Re: hack for filtering "i love you" worm

2000-05-05 Thread Neil Schemenauer
On Thu, May 04, 2000 at 07:28:32PM -0400, Searcher wrote: > > exit(31) if /name="LOVE-LETTER-FOR-YOU.TXT.vbs"/o; > > Am I missing something here? Nothing except that fact that the real solution is to fix the broken mail clients. IMHO, virus scanners and the like are fundamentally broken.

Re: hack for filtering "i love you" worm

2000-05-05 Thread Rainer Link
"Benjamin de los Angeles Jr." wrote: > > Can you sight pros/cons of using your antivirus software compared to > AmaVis? > > [I used it's perlscanner interface to match on the attachment filename while > > waiting for the Antivirus vendors to come up with an "official" fix :-)] > > See http://www.

Re: hack for filtering "i love you" worm

2000-05-05 Thread Mulindwa Eric
but hoe can one use Amavis with qmail, p'se help Eric On Fri, 5 May 2000, Rainer Link wrote: > "Benjamin de los Angeles Jr." wrote: > > > > Can you sight pros/cons of using your antivirus software compared to > > AmaVis? > > > [I used it's perlscanner interface to match on the attachment filena

Re: hack for filtering "i love you" worm

2000-05-05 Thread Johan Almqvist
On Fri, May 05, 2000 at 12:18:11PM +1200, Jason Haar wrote: > You can try my scan4virus anti-virus harness. Specifically written for > Qmail. Capable of multi-scanner support and will FEED YOUR CAT! :-) See, I told you all day yesterday... ;-> > [I used it's perlscanner interface to match on the

Re: hack for filtering "i love you" worm

2000-05-05 Thread Johan Almqvist
On Fri, May 05, 2000 at 10:19:53AM +0200, Rainer Link wrote: > "Benjamin de los Angeles Jr." wrote: > > > > Can you sight pros/cons of using your antivirus software compared to > > AmaVis? > > > [I used it's perlscanner interface to match on the attachment filename while > > > waiting for the Ant

SUSE and qmail/Spamcontrol

2000-05-05 Thread Erwin Hoffmann
Hi, I gathered some infos about setting up QMAIL under SUSE Linux in my Web-page http://www.fehcom.de/qmail_en.html Additionally, I have integreted the MFCHECK patch into my SPAMCONTROL with some gadgets. Everybody is welcome to use and comment it. Cheers. eh. +---

qmail Digest 5 May 2000 10:00:01 -0000 Issue 992

2000-05-05 Thread qmail-digest-help
qmail Digest 5 May 2000 10:00:01 - Issue 992 Topics (messages 40984 through 41085): lots of XXX and Sendmail 8.8.8 40984 by: João Dinis 40988 by: Chris Stratford Re: stralloc problem 40985 by: Daniel Neri Converting sendmail mailboxes to qMail 40986 by: Isa

Re: hack for filtering "i love you" worm

2000-05-05 Thread octave klaba
Hi, I did setup your qmail-filter.py and test works # echo "test 1" | mail -s okay myself # echo "test 2" | mail -s ILOVEYOU myself qmail-inject: fatal: mail server permanently rejected message (#5.3.0) # echo "test 2" | mail -s ILOVEYOU [EMAIL PROTECTED] qmail-inject: fatal: mail server permanent

reverting back to mbox format with qmail

2000-05-05 Thread Nicholas Horwood
Hi there I'm having problems with qmail and procmail, were procmail is being able to deliver into the $HOME/Maildir directort, and seems to want to put it all in /var/mail/user, even when we change authenticate.c file, so we have decided to revert back to the mailbox format and put up with it. Do

No Mail Log ?!

2000-05-05 Thread Cedric Revest
Hello everyone, I am using Qmail on Suse 6.3, using /var/spool/mail/USERDIR. For an unknown reason, the mail logs have been cleared and Qmail does not log anything anymore... I have looked in syslog and qmail does not report any errors either. Maybe permissions are wrong on the /var/log/mai

Qmail filter for ILOVEYOU

2000-05-05 Thread Rodney Edwards
Hi, This has probably been asked already but I've literally just joined. How can I filter and reject ILOVEYOU messages in Qmail. Any pointers would be appreciated Best regards Rod

Problem with tcpserver

2000-05-05 Thread Clark Hon
Hi, I am new to this distribution list. Please forgive me if I am not posting to the correct DL. I have a problem to setup a new qmail server. When I trying to enable selective relaying with tcpserver/tcprules for qmail-smtpd, I always got *** 553 sorry, that domain isn't in my list of allowed

Atención:::::VIRUS!!!!!!!!!!!!!!

2000-05-05 Thread Rafael Villalobos Prats
Me ha infectado el virus I LOVE YOU, a alguno de vosotros le ha tenido que llegar, lo siento.

Re: hack for filtering "i love you" worm

2000-05-05 Thread Jesper Hess Nielsen
I tried installing the hack as described, but when I try the test, I get an arror saying [root@ns bin]# echo "test 1" | mail -s okay [EMAIL PROTECTED] [root@ns bin]# qmail-inject: fatal: unable to exec qq (#4.3.0) Anyone know what this could be? When I try to execute the py script, it says bas

Re: qmail won't start!?

2000-05-05 Thread Isaiah Chua
hi Dave, > >The init scripts are in, > In what/where? And what's in them? And what platform are you using? Sorry I didn't give enough info. The init scripts are in my /etc/rc.d/init.d dir and softlinked to the various /etc/rcx.d directories. I'm using RH6.2, and used the RPM package to first com

Re: Problem with tcpserver

2000-05-05 Thread Chris Johnson
On Fri, May 05, 2000 at 03:31:57AM -0700, Clark Hon wrote: > I have a problem to setup a new qmail server. When I > trying to enable selective relaying with > tcpserver/tcprules for qmail-smtpd, I always got > > *** 553 sorry, that domain isn't in my list of allowed > > *** rcpthosts (#5.7.1) >

Re: hack for filtering "i love you" worm

2000-05-05 Thread Rainer Link
Mulindwa Eric wrote: > > but hoe can one use Amavis with qmail, p'se help Please have a look at http://www.unixzone.com/virus - I would suggest to use AMaViS-Perl-5. It should work out-of-the-box. If you run into troubles, please ask me directly. HTH best regards, Rainer Link -- Rainer Link

Re: hack for filtering "i love you" worm

2000-05-05 Thread octave klaba
Jesper Hess Nielsen a écrit : > > I tried installing the hack as described, but when I try the test, I get an > arror saying > > [root@ns bin]# echo "test 1" | mail -s okay [EMAIL PROTECTED] > [root@ns bin]# qmail-inject: fatal: unable to exec qq (#4.3.0) > > Anyone know what this could be? >

Virus Scanners

2000-05-05 Thread Jason Brooke
Any recommendations on server virus scanners that run in harmony with qmail on linux, and if so, why the recommendation? Thanks, jason

Re: hack for filtering "i love you" worm

2000-05-05 Thread Jesper Hess Nielsen
If you had taken the time to read the whole mail I sent, You would notice that I already had double checked the location of python. That is not the problem - something else is not working right. /Jesper - Original Message - From: "octave klaba" <[EMAIL PROTECTED]> To: "Jesper Hess Nielse

Re: hack for filtering "i love you" worm

2000-05-05 Thread Petr Novotny
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5 May 00, at 13:50, Jesper Hess Nielsen wrote: > If you had taken the time to read the whole mail I sent, You would notice > that I already had double checked the location of python. That is not the > problem - something else is not working right.

Re: hack for filtering "i love you" worm

2000-05-05 Thread Jesper Hess Nielsen
I have ALREADY done everything stated at the beginning of the script file (which I have attached for clarity - some of you may not have seen it). When I have done all this, I get an error when performing the test : [root@ns bin]# echo "test 1" | mail -s okay [EMAIL PROTECTED] [root@ns bin]# qmail

Re: hack for filtering "i love you" worm

2000-05-05 Thread Tim Gollschewsky
On Fri, May 05, 2000 at 01:59:39PM +0200, Jesper Hess Nielsen spoke thusly: > I have ALREADY done everything stated at the beginning of the script file > (which I have attached for clarity - some of you may not have seen it). > When I have done all this, I get an error when performing the test : >

Re: hack for filtering "i love you" worm

2000-05-05 Thread Petr Novotny
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5 May 00, at 13:59, Jesper Hess Nielsen wrote: > [root@ns bin]# ./qmail-filter.py > > bash: ./qmail-filter.py: No such file or directory I see. What does "head -n1 qmail-filter.py|od -c" say? Is there anything about character "015" or "\r" or s

Re: hack for filtering "i love you" worm

2000-05-05 Thread Ricardo Cerqueira
On Fri, May 05, 2000 at 01:10:53PM +0200, Jesper Hess Nielsen wrote: > I tried installing the hack as described, but when I try the test, I get an > arror saying > > [root@ns bin]# echo "test 1" | mail -s okay [EMAIL PROTECTED] > [root@ns bin]# qmail-inject: fatal: unable to exec qq (#4.3.0) > >

Re: accustamp|tailocal|matchup

2000-05-05 Thread Len Budney
"David Dyer-Bennet" <[EMAIL PROTECTED]> wrote: > Peter Samuel <[EMAIL PROTECTED]> wrote: > > > > And you editor can't read in the results of a program? > > I can think offhand of a couple of ways of doing it, but all of them > are grossly inefficient and take lots of keystrokes. There may wel

Re: Qmail filter for ILOVEYOU

2000-05-05 Thread Len Budney
Rodney Edwards <[EMAIL PROTECTED]> wrote: > > This has probably been asked already but I've literally just joined. > How can I filter and reject ILOVEYOU messages in Qmail? Congratulations! You may be the first new subscriber whose question is at least 1) timely, and 2) not a FAQ! You get a ciga

Re: Virus Scanners

2000-05-05 Thread Johan Almqvist
On Fri, May 05, 2000 at 09:51:52PM +1000, Jason Brooke wrote: > > Any recommendations on server virus scanners that run in harmony with qmail > on linux, and if so, why the recommendation? H+BEDV antivir, from www.hbedv.com and www.antivir.de. Free for non-commercial use, no fuzz with web interf

Re: No Mail Log ?!

2000-05-05 Thread Chris Harris
>> Hello everyone, > > I am using Qmail on Suse 6.3, using /var/spool/mail/USERDIR. > > For an unknown reason, the mail logs have been cleared and Qmail does not > log anything anymore... > > I have looked in syslog and qmail does not report any errors either. > Maybe permissions are wrong

Re: Global filtering

2000-05-05 Thread Paul Schinder
At 9:33 PM -0400 5/4/00, Bennett Samowich wrote: >Greetings, > >I am relatively new to qmail, so forgive me if this is too simple... > >With all of the current goings on about the "luv bug", I have a >question concerning qmail and filtering. My customer base uses >sendmail primarily, while I ha

Re: hack for filtering "i love you" worm

2000-05-05 Thread Bruno Wolff III
On Fri, May 05, 2000 at 02:56:38AM -0600, Neil Schemenauer <[EMAIL PROTECTED]> wrote: > On Thu, May 04, 2000 at 07:28:32PM -0400, Searcher wrote: > > > exit(31) if /name="LOVE-LETTER-FOR-YOU.TXT.vbs"/o; > > > > Am I missing something here? > > Nothing except that fact that the real solution

how do i apply QMAILQUEUE

2000-05-05 Thread Jan Stifter
hi i am sorry for this very easy question, but i am playing around and can not work it out. how can i apply the QMAILQUEUE patch? i made a file with the patch in it, qmailqueue-patch, which looks like: -- start --- qmail-1.03-orig/MakefileMon Jun 15 04:53:16 1998 +++ qmai

Re: Virus Scanners

2000-05-05 Thread Rainer Link
Jason Brooke wrote: > > Any recommendations on server virus scanners that run in harmony with qmail > on linux, and if so, why the recommendation? Please have a look at http://av-linux.w3.to, esp. the Mini-FAQ as text file (direct link is http://www.ce.is.fh-furtwangen.de/~link/security/av-linux

Re: hack for filtering "i love you" worm

2000-05-05 Thread Paul Farber
Well, to thourghly test any of these scripts for qmail.. you need a copy or infected e-mail to run through the script. Does anyone have an infected e-mail to post? Or a URL where I can get one? Just adding a script is useless gotta test it out. BTW, should we send the bill to Bill Gates or

Re: hack for filtering "i love you" worm

2000-05-05 Thread Johan Almqvist
On Fri, May 05, 2000 at 09:47:57AM -0400, Paul Farber wrote: > Well, to thourghly test any of these scripts for qmail.. you need a copy > or infected e-mail to run through the script. > > Does anyone have an infected e-mail to post? Or a URL where I can get > one? Just adding a script is useles

Re: hack for filtering "i love you" worm

2000-05-05 Thread Alex at MessageLabs
>Well, to thourghly test any of these scripts for qmail.. you need a copy >or infected e-mail to run through the script. You must be the only person in the world without a copy! Seriously though, you don't need a copy of the virus. Just create an email with the correct subject line, and with a co

Re: db files for vpopmail and courier imap

2000-05-05 Thread Ken Jones
> Cono D'Elia wrote: > > Hello, > > Is there a limitation for the amount of users courier imap and > vpopmail can support using the db type files? Is it better to go with > an sql database instead? > > > Thanks, > > Cono. There is no limitation of cdb password files. However, modifications t

shim before final local delivery?

2000-05-05 Thread Paul Farber
Hello all, Is there a way to insert a shim (or shell wrapper) before qmail-local deleivers a local message? IE, check for message size if $RECIEPENT = 'baduser' or some such thing? It would seem administratively easier to apply these type of filters for a large group of users that way rather th

Re: ETRN and QMail

2000-05-05 Thread John White
On Thu, May 04, 2000 at 05:51:46PM -0700, Jon Rust wrote: > At 2:43 AM +0200 5/5/00, Peter van Dijk wrote: > >So much for security, eh? > > > > Hrmf. You have apoint there. :-/ Guess I should think before typing. > Of course, by limiting the range of IPs allowed to trigger the > download, you c

Re: ETRN and QMail

2000-05-05 Thread Robert Varga
On Thu, 4 May 2000, Jon Rust wrote: > At 2:43 AM +0200 5/5/00, Peter van Dijk wrote: > >So much for security, eh? > > > > Hrmf. You have apoint there. :-/ Guess I should think before typing. > Of course, by limiting the range of IPs allowed to trigger the > download, you could decrease the e

QMAILQUEUE seems not to work with scan4virus

2000-05-05 Thread Jan Stifter
hi, i applied the QMAILQUEUE patch to qmail. i start my qmail-smtpd with supervise /var/lock/svc/qmail-smtpd tcpserver -v -q -x/etc/tcp.smtp.cdb\ -u101 -g101 0 smtp /var/qmail/bin/qmail-smtpd 2>&1 | \ setuser qmaill accustamp | \ setuser qmaill tailocal >> /var/log/qmail-smtpd.log

Re: how do i apply QMAILQUEUE

2000-05-05 Thread Jan Stifter
On Fri, 05 May 2000 15:21:43 +0200, Jan Stifter <[EMAIL PROTECTED]> wrote: i solved it. my patch was broken. sorry jan

Re: shim before final local delivery?

2000-05-05 Thread Len Budney
Paul Farber <[EMAIL PROTECTED]> wrote: > > Is there a way to insert a shim (or shell wrapper) before qmail-local > delivers a local message? Simple; write a wrapper called ``qmail-local'', which in the end exec's the original qmail-local (which you should rename, of course). The interface is rem

Re: Alias file

2000-05-05 Thread Dave Sill
Mario Rafael <[EMAIL PROTECTED]> wrote: > Hi :), I have several questions I have an /var/spool/mail/alias file >that is getting bigger and bigger each moment, what it's is purpose?, It's the user "alias"'s mailbox. It's sometimes where root/postmaster mail ends up. >I have taken a loo

Re: qmail abuse...

2000-05-05 Thread Dave Sill
"Luke Chiam" <[EMAIL PROTECTED]> wrote: >I suspect someone is sending bulk mail using our qmail server, as we are >getting a lot of rebounced mail and delivery failure notice. A spammer might be sending stuff out with your domain in the envelope return path. That would cause bounces to come to y

Re: Global filtering

2000-05-05 Thread Dave Sill
Bennett Samowich <[EMAIL PROTECTED]> wrote: >Does qmail have the ability to implement global filters. I know that >I can put procmail lines in each users .qmail file, but that seems >like alot of work. qmail doesn't have a filtering mechanism built in, but one can be constructed pretty easily u

Re: qmail won't start!?

2000-05-05 Thread Dave Sill
"Isaiah Chua" <[EMAIL PROTECTED]> wrote: >Sorry I didn't give enough info. The init scripts are in my /etc/rc.d/init.d >dir and softlinked to the various /etc/rcx.d directories. I'm using RH6.2, >and used the RPM package to first compile the src then installed it using >rpm. > >> By "nothing happ

PERL filtering...

2000-05-05 Thread John W. Lemons III
I have recently deployed a freeware procmail script that does a very good job filtering out various forms or malicious mail. So far it has caught all the ILOVEYOU mail and a few of the variants we have seen. Since I use QMail on my own machine, can procmail scripts be used with QMail? Most of t

RE: qmail abuse...

2000-05-05 Thread Ronneil Camara
I guess the bounce mail comes from my side since I'm trying to configure my qmail also but still having some problems. Sorry for that. I've restored my old config and later, I will test again. My qmail setup is different. My qmail is configured as an email gateway only. So there are no users in

qmail-mrtg & qfilelog

2000-05-05 Thread Mark E. Drummond
Is there some way to make qmail-mrtg work with qfilelog log files? I am doing my logging monthly .. that is i have log data piped through qfilelog into /var/log/qmail/sendlog and a /var/log/qmail/smtpd/smtpdlog which grow for an entire month and then get rolled over, and are parsed with matchup/zo

Re: PERL filtering...

2000-05-05 Thread Patrick Berry
on 5/5/00 10:32 AM, John W. Lemons III had the thought: > I have recently deployed a freeware procmail script that does a very good > job filtering out various forms or malicious mail. So far it has caught all > the ILOVEYOU mail and a few of the variants we have seen. Since I use QMail > on my

Re: hack for filtering "i love you" worm

2000-05-05 Thread Kai MacTane
At 5/5/2000 09:47 AM -0400, Paul Farber wrote or quoted: >Well, to thourghly test any of these scripts for qmail.. you need a copy >or infected e-mail to run through the script. Good point. >Does anyone have an infected e-mail to post? Or a URL where I can get >one? Just adding a script is use

Re: hack for filtering "i love you" worm

2000-05-05 Thread Kai MacTane
At 5/4/2000 11:29 PM -0600, Bruce Guenter wrote or quoted: > > Anyone can rename that .vbs to what ever they want and send it around again > > so wouldn't it be more efficient to filter all .vbs attachments? > >Nope, you're exactly right. However, the question was, how do I filter >the "ILOVEYOU"

Antigen found =love-letter-for-you.txt.vbs file

2000-05-05 Thread ANTIGEN_HOUSTON
Antigen for Exchange found LOVE-LETTER-FOR-YOU.TXT.vbs matching =love-letter-for-you.txt.vbs file filter. The file is currently Detected. The message, "Re: hack for filtering "i love you" worm", was sent from Kai MacTane and was discovered in IMC Queues\Inbound located at Matchlogic/MATCHLOGIC/H

Re: PERL filtering...

2000-05-05 Thread octave klaba
Hi, > You are better off using something like scan4virus at the queue level. > http://www.geocities.com/jhaar/scan4virus/ setuping scan4vuris I have this error Cannot find unzip on your system! 2 stupid questions: - where can I find it out for linux ? - do I need to use McAfee with ? if yes, w

Re: PERL filtering...

2000-05-05 Thread Patrick Berry
on 5/5/00 10:55 AM, octave klaba had the thought: > setuping scan4vuris I have this error > > Cannot find unzip on your system! > > 2 stupid questions: > - where can I find it out for linux ? http://freshmeat.net > - do I need to use McAfee with ? if yes, whch version ? an url ? No, but shou

How do I invoke the qmail-users Mechanism ??

2000-05-05 Thread Tony D'Andrade
Hi. I dont understand how to invoke the qmail-users system. I have a server and /var/qmail/users/ is empty. I would like to be able to use the "assign" mechanism. How do i do this ? I tried to run qmail-pw2u but it just seems to hang forever. This is how it says to do it in Life with Qmai

Re: hack for filtering "i love you" worm

2000-05-05 Thread Neil Schemenauer
On Fri, May 05, 2000 at 01:59:39PM +0200, Jesper Hess Nielsen wrote: > When I try to run the script directly : > > [root@ns bin]# ./qmail-filter.py > > bash: ./qmail-filter.py: No such file or directory Try: $ python qmail-filter.py If that works then something is wrong with the first lin

Re: Antigen found =love-letter-for-you.txt.vbs file

2000-05-05 Thread Kai MacTane
At 5/5/2000 11:54 AM -0600, ANTIGEN_HOUSTON wrote or quoted: >Antigen for Exchange found LOVE-LETTER-FOR-YOU.TXT.vbs matching >=love-letter-for-you.txt.vbs file filter. >The file is currently Detected. The message, "Re: hack for filtering "i >love you" worm", was sent from Kai MacTane and was di

Antigen found =*.vbs file

2000-05-05 Thread ANTIGEN_HOUSTON
Antigen for Exchange found This is Bogus.vbs matching =*.vbs file filter. The file is currently Deleted. The message, "Re: Antigen found =love-letter-for-you.txt.vbs file", was sent from Kai MacTane and was discovered in IMC Queues\Inbound located at Matchlogic/MATCHLOGIC/HOUSTON.

Re: How do I invoke the qmail-users Mechanism ??

2000-05-05 Thread Dave Sill
"Tony D'Andrade" <[EMAIL PROTECTED]> wrote: >Hi. I dont understand how to invoke the qmail-users system. I have a >server and /var/qmail/users/ is empty. I would like to be able to use >the "assign" mechanism. How do i do this ? I tried to run qmail-pw2u >but it just seems to hang forever.

Qmail-send

2000-05-05 Thread Eric Davis
We can only send out 22 messages from remote queue at once and when the server has finished delivering those 22 it does not queue up to deliver any more. We have over 8,000 message in our remote queue and sending qmail-send an -ALRM does not get it to restart sending.  We have to stop and st

Re: PERL filtering...

2000-05-05 Thread Neil Schemenauer
On Fri, May 05, 2000 at 02:32:10PM -0500, John W. Lemons III wrote: [A whole pile of extensions cut] > Most of these will never need to be sent or received by a user and all can > contain malicious code. Any other suggestions? Yes. Fix the mail client or switch to one that does not execute untr

Re: Future of qmail: will it care about viri/worms/etc?

2000-05-05 Thread Dave Sill
"Keith Warno" <[EMAIL PROTECTED]> wrote: >The continued discussions about the "love bug" and qmail "hacks" for dealing >with it have me disturbed. I won't knock djb; the man needs to write an OS >one of these days. :) However there should be no need to "hack" qmail to >get it to filter unwante

Re: accustamp|tailocal|matchup

2000-05-05 Thread Len Budney
Kins Orekhov <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] wrote: > > And can't you look at them by passing them through tai64nlocal each > > time? Can you spell "shell script wrapper"? :) > > I *asked* the list about *some program* which can do reverse time > translation for my *already existin

RE: PERL filtering...

2000-05-05 Thread Mark D. Wilkins
> Consider filtering the following as well: > > *.reg Regedit will inject its contents into your > registry without any > warning if you open this file > *.hlp Windose help files can contain auto-executing vb script > *.hta html application, can contain vb script, > java

Re: Connecting to my email server..

2000-05-05 Thread spacetask
I don't know exactly what types of NAT firewalling there are, but I'll assume you mean something like IPmasquerading with Port forwarding (25 forwarded to you internal machine). You can't send packets to your external (real) IP and then have them come back into the network. For instance, my web s

Re: PERL filtering...

2000-05-05 Thread Searcher
> > I have recently deployed a freeware procmail script that does a very good > > job filtering out various forms or malicious mail. So far it has caught all > > the ILOVEYOU mail and a few of the variants we have seen. Since I use QMail > > on my own machine, can procmail scripts be used with Q

RE: Two Delivered-To headers - Why ?

2000-05-05 Thread Dave Kitabjian
We frequently get two Delivered-To headers when one qmail mailbox forwards to another qmail mailbox. Dave > -Original Message- > From: PPPindia [mailto:[EMAIL PROTECTED]] > Sent: Thursday, May 04, 2000 1:57 PM > To: [EMAIL PROTECTED] > Subject: Two Delivered-To headers - Why ? > > > Se

Fw: Re: IL0VEY0U worm

2000-05-05 Thread Keith Warno
For those not on the BugTraq mailing list. This is yet another update about the worm from the moderator of BugTraq. There's all sorts of useful info here. You may also want to poke around at www.securityfocus.com . kw - Original Message - From: "Elias Levy" <[EMAIL PROTECTED]> To: <[EM

Re: qmail-mrtg & qfilelog

2000-05-05 Thread Mark E. Drummond
"Mark E. Drummond" wrote: > > Is there some way to make qmail-mrtg work with qfilelog log files? I am > doing my logging monthly .. that is i have log data piped through > qfilelog into /var/log/qmail/sendlog and a /var/log/qmail/smtpd/smtpdlog > which grow for an entire month and then get rolled

Future of qmail: will it care about viri/worms/etc?

2000-05-05 Thread Keith Warno
Hello all. The continued discussions about the "love bug" and qmail "hacks" for dealing with it have me disturbed. I won't knock djb; the man needs to write an OS one of these days. :) However there should be no need to "hack" qmail to get it to filter unwanted mail and I'm wondering if future

Connecting to my email server..

2000-05-05 Thread Steve Peace\(Internal\)
First off, let me thank everyone in this mailing list for assiting me in setting up my qmail server.  Within about 4 weeks, I now have a functioning server that will send and receive email from the internet and internally.  A special koodoos to Dave Sill for writing LWQ.  Your Document was a

Re: qmail-mrtg & qfilelog

2000-05-05 Thread Mark E. Drummond
"Mark E. Drummond" wrote: > > Cancel my last ... I have switched to multilog and I am modifying the > qmail-mrtg scripts to use multilog formatted log files. If anyone else > is interested in them I can provide them when finished. Hmmm, while working on this I just noticed that there is a descre

Re: Future of qmail: will it care about viri/worms/etc?

2000-05-05 Thread markd
On Fri, May 05, 2000 at 03:27:40PM -0400, Keith Warno wrote: > Hello all. > > The continued discussions about the "love bug" and qmail "hacks" for dealing > with it have me disturbed. I won't knock djb; the man needs to write an OS > one of these days. :) However there should be no need to "ha

Re: Future of qmail: will it care about viri/worms/etc?

2000-05-05 Thread Patrick Berry
on 5/5/00 12:27 PM, Keith Warno had the thought: > > qmail is a programmer's MTA. (Un)fortunately the world isn't full of > programmers. When things like the "love bug" hit the main stream, getting > everyone to frantically and quickly slam their doors shut in the faces of > all that is unwante

Re: smtp-auth?

2000-05-05 Thread Russell Nelson
listy-dyskusyjne Krzysztof Dabrowski writes: > At 20:06 2000-05-03, Russell Nelson wrote: > >But it looks to me like he's reversed the password and the > >timestamp parameters to checkpassword. > > so the order is : LOGIN, PASSWORD, TIMESTAMP > > my cmd5checkpassword accepts: > > login

RE: Connecting to my email server..

2000-05-05 Thread Tim Hunter
When I attempt to connect to telnet mail.foobar.com 25I get mail.foobar.com: Unknown host   I will make two assumptions, 1) mail.foobar.com does not exist (DNS broke,etc) 2) your domain is not foobar.com and you are editing the output of qmail-showctl   Please send us the TRUE information

Re: qmail-mrtg & qfilelog - oops

2000-05-05 Thread Mark E. Drummond
"Mark E. Drummond" wrote: > > Cancel my last ... I have switched to multilog and I am modifying the > qmail-mrtg scripts to use multilog formatted log files. If anyone else > is interested in them I can provide them when finished. Let's try that again. Hmmm, while working on this I just noticed

RE: PERL filtering...

2000-05-05 Thread John W. Lemons III
>> Right now I deny all .vbs attachments. Yes, this is rather draconian and >> there might be a 1 in 100,000,000,000,000 chance that someone really needs >> to send a .vbs attachment. Those are the breaks... >That was the point I was trying to get across yesterday... It can be >renamed and sen

ETRN problem with qmail

2000-05-05 Thread Eric Davis
I am hoping you can help me with a qmail problem...   We have the etrn patch installed and etrn was working up until last night, but now it is not working.  We telnet to the server on port 25 and issue an etrn command for a domain in our etrn file and it says reports an internal etrn failure

Re: Connecting to my email server..

2000-05-05 Thread Steve Peace
Thanks for the assist, I should have realized that, but I have Friday on the brain. Excuse me while I wipe the egg off of my face :-) - Original Message - From: <[EMAIL PROTECTED]> To: "Steve Peace(Internal)" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, May 05, 2000 3:59 PM S

Re: Qmail-send

2000-05-05 Thread Dave Sill
"Eric Davis" <[EMAIL PROTECTED]> wrote: >We can only send out 22 messages from remote queue at once and when >the server has finished delivering those 22 it does not queue up to >deliver any more. We have over 8,000 message in our remote queue and >sending qmail-send an -ALRM does not get it to

Re: hack for filtering "i love you" worm

2000-05-05 Thread Jason Haar
Rainer Link wrote: > "Benjamin de los Angeles Jr." wrote: > > > > Can you sight pros/cons of using your antivirus software compared to > > AmaVis? > > > [I used it's perlscanner interface to match on the attachment filename while > > > waiting for the Antivirus vendors to come up with an "officia

Re: accustamp|tailocal|matchup

2000-05-05 Thread Kins Orekhov
> > Because we look at them too often :) > > And can't you look at them by passing them through tai64nlocal each > time? Can you spell "shell script wrapper"? :) I *asked* the list about *some program* which can do reverse time translation for my *already existing logs* - from Local to TAI. I *k

qmail and debugging

2000-05-05 Thread clifford thurber
Hello, What is they way to send qmail's output to standard output so I can view qmail's transaction's like sendmail in verbose mode. I know this was posted somewhere I though it was on life with qmail but it doesn't seem to be there anymore. If anyone has the url of could just send me the command

Re: Antigen found =love-letter-for-you.txt.vbs file

2000-05-05 Thread David L. Nicol
Kai MacTane wrote: > > At 5/5/2000 11:54 AM -0600, ANTIGEN_HOUSTON wrote or quoted: > >Antigen for Exchange found LOVE-LETTER-FOR-YOU.TXT.vbs matching > >=love-letter-for-you.txt.vbs file filter. > >The file is currently Detected. The message, "Re: hack for filtering "i > >love you" worm", was s

Re: Future of qmail: will it care about viri/worms/etc?

2000-05-05 Thread Jason Haar
On Fri, May 05, 2000 at 12:21:40PM -0700, [EMAIL PROTECTED] wrote: > Finally, there *is* a well defined interface at which all mail going thru > qmail can be filtered. It's called qmail-queue. Nothing is stopping any > enterprising person or organization from writing or commercializing a filtering

Re: Future of qmail: will it care about viri/worms/etc?

2000-05-05 Thread David L. Nicol
Keith Warno wrote: > > there should be no need to "hack" qmail And there isn't! Why do people persist on insecure MUAs? __ David Nicol 816.235.1187 [EMAIL PROTECTED] "Lord Macbeth knew he was a

Re: Future of qmail: will it care about viri/worms/etc?

2000-05-05 Thread Kevin Waterson
"David L. Nicol" wrote: > Keith Warno wrote: > > > > there should be no need to "hack" qmail > > And there isn't! Why do people persist on insecure MUAs? My sentiment exactly. Why should I have to expend valuable time and resources fixing Microsofts dud ware. Here in .au there are rumblings of

Re: Future of qmail: will it care about viri/worms/etc?

2000-05-05 Thread Paul Farber
But if you are the first one to sell 'secure' qmail servers you will be the MS of .au! Take a bad thing and make it into a good one. That and make profit along the way! Paul Farber Farber Technology [EMAIL PROTECTED] Ph 570-628-5303 Fax 570-628-5545 On Fri, 5 May 2000, Kevin Waterson wrote:

Re: Future of qmail: will it care about viri/worms/etc?

2000-05-05 Thread Steve Wolfe
> > there should be no need to "hack" qmail > > And there isn't! Why do people persist on insecure MUAs? I'll chime in on this, even though my view may not be the same as everyone else's. The problem isn't MUA's. The problem is that users were duped into executing a program of a malicio

Re: ETRN problem with qmail

2000-05-05 Thread rvanzant
>We have the etrn patch installed and etrn was working up until last night, Where might one find this patch? Digging around qmail.org didn't produce anything. Thanks, [EMAIL PROTECTED]

Open Today.

2000-05-05 Thread zxmmnnuv1l1l
Reduce your international phone bill by over 50%. Join our easy-to-use callback service today for free. No monthly minimums, surcharges or set-up fees apply, just low flat rates 24 hours, everyday. Visit our website: http://hometown.aol.com/gotelcom/ and enter to win $500 in FREE phone ca

Re: Open Today.

2000-05-05 Thread Irwan
At 03:20 PM 5/4/00 +, [EMAIL PROTECTED] wrote: why this qmail mailling list doesn't use the rblsmtpd to prevent from Dial Up user abuse ? Delivered-To: mailing list [EMAIL PROTECTED] Received: (qmail 32716 invoked from network); 5 May 2000 23:34:51 - Received: from ac81110d.ipt.aol.com (

.qmail questions

2000-05-05 Thread Chris Hanlon
Is there anyway to restrict which users/groups can execute commands via the | option in there .qmail file? I realise that the problem could be solved by not giving users access to the .qmail file but this is not always an option. The biggest problem is an ftp/mail user could write a .qmail wh

Re: hack for filtering "i love you" worm

2000-05-05 Thread vogelke
>> On Thu, 4 May 2000 19:28:32 -0400, >> "Searcher" <[EMAIL PROTECTED]> said: R> Anyone can rename that .vbs to what ever they want and send it around R> again so wouldn't it be more efficient to filter all .vbs attachments? The only safe way to handle this is to check any attachment for a

adduser?

2000-05-05 Thread James
I've installed qmail, and I can send messages out to the world just fine.. but I can't "get" messages from the world. The faq's and howto pages have me confused. I read something about the /users/assign file, but am completely confused about setting that up. All I want at this point is to allow

Re: adduser?

2000-05-05 Thread Bolivar Diaz Galarza
James wrote: > > I've installed qmail, and I can send messages out to the world just fine.. > but I can't "get" messages from the world. > > The faq's and howto pages have me confused. I read something about the > /users/assign file, but am completely confused about setting that up. All > I wa

checkpassword and Openbsd 2.6

2000-05-05 Thread Dale Miracle
I am using Openbsd 2.6 and I am having a problem with checkpassword. When I do the test in the install doc for checkpassword /var/qmail/bin/qmail-popup host /bin/checkpassword pwd It works fine, verifies my user id and password. When I try to telnet to the server using it's fqdn on port 110 I

  1   2   >