[SLUG] Anna Kournikova email worm - disinfection

2001-02-13 Thread tom burkart

Windoze uninfection details thanks to AVP Australia...

=
1.  Virus creates a registry key under:
 HKEY_Current_User\Software\OnTheFly

2.  Text of the above registry key is: "Worm made with Vbswg 1.50b".

3.  After sending emails to all users in Outlook address list, the value
 of this registry key is set to "1".  Afterwards, the virus will not send
 any more emails.

4.  Saves virus to C:\%WindowsDirectory%\AnnaKournikova.jpg.vbs

5.  Creates email message and sends to all users on available address
 lists (creates individual emails, not a group send).  Attaches the file
 saved in step 4 above, then deletes
 C:\%WindowsDirectory%\AnnaKournikova.jpg.vbs
 after sending all emails.

6.  On January 26, it opens a browser window with the website
 www.dynabyte.nl



To clean the virus:

1.  Search and destroy all emails with the subject line:
 " Here you have, ;o) "

2.  Delete the registry key mentioned in item 1 above.

3.  Search and destroy all copies of AnnaKournikova.jpg.vbs
=


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



RE: [SLUG] Antivirus solution????

2001-02-13 Thread tom burkart

I am only running sendmail and am using AVP rather
successfully.  Admittedly, I don't really like how it is implemented but
it is efficient, works (ie. catches the viruses).  Some clever person
patched sendmail to incorporate the linkage to the antivirus system which
passes every piece of mail to the antivirus  software.  It is written for
AVP but will accomodate other products as well.

I believe the way to do it is through libmilter.  Sadly, I don't have the
time and I am not sure wether libmilter is stable enough yet. (Libmilter
is a part of the sendmail distribution).

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] cash by fax info

2001-01-18 Thread tom burkart

On Thu, 18 Jan 2001 [EMAIL PROTECTED] wrote:

 X-RBL-Warning: (relays.orbs.org) Open relay - see
 http://www.orbs.org/verify.php3?address=202.101.28.153
People with this header will now have to be moderated... (ie I used an
appropriately vagueised version of the above).

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Blown monitor guns

2001-01-08 Thread tom burkart

On Sun, 7 Jan 2001, Michael Lake wrote:

  Also, it's time to purchase a new monitor. Anyone know if flat screens
  are common yet ... and cheap? Are they worth it?
 Well I have seen some and they look very good but they are very pricy.
 If you are really short on desk space (esp depth) or you want
I have got a DV150 (15") which is very nice.  Apart from the fact that it
doesn't do some of the refresh rates it is supposed to in the manual it is
beautiful and pricey (2.2k).  Oh yeah, a graphic artist was going to buy
one and had a look at this one and decided it wasn't worth it
yet.  Apparently, because the colour changes slightly when you change
viewing angle was enough to make them worried...
I can actually watch this thing much longer than a CRT so it works out
well for me.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] SSH hint required

2000-12-21 Thread tom burkart

On Fri, 22 Dec 2000, Peter Rundle wrote:

 I've been given a script that looks like this
 ...
 machine a .sshrc file or something? man ssh didn't help much.
Why not? you haven't got enough experience reading between the lines :-)

From memory:
In a section called RSA authentication...
use ssh_keygen (or was it ssh-keygen?) to generate the keys, the private
one stays on the machine with the script, the public one gets renamed and
copied to the servers you are trying to monitor in ~root/.ssh - then it
should just happen.  Please check with the manual (man ssh) for the fine
details.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] named slave

2000-12-13 Thread tom burkart

On Wed, 13 Dec 2000, David wrote:

 /var/log/messages (slave DNS host) says:
 Dec 13 18:53:42 fast named[21052]: rcvd NOTIFY(duelplay.com.au, IN, SOA)
 from [203.23.36.1].1034
 Dec 13 18:53:42 fast named-xfer[21179]: can't make tmpfile
 (named.duelplay.Lm0CQb): Permission denied 
 
 The master server behaves properly, serial numbers are correct. Both boxes
The problem is not on the master.

 The master DNS runs as root, but on the slave host, named runs as uid
Yukk. that's an old version - it should be 8.2.2pl7!

 named and all files are owned by named. I don't know why they are
 different, and I don't remember ever doing anything to make them
 different. What should they be?
The directory where the slave files are written to must be owned by
named.  Temporary files are written to that directory and then
renamed...  This is what fails in your case.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Little knowledge required about Dell

2000-12-11 Thread tom burkart

On Mon, 11 Dec 2000, Craig Warner wrote:

 Very general question, does any one have experience setting up Dell
 notebooks, docking stations and external monitors. ComputerBank has been
 donated some of these units and I having a bit of fun getting the
 external monitor to work.
The trick with most external monitors/data projectors is that you plug the
laptop into the external device first BEFORE turning the laptop on.  After
that everything is usually sweet.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Looking for rpm V4

2000-12-11 Thread tom burkart

On Tue, 12 Dec 2000, Ian Ward wrote:

 I cannot find a copy of rpm Version 4 (source or binary) that the  hasn't
 been built with rpm V4
www.rpm.org
You also need the db (??? - I don't remember) ver 3.  It will tell you
anyway...
There is a *.tgz somewhere on their site - I have a copy if you are really
stuck.

 How do you upgrade from V3 to V4 if people build V4 rpms with V4 sheeesh!!
Good one eh?

 anyone done this? I've looked in lots of places, but cannot get a hit on a
 howto
This stuff is too obvious for a howto :-)

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



[SLUG] VBA scripts on linux

2000-12-10 Thread tom burkart

Hi,
Is anyone aware of a way of running VBA scripts (the current version of
VB) under linux.


tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] One for the smtp routing guru's

2000-12-07 Thread tom burkart

On Thu, 7 Dec 2000, Peter Rundle wrote:

 Sendmail seems to be in the way way too hard basket (besides Rodos said
 it wouldn't work anyway). So perhaps I need to look at qmail or see if
 our local resident perl genius can really "whip up my own mta". I just 
 love these guys that can build a nuclear reactor with three lines of 
 perl code.
Yeah right.  Qmail?  ROFL!  3 lines of perl maybe!

 Many different users set their mua to use the mail server as their
 outbound smtp. Some users are allowed to have their e-mail delivered
 ...
Yeah, but sendmail can do all this...  Even if you shake your head in
disbelief - or was it just because you or Rodos can't do it :-P

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] One for the smtp routing guru's

2000-12-07 Thread tom burkart

Peter Rundle said:

 without any tampering, others however are obviously evil and their
 mail must go via the corporate server to have whatever degrading
 indignaties are to be imposed on them (virus scanning, long winded 
 legalise tacked on the end, all nudie pictures removed etc...)
This can all be done with libmilter (part of the sendmail distribution).

 you have to put OSS between "commercial" software and the internet to
 stop it from becoming spam central. ;-)
Sendmail these days comes with a lot of SPAM stomping features...

 Of course a smart user might try to set their "mail from" to something
 else and put a quite note in the body of the message requesting the 
 recipient not reply to the envelope address but to the address written
 ...
 this doesn't match the envelop "mail from" something nasty might happen
 to their e-mail...
libmilter again.

 Now the tricky bit, if the "mail from" is NOT in the "naughty users
 list" 
 their mail gets released to the ether undamaged, otherwise, their mail
 is 
 routed to the corporate server for appropriate tampering before heading
 out. 
ditto.

All you have to do is to write a mail filter program that does all this
(or multiples that do a bit at a time).  Ok, this is a pretty new feature
in sendmail but I am working on one that does virus scanning...  The guys
who wrote the scanner have actually used a rather clever feature in
sendmail so they can use a mailer to send all the mail to the mailer first
and the mailer re-injects the mail into sendmail who then delivers it to
the final destination.  That way all the mail goes through the mailer who
can do with it as it pleases (including throwing it into a black hole).

Ok, this is more than just tweaking the *.cf file...  My statement was
that it can be done.  BTW, I have dealt with both sendmail and qmail and
my choice is sendmail.  Yes, I know, the learning curve for sendmail IS
much steeper but it is much more feature-rich (and potentially
bug-prone).  Further, I do have to refer to the doco quite often as I
DON'T remember everything about it.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



RE: [SLUG] RPM Fun - Solved.

2000-12-05 Thread tom burkart

On Wed, 6 Dec 2000, David Kempe wrote:

  painful.  I am still looking forward to all this fun when TL goes to
  rpm-4.0...
 Whats TL?
TurboLinux - a distribution that is rpm based like RH but comes secure
(networking-wise) by default.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Those ol' modem installation blues .....

2000-11-28 Thread tom burkart

On Wed, 29 Nov 2000, Adam F. Bogacki wrote:

 The only difference from the usual winmodem dialup to Primus seems to be 
 the login script: Win98/SE and winmodem require manual input of the 
 password while RH6.2 includes the password as part of configuration. I have 
 tried reconfiguring without the password but nothing changes - it behaves 
 as described above.
What do you see when you try to "log in" using minicom?  The question here
is are you sure that the dialer is set up correctly.  There are two main
ways of connecting to a remote machine using Linux:

- one that presents the "Username/Password" prompts first - these need to
be set up in the chat script.

- one that goes straight into ppp mode - this needs to be set up in
/etc/ppp (options, chap-secrets, pap-secrets as desired).

If you try to mix the two methods you will have big problems...  BTW, this
assumes that your modem actually connects properly in the first place.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] SQL Servers

2000-11-27 Thread tom burkart

On Mon, 27 Nov 2000 [EMAIL PROTECTED] wrote:

 Question is, which is worth putting the effort into -
 indeed, is one better than the other ?
If you are after speed and can put up with a limited implementaion - mysql
is your answer.
Postgresql is a very complete implementation - the cost is speed.

When I decided to write some code with DB backend I decided I would put up
with the speed penalty and use the more complete implementation.  Later
when I have a complete product, I will re-evaluate wether most or all
functionality I require exists in the fast one I will change the drivers
to that one...

Anyway, Postgresql 7 is supposed to be a lot faster...

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Bind and Debian

2000-11-26 Thread tom burkart

On Sat, 25 Nov 2000, Edward Murphy wrote:

 Now I ended up having to stop bind on my system as it's causing the
 Bigpond DNS servers to DOS me :-(
 I believe the old version was 8.2.2p5-11 and I've now got 8.2.2p7-1.
This was the subject of a CERT alert.  Yes definitely go to 8.2.2p7.
Any new edition windblows machine (2000, ME, etc) will do this.  Another
great feature from M$ not reading the specs and doing things their own
way...

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]




-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] speaking of HW ...

2000-11-26 Thread tom burkart

On Sat, 25 Nov 2000, Dean Hamstead wrote:

 I dont recommend VIA based boards. My gigabyte-ali works well
 i havd found gigabyte to generally be good in linux. Intel chips
 are usually ok also
Funny, you should say that, I have an AOpen VIA/133 chipset m/b in mine
and have had no problems at all - the easiest upgrade ever.
I tried a Gigabyte m/b a while ago and had no end to my woes... (I won't
be buying more of them for a while).

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] xircom pcmcia

2000-11-26 Thread tom burkart

On Sun, 26 Nov 2000, John Ferlito wrote:

   I've come across a Xirconm 10/100-Upgradeable pc card, sans
snip
 fit. Does anyone have one of these beasts and have any idea what the
 upgradeable part actually means?
I suspect it is a misnomer and just means that if you plug it into a 10M
port it will talk 10M, similarly, ... 100M port ... 100M.

I just bought one of these beasts (Xircom 32bit cardbus ethernet 10/100 +
modem 56 - CBEM56G-100).  The problem I have with it is that it does not
see any DHCP replies (driver problem I guess), yet when I give it a fixed
IP it works fine...

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



RE: [SLUG] VPN

2000-11-09 Thread tom burkart

On Fri, 10 Nov 2000, Daron Barndon wrote:

 at that could cover the distance between the mountains and Sydney? I
 expect I would be over the 44 K mark although with enough height, line
 of site to Sydney would not be a problem.
Line of sight to the mountains is pretty well out of the question.  I have
had a brush with the SWAMP project (Sydney Wollongong Area Microwave
Project) linking major universities with (usually) 32Mbit microwave
installations.  You should have seen the trouble they had to go
through...  Anyway, from the City there are at least two hops to
Penrith.  Ok, one of the hops is a drop as well, but the major hop is via
the prospect tower (for height reasons).

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] web question..

2000-11-08 Thread tom burkart

On Wed, 8 Nov 2000, Michael wrote:

 When I have a web client hit a web page on my server... what information can
 one extract from the browser? I'd like to know where I could find a url that
 explains the variables.. as I would like to get a php3 script to grab out as
 much info from the client and log it. Especially if I could find out what
 url they just can from to get to the page they are at.
Just have a page that does ?PHP phpinfo() ?
It will tell you all the variables and their content.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Toshiba Tecra notebooks and X

2000-11-07 Thread tom burkart

On Wed, 8 Nov 2000, CaT wrote:

 http://www.probo.com/timr/savagemx.html
This makes it work!

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Linux doesn't have bad security...

2000-10-25 Thread tom burkart

On Thu, 26 Oct 2000, Graeme Merrall wrote:

 people have bad security.
 Why does this bother me? If I was an Eisa customer or even an ex-Eisa
 customer with my details sitting on that server waiting for someone to come
 along, I'd be getting on that phone pretty darn quick. I also hope that
 other people will nag them into doing something about it or shame them into
Sadly I have some "customers" like that.
 - I have tried nagging
 - I tried abusing the owner
It hasn't worked (sounds like the good old adage: "It WON'T happen to
us ..."), so I have given up and am just waiting for the inevitable to
happen.  Anyone know what else to do (apart from doing it for free ;-)?

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] IP masq timeouts question

2000-10-24 Thread tom burkart

On Tue, 24 Oct 2000, [iso-8859-1] Alex JuniorBurger wrote:

  Someone mentioned a while back that this could be due
 to IP masq timeout values. The closest thing I found
When you are doing things on the gateway they will not get masqueraded!
Only the ones behind the gateway machine will get masqueraded.  This is
not the problem.
And since the machines behind the gateway work fine I suspect that the
problem is with the gateway machine's browsing setup - possibly DNS,
routing.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Firewalls, X, etc (was: Network Security Fest)

2000-10-23 Thread tom burkart

On Mon, 23 Oct 2000, chesty wrote:

 So far I've looked at TIS firewall toolkit, but its not ideal, out of the 
 box you have to use xhost to allow the firewall to connect to your X terminal, 
 telnet to the firewall, login to the firewall, start the X proxy, telnet to 
 the remote box, login to the remote box, set your display then start your X 
 applications. Its clunky and not very secure (xhost and telnet), which 
 defeats the whole purpose of putting a firewall in.
No, please... ;-)
SSH has X-proxying inbuilt.  It is authenticated and encrypted - very
secure.

 The alternative is a commercial firewall, which some people are pushing for
 anyway. I'm hoping to get something up and running using linux, then let
 them decide if they still want to go with commercial firewall, or stay with 
Thinking of a red box (WatchguardII)?  Well guess what, it is just a linux
box inside (actually dual linux box if my memory serves me correctly).  So
really with a bit of work you can do the same on your PC - just as
good.  But really, the tricky bit is to get the rules in there (and
correct rules at that).  You will find that the example in the ipchains
howto is not really a good example even though it gets you started.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] RE: Damn sendmail.mc and m4

2000-10-19 Thread tom burkart

On Thu, 19 Oct 2000, Jobst Schmalenbach wrote:

  define(`SMARTHOST', esmtp:smarthost.domain)dnl
 Shouldn't that be SMART_HOST?
I got it from the sendmail book.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Sendmail connection problems

2000-10-19 Thread tom burkart

On Thu, 19 Oct 2000, Des Wass wrote:

 Anyone have any idea what could be causeing this?
It looks from the logs like there is either a routing or a firewalling
issue.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Associating filenames

2000-10-18 Thread tom burkart

On Wed, 18 Oct 2000, Jeff Waugh wrote:

  which begs the question, what did they do to bolt metadata onto the
  freebsd core for OSX ??
 Umm... There was a really good article about this going around a while back.
 Fairly interesting, it covered all the hacks they went through to combine
 the two systems.
As far as my reading of it went was that they dropped the feature.

As far as my personal opinion goes: file(1) does a reasonable job anyway.
Who needs file extensions?  I don't like them because windoze gets it wong
too often.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] RE: Damn sendmail.mc and m4

2000-10-18 Thread tom burkart

On Thu, 19 Oct 2000, Doug Stalker wrote:

 I tried to do the same thing and failed - I ended up setting up DNS on
 our firewall and having the the system use that to do the lookups.  
No problem with that.

 Is it possible to set up a fake named that returns the relay hosts IP
 address for every lookup?  Or would that break other applications?
You will break any other app that uses the DNS.

define(`SMARTHOST', esmtp:smarthost.domain)dnl
This should be all you need as sendmail passes it on to the smarthost for
delivery.  (Remember it still needs to look up smarthost.domain in the
DNS).

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



RE: [SLUG] Slow initial telnet.

2000-10-16 Thread tom burkart

On Tue, 17 Oct 2000, George Vieira wrote:

 I removed the entry and it starts up real damn quick.. weird that it MUST
 resolve these addresses. Must find a way to ignore them..
Your real fix is in /etc/nsswitch.conf
Here you set several lines to "files [NOTFOUND=return]" - especially the
hosts (DNS lookup) line...

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



RE: [SLUG] Authentication Question

2000-10-16 Thread tom burkart

On Tue, 17 Oct 2000, George Vieira wrote:

 yellow pages `yppasswd` is one way.. when the user changes their password
 then all servers update the unix password... (not samba password though)..
Hold on, guys, what's wrong with LDAP?

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Oracle through a firewall

2000-10-16 Thread tom burkart

On Tue, 17 Oct 2000, Kevin Saenz wrote:

 Hi has anyone had any joy allowing oracle plus/sql through a firewall?
Do you really want to do this?  Personally, I would have thought the
security risk is too high.

 While on the topic of firewall has anyone been using iptables?
 What are the benefits moving from ipchains to iptables?
There is no iptables for kernels  2.4.  As of 2.4 this is what you need
to use INSTEAD of ipchains.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] mail list acceptable use guidelines

2000-10-12 Thread tom burkart

On Thu, 12 Oct 2000, Dave Fitch wrote:

 just bounce all attachments, whatever their type.
Strip is probably easier than bounce...

 maybe repeat offenders (within a certain timeframe) should be put
 on a list of people who can't post without manual approval?
Sounds like you are volunteering for this job? ;-)  I would have thought
we had better things to do than police a list in this manner.

 Probably (a) a hassle for the list maintainers, and (b) pointless
 anyway with free web email accounts etc.
Quite true.

Something that bugs me every now and then is when people include the
previous message verbatim.  We are all rather intelligent and all that
should be necessary is a mind jogger...

I also have been noticing that replies usually go to the list as a
whole.  I have started doing it as well to try to reduce the number of
followups on the list.  Really, what should happen is that these should
end up in the archives somehow without cluttering the list - does that
sound feasible?

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Beginners Home Network

2000-10-10 Thread tom burkart

On Wed, 11 Oct 2000, Ken Yap wrote:

 It's probably that the 100 Mb NICs can't autonegotiate without a hub to
 talk to. You could try specifying the media in the modprobe line, but
 with hubs so cheap, it's not worth spending much time on a crossover.
I'm running 100Mb Intel NIC's and they will operate at 100MHz FDX on a
crossover cable.  Similarly, when I had one Acer el cheapo card (Via Rhine
chipset) - it would talk at 100MHz with the Intel card...

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Starting samba automagically

2000-10-10 Thread tom burkart

On Wed, 11 Oct 2000, Alister Waller wrote:

 I am trying to start samba up when the server boots.
 I put
 /usr/sbin/smbd -D
 /usr/sbin/nmbd -D
 in /etc/rc.d/init.d/network
 This does not seem to do it though. Users cannot access the share although I
 could as adm
I suspect you have got it in the wrong part of the network startup
script.  I have attached the standard startup script that comes with
several distributions.  Put it in /etc/rc.d/init.d and then run (as root):
chkconfig smb on
(it lives in /sbin if your path is not finding it).
This should fix your problem.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]


#!/bin/sh
#
# chkconfig: 345 91 35
# description: Starts and stops the Samba smbd and nmbd daemons \
#  used to provide SMB network services.

# Source function library.
. /etc/rc.d/init.d/functions

# Source networking configuration.
. /etc/sysconfig/network

# Check that networking is up.
[ ${NETWORKING} = "no" ]  exit 0

# Check that smb.conf exists.
[ -f /etc/smb.conf ] || exit 0

# See how we were called.
case "$1" in
  start)
echo -n "Starting SMB services: "
daemon smbd -D  
daemon nmbd -D 
echo
touch /var/lock/subsys/smb
;;
  stop)
echo -n "Shutting down SMB services: "
killproc smbd
killproc nmbd
rm -f /var/lock/subsys/smb
echo ""
;;
  status)
status smbd
status nmbd
;;
  restart)
echo -n "Restarting SMB services: "
$0 stop
$0 start
echo "done."
;;
  *)
echo "Usage: smb {start|stop|restart|status}"
exit 1
esac




Re: [SLUG] TR-3 tape and Samba Permissions Q's

2000-10-10 Thread tom burkart

On Tue, 10 Oct 2000, Alister Waller wrote:

 I have samba shares set up but when a user creates a directory or file on
 the server from their windows machines the permissions are set as per the
 user so no one else can access them. How do I make the permissions open so
 all can access when a file or directory is created?? or am I missing
you need to use the "force user" and/or "force group" directives for that
share.  I would recommend creating a "dummy" user that is disabled and
using these uid/gid values in the "force *" directives.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Queuing under Linux

2000-10-09 Thread tom burkart

On Mon, 9 Oct 2000, Peter Rundle wrote:

 I want to create a queue for an SMS messaging system. Can anyone point
Some of the carriers will actually accept email messages and resend them
as SMS.  Hutchinson is one of them - from memory.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Red Hat 7.0 network install setup

2000-10-09 Thread tom burkart

On Mon, 9 Oct 2000, Robert Maldon wrote:

  rpm -qp --filesbypkg anaconda-runtime-7.0.1-6.i386.rpm|grep genhdlist
  anaconda-runtime  /usr/lib/anaconda-runtime/genhdlist
 You don't need to install the RH 7.0 version of anaconda in order to run
 the 7.0 version of genhdlist. You can find a useable version of genhdlist
 in the distributions misc/src/anaconda/utils dir (at least it's there in the
 6.X series). This version is used by a script detailed in the above FAQ.
Anaconda IS the default installer for RH 7.0.  It looks really pretty even
if the networking part doesn't quite work (I had a bleeding edge CD set
and the network setup does need some manual editing - or GUI if you want 
to go that way).

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



RE: [SLUG] remote printing acorss Internet, possible ??

2000-10-09 Thread tom burkart

On Mon, 9 Oct 2000, Dave Kempe wrote:

 Doesn't lpr or lprng work over the internet?
 Can't the clients just insert a hostname and then print to that, as long as
 the permissions are ok then it should work right?
   to make it print to a printer across the Internet and behind a
  firewall ??
Remember, you are trying to print over the internet BEHIND a firewall.  If
you desire to get rid of the firewall (effectively) and deal with the NAT
problem then yes it will work.
But seriously, you want that firewall there for a good reason:  To protect
your internal network - that is why it gets more complex. 

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Re: Talks for SLUG meetings (including this month's)

2000-10-09 Thread tom burkart

On Tue, 10 Oct 2000, Aaron Binns wrote:

 1) Firewalls
 2) VPN
 3) SSH
 4) common partitioning questions
 5) Samba
Sounds like you guys have topics for years to come...  :-)
A lot of these can be rather involved - you would be up for lots of 30 min
talks!
I can answer some of those questions - sadly the friday night timeslot
doesn't suit me...

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Distro on a CD (off the shelf, or off the burner)

2000-10-05 Thread tom burkart

On Fri, 6 Oct 2000, Jamie Honan wrote:

 In this case, uou're probably looking at a hard drive or NFS.
Guys, NFS on a gateway - Please spare me!

Please let me tell you about a site that will not allow telnet into the
trusted zone from the dmz but yet allows nfs from the trusted zone to the
dmz - Do I really have to continue?

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug



Re: [SLUG] Oddball ADSL Question

2000-10-03 Thread tom burkart

On Wed, 4 Oct 2000, Jason Rennie wrote:

 I have a hub, and i want to connect 2 machines to the hub, and plug the
 adsl modem into the hub.
Usually, the best way to do this (similarly to cable) is to have one
machine as the proxy/firewall, etc.  The other machine(s) to sit on the
private network behind your proxy machine.

 Would i then be able to get ADSL to dial out form one of the machines at a
 time ? That way i can try one, if it doens't work, bring up the working
 link. Or am i doomed ?
Should be theoretically possible, given that you need to have the standby
machine off or at least the ADSL side the interface down.

tom.
Consultant

AUSSECPhone: 61 4 1768 2202
339 Blaxland Rd., Ryde NSW 2112
Email: [EMAIL PROTECTED]



--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug