Re: amavisd-new and clamav for woody???

2003-10-02 Thread Peter Holm
On Thu, 02 Oct 2003 07:40:11 +0200, in linux.debian.isp you wrote:

>I'm using these apt-sources on my production filterboxes:
>
>deb http://people.debian.org/~aurel32/BACKPORTS woody main
>deb http://people.debian.org/~hmh/woody/ hmh/amavisd-new/

BTW, how can I pin a package to a specified source? In other words:
how to tell apt to get package x only from source X and a package Y
only from source Y?

As I can see the maintainer of the BACKPORTS above allows this to be
done with an extra dists subdir, so a line like this

deb http://people.debian.org/~aurel32/BACKPORTS woody-amavisd-new main

will get only amavisd-new. Is there no way to do this with apt?


Thanks for your attention!




Have a nice thread,
Peter


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: amavisd-new and clamav for woody???

2003-10-02 Thread Michelle Konzack
Am 2003-10-02 02:14:56, schrieb Peter Holm:
>Hi,
>
>where can I get recent versions of amavisd-new and clamav for woody?

Hello, 

I am using the Backports from:

deb http://www.backports.org/debian woody all
deb-src http://www.backports.org/debian woody all

Thise backports are very good which includes mozilla 1.4 too.

Greetings
Michelle

-- 
Registered Linux-User #280138 with the Linux Counter, http://counter.li.org.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



firewall ruleset...

2003-10-02 Thread George Georgalis
Hi,

I'm trying to come up with a firewall ruleset...

a box on a local lan serves http
a firewall has static internal ip and dynamic external ip
the dynamic ip is updated in dns when it changes
various domains are listed as CNAME to the dynamic A record in dns

vdomains all work fine when requests come from outside but when local
machines use the same names, they get to the firewall interface, but
either don't make it to http server, don't make it back to the client or
the clients ip is lost due to 'reverse masquerading'; depending on the
ruleset used (never actually tried the last one).


So the question: how do I configure the firewall to enable LAN clients
to use 'internet dns names' to connect to a local server via the
external ip and have the the response properly routed to the client?

In the course of writing this it occured to me that if I made a
virtual dmz, ie put another subnet (alias ip) on the server and
firewall LAN interfaces, the firewall could be configured to NAT
connections there, whether they came from the regular LAN subnet or the
outside, err but then LAN client responses would go via the local LAN
switch and not the firewall, the client still wouldn't see them.

So the question again, is there some way to access local services via
internet dns names. In the past I just had a local dns server with the
domains mapped to the local static LAN ip addresses. I'm trying to avoid
that and use one set of dns records. (don't want a new physical dmz
either)

The only way I see it as possible is through SNAT (ie 'reverse
masquerading') the local ip as it leaves the firewall for the server,
but then the source ip is lost in web logs.:-\

// George

-- 
GEORGE GEORGALIS, System Admin/Architectcell: 646-331-2027<
Security Services, Web, Mail,mailto:[EMAIL PROTECTED] 
Multimedia, DB, DNS and Metrics.   http://www.galis.org/george 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Outlook, PDF's & Quoted Printable encoding

2003-10-02 Thread Dustin Douglas
Hey guys, got a thorny technical issue here that I'm sure some of you
have run up against. 

I have a rather small email server Exim/Spam Assassin/Vexira
Anti-Virus/Mysql virtual users on a stock Woody system. We've recently
had problems with PDF's as attachments. 

Here's the story, we've got a local user who is receiving PDF
attachments from an external email address. The external sender is
running OE 6.00.2800.1158 and my local recipient is running  Outlook
10.0.2627. 

When my local user checks his email, the PDF is corrupted
and won't display properly. If the PDF is sent to some other email
address (a non-local mail server) it comes through just fine. 

I've narrowed the problem down to the encoding method that Outlook
uses for the PDF's. Rather than using Base64, it uses Quoted
printable, which causes problems with line ending characters when the
PDF is opened on the file server for virus/spam scanning.

Here is a typical complaint from the Newsgroups.
http://groups.google.com/groups?selm=94kubu%24kg3%241%40nnrp1.deja.com&output=gplain

Obviously the sender could simply zip the file, and outlook would
probably Do the Right Thing, similarly one could change the encoding
method for MIME mail and force Outlook to encode it as Base64, but the
best solution for me, would be a server based one, that way I can fix
it once for all. Anyone fought this particular bug yet?

I've also attached a Diff of the 2 PDF's. The good PDF is not
corrupted, and the bad.pdf is the way my local user receives it. 

Thanks for any pointers. 

-- 
Dustin Douglas
--
Free The Lapland Six!!!
http://www.freethelaplandsix.com
*** bad.pdf Thu Oct  2 12:40:33 2003
--- good.pdfThu Oct  2 12:41:15 2003
***
*** 67,73 
  a;+M%\.Z^GO[>BE%J)9.o!eX9_1tZ2`NB$oZOepJfd5p@"X?rbo"mtD^#+;TEb7''7:"ItI&so?Rf`ri
  :RCOQC/\<&2oAa`2[%sDYVHCFDWVMI?'3R7a/[EMAIL PROTECTED])ueV7UV`Ua\HD6GNNf
  <7NF$pkpiOD,V!@>+'t\#3_j]:k+@'C(4ZL6P)4\R=^Kg:.ef;[EMAIL 
PROTECTED]"-810Brr',aQ&>`mHdb:o5'
! CAEg+XqVa7,&E'\8if:\94]_+\!ACQ`)DMN(h([EMAIL PROTECTED]>*Cr?MRolppfMY\1Q3%$PL-nJ22JNE
  +m=Z7Ppn\:17XT@,,%qrb8dCi0,$ASRaD!qV]eDhcC2[P?&]g1h(Q\&kVf-t>saUA2Jgf)9%>q*pkp9?
  D*q,p=IFb^"uq9262`fIWATJtSHX_"Ppn\l3J::3Std$'K,D[4.*/]Z.:H]Ak^:#k#IY3Yr/5$$L]N<'ajin#hBPp*91>I,0I
--- 67,73 
  a;+M%\.Z^GO[>BE%J)9.o!eX9_1tZ2`NB$oZOepJfd5p@"X?rbo"mtD^#+;TEb7''7:"ItI&so?Rf`ri
  :RCOQC/\<&2oAa`2[%sDYVHCFDWVMI?'3R7a/[EMAIL PROTECTED])ueV7UV`Ua\HD6GNNf
  <7NF$pkpiOD,V!@>+'t\#3_j]:k+@'C(4ZL6P)4\R=^Kg:.ef;[EMAIL 
PROTECTED]"-810Brr',aQ&>`mHdb:o5'
! .CAEg+XqVa7,&E'\8if:\94]_+\!ACQ`)DMN(h([EMAIL 
PROTECTED]>*Cr?MRolppfMY\1Q3%$PL-nJ22JNE
  +m=Z7Ppn\:17XT@,,%qrb8dCi0,$ASRaD!qV]eDhcC2[P?&]g1h(Q\&kVf-t>saUA2Jgf)9%>q*pkp9?
  D*q,p=IFb^"uq9262`fIWATJtSHX_"Ppn\l3J::3Std$'K,D[4.*/]Z.:H]Ak^:#k#IY3Yr/5$$L]N<'ajin#hBPp*91>I,0I
***
*** 84,94 
  cc$6mGme!c!X:$QmKA9.!`oN0^bTo+7g`Zf%>6a+cPj%l+0MEQi)Y89=c!a&dO"19"X?rbnhT`hfD1D;
  -.hq:rM%U!$QGl-UP=mt^USPr(Ws=p21;a8+inh\P>[EMAIL PROTECTED]&;$N/"]$-Tnqg;X-TaNQf:"M
  AmL?X_;%b3UGA4cfm&nMcGm^Sq9-2q#Uc`J_)DIKiIArdY[oq]rpF8;18>O^V"8TF(U=bms5lk4H[JrqKAH/[EMAIL PROTECTED]
  7Z(Ild([EMAIL PROTECTED]@mr&KR0Z&aP`:([EMAIL PROTECTED]>#C:kdK4brBEcYn2#ot
  D$\8j.oUE4JD:=L'\&bHPo<5qe6,U-=IFc)>4)HF]([EMAIL PROTECTED]/[EMAIL 
PROTECTED])$c-AJ.Xs&AjUU
  %HBPZjc`/-_20[d!J4Mld6`d?Q7d6l^rf-Di8s'+JFIk0>0%;pdVl;SqTV3)[EMAIL PROTECTED]@U7_k
! !BF81'R,Ik$>!_4b>n57Y+WU!=,"gTI0OWOlUR5>]Y#mA5"XbsnPh-f#9!2$]qaFfA079k4NuLQG>[EMAIL PROTECTED](07>;M#Xq.B+UsjB,fKjIc+4a;,'mMf7_=KEgV\Y+a%_r%^&tM872"dl.0q<'9YiXi15&=eodRJF
--- 84,94 
  cc$6mGme!c!X:$QmKA9.!`oN0^bTo+7g`Zf%>6a+cPj%l+0MEQi)Y89=c!a&dO"19"X?rbnhT`hfD1D;
  -.hq:rM%U!$QGl-UP=mt^USPr(Ws=p21;a8+inh\P>[EMAIL PROTECTED]&;$N/"]$-Tnqg;X-TaNQf:"M
  AmL?X_;%b3UGA4cfm&nMcGm^Sq9-2q#Uc`J_)DIKiIArdY[oq]rpF8;18>O^V"8TF(U=bms5lk4H[JrqKAH/[EMAIL PROTECTED]
  7Z(Ild([EMAIL PROTECTED]@mr&KR0Z&aP`:([EMAIL PROTECTED]>#C:kdK4brBEcYn2#ot
  D$\8j.oUE4JD:=L'\&bHPo<5qe6,U-=IFc)>4)HF]([EMAIL PROTECTED]/[EMAIL 
PROTECTED])$c-AJ.Xs&AjUU
  %HBPZjc`/-_20[d!J4Mld6`d?Q7d6l^rf-Di8s'+JFIk0>0%;pdVl;SqTV3)[EMAIL PROTECTED]@U7_k
! .!BF81'R,Ik$>!_4b>n57Y+WU!=,"gTI0OWOlUR5>]Y#mA5"XbsnPh-f#9!2$]qaFfA079k4NuLQG>[EMAIL PROTECTED](07>;M#Xq.B+UsjB,fKjIc+4a;,'mMf7_=KEgV\Y+a%_r%^&tM872"dl.0q<'9YiXi15&=eodRJF


Re: ulogd / kernel-2.4.20 / shorewall 1.4

2003-10-02 Thread Arnt Karlsen
On Wed, 1 Oct 2003 13:48:33 +0200, 
"Craig" <[EMAIL PROTECTED]> wrote in message 
<[EMAIL PROTECTED]>:

> Hi Guys
> 
> I have kernel 2.4.20 compiled with ulog support and the ulogd package
> installed on my box. I have told shorewall 1.4 to log to ULOG with
> should be logging to file, which it is not.

..shorewall runs on top of iptables, which _also_ needs ULOG support.


-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]