help with user quotas

2002-09-03 Thread David Wilk
Howdy folks,

I'm setting up a Deb woody server and want quota support on /home just
in case we need to get serious.  I have quota support in the kernel and
the following in /etc/fstab:

/dev/sda6   /home   ext3defaults,data=journal,usrquota  0
2

I run #quotacheck -c /home

and get this:
-rw---1 root staff7168 Aug 28 12:11 aquota.user

in /home.

However, when I run: #quotaon /home  I get this:

quotaon: using /home/quota.user on /dev/sda6 [/home]: Invalid argument
quotaon: Maybe create new quota files with quotacheck(8)?

hmmm.  ???

at first I thought it was due to quotaon not wanting to use version2
quota files, so I had quotacheck create one of those (quota.user) and i
got the exact same message.  I can't believe I can't get something this
simple to work.  any ideas?  ext3 is mounted data=journal, could that be
it?

thanks,
Dave

-- 
***
David Wilk
System Administrator
Community Internet Access, Inc.
[EMAIL PROTECTED]




SpamAssassin PHP-SA-MYSQL

2002-09-03 Thread Gene Grimm
I've tried searching web pages for assistance with this issue but have not
found anything relevant. While attempting to use the PHP-SA-MYSQL interface
to allow clients access to their options, I keep getting an error message
saying it is attempting to connect as '[EMAIL PROTECTED]' while the
configuration variables are set as follows:

$dbhost = "localhost";
$dbuser = "spamby";
$dbpass = "";
$dbname = "spamassassin";

I can manually connect to the database as '[EMAIL PROTECTED]' using the shell
'mysql' command, but the PHP script still attempts to connect as
'[EMAIL PROTECTED]'. I've restarted Apache several times without any success.




Re: disabling reverse map of addresses

2002-09-03 Thread Russell Coker
On Tue, 3 Sep 2002 19:04, José Alberto Guzmán Ramírez wrote:
>   Anyone knows how to disable reverse lookup of IP addresses in sshd et
> al? I've got a box connected to the net with a dynamic IP and dynamic
> dns service, and the wait time for ssh to present a prompt after not
> finding a reverse map for a given address is kind of annoying...

>From sshd(8):
 -u len  This option is used to specify the size of the field in the utmp
 structure that holds the remote host name.  If the resolved host
 name is longer than len, the dotted decimal value will be used
 instead.  This allows hosts with very long host names that over-
 flow this field to still be uniquely identified.  Specifying -u0
 indicates that only dotted decimal addresses should be put into
 the utmp file.  -u0 is also be used to prevent sshd from making
 DNS requests unless the authentication mechanism or configuration
 requires it.

-- 
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.




disabling reverse map of addresses

2002-09-03 Thread José Alberto Guzmán Ramírez
 Hi all

 Anyone knows how to disable reverse lookup of IP addresses in sshd et 
al? I've got a box connected to the net with a dynamic IP and dynamic 
dns service, and the wait time for ssh to present a prompt after not 
finding a reverse map for a given address is kind of annoying...

 Thanks
--
  José



Apache variables

2002-09-03 Thread abory
Hello,

I can't get the variables PATH_INFO and  PATH_TRANSLATED, the answer is
always null. Everything else in cgi scripts seems to work fine.

SERVER_SOFTWARE = Apache/1.3.26 Ben-SSL/1.48 (Unix) Debian GNU/Linux
PHP/4.1.2
 snip...
PATH_INFO =
PATH_TRANSLATED =
SCRIPT_NAME = /test/cgi-bin/getenv2.cgi
 snip...

I tried on several servers I use, whithout any difference, despite uncgi,
which should use these vars, work fine on those boxes.

Well, if any of you know something about my problem...

Thanks all

Alexis





sendmail server too slow

2002-09-03 Thread Davi Leal
Hi,


The problem is that connecting from 80.25.136.215 to the 194.224.7.3 SMTP
server takes 25 seconds to show the 220 line. Note the FORGED tag.

$ telnet 194.224.7.3 25
Trying 194.224.7.3...
Connected to 194.224.7.3.
Escape character is '^]'.
220 excalibur.ene.es ESMTP Sendmail 8.12.2/8.12.1/Debian -5; Tue, 3 Sep 2002
15:16:59 +0200; (No UCE/UBE) logging access from:
[80.25.136.215](FORGED)-80-25-136-215.uc.nombres.ttd.es [80.25.136.215] (may
be forged)
quit
221 2.0.0 excalibur.ene.es closing connection
Connection closed by foreign host.
$


The entry in the /var/log/syslog file in the SMTP server is:

Sep  3 15:17:41 excalibur sm-mta[27547]: g83DGxae027547:
80-25-136-215.uc.nombres.ttd.es [80.25.136.215] (may be forged) did not
issue MAIL/EXPN/VRFY/ETRN during connection to MTA


Note that connecting from another machine, located in the same LAN than the
SMTP server, shows the "220 ..." line immediately, and without the FORGED
tag.

$ telnet 194.224.7.3 25
Trying 194.224.7.3...
Connected to 194.224.7.3.
Escape character is '^]'.
220 excalibur.ene.es ESMTP Sendmail 8.12.2/8.12.1/Debian -5; Tue, 3 Sep 2002
15:44:53 +0200; (No UCE/UBE) logging access from:
rambo.ene.es(OK)[EMAIL PROTECTED] [194.224.7.2]
QUIT
221 2.0.0 excalibur.ene.es closing connection
Connection closed by foreign host.
$


I don't understand the 'FORGED' issue. Anyway, ... On the client machine, I
get the below information. Note that the hostname does not correlate with
the dns domain name. Any idea will be welcome.
$
$ host 80.25.136.215
Name: 80-25-136-215.uc.nombres.ttd.es
Address: 80.25.136.215
$
$ hostname
dIII
$
$ dnsdomainname
telefonica.net
$


Regards,
Davi Leal





Re: Spam Assassin

2002-09-03 Thread John Ackermann N8UR
I'm using Spamassassin, interfaced with exim to filter before delivery to 
local users.  It works really well -- it catches 40-50% of incoming mail 
(for about 7 users total) as spam, with a false-positive rate of way less 
than 1%.  I've seen a slight increase lately in spams that slip through, 
but typically my inbox gets three or four a day, which still isn't too bad. 
I dump all the suspected spam into a separate mailbox, which I check every 
couple of days by scanning the combination of subject line and sender. 
When I do that check, I may find one or two messages out of several hundred 
that I forward on as likely "real" email.

John
--On Tuesday, September 03, 2002 12:59 PM +0200 Craig <[EMAIL PROTECTED]> 
wrote:

Hi fellows
Wanted to get the general impression of how well Spam Assassin
works in eliminating Spam and if there are any other packages
we should be looking into.
..Craig
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]



John AckermannN8UR [EMAIL PROTECTED] http://www.febo.com
President, TAPR[EMAIL PROTECTED]http://www.tapr.org



Re: Bandwidth... compression... saving $$?

2002-09-03 Thread Donovan Baarda
On Tue, Sep 03, 2002 at 04:37:37AM +1000, Jason Lim wrote:
> Hi all,
> 
> If you live in Australia, i'm sure you know about the exorbant prices for
> broadband here. HK, on the other hand, provide unlimited bandwidth and
> fast connections.
> 
> I was wondering about this... okay, we know about mod_gzip for Apache, and
> i *think* it does proxy connections (through mod_proxy, the poor man's
> proxy compared to Squid). So one could go through the compressed proxy and
> in effect get more downloads.
> 
> However, I was wondering if there is a solid method to setup a link
> between a Linux or Windows or Mac box here in Australia, and have all data
> travel across a compressed tunnel of some sort.
> 
> I've been playing with "Zebedee - a simple, free, secure TCP and UDP
> tunnel program", which does compression, but it isn't very elegant. You
> have to setup a local port (eg. localhost:10100) and have it transparently
> redirect/tunnel over to the box in HK (eg. 202.200.111.101:80). As you can
> imagine, you'd have to setup one local port and one remote port link for
> each item, plus some software doesn't allow you to change the port, so in
> essense you're stuck with using whatever the software had hardwired in.
> 
> Any ideas on how this tunnelling could be made completely transparent (or
> as transparent as possible)?
> 
> I'm sure if this could be worked out, a lot of us here in Australia would
> be pretty happy :-)

have a look at rproxy... it does rsync style delta updates of http traffic.
This can buy you more than standard compression, because 90% of http is
uncacheable, and most of the volume is uncompressable images. The rsync
style delta updates "update" the uncacheable-but-unchanged images with
negligable traffic. 

You can setup an rproxy in Australia using an Asian rproxy parent, giving
good delta compression between the two. A decent proxy setup with rproxy for
relevant traffic might work out OK.

Unfortunately rproxy has not been updated for ages. I keep meaning to do
something in Python but never find the time.

For other traffic, a compressed tunnel would be pretty simple... just make
your tunnel to asia the default route. I'm not sure it would buy you much
other than latency though :-(

-- 
--
ABO: finger [EMAIL PROTECTED] for more info, including pgp key
--




Forward to Razor (Re: Spam Assassin)

2002-09-03 Thread Kjetil Kjernsmo
On Tuesday 03 September 2002 14:23, Andreas Rabus wrote:

> The thing i miss is a (more automagically) forward to razor.

Yeah, but one should be a bit careful about depending on any AI to 
forward to Razor. I've put up some troll boxes for that (including 
these addresses in web-pages, send them to Remove-lists, etc). Those go 
(will go, anyway) directly to Razor, as they will never receive legit 
email.

However, what I really miss is a pine-style pipe in KMail, so that I 
could pipe messages getting through the filter manually to Razor more 
easily. But I know the KMail folks are thinking about it. 

Best,

Kjetil
-- 
Kjetil Kjernsmo
Astrophysicist/IT Consultant/Skeptic/Ski-orienteer/Orienteer/Mountaineer
[EMAIL PROTECTED]  [EMAIL PROTECTED]  [EMAIL PROTECTED]
Homepage: http://www.kjetil.kjernsmo.net/




AW: Spam Assassin

2002-09-03 Thread Andreas Rabus


Hi,

use it since a few months with postfix on woody out of the box.
i got around 100 Spam hits for 30 Users in a week.
less than 1% false positives.
But still a spam get through. (1 to 5 mails per user and day) :/
At first i had to put some newsletter to the white list, but since then it
just sits there an filters

I noticed that any HTML Mails is a nearly sure hit...

The thing i miss is a (more automagically) forward to razor.

Won't miss it any more.

-Ursprüngliche Nachricht-
Von: martin f krafft [mailto:[EMAIL PROTECTED]
Gesendet: Dienstag, 3. September 2002 13:57
An: Debian-ISP
Betreff: Re: Spam Assassin


also sprach Kjetil Kjernsmo <[EMAIL PROTECTED]> [2002.09.03.1334 +0200]:
> I have looked into many too, and I've been a junkfilter user for many 
> years. I have also some experience with SpamBouncer. 
> SpamAssassin works excellently here, and would certainly recommend it as 
> *The* Anti-Spam software. 

I agree.

> If you're feeling adventurous, you should also have a look at the 
> unofficial Exim 4 debs with SpamAssassin that can bounce spam at SMTP 
> time, at  http://marc.merlins.org/linux/exim/sa.html
> I didn't feel that adventurous right now, but I will once I get my head 
> a bit more above water.

Is there anything like this going to happen for postfix?

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^."<*>"|tr "<*> mailto:"; [EMAIL PROTECTED]
 
"yhe so-called lessons of history are for the most part
 the rationalizations of the victors.
 history is written by the survivors."
 -- max lerner




Re: Spam Assassin

2002-09-03 Thread martin f krafft
also sprach Kjetil Kjernsmo <[EMAIL PROTECTED]> [2002.09.03.1334 +0200]:
> I have looked into many too, and I've been a junkfilter user for many 
> years. I have also some experience with SpamBouncer. 
> SpamAssassin works excellently here, and would certainly recommend it as 
> *The* Anti-Spam software. 

I agree.

> If you're feeling adventurous, you should also have a look at the 
> unofficial Exim 4 debs with SpamAssassin that can bounce spam at SMTP 
> time, at  http://marc.merlins.org/linux/exim/sa.html
> I didn't feel that adventurous right now, but I will once I get my head 
> a bit more above water.

Is there anything like this going to happen for postfix?

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^."<*>"|tr "<*> mailto:"; [EMAIL PROTECTED]
 
"yhe so-called lessons of history are for the most part
 the rationalizations of the victors.
 history is written by the survivors."
 -- max lerner


pgpBQxoJ2tNBs.pgp
Description: PGP signature


Re: Spam Assassin

2002-09-03 Thread Kjetil Kjernsmo
On Tuesday 03 September 2002 12:59, Craig wrote:
> Wanted to get the general impression of how well Spam Assassin
> works in eliminating Spam and if there are any other packages
> we should be looking into.

I have looked into many too, and I've been a junkfilter user for many 
years. I have also some experience with SpamBouncer. 
SpamAssassin works excellently here, and would certainly recommend it as 
*The* Anti-Spam software. 

If you're feeling adventurous, you should also have a look at the 
unofficial Exim 4 debs with SpamAssassin that can bounce spam at SMTP 
time, at  http://marc.merlins.org/linux/exim/sa.html
I didn't feel that adventurous right now, but I will once I get my head 
a bit more above water.

Best,

Kjetil
-- 
Kjetil Kjernsmo
Astrophysicist/IT Consultant/Skeptic/Ski-orienteer/Orienteer/Mountaineer
[EMAIL PROTECTED]  [EMAIL PROTECTED]  [EMAIL PROTECTED]
Homepage: http://www.kjetil.kjernsmo.net/




Spam Assassin

2002-09-03 Thread Craig
Hi fellows

Wanted to get the general impression of how well Spam Assassin
works in eliminating Spam and if there are any other packages
we should be looking into.

..Craig




Re: Bandwidth... compression... saving $$?

2002-09-03 Thread I. Forbes
Hello Jason 

On 3 Sep 2002 at 6:49, Jason Lim wrote:

> Lots of email... lots of mailing lists... i imagine that compressing
> emails (of which i get maybe 50-100 each day... a chunk of that is spam,
> but nonetheless it uses bandwidth) would yield very high compression
> rates.

We use uucp mail for dial-up mail servers. The mail is routed into 
our main server with smtp. We compress each file with gzip before 
dropping it in a uucp spool. Each dial-up server collects its mail 
via uucp, uncompresses with gzip and then feeds it on to exim for 
local delivery.

We handle 300 to 500 mB of this mail per day. I have never stopped to 
check what the compression ratio of incoming to outgoing e-mail is. 
However the outgoing volumes are significantly lower. Anti-spam and 
anti-virus stuff on the main server filters out quite a lot junk too.

How about getting yourself a server in HK. Set it up with uucp + 
gzip, and download it from your server in Australia. At least this is 
much simpler to setup than tunnels etc. The uucp is extremely solid - 
it never looses a byte of mail.

Another consideration though, is the ratio of local to international 
e-mail. We have a similar (probably worse) situation with monopoly 
pricing in South Africa. I have considered hosting our mail server 
overseas. But that would mean a lot of mail gets round tripped, from 
SA overseas and then back to SA. 

Regards

Ian
-
Ian Forbes ZSD
http://www.zsd.co.za
Office: +27 21 683-1388  Fax: +27 21 674-1106
Snail Mail: P.O. Box 46827, Glosderry, 7702, South Africa
-