Re: [SLUG] One for the smtp routing guru's

2000-12-07 Thread Peter Rundle

 That whoosh you just heard was the sound of the joke going way over your
 head.

No that whoosh was the sound of the sendmail config going way over my
head ;-)

Sendmail seems to be in the way way too hard basket (besides Rodos said
it wouldn't work anyway). So perhaps I need to look at qmail or see if
our local resident perl genius can really "whip up my own mta". I just 
love these guys that can build a nuclear reactor with three lines of 
perl code.

Anyway, for the curious, the point of the exercise is.

Many different users set their mua to use the mail server as their
outbound smtp. Some users are allowed to have their e-mail delivered
without any tampering, others however are obviously evil and their
mail must go via the corporate server to have whatever degrading
indignaties are to be imposed on them (virus scanning, long winded 
legalise tacked on the end, all nudie pictures removed etc...)

Why can't I just tell the good guys to use the mta, and the bad guys
the corporate e-mail server? Well...there's this "firewall" thing so
the corporate server only excepts mail from the mta... (well sometimes
you have to put OSS between "commercial" software and the internet to
stop it from becoming spam central. ;-)

Of course a smart user might try to set their "mail from" to something
else and put a quite note in the body of the message requesting the 
recipient not reply to the envelope address but to the address written
in the message body. Thus they could maybe get around the system and
have their e-mails set free onto the ether without corporate tampering.

But unfortunately for them, their e-mail admin has forseen this and is 
busy working out how to configure the smtp agent to use authenticated 
smtp to fetch the users "mail" attribute from the ldap directory. If
this doesn't match the envelop "mail from" something nasty might happen
to their e-mail...

Now the tricky bit, if the "mail from" is NOT in the "naughty users
list" 
their mail gets released to the ether undamaged, otherwise, their mail
is 
routed to the corporate server for appropriate tampering before heading
out. 

Clear as Mud?

rgds

Pete


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] CVS Pserver under RH7

2000-12-07 Thread Thom May

There's an example of what you need for a pserver on xinetd.org
as a caveat to that, tho, the current CVS rpms (1.10-8) are
buggy (read showstopper'd) when used as a pserver. 
We ended up using the deb packages and aliening them to rpms,
and they're quite happy.
Cheers,
-Thom
On Thu, Dec 07, 2000 at 12:02:55 +1100, John Clarke said:
 On Wed, Dec 06, 2000 at 06:22:28PM +0200, Tim wrote:
 
  Can anyone enlighten me as to how I should go about setting up the pserver 
  daemon under RH7.0 xinetd?
 
 I've not used xinetd (still using a much-updated RH5.2 without it), but
 try this:
 
 Create a dummy inetd.conf with just one line:
 
   cvspserver  stream  tcp  nowait  root  /usr/bin/cvs cvs 
--allow-root=/usr/local/cvsroot pserver
 
 and make sure that cvspserver is listed as 2401/tcp in /etc/services.
 
 Use xconv.pl to generate a dummy xinetd.conf, then copy the cvspserver
 configuration block into your real xinet.conf.  I'd imagine it'd look
 something like this:
 
 service cvspserver
 {
 socket_type = stream
 wait= no
 user= root
 server  = /usr/bin/cvs
 server_args = --allow-root=/usr/local/cvsroot pserver
 }
 
 
 I got this from an xinetd tutorial I found via http://www.xinetd.org/.
 
 
 Cheers,
 
 John
 -- 
 whois [EMAIL PROTECTED]
 
 
 -- 
 SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
 More Info: http://slug.org.au/lists/listinfo/slug


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] One for the smtp routing guru's

2000-12-07 Thread tom burkart

On Thu, 7 Dec 2000, Peter Rundle wrote:

 Sendmail seems to be in the way way too hard basket (besides Rodos said
 it wouldn't work anyway). So perhaps I need to look at qmail or see if
 our local resident perl genius can really "whip up my own mta". I just 
 love these guys that can build a nuclear reactor with three lines of 
 perl code.
Yeah right.  Qmail?  ROFL!  3 lines of perl maybe!

 Many different users set their mua to use the mail server as their
 outbound smtp. Some users are allowed to have their e-mail delivered
 ...
Yeah, but sendmail can do all this...  Even if you shake your head in
disbelief - or was it just because you or Rodos can't do it :-P

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



[SLUG] Routing

2000-12-07 Thread paul


Hi Everyone,

Situation:
Debian Linux box - mail server, DNS, ipmasq - running 3 network interface. One local 
(eth1) on the local 10.10.10.0/24 network, one (ppp0) a permanent dialup connection to 
connect with a static IP, and one (ppp1) a permanent dynamic IP ADSL connection 
through Telstra. The ADSL is recently added (as of this afternoon) and according to 
the logs and ifconfig appears to be running fine thanks to rp-pppoe. However, I'm 
falling down at the last step here...

Problem:
I need to be able to route ftp traffic over the ADSL line. Now to be honest I don't 
know how to make anything go over the ADSL line without breaking the default route 
over the modem. Is there a way to create and use two default routes and then firewall 
the ftp traffic out over ADSL? Ipchains with -p21/22 -i ppp1 options?

They want to do something more crazy later on that'll likely involve me scouring the 
adv-routing HowTo, do I need to for this problem?

Thanks,

-- 

-Paul de Kievit

Netwise Australia
Ph:  (07) 3216 0660
Fax: (07) 3216 0226


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



[SLUG] mutt

2000-12-07 Thread paul



Hi Everyone,

I'm also lead to believe that my mutt configuration is allowing me to type out very 
lengthy lines. Rather annyoing for the recipients. Is there a setting I should be 
using or just stop typing excessive long paragraphs?

Thanks,

-- 

-Paul de Kievit

Netwise Australia
Ph:  (07) 3216 0660
Fax: (07) 3216 0226


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] mutt

2000-12-07 Thread CaT

On Thu, Dec 07, 2000 at 09:23:53PM +1000, [EMAIL PROTECTED] wrote:
 I'm also lead to believe that my mutt configuration is allowing me to
 type out very lengthy lines. Rather annyoing for the recipients. Is
 there a setting I should be using or just stop typing excessive long
 paragraphs?

Yes. The Enter key. :)

Failing you not having one, the fmt command with vim is nice. :)

-- 
CaT ([EMAIL PROTECTED])

'We do more then just sing and dance. We've got a brain too.'
-- The Backstreet Boys


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



[SLUG] copyright threat!

2000-12-07 Thread Danny Yee

I believe some of these copyright proposals pose a serious threat to
free software.  It would be good to see SLUG write to the committee
involved, putting the views of a Linux users group (to help oppose the
BSAA-funded lobbyists pushing the case for Microsoft and their ilk).

Danny.

- Forwarded message from Nick Smith [EMAIL PROTECTED] -

Date: Thu, 7 Dec 2000 12:24:08 +1100 
From: Nick Smith [EMAIL PROTECTED]
To: "'[EMAIL PROTECTED]'" [EMAIL PROTECTED]
Subject: [LINK] Andrews Committee Report on Copyright Enforcement
X-Mailer: Internet Mail Service (5.5.2650.21)

Dear Linkers

Below is a quick (and dirty) summary of the HoR Standing Committee on Legal
and Constitutional Affairs report into Copyright Enforcement. Some dangerous
stuff here. Note these are just recommendations. No laws yet. Eventual laws
(if introduced by the Government) may not be as bad as those which the
Committee seems to have proposed.

The full report can be found at:
http://www.aph.gov.au/house/committee/laca/copyrightenforcement/contents.htm

Summary of Cracking Down on Copycats: Enforcement of Copyright in Australia
The Report contains a number of recommendations which either make the
process of copyright infringement litigation easier for plaintiffs or
increase the penalties that defendants may face.

The proposed litigation 'improvements' (a number of which have distinct
civil liberties implications) include:
*   the reversal of the onus of proof in civil (and criminal) cases with
respect to ownership of copyright; 
*   increased powers of civil seizure of infringing material;
*   the withdrawal of the privilege against self-incrimination in civil
proceedings; 
*   reversal of onus of proof in relation to defendant's knowledge in
civil actions.
*   
There are a number of other issues of concern also:

1.  (recommendation 3) The Andrews Committee appears to recommend that
the use of circumvention devices be made an offence (though it is arguable
that this recommendation will be satisfied by the present provisions will
only proscribe trafficking);

2.  (recommendation 10) A recommendation for criminal liability for
'licensees' where that licensee has actual or constructive notice of
infringing software held by an employee or agent. This could mean for
example, criminal liability for a University administrator or a CEO who knew
or ought reasonably to have known that employees of the university or
company had made more copies of a piece of software than the body had
licences for.

3.  (recommendation 11) The Report recommends that the possession of
infringing software 'up to a certain value' be made a criminal offence. The
Report 'does not envisage that the proposed offence would be used to
prosecute ordinary citizens who possess infringing copies'. However, there
is no reason why this could not occur. Due to the expensive nature of
software, value thresholds are easily crossed; a person with AutoCAD and
certain graphic design applications on their hard drive will be in
possession of software to the value of many thousands of dollars. As the
BSAA estimates that 33% of all copies of software pirated, this proposed
offence may make criminals of a substantial portion of the Australian
people.

4.  (recommendation 19) The Andrews Committee has recommended that
'collecting societies should be authorised to detect infringements and
enforce creators rights', allowing them to offer 'compulsory licences' to
infringers.

This recommendation would allow a collecting society (such as CAL or APRA
for example) to detect 'infringements' (the judgement as to what is an
infringement would belong to the society rather than a Court) and offer paid
licences, regardless of whether the owner of the copyright in question is a
member of that society. (The strongest objections to this provision will
surely come from copyright owners who are not members of a society and who
will be forced by statute into an agency relationship with that society.
Such owners may discover that users who they are preparing to sue or settle
with have received licences from a society without their permission).

'Such a change would represent a significant grant of power to collecting
societies, effectively turning them into private (but mandated by law)
copyright police forces. It is entirely reasonable that collecting societies
might want to provide copyright enforcement services on behalf of their
members but it is somewhat strange to make them the legal agents of all
copyright owners of a class of work, regardless of whether that owner joins
the society. Surely copyright owners (particularly those who are not members
of the collecting society in question) would prefer to be informed of a
potential infringement of copyright rather than have the society offer a
licence on their behalf?

Nick
--
=
Nick Smith
Executive Officer  ::  Australian Digital Alliance  
Copyright Advisor  

Re: [SLUG] mutt

2000-12-07 Thread Jeff Waugh

quote who="[EMAIL PROTECTED]"

 I'm also lead to believe that my mutt configuration is allowing me to type
 out very lengthy lines. Rather annyoing for the recipients. Is there a
 setting I should be using or just stop typing excessive long paragraphs?


Do it in your editor. I'll assume for the time being that you're using
vim, ah, 'cos that's pretty default. I mean good. I mean-- Never mind. Try
this in your .muttrc file:

  set editor = "vim -c 'set tw=76 expandtab'"

That will set it to 76 characters.


[ I also find turning markers off (markers setting) is good, it stops me
from getting annoyed when someone *else* has long lines. ;) ]

- Jeff


-- [EMAIL PROTECTED] --- http://linux.conf.au/ --

  "GIMP is the primary tool in my graphics work. It is my gcc and   
Emacs." - Tuomas Kuosmanen (tigert) 


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] mutt

2000-12-07 Thread Ken Yap

 I'm also lead to believe that my mutt configuration is allowing me to
 type out very lengthy lines. Rather annyoing for the recipients. Is
 there a setting I should be using or just stop typing excessive long
 paragraphs?

Yes. The Enter key. :)

Failing you not having one, the fmt command with vim is nice. :)

If vim is your editor, you could call this script as the mail editor:

#!/bin/sh
exec vim "+set digraph" "+set wrapmargin=8" $*

digraph allows you to create accents. To reformat a paragraph, do gq} or
in general gqrange which is an internal fmt.


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] mutt

2000-12-07 Thread James Wilkinson

This one time, at band camp, CaT said:
On Thu, Dec 07, 2000 at 09:23:53PM +1000, [EMAIL PROTECTED] wrote:
 I'm also lead to believe that my mutt configuration is allowing me to
 type out very lengthy lines. Rather annyoing for the recipients. Is
 there a setting I should be using or just stop typing excessive long
 paragraphs?

Yes. The Enter key. :)

Failing you not having one, the fmt command with vim is nice. :)

In my .muttrc:

set editor='vim '+/$' -c "set tw=72"'  # go to first blank line and set
line width to 72 chars

(ps, sorry cat for the personal reply, remember kids, don't drink and
drive your email client)

-- 
 * dpkg ponders: 'C++' should have been called 'D'
(o_ '   -- #Debian
//\  
v_/_


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] One for the smtp routing guru's

2000-12-07 Thread Rodos

On Thu, 7 Dec 2000, tom burkart wrote:

 Yeah, but sendmail can do all this...  Even if you shake your head in
 disbelief - or was it just because you or Rodos can't do it :-P

So why leave us in suspense Tom, if its so easy give us all an education. I
guess if people already knew the answer they would not be asking.

Rodos

-- 
[EMAIL PROTECTED] | The first 90% of the code accounts for 90% of the
Camion Technology | development time. The remaining 10% of the code
+61 2 9873 5105   | accounts for the other 90% of the development time.
  |   [Tom Cargill]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] EXIT COMMAND

2000-12-07 Thread James Wilkinson

This one time, at band camp, John Ryland said:

I've occassionally used kwrite and noticed to exit you can just hit ESC, 
that's one keystroke.

Not so good for the ex-vi user (or the vi user in ex mode), who'll hit
ESC to delete a few lines and delete more than they wanted.

-- 
 * dpkg ponders: 'C++' should have been called 'D'
(o_ '   -- #Debian
//\  
v_/_


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] EXIT COMMAND

2000-12-07 Thread James Wilkinson

This one time, at band camp, Rodos said:

Oh what a bugger that would be. I seam to be in the habbit of hitting ESC
everytime I pause to think, bit like the typing version of saying um
whilst talking.

I think mine is 'ls'. ;)

-- 
 * dpkg ponders: 'C++' should have been called 'D'
(o_ '   -- #Debian
//\  
v_/_


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] EXIT COMMAND

2000-12-07 Thread James Wilkinson

This one time, at band camp, Rodos said:

On Thu, 7 Dec 2000, John Ryland wrote:

 However vi is the only one true editor :)

Ahmen brother! And Pearl is the language of the Gods. Linux is the OS of
the GNU generation ...

the innernet will have you believe otherwise...

http://www.amherst.edu/~jtagnew/ed.html

-- 
 * dpkg ponders: 'C++' should have been called 'D'
(o_ '   -- #Debian
//\  
v_/_


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] One for the smtp routing guru's

2000-12-07 Thread Jamie Honan


 Some users are allowed to have their e-mail delivered
 without any tampering, others however are obviously evil and their
 mail must go via the corporate server to have whatever degrading
 indignaties are to be imposed on them (virus scanning, long winded 
 legalise tacked on the end, all nudie pictures removed etc...)

Why not go the whole hog and do polygraph tests to see who really
harbours evil intents?

Or, if the evil is deep-rooted, a priest for an exorcism?

Perhaps the evil lies in the eye of the beholder? Perhaps
those in control are afraid of what's in their own hearts,
are afraid that one tenth of it lies in those of others.

Good luck with the MTA, but I think you are chasing shadows.

Jamie



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] copyright threat!

2000-12-07 Thread Jamie Honan


Danny,

Is there a public comment period or manner for us to
voice an opinion?

This is all stupid stuff. What we need to do is go on the attack,
force those who want to have more interference and laws in this
area to justify why laws

* aren't simplified

* aren't aligned with common sense and public sentiment
  (i.e. Napster is proof that `copyright education' is balony)

* that these `benefit holders' have to continually justify their position
on a public benefit analysis, not a narrow economic self interest
basis

We've been silent and cowed. Time to attack. How about our own
manifesto?

Jamie



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



[SLUG] IP Port Forwarding.

2000-12-07 Thread Josh Dixon

G'day,

I'm having a little trouble getting our mail gateway to forward pop and web access 
requests to an internal machine. I have used ipchains and ipmasqadm to forward port 80 
and port 110 to the internal machine, but it wont actually forward. I have enabled ip 
forwarding by setting /proc/sys/net/ipv4/ip_forward to 1.

These are the settings I have used, and for testing purposes, they are the only 
ipchains and ipmasqadm commands that have been used.

ipchains -I input -p tcp -y -d $externalip 110 -m 1
ipmasqadm mfw -I -m 1 -r $internalip 110
ipchains -I input -p tcp -y -s 0/0 -d externalip 80 -m 2
ipmasqadm mfw -I -m 2 -r internalip 80

Any help will be appreciated.




Regards,

Josh Dixon
Senior Projects and Network Administrator
Royal Australasian College of Physicians

Email: [EMAIL PROTECTED] 
Phone: 02 9256 5476
Fax: 02 9252 3310



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] IP Port Forwarding.

2000-12-07 Thread Marshall, Joshua

Try using:

Try using the portfw option in ipmasqadm:

/sbin/ipmasqadm portfw -a -P tcp -L $externalip 80 -R $internalip 80

Make sure you have the options in your kernel, and have the appropriate .so's in 
/usr/lib/ipmasqadm.


Josh Dixon wrote:

 G'day,

 I'm having a little trouble getting our mail gateway to forward pop and web access 
requests to an internal machine. I have used ipchains and ipmasqadm to forward port 
80 and port 110 to the internal machine, but it wont actually forward. I have enabled 
ip forwarding by setting /proc/sys/net/ipv4/ip_forward to 1.

 These are the settings I have used, and for testing purposes, they are the only 
ipchains and ipmasqadm commands that have been used.

 ipchains -I input -p tcp -y -d $externalip 110 -m 1
 ipmasqadm mfw -I -m 1 -r $internalip 110
 ipchains -I input -p tcp -y -s 0/0 -d externalip 80 -m 2
 ipmasqadm mfw -I -m 2 -r internalip 80

 Any help will be appreciated.

 Regards,

 Josh Dixon
 Senior Projects and Network Administrator
 Royal Australasian College of Physicians

 Email: [EMAIL PROTECTED]
 Phone: 02 9256 5476
 Fax: 02 9252 3310

 --
 SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
 More Info: http://slug.org.au/lists/listinfo/slug



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] One for the smtp routing guru's

2000-12-07 Thread tom burkart

Peter Rundle said:

 without any tampering, others however are obviously evil and their
 mail must go via the corporate server to have whatever degrading
 indignaties are to be imposed on them (virus scanning, long winded 
 legalise tacked on the end, all nudie pictures removed etc...)
This can all be done with libmilter (part of the sendmail distribution).

 you have to put OSS between "commercial" software and the internet to
 stop it from becoming spam central. ;-)
Sendmail these days comes with a lot of SPAM stomping features...

 Of course a smart user might try to set their "mail from" to something
 else and put a quite note in the body of the message requesting the 
 recipient not reply to the envelope address but to the address written
 ...
 this doesn't match the envelop "mail from" something nasty might happen
 to their e-mail...
libmilter again.

 Now the tricky bit, if the "mail from" is NOT in the "naughty users
 list" 
 their mail gets released to the ether undamaged, otherwise, their mail
 is 
 routed to the corporate server for appropriate tampering before heading
 out. 
ditto.

All you have to do is to write a mail filter program that does all this
(or multiples that do a bit at a time).  Ok, this is a pretty new feature
in sendmail but I am working on one that does virus scanning...  The guys
who wrote the scanner have actually used a rather clever feature in
sendmail so they can use a mailer to send all the mail to the mailer first
and the mailer re-injects the mail into sendmail who then delivers it to
the final destination.  That way all the mail goes through the mailer who
can do with it as it pleases (including throwing it into a black hole).

Ok, this is more than just tweaking the *.cf file...  My statement was
that it can be done.  BTW, I have dealt with both sendmail and qmail and
my choice is sendmail.  Yes, I know, the learning curve for sendmail IS
much steeper but it is much more feature-rich (and potentially
bug-prone).  Further, I do have to refer to the doco quite often as I
DON'T remember everything about it.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] TCP Wrapper error.

2000-12-07 Thread Michael Lake

Hi,

I made a post yesterday on two probs in getting tcpwrappers
working.
Prob 1 on my Linux box was getting a script fired off when a
rule was encountered: solved by Mathew.
Prob 2 was my IRIX box is not letting my Linux box in. Still
not solved but have done lots more checking.

I have used tcpchk and tcpmatch to check my hosts.allow and
hosts.deny against inetd.conf and it all reports OK. In the
example below 100.10.10. is not my real ip addr.

/etc/hosts.allow
telnetd : 100.10.10.16  

/etc/hosts.deny
ALL : ALL

In inetd.conf we have:
telnet  stream  tcp nowait  root/usr/sbin/tcpd
telnetd
(the daemons live in /etc/sbin and are called this not
in.telnetd )

If I have in hosts.allow the line ALL : LOCAL then I can
connect as the logs show:
Dec  8 11:38:39 6C:mol telnetd[1070]: connect from
mylinuxbox
Dec  8 11:38:45 6E:mol login[1072]: ?@mylinuxbox as mikel

If I dont have ALL : LOCAL (and I dont want it) the logs
give:

Dec  8 11:58:50 6D:mol inetd[204]: received SIGHUP:
reconfiguring
...and when i try to connect by telnetting from my Linux box

Dec  8 11:32:16 4C:mol telnetd[1048]: refused connect from
mylinuxbox

"tcpdchk -v" gives...
 Rule /etc/hosts.allow line 6:
daemons:  telnetd
clients:  100.10.10.16
access:   granted

and tcpdmatch 
/etc# tcpdmatch telnetd mylinuxbox
client:   hostname mylinuxbox
client:   address  255.255.255.255
server:   process  telnetd
matched:  /etc/hosts.allow line 5
access:   granted

/etc# tcpdmatch telnetd 100.10.10.16
client:   address  100.10.10.16
server:   process  telnetd
matched:  /etc/hosts.allow line 6
access:   granted

So it looks like tcpwrappers SHOULD be letting in my Linux
box to the IRIX but it won't.
My guess is that the rule in hosts allow to allow mylinuxbox
in is not being met and the hosts.deny is catching it.
Any help appreciated.

Mike
-- 

Michael Lake
University of Technology, Sydney
Email: mailto:[EMAIL PROTECTED] Ph: 02 9514 1724 Fx: 02
9514 1628 
URL: http://www.science.uts.edu.au/~michael-lake/
Linux enthusiast, active caver and interested in anything
technical.



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



[SLUG] 1.Sendmail and 2.DNS (and 3.Netscape)

2000-12-07 Thread Joshua Burvill

Greetings,

1. Trying to get sendmail to change my username and hostname
in from/sender/reply-to header in my messages:
Added these to /etc/sendmail.mc:
FEATURE(always_add_domain)dnl
MASQUERADE_AS("one.net.au")dnl
This works after processing with m4 etc
So my messages now appear to come from [EMAIL PROTECTED]
But really need it to be [EMAIL PROTECTED]
So try this:
FEATURE(`genericstable',`hash -o /etc/genericstable')
with /etc/genericstable containing:
home_usernameisp_username

Does not switch the username in the from/sender header.

a) not sure about hash command. from command line it does not like -o
option
b) not sure about format of /etc/genericstable

2. Given:

# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric RefUse
Iface
192.168.100.3   *   255.255.255.255 UH0  00
eth0
61.12.41.1  *   255.255.255.255 UH0  00
ppp0
192.168.100.0   *   255.255.255.0   U 0  00
eth0
127.0.0.0   *   255.0.0.0   U 0  00
lo
default 61.12.41.1  0.0.0.0 UG0  00
ppp0
#

Why does sendmail try to look up DNS when I send a local message?

3. Why does Netscape look up DNS when I point at local machine name?

Can I get around this and still have pppd running in demand mode?

Does this mean running DNS locally?

Sorry for the high number of questions.

Seeya, Josh



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] 1.Sendmail and 2.DNS (and 3.Netscape)

2000-12-07 Thread Joshua Burvill

Rachel Polanskis wrote:

 On Fri, 8 Dec 2000, Joshua Burvill wrote:

  1. Trying to get sendmail to change my username and hostname
  in from/sender/reply-to header in my messages:
  Added these to /etc/sendmail.mc:
  FEATURE(always_add_domain)dnl
  MASQUERADE_AS("one.net.au")dnl
  This works after processing with m4 etc
  So my messages now appear to come from [EMAIL PROTECTED]
  But really need it to be [EMAIL PROTECTED]

 I have an m4 macro I created that does exactly this.

 I use it to rewrite the user  domain for my home system
 so it looks like it came from UWS' backbone mail server.

 Let me know if you want it, as I will have to draft up
 a little guide on how it works...

 rachel

Your have understood what I am trying  for exactly.

But I got the impression from the doc README.cf that this is
something to use FEATURE(`genericstable') for. Is this wrong?

Josh



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug