Question about Exim

2004-05-21 Thread Phillip Hofmeister
Greetings everyone,

I set up an Exim mail filter file containing the following:

# Exim filter
if
  $h_X-Amavis-Hold contains " "
then
  freeze
endif

Is there a better condition that will test just for the existence of the
header?  I have tried def: without any luck.

If anyone knows how, that would be great, otherwise I'll still with what
I have.

PS. I am subscribed to neither of these list, please CC me in replies.

-- 
Phillip Hofmeister

PGP/GPG Key:
http://www.zionlth.org/~plhofmei/
wget -O - http://www.zionlth.org/~plhofmei/key.asc | gpg --import




Question about Exim

2004-05-21 Thread Phillip Hofmeister
Greetings everyone,

I set up an Exim mail filter file containing the following:

# Exim filter
if
  $h_X-Amavis-Hold contains " "
then
  freeze
endif

Is there a better condition that will test just for the existence of the
header?  I have tried def: without any luck.

If anyone knows how, that would be great, otherwise I'll still with what
I have.

PS. I am subscribed to neither of these list, please CC me in replies.

-- 
Phillip Hofmeister

PGP/GPG Key:
http://www.zionlth.org/~plhofmei/
wget -O - http://www.zionlth.org/~plhofmei/key.asc | gpg --import


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Mail relay attempts

2002-08-27 Thread Phillip Hofmeister
On Tue, 27 Aug 2002 at 11:32:53PM +1000, Craig Sanders wrote:
> PS: actually, the only other thing you could do is set firewall rules
> blocking inbound tcp port 25.  if your mail server is the primary MX for
> your domain then you would also need a secondary MX and open the
> firewall for just that machine.  spammers will still try - the only real
> difference is that you'll get entries in your kernel log rather than in
> your mail log.  if you do this, i recommend using iptables and DROP the
> packet rather than REJECT itthis wastes the spammer's time while the

To briefly add to what you can do you could email the contact responsible for 
the IP block in the InterNIC Whois DB.  SOMETIMES you might get a reply
You can also try [EMAIL PROTECTED]

-- 
Phil

PGP/GPG Key:
http://www.zionlth.org/~plhofmei/
wget -O - http://www.zionlth.org/~plhofmei/ | gpg --import

XP Source Code:

#include 
#include 
#include 
#include 
#include 
#include 
//os_over="Windows 2000"
os_ver="Windows XP"




Re: Email Virus Scanner

2002-08-12 Thread Phillip Hofmeister
On Mon, 12 Aug 2002 at 08:00:16PM -0500, Daniel J. Rychlik wrote:
> santizer.  Do you guys have any suggestions or even a preference over
> one or the other?
Sophos is considered by many in the security industry to be one of the best.  
BUT, it is commercial (in other words...green).  It supports MANY MANY MANY 
platforms and is basically an smtp pipe...

http://www.sophos.com

-- 
Phil

PGP/GPG Key:
http://www.zionlth.org/~plhofmei/
wget -O - http://www.zionlth.org/~plhofmei/ | gpg --import




Re: /root/ drwxr-xr-x?

2002-08-09 Thread Phillip Hofmeister
On Thu, 08 Aug 2002 at 05:35:55AM +1000, Jason Lim wrote:
Greets,

> Root files, IMHO, should never be publically listed. Since anything root
> does should be viewed as important and a security risk (making people very
> careful in what they do), it makes sense that the files root has, in
> general, will also be of high priority, important, and a security risk.
> 



This topic has been discussed in great and long detail on debian-security.  I 
do not
see any purpose in resurecting this topic.  Please read the archives for the
said list and try to cintribute something new.


Thanks,

-- 
Phil

PGP/GPG Key:
http://www.zionlth.org/~plhofmei/
wget -O - http://www.zionlth.org/~plhofmei/ | gpg --import




Re: Some more port closing questions

2002-07-30 Thread Phillip Hofmeister
On Tue, 30 Jul 2002 at 11:09:49AM -0600, Crawford Rainwater wrote:
> Thanks to all on the Portsentry issue I had
> a week ago.
> 
> Along those same lines, I have two ports I cannot
> figure out (even looking through the LDP) on how
> to close or shut down their related services.
> They are as follows:
> 
> 111/tcp sunrpc
> 111/udp sunrpc
I believe there is something in /etc/init.d/mountnfs* that deals with this 
(portmap)
> 113/tcp auth
Check in /etc/identd.conf
> 1024/tcp kdm
check your KDM config under /etc/X11/...
> 1024/udp unknown (I am guessing this is with the kdm one)
> 

-- 
Phil

PGP/GPG Key:
http://www.zionlth.org/~plhofmei/
wget -O - http://www.zionlth.org/~plhofmei/ | gpg --import