Re: Digital Photo Manager

2007-08-08 Thread Oded Arbel
Just adding a couple of cents.

On Wed, 2007-08-08 at 08:58 +1000, Amos Shapira wrote:
 On 08/08/07, Nadav Har'El [EMAIL PROTECTED] wrote:
 So basically, I'm looking for a photo management application
 for Linux.
 
 I use Digikam for a few years now and am very satisfied with it. 

I'd like to also recommend Digikam


For example, I can add to each picture tags specifying the
 persons in the
picture, location of the picture, and so on, and then, for
 example, search 
for all pictures containing a specific person. F-spot's
 tags are a good
 
 That's exactly why I like Digikam so much - being able to search on
 tags.

I'd like to comment that Digikam tags can be ordered in a hierarchical
fashion - for example, in my albums I have top level people, places
and events tags, and then I have tags for each person I wish to tag,
each place or each event. It makes is very easy to search for specific
things, or just browse around - selecting a top level tag would work as
you expect. Also I really like Digikam's way of tagging images - yes,
you can edit the image and write down tags manually, or - you can
create a tag in the tag tree, and then drag that tag to (one or more)
images or drag images to the tag.

 5. I want a digital photo manager, not a digital camera
 manager, and not a
sophisticated photo editor - for which separate
 applications are available.
 
 Check. I just mount my camera's card through the card reader, import
 to Digikam using import folder and manually erase the photos from
 the card. I think it can manipulate media connected through USB
 directly ( e.g. connect your camera through USB cable and use the
 special communications mode to talk to it)

Yes it does. you can add your camera to Digikam, and whenever you plug
it in you can load Digikam's import dialog which lets you select the
pictures you want to import and either download, delete or download
and delete (which saves time on the whole process, IMHO).

  but I like the manual mount + copy approach, not the least
 because it saves on camera batteries and I think it's also faster as
 I'm not sure my camera (Canon EOS 350D) supports USB 2 at all. 

I have no idea why you think so - on the contrary, minimizing the number
of human actions and hence time spent with the camera on seems to me to
save on batteries. Also - transfer speed has nothing to do with it,
unless you refer to import tools' feature to show you thumbnails of the
images before you import them, but that is optional - you can start to
select and move your photos before the thumbnail generation is complete.

I personally no longer use the Digikam camera import feature. As I use
GNOME as my default desktop, it has the camera import wizard pops up
as soon as I connect my camera and I find it easier and faster to use
that.

 6. Bonus points for an application that doubles as (or is
 only) a Web-
application

 That's one thing I miss in Digikam. I currently use Gallery2 which
 imports photos from the Digikam folders. Gallery has an option to link
 to existing files so it doesn't keep another copy of the image. It can
 manage multiple users with different levels of access defined per
 image or per folder. 

Digikam has several export methods, including the ability to generate
HTML files for upload to website (or directly to your web folder if you
host your web site locally). I use Gallery2 as well, on a remote server,
and Digikam offers an export to remote gallery feature that allows me
to easily upload images to Gallery2.

-- 

Oded


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Digital Photo Manager

2007-08-08 Thread Moshe Leibovitch

As Oded mentioned, Digikam + Gallery2(2.1) is a good one.
There is a plugin for that.
Since Gallery is highly configurable and extensible you
may even satisfy your programming skills :)
Note though that there serious security holes in Gallery
and is a constant target for attacks.

On 08/08/2007 10:28, Oded Arbel wrote:

Just adding a couple of cents.

On Wed, 2007-08-08 at 08:58 +1000, Amos Shapira wrote:

On 08/08/07, Nadav Har'El [EMAIL PROTECTED] wrote:
So basically, I'm looking for a photo management application
for Linux.

I use Digikam for a few years now and am very satisfied with it. 


I'd like to also recommend Digikam



   For example, I can add to each picture tags specifying the
persons in the
   picture, location of the picture, and so on, and then, for
example, search 
   for all pictures containing a specific person. F-spot's

tags are a good

That's exactly why I like Digikam so much - being able to search on
tags.


I'd like to comment that Digikam tags can be ordered in a hierarchical
fashion - for example, in my albums I have top level people, places
and events tags, and then I have tags for each person I wish to tag,
each place or each event. It makes is very easy to search for specific
things, or just browse around - selecting a top level tag would work as
you expect. Also I really like Digikam's way of tagging images - yes,
you can edit the image and write down tags manually, or - you can
create a tag in the tag tree, and then drag that tag to (one or more)
images or drag images to the tag.


5. I want a digital photo manager, not a digital camera
manager, and not a
   sophisticated photo editor - for which separate
applications are available.

Check. I just mount my camera's card through the card reader, import
to Digikam using import folder and manually erase the photos from
the card. I think it can manipulate media connected through USB
directly ( e.g. connect your camera through USB cable and use the
special communications mode to talk to it)


Yes it does. you can add your camera to Digikam, and whenever you plug
it in you can load Digikam's import dialog which lets you select the
pictures you want to import and either download, delete or download
and delete (which saves time on the whole process, IMHO).


 but I like the manual mount + copy approach, not the least
because it saves on camera batteries and I think it's also faster as
I'm not sure my camera (Canon EOS 350D) supports USB 2 at all. 


I have no idea why you think so - on the contrary, minimizing the number
of human actions and hence time spent with the camera on seems to me to
save on batteries. Also - transfer speed has nothing to do with it,
unless you refer to import tools' feature to show you thumbnails of the
images before you import them, but that is optional - you can start to
select and move your photos before the thumbnail generation is complete.

I personally no longer use the Digikam camera import feature. As I use
GNOME as my default desktop, it has the camera import wizard pops up
as soon as I connect my camera and I find it easier and faster to use
that.


6. Bonus points for an application that doubles as (or is
only) a Web-
   application



That's one thing I miss in Digikam. I currently use Gallery2 which
imports photos from the Digikam folders. Gallery has an option to link
to existing files so it doesn't keep another copy of the image. It can
manage multiple users with different levels of access defined per
image or per folder. 


Digikam has several export methods, including the ability to generate
HTML files for upload to website (or directly to your web folder if you
host your web site locally). I use Gallery2 as well, on a remote server,
and Digikam offers an export to remote gallery feature that allows me
to easily upload images to Gallery2.



--
Moshe Leibovitch
CEO
MLN Computerized Systems Ltd.
Email:  [EMAIL PROTECTED]
Skype:  Moshe.Leibovitch
Mobile: +972-546-484411
Phone:  +972-3-5407371
Fax:+972-3-5407371


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Digital Photo Manager

2007-08-08 Thread Amos Shapira
On 08/08/07, Oded Arbel [EMAIL PROTECTED] wrote:

 I have no idea why you think so - on the contrary, minimizing the number


I now see that, unlike my previous camera circa 2003, the EOS 350D supports
USB 2.0 (or at least it can connect to a USB 2.0 bus, many devices still run
at 1.1 speed but I don't know about the EOS 350D).
Still, connecting the camera to the PC means that it is left on for the
duration of the transfer, which I prefer not to do.

of human actions and hence time spent with the camera on seems to me to
 save on batteries. Also - transfer speed has nothing to do with it,


I don't turn the camera on to take the memory card out of it and put it back
in, so battery time IS saved.

Digikam has several export methods, including the ability to generate
 HTML files for upload to website (or directly to your web folder if you


That's the method I used until I switched to Gallery 2 for this. It was OK
for my needs (showing off selected photos to remote family and friends from
my home computer) but it also meant that every time I had to export all the
images to generate the HTML files, I couldn't control access to the web
site, and generally it was a relatively limited interface.

host your web site locally). I use Gallery2 as well, on a remote server,
 and Digikam offers an export to remote gallery feature that allows me
 to easily upload images to Gallery2.


True. I just host my Gallery2 on my desktop together with Digikam so it can
access the images directly.

--Amos


Re: Digital Photo Manager

2007-08-08 Thread Amos Shapira
On 08/08/07, Moshe Leibovitch [EMAIL PROTECTED] wrote:

 Note though that there serious security holes in Gallery
 and is a constant target for attacks.


Is this still true for Gallery 2? From reading its docs I got the impression
one of its main goals was a complete re-design to avoid the security holes
in Gallery 1.

--Amos


Re: Digital Photo Manager

2007-08-08 Thread Oded Arbel
On Wed, 2007-08-08 at 20:43 +1000, Amos Shapira wrote:

 I don't turn the camera on to take the memory card out of it and put
 it back in, so battery time IS saved. 

Ah, good point - I haven't noticed that. I don't have a dedicated SD
reader, but I noticed that when I use my palm as an SD reader, then the
GNOME desktop's camera import wizard still pops up when I stick the
camera's SD card and offers to import photos, so its the same interface
as far as I'm concerned - both pretty cool and incredibly annoying.

-- 

Oded


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



OT: Job Request

2007-08-08 Thread ik
Hello list,

Recently the company that I'm working for has changed it's business
model, and they stopped any development at the company.

Therefor I'm looking for a development job, while I prefer to remain
in the VoIP industry, but I'm not fixed on that subject, so other
subjects are more then welcome :)

You can find my CV (in Hebrew) at:
http://ik.homelinux.org/lectures/fpc_about/shots/cv.pdf

Thanks,
Ido
-- 
http://ik.homelinux.org/

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



www.mybroadband.co.il

2007-08-08 Thread Gadi Cohen
Hi All


There have been alot of e-mails on the list this year (from myself
aswell) relating to the Internet in Israel.  Every ISP promises that
they are the fastest, have the best support, when often nothing can be
further from the truth.  An ISP / infrastructure provider will be having
technical problems that affect all users, but to cover their ass they'll
waste your time trying to find a non existant problem on your PC.  In
most other countries, you have independant sites which keep such
companies in line, and I'd like your help in setting one up for Israel.


I foresee a number of parts of such a site:


1) A WIKI which will include


1a) General information on each ISP, including hopefully maps showing
their connections and bandwidth both locally and abroad (is this info
available anywhere??)

1b) Debugging information for ADSL modems, cable, etc, to help people
help themselves, and help users/us perform our own diagnostics before
having to waste time on the phone with support.

1c) Of course, plenty of Linux information... both rating ISPs according
to their linux support, and of course offering scripts and other info. 
There's already a page on using openl2tpd to connect via HOT -- this
seems to the best and most actively maintained l2tp package, and the
info is all from 2007 and not 2001 like other guides.


2) RATINGS OF THE ISPS and infrastructure providers


2a) Subjective ratings: users will be able to rate from 1-10 on issues
such as speed, support, stability, etc.

2b) Objecting ratings: linux scripts that will run daily or even hourly
performing latency, bandwidth and maybe even traceroute tests to various
selected sites in Israel and abroad, and automatically submit this data
to a script on the site which will show ISP aggregates, graphs, etc...

2c) In  both cases, we'll a) see the real numbers and not the ISPs
opinion of how good they are, and secondly we'll be able to tell
objectively if an ISP is experiencing a problem instead of relying on
their word.


3) Finally, I guess a forum for discussion of Israeli internet.



Obviously this is quite a big endeavor and nothing I can do on my own,
but I think it's something that would be really worthwhile for the
community here and benefit everyone (i.e. once the ISPs have real
competition to deliver on their promises).


The wiki is set up, although as you can see there's not much there now
(www.mybroadband.co.il).  Feel free to add, edit, change, re-order, etc,
anything on the site, without asking me.  It's a community site, I just
want to get things started.  My forte is PHP, so I can handle all the
rating scripts, etc... as for (2c) I can handle the server side, but it
would be great if someone else could write a shell script to perform the
actual tests, and I'll handle processing and maybe laying out of the
submitted data.


Anyway, for those who want to be more involved than just editing stuff
on the wiki, you're invited to send an email with the word 'subscribe'
in the subject or body of the message
to [EMAIL PROTECTED]  List information and future
archives will go here:
http://lists.mybroadband.co.il/mailman/listinfo/devel.  Feel free to
post something, again, this is a project for all of those motivated to
do it, nothing depends on me.


Please also feel free to forward this message to other relevant lists
you're subscribed to, especially if they're in Hebrew (which isn't my
forte... although I hope most parts of the site will finally be
available in atleast English and Hebrew, and maybe more).  Feel free to
translate this message.


Kol tov

Gadi


---
Gadi Cohen aka Kinslayer [EMAIL PROTECTED] www.wastelands.net
Freelance admin/coding/design HABONIM DROR linux/fantasy enthusiast
KeyID 0x93F26EF5: 256A 1FC7 AA2B 6A8F 1D9B 6A5A 4403 F34B 93F2 6EF5



Re: www.mybroadband.co.il

2007-08-08 Thread Amos Shapira
On 08/08/07, Gadi Cohen [EMAIL PROTECTED] wrote:

  Hi All


  There have been alot of e-mails on the list this year (from myself
 aswell) relating to the Internet in Israel.  Every ISP promises that they
 are the fastest, have the best support, when often nothing can be further
 from the truth.  An ISP / infrastructure provider will be having technical
 problems that affect all users, but to cover their ass they'll waste your
 time trying to find a non existant problem on your PC.  In most other
 countries, you have independant sites which keep such companies in line, and
 I'd like your help in setting one up for Israel.


  I foresee a number of parts of such a site:


Look at http://whirlpool.net.au/ for a site which fills just this niche in
Australia. It's hugely successful and considered the Mecca of anyone
checking about broadband in Australia (though there are forums also about
VoIP, web hosting and more).

Trying to enumerate what they have there:

1. Tools (which might not be relevant for Israel) where by you give you land
line number and they tell you what kind of services (companies, plans) are
available for your exchange.
2. Very active discussion forums, with many official representatives from
service providers.
3. News about broadband (e.g. ISP take overs, plan changes, communication's
ministry decisions, market watch etc.)
4. Plans database, ISP's database, Hardware database (each member is invited
to list and rate all of these about their account so the site can gather
lots of statistical info).
5. FAQ's section - probably filling the same space you intend for the Wiki.

That's it for now. I'll try to answer more specific questions if you have.

Good luck with your venture. Judging by the Whirlpool experience it could
become a VERY valuable and successful service.

One important point about Whirlpool - though it seems to maintain contacts
with the players in the market (have official reps from many companies talk
to them etc.), they seem to be very independent, which adds a lot of value
to the site as a whole.

Cheers,

--Amos


Re: www.mybroadband.co.il

2007-08-08 Thread Omer Zak
On Wed, 2007-08-08 at 23:01 +1000, Amos Shapira wrote:
 On 08/08/07, Gadi Cohen [EMAIL PROTECTED] wrote:
 Hi All
 
 
 There have been alot of e-mails on the list this year (from
 myself aswell) relating to the Internet in Israel.  Every ISP
 promises that they are the fastest, have the best support,
 when often nothing can be further from the truth.  An ISP /
 infrastructure provider will be having technical problems that
 affect all users, but to cover their ass they'll waste your
 time trying to find a non existant problem on your PC.  In
 most other countries, you have independant sites which keep
 such companies in line, and I'd like your help in setting one
 up for Israel.
 
 
 I foresee a number of parts of such a site:
 
 
 
 Look at http://whirlpool.net.au/ for a site which fills just this
 niche in Australia. It's hugely successful and considered the Mecca of
 anyone checking about broadband in Australia (though there are forums
 also about VoIP, web hosting and more). 

Is it possible to get from the Australian Web site their tools and
scripts, so that we'll have only to adapt existing tools rather than
re-invent them from scratch?

About information which is relevant only for Australia - it would help
us by directing us which questions to ask and what information to
collect in the Israeli case.

Also, which similar Web sites exist in which other countries - from
which we could get tools and ideas?
   --- Omer
-- 
Kosher Cellphones (cellphones with blocked SMS, video and Internet)
are menace to the deaf.  They must be outlawed!
(See also: 
http://www.zak.co.il/tddpirate/2006/04/21/the-grave-danger-to-the-deaf-from-kosher-cellphones/)
My own blog is at http://www.zak.co.il/tddpirate/

My opinions, as expressed in this E-mail message, are mine alone.
They do not represent the official policy of any organization with which
I may be affiliated in any way.
WARNING TO SPAMMERS:  at http://www.zak.co.il/spamwarning.html


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: www.mybroadband.co.il

2007-08-08 Thread Maxim Veksler
On 8/8/07, Amos Shapira [EMAIL PROTECTED] wrote:
 On 08/08/07, Gadi Cohen [EMAIL PROTECTED] wrote:

  Hi All
 
  There have been alot of e-mails on the list this year (from myself aswell) 
  relating to the Internet in Israel.  Every ISP promises that they are the 
  fastest, have the best support, when often nothing can be further from the 
  truth.  An ISP / infrastructure provider will be having technical problems 
  that affect all users, but to cover their ass they'll waste your time 
  trying to find a non existant problem on your PC.  In most other countries, 
  you have independant sites which keep such companies in line, and I'd like 
  your help in setting one up for Israel.
 
  I foresee a number of parts of such a site:

 Look at http://whirlpool.net.au/ for a site which fills just this niche in 
 Australia. It's hugely successful and considered the Mecca of anyone checking 
 about broadband in Australia (though there are forums also about VoIP, web 
 hosting and more).

Also look at http://www.netcheif.com/


 Cheers,

 --Amos





-- 
Cheers,
Maxim Veksler

Free as in Freedom - Do u GNU ?

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Postfix configuration issue

2007-08-08 Thread Oded Arbel
It might be the time, but I can't wrap my head around this problem:

I have postfix configured as the local MTA for a server that needs to
generate some status emails every day (logwatch, etc'), and mail them to
the administrator's address which is [EMAIL PROTECTED] , and I've setup
an alias:
root:   [EMAIL PROTECTED]

The problem is that the mail server running the mail domain comany.com
doesn't like to receive e-mail from addresses in the form of
server.comany.com (where server.company.com is local host name that is
not visible on the internet) - because it doesn't accept mail from
domains that it can't resolve. So mail from [EMAIL PROTECTED]
to [EMAIL PROTECTED] gets rejected.

I tried to solve the problem by setting postfix's 'myorigin' to
company.com so that postfix will send mail as [EMAIL PROTECTED] which
is meaningless (there is no such e-mail address), but I don't mind and I
can understand what it means and the mail server will be happy (it
doesn't actually verify the user part of From addresses). Problem is
that postfix now refuses to resolve the alias and instead of sending to
the required address, it sends emails from [EMAIL PROTECTED] to
[EMAIL PROTECTED], which of course gets rejected because there is no
such address. This is because the second caveat of the 'myorigin'
setting:

# For the sake of consistency between sender and recipient addresses,
# myorigin also specifies the default domain name that is appended
# to recipient addresses that have no @domain part.

So postfix maps 'root' to '[EMAIL PROTECTED]' and then its no longer a
local address and so it gets sent on the wire.

My current workaround is to set 'myorigin' to valid.company.com, where
valid.company.com is the address of another server whose name can be
resolved on public DNS server. Of course this is bad. 

Can any one suggest a better method of getting my log reports ? I rather
not have an alias for '[EMAIL PROTECTED]' on the mail server - its a good
address for a spam trap, but probably nothing else.

-- 

Oded


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Postfix configuration issue

2007-08-08 Thread Moshe Leibovitch

On 08/08/2007 15:44, Oded Arbel wrote:

It might be the time, but I can't wrap my head around this problem:

I have postfix configured as the local MTA for a server that needs to
generate some status emails every day (logwatch, etc'), and mail them to
the administrator's address which is [EMAIL PROTECTED] , and I've setup
an alias:
root:   [EMAIL PROTECTED]

The problem is that the mail server running the mail domain comany.com
doesn't like to receive e-mail from addresses in the form of
server.comany.com (where server.company.com is local host name that is
not visible on the internet) - because it doesn't accept mail from
domains that it can't resolve. So mail from [EMAIL PROTECTED]
to [EMAIL PROTECTED] gets rejected.

I tried to solve the problem by setting postfix's 'myorigin' to
company.com so that postfix will send mail as [EMAIL PROTECTED] which
is meaningless (there is no such e-mail address), but I don't mind and I
can understand what it means and the mail server will be happy (it
doesn't actually verify the user part of From addresses). Problem is
that postfix now refuses to resolve the alias and instead of sending to
the required address, it sends emails from [EMAIL PROTECTED] to
[EMAIL PROTECTED], which of course gets rejected because there is no
such address. This is because the second caveat of the 'myorigin'
setting:

# For the sake of consistency between sender and recipient addresses,
# myorigin also specifies the default domain name that is appended
# to recipient addresses that have no @domain part.

So postfix maps 'root' to '[EMAIL PROTECTED]' and then its no longer a
local address and so it gets sent on the wire.

My current workaround is to set 'myorigin' to valid.company.com, where
valid.company.com is the address of another server whose name can be
resolved on public DNS server. Of course this is bad. 


Can any one suggest a better method of getting my log reports ? I rather
not have an alias for '[EMAIL PROTECTED]' on the mail server - its a good
address for a spam trap, but probably nothing else.


Either define mynetworks to include all local networks thus whitelist
them or use access list by domain ( with or without wild card ).

PS Why do try to resolve domains in the first place? If you are
   resolving to check mx then it's a headache since many ISP's
   do not conform to standards. I.e. sending  from servers
   without mx records.
   If you are checking just for valid domains, i.e. with a valid A
   records then again, what exactly will this check tell you?
   Weigh carefully the overhead against the results.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



System resource monitoring and reporting utility ?

2007-08-08 Thread Maxim Veksler
Hello list,

I'm looking for a simple system monitoring script / utility.
I need to do checks like memory usage, cpu usage, hard disk usage and co.
I would like to email alerts if one of the check fails.

I know SNMP traps are exactly what I'm after, oddly I haven't been
able find any decent project that will support this. Has anyone had
any experience with opennms/nagios and could point me to their client
side Linux agent ?

Again, I'm after a simple and easy to setup resource watchdog utility.

Tips will be publicly acknowledged.

Thank you,
Maxim.

-- 
Cheers,
Maxim Veksler

Free as in Freedom - Do u GNU ?

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Postfix configuration issue

2007-08-08 Thread Oded Arbel
On Wed, 2007-08-08 at 17:08 +0200, Moshe Leibovitch wrote:
  The problem is that the mail server running the mail domain comany.com
  doesn't like to receive e-mail from addresses in the form of
  server.comany.com (where server.company.com is local host name that is
  not visible on the internet) - because it doesn't accept mail from
  domains that it can't resolve. So mail from [EMAIL PROTECTED]
  to [EMAIL PROTECTED] gets rejected.

  Can any one suggest a better method of getting my log reports ? I
 rather
  not have an alias for '[EMAIL PROTECTED]' on the mail server - its a
 good
  address for a spam trap, but probably nothing else.
  
 Either define mynetworks to include all local networks thus whitelist
 them or use access list by domain ( with or without wild card ).

I'm assuming your talking about the mail server here ? I rather not mess
with the mail server - lets just assume I don't have control of it - but
in anyway its not local to the network with the private server on it, so
I don't want to white list anything.

 PS Why do try to resolve domains in the first place? If you are
 resolving to check mx then it's a headache since many ISP's
 do not conform to standards. I.e. sending  from servers
 without mx records.

The mail server again ? Lets assume I don't have control of it. But more
to the point - its not checking for MXs. Sending mail or receiving mail
doesn't require an MX. mail to [EMAIL PROTECTED] is valid
even if yada.blabla.something.com does not have an MX record, as long as
the domain itself resolves to an IP address. 

 If you are checking just for valid domains, i.e. with a valid A
 records then again, what exactly will this check tell you?
 Weigh carefully the overhead against the results.

Its a form of enforcing correct behavior, its rather useful against spam
droids and other fake e-mails. I actually can't see how any self
respecting postmaster would use an unresolved name as a the domain in a
From address.

-- 

Oded


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Postfix configuration issue

2007-08-08 Thread Moshe Leibovitch


On 08/08/2007 16:37, Oded Arbel wrote:

On Wed, 2007-08-08 at 17:08 +0200, Moshe Leibovitch wrote:

The problem is that the mail server running the mail domain comany.com
doesn't like to receive e-mail from addresses in the form of
server.comany.com (where server.company.com is local host name that is
not visible on the internet) - because it doesn't accept mail from
domains that it can't resolve. So mail from [EMAIL PROTECTED]
to [EMAIL PROTECTED] gets rejected.



Can any one suggest a better method of getting my log reports ? I

rather

not have an alias for '[EMAIL PROTECTED]' on the mail server - its a

good

address for a spam trap, but probably nothing else.


Either define mynetworks to include all local networks thus whitelist
them or use access list by domain ( with or without wild card ).


I'm assuming your talking about the mail server here ? I rather not mess
with the mail server - lets just assume I don't have control of it - but
in anyway its not local to the network with the private server on it, so
I don't want to white list anything.


It's all about configuring the server. Am I missing something? If your
main.cf is configured with the means, then all you need to change are
the data files G.E access db, header checks db, etc.
You can change aliases, can you? same thing.


PS Why do try to resolve domains in the first place? If you are
resolving to check mx then it's a headache since many ISP's
do not conform to standards. I.e. sending  from servers
without mx records.


The mail server again ? Lets assume I don't have control of it. But more
to the point - its not checking for MXs. Sending mail or receiving mail
doesn't require an MX. mail to [EMAIL PROTECTED] is valid
even if yada.blabla.something.com does not have an MX record, as long as
the domain itself resolves to an IP address. 


If you are checking just for valid domains, i.e. with a valid A
records then again, what exactly will this check tell you?
Weigh carefully the overhead against the results.




I though you were talking about using reject_unknown_sender_domain
  restriction, not just rbl's.


Its a form of enforcing correct behavior, its rather useful against spam
droids and other fake e-mails. I actually can't see how any self
respecting postmaster would use an unresolved name as a the domain in a

From address.



Check ISP's in Israel and abroad and see what gives !


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Digital Photo Manager

2007-08-08 Thread oren
Gallery is a very active project, meaning that security holes are quickly
closed, and all you have to do is just to apt-get update/yum update.

I wouldn't define neither Gallery v1 or v2 as a software with serious
security holes (unless you decide to install old versions). Moshe is
probably talking about evil bugs from the past. PhpBB also had evil bugs
in the past, and even Apache. I believe that the Linux kernel too.

Of course, web application (which is open to the public) will always be
more vulnerable than non-web software. But non-web software belongs to the
90s :)

I'm using Gallery (v1  v2) for more than two years.

 - Oren

 On 08/08/07, Moshe Leibovitch [EMAIL PROTECTED] wrote:

 Note though that there serious security holes in Gallery
 and is a constant target for attacks.


 Is this still true for Gallery 2? From reading its docs I got the
 impression
 one of its main goals was a complete re-design to avoid the security holes
 in Gallery 1.

 --Amos




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Postfix configuration issue

2007-08-08 Thread Oded Arbel
On Wed, 2007-08-08 at 18:05 +0200, Moshe Leibovitch wrote:
 On 08/08/2007 16:37, Oded Arbel wrote:
  On Wed, 2007-08-08 at 17:08 +0200, Moshe Leibovitch wrote:
  The problem is that the mail server running the mail domain comany.com
  doesn't like to receive e-mail from addresses in the form of
  server.comany.com (where server.company.com is local host name that is
  not visible on the internet) - because it doesn't accept mail from
  domains that it can't resolve. So mail from [EMAIL PROTECTED]
  to [EMAIL PROTECTED] gets rejected.
  
  Can any one suggest a better method of getting my log reports ? I
  rather
  not have an alias for '[EMAIL PROTECTED]' on the mail server - its a
  good
  address for a spam trap, but probably nothing else.
 
  Either define mynetworks to include all local networks thus whitelist
  them or use access list by domain ( with or without wild card ).
  
  I'm assuming your talking about the mail server here ? I rather not mess
  with the mail server - lets just assume I don't have control of it - but
  in anyway its not local to the network with the private server on it, so
  I don't want to white list anything.
 
 It's all about configuring the server. Am I missing something? If your
 main.cf is configured with the means, then all you need to change are
 the data files G.E access db, header checks db, etc.
 You can change aliases, can you? same thing.

Are you still talking about the company's domain mail server, or about
the private server? If its the former then its not much of an option -
the mail domain is hosted on a shared server and changing its
configuration is out of the question. I can add the [EMAIL PROTECTED]
alias - but I rather not do that as I explained above - and that's
probably the only type of changes that I can do to the mail server.

I'm looking for a possible solution on how to configure the private
server's local MTA so that it can send e-mail to the domain's mail
server (which will be unchanged) without the need to add the private
server's fully qualified host name to a public DNS (which may not always
be possible anyway, as I might want to use servers w/o a fully qualified
host name at all). I'm looking for a general solution that I can deploy
for this problem on multiple private servers that send mail to different
mail servers - most have a similar behavior of blocking emails with what
looks like obviously fake From addresses.

 I though you were talking about using reject_unknown_sender_domain
restriction, not just rbl's.

Yea, its probably that, not that I remember.

-- 

Oded


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Postfix configuration issue

2007-08-08 Thread Moshe Leibovitch

Sorry, I'm not that good in spoofing :)

On 08/08/2007 18:22, Oded Arbel wrote:

On Wed, 2007-08-08 at 18:05 +0200, Moshe Leibovitch wrote:

On 08/08/2007 16:37, Oded Arbel wrote:

On Wed, 2007-08-08 at 17:08 +0200, Moshe Leibovitch wrote:

The problem is that the mail server running the mail domain comany.com
doesn't like to receive e-mail from addresses in the form of
server.comany.com (where server.company.com is local host name that is
not visible on the internet) - because it doesn't accept mail from
domains that it can't resolve. So mail from [EMAIL PROTECTED]
to [EMAIL PROTECTED] gets rejected.
Can any one suggest a better method of getting my log reports ? I

rather

not have an alias for '[EMAIL PROTECTED]' on the mail server - its a

good

address for a spam trap, but probably nothing else.


Either define mynetworks to include all local networks thus whitelist
them or use access list by domain ( with or without wild card ).

I'm assuming your talking about the mail server here ? I rather not mess
with the mail server - lets just assume I don't have control of it - but
in anyway its not local to the network with the private server on it, so
I don't want to white list anything.

It's all about configuring the server. Am I missing something? If your
main.cf is configured with the means, then all you need to change are
the data files G.E access db, header checks db, etc.
You can change aliases, can you? same thing.


Are you still talking about the company's domain mail server, or about
the private server? If its the former then its not much of an option -
the mail domain is hosted on a shared server and changing its
configuration is out of the question. I can add the [EMAIL PROTECTED]
alias - but I rather not do that as I explained above - and that's
probably the only type of changes that I can do to the mail server.

I'm looking for a possible solution on how to configure the private
server's local MTA so that it can send e-mail to the domain's mail
server (which will be unchanged) without the need to add the private
server's fully qualified host name to a public DNS (which may not always
be possible anyway, as I might want to use servers w/o a fully qualified
host name at all). I'm looking for a general solution that I can deploy
for this problem on multiple private servers that send mail to different
mail servers - most have a similar behavior of blocking emails with what
looks like obviously fake From addresses.


I though you were talking about using reject_unknown_sender_domain
   restriction, not just rbl's.


Yea, its probably that, not that I remember.



--
Moshe Leibovitch
CEO
MLN Computerized Systems Ltd.
Email:  [EMAIL PROTECTED]
Skype:  Moshe.Leibovitch
Mobile: +972-546-484411
Phone:  +972-3-5407371
Fax:+972-3-5407371


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: System resource monitoring and reporting utility ?

2007-08-08 Thread Oren Held
A friend of mine (Amnon) found Munin (http://munin.projects.linpro.no/), which 
is a great system resource grapher tool which has plugins for almost 
everything from swap, ntp time drifts, disk temperature - to mysql queries 
per second.

However, it draws graphs, I'm not sure it can send alerts. You can set limits 
(like highest cpu temperature or free disk space) which tag the whole node 
as red, maybe it's even capable of notifying.. worth a check I guess.

On Wednesday, 8 August 2007 17:46:48 Maxim Veksler wrote:
 Hello list,

 I'm looking for a simple system monitoring script / utility.
 I need to do checks like memory usage, cpu usage, hard disk usage and co.
 I would like to email alerts if one of the check fails.

 I know SNMP traps are exactly what I'm after, oddly I haven't been
 able find any decent project that will support this. Has anyone had
 any experience with opennms/nagios and could point me to their client
 side Linux agent ?

 Again, I'm after a simple and easy to setup resource watchdog utility.

 Tips will be publicly acknowledged.

 Thank you,
 Maxim.



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: System resource monitoring and reporting utility ?

2007-08-08 Thread Maxim Veksler
On 8/8/07, Oren Held [EMAIL PROTECTED] wrote:
 A friend of mine (Amnon) found Munin (http://munin.projects.linpro.no/), which
 is a great system resource grapher tool which has plugins for almost
 everything from swap, ntp time drifts, disk temperature - to mysql queries
 per second.


Oron, you're off by just 2 small (levenshtein distance) steps.

I've found monit to be exactly what I'm looking for, and it makes the
impression of a very quality code.

Here is the setup I'm using on a redhat 4 box, coping and pasting from
a dokuwiki format:


 Installl 

code
cd /tmp/
wget http://dag.wieers.com/rpm/packages/monit/monit-4.9-2.el4.rf.i386.rpm
rpm -Uvh monit-4.9-2.el4.rf.i386.rpm
/code

 Settings 

  * sed /^#/d /etc/monit.conf code
set daemon  600
set logfile syslog facility log_daemon
set mailserver aaa.bbb.ccc.ddd# primary mailserver
set mail-format { from: [EMAIL PROTECTED] }
set alert [EMAIL PROTECTED]  # receive all alerts
set httpd port 2812 and
 use address localhost  # only accept connection from localhost
 allow localhost# allow localhost to connect to the server and
 allow admin:monit  # require user 'admin' with password 'monit'
  check system localhost
if loadavg (1min)  4 then alert
if loadavg (5min)  2 then alert
if memory usage  75% then alert
if cpu usage (user)  70% then alert
if cpu usage (system)  30% then alert
if cpu usage (wait)  20% then alert
  check device datafs with path /dev/mapper/VolGroup00-LogVol00
if space usage  70% for 5 times within 15 cycles then alert
/code


Reference:

http://www.debian-administration.org/articles/269
http://www.tildeslash.com/monit/index.php

 On Wednesday, 8 August 2007 17:46:48 Maxim Veksler wrote:
  Hello list,
 
  I'm looking for a simple system monitoring script / utility.
  I need to do checks like memory usage, cpu usage, hard disk usage and co.
  I would like to email alerts if one of the check fails.
 
  I know SNMP traps are exactly what I'm after, oddly I haven't been
  able find any decent project that will support this. Has anyone had
  any experience with opennms/nagios and could point me to their client
  side Linux agent ?
 
  Again, I'm after a simple and easy to setup resource watchdog utility.
 
  Tips will be publicly acknowledged.
 
  Thank you,
  Maxim.





-- 
Cheers,
Maxim Veksler

Free as in Freedom - Do u GNU ?

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: System resource monitoring and reporting utility ?

2007-08-08 Thread Shachar Shemesh
Oren Held wrote:
 A friend of mine (Amnon) found Munin (http://munin.projects.linpro.no/), 
 which 
 is a great system resource grapher tool which has plugins for almost 
 everything from swap, ntp time drifts, disk temperature - to mysql queries 
 per second.

 However, it draws graphs, I'm not sure it can send alerts. You can set limits 
 (like highest cpu temperature or free disk space) which tag the whole node 
 as red, maybe it's even capable of notifying.. worth a check I guess.
   
I don't know about alerts, but I find that it is the best tool I know
for getting the general health of a system. That is something no graph
specific test can tell you, because it often involves measurements you
did not think of before they happened.

For anyone who is interested in seeing it in action, Hamakor's new
server has it running, open for all to see: http://hamakor.org.il/munin/

Shachar

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]