lug-bg: Sendmail +SASL problem (unknown password verifier)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Dosta sym si igral sys Cyrus SASL, no tozi pyt neshto ne stana. Napravih kompilacia na Sendmail 8.12.8. Kompiliraneto e s opcii - -DSASL i -DSTARTTLS i e uspeshno: [EMAIL PROTECTED] mail]# sendmail -d0 < /dev/null Version 8.12.8 Compiled with: DNSMAP LOG MATCHGECOS MIME7TO8 MIME8TO7 NAMED_BIND NETINET NETUNIX NEWDB PIPELINING SASLv2 SCANF STARTTLS USERDB XDEBUG SYSTEM IDENTITY (after readcf) (short domain name) $w = localhost (canonical domain name) $j = localhost.localdomain (subdomain name) $m = localdomain (node name) $k = Test Prototipyt na faila sendmail.cf sendmail.mc ima v sebe si nuzhnite opcii za da raboti SASL authentikaciata: ... TRUST_AUTH_MECH(`EXTERNAL LOGIN PLAIN')dnl define(`confAUTH_MECHANISMS', `EXTERNAL LOGIN PLAIN')dnl ... Za proverka: [EMAIL PROTECTED] mail]# telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 localhost.localdomain ESMTP Sendmail 8.12.8/8.12.8; Mon, 10 Mar 2003 19:52:03 +0200 EHLO localhost 250-localhost.localdomain Hello Test [127.0.0.1], pleased to meet you 250-ENHANCEDSTATUSCODES 250-PIPELINING 250-8BITMIME 250-SIZE 250-DSN 250-ETRN 250-AUTH LOGIN PLAIN 250-DELIVERBY 250 HELP quit 221 2.0.0 localhost.localdomain closing connection Connection closed by foreign host. [EMAIL PROTECTED] mail]# Vyv faila /usr/lib/sasl2/Sendmail.conf se postavia reda: pwcheck_method: saslauthd Sled tova se puska saslauthd /usr/sbin/saslauthd -n 0 -a PAM I na pryv pogled po syslog niama nikakvi problemi. Shtom obache ot vynshnia klient opitam udostoveriavane... to propada: sendmail[21880]: unknown password verifier = Niakoi da se e sblyskval s podoben problem i da znae kak da go reshi? = Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+bM64+48lZPXaa+MRAuqdAKDE4SJOWALI+Y/gJVMSOU7tiunXRQCgtpxC +TCJYnb9RfT2rSypkY33fbg= =41dB -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Zebra + multiple routing tables (problem)
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Zdraveite.
Imam problem ot slednoto estestvo. Kogato v /etc/zebra/zebra.conf
se ukazhat pravila za routing tablica definirana ot men, to promenite
ne vlizat v deistvie.
Naprimer:
[EMAIL PROTECTED] home]# echo "222 export-1" >> /etc/iproute2/rt_tables
(taka definiram tablica 222)
NIamam porblemi rychno da zadavam statichni routing-i v neia. T.e.
moia kernel e kompiliran s poddryzhka na Multiple routing tables.
[EMAIL PROTECTED] home]# ip route show table 222
193.68.191.200/29 dev eth0 proto kernel scope link src 193.68.191.201
default via 193.68.0.195 dev eth0
Tablicata deistva mnogo dobre v kombinacia s ukazateli v ip rule. Problemyt
e, che zebra ne nanasia promeni v neia. Protokolyt zebra se poddyrzha ot
iproute
[EMAIL PROTECTED] home]# cat /etc/iproute2/rt_protos
#
# Reserved protocols.
#
#0 unspec
#1 redirect
#2 kernel
#3 boot
#4 static
#8 gated
#9 ra
#10 mrt
#11 zebra
#12 bird
#
# Used by me for gated
#
#254gated/aggr
#253gated/bgp
#252gated/ospf
#251gated/ospfase
#250gated/rip
#249gated/static
#248gated/conn
#247gated/inet
#246gated/default
Vyv faila /etc/zebra/zebra.conf za tablica 222 sa napraveni slednite
opisania za pribaviane na pravila
...
table 222
ip route 193.68.191.192/29 193.68.0.198
...
Vsichki opisania napraveni v /etc/zebra/zebra.conf otnosno table 254
(main) vlizat v sila. T.e. s definiranite po podrazbirane tablici problemi
niama. Versiata na zebra e 0.93a.
Ta niakoi ima li predstava zashto se poluchava taka?
Pozdravi
Vesselin Kolev
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE+abTa+48lZPXaa+MRAiWpAJ9+sdNTLZf7sGmdsRsQ3PpS6gCgxIrP
LTBlrbH94UC/e/iWFGvMQGE=
=2VcH
-END PGP SIGNATURE-
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: SAMBA as Primary Domain Controler ????
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tc:)) taka, kakto si go namislil... ne stava..
Pyrvo: Ako neshto prez samba se sherva za potrebitel, to e nuzhno
da se ukazhe za koi. Tova go iziskva strogiat sintaksis na smb.conf.
Pravi kolkoto se mozhe po-malko neshta "po podrazbirane". Ukazvai
vsichko podrobno. Eto ti edin primer na shering
[vlk]
comment = Vesselin Kolev - File Storage
path = /home/vlk
valid users = vlk
guest ok = no
public = no
writeable = yes
printable = no
create mode = 0600
directory mode = 0700
Pyrvo zabelezhi ukazvaneto na user, koito mozhe da dostypva
shernatata directoria. Tam mozhe da stoiat i poveche ot edin
user, razdeleni s interval. Mozhe po podoben nachin da napravish
share dostypen za celi grupi ot potrebiteli, kato ukazvash koi imat
pravo da chetat, koi da pishat i koi izonshto mogat da vlizat v
tozi share.
Sled tova e nuzhno da se opraviat pravata na failovete i directoriite
v unix. T.e. koi mozhe da chete i koi da pishe v edna directoria i t.n.
V sluchaia vinagi imai predvid, che Samba samo mapva potrebiteli
ili grupi ot UNIX, sledovatelno tam, kydeto te shte pishat i chetat
shte ima syobraziavane s definiciite za distyp na failovata systema.
Pozdravi
Vesselin Kolev
On Friday 07 Mar 2003 15:22, Krasimir Dimitrov wrote:
> ami imam edna ma6ina s samba
> koiato triabva da e Primary Domain Controler
> klientite polu4avat syob6tenie:
> "The share name was not found.
> Be sure typed it correctly"
> prilagam faila smb.conf
>
> klientite sa pod Win 9x
> v logovete niama ni6to
>
>
> krasimir
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE+aLd4+48lZPXaa+MRAmj+AKDLRgeEy5EBjat4IsOYFYIurjszrgCfdQ4l
r5LOta6Klrbc8hQzXROb+3M=
=YHV3
-END PGP SIGNATURE-
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Knoppix
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ftp://ftp.lcpe.uni-sofia.bg/LINUX/Knoppix/KNOPPIX_V3.1-2003-01-20-EN.iso Tam e i KDE edition ISO... Ili go iskash zapisan na disk? Pozdravi Vesselin Kolev On Friday 07 Mar 2003 12:11, Romeo Ninov wrote: > Търся Knoppix, някой да е теглил KNOPPIX_V3.1-2003-01-20-EN.iso > pls. > > <><><><><><><><><><><><><><><><> > Regards: Romeo Ninov > <><><><><><><><><><><><><><><><> > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+aHXz+48lZPXaa+MRAsbhAKCxOuwNvcXYWwUR2S1LOxaNqWpeLgCdFVX8 7v3MshT/DdnTdGza4+IEVTg= =pi6u -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: iptables "match mark" problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sluchva se na vseki:))) On Friday 07 Mar 2003 11:07, Georgi Chorbadzhiyski wrote: > Vesselin Kolev wrote: > > V moia predishen posting: > > > > - -A PREROUTING da se chete -A POSTROUTING... > > > > Izviniavam se za greshakta pri kopiraneto! > > Mdaaa :) drugiat pat predi da se sabudia niama da pravia nishto. > Shame on me :) dva reda po nagore ot reda koito se opitvah da > nakaram da raboti imah nastroen SNAT :) > > 10x na wsichki. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+aGYE+48lZPXaa+MRAqHvAJ94d4gsMSgSmAi3qqVYIFKQHdVyKACg5s8G 0f68DV/TSYa7Un2kNrS2YZY= =9/aL -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: iptables "match mark" problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mislia, che SNAT ne vliza v sintaksisa na PREROUTING... Ne e li pravilnoto: iptables -A PREROUTING -t nat -s 10.0.0.0/8 --match mark --mark 16 -j SNA --to 193.110.159.3 ? Pozdravi Vesselin Kolev On Friday 07 Mar 2003 10:09, Georgi Chorbadzhiyski wrote: > Здравейте, > > идеята е следната маркирам си българските мрежи с 16. Всички останали > с 8. Искам да използвам това маркиране за да мога заявките за български > мрежи да ги маскирам зад определено IP. > > iptables -A PREROUTING -t nat -s 10.0.0.0/8 --match mark --mark 16 -j SNAT > --to 193.110.159.3 > > Това според всяка документация която успях да изровя трябва да работи, > обаче вместо това получавам грешка > > iptables: Invalid argument > > Някакви идеи? > > P.S. Преди да кажете че mark модула не работи изобщо, не е това :) Следният > ред си работи перфектно > > # Tuka kvo treve da se vidi samo ot BG > iptables -A FORWARD -s ! 193.110.159.0/24 -d 193.110.159.37 --match mark > --mark 8 -j REJECT > > P.P.S. Мрежите са маркирани по следният начин: > > iptables -F -t mangle > iptables -A PREROUTING -t mangle -j MARK --set-mark 8 > > sort -n bg_nets bg_nets_unlisted | \ > while read NET > do > iptables -A PREROUTING -t mangle -s $NET -j MARK --set-mark 16 > iptables -A PREROUTING -t mangle -d $NET -j MARK --set-mark 16 > done -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+aF3g+48lZPXaa+MRAlMmAJoDZSgl65L9VLFTO15J6e0AzqJExgCfc3Ro 0jHH5Vm/30iqYee+B8X6ukc= =9zFI -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: iptables "match mark" problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 V moia predishen posting: - -A PREROUTING da se chete -A POSTROUTING... Izviniavam se za greshakta pri kopiraneto! Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+aF5Y+48lZPXaa+MRAsruAJ97p59fHyEUulYjpENRjCox+ZYnhgCfVhF4 5uL4U50AZZv96frXAJlXP08= =uW7/ -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: Re: lug-bg: sendmail - sasl
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Haide da ne pishem tintiri-mintiri, che TLS ne bil implementiran za Sendmail http://www.sial.org/sendmail/tls-relay/ Oglezhdate se, chetete i posle pishete. Stiga naprazen traffic i IRC chat manieri i ploski opit za zaformiane na t.nar. flames. On Wednesday 05 Mar 2003 11:54, Todor Belev wrote: > Eiii, > blagodaria na Vesselin za toia link. > Navremto az syshto imah golemi myki da podkaram Sendmail-a s SMTP auth e ne > stavashe i ne stavashe. Nakraia migrirah dosta uspeshno kym Postfix, > preporychvam go na vsichki prosto e pesen i konfiguriraneto i security > vsichko e na nivo- da ne govorim che imam TLSv1 predi oshte da se podade > parolkata za SMTP auth, posle i cialaoto pismo zaminava kriptiranko. > Vyobshte mnogo blaginki deto v sednmaila pylen sux. > -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+ZdIr+48lZPXaa+MRArlrAJ4lNzTOhAH0WIm1wjHWwvOtFUjwgwCg2lFN ZTJMbmsby0I47OxO1N5ggM0= =TqkN -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: sendmail - sasl
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ima edin document napisan ot Teodor Georgiev po vyprosa. Mozhesh da go namerish tuk: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/sasl.txt Pozdravi Vesselin Kolev On Wednesday 05 Mar 2003 10:39, Niki Nick wrote: > Privet grupa > > Slozih si sendmail.8.12.8 poslednia. No iskam da si pusna i SASL kam > nego. Pochetoh tuk tam dokomentacia no ne6to ne mi se poluchava buildvaneto > sas SASL. Shte pomolia ako niakoi gi polzva ako moze da mi opishe kak gi > instalira i puska. > > Sendmail instaliram po dva nachina: > 1. [sendmail-8.12.8]$ sh Build -c >[sendmail-8.12.8]$ su >[sendmail-8.12.8]# pwd >[sendmail-8.12.8]# make install > ... taka polzvam staria konfig > > 2. Ot .../devtools/OS$ cp Linux ../Site/config.Linux.m4 >Ot .../sendmail/ piskam "sh Build" >staria sendmail.mc fail go kopiram v ...cf/cf/ papkata >posledno izglezda taka: > divert(0)dnl > VERSIONID(`$Id: generic-linux.mc,v 8.1 1999/09/24 22:48:05 gshapiro Exp $') > OSTYPE(linux)dnl > DOMAIN(generic)dnl > FEATURE(`access_db', `hash -T /etc/mail/access.db') > FEATURE(`blacklist_recipients') > MAILER(local)dnl > MAILER(smtp)dnl >puskam "..cf/cf/sh Build sendmail.cf" i > "..cf/cf/sh Build install-cf" > "..sendmail/sh Build install" > "..makemap/sh Build install" .. taka i za drugite. >I ako e nuzno pravia promeni po novia etc/mail/sendmail.cf fail. Puskam > sendmail taka: /usr/sbin/sendmail -f /etc/mail/sendmail.cf -bd -q15m > > Ako imam gre6ka v izlozenoto tuk 6te sam blagodaren ako niakoi me popravi. > I ako moze da mi kaze kak da vloza i polzvaneto na SASL ... kakto i > puskaneto mu. > > > > > - > http://kino.GBG.bg - Всичко за киното > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Zb6V+48lZPXaa+MRAgFxAKDqq3X1Vfv1+JpWGOdbhpdSd8JOcwCgg4Eb rLKPY2cC6koqTU6L/06ABMw= =uTyx -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: download s wget
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pone spored men.. nai-razumnoto reshenie e da izpolzvash file s linkove, koito wget da chete. Tozi file traibva da sydyrzha po edin link na red. Toi se podava na wget s opciata --input-file=FILE Naprimer. Syzdavash si file mp3.links v /home/az V nego na otdelen red postavish linkovete. Naprimer: ... ftp://mp3.server.dom/mp3-1.mp3 ftp://mp3.server.dom/mp3-2.mp3 ... Zatvariash file-a i izvikvash wget: wget --input-file=/home/az/mp3.links Mozhesh dazhe da startirash wget v udobno za teb vreme s at ili s crond. Predimstvoto v tozi sluchai e, che filovete se tegliat edin sled drug, a ne ednovremenno. Ako zhelaesh da se tegliat po dva faila... prosto pusni dva wget procesa, na vseki podai razlichen file s list ot mp3 linkove. Tova e. Mislia, che si tyrsil imenno tova. Prav li sym? Uspeh Vesselin Kolev On Tuesday 04 Mar 2003 19:12, Yavor Ivanov wrote: > zdraveite, > > nalaga mi se da istegliq edni mp3-ki s wget oba4e problema mi e sledniq, > kak da go nakaram da gi tegli po dve navednyj, zashtoto sym s modem i go > ostavqm da tegli po celi noshti i iskam da svaliq okolo 50 mp3z i > varianite mi sa slednite: > 1. puskam navednyj vsi4kite i stava dyndyniq samo 2 mp3z se teglqt > drugite zabivat zashtoto modema nemoje da smogne. i sledovatelno trqbva > da gi debna i da puskam edna po edna tova neme udvoletvoriava. > 2. nqkaksi po 2 ili 3 da gi puskam s cron prez opredeleno vreme > no tezi varianti nemi haresvat. > - > Nqmali nqkakyf na4in download manager za konzola koito da e kato > programite za win da tegli po nqkolko file-a ako nqkoi dade greshka da ne > go zarqzva kato wget a da opita otnovo i taka dokato gi iztegli posle da > tegli sledvashtite files > > mislih po vypros-a da si pisha bash script koito da proverq da li ima > procesi s ps ako ne da puska ako ima da proverqva i taka natatyk > > neiskam X da puskam > > malko idiotsko stana dylyg mail ama... > Blagodarq > __ > 12MB-POP3-WAP-SMS-AHTИCПAM--TOBA-E-mail.bG > -- > HOB БEЗПЛATEH AДPEC - http://mail.bg/new/ > -- > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+ZOPo+48lZPXaa+MRAooMAJ4iAYCWjxlyNugUggwO+DVNF1WQwwCg9rHG L1abxM8A51ckS45dmMeYPhQ= =XgQp -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: sftp / zabrana za izluzane izvyn $HOME
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Problema se reshi s edin util, izvesten kato SCPONLY. Po princip SCPONLY e dummy shell (podoben, na tezi koito idvat s BSD/OS). Mozhe da byde svalen ot: http://www.sublimation.org/scponly/ Compilira se i instalira mnogo lesno. V systava na paketa ima shell script (sh), koito pravi chroot na daden user sh setup_chroot.sh Izpylnenieto na scripta iziskva ot vas da vyvedete v dialogov rezhim directoriata na user-a, koito shte syzdavate i chroot-vate i umeto na usera (razbira se, usera ne traibva da e syzdaden). Scriptyt ne e syvyrshen i shte vi kazhe, che niakoi directorii ne syshtestvuvat, kogato kopira biblioteki i dvoichni failove v chroot directoriata.. Napravete gi rychno. Celta na cialoto zaniatie beshe slednata. Potrebitelite imat dostyp do file-ov server pod Samba i dostypvat shernatite si directorii v ramkite na Microsoft Netowrk (TCP/IP bazirana). Tova te mogat da praviat obache samo v localnata mrezha. Kogato sa navyn (izvyn localnata mrezha), te mozhe da imat dostyp do directoriite si na filovia server chrez WinSCP, ako sa pod Windows i s sftp, ako sa pod LINUX... Kogato sa pod Samba, te ne mogat da "nadskochat" home directoriata si. Samba po princip obrazno kazano chrootva vseki resurs. No za WinSCP ne e taka i za sftp izobshto... Ta zatova mi traibvashe i tova. Da ne mozhe chrez sftp ili WinSCP da se nadskacha $HOME ot potrebitelia:)) Pozdravi Vesselin Kolev On Tuesday 04 Mar 2003 17:29, Kliment Ognianov wrote: > Vesselin Kolev wrote: > >-BEGIN PGP SIGNED MESSAGE- > >Hash: SHA1 > > > >Zdraveite, > > Kak moga da napravia taka, che pri sftp sesia potrtebitelia da ne > >mozhe da izliza ot svoiata domashna directoria. > > > > Ako triabva da dam analogia, to tia shte e s ProFTPD i s nalichnata > >tam pri konfiguracia opcia v proftpd.conf > > > > DefaultRoot ~ > > > > > > Predvaritelno balgodaria! > > > > Pozdravi > > Vesselin Kolev > >-BEGIN PGP SIGNATURE- > >Version: GnuPG v1.2.1 (GNU/Linux) > > > >iD8DBQE+ZKGg+48lZPXaa+MRAsaMAJ9xOZ/WNQhgz0A52mAYa2/QNoYMiACgvDIP > >Xl9YHS3DglWczwnTxV7jQgk= > >=Zcsn > >-END PGP SIGNATURE- > > Pusni si jail i mu dai shella da e jail -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+ZNwh+48lZPXaa+MRAoDqAKDy+Kmh09uZlE1onUKrie13bI0BKgCcCBhD lwzTKlXzwxvtfYWi9vFbiKw= =A08N -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: sftp / zabrana za izluzane izvyn $HOME
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Kak moga da napravia taka, che pri sftp sesia potrtebitelia da ne mozhe da izliza ot svoiata domashna directoria. Ako triabva da dam analogia, to tia shte e s ProFTPD i s nalichnata tam pri konfiguracia opcia v proftpd.conf DefaultRoot ~ Predvaritelno balgodaria! Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+ZKGg+48lZPXaa+MRAsaMAJ9xOZ/WNQhgz0A52mAYa2/QNoYMiACgvDIP Xl9YHS3DglWczwnTxV7jQgk= =Zcsn -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Отг: Re: Re[2]: lug-bg: sendmail <8.12.8 vulnerable
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A:) Instaliraneto go e opisval Todor Georgiev. Ne sym az:)) Lichno az bih te syvetval da sledvash tova rykovodstvo, zashtoto e pisano ot chovek s mnogo opit... No ako shte puskash Sendmail v standarten rezhim... i ne iskash da sledvash rykovodostvoto, to: Razpaketirash... posle ./Build i posle make install... Tova e... Pozdravi Vesselin Kolev On Tuesday 04 Mar 2003 15:23, Todor.lazarov [SysAdmin] wrote: > Абе за по-сигорно, ще се upgretna до 8.12.8 > Само един въпрос ??? > > До сега sendmail съм го инсталирал и конфигурирал по > това ръководство: > http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/install.txt > > Благодаря на Веселин за това. > > Но при update нужно ли е всичко да се изпълнява > говоря за т.1 до т.13 от Самата инсталация. > -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+ZJZX+48lZPXaa+MRAlLfAJ9oejg6nHsAvZVrPpaPUc48l2fb8QCfbeOb bCIrmTca2TrxrhSAY3qU69g= =8S9v -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: Re[2]: lug-bg: sendmail <8.12.8 vulnerable
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Tuesday 04 Mar 2003 12:17, Todor Lazarov wrote:
>
> Сериозен ли е проблема ???
Eto opisanieto na problema, pri tova e napisano mnogo po-razbrano
ot kolkoto CERT sa go napravili. Niakoi hora v CERT (osobeno redaktorite)
sa tzare na neiasnata misal:)
- -->
Security Advisory - RHSA-2003:073-06
- --
Summary:
Updated sendmail packages fix critical security issues
Updated Sendmail packages are available to fix a vulnerability that
may allow remote attackers to gain root privileges by sending a
carefully crafted message.
These packages also fix a security bug if sendmail is configured to use smrsh.
Description:
Sendmail is a widely used Mail Transport Agent (MTA) which is included
in all Red Hat Linux distributions.
During a code audit of Sendmail by ISS, a critical vulnerability was
uncovered that affects unpatched versions of Sendmail prior to version
8.12.8. A remote attacker can send a carefully crafted email message
which, when processed by sendmail, causes arbitrary code to be
executed as root.
We are advised that a proof-of-concept exploit is known to exist, but
is not believed to be in the wild.
Since this is a message-based vulnerability, MTAs other than Sendmail
may pass on the carefully crafted message. This means that unpatched
versions of Sendmail inside a network could still be at risk even if
they do not accept external connections directly.
In addition, the restricted shell (SMRSH) in Sendmail allows attackers to
bypass the intended restrictions of smrsh by inserting additional commands
after "||" sequences or "/" characters, which are not properly filtered or
verified. A sucessful attack would allow an attacker who has a local
account on a system which has explicitly enabled smrsh to execute arbitrary
binaries as themselves by utilizing their .forward file.
All users are advised to update to these erratum packages. For Red Hat
Linux 8.0 we have included Sendmail version 8.12.8 which is not vulnerable
to these issues. For all other distributions we have included a backported
patch which corrects these vulnerabilities.
Red Hat would like to thank Eric Allman for his assistance with this
vulnerability.
References:
http://www.cert.org/advisories/CA-2003-07.html
http://marc.theaimsgroup.com/?l=bugtraq&m=103350914307274
- --
- -
Taking Action
- -
You may address the issues outlined in this advisory in two ways:
- select your server name by clicking on its name from the list
available at the following location, and then schedule an
errata update for it:
https://rhn.redhat.com/network/systemlist/system_list.pxt
- run the Update Agent on each affected server.
- -
Changing Notification Preferences
- -
To enable/disable your Errata Alert preferences globally please log in to RHN
and navigate from "Your RHN" / "Your Account" to the "Preferences" tab.
URL: https://rhn.redhat.com/network/my_account/my_prefs.pxt
You can also enable/disable notification on a per system basis by selecting an
individual system from the "Systems List". From the individual system view
click the "Details" tab.
-
Affected Systems
-
According to our records, this errata may apply to one or more of the
systems that you've profiled with Red Hat Network. To see precisely which
systems are affected, please go to:
https://rhn.redhat.com/network/errata/systems_affected.pxt?eid=1504
The Red Hat Network Team
This message is being sent by Red Hat Network Alert to:
RHN user login:vlk_at_lcpe
Email address on file: <[EMAIL PROTECTED]>
If you lost your RHN password, you can use the information above to
retrieve it by email from the following address:
https://rhn.redhat.com/forgot_password.pxt
To cancel these notices, go to:
https://rhn.redhat.com/oo.pxt?uid=1793678&oid=2352664
- -->
Pozdravi
Vesselin Kolev
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE+ZHVh+48lZPXaa+MRAoOEAKDu02pwcCSH8oHuAA/sy84ai3JaIQCfZf2a
s5lGGjxbjHlNvCrgEmAXrJk=
=Yn1d
-END PGP SIGNATURE-
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: sendmail <8.12.8 vulnerable
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ako niakoi zhelae da gi tegli ot Bulgaria: Source code: ftp://ftp.lcpe.uni-sofia.bg/LINUX/Sendmail RPM: --> RedHat 8.0 : ftp://ftp.lcpe.uni-sofia.bg/LINUX/RedHat-Up2Date --> Mandrake 9.0 : ftp://ftp.lcpe.uni-sofia.bg/LINUX/Mandrake-Up2Date Ako ima problemi s dostypa mi pishete! Uspeh! Vesselin Kolev On Monday 03 Mar 2003 21:21, Nickola Kolev wrote: > Здравейте, > > както предварително загатна на 14 февруари Константин Ангелов, > във всички версии на Sendmail преди 8.12.8 съществува дупка, която > позволява отдалечено да се изпълнява код с root права. Днес CERT > пуснаха официално съобщение: > http://www.cert.org/advisories/CA-2003-07.html. > Обява за новата версия: http://www.sendmail.org/8.12.8.html > > Информация за други проблеми по сигурността на Sendmail: > http://marc.theaimsgroup.com/?l=bugtraq&m=103350914307274 > > Без да всявам паника, съветвам всички да се погрижат и да > обновят (било то на чисто или с кръпки) до последната версия. > > -- > _ > > Поздрави, > Никола -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+ZGXF+48lZPXaa+MRAgEJAJ0eBdkANXNhTS6dXFixnVLy4KgYsACfYP3l hcbEgQ1o4M9AHd9vQvAaqx0= =9q1O -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: AS112 + BTK
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Shte e vyzmozhno li niakoi da kazhe na administratorite na BTK, che iznasiat traffica za AS 112 navyn, vmesto da go nasochvat kym LIREX? Tova syzdava nenuzhen traffic za navyn samo... Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Yhjv+48lZPXaa+MRAvCQAKCZzyQbOLBPuV/iTm7Rwreu1Z+PSACfVaSz NZUXc20tZkk1mTxkJ4428zc= =PCPT -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: ssh (was: Izpolzvane na PuTTY i WinSCP ....)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Da, naistina! Tova e edna mnogo dobra kompilacia ot dosta interesni pohvati. Preporychvam ia na vsichki! S blagodarnosti! Vesselin Kolev On Thursday 27 Feb 2003 14:21, Georgi Chorbadzhiyski wrote: > Vesselin Kolev wrote: > > Taka, toku shto postavih rykovodstvoto. Linka e: > > > > http://www.lcpe.uni-sofia.bg/linuxdoc/openssh-key-validation/ > > Mnogo blagodaria za tazi dokumentacia! Kato sme otvorili temata za ssh > edin link s razni hitrinki koito dosta hora neznaiat: > > http://www.geocities.com/rlcomp_1999/sshcopy.html -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Xgqq+48lZPXaa+MRAi8WAKCw+MGy/PyFxpiuYd50xKCVV6iOmgCgxhDx wtQgeyof2FOTh3fjCi/E5+U= =WuTN -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Mailing list - bugfix and feature request
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dobre::) Ubedihte me:)) Imam izpit za stepen na 2-ra april... sled tova shte sedna (taka i taka shte pochivam) i shte spretna documenta. Blagodaria za proiavenia interes! Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Xevf+48lZPXaa+MRAidxAJ0YgpOFCHscxlwA+QcSTzUR9XLZeACeMFY4 NKrCfc6LU35FcnCnSNWYWP8= =j4te -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Mailing list - bugfix and feature request
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ponezhe snoshti 4-ma dushi sa me pitali za podrobnosti po tazi graffica > > http://e-lib.lcpe.uni-sofia.bg/~vlk/stat-feb-23-gen-29086345hb13.png > e dobre da dam raziasnenia za da se prestane s vyprosite (a i s niakoi otkroveni rugatni). Tochkite, koito se vizhdat na frafikata sa srednoto kolichestvo izprateni syobshtenia kato osredniavaneto e stavalo na baza 5-min Average Window. T.e. log-faila se preglezhda na 5 min. Presiavat se samo zavyrshenite sesii (za koito stat=Sent). Sled kato se syberat 14 5 minutni izvadki za chas se pravi srednoto. T.e. tochkite, koito vizhdate na vsiako skalno delenie predstavliavashto edin chas, sa vsyshnost srednia broi zavyrsheni sesii za 5 min v ramkite na tozi chas. Za da ne se pita za liniite... I siniata i zelenata linia sa ekstrapolacii na natovarvaneto, polucheni s dva razlichni algorityma po nelineini modeli. Celta e da se "predvidi" natovarvaneto (dokolkoto tova e vyzmozhno vyv vseki edin sledvasht moment). Dannite za predvidenoto natovarvane se predavat kym router, koito se zanimava s dynamichnoto zadeliane na izhodiasht kanal za poshta. Razbira se i tuk se podhozhda statisticheski kato se osredniava totalnia potok za mail po golemina. Za celta se pravi statisticheska izvadka. Sled tova tia se obrabotva syglasno razpredelenie na goleminata na elektronnite pisma podadeni kym mail hub-a v otdelnite chasovi zoni za den ot sedmicata. Vsledstvie na takava politika se ulesniava kakto managiraneto na izhodiashtia mail potok, taka i managiraneto na izhodiashtia kanal na dostavchika, pri tova dynamichno i kato cialo. Ako niakoi se interesuva ot cialata tehnologia na takova upravlenie, mozhe da mi pishe lichno. Ako se syberat poveche ot 5 dushi shte se spretne documentacia po vyprosa... Ako pyk tazi ideia ne namira privyrzhenici... niama smisyl da se opisva. Nai-syrdechni pozdravi Vesselin Kolev > Niama da obiasniavam liniite kakvo znachat, zashtoto e mnogo > slozhno. Gledaite samo tochkite. Niama da vi kazha i na koi > e tozi MTA da ne plamne pyk flame na tema "nai-dobriat > dostavchik". > -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Xc5B+48lZPXaa+MRAjxXAJ9ADfn0u5GUDM9jX3QcZXy7Uo7/8wCfSYKI kgK/UHHjq77IAiXD20H/ih0= =c01y -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Izpolzvane na PuTTY i WinSCP za vryzka kym LINUX systema raboteshta s OpenSSH chrez obmen na kliuchove - kratko rykovostvo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ima niakolko terminologichni netochnosti v rykovodstvoto i shte se postaraia da gi popravia v nai-skoro vreme. Syzheliavam za dopusnatite netochnosti i dano te ne sa obyrkali niakogo. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+XcRC+48lZPXaa+MRAilcAKCyqnqBZ3ELtC9TbD+hnKgpSYZbEQCfXymS 0kj81h4LEXFy/8EkkA7/hzk= =KT0O -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Izpolzvane na PuTTY i WinSCP za vryzka kym LINUX systema raboteshta s OpenSSH chrez obmen na kliuchove - kratko rykovostvo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Taka, toku shto postavih rykovodstvoto. Linka e: http://www.lcpe.uni-sofia.bg/linuxdoc/openssh-key-validation/ Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+XReU+48lZPXaa+MRAlDBAJ9FPN56pnelg5L12SeFmBy2HM0ZxQCeMpBT 8NYbhk/eK5qUdWCpLM+iyTI= =t9aQ -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Izpolzvane na PuTTY i WinSCP za vryzka kym LINUX systema raboteshta s OpenSSH chrez obmen na kliuchove - kratko rykovostvo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Naskoro prez svobodnoto mi vreme izpylnih otdalecheno svyrzvane na 3 offica s centralen office za dostyp do failov server. Stanciite na klientite, koito dostypvaha failovia server sa Windows NT 4.0 i Windows 2000 Pro. Failoviat server e pod LINUX (niama da kazvam kakyv, che 20 shte mi revnat shto ne e s edi kakva si distribucia mi e s tazi deto az sym izbral, shte ima obvinenia v komersializym i dr. gluposti). Za celta izpolzvah WinSCP, a na niakoi hota razreshih i shell login s PuTTY. Vsichko tova be izpylneno na osnovata na udostowerqwane na potrtebitelia na osnovata na validrane na kliuch. Pozvolih si da napisha edno malko rykovodstvo s iliustracii, koeto mozhe bi shte byde polezeno. Pozdravi i pozhelania za uspehi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+XRRS+48lZPXaa+MRAls4AKDM2jJgkZbgxmEW5mTdlde7dDkzPACgruti q0JwN7t/5Paryij8/26n3oA= =2n+c -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Mailing list - bugfix and feature request
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ne mislia, che lista traibva da se mesti... Nai-malkoto ot gledna tochka na tova, che mnogo hora shte se izkushat da moderirat. Az sym protiv moderiraneto. Tolkova mnogo rabota se svyrshi, che ot niamane veche kakvo da se pravi reshihme da mestim lista i t.n... A tezi raboti za umnite i prostite klienti sa naprabvo za chudene... Eto vi edna statisitika na PROST MTA, s kakavto se upravliava lista. Po osta X sa chasovete na denonoshtieto, po osta Y sa broia na obsluzhenite pisma, za koito v log-faila ima status=send. Viarno, configuracionnia fail nikak ne e standarten... a i mashinata e po- moshtna ot tazi na Spas i ne po-goliam upstream kanal: http://e-lib.lcpe.uni-sofia.bg/~vlk/stat-feb-23-gen-29086345hb13.png Niama da obiasniavam liniite kakvo znachat, zashtoto e mnogo slozhno. Gledaite samo tochkite. Niama da vi kazha i na koi e tozi MTA da ne plamne pyk flame na tema "nai-dobriat dostavchik". Shto se kasae do MX algorityma za obsluzhvane na izhodiashti potoci... shto ne polzvate elementarni znania za reshavane na transportni zadachi i optimizacia? S radost obiasniavam takiva i gi reshavam... pia Stolichno Tymno i hapvam pecheni mesca. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+XOvm+48lZPXaa+MRAiJaAJ9AN0gnjco1lvSKf8WVjs3NmjBc+wCgxI/k z8jOfhj/5SMkg/+8K0M+t0w= =pOpL -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Podariavam CD komplekt[was:RedHat Advanced Server -- download+buy :)]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ot tazi bezmozychna diskusia stana iasno samo edno: Koito ne polzva Debian e ili nazad, ili e komersialist ili e pylen nekadyrnik... ili se lovi na vydicata na komersialni izmami. Mnogo po bylgarski zvuchi... vinagi ima samo edno i to e nai-veliko... Goliama izlagacia nastava -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+XKqO+48lZPXaa+MRAj0yAKC+bhxiv8n/NezmqKvPztjzyfjmZgCgn1+m vrmXkWI/7MC1dD5LdU86/hQ= =zeS+ -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: SAMBA Security = Domain
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kogato SECURITY=DOMAIN, tova oznachava, che LINUX mashinata shte predostavia dadena usluga ili shte spodelia niakakva directoria na bazata na zapisite napraveni v WINDOWS DOMAIN CONTROLLER. Zatova v log-faila vizhdash redove za tyrseneto na baza ot danni... tazi baza ot danni e tazi, definirana vyrhu Windows Domain Controllera. Ako iskash da napravish PDC (Primary Domain Contoller) chrez Samba vyrhu LINUX mashina e nuzhno da napravish niakoi dopylnitelni nastroiki. PDC vkliuchva v configuracionnia si fail SECURITY=USER. Davam ti edin primeren file za celta: [global] ; Basic server settings netbios name = POGO workgroup = NARNIA ; we should act as the domain and local master browser os level = 64 preferred master = yes domain master = yes local master = yes ; security settings (must user security = user) security = user ; encrypted passwords are a requirement for a PDC encrypt passwords = yes ; support domain logons domain logons = yes ; where to store user profiles? logon path = \\%N\profiles\%u ; where is a user's home directory and where should it ; be mounted at? logon drive = H: logon home = \\homeserver\%u ; specify a generic logon script for all users ; this is a relative **DOS** path to the [netlogon] share logon script = logon.cmd ; necessary share for domain controller [netlogon] path = /usr/local/samba/lib/netlogon read only = yes write list = ntadmin ; share for storing user profiles [profiles] path = /export/smb/ntprofile read only = no create mask = 0600 directory mask = 0700 Ako imash oshte problemi... shte ti pomogna i za tiah. Pozdravi Vesselin Kolev On Wednesday 26 Feb 2003 11:12, Krasimir Dimitrov wrote: > sledva izvadka ot log fail: > > > [2003/02/24 10:44:38 ,0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367) > unable to open database. > > > > spored dokumentaciata koiato imam triabva da se izpylni komandata: > # smbpasswd -j x -r y -Uroot%parola > > samo 4e tova e za vkli4vane na ma6inata kym sy6testvuva6t domain > oba4e az iskam tova da e domain kontroler prosto za6toto niama > drugi syrvyri pod po windows > 6te sym vi blagodaren za vsiakakva pomo6t > > > prilagam prika4en fail smb.conf -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+XJNA+48lZPXaa+MRArHJAKDRy+SxuZejRLozZX5K1oiiM58E2wCfS1BJ L0yF/uc8TbJfWd1JfwuR5KI= =GzkI -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Podariavam CD komplekt[was:RedHat Advanced Server -- download+buy :)]
:)) Ti... na sebe si li si? On Tuesday 25 Feb 2003 17:22, Peter An. Zyumbilev wrote: > Zdraveite, > Redhat AS ne e chak tolkova velik. > Podariavam komplekt CD-ta Debian 3.0 r0 8cd + 1 cd s update ot r0 do r1. > Neka go vzeme chovek deto niama dobar internet i da se uveri sam che GNU > software, koito e 100% free prosto e po-dobar. > Dori ot prehvalenite komersialni alternativi. > free software + free cds => nai-dobria otgovor kam komersializma na RedHat > Pozdravi, > BIVOL > > > - Original Message - > From: "Georgi Chorbadzhiyski" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, February 25, 2003 1:18 PM > Subject: Re: lug-bg: RedHat Advanced Server -- download+buy :) > > > svetla wrote: > > > vij rh ne predlagat nishto koeto go niama i free razbirash li...prosto > > se > > > > opitvat i da manipulirat kato te obejdavat che kato si go kupish ti > > > pritejavash neshto koeto ne mojesh da imash otdrugate. docs i support, > > koeto > > > > defakto si go imash online..a kolkoto do orig. cd i blia blia blia > > ...tova e > > > > niakva gazaria..nenujna pri tova > > > >0 2 4 6 8 10 > > > > / > >/ > > / > > / > > / > >/ > > / > >TROLL-O-METER > > > > > > Thanks to Rik van Riel > > > > -- > > Georgi Chorbadzhiyski > > http://georgi.unixsol.org/ > > === >= > > > A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > > Zagora > > > To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > > === >= > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: clentmqueue - sendmail
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ami tova neshto se poluchava, kogato po niakakva prichina port 25/tcp ne e dostypen poradi niakakva prichina. Opitai telnet na port 25 na 127.0.0.1 i vizh dali ima ustanoviavane na sesia. Pozdravi Vesselin Kolev On Tuesday 25 Feb 2003 13:44, Niki Nick wrote: > Znachi malko piasnenie: > > Feb 25 12:50:02 server sendmail[25943]: h1PAo2sL025943: from=root, > size=310, class=0, nrcpts=1, > msgid=<[EMAIL PROTECTED]>, [EMAIL PROTECTED] > Feb 25 12:50:02 server sendmail[25943]: h1PAo2sL025943: to=root, > ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, > pri=30214, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: > Connection refused by [127.0.0.1] > > tova mi izliza v var/log/mail faila > > ako niakoi ima ideia dali e ot nastroika v .cf faila ili e druga > prichinata. > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+W3C0+48lZPXaa+MRAkwGAJ4grpYUln84V9cxp6yn0VPXs9ruZACfctNK WYw6mEKTsgADgSvNF6pj82Y= =3mIZ -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: RedHat Advanced Server -- download+buy :)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pak dyvchem vafli i pliuem mnogo trohi kato govorim s pylna usta... Tozi link si e dosta pristrasten i avtorite mu stradat or silno razvita fobia. Sys syshtia uspeh mozhe da se napishe i .../nomandrake.html .../nodebian.html .../noslackware.html .../no_kakvoto_vi_hrumne.html Mislia, che celta na tozi list e da obediniava horata raboteshti pod LINUX, a ne da gi razdeiniava na principa "Ti polzvash edin kakva si distribucia, znachi si glupak.. zashtoto ima samo edna syvyrshena distribucia i tia e nananana"... Tova sa pylni gluposti i nedoizhivian pubertet. Chovek izpolzva tova, koeto mu vyrshi rabota i mu haresva. Osven tova se nauchete da cenite truda na drugite i prestanete da prenasiate atmosferata na tribunite na stadionite i tuk s ovikvania i prestanete s citirania na ne do tam verni iztochnici i ne prenasiaite lichnite fobii tuk. Edin ot malkoto kompetentni otgovori po vyprosa beshe na Boris Jordanov. Dostoen za pylno syzhalenie e facta, che toi ostana nerazbran. A pri tova e chovek s ogromen opit i mozhete da se uchite ot nego na mnogo mnogo neshta, a ne da liupite semki da go "osvirkvate". Nikoi ne vi kara da polzvate edna ili druga distribucia. Kato ne iskate RH ne go polzvate i tolkova. Ami po syshtata logika mozhe da byde opliuta vsiaka edna distribucia. I ako ne traibva da polzvame tova, koeto e opliuto, to mai.. ne ostava kakvo da polzvame. Molia vi, nedeite da prevryshtame lista v mezhduselski sybor... Pozdravi i pozhelania za uspeh da vsichki Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Wy+i+48lZPXaa+MRAh0LAKCGEVr3ULuoWVR29cUTluQ4j9u+kACeOysb 3Vi5LPrmWBUM+PSsj68spRc= =5A2Y -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: moc
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vsashnost znaesh li, nai-dobre da go napravish na chisto. Svali si qt, instalirai go i posle pi kompilaciata na pluginite ukazvai tochnia pyt do gt comonentite. Ot opit kazvam, che taka stava nai- bezbolezneno. Uspeh! Vesselin Kolev > > Zdrawejte > > S Mandrake 9.0 sam. > > > > Iskam da instaliram licq-1.2.3, no imam slednia problem. Pri plugins > > ./configure --with-kde stiga do: > > > > > > > > > > checking for QT >= 2.1... yes > > configure: WARNING: environment variable QTDIR is not set > > checking for moc... /bin/moc > > configure: error: > > > > The Qt meta object compiler (moc) > > /bin/moc > > found by configure is not the one part of Qt 2.1.x. > > > > It's likely that the found one is the one shipped with > > Qt 1.xx. That one will not work. > > > > Please check your installation. > > Use the --with-qt-moc option to specify the path and name > > of the moc compiler shipped with your Qt 2.1 lib. > > Some distributions rename it to "moc2", maybe you find that > > on your system. > > > > see ./configure --help for details. > > > > [EMAIL PROTECTED] qt-gui]# > > > > > > > > > > Niakoi znae li reshenieto na tozi wapros? -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+WPa/+48lZPXaa+MRApD8AJkB+y8PwMqAZxaQsLaes9rG+vMXnwCeKxZE gPX+bed9b32lt+wwnM/NTlI= =gFyj -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: moc
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Toku shto kompilirah narochno LICQ 1.2.4 za da vidia kyde i kakvo stava. Pyrvo nameri kyde e vyprosniat fail moc. posle v configure reda zadai slednata opcia - --with-qt-moc=full_path_to_moc/moc Zabelezhi, che ukazvash ne samo pytia do tozi binaren file, no i samia fail. Tova e mnogo vazhno. Vsyshnost az sym kompiliral nova versia na qt, instaliral sym ia v otdelna directoria /usr/lib/qt3-src i kogato se nalozhi da ukazvam pri kompilacia niakoi h-file i binary (kato moc naprimer), ikazvam pytishta imenno do tazi directoria. Ako niamash qt na source mozhesh da go izteglish ot oficialnia mu site. Toi e malko golemichak i ako imash dobre vryzka kym bylgarskoto internet prostranstvo, mozhesh da go izteglish ot moia FTP server: ftp://ftp.lcpe.uni-sofia.bg/LINUX/QT/qt-x11-free-3.1.1.tar.bz2 Ako imash oshte vyprosi... dobre si doshyl! Pozdravi Vesselin Kolev > > Zdrawejte > > S Mandrake 9.0 sam. > > > > Iskam da instaliram licq-1.2.3, no imam slednia problem. Pri plugins > > ./configure --with-kde stiga do: > > > > > > > > > > checking for QT >= 2.1... yes > > configure: WARNING: environment variable QTDIR is not set > > checking for moc... /bin/moc > > configure: error: > > > > The Qt meta object compiler (moc) > > /bin/moc > > found by configure is not the one part of Qt 2.1.x. > > > > It's likely that the found one is the one shipped with > > Qt 1.xx. That one will not work. > > > > Please check your installation. > > Use the --with-qt-moc option to specify the path and name > > of the moc compiler shipped with your Qt 2.1 lib. > > Some distributions rename it to "moc2", maybe you find that > > on your system. > > > > see ./configure --help for details. > > > > [EMAIL PROTECTED] qt-gui]# > > > > > > > > > > Niakoi znae li reshenieto na tozi wapros? -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+WPSm+48lZPXaa+MRApGgAKCn3uVn2PB/ObcgMG8vbggRM+wkYQCghztW kxSDjdcVUj/F+NIgW2anwsk= =L8KQ -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Re: Mandrake 9.0 - Updates Mirror
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 "Celta e da se generira dopylnitelen traffic za chuzhbina ot hora, koito go zaplashtata po visoki tarifi i t.n." da se chete: "Celta e da NE se generira dopylnitelen traffic za chuzhbina ot hora, koito go zaplashtata po visoki tarifi i t.n." Syzheliavam za dopusnatata greshka. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+V5f7+48lZPXaa+MRAhZvAJ4kCW5Hy5/CMl3DAt2HMcsXLz30tgCgjAVX 6S0BEKLNAhd31KscZW6c+KA= =TiUF -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Mandrake 9.0 - Updates Mirror
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Tyi kato mi se nalaga redovno da updatevam serveri raboteshti s distribuciata Mandrake LINUX 9.0 reshih da otvoria za vsichki sybranite update-i. Celta e da se generira dopylnitelen traffic za chuzhbina ot hora, koito go zaplashtata po visoki tarifi i t.n. Update-tite sa samo za versia 9.0 za platforma Intel. Pone kym dneshna data ima actualnost 1:1 kym oficialnite mirrori. Adresyt e: ftp://ftp.lcpe.uni-sofia.bg/LINUX/Mandrake-Up2Date/ Vnimanie! Dostypnost do tozi ftp-server ima samo ot bylgarskoto internet prostranstvo. Shte se radvam, ako tezi update-i sa vi ot polza. Za problemi mi pishete na lichnia mail. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+V5X++48lZPXaa+MRAlRSAJ9h+vY+fe+WwFxjKtrkL85oASg81wCeKIdc evJdmXPq0rpnWn9cVyE27+k= =Etzi -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: LIR & in-addr.arpa problemi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Za 3 meseca 4 dushi (za trima znam, che sa chlenove na tozi list, a za chetvyrtia ne sym syvsem siguren) me pomoliha za sydeistvie i konsultacia pri razreshavane na problem s delegiraneto na in-addr.arpa. Nakratko shte izliza poslednia sluchai i shte obiasnia kak da deistvate v podobni sluchai. Ne ochakvaite da sreshnete v tozi posting imenata na LIR-ovete, koito sa postypvali nepravilno ili nekorektno kym klientite si. Priemete tova samo kato scenarii i varianti za reshavaneto na vyzniknalite problemi. * * * Poniatia LIR e sykrashtenie na Local Internet Registry - Localen Internet Register. Negova cel e da se grizhi za obezpechavaneto na klientite s IP adresni prostranstva na localno nivo i da osyshtestviava adresna regulacia. V syshtoto vreme LIR e i pylnomoshtnik za registrirane na in-addr.arpa domainite prilezhashti kym razdadenite mrezhovi prostranstva (nai- malko za mrezhi ot class "C", t.e. /24). Specialno za Bulgaria, RIPE predostavia na vseki nash LIR adresno prostranstvo, s koeto toi mozhe da operira, t.e. da razdava. Obiknoveno roliata na LIR se izpylniava ot ISP. Edin ot dobrite LIR v Bulgaria za momenta e LIREX. Malko istoria Predi godini syshtestvuvaha Last-resort LIR. Tova biaha takiva LIR, koito managiraha prostranstva /16. T.e. na tiah im se predostaviashe segment mrezha ot class "B" (t.e. 255 mrezhi ot class "C"). Edin ot tezi last-resort LIR biaha Digital Systems. Primer za adresno prostranstvo zadeleno za tozi last-resort LIR e 193.200.0.0/16 ili 193.68.0.0/16. Sled tova RIPE reshi da prekrati deisnostta na tezi last-resort LIR i zapochna da razdava segmenti /19 i po-malki (no nai-malko /24). Taka vseki po-goliam dostavchik mozhe da stane LIR. No dnes LIR ! = last-resort LIR (prichinite za tova sa mnogo). Malko za in-addr.arpa Sled kato edin LIR zadeli mrezha za klient, toi traibva da se pogrizhi v maximalen kratyk srok da podade zaiavka v RIPE za delegirane na syotv. in-addr.arpa domain. Na priaktika LIR mozhe da napravi tova oshte sled alokirane ot strana na RIPE na neobhodimoto mu mrezhovo prostranstvo. Samiata klient, na koito LIR predostavia mrezha ne mozhe da zapochne procedura po delegirane na in-addr.arpa. Prichinata e, che toi niama LIR identifikator i RIPE prosto niama da razgleda molbata mu. * * * Klient poluchava mrezhovo adresno prostranstvo ot strana na svoia dostavchik, koito se iaviava i LIR. Nezavisimo kolko e "shiroko" tova adresno prostranstvo, vyprosnia LIR traibva da delegira i syotvetnata in-addr.arpa za mrezhata. Vse pak tova e chast ot uslugata. V protiven sluchai klientyt poluchava nepulnocenna ot gledna tochka na DNS mrezha. Dori i deleginareno na in-addr.arpa za klientskata mrezha da se pravi na bezklasov princip po RFC 2317, to za tova e nuzhno porazhdashtia bezklasovoto delegirane domain za in-addr.arpa da e delegiran i syshtestvuva. Naprimer ako klientyt pritezhava mrezha 192.168.3.0/25, to e nuzhno da se izvyrshi bezklasova delegacia na 0.3.168.192.in-addr.arpa, a tova se pravi v zonata na domaina 3.168.192.in-addr.arpa. Za da ima efekt ot bezklasovoto delegirane, e nuzhno domaina 3.168.192.in-addr.arpa da e delegiran i da raboti. * * * Za da proverite dali delegiraneto na porazhdashtia domain e izpylneno izpratete zapitane kym ns.ripe.net ot tipa: dig @ns.ripe.net -t ns 3.168.192.in-addr.arpa Ako poluchite authoritativen otgovor za serverite za imena, znachi LIR-a si e svyrshil rabotata i ne bi traibvalo da ima problemi da vi se delegira klasovo ili bezklasovo vyporsnata syotvetstvashta na in-addr.arpa domaina mrezha. * * * Ako vse pak imate neiasnoti i sled tozi posting, mozhete da mi pishete na lichnia mail za vsiakakvi podobni problemi. Shte se postaraia da vi pomogna, no ne ochakvaite ot men da otida i da se karam s LIR. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+V4cR+48lZPXaa+MRAjj2AJ9V2nf/02B/qML3WfkB03OfygddmACfa3/h eZZvKh/d571466RuO2CDqBU= =nMBi -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Advanced SMTP Routing - custom MX hierarchy in mailertable hosts list - (Sendmail extended manual) - Documentation
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Nalozhi se malka prerabotka i popravka na pravopisni greshki po documenta: Àëòåðíàòèâíî ìàðøðóòèçèðàíå íà åëåêòðîíåí ïîùåíñêè òðàôèê ÷ðåç ñúçäàâàíå íà MX éåðàðõèÿ ðàçëè÷íà îò òàçè íà äîìåéíà íà ïîëó÷àòåëÿ Sega veche toi e vy versia 0.11. Blagodaria na Alexander Velin <[EMAIL PROTECTED]> za pomoshtta. Documentyt mozhe da byde izteglen v slednite failovi formati (napravo davam linkovete kym tiah): Plain Text: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.11.txt RichText Format: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.11.rtf OpenOffice: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.11.sxw Adobe PDF: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.11.pdf Gzipped PostScript: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.11.ps.gz MSOffice (DOC): http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.11.doc Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Vhb6+48lZPXaa+MRAjwvAKDpxGKsDwBIa5QLQ7eELGNlBlGMAgCbB2iJ 2QxPQS2st7yjAcofgQttpns= =9emD -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail vulnerability
i ot svoia dostavchik na internet uslugi razrabotka za obrabotka na poshtesnkia si trafik. Dostavchikyt pravi topologia na mrezhata na klienta i ot gledna tochka na protokola SMTP. Tuk v Bulgaria tova ne e na moda. Obiknoveno tuk dostavchikyt dori i ne predostavia na formenia si klient SMTP server. Primerno NetisSat i dosega ne sa predostavili na SU SMTP relay server... Pri tova SU e edin ot nai- golemite im klienti, a dogovora za usluga e podpisan taka, che sumata za uslugata se predplashta za godini napred. Prosto mantaliteta na tukashnite firmi za ISP uslugi e dosta razlichen ot tozi na zapadnite. Naprimer, za golemite korporativni klienti mozhe ili da se napravi mrezha ot mail-hubove za otdelnite otdeli i offici za razpredelianeto na tezhestta na traffica ili dostavchikyt da otdeli otdelna mashina(i) za centralen mail hub. V Sendmail ima instrumenti za sinhron na mail traffica za cenralizirana mrezha ot mail-hubove. Ima vyzmozhnost za balans na potoci, za prioritet pri izprashtaneto na pismata v zavisimost ot izpashtacha i t.n. Prosto se porychva konfiguracia, kakvato e nuzhna na klienta i tia si pristiga takava kakvato se iska sys dokumentacia i hora, koito da pomognat v instaliraneto i nastroikata... Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+VfAA+48lZPXaa+MRAuBVAJ0SdPKPxJghJdBbteiw7I+H7COuzACbB5JY kxkShqk6uaAOLVyAhEjvl7c= =ef4V -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Re[2]: lug-bg: Каскадно прокси
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thursday 20 Feb 2003 13:00, Todor Lazarov wrote: > > > Îáùî âçåòî òîâà êàñêàäèðàíå ìè ñå íàëîæè > ïîðàäè ïðîáëåìà ÷å ìè ñå ïîÿâèøà äâå ëèíèé. > > Íà âñÿêà åäíà îò òÿõ ñëîæèø ïî åäíî ïðîêñè > è òàêà ðàçïðåäåëèø íàòîâàðâàíåòî. > > Ñèãîðíî èìà è äðóã íà÷èí íî ìîéòå ïîçíàíèÿ ñâúðøâàò äî òóê. > > Åòî è ñõåìàòà: > > Internet Internet > -- > >|GW1 |GW2 >|Proxy1 |Proxy2 >|128Kb |1Mb >| >|| > > -- > > Klienti Klienti > > Ëèíèÿ GW2 å ñ ïîãîëÿì êàïàöèòåò > È çàòîâà Proxy1 èñêà äîìàéí .com .bg îò Proxy2 > > Àêî èìà ïîäîáúð íà÷èí ñïîäåëåòå ãî. > Çàùîòî òîçè âàðèàí êóöà îò âñÿêàäå. Ami az shte spodelia edin nachin... Razbira se pyrvata misyl be BGP, no ti sigurno shte ia othvyrlish, a i mozhe da ne e prilozhim v tovia sluchai. Az lichno bih pohdodil taka. Bih sednal i bih pomislil kak da razpredelia traffica po protokoli. Primerno HTTP i FTP puskash da minavat prez liniata s goliam kapacitet. Preporychvash im da polzvat proxy, no ne gi zadylzhavash nasila kato pravish transparent proxy setup. DNS i SMTP mozhesh da pusnesh prez "malkata" linia s kapacitet 128 Kbps. Preporychai na klientite si mail-relay prez tvoia SMTP server, koito si marshrutiziral prez "mailkata" linia. Ako ne iskat nasochvai tehnia mail trerric v goliamata linia, no pri tova go broi v limita im. Taka te shte predpochetat da polzvat tvoia SMTP relay. Syshtestvuva i drugo reshenie. Maskirash izhodiastite zaiavki kym 25/tcp zad IP adres, koito se marshrutizira po "malkata" linia. Otdeliash im edin kanal ot 64 Kbps i tova e. No lichno na men mi haresva poveche varianta sys SMTP relay. Ako napravish edna konsultacia na klientite si (siguren sym, che te shte se zaradvat na takyv podhod) mozhesh da gi nauchish kak da prenaoschat i vhodiashtia si poshtenski traffic prez tvoia SMTP server. I taka shte si reshish problema s managiraneto na SMTP protokola. Ne znam dali klientite ti polzvat mnogo uslugata elektronna poshta de.. vse pak tova, koeto az davam e samo predlozhenie. Malkata linia ia razdeli taka, che ta imash kanal za DNS. Az lichno bih slozhil edin 56 Kbps kanal samo za celta. Vse pak ti shte imash dumata, zashtoto sigurno si oceniaval natovarvaneto posledvashto potoka DNS zaiavki. Prez tozi kanal nasochi zapitvaniata za navyn kym tvoite DNS serveri. Ako klientite ti gi polzvat za forward shte uvelichish efektivnostta na DNS v sravnenie sys sluchaia, v koito shte pusnesh vsichko zaedno prez goliamata linia. Taka shte reshish problema s DNS i SMTP. Mozhesh i da postavish vytreshen NAT serveri i da natvash klientite si v zavisimost ot protokola. Izobshto tova e samo lek shtrih.. Mogat da prilozhat oshte mnogo mnogo shemi... Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+VLDT+48lZPXaa+MRAtPRAJ9A6hzsRjoprubkOep1rWW6ul4XFACdFFd2 wi54FMTiBH4ZcuRHdgLg72k= =t+VT -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Каскадно прокси
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Oshte malko dopylnenie, ako razreshite za iziasnenie na problema dokrai s dumi prosti. Po princip tova opisanie cache_peer IP_2 parent 3128 0 zabraniava ICP uslugata za proverka na cache. Sega niakoi shte si pomisliat (znam kak shte stane i zatova pravia utochneniata), che ne traibva da polzvat ICP uslugata. Ne e taka. Prosto, kogato edin host izpylniavash proxy-cache usluga se ukazhe kato parent, to taka i taka vsichko minava prez nego i pitaneto za cache malko se obezmislia. ICP obache e moshtna usluga, koiato za goliamo moe syzhalenie e malko poznata po nashite zemi i pochti neizpolzvana ot strana na klientskia softwarev svetoven mashtab. ICP proiaviava svoiata sila, kogato imame sibling (a ne parent) ukazvane na host za cache ot strana na drug cache server. Ideologiata e da se ukazhat mnogo hostove kato subling (a ne parent) i da se izprashtat UDP zaiavki za izvlichane na cache. Ako ima cache, otgovariash na kriteriite na zaiavkata, toi se vryzhta po TCP. Az primerno imam 4 takiva cache. Ot druga strana sym pomagal na poznati, koito sa iskali da imat proxy server pri sebe si i da ukazhat proxy-serverite na dostvchika si kato sibling. Niakyde e stavalo... drugade sym poluchaval divo absurdnia otgovor, che tazi usluga e v razrez z politikata na mrezhova sigurnost na firmata (!). No ako mozhete vi syvetvam da pravite sibling omrezhvane. Sibling omrezhvaneto e tolkova po-efektivno, kolkoto poveche uchastnici ima v nego, stiga te da sa razbira se svyrzani kym vas chrez sravnitelno byrza vryzka (sravnitelno spriamo traffica koito obmeniate). Ako vie ste ukazali HOST_A za sibling na vashia proxy-cache, a HOST_A e ukazal vashia proxy-cache server za svoi sibling, to tova ne e greshno i niama da dovede do bezkraina rekursia pri podavane na ICP zaiavka. Prichinata e, che ICP zaiavkata zapitva dadenata mashina za nalichen cache i ne se prodylzhava vyz osnova na nastroiki v conf. fail za sibling vyrhu drugi mashini. Pozdravi Vesselin Kolev On Thursday 20 Feb 2003 10:47, Vesselin Kolev wrote: > Napisah otgovor na Todor, no lichno. Shte e dobra da napisha > otgovora i tuk za da mozhe da se tyrsi v archiva na lista. > > Reshenieto na probleme e prosto: > > redyt > > cache_peer IP_2 parent 3128 3130 > > da se zameni s > > cache_peer IP_2 parent 3128 0 > > Inache se poluchava taka, vse edno ima ICP zapitvania > za izvlichane na nalichen cache na port 3130/udp (taka > e po standart). Ako niama nalichen cache se vryshtat > podobni syobshtenia kato v log-a, koito beshe predstaven. > > Tova e v obshti linii. > > Pozdravi > Vesselin Kolev > > On Thursday 20 Feb 2003 09:42, Todor Lazarov wrote: > > Hello lug-bg, > > > > Àêî ìîæå ìàëêî ïîìîù. > > > > Èìàì äâà ïðîêñè ñúðâåðà (squid 2.5.STABLE1) > > Èñêàì åäèíèÿ (IP_1) äà ãî âúðæà êúì äðóãèÿ. > > > > ò.å. äà ñòàíå parent íà äðóãèÿ. > > > >  squid.conf > > > > Îïèñâàì ñëåäíîòî íà ïðîêñè ñ àäðåñ IP_1: > > > > cache_peer IP_2 parent 3128 3130 > > cache_peer_domain IP_2 .com .net .bg > > > > > > À íà ïðîêñè ñ IP (IP_2). > > Äîáàâÿì ïðîêñè ñ IP_1 â access list > > > > > > Åòî è ñõåìàòà: > > > > > > IP_1 || IP_2 > > > > Íî êîãàòî ïðîêñè IP_1 ïîäàäå çàÿâêà êúì IP_2 > > â ëîãà ñå âèæäà ñëåäíîòî: > > > > 1045723268.394 0 IP_1 UDP_MISS/000 39 ICP_QUERY http://www.dir.bg/ > > - NONE/- - 1045723314.372 0 IP_1 UDP_MISS/000 43 ICP_QUERY > > http://www.007.dir.bg/ - NONE/- - > > > > Êîåòî ìå íàâåæäà íà ìèñúëòà ÷å íå å íàðåä. > > Èíà÷å àêî íÿêîé host ñå âúðæå êúì ïðîêñèòî IP_2 íÿìà ïðîáëåìè. > > > > Êúäå ãðåøà. > > > > > > -- > > Best regards, > > Todor Lazarov , M.Sc., eng. > > System and network administrator > > +359 (03051) 3345 > > Chepelare > > > > mailto:[EMAIL PROTECTED] > > -- > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+VKMN+48lZPXaa+MRAtjGAKCuFoxSFm8KPAqlcw+8z8D04KBa7gCdH6RK n6nbGbya/4CE7Sr0zMOk8Mk= =xG1X -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Каскадно прокси
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Samo edno dopylnenie kym predishniat mi otgovor. Opityt mi sochi, che po princip izpolzvaneto na cache proxy za traffic naoschen i idvasht ot bylgarskoto internet prostranstvo e neefektivno. Prichinata e, che tozi dostyp se polzva glavno za iztegliane na golemi po obem failove. Prichinata e, che po princip vryzkata do bylgarskite mrezhi bi traibvalo da e po-viskoskorostna v sravnenie s tazi za mrezhite kym chuzhbina. Neka sega si predstavim, che tezi failove se skladirat vyrhu cache (v osbhtia sluchai malko sa tezi, koito si igraiat da praviat nastroiki za max. golemina na obektite na cache-irane). Tezi failove sa tvyrde razlichni po format, po sydyrzhanie i t.n. i sa pochti v 90% specifichni za tozi, koito gi e izteglil. Sledovatelno e malko veroiatno niakoi drug potrebitel da iztegli veche nalichnia v cache file. Izliza taka, che zadelenoto cache diskovo prostranstvo se prevryshta v sklad za otpadychni failove. I efektivnost taka i ne se postiga. Zatova e dobre da se obmisli dobre, obekti s kakva golemina shte se skladirat vyrhu cache prostrantovoto na proxy-servera za da se pravi samo edno prosto zapylvane. Efektivnost se postiga pri cache-irane na po-malkite failove, kato GIF, JPG i PNG obekti, js failove i t.n.. Prichinata e, che te sa povatariashti se elementi v designa na edin sait. I efektivnostta na cache-a e tolkova po-goliama, koalkoto tozi sait se poseshtava po-chesto i to ot razlichni klienti (zashtoto ako edin klient veche e posetil daden sait, to cache-a na browsera shte podade sled tova syhraneniete failove, a niama da se pita cache-a na proxy-servera). Ot druga strana v Bulgaria cari klimat na neuvazhenie kym klientite i dosta dostavchici limitirat traffica ot i do bylgarskite mrezhi vse edno e ot i do mrezhi v chuzhbina. Ima mnogo chelnici v tova syrevnovanie i borbata za pyrvo miasto e dosta osporvana. Da spomenem syshto izpolzvaneto na transparent proxy bez syglasieto na klienta (koeto e chista proba moshenichestvo). Izobshto vseki go e idaril na pechalba i malko sa tezi, koito misliat za kachestvoto na uslugata. Pozdravi Vesselin Kolev On Thursday 20 Feb 2003 09:42, Todor Lazarov wrote: > Hello lug-bg, > > Àêî ìîæå ìàëêî ïîìîù. > > Èìàì äâà ïðîêñè ñúðâåðà (squid 2.5.STABLE1) > Èñêàì åäèíèÿ (IP_1) äà ãî âúðæà êúì äðóãèÿ. > > ò.å. äà ñòàíå parent íà äðóãèÿ. > >  squid.conf > > Îïèñâàì ñëåäíîòî íà ïðîêñè ñ àäðåñ IP_1: > > cache_peer IP_2 parent 3128 3130 > cache_peer_domain IP_2 .com .net .bg > > > À íà ïðîêñè ñ IP (IP_2). > Äîáàâÿì ïðîêñè ñ IP_1 â access list > > > Åòî è ñõåìàòà: > > > IP_1 || IP_2 > > Íî êîãàòî ïðîêñè IP_1 ïîäàäå çàÿâêà êúì IP_2 > â ëîãà ñå âèæäà ñëåäíîòî: > > 1045723268.394 0 IP_1 UDP_MISS/000 39 ICP_QUERY http://www.dir.bg/ - > NONE/- - 1045723314.372 0 IP_1 UDP_MISS/000 43 ICP_QUERY > http://www.007.dir.bg/ - NONE/- - > > Êîåòî ìå íàâåæäà íà ìèñúëòà ÷å íå å íàðåä. > Èíà÷å àêî íÿêîé host ñå âúðæå êúì ïðîêñèòî IP_2 íÿìà ïðîáëåìè. > > Êúäå ãðåøà. > > > -- > Best regards, > Todor Lazarov , M.Sc., eng. > System and network administrator > +359 (03051) 3345 > Chepelare > > mailto:[EMAIL PROTECTED] > -- -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+VJpc+48lZPXaa+MRAsO6AKC1X7Hl9S22/qiJXy2+VZuuHAjb7gCgrofB xqWDA2yBeYQDh0WuvPOpQMM= =vJfX -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Каскадно прокси
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Napisah otgovor na Todor, no lichno. Shte e dobra da napisha otgovora i tuk za da mozhe da se tyrsi v archiva na lista. Reshenieto na probleme e prosto: redyt cache_peer IP_2 parent 3128 3130 da se zameni s cache_peer IP_2 parent 3128 0 Inache se poluchava taka, vse edno ima ICP zapitvania za izvlichane na nalichen cache na port 3130/udp (taka e po standart). Ako niama nalichen cache se vryshtat podobni syobshtenia kato v log-a, koito beshe predstaven. Tova e v obshti linii. Pozdravi Vesselin Kolev On Thursday 20 Feb 2003 09:42, Todor Lazarov wrote: > Hello lug-bg, > > Àêî ìîæå ìàëêî ïîìîù. > > Èìàì äâà ïðîêñè ñúðâåðà (squid 2.5.STABLE1) > Èñêàì åäèíèÿ (IP_1) äà ãî âúðæà êúì äðóãèÿ. > > ò.å. äà ñòàíå parent íà äðóãèÿ. > >  squid.conf > > Îïèñâàì ñëåäíîòî íà ïðîêñè ñ àäðåñ IP_1: > > cache_peer IP_2 parent 3128 3130 > cache_peer_domain IP_2 .com .net .bg > > > À íà ïðîêñè ñ IP (IP_2). > Äîáàâÿì ïðîêñè ñ IP_1 â access list > > > Åòî è ñõåìàòà: > > > IP_1 || IP_2 > > Íî êîãàòî ïðîêñè IP_1 ïîäàäå çàÿâêà êúì IP_2 > â ëîãà ñå âèæäà ñëåäíîòî: > > 1045723268.394 0 IP_1 UDP_MISS/000 39 ICP_QUERY http://www.dir.bg/ - > NONE/- - 1045723314.372 0 IP_1 UDP_MISS/000 43 ICP_QUERY > http://www.007.dir.bg/ - NONE/- - > > Êîåòî ìå íàâåæäà íà ìèñúëòà ÷å íå å íàðåä. > Èíà÷å àêî íÿêîé host ñå âúðæå êúì ïðîêñèòî IP_2 íÿìà ïðîáëåìè. > > Êúäå ãðåøà. > > > -- > Best regards, > Todor Lazarov , M.Sc., eng. > System and network administrator > +359 (03051) 3345 > Chepelare > > mailto:[EMAIL PROTECTED] > -- -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+VJYq+48lZPXaa+MRAkFTAJ9RIKileuFThQtGWF7ZbIhV0/Q5GQCg86GY ess1syP+YQ3SoU1IeIZKDAk= =LEBS -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Advanced SMTP Routing - custom MX hierarchy in mailertable hosts list - (Sendmail extended manual) - Documentation
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Za da ne ostana naistna samo napisano v LUG-a, a da e dostypno v normalen format (formati) za chetene, napisah documentacia po temata: Àëòåðíàòèâíî ìàðøðóòèçèðàíå íà åëåêòðîíåí ïîùåíñêè òðàôèê ÷ðåç ñúçäàâàíå íà MX éåðàðõèÿ ðàçëè÷íà îò òàçè íà äîìåéíà íà ïîëó÷àòåëÿ Mozhete da izteglite documentaciata v slednite formati ot posochenite linkove kakto sledva: Plain Text: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.10.txt RichText Format: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.10.rtf OpenOffice: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.10.sxw Adobe PDF: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.10.pdf Gzipped PostScript: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.10.ps.gz MSOffice (DOC): http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_mailertable/smart_mailertable.0.10.doc Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+U5Ws+48lZPXaa+MRAtAdAJwMx7c+Id8G2fPDRPsPIp368fdlFQCgry9V wgethEZvTCpPJ6NxWOaxhdo= =zaKL -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Relaying Denied
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > > Problem s SMTP demona? Koy e? `nc sz.inetg.bg 25' pokazva 220 > sz.inetg.bg AvMailGate-2.0.0.5. Nyakoy da e imal podobni problemi s tova > chudo? Tova, koeto vizhdash e "nadstroika" za antivirusna zashtita. T.e. ima si MTA, koito obache e vyv "fona". Nai-chesto e Sendmail, no mozhe da se puska kato nadstroika i za drugi MTA. Poznavam tozi propdukt ot distribuciite na SuSE (mozhe da go ima i v drugi, no lichno az ne sym se sblyskval s takiva). Primerno specialno za SuSE vizh http://www.suse.de/us/private/products/suse_linux/i386/packages_professional/avmailgate.html Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Ugvy+48lZPXaa+MRAmOQAKD8dEbQLjjp19xxcFt8oCoM09UG4wCgnU06 vubQM1twFuEgNm0F7fNjaEg= =nD6u -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Skorosta na mailing lista
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ako pozvolite edin malyk analiz...
Procesyt na zabaviane v obsluzhvaneto na izhodiashtia poshtenski
potok riadko zavisi ot vida na izpolzvania MTA. V povecheto sluchai
zabavianeto e funkcia na mnogo promenlivi kato natovarvane na
mashinite na izprashtacha i poluchatelia, skorost na obsluzhvane na
DNS zaiavkite, nastroiki za max broi connekcii ot strana na izprashtastia
MTA, systoianie na prenosnata mrezha i t.n.
Ako ima problem s MTA, to efectyt shte e systemen, v smisyl takyv, che
shte se nabliudava v priblizitelno edno i syshto kolichestvo vseki pyt.
Opityt sochi, che tova NE E taka.
Az lichno ne znam vyrhu kakva mashina se obsluzhva mail-traffica za
lista, no sym siguren, che tova ne e slaba mashina, v smisyl takyv, che
ima dostatychno resursi otkym pamet i diskovo prostranstvo.
Naivno e da si predstaviame, che shte bydat napraveni stotici connekcii
za secunda i shte byde inicirano predavane na poshtenskite syobshtenia
konkretno do vseki edin chlen na lista. Pone pri men max. vyzmozhen
broi na ednovremenno obsluzhvanite connekcii kym MTA e 20. Spas
konkretno mozhe da kazhe kakvi sa nastroikite za negovite mashini.
Povecheto mail-serveri, koito priemat elektronna poshta proveriavat za
DNS informacia kato reshavat pravata i obratna zadacha v DNS. Mnogo
serveri na poluchateli (neka ne se syrdiat naikoi hora) stradat ot slabo
obsluzhvane i trudno obsluzhvat zaiavki.
Naikoi ot poluchatelite pyk izpolzvat naeti linii s malyk kapacitet, prez
koito sa pusnati tehnite mail-serveri. Obiknoveno ima mnogo povtorenia
na paketi poradi zagubi, ima nepravilno ToS-nati SMTP paketi i t.n..
Igral sym si da pravia ocenka na komplexnoto vlianie na tezi factori vyrhu
mail potoka. Traibva da vi kazha, che zakysnenia ot 20 min sa syvsem v
ramkite na normalnoto pri tolkova factori... a i sysm siguren, che MTA
na Spas ne obsluzhva samo tozi mail list, pochti sigurno obsluzhva i
korporativna poshta.
Mislia, che niamame osnovania da iziskvame po-skorostno razdavane
na "pismata".
Pozdravi
Vesselin Kolev
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE+UgoC+48lZPXaa+MRAryFAJ9op78d4Qtf0lemIe6U2NQ4wgw9swCg3Vh9
SJtwycOf2bg9nwsYxM3XaM4=
=kHfK
-END PGP SIGNATURE-
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Advanced SMTP Routing - custom MX hierarchy in mailertable hosts list - (Sendmail extended manual)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Povod da napsha tova be postinga na Mano za problemi s relay-vaneto prez sz.inetg.bg otnosno domaina linux-bulgaria.org vypreki, che tozi host e chlen na MX ierarhiata za domaina linux-bulgaria.org. Razbira se opisanoto ne se otnasia samo do konkreten domain, a e razshirena vyzmozhnost za definiraneto ot strana na administratora na MTA na svoia localna ierarhia za konkreten domain. * * * Vnimanie: Izlozhenata tuk tehnika sledva da byde prilagana samo i edinstveno ot administratori s poznania v Sendmail i DNS... i isobshto ot hora, koito znaiat kakvo vyrshat. Avtoryt ne nosi otgovornost za shtiti prichineni ot prilaganeto na opisanite tuk proceduri. * * * Neka za ulesnenie na izlozhenieto da razgledame domaina example.dom, za kogoto e definirana slednata MX ierarhia v zonata example.dom: $ORIGIN example.dom. MX 10 mail.example.dom. MX 20 mx.another-isp.dom. MX 30 mail.another-example.dom. Ot gledna tochka na administrator na localen MTA, koito chesto nasochva izhodiasht elektronen poshtenski potok kym potrebitelite na domaina example.dom, hosta s teglo MX v ierarhiata 20 (mx.another-isp.dom) e nedostizhim za nego, a hosta s teglo 10 e trudno dostypen. Za da reshi tozi problem administratoryt na DNS izpolzva "trik" pri integraciata na MTA sys DNS. Syshtestuvat dve shemi na distivie ot gledna tochka na zapisite v DNS: -> Administratoryt izpolzva nalichen domain, vidim za vsichki potrebiteli v Internet. Neka tova e my-net.dom. V nego toi pravi slednite zapisi: $ORIGIN my-net.dom. mailer-to-example 10 mail.another-example.dom. 20 mail.example.dom. Sled tova pravi nuzhnite stypki za da mozhe tezi promeni da vliazat v sila, naprimer ako e s BIND 9 ipolzva kontrolen kanal: rndc reload my-net.dom Sled kato se ubedi, che promenite sa vlezli v sila otvaria faila /etc/mail/mailertable i pravi slednite zapisi v nego: example.dom esmtp:mailer-to-example.my-net.dom. Sled tova heshira makemap hash /etc/mail/mailertable.db < /etc/mail/mailertable i vsichko e gotovo. Ako sega kym localnia MTA byde podaden poshtenski potok kym domaina example.dom, to prepredavaneto na potoka NIAMA da sledva MX ierarhiata ukazana v zonata na domina example.dom, a shte sledva MX ierarhiata ukazana v ierarhiata za mailer-to-example.my-net.dom. ->Administratoryt izpolzva localen domain, vidim samo ot servicite na mashinata, vyrhu koiato e razpolozhen MTA. Neka tova e domaina dummy.vpn i v nego ima slednoto opisanie: $ORIGIN dummy.vpn. mailer 10 mail.another-example.dom. 20 mail.example.dom. Sled kato taka napravenite zapisi v tozi domain stanat vidimi pri podavane na zaiavki kym localnia za mashinata server za imena, se pravi opisanie v /etc/mail/mailertable: example.dom esmtp:mailer.dummy.vpn. i se heshira makemap hash /etc/mail/mailertable.db < /etc/mail/mailertable S tova tozi tip konfiguracia e gotova. Obiasnenieto po neia e, che ako se nalaga izprashtane na izhodiasht elektronnen potok ot localnia MTA kym domaina example.dom, to niama da se sledva MX ierarhiata za example.dom, a shte se sledva tazi za mailer.dummy.vpn. * * * Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Ueek+48lZPXaa+MRArjXAKD6AGmdlLRe4sflLcQObTIbHoBLIwCg2abK uPx42XOzbtSFKHbw/MM7s+M= =PBYi -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Relaying Denied
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Znam, che si sys Sendmail. Prosto napravi slednoto: v /etc/mail/mailtertable napravi opisanieto: linux-bulgaria.org esmtp:linux-bulgaria.org Posle hashirai: makemap hash /etc/mail/mailtertable.db < /etc/mail/mailtertable Malyk komentar: Po tozi nachin shte ukazhesh, che niama da sybliudavash MX ierarhiata v DNS za domaina linux-bulgaria.org. Prosto pyrvo pregledai MX ierarhiata: [vlk@velociraptor vlk]$ dig -t mx linux-bulgaria.org ; <<>> DiG 9.2.1 <<>> -t mx linux-bulgaria.org ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56308 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 2, ADDITIONAL: 1 ;; QUESTION SECTION: ;linux-bulgaria.org.IN MX ;; ANSWER SECTION: linux-bulgaria.org. 12164 IN MX 50 sz.inetg.bg. linux-bulgaria.org. 12164 IN MX 100 plovdiv.inetg.bg. linux-bulgaria.org. 12164 IN MX 0 linux-bulgaria.org. ;; AUTHORITY SECTION: linux-bulgaria.org. 12164 IN NS ns4.inetg.bg. linux-bulgaria.org. 12164 IN NS ns3.inetg.bg. ;; ADDITIONAL SECTION: linux-bulgaria.org. 929 IN A 212.5.145.46 ;; Query time: 21 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Tue Feb 18 09:15:26 2003 ;; MSG SIZE rcvd: 155 [vlk@velociraptor vlk]$ Ochevidno e, che MX host s teglo 0 e nai-priviligerovania v ierarhiata i e prividno "posledna instancia" v poluchavaneto na potoka za obrabotka. Prosto vzimash imeto na tozi host i go opisvash kato mailer host za domaina v /etc/mail/mailertable. heshirash i si gotov. NO! Ima edno goliamo NO. Za da se poluchava tozi efekt pri teb, iavno ti ne dostypvash MX s teglo 0. Proveri, dostypen e i iavno samo na teb ti se nalaga da izprashtash potoka za tozi domaina na vtoria v MX ierarhiata. A toi neshto ne e dobre konfigururan. Predupredil sym Spas, no choveka, no choveka si ima rabota i iavno ne mozhe vednaga da otreagira. Ta syvet ot men. Ako imash problemi s dostypa do MX host s teglo 0 opitai s MX host s teglo 100. V smisal ukazhi go kato esmtp v mailertable. Mozhe taka da niamsh veche problemi. Pozdravi Vesselin Kolev On Monday 17 Feb 2003 22:20, Marian Popov wrote: > Ne che neshto ama tova mai Spas triabva da go vidi. > > The original message was received at Mon, 17 Feb 2003 21:24:55 +0200 > from mano.pazardjik.com [213.145.125.130] > >- The following addresses had permanent fatal errors - > <[EMAIL PROTECTED]> > (reason: 552 Relaying denied for rcpt [EMAIL PROTECTED]) > >- Transcript of session follows - > 451 4.4.1 reply: read error from linux-bulgaria.org. > > ... while talking to sz.inetg.bg.: > >>> RCPT To:<[EMAIL PROTECTED]> > > <<< 552 Relaying denied for rcpt [EMAIL PROTECTED] > 554 5.0.0 Service unavailable > > Znam che mu e kazano ama pri men toia problem se poiaviava > vinagi kogato dam Reply na niakoi message. > Ako syzdam nov ne mi go dava, kazvam go shtoto tova > moje da pomogne po niakakyv nachin za fixiraneto na problema. > > = > Marian Popov > mano at pazardjik dot com > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Ud6O+48lZPXaa+MRAoJgAKDaX/HkJuvcUeoiTI33feklIL7YpwCeKhR3 SZH7lLqoaa+5xmMS5yEZyWI= =WFWe -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail vulnerability
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kak ne ti pisna??? Vmesto da nalivash maslo v ogynia da beshe pomognal prez tova vreme za niakoi proekt. Mai si padash samo po prikazkite? Opitai v politikata. Tam shte si v svoi vodi. T.e. s mnogo dumi niama da kazvash nishto, kakto pravish i sega. Ako ne ti dostiga obem na izkazvaneto postaviash edin tag za popylvane ne prazninata i smelo davash napred. Ti si bil goliam specialist po "Vryzki s obshtestvenostta". Shto ne vzemesh da napishesh edno HOWTO po temata? Mai ne si na iasno (sigurno ti e stil), che tezi organizacii, koito vizirash si plashtat na konsorciuma Sendmail za proektirane i izgrazhdane na infrastruktura i upravlenie na elektronnia poshtenski potok. I tazi infrastruktura se uzgrazhda na korporativno nivo, a ne na nivo office kakto ti sigurno si gi predstaviash tezi neshta (sekretarka s dylgi nokti i intelekt na broiler sednala pred computer i svyrzvashta se s poshtenki server poddyrzhan ot administrator s poznania ot rannia mezozoi, koito gleda da kryshka i da si pridava vazhnost i da se hvali pred liglite v niakoi club kolko computera bil hacknal i s kolko pari bi oskubal edi koi si). Ti naprimer mozhesh li da mi napishesh edna strategia za izgrazhdane na sistema za obmen na elektronna poshta, kato v strategiata vkliuchish dopylnitelni extri kato mobilen obmen na elektronni poshtenski potoci, mrezha ot centralno upravliavani mail hubove, shemi za fortifikacia, tunelirane na poshtesnkia traffic prez virtualni i realni prostranstva, integracia na Senmail s bazi ot danni i t.n? Mozhesh da ia publikuvash ako iskash tuk. Shte e dobre i ako imash takiva projecti da ni gi predstavish da gi vidim za da ocenim na kakva baza pravish takiva generalni zakliuchenia. Mozhesh da gi pratish i na Sendmail Inc. Preprati kopie i na Paul Vixie, koito syshto e uchastval v razrabotkata na niakoi ot versiite na Sendmail. * * * Predi mesec biah pomolil za pomosht na prevod ot bylgarski na angliiski na edna documentacia za BIND. Edinstveno Ted Zlatanov <[EMAIL PROTECTED]> napravi neshto po vyprosa za koeto iskam BEZKRAINO mnogo da mu blagodaria. Drugoto az shte si go prevezhdam kato imam vreme. Mnogo hora ima tuk, koito sa privyrzhenici na bezmislenite sporove, prikazkite i citatite. Kato opre do neshto kokretno si mylchat kato naakani dechica. Bez zdrave PS. Do vchera biahme ludi-mladi, a ot dnes sme divi-samodivi. > > > > > > Kakva e ideiata? > > > > Da ne bi tia organizacii da si darjat takticheskite systemi vkliucheni > > kam Internet? Tova e prosto systemata im za elektronna poshta ;-) > > Sigurnostta na mail toaster-a koito se poddarja predpolagam ot niakav > > volnonaemen (tova li beshe dumata za "civilen" voenen?) sastav kam otdel > > "Vrazki s obshtestvenostta" edva li ima kakvoto i da bilo obshto sas > > sashtinskata deinost na tezi organizacii. Egati... > > > > Sas zdrave, > > > > -- > > Theodor MilkovNetwork Administrator > > Davidov Net Phone: +359 (2) 730158 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+UJag+48lZPXaa+MRArl9AJ9dklI1fvihNzDYHgKEEsA6tivGWACgqAxP O37/pR753UNWcNzdi9kzmK0= =T0cF -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail vulnerability
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Priateli:)) Stiga fobii i dyvkane na dyvki za baloncheta:)) Broim zhertvite predi da e grymnala bombata i predi da se znae ima li bomba:))) Pyrvo na niakoi hora moga da ima kazha, che uslugata e-mail beshe izgradena na osnovata na Sendmail. Do skoro Sendmail beshe edinistvenia MTA pokrivashto 100% RFC-tata zasiagashti elektronnata poshta. I dnes pochti 60% ot svetovnia mail traffic se dylzhi na Sendmail. Vtoro, tova za redesigna e silno nespravedlivo, zashtoto ako chovek sledi source code-a na Sendmail shte vidi, che za 2 godini se prenapisa pone 40% ot koda. Versia 8.12.x e dalech-dalech po-izgladena ot da kazhem 8.10.x. Da ne govorim, che versia 8.12.x se puska s pravata na user, a ne na root (ako niakoi sa nazad s materiala, da opresniat znaniata si). Predpolaga se, che 8.13.x shte e neshto syvsem novo. Zad samia source code stoiat dosta kadyrni programisti, koito rabotiat ne samo po tozi project, no i po kup oshte *BSD projecti. T.e. tova ne sa hora, koito sa nekadyrni i ne znaiat kakvo pishat. Nedeite da podceniavame truda i da uchastvate v ulichni protesti... Sendmail se izpolzva ot tvyrde golemi mobilni operatori i ima extri, koito drugi MTA niamat. Shto se kasae do m4. Priateli, tova e macrosen ezik i toi se polzva ne samo v Sendmail. A i v Sendmail celta mu e samo da compilira prototipite na sendmai.cf i submit.cf (razbira se izpolzva se i za syzdavaneto na make-filovete predi compilaciata). Az lichno si pipam tezi raboti rychno. Samo tozi, koito poznava syntaksisa na sendmail.cf faila mozhe da se ubedi, che ostanalite MTA imat oshte nivi hliab da izliadat dokato postignat podobna gyvkavost. Mozhe prez liatoto da organiziram edin seminar po syntax na faila sendmail.cf, stiga da ima zhelaeshti. A inache vseki software ima bygove. Kolkoto po-goliam i po-slozhen e toi, tolkova veroiatnostta za dupka, problem i t.n. e po-goliama. Nedeite da idealizirate ili totalno otrichate edin software, zashtoto tova govori losho. A i sysm siguren, che polzvashtite sendmail, koito pishat tuk sa vizhdali edva 20-30% ot sposobnostite na tozi MTA. Daite da sednem, da pochetem, da izprobvame, da sravnim i pak da govorim. Na 2-ra ili 3-ta iteracia shte se poluchat dosta uchudvashti za samite vas rezultati. Az lichno zapochnah ot poziciata na tova, che Sendmail e totalno nesiguren i dnes sym prerazgledal totalno vizhdaneto si za tozi MTA. Inache sega vseki pregrsyhta ideiata, che Sendmail e "insecure" i kazva, toi e nesiguren... nedeite taka. Daite da spreb bezmislenite sporove i da se zahvanem za neshto po-syzidatelno. Priatelski pozdravi na vsichki Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+T1OV+48lZPXaa+MRAkifAKDNi15EXr8CmOtRvgYs2ZHT9JlHXQCfYLNT TYg3TRqjFgKLK6tE3xUohcw= =7WWY -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail&DNS: Dvuposochno preminavane na poshteski traffic prez edin "Smart host"
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Iskam samo da dopylnia neshto, zashtoto se setih, che mozhe da ima batalni sceni sled prilaganeto na napisanoto tuk. Po princip nedeite da izpolzvate PREROUTING i tablicata nat. Napravete vsichko vyv verigata INPUT na tablicata filter. T.e. praviloto da e ot roda na: iptables -t filter -I INPUT -s ! $IP_IN_ISP_NET-p tcp -m tcp --dport 25:25 -j REJECT --reject-with icmp-port-unreachable i da e v sila vyrhu SMTP servera. Mozhete da ukazhete, che hosta e nedostizhim (a ne samo port 25/tcp): iptables -t filter -I INPUT -s ! $IP_IN_ISP_NET-p tcp -m tcp --dport 25:25 -j REJECT --reject-with icmp-host-unreachable Naposledyk sred mnogoto divotii, koito se nabliudavat v rodnoto internet prostranstvo mnogo na moda izliza "modernata" zabrana za vsichko de shto e ICMP. Obiknoveno zabranata se pravi na routera i vazhi za vytreshnite mashini na mrezhata. Omryzna mi da govoria, che tova e malko efektivno i zatova sega shte si spestia obiasneniata. Shte imate problem, ako dostavchikyt vi ili vie ste zabranili izhodiashtite ICMP paketi "TYPE 3". Ako te sa zabraneni shte se poluchi edin nepriaten efect, koito shte oporochi obiasnenata predi tova shema. Eto i ilustracia na efecta... Kogato vynshniat SMTP server se opita da vi predade vhodiasht za vas elektronen poshtenski potok, toi shte podade zaiavka na 25/tcp za inicirane na sesia. SMTP servera vi shte othvyrli paketa s ICMP otgovor za nedostizhimost na mashinata ili porta. Ako ICMP paketa byde sprian ot niakoi ot vashite routeri ili tozi na dostavchika vi, vynshnia SMTP server niama da znae nishto za nedostizhimostta i shte opitva novi i novi opiti za inicirane na vryzka. Tova shte dovede do zabaviane na pristigashtite syobshtenia, zashtoto vyprosnia vynshen SMTP server shte se zabavi s probite kym vashia server i niama da kontaktuva vednaga sys sledvashtia v MX ierarhiata SMTP host. Ako ICMP paketite ot tip 3 preminavat bezprepiatstveno i stignat do vynshnia SMTP, koito se opitva da predade kym vas poshtesnki potok, to togava vednaga sled poluchavaneto na ICMP paketa ot vashia server shte kontaktuva sys sledvashtia MX v ierarhiata i zalysnenieto shte e minimalno (ot poriadyka na 1-2 secundi) v sravnenie s priakoto predavane kym vashia SMTP pri idealni (zabelezhete) uslovia. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+TNPn+48lZPXaa+MRAmyrAJ46A2VvLPkDWr8/98pKh5fKIKkf0gCgqYia DhpZvPs8ND/1iIcBnT3+pxY= =6VsM -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Sendmail&DNS: Dvuposochno preminavane na poshteski traffic prez edin "Smart host"
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Tova e malko stara tema (za naikoi :)) e bolna). No mislia, che po neia ne e pisano v grupata, a e dobre da se napravi. Ideiata za "Smart host" se exploatira predi vsichko ot klienti na ISP. Tia se systoi v slednoto: klientskiat MTA ne obsluzhva predavaneto na izhodiashtia elektronen poshtenski potok do krai, a go prepredava za celta na SMTP host na dostavchika, koito vmesto nego izvyrshva obrabotkata do krai. Izpolzvaneto na "Smart host" ima tova predimstvo, che ako klientyt ima kanal s goliam kapacitet do svoia ISP, no malyk izhodiasht kanal (kym mrezhi vynshni na tezi ot ISP), to toi mozhe da oblekchi mnogo izhodiashtia si kanal (obiknoveno toi e malyk). ISP pyk taka si oblekchava managiraneto na traffica po protocoli i si spestiava mrynkania ot strana na klienti. Taka stoiat neshtata ot gledna tochka na izhodiashtia poshtenski traffic. Neka sega da opishem edna shema, pri koiato vhodiashtia kym klienta poshtenski traffic se obrabotva ot SMTP servera na dostavchika. Pri votrata shema klienta ne tovari svoia vhodiasht kanal, a izpolzva SMTP - servera na dostavhika i za priemane na vhodiashtia elektronen poshteski potok. T.e. ako se nalaga da se poluchi pismo za potrebitel na klienta, to se priema ot SMTP servera na dostavchika i se prepredava po kanala s goliam kapacitet do SMTP servera na clienta. Za da se napravi tova e nuzhno da se izpolzvat DNS trikove i iptables. Informaciata v DNS za klienstkia domain traibva da e takava, che nai- visoko v ierarhiata na MX zapisite da stoi SMTP servera na klienta. Naprimer za domaina example.dom mozhe da ima slednata iaerarhia: $ORIGIN example.dom. MX 0 mail MX 10 smtp.isp.dom. Tazi ierarhia ukazva na tova, che ako mail.example.dom e nedostypen, to vhodiashtia (!!!) elektronen poshtesnki potok shte se priema ot smtp.isp.dom. Sledovatelno triabva da napravire mail.example.dom nedostypen za vsichki SMTP serveri, koito ne sa v mrezhata s goliam kapacitet na vasheto ISP. Tova mozhete da napravite, kato zabranite dostypa do 25/tcp port s pomoshtta na iptables. Samo ne izpolzvaite politika DROP. Mnogo e vylgarno:)) i vodi do zakysnenia na pristigashtia mail. Za gyvkavost izpolzvaite politika REJECT pridruzhena ot ICMP syobshtenie za nedostypnost na port 25/tcp: iptables -t nat -I PREROUTING -s ! $IP_IN_ISP_NET -p tcp -m tcp --dport 25:25 - -j REJECT --reject-with icmp-port-unreachable S tova shemata e veche rabotosposobna. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+TLAZ+48lZPXaa+MRApz2AKCFPy3TUM5YGsfq9gcoWTvXgXZ2RQCgulM7 octEbvVRtwjFl19IlEZO1mo= =JkA8 -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Problem sys Sendmail ?
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Za syzhelenie ne si prav. Mano ne e vinoven v sluchaia, nito
negovia SMTP. Problemyt e v otsreshnata strana, t.e. v MX 50
za domaina linux-bulgaria.org, a imenno sz.inetg.bg. Eto malyk
screenshot na izpitanieto na SMTP protcola vyrhu tozi server:
[root@lcpe vlk]# telnet sz.inetg.bg 25
Trying 212.5.153.171...
Connected to sz.inetg.bg (212.5.153.171).
Escape character is '^]'.
220 sz.inetg.bg AvMailGate-2.0.0.5
helo lcpe.pip.digsys.bg
250 Hello lcpe.pip.digsys.bg, pleased to meet you
mail from: [EMAIL PROTECTED]
250 <[EMAIL PROTECTED]> ... Sender OK
rcpt to: [EMAIL PROTECTED]
552 Relaying denied for rcpt [EMAIL PROTECTED]
quit
221 Closing connection
Connection closed by foreign host.
[root@lcpe vlk]#
Prosto sz.inetg.bg ne relayva za tova domain. Tova edva li e
goliam problem, zashtoto sz.inetg.bg ne e MX RR s nai-visok
prioritet v MX ierarhiata na domaina linux-bulgaria.org i
drugite MX hostove relayvat pravilno.
Efectyt s othvyrliane na poshtata za domaina linux-bulgaria.org
mozhe da se poluchi samo ako MX 0 i MX 100 za domaina ne
rabotiat.
Spas e alarmiran za tozi efekt i sigurno shte vzeme merki.
Pozdravi
Vesselin Kolev
On Thursday 13 Feb 2003 13:03, Jivko Velikov wrote:
> Opravi si relay domains
>
> -Original Message-
> From: Marian Popov [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 12, 2003 5:59 PM
> To: [EMAIL PROTECTED]
> Subject: lug-bg: Problem sys Sendmail ?
>
>
> Niakoi moje li da mi kaje zashto poniakoga
> ne moga da izpratia mail do lug-bg ?
> Eto kakvo mi dava :
>
>
> The original message was received at Wed, 12 Feb 2003 17:43:28 +0200
> from mano.pazardjik.com [213.145.125.130]
>
>- The following addresses had permanent fatal errors -
> < <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]>
> (reason: 552 Relaying denied for rcpt
> <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED])
>
>- Transcript of session follows -
> 451 4.4.1 reply: read error from linux-bulgaria.org.
>
> ... while talking to sz.inetg.bg.:
> >>> RCPT To:< <mailto:[EMAIL PROTECTED]>
>
> [EMAIL PROTECTED]>
> <<< 552 Relaying denied for rcpt <mailto:[EMAIL PROTECTED]>
> [EMAIL PROTECTED]
> 554 5.0.0 Service unavailable
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE+TKhh+48lZPXaa+MRAtaxAKC5FyRkG6yYfNoIu+wNRrOj36vIpACdH6vZ
Gkkz/k/6X9ic8AlByfwpL30=
=AGqV
-END PGP SIGNATURE-
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: Re: Re: lug-bg: DNS vypros
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ami az mislia, che sym napisal dostatychno po vyprosa. http://www.lcpe.uni-sofia.bg/linuxdoc/classlessarpa/classless.txt No i da go prochetesh i da go napravish pak niama da trygne, zashtoto dostvchukyt ti v pristyp na mydrost ne e delegiral subdomaina in-addr.arpa 119.34.195.in-addr.arpa koito otgovoraia za mrezhata ot class C. Kato napravi tova, shte govorim pak. Dokato tova ne stane vsiakakvi prikazki sa napylno izlishni. Obazhdash se na administratorite na dostavchika i im kazvash, che si iskash in-addr.arpa zapisite.. a kak te shte se opraviat si e tiahna rabota. Za tova im se plashta vse pak. Kazvash im, che iskash bezklasovo delegirane po RFC 2317 i ne se trogvash ot lyzhite na supporta (koito obiknoveno sa nagli i bezochlivi) kak tova ne mozhe da stane i t.n... Ne znam za teb, no lichno az sym raztrogval ednogodishni dogovori s dostavchik za imenno takiva neshta (e i za tova, che bez da me predupredi me beshe pusnal prez transparent proxy). Az sym do tuk. Chetesh gornia link, pravish zonata pri teb i nabivash kancheto na dostavchika ti da ia transferira kato predi tova napravi svoiata da raboti. Po princip shtom se dava IP prostranstvo se dava i in-addr.arpa i tezi neshta se utochniavat oshte pri dogovora za otdavane na naeta linia i se praviat vednaga sled puskaneto i, a ne sled mesec, meseci, godini ili petiletki. Ako ne.. si kazvate dovizhdane! Privyrshih po tazi tema. Pozdravi Vesselin Kolev Pozdravi Vesselin Kolev On Wednesday 12 Feb 2003 16:35, Konstantin Ivanov wrote: > ami razpolagam sys slednoto mrejovo prostranstvo dadeno mi ot Bitex: > 195.34.119.0 255.255.255.192 Pravi mi vpechatlenie che ot vyn > (www.tracert.com) moga da rezolvam pravite zoni, naprimer www.rsinst.org, > no obratnata nemoga. Imashe niakakvo RFC kydeto se kazvashe kakvo triabva > da se napravi pri uslovie che mrejata ne e cial kals C a e subnet samo. > Poveche informacia shte mi e bezkraino polezna ! > -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Sm+8+48lZPXaa+MRAiYVAJ9mQF22hrNKACr6XTy6bKmx75VAAgCfa1E3 w+KCumrV9TU+AEVm0uVktqE= =l9VD -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: Re: lug-bg: DNS vypros
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vsichko e viarho napraveno pri teb. No me interesuva koi e sobstvenik na mrezhovoto prostranstvo 195.34.119.0-194.34.119.255. Toi ne si e svyrshil rabotata ama nikak. Pyrvo napravi spravka v whois na RIPE za da vidish koi e sobstvenika na mrezhata (registranta): whois -h whois.ripe.net 195.34.119 Sled kato tazi mrezha veche e registriranata ot 2 godini e meko kazano uchudvashto kak ne e delegiran syotv. in-addr.arpa domain. V tvoia slucha tova e 119.34.195.in-addr.arpa. Spravka, che niama nikakva delegacia mozhesh da napravish taka: dig @ns.ripe.net -t ns 119.34.195.in-addr.arpa Shte vidish, che niama niakakvi zapisi za serveri za imena. Taka ti mozhesh da si pravish kakvito iskash zapisi v zonata za syotv. in-addr.arpa domain, no te niama da se vizhdat ot nikogo. I taka hvashtash sega tozi, koito ti e dal mrezhata za ushite i go karash za ti napravi delegirane na zona 119.34.195.in-addr.arpa v RIPE i da ne se pravi na udaren. Vsyshtnost ne se uchudvam. Mnogo stanaha t.nar. registri... povecheto si niamat i na ideia kak se praviat razni raboti. Niakoi pyk dazhe se samonaznachavat za TLD registri i planirat kak da izmestiat ot roliata edin segashen register, ta da mozhe da spekulirat s imena na domaini i da praviat pari ot oboroti:))) te sa pyk oshte po-zle:))) osven, che sa zavistlivi i neorientirani sa ne i do tam kompetentni, da ne kazha zhalki. Pozhelavam ti supeshna borba:)) i dano nakraia da imash in-addr.arpa delegirane. V Bulgaria niakoi si niamat i na poniatie kak se pravi tova. Ako e nuzhna pomosht mi se obadi. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+SlD7+48lZPXaa+MRApIcAJ9HKBYOgy4IIl3MNBDd1ahC6LuokgCZARRs sGh7gc9sceOhLF+zRVVn/vc= =3jRA -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: knoppix na anglijski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vsyshnost ako niakoi iska da si svali Knoppix 3.1 KDE mozhe da go napravi ottuk: ftp://ftp.lcpe.uni-sofia.bg/LINUX/Knoppix/KnoppixKDE.iso stiga da e s IP adres ot bylgarskoto internet adresno prostranstvo. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Sjnh+48lZPXaa+MRAvOAAJ9Qg1Y/45C2dIXoNQ6Vu0f/XgYKmgCg4XR1 lYlYeopzyJzBwAgjDHcgfKk= =/NWi -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: DNS vypros
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Za da mozhe v IRC da se poiavi host imeto na mashinata e nuzhno da imash kakvo PTR zapisi, taka i syotveten A zapis. Inache samo s PTR ili samo s A resursen zapis ne mozhesh da minesh. Proveri dali e taka. Ako e taka, no niama pak efect, znachi zaiavkite ne se obsluzhvat ili ne dostigat do serverite ti za imena. Niama da e losho da postnesh zonite na domainite i na in-addr.arpa zonata za da se vidi tochno ot kyde idva problema (ili pone ednata hipoteza za opisanie na problema dali e obosnovata) i sledovatelno da se reshi. V edna zona za domain niama nishto taino. Pozdravi Vesselin Kolev On Wednesday 12 Feb 2003 11:01, Konstantin Ivanov wrote: > Imam DNS server na koito sam opisal 7 domaina. Vsichko si raboti, imat prav > i obraten rezolv. Stranicite se otvariat ot vsiako miasto. Problemyt e > obache che kogato klient vleze v IRC ili se dade trace izlizat samo IP > adresite. Ako se rezolvnat rychno s nslookup naprimer raboti. Kakyv moje da > e problema ? > > - > http://zavedenia.gbg.bg - Êúäå ùå õîäèì òàçè âå÷åð? > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+ShCu+48lZPXaa+MRAmFIAJ9QzmfMZLxl/W3gP1+75ptTwTzLpACfevRr gymKb086sdbhQuA4Wyx6pMs= =KOEC -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: CNAME w in-addr.arpa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ne, niama ot kakvo da se pritesniavash. Podoben efekt niama da ima. Eto shemata na razsyzhdenia: Shema 1: Samo izpolzvane na A RR bez CNAME V systava na domaina example.dom sa napraveni slednite tri definicii: $ORIGIN example.dom. pop3-1 A 192.168.90.2 pop3-2 A 192.168.90.2 pop3-3 A 192.168.90.2 V systava na 90.168.192.in-addr.arpa sa napraveni slednite definicii: $ORIGIN 90.168.192.in-addr.arpa. 2 PTR pop3-1.example.dom. 2 PTR pop3-2.example.dom. 2 PTR pop3-3.example.dom. Neka sega chrez SMTP protokol da se predade izhodiashto poshtensko syobshtenie na vynshen poshtenski server, koito proveriava sa syotvetstvie mezhdu izvlechenia PTR zapis i proverka za syotveten A zapis. Kogato vynshia server ustanovi vryzka za predavane na syobshtenieto, toi shte proveri PTR zapisa na svyrzalia se s nego IP adres. Tyi kato zapisite za 192.168.90.2 v zonata na domaina 90.168.192.in-addr.arpa sa tri i sa ravnopravni (postavete udarenie na dumichkata ravnopravni, zashtoto chesto se praviat greshni generalni izvodi). Po sluchaen nachin servera za imena, koito dava dostoverni otgovori za 90.168.192.in-addr.arpa, shte vyrne na vynshnia poshtenski server po SLUCHAEN nachin edin ot trite PTR zapisa. Naprimer mozhe da vyrne vtoriat, t.e. pop3-2.example.dom. Sled tova vynshnia poshtenski server shte napravi zapitvane kym niakoi ot dostovernite serveri za domaina example.dom s cel izvlichane na A resursen zapis za pop3-2.example.dom. Shte mu byde vyrnat otgovora 192.168.90.2 Ottuk vynshnia server shte napravi zaklichenie, che vsichko e nared i shte propusne maila za po-natatyshna obrabotka. Shema 2: S izpolzvane na CNAME Neka v zonata na domaina example.dom sa napraveni slednite definicii: $ORIGIN example.dom. pop3-1 A 192.168.90.2 pop3-2 CNAME pop3-1 pop3-3 CNAME pop3-1 a v prilezhashtia na adresnoto prostranstvo in-addr.arpa domain te da sa $ORIGIN 90.168.192.in-addr.arpa. 2 PTR pop3-1.example.dom. 2 PTR pop3-2.example.dom. 2 PTR pop3-3.example.dom. Neka sega vynshnia server za priemane na poshta zapita niakoi ot dostvernite serveri za imena za domaina 90.168.192.in-addr.arpa za izvlichane na PTR resursen zapis za 192.168.90.2. Shte poluchi po sluchaen zapis edin ot trite vyzmozhni PTR zapisa. Neka vyrne naprimer pop3-3.example.dom. Sled tova shte byde napravena proverka dali ima napraven zapis za pop3-3 v zonata na domaina example.dom. Za celta shte byde zapitan niakoi ot authoritativnite serveri otgovorni za tozi domain i shte byde vyrnat CNAME otgovor. pop3-3 CNAME pop3-1 pop3-1 A 192.168.90.2 Vyznhniat server za imena shte vidi, che host pop3-3.example.dom naistina syshtestvuva i shte propusne syobshtenieto za po-natatyshna obrabotka. *** Izvod: Zapitvaneto stava v posledovatelnostta PTR --> A (CNAME). Zabelezhete obache, che ako shemata se provede v obratnia red A(CNAME)--> PTR syotvetstvie niama da se poluchi. Vyzmozhno e poniakoga udostoveriavaneto na priemashtia server da ne dopuska CNAME (mozhe taka da e napisana zashtitata). Tova ne e pravilno, no az sym go vizhdal na 2-3 mesta. No tova e po-skoro izkliuchenie. Az lichno, za da izbiagvam podobni kolizii pravia ne CNAME, a A resursni zapisi (kakto e v shema 1). Pozdravi Vesselin Kolev On Wednesday 12 Feb 2003 01:41, [EMAIL PROTECTED] wrote: > Blagodarq, Veselin za otgowora. Stawa wupros za pop3 serveri, no i do > www serveri shete se stigne. Problema mi e che nqkoi pop3 serveri, > dokolkoto znam na mail.bg, iziskwat "revers lookup" na ip-to za da mozesh > da im polzwash pop3 server-a. Towa oznachawa li, che sredno wednuz na 3 > puti shte uspqwam da se swurza sus suotwetniq pop3 server ? Blagodarq! > > Petko > > > > > --- >- Ïðàâíî-èíôîðìàöèîííà ñèñòåìà ËÅÊÑ (http://laws.lex.bg) > Íåêà ïðàâîòî áúäå ñ òåá! -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Sf6q+48lZPXaa+MRAl+2AKCaafKwvv4ygbkUMEZ89qNbqbg5FQCeLrVK 57sgrfm8PHxtX4re3UUnP/Q= =EMpa -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Re: lug-bg: Тунел между две мрежи
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Emi ... neka pyrvo drugite neshta da se svyrshat. Osven tova v naspisanoto ot men ne sa zasegnati i mnogo drugi aspekti na tuneliraneto.. overload, ocenka na CPU-time, managirane na MTU i t.n... no naistna tova e ideia i ako ostane vreme mozhe i da napisaha podobno neshto kato e dobre da se opishe i IPSec v konteksta na tuneliraneto, Proxy-ARP shemi i t.n.. M/u drugoto kato kaza za hardware... imam edin tunnel, koito e izgraden mezhdu mashina Pentium na 100 MHz i 128 MB RAM i druga, Celleron 366 MHz i 256 MB RAM i prez nego minava sredno 13 Mbps traffic. Ne sym si igral da vidia dali mozhe da se vdigne i poveche. Takiva raboti... Pozdravi Vesselin Kolev On Tuesday 11 Feb 2003 17:36, Marian Popov wrote: > Vesselin Kolev - Tunnel Master :)) > > Shte mi e mnogo interesno ako napishesh edna podrobna > statia za tunelite, kak se izgrajdat, kakyv hardware iziskvat > i obshto vzeto neshto kato tezi 2-3 pisma deto gi napisa tuka > no v edno cialo i da go slojish niakyde v web-a si kato > tezi statii za DNS. > > Blagodaria. > > - Original Message - > From: "Vesselin Kolev" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Sunday, February 09, 2003 5:21 PM > Subject: Re: lug-bg: Òóíåë ìåæäó äâå ìðåæè > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > Malko osobenosti sledvashti moia predishen posting... > > > > Vse pak dobre e mashinite ti, chrez koito pravish tunnela > > da sa s moshten processor i poveche pamet. Razbira se ne > > si misli za neshto poveche ot Celleron na 500 MHz i 512 MB RAM. > > Tazi mosht, koiato spomenavam shte ti e nuzhna samo ako shte > > pravish goliam traffic v tunnela i shte ima mnogo zaiavki. > > > > Primerno, ako shte prekarvash 10 Mbps prez tunnela shte ti > > stigne i edin Pentium MMX na 200 MHz s 256 MB RAM.. Viarno, > > malko bavni shte sa dogovoarianiata (efecta mozhesh da go > > vidish kato ustanovish sesia anagazhirashta goliama lenta ot > > traffica i pingvash host v drugata mrezha - shte vidish kak ot > > vremena 3-4 msec shte se kachish na 100-200, che i poveche). > > Za da izbegnesh pone malko nepriatnite efekti si poigrai malko s ToS > > markirovkata na paketite. Mozhe da ima poniakoga i zaguba > > na paketi, tova obache e pri nalichieto na mnogo zaiavki za > > preminavane v tunnela. Ako v mrezhata si imash liubiteli na > > "Ping ot death" i dr takiva entusiasti sys selsko i poluseslko > > vyzpitanie, napravi na dvata kraia na tunnela limit na goleminata > > i na broia ICMP ping paketi za da smekchish efektite ot detskite > > igri. No ne zabraniavai ICMP echo/request.. glupavo e. > > > > Ako shte gradish mrezha s kapacitet ot 100 Mbps shte e dobre > > da se podgotvish po-dobre otkym hardware (istinata e, che nikoga > > niama da ia dokarash do proeknia kapacitet, no tova e dylga tema). > > Edin router ot > > roda na Athlon na 750 MHz i 516 RAM kakyvto az izpolzvam, > > shte opravi rabotata, > > ako ne puskash na routerite X, Squid i java orientirani HTTPD-ta > > (ne che i s tiah ne mozhe da se mine, no vseki iska idealna > > mrezhova kartina). Opityt mi sochi, che s takava mashina > > mozhesh da vyrshish idealno rabota dori kato imash 3 izgradeni > > tunela kym koito mashinata ti e svyrzana. > > > > Napravo ti davam primer, zashtoto v momenta minavam prez > > tunnel. V momenta traffica prez tunnela e 17.29 Mbps. Tunnela > > e izgraden m/u dve Intelski 10/100 Mbps. Tunnela preminava > > prez 4 mashini i 2 switcha. Vryzkata ot edinia krai na tunnela > > do drugia e vyv FDX Mode. > > > > Eto ti rezultata ot edin traceroute do free.techno-link.com > > > > [vlk@newton vlk]$ traceroute free.techno-link.com > > traceroute to free.techno-link.com (212.91.161.253), 30 hops max, 38 byte > > packets > > 1 nat-router-to-digsys.backbone-2.vpn.lcpe.uni-sofia.bg (192.168.100.1) > > 0.353 ms 0.201 ms 0.167 ms > > 2 eth-out.backbone-1.lcpe.uni-sofia.bg (62.44.103.2) 2.477 ms 2.303 > > ms 3.261 ms > > 3 Sofia4.BG.EU.net (193.68.0.198) 3.089 ms 3.654 ms 2.801 ms > > 4 Sofia5.BG.EU.net (193.68.0.172) 4.027 ms 5.202 ms 3.442 ms > > 5 62.176.102.110 (62.176.102.110) 4.773 ms 14.387 ms 4.604 ms > > 6 free.techno-link.com (212.91.161.253) 5.626 ms 6.668 ms 6.258 ms > > [vlk@newton vlk]$ > > > > Tunnela zapochva pri pyrvia host i svyrshva pri vtoria. > > > > Eto ti ping rezultati bez i s tunnel: > > > > - --> s tunnel > > > > [vlk@newton vlk]$ ping free.techno-link.com > > PING free.techno-link.com (212
Re: lug-bg: Проблем(и) с GnuPG
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ami sled 28 tozi mesec, shte napravia edno podrobno opisanie ne technicheskite i ne syvsem tehnicheskite detaili po udostoveriavaneto. Pozdravi Vesselin Kolev > Äâå äóìè îò ðîäà íà "êàê òî÷íî è çàùî å îòäåëíà òåìà" ùÿõà äà ñà > äîñòàòú÷íè. Àç çàäàäîõ âúïðîñà ñè, çàùîòî äîñåãà íèùî íå ñúì ïðî÷åë â > ëèñòà çà íåãî. Êîãàòî âèäÿõ ñúâåò åé òàêà ìåæäó äðóãîòî äà ñå äàâà > ultimate trust, ðåøèõ âñå ïàê äà ïîïèòàì äàëè íå ñúì ïðîïóñíàë íåùî > î÷åâèäíî. > > > äàì -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+SNnz+48lZPXaa+MRAhiLAKDNMIRXHxmeJuKZ+JUaxuENBYXNUQCgon4o PB8FNtFs6a7QoOZgjcx4OF0= =asH6 -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Проблем(и) с GnuPG
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 AMAN!!! Procheti kakvo pita choveka! Az napisah otgovor na K-O-N-K-R-E-T-N-I-A vypos > > > 2) Êëþ÷îâåòå ñà UNTRUSTED - èìàøå íà÷èí òîâà äà ñå îïðàâè, íî ñúì > > > çàáðàâèë êàê. Napisah mu kak mozhe da stane tova. I s tova vyprosyt prikliuchva. Predpolaga se, che shtom edin chovek e stignal do tazi opcia e naiasno s problemite. Ako ne e ... da chete documentacia. Moite dni ne sa po 72 chasa za denonoshtie za da pisha samo prostranni postingi. Ili ochakvash da se zaema s temata za udostoveriavane na kliuchovete v OpenPGP PKI, koiato mozhe da oteneme v resume samo 7-8 pechatni stranici? Samo shemite za cross udostoveriavane, reduktivno udostoveriavane i izbiagavne na rekursii mogat da mi otnemat pri byrzo pisane 3 chasa... -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+SMI5+48lZPXaa+MRAgkxAJ93HCbb3pTrkFBh+BQu8hsR8C93DgCfclEk tDJlEU7YUGuH/4I5u66pPV0= =EBhG -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Проблем(и) с GnuPG
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ami zavisi.. niakoi serveri sa vkliucheni v mrezhi, a drugi ne sa vkliucheni. Proveri vyrhu drugi serveski mrezhi za kliuchove dali se e refreshnala informaciata. Druga recepta niama:))) POzdravi Vesselin Kolev On Monday 10 Feb 2003 18:37, Doncho Angelov wrote: > Çäðàñòè! > > Òîâà ñâúðøè ðàáîòà! Çà æàëîñò WinPT íå ìîæà äà ñå îïðàâè, òà òðÿáâàøå äà > ïîëçâàì íà÷èíà, îïèñàí îò òåá è ñòàíà! Ìåðñè ìíîãî! Èìàì åäíà ìîëáà - > èçïðàòèõ ñè ïóáëèê êëþ÷à íà keyserver.net. Áè ëè ñëåäâàëî ñåãà äà ãî > èçïðàòÿ ïàê, ñàìî ÷å íà íÿêîé îò ñúðâúðèòå, êîèòî ñè ìè êàçàë, èëè > èíôîðìàöèÿòà àâòîìàòè÷íî ùå îòèäå òàì (èìàò ëè ñèíõðîíèçàöèÿ òåçè íåùà?) > > Ïîçäðàâè! > Ä. > > Vesselin Kolev wrote: > |Çäðàâåé, > | > |Àç ëè÷íî íÿìàì ïðîáëåì ñ åíêîäèíãà è íèêîãà íå ñúì èìàë > |ïîäîáåí ïðîáëåì. Çàòîâà íÿìàì íóæíèÿ îïèò çà äà òè ïîìîãíà. > | > |Ìîãà äà òè ïîìîãíà ïî âòîðèÿ îò òâîèòå âúïðîñè. > | > |Äàëè åäèí êëþ÷ ùå å "trusted" èëè íå çàâèñè îò òîâà äàëè òè êàòî > |ëîêàëåí ïîòðåáèòåë ùå ñè ãî îïèñàë â áàçàòà îò äàííè trustdb.gpg, > |êîÿòî ñå íàìèðà â ~/.gnupg. > | > |Íàïðèìåð, íåêà òè èìàø êëþ÷ ñúñ øåñòíàäåñåòè÷íà èäåíòèôèêàöèÿ > |9C2BC32B. Çà äà ìîæåø äà ãî óäîñòîâåðèø, òè ìîæåø äà èçïîëâàø > |èíñòðóìåíòàðèóìà çà ðåäàêòèðàíå íà êëþ÷îâå, êîéòî òè ïðåäëàãà > |GNUPG. > | > |gpg --edit-key 9C2BC32B > | > |Ùå ïîëó÷èø êðàòêà èíôîðìàöèÿ çà êëþ÷à è ùå âëåçåø â êîìàíäíàòà > |îáâèâêà íà GNUPG: > | > |Command> > | > |Èçáåðè trust. Îòíîâî ùå ïîëó÷èø èíôîðìàöèÿ çà êëþ÷à è íàáîð îò > |ñëóæåáíè êëþ÷îâå çà èçïúëíåíèå íà îïåðàöèÿòà. Ò.å. íåùî îò âèäà: > | > |Please decide how far you trust this user to correctly > |verify other users' keys (by looking at passports, > |checking fingerprints from different sources...)? > | > | 1 = Don't know > | 2 = I do NOT trust > | 3 = I trust marginally > | 4 = I trust fully > | 5 = I trust ultimately > | m = back to the main menu > | > |Your decision? > | > | çàâèñèìîñò îò òâîÿ èçáîð, òè òðÿáâà äà óêàæåø åäèí îò òåçè > |ñëóæåáíè êëþ÷îâå. Íàïðèìåð òâîÿò èçáîð å 5: > | > |Do you really want to set this key to ultimate trust? > | > |Ñëåä êàòî çàäàäåø "yes" ùå ïîëó÷èø ñëåäíîòî: > | > |pub 1024D/9C2BC32B created: 2002-08-05 expires: never trust: u/f > |sub 2048g/BBBA98FC created: 2002-08-05 expires: never > |(1). LCPE Webmaster <[EMAIL PROTECTED]> > |Please note that the shown key validity is not necessarily correct > |unless you restart the program. > | > |Command> > | > |Ñåãà íàïèøè êîìàíäàòà save è ùå èçëåçåø îò êîìàíäíàòà îáâèâêà è > |ùå çàïàçèø ðåçóëòàòèòå îò îïåðàöèÿòà. > | > | Òîâà å! > |Ïîçäðàâè > | Âåñåëèí Êîëåâ > | > |On Monday 10 Feb 2003 17:29, Doncho Angelov wrote: > |>Ìåðñè ìíîãî! > |>Ñåãà èìà îùå íÿêîëêî âúïðîñà :) > |> > |>1) Êàòî ñåíäâàì êèðèëñêî ñúîáùåíèå (êàòî òîâà), ñå ïîëó÷àâàò ãðåøêè, > |>êîãàòî îòâîðÿ ñúîáùåíèåòî - "Error - decryption/verification failed". > |>Äîïúëíèòåëíèÿò òåêñò å "Invalid radix64 character XX skipped". > |>Ïðåäïîëàãàì òîâà å îò åíêîäèíã-à - èìà ëè íà÷èí äà ñå îïðàâè èëè ïðîñòî > |>êàòî ïîäïèñâàì, äà ïèøà âèíàãè íà ëàò? > |> > |>2) Êëþ÷îâåòå ñà UNTRUSTED - èìàøå íà÷èí òîâà äà ñå îïðàâè, íî ñúì > |>çàáðàâèë êàê. > |> > |>Ïðåäâàðèòåëíî áëàãîäàðÿ! > |>Ä. > |> > |>Vesselin Kolev wrote: > |>>GNUPG ne se vliae ot nalichieto na firewall, pone ne s > |>>normalna konfiguracia. > |>> > |>>Po princip www.keyservers.net ne e server za upload na serificati, > |>>nito e hranilishte za takiva. > |>>Izpolzvai > |>> > |>>belgium.keyservers.net > |>>pgpkeys.mit.edu > |>> > |>> Pozdravi > |>>Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+R+GB+48lZPXaa+MRAouMAKC1ybOhvAH3chlc7VIs9IhZpMSrwwCdEec6 YNHZsV6h7vqbF97VZ+mtZRg= =COVk -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Проблем(и) с GnuPG
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Çäðàâåé, Àç ëè÷íî íÿìàì ïðîáëåì ñ åíêîäèíãà è íèêîãà íå ñúì èìàë ïîäîáåí ïðîáëåì. Çàòîâà íÿìàì íóæíèÿ îïèò çà äà òè ïîìîãíà. Ìîãà äà òè ïîìîãíà ïî âòîðèÿ îò òâîèòå âúïðîñè. Äàëè åäèí êëþ÷ ùå å "trusted" èëè íå çàâèñè îò òîâà äàëè òè êàòî ëîêàëåí ïîòðåáèòåë ùå ñè ãî îïèñàë â áàçàòà îò äàííè trustdb.gpg, êîÿòî ñå íàìèðà â ~/.gnupg. Íàïðèìåð, íåêà òè èìàø êëþ÷ ñúñ øåñòíàäåñåòè÷íà èäåíòèôèêàöèÿ 9C2BC32B. Çà äà ìîæåø äà ãî óäîñòîâåðèø, òè ìîæåø äà èçïîëâàø èíñòðóìåíòàðèóìà çà ðåäàêòèðàíå íà êëþ÷îâå, êîéòî òè ïðåäëàãà GNUPG. gpg --edit-key 9C2BC32B Ùå ïîëó÷èø êðàòêà èíôîðìàöèÿ çà êëþ÷à è ùå âëåçåø â êîìàíäíàòà îáâèâêà íà GNUPG: Command> Èçáåðè trust. Îòíîâî ùå ïîëó÷èø èíôîðìàöèÿ çà êëþ÷à è íàáîð îò ñëóæåáíè êëþ÷îâå çà èçïúëíåíèå íà îïåðàöèÿòà. Ò.å. íåùî îò âèäà: Please decide how far you trust this user to correctly verify other users' keys (by looking at passports, checking fingerprints from different sources...)? 1 = Don't know 2 = I do NOT trust 3 = I trust marginally 4 = I trust fully 5 = I trust ultimately m = back to the main menu Your decision?  çàâèñèìîñò îò òâîÿ èçáîð, òè òðÿáâà äà óêàæåø åäèí îò òåçè ñëóæåáíè êëþ÷îâå. Íàïðèìåð òâîÿò èçáîð å 5: Do you really want to set this key to ultimate trust? Ñëåä êàòî çàäàäåø "yes" ùå ïîëó÷èø ñëåäíîòî: pub 1024D/9C2BC32B created: 2002-08-05 expires: never trust: u/f sub 2048g/BBBA98FC created: 2002-08-05 expires: never (1). LCPE Webmaster <[EMAIL PROTECTED]> Please note that the shown key validity is not necessarily correct unless you restart the program. Command> Ñåãà íàïèøè êîìàíäàòà save è ùå èçëåçåø îò êîìàíäíàòà îáâèâêà è ùå çàïàçèø ðåçóëòàòèòå îò îïåðàöèÿòà. Òîâà å! Ïîçäðàâè Âåñåëèí Êîëåâ On Monday 10 Feb 2003 17:29, Doncho Angelov wrote: > Ìåðñè ìíîãî! > Ñåãà èìà îùå íÿêîëêî âúïðîñà :) > > 1) Êàòî ñåíäâàì êèðèëñêî ñúîáùåíèå (êàòî òîâà), ñå ïîëó÷àâàò ãðåøêè, > êîãàòî îòâîðÿ ñúîáùåíèåòî - "Error - decryption/verification failed". > Äîïúëíèòåëíèÿò òåêñò å "Invalid radix64 character XX skipped". > Ïðåäïîëàãàì òîâà å îò åíêîäèíã-à - èìà ëè íà÷èí äà ñå îïðàâè èëè ïðîñòî > êàòî ïîäïèñâàì, äà ïèøà âèíàãè íà ëàò? > > 2) Êëþ÷îâåòå ñà UNTRUSTED - èìàøå íà÷èí òîâà äà ñå îïðàâè, íî ñúì > çàáðàâèë êàê. > > Ïðåäâàðèòåëíî áëàãîäàðÿ! > Ä. > > Vesselin Kolev wrote: > > GNUPG ne se vliae ot nalichieto na firewall, pone ne s > > normalna konfiguracia. > > > > Po princip www.keyservers.net ne e server za upload na serificati, > > nito e hranilishte za takiva. > > Izpolzvai > > > > belgium.keyservers.net > > pgpkeys.mit.edu > > > > Pozdravi > > Vesselin Kolev > > > > On Monday 10 Feb 2003 15:18, Doncho Angelov wrote: > > > > Hash: SHA1 > > > > > > > > 4@0259B5! > > > > BA:>@> 5:A?5@8<5=B8@0< A GnuPG. @>1;5<0, :>9B> 2 <><5=B0 8<0< 5: =5 <>30 > > 40 8@B8@0< =8:0:J2 :;NG :( B> @57C;B0B0: > > == > > $ gpg --batch --no-tty --status-fd 2 --keyserver www.keyserver.net > > --recv-keys 0x199D7F16 > > gpg: can't get key from keyserver: No such file or directory > > gpg: Total number processed: 0 > > [GNUPG:] IMPORT_RES 0 0 0 0 0 0 0 0 0 0 0 0 0 0 > > == > > > > > > !8AB5<0B0 <8 5 704 proxy/firewall, => 70A530 =5 <>30 40 @0715@0 :0: ?> > > 4O2>;8B5 40 3> =0:0@0< 40 3> ?>;720! @54?>;030< @01>B8 ?> HTTP, => =5 > > <>30 > > 40 3> ?>4:0@0<... > > > > O:0:J2 AJ25B? > > > > >74@028! > > > > . > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+R8vZ+48lZPXaa+MRAtWEAJ9TmN8OwNRIWNrRjfw50zHmIdajfwCg7Yc6 Uou+rV2c7paijcO7kXjB1Mg= =t6s4 -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: CNAME w in-addr.arpa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mislia, che shvanah (ako ne popravi me). Mislia, che stava vypros, che si zakupil 3 domaina i si napravil www zapisi, koito vodiat kym edin i syshti web-server.. nali? Po princip mozhesh da napravish kolkoto iskash PTR resursni zapisa. Imai predvid obache, che niama da mozhesh da imash ednoznachnost pri obratnoto reshenie na zadachata. Primer: Na IP adres 192.168.2.1 imash web-server i primerno si napravil tri virtualni hostinga: www.domain1.dom www.domain2.dom www.domain3.dom Posle si napravil skednoto v IN-ADDR.ARPA zonata si (2.168.192.in-addr.arpa): 1 PTR www.domain1.dom. 1 PTR www.domain2.dom. 1 PTR www.domain3.dom. Opitai sega da pravish resolving chrez niakakva usluga.. naprimer traceroute do tozi host. Kato napravish dostatychno mnogo zaiavki i analizirash rezultatite im, shte vidish, che srednostatisticheski pri 1/3 ot zaiavkite shte poluchish otgovor www.domain1.dom, v drugata 1/3 www.domain2.dom i v poslednata 1/3 www.domain3.dom. S edna duma, niama ednoznachno reshenie na zadachata. Prichinate e slednata. in.addr.arpa ne znae nishto za domainite, koito si registriral. Ti izpashtash zaiavka primerno za izvlichane na PTR RR ot syotvetnata zona, imash tri PTR za edin oktet i te se razdavat po sluchaen nachin taka, che da sa HOMOGENNO razpredeleni. Pozdravi Vesselin Kolev On Monday 10 Feb 2003 16:13, [EMAIL PROTECTED] wrote: > Zdrawei grupa, > dostawchika mi e deligiral prawoto da si uprawlqwam sam .in-addr.apra > zonata za sutowetnoto ip prostranstwo, imam registrirani tri domain-a, i > trita domain-a otgowarqt na edno i sushto ip, ta wuprosut mi e wuzmozno li > e w zonata in-addr.arpa da se naprawqt tri PTR zapisa za edno i sushto ip > no s razlichni imena. ili kak da naprawq taka che i trita mi domaina da > imat reverse resolve > > Blagodarq! > > --- >- Ïðàâíî-èíôîðìàöèîííà ñèñòåìà ËÅÊÑ (http://laws.lex.bg) > Íåêà ïðàâîòî áúäå ñ òåá! -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+R75T+48lZPXaa+MRAvX8AKC9GVFd1aVRNrNM1tGGlLBOEEyuUACg51nH NVSfD/PP0DyhmWuQJVsQlDM= =U8jA -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Проблем(и) с GnuPG
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Malka popravka za predishnia mi posting: belgium.keyservers.net da se chete kato belgium.keyserver.net (bez "s" v imeto na domaina). Izviniavam se za greshkata Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+R7aD+48lZPXaa+MRAsZ9AJ91/XeaRIwBO0Q6PL8KL9cE+DHP6gCdGANz jHKWprhBE9ILcDoVmpnm0x4= =ACkW -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Проблем(и) с GnuPG
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 GNUPG ne se vliae ot nalichieto na firewall, pone ne s normalna konfiguracia. Po princip www.keyservers.net ne e server za upload na serificati, nito e hranilishte za takiva. Izpolzvai belgium.keyservers.net pgpkeys.mit.edu Pozdravi Vesselin Kolev On Monday 10 Feb 2003 15:18, Doncho Angelov wrote: > Hash: SHA1 > > > > Çäðàâåéòå! > > Îòñêîðî åêñïåðèìåíòèðàì ñ GnuPG. Ïðîáëåìà, êîéòî â ìîìåíòà èìàì å: íå ìîãà > äà èìïîðòèðàì íèêàêúâ êëþ÷ :( Åòî ðåçóëòàòà: > == > $ gpg --batch --no-tty --status-fd 2 --keyserver www.keyserver.net > --recv-keys 0x199D7F16 > gpg: can't get key from keyserver: No such file or directory > gpg: Total number processed: 0 > [GNUPG:] IMPORT_RES 0 0 0 0 0 0 0 0 0 0 0 0 0 0 > == > > > Ñèñòåìàòà ìè å çàä proxy/firewall, íî çàñåãà íå ìîãà äà ðàçáåðà êàê ïî > äÿâîëèòå äà ãî íàêàðàì äà ãî ïîëçâà! Ïðåäïîëàãàì ðàáîòè ïî HTTP, íî íå ìîãà > äà ãî ïîäêàðàì... > > Íÿêàêúâ ñúâåò? > > Ïîçäðàâè! > Ä. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+R7SV+48lZPXaa+MRAi3cAJ4xicWifaPOFpMCYMJs2Z4YWkXXzgCg/IGY jYAv1wjQleVbG60ZjlPn3i4= =lEJ2 -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Za bezpoleznostta ot zabranata za transfer na zonite in-addr.arpa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Povod za tozi posting beshe edin scandal mezhdu dostavchik i klient za tova, che clienta iska dostavchika da razreshi negovata in-addr.arpa zona za transfer, a dostavchika ne iska. Sega shte vi obiasnia kolko bezmisleno neshto e da se zabraniava za transfer in-addr.arpa zona. Neka sega vseki da si izbere edna in-addr.arpa zona, koiato da ne se transferira svobodno. Sled tova da vzeme instrumenta dig ili host i da zapochne da pravi zapitvania po okteti. Naprimer, izbrali ste si zonata 1.168.192.in-addr.arpa. i edin ot authoritativnite serveri za imena e 192.168.1.13. Pravete zapitvania po posleden oktet: dig @192.168.1.13 -t PTR X.1.168.192.in-addr.arpa kato menite stoisnostta na X ot 0 do 255. Procesyt mozhe da se avtomatizira mnogo lesno (ostavam go kato uprazhnenie na vseki ot vas:))) ). Taka shte svalite cialata zona na vyprosnia domain in-addr.arpa. Razbira se mozhete da pitate i za drugi RR zapisi:)) Sled kato svyrshite si zadaite pak vyprosa kakva sigurnost pechelite ot zabranata za transfer na in-addr.arpa. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+R5kF+48lZPXaa+MRAl4VAKC98HGtUuy2zHQ5WSOx2PX3qbaF6wCcCYEp cAKUv9FD79+sB06RsGn6PC4= =9APA -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Ukazvane na A resursni zapisi v IN-ADDR.ARPA syglasno RFC 1101
vo delegirane Primerna shema: Klient e poluchil mrezhata 192.168.2.0/26 (okteten zapis na subnetnata maska 255.255.255.192). Delegianeto na domaina in.addr-arpa za tazi mrezha e izvyrsheno v zonata na domaina 2.168.192.in-addr.arpa po slednia nachin (za poveche podrobnosti vizh RFC 2317): ... ... 0 NS ns1.client.dom. NS ns2.client.dom. 1 CNAME 1.0 2 CNAME 2.0 ... ... ... 63 CNAME 63.0 ... ... Klientyt ot svoia strana e izgradil pri sebe si zona za domaina 0.2.168.192.in-addr.arpa i e napravil slednia mrezova arhitektura: 192.168.2.0/30 -> tunelno IP prostranstvo 192.168.2.4/30 -> tunelno IP prostranstvo 192.168.2.8/30 -> tunelno IP prostranstvo 192.168.2.12/30 -> tunelno IP prostranstvo 192.168.2.16/28 -> potrebitelska mrezha No.1 192.168.2.32/29 -> potrebitelska mrezha No.2 192.168.2.40/29 -> potrebitelska mrezha No.3 192.168.2.48/28 -> potrebitelska mrezha No.4 Sorcyt na zonata (sys sykrashtenia) e ot vida: $TTL 86400 ; 1 day @ SOA ns1.client.dom. root.client.dom. ( 2003020902 ; serial 86400 ; refresh (1 day) 3600 ; retry (1 hour) 360; expire (5 weeks 6 days 16 hours) 86400 ; minimum (1 day) ) NS ns1.client.dom. NS ns2.client.dom. PTR net-address.client.dom. A 255.255.255.252 1 PTR host1.tunnel-1.client.dom. 2 PTR host2.tunnel-1.client.dom. 3 PTR broadcast.tunnel-1.client.dom. 4 PTR net-address.tunnel-2.client.dom. A255.255.255.252 5 PTR host1.tunnel-2.client.dom. 6 PTR host2.tunnel-2.client.dom. 7 PTR broadcast.tunnel-2.client.dom. 8 PTR net-address.tunnel-3.client.dom. A255.255.255.252 9 PTR host1.tunnel-3.client.dom. 10 PTR host2.tunnel-3.client.dom. 11 PTR broadcast.tunnel-3.client.dom. 12 PTR net-address.tunnel-4.client.dom. A255.255.255.252 13 PTR host1.tunnel-4.client.dom. 14 PTR host2.tunnel-4.client.dom. 15 PTR broadcast.tunnel-4.client.dom. 16 PTR net-address.usernet-1.client.dom. A 255.255.255.240 ... ... ... 31 PTR broadcast.usernet-1.client.dom. 32 PTR net-address.usernet-2.client.dom. A 255.255.255.248 ... ... ... 39 PTR broadcast.usernet-2.client.dom. 40 PTR net-address.usernet-3.client.dom. A 255.255.255.248 ... ... ... 47 PTR broadcast.usernet-3.client.dom. 48 PTR net-address.usernet-4.client.dom. A 255.255.255.240 ... ... ... 63 PTR broadcast.usernet-4.client.dom. Prilicha na prednia sluchai e edno izkliuchenie!!! Vnimanie!!! TOVA E OSNOVNATA RAZLIKA MEZHDU DVATA SLUCHAIA I E DOBRE DA IA PROCHETETE V-N-I-M-A-T-E-L-N-O! Neka sega da izikskvame izvlichaneto na PTR resursen zapis za 0.2.168.192.in-addr.arpa. Shemata na izvlichane shte byde slednata: Shte byde zapitan registyra za 168.192.in-addr.arpa, posle shte ima zapitvane kym zonata na domaina 2.168.192.in-addr.arpa i ottam zapitvaneto shte byde izprateno kym zonata na domaina 0.2.168.192.in-addr.arpa. I tuk idva tykia moment. Zabelezhete kyde i kak e napraven PTR RR za 0.2.168.192.in-addr.arpa. Toi e napraven v headera na zonata (sravnete s prednia sluchai). Ako se napravi opisanieto 0 PTR net-address.client.dom. A 255.255.255.252 to niama da raboti. Tuk niakoi mozhe da kazhe "da, ama ako napravia 0 CNAME 0.0 v zonata ma domaina 2.168.192.in-addr.arpa ... ". Da, no obyrnete vnimanie, che taka shte se poluchi slednoto natrupvane na definicii 0 NS ns1.client.dom. 0 NS ns2.client.dom. 0 CNAME 0.0 koeto ne e syvsem korektno. * * * Tova shte se opitam da go sybera i doopravia v edna documentacia za da mozhe da e v chitaem i priaten za okoto vid, no tova shte se sluchi po- natatyk. Sega samo go napravih za da pomogna na tezi, koito cepiat mrezhite na mnogo submrezhi. * * * Vyzmozhno e mnogo clienti da sreshtnat nerazbirane po vyprosa ot strana na systemnite administratori na dostavchicite. Shte gi pomolia da mi pishat na lichnia e-mail za podobni sluchai. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+R4vx+48lZPXaa+MRAryTAKD4KBN2ITy7Mnv68dqOsZCptpIIRACg/60K x37BrCovkMwH+XeWDhoE52Y= =iFib -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Тунел между две мрежи
PING peach.ripe.net (193.0.0.203) from 192.168.100.111 : 56(84) bytes of data. 64 bytes from peach.ripe.net (193.0.0.203): icmp_seq=0 ttl=244 time=324.385 msec 64 bytes from peach.ripe.net (193.0.0.203): icmp_seq=1 ttl=244 time=311.658 msec 64 bytes from peach.ripe.net (193.0.0.203): icmp_seq=2 ttl=244 time=322.182 msec 64 bytes from peach.ripe.net (193.0.0.203): icmp_seq=3 ttl=244 time=322.793 msec - --> s tunnel: [vlk@newton vlk]$ ping www.ripe.net PING peach.ripe.net (193.0.0.203) from 192.168.100.111 : 56(84) bytes of data. 64 bytes from peach.ripe.net (193.0.0.203): icmp_seq=0 ttl=244 time=426.256 msec 64 bytes from peach.ripe.net (193.0.0.203): icmp_seq=1 ttl=244 time=423.667 msec 64 bytes from peach.ripe.net (193.0.0.203): icmp_seq=2 ttl=244 time=417.576 msec 64 bytes from peach.ripe.net (193.0.0.203): icmp_seq=3 ttl=244 time=421.334 msec No tozi kanal e 2Mbps, a ne 100 Mbps i tam zavisia ot mnogo nekontrolirani ot men factori, no obshto vzeto mozhe da se dobie predstava za efectite. Nakraia shte ti pokazha kakvo stava kato se pusne ICMP ping s golemi paketi v tunnel-a izgraden po 100 Mbps linia: [vlk@velociraptor vlk]$ ping -s 34568 193.68.191.193 PING 193.68.191.193 (193.68.191.193) from 192.168.100.111 : 34560(34588) bytes of data. 34568 bytes from 192.168.100.11: icmp_seq=0 ttl=128 time=128.402 msec 34568 bytes from 192.168.100.11: icmp_seq=1 ttl=128 time=214.363 msec 34568 bytes from 192.168.100.11: icmp_seq=2 ttl=128 time=169.379 msec 34568 bytes from 192.168.100.11: icmp_seq=3 ttl=128 time=150.332 msec za sravnenie normalnite paketi minavat taka:: [vlk@velociraptor vlk]$ ping 193.68.191.193 PING 193.68.191.193 (193.68.191.193) from 192.168.100.111 : 34560(34588) bytes of data. 64 bytes from 192.168.100.11: icmp_seq=0 ttl=128 time=861 usec 64 bytes from 192.168.100.11: icmp_seq=1 ttl=128 time=1.054 msec 64 bytes from 192.168.100.11: icmp_seq=2 ttl=128 time=1.157 msec 64 bytes from 192.168.100.11: icmp_seq=3 ttl=128 time=255 usec Tova e.. mislia, che se kazaha mnogo neshto po vyrposa i se pokazaha primeri Tova e ot men Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+RnIZ+48lZPXaa+MRAgeaAKCTKRAMzBeL8X33AbFTBF6pbcm7mACdF8e4 jrtUfLGmBxR3yLgPAI5zD20= =lrHG -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Тунел между две мрежи
C1 ip add addr Kak da izgradish virtuialnite interfaci za tunnela? Stava mnogo lesno. Etap 1: Definirane na virtualnia interface: --> Vyrhu PC1 ip addr add 192.168.50.1/30 dev tun1 --> Vyrhu PC3 ip addr add 192.168.50.2/30 dev tun1 S tova veche ima vidimost m/u virtualnite interface-i. Imai prediv, che ako vsichko e nared sega, to shte mozhesh ot PC1 da pingnesh 192.168.50.2, a ot PC3 da pingnesh 192.168.50.1. Sled tova ostava samo da se nasochi routinga. --> PC1 ip route add 192.168.81.0/24 via 192.168.50.2/30 dev tun1 table main --> PC3 ip route add 192.168.80.0/24 via 192.168.50.1/30 dev tun1 table main sled kato napravish tova, vseki host ot LanA bi traibvalo da vizhda vseki host ot LanB (e razbira se stiga da sa vkliucheni v mrezhata).. Tova e v obshti linii Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+RmRl+48lZPXaa+MRAsYZAJwPpp4jtIMo+ALyiX/lu98ROboqFwCgyD73 v7E5RbHMnj+SANmHVAx8OZw= =jlNi -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Kak se tegli zonata za domaina "."
hora. Syshtnostta na temata mozhe da se perefrazira mnogo lesno s edna tipichno bylgarska pogovorka: "Che si zapalim kashtata da izgori na Vyte plevniko" * * * Ako niakoi zhelae da ima naistina nai-authoritativnia otgovor e nuzhno da pita stealth DNS servera na IANA, ot koito root-serverite sinhronizirat zonata na domaina ".". Razbira se , po poniatni prichini tova ne mozhe da stava i zatova ako niakoi iska da vidi zonata za "." v celia i bliasyk, mozhe da si ia iztegli a edin AXFR. Mozhe da si napravi i svoi root-server kato exploatira ideiata za anycast. Ako pyk zhelae da vidi danni za registrtora na daden TLD, za liceto za kontakti i t.n.. neka da pita za tova whois.iana.org. Mezhdu drugoto edva li sa mnogo hora, koito znaiat koi e Jon Postel i kakvo e napravil tozi za Internet i za DNS root upravlenieto. Ima edno mnogo interesno negovo pismo v mail-lista na RIPE edna godina predi da pochine: http://www.ripe.net/ripe/mail-archives/dns-wg/1997/msg00069.html Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+RNMV+48lZPXaa+MRAt52AJ0TRfPQTZ58Vd3IMg9CG4AeGyJOOwCg0fek 4CvXXmFqTNIIw5OJp76CKL4= =6qMH -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Kak se tegli zonata za domaina "."
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kak da izteglite zonata "."? Mnogo prosto, izpylnete slednia comanden red (blagodarnosti na Paul Vixie): dig @f.root-servers.net . AXFR ROOT-serverite, koito pozvoliavat iztegliane na zonata za domaina "." sa slednite: b.root-servers.net c.root-servers.net f.root-servers.net (za m ne se znae.. : failed: host unreachable.) Obshto pravilo: Samo universitetite i ISC davat svobodni sesii za iztegliane na zonata za domaina ".".. Drugite ne davat. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Q7Yu+48lZPXaa+MRAi8AAJwOoogS6wv0IEjNaiQBNUh9ZubwhACfX3/u 3mJD6UgOJr16ctlaehJBcMc= =8xgi -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Domain zoni - kato po/za kniga
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Predlagam na vasheto vnimanie, razbira se ako imate interes, da vidite zonata na domaina MIT.EDU. Zonata e svobodna za tranferirane (administratorite i ne stradat ot "Paranoia Bulgaris"). Mozhete da ia transferirate po slednia nachin dig @BITSY.mit.edu mit.edu AXFR Zabelezhete s kakvo staranie e praven vseki zapis i kak pregledno e vsicho. Imaite predvid, che MIT razpolaga s mrezha class A i hostovete sa mnogo. Mozhete da izteglite i prilezhashtata za mrezhata zona na syotvetnia in-addr.arpa domain dig @BITSY.mit.edu 18.in-addr.arpa AXFR Druga syshto taka dobre opisana i poddyrzhata zona e tazi na domaina Alter.Net. Mozhete da ia izteglite taka: dig @AUTH00.NS.UU.net alter.net AXFR Ako iskate oshte primeri, eto gi i tiah: Za Taide.net dig @ns.nl.net taide.net AXFR Za ROOT-Servers.Net dig @f.root-servers.net root-servers.net AXFR Za RIPE: dig @ns.ripe.net ripe.net AXFR APNIC dig @NS3.apnic.net apnic.net AXFR I t.n... Mislia, che mnogo hora mogat da se nauchat na niakoi neshta ot sorca na tezi zoni. VNIMANIE! Zonite sa golemi i ako imate slab kanal za vryzka kym chuzbina, transfera mozhe da vi zatrudni! Ako niakoi iska da gi vidi, no ima slab kanal mozhe da mi pishe na e-maila i shte poluchi source-a im (compresiran, razbira se). Pozdrtavi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Q4I/+48lZPXaa+MRAk82AKDCVj+10H4RmLoWZu9suVmxSYWEUQCg57k7 vIvEqF3m0ZtIf4es6M0ClI0= =MIzd -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: problem s trafika
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdravei, Za transparent proxy mozhesh da proverish lesno s niakoi looking-glass (nai-lesno e). Ot computer v mrezhata, koito polzva realen IP adres (i ti znaesh tozi adres) poseti linka: http://sitka.triumf.ca/cgi-bin/nph-traceroute kato predi tova mahnesh nastroikite na browsera za polzvane na proxy-server. Ako ne si zad transparent proxy shte ima traceroute do tvoia IP adres... ako li ne shte vidish poslednoto (ako sa niakolko navyrzani edno sled drugo - vizhdal sym i takiva divotii) transparent proxy, ot koeto izlizash directno kym web-servera, koito e posochen v gornia link. Po princip izpolzvaneto na transparent proxy bez syglasieto na klienta e nekorektno, da ne kazha prestypno. Lichno az imam spisyk s bylgarski dostavchici, koito izpolzvat transparent proxyta bez syglasieto na potrebitelite i ne kontaktuvam s tiah (dori i na snimka ne iskam da gi vidia). Syvetvam te da napravish syshtoto, ako imash takava vyzmozhnost. Ako naistina si v UK dori mozhesh da gi osydish za takova neshto, zashtoto tova popada pod udarite na dosta zakoni, edin ot koito e za zashtita na lichnata korespondencia. Ako si v BG obache ne se uchudvai na takiva neshta. Tuk nekorektnostta kym klienta e nachin na rabota. Vsyshnost za ICQ edva li e vinovno transparent proxy... Vse pak za izcherpatelen analiz e dobre da dadesh i danni za tova dali imam syshtia problem ot computrite s realni IP adresi i ot tezi podlozheni na maskirane. Pozdravi Vesselin Kolev On Wednesday 05 Feb 2003 13:40, Vasko Tomanov wrote: > imam DSL vrazka 512/256 Down/Up i 16 statitshni IP-ta ot koito napraktiak > se izpolzvat 4 -tiri drugite komputri se maskirat - obshto sa 16 komputara > > problem se satoi w tova tshe kogato svaliam golemi fajlowe vsithko e ok, no > kogato se browsva s malki pakeri dosta tshesto ne namira saitovete i pri > reload se opravit.. a po niakoga i pri reload ne stava rabotata :( neshtat > dosta tshesto se slutshvat sa mail.yahoo.com ili hotmail.. > > zashto taka po niakoe vreme ICQ-to ne moje da se svarje sa servera si.. > > s dve dumi neshto mirishe kato trasparen proxy.. ama ot ISP-to kazaha tshe > niamalo takova neshto.. > > moje li niakoi da mi kaje s kakav tool da testna neshtata za da razbera > kakvo e polojenieto > > vasko > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+QQZd+48lZPXaa+MRAgXKAJ96KO1VCYDKDFXW+zj5BAaSMQjgcwCfWdXc D4RnZpUxxw0beb3P4LRWh3Y= =8rZe -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Budesteto na list-a.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Protiv moderiraneto sym.. Vse pak takiva sa riskovete na edin takyv list... Niama nachin v takyv forum vsichko da e 100% standartno (otkym oformlenie: encoding, replay i t.n..) i da e 100% tematichno. Moderiraneto poniakoga e dosta tezhyk proces i ne e po silite na edin chovek, osobeno ako toi pravi tova dobrovolno (edva li e korektno da go tovarim s kakvo li ne). Pozdravi Vesselin Kolev On Tuesday 04 Feb 2003 17:44, Georgi Chorbadzhiyski wrote: > Spas Pavlov wrote: > > On Monday 03 February 2003 22:58, Boris Jordanov wrote: > >>Mda, navremeto lista beshe znachitelno po-maluk i horata bjaha s > >> > >> > >>Spase, moze bi e vreme da kachish nestata napisani ot Danchev kato > >>pravila za polzvane na lista. Po tjah njama vneseni promeni taka, che > >>javno sa OK. Tova moze bi ste pomogne s novite uchastnici. > > > > Âå÷å ñà êà÷åíè > > > >>I otnovo kum Spas - pochti sum siguren, che njamash vuzmoznost da > >>moderirash lista, no vse pak - imash li takava vuzmoznost? > > > > Íÿìàì âúçìîæíîñò, íî è äà èìàõ ïàê íÿìàøå äà ñå ñúãëàñÿ > > > >>Molja uchastnicite v lista za mnenie - kakvo e otnosenieto vi kum > >>idejata za moderirane na lista? > > > > Ëè÷íî ìíåíèå: ÊÀÒÅÃÎÐÈ×ÍÎ ÏÐÎÒÈÂ! > > È àç ñúì ïðîòèâ. Íÿìàìå ñïàì, ïðîáëåìúò ñ OT ñúîáùåíèÿ íå å ãîëÿì, èçîáùî > âñè÷êî ñè âúðâè. Íå ìîæå áåç íÿêîé è äðóã flame war îò âðåìå íà âðåìå, íî > ïúê å çàáàâíî. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+P+Zg+48lZPXaa+MRAs2vAKDlnnt89DeeXsT4oqwPB43h9PSvHQCeIpUF VTor+SnViWSy7mj2RVSJ68U= =ixc5 -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: RedHat8.0 X server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Otkakto izleze versia 8.0 na RedHat sym napravil tochno 17 instalacii i nikyde ne e imalo problem s X. Ako niakoi ne mozhe da si go instalira ili podkara si e negov lichen problem i da se opravia. Ima ton documentacia po vyprosa. Ot novite distribucii problemi s X ima samo s Mandrake 9.0. I stiga ste generirali SPAM.. Tolkova li si niamate rabota? On Friday 31 Jan 2003 15:53, Victor Senderov wrote: > On Sunday 19 January 2003 10:14, Ïëàìåí wrote: > > Na niakoi drug sluchwalo li mu se e da se skapwa X server-a na RedHat > > 8.0? > > RedHat maj mnogo sa opleskali X nestata. Dokolkoto razbiram polzvat > nyakakva beta na XFree i osven tova yako sa namazali KDE. > > http://www.mosfet.org/noredhat.html > > .0 versiite po prinzip sa bygavi. > > Pozdravi, > Victor > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+OoZu+48lZPXaa+MRAsxNAKCuyINsWQMEx5SYHKRjYlDYVxC+PACfdWvj e67gL8dbKZvuZE0NmdznPQ8= =k5aZ -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: e sia si eba mamata
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Neka da ne dramatizirame neshtata po vestnikarski. Sigurno utre shte procheta v parcalite 24 chasa i dr. podobni kakvi li ne apokaliptichni opisania na sluchiloto se granicheshti s peizash opisvasht vzriv na vodorodna bomba nad gysto naselen s kitaici raion... Ne beshe chak tolkova strashno... dosta se preuvelichava spored men. Davam primer za tova, koeto az vidiah i v pogasiavaneto na koeto uchastvah. Atakata kym mrezhata na SU zapochna okolo 8:30. Otgovoriha 4 mashini ot FMI i zapochnaha da bylvat traffic navyn. Kym NetisSat i DigSys se spraviha s atakata dosta po-rano, taka che v SU sled 9:30 imashe samo izhodni zaiavki ot porazeni mashini v Universitetskata mrezha, no ne i vhodiashti potoci. Sled kato se vze reshenie port 1434/udp da se zabrani kato izhodiasht pone dokato se uspokoiat neshtata.. vsichko se potushi do 12:00 i imashe samo multicast opiti za floodove vyv lokalnite mrezhi na zarazenite mashini. Sega gi niama i tezi opiti, zashtoto zarazenite mashini sa hardware-no izkliucheni. Vsashnost worma ne udari po-silno zashtoto se razprostrani v sybota i to sutrinta, t.e. kogato nad 80% ot komputrite v ramkite na SU (a i ne samo na SU, a i drugade) sa izkliucheni. Drugata predpostavka za slabia otklik na atakata e, che na malko ot mashinite, na koito ima instaliran Windows 2k ima pusnat i MS SQL. Tova syzdava predpostavki za po-slab otklik i sledovatelno za po-slab efect. Po-malko filmi i poveche analizi sa nuzhni v takiva situacii Pozdravi Vesselin Kolev On Saturday 25 Jan 2003 18:57, Anton Tinchev wrote: > http://slashdot.org/articles/03/01/25/1245206.shtml?tid=109 > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+M7EO+48lZPXaa+MRApY+AKCV98D22wcxclUqWvgdTNc+s5YsnQCgiJqW CxfsXTstYNArLPIKi2lhkqw= =15ae -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: MTA Choice - :)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Niakoi hora sa slozhili po chisto teologichen pyt krai na spora za tova koi MTA da byde izpolzvan ili ne. Po vreme na edno tyrsene v google na novi linux-distribucii popadnah na slednia site: http://www.geocities.com/ResearchTriangle/Node/4081/ Kydeto e izlozhena slednata ideologia pri izbor na MTA: # qmail replaces sendmail as the standard MTA (sendmail was written by a prominent homosexual) : Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+MP/++48lZPXaa+MRAn3VAJ9c5EHUfjKicdePRibaAvNSfYAjiwCguU/C BkF2QW4NPcLkdWfPuMxmCwk= =UiSf -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: ICQ module za netfilter
Dobre de.. pone niakoi ne znae li niakoi niakyde da ima project za syzdavane na ip_conntrack_icq? Obiasneniata vyv FAQ na netfilter, che protocola bil mnogo ugly... ne mi se vizhdat chak mnogo osnovatelni... Pozdravi Vesselin Kolev A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: SFTP клиент
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Blagodaria na Ognian. Da, naistina FileZilla e dobyr FTP i SSH2 manager:) no ne e za potrebiteli s osnovni poznania. Tvyrde mnogo obiasnenia se iskat. Az go izpolzvam i rabotia s nego, no pone moite opiti da naicha na raboita s nego povecheto potrebiteli propadnaha:) Inache goreshto go preporychvam na vsichki ot lista! Pozdravi Vesselin Kolev On Friday 17 Jan 2003 16:32, Îãíÿí Êóëåâ wrote: > Vesselin Kolev wrote: > > Za da ne se sluchva tova reshih da gi nakaram da > > izpolzvat za otdalechen dostyp edin client za Windows: WinSCP > > Äðóã äîáúð êëèåíò å http://filezilla.sourceforge.net/ . > > Ïîçäðàâè -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+KB41+48lZPXaa+MRAvNCAKCN/2oapEc/w3437+RA8v1kKCxi4ACcDqSi CwapJYqeo3BiYW9mUYdBV/4= =45pK -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: SFTP bez validen shell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Blagodaria na vsichki, koito otgovoriha po zasegnata ot men tema. Profesionalistyt si lichi ot dalech... bih kazal az. Georgi dade nai- uspeshnoto i byrzo prilozhimo prilozhenie (pri tova sravnitelno dobre documentirano). Opitah go i naistina raboti. Ideiata e da nakaram dosegashnite potrebiteli na edin FTP server vyrhu mashina, koiato upravliavam distancionno da ne polzvat FTP, zashtoto imashe podslushvane, dumpvane na paroli i posle iztrivane na failove ot lichnite directorii na potrebitelite. Za da ne se sluchva tova reshih da gi nakaram da izpolzvat za otdalechen dostyp edin client za Windows: WinSCP Poveche informacia za nego ima na: http://winscp.vse.cz/eng/ Potrebitelite sa hora, koito na sa sklonni da polzvat LINUX taka, che ne byrzaite da me rugaete, che ne sym preporychal reshenie v tozi duh. Ot druga strana ne bih iskal te da imat dostyp do shell. Ot druga strana ako niama shell WinSCP ne deistva. Obiasneno e zashto na saita, link kym koito dade Georgi: http://www.sublimation.org/scponly/ Dnes izprobvah tova reshenie i vsichko trygna mnogo dobre... Oshte vednuzh blagodaria na vsichki, koito se otzovaha i specialno na Georgi Chorbadzhiyski. Pozdravi i pozhelania za uspeh Vesselin Kolev On Thursday 16 Jan 2003 18:17, Georgi Chorbadzhiyski wrote: > Vesselin Kolev wrote: > > Zdrveite, > > V komersialnia analog na OpenSSH e vyzmozhno da se > > pravi SFTP sesia ot user, koito niama validen shell v sistemata. > > Tova stava blagodarenie na dummy-shell. > > > > Opitvah razni varianti da napravia tova i s OpenSSH, no ne > > stava... > > > > Ima li niakoi predstava dali tova e vyzmozhno izobshto v > > OpenSSH i ako da.. kak stava. > > http://www.sublimation.org/scponly/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+J96C+48lZPXaa+MRAuUBAKC++K3v3f/fQPBHssPj0NhXqn1kkwCgzlFS D0CDdus8auDtVu5RDwYE7cU= =BuOD -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: SFTP bez validen shell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdrveite, V komersialnia analog na OpenSSH e vyzmozhno da se pravi SFTP sesia ot user, koito niama validen shell v sistemata. Tova stava blagodarenie na dummy-shell. Opitvah razni varianti da napravia tova i s OpenSSH, no ne stava... Ima li niakoi predstava dali tova e vyzmozhno izobshto v OpenSSH i ako da.. kak stava. Blagodarnosti Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+JsEE+48lZPXaa+MRAkYmAKDiBa+owuO9rI19Ti97MbpdVGLlsgCePQS4 21UyLPd9SpzuZxf00dP7kGk= =6lbs -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Sendmail: izpolzvane na ierarhiata na MX RR na smart host za marshrutizirane
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Predlagam na vasheto vnimanie edna statia otnosno marshrutiziraneto na izhodiashtia elektronen poshtenski potok chrez sledvane na MX RR ierarhiata na zapisite v DNS za host, koito se izpolzvam ot MTA kato "smart". Fajlovi formati i linkove: Plain Text: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_and_mx/smart_and_dns_0.10.txt Rich Text Format: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_and_mx/smart_and_dns_0.10.rtf Open Office: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_and_mx/smart_and_dns_0.10.sxw Adobe PDF: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_and_mx/smart_host_and_mx_0.10.pdf Gzipped Postscript: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_and_mx/smart_host_and_mx_0.10.ps.gz MS Office: http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/smart_and_mx/smart_and_dns_0.10.doc Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+Iorh+48lZPXaa+MRAqOEAKCjHq9SWzvlUXEqAIx4v1s5fzZyzgCgxBAN QmeufmZXaEZIs1/3oAu186Y= =Xp5H -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Molba za pomosht v oformiane na documentacii
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eto i adresa http://www.lcpe.uni-sofia.bg/linuxdoc izviniavam se, che sym propusnl tova v predishnia posting. Pozdravi i blagodarnosti za otzivchivostta! Vesselin Kolev On Wednesday 08 Jan 2003 23:21, raptor wrote: > a kade movem da q widim tazi dokumentaciq... thanx > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+HDhq+48lZPXaa+MRAo7VAKCkWNoE1TP1KOXqJs9tjPeKW0SKJQCgi1b/ evuuyhlvfhHbAYt4AtWa2fk= =g7rD -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: Molba za pomosht v oformiane na documentacii
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Documentaciata za BIND, koiato publikuvah predizvika opredelen interes v chuzhbina zasega oshte kato zaglavia na otdelnite statii ili poradi omen na informacia na chlenove na tozi list s drugi. Molbata mi e, ako mozhe niakoi da se naeme da ia prevede ot bylgarski na angliiski. Neshtata ne sa mnogo, shte stane lesno i byrzo. Ako az se zahvana da napravia i tova, shte ima zabaviane v pisaneto na documentaciata za GNUPG i za novi glavi za BIND i DNS. No ako naistina niama koi, az shte prevezhdam. Shte byda blagodaren na vseki, koito proiavi zhelanie i gotovnost za pomosht. Neka da se svyrzhe s men na sluzhebnia mi e-mail za da utochnim detailite. Pozdravi na vsichki i pozhelania za uspeh Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+G+bs+48lZPXaa+MRAsfMAKCzIMsPnLiG/HNbwj5nPDtE7uiqSQCgua4q gM/RoUjox5Jg94+kLYgAds0= =1JjL -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: GNUPG
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pusnah v web novata versia na documenta za GNUPG. Mozhete da ia namerite na adres: http://www.lcpe.uni-sofia.bg/linuxdoc/gnupg/pgp_gnupg_0.16.01.pdf Vytre shte vidite dosta promeni spriamo predishnite versii. Na praktika ostava da se opishe kodiraneto na failove i elektronnoto podpisvane. T.e. proekta nablizhava kym pyrvonachalnata zavyrshena versia. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+FZu8+48lZPXaa+MRAilrAKC/ONBTTuCGhs/bKmWUhASz5dxbigCgq+n2 Pk5+a6SwU3RDymZ8ZNE0v9g= =Ll7H -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail [malko utochnenie]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ne:)) ne sym viziral tvoia posting... Inache 27 Kb informacia biha stignali do Moskva za ne-poveche ot minutka, v nai-loshia sluchai do polovin chas, ako opashkata na mail-servera e natovarene v momenta. Pozdravi Vesselin Kolev On Thursday 02 Jan 2003 15:00, Alexander Panov wrote: > >Dosta vulgarno zvuchi i facta, che na klient ne e predostaven > >dostyp do SMTP servera na dostavchika. Tova si e napravo > >podigravka spored men. Niakoi dostavchici sa napravo paranoici > >i obosnovavat otkaza da predostaviat SMTP servera si za polzvane > >ot strana na klientite si s glupavi i smeshni prichini. Po syshtata > >logika traibva da zabraniat i vaobshte vryzkata kym Internet, zashtoto > >tia mozhe da se polzva za neshto "losho". > > misla 4e tvoeto reshenie da napishesh tova pismo e podtiknato ot moito > zapitvane niakoi da mi otkrie POP3 acount na server koito stopanisva... > samo edin primer na gornoto, vav vid na vapros: > - Kolko vreme e nyjno na klient ot sofia da izprati 27Kb danni v Moskva > po TCP/IP protokol (yto4nenie: 3apisani varxy prenosim nositel otivat za > 24 4ava sas samolet)? > > Blagodaria > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+FEYT+48lZPXaa+MRAkhcAJ9C/s06WjC6mmHdixj5NKkk6aj9KgCg5J4Q 2Wd3SjdQQNA/+GRcDI09F+8= =gdud -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail [malko utochnenie]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chestita Nova Godina:)) Absoliutno syglasen sym s Todor Georgiev. Na Mano iskam da kazha:)) che onia traceroute beshe napraven s cel da se vidi koi e krainia dostavhick:)) no horata sa si izdignali zashtitni barieri:) Shto se kasae do in-addr.arpa delegiran, s uzhas moga da zaiavia, che v BG internet prostranstvo tova e malko tema tabu. Dosega kompetentni mnenia po vyprosa sym chul samo ot Daniel Kalchev i Boyan Krosnov... Za mnogo dostavchici temata in-addr.arpa e tabu, kakto porno filmite sa tabu za monasite. Zatova i ne se chudete na ochevidnite gluposti, koito se tvoriat i praviat.. Malko sa tezi, koito predostaviat po bezklasov pyt upravlenieto na in-addr.arpa zapisite na svoite klienti. A kak se delegira bezklasovo samo edin in-addr.arpa zapis e neshto nepoznato za 90% ot systemnite administratori (strah me e da se pomislia, che chisloto e po-goliamo). Az biah napisal edin document predi dosta vreme po vyprosa... http://www.lcpe.uni-sofia.bg/linuxdoc/one-in-addr.arpa/ i nishto ne stana chestno kazano. Edin pyt vlizam v IRC i to popadam v kanal pylen s administratori... Kato im dadoh da prochetat tova, te mi kazaha "ne mozhemi nie da si gubim vremeto da pravim na lameri takiva extri"... ili "abe tova sa nevyzmozhni raboti, stiga gluposti, koi si ti, che shte ni kazvash kakvo da pravim"... Vse simvolni nizove ot tozi sort... Ne mozhe da se ochakva da niama problemi, sled kato mnogo hora ne razbirat kakvo e tova in-addr.arpa, kakvo e tova bezklasovo delegirane i kakvo e tova uvazhenie kym klienta. Dosta vulgarno zvuchi i facta, che na klient ne e predostaven dostyp do SMTP servera na dostavchika. Tova si e napravo podigravka spored men. Niakoi dostavchici sa napravo paranoici i obosnovavat otkaza da predostaviat SMTP servera si za polzvane ot strana na klientite si s glupavi i smeshni prichini. Po syshtata logika traibva da zabraniat i vaobshte vryzkata kym Internet, zashtoto tia mozhe da se polzva za neshto "losho". Ot druga strana e uchudvashto kolko in-addr.arpa domaini ne sa delegirani pravilno. Do kakvo sym trygnal da govoria za in-addr.arpa kato i drugite domaini sa delegirani s liav izmeyznal krak vse po 'easy' shemi... kato kazhesh na tezi deto sa delegirali LAME vsichko shto sa zahvanali se syrdiat... Sega shte vi dam edin primer za lame delegation... Shte razgledame domaina mail.bg: [root@lcpe root]# whois -h whois.digsys.bg mail.bg Registration information for the mail.bg domain name domain: mail.bg ogranization: Mail - M. Shumakov ET address:12 B, St. Karadja str., BG-1000 Sofia admin-c:MS17891-RIPE tech-c: MS17891-RIPE tech-c: IT885-RIPE name-server:ns.bdata.net name-server:ns2.bdata.net name-server:ns.mail.bg (193.201.172.98) status: Registered requested_on: 1999-11-01 registered_on: 2000-01-08 Contact information person: MS17891-RIPE name: Momchil Shumakov organization: Mail - M. Shumakov ET address:12B St. Karadja str., BG-1000 Sofia e-mail: [EMAIL PROTECTED] phone: +359 2 9885007 fax:+359 2 9885007 person: MS17891-RIPE name: Momchil Shumakov organization: Mail - M. Shumakov ET address:12B St. Karadja str., BG-1000 Sofia e-mail: [EMAIL PROTECTED] phone: +359 2 9885007 fax:+359 2 9885007 person: IT885-RIPE name: Ivan Tzukev organization: Mail - M. Shumakov ET address:12B St. Karadja str., BG-1000 Sofia e-mail: [EMAIL PROTECTED] phone: +359 2 9885007 fax:+359 2 9885007 [root@lcpe root]# V registera na TLD BG sa podadeni 3 servera za imena: name-server:ns.bdata.net name-server:ns2.bdata.net name-server:ns.mail.bg (193.201.172.98) Shtom tezi serveri za imena da podadeni v registera, e nuzhno te da vryshtat pri zapitvane za NS RR autoritativni (dostoverni) otgovori. Neka zapochnem da proveriavame autoritativnostta s pomoshta na dig: [root@lcpe root]# dig @ns.bdata.net -t ns mail.bg ; <<>> DiG 9.2.1 <<>> @ns.bdata.net -t ns mail.bg ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47662 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 5 ;; QUESTION SECTION: ;mail.bg. IN NS ;; ANSWER SECTION: mail.bg.86400 IN NS purgatory.spnet.net. mail.bg.86400 IN NS ns.mail.bg. mail.bg.86400 IN NS ns.bdata.net. mail.bg.86400 IN NS ns.spnet.net. mail.bg.86400 IN NS ns2.bdata.net. ;; ADDITIONAL SECTION: purgatory.spnet.net.137614 IN A 212.50.0.15 ns.mail.bg. 86400 IN A 193.201.172.98 ns.bdata.net. 86400 IN A 194.145.63.2 ns.spnet.net. 93040 IN A 212.50.0.10 ns2.bdata.net.
Re: lug-bg: Sendmail
mnogo mnogo uspehi prez novata godina na vsichki nas:)) Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+EVYY+48lZPXaa+MRAiNBAKCqVTstmKWCIa2Qav+uhlVa/h/eHACdG1K/ X0Dc3sEfnqfcGxwprXV8M40= =BD8p -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: Sendmail
m shte sluzhi na poshtenskata mi programa da mu kazhe ot kogo e polucheno pismoto. Vsashnost v obshtia sluchai mail from: i From: syvpadat. :)) Dano vsichko e stanalo iasno... ako ne e pishi, shte se postaraia da otogovoria podrobno! Pozdravi i pozhelania za leko hranosmilane prez praznichnite dni:))) Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+EDSd+48lZPXaa+MRAjz/AKCQGDy3B6ReZlaexs5XjdxoMBPmUgCg2SI1 NfkA4k1kLCegAPc5C77onKk= =P810 -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: BlowFish Advanced CS - OpenSource product za Win32
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Izviniavam se za tova, che ne sym razbral znachenieto na edinstvenoto opredelenie za otvoren kod. Malko za celite na tozi posting. Dosta hora me pitaha po maila ot kyde mogat da nameriat gotovo reshenie za kodirane na failove pod WIndows, koeto da e free, i da mogat da vidiat koda. Blagodaria za interesa po problema ot strana na tezi hora. Celta beshe niakoi lica, koiato rabotiat s poveritelna informacia vyrhu computri s instaliran Windows XX/XX/XX da mogat da kodirat failovete si sigurno i da mogat da svedat do minimum veroiatnostta za razkrivane na sydyrzhanieto na documentite, ako te sa podlozheni na diferencialna crypto ataka (kakvo e tova pitaite Yanko Kaneti, toi e specialist po definiciite). Drugoto iziskvane beshe programata da niama instalacionna procedura. Horata rabotiat pod WIndows 2000 Pro pod NTFS i sa s prava na potrebiteli, niamat administratorski prava i ne mogat da instalirat software ot roda na PGP FreeWare. PGP i GNUPG vyv variantite im za comanden red ne mogat da bydat izpolzvani, zashtto ne izpylniavat WIPE za svobodnoto diskovo prostranstvo i niamat deslacking funckia za pochistvane na ostatyci ot nekodirania vid na filovete, koito sa veche kodirani. (Byrzam da kazha, che stava duma za polzvaneto na PGP i GNUPG vyv variant, v koito se polzvat vgradenite v tiah symetrichni algoritmi, a ne asimetrichni kato RSA, DH i t.n.). A imenno celta e da ne mozhe da se provete diferencialna ataka. Drugoto uslovie na koeto otgovori tazi programa e da se vgrazhda vyf File-menuto na Windows Explorer obratimo. Tova znachi, che pishe v registry profile-a na konkretnia potrebitel obratimo. Programata se pobira na disketa i sychatava naistina mnogo vyzmozhnosti v sebe si. Kodiranite failove se maskirat taka, che da ne mozhe da se poznae imeto na kodirania file, no ima browser, koito sled vyvezhdane na parolata za decodirane na failovete pokazva istinskite imena. Snoshti gledahme izhodnia kod s edin kolega i ni beshe mnogo priatno da vidim kolko dobre i po nemski sa realizirani mnogo algoritmi, kak hitroumno sa uskoriavani cikli. Dosta riadko se vizhda taka dobre pisana programa na Obekten Pascal. Compilira se s Delphi (5) bez problemi. Pone nie niamahme. Snoshti izteglih nova versia na Knoppix i uspiah da pusna programata chrez WINE ot disketa bez osobeni problemi. Pri tova mozheh da rabotia sys syshtite extri i pod LINUX i pod Windows. T.e. programata mozhe da se izpolzva i pod LINUX chrez emulacia bez zatrudnenia. Ne sa vi nuzhni nikakvi dopylnitelni biblioteki za dinamichno svyrzvane i t.n., polzvate nalichnite v emulatora. * * * Dosta se posmiah na sravnenieto na BlowFish Advanced CS kato util za cryptirane na failove s OpenSSL. Az lichno nikoga ne si pozvoliavam da pisha chak takiva gluposti... Nuzhno e vseki da ima miarka v tova otnoshenie. Pyk neka tozi koito iska da predlozhi reshenie v rakite na posochenite ot men uslovia s pomoshtta na BeeCrypt. Mnogo sa otkrivatelite na toplata voda, a i entusiazma na novite e neizcherpaem. Tuk vse poveche zaprilichva na IRC Chat! Shte pomolia Spas da mahne postinga mi zashtoto e s neviarno zaglavie, za koeto syzheliavam! On Sunday 15 Dec 2002 11:03, Yanko Kaneti wrote: > On Sun, 2002-12-15 at 10:20, Vesselin Kolev wrote: > > Ako niakoi zhelae da vidi edin istinski OpenSource product za Win32, > > mozhe da napravi tova na adres: > > > > http://members.tripod.com/markus_hahn/software.html > > http://web.bsn.ch/lasse/bfacs.htm > > > > BlowFish Advanced CS e moshten produkt za prilaganeto na symetrichnia > > block chiper BlowFish pod sistemi, raboteshti pod Win32. Radostnoto e, > > che e s otvoren izhoden kod. Mnogo hora mozhe da go nameriat za mnogo > > polezen. > > Îò ïúðâèòå íÿêîëêî ðåäà íà òàçè ñòðàíèöà: "You may use the source code > of all the libraries here without any charges in your own application(s) > as long as you don't use them in any altered form." . Çàáåëÿçâàø > îãðàíè÷åíèåòî íàäÿâàì ñå. OpenSource òîâà íå å ;). Åòî ò.3 îò > http://www.opensource.org/docs/definition.php : > > "3. Derived Works > > The license must allow modifications and derived works, and must allow > them to be distributed under the same terms as the license of the > original software. > > Rationale: The mere ability to read source isn't enough to support > independent peer review and rapid evolutionary selection. For rapid > evolution to happen, people need to be able to experiment with and > redistribute modifications." > > òà òàêà... > > > Íå ñúì íèêàê íàâúòðå ïî òåìàòà ñ øèôðèòå è ïð. íî ìèñëÿ BeeCrypt > http://www.virtualunlimited.com/products/beecrypt/ å LGPL áèáëèîòåêa, > êîÿòî óñïåøíî ìîæå äà ñå ïîëçâà çà êîìåðñèàëíè öåëè îò íóæäàåùè ñå îò > Blowfish (è äð.) > > > Ïîçäðàâè > ßíêî >
lug-bg: BlowFish Advanced CS - OpenSource product za Win32
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ako niakoi zhelae da vidi edin istinski OpenSource product za Win32, mozhe da napravi tova na adres: http://members.tripod.com/markus_hahn/software.html http://web.bsn.ch/lasse/bfacs.htm BlowFish Advanced CS e moshten produkt za prilaganeto na symetrichnia block chiper BlowFish pod sistemi, raboteshti pod Win32. Radostnoto e, che e s otvoren izhoden kod. Mnogo hora mozhe da go nameriat za mnogo polezen. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE9/DtR+48lZPXaa+MRAsg8AJwLPdrBCHNA6oQbGdjZp8J949CevQCfWtVD IZmg8E52PYb6HXYKTfXmia0= =99mM -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: GNUPG - off
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vchera se vidiahme s Alexander Velin i opravihme raznoglasiata! Taka, che da prikliuchvame sporovete. Tova, koeto v momenta chetete e Alpha Versia na documenta. Neka da se napishe materiala, a posle shte mislim da doopraviane na stila i t.n. Shte sym blagodaren, ako me informirate za pravopisnite greshki! Izviniavam se, ako na niakoi documenta ne e po vkusa ili po predstavite za oformlenie. Neka da preminem na etap beta-versia, togava shte mozhete da pravite kakvoto iskate po stila i formata na faila. Togava az shte sym samo koordinator na proekta. Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE9+vMr+48lZPXaa+MRAsCTAKDfTF6OOH9ICP5/l+2FijddnhyYtwCg2Eut SqBa3AB39VN2du+DQ7nEQvA= =2G/A -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: GNUPG - off
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dobre .. shte go prodylzha. No neka niakoi syshto da mi pomogne. Nuzhno e da se napishe malko rykovodstvo za rabota v GUI za GNUPG. Ako niakoi ima opit.. da pishe! Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE9+fUv+48lZPXaa+MRAqRpAKCRaMdeROM5sPoK2phjzc/gRyaCtwCg1eCC U2fHim8NsikmZoSTonY/b7s= =Ore1 -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: GNUPG - off
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Prekratiavam rabotata po proekata documentaciata za GNUPG. Ostaviam rabotata v racete na Alexander Velin. Syzheliavam, che vi karah da chetete tova, koeto sym napisal, zashtoto to e bilo lisheno ot stil i e bilo neiasno. Vaobshte izlizam ot pisaneto na kakvato i da e documentacia i prekratiavam uchastie v kakvito i da sa meropriatelia za napisvane na kakvato i da e documentacia. Iavno niama nuzhda ot takava! Uspeh na vsichki! Vesselin Kolev Çäðàñòè. Ïî- äîëó îïèñàíèòå çàáåëåæêè ñà ìîå ëè÷íî ìíåíèå è íÿìàò çà öåë äà çàñåãíàò íÿêîãî. Òè êàòî àâòîð èìàø ïúëíîòî ïðàâî äà èçòðèåø òîçè ìåéë áåç äà ìó îáúðíåø âíèìàíèå, íî IMHO ñúì îïèñàë íåîáõîäèìè ïîïðàâêè. Ðàçäåë ñòèë: Ìàõíè öâåòîâåòå îò ôàéëà (âñå ïàê ñðåäíîñòàòèñòè÷åñêèÿ PDF ñå ðàçïå÷àòâà íà ïðèíòåð è ñå ÷åòå òàêà (êîåòî íàïðàâèõ è àç)), ìàõíè _âñè÷êè_ ïîä÷åðòàâàíèÿ (underline) êàòî â ïîâå÷åòî ñëó÷àè ìîãàò äà ñå çàìåíÿò ñ äîñòà ïî êðàñèâèÿ italic, ìàõíè bold-a â 'ôîðìóëèòå' (A,B...) êàòî ìîæå äà ñå çàìåíè ñ italic èëè ñúñ äðóã øðèôò. Çàïî÷âàíåòî íà ïàðàãðàô ñ öâåòíà áóêâà ñ ïî-ãîëÿì êåãåë ñúùî å äîñòà ãðîçíî. Âñè÷êè ñðåùàíèÿ íà LINUX ñïîðåä ìåí òðÿáâà äà áúäàò çàìåíåíè ñ GNU/Linux. Ïàê äà ïîâòîðÿ, URL-òàòà ñúùî íÿìàò íóæäà îò underline, a àêî èìà àêòèâíè ëèíêîâå íÿêúäå (hrefs) äà áúäàò èçïèñàíè êàòî íîðìàëåí òåêñò - çà äà ìîæå äà ñå ÷åòå íîðìàëíî îò õàðòèÿ.  ñëó÷àèòå êîãàòî èìà ïðåâîä íà ñïåöèôè÷åí òåðìèí îò àíãëèéñêè åçèê ñìÿòàì ÷å âèíàãè ïðè ïúðâî ñðåùàíå òðÿáâà äà ñå äàâà îðèãèíàëà â ñêîáè, ñ áåëåæêà ïîä ëèíèÿ çà çíà÷åíèåòî, ïðåâîäà è ò.í... Ïðèìåðè: Ãëàâà I, Ñåêöèÿ 6, "×îâåêúò ïî ñðåäàòà" (ïúðâî ñðåùàíå, çíàì ÷å ïî-íàòàòúê å îáÿñíåíî). btw, ñìÿòàì ÷å ïî äîáúð ïðåâîä å íå÷ëåíóâàíàòà ôîðìà "÷îâåê ïî ñðåäàòà" Êîíêðåòíè íåùà: Ãëàâà I, Ñåêöèÿ 5, "Êàêâî å õåø ôóíêöèÿ...": "Êàêòî ëè÷è îò _ïðåâîäà_ íà íàçâàíèåòî èì.." -- çà ñúæàëåíèå íå ãî ðàçáèðàì òîâà èçðå÷åíèå .. :) ïàê òàì: "Íà åçèêà íà ñïåöèàëèñòèòå ïî êîìïðåñèðàùè àëãîðèòìè..." -- áåç ñúìíåíèå çíàåø ÷å òîçè ðàçäåë îò ìàòåìàòèêàòà ñå íàðè÷à "Òåîðèÿ íà êîäèðàíåòî" multiple places: "âçëîìÿâàíå" -- ìîæå äà ñúì òúï è îãðàíè÷åí, íî ñìÿòàì ÷å ìîæå äà ñå íàìåðè ïî äîáúð òåðìèí Ãëàâà I, Ñåêöèÿ 7: "Åëåêòðîííîòî ïîäïèñâàíå íà èíôîðìàöèÿòà èìà è îùå åäíà ìíîãî ñúùåñòâåíà ðîëÿ, êîÿòî òî êàòî ïðîöåñ íà óäîñòîâåðÿâàíå èãðàå å â ðàìêèòå íà àñèìåòðè÷íàòà êðèïòîñèñòåìà. Òàçè ðîëÿ.. " -- ñúæàëÿâàì, êàê ëè íå ãî ÷åòîõ, åäèíñòâåíèÿ ñìèñúë êîéòî ìîæàõ äà èçêàðàì îò òîâà èçðå÷åíèå áè ìîãúë äà ñå ïðåäàäå ñúñ: "Åëåêòðîííîòî ïîäïèñâàíå íà èíôîðìàöèÿ êàòî ïðîöåñ íà óäîñòîâåðÿâàíå èìà è îùå åäíà ñúùåñòâàíà ðîëÿ â ðàìêèòå íà àñèìåòðè÷íà êðèïòîñèñòåìà. Òàçè ðîëÿ.." Ãëàâà I, Ñåêöèÿ 8, ïàðàãðàô 2: ðåàëèçàöèà -- ðåàëèçàöèÿ multiple places: ïóáëè÷í -- ïóáëè÷åí Ãëàâà I, Ñåêöèÿ 9: "Äà ñè ïðåäñòàâèì, ÷å À è B èñêàò äà... íà àñèìåòðè÷íàòà êðèïòîñèñòåìà" -- ïðàâèëíî áè áèëî "àñèìåòðè÷íà".  òåêóùèÿ ïðèìåð íå ñå ãîâîðè çà íåùî êîíêðåòíî. ïàê òàì: "Ñðåùàòà ìåæäó âñè÷êè äâîéêè ëèöà, êîèòî ñè êîðåñïîäèðàò..." -- èçïóñíàòî 'í' â 'êîðåñïîíäèðàò' ïàê òàì, ñëåäâàùèÿ àáçàö: "Íåêà À ïîäøèøå ïóáëè÷íèÿ êëþ÷ íà B. Àêî ñëåä òîâà B ïîäïèøå ïóáëè÷íèÿ êëþ÷ íà C, à B e óäîñòîâåðèë À è òàêà..." -- òîâà ïîñëåäíîòî À íå òðÿáâà ëè äà å C (íå ñúì ñèãóðåí çà òàçè ïîïðàâêà) Ãëàâà II, preface: èçëèøíî ïîâòîðåíèå íà ñòðóêòóðàòà íà äîêóìåíòà (íå âÿðâàì âúâ âñÿêà ãëàâà òîé äà ñå ñìåíÿ) style note: prompt-à ïðè ïðèìåðèòå òðÿáâà äà áúäå $ èëè # (â ñëó÷àèòå íà root) òúé êàòî ñà ïî îáùè. Ãëàâà II, ñåêöèÿ 1: "Âèå òðÿáâà äà èçáåðåòå åäèí îò äâàòà ôàéëà..." -- îïðåäåëåíî íÿìà íóæäà îò ïîä÷åðòàâàíå.. ïàê òàì: "Àêî íÿìàòà tar, gunzip èëè bzip2..." -- ïðîñòî çàáåëåæêà, íåùî îòíîñíî òèïà íà àðõèâà êîéòî å ñâàëåí, áåç óäèâèòåëíà â êðàÿ íà èçðå÷åíèåòî è àìàí îò òèÿ ïîä÷åðòàâàíèÿ.. ïàê òàì: ðàçàðõèâèðàíå íà tarball áåç GNU tar: $ gzip -dc file.tar.gz | tar xvf - òîâà âñå ïàê å âúïðîñ íà ëè÷åí èçáîð, íî ÷îâåê íå âèíàãè èìà ìÿñòî äà äåêîìïðåñèðà tarball, è ÷àê ïîñëå äà ãî ðàçàðõèâèðà.. ;) ïàê òàì: "...äà ñå ïðîâåðÿò àòðèáóòèòå íà ôàéëà configure:" ïîêàçàíèÿ ïðèìåð å ñ 'ls -al configure' -- åäíî íàïúëíî èçëèøíî 'à' â îïöèèòå :) ïàê òàì, íà ñëåäâàùàòà ñòðàíèöà (çàùî ñòðàíèöèòå íÿìàò íîìåðà çà êîíêðåòíèÿ release íà PDF-a ?): "Ïîëó÷åíèòå èçïúëíèìè ôàéëîâå ñà ìàêñèìàëíî âúçïðèåì÷èâè êúì ñèñòåìàòà âúðõó êîÿòî ðàáîòÿò." -- òîâà 'âúçïðèåì÷èâè' àìà õè÷ íå ãî ðàçáðàõ ïàê òàì, ñëåäâàùà ñòðàíèöà: "..ñ ïîìîùòà íà êîìàíäàòà su" - êîìàíäàòà å /bin/su .. íåêà íå ñúçäàâàìå ëîøè íàâèöè - aliasè, ïðîìåíåí PATH.. Ãëàâà II, ñåêöèÿ 2: chmod 4755
Re: lug-bg: sendmail.mc sendmail.cf
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Opitai da prochetesh i napravish tova:
http://www.klaban.torun.pl/prog/poprelayd/
Pozdravi
Vesselin Kolev
On Thursday 12 Dec 2002 22:03, Peter An. Zyumbilev wrote:
> Zdraveite,
> znachi za da npravia sendmail.cf file konvertiram sendmail.mc
> problema e e slednia
> znam karjnia rezulat kkavo iskam da se poiavi na 2 mesta v sendmail.cf no
> ne znam ka da go zadam v sendmail.c
> imam
> #
> Kpopauth hash -a /etc/mail/popauth
>
> #som text here
> SLocal_check_rcpt
> R$* $: $(popauth $&{client_addr} $: $)
> R $@ NoPopAuth
> R$* $# OK
>
> Problema e ka da si napravia sendmail.mc da dobavia tova v sendmail.cf ?
> Pozdravi,
> BIOVL
>
> ===
>= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
> http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara
> Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
> ===
>=
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE9+ZCb+48lZPXaa+MRAm2JAJ439rHf7AAme5rmJ/KwMksw1iBTsQCdHopd
t+VKxA6ULZJP4CLsRd7vE78=
=oNbj
-END PGP SIGNATURE-
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: GNUPG - Molba za prochit na beta-versiata na documentaciata
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Napisah nova sekcia (3) v glava II, koiato kasae generiraneto na dvoika kliuchove. Usporedno s tova, schetoh za umestno da izveda problema sys izpolzvaneto na "secure memory" v otdelna glava (2). Tekushtata versia na documenta e 0.14.02 i mozhete da ia namerite na adres http://www.lcpe.uni-sofia.bg/linuxdoc/gnupg/ Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE994P0+48lZPXaa+MRAqwVAJ9GDDQdp//GGunNmCDTd2k8FjvIMwCcC1uG 8hlmLWmifUOn7PbrAhNDF+g= =9GTt -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: GNUPG - Molba za prochit na beta-versiata na documentaciata
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 :) Eh:) ne stava taka.. Obiasniavam kak stava za web-baziran e-mail. Tova go niama v tova, koeto e napisano v rykovodstvoto, no shte se poiavi v glavata za tehnicheskite detaili pri rabotata s GNUPG, koiato shte e gotova do Koleda. Ta znachi, az shte formuliram vyprosa ti taka: Kak da se proveri avtentichnostta na e-mail, koito e poluchen chrez webmail? Vyprosyt ti e osnovatelen i shte dam otgovor na nego. Predi da se proveri dali edin e-mail e naistina podpisan ot tozi, koito ima pretenciite da byde podatel, e nuzhno da ima instaliran GNUPG v sistemata, vyrhu koiato shte se izvyrshva proverkata. V sluchaia tova e tvoia personalen computer, na koito ti si chetesh webmail-a. Sled tova e nuzhno da otidesh na keyserver-a i da izteglish syotvetnia kliuch na podatelia i da go pribavish kym tvoia fail s publichni kliuchove. Tova mozhe da stane napravo chrez programata GNUPG s izpolzvaneto na slednia comanden red: gpg --keyserver pgpkeys.mit.edu --recv-keys 0xF5DA6BE3 V tozi red se izvikva programata GNUPG, ukazva i se server za kliuchove, koito da izpolzva pgpkeys.mit.edu i chrez opciata --recv-keys posledvana ot t.nar. ID na moia kliuch, toi se izteglia ot posochenia keyserver. Tova shestnadesetichno chislo 0xF5DA6BE3 e ID na moia publichen kliuch. Sled izpylnenieto na gornia komanden red shte imash moia kliuch v tvoia fail s kolekcia ot publichni kliuchove. Sega traibva da kopirash pismoto ot prozoreca na browsera v tekstovi file. Kogato kopirash traibva da zapochnesh ot nachaloto na reda: -BEGIN PGP SIGNED MESSAGE- i da svyrshish s kraia na reda: - -END PGP SIGNATURE- T.e. vsichko mezhdu tezi redove, vkliuchitelno i te, se postavia v tekstovi redaktor i se zapazva kato ASCII file. NE pipai file-a. T.e. sled kato go postavish vyv tekstovia redaktor ne pipai nishto po teksta, a samo go zapazi... Naprimer, dai mu imeto test.asc. Sled tova v tekushtata directoria, kydeto si postavil file-a test.asc, izpylni v comanden red slednoto: gpg --verify test.asc Shte poluchish syobshtenie ot roda: gpg: Good signature from "Vesselin Kolev <[EMAIL PROTECTED]>" gpg: aka "Vesselin Kolev <[EMAIL PROTECTED]>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 3275 7C1F B232 E348 9C38 D7BE FB8F 2564 F5DA 6BE3 "Good signature " oznachava, che podpisvaneto e naistina napraveno s moia kliuch. Tozi "WARNING" ti kazva, che ti ne si podpisal moia kliuch i sledovatelno, toi ne e potvyrden ot teb, che e naistina moi! - - Sega shte raztylkuvam kakvo znachi cialoto tova blokche ot informacia, koeto se namira v kraia na moia e-mail: -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE99gtT+48lZPXaa+MRAkcKAJ95ToCQ6rjRL2St29W8S9mY3L3H0gCgrcfQ URZI5j4xOkEjm1DaHkFfNOQ= =3Co9 -END PGP SIGNATURE- Redyt - -BEGIN PGP SIGNATURE- ukazva na tova, che ottuk natatyk, do reda - -END PGP SIGNATURE- shte byde publikuvan elektronnia podpis na moia e-mail. Kak e napraven toi!? Programata GNUPG e izchislila sumta za proverka chrez algorityma SHA1. Tova se poznava po tova, che sled reda - -BEGIN PGP SIGNED MESSAGE- v nachaloto na pismoto stoi i identifikaciata na algorityma, po koito hash funkciata e izchislila sumata za proverka. V moia sluchai tova e Hash: SHA1 Po princip mozhe da se ukazhe i drug algoritym (naprimer MD5 ili Tiger), no zasega SHA1 e standartna za GNUPG i PGP. Ako go niamashe tova pole, programata ot strana na poluchatelia, niamashe da znae po koi algoritym da izchisli sumata za proverka i da ia sravni s podadenata ot men. I taka, az podpisvam pismoto. T.e. GNUPG presmiata sumata za proverka po algorityma SHA1, posle vzima poluchenata syma i ia kodira s moia secreten kliuch i ia prilaga dolu mezhdu redovete: - -BEGIN PGP SIGNATURE- i - -END PGP SIGNATURE- Kodiranata suma za proverka s moia secreten kliuch izglezhda taka (kakto i ti ia vizhdash v moia e-mail): iD8DBQE99gtT+48lZPXaa+MRAkcKAJ95ToCQ6rjRL2St29W8S9mY3L3H0gCgrcfQ URZI5j4xOkEjm1DaHkFfNOQ= =3Co9 Sled kato ti zapazish cialoto mi pismo vyv file i podadesh faila na programata GNUPG, tia shte decodira sumta za proverka na pismoto, koito az sym napravil i shte napravi tova s moia publichen kliuch, koito ti si izteglil. Ako ti ne si izteglil moia publichen kliuch, ti niama da mozhesh da dekodirash sumata za kontrol, koiato az sym izptatil i niama da mozhesh da ia proverish. Sled kato GNUPG dekodira izpratenata ot men i kidirana s moia secreten kliuch suma za proverka, tia shte ia sravni s tazi, koiato tia sama shte napravi i ako dvete symi syvpadat.. znachi pismoto e identificirano polozhitelno. Ako li ne.. znachi pismoto ili ne i
Re: lug-bg: GNUPG - Molba za prochit na beta-versiata na documentaciata
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Otchetoh lipsata na obiasnenie za roliata na hash funkciite i proizvezhdaniete ot tiah chekcumi. Popravkata e pod forma na nova sekcia s nomer 5 v glava 1. Shte byde napisana i glava za revocation key (certificate), no tova shte stane v sledvashtata redakcia, koiato se nadiavam shte se poiavi nai-kysno v nedelia. Tekushtata versia na documenta e 0.13.01 i mozhete da ia namerite na adres http://www.lcpe.uni-sofia.bg/linuxdoc/gnupg/ Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE99gtT+48lZPXaa+MRAkcKAJ95ToCQ6rjRL2St29W8S9mY3L3H0gCgrcfQ URZI5j4xOkEjm1DaHkFfNOQ= =3Co9 -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: GNUPG - Molba za prochit na beta-versiata na documentaciata
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vizhte, ako niakoi iska da redaktira neshto, toi niama da pita vyobshte za takiva neshta! Veche poluchih 2 otziva za zabeliazani greshki na lichnia si mail... iavno horata sa mogli i sa go napravili! Za drugite ne e zadylzhitelno! On Thursday 05 Dec 2002 16:19, Damyan Ivanov wrote: > On Thu, Dec 05, 2002 at 03:32:52PM +0200 Vesselin Kolev wrote: > > Zdraveite, > > Obryshtam se kym vsichki, koito se interesuvat ot temata GNUPG. > > Zapochnah da pisha rykovodstvo na bylgarski ezik. Bi mi se iskalo da se > > dade mnenie po tova, koeto e napisano do sega v slednite posoki: dali > > napisanoto se chete lesno i se razbira; dali ima pravopisni greshki. > > Êàê äà áúäàò èçïðàòåíè êîðåêöèèòå íà ïðàâîïèñà? Åäâà ëè íåùî îò ðîäà íà > "Â ãëàâà Õèêñ, Ñåêöèÿ Èãðåê, Ïàðàãðàô 24 íà òðåòèÿ ðåä äóìàòà 'àëàáàëà' > òðÿáâà äà ñå çàìåíè ñ 'ïîðòîêàëà'" - òîâà å ñóìàòè èçëèøíî ïèñàíå çà > âñÿêà êîðåêöèÿ. È ïîíåæå íå çíàì êàê ñå ïðàâè diff íà PDF... > > Èäåè? > > > äàì -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE972dF+48lZPXaa+MRAnP3AKDQL2nLFfw3hhVnCYkDwIXGpiVtZQCeN9Vi 3NbGrMDapDL2KboDavCVyT0= =ohfr -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: GNUPG - Molba za prochit na beta-versiata na documentaciata
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zdraveite, Obryshtam se kym vsichki, koito se interesuvat ot temata GNUPG. Zapochnah da pisha rykovodstvo na bylgarski ezik. Bi mi se iskalo da se dade mnenie po tova, koeto e napisano do sega v slednite posoki: dali napisanoto se chete lesno i se razbira; dali ima pravopisni greshki. Shte se radvam na redaktorski belezhki! Beta kopieto na documentaciata mozhete da izteglite ot tuk: http://www.lcpe.uni-sofia.bg/linuxdoc/gnupg/ Formatyt na documenta e PDF, a failyt s nastavka .asc e negovia elektronen podpis, koito mozhe da byde proveren s moia publichen kliuch. Blagodaria predvaritelno na vsichki! Pozdravi Vesselin Kolev -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE971WL+48lZPXaa+MRAgI5AKCQz7XCM8hNZv1jjccUPWDRZVIAzACcDEWR 14vIadNQ/wGKG0Mcz6IGTpE= =UzhI -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: gpg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Imam predvid, che syobshtenieto mnogo zabluzhdava:)) A ne, che ti se zabluzhdavash:)) Pozdravi Vesselin On Tuesday 03 Dec 2002 14:11, Vesselin Kolev wrote: > > Pri uslovie za good signature ... tozi warning me pritesniava > > Goliama zabluda:))) Az utre moga da ti podpisha neshto s kliuch, > koito sym predstavil za pritezhanie, na niakoi koito poznavash:)) > > I shte ti pratia fail s exploit s preporyki da go kompilirash:)) Shte > ti go signa dazhe:)) i posle shte ti pratia i publichnia kliuch:)) > koito syshto e falshiv. Ti shte proverish podpisa varhu faila s > exploita s falshivia kliuch i programata pak shte ti kazha, che > elektronnia podpis e dobyr... i ti shte si kompilirash i shte si > pusnesh exploita:))) > > Tova za "good signature" samo ti kazva, che podpisyt e proveren > i che publichnia kliuch, s koito e napravena proverkata e dekodiral > checksum informaciata za faila, koiato e bila zakodirana sys > secretnia kliuch, komplementaren na publichnia, s koito si napravil > dekodiraneto:)) > > Bydete vnimatelni! :)) > > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE97KUt+48lZPXaa+MRAp1EAJ95jU9TxqHkiju4dyXrovgkYuXr5QCg+Nci 6+23qBLqQCbKKXbUmUfQ+8o= =ItHh -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: gpg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Pri uslovie za good signature ... tozi warning me pritesniava Goliama zabluda:))) Az utre moga da ti podpisha neshto s kliuch, koito sym predstavil za pritezhanie, na niakoi koito poznavash:)) I shte ti pratia fail s exploit s preporyki da go kompilirash:)) Shte ti go signa dazhe:)) i posle shte ti pratia i publichnia kliuch:)) koito syshto e falshiv. Ti shte proverish podpisa varhu faila s exploita s falshivia kliuch i programata pak shte ti kazha, che elektronnia podpis e dobyr... i ti shte si kompilirash i shte si pusnesh exploita:))) Tova za "good signature" samo ti kazva, che podpisyt e proveren i che publichnia kliuch, s koito e napravena proverkata e dekodiral checksum informaciata za faila, koiato e bila zakodirana sys secretnia kliuch, komplementaren na publichnia, s koito si napravil dekodiraneto:)) Bydete vnimatelni! :)) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE97J9s+48lZPXaa+MRAjgVAKD1ky0LeKisIR44tJWbdext6nFc7wCcDl84 K1u0uke5ir+rrInF6CQm078= =F0Sa -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: gpg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tuk opirash do ciala serioznost na neshtata:)) Pyrvo tova neshto ti kazva, che niama kak da proverish, che sobstvenika na kluycha e naistina toi, zashtoto ne mozhesh da proverish udostoverenieto na kliucha. Po princip kogato se generira edin kliuch, avtomatichno se pravi podpis sys secretnia vyrhu publichnia. Tova e autosignature. Sled tova vseki ako iska mozhe da podpisva deden publichn kliuch i da go pravi validen za sebe si! Ako sega ti podpishesh kliucha s ID 57548DCD toi veche shte byde validen za teb. Dostatychno e da izpylnish slednoto: gpg --sign-key 57548DCD Razbira se, tova neshto e dobre da se pravi, samo ako se znae, che tozi kliuch idva naistina ot sobstvenika mu:)) Pozdravi Vesselin Kolev On Tuesday 03 Dec 2002 13:42, Niki Nick wrote: > Blagodaria na Dancho Mitev za pomo6ta > samo ako moze6 da mi kaze6 dali tozi rezultata ne e problemen: > Pri uslovie za good signature ... tozi warning me pritesniava > > $ gpg --verify gnupg-1.2.1.tar.gz.sig gnupg-1.2.1.tar.gz > gpg: Signature made Fri Oct 25 13:20:54 2002 EEST using DSA key ID 57548DCD > gpg: Good signature from "Werner Koch (gnupg sig) <[EMAIL PROTECTED]>" > gpg: WARNING: This key is not certified with a trusted signature! > gpg: There is no indication that the signature belongs to the > owner. Primary key fingerprint: 6BD9 050F D8FC 941B 4341 2DCC 68B7 AB89 > 5754 8DCD > > > > - > http://kino.GBG.bg - ÊÈÍÎ ÏÐÅÌÈÅÐÈ | ÏÐÎÃÐÀÌÀÒÀ | ÍÎÂÈÍÈ | DVD È > ÂÈÄÅÎ | ÊÈÍÎ ÈÑÒÎÐÈß > === >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara > Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html > === >= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE97J2y+48lZPXaa+MRAi2TAJ4oa6KHEmB/Wd4/SuenifM+Y03x1gCg23YM ePOtJ05ogH07NDzsRULCP80= =m1s2 -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
