Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Patrick Hsieh
Hello Ted, Your mail is very informative to me. I wonder how to define cmd to run automatically in authorized_hosts? I thought there's nothing but pub keys in authorized_hosts file. And, do I need ssh-agent in this case? Do I need to leave passphrase blank? Thank you for your patience and

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Jeff Waugh
quote who=Patrick Hsieh OK. My problem is, if I use rsync+ssh with blank passphrase among servers to automate rsync+ssh backup procedure without password prompt, then the cracker will not need to send any password as well as passphrase when ssh login onto another server, right? No, password

Re: naver-mailer

2002-01-02 Thread Robert Waldner
On Mon, 31 Dec 2001 20:53:03 +0100, Russell Coker writes: On Mon, 31 Dec 2001 15:28, Russell Coker wrote: Every time I post here I get a response that looks like a bounce in a strange language from naver-mailer. Here's the headers: Here's my solution to the naver-mailer problem: ipchains

Re: Best way to duplicate HDs

2002-01-02 Thread I. Forbes
Hello All I am not sure that I understand what the original poster wishes to achieve, nor have I followed the lengthy discussions that ensued. But, a thread with the above subject line would not be complete without a mention of mirrordir. Someone wrote: Sigh... and I was hoping for a

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread cfm
On Wed, Jan 02, 2002 at 03:35:43PM +0800, Patrick Hsieh wrote: OK. My problem is, if I use rsync+ssh with blank passphrase among servers to automate rsync+ssh backup procedure without password prompt, then the cracker will not need to send any password as well as passphrase when ssh login

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Brian Sniffen
ssh-agent does help here. Have the cron job which is doing the backup look to see if there's an ssh agent running as its user (presumably 'backup', maybe root) and if not send mail to somebody's pager, complaining about the missing agent. If the agent is running, the cron job can reconnect to

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Ted Deppner
On Wed, Jan 02, 2002 at 09:19:11AM -0500, [EMAIL PROTECTED] wrote: Automation with keys stored on machines is better than doing it manually and forgetting to back up. :-) Agreed. Like excercise, the kind you do is better than the kind you don't. It **does** provide a path by which someone

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread cfm
On Wed, Jan 02, 2002 at 10:17:38AM -0800, Ted Deppner wrote: The [modules] in rsyncd.conf provide a nice way to package what you want to back up. You can also specify what ip addresses connect to rsyncd. So in theory only the backup machine can connect to the rsyncd daemons; we've set

long email names

2002-01-02 Thread Chris Zubrzycki
I have a customer who wants to host his own email server, and he wants to have long email addresses, like firstname.lastname@domain.com , and map it to a local name that is less than 8 chars. What is the best email server to do this kind of mapping? -chris zubrzycki

Re: Best way to duplicate HDs

2002-01-02 Thread Nick Jennings
On Tue, Jan 01, 2002 at 02:28:28PM +0800, Jason Lim wrote: Hi all, What do you think would be the best way to duplicate a HD to another (similar sized) HD? I've been using tar on my system. Works excellent. no downtime, and all permissions are maintained. -- Nick Jennings -- To

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Ted Deppner
[cc: trimed to something a little more sane] On Wed, Jan 02, 2002 at 04:21:33PM -0500, [EMAIL PROTECTED] wrote: We're pulling **from** a read-only rsyncd. It has to run as root because we require the right archive, permissions, etc I'm confused; is that much different from running an

RE: long email names

2002-01-02 Thread Jeremy L. Gaddis
sendmail! :) j. -Original Message- From: Chris Zubrzycki [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 02, 2002 4:36 PM To: [EMAIL PROTECTED] Subject: long email names I have a customer who wants to host his own email server, and he wants to have long email addresses, like

Re: long email names

2002-01-02 Thread Mark Janssen
Subject: long email names I have a customer who wants to host his own email server, and he wants to have long email addresses, like firstname.lastname@domain.com , and map it to a local name that is less than 8 chars. What is the best email server to do this kind of mapping? -chris

Re: long email names

2002-01-02 Thread Jeff Waugh
quote who=Chris Zubrzycki I have a customer who wants to host his own email server, and he wants to have long email addresses, like firstname.lastname@domain.com , and map it to a local name that is less than 8 chars. This is a sensible request... What is the best email server to do this

Re: Securing bind..

2002-01-02 Thread Craig Sanders
On Wed, Jan 02, 2002 at 03:23:01PM +0200, George Karaolides wrote: On Tue, 1 Jan 2002, Craig Sanders wrote: someday soon, someone's going to take the good ideas from djbdns, combine it with the good stuff from bind (including backwards compatibility with bind config zonefile formats), add

Re: Securing bind..

2002-01-02 Thread Craig Sanders
On Mon, Dec 31, 2001 at 12:52:23AM -0500, P Prince wrote: there are two major problems with all of bernstein's software. the first is that it requires you to throw away your existing configuration...no big deal for a caching only name-server or if you only have one or two domains to

Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Patrick Hsieh
Hello, I am sorry I could be kind of off-topic. But I want to know how to cross-site rsync without authentication, say ssh auth.,? I've read some doc. using ssh-keygen to generate key pairs, appending the public keys to ~/.ssh/authorized_hosts on another host to prevent ssh authentication

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Jeff Waugh
quote who=Patrick Hsieh I am sorry I could be kind of off-topic. But I want to know how to cross-site rsync without authentication, say ssh auth.,? That's the best way. I've read some doc. using ssh-keygen to generate key pairs, appending the public keys to ~/.ssh/authorized_hosts on

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Patrick Hsieh
OK. My problem is, if I use rsync+ssh with blank passphrase among servers to automate rsync+ssh backup procedure without password prompt, then the cracker will not need to send any password as well as passphrase when ssh login onto another server, right? Is there a good way to automate rsync+ssh

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Ted Deppner
On Wed, Jan 02, 2002 at 03:15:20PM +0800, Patrick Hsieh wrote: I've read some doc. using ssh-keygen to generate key pairs, appending the public keys to ~/.ssh/authorized_hosts on another host to prevent ssh authentication prompt. Is it very risky? Chances are a cracker could compromise one

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Patrick Hsieh
Hello Ted, Your mail is very informative to me. I wonder how to define cmd to run automatically in authorized_hosts? I thought there's nothing but pub keys in authorized_hosts file. And, do I need ssh-agent in this case? Do I need to leave passphrase blank? Thank you for your patience and

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Jeff Waugh
quote who=Patrick Hsieh OK. My problem is, if I use rsync+ssh with blank passphrase among servers to automate rsync+ssh backup procedure without password prompt, then the cracker will not need to send any password as well as passphrase when ssh login onto another server, right? No, password

Re: naver-mailer

2002-01-02 Thread Robert Waldner
On Mon, 31 Dec 2001 20:53:03 +0100, Russell Coker writes: On Mon, 31 Dec 2001 15:28, Russell Coker wrote: Every time I post here I get a response that looks like a bounce in a strange language from naver-mailer. Here's the headers: Here's my solution to the naver-mailer problem: ipchains

Re: Best way to duplicate HDs

2002-01-02 Thread I. Forbes
Hello All I am not sure that I understand what the original poster wishes to achieve, nor have I followed the lengthy discussions that ensued. But, a thread with the above subject line would not be complete without a mention of mirrordir. Someone wrote: Sigh... and I was hoping for a

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread cfm
On Wed, Jan 02, 2002 at 03:35:43PM +0800, Patrick Hsieh wrote: OK. My problem is, if I use rsync+ssh with blank passphrase among servers to automate rsync+ssh backup procedure without password prompt, then the cracker will not need to send any password as well as passphrase when ssh login onto

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Brian Sniffen
ssh-agent does help here. Have the cron job which is doing the backup look to see if there's an ssh agent running as its user (presumably 'backup', maybe root) and if not send mail to somebody's pager, complaining about the missing agent. If the agent is running, the cron job can reconnect to

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Ted Deppner
On Wed, Jan 02, 2002 at 09:19:11AM -0500, [EMAIL PROTECTED] wrote: Automation with keys stored on machines is better than doing it manually and forgetting to back up. :-) Agreed. Like excercise, the kind you do is better than the kind you don't. It **does** provide a path by which someone

long email names

2002-01-02 Thread Chris Zubrzycki
I have a customer who wants to host his own email server, and he wants to have long email addresses, like firstname.lastname@domain.com , and map it to a local name that is less than 8 chars. What is the best email server to do this kind of mapping? -chris zubrzycki

Re: Best way to duplicate HDs

2002-01-02 Thread Nick Jennings
On Tue, Jan 01, 2002 at 02:28:28PM +0800, Jason Lim wrote: Hi all, What do you think would be the best way to duplicate a HD to another (similar sized) HD? I've been using tar on my system. Works excellent. no downtime, and all permissions are maintained. -- Nick Jennings

Re: Best way to duplicate HDs--talk more about rsync+ssh system

2002-01-02 Thread Ted Deppner
[cc: trimed to something a little more sane] On Wed, Jan 02, 2002 at 04:21:33PM -0500, [EMAIL PROTECTED] wrote: We're pulling **from** a read-only rsyncd. It has to run as root because we require the right archive, permissions, etc I'm confused; is that much different from running an

RE: long email names

2002-01-02 Thread Jeremy L. Gaddis
sendmail! :) j. -Original Message- From: Chris Zubrzycki [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 02, 2002 4:36 PM To: debian-isp@lists.debian.org Subject: long email names I have a customer who wants to host his own email server, and he wants to have long email addresses,

Re: long email names

2002-01-02 Thread Mark Janssen
Subject: long email names I have a customer who wants to host his own email server, and he wants to have long email addresses, like firstname.lastname@domain.com , and map it to a local name that is less than 8 chars. What is the best email server to do this kind of mapping? -chris

Re: long email names

2002-01-02 Thread Jeff Waugh
quote who=Chris Zubrzycki I have a customer who wants to host his own email server, and he wants to have long email addresses, like firstname.lastname@domain.com , and map it to a local name that is less than 8 chars. This is a sensible request... What is the best email server to do this

Re: Securing bind..

2002-01-02 Thread Craig Sanders
On Wed, Jan 02, 2002 at 03:23:01PM +0200, George Karaolides wrote: On Tue, 1 Jan 2002, Craig Sanders wrote: someday soon, someone's going to take the good ideas from djbdns, combine it with the good stuff from bind (including backwards compatibility with bind config zonefile formats), add

Re: Securing bind..

2002-01-02 Thread Craig Sanders
On Mon, Dec 31, 2001 at 12:52:23AM -0500, P Prince wrote: there are two major problems with all of bernstein's software. the first is that it requires you to throw away your existing configuration...no big deal for a caching only name-server or if you only have one or two domains to