Re: [expert] MS crud

2003-03-27 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark Weaver wrote on Thu, Mar 27, 2003 at 09:07:24AM -0500 : Just like I posted at the beginning of this thread, lo these many weeks ago :-) http://www.monkeynoodle.org/lrp/deworming.html It's been kind of entertaining watching Dave and Mark go

Re: [expert] MS crud

2003-03-27 Thread Mark Weaver
Jack Coates wrote: On Wed, 2003-03-26 at 21:01, James Sparenberg wrote: On Wed, 2003-03-26 at 12:28, Mark Weaver wrote: Dave Laird wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good morning, Pierre... On Saturday 15 March 2003 06:19 am, Pierre Fortin wrote: I may have a look at the

Re: [expert] MS crud

2003-03-27 Thread Mark Weaver
Dave Laird wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good evening, Jack...everyone... On Wednesday 26 March 2003 09:28 pm, Jack Coates wrote: It's been kind of entertaining watching Dave and Mark go off in search of the most difficult way to do it while ignoring that URL until they

Re: [expert] MS crud

2003-03-26 Thread James Sparenberg
On Wed, 2003-03-26 at 12:28, Mark Weaver wrote: Dave Laird wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good morning, Pierre... On Saturday 15 March 2003 06:19 am, Pierre Fortin wrote: I may have a look at the code; but rather than strings, I would think quick-exit

Re: [expert] MS crud

2003-03-26 Thread Jack Coates
On Wed, 2003-03-26 at 21:01, James Sparenberg wrote: On Wed, 2003-03-26 at 12:28, Mark Weaver wrote: Dave Laird wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good morning, Pierre... On Saturday 15 March 2003 06:19 am, Pierre Fortin wrote: I may have a look

Re: [expert] MS crud

2003-03-26 Thread James Sparenberg
On Wed, 2003-03-26 at 21:28, Jack Coates wrote: On Wed, 2003-03-26 at 21:01, James Sparenberg wrote: On Wed, 2003-03-26 at 12:28, Mark Weaver wrote: Dave Laird wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good morning, Pierre... On Saturday 15 March 2003

Re: [expert] MS crud

2003-03-26 Thread Dave Laird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good evening, Jack...everyone... On Wednesday 26 March 2003 09:28 pm, Jack Coates wrote: It's been kind of entertaining watching Dave and Mark go off in search of the most difficult way to do it while ignoring that URL until they finally snipped

Re: [expert] MS crud

2003-03-15 Thread Pierre Fortin
On Fri, 14 Mar 2003 18:42:57 -0800 Dave Laird [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good evening, Pierre... On Friday 14 March 2003 06:04 pm, Pierre Fortin wrote: Got a pointer to the strings' stuff...? I'm running 8.2 on my main server (9.0

Re: [expert] MS crud

2003-03-15 Thread Joerg Mertin
Hi there, actually - regarding spams and System attacks - it's not really the fact that the people are having open systems attacking etc. that is going on my nerves - rather the fact that I can not really block out spam berfore it get's delivered. How would you block spam coming through a

Re: [expert] MS crud

2003-03-15 Thread Dave Laird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good morning, Joerg... On Saturday 15 March 2003 04:59 am, Joerg Mertin wrote: Since I use spamassassin and I'm having my own blacklist (domains/IP's), the spam attempts have gone down. But if you check http://www.solsys.org/system.php under

Re: [expert] MS crud

2003-03-15 Thread Dave Laird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good morning, Pierre... On Saturday 15 March 2003 06:19 am, Pierre Fortin wrote: I may have a look at the code; but rather than strings, I would think quick-exit protocol-diving would be a better approach... but that's just me... No, you're

Re: [expert] MS crud

2003-03-15 Thread Luca Olivetti
Dave Laird wrote: FEATURE(dnsbl, blackholes.mail-abuse.org', Rejected - see http://www.mail-abuse.org/rbl/')dnl FEATURE(dnsbl, relays.osirusoft.com', Rejected -- see http://www.osirusoft.com')dnl FEATURE(dnsbl, dialups.mail-abuse.org', Dialup - see http://www.mail-abuse.org/dul/')dnl

Re: [expert] MS crud

2003-03-15 Thread James Sparenberg
On Sat, 2003-03-15 at 07:14, Dave Laird wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good morning, Joerg... On Saturday 15 March 2003 04:59 am, Joerg Mertin wrote: Since I use spamassassin and I'm having my own blacklist (domains/IP's), the spam attempts have gone down. But

Re: [expert] MS crud

2003-03-14 Thread civileme
On Thursday 13 March 2003 01:57 pm, Jack Coates wrote: http://www.monkeynoodle.org/lrp/deworming.html On Sun, 2003-03-09 at 05:01, Gary Hodder wrote: Hi all, any way to stop getting over run with this crud. The start of each line has been removed to protect the guilty. Thanks Gary.

Re: [expert] MS crud

2003-03-14 Thread Pierre Fortin
On Fri, 14 Mar 2003 11:40:25 -0900 civileme [EMAIL PROTECTED] wrote: Pierre Fortin has some dandy answers, concerned with automnated email to sysadmins followed by action to keep them from bothering you or others. I think you will find them at his site. http://pfortin.com/Linux/

Re: [expert] MS crud

2003-03-14 Thread Dave Laird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good evening, Pierre... On Friday 14 March 2003 04:27 pm, Pierre Fortin wrote: On the _passive_ side, I have some ideas for short-circuiting Nimda attacks with iptables. [Dave sits upright in his chair from sleeping through the flame wars and

Re: [expert] MS crud

2003-03-14 Thread Pierre Fortin
On Fri, 14 Mar 2003 16:50:15 -0800 Dave Laird [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good evening, Pierre... On Friday 14 March 2003 04:27 pm, Pierre Fortin wrote: On the _passive_ side, I have some ideas for short-circuiting Nimda attacks with

Re: [expert] MS crud

2003-03-14 Thread Dave Laird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good evening, Pierre... On Friday 14 March 2003 06:04 pm, Pierre Fortin wrote: Got a pointer to the strings' stuff...? I'm running 8.2 on my main server (9.0 issues)... http://articles.linuxguru.net/view/125 It would seem, based upon my reading

[expert] MS crud

2003-03-13 Thread Gary Hodder
Hi all, any way to stop getting over run with this crud. The start of each line has been removed to protect the guilty. Thanks Gary. xxx.xxx.com [ip-of-host] - - [09/Mar/2003:15:10:58 +1100] GET /scripts/root.exe?/c+dir HTTP/1.0 404 300 1100] GET /MSADC/root.exe?/c+dir HTTP/1.0 404 298 1100]

Re: [expert] MS crud

2003-03-13 Thread Jack Coates
http://www.monkeynoodle.org/lrp/deworming.html On Sun, 2003-03-09 at 05:01, Gary Hodder wrote: Hi all, any way to stop getting over run with this crud. The start of each line has been removed to protect the guilty. Thanks Gary. xxx.xxx.com [ip-of-host] - - [09/Mar/2003:15:10:58 +1100]