[CentOS] Detecting empty office doc containing virus macro

We are receiving LOTS of emails that contain empty XLS or DOC documents with embedded virus macros. These are getting past SPAMASSASSIN, Clamav and Kaspersky. I'm trying to write a filter for EXIM to block these emails but I need to know a good, quick, command-line to detect an empty doc with

Re: [CentOS-es] Spoofing Postfix

Saludos Ricardo, te cuento que hace algunos años yo tenía el mismo problema, leí que para superar un poco el problema, debes declarar un registro SPF, eso lo haces en la zona de DNS, si no tienes uno local tuyo, lo haces en la zona de DNS donde compraste tu dominio Lee sobre el tema de registro

Re: [CentOS-es] Spoofing Postfix

Que tal Ricardo, no recuerdo ahora mismo lo que es un registro PTR, pero lo que necesitas es un SPF que es el que evita el spoofing, efectivamente en la página que mencionas puedes verivicar el funcionamiento del registro SPF, en la caja de búsqueda escribes tu dominio (dominio.com), y en el

[CentOS] CentOS-announce Digest, Vol 128, Issue 10

Send CentOS-announce mailing list submissions to centos-annou...@centos.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to

[CentOS-es] Spoofing Postfix

Señores Esperando que esté todo bien para todos ustedes quiero consultar lo siguiente y espero puedan orientarme. Estoy teniendo problemas con mi servidor de correo pero aún no entiendo como y por que ocurre y como solucionarlo. Estoy recibiendo rebotes de correos con direcciones como

Re: [CentOS-es] Spoofing Postfix

::Para comprobar el SPF tengo una pagina que te puede ser de ayuda: http://spf.salman.es/ >> *** Fin del mensaje *** << Saludos Salvador Guzman Salman PSL Vigo, Galicia, España

Re: [CentOS-es] Spoofing Postfix

Estimados, Excelente. ya tengo el registro como corresponde de acuerdo a sus recomendaciones. Entiendo entonces que con esto se elimina el spoofing o disminuye?Ahora, contra que mas debería preocuparme. Muchas gracias a todos y Saludos Ricardo H. Aparicio > To: centos-es@centos.org > From:

Re: [CentOS-es] Spoofing Postfix

La experiencia que tengo en ese tema no es mucha, pero el tipo de ataque que te están lanzando se llama Backscatter. Revisa las instrucciones que tienes de salida en el archivo /etc/postfix/main.cf, puesto que tuvimos que purgar todas las reglas (en el datacenter donde soy sysadmin precisamente

Re: [CentOS] Detecting empty office doc containing virus macro

On Wed, October 28, 2015 6:55 am, Gary Stainburn wrote: > We are receiving LOTS of emails that contain empty XLS or DOC documents > with > embedded virus macros. These are getting past SPAMASSASSIN, Clamav and > Kaspersky. Just a word of advise to everybody: stay away from Kaspersky (unless you

Re: [CentOS] Detecting empty office doc containing virus macro

Hi, Take look of http://www.cuckoosandbox.org -- Eero 2015-10-28 13:55 GMT+02:00 Gary Stainburn : > We are receiving LOTS of emails that contain empty XLS or DOC documents > with > embedded virus macros. These are getting past SPAMASSASSIN, Clamav and > Kaspersky. > > I'm

Re: [CentOS] Detecting empty office doc containing virus macro

and https://github.com/xme/cuckoomx -- Eero 2015-10-28 16:59 GMT+02:00 Eero Volotinen : > Hi, > > Take look of http://www.cuckoosandbox.org > > -- > Eero > > 2015-10-28 13:55 GMT+02:00 Gary Stainburn : > >> We are receiving LOTS of emails that contain

Re: [CentOS] OT Strange IP address on home network

Sounds like you have a host with a NIC that's configured for DHCP but either can't communicate with the DHCP server, or there are no free IPs for the DHCP server to give it. On Wed, Oct 28, 2015 at 10:12 AM, Jason Warr wrote: > It's a Zero Config IP address. Most likely a

[CentOS] OT Strange IP address on home network

Why does "arp -a" show IP address 169.254.192.123 on my 192.168.2.0 home network? I recall seeing this IP address somewhere, but don't remember where. -- Timothy Murphy gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin ___

Re: [CentOS] OT Strange IP address on home network

It's a Zero Config IP address. Most likely a host with zero config enabled, pretty much all Windows by default, was unable to get an IP from DHCP. On 10/28/2015 9:04 AM, Timothy Murphy wrote: Why does "arp -a" show IP address 169.254.192.123 on my 192.168.2.0 home network? I recall seeing

Re: [CentOS-virt] Libvirt enhancement requests

On Tue, Oct 27, 2015 at 05:19:16PM +, Nux! wrote: > To clarify my own request: > > RBD (for CEPH) support is available in the version bundled in RHEL 7.2 Beta, > so we'll have it in CentOS 7.2 (or whatever will be the identifying number). > > The hooks seems just like a matter of creating

Re: [CentOS-virt] kvm-qemu-ev in testing

On 10/07/2015 07:07 PM, Karanbir Singh wrote: hi, kvm-qemu-ev from virt7-kvm-common-release is now signed and available on buildlogs.centos.org for testing, the corresponding release file is available in the centos/7/extras/ location on buildlogs as well. Works here as a drop-in replacement

Re: [CentOS] Detecting empty office doc containing virus macro

I've had a look at this and a) it looks a little like over-kill for what I want, b) I haven't a clue how to use it in my EXIM environment c) from the VERY quick look I've taken I don't see how to use it to detect macros in office documents. I think I'm going to forget about the macros, and

Re: [CentOS-virt] Xen Doc Day: Guide to setting up bridging on CentOS 6 / 7

If you'd like to extend that a little bit, here's example configs on how to do LACP and vlan tagging on c6: host network-scripts # cat ifcfg-eth0 DEVICE=eth0 ONBOOT=yes USEERCTL=no BOOTPROTO=none IPV6INIT=no MTU=1500 MASTER=bond0 SLAVE=yes host network-scripts # cat ifcfg-eth1 DEVICE=eth1

Re: [CentOS-virt] Xen Doc Day: Guide to setting up bridging on CentOS 6 / 7

On Wed, Oct 28, 2015 at 5:14 PM, Nathan March wrote: > If you'd like to extend that a little bit, here's example configs on how to > do LACP and vlan tagging on c6: Hey Nathan, Thanks for the feedback. I meant the HOWTOs to be for a super-basic setup. I presume someone who

Re: [CentOS] RPM `requires` installation order

On Thu, 2015-10-29 at 11:56 +1100, Shyam S wrote: > I have tried `PreReq` tag as well, which has same behaviour as far as I can > tell. > > Is there any other means to accomplish my requirement? PreReq now has the same effect as Requires. In earlier versions it did what you want and I don't

Re: [CentOS-virt] kvm-qemu-ev in testing

On 10/28/2015 06:00 PM, Sandro Bonazzola wrote: On Wed, Oct 28, 2015 at 5:29 PM, Lamar Owen > wrote: In what repo will the '-ev' packages reside for update purposes? it will be in http://mirror.centos.org/centos/7/virt/x86_64/kvm-common/

[CentOS] C7: screensaver locks screen

Strange thing just began happening this past weekend with my Centos-7 netbook (using the MATE desktop, which may mean it's an EPEL problem...). the lock screen checkbox in the screensaver's UI is NOT checked. I've even used the dconf editor to uncheck ALL the boxes in the screensaver section

Re: [CentOS] Detecting empty office doc containing virus macro

On 28/10/15 11:55, Gary Stainburn wrote: > We are receiving LOTS of emails that contain empty XLS or DOC documents with > embedded virus macros. These are getting past SPAMASSASSIN, Clamav and > Kaspersky. > > I'm trying to write a filter for EXIM to block these emails but I need to > know

Re: [CentOS] C7: screensaver locks screen

On Wed, 28 Oct 2015 17:25:11 -0400 Fred Smith wrote: > I'm open to further suggestions, thanks in advance! A) What entry do you have under lock: in ~/.xscreensaver? B) Perhaps you could try deleting ~/.xscreensaver and allowing xscreensaver-demo to recreate it. -- MELVILLE THEATRE ~ Real D

Re: [CentOS] C7: screensaver locks screen

On Wed, Oct 28, 2015 at 03:47:50PM -0600, Frank Cox wrote: > On Wed, 28 Oct 2015 17:25:11 -0400 > Fred Smith wrote: > > > I'm open to further suggestions, thanks in advance! > > A) What entry do you have under lock: in ~/.xscreensaver? > > B) Perhaps you could try deleting ~/.xscreensaver and

Re: [CentOS-virt] kvm-qemu-ev in testing

May I ask what is the difference between the kvm-qemu package from Base CentOS 7 repo? Thanks, Eliezer On 08/10/2015 02:07, Karanbir Singh wrote: hi, kvm-qemu-ev from virt7-kvm-common-release is now signed and available on buildlogs.centos.org for testing, the corresponding release file is

Re: [CentOS-virt] kvm-qemu-ev in testing

Eliezer, >From what I could find on the internet, it's this: Live Snapshots Live Storage Migration Live Snapshot Merge Block I/O Throttling CEPH Enablement OpenvSwitch >From >https://rhsummit.files.wordpress.com/2014/04/sarathy_h_0945_red_hat_enterprise_virtualization_hypervisor.pdf I'd love

Re: [CentOS-virt] kvm-qemu-ev in testing

On Wed, Oct 28, 2015 at 5:29 PM, Lamar Owen wrote: > On 10/07/2015 07:07 PM, Karanbir Singh wrote: > >> hi, >> >> kvm-qemu-ev from virt7-kvm-common-release is now signed and available on >> buildlogs.centos.org for testing, the corresponding release file is >> available in the

Re: [CentOS] OT Strange IP address on home network

Mark Haney wrote: >> On 10/28/2015 9:04 AM, Timothy Murphy wrote: >> >>> Why does "arp -a" show IP address 169.254.192.123 >>> on my 192.168.2.0 home network? > Sounds like you have a host with a NIC that's configured for DHCP but > either can't communicate with the DHCP server, or there are no

Re: [CentOS] OT Strange IP address on home network

On 10/28/2015 2:59 PM, Timothy Murphy wrote: So I guess the strange IP address probably comes from some Lite-On device somewhere in my house - maybe on the server itself, an HP MicroServer. My HP Microserver N40L (the original version), the NIC is Broadcom, 02:00.0 Ethernet controller:

[CentOS] RPM `requires` installation order

Hello All, I'm a bit of newbie with rpm/yum, seeking the help from rpm/yum experts. Suppose I have an RPM package A which depends on package B. RPM A's spec has 'Requires:B' tag with 'autoprov' and 'autoreq' enabled. When I install RPM A on a 'centos 6.5' machine with 'RPM version 4.8.0',