Re: [expert] iptables to block spam

2003-03-04 Thread Scott St. John
At 03:57 PM 3/3/2003 -0800, you wrote: iptables -A INPUT -s xxx.xxx.xxx.xxx -j DROP I logged out and then tried to ssh back in and I was in just fine! Tried to reach the web site and again, no trouble. I then switched to this: Most likely, something before it is allowing it. I suggest that

Re: [expert] Linux Mail Servers for Win clients

2003-03-04 Thread Scott St. John
At 02:32 PM 3/4/2003 +, you wrote: What I am puzzled about is the mail server. I have not used one myself and do not know if any of them, qmail, sendmail etc can talk to outlook or messenger.I have not seen the setup they have so am relying on the guy having given me the correct information

Re: [expert] Linux Mail Servers for Win clients

2003-03-04 Thread Scott St. John
At 02:49 PM 3/4/2003 +, you wrote: http://www.mrw.demon.co.uk has a detailed how-to for installing qmail and qmail-pop3d on mandrake (Vince Danen maintains qmail packages for mandrake) qmail + qmail-pop3d works just fine with windows mail clients. There is also a qmail mandrakesecure mailing

Re: [expert] iptables to block spam

2003-03-03 Thread Scott St. John
At 09:48 PM 3/2/2003 -0500, you wrote: iptables -A INPUT -s 209.8.161.0/24 -j DROP Ok, perhaps I am doing something wrong, I decided to test blocking my home connection to the server just to see if it would work. Doing this: iptables -A INPUT -s xxx.xxx.xxx.xxx -j DROP I logged out and then

Re: [expert] is there a big difference??

2003-03-03 Thread Scott St. John
I would consider waiting for 9.1 before you upgrade the server. I bought the Pro Suite 9.0 edition and based on my experience with it and the experience of others I think I will wait for 9.1 before I upgrade a server. -Scott At 08:20 PM 3/3/2003 +0900, you wrote: Dear experts, my quest is

Re: [expert] iptables to block spam

2003-03-03 Thread Scott St. John
Heh, call me the idiot! It works *WHEN* I stop Bastille :) I am guessing that some rule in Bastille is over riding my iptables commands to allow the traffic! So, now I have to figure out the rules that Bastille is putting in place and write my own iptables script. Thank you to everyone!

Re: [expert] iptables to block spam

2003-03-03 Thread Scott St. John
At 03:57 PM 3/3/2003 -0500, you wrote: If you want to block access to a specific service then just modify the rule to appear this way. Something I forgot to ask is how many nics are you using? you may also have to specify the interface they're coming in on as well. Ex: iptables -A INPUT -p tcp

Re: [expert] iptables to block spam

2003-03-02 Thread Scott St. John
On Sat, 1 Mar 2003, tarvid wrote: I do this at the border gateway for bulk mailers that present a heavy load to my postfix mail server. The owner of the company is against blocking at the router so I am trying to do it on the mail server. I use spamcop and a local RBL to catch some more.

Re: [expert] iptables to block spam

2003-03-02 Thread Scott St. John
On Sat, 1 Mar 2003, Dave Laird wrote: iptables -A INPUT -s 209.82.110.17/16 -j DROP will work to drop *everything* from 209.82.110.x, regardless of the the fourth digits in the network address. Unless I've gotten it backwards again (it's past my bedtime) 24 only drops the 0 of your address,

Re: [expert] iptables to block spam

2003-03-02 Thread Scott St. John
On Sun, 2 Mar 2003, . wrote: 209.8.161.0/24 will get 209.8.161.0 - 209.8.161.255. /16 will get 209.8.0.0 - 209.8.255.255 That is what I put in, yet this spammer still got through to Sendmail. Is iptables running on your firewall, with the mail server behind it, or on your mail server? If

Re: [expert] iptables to block spam

2003-03-02 Thread Scott St. John
Ok, I have a spam place this morning trying multiple servers to get into my mail server: 216.95.201.18, 216.95.201.31, etc. Let's say I want to block him totally at the mail server using iptables before he gets to Sendmail. I would do: iptables -A FORWARD 216.95.201.0/24 -p tcp --dport 25 -j

Re: [expert] wuftpd gone from ML 9? And updating in general....

2002-10-03 Thread Scott St. John
At 10:13 PM 10/2/2002 -0500, you wrote: Seen it...it's quite nice...and the login-from-db is a nice thing...I just don't have enough users to warrant my writing a php frontend for the silly thing, so I stick to proftpd :) Now...if you put the one you are writing under GPL or another

Re: [expert] wuftpd gone from ML 9? And updating in general....

2002-10-02 Thread Scott St. John
On Wed, 02 Oct 2002 18:09:23 -0500, Vox wrote wu-ftpd has a looong history of bad security, so the mdk people has (wisely, IMNSHO) chosen to use proftpd. But wu-ftpd does seem to be in cooker, so...they may just have gotten rid of it on the release ISOs. I am glad they left it out,

[expert] Radius

2002-10-01 Thread Scott St. John
I am about to install Radius for our modem racks and was curious if anyone on the list is using Radius under Mandrake and if you are, which one? I am looking at IC Radius, but I see there is also Free Radius. Let me know your experiences, thanks! -Scott -- Scottah.com Web Mail Center

Re: [expert] Radius

2002-10-01 Thread Scott St. John
At 09:54 AM 10/1/2002 -0400, you wrote: We've been using IC RADIUS (Cistron before) for a couple of years. What kind of modem racks are you running? Curiously it is on the last RedHat server in the house. I don't think there are any issues which would come up with Mandrake. There are rpm's for

Re: [expert] ISP specific list

2002-09-26 Thread Scott St. John
At 07:31 AM 9/26/2002 -0700, you wrote: I think this is the correct forum for your questions. A lot of people here (including myself) are running their own web / email / etc... servers at home off of either dsl or cable internet. Not quite the scale of an ISP, but the approach should be

Re: [expert] Virtual Hosting Question

2002-09-26 Thread Scott St. John
At 05:08 PM 9/23/2002 -0700, you wrote: ls -R | grep :$ | sed 's#:$##' | awk '{print \$0\}' | xargs chmod g+s Could I use something like this to set the proper ownership of a directory as well? I have copied all the user accounts from the BSDI machine to the Mandrake box, then I used a

[expert] file block size

2001-08-22 Thread Scott St. John
Hi everyone- We are considering finally putting Mandrake in production to replace some outdated FreeBSD servers. We have 70gig raid controlled servers, but seem to have some trouble with changing the default file block size. This box will serve as a web server and we want to drop the file

Re: [expert] file block size

2001-08-22 Thread Scott St. John
At 01:03 PM 8/22/2001 -0500, you wrote: Any advice on where to start? ReiserFS is perfect for the system having lots of small files. Can you change the default file block size? Want to buy your Pack or Services from MandrakeSoft? Go to http://.mandrakestore.com