[BlueOnyx:13979] Re: ban or jail messages

2013-11-03 Thread Greg Kuhnert
DFIX2 has a feature where it looks at multiple forged email messages from a single ip address, and blocks them for an hour if detected... But as suggested here - there is a risk of false positives. Impact with the dfix2 solution: For your average mail sender, it will let the first couple of mes

[BlueOnyx:13978] Re: ban or jail messages

2013-11-03 Thread webmaster
I have used procmail to filter on It caught many many many many spams however.. it also picked off some legit mail I had to disable it. Too many customers were complaining I would love to implement again because it worked great! >> -Original Message- >> From: blueonyx-boun..

[BlueOnyx:13977] Re: Spam Attack Vector

2013-11-03 Thread Michael Stauber
Hi Rodrigo, > Add apache to the file /etc/cron.deny so apache wont be allowed to use cron. > Even if an attacker is able to obtain a valid user from your system That is actually a pretty good suggestion. I think we should take this a bit further, though. If your site in question had used suPHP,

[BlueOnyx:13976] Spam Attack Vector

2013-11-03 Thread Rodrigo Ordonez Licona
Hope the people of this List Wll find this information useful, We had a new spam attack this morning, our sendmail was flooded with emails, marked with the origin of apache, However, there was no php script related at the time of the Spam deliveries. The culprit was a cron job executed from /tmp

[BlueOnyx:13975] Re: ban or jail messages

2013-11-03 Thread wcstaff
> -Original Message- > From: blueonyx-boun...@mail.blueonyx.it [mailto:blueonyx-boun...@mail.blueonyx.it] On > Behalf Of wcst...@webcoast.com > Sent: Sunday, November 03, 2013 7:04 PM > To: 'BlueOnyx General Mailing List' > Subject: [BlueOnyx:13974] ban or jail messages > > I know this is

[BlueOnyx:13974] ban or jail messages

2013-11-03 Thread wcstaff
I know this is an arguable scenario, but I am sick of the spam getting through that is . It seems like spammers are figuring ways to forge and get around blocks. I have recently found IP addresses that I force blocked, skating through on a . I read where some settings can be added to fail2ban that

[BlueOnyx:13973] Re: New Server

2013-11-03 Thread Michael Stauber
Hi Gustavo, > No error. Works fine. Strange. I checked the error logs on www.blueonyx.it and I see no problems on the server. So it appears as if the problem is with the GUI part that pulls the RSS feed, or it is a connectivity, network or routing issue. I can imagine that 5106R behaves a bit di

[BlueOnyx:13972] Re: New Server

2013-11-03 Thread Jim Matysek
Hi Gustavo, I used to get that fairly often on our old 5106R installations. I just ignored it because everything else was working fine. I haven't seen it yet on our new 5108R's, but they've only been in for a little over a week. -jim > Hi Michael, > > just checking if anyone has seen this beha

[BlueOnyx:13971] Re: New Server

2013-11-03 Thread Gustavo Silva
On 03/11/2013 17:58, Michael Stauber wrote: > Hi Gustavo, > >> Thank you. Did that earlier just in case, and yes, same DNS >> setting we use on other servers with no problems. > >From the command line (SSH) try this: > > lynx http://www.blueonyx.it > > That should load the BlueOnyx website in a bro

[BlueOnyx:13970] Re: CMUImport issue

2013-11-03 Thread Michael Stauber
Hi Gustavo, > Getting this strange issue while importing from old bluequartz to 5108 > (both with 2.90 CMU) > Error displays on some users with large mboxes (4GB+) > > Creating user: c.santos > restoring archive for c.santos > ScanIn: Can't use string (201 OKsh: -c: line 1: unexpected EOF while

[BlueOnyx:13969] Re: New Server

2013-11-03 Thread Michael Stauber
Hi Gustavo, > Thank you. Did that earlier just in case, and yes, same DNS > setting we use on other servers with no problems. >From the command line (SSH) try this: lynx http://www.blueonyx.it That should load the BlueOnyx website in a browser. See what error message (if any) you get there. Tha

[BlueOnyx:13968] CMUImport issue

2013-11-03 Thread Gustavo Silva
Hello! Getting this strange issue while importing from old bluequartz to 5108 (both with 2.90 CMU) Error displays on some users with large mboxes (4GB+) Creating user: c.santos restoring archive for c.santos ScanIn: Can't use string (201 OKsh: -c: line 1: unexpected EOF while looking for matchi

[BlueOnyx:13967] Re: New Server

2013-11-03 Thread Gustavo Silva
On 03/11/2013 13:28, Gerald Waugh wrote: > On 11/03/2013 05:28 AM, Gustavo Silva wrote: >> Hi Michael, >> >> just checking if anyone has seen this behaviour before. >> I've just set up a new SL 5108R and the BlueOnyx Page displays the >> following even though the machine can actually resolve the d

[BlueOnyx:13966] Re: New Server

2013-11-03 Thread Gerald Waugh
On 11/03/2013 05:28 AM, Gustavo Silva wrote: > Hi Michael, > > just checking if anyone has seen this behaviour before. > I've just set up a new SL 5108R and the BlueOnyx Page displays the > following even though the machine can actually resolve the domain perfectly. > > "This page would usually di

[BlueOnyx:13965] New Server

2013-11-03 Thread Gustavo Silva
Hi Michael, just checking if anyone has seen this behaviour before. I've just set up a new SL 5108R and the BlueOnyx Page displays the following even though the machine can actually resolve the domain perfectly. "This page would usually display the newsfeed about updates and other important ano