fit in a single udp

RE APT-GET Problems

2002-05-06 Thread Mike Shepherd
Howdy all, As you all recall I posted a few days ago with the problem that my 486 machine would not do APT-GET INSTALL/UPGRADE/etc. Well, someone had replied with the idea to check how the nfs directoty was exported from the server. It didn't really twig on me until just now that I had

Re: stat=I/O error: Input/output error in Sendmail on Debian

2002-05-06 Thread Emmanuel Valliet
(2002-05-06) Informasjon sed : | Hello! | | | Can anyone help me find a solution to this message I get in my logfile in Sendmail. | | stat=I/O error: Input/output error | | It happens only when I send to one special host/recipient. | | Please! | | Stian Kristoffersen I had this

Novidades

2002-05-06 Thread sem_resposta
HTML head META HTTP-EQUIV=Content-Type CONTENT=text/html;charset=Windows-1252 TITLE/TITLE META HTTP-EQUIV=Content-Type CONTENT=text/html; charset=iso-8859-1 base target=_blank /HEAD !--BACKGROUND PAGE COLOR-- BODY bgcolor=#FF LINK=#689000 vlink=#92BC24 alink=#689000

RE: html spam

2002-05-06 Thread Thomas Buhk
If you don't want any spam, it's up to *you*. i don't think so. i think spam is a problem *all* have! a first step would be if mailinglist (this include) drop any html mail. next step could be to remove those with 'unsubscibe' in the subject ; I recommend visiting URL:

Re: snort not recognizing dns server correctly

2002-05-06 Thread Jeff
dafr, 2002-May-03 10:52 -0700: Jeff, I had this problem initially as well when I reconfigured snort, until I restarted the service. Quite obvious in retrospect, but when I missed it initially, I could see others doing the same. There is also a section towards the bottom of the snort.conf

Re: Putty 0.45 vs. SSH Login

2002-05-06 Thread Bernhard R. Link
* Tim van Erven [EMAIL PROTECTED] [020505 19:21]: On Sun, May 05, 2002 at 12:15:49PM -0300, Henrique de Moraes Holschuh [EMAIL PROTECTED] wrote: The best bet would have to move the delay out of PAM (always using nodelay in the ssh PAM file) into ssh, I suppose. I don't know much about

named problem

2002-05-06 Thread Jan Räther
Hi there, during the last few days i get a lot of messages like this: May 6 17:09:12 mink named[18150]: Malformed response from [134.100.33.240].53 (out of data in final pass) Is there something to worry about? Jan - Jan Räther Universität Hamburg Zentrum für Molekulare Neurobiologie

Re: named problem

2002-05-06 Thread InfoEmergencias - Luis Gómez
A week ago or so I also got some strange responses in UDP packets. They came from DNS servers to my DNS server. Maybe something's screwed up out there... I dunno, but I think root DNSs will give us a bad surprise soon... El lun, 06-05-2002 a las 16:37, Jan Räther escribió: Hi there, during

sendmail

2002-05-06 Thread Vladimir Velikov
Hi there! In the last weeks I`ve installed twice Debian 3.0 * with sendmail .12.3-5 ). And I get some stupid error every few minutes: May 6 16:40:01 velikov sm-msp-queue[26216]: STARTTLS=client: file /etc/mail/ssl/sendmail-server.crt unsafe: No such file or directory May 6 16:40:01 velikov

Re: sendmail

2002-05-06 Thread Wouter van Gils
These errors occure because sendmail cannot find the ssl certificate in the default dir. As off this version sendmails supports relaying on the basis off certificate authentication. It took me a while to get things going. This website was a big help for me:

Re: Putty 0.45 vs. SSH Login

2002-05-06 Thread Bernhard R. Link
* Tim van Erven [EMAIL PROTECTED] [020506 16:02]: I rather think ssh should check also earlier for root and not even call PAM when root login is not permitted and someone tries to log in as root. This will reveal that root login is never permitted. Probably no big deal, but it would be

RE: CNAME, iptables and qmail

2002-05-06 Thread Gary MacDougall
Damn!! I hit send before editing this message. Sorry! Please read this instead of my previous message. ... I'm setting up a Deb (woody) box with qmail and iptables. I've got both installed, both seem be operating fine. Iptables is setup to no allow traffic other than 25, 110 and of course 22

Re: sendmail

2002-05-06 Thread Blars Blarson
In article [EMAIL PROTECTED] [EMAIL PROTECTED] writes: In the last weeks I`ve installed twice Debian 3.0 * with sendmail .12.3-5 ). And I get some stupid error every few minutes: May 6 16:40:01 velikov sm-msp-queue[26216]: STARTTLS=client: file /etc/mail/ssl/sendmail-server.crt unsafe: No such

stat=I/O error: Input/output error in Sendmail on Debian

2002-05-06 Thread Informasjon
Hello! Can anyone help me find a solution to this message I get in my logfile in Sendmail. stat=I/O error: Input/output error It happens only when I send to one special host/recipient. Please! Stian Kristoffersen

Re: CNAME, iptables and qmail

2002-05-06 Thread Michal Melewski
On Mon, May 06, 2002 at 01:47:54PM -0700, Vineet Kumar wrote: This setup will work fine most of the time, but mysteriously fail when replies to your DNS queries are long. Your resolver tries to ask udp/53, but will need to connect to tcp/53 if the result is longer than can fit in a single udp

Re: CNAME, iptables and qmail

2002-05-06 Thread Vineet Kumar
* Michal Melewski ([EMAIL PROTECTED]) [020506 15:02]: On Mon, May 06, 2002 at 01:47:54PM -0700, Vineet Kumar wrote: This setup will work fine most of the time, but mysteriously fail when replies to your DNS queries are long. Your resolver tries to ask udp/53, but will need to connect to

imapD problems

2002-05-06 Thread Mario Zuppini
Hi, For months now my ImapD has been working flawlessly and it has only recently come to my attention of the following error in my log files..Can anyone shed some light on why it is connecting from localhost and how/if can to fix it ?? May 7 10:49:39 sleepy imapd[18831]: connect from 127.0.0.1

imapD problems

2002-05-06 Thread Mario Zuppini
To add more info to the problem, im also getting errors at the same time with my qpopper as below.. May 7 12:29:38 sleepy in.qpopper[8370]: connect from 127.0.0.1 May 7 12:29:38 sleepy in.qpopper[8370]: (null) at sleepy (127.0.0.1): -ERR POP EOF or I/O Error [popper.c:794] May 7 12:29:38