Re: ISP shopping cart

2003-10-24 Thread Mario Lopez
Garry,

For an excelent free software check OssComerce, for a comercial one try 
Hassan's Consulting shopping cart (http://www.irata.com/).

Mario.

>Can anyone recommend a good Shopping Cart for use in an ISP situation for
>use by numerous clients (numerous indivdual shops) so they can customize
>the look of there own shop, support SSL & PayPal or similar?
>
>OpenSource or reasonably priced other?
>
>I have downloaded and tried a few with no luck so far and was hoping to get
>some good advice/suggestions from list members that had been there and done
>that?
>
>Thanks
>Garry
>
>Highway Internet Services
>
>
>-- 
>To UNSUBSCRIBE, email to [EMAIL PROTECTED]
>with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: ISP shopping cart

2003-10-24 Thread Mario Lopez
Garry,

For an excelent free software check OssComerce, for a comercial one try Hassan's 
Consulting shopping cart (http://www.irata.com/).

Mario.

>Can anyone recommend a good Shopping Cart for use in an ISP situation for
>use by numerous clients (numerous indivdual shops) so they can customize
>the look of there own shop, support SSL & PayPal or similar?
>
>OpenSource or reasonably priced other?
>
>I have downloaded and tried a few with no luck so far and was hoping to get
>some good advice/suggestions from list members that had been there and done
>that?
>
>Thanks
>Garry
>
>Highway Internet Services
>
>
>-- 
>To UNSUBSCRIBE, email to [EMAIL PROTECTED]
>with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Apache clustering w/ load balancing and failover

2003-09-21 Thread Mario Lopez

>Why not using 'roundrobin' ???
>
>Install a couple of Web-Servers, give each Server an IP and 
>then setup for each Server a A-Record on your DNS-Server 
>pointing to the same hostname.


The problem with round robin is that when one server fails over it keeps sending them 
connections, I once saw a DNS server implemented in Perl which worked in a round robin 
fashion but making some kind of test to know if the server was up and running 
correctly, I remeber it was called something like "lb-named"

Mario.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Process -:0

2003-08-14 Thread Mario Lopez

>I was just doing some debugging on another problem and did a ps -eaf and
>saw the following line that looks very suspicious to me:
>
>UIDPID PPID   C  STIME TTY TIME CMD
>root   319  315   0  09:55 ?   00:00:00 -:0

I would check /proc/319, check for any file descriptors opened belonging to sockets, 
and try to see where is the executable file that originated that process and do a 
strings and after that strace it, to try to see what it is doing.

Mario.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: R: linux pci PRI cards

2003-08-14 Thread Mario Lopez
I think he really ment: http://www.cyclades.com/

:)

>http://www.cuyclades.com
>
>-Messaggio originale-
>Da: Adam Henry [mailto:[EMAIL PROTECTED]
>Inviato: martedi 5 agosto 2003 18.45
>A: [EMAIL PROTECTED]
>Oggetto: linux pci PRI cards
>
>I'm looking to replace a few Ascend Max boxes. 
>[...]
>
>
>-- 
>To UNSUBSCRIBE, email to [EMAIL PROTECTED]
>with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Weird Reboots

2003-07-21 Thread Mario Lopez

>I don't understand what is going on. My machine has rebooted 5 times
>between 10:00 and 18:00. I looked in syslog and the line contains 109 at
>signs (@).

It sounds kind of stupid, but once we had a Cobalt RAQ3 server, wich has an LCD 
display that shows information, as this display wasent working correctly, someone 
deducted that the server needed a reboot. This happened or 5 times in the same day or 
once a month, there was no pattern..

In any case to discard a memory problem if you have physical access to the server use 
memtest86 (www.memtest86.com) a great utility.

Mario


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Server hacked - next...?

2003-07-05 Thread Mario Lopez

>> I'm sure he meant /dev/kmem

Yes I meant /dev/kmem, sorry for that one :)

>Ok, I have that file. Can anyone point me in the direction of something
>I can do to make it more difficult to exploit this.

There are several projects that try to make Linux a secure operating system, I 
have not tested them too much, but I this kind of things can help secure your 
system. But you have to be advised that administering a system with LIDS it's a 
pain in the a**, you just cant do pretty nothing with the LIDS activated.

http://www.lids.org/

Mario.




Re: Server hacked - next...?

2003-07-05 Thread Mario Lopez

>> I'm sure he meant /dev/kmem

Yes I meant /dev/kmem, sorry for that one :)

>Ok, I have that file. Can anyone point me in the direction of something
>I can do to make it more difficult to exploit this.

There are several projects that try to make Linux a secure operating system, I have 
not tested them too much, but I this kind of things can help secure your system. But 
you have to be advised that administering a system with LIDS it's a pain in the a**, 
you just cant do pretty nothing with the LIDS activated.

http://www.lids.org/

Mario.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Server hacked - next...?

2003-07-03 Thread Mario Lopez
Hi!,

>First. We need some fresh & clean tools;
>
>kill, killall, ps, more, netstat, ls, dpkg, apt-tools, chattr, lsattr,  bash 
>(or whatever shell you prefer).
>
>
>Replace your shell with the clean one (the /etc/passwd -race).

Be aware that sometimes the rootkits also apply to the libc or even kernel 
modules, so just uploading new dinamicaly linked versions of the above programs 
will not help you, try compiling some os those tools statically (-static in 
gcc) in some other host you trust, specially "ps" command.

In any case if you have a lkm rootkit, your done, dosent matter if you upload 
static, dinamic or whatever, kernel root kits are hard to find, not even lsmod, 
rmmod can help you because it is quite easy to make a kernel module unloadable 
or even hiden, some of you may be thinking that they are safe to those kind of 
attacks because they have disabled kernel module support in theyr kernel, well 
they are wrong :), there is code, and nice white papers explaining how to 
insert kernel code through /proc/kmem, if I am not wrong Silvio Cesare 
developed this technique two or three years ago, although it hasent being 
exploited too much you must be aware of it's existance.

Mario Lopez.




Re: Server hacked - next...?

2003-07-03 Thread Mario Lopez
Hi!,

>First. We need some fresh & clean tools;
>
>kill, killall, ps, more, netstat, ls, dpkg, apt-tools, chattr, lsattr,  bash (or 
>whatever shell you prefer).
>
>
>Replace your shell with the clean one (the /etc/passwd -race).

Be aware that sometimes the rootkits also apply to the libc or even kernel modules, so 
just uploading new dinamicaly linked versions of the above programs will not help you, 
try compiling some os those tools statically (-static in gcc) in some other host you 
trust, specially "ps" command.

In any case if you have a lkm rootkit, your done, dosent matter if you upload static, 
dinamic or whatever, kernel root kits are hard to find, not even lsmod, rmmod can help 
you because it is quite easy to make a kernel module unloadable or even hiden, some of 
you may be thinking that they are safe to those kind of attacks because they have 
disabled kernel module support in theyr kernel, well they are wrong :), there is code, 
and nice white papers explaining how to insert kernel code through /proc/kmem, if I am 
not wrong Silvio Cesare developed this technique two or three years ago, although it 
hasent being exploited too much you must be aware of it's existance.

Mario Lopez.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: running two database on the same box

2003-07-03 Thread Mario Lopez

>Hi,
>
>I just wanted to check if there were any problems running mysql and
>postgresql together in a production environment.

We even have 2 instances of MySQL running on the same box, you just have to 
check obvious thinks, like that they are not using the same port on same IP, 
and that they are using different file for unix socket comunnications.

Mario.




Re: exim + courier-IMAP + MySQL

2003-07-03 Thread Mario Lopez

>
>Any help would be very welcome - also if the suggestion is to have a
>completely different setup. What I need is virtual users, webmail, and
>pop access. And mySQL seemed the easiest, as I work a lot with mySQL, so
>I know how to handle it.

I use a similar configuration as yours, concretely Qmail + Vpopmail (virtual 
users) + Courier IMAP and MySQL autenthification, I you need help regarding 
that configuration I could help.

As you have sayd you still dont have exim installed and thats maybe why you 
cannot access Maildirs, because maybe there are no maildirs to access?.

Perhaps if you could start your Courier Imap with strace, you could know what 
files or directories it is trying to open.

Mario.




Re: running two database on the same box

2003-07-03 Thread Mario Lopez

>Hi,
>
>I just wanted to check if there were any problems running mysql and
>postgresql together in a production environment.

We even have 2 instances of MySQL running on the same box, you just have to check 
obvious thinks, like that they are not using the same port on same IP, and that they 
are using different file for unix socket comunnications.

Mario.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: exim + courier-IMAP + MySQL

2003-07-03 Thread Mario Lopez

>
>Any help would be very welcome - also if the suggestion is to have a
>completely different setup. What I need is virtual users, webmail, and
>pop access. And mySQL seemed the easiest, as I work a lot with mySQL, so
>I know how to handle it.

I use a similar configuration as yours, concretely Qmail + Vpopmail (virtual users) + 
Courier IMAP and MySQL autenthification, I you need help regarding that configuration 
I could help.

As you have sayd you still dont have exim installed and thats maybe why you cannot 
access Maildirs, because maybe there are no maildirs to access?.

Perhaps if you could start your Courier Imap with strace, you could know what files or 
directories it is trying to open.

Mario.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]