Re: SpamAssassin (Was Re: SOME ITEMS THAT YOU MAY BE INTERESTED IN OR BE ABLE TO ADVISE ME ON)

2002-01-24 Thread Luca Filipozzi
On Fri, Jan 25, 2002 at 08:31:24AM +0100, Oliver M . Bolzer wrote: > I've heard Razor is (configurabule) part of SpamAssassin. I'd recommend > disabling that check because somebody is tagging about 1/3 of Bugtraq mail > in Razor thus sending it to the Spam folder. Or you can add whitelist_from

Re: SpamAssassin (Was Re: SOME ITEMS THAT YOU MAY BE INTERESTED IN OR BE ABLE TO ADVISE ME ON)

2002-01-24 Thread Oliver M . Bolzer
On Thu, Jan 24, 2002 at 06:03:54PM -0600, Bryan Andersen <[EMAIL PROTECTED]> wrote... > My ISP uses SpamAssassin and it works quite nicely. Not > perfectly, but well enough that I like it. It's filtered > out about 8M bytes of spam in the past 16 days. SpamAssassin > puts some new headers

RE:SpamAssassin (Was Re: SOME ITEMS THAT YOU MAY BE INTERESTED IN OR BE ABLE TO ADVISE ME ON)

2002-01-24 Thread Jeremy L. Gaddis
Heh, what's funny is that SpamAssassin tagged this message you sent as spam and sent it to my spam folder. j. -- Jeremy L. Gaddis <[EMAIL PROTECTED]> -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Bryan Andersen Sent: Thursday, January 24, 2002 7:04 PM

SpamAssassin (Was Re: SOME ITEMS THAT YOU MAY BE INTERESTED IN OR BE ABLE TO ADVISE ME ON)

2002-01-24 Thread Bryan Andersen
Sebastian Rittau wrote: > > On Thu, Jan 24, 2002 at 09:34:35AM +0100, Robert van der Meulen wrote: > > Quoting James ([EMAIL PROTECTED]): > > > > We could start by blocking @aol.com =) > > > Or by all running good anti-spam measures and not replying to spam; I didn't > > even know it was there u

RE:SpamAssassin (Was Re: SOME ITEMS THAT YOU MAY BE INTERESTED IN OR BE ABLE TO ADVISE ME ON)

2002-01-24 Thread Jeremy L. Gaddis
Heh, what's funny is that SpamAssassin tagged this message you sent as spam and sent it to my spam folder. j. -- Jeremy L. Gaddis <[EMAIL PROTECTED]> -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bryan Andersen Sent: Thursday, January 24, 2002 7:0

SpamAssassin (Was Re: SOME ITEMS THAT YOU MAY BE INTERESTED IN OR BE ABLE TO ADVISE ME ON)

2002-01-24 Thread Bryan Andersen
Sebastian Rittau wrote: > > On Thu, Jan 24, 2002 at 09:34:35AM +0100, Robert van der Meulen wrote: > > Quoting James ([EMAIL PROTECTED]): > > > > We could start by blocking @aol.com =) > > > Or by all running good anti-spam measures and not replying to spam; I didn't > > even know it was there

Re: SOME ITEMS THAT YOU MAY BE INTERESTED IN OR BE ABLE TO ADVISE ME ON

2002-01-24 Thread Sebastian Rittau
On Thu, Jan 24, 2002 at 09:34:35AM +0100, Robert van der Meulen wrote: > Quoting James ([EMAIL PROTECTED]): > > We could start by blocking @aol.com =) > Or by all running good anti-spam measures and not replying to spam; I didn't > even know it was there until people started replying to it, and i

Re: how to create MD5 passwords

2002-01-24 Thread Philippe Troin
Michael Wood <[EMAIL PROTECTED]> writes: > On Thu, Jan 24, 2002 at 08:56:56AM +0100, Rainer Sigl wrote: > > Hi everyone, > > please can me tell somebody how to make MD5 passwords in order > > to supply it to ftppasswd file? > > You just need to call the standard crypt() function with the > apropr

Re: /bin/passwd as shell

2002-01-24 Thread Moses Moore
martin f krafft wrote: > that was me, and no, noone has mentioned any bad aspects yet, other than your > users having to type the old password twice. however, it's not the > solution i amlooking for, so i am implementing a highly secure way to do it > over and > SSL/TLS-encrypted webform with emph

Re: SOME ITEMS THAT YOU MAY BE INTERESTED IN OR BE ABLE TO ADVISE ME ON

2002-01-24 Thread Sebastian Rittau
On Thu, Jan 24, 2002 at 09:34:35AM +0100, Robert van der Meulen wrote: > Quoting James ([EMAIL PROTECTED]): > > We could start by blocking @aol.com =) > Or by all running good anti-spam measures and not replying to spam; I didn't > even know it was there until people started replying to it, and

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
And if one do: procedure example is type C_String_Type is array (1..10) of Character; a : C_String_type; begin a := ('1','2','3','4','5','6','7','8','9','A','B','C','D'); end example; then when compiling: % gnatmake example.adb gnatgcc -c example.adb example.

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
Alvin Oga <[EMAIL PROTECTED]> wrote on 24/01/2002 (11:13) : > > hi ya ralf > > i would have thought that gcc would barf on b[20]='X' > and similarly for theother variable assignments since its not prev > allocated/defined.. and yet explicitly assigned (incorrectly??)... Why there are no range te

Re: [d-security] Re: /bin/passwd as shell

2002-01-24 Thread Christian Hammers
On Thu, Jan 24, 2002 at 07:05:54PM +0100, Ralf Dreibrodt wrote: > and then no user, who has a valid shell has to enter the old password > from user x, when he wants to change the password of user x. > perhaps even if x=root ;-) You have to enter it once for the ssh daemon anyways. He just wanted to

Re: how to create MD5 passwords

2002-01-24 Thread Philippe Troin
Michael Wood <[EMAIL PROTECTED]> writes: > On Thu, Jan 24, 2002 at 08:56:56AM +0100, Rainer Sigl wrote: > > Hi everyone, > > please can me tell somebody how to make MD5 passwords in order > > to supply it to ftppasswd file? > > You just need to call the standard crypt() function with the > aprop

Re: /bin/passwd as shell

2002-01-24 Thread Moses Moore
martin f krafft wrote: > that was me, and no, noone has mentioned any bad aspects yet, other than your > users having to type the old password twice. however, it's not the > solution i amlooking for, so i am implementing a highly secure way to do it over and > SSL/TLS-encrypted webform with emphas

Re: /bin/passwd as shell

2002-01-24 Thread Ralf Dreibrodt
Hi, David N Moore wrote: > > i'm a new poster here, but one thing that strikes me is that the > source to passwd should be hanging around somewhere. It wouldn't be > incredibly difficult to make a custom version which does not ask for > the original password, right? Then you could set it to be

Re: /bin/passwd as shell

2002-01-24 Thread David N Moore
On Thu, Jan 24, 2002 at 11:17:59AM -0600, Rob VanFleet wrote: > On Thu, Jan 24, 2002 at 07:23:35AM +0100, martin f krafft wrote: > > > > > > also sprach Rob VanFleet > > > On this list (I beleive) I saw someone mention the use of /bin/passwd > > > as a shell for mail-only users so they can easily

Re: /bin/passwd as shell

2002-01-24 Thread Rob VanFleet
On Thu, Jan 24, 2002 at 07:23:35AM +0100, martin f krafft wrote: > > > also sprach Rob VanFleet > > On this list (I beleive) I saw someone mention the use of /bin/passwd > > as a shell for mail-only users so they can easily change their password > > without having to ask someone. Is this a secur

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
And if one do: procedure example is type C_String_Type is array (1..10) of Character; a : C_String_type; begin a := ('1','2','3','4','5','6','7','8','9','A','B','C','D'); end example; then when compiling: % gnatmake example.adb gnatgcc -c example.adb example

Re: protection against buffer overflows

2002-01-24 Thread Preben Randhol
Alvin Oga <[EMAIL PROTECTED]> wrote on 24/01/2002 (11:13) : > > hi ya ralf > > i would have thought that gcc would barf on b[20]='X' > and similarly for theother variable assignments since its not prev > allocated/defined.. and yet explicitly assigned (incorrectly??)... Why there are no range t

Re: [d-security] Re: /bin/passwd as shell

2002-01-24 Thread Christian Hammers
On Thu, Jan 24, 2002 at 07:05:54PM +0100, Ralf Dreibrodt wrote: > and then no user, who has a valid shell has to enter the old password > from user x, when he wants to change the password of user x. > perhaps even if x=root ;-) You have to enter it once for the ssh daemon anyways. He just wanted t

Re: /bin/passwd as shell

2002-01-24 Thread Ralf Dreibrodt
Hi, David N Moore wrote: > > i'm a new poster here, but one thing that strikes me is that the > source to passwd should be hanging around somewhere. It wouldn't be > incredibly difficult to make a custom version which does not ask for > the original password, right? Then you could set it to be

Re: /bin/passwd as shell

2002-01-24 Thread David N Moore
On Thu, Jan 24, 2002 at 11:17:59AM -0600, Rob VanFleet wrote: > On Thu, Jan 24, 2002 at 07:23:35AM +0100, martin f krafft wrote: > > > > > > also sprach Rob VanFleet > > > On this list (I beleive) I saw someone mention the use of /bin/passwd > > > as a shell for mail-only users so they can easil

Re: Re[2]: protection against buffer overflows

2002-01-24 Thread Alexander Clouter
On Jan 23, [EMAIL PROTECTED] wrote: > > it indeed sounds VERY interesting (not only to me) :-) > although I never dealt with special kernel modifications. > But I'll give it a go..can anyone recommend any other > kernel security patch sites? ..would be great! > the only thing you need to bear in

Re: /bin/passwd as shell

2002-01-24 Thread Rob VanFleet
On Thu, Jan 24, 2002 at 07:23:35AM +0100, martin f krafft wrote: > > > also sprach Rob VanFleet > > On this list (I beleive) I saw someone mention the use of /bin/passwd > > as a shell for mail-only users so they can easily change their password > > without having to ask someone. Is this a secu

Spam Apology

2002-01-24 Thread David Ehle
To all: Sorry about including the list in reply. David.

Re: Re[2]: protection against buffer overflows

2002-01-24 Thread Alexander Clouter
On Jan 23, [EMAIL PROTECTED] wrote: > > it indeed sounds VERY interesting (not only to me) :-) > although I never dealt with special kernel modifications. > But I'll give it a go..can anyone recommend any other > kernel security patch sites? ..would be great! > the only thing you need to bear in

Spam Apology

2002-01-24 Thread David Ehle
To all: Sorry about including the list in reply. David. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: protection against buffer overflows

2002-01-24 Thread Alan James
On Wed, 23 Jan 2002 18:03:26 -0500 (EST), Emmanuel Valliet <[EMAIL PROTECTED]> wrote: >There was a good article of Aleph One on buffer overflows called >'Smashing the stack for fun and profit'. Phrack 49. >Search the web and enjoy :) I found this one to be quite informative too: http://www.cultd

Re: SOME ITEMS THAT YOU MAY BE INTERESTED IN OR BE ABLE TO ADVISE ME ON

2002-01-24 Thread Robert van der Meulen
Hi, Quoting James ([EMAIL PROTECTED]): > We could start by blocking @aol.com =) Or by all running good anti-spam measures and not replying to spam; I didn't even know it was there until people started replying to it, and i had to look up the original posting in my spam folder.. Greets, Ro

Re: how to create MD5 passwords

2002-01-24 Thread Michael Wood
On Thu, Jan 24, 2002 at 08:56:56AM +0100, Rainer Sigl wrote: > Hi everyone, > please can me tell somebody how to make MD5 passwords in order > to supply it to ftppasswd file? You just need to call the standard crypt() function with the apropriate arguments. You can use perl or python or C or what

Re: protection against buffer overflows

2002-01-24 Thread Alan James
On Wed, 23 Jan 2002 18:03:26 -0500 (EST), Emmanuel Valliet <[EMAIL PROTECTED]> wrote: >There was a good article of Aleph One on buffer overflows called >'Smashing the stack for fun and profit'. Phrack 49. >Search the web and enjoy :) I found this one to be quite informative too: http://www.cult

how to create MD5 passwords

2002-01-24 Thread Rainer Sigl
Hi everyone, please can me tell somebody how to make MD5 passwords in order to supply it to ftppasswd file? Thanks Rainer Sigl

Re: /bin/passwd as shell

2002-01-24 Thread martin f krafft
also sprach Rob VanFleet > On this list (I beleive) I saw someone mention the use of /bin/passwd > as a shell for mail-only users so they can easily change their password > without having to ask someone. Is this a secure option, or am I > missing some glaring problems? If so, what are some othe

Re: SOME ITEMS THAT YOU MAY BE INTERESTED IN OR BE ABLE TO ADVISE ME ON

2002-01-24 Thread Robert van der Meulen
Hi, Quoting James ([EMAIL PROTECTED]): > We could start by blocking @aol.com =) Or by all running good anti-spam measures and not replying to spam; I didn't even know it was there until people started replying to it, and i had to look up the original posting in my spam folder.. Greets, R

Re: how to create MD5 passwords

2002-01-24 Thread Michael Wood
On Thu, Jan 24, 2002 at 08:56:56AM +0100, Rainer Sigl wrote: > Hi everyone, > please can me tell somebody how to make MD5 passwords in order > to supply it to ftppasswd file? You just need to call the standard crypt() function with the apropriate arguments. You can use perl or python or C or wha