Re: [gentoo-user] OT Good DNS registrar?

2006-11-07 Thread Preston Hagar
Another option is http://freedns.afraid.orgI have used them for several years and had no problems. They are free.PrestonOn 11/6/06, 
James [EMAIL PROTECTED] wrote:
Hello,I'm looking for a good DNS registrar...Any ideas or recommendations?
James


Re: [gentoo-user] Greylisting vs. reject_rbl_client

2006-08-25 Thread Preston Hagar
I think the thing you have to keep in mind is how strict you want to be. I am in control of mail servers for three different organizations, my personal email, my consulting side business, and the real estate company I work full time for. Each one has a varying degree of how acceptable false positives are. For my personal email, I use the following settings:
smtpd_delay_reject = yessmtpd_helo_required = yessmtpd_helo_restrictions = permit_mynetworks, check_helo_access hash:/etc/postfix/helo_access, reject_non_fqdn_hostname,
 reject_invalid_hostname, permitsmtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain, permit
smtpd_recipient_restrictions = reject_unauth_pipelining, reject_non_fqdn_recipient, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination,
 reject_rbl_client relays.ordb.org, reject_rbl_client list.dsbl.org, reject_rbl_client sbl-xbl.spamhaus.org
, reject_rbl_client bl.spamcop.net, reject_rbl_client dnsbl.njabl.org, check_policy_service inet:
127.0.0.1:6 permitThe check_policy_service inet:127.0.0.1:6 is for postgrey, a greylisting service. Personally, I hate spam so much, I would rather block my own mother's emails than get spam. The checks above with postgrey have brought me from about 15-20 spam a day to 0 since I have had them in effect. On the otherhand, for the real estate company I work for, some of these options are not acceptable. Postgrey is not acceptable since many of our users expect email to be instant I know there is no technical guarantee of this, but they get upset no matter what if their emails take too long. Using postgrey on my own personal server, I make it delay for 5 minutes. Most mail servers will keep trying and I will get the message within 10-15 minutes max. I have had a few times, though, that the mail took 4 or 5 hours before it was tried again. A solution I use for this for my consulting business is to whitelist all of my clients domains. With the real estate company, however, there are too many different users working with too many different and new companies to try and whitelist them all. 
I actually do keep the rbls for all installations. I completely understand and agree with the previous posters frustration with rbls. I have had the same trouble myself. I have had our company be on spamhaus and spamcop and different times in the last couple of years. It usually is a headache, but in general, they are more good than harm. At the real estate company, I have about 200 users that I can assure you would let me hear about it very quickly if they were not getting their messages. So far, I have not had any complaints using the rbls above. 
Anyway, as I said before, you just have to find the proper balance for your situation. If you or your company cannot afford to lose even one email, it is probably best to put in very limited checks and use client-side filtering with Junk mailboxes. If speed of delivery is important, greylisting is not a good option. If you just want to stop the spam and it isn't the end of the world if you lose a possibly legitimate mail, then try out my settings above.
Hope this helps,PrestonOn 8/21/06, Grant [EMAIL PROTECTED] wrote:
I've followed the steps outlined here to eliminate spam up to thesection on SPF and greylisting on the second page:http://www.freesoftwaremagazine.com/articles/focus_spam_postfix/
The author is really into greylisting:If you take nothing else from this article, let it be thatgreylisting is a Good Thing and your customers will love you for usingitbut the feedback I got on it from this list was not as positive.Of
the stuff I've implemented, these lines seem to have been the mosteffective:reject_rbl_client relays.ordb.org,reject_rbl_client list.dsbl.org
,reject_rbl_client sbl-xbl.spamhaus.org,with the spamhaus.org line doing most of the work according to the logs.Do you think the reject_rbl_client stuff is safer than greylisting?
- Grant--gentoo-user@gentoo.org mailing list


Re: [gentoo-user] Greylisting vs. reject_rbl_client

2006-08-25 Thread Preston Hagar
On 8/25/06, kashani [EMAIL PROTECTED] wrote:
Preston Hagar wrote: Using postgrey on my own personal server, I make it delay for 5 minutes.Most mail servers will keep trying and I will get the message within 10-15 minutes max.I have had a few times, though, that the mail took 4 or 5 hours
 before it was tried again.hotmail will retry every minute for 3 minutes. If you make the delay 30secs you will see mail come in much quicker from a number of placeswithout accepting more spam. It's been my experience that mail is either
retried or it is not and the actual time of the delay doesn't matter.Also setting the whitelist time to 63 days will keep infrequent emailersfrom getting greylisted as often.You might also checkout sqlgrey which has some nice twists like
whitelisting a domain after x successful deliveries in y time. Theebuild is in bugzilla.http://bugs.gentoo.org/show_bug.cgi?id=71535kashani
--gentoo-user@gentoo.org mailing listpostgrey does the whitelist a domain after so many sucessful tries. I do use that as well. Don't get me wrong, most of my mail is delivered right after the 5 minute limit. I just wanted to warn the OP that on a few occasions, mail can take longer. According to RFC specs, it can take up to 4 hours. With the real estate company I work for, even one message taking 4 hours is unacceptable. 
Thanks for your input. I will check out sqlgrey.Preston


Re: [gentoo-user] Filtering spam for a business address

2006-07-20 Thread Preston Hagar
 
http://www.freesoftwaremagazine.com/articles/focus_spam_postfix/That's a great article.Where do you implement the changes hesuggests on the first page?I searched /etc/postfix/main.cf for the
configuration options but they aren't there.- Grant-Just add them to main.cf and do a /etc/init.d/postfix reload (make sure not to include the line numbers in his examples)
For the lines that reference external files, you will have to create the files and the content and the issue the command:postmap filenameThe guide puts all of the files in /usr/local/etc/postifx, but I just put the files in /etc/postfix (If you put the files in /etc/postfix instead of /usr/local/etc/postfix, make sure to change the path 
main.cf). I left off the spf filter since it seems that many people still have not adopted spf. Postgrey is great and I use it on my person email server, but I left that off of the business system I manage. I work for a real estate company and postgrey can delay email by 4 hours or more depending on the sending server configuration. Although no one should depend on email for speedy delivery, it is my experience that most users expect it. All of the other options have really helped a lot and cut down on spam.
A couple of things to remember, each time you change main.cf or any other postfix configuration file, you need to issue the command:/etc/init.d/postfix reload to get postfix to take the new configuration changes.
Also, if you change any of the external files that main.cf refrences, you need to do a :postmap filenameand then /etc/init.d/postfix reloadIt is probably a good idea to tail your mail logs for a while after you make the changes just to make sure you are not blocking anything you didn't intend 
to. tail -f /var/log/mail/currentortail -f /var/log/mail.infodepending on your logger.Also, I would recommend sending email to an account on your new system from any and all external email accounts you may have such as yahoo or gmail just for extra testing.
Good Luck,Preston


Re: [gentoo-user] Filtering spam for a business address

2006-07-18 Thread Preston Hagar
 Grant wrote: Does anyone use a spam-filtering solution they think is accurate
 enough to use with a business email address?I'm getting tons of spam and I'd really like to try and filter it out, but I need to make sure I don't miss any legitimate email.I'm using postfix and
 courier-imap. - GrantI have been wondering about this as well and I found this really great write-up:

http://www.freesoftwaremagazine.com/articles/focus_spam_postfix/

I would highly recommend looking at it.Preston


Re: [gentoo-user] [OT] (Linux) surveillance system?

2006-05-03 Thread Preston Hagar
We use zoneminder (http://www.zoneminder.com/) with the non -G version of these cards: http://www.icpamerica.com/products/accessories/IVC/IVC_200G.html
hooked up to fairly basic cameras through coax cable. We currently have 9 cameras on a dual core Athlon 64 with about 1 TB SATA storage. This may be a little more than you need, but if you only need one camera, you could probably go with the 100 series card and a less powerful server. Zoneminder has a nice web interface that you can use to monitor your camera(s) and change settings/recording options. You can put the cameras in motion detection mode, record all the time, monitor all the time, etc. You can also define zones for each camera where you either specifically watch for motion or ignore motion. For instance, one of our cameras has a flickering monitor that is usually on in its view. We just set zoneminder to ignore the motion on the monitor.
Both the 200 and 100 series of the card we use can handle 4 cameras, the difference is that the 200 series has 4 processor chips (one for each camera), while the 100 series only has 1 processor that is shared for all the cameras. We ordered our 200 series cards from ICP America directly and I seem to remember that they were about $150 - $175 each.
Hope this helps.PrestonOn 5/2/06, Jeff [EMAIL PROTECTED] wrote:
Hello all.In the pursuit of a light physical security solution, I was wondering -
does anyone recommend a small-time nanny-cam or web cam monitoringsystem that can run atop Linux and accessed using a web browser? We'relooking to beef up physical security to our server room, but we don'thave tons to spend. We'd like the design discreet and simple for the
time being, until we can afford something huge.Just wondering.:-)-Jeff--Emperor Palpatine:Everything that has transpired has done so accordingto my design.
--gentoo-user@gentoo.org mailing list


Re: [gentoo-user] eix - What's eix, then?

2006-01-09 Thread Preston Hagar
Another link for you reference is:http://gentoo-wiki.com/TIP_Speed_up_searches_in_portageIt describes both eix and esearch with the basic info (updating the database, output, etc.)
PrestonOn 1/9/06, Mike Williams [EMAIL PROTECTED] wrote:
You know, you could all just use:http://gentoo-wiki.com/TIP_speed_up_portage_with_cdb--Mike Williams--
gentoo-user@gentoo.org mailing list


Re: [gentoo-user] [OT] Recommended MySQL frontends

2005-12-14 Thread Preston Hagar
You might look at MySQLCC. The MySQL people have switched away from it to their new mysql administrator, but I still like it better.You can download it for windows by going here:
http://ftp.up.ac.za/pub/windows/mysql/Downloads/MySQLCC/Make sure to get the 0.9.4 versionMySQLCC isn't updated or supported anymore AFAIK and sometimes has a few bugs, but I use it fairly reguarly.
Another thing you might want to check out is DBDesigner: http://fabforce.net/dbdesigner4/With it, you can create graphical table diagrams. It then can take your diagram and sync it with a MySQL database.
HTH,PrestonOn 12/13/05, Roy Wright [EMAIL PROTECTED] wrote:
Howdy,I'm playing with Ruby On Rails but am severely SQL challenged.I'd like to just create some simple tables (integers, strings, dates).I've been trying to find a MySQL frontend that works.Theclosest is mysql administrator, except the SQL generated
doesn't work.Kexi errors when trying to connect to mysqland connection edit is not implemented yet...Any suggestions for a tool to create simple tables in MySQL?Or any really good tutorials?Please not another how to
install mysql on windows tutorial... that's all I seem able to find.I'm using MySQL 4.1.14.Thank you,Roy--gentoo-user@gentoo.org mailing list



Re: [gentoo-user] amaroK launching Kmail = virus?

2005-11-16 Thread Preston Hagar
On 11/16/05, Fernando Meira [EMAIL PROTECTED] wrote:

Well.. the update didn't go as well as I would like!
Here's where the problem started! Any idea?

make[6]: *** [libamarokarts.la] Error 1
make[6]: Leaving directory `/var/tmp/portage/amarok-1.3.6/work/amarok-1.3.6/amarok/src/engine/arts/amarokarts'
make[5]: *** [all-recursive] Error 1
(...)



Although amarok is probably my favorite audio player, I have found it
to be a little finicky. I usually find it works best with
xine. I usually use a -arts -gstreamer xine so xine is the only
engine available. I also usually have a -mysql -postgres
because it seems silly to me to have a database running to listen to
music. If you disable both of those, it just uses sqlite. I
have also use -opengl becase at one time (they probably have fixed it
by now, but I haven't checked) there was an issue with amarok, opengl,
and nvidia cards. I don't use/watch any of the visualizations
anyway so I have never seen the point. I make sure to add in
musicbrainz since that is a nice service. So to sum up, my use
flags are generally: -arts -gstreamer xine -mysql -postgres -opengl
musicbrainz I know it isn't a direct solution to your problem, I
just thought I would share my experiences.

Preston


Re: [gentoo-user] Ruby Rails and Rake - strange error on Gentoo...

2005-11-07 Thread Preston Hagar
I have the exact same issue and as yet have been unable to solve it. My emerged versions are as follows:

dev-lang/ruby-1.8.3 *
dev-ruby/rubygems-0.8.11 *
dev-ruby/activerecord-1.11.1
dev-ruby/activesupport-1.1.1-r2 *
dev-ruby/rake-0.5.3 *
dev-ruby/rails-0.13.1 *

My error when running rake:
/usr/lib/ruby/site_ruby/1.8/rake.rb:658:in `private': undefined method `have_option?' for class `Object' (NameError)
 from /usr/lib/ruby/site_ruby/1.8/rake.rb:658
 from /usr/lib/ruby/site_ruby/1.8/rake.rb:657
 from /usr/bin/rake:3

If I find a solution I will post it.On 11/7/05, Steve [Gentoo] [EMAIL PROTECTED] wrote:
I've recently started playing around with Ruby and rails under Gentoo.I've installed everything using emerge as opposed to the using ruby gems.
While I seem to be able to use my rails application, I get a puzzlingerror message when I try to verify it using the default generatedrakefile and rake:--$ rails myapp$ cd myapp$ rake
/usr/lib/ruby/site_ruby/1.8/rake.rb:658:in `private': undefined method`have_option?' for class `Object' (NameError)from /usr/lib/ruby/site_ruby/1.8/rake.rb:658from /usr/lib/ruby/site_ruby/1.8/rake.rb:657
from /usr/bin/rake:3--I would not expect this error message. I get the same error message ifI've introduced controllers and views (as suggested in the tutorials)before running make.I've asked on both the ruby and rails mailing
lists without any suggestions arising... it seems this might be peculiarto Gentoo.Do other users (more familiar than I am with Ruby, rails andrake)have the same problems?Is this a problem with my generated
application, Rails - or (as the error message suggests) an error in theimplementation of rake?--gentoo-user@gentoo.org mailing list



Re: [gentoo-user] apache log analyzer

2005-10-25 Thread Preston Hagar
On 10/24/05, Catalin Trifu [EMAIL PROTECTED] wrote:
Hi,I'm pretty new to log analyzers. Besides webalizer which got alittle bit old (still usefull nonetheless) i have no other experience.I've googled and found awstats and analog.If you would care to comment on this issue I would be grateful for
any hints.Thanks.Catalin--

I'm using awstats along with logrotate to do stats for 10 websites
hosted on one server. Every night, logrotate runs (by cron), runs
awstats on the access_log file for each site, gzips the log and moves
it to another directory for backup. I like awstats because it
allows you to have a custom log format and it understands virtual
hosts. This is nice because I can have one log file for all my
sites, in which I just append a VLOG name to a normal combined log
format. I have an awstats config file for each site which all
read the same file, but only look for their own domain name. I
used webalizer for a while, but often had problems that if I processed
a log that was in the middle of a day or month, it would not continue
properly when it parsed the next log. With awstats, it runs every
night and works great with a nice output. I would highly recommed
it. Look here:
http://awstats.sourceforge.net/docs/awstats_faq.html#ROTATE for info on
using awstats with logrotate and look here:
http://awstats.sourceforge.net/docs/awstats_compare.html for a
comparison between awstats, analog, webalizer, and hitbox. (It is
created by awstats though, so it might be a little biased).

HTH,

Preston



Re: [gentoo-user] Athlon 64 time...

2005-10-04 Thread Preston Hagar
I have the nForce 4 based MSI K8N Neo4 with a Athlon 64 3700+ with 1GHz
FSB and have had no problems. I chickened out, however and
installed Gentoo x86 on it because I use the machine for QT software
development and didn't want to have to worry about 64 bit compatability
and all of the packages that are masked on amd64. Anyway, it is a
great machine as is. 

Preston

Is there anything I need to be aware of when trying to run Gentoo A64 onthis? The mobo is Nforce 4 based, is this likely to cause any issues?
--gentoo-user@gentoo.org mailing list


Re: [gentoo-user] portage - xcdroast

2005-09-07 Thread Preston Hagar
On 9/6/05, Nick Rout [EMAIL PROTECTED] wrote:
as someone already said emerge eixthen runupdate-eix (you need to be root to do that part)this creates some sort of very quick index to your ebuilds which is MUCHfaster to search than emerge -s.
then just useeix searchterm...--Nick Rout [EMAIL PROTECTED]
Another good script/program to try is esearch. Just emerge
esearch then do eupdatedb to update the index of ebuilds.
Then, the next time you do an emerge sync, you can just type esync
instead and it will update portage and your esearch database. It
also prints out all of the updated packages in a nice fashion after the
sync. With esearch, you can type esearch searchterm to search
for packages. From my understanding (I have never really looked
into it), it is basically locate that only searches through
portage. It is one of my favorite gentoo tools and I would highly
recommend it.

Preston