Re: [OT] AW: Printing ?
Thanks to those who replied. I now have somewhere to start :) Marcel On Tue, 2002-09-10 at 16:16, Ralf Dreibrodt wrote: > Hi, > > > > Sorry i know this is off topic but dose anyone know where theres a good > > > HOW-TO on Seting up SAMBA as a print server ?? > > there is an online book from oreilly: > http://www.oreilly.com/catalog/samba/chapter/book/index.html > > Viele Gruesse > Ralf Dreibrodt > > -- > Mesos Telefon 49 221 9639263 > Wallstr. 123 Fax 49 221 9646649 > 51063 Koeln Mail [EMAIL PROTECTED] > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > >
Printing ?
Sorry i know this is off topic but dose anyone know where theres a good HOW-TO on Seting up SAMBA as a print server ?? Thanks Marcel
Sendmail forward to exchange
Hi, Can anyone tell me how to setup sendmail to forward all INCOMING mail to an exchange server ? I have a Debian firewall running send mail with an exchange server behind the fire wall on a private IP. I would like all mail to be MXed to the Debian box and then forwarded to the Exchange box. Thanks in advance ! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Sendmail forward to exchange
Hi, Can anyone tell me how to setup sendmail to forward all INCOMING mail to an exchange server ? I have a Debian firewall running send mail with an exchange server behind the fire wall on a private IP. I would like all mail to be MXed to the Debian box and then forwarded to the Exchange box. Thanks in advance ! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Net-acct
Has anyone got any scripts to get usefull per IP accounting info out of the net-acct log for a time period or know where i can get one ?? Cheers Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Net-acct
Has anyone got any scripts to get usefull per IP accounting info out of the net-acct log for a time period or know where i can get one ?? Cheers Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: NEOMAIL - as big kev in OZ would say, IM EXCITED !
Hi, Just wanted to make it clear the the email i sent about Neomail was purely to let other people know about a program that i thought was worth mentioning, it had nothing to do with Ernie Miller and was not intended to be SPAM. Im sorry if i have caused you problems Ernie this is the last thing i wanted to do. In future i will keep my discoveries to my self ! Marcel Ernie Miller wrote: Andrew, The NeoMail project's only member is me. I have nothing to do with this guy, and though I'm happy he's happy with NeoMail, this is clearly inappropriate behavior. I'm copying this mail to the perpetrator address as listed in your forward, so he understands that I don't encourage this type of behavior, but I don't have any affiliation with him. I'd have been plenty happy if NeoMail hadn't become as popular as it is, and would certainly not be advertising, as I can't really handle the NeoMail-related e-mail I receive now as it is. When you say "further damage," you imply my reputation is already damaged in the open-source community as-is, which I don't believe it to be -- unless someone were to mistake these mails as being originated by or condoned by me, and you are referring to this incident. Hence my response to the list, hopefully clearing my name since you've opted to submit the accusation to the list as well. Wait a second... upon rereading this mail I did in fact notice a mail in my inbox this morning from someone in Australia ranting about how much he liked NeoMail and that he had wasted money on a commercial solution prior to finding it. The mail is at home, but I'd wager this is the same guy. In any case, I'm sorry that he got a bit overexcited, and I hope everyone understands I had nothing to do with it. If you need anything further from me feel free to reply to this address. Thanks! Ernie Miller - Original Message - From: "Andrew Lau" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: "Debian-Security List" Sent: Friday, April 05, 2002 7:55 AM Subject: Re: NEOMAIL - as big kev in OZ would say, IM EXCITED ! Dear Ernie Miller, I'm forwarding you this piece of spam that was recently sent to debian-security mailing list. It is also archived at <http://lists.debian.org/debian-security/2002/debian-security-200204/msg0007 3.html>. Being unable to find a Marcel Welschbillig listed on your SourceForge project page, I have decided against forwarding this to SourceForge abuse staff in the present time seeing as I am unable to determine whether this spam was authourised or not by you anyone acting on behalf of the NeoMail project. However, this piece of spam has been previously listed on the Razor <http://razor.sourceforge.net> webiste as spam which would leave me to believe that this is not a one-off incident. Please take action to stop further spam if you do know this person or else it unsolicted advertising promoting your project will only further damage your reputation among the opensource community. Yours sincerely, Andrew "Netsnipe" Lau - Forwarded message from Marcel Welschbillig <[EMAIL PROTECTED]> - Received: from localhost ([127.0.0.1] ident=netsnipe) by espresso with esmtp (Exim 3.35 #1 (Debian)) id 16tNxs-0001v9-00 for <[EMAIL PROTECTED]>; Fri, 05 Apr 2002 17:16:52 +1000 Received: from pop3.iprimus.com.au [203.134.64.85] by localhost with IMAP (fetchmail-5.9.11) for [EMAIL PROTECTED] (single-drop); Fri, 05 Apr 2002 17:16:52 +1000 (EST) Received: from mx01.iprimus.com.au ([203.134.64.90]) by loc01.iprimus.com.au with Microsoft SMTPSVC(5.5.1877.647.64); Fri, 5 Apr 2002 11:58:04 +1000 Received: from murphy.debian.org ([65.125.64.134]) by mx01.iprimus.com.au with Microsoft SMTPSVC(5.0.2195.4617); Fri, 5 Apr 2002 11:58:03 +1000 Received: (qmail 15663 invoked by uid 38); 5 Apr 2002 01:56:55 - X-Envelope-Sender: [EMAIL PROTECTED] Received: (qmail 15618 invoked from network); 5 Apr 2002 01:56:52 - Received: from unknown (HELO vager2.comdek.net.au) ([EMAIL PROTECTED]) by murphy.debian.org with SMTP; 5 Apr 2002 01:56:52 - Received: from comdek.net.au ([EMAIL PROTECTED] [127.0.0.1]) by vager2.comdek.net.au (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id JAA03755 for ; Fri, 5 Apr 2002 09:42:12 +0800 X-Authentication-Warning: vager2.comdek.net.au: Host [EMAIL PROTECTED] [127.0.0.1] claimed to be comdek.net.au Message-ID: <[EMAIL PROTECTED]> Date: Fri, 05 Apr 2002 09:42:11 +0800 From: Marcel Welschbillig <[EMAIL PROTECTED]> User-Agent: Mozilla/5.0 (X11; U; Linux 2.4.4 i686; en-US; m18) Gecko/20001107 Netscape6/6.0 X-Accept-Language: en MIME-Version: 1.0 To: Debian-Security List Subject: NEOMAIL - as big kev in OZ would say, IM EXCITED ! Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Resent-Message-ID: <[EMAIL PROTECTED
Re: NEOMAIL - as big kev in OZ would say, IM EXCITED !
Hi, Just wanted to make it clear the the email i sent about Neomail was purely to let other people know about a program that i thought was worth mentioning, it had nothing to do with Ernie Miller and was not intended to be SPAM. Im sorry if i have caused you problems Ernie this is the last thing i wanted to do. In future i will keep my discoveries to my self ! Marcel Ernie Miller wrote: > Andrew, > > The NeoMail project's only member is me. I have nothing to do with this > guy, and though I'm happy he's happy with NeoMail, this is clearly > inappropriate behavior. I'm copying this mail to the perpetrator address as > listed in your forward, so he understands that I don't encourage this type > of behavior, but I don't have any affiliation with him. I'd have been > plenty happy if NeoMail hadn't become as popular as it is, and would > certainly not be advertising, as I can't really handle the NeoMail-related > e-mail I receive now as it is. > > When you say "further damage," you imply my reputation is already > damaged in the open-source community as-is, which I don't believe it to > be -- unless someone were to mistake these mails as being originated by or > condoned by me, and you are referring to this incident. Hence my response > to the list, hopefully clearing my name since you've opted to submit the > accusation to the list as well. > > Wait a second... upon rereading this mail I did in fact notice a mail in > my inbox this morning from someone in Australia ranting about how much he > liked NeoMail and that he had wasted money on a commercial solution prior to > finding it. The mail is at home, but I'd wager this is the same guy. In > any case, I'm sorry that he got a bit overexcited, and I hope everyone > understands I had nothing to do with it. > > If you need anything further from me feel free to reply to this address. > > Thanks! > > Ernie Miller > > > - Original Message - > From: "Andrew Lau" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Cc: "Debian-Security List" <[EMAIL PROTECTED]> > Sent: Friday, April 05, 2002 7:55 AM > Subject: Re: NEOMAIL - as big kev in OZ would say, IM EXCITED ! > > Dear Ernie Miller, > I'm forwarding you this piece of spam that was recently sent > to debian-security mailing list. It is also archived at > <http://lists.debian.org/debian-security/2002/debian-security-200204/msg0007 > 3.html>. Being > unable to find a Marcel Welschbillig listed on your SourceForge > project page, I have decided against forwarding this to SourceForge > abuse staff in the present time seeing as I am unable to determine > whether this spam was authourised or not by you anyone acting on > behalf of the NeoMail project. However, this piece of spam has been > previously listed on the Razor <http://razor.sourceforge.net> webiste > as spam which would leave me to believe that this is not a one-off > incident. Please take action to stop further spam if you do know this > person or else it unsolicted advertising promoting your project will > only further damage your reputation among the opensource community. > > Yours sincerely, > Andrew "Netsnipe" Lau > > - Forwarded message from Marcel Welschbillig > <[EMAIL PROTECTED]> - > > Received: from localhost ([127.0.0.1] ident=netsnipe) > by espresso with esmtp (Exim 3.35 #1 (Debian)) > id 16tNxs-0001v9-00 > for ; Fri, 05 Apr 2002 17:16:52 +1000 > Received: from pop3.iprimus.com.au [203.134.64.85] > by localhost with IMAP (fetchmail-5.9.11) > for netsnipe@localhost (single-drop); Fri, 05 Apr 2002 17:16:52 +1000 (EST) > Received: from mx01.iprimus.com.au ([203.134.64.90]) by loc01.iprimus.com.au > with Microsoft SMTPSVC(5.5.1877.647.64); > Fri, 5 Apr 2002 11:58:04 +1000 > Received: from murphy.debian.org ([65.125.64.134]) by mx01.iprimus.com.au > with Microsoft SMTPSVC(5.0.2195.4617); > Fri, 5 Apr 2002 11:58:03 +1000 > Received: (qmail 15663 invoked by uid 38); 5 Apr 2002 01:56:55 - > X-Envelope-Sender: [EMAIL PROTECTED] > Received: (qmail 15618 invoked from network); 5 Apr 2002 01:56:52 - > Received: from unknown (HELO vager2.comdek.net.au) ([EMAIL PROTECTED]) > by murphy.debian.org with SMTP; 5 Apr 2002 01:56:52 - > Received: from comdek.net.au (marcel@localhost [127.0.0.1]) > by vager2.comdek.net.au (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id > JAA03755 > for <[EMAIL PROTECTED]>; Fri, 5 Apr 2002 09:42:12 +0800 > X-Authentication-Warning: vager2.comdek.net.au: Host marcel@localhost > [127.0.0.1] claimed to be comdek.net.au > Message-ID: <[EMAIL PROTE
NEOMAIL - as big kev in OZ would say, IM EXCITED !
Hi, Sorry know this is off topic but I Just wanted everyone to know about NeoMail http://neomail.sourceforge.net Its a fully functional Webmail server that looks better and is more functional than many commercial servers and its FREE ! And easy to setup ! Know someone out there will be as excited about this program as i am, wish i would have known about it earlier. HAPPY LINUXING ! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
NEOMAIL - as big kev in OZ would say, IM EXCITED !
Hi, Sorry know this is off topic but I Just wanted everyone to know about NeoMail http://neomail.sourceforge.net Its a fully functional Webmail server that looks better and is more functional than many commercial servers and its FREE ! And easy to setup ! Know someone out there will be as excited about this program as i am, wish i would have known about it earlier. HAPPY LINUXING ! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
MS Front page extensions for Linux
Hi, Is there any known security issues with installing micro$oft Front Page extensions on a Debian Apache web server? I am reluctant to infect my nice Linux web server with micro$oft code. Thanks ! -- Regards, Marcel Welschbillig
MS Front page extensions for Linux
Hi, Is there any known security issues with installing micro$oft Front Page extensions on a Debian Apache web server? I am reluctant to infect my nice Linux web server with micro$oft code. Thanks ! -- Regards, Marcel Welschbillig -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: syslog messages
I have checked this and i am running the recommended version nfs-common_0.1.9.1-1, also i don't see any obvious signs of access. Dose this mean i don't need to worry about it or is there something else i should be doing ? Marcel Steve Mickeler wrote: Its an exploit attempt. See http://www.debian.org/security/2000/2719a and http://www.cert.org/advisories/CA-2000-17.html for more info On Thu, 21 Feb 2002, Marcel Welschbillig wrote: Hi, Im getting these strange entries in my syslog file. Can anyone shed some light on what this means ? Feb 21 14:03:35 jbeam Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname error for ^X ^X^Y^Y^Z^Z^[ ^[%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x%n\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 Feb 21 14:03:35 jbeam ^F/binF^D/shA0\210F^G\211v^L\215V^P\215N^L\2 11^K\200^A\200\177 Thanks in advance ! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] Todays root password is brought to you by /dev/random ..-. | Steve Mickeler * Network Operations | +-+ | Neptune Internet Services | `-' 1024D/ACB58D4F = 0227 164B D680 9E13 9168 AE28 843F 57D7 ACB5 8D4F
Re: syslog messages
I have checked this and i am running the recommended version nfs-common_0.1.9.1-1, also i don't see any obvious signs of access. Dose this mean i don't need to worry about it or is there something else i should be doing ? Marcel Steve Mickeler wrote: > Its an exploit attempt. > > See http://www.debian.org/security/2000/2719a and > http://www.cert.org/advisories/CA-2000-17.html for more info > > > On Thu, 21 Feb 2002, Marcel Welschbillig wrote: > > >> Hi, >> >> Im getting these strange entries in my syslog file. Can anyone shed some >> light on what this means ? >> >> >> Feb 21 14:03:35 jbeam >> Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together >> Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname error for >> ^X >> ^X^Y^Y^Z^Z^[ >> ^[%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x%n\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 >> Feb 21 14:03:35 jbeam >> ^F/binF^D/shA0\210F^G\211v^L\215V^P\215N^L\2 >> 11^K\200^A\200\177 >> >> >> Thanks in advance ! >> >> Marcel >> >> >> >> >> -- >> To UNSUBSCRIBE, email to [EMAIL PROTECTED] >> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] >> > > > > > Todays root password is brought to you by /dev/random > > ..-. > | Steve Mickeler * Network Operations | > +-+ > | Neptune Internet Services | > `-' > > 1024D/ACB58D4F = 0227 164B D680 9E13 9168 AE28 843F 57D7 ACB5 8D4F -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
syslog messages
Hi, Im getting these strange entries in my syslog file. Can anyone shed some light on what this means ? Feb 21 14:03:35 jbeam Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname error for ^X ^X^Y^Y^Z^Z^[ ^[%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x%n\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 Feb 21 14:03:35 jbeam ^F/binF^D/shA0\210F^G\211v^L\215V^P\215N^L\2 11^K\200^A\200\177 Thanks in advance ! Marcel
syslog messages
Hi, Im getting these strange entries in my syslog file. Can anyone shed some light on what this means ? Feb 21 14:03:35 jbeam Feb 21 14:03:35 jbeam syslogd: Cannot glue message parts together Feb 21 14:03:35 jbeam /sbin/rpc.statd[198]: gethostbyname error for ^X ^X^Y^Y^Z^Z^[ ^[%8x%8x%8x%8x%8x%8x%8x%8x%8x%236x%n%137x%n%10x%n%192x%n\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 \220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220 Feb 21 14:03:35 jbeam ^F/binF^D/shA0\210F^G\211v^L\215V^P\215N^L\2 11^K\200^A\200\177 Thanks in advance ! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Iptables not accounting for certain packets
Hi, Thanks to all who replied to my previous ip accounting question. I got iptables to account by using the following... /usr/local/sbin/iptables -A FORWARD -s 0.0.0.0/0 -d 202.65.74.116 -o eth0 /usr/local/sbin/iptables -A FORWARD -s 202.65.74.116 -d 0.0.0.0/0 -i eth0 this works fine accept that my accounting server is also a proxy server and internet traffic directed to the proxy server dose not get forwarded and hence is not accounted for. Having encountered this problem i thought easy, just account for INPUT and OUTPUT to that interface, i used /usr/local/sbin/iptables -A OUTPUT -s 0.0.0.0/0 -d 202.65.74.116 -o eth0 /usr/local/sbin/iptables -A INPUT -s 202.65.74.116 -d 0.0.0.0/0 -i eth0 now correct me if im wrong but this should give me accounting for all traffic going in eth 0 from 202.65.74.116 and going out eth 0 to 202.65.74.116 ?? What i found was that i got accounting for traffic that originated from the server ie) ping 202.65.74.116 from the proxy server but when i ping 202.65.74.116 from an other machine that is on a network on the other side of the server (server has two network cards with ip_forward) i get no accounting for that traffic. What's going wrong here ?? should my output rule not match all traffic going out eth0 to 202.65.74.116 even if it is coming in on eth1 getting routed through the box and going out eth 0 to 202.65.74.116 ? Any clarification would be muchly appreciated. Regards, Marcel
Iptables not accounting for certain packets
Hi, Thanks to all who replied to my previous ip accounting question. I got iptables to account by using the following... /usr/local/sbin/iptables -A FORWARD -s 0.0.0.0/0 -d 202.65.74.116 -o eth0 /usr/local/sbin/iptables -A FORWARD -s 202.65.74.116 -d 0.0.0.0/0 -i eth0 this works fine accept that my accounting server is also a proxy server and internet traffic directed to the proxy server dose not get forwarded and hence is not accounted for. Having encountered this problem i thought easy, just account for INPUT and OUTPUT to that interface, i used /usr/local/sbin/iptables -A OUTPUT -s 0.0.0.0/0 -d 202.65.74.116 -o eth0 /usr/local/sbin/iptables -A INPUT -s 202.65.74.116 -d 0.0.0.0/0 -i eth0 now correct me if im wrong but this should give me accounting for all traffic going in eth 0 from 202.65.74.116 and going out eth 0 to 202.65.74.116 ?? What i found was that i got accounting for traffic that originated from the server ie) ping 202.65.74.116 from the proxy server but when i ping 202.65.74.116 from an other machine that is on a network on the other side of the server (server has two network cards with ip_forward) i get no accounting for that traffic. What's going wrong here ?? should my output rule not match all traffic going out eth0 to 202.65.74.116 even if it is coming in on eth1 getting routed through the box and going out eth 0 to 202.65.74.116 ? Any clarification would be muchly appreciated. Regards, Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: per IP billing
I have ip tables running and i did a test with the -c flag but i get the following response. proxy:/home# iptables -A INPUT -s 10.10.1.31 -i eth0 -c ACCEPT iptables v1.2.4: -c requires packet and byte counter What am i missing ? where do i get a packet and byte counter ?? Marcel Antropov Anton wrote: The simplest way - is to LOG packets using IPTABLES. My friends from Internet-provider are doing so. Another way is to use proxy-servers (like SQUID). Know this is a bit off subject but dose anybody know any good programs to use for monitoring Megabytes per IP address. What i want to do is have a LAN and be able to get data on how many MB each host downloaded for billing purposes.
Re: per IP billing
I have ip tables running and i did a test with the -c flag but i get the following response. proxy:/home# iptables -A INPUT -s 10.10.1.31 -i eth0 -c ACCEPT iptables v1.2.4: -c requires packet and byte counter What am i missing ? where do i get a packet and byte counter ?? Marcel Antropov Anton wrote: > The simplest way - is to LOG packets using IPTABLES. > My friends from Internet-provider are doing so. > > Another way is to use proxy-servers (like SQUID). > > >> Know this is a bit off subject but dose anybody know any good programs >> to use for monitoring Megabytes per IP address. What i want to do is >> have a LAN and be able to get data on how many MB each host downloaded >> for billing purposes. >> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
per IP billing
Hi all ! Know this is a bit off subject but dose anybody know any good programs to use for monitoring Megabytes per IP address. What i want to do is have a LAN and be able to get data on how many MB each host downloaded for billing purposes. Any help much appreciated Marcel
per IP billing
Hi all ! Know this is a bit off subject but dose anybody know any good programs to use for monitoring Megabytes per IP address. What i want to do is have a LAN and be able to get data on how many MB each host downloaded for billing purposes. Any help much appreciated Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Hard Disk Organization
eim wrote: Two days ago I've lost all my Personal Data on my Second HDD, Personal Data like Photos, Images, Audio Stuff, Source Code, Mails: everything gone...! I had some Backups fortuneatly but most stuff is lost forever. Well, now I'm Ready to start my Personal Data Organization from the begining, I've a Debian SCSI Workstation with 2 x 8GB SCSI Drives, "sda" and "sdb". Until now my Data Organization was like this: HD0 - /dev/sda1 = / (Debian root paritition)7900 MB /dev/sda2 = swap(swap paritition) 100 MB - HD1 - /dev/sdb1 = /mnt/d (Personal Data) 8000 MB - My user home directory is in "/home/eim" on sda1 but most of my Real Important Files are in "/mnt/d" which is sdb1. So I've lost sdb1 and all my important data, but fortunately my home dir is still there ! My question is, has somebody any suggestions on how to organize personal data, maybe some Real Life examples in order to share opinions on a Secure and Safe Data Organization. I'm of course talking about a Work Station and not a Server for many different users. If anyone has some examples or suggestions I'm ready to share any ideas... Thanks for any help, Have a good time... Ivo Marino I use a nifty program called mirrordir at home, i have thousands of MP3's DIVX movies, programs documents 40Gig worth. I run mirror dir at midnight every night and it keeps a mirror of the working drive. The great thing is it only copies new stuff and is very efficient, also if a file gets deleted accidentally it is not lost and can be retrieved if it is done before midnight. Disk mirroring is good but i like the delay factor using mirrordir. Something to think about anyway ! Marcel
Re: Hard Disk Organization
eim wrote: > Two days ago I've lost all my Personal Data on my Second HDD, > Personal Data like Photos, Images, Audio Stuff, Source Code, > Mails: everything gone...! > > I had some Backups fortuneatly but most stuff is lost forever. > > Well, now I'm Ready to start my Personal Data Organization from > the begining, I've a Debian SCSI Workstation with 2 x 8GB SCSI > Drives, "sda" and "sdb". > > Until now my Data Organization was like this: > > HD0 > - > /dev/sda1 = / (Debian root paritition)7900 MB > /dev/sda2 = swap (swap paritition) 100 MB > - > > HD1 > - > /dev/sdb1 = /mnt/d(Personal Data) 8000 MB > - > > > My user home directory is in "/home/eim" on sda1 but most > of my Real Important Files are in "/mnt/d" which is sdb1. > > So I've lost sdb1 and all my important data, but fortunately > my home dir is still there ! > > My question is, has somebody any suggestions on how to > organize personal data, maybe some Real Life examples in > order to share opinions on a Secure and Safe Data Organization. > I'm of course talking about a Work Station and not a Server for > many different users. > > If anyone has some examples or suggestions I'm ready to > share any ideas... > > Thanks for any help, > Have a good time... > > Ivo Marino I use a nifty program called mirrordir at home, i have thousands of MP3's DIVX movies, programs documents 40Gig worth. I run mirror dir at midnight every night and it keeps a mirror of the working drive. The great thing is it only copies new stuff and is very efficient, also if a file gets deleted accidentally it is not lost and can be retrieved if it is done before midnight. Disk mirroring is good but i like the delay factor using mirrordir. Something to think about anyway ! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Multiple IP addresses
Quite obvious when you look at it (DUH!) Thanks for all who replied. Marcel Robert Davidson wrote: IP aliasing. Cya. Marcel Welschbillig wrote: Can any one tell me the kernel option to enable on 2.2.17 to be able to specify multiple ethernet addresses in the /etc/network/interfaces file. ie. eth0 eth0:1 eth0:2 .. on the same physical interface ? I know it works on the standard kernel but every time i compile my own kernel i lose the ability to do this. Thanks ! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- Regards, Marcel Welschbillig -- Inter-Network Engineer Comdek Limited 673 Murray Street West Perth WA 6005 Ph : (08)9214 5259 FAX: (08)9214 5201 -- The information contained in this e-mail is confidential and privileged. It is intended solely for the addressee. If you receive this e-mail by mistake please promptly inform us by reply e-mail or by telephoning the phone number listed above and then delete the e-mail and destroy any printed copy ---
Multiple IP addresses
Can any one tell me the kernel option to enable on 2.2.17 to be able to specify multiple ethernet addresses in the /etc/network/interfaces file. ie. eth0 eth0:1 eth0:2 .. on the same physical interface ? I know it works on the standard kernel but every time i compile my own kernel i lose the ability to do this. Thanks ! Marcel
Re: Multiple IP addresses
Quite obvious when you look at it (DUH!) Thanks for all who replied. Marcel Robert Davidson wrote: > IP aliasing. > > Cya. > > > Marcel Welschbillig wrote: > >> Can any one tell me the kernel option to enable on 2.2.17 to be able to >> specify multiple ethernet addresses in the /etc/network/interfaces file. >> ie. eth0 eth0:1 eth0:2 .. on the same physical interface ? >> >> I know it works on the standard kernel but every time i compile my own >> kernel i lose the ability to do this. >> >> Thanks ! >> >> Marcel >> >> -- >> To UNSUBSCRIBE, email to [EMAIL PROTECTED] >> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- Regards, Marcel Welschbillig -- Inter-Network Engineer Comdek Limited 673 Murray Street West Perth WA 6005 Ph : (08)9214 5259 FAX: (08)9214 5201 -- The information contained in this e-mail is confidential and privileged. It is intended solely for the addressee. If you receive this e-mail by mistake please promptly inform us by reply e-mail or by telephoning the phone number listed above and then delete the e-mail and destroy any printed copy --- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Multiple IP addresses
Can any one tell me the kernel option to enable on 2.2.17 to be able to specify multiple ethernet addresses in the /etc/network/interfaces file. ie. eth0 eth0:1 eth0:2 .. on the same physical interface ? I know it works on the standard kernel but every time i compile my own kernel i lose the ability to do this. Thanks ! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: open ports
Tobias, Are you using IP Masquerading ?? If you are you need to install a kernel module called ip_masq_icq for ICQ to work otherwise you will only be able to connect through the server and not directly i.e.. no file transfer or chat rooms but you will be able to message through the ICQ server. For full functionality you need the module. The module can be found on --> http://freshmeat.net/ ICQ uses port 5190 Hope this helps with at least one of your problems ! Marcel Tobias S. Hofer wrote: i use iptables for my personal firewall. for proper configuration i need some information about ports used by different services. not the lower one. i can read the /etc/services on my one:) but for the use with icq, i'm not sure if i've opened the right one (i don't think so because if got some problems, e.g. on file transfers) in addition: to be able to play yahoo games there also must be open some ports above 35000 i think... but which one? i wonna use some scripts to open and/or close needed ports dynamicaly..;) is there a paper available? thx @ll --
Re: open ports
Tobias, Are you using IP Masquerading ?? If you are you need to install a kernel module called ip_masq_icq for ICQ to work otherwise you will only be able to connect through the server and not directly i.e.. no file transfer or chat rooms but you will be able to message through the ICQ server. For full functionality you need the module. The module can be found on --> http://freshmeat.net/ ICQ uses port 5190 Hope this helps with at least one of your problems ! Marcel Tobias S. Hofer wrote: > i use iptables for my personal firewall. > for proper configuration i need some information > about ports used by different services. > > not the lower one. i can read the /etc/services > on my one:) > > but for the use with icq, i'm not sure if i've > opened the right one (i don't think so because > if got some problems, e.g. on file transfers) > > in addition: to be able to play yahoo games there > also must be open some ports above 35000 i think... > but which one? > > i wonna use some scripts to open and/or close > needed ports dynamicaly..;) > > is there a paper available? > > thx @ll -- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: listen on tcp port and log input ??
Thanks all for your input, I have tried netcat and it dose exactly what i want, tha data is just text so no probs ! Marcel Long live LINUX ! Malcolm Herbert wrote: On Wed, Sep 05, 2001 at 08:56:59AM +0800, Marcel Welschbillig wrote: |Dose anybody know of any programs i could use to open a port on a debian |box and log the data that comes in to a file ?? try netcat
Re: listen on tcp port and log input ??
Thanks all for your input, I have tried netcat and it dose exactly what i want, tha data is just text so no probs ! Marcel Long live LINUX ! Malcolm Herbert wrote: > On Wed, Sep 05, 2001 at 08:56:59AM +0800, Marcel Welschbillig wrote: > |Dose anybody know of any programs i could use to open a port on a debian > |box and log the data that comes in to a file ?? > > try netcat -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
listen on tcp port and log input ??
Dose anybody know of any programs i could use to open a port on a debian box and log the data that comes in to a file ?? What i want to do is have a CISCO router send data that it recieves on an AUX port to a tcp port on a linux machine and log the data to a file. The data will be PBX billing data from a remote site. Any clues would be great ! Marcel
listen on tcp port and log input ??
Dose anybody know of any programs i could use to open a port on a debian box and log the data that comes in to a file ?? What i want to do is have a CISCO router send data that it recieves on an AUX port to a tcp port on a linux machine and log the data to a file. The data will be PBX billing data from a remote site. Any clues would be great ! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
[Fwd: Re: Open SSL Certificate]
Just answering my own question incase it helps anyone, the following command did it for me ! openssl req -new -out cert.csr Too easy. PS Thanks Jeremy for puting me on to www.openssl.org Marcel Original Message Subject: Re: Open SSL Certificate Date: Tue, 28 Aug 2001 21:25:06 -0700 From: Jeremy B <[EMAIL PROTECTED]> To: Marcel Welschbillig <[EMAIL PROTECTED]> CC: debian-security References: <[EMAIL PROTECTED]> The OpenSSL web site (http://www.openssl.org) has some rather good documentation on how to generate the certificates and setting up a CA... Jeremy On Wed, Aug 29, 2001 at 12:09:20PM +0800, Marcel Welschbillig wrote: > Can anybody tell me how to create a Certificate Signature Request using > openssl ?? > > I have tried /etc/ssl# openssl req test > > But get the following error > > Using configuration from /usr/lib/ssl/openssl.cnf > unable to load X509 request > 857:error:02001002:system library:fopen:system > lib:bss_file.c:103:fopen('/root/. > oid','r') > 857:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:105: > 857:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:610: > > > <:o( > > Marcel > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED]
[Fwd: Re: Open SSL Certificate]
Just answering my own question incase it helps anyone, the following command did it for me ! openssl req -new -out cert.csr Too easy. PS Thanks Jeremy for puting me on to www.openssl.org Marcel Original Message Subject: Re: Open SSL Certificate Date: Tue, 28 Aug 2001 21:25:06 -0700 From: Jeremy B <[EMAIL PROTECTED]> To: Marcel Welschbillig <[EMAIL PROTECTED]> CC: debian-security <[EMAIL PROTECTED]> References: <[EMAIL PROTECTED]> The OpenSSL web site (http://www.openssl.org) has some rather good documentation on how to generate the certificates and setting up a CA... Jeremy On Wed, Aug 29, 2001 at 12:09:20PM +0800, Marcel Welschbillig wrote: > Can anybody tell me how to create a Certificate Signature Request using > openssl ?? > > I have tried /etc/ssl# openssl req test > > But get the following error > > Using configuration from /usr/lib/ssl/openssl.cnf > unable to load X509 request > 857:error:02001002:system library:fopen:system > lib:bss_file.c:103:fopen('/root/. > oid','r') > 857:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:105: > 857:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:610: > > > <:o( > > Marcel > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Open SSL Certificate
Can anybody tell me how to create a Certificate Signature Request using openssl ?? I have tried /etc/ssl# openssl req test But get the following error Using configuration from /usr/lib/ssl/openssl.cnf unable to load X509 request 857:error:02001002:system library:fopen:system lib:bss_file.c:103:fopen('/root/. oid','r') 857:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:105: 857:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:610: <:o( Marcel
Open SSL Certificate
Can anybody tell me how to create a Certificate Signature Request using openssl ?? I have tried /etc/ssl# openssl req test But get the following error Using configuration from /usr/lib/ssl/openssl.cnf unable to load X509 request 857:error:02001002:system library:fopen:system lib:bss_file.c:103:fopen('/root/. oid','r') 857:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:105: 857:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:610: <:o( Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]