Apache log rotation changes user permission on their log files

2002-03-01 Thread Keith Elder
When the weekly apache log rotation occurs, the virtual accounts get
their log files owned by www-data.  Because of this, the users do not
have access to their log files and so when webalizer runs it doesn't
have permission to view the logs.  Anyone know how to get around this
without having to write some script?

K.

###
  Keith Elder
  Email: [EMAIL PROTECTED]  AIM: ZZorKKa  YIM: keitheld 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is possible!"
###




Apache log rotation changes user permission on their log files

2002-03-01 Thread Keith Elder

When the weekly apache log rotation occurs, the virtual accounts get
their log files owned by www-data.  Because of this, the users do not
have access to their log files and so when webalizer runs it doesn't
have permission to view the logs.  Anyone know how to get around this
without having to write some script?

K.

###
  Keith Elder
  Email: [EMAIL PROTECTED]  AIM: ZZorKKa  YIM: keitheld   
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is possible!"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Linux Virtual Server question(s)

2002-02-17 Thread Keith Elder
Greetings,

I am in need of adding more servers for redundancy sake as well
performance.  I have beeen looking at using the Linux Virtual Server
project for load balancing and redundacy of accounts.  I thought I would
see if anyone on the list is using LVS, has any thoughts or would like
to recommend something better.  

The main things I am looking for are:

* easy to add new nodes
* easy to manage user accounts
* new nodes being added don't have to be hardware specific
* load balancing and some fault tolerance

I look forward to hearing what the list recommends.  If you are
currently using LVS, I would be very interested as to how you went about
setting things up.

Thank you,

Keith

###
  Keith Elder
  Email: [EMAIL PROTECTED]  AIM: ZZorKKa  YIM: keitheld   
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is possible!"
###




Linux Virtual Server question(s)

2002-02-17 Thread Keith Elder

Greetings,

I am in need of adding more servers for redundancy sake as well
performance.  I have beeen looking at using the Linux Virtual Server
project for load balancing and redundacy of accounts.  I thought I would
see if anyone on the list is using LVS, has any thoughts or would like
to recommend something better.  

The main things I am looking for are:

* easy to add new nodes
* easy to manage user accounts
* new nodes being added don't have to be hardware specific
* load balancing and some fault tolerance

I look forward to hearing what the list recommends.  If you are
currently using LVS, I would be very interested as to how you went about
setting things up.

Thank you,

Keith

###
  Keith Elder
  Email: [EMAIL PROTECTED]  AIM: ZZorKKa  YIM: keitheld   
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is possible!"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Apache cgi-bin for users

2002-01-03 Thread Keith Elder
Thanks Marcel,

Let me restate what it was I was asking just to clarify my situation.
If anyone has any input, by all means annie up.

What I am trying to do is setup the server so users in /home/*/ can
execute CGI programs on their personal web pages on this particular machine.  I 
found a reference in the apache admin guide I have and the apache site which 
say to put the following in the httpd.conf:


Options ExecCGI
Addhandler cgi-script .cgi .pl


I have done that, but I still cannot make the following work:

http://yourdomain.com/~username/cgi-bin/test.cgi

When this page is run, I get "premature end of headers" in the error.log
file.  I thought this would be fairly simple but it is turning out to be
a headache.

Anything else I can try?

Keith


* Marcel Hicking ([EMAIL PROTECTED]) wrote:
> From: "Marcel Hicking" <[EMAIL PROTECTED]>
> To: debian-isp@lists.debian.org
> Date: Thu, 3 Jan 2002 19:08:32 +0100
> Subject: Re: Apache cgi-bin for users
> Reply-to: [EMAIL PROTECTED]
> X-mailer: Pegasus Mail for Win32 (v3.12c)
> 
> ScriptAlias /cgi-bin/ /path/to/customers/cgi-bin/
> 
> See
> http://httpd.apache.org/docs/mod/mod_alias.html#scriptalias
> 
> Please make really(!) sure what security implications it
> has to allow not trustworthy people (customers ;-) to run
> programms on _your_ server. Hint: Look for cgi-wrap and
> changeroot.
> 
> http://httpd.apache.org/docs-2.0/misc/security_tips.html
> http://httpd.apache.org/docs-2.0/suexec.html
>  or better
> http://wwwcgi.umr.edu/~cgiwrap/
> 
> Cheers,
> Marcel
> 
> 
> Keith Elder <[EMAIL PROTECTED]> 31 Dec 2001, at 17:31:
> 
> > Greetings and Happy New Year!
> >
> > I am trying to enable cgi-bin on user directories.  I found
> > the following lines on the apache.org site, put them in, but
> > they didn't work:
> >
> > 
> > Options ExecCGI
> >  SetHandler cgi-script
> > 
> >
> >
> > Any other suggestions as to how to setup cgi-bin directories
> > for user accounts?
> >
> >
> > Thanks,
> >
> > Keith
> >
> > ###
> >   Keith Elder
> >Email: [EMAIL PROTECTED]
> > Phone: 1-734-507-1438
> >  Text Messaging (145 characters): [EMAIL PROTECTED]
> > Web: http://www.zorka.com (Howto's, News, and hosting!)
> >
> >  "With enough memory and hard drive space
> >anything in life is possible!"
> > ###
> >
> >
> > --
> > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > with a subject of "unsubscribe". Trouble? Contact
> > [EMAIL PROTECTED]
> >
> 
> 
> --
>__
>  .´  `.
>  : :' !  Enjoy
>  `. `´  Debian/GNU Linux
>`-
> 
> 
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is possible!"
###




Re: Apache cgi-bin for users

2002-01-03 Thread Keith Elder

Thanks Marcel,

Let me restate what it was I was asking just to clarify my situation.
If anyone has any input, by all means annie up.

What I am trying to do is setup the server so users in /home/*/ can
execute CGI programs on their personal web pages on this particular machine.  I found 
a reference in the apache admin guide I have and the apache site which say to put the 
following in the httpd.conf:


Options ExecCGI
Addhandler cgi-script .cgi .pl


I have done that, but I still cannot make the following work:

http://yourdomain.com/~username/cgi-bin/test.cgi

When this page is run, I get "premature end of headers" in the error.log
file.  I thought this would be fairly simple but it is turning out to be
a headache.

Anything else I can try?

Keith


* Marcel Hicking ([EMAIL PROTECTED]) wrote:
> From: "Marcel Hicking" <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Date: Thu, 3 Jan 2002 19:08:32 +0100
> Subject: Re: Apache cgi-bin for users
> Reply-to: [EMAIL PROTECTED]
> X-mailer: Pegasus Mail for Win32 (v3.12c)
> 
> ScriptAlias /cgi-bin/ /path/to/customers/cgi-bin/
> 
> See
> http://httpd.apache.org/docs/mod/mod_alias.html#scriptalias
> 
> Please make really(!) sure what security implications it
> has to allow not trustworthy people (customers ;-) to run
> programms on _your_ server. Hint: Look for cgi-wrap and
> changeroot.
> 
> http://httpd.apache.org/docs-2.0/misc/security_tips.html
> http://httpd.apache.org/docs-2.0/suexec.html
>  or better
> http://wwwcgi.umr.edu/~cgiwrap/
> 
> Cheers,
> Marcel
> 
> 
> Keith Elder <[EMAIL PROTECTED]> 31 Dec 2001, at 17:31:
> 
> > Greetings and Happy New Year!
> >
> > I am trying to enable cgi-bin on user directories.  I found
> > the following lines on the apache.org site, put them in, but
> > they didn't work:
> >
> > 
> > Options ExecCGI
> >  SetHandler cgi-script
> > 
> >
> >
> > Any other suggestions as to how to setup cgi-bin directories
> > for user accounts?
> >
> >
> > Thanks,
> >
> > Keith
> >
> > ###
> >   Keith Elder
> >Email: [EMAIL PROTECTED]
> > Phone: 1-734-507-1438
> >  Text Messaging (145 characters): [EMAIL PROTECTED]
> > Web: http://www.zorka.com (Howto's, News, and hosting!)
> >
> >  "With enough memory and hard drive space
> >anything in life is possible!"
> > ###
> >
> >
> > --
> > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > with a subject of "unsubscribe". Trouble? Contact
> > [EMAIL PROTECTED]
> >
> 
> 
> --
>__
>  .´  `.
>  : :' !  Enjoy
>  `. `´  Debian/GNU Linux
>`-
> 
> 
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is possible!"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Best way to duplicate HDs

2002-01-01 Thread Keith Elder
This brings up a  question. How do you rsync something but keep the
ownership and permissions the same.  I am pulling data off site nightly
and that works, but the permissions are all screwed up.

Keith

* Christian Jaeger ([EMAIL PROTECTED]) wrote:
> Date: Tue, 1 Jan 2002 04:24:21 +0100
> To: "Jason Lim" <[EMAIL PROTECTED]>, 
> From: Christian Jaeger <[EMAIL PROTECTED]>
> Subject: Re: Best way to duplicate HDs
> 
> Use cpbk or even better rsync (cpbk is problematic with large 
> filesystems because it takes much memory to hold the tree info - 
> rsync does the same with less memory needs). They (allow to) only 
> copy the changed parts of the fs and keep old versions of altered 
> files.
> 
> chj.
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact 
> [EMAIL PROTECTED]


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is possible!"
###




Re: Best way to duplicate HDs

2002-01-01 Thread Keith Elder

This brings up a  question. How do you rsync something but keep the
ownership and permissions the same.  I am pulling data off site nightly
and that works, but the permissions are all screwed up.

Keith

* Christian Jaeger ([EMAIL PROTECTED]) wrote:
> Date: Tue, 1 Jan 2002 04:24:21 +0100
> To: "Jason Lim" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
> From: Christian Jaeger <[EMAIL PROTECTED]>
> Subject: Re: Best way to duplicate HDs
> 
> Use cpbk or even better rsync (cpbk is problematic with large 
> filesystems because it takes much memory to hold the tree info - 
> rsync does the same with less memory needs). They (allow to) only 
> copy the changed parts of the fs and keep old versions of altered 
> files.
> 
> chj.
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact 
> [EMAIL PROTECTED]


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is possible!"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Apache cgi-bin for users

2001-12-31 Thread Keith Elder
Greetings and Happy New Year!

I am trying to enable cgi-bin on user directories.  I found the
following lines on the apache.org site, put them in, but they didn't
work:


Options ExecCGI
SetHandler cgi-script



Any other suggestions as to how to setup cgi-bin directories for user
accounts?


Thanks,

Keith

###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is possible!"
###




Apache cgi-bin for users

2001-12-31 Thread Keith Elder

Greetings and Happy New Year!

I am trying to enable cgi-bin on user directories.  I found the
following lines on the apache.org site, put them in, but they didn't
work:


Options ExecCGI
SetHandler cgi-script



Any other suggestions as to how to setup cgi-bin directories for user
accounts?


Thanks,

Keith

###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is possible!"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




RE: Email filtering

2001-12-16 Thread Keith Elder
Be sure this is at the top of your .procmailrc:


ORGMAIL=/var/mail/
MAILDIR=$HOME/mail
LOGFILE=$HOME/proclog
DEFAULT=$ORGMAIL

Then put a line like this:

# phpusers
:0:
* ^To:[EMAIL PROTECTED]
Phpusers

That will basically filter any email on this group to a IMAP box called
Phpusers.

Keith

-Original Message-
From: Dave Smith [mailto:[EMAIL PROTECTED] 
Sent: Sunday, December 16, 2001 11:33 AM
To: debian-isp@lists.debian.org
Subject: Email filtering


I am planing on using fetchmail to get my emails from a single email
account at my ISP and to split those emails up depending on who it is
addressed to. With that, I have no problem. What I also wish to do is
deliver the emails to a cyrus IMAP server, sorting the emails into
folders on the IMAP server. What sort of setup would I need to do this?

I currently have procmail, fetchmail and cyrus IMAP.

For example, if an email comes addressed to user dave, it would be
checked against a table, and then would be filtered to a folder in the
dave account. I am presuming this is possible?

Dave


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]





RE: Email filtering

2001-12-16 Thread Keith Elder

Be sure this is at the top of your .procmailrc:


ORGMAIL=/var/mail/
MAILDIR=$HOME/mail
LOGFILE=$HOME/proclog
DEFAULT=$ORGMAIL

Then put a line like this:

# phpusers
:0:
* ^To:.*[EMAIL PROTECTED]
Phpusers

That will basically filter any email on this group to a IMAP box called
Phpusers.

Keith

-Original Message-
From: Dave Smith [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, December 16, 2001 11:33 AM
To: [EMAIL PROTECTED]
Subject: Email filtering


I am planing on using fetchmail to get my emails from a single email
account at my ISP and to split those emails up depending on who it is
addressed to. With that, I have no problem. What I also wish to do is
deliver the emails to a cyrus IMAP server, sorting the emails into
folders on the IMAP server. What sort of setup would I need to do this?

I currently have procmail, fetchmail and cyrus IMAP.

For example, if an email comes addressed to user dave, it would be
checked against a table, and then would be filtered to a folder in the
dave account. I am presuming this is possible?

Dave


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: trouble ticket system

2001-12-04 Thread Keith Elder
Our company is in the process of building a "support / ticket system"
using our core product called LogiCreate (http://www.logicreate.com).
If you are looking for a professional customizeable solution we are
looking for company's to join us in development via a partnership.
There is a cost savings of course in doing so and certain restrictions
do apply.  

LogiCreate is many things from a content management system to a portal
to a modularized application builder.  The nice thing is that all
applications are written to a standard and there is a standard control
panel for the backend.  It is very nice and is completely different from
things like PHPGroupWare.   PHP-Nuke is another open source package
(which is extremely buggy and has tons of security holes) but just for
an example we ported a PHP-Nuke site to this framework in about 10-15
hours.  Granted we left out some unless stuff in the process but I think
that is still very impressive.

Check out the site for more info if you are interested and feel free to
contact me at the office at:  734-482-1371.  I hope this hasn't sounded
to "sales pitchy" as that is not my intent.  Just trying to help out.

Thanks,

Keith

* Alejandro Borges ([EMAIL PROTECTED]) wrote:
> Subject: Re: trouble ticket system
> From: Alejandro Borges <[EMAIL PROTECTED]>
> To: z-deb-isp 
> X-Mailer: Evolution/0.99.2 (Preview Release)
> Date: 04 Dec 2001 01:16:19 -0600
> 
> El lun, 03-12-2001 a las 23:40, Matt Fair escribió:
> > Would would be the best trouble ticket system to use?
> > I took a rt, but it doesn't look as good people say it is (at least the
> > one in the stable release).
> > Thanks,
> > Matt
> I like phpgroupware'sbut thats only me...sigh
> 
> 
> Alex
> > 
> > 
> > 
> > 
> > 
> > -- 
> > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> > 
> 
> 
> 
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is psosible!"
###




Re: trouble ticket system

2001-12-04 Thread Keith Elder

Our company is in the process of building a "support / ticket system"
using our core product called LogiCreate (http://www.logicreate.com).
If you are looking for a professional customizeable solution we are
looking for company's to join us in development via a partnership.
There is a cost savings of course in doing so and certain restrictions
do apply.  

LogiCreate is many things from a content management system to a portal
to a modularized application builder.  The nice thing is that all
applications are written to a standard and there is a standard control
panel for the backend.  It is very nice and is completely different from
things like PHPGroupWare.   PHP-Nuke is another open source package
(which is extremely buggy and has tons of security holes) but just for
an example we ported a PHP-Nuke site to this framework in about 10-15
hours.  Granted we left out some unless stuff in the process but I think
that is still very impressive.

Check out the site for more info if you are interested and feel free to
contact me at the office at:  734-482-1371.  I hope this hasn't sounded
to "sales pitchy" as that is not my intent.  Just trying to help out.

Thanks,

Keith

* Alejandro Borges ([EMAIL PROTECTED]) wrote:
> Subject: Re: trouble ticket system
> From: Alejandro Borges <[EMAIL PROTECTED]>
> To: z-deb-isp <[EMAIL PROTECTED]>
> X-Mailer: Evolution/0.99.2 (Preview Release)
> Date: 04 Dec 2001 01:16:19 -0600
> 
> El lun, 03-12-2001 a las 23:40, Matt Fair escribió:
> > Would would be the best trouble ticket system to use?
> > I took a rt, but it doesn't look as good people say it is (at least the
> > one in the stable release).
> > Thanks,
> > Matt
> I like phpgroupware'sbut thats only me...sigh
> 
> 
> Alex
> > 
> > 
> > 
> > 
> > 
> > -- 
> > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> > 
> 
> 
> 
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is psosible!"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Help... SSH CRC-32 compensation attack detector vulnerability

2001-12-02 Thread Keith Elder
What is the patch to plug this hole?

K.

* Jason Lim ([EMAIL PROTECTED]) wrote:
> Reply-To: "Jason Lim" <[EMAIL PROTECTED]>
> From: "Jason Lim" <[EMAIL PROTECTED]>
> To: 
> Subject: Help... SSH CRC-32 compensation attack detector vulnerability
> Date: Mon, 3 Dec 2001 09:33:07 +1100
> X-Mailer: Microsoft Outlook Express 6.00.2600.
> 
> Hi,
> 
> sigh... yes... some of our servers have been hit with the "SSH CRC-32
> compensation attack detector vulnerability" attack.
> 
> some servers have been compromised, and the usual rootkit stuff (install
> root shells in /etc/inetd.conf, bogus syslogd, haxored ps, etc.).
> 
> What is an easy way to locate binaries that are different from the ones
> provided in the original debs?
> 
> And is there any other relatively easier way of cleaning up a system that
> has had a rootkit installed?
> 
> We've done a netstat -a and removed/killed all strange processes, and
> cleaned inetd.conf as much as we can, but some of the programs in
> inetd.conf have themselves also been tampered with (eg. in.telnetd).
> 
> Please help... I have a bad feeling the crackers are coming back real soon
> to really finish off the job... so any help at this time in removing all
> their crap would be greatly appreciated.
> 
> Sincerely,
> Jason
> 
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is psosible!"
###




Re: Help... SSH CRC-32 compensation attack detector vulnerability

2001-12-02 Thread Keith Elder

What is the patch to plug this hole?

K.

* Jason Lim ([EMAIL PROTECTED]) wrote:
> Reply-To: "Jason Lim" <[EMAIL PROTECTED]>
> From: "Jason Lim" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: Help... SSH CRC-32 compensation attack detector vulnerability
> Date: Mon, 3 Dec 2001 09:33:07 +1100
> X-Mailer: Microsoft Outlook Express 6.00.2600.
> 
> Hi,
> 
> sigh... yes... some of our servers have been hit with the "SSH CRC-32
> compensation attack detector vulnerability" attack.
> 
> some servers have been compromised, and the usual rootkit stuff (install
> root shells in /etc/inetd.conf, bogus syslogd, haxored ps, etc.).
> 
> What is an easy way to locate binaries that are different from the ones
> provided in the original debs?
> 
> And is there any other relatively easier way of cleaning up a system that
> has had a rootkit installed?
> 
> We've done a netstat -a and removed/killed all strange processes, and
> cleaned inetd.conf as much as we can, but some of the programs in
> inetd.conf have themselves also been tampered with (eg. in.telnetd).
> 
> Please help... I have a bad feeling the crackers are coming back real soon
> to really finish off the job... so any help at this time in removing all
> their crap would be greatly appreciated.
> 
> Sincerely,
> Jason
> 
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
 "With enough memory and hard drive space
   anything in life is psosible!"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Cannot install apache-ssl through apt

2001-11-10 Thread Keith Elder
Never Mind,

I got it.

K.

* Keith Elder ([EMAIL PROTECTED]) wrote:
> Date: Sat, 10 Nov 2001 22:16:51 -0500
> From: Keith Elder <[EMAIL PROTECTED]>
> To: Craig Sanders <[EMAIL PROTECTED]>
> Cc: debian-isp 
> Subject: Re: Cannot install apache-ssl through apt
> User-Agent: Mutt/1.3.20i
> 
> Hi Craig,
> 
> Any reason why that package isn't showing up on my system (woody)?
> 
> K.
> 
> * Craig Sanders ([EMAIL PROTECTED]) wrote:
> > Date: Sun, 11 Nov 2001 10:05:31 +1100
> > From: Craig Sanders <[EMAIL PROTECTED]>
> > To: Keith Elder <[EMAIL PROTECTED]>
> > Cc: Michael Jager <[EMAIL PROTECTED]>,
> > debian-isp 
> > Subject: Re: Cannot install apache-ssl through apt
> > User-Agent: Mutt/1.3.23i
> > 
> > On Fri, Nov 09, 2001 at 04:25:18PM -0500, Keith Elder wrote:
> > > Something in the database isn't right or it isn't apt-getting the
> > > files properly.  Is this broke in anyone else's distro?
> > 
> > use mod_ssl instead:
> > 
> > apt-get install libapache-mod-ssl
> > 
> > it can do everything that apache-ssl can do and a whole lot more. it's
> > much more flexible in what you can do with it. the package is also
> > updated regularly to match the latest apache package.
> > 
> > craig
> > 
> > -- 
> > craig sanders <[EMAIL PROTECTED]>
> > 
> > Fabricati Diem, PVNC.
> >  -- motto of the Ankh-Morpork City Watch
> 
> 
> ###
>   Keith Elder
>Email: [EMAIL PROTECTED] 
> Phone: 1-734-507-1438
>  Text Messaging (145 characters): [EMAIL PROTECTED]
> Web: http://www.zorka.com (Howto's, News, and hosting!)
>   
>   "Confuscious Say: Confusion Can Often be Confusing"
> ###
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
  "Confuscious Say: Confusion Can Often be Confusing"
###




Re: Cannot install apache-ssl through apt

2001-11-10 Thread Keith Elder
Hi Craig,

Any reason why that package isn't showing up on my system (woody)?

K.

* Craig Sanders ([EMAIL PROTECTED]) wrote:
> Date: Sun, 11 Nov 2001 10:05:31 +1100
> From: Craig Sanders <[EMAIL PROTECTED]>
> To: Keith Elder <[EMAIL PROTECTED]>
> Cc: Michael Jager <[EMAIL PROTECTED]>,
>   debian-isp 
> Subject: Re: Cannot install apache-ssl through apt
> User-Agent: Mutt/1.3.23i
> 
> On Fri, Nov 09, 2001 at 04:25:18PM -0500, Keith Elder wrote:
> > Something in the database isn't right or it isn't apt-getting the
> > files properly.  Is this broke in anyone else's distro?
> 
> use mod_ssl instead:
> 
> apt-get install libapache-mod-ssl
> 
> it can do everything that apache-ssl can do and a whole lot more. it's
> much more flexible in what you can do with it. the package is also
> updated regularly to match the latest apache package.
> 
> craig
> 
> -- 
> craig sanders <[EMAIL PROTECTED]>
> 
> Fabricati Diem, PVNC.
>  -- motto of the Ankh-Morpork City Watch


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
  "Confuscious Say: Confusion Can Often be Confusing"
###




Re: Cannot install apache-ssl through apt

2001-11-10 Thread Keith Elder

Never Mind,

I got it.

K.

* Keith Elder ([EMAIL PROTECTED]) wrote:
> Date: Sat, 10 Nov 2001 22:16:51 -0500
> From: Keith Elder <[EMAIL PROTECTED]>
> To: Craig Sanders <[EMAIL PROTECTED]>
> Cc: debian-isp <[EMAIL PROTECTED]>
> Subject: Re: Cannot install apache-ssl through apt
> User-Agent: Mutt/1.3.20i
> 
> Hi Craig,
> 
> Any reason why that package isn't showing up on my system (woody)?
> 
> K.
> 
> * Craig Sanders ([EMAIL PROTECTED]) wrote:
> > Date: Sun, 11 Nov 2001 10:05:31 +1100
> > From: Craig Sanders <[EMAIL PROTECTED]>
> > To: Keith Elder <[EMAIL PROTECTED]>
> > Cc: Michael Jager <[EMAIL PROTECTED]>,
> > debian-isp <[EMAIL PROTECTED]>
> > Subject: Re: Cannot install apache-ssl through apt
> > User-Agent: Mutt/1.3.23i
> > 
> > On Fri, Nov 09, 2001 at 04:25:18PM -0500, Keith Elder wrote:
> > > Something in the database isn't right or it isn't apt-getting the
> > > files properly.  Is this broke in anyone else's distro?
> > 
> > use mod_ssl instead:
> > 
> > apt-get install libapache-mod-ssl
> > 
> > it can do everything that apache-ssl can do and a whole lot more. it's
> > much more flexible in what you can do with it. the package is also
> > updated regularly to match the latest apache package.
> > 
> > craig
> > 
> > -- 
> > craig sanders <[EMAIL PROTECTED]>
> > 
> > Fabricati Diem, PVNC.
> >  -- motto of the Ankh-Morpork City Watch
> 
> 
> ###
>   Keith Elder
>Email: [EMAIL PROTECTED] 
> Phone: 1-734-507-1438
>  Text Messaging (145 characters): [EMAIL PROTECTED]
> Web: http://www.zorka.com (Howto's, News, and hosting!)
>   
>   "Confuscious Say: Confusion Can Often be Confusing"
> ###
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
  "Confuscious Say: Confusion Can Often be Confusing"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Cannot install apache-ssl through apt

2001-11-10 Thread Keith Elder

Hi Craig,

Any reason why that package isn't showing up on my system (woody)?

K.

* Craig Sanders ([EMAIL PROTECTED]) wrote:
> Date: Sun, 11 Nov 2001 10:05:31 +1100
> From: Craig Sanders <[EMAIL PROTECTED]>
> To: Keith Elder <[EMAIL PROTECTED]>
> Cc: Michael Jager <[EMAIL PROTECTED]>,
>   debian-isp <[EMAIL PROTECTED]>
> Subject: Re: Cannot install apache-ssl through apt
> User-Agent: Mutt/1.3.23i
> 
> On Fri, Nov 09, 2001 at 04:25:18PM -0500, Keith Elder wrote:
> > Something in the database isn't right or it isn't apt-getting the
> > files properly.  Is this broke in anyone else's distro?
> 
> use mod_ssl instead:
> 
> apt-get install libapache-mod-ssl
> 
> it can do everything that apache-ssl can do and a whole lot more. it's
> much more flexible in what you can do with it. the package is also
> updated regularly to match the latest apache package.
> 
> craig
> 
> -- 
> craig sanders <[EMAIL PROTECTED]>
> 
> Fabricati Diem, PVNC.
>  -- motto of the Ankh-Morpork City Watch


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
  "Confuscious Say: Confusion Can Often be Confusing"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Cannot install apache-ssl through apt

2001-11-09 Thread Keith Elder
Thanks for the reply Michael,

Something in the database isn't right or it isn't apt-getting the files 
properly.  Is this broke
in anyone else's distro?

K.

* Michael Jager ([EMAIL PROTECTED]) wrote:
> User-Agent: Microsoft-Outlook-Express-Macintosh-Edition/5.02.2022
> Date: Sat, 10 Nov 2001 08:41:15 +1300
> Subject: Re: Cannot install apache-ssl through apt
> From: Michael Jager <[EMAIL PROTECTED]>
> To: Keith Elder <[EMAIL PROTECTED]>
> CC: debian-isp 
> 
> Hi Keith,
> 
> I think your problem is that the version of apache-ssl you are trying to
> install requires a version of apache-common which is less than 1.3.10
> [Depends: apache-common (< 1.3.10)], but you have apache-common version
> 1.3.19-1 on your box. Not sure how to resolve it though, other than
> downgrading your version of apache. Someone else probably has a better
> solution though =]
> 
> Michael
> 
> 
> > claiming to be Keith Elder, <[EMAIL PROTECTED]> said:
> >
> > Hello everyone,
> > 
> > I have a really weird problem trying to install apache-ssl.  I have
> > tried everything I know to figure out how to solve the following
> > problem.  Any help anyone can give I certianly appreicate it.  Here is
> > what I get when I run apt-get install apache-ssl:
> > 
> > Sorry, but the following packages have unmet dependencies:
> > apache-ssl: Depends: apache-common (< 1.3.10) but 1.3.19-1 is to be
> > installed
> > E: Sorry, broken packages
> > 
> > Here is what apache is installed (I am running woody):
> > 
> > ii  apache 1.3.19-1   Versatile, high-performance HTTP server
> > ii  apache-common  1.3.19-1   Support files for all Apache webservers
> > 
> > Thanks!
> > 
> > Keith
> > 
> > 
> > ###
> > Keith Elder  
> > Email: [EMAIL PROTECTED]
> > Phone: 1-734-507-1438
> > Text Messaging (145 characters): [EMAIL PROTECTED]
> > Web: http://www.zorka.com (Howto's, News, and hosting!)
> > 
> > "Confuscious Say: Confusion Can Often be Confusing"
> > ###


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
  "Confuscious Say: Confusion Can Often be Confusing"
###




Re: Cannot install apache-ssl through apt

2001-11-09 Thread Keith Elder

Thanks for the reply Michael,

Something in the database isn't right or it isn't apt-getting the files properly.  Is 
this broke
in anyone else's distro?

K.

* Michael Jager ([EMAIL PROTECTED]) wrote:
> User-Agent: Microsoft-Outlook-Express-Macintosh-Edition/5.02.2022
> Date: Sat, 10 Nov 2001 08:41:15 +1300
> Subject: Re: Cannot install apache-ssl through apt
> From: Michael Jager <[EMAIL PROTECTED]>
> To: Keith Elder <[EMAIL PROTECTED]>
> CC: debian-isp <[EMAIL PROTECTED]>
> 
> Hi Keith,
> 
> I think your problem is that the version of apache-ssl you are trying to
> install requires a version of apache-common which is less than 1.3.10
> [Depends: apache-common (< 1.3.10)], but you have apache-common version
> 1.3.19-1 on your box. Not sure how to resolve it though, other than
> downgrading your version of apache. Someone else probably has a better
> solution though =]
> 
> Michael
> 
> 
> > claiming to be Keith Elder, <[EMAIL PROTECTED]> said:
> >
> > Hello everyone,
> > 
> > I have a really weird problem trying to install apache-ssl.  I have
> > tried everything I know to figure out how to solve the following
> > problem.  Any help anyone can give I certianly appreicate it.  Here is
> > what I get when I run apt-get install apache-ssl:
> > 
> > Sorry, but the following packages have unmet dependencies:
> > apache-ssl: Depends: apache-common (< 1.3.10) but 1.3.19-1 is to be
> > installed
> > E: Sorry, broken packages
> > 
> > Here is what apache is installed (I am running woody):
> > 
> > ii  apache 1.3.19-1   Versatile, high-performance HTTP server
> > ii  apache-common  1.3.19-1   Support files for all Apache webservers
> > 
> > Thanks!
> > 
> > Keith
> > 
> > 
> > ###
> > Keith Elder  
> > Email: [EMAIL PROTECTED]
> > Phone: 1-734-507-1438
> > Text Messaging (145 characters): [EMAIL PROTECTED]
> > Web: http://www.zorka.com (Howto's, News, and hosting!)
> > 
> > "Confuscious Say: Confusion Can Often be Confusing"
> > ###


###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
  "Confuscious Say: Confusion Can Often be Confusing"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Cannot install apache-ssl through apt

2001-11-09 Thread Keith Elder
Hello everyone,

I have a really weird problem trying to install apache-ssl.  I have
tried everything I know to figure out how to solve the following
problem.  Any help anyone can give I certianly appreicate it.  Here is
what I get when I run apt-get install apache-ssl:

Sorry, but the following packages have unmet dependencies:
  apache-ssl: Depends: apache-common (< 1.3.10) but 1.3.19-1 is to be
  installed
  E: Sorry, broken packages

Here is what apache is installed (I am running woody):

ii  apache 1.3.19-1   Versatile, high-performance HTTP server
ii  apache-common  1.3.19-1   Support files for all Apache webservers

Thanks!

Keith


###
      Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
  "Confuscious Say: Confusion Can Often be Confusing"
###




Cannot install apache-ssl through apt

2001-11-09 Thread Keith Elder

Hello everyone,

I have a really weird problem trying to install apache-ssl.  I have
tried everything I know to figure out how to solve the following
problem.  Any help anyone can give I certianly appreicate it.  Here is
what I get when I run apt-get install apache-ssl:

Sorry, but the following packages have unmet dependencies:
  apache-ssl: Depends: apache-common (< 1.3.10) but 1.3.19-1 is to be
  installed
  E: Sorry, broken packages

Here is what apache is installed (I am running woody):

ii  apache 1.3.19-1   Versatile, high-performance HTTP server
ii  apache-common  1.3.19-1   Support files for all Apache webservers

Thanks!

Keith


###
      Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
  "Confuscious Say: Confusion Can Often be Confusing"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Quata Support with MySQL

2001-11-02 Thread Keith Elder
Greetings,

I was wondering if anyone had any type of hints as howto setup virtual
mysql accounts with quota support.

Keith

###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
  "Confuscious Say: Confusion Can Often be Confusing"
###




Quata Support with MySQL

2001-11-01 Thread Keith Elder

Greetings,

I was wondering if anyone had any type of hints as howto setup virtual
mysql accounts with quota support.

Keith

###
  Keith Elder
   Email: [EMAIL PROTECTED] 
Phone: 1-734-507-1438
 Text Messaging (145 characters): [EMAIL PROTECTED]
Web: http://www.zorka.com (Howto's, News, and hosting!)
  
  "Confuscious Say: Confusion Can Often be Confusing"
###


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]