Re: need help with PHP open source class

2010-01-03 Thread Uri Even-Chen
Hi, Eventually they released a new version of PHPwhois, and I used it to upgrade Speedy Whois and released a new version. The bugs are fixed, I checked many domain names and it works fine. Thanks, Uri Even-Chen Mobile Phone: +972-50-9007559 E-mail: u...@speedy.net Blog:

Innova USB DVB-T stick?

2010-01-03 Thread geoffrey mendelson
Has anyone tried using the Innova USB DVB-T tuner that is now on sale at Home Depot for 99 NIS? Last week when I was there, the one I was at only had the APEX, so I assume this is new (to them). The APEX does not work with Linux, but is this a different unit, or the same one under another

SIP provider questions.

2010-01-03 Thread geoffrey mendelson
Does anyone know if: 1. There is a SIP (or IAX) provider selling Israeli DIDs? I need them to be in Israel and accept Israel only credit cards. Cheap is more important than providing customer support, or good service. 2. Is there a pay-as-you go SIP (or IAX) provider that works with

Re: SIP provider questions.

2010-01-03 Thread Ori Berger
geoffrey mendelson wrote: 1. There is a SIP (or IAX) provider selling Israeli DIDs? I need them to be in Israel and accept Israel only credit cards. Cheap is more important than providing customer support, or good service. didww.com; They are cheap ($3/month for an Israeli DID, flat -- some

What to do with a constant flow of attempts to login to my compuet?

2010-01-03 Thread Gabor Szabo
I just noticed someone bombarding my machine trying to login via ssh. From auth.log Jan 3 06:31:48 s6 sshd[22774]: Failed password for invalid user amavisd from 202.138.142.216 port 35172 ssh2 Jan 3 06:31:48 s6 sshd[22773]: Failed password for invalid user clamav from 202.138.142.216 port 39941

RE: What to do with a constant flow of attempts to login to my compuet?

2010-01-03 Thread ronys
Hi Gabor, Moving sshd off port 22 to any non-standard port worked fine for me. Most attacks are too lazy to do a full portscan, so if they don't find the default port open, they just move to the next host. Of course, this is assuming that the attack chose you at random. If it's a targeted

Re: What to do with a constant flow of attempts to login to my compuet?

2010-01-03 Thread Boaz Rymland
This is so common these days I heard years ago people filtering out such messages. Just check your machine carefully - I once had a break-in that was caused from a stupid chain of mistakes: i switched sshd to listen on its default port (22) for some time (instead of some arbitrary port as it was

Re: What to do with a constant flow of attempts to login to my compuet?

2010-01-03 Thread sara fink
Few suggestions: 1. after 3 unsuccesful logins knock the user out (no matter who is the user). 2. ban the ip in iptables. you can see it's the same ip all the time. this ip is from the Philippines http://www.dnsstuff.com/tools/ipall/?tool_id=67token=toolhandler_redirect=0ip=202.138.142.216 3.

Re: What to do with a constant flow of attempts to login to my compuet?

2010-01-03 Thread Boaz Rymland
To add my list: * verify there are as least as possible users on the machine. Unused user? either purge or disable (login shell set to /bin/false or the like; home dir set to /not/here). * verify users on machine not have easy to guess password. * indeed move sshd to listen to its NON default

Zombie processes

2010-01-03 Thread sammy ominsky
Hi all, I have one server that is constantly getting overrun by zombies! Nagios alerts me that ** NAGIOS ALERT ** PROBLEM with Zombie Processes on Hardware *** (***.***.***.***). Service is CRITICAL as of Sun Jan 3 15:17:10 UTC 2010. The additional information available is: PROCS

Re: What to do with a constant flow of attempts to login to my compuet?

2010-01-03 Thread Hetz Ben Hamo
Hi, simple answer: apt-get install denyhosts Then setup the config file according to your needs and run this daemon. When someone will pass the threshold, it will be added to /etc/hosts.deny and will be blocked. You might want to complain about the abuser to this IP holder (Digitel

RE: What to do with a constant flow of attempts to login to mycompuet?

2010-01-03 Thread Aaron Komisar
Fail2ban scans log files and bans IP addresses that make too many password failures. It updates firewall rules to reject the IP address. See: http://www.fail2ban.org/wiki/index.php/Main_Page Aaron -Original Message- From: Boaz Rymland [mailto:b...@rymland.com] Sent: Sunday, January

The *route* saga continues, weirder...

2010-01-03 Thread Hetz Ben Hamo
Hi, Last time I asked about routing issue on a wifi connected machine. Today I have noticed that this happens also on my *wired* machine. My resolv.conf file is 2 lines to the router: nameserver 192.168.1.1 and to Netvision (194.90.1.5) My routing is very simple one: $ /sbin/route Kernel IP

Re: The *route* saga continues, weirder...

2010-01-03 Thread Aviv Greenberg
Try to disable any daemons that might mess with interfaces/routing: dhclient NetworkManager etc, try see if the problem goes away when these daemons are down. 2010/1/3 Hetz Ben Hamo het...@gmail.com: Hi, Last time I asked about routing issue on a wifi connected machine. Today I have noticed

Re: Zombie processes

2010-01-03 Thread Shachar Shemesh
sammy ominsky wrote: Hi all, I have one server that is constantly getting overrun by zombies! Nagios alerts me that ** NAGIOS ALERT ** PROBLEM with Zombie Processes on Hardware *** (***.***.***.***). Service is CRITICAL as of Sun Jan 3 15:17:10 UTC 2010. The additional

Re: Zombie processes

2010-01-03 Thread Raz
look for open descriptors with lsof. 2010/1/3 Shachar Shemesh shac...@shemesh.biz: sammy ominsky wrote: Hi all, I have one server that is constantly getting overrun by zombies! Nagios alerts me that ** NAGIOS ALERT ** PROBLEM with Zombie Processes on Hardware ***

Re: Zombie processes

2010-01-03 Thread sammy ominsky
On 03/01/2010, at 18:22, Raz wrote: look for open descriptors with lsof. Thanks! I've pretty much got it pegged as a problem with playrecording.php, but I haven't found the reason yet. Going to assign it to one of my staff coders to investigate. The sysadmins were sadly clueless :)

Re: Announce: Hspell 1.1

2010-01-03 Thread Nadav Har'El
On Fri, Jan 01, 2010, E L wrote about Re: Announce: Hspell 1.1: I think it should be done in the following order: - If hspell doesn't have it add for each word if it's a verb adjective and so on. Hspell already does this, and more. This is known as a morphological analyzer. It is explained on

Re: Zombie processes

2010-01-03 Thread guy keren
sammy ominsky wrote: On 03/01/2010, at 18:22, Raz wrote: look for open descriptors with lsof. Thanks! I've pretty much got it pegged as a problem with playrecording.php, but I haven't found the reason yet. Going to assign it to one of my staff coders to investigate. The sysadmins were