Re: [OT] AW: Printing ?

2002-09-10 Thread Marcel Welschbillig
Thanks to those who replied. I now have somewhere to start :)

Marcel

On Tue, 2002-09-10 at 16:16, Ralf Dreibrodt wrote:
> Hi,
> 
> > > Sorry i know this is off topic but dose anyone know where theres a good
> > > HOW-TO on Seting up SAMBA as a print server ??
> 
> there is an online book from oreilly:
> http://www.oreilly.com/catalog/samba/chapter/book/index.html
> 
> Viele Gruesse
> Ralf Dreibrodt
> 
> -- 
> Mesos Telefon 49 221 9639263
> Wallstr. 123  Fax 49 221 9646649
> 51063 Koeln Mail [EMAIL PROTECTED]
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 




Printing ?

2002-09-09 Thread Marcel Welschbillig
Sorry i know this is off topic but dose anyone know where theres a good
HOW-TO on Seting up SAMBA as a print server ??

Thanks

Marcel



Sendmail forward to exchange

2002-05-13 Thread Marcel Welschbillig

Hi,

Can anyone tell me how to setup sendmail to forward all INCOMING mail to 
an exchange server ? I have a Debian firewall running send mail with an 
exchange server behind the fire wall on a private IP. I would like all 
mail to be MXed to the Debian box and then forwarded to the Exchange box.



Thanks in advance !

Marcel


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Sendmail forward to exchange

2002-05-13 Thread Marcel Welschbillig

Hi,

Can anyone tell me how to setup sendmail to forward all INCOMING mail to 
an exchange server ? I have a Debian firewall running send mail with an 
exchange server behind the fire wall on a private IP. I would like all 
mail to be MXed to the Debian box and then forwarded to the Exchange box.


Thanks in advance !

Marcel


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Net-acct

2002-04-30 Thread Marcel Welschbillig
Has anyone got any scripts to get usefull per IP accounting info out of 
the net-acct log for a time period or know where i can get one ??


Cheers

Marcel


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Net-acct

2002-04-29 Thread Marcel Welschbillig

Has anyone got any scripts to get usefull per IP accounting info out of 
the net-acct log for a time period or know where i can get one ??

Cheers

Marcel


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: NEOMAIL - as big kev in OZ would say, IM EXCITED !

2002-04-07 Thread Marcel Welschbillig

Hi,

Just wanted to make it clear the the email i sent about Neomail was 
purely to let other people know about a program that i thought was worth 
mentioning, it had nothing to do with Ernie Miller and was not intended 
to be SPAM.


Im sorry if i have caused you problems Ernie this is the last thing i 
wanted to do.


In future i will keep my discoveries to my self !

Marcel

Ernie Miller wrote:


Andrew,

The NeoMail project's only member is me.  I have nothing to do with this
guy, and though I'm happy he's happy with NeoMail, this is clearly
inappropriate behavior.  I'm copying this mail to the perpetrator address as
listed in your forward, so he understands that I don't encourage this type
of behavior, but I don't have any affiliation with him.  I'd have been
plenty happy if NeoMail hadn't become as popular as it is, and would
certainly not be advertising, as I can't really handle the NeoMail-related
e-mail I receive now as it is.

When you say "further damage," you imply my reputation is already
damaged in the open-source community as-is, which I don't believe it to
be -- unless someone were to mistake these mails as being originated by or
condoned by me, and you are referring to this incident.   Hence my response
to the list, hopefully clearing my name since you've opted to submit the
accusation to the list as well.

Wait a second... upon rereading this mail I did in fact notice a mail in
my inbox this morning from someone in Australia ranting about how much he
liked NeoMail and that he had wasted money on a commercial solution prior to
finding it.  The mail is at home, but I'd wager this is the same guy.  In
any case, I'm sorry that he got a bit overexcited, and I hope everyone
understands I had nothing to do with it.

If you need anything further from me feel free to reply to this address.

Thanks!

Ernie Miller


- Original Message -
From: "Andrew Lau" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: "Debian-Security List" 
Sent: Friday, April 05, 2002 7:55 AM
Subject: Re: NEOMAIL - as big kev in OZ would say, IM EXCITED !

Dear Ernie Miller,
 I'm forwarding you this piece of spam that was recently sent
to debian-security mailing list. It is also archived at
<http://lists.debian.org/debian-security/2002/debian-security-200204/msg0007
3.html>. Being
unable to find a Marcel Welschbillig listed on your SourceForge
project page, I have decided against forwarding this to SourceForge
abuse staff in the present time seeing as I am unable to determine
whether this spam was authourised or not by you anyone acting on
behalf of the NeoMail project. However, this piece of spam has been
previously listed on the Razor <http://razor.sourceforge.net> webiste
as spam which would leave me to believe that this is not a one-off
incident. Please take action to stop further spam if you do know this
person or else it unsolicted advertising promoting your project will
only further damage your reputation among the opensource community.

Yours sincerely,
Andrew "Netsnipe" Lau

- Forwarded message from Marcel Welschbillig
<[EMAIL PROTECTED]> -

Received: from localhost ([127.0.0.1] ident=netsnipe)
 by espresso with esmtp (Exim 3.35 #1 (Debian))
 id 16tNxs-0001v9-00
 for <[EMAIL PROTECTED]>; Fri, 05 Apr 2002 17:16:52 +1000
Received: from pop3.iprimus.com.au [203.134.64.85]
 by localhost with IMAP (fetchmail-5.9.11)
 for [EMAIL PROTECTED] (single-drop); Fri, 05 Apr 2002 17:16:52 +1000 (EST)
Received: from mx01.iprimus.com.au ([203.134.64.90]) by loc01.iprimus.com.au
with Microsoft SMTPSVC(5.5.1877.647.64);
  Fri, 5 Apr 2002 11:58:04 +1000
Received: from murphy.debian.org ([65.125.64.134]) by mx01.iprimus.com.au
with Microsoft SMTPSVC(5.0.2195.4617);
  Fri, 5 Apr 2002 11:58:03 +1000
Received: (qmail 15663 invoked by uid 38); 5 Apr 2002 01:56:55 -
X-Envelope-Sender: [EMAIL PROTECTED]
Received: (qmail 15618 invoked from network); 5 Apr 2002 01:56:52 -
Received: from unknown (HELO vager2.comdek.net.au) ([EMAIL PROTECTED])
  by murphy.debian.org with SMTP; 5 Apr 2002 01:56:52 -
Received: from comdek.net.au ([EMAIL PROTECTED] [127.0.0.1])
 by vager2.comdek.net.au (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id
JAA03755
 for ; Fri, 5 Apr 2002 09:42:12 +0800
X-Authentication-Warning: vager2.comdek.net.au: Host [EMAIL PROTECTED]
[127.0.0.1] claimed to be comdek.net.au
Message-ID: <[EMAIL PROTECTED]>
Date: Fri, 05 Apr 2002 09:42:11 +0800
From: Marcel Welschbillig <[EMAIL PROTECTED]>
User-Agent: Mozilla/5.0 (X11; U; Linux 2.4.4 i686; en-US; m18)
Gecko/20001107 Netscape6/6.0
X-Accept-Language: en
MIME-Version: 1.0
To: Debian-Security List 
Subject: NEOMAIL - as big kev in OZ would say, IM EXCITED !
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Resent-Message-ID: <[EMAIL PROTECTED

Re: NEOMAIL - as big kev in OZ would say, IM EXCITED !

2002-04-07 Thread Marcel Welschbillig

Hi,

Just wanted to make it clear the the email i sent about Neomail was 
purely to let other people know about a program that i thought was worth 
mentioning, it had nothing to do with Ernie Miller and was not intended 
to be SPAM.

Im sorry if i have caused you problems Ernie this is the last thing i 
wanted to do.

In future i will keep my discoveries to my self !

Marcel

Ernie Miller wrote:

> Andrew,
> 
> The NeoMail project's only member is me.  I have nothing to do with this
> guy, and though I'm happy he's happy with NeoMail, this is clearly
> inappropriate behavior.  I'm copying this mail to the perpetrator address as
> listed in your forward, so he understands that I don't encourage this type
> of behavior, but I don't have any affiliation with him.  I'd have been
> plenty happy if NeoMail hadn't become as popular as it is, and would
> certainly not be advertising, as I can't really handle the NeoMail-related
> e-mail I receive now as it is.
> 
> When you say "further damage," you imply my reputation is already
> damaged in the open-source community as-is, which I don't believe it to
> be -- unless someone were to mistake these mails as being originated by or
> condoned by me, and you are referring to this incident.   Hence my response
> to the list, hopefully clearing my name since you've opted to submit the
> accusation to the list as well.
> 
> Wait a second... upon rereading this mail I did in fact notice a mail in
> my inbox this morning from someone in Australia ranting about how much he
> liked NeoMail and that he had wasted money on a commercial solution prior to
> finding it.  The mail is at home, but I'd wager this is the same guy.  In
> any case, I'm sorry that he got a bit overexcited, and I hope everyone
> understands I had nothing to do with it.
> 
> If you need anything further from me feel free to reply to this address.
> 
> Thanks!
> 
> Ernie Miller
> 
> 
> - Original Message -
> From: "Andrew Lau" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Cc: "Debian-Security List" <[EMAIL PROTECTED]>
> Sent: Friday, April 05, 2002 7:55 AM
> Subject: Re: NEOMAIL - as big kev in OZ would say, IM EXCITED !
> 
> Dear Ernie Miller,
>  I'm forwarding you this piece of spam that was recently sent
> to debian-security mailing list. It is also archived at
> <http://lists.debian.org/debian-security/2002/debian-security-200204/msg0007
> 3.html>. Being
> unable to find a Marcel Welschbillig listed on your SourceForge
> project page, I have decided against forwarding this to SourceForge
> abuse staff in the present time seeing as I am unable to determine
> whether this spam was authourised or not by you anyone acting on
> behalf of the NeoMail project. However, this piece of spam has been
> previously listed on the Razor <http://razor.sourceforge.net> webiste
> as spam which would leave me to believe that this is not a one-off
> incident. Please take action to stop further spam if you do know this
> person or else it unsolicted advertising promoting your project will
> only further damage your reputation among the opensource community.
> 
> Yours sincerely,
> Andrew "Netsnipe" Lau
> 
> - Forwarded message from Marcel Welschbillig
> <[EMAIL PROTECTED]> -
> 
> Received: from localhost ([127.0.0.1] ident=netsnipe)
>  by espresso with esmtp (Exim 3.35 #1 (Debian))
>  id 16tNxs-0001v9-00
>  for ; Fri, 05 Apr 2002 17:16:52 +1000
> Received: from pop3.iprimus.com.au [203.134.64.85]
>  by localhost with IMAP (fetchmail-5.9.11)
>  for netsnipe@localhost (single-drop); Fri, 05 Apr 2002 17:16:52 +1000 (EST)
> Received: from mx01.iprimus.com.au ([203.134.64.90]) by loc01.iprimus.com.au
> with Microsoft SMTPSVC(5.5.1877.647.64);
>   Fri, 5 Apr 2002 11:58:04 +1000
> Received: from murphy.debian.org ([65.125.64.134]) by mx01.iprimus.com.au
> with Microsoft SMTPSVC(5.0.2195.4617);
>   Fri, 5 Apr 2002 11:58:03 +1000
> Received: (qmail 15663 invoked by uid 38); 5 Apr 2002 01:56:55 -
> X-Envelope-Sender: [EMAIL PROTECTED]
> Received: (qmail 15618 invoked from network); 5 Apr 2002 01:56:52 -
> Received: from unknown (HELO vager2.comdek.net.au) ([EMAIL PROTECTED])
>   by murphy.debian.org with SMTP; 5 Apr 2002 01:56:52 -
> Received: from comdek.net.au (marcel@localhost [127.0.0.1])
>  by vager2.comdek.net.au (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id
> JAA03755
>  for <[EMAIL PROTECTED]>; Fri, 5 Apr 2002 09:42:12 +0800
> X-Authentication-Warning: vager2.comdek.net.au: Host marcel@localhost
> [127.0.0.1] claimed to be comdek.net.au
> Message-ID: <[EMAIL PROTE

NEOMAIL - as big kev in OZ would say, IM EXCITED !

2002-04-04 Thread Marcel Welschbillig

Hi,

Sorry know this is off topic but

I Just wanted everyone to know about NeoMail

http://neomail.sourceforge.net

Its a fully functional Webmail server that looks better and is more 
functional than many commercial servers and its FREE ! And easy to setup !


Know someone out there will be as excited about this program as i am, 
wish i would have known about it earlier.


HAPPY LINUXING !

Marcel


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



NEOMAIL - as big kev in OZ would say, IM EXCITED !

2002-04-04 Thread Marcel Welschbillig

Hi,

Sorry know this is off topic but

I Just wanted everyone to know about NeoMail

http://neomail.sourceforge.net

Its a fully functional Webmail server that looks better and is more 
functional than many commercial servers and its FREE ! And easy to setup !

Know someone out there will be as excited about this program as i am, 
wish i would have known about it earlier.

HAPPY LINUXING !

Marcel


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




MS Front page extensions for Linux

2002-03-11 Thread Marcel Welschbillig

Hi,

Is there any known security issues with installing micro$oft Front Page 
extensions on a Debian Apache web server? I am reluctant to infect my 
nice Linux web server with micro$oft code.


Thanks !

--
Regards,

Marcel Welschbillig



MS Front page extensions for Linux

2002-03-11 Thread Marcel Welschbillig

Hi,

Is there any known security issues with installing micro$oft Front Page 
extensions on a Debian Apache web server? I am reluctant to infect my 
nice Linux web server with micro$oft code.

Thanks !

-- 
Regards,

Marcel Welschbillig


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: syslog messages

2002-02-20 Thread Marcel Welschbillig
I have checked this and i am running the recommended version 
nfs-common_0.1.9.1-1, also i don't see any obvious signs of access. Dose 
this mean i don't need to worry about it or is there something else i 
should be doing ?


Marcel

Steve Mickeler wrote:


Its an exploit attempt.

See http://www.debian.org/security/2000/2719a and 
http://www.cert.org/advisories/CA-2000-17.html for more info



On Thu, 21 Feb 2002, Marcel Welschbillig wrote:



Hi,

Im getting these strange entries in my syslog file. Can anyone shed some 
light on what this means ?



Feb 21 14:03:35 jbeam
Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together
Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname error for 
^X

^X^Y^Y^Z^Z^[
^[%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x%n\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
Feb 21 14:03:35 jbeam 
^F/binF^D/shA0\210F^G\211v^L\215V^P\215N^L\2

11^K\200^A\200\177


Thanks in advance !

Marcel




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]






Todays root password is brought to you by /dev/random

..-.
| Steve Mickeler * Network Operations |
+-+
| Neptune Internet Services   |
`-'

1024D/ACB58D4F = 0227 164B D680 9E13 9168  AE28 843F 57D7 ACB5 8D4F





Re: syslog messages

2002-02-20 Thread Marcel Welschbillig

I have checked this and i am running the recommended version 
nfs-common_0.1.9.1-1, also i don't see any obvious signs of access. Dose 
this mean i don't need to worry about it or is there something else i 
should be doing ?

Marcel

Steve Mickeler wrote:

> Its an exploit attempt.
> 
> See http://www.debian.org/security/2000/2719a and 
> http://www.cert.org/advisories/CA-2000-17.html for more info
> 
> 
> On Thu, 21 Feb 2002, Marcel Welschbillig wrote:
> 
> 
>> Hi,
>> 
>> Im getting these strange entries in my syslog file. Can anyone shed some 
>> light on what this means ?
>> 
>> 
>> Feb 21 14:03:35 jbeam
>> Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together
>> Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname error for 
>> ^X
>> ^X^Y^Y^Z^Z^[
>> ^[%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x%n\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
>> Feb 21 14:03:35 jbeam 
>> ^F/binF^D/shA0\210F^G\211v^L\215V^P\215N^L\2
>> 11^K\200^A\200\177
>> 
>> 
>> Thanks in advance !
>> 
>> Marcel
>> 
>> 
>> 
>> 
>> -- 
>> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
>> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>> 
> 
> 
> 
> 
> Todays root password is brought to you by /dev/random
> 
> ..-.
> | Steve Mickeler * Network Operations |
> +-+
> | Neptune Internet Services   |
> `-'
> 
> 1024D/ACB58D4F = 0227 164B D680 9E13 9168  AE28 843F 57D7 ACB5 8D4F



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




syslog messages

2002-02-20 Thread Marcel Welschbillig

Hi,

Im getting these strange entries in my syslog file. Can anyone shed some 
light on what this means ?



Feb 21 14:03:35 jbeam
Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together
Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname error for 
^X

^X^Y^Y^Z^Z^[
^[%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x%n\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
Feb 21 14:03:35 jbeam 
^F/binF^D/shA0\210F^G\211v^L\215V^P\215N^L\2

11^K\200^A\200\177


Thanks in advance !

Marcel





syslog messages

2002-02-20 Thread Marcel Welschbillig

Hi,

Im getting these strange entries in my syslog file. Can anyone shed some 
light on what this means ?


Feb 21 14:03:35 jbeam
Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together
Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname error for 
^X
^X^Y^Y^Z^Z^[
^[%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x%n\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220
Feb 21 14:03:35 jbeam 
^F/binF^D/shA0\210F^G\211v^L\215V^P\215N^L\2
11^K\200^A\200\177


Thanks in advance !

Marcel




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Iptables not accounting for certain packets

2001-12-12 Thread Marcel Welschbillig

Hi,

Thanks to all who replied to my previous ip accounting question.

I got iptables to account by using the following...

/usr/local/sbin/iptables -A FORWARD -s 0.0.0.0/0 -d 202.65.74.116 -o eth0

/usr/local/sbin/iptables -A FORWARD -s 202.65.74.116 -d 0.0.0.0/0 -i eth0

this works fine accept that my accounting server is also a proxy server 
and internet traffic directed to the proxy server dose not get forwarded 
and hence is not accounted for.


Having encountered this problem i thought easy, just account for INPUT 
and OUTPUT to that interface, i used 


/usr/local/sbin/iptables -A OUTPUT -s 0.0.0.0/0 -d 202.65.74.116 -o eth0
/usr/local/sbin/iptables -A INPUT -s 202.65.74.116 -d 0.0.0.0/0 -i eth0

now correct me if im wrong but this should give me accounting for all 
traffic going in eth 0 from 202.65.74.116 and going out eth 0 to 
202.65.74.116 ??


What i found was that i got accounting for traffic that originated from 
the server ie) ping 202.65.74.116 from the proxy server but when i ping 
202.65.74.116 from an other machine that is on a network on the other 
side of the server (server has two network cards with ip_forward) i get 
no accounting for that traffic.


What's going wrong here ??
should my output rule not match all traffic going out eth0 to 
202.65.74.116 even if it is coming in on eth1 getting routed through the 
box and going out eth 0 to 202.65.74.116 ?


Any clarification would be muchly appreciated.


Regards,

Marcel



Iptables not accounting for certain packets

2001-12-12 Thread Marcel Welschbillig

Hi,

Thanks to all who replied to my previous ip accounting question.

I got iptables to account by using the following...

/usr/local/sbin/iptables -A FORWARD -s 0.0.0.0/0 -d 202.65.74.116 -o eth0

/usr/local/sbin/iptables -A FORWARD -s 202.65.74.116 -d 0.0.0.0/0 -i eth0

this works fine accept that my accounting server is also a proxy server 
and internet traffic directed to the proxy server dose not get forwarded 
and hence is not accounted for.

Having encountered this problem i thought easy, just account for INPUT 
and OUTPUT to that interface, i used 

/usr/local/sbin/iptables -A OUTPUT -s 0.0.0.0/0 -d 202.65.74.116 -o eth0
/usr/local/sbin/iptables -A INPUT -s 202.65.74.116 -d 0.0.0.0/0 -i eth0

now correct me if im wrong but this should give me accounting for all 
traffic going in eth 0 from 202.65.74.116 and going out eth 0 to 
202.65.74.116 ??

What i found was that i got accounting for traffic that originated from 
the server ie) ping 202.65.74.116 from the proxy server but when i ping 
202.65.74.116 from an other machine that is on a network on the other 
side of the server (server has two network cards with ip_forward) i get 
no accounting for that traffic.

What's going wrong here ??
should my output rule not match all traffic going out eth0 to 
202.65.74.116 even if it is coming in on eth1 getting routed through the 
box and going out eth 0 to 202.65.74.116 ?

Any clarification would be muchly appreciated.


Regards,

Marcel


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: per IP billing

2001-12-05 Thread Marcel Welschbillig
I have ip tables running and i did a test with the -c flag but i get the 
following response.


proxy:/home# iptables -A INPUT -s 10.10.1.31 -i eth0 -c ACCEPT
iptables v1.2.4: -c requires packet and byte counter

What am i missing ? where do i get a packet and byte counter ??

Marcel

Antropov Anton wrote:


The simplest way - is to LOG packets using IPTABLES.
My friends from Internet-provider are doing so.

Another way is to use proxy-servers (like SQUID).


Know this is a bit off subject but dose anybody know any good programs 
to use for monitoring Megabytes per IP address. What i want to do is 
have a LAN and be able to get data on how many MB each host downloaded 
for billing purposes.







Re: per IP billing

2001-12-05 Thread Marcel Welschbillig

I have ip tables running and i did a test with the -c flag but i get the 
following response.

proxy:/home# iptables -A INPUT -s 10.10.1.31 -i eth0 -c ACCEPT
iptables v1.2.4: -c requires packet and byte counter

What am i missing ? where do i get a packet and byte counter ??

Marcel

Antropov Anton wrote:

> The simplest way - is to LOG packets using IPTABLES.
> My friends from Internet-provider are doing so.
> 
> Another way is to use proxy-servers (like SQUID).
> 
> 
>> Know this is a bit off subject but dose anybody know any good programs 
>> to use for monitoring Megabytes per IP address. What i want to do is 
>> have a LAN and be able to get data on how many MB each host downloaded 
>> for billing purposes.
>> 



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




per IP billing

2001-12-04 Thread Marcel Welschbillig

Hi all !

Know this is a bit off subject but dose anybody know any good programs 
to use for monitoring Megabytes per IP address. What i want to do is 
have a LAN and be able to get data on how many MB each host downloaded 
for billing purposes.


Any help much appreciated


Marcel




per IP billing

2001-12-04 Thread Marcel Welschbillig

Hi all !

Know this is a bit off subject but dose anybody know any good programs 
to use for monitoring Megabytes per IP address. What i want to do is 
have a LAN and be able to get data on how many MB each host downloaded 
for billing purposes.

Any help much appreciated


Marcel



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Hard Disk Organization

2001-11-09 Thread Marcel Welschbillig



eim wrote:


Two days ago I've lost all my Personal Data on my Second HDD,
Personal Data like Photos, Images, Audio Stuff, Source Code,
Mails: everything gone...!

I had some Backups fortuneatly but most stuff is lost forever.

Well, now I'm Ready to start my Personal Data Organization from
the begining, I've a Debian SCSI Workstation with 2 x 8GB SCSI
Drives, "sda" and "sdb".

Until now my Data Organization was like this:

HD0
-
/dev/sda1 = /   (Debian root paritition)7900 MB
/dev/sda2 = swap(swap paritition)   100 MB
-

HD1
-
/dev/sdb1 = /mnt/d  (Personal Data) 8000 MB
-


My user home directory is in "/home/eim" on sda1 but most
of my Real Important Files are in "/mnt/d" which is sdb1.

So I've lost sdb1 and all my important data, but fortunately 
my home dir is still there !


My question is, has somebody any suggestions on how to
organize personal data, maybe some Real Life examples in
order to share opinions on a Secure and Safe Data Organization.
I'm of course talking about a Work Station and not a Server for
many different users.

If anyone has some examples or suggestions I'm ready to
share any ideas...

Thanks for any help,
Have a good time...

Ivo Marino


I use a nifty program called mirrordir at home, i have thousands of 
MP3's DIVX movies, programs documents 40Gig worth. I run mirror dir at 
midnight every night and it keeps a mirror of the working drive. The 
great thing is it only copies new stuff and is very efficient, also if a 
file gets deleted accidentally it is not lost and can be retrieved if it 
is done before midnight. Disk mirroring is good but i like the delay 
factor using mirrordir.


Something to think about anyway !

Marcel



Re: Hard Disk Organization

2001-11-09 Thread Marcel Welschbillig



eim wrote:

> Two days ago I've lost all my Personal Data on my Second HDD,
> Personal Data like Photos, Images, Audio Stuff, Source Code,
> Mails: everything gone...!
> 
> I had some Backups fortuneatly but most stuff is lost forever.
> 
> Well, now I'm Ready to start my Personal Data Organization from
> the begining, I've a Debian SCSI Workstation with 2 x 8GB SCSI
> Drives, "sda" and "sdb".
> 
> Until now my Data Organization was like this:
> 
> HD0
> -
> /dev/sda1 = / (Debian root paritition)7900 MB
> /dev/sda2 = swap  (swap paritition)   100 MB
> -
> 
> HD1
> -
> /dev/sdb1 = /mnt/d(Personal Data) 8000 MB
> -
> 
> 
> My user home directory is in "/home/eim" on sda1 but most
> of my Real Important Files are in "/mnt/d" which is sdb1.
> 
> So I've lost sdb1 and all my important data, but fortunately 
> my home dir is still there !
> 
> My question is, has somebody any suggestions on how to
> organize personal data, maybe some Real Life examples in
> order to share opinions on a Secure and Safe Data Organization.
> I'm of course talking about a Work Station and not a Server for
> many different users.
> 
> If anyone has some examples or suggestions I'm ready to
> share any ideas...
> 
> Thanks for any help,
> Have a good time...
> 
> Ivo Marino

I use a nifty program called mirrordir at home, i have thousands of 
MP3's DIVX movies, programs documents 40Gig worth. I run mirror dir at 
midnight every night and it keeps a mirror of the working drive. The 
great thing is it only copies new stuff and is very efficient, also if a 
file gets deleted accidentally it is not lost and can be retrieved if it 
is done before midnight. Disk mirroring is good but i like the delay 
factor using mirrordir.

Something to think about anyway !

Marcel


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Multiple IP addresses

2001-10-23 Thread Marcel Welschbillig

Quite obvious when you look at it (DUH!)

Thanks for all who replied.

Marcel

Robert Davidson wrote:


IP aliasing.

Cya.


Marcel Welschbillig wrote:


Can any one tell me the kernel option to enable on 2.2.17 to be able to
specify multiple ethernet addresses in the /etc/network/interfaces file.
ie. eth0 eth0:1 eth0:2 .. on the same physical interface ?

I know it works on the standard kernel but every time i compile my own
kernel i lose the ability to do this.

Thanks !

Marcel

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



--
Regards,

Marcel Welschbillig
--
Inter-Network Engineer
Comdek Limited
673 Murray Street
West Perth WA 6005
Ph : (08)9214 5259
FAX: (08)9214 5201
--
The information contained in this e-mail is confidential and privileged. 
It is intended solely for the addressee. If you receive this e-mail by 
mistake please promptly inform us by reply e-mail or by telephoning the 
phone number listed above and then delete the e-mail and destroy any 
printed copy

---



Multiple IP addresses

2001-10-23 Thread Marcel Welschbillig


Can any one tell me the kernel option to enable on 2.2.17 to be able to 
specify multiple ethernet addresses in the /etc/network/interfaces file. 
ie. eth0 eth0:1 eth0:2 .. on the same physical interface ?


I know it works on the standard kernel but every time i compile my own 
kernel i lose the ability to do this.



Thanks !

Marcel



Re: Multiple IP addresses

2001-10-22 Thread Marcel Welschbillig

Quite obvious when you look at it (DUH!)

Thanks for all who replied.

Marcel

Robert Davidson wrote:

> IP aliasing.
> 
> Cya.
> 
> 
> Marcel Welschbillig wrote:
> 
>> Can any one tell me the kernel option to enable on 2.2.17 to be able to
>> specify multiple ethernet addresses in the /etc/network/interfaces file.
>> ie. eth0 eth0:1 eth0:2 .. on the same physical interface ?
>> 
>> I know it works on the standard kernel but every time i compile my own
>> kernel i lose the ability to do this.
>> 
>> Thanks !
>> 
>> Marcel
>> 
>> --
>> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
>> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


-- 
Regards,

Marcel Welschbillig
--
Inter-Network Engineer
Comdek Limited
673 Murray Street
West Perth WA 6005
Ph : (08)9214 5259
FAX: (08)9214 5201
--
The information contained in this e-mail is confidential and privileged. 
It is intended solely for the addressee. If you receive this e-mail by 
mistake please promptly inform us by reply e-mail or by telephoning the 
phone number listed above and then delete the e-mail and destroy any 
printed copy
---


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Multiple IP addresses

2001-10-22 Thread Marcel Welschbillig


Can any one tell me the kernel option to enable on 2.2.17 to be able to 
specify multiple ethernet addresses in the /etc/network/interfaces file. 
ie. eth0 eth0:1 eth0:2 .. on the same physical interface ?

I know it works on the standard kernel but every time i compile my own 
kernel i lose the ability to do this.


Thanks !

Marcel


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: open ports

2001-09-10 Thread Marcel Welschbillig

Tobias,

Are you using IP Masquerading ??

If you are you need to install a kernel module called ip_masq_icq for 
ICQ to work otherwise you will only be able to connect through the 
server and not directly i.e.. no file transfer or chat rooms but you 
will be able to message through the ICQ server. For full functionality 
you need the module.


The module can be found on --> http://freshmeat.net/

ICQ uses port 5190

Hope this helps with at least one of your problems !

Marcel



Tobias S. Hofer wrote:


i use iptables for my personal firewall.
for proper configuration i need some information
about ports used by different services.

not the lower one. i can read the /etc/services
on my one:)

but for the use with icq, i'm not sure if i've
opened the right one (i don't think so because
if got some problems, e.g. on file transfers)

in addition: to be able to play yahoo games there
also must be open some ports above 35000 i think...
but which one?

i wonna use some scripts to open and/or close
needed ports dynamicaly..;)

is there a paper available?

thx @ll



--



Re: open ports

2001-09-10 Thread Marcel Welschbillig

Tobias,

Are you using IP Masquerading ??

If you are you need to install a kernel module called ip_masq_icq for 
ICQ to work otherwise you will only be able to connect through the 
server and not directly i.e.. no file transfer or chat rooms but you 
will be able to message through the ICQ server. For full functionality 
you need the module.

The module can be found on --> http://freshmeat.net/

ICQ uses port 5190

Hope this helps with at least one of your problems !

Marcel



Tobias S. Hofer wrote:

> i use iptables for my personal firewall.
> for proper configuration i need some information
> about ports used by different services.
> 
> not the lower one. i can read the /etc/services
> on my one:)
> 
> but for the use with icq, i'm not sure if i've
> opened the right one (i don't think so because
> if got some problems, e.g. on file transfers)
> 
> in addition: to be able to play yahoo games there
> also must be open some ports above 35000 i think...
> but which one?
> 
> i wonna use some scripts to open and/or close
> needed ports dynamicaly..;)
> 
> is there a paper available?
> 
> thx @ll


--


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: listen on tcp port and log input ??

2001-09-05 Thread Marcel Welschbillig
Thanks all for your input, I have tried netcat and it dose exactly what 
i want, tha data is just text so no probs !


Marcel

Long live LINUX !

Malcolm Herbert wrote:


On Wed, Sep 05, 2001 at 08:56:59AM +0800, Marcel Welschbillig wrote:
|Dose anybody know of any programs i could use to open a port on a debian 
|box and log the data that comes in to a file ??


try netcat





Re: listen on tcp port and log input ??

2001-09-05 Thread Marcel Welschbillig

Thanks all for your input, I have tried netcat and it dose exactly what 
i want, tha data is just text so no probs !

Marcel

Long live LINUX !

Malcolm Herbert wrote:

> On Wed, Sep 05, 2001 at 08:56:59AM +0800, Marcel Welschbillig wrote:
> |Dose anybody know of any programs i could use to open a port on a debian 
> |box and log the data that comes in to a file ??
> 
> try netcat



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




listen on tcp port and log input ??

2001-09-04 Thread Marcel Welschbillig
Dose anybody know of any programs i could use to open a port on a debian 
box and log the data that comes in to a file ??


What i want to do is have a CISCO router send data that it recieves on 
an AUX port to a tcp port on a linux machine and log the data to a file. 
The data will be PBX billing data from a remote site.


Any clues would be great !

Marcel



listen on tcp port and log input ??

2001-09-04 Thread Marcel Welschbillig

Dose anybody know of any programs i could use to open a port on a debian 
box and log the data that comes in to a file ??

What i want to do is have a CISCO router send data that it recieves on 
an AUX port to a tcp port on a linux machine and log the data to a file. 
The data will be PBX billing data from a remote site.

Any clues would be great !

Marcel


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




[Fwd: Re: Open SSL Certificate]

2001-08-29 Thread Marcel Welschbillig
Just answering my own question incase it helps anyone, the following 
command did it for me !


openssl req -new -out cert.csr

Too easy.

PS Thanks Jeremy for puting me on to www.openssl.org


Marcel


 Original Message 
Subject: Re: Open SSL Certificate
Date: Tue, 28 Aug 2001 21:25:06 -0700
From: Jeremy B <[EMAIL PROTECTED]>
To: Marcel Welschbillig <[EMAIL PROTECTED]>
CC: debian-security 
References: <[EMAIL PROTECTED]>

The OpenSSL web site (http://www.openssl.org) has some rather good
documentation on how to generate the certificates and setting up a CA...

Jeremy

On Wed, Aug 29, 2001 at 12:09:20PM +0800, Marcel Welschbillig wrote:
> Can anybody tell me how to create a Certificate Signature Request using
> openssl ??
>
> I have tried /etc/ssl# openssl req  test
>
> But get the following error
>
> Using configuration from /usr/lib/ssl/openssl.cnf
> unable to load X509 request
> 857:error:02001002:system library:fopen:system
> lib:bss_file.c:103:fopen('/root/.
> oid','r')
> 857:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:105:
> 857:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:610:
>
>
> <:o(
>
> Marcel
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]





[Fwd: Re: Open SSL Certificate]

2001-08-28 Thread Marcel Welschbillig

Just answering my own question incase it helps anyone, the following 
command did it for me !

openssl req -new -out cert.csr

Too easy.

PS Thanks Jeremy for puting me on to www.openssl.org


Marcel


 Original Message 
Subject: Re: Open SSL Certificate
Date: Tue, 28 Aug 2001 21:25:06 -0700
From: Jeremy B <[EMAIL PROTECTED]>
To: Marcel Welschbillig <[EMAIL PROTECTED]>
CC: debian-security <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>

The OpenSSL web site (http://www.openssl.org) has some rather good
documentation on how to generate the certificates and setting up a CA...

Jeremy

On Wed, Aug 29, 2001 at 12:09:20PM +0800, Marcel Welschbillig wrote:
 > Can anybody tell me how to create a Certificate Signature Request using
 > openssl ??
 >
 > I have tried /etc/ssl# openssl req  test
 >
 > But get the following error
 >
 > Using configuration from /usr/lib/ssl/openssl.cnf
 > unable to load X509 request
 > 857:error:02001002:system library:fopen:system
 > lib:bss_file.c:103:fopen('/root/.
 > oid','r')
 > 857:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:105:
 > 857:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:610:
 >
 >
 > <:o(
 >
 > Marcel
 >
 >
 > --
 > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 > with a subject of "unsubscribe". Trouble? Contact
 > [EMAIL PROTECTED]




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Open SSL Certificate

2001-08-28 Thread Marcel Welschbillig
Can anybody tell me how to create a Certificate Signature Request using 
openssl ??


I have tried /etc/ssl# openssl req  test

But get the following error

Using configuration from /usr/lib/ssl/openssl.cnf
unable to load X509 request
857:error:02001002:system library:fopen:system 
lib:bss_file.c:103:fopen('/root/.

oid','r')
857:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:105:
857:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:610:


<:o(

Marcel



Open SSL Certificate

2001-08-28 Thread Marcel Welschbillig

Can anybody tell me how to create a Certificate Signature Request using 
openssl ??

I have tried /etc/ssl# openssl req  test

But get the following error

Using configuration from /usr/lib/ssl/openssl.cnf
unable to load X509 request
857:error:02001002:system library:fopen:system 
lib:bss_file.c:103:fopen('/root/.
oid','r')
857:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:105:
857:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:610:


<:o(

Marcel


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]