Re: limiting port 25 to an IP

2004-10-23 Thread Marcin Sochacki
On Fri, Oct 22, 2004 at 04:22:33PM -0800, W.D.McKinney wrote:
> Do you know of any examples ?

Actually, it's the list for ISPs, so people here are supposed to have
a bit of basic knowledge about networking. But anyways, it could be
something like:

iptables -A INPUT -p tcp -s IP.YOU.WANT.TO.BLOCK --dport 25 -j REJECT

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: limiting port 25 to an IP

2004-10-22 Thread Marcin Sochacki
On Fri, Oct 22, 2004 at 02:11:01PM -0800, W.D.McKinney wrote:
> 
> We run Debian testing on some servers and I have this question.
> Is it possible to keep port 25 down to a single IP ?

Use iptables.

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: whois.conf

2004-09-04 Thread Marcin Sochacki
On Sun, Sep 05, 2004 at 09:52:25AM +1200, Jamie Baddeley wrote:
> WHOIS_SERVER=whois.apnic.net
> (also have tried WHOIS_SERVER whois.apnic.net,
> WHOIS_SERVER:whois.apnic.net, WHOIS_SERVERwhois.apnic.net etc)
> 
> but this stanza didn't work in when placed whois.conf.

Because it's not supposed to go into whois.conf. Read the info about
whois.conf again -- it has a different syntax.

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: whois.conf

2004-09-04 Thread Marcin Sochacki
On Sat, Sep 04, 2004 at 08:47:57PM +1200, Jamie Baddeley wrote:
> hi,
> 
> whois ships with a default whois server of whois.internic.net.
> 
> I want to change this to whois.apnic.net.
> 
> apparently this can be done by setting up /etc/whois.conf, but I can't
> work out what the syntax is. There's no docs, or any examples...I've
> tried all the obvious approaches.

"If the /etc/whois.conf config file exists, it will be consulted to find
a server before applying the normal rules. Each line of the file should
contain a regular expression to be matched against the query text and
the whois server to use, separated by white space."

OTOH you could also use the env variable:

WHOIS_SERVER
This server will be queried if the program cannot guess where some
kind of objects are located. If the variable does not exist then
whois.arin.net will be queried.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Cheap Mainboard whith autostart ?

2004-07-17 Thread Marcin Sochacki
On Sat, Jul 17, 2004 at 02:33:02PM +0200, Michelle Konzack wrote:
> Now I have a problem: It does not start after a electricity fail...

Michelle,

There is no need you'd have to replace an otherwise good motherboard
just because it doesn't automatically power up after fail.

First you need to check if there is any nonintrusive method of
correcting it, namely:
- check if there is a BIOS upgrade available, and use it. Sometimes
  the option to power up is added in new versions of BIOS.
- check the manual or take a good look at the mb, and try to find
  any pins that might be related to the subject. You will also need
  to find the Power_ON pins which normally connect to the power button
  of your case, if you'll be forced to use the ultimate "intrusive"
  method, namely...

... The Universal Capacitor Solution.

Connect the Power_ON pins on the mobo with a small ~10V, ~10uF
capacitor. The voltage is not so important, can be higher, but the
capacity may need some experiments: sometimes it goes as low as 1uF
and as high as 40uF. The capacitor can be soldered for a shock-proof
setup, but for a testing period you could just use two separate jumpers
inserted into both pins, and plug the legs of a capacitor into them.
Pay attention to capacitor's polarity if it's an electrolytic one.

It could also work if you just shorted the pins with a jumper, but
that's a less elegant solution.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Exim + MySQL

2004-05-17 Thread Marcin Sochacki
On Mon, May 17, 2004 at 12:31:45PM -0500, Rod Rodolico wrote:
> Does anyone know if MySQL is built into the debian release of Exim? I put the 
> following line
> in my configuration file and get an "unknown command" error. I think I did 
> this correctly.

Depends.
In woody -- no.
In sarge/sid -- yes, if you choose exim4-*-heavy package.

Anyway, you can just download the source package, enable MySQL and
create your own .deb easily.

Marcin




Re: Exim + MySQL

2004-05-17 Thread Marcin Sochacki
On Mon, May 17, 2004 at 12:31:45PM -0500, Rod Rodolico wrote:
> Does anyone know if MySQL is built into the debian release of Exim? I put the 
> following line
> in my configuration file and get an "unknown command" error. I think I did this 
> correctly.

Depends.
In woody -- no.
In sarge/sid -- yes, if you choose exim4-*-heavy package.

Anyway, you can just download the source package, enable MySQL and
create your own .deb easily.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Stopping Exim from sending "Message frozen" messages...

2004-01-30 Thread Marcin Sochacki
On Fri, Jan 30, 2004 at 01:14:43PM -0800, Joe Emenaker wrote:
> Okay since I had a 3-year-old Exim configuration file, I decided to 
> take a brand-new one and then use "diff" to find what I needed to move over.
> 
> Hopefully now, it is rejecting bad recipients at SMTP time. However, 
> it's also sending me "Message frozen" messages every time it freezes 
> something. Does anybody know, off hand, how to turn this off?

freeze_tell_mailmaster

I guess it would be comparably quick to go to www.exim.org and find that in
Exim's excellent docs, than to type in your e-mail.

Wanted




Re: Stopping Exim from sending "Message frozen" messages...

2004-01-30 Thread Marcin Sochacki
On Fri, Jan 30, 2004 at 01:14:43PM -0800, Joe Emenaker wrote:
> Okay since I had a 3-year-old Exim configuration file, I decided to 
> take a brand-new one and then use "diff" to find what I needed to move over.
> 
> Hopefully now, it is rejecting bad recipients at SMTP time. However, 
> it's also sending me "Message frozen" messages every time it freezes 
> something. Does anybody know, off hand, how to turn this off?

freeze_tell_mailmaster

I guess it would be comparably quick to go to www.exim.org and find that in
Exim's excellent docs, than to type in your e-mail.

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Why doesn't Exim ever clean out /var/spool/exim/input?

2004-01-28 Thread Marcin Sochacki
On Wed, Jan 28, 2004 at 01:23:02PM -0800, Joe Emenaker wrote:
> Even though the single retry rule is the stock one (which retrys for 
> something like 4 days), we end up with stuff that is weeks... months 
> old. Periodically, it would get pretty full and we'd notice that there 

These messages are probably marked by Exim as "frozen". Search for that
term in Exim's documentation for more info.

You may enable Exim to automatically remove frozen messages after some
period with the following directive:
timeout_frozen_after = 3d

Marcin




Re: Why doesn't Exim ever clean out /var/spool/exim/input?

2004-01-28 Thread Marcin Sochacki
On Wed, Jan 28, 2004 at 01:23:02PM -0800, Joe Emenaker wrote:
> Even though the single retry rule is the stock one (which retrys for 
> something like 4 days), we end up with stuff that is weeks... months 
> old. Periodically, it would get pretty full and we'd notice that there 

These messages are probably marked by Exim as "frozen". Search for that
term in Exim's documentation for more info.

You may enable Exim to automatically remove frozen messages after some
period with the following directive:
timeout_frozen_after = 3d

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Lazy Apache with domains

2003-09-30 Thread Marcin Sochacki
On Tue, Sep 30, 2003 at 10:25:47PM +0200, David Zejda wrote:
> I have a machine with NIC, but not connected to network yet.
> In etc/hosts there is a record "127.0.0.1 localhost mydomain.com"

Try:
127.0.0.1 localhost
127.0.0.1 mydomain.com

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: RFC2228-only FTP ?

2003-09-29 Thread Marcin Sochacki
On Tue, Sep 30, 2003 at 04:45:23AM -, [EMAIL PROTECTED] wrote:
> The fact is that FTP with security extensions is the
> defacto standard way of solving the clear text password
> exposure problem in the commercial Web hosting world.
> Millions of people use it.  SSH2/SFTP may be technologically
> superior, but it is not what most places use.  If you go to
> Barns and Noble or some other large bookstore you will find
> dozens and dozens of beginners' books about Web authoring.
> They all describe the process of uploading files through
> FTP or DAV.  Hardly any of them mention SSH2/SFTP at all.

If you need transparent FTP encryption, you may look at SafeTP
http://safetp.cs.berkeley.edu/

Unfortunately, the development of that software is currently very slow,
but its model is well-thought.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Where to get 'DCC' and 'pyzor' packages from?

2003-09-26 Thread Marcin Sochacki
On Wed, Sep 24, 2003 at 07:40:22PM +0200, Tomasz Papszun wrote:
> > checksum clearinghouse) und pyzor were not installed. So I've started
> 
>   ^  Should be razor.

Pyzor is "Razor in Python".

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Apache log analyzer

2003-08-04 Thread Marcin Sochacki
On Mon, Aug 04, 2003 at 08:33:53AM -0500, Steve Suehring wrote:
> On Mon, Aug 04, 2003 at 01:00:33PM +0300, Sami Haahtinen wrote:
> > analog
> >   The only one that doesn't have packaging or application bugs, but then
> >   again, it lacks behind on features.
> 
> Can you elaborate on the features that analog is missing?

I'm not the original poster, but AFAIK Analog lacks an important feature
i.e. incremental processing. It exists in Webalizer and is a very handy
function. During log processing, Webalizer saves a temporary database
of data it had gathered, and when one runs it again, it can reuse that
database and skip processing until the first unprocessed log line
is found. It really saves a lot of processing time.

Replying to Sami: I think you've underestimated Webalizer's abilities.
Sure, it's a bit old and the development seems to have stopped,
but nevertheless it's a good program. I have no problems with Ignore
statements. I really don't understand your point about indexes --
can you elaborate on that?

Also, there is a very nice project based on Webalizer, which you didn't
mention in your original post, namely Modlogan. I have fine-tuned my
Webalizer setup for quite a long time now, so I'm unwilling to switch
to another program, but if I had to choose, I would go for Modlogan.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: spammers using my domain as their "reply-to:"

2003-07-31 Thread Marcin Sochacki
On Thu, Jul 31, 2003 at 09:51:37AM -0400, Dale E. Martin wrote:
> Hello.  Russian spammers seem to be using the "clifton-labs.com" domain as
> their "reply-to:" for a bunch of widely varying spam messages.  This means
> we're getting tons of bounces and replies to spam messages we did not send
> out.

It's called 'joejob'. Search for that term on Google and you'll find
some suggestions.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: differential/incremental /var/log backups

2003-07-24 Thread Marcin Sochacki
On Thu, Jul 24, 2003 at 12:08:15PM +0200, Marcin Owsiany wrote:
> So far I can think of two solutions, but I like neither:
>  - backing up WHOLE /var/log every day (level 0 each time) - this means
>larger backups
>  - changing traditional rotation (file.number.gz) to something like
>file.year-month-day.gz - this means changing all rotation cronjobs
>or patching logrotate

Yes, I also don't like the default scheme of logrotate filenames.
Specifically I have archives of Apache logs, and in that case having
the starting date in the filename is very helpful. It also makes
sorting of filenames in hierarchical order a very easy task,
for shell scripts for example.

What I did is just a set of simple scripts, which work on top of
existing logrotate architecture. They take files like
access.log.[0-9]+.gz and rename them to access.MMDD.gz
(the date is calculated from the first line in a particular Apache
logfile). That's a very simple solution and it works for me.
I also tried cronolog, which gives a flexible logging options for
Apache, and it was very good too.

Maybe such a functionality also exists in syslog-ng or some other
syslogd replacements? You wouldn't need logrotate at all if syslogd
was smart enough to automatically switch logs and give them appropriate
names.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: International character sets and apache

2003-07-14 Thread Marcin Sochacki
On Mon, Jul 14, 2003 at 12:08:10PM -0400, Fraser Campbell wrote:
> Hi,
> 
> I am currently struggling to understand internationalization issues.  Woody's 
> apache by default seems to set this http header:
> 
>   Content-type: text/html; charset=iso-8859-1
> 
> I am needing to support some websites with polish now, which requires 
> iso-8859-2.  If a meta tag is set within the html it seems to be ignored (the 
> http header takes precedence).

AddDefaultCharset off

That's all you need.

Marcin




Re: International character sets and apache

2003-07-14 Thread Marcin Sochacki
On Mon, Jul 14, 2003 at 12:08:10PM -0400, Fraser Campbell wrote:
> Hi,
> 
> I am currently struggling to understand internationalization issues.  Woody's 
> apache by default seems to set this http header:
> 
>   Content-type: text/html; charset=iso-8859-1
> 
> I am needing to support some websites with polish now, which requires 
> iso-8859-2.  If a meta tag is set within the html it seems to be ignored (the 
> http header takes precedence).

AddDefaultCharset off

That's all you need.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Remotely editing files

2003-06-11 Thread Marcin Sochacki
On Wed, Jun 11, 2003 at 06:45:03PM +1000, Greg Wright wrote:
> All I need to do, is find a way to securely connect to the Debian system
> (from a windows server at this stage, the programmer isn't confident to
> work in a deb environment) and load, modify and save the dhcp.conf file.
> Better is be able to restart DHCP afterwards.

Use pscp from PuTTY package. It's a scriptable scp client for Windows.
After putting the file on remote server you can issue the:
/etc/init.d/dhcp restart
command via PuTTY (which I think is scriptable, too),
or alternatively write a simple file monitor on your Debian box
and restart the DHCP server when the configuration file is changed.

Marcin




Re: Remotely editing files

2003-06-11 Thread Marcin Sochacki
On Wed, Jun 11, 2003 at 06:45:03PM +1000, Greg Wright wrote:
> All I need to do, is find a way to securely connect to the Debian system
> (from a windows server at this stage, the programmer isn't confident to
> work in a deb environment) and load, modify and save the dhcp.conf file.
> Better is be able to restart DHCP afterwards.

Use pscp from PuTTY package. It's a scriptable scp client for Windows.
After putting the file on remote server you can issue the:
/etc/init.d/dhcp restart
command via PuTTY (which I think is scriptable, too),
or alternatively write a simple file monitor on your Debian box
and restart the DHCP server when the configuration file is changed.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: How to handle mail for multiple (10-15) domains w/o localpart conflicts?

2003-04-06 Thread Marcin Sochacki
On Sun, Apr 06, 2003 at 06:36:14PM +0200, Ralf G. R. Bergs wrote:
> On Sun, 06 Apr 2003 17:55:04 +0200, Markus Welsch wrote:
> 
> [...]
> >Do you need to use Exim ? Or could you switch to Postfix also ? Postfix 
> 
> I don't want to move away from Exim unless there are serious (or even 
> compelling) reasons to do so.

http://www.ex-parrot.com/~chris/vmail-sql/

Marcin




Re: replication

2003-03-19 Thread Marcin Sochacki
On Tue, Mar 18, 2003 at 11:13:50AM -0700, [EMAIL PROTECTED] wrote:
> As a favor to a friend, I'm trying to setup a mirror of his server,
> where I can basically be a 'hotswap' for him.  So far, the main problem
> that I'm running into is that everything is ip-based.  For instance,
> it's dead-simple to be a secondary dns server for him, but if his box
> (which hosts dns, web, and mail) goes down, then I'm simply pointing 
> people into dead-space, right?  Well, email is the one standout, where
> the MX records would get them to my machine, but I'm having a hard time
> figuring out how to make web and dns do the same thing.

If you're hosting secondary DNS, it shouldn't be too difficult.
First, change the default TTL of your zone to a very low value, like one
minute. This way you'll almost prevent caching of DNS records on other
hosts.

When your (secondary) machine detects, that the primary one is dead,
you should swap the configuration files for your bind, and make yourself
a primary, and the only one nameserver for the particular domain,
with the addresses pointing to your machine. Reload bind, and from
that moment all HTTP requests should start hitting your server.

You should constantly monitor if the primary machine comes back online,
and if it does -- swap the bind configuration back to original state.

It also means, that you should parse the mirrored httpd.conf and change
the IP in VirtualHost to your address.

I don't think you need any special software -- everything can be done
with a couple of scripts in your favourite scripting language.

Marcin




Re: replication

2003-03-18 Thread Marcin Sochacki
On Tue, Mar 18, 2003 at 11:13:50AM -0700, [EMAIL PROTECTED] wrote:
> As a favor to a friend, I'm trying to setup a mirror of his server,
> where I can basically be a 'hotswap' for him.  So far, the main problem
> that I'm running into is that everything is ip-based.  For instance,
> it's dead-simple to be a secondary dns server for him, but if his box
> (which hosts dns, web, and mail) goes down, then I'm simply pointing 
> people into dead-space, right?  Well, email is the one standout, where
> the MX records would get them to my machine, but I'm having a hard time
> figuring out how to make web and dns do the same thing.

If you're hosting secondary DNS, it shouldn't be too difficult.
First, change the default TTL of your zone to a very low value, like one
minute. This way you'll almost prevent caching of DNS records on other
hosts.

When your (secondary) machine detects, that the primary one is dead,
you should swap the configuration files for your bind, and make yourself
a primary, and the only one nameserver for the particular domain,
with the addresses pointing to your machine. Reload bind, and from
that moment all HTTP requests should start hitting your server.

You should constantly monitor if the primary machine comes back online,
and if it does -- swap the bind configuration back to original state.

It also means, that you should parse the mirrored httpd.conf and change
the IP in VirtualHost to your address.

I don't think you need any special software -- everything can be done
with a couple of scripts in your favourite scripting language.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-10 Thread Marcin Sochacki
On Mon, Mar 10, 2003 at 05:11:38PM +0100, J.J. van Gorkum wrote:
> On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote:
> > On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote:
> > > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote:
> > > > Can someone fill me in on ClamAV a little bit, the engine hasn't been
> > > > updated in a long time, but the virus signatures appear very recent.
> > > > Who is updating the signatures?  How often do they come out?
> > > > 
> > > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
> > > a virus and clamav doesn't we mail the virus part of the email to the
> > > maker of clamv... 
> > 
> > What do you use to unpack MIME messages for clamav? I haven't find
> > anything yet that can unpack messages the way trendmicro does, so clamav
> > will miss a great deal of viruses, mostly in error messages.
> > 
> amavisd-new (amavisd-ng has some mime decoding problems... especially
> pgp/gpg encrypted mail) for amavisd-new look at 

BTW: Have you ever heard about a virus which can self-sign itself with
PGP/GPG? :)

Marcin




Re: anti virus software for mail server

2003-03-10 Thread Marcin Sochacki
On Mon, Mar 10, 2003 at 05:11:38PM +0100, J.J. van Gorkum wrote:
> On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote:
> > On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote:
> > > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote:
> > > > Can someone fill me in on ClamAV a little bit, the engine hasn't been
> > > > updated in a long time, but the virus signatures appear very recent.
> > > > Who is updating the signatures?  How often do they come out?
> > > > 
> > > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds
> > > a virus and clamav doesn't we mail the virus part of the email to the
> > > maker of clamv... 
> > 
> > What do you use to unpack MIME messages for clamav? I haven't find
> > anything yet that can unpack messages the way trendmicro does, so clamav
> > will miss a great deal of viruses, mostly in error messages.
> > 
> amavisd-new (amavisd-ng has some mime decoding problems... especially
> pgp/gpg encrypted mail) for amavisd-new look at 

BTW: Have you ever heard about a virus which can self-sign itself with
PGP/GPG? :)

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-10 Thread Marcin Sochacki
On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote:
> What do you use to unpack MIME messages for clamav? I haven't find
> anything yet that can unpack messages the way trendmicro does, so clamav
> will miss a great deal of viruses, mostly in error messages.

E.g. amavis.

Wanted




Re: anti virus software for mail server

2003-03-10 Thread Marcin Sochacki
On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote:
> What do you use to unpack MIME messages for clamav? I haven't find
> anything yet that can unpack messages the way trendmicro does, so clamav
> will miss a great deal of viruses, mostly in error messages.

E.g. amavis.

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Marcin Sochacki
On Fri, Mar 07, 2003 at 10:09:33AM -0800, Erick Lopez Carreon wrote:
> If found a virus, then send mail to postmaster, sender
> and receiver.

Don't do that. You generate unnecessary traffic, which is pointless and
annoying in many situations. Most recent viruses and worms use a special
technique of mangling source and destination addresses, and your
warnings rarely reach the person who's computer is infected.

If you have a reliable method of detection _which_ virus was found in
a given e-mail, you may send a warning if it's one of the older viruses
which don't spoof e-mail headers.

In case of Klez and friends -- the only information you can be quite sure
of is the IP address of the sending machine. If you want, you could send
the warning to the owner/administrator of the particular network, but
do it only once per IP (i.e. keep the database of your previous
mailings).

Marcin




Re: anti virus software for mail server

2003-03-07 Thread Marcin Sochacki
On Fri, Mar 07, 2003 at 10:09:33AM -0800, Erick Lopez Carreon wrote:
> If found a virus, then send mail to postmaster, sender
> and receiver.

Don't do that. You generate unnecessary traffic, which is pointless and
annoying in many situations. Most recent viruses and worms use a special
technique of mangling source and destination addresses, and your
warnings rarely reach the person who's computer is infected.

If you have a reliable method of detection _which_ virus was found in
a given e-mail, you may send a warning if it's one of the older viruses
which don't spoof e-mail headers.

In case of Klez and friends -- the only information you can be quite sure
of is the IP address of the sending machine. If you want, you could send
the warning to the owner/administrator of the particular network, but
do it only once per IP (i.e. keep the database of your previous
mailings).

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: anti virus software for mail server

2003-03-07 Thread Marcin Sochacki
On Fri, Mar 07, 2003 at 03:03:16PM +0100, Markus Welsch wrote:
>   RAV Antivirus
>   (http://www.ravantivirus.com/pages/showproduct.php?p=21)

Yes, it's a great Romanian AV software.
But why not try a GPL software first -- ClamAV?

Marcin




Re: anti virus software for mail server

2003-03-07 Thread Marcin Sochacki
On Fri, Mar 07, 2003 at 03:03:16PM +0100, Markus Welsch wrote:
>   RAV Antivirus
>   (http://www.ravantivirus.com/pages/showproduct.php?p=21)

Yes, it's a great Romanian AV software.
But why not try a GPL software first -- ClamAV?

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



general IMAP questions

2002-12-30 Thread Marcin Sochacki
Just a simple question regarding Courier IMAP.

Can I rename the default folders (INBOX, INBOX.Sent, INBOX.Drafts, etc.)
to some other names? I'd like to have them translated to my language.
Wouldn't this break some of the popular MUA-s, and webmail applications (like
Squirrelmail)?

Second question: is it possible to have a simple, one-level structure
instead of the deafult two-level? I.e.:

before:

|
+-INBOX
  |
  +-Sent
  +-Drafts

after:

|
+-INBOX
+-Sent
+-Drafts

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Perl Module for Shell Accounts

2002-12-13 Thread Marcin Sochacki
On Fri, Dec 13, 2002 at 04:42:54PM -0500, Gene Grimm wrote:
> I am trying to script maintenance of our POP3 and FTP accounts, but would
> prefer a Perl module rather than using calls to shell commands. Thus far I
> haven't been able to find anything about such a Perl module. Can anyone
> point me in the right direction?

Debian's adduser is actually written in Perl.

Maintaining traditional Unix accounts, kept in flat files (/etc/passwd)
is painful. It would be easier if you put your accounts into an SQL
database or LDAP.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: IDE backup on single host (was: Re: Software backup)

2002-10-24 Thread Marcin Sochacki
On Thu, Oct 24, 2002 at 11:15:05PM +0300, Jarno Elonen wrote:
> > > Does anyone know any way to make this more difficult without introducing
> > > a remote host? Are there, for example, any Linux kernel options for
> > > "device access passwords" or such?
> >
> > Maybe removing the appropriate /dev/hd* entries after backup, and
> > recreating them just before backup with mknod.
> 
> Ingenious. :b
> 
> Does it work reliably with devfs? (So that devices don't magically reappear 
> after deletion, for example)?

I can hear sarcasm in your words, but what was the purpose of my answer
is to make accidental removal of your backups on a spare hard drive less
probable.

It doesn't mean you can't delete them if you really want, and I doubt
if there is an easy software method to do it. And yes, it doesn't apply
to devfs, but using devfs is not obligatory :)

What's your suggestion, anyway?

Marcin




Re: IDE backup on single host (was: Re: Software backup)

2002-10-24 Thread Marcin Sochacki
On Thu, Oct 24, 2002 at 11:15:05PM +0300, Jarno Elonen wrote:
> > > Does anyone know any way to make this more difficult without introducing
> > > a remote host? Are there, for example, any Linux kernel options for
> > > "device access passwords" or such?
> >
> > Maybe removing the appropriate /dev/hd* entries after backup, and
> > recreating them just before backup with mknod.
> 
> Ingenious. :b
> 
> Does it work reliably with devfs? (So that devices don't magically reappear 
> after deletion, for example)?

I can hear sarcasm in your words, but what was the purpose of my answer
is to make accidental removal of your backups on a spare hard drive less
probable.

It doesn't mean you can't delete them if you really want, and I doubt
if there is an easy software method to do it. And yes, it doesn't apply
to devfs, but using devfs is not obligatory :)

What's your suggestion, anyway?

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: IDE backup on single host (was: Re: Software backup)

2002-10-24 Thread Marcin Sochacki
On Thu, Oct 24, 2002 at 11:30:19AM +0300, Jarno Elonen wrote:
> Does anyone know any way to make this more difficult without introducing a 
> remote host? Are there, for example, any Linux kernel options for "device 
> access passwords" or such?

Maybe removing the appropriate /dev/hd* entries after backup, and recreating
them just before backup with mknod.

Marcin




Re: IDE backup on single host (was: Re: Software backup)

2002-10-24 Thread Marcin Sochacki
On Thu, Oct 24, 2002 at 11:30:19AM +0300, Jarno Elonen wrote:
> Does anyone know any way to make this more difficult without introducing a 
> remote host? Are there, for example, any Linux kernel options for "device 
> access passwords" or such?

Maybe removing the appropriate /dev/hd* entries after backup, and recreating
them just before backup with mknod.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: failure notice (about relays.osirusoft.com)

2002-08-19 Thread Marcin Sochacki
Craig and Jason,

I'm reading this thread and to be honest, I'm getting really tired
to get the same sentences repeated over and over by both of you.

It seems you just don't read the other's mail, instead just quickly
reply with counter-arguments. Please try to cooperate, or go somewhere
else to discuss this topic.

For me it's obvious that Jason is right about Osirusoft's list
being too restrictive about Asian hosts. Craig, please try to read
the message, which was repeated over and over by Jason: they block
a huge HK netblock, not only open relays.

I think the RBL list is for listing open relays, but they blocked
all hosts within a wide range, which means blocking private hosts,
servers not related to IAdvantage and even non-existing hosts.
E.g.:
http://openrbl.org/ip/202/85/128/1.htm (202.85.128.1)
The host doesn't even ping, how this can be an open relay?!

I live in Poland. I do get a lot of spam both from Asia and the "West".
I try to fight spam with all methods I find effective, but avoiding
false positives as much as I can. Assuming that all Asian mail is spam
is really unfair.

I guess debian-isp is not a good forum for a discussion about internals
of RBL databases. One point, which could be useful for Debian ISPs here
is that Osirusoft's database uses unfair methods to fight spam
and blocks whole networks without proper explanation. The decision
to use that database or not is in the hands of this list's subscribers.

Marcin

-- 
Windows 2000: A reliable comprehensive and integrated operating system
  platform delivering seamless interoperability, scalability,
  and performance, and broad application support.
Open Source:  No f*ing buzzwords.




Re: Boarding SuSE with Debian

2002-08-07 Thread Marcin Sochacki
On Wed, Aug 07, 2002 at 09:21:45PM +0200, Florian Bantner wrote:
> Thanks for the answer (to the other, too), but still there are two
> points:
>   1. Only one big partition (30GB) mountet as /
>   2. Noone will go to the terminal for me, which means
>  either it comes up or -- hello again plain SuSE, goodbye 70.-

The second problem can be avoided with "lilo -R" trick.
The first one is really difficult to overcome in your example.
If the filesystem on the disk is ext2 (or ext3) then there is a tool
ext2resize, which can resize the partition without losing data, but
you can't do that on a mounted partition.

Maybe you could play with chrooted installation, as someone else suggested,
but I don't have any experience in this field.

But wait, maybe there is a separate swap partition configured?
You could switch off the swap and use that partition for Debian.
I guess 64 MB could be enough. In case you have very little RAM available,
you could use a regular swap file.

Marcin




Re: Boarding SuSE with Debian

2002-08-07 Thread Marcin Sochacki
On Wed, Aug 07, 2002 at 08:46:41PM +0200, Emilio Brambilla wrote:
> using lilo -R may help you at point 14

That's a brilliant suggestion. Thanks!

Marcin




Re: Boarding SuSE with Debian

2002-08-07 Thread Marcin Sochacki
On Wed, Aug 07, 2002 at 07:55:26PM +0200, Florian Bantner wrote:
> my mission is following: Have rented a cheap server from
> an cheap hoster for a customer of ours. Only drawback: It
> is running suse linux. Since the provider is so cheap, he
> tells us: Do with the server what you want. And so I want
> Debian to take over. The problem:
> 
>   1. No access to neither floppy nor cd-rom
>   2. Only service I get is pressing the reset button
>   3. The other service is to reinstall base suse-
>  installation if the server fails to come up. 
>  This will cost me 70 EUR/USD
> 
> What is the best way to get Debian on this box? And how
> can I avoid the reboot->fail->reinstall->pay->tray again
> trap?

If the machine has a secondary HDD or unused partition, or at least
two partitions, you can install Debian parallel to the existing SuSE.

1. Install a minimal Debian system on some local box. Remember to set
   everything (kernel modules, IP address, etc.) just as you would do
   on the server.
2. tar.gz the whole installation into one big archive (ommiting /proc).
3. Copy the archive to the server.
4. Create a new filesystem on spare partition/disk (or if SuSE already
   occupies several partitions move the data, so that one of the
   partitions is free).
5. Untar the archive to the fresh filesystem.
6. Correct the entries in Debian's /etc/fstab to match those on remote
   server.
7. In SuSE's lilo.conf add a section with Debian's boot and set it
   as default (but still leave SuSE section).
8. Make sure you have "prompt" and "timeout" options in lilo.conf.
9. Run "lilo".
10. Examine the Debian setup carefully, again.
11. Reboot the machine.
12. Pray/drink a coffee while pinging the machine.
13. If it comes up -- you have a Debian system and gradually you can
remove SuSE.
14. If it doesn't come up -- ask the ISP to go to the console, reset
the machine and choose SuSE at lilo prompt. I hope they can
do it for free.

Some caveats: /proc filesystem, swap partition, lilo, fstab, sshd/telnetd.

Good luck!
Marcin




Re: Setting up an SSL Server

2002-08-03 Thread Marcin Sochacki
On Sat, Aug 03, 2002 at 05:26:54PM +0200, Teun Vink wrote:
> You can do 2 things: buy a certificate from a trusted party (e.g. Thawte
> or OpenSRS), or use an unsigned certificate. You can create an unsigned
> certificate yourself, but visitors of the https-site will be notified that
> the cert is unsigned. A certificate should cost you somewhere between $100
> and $200 a year...

To be exact, the certificate is signed in both cases, the difference is
in the signing authority. Thawte, Verisign are trusted (in theory),
your own CA (Certificate Authority) if not trusted, and that's why
most browsers complain when entering such a website.

> Installing isn't that hard. Just run "apt-get apache-ssl", and check
> http://www.apache-ssl.org for information on configuring SSL if you want
> to use apache-ssl.

Or http://www.modssl.org/ for its competitor :)
Actually the documentation on that website is precise and easy, but the
process of generating a self-signed certificate requires several runs
of openssl with special parameters. Eventually, I wrote a simple script
to make it easier.

Marcin




Re: Apache/PHP/FTP and user rights

2002-08-01 Thread Marcin Sochacki
On Thu, Aug 01, 2002 at 03:40:23PM +0200, [EMAIL PROTECTED] wrote:
> I'm facing a problem I thought would be fairly easy to deal with, but
> haven't found a proper solution. Here it is :
> 
> We have a web werver hosting a few tens of customers using
> VirtualHosts. We have mod_php and use FTP for updates, each customer
> having its own UID.
[...]

> What we consider the "right" solution would be to have Apache run as
> user.user in each virtual host. This seems to be doable with
> User/Group directives. Unfortunatly :
Apache doesn't honor those options in virtual host context, unless run
as root and recompiled with some -DBIG_SECURITY_HOLE option.
Obviously this is not a very secure solution.

Take a look here:
http://ftw.zamosc.pl/~lw/mdp/
http://luxik.cdi.cz/~devik/apache/

Wanted




Re: General Apache-Question

2002-08-01 Thread Marcin Sochacki
On Thu, Aug 01, 2002 at 02:46:08PM +0200, Jones Down wrote:
> package apache-ssl is the apache with compiled in ssl statically?
Yes.

> package apache is apache build with module support?
Yes. apache-ssl has module support, too.

> So  if  I  want  an  ssl  apache  it´s  ok  to have package apache and
> libapache-mod-ssl, right?
Yes, but modssl is a different implementation of SSL. There are two of them:
1) Apache Group's one - apache-ssl
2) modssl (http://modssl.org/)
I prefer modssl, as it has more features and better documentation.

> In other words, it´s redundant to have installed packages "apache" AND
> "apache-ssl"?
Yes.

Marcin
-- 
Windows 2000: A reliable comprehensive and integrated operating system
  platform delivering seamless interoperability, scalability,
  and performance, and broad application support.
Open Source:  No f*ing buzzwords.




Re: Newbie: Is there a basic Debian-for-ISP HOWTO?

2002-08-01 Thread Marcin Sochacki
On Thu, Aug 01, 2002 at 10:55:58AM +1000, Craig Sanders wrote:
> exim is basically smail done right.
> 
> it's adequate for a small site with low mail volumes, but it doesn't
> scale very well.

Have you got some real experimental data about exim's scalability
or just guessing?

> IMO, exim is a poor choice of default MTA by debian.  unfortunately,
> that choice was made before postfix was a viable alternative.  there
> have been a few attempts to get the default MTA changed, it gets
> discussed for a few days or weeks, most people agree that it would be
> a good thing to do, but nothing happens.

IMO, exim and postfix are comparable and there's no huge difference
which favours one of them. I use exim in all my installations, they are
usually small to medium size, but even with big ones, I would consider
exim as a good MTA.

Marcin

-- 
Windows 2000: A reliable comprehensive and integrated operating system
  platform delivering seamless interoperability, scalability,
  and performance, and broad application support.
Open Source:  No f*ing buzzwords.




Re: potato: upgrading php4

2002-07-31 Thread Marcin Sochacki
On Wed, Jul 31, 2002 at 11:41:31PM +1000, Toby Thain wrote:
> *without* doing a full upgrade to woody? (this is a production server 
> and I don't want to take any unnecessary risks)
> e.g. I want to install a PHP-based gallery 
> ( http://gallery.menalto.com/modules.php?op=modload&name=News&file=index ) 
> and it wants "4.0.4pl1 or more recent". Whaddyaknow, it 
> *specifically* refuses to install on 4.0.3pl1.

deb http://debian.0c3.net/debian-adconrad potato main contrib non-free

Wanted




Re: Using mod_auth or auth_ldap via https.

2002-07-17 Thread Marcin Sochacki
On Wed, Jul 17, 2002 at 12:36:08PM +0100, Fred Clausen wrote:
> Access control works perfectly for both modules via http but if I am
> using https then there is no prompt for credentials and the page is simply
> served out. There are no messages in the error log either. Are there in
> issues regarding the use of authentication if serving pages out via https?

Add:

AllowOverride AuthConfig

in appropriate  section.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Using mod_auth or auth_ldap via https.

2002-07-17 Thread Marcin Sochacki

On Wed, Jul 17, 2002 at 12:36:08PM +0100, Fred Clausen wrote:
> Access control works perfectly for both modules via http but if I am
> using https then there is no prompt for credentials and the page is simply
> served out. There are no messages in the error log either. Are there in
> issues regarding the use of authentication if serving pages out via https?

Add:

AllowOverride AuthConfig

in appropriate  section.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: MLM solution?

2002-07-09 Thread Marcin Sochacki
On Tue, Jul 09, 2002 at 02:32:51PM +0200, Thomas -Balu- Walter wrote:
> + Marcin Sochacki <[EMAIL PROTECTED]> [09.07.02 13:34]:
> > Mailman (http://www.list.org/) features:
> > > - administrative web-pages (for the customers)
> > YES, customizable.
> 
> Is it possible for the subscribers to work without passwords? Can the
> web-pages be disabled for the subscribers?

Working without the password also means, that users won't be allowed
to change any options, like digests, vacation feature, etc.

An admin can subscribe users and modify their settings without notyfing
them. If you disable all administrative messages, the users will never
get to know their passwords, and thus they will be unable to change settings.

OTOH you could also use the .htaccess style authentication to make
sure only admin can view the pages.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: downloads too fast, hogging whole modem line

2002-07-09 Thread Marcin Sochacki
On Tue, Jul 09, 2002 at 03:34:11AM -0400, Blu wrote:
> On Tue, Jul 09, 2002 at 11:58:24AM +0800, Dan Jacobson wrote:
> > 
> > My downloads are too fast, hogging the whole modem line.  Is there any
> > way to slow them down so I can read web pages at the same time?

You could also use pavuk (a clone of wget) for downloads, which has
a bandwidth limiting option.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: MLM solution?

2002-07-09 Thread Marcin Sochacki
Mailman (http://www.list.org/) features:

> Mailinglistmanager that supports
> - virtual hosts (and different setups for each)
YES

> - translation / customization of all automatic generated
>   messages
YES, via pygettext.

> - Newsletter-style setups 
YES, there are many posting privilege schemes available.

> - automatic handling of bounces
YES, Mailman can automatically disable an invalid address.

> - administrative web-pages (for the customers)
YES, customizable.

> - .deb :)
YES, but probably not the latest version from CVS (especially if you need
fresh i18n files, a manual installation is recommended).

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: MLM solution?

2002-07-09 Thread Marcin Sochacki

On Tue, Jul 09, 2002 at 02:32:51PM +0200, Thomas -Balu- Walter wrote:
> + Marcin Sochacki <[EMAIL PROTECTED]> [09.07.02 13:34]:
> > Mailman (http://www.list.org/) features:
> > > - administrative web-pages (for the customers)
> > YES, customizable.
> 
> Is it possible for the subscribers to work without passwords? Can the
> web-pages be disabled for the subscribers?

Working without the password also means, that users won't be allowed
to change any options, like digests, vacation feature, etc.

An admin can subscribe users and modify their settings without notyfing
them. If you disable all administrative messages, the users will never
get to know their passwords, and thus they will be unable to change settings.

OTOH you could also use the .htaccess style authentication to make
sure only admin can view the pages.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: downloads too fast, hogging whole modem line

2002-07-09 Thread Marcin Sochacki

On Tue, Jul 09, 2002 at 03:34:11AM -0400, Blu wrote:
> On Tue, Jul 09, 2002 at 11:58:24AM +0800, Dan Jacobson wrote:
> > 
> > My downloads are too fast, hogging the whole modem line.  Is there any
> > way to slow them down so I can read web pages at the same time?

You could also use pavuk (a clone of wget) for downloads, which has
a bandwidth limiting option.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: MLM solution?

2002-07-09 Thread Marcin Sochacki

Mailman (http://www.list.org/) features:

> Mailinglistmanager that supports
> - virtual hosts (and different setups for each)
YES

> - translation / customization of all automatic generated
>   messages
YES, via pygettext.

> - Newsletter-style setups 
YES, there are many posting privilege schemes available.

> - automatic handling of bounces
YES, Mailman can automatically disable an invalid address.

> - administrative web-pages (for the customers)
YES, customizable.

> - .deb :)
YES, but probably not the latest version from CVS (especially if you need
fresh i18n files, a manual installation is recommended).

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




offtopic - viruses

2002-07-07 Thread Marcin Sochacki
On Sun, Jul 07, 2002 at 04:19:56PM -0400, Russell Coker wrote:
> I do not get viruses because I do not use MS software.
> If you use Outlook then please do not put my email address in your
> address-book so that WHEN you get a virus it won't use my address in the
> >From field.

Actually, with Klez and future "smart" viruses the above sentence
is partially false. They also scan local Outlook folders and use some random
email addresses found there. No address-book is necessary.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




offtopic - viruses

2002-07-07 Thread Marcin Sochacki

On Sun, Jul 07, 2002 at 04:19:56PM -0400, Russell Coker wrote:
> I do not get viruses because I do not use MS software.
> If you use Outlook then please do not put my email address in your
> address-book so that WHEN you get a virus it won't use my address in the
> >From field.

Actually, with Klez and future "smart" viruses the above sentence
is partially false. They also scan local Outlook folders and use some random
email addresses found there. No address-book is necessary.

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Users deleting public_html and log causing Apache to fail startup

2002-07-05 Thread Marcin Sochacki
On Fri, Jul 05, 2002 at 09:03:02AM +1000, Jason Lim wrote:
> If the user deletes /home/username/log, or public_html, Apache won't load.
> And it doesn't give a useful error most times unless you start
> investigating. There doesn't seem a way to make Apache handle the
> situation gracefully, by either skipping over that virtualhost, or perhaps
> ignoring the error, or something. It just fails to load as is.

Apart from all previous solutions with careful chmod's, one could use
a logger script and make Apache serve logs to the script via a pipe.

E.g. there's a tool called cronolog, which allows to create more complex
filenaming and auto-rotation of logs. I think there is an option
in that tool to re-create missing directories, and even if there isn't
it shouldn't be very difficult to patch it.

Example:
CustomLog "|/sbin/cronolog -p '1 days' \
-S /var/log/apache/example.com/access.log \
   /var/log/apache/example.com/%Y%m%d.log" combined

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: 2 ip`s on one interface

2001-12-10 Thread Marcin Sochacki
On Mon, Dec 10, 2001 at 09:26:10AM -0800, Nick Jennings wrote:
>  This is debian-isp, puttin 2 ip's on a single interface is something
>  that a small ISP might run into somewhere along the line. If I was
>  this admin, and had never done it before, then I would ask here as
>  well. 
> 
>  YOUR post is the only off-topic post in this thread.

So, would you agree, that ANY ISP-related question should be asked
here in the first place, without even taking a short look into
documentation?

Wanted




Re: 2 ip`s on one interface

2001-12-10 Thread Marcin Sochacki
On Mon, Dec 10, 2001 at 02:11:54PM -0200, Consultoria de Informatica Cathedral 
wrote:
> How do i put 2 ip`s on a singlenet board

ARGHHH, this is debian-isp list, not debian-newbie.
I think people subscribed here are expected to know such things by default :)

Wanted




Re: 2 ip`s on one interface

2001-12-10 Thread Marcin Sochacki

On Mon, Dec 10, 2001 at 09:26:10AM -0800, Nick Jennings wrote:
>  This is debian-isp, puttin 2 ip's on a single interface is something
>  that a small ISP might run into somewhere along the line. If I was
>  this admin, and had never done it before, then I would ask here as
>  well. 
> 
>  YOUR post is the only off-topic post in this thread.

So, would you agree, that ANY ISP-related question should be asked
here in the first place, without even taking a short look into
documentation?

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: 2 ip`s on one interface

2001-12-10 Thread Marcin Sochacki

On Mon, Dec 10, 2001 at 02:11:54PM -0200, Consultoria de Informatica Cathedral wrote:
> How do i put 2 ip`s on a singlenet board

ARGHHH, this is debian-isp list, not debian-newbie.
I think people subscribed here are expected to know such things by default :)

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Webalizer SOS

2001-10-15 Thread Marcin Sochacki
On Mon, Oct 15, 2001 at 10:16:41AM +0200, Craig wrote:
> Hi debian community
> 
> Does anyone know how to get webalizer to
> re-read all the apache log files ?
> 
> Even the gunzipped ones ?

Remove the webalizer.current file and then specify all the logfiles,
one by one on the command line. Eg.:

webalizer -c /etc/some.webalizer.conf /var/log/apache/access.log.3.gz
webalizer -c /etc/some.webalizer.conf /var/log/apache/access.log.2.gz
webalizer -c /etc/some.webalizer.conf /var/log/apache/access.log.1.gz
webalizer -c /etc/some.webalizer.conf /var/log/apache/access.log.0
webalizer -c /etc/some.webalizer.conf /var/log/apache/access.log

Notice the reversed order -- the logfiles must be chronological.

Marcin

-- 
 +-+
 |  Sekcja Obslugi Informatycznej Biblioteki Glownej  !!!  !!! .!!  +
 |  Uniwersytet Gdanski   !!!  !!! !!!  |
 +  tel. (058) 5509436!!!  !!! !!!  `!! |
  `!!' `!!' |
  +-+




Re: Webalizer SOS

2001-10-15 Thread Marcin Sochacki

On Mon, Oct 15, 2001 at 10:16:41AM +0200, Craig wrote:
> Hi debian community
> 
> Does anyone know how to get webalizer to
> re-read all the apache log files ?
> 
> Even the gunzipped ones ?

Remove the webalizer.current file and then specify all the logfiles,
one by one on the command line. Eg.:

webalizer -c /etc/some.webalizer.conf /var/log/apache/access.log.3.gz
webalizer -c /etc/some.webalizer.conf /var/log/apache/access.log.2.gz
webalizer -c /etc/some.webalizer.conf /var/log/apache/access.log.1.gz
webalizer -c /etc/some.webalizer.conf /var/log/apache/access.log.0
webalizer -c /etc/some.webalizer.conf /var/log/apache/access.log

Notice the reversed order -- the logfiles must be chronological.

Marcin

-- 
 +-+
 |  Sekcja Obslugi Informatycznej Biblioteki Glownej  !!!  !!! .!!  +
 |  Uniwersytet Gdanski   !!!  !!! !!!  |
 +  tel. (058) 5509436!!!  !!! !!!  `!! |
  `!!' `!!' |
  +-+


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: webalizer

2001-10-09 Thread Marcin Sochacki
On Mon, Oct 08, 2001 at 10:30:02PM +0200, Remco van de Meent wrote:
> Maybe someone can grab the sources for the webalizer package from
> woody (i.e. webalizer version 2.01.6-something) and recompile it on
> potato (don't know if it works out of the box), and see if that works?

Yep, I was quite amazed how could all my Webalizers stop working exactly
at the same time :)

Here is Webalizer 2.01 built for Potato. Some tests seems OK.
When upgrading from 1.x with incremental processing, remember that you
have to change the format of .hist files. Read /usr/share/doc/webalizer/

http://linux.gda.pl/zasoby/webalizer/

Wanted




Re: webalizer

2001-10-09 Thread Marcin Sochacki

On Mon, Oct 08, 2001 at 10:30:02PM +0200, Remco van de Meent wrote:
> Maybe someone can grab the sources for the webalizer package from
> woody (i.e. webalizer version 2.01.6-something) and recompile it on
> potato (don't know if it works out of the box), and see if that works?

Yep, I was quite amazed how could all my Webalizers stop working exactly
at the same time :)

Here is Webalizer 2.01 built for Potato. Some tests seems OK.
When upgrading from 1.x with incremental processing, remember that you
have to change the format of .hist files. Read /usr/share/doc/webalizer/

http://linux.gda.pl/zasoby/webalizer/

Wanted


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




server mirroring

2001-09-25 Thread Marcin Sochacki

Hi!

I would like to set up a secondary server with a complete mirror of my
main production machine. In case the first one fails I could (manually)
do a switchover. I don't need things like balancing, IP-takeover, etc.

The ideal solution should include automatic, online mirroring
of all file changes from master server to the secondary one.

What is your suggestion to solve the problem?

Marcin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Reasons why sending with Exim can be slow?

2001-07-31 Thread Marcin Sochacki

On Wed, Aug 01, 2001 at 12:40:21AM +0300, Antti Tolamo wrote:
> 
> What are they? Above apply only while sending from local network.
> 
> It's not a hosts, problem and I don't run it from inetd. No other
> service has similar problems. I even reinstalled exim again.
> 
> It's not fault on OS's on local computer(unless it affects only port 25) as
> I have 98/2000 on same computer, and both of them have same problem with mail.
> 
> All networking otherwise works perfectly from LAN to email server. Exim.conf
> is same as before, I even recopied from backups my old one to be sure.

In 90% of such situations the problem was DNS (or lack of it).

1) Enable maximum logging in debugging where possible
   (exim, bind, ...).
2) Play with `host' and `dig' utilities to check whether DNS and
   reverse-DNS records for all hosts are present.
3) Try to telnet manually to port 25 and send some mail.
   Notice when the delay occurs.
4) Read logs.
5) Goto 1) :)

Wanted

-- 
  +-+
  |  Sekcja Obslugi Informatycznej Biblioteki Glownej !!!  !!! .!!  +
  |  Uniwersytet Gdanski  !!!  !!! !!!  |
  +  tel. (058) 5509436   !!!  !!! !!!  `!! |
  `!!' `!!' |
  +-+


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Exim and SMS gateways

2001-07-10 Thread Marcin Sochacki
Hi all,

I have got some problems with users on my server using email-to-SMS gateways.
They put .procmailrc like this one:

--
SENDMAIL=/usr/sbin/sendmail
:0c
* [EMAIL PROTECTED]
| $HOME/email2sms | $SENDMAIL -t
--

When the SMS gateway of someone's operator dies, the messages are bounced back
and processed again by procmail. The error message is sent to SMS gateway,
which bounces it again...

So after some time I have thousands of messages in my spool. How can
I prevent this behavior with Exim configuration options?

Marcin

-- 
  +-+
  |  Sekcja Obslugi Informatycznej Biblioteki Glownej !!!  !!! .!!  +
  |  Uniwersytet Gdanski  !!!  !!! !!!  |
  +  tel. (058) 5509436   !!!  !!! !!!  `!! |
  `!!' `!!' |
  +-+




Exim and SMS gateways

2001-07-10 Thread Marcin Sochacki

Hi all,

I have got some problems with users on my server using email-to-SMS gateways.
They put .procmailrc like this one:

--
SENDMAIL=/usr/sbin/sendmail
:0c
* ^[EMAIL PROTECTED]
| $HOME/email2sms | $SENDMAIL -t
--

When the SMS gateway of someone's operator dies, the messages are bounced back
and processed again by procmail. The error message is sent to SMS gateway,
which bounces it again...

So after some time I have thousands of messages in my spool. How can
I prevent this behavior with Exim configuration options?

Marcin

-- 
  +-+
  |  Sekcja Obslugi Informatycznej Biblioteki Glownej !!!  !!! .!!  +
  |  Uniwersytet Gdanski  !!!  !!! !!!  |
  +  tel. (058) 5509436   !!!  !!! !!!  `!! |
  `!!' `!!' |
  +-+


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Can't delete or modify file

2001-04-18 Thread Marcin Sochacki
On Wed, Apr 18, 2001 at 10:00:02AM -0400, Robert Brown wrote:
> I tried to update my debian box which is running Potato.  When libc6 tries to
> install it fails giving an error about not being able to symlink 
> libnss_db.so.2.
> I took a look at libnss_db.so.2 and things are very odd.  A 'ls -la' gives the
> following:
> 
> br-xr-S-wx1 223048236 105, 114 Oct 23  2030 libnss_db.so.2
> 
> I've tried to delete, rename, chown and chmod with out any luck.  What should 
> I
> do?  I can't even find out what 'S' as a permission is.  Any help would be
> greatly appreciated.

man chattr

Wanted




Re: Can't delete or modify file

2001-04-18 Thread Marcin Sochacki

On Wed, Apr 18, 2001 at 10:00:02AM -0400, Robert Brown wrote:
> I tried to update my debian box which is running Potato.  When libc6 tries to
> install it fails giving an error about not being able to symlink libnss_db.so.2.
> I took a look at libnss_db.so.2 and things are very odd.  A 'ls -la' gives the
> following:
> 
> br-xr-S-wx1 223048236 105, 114 Oct 23  2030 libnss_db.so.2
> 
> I've tried to delete, rename, chown and chmod with out any luck.  What should I
> do?  I can't even find out what 'S' as a permission is.  Any help would be
> greatly appreciated.

man chattr

Wanted


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: I: web mail without local mail

2001-04-09 Thread Marcin Sochacki
On Mon, Apr 09, 2001 at 06:36:25PM +0200, marco frattola wrote:
> thank you very much for the suggestion.
> i guess you're using it (you say 'works').
> how much load can it handle?

Man, this is Debian-ISP list, and people here are supposed
to know some basics of computers in general.
If you've never heard about IMP, then you are unlikely to be able
to install it properly.
The proper way to answer your question is to do it yourself!
Go to freshmeat.net, type "webmail" and you'll get a whole bunch
of software, with links, opinions and so on...

It's much more efficient than asking people here, and also
doesn't break the netiquette.

Bye,
Wanted

-- 
  +-+
  |  Sekcja Obslugi Informatycznej Biblioteki Glownej !!!  !!! .!!  +
  |  Uniwersytet Gdanski  !!!  !!! !!!  |
  +  tel. (058) 5509436   !!!  !!! !!!  `!! |
  `!!' `!!' |
  +-+




Re: I: web mail without local mail

2001-04-09 Thread Marcin Sochacki

On Mon, Apr 09, 2001 at 06:36:25PM +0200, marco frattola wrote:
> thank you very much for the suggestion.
> i guess you're using it (you say 'works').
> how much load can it handle?

Man, this is Debian-ISP list, and people here are supposed
to know some basics of computers in general.
If you've never heard about IMP, then you are unlikely to be able
to install it properly.
The proper way to answer your question is to do it yourself!
Go to freshmeat.net, type "webmail" and you'll get a whole bunch
of software, with links, opinions and so on...

It's much more efficient than asking people here, and also
doesn't break the netiquette.

Bye,
Wanted

-- 
  +-+
  |  Sekcja Obslugi Informatycznej Biblioteki Glownej !!!  !!! .!!  +
  |  Uniwersytet Gdanski  !!!  !!! !!!  |
  +  tel. (058) 5509436   !!!  !!! !!!  `!! |
  `!!' `!!' |
  +-+


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]