Re: secrets and lies

2000-11-15 Thread Ryan Russell
On 15 Nov 2000, Paul Jarc wrote: If you want to see some of the tests he does, check out rts.tests that comes in the djbdns distribution. That sort of thing has its place, but it's not really related to auditing at all. Mostly, it's good for detecting compilation problems. Several

Re: secrets and lies

2000-11-14 Thread Ryan Russell
On Tue, 14 Nov 2000, Adam McKenna wrote: Not to mention that the whole point of freeware and open source software in general is to give everyone the ability to audit the software, not just a select few. It sounds like the author of this book is a M$-type weenie. Who, Bruce? Bwahaha...

Re: secrets and lies

2000-11-14 Thread Ryan Russell
On Tue, 14 Nov 2000, Mate Wierdl wrote: Indeed, it would be interesting what kind of testing he is running on qmail, say (he says there are over 100 tests), and how he is trying to make sure his software is secure. If you want to see some of the tests he does, check out rts.tests that comes

Re: secrets and lies

2000-11-14 Thread Ryan Russell
On Tue, 14 Nov 2000 [EMAIL PROTECTED] wrote: I'm confused. How exactly does any of this affect the ability of people to download the source and examine/use it to determine if it's secure or not? After all, wasn't that the point of the discussion? Some folks who are capable of doing good

Re: some new windows virus

2000-06-19 Thread Ryan Russell
http://news.cnet.com/news/0-1005-200-2108936.html?tag=st.ne.1430735..ni http://www.zdnet.com/zdnn/stories/news/0,4586,2589983,00.html http://news.ft.com/ft/gx.cgi/ftc?pagename=Viewc=Articlecid=FT39FTHJO9Clive=truetagid=ZZZC00L1B0Csubheading=information%20technology

Re: Migrating From NT/Imail to Qmail

2000-06-19 Thread Ryan Russell
On Mon, 19 Jun 2000, Julian L. Cardarelli wrote: 1) How do I correctly take user passwords and move them to Qmail? I don't know what Imail is... if it uses the SAM passwords, L0phtcrack works surprisingly well. If not, use something like dsniff over a few days and grab most of the passwords

Re: Does someone knows what is this about?

2000-06-05 Thread Ryan Russell
On Mon, 5 Jun 2000, Len Budney wrote: Not to restart another perennial flame-war, but why then does he blacklist people who block his probes? Is it really his intention to provide the service of blacklisting both a) open relays and b) people who disagree with him? As the mail admin for a

Re: Does someone knows what is this about?

2000-06-05 Thread Ryan Russell
On Mon, 5 Jun 2000, Peter van Dijk wrote: That is impossible. ORBS does not list a machine until it has received a relayed test message. If you know of any false positives, let me know too and I'd be happy to investigate. I have had several people run to me and say 'ORBS listed me but I'm

Re: Does someone knows what is this about?

2000-06-05 Thread Ryan Russell
Except that sites that block probes rather than fix open relays really belong in a different kind of list. I think the ORBS would be better off just listing confirmed open relays. If they would do this, a lot Peter van Dijk confirmed that we are listed in a different category from regular

Re: Syslog is Evil to me!

2000-06-01 Thread Ryan Russell
Other than dying at times for no apparant reason, syslog-ng seems to work well. It's got some nice features to it, like automatically building out a dir structure for different dates and hosts. I wasn't getting my syslog output from qmail with the Solaris x86 syslog.

Re: How to Retrive Mail from Qmail

2000-05-10 Thread Ryan Russell
Looks like you just need to finish the command sequence. The next command would be STAT which gives you two numbers, how many messages are waiting, and how many bytes they are. Next, do a RETR 1 to get the first message. DELE 1 will delete it. Ryan On