"Word of Mouth" - spam? (OT)

2003-09-25 Thread Shachar Shemesh
Hi all,

I'm sorry about the off topic posting. Every so often I get an 
onsolicited mail announcing that someone posted a report about me, or 
that someone is looking for information, on a site called "Word of 
Mouth". The site is at http://www.wordofmouthconnection.com.

The site baldly claims that "this is not spam", and that the email was 
triggered to inform me that someone is searching for information, or is 
offering information, about me.

Now here's the catch - the searches in that site are performed according 
to email address. There is someone that claims to "know me well", using 
an address that I have only used once, for a specific purpose, and never 
with friends!

What's more interesting is that every so often someone actually performs 
a search on that site for that very same (only rarely used) address! Not 
even spammers bother with this address any more. Google doesn't show any 
results when searching for it.

Now I'm at a loss. Either someone is attempting a very strange sort of 
slander (why would someone look for me under that email?), or this is 
such a soficticated sort of spam, that I have not managed to figure out 
what it is (maybe they are selling commercials at the site for the 
confused people who want to walk in and find out what the !%&([EMAIL PROTECTED]&!() 
the email is about).

Any ideas would be greatly appretiated.

   Shachar

--
Shachar Shemesh
Open Source integration consultant
Home page & resume - http://www.shemesh.biz/


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Thank you all...

2003-09-25 Thread Ori Idan
In the recent few days, I asked many questions on this list.
I would like to thank this list for all the help.
It really shows what a community we have here. This is what I like the most 
about Linux (aside from the chalange of learning new things everyday...).

All answers where very helpfull something that we do not see everyday on the 
net.
Now not only that all recent problems are solved, things that did not work 
before but I did not bother to fix are now working perfectly.

SO THANK YOU ALL AGAIN.

-- 
Ori Idan
(This mail was sent using Kmail running on Mandrake GNU/Linux)

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: live website mirroring

2003-09-25 Thread Sagi Bashari
On 25/09/2003 10:43, [EMAIL PROTECTED] wrote:

I have a sollution which confronts the problem in a totally different 
way.
Given the time and resources, what you can do is connect both servers 
to a NAS switch, mapping them the same storage.


It's a possible solution, but:

1. The NAS is still a single point of failure.
2. They are talking about having a server at a different location,
so they'll need to replicate the NAS as well.


We would like to do this with our current hardware at this stage, we 
already have RAID1 on both servers so I would just like to keep the 
arrays identical.

Right now we will stick to having both servers at the same location, my 
question was about changing the IP address dynamically if something 
happens if we ever decide to setup a backup server on another location.

My suggestion for a general direction to investigate:

1. Check rsync more closely - as far as I remember from using it, it
is actually a very efficient program in CPU, memory, and network
usage.


Yes, but I'm not sure that running it every 10 minutes is a good idea, 
especially if you have many files and some of them are being changed 
while rsync is running.

I found out about a kernel module named "enbd" which is supposed to do 
RAID over network somehow, but I would like to hear about the experience 
of others before I start to play with it.

2. What about using a content-management (CM) solution which manages
your site instead of handling files "manualy"? Keeping track of your
files through a CM software will enable it to copy over every file
when it's updated, and it can also sort-of track changes and versions.
I can't recall a particular software for this, maybe you can start
by looking for WebDAV implementations (e.g. Apache's WebDAV module). 


I'm not sure. Basically we're storing all the data in our database and 
only use the filesystem for files - image  files, flash files, website 
root directories etc.

All the files must be accessible by apache (it is serving the images 
directly, we don't read them in our application) .

Sagi



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: live website mirroring

2003-09-25 Thread linux-il
Sagi Bashari wrote:

It's a possible solution, but:

1. The NAS is still a single point of failure.
2. They are talking about having a server at a different location,
so they'll need to replicate the NAS as well.


We would like to do this with our current hardware at this stage, we 
already have RAID1 on both servers so I would just like to keep the 
arrays identical.
As far as I understood it, the meaning of "NAS" is that you'll have
common storage accessed over the network ("NAS" = "Network Attached
Storage"). What does this have to do with each server having its own
RAID?
BTW, If you already have RAID 1 (mirroring) and if you have more than
one disk on each mirror side (i.e. at least 4 disks total in each
mirror) then you better do RAID 0+1 (mirroring over stripping), to
enhance your access times.
(e.g. http://www.acnc.com/04_01_0p1.html)
Right now we will stick to having both servers at the same location, my 
question was about changing the IP address dynamically if something 
happens if we ever decide to setup a backup server on another location.
You had two questions, haven't you?

As for this IP question:

1. If you want the backup server to serve also at "regular times"
then just advertise both addresses in A records in DNS, the DNS
server will alternate their order when resolving the server's address
which will be a very cheap way to load-balance between them.
2. If you just want the bakcup server to be accessed only when the
primary one goes down then the only way I can think off right now is
with having setting the A record with a very short time to live (5-15)
minutes, as much as you can stand with having an inaccessible server)
so your DNS will be accessed almost every time the site is accessed,
when the primary goes down (which can be discovered with various High
Availability solutions) the secondary updates your DNS server and takes
over control.
See http://linux-ha.org/ for instance.

(1) and (2) can be implemented together (advertise both, when one
server goes down the other will delete its address from DNS, when the
downed server goes back up it will register with the DNS).
There are also mailing lists, forums and sites about Linux high
availability, maybe you'll find there more knowledgeable crowde, though
I for one would be curious to hear what you decided to do.

My suggestion for a general direction to investigate:

1. Check rsync more closely - as far as I remember from using it, it
is actually a very efficient program in CPU, memory, and network
usage.


Yes, but I'm not sure that running it every 10 minutes is a good idea, 
especially if you have many files and some of them are being changed 
while rsync is running.
Have you conducted your own tests or found results of such tests?
In general, rsync is supposed to cope well with changing files.
I found out about a kernel module named "enbd" which is supposed to do 
RAID over network somehow, but I would like to hear about the experience 
of others before I start to play with it.
Never heard of it, though I did see the "Network Block Device" option
in the Kernel 2.4 config, which sounds related to this.  I'd expect you
can google for a community of this module.

2. What about using a content-management (CM) solution which manages
your site instead of handling files "manualy"? Keeping track of your
files through a CM software will enable it to copy over every file
when it's updated, and it can also sort-of track changes and versions.
I can't recall a particular software for this, maybe you can start
by looking for WebDAV implementations (e.g. Apache's WebDAV module). 


I'm not sure. Basically we're storing all the data in our database and 
only use the filesystem for files - image  files, flash files, website 
root directories etc.
That's what content management is about.

All the files must be accessible by apache (it is serving the images 
directly, we don't read them in our application) .
What I was suggesting (never tried this myself) is that instead of just
writing files directly to the disk and hope that some sync program will
find it and copy it over, use a tool which writes it to the disk (so
it's accessible by Apache) but in the same time can send it (or notify
about the change) to the backup server. WebDAV is one standard protocol
to achive the "write a file to a Web server" part.
Also when you have such tools instead of directly writing files to disk, 
you can start using other tools on top of them (QA, testting,
versioning, authentication, authorization, general site management)

--Amos



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: "Word of Mouth" - spam? (OT)

2003-09-25 Thread Nadav Har'El
On Thu, Sep 25, 2003, Shachar Shemesh wrote about ""Word of Mouth" - spam? (OT)":
>...
> The site baldly claims that "this is not spam", and that the email was 
> triggered to inform me that someone is searching for information, or is 
> offering information, about me.
> 
> Now here's the catch - the searches in that site are performed according 
> to email address. There is someone that claims to "know me well", using 
> an address that I have only used once, for a specific purpose, and never 
> with friends!
>...

I don't understand why you think the situation is any different from other
"Add 3 inches" or "Help me transfer $10M" spams. The site you mentioned
wants people to come to them, so they spam you and stick a line saying that
"this is not spam"...

So the most likely and straightforward explanation is that the owners of this
site themselves created the spamming list and are pretending that "this is
not spam".

The very unlikely explanation is that someone else is (ab)using that site
by entering other people's email addresses that that person somehow got
hold of (e.g., from a spammer's list). Even if this is indeed the situation,
the fact that that site sends out their emails to these addresses simply
means that they found a way to knowingly spam you with "plausible deniability":
they can claim that they aren't spamming - someone else entered your email...

That is similar to anti-virus software spams: Anti-virus software writers
know that certain worms fake "From:" addresses, but they still bounce
copies of these worms. Why? Because it lets them advertise their product
to millions of random people on the net, without it being labled spam,
and without them having to pay a cent for the transmission of these ads.
Well, do you know what? I still call those anti-virus "you have a virus!" ads 
spam. At some points in recent history, I was getting more of those spams
than "normal" spams.

-- 
Nadav Har'El|  Thursday, Sep 25 2003, 28 Elul 5763
[EMAIL PROTECTED] |-
Phone: +972-53-790466, ICQ 13349191 |He who has more is not happier than he
http://nadav.harel.org.il   |who wants less.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: "Word of Mouth" - spam? (OT)

2003-09-25 Thread Alon Altman
See http://www.snopes.com/computer/internet/wordofmouth.asp

  Alon

> Hi all,
>
> I'm sorry about the off topic posting. Every so often I get an
> onsolicited mail announcing that someone posted a report about me, or
> that someone is looking for information, on a site called "Word of
> Mouth". The site is at http://www.wordofmouthconnection.com.
>
> The site baldly claims that "this is not spam", and that the email was
> triggered to inform me that someone is searching for information, or is
> offering information, about me.
>
> Now here's the catch - the searches in that site are performed according
> to email address. There is someone that claims to "know me well", using
> an address that I have only used once, for a specific purpose, and never
> with friends!
>
> What's more interesting is that every so often someone actually performs
> a search on that site for that very same (only rarely used) address! Not
> even spammers bother with this address any more. Google doesn't show any
> results when searching for it.
>
> Now I'm at a loss. Either someone is attempting a very strange sort of
> slander (why would someone look for me under that email?), or this is
> such a soficticated sort of spam, that I have not managed to figure out
> what it is (maybe they are selling commercials at the site for the
> confused people who want to walk in and find out what the !%&([EMAIL PROTECTED]&!()
> the email is about).
>
> Any ideas would be greatly appretiated.
>
> Shachar
>
>

-- 
This message was sent by Alon Altman ([EMAIL PROTECTED]) ICQ:1366540
GPG public key at http://alon.wox.org/pubkey.txt
Key fingerprint = A670 6C81 19D3 3773 3627  DE14 B44A 50A3 FE06 7F24
--
 -=[ Random Fortune ]=-
For gin, in cruel
Sober truth,
Supplies the fuel
For flaming youth.
-- Noel Coward

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: The first stable release of Samba 3.0 is available

2003-09-25 Thread Oded Arbel
On Thursday 25 September 2003 09:26, Eli Marmor wrote:
> There are many key components of Linux that are reaching major
> milestones these days (Samba 3.0, kernel 2.6, OpenOffice 1.1, AbiWord
> 2.0.0, GNOME 2.4, etc.).
>
> There are also leading distros (RedHat, Mandrake, etc.) which are
> releasing new versions these days.
>
> The big question is what of the new packages are included in the new
> distros.

Nope - none. Mandrake doesn't even have KDE 3.1.4.

-- 
Oded

::..
This signature was intentionally left boring

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Israeli NTP server with support for Day Light Savings

2003-09-25 Thread Noam Rathaus
Hi,

Lately I heard rumors of the idea of changing the Day Light Savings from +-1 hour to 
+-2 hours, and changing it on less of a regular basis that it is now (I didn't notice 
it was on a regular basis ... It always appeared to be changing at random).

Anyhow my question is whether there is an Israeli NTP server that keeps track of these 
things, allowing my organization, and others out there to keep track of these time 
changes.

Thanks
Noam Rathaus
CTO
Beyond Security Ltd.
http://www.securiteam.com 


To unsubscribe, send 
mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: The first stable release of Samba 3.0 is available

2003-09-25 Thread Diego Iastrubni
ביום חמישי, 25 בספטמבר 2003, 09:26, נכתב על ידי Eli Marmor:
> Does anybody have more details about the new releases of the distros?

yes distros are stupid. 
Mandrake for example, has a good reputation of putting beta/rc software in 
their distro. I think they are doing it to force you paying for the real 
stable packages.

If they waited a month or two they would have 
* OO 1.1 final
* kde 3.1.4
* gnome 2.4
* samba 3
* perl 5.81 (hope I am not confused about the version number, sorry perl geeks 
:)

-- 

diego, 28 Elul 5763

Please avoid sending me Word or PowerPoint attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html



To unsubscribe, send 
mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: The first stable release of Samba 3.0 is available

2003-09-25 Thread Gabor Szabo
On Thu, 25 Sep 2003, Diego Iastrubni wrote:

> * perl 5.81 (hope I am not confused about the version number, sorry perl geeks
> :)

It's official number is 5.8.1 and it should be out in a few days or weeks.


Gabor
http://www.perl.org.il/

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: "Word of Mouth" - spam? (OT)

2003-09-25 Thread Shachar Shemesh
Alon Altman wrote:

See http://www.snopes.com/computer/internet/wordofmouth.asp

 Alon
 

Ok, that probably nailed the issue.

I'll just start treating this as spam, and be over with the mystery.

  thanks,
 Shachar
--
Shachar Shemesh
Open Source integration consultant
Home page & resume - http://www.shemesh.biz/


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


BIND delegation-only configuration

2003-09-25 Thread Alon Altman
Hi,
  I'm running a caching nameserver for my home network, and installed the
verisign patch, but it still doesn't work.

  Can you tell me what's wrong with my configuration?

Here is my /etc/named.conf:

controls {
inet 127.0.0.1 allow { any; } keys { "key"; };
};

options {
pid-file "/var/run/named/named.pid";
directory "/var/named";
 */
// query-source address * port 53;
forward first;
forwarders {
  192.114.47.4;
  192.114.47.52;
};
root-delegation-only exclude { "de"; "lv"; "to"; "museum"; };

};

//
// a caching only nameserver config
//

zone "." {
type hint;
file "named.ca";
};

// ... more local zones removed ...


-- 
This message was sent by Alon Altman ([EMAIL PROTECTED]) ICQ:1366540
GPG public key at http://alon.wox.org/pubkey.txt
Key fingerprint = A670 6C81 19D3 3773 3627  DE14 B44A 50A3 FE06 7F24
--
 -=[ Random Fortune ]=-
Deflector shields just came on, Captain.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: BIND delegation-only configuration

2003-09-25 Thread Oded Arbel
On Thursday 25 September 2003 13:23, Alon Altman wrote:
> root-delegation-only exclude { "de"; "lv"; "to"; "museum"; };

my BIND complains that root-delegation-only is an unknown option. my config 
looks like this:

zone "com" {
type delegation-only;
};

zone "net" {
type delegation-only;
};


-- 
Oded

::..
Godwin's Law (prov.  [Usenet]):
As a Usenet discussion grows longer, the probability of a comparison involving 
Nazis or Hitler approaches one." There is a tradition in many groups that, 
once this occurs, that thread is over, and whoever mentioned the Nazis has 
automatically lost whatever argument was in progress.  Godwin's Law thus 
guarantees the existence of an upper bound on thread length in those groups.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: BIND delegation-only configuration

2003-09-25 Thread Alon Altman
On Thu, 25 Sep 2003, Oded Arbel wrote:

> On Thursday 25 September 2003 13:23, Alon Altman wrote:
> > root-delegation-only exclude { "de"; "lv"; "to"; "museum"; };
>
> my BIND complains that root-delegation-only is an unknown option. my config
> looks like this:
>
> zone "com" {
> type delegation-only;
> };
>
> zone "net" {
> type delegation-only;
> };

Still doesn't work for me :(.

>dig @localhost fsdfsdfdsgads.net +short
64.94.110.11

-- 
This message was sent by Alon Altman ([EMAIL PROTECTED]) ICQ:1366540
GPG public key at http://alon.wox.org/pubkey.txt
Key fingerprint = A670 6C81 19D3 3773 3627  DE14 B44A 50A3 FE06 7F24
--
 -=[ Random Fortune ]=-
The glances over cocktails
That seemed to be so sweet
Don't seem quite so amorous
Over Shredded Wheat

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Israeli NTP server with support for Day Light Savings

2003-09-25 Thread Shachar Shemesh
Noam Rathaus wrote:

Hi,

Lately I heard rumors of the idea of changing the Day Light Savings from +-1 hour to +-2 hours, and changing it on less of a regular basis that it is now (I didn't notice it was on a regular basis ... It always appeared to be changing at random).

Anyhow my question is whether there is an Israeli NTP server that keeps track of these things, allowing my organization, and others out there to keep track of these time changes.

 

Hi Noam,

NTP gives out the time in UTC/GMT/Zulu/whatever they call it now. As 
such, changes to the timezone are not, and should not, be taken from it.

I know, for my part, that the debian maintainers have been doing a 
wonderful job of keeping my timezone info on my machine up to date. 
Quite frankly, I don't know how to determine when or where the time zone 
will change.

In complete contradiction to what I have just said, the OS challanged 
can download http://www.shemesh.biz/IST.reg. It's a registry entry for 
2003's daylight saving for Israel. It was built for Windows 2000, but 
should work, at least, on NT class OS like systems.

 Shachar

--
Shachar Shemesh
Open Source integration consultant
Home page & resume - http://www.shemesh.biz/


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: linux compatible online maps site?

2003-09-25 Thread Alon Barzilai
hi,

try emap ( http://www.emap.co.il )
It works for me with mozilla 1.4.
Alon.

Ittay Dror wrote:

Hello,

I'm trying to find an online maps site (of the sort where you input
source and destination addresses and it provides you with directions). I
used maps.walla.co.il so far, but they upgraded the site and so it
doesn't work for me anymore.
I'm using firebird 0.6.1

Thanx,
Ittay 


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: linux compatible online maps site?

2003-09-25 Thread Ittay Dror
On Thu, 2003-09-25 at 16:27, Alon Barzilai wrote:
> hi,
> 
> try emap ( http://www.emap.co.il )
> It works for me with mozilla 1.4.

upgraded to the latest mozilla and emap (still) doesn't work for me.
afaik there's a problem in flash<->javascript interaction in mozilla.

ittay

> 
> Alon.
> 
> 
> Ittay Dror wrote:
> 
> > Hello,
> > 
> > I'm trying to find an online maps site (of the sort where you input
> > source and destination addresses and it provides you with directions). I
> > used maps.walla.co.il so far, but they upgraded the site and so it
> > doesn't work for me anymore.
> > 
> > I'm using firebird 0.6.1
> > 
> > Thanx,
> > Ittay 
-- 
===
Ittay Dror ([EMAIL PROTECTED])
User Space, R&D
Qlusters Inc.
Tel: +972-3-6081956 Fax: +972-3-6081841


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: The first stable release of Samba 3.0 is available

2003-09-25 Thread Ben-Nes Michael
I realy fell in love with Gentoo, amazing Distro Samba 3.0.0 is up and
runing :)

--
Canaan Surfing Ltd.
Internet Service Providers
Ben-Nes Michael - Manager
Tel: 972-4-6991122
Fax: 972-4-6990098
http://www.canaan.net.il
--
- Original Message - 
From: "Diego Iastrubni" <[EMAIL PROTECTED]>
To: "Eli Marmor" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, September 25, 2003 11:57 AM
Subject: Re: The first stable release of Samba 3.0 is available


ביום חמישי, 25 בספטמבר 2003, 09:26, נכתב על ידי Eli Marmor:
> Does anybody have more details about the new releases of the distros?

yes distros are stupid.
Mandrake for example, has a good reputation of putting beta/rc software in
their distro. I think they are doing it to force you paying for the real
stable packages.

If they waited a month or two they would have
* OO 1.1 final
* kde 3.1.4
* gnome 2.4
* samba 3
* perl 5.81 (hope I am not confused about the version number, sorry perl
geeks
:)

-- 

diego, 28 Elul 5763

Please avoid sending me Word or PowerPoint attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html



==
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



mailfilter + fetchmail. mailfilter can probably get used elsewhere too.

2003-09-25 Thread Shaul Karl
  Hopefully there is at least one more person who will find it valuable.
I did. It suggests a way to filter the massive annoying MS mail. Not
100% success but still helped me a lot. Forwarded from debian-user.


- Forwarded message from Pigeon <[EMAIL PROTECTED]> -

From: Pigeon <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: MS mail bombs

On Tue, Sep 23, 2003 at 09:18:48PM -0500, John Hasler wrote:
> Wayne writes:
> > I guess you could use fetchmail to weed them out but I found that
> > spending time on the DENY rules in mailfilter was better spent.
> 
> Fetchmail can be used alone to delete oversize mails on the server.  I do
> so because I am too lazy to get mailfilter up on Woody.

I've just found getting mailfilter up on woody to be a suitable
means of passing the time while microwaving pizzas. It's dead easy:

1) apt-get install mailfilter - it only depends on libc, libstdc++ and
   debconf, so no baddies there. :-)

2) modify ~/.fetchmailrc with the 'preconnect "mailfilter"' line,
   which goes in a slightly non-obvious place, as in my example
   (attached); only one 'preconnect' line is needed to check multiple
   mailboxes, as mailfilter gets the info on which boxes to check from
   its own .rc, not from fetchmail.
   
3) modify my attached ~/.mailfilterrc with your POP3 username and
   password details. The DENY rules to filter out viral crap are
   translated from posts by Greg Lehey and David Lloyd on the LinuxSA
   list. The ALLOW lines are to cope with the possibility of list
   traffic arriving with large log files attached which would
   otherwise be knocked out by the MAXSIZE limit. You must have the
   log file. You can add a line 'TEST=yes' to run in 'dummy' mode
   without actually deleting everything. The DENY and ALLOW lines must
   not contain line breaks.
   
The one thing mailfilter does seem to lack is an option to filter
based on the output of some external program, so you could link it
with some Bayesian engine to avoid manually tweaking the rules.   

-- 
Pigeon

Be kind to pigeons
Get my GPG key here: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x21C61F7F

# Configuration created Fri Nov 29 01:13:30 2002 by fetchmailconf
set postmaster "postmaster"

poll pop3.ukonline.co.uk with proto POP3
   user "jah.pigeon" there with password "something" is [EMAIL PROTECTED] here
   preconnect "mailfilter"

poll pop3.ukonline.co.uk with proto POP3
   user "my.other.user" there with password "somethingelse" is [EMAIL PROTECTED] 
here

LOGFILE=/home/pigeon/mailfilter.log

SHOW_HEADERS=yes

SERVER=pop3.ukonline.co.uk
USER=jah.pigeon
PASS=something
PROTOCOL=pop3
PORT=110

SERVER=pop3.ukonline.co.uk
USER=my.other.user
PASS=somethingelse
PROTOCOL=pop3
PORT=110

REG_CASE=yes

REG_TYPE=extended

MAXSIZE_DENY=5

NORMAL=yes


DENY=^Content-(Type|Disposition):.*(file)?name=.*\.(asd|bat|chm|cmd|com|dll|exe|hlp|hta|js|jse|lnk|ocx|pif|scr|shb|shm|shs|vb|vbe|vbs|vbx|vxd|wav|wsf|wsh)

DENY=^(Subject|SUBJECT):.*(Latest Net Critical Update|Bug Message|Abort Letter|abort 
notice|Failure Message) 

DENY=^(From|FROM):.*(Microsoft|MS Email Delivery System|Inet Email|Internet 
Message|Inet Mail Service|MS Internet|Net Delivery Service|MS Mail System|internet 
email delivery|MS Network Delivery|ms network system|MS Security Services|Inet Mail 
Storage System)

ALLOW=^From:[EMAIL PROTECTED]
ALLOW=^From:[EMAIL PROTECTED]





- End forwarded message -

-- 

Shaul Karl,shaulk @ actcom . net . il

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: linux compatible online maps site?

2003-09-25 Thread Micha Feigin
On Thu, 2003-09-25 at 17:20, Ittay Dror wrote:
> On Thu, 2003-09-25 at 16:27, Alon Barzilai wrote:
> > hi,
> > 
> > try emap ( http://www.emap.co.il )
> > It works for me with mozilla 1.4.
> 
> upgraded to the latest mozilla and emap (still) doesn't work for me.
> afaik there's a problem in flash<->javascript interaction in mozilla.
> 

They work, but you need versions compiled with the right gcc, iirc you
need java-2 and mozilla that are compiled against the same gcc.

I am working with debian unstable and I use j2re+j2sdk from sun compiled
with gcc 3.2 or 3.3 (not sure which) and the standard flash installer
for linux and everything works fine.

> ittay
> 
> > 
> > Alon.
> > 
> > 
> > Ittay Dror wrote:
> > 
> > > Hello,
> > > 
> > > I'm trying to find an online maps site (of the sort where you input
> > > source and destination addresses and it provides you with directions). I
> > > used maps.walla.co.il so far, but they upgraded the site and so it
> > > doesn't work for me anymore.
> > > 
> > > I'm using firebird 0.6.1
> > > 
> > > Thanx,
> > > Ittay 
-- 
Micha Feigin
[EMAIL PROTECTED]


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: linux compatible online maps site?

2003-09-25 Thread Christoph Bugel
On 2003-09-25  Ittay Dror wrote:
> On Thu, 2003-09-25 at 16:27, Alon Barzilai wrote:
> > hi,
> > 
> > try emap ( http://www.emap.co.il )
> > It works for me with mozilla 1.4.
> 
> upgraded to the latest mozilla and emap (still) doesn't work for me.
> afaik there's a problem in flash<->javascript interaction in mozilla.

For me it works (Thanks for the links :)

- Mozilla 1.4  (Gecko/20030624)
- Shockwave Flash 5.0 r47
- Java(TM) Plug-in Blackdown-1.4.1-01



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Israeli NTP server with support for Day Light Savings

2003-09-25 Thread Ariel Biener
On Thursday 25 September 2003 13:28, Noam Rathaus wrote:
> Hi,
>
> Lately I heard rumors of the idea of changing the Day Light Savings from
> +-1 hour to +-2 hours, and changing it on less of a regular basis that it
> is now (I didn't notice it was on a regular basis ... It always appeared to
> be changing at random).
>
> Anyhow my question is whether there is an Israeli NTP server that keeps
> track of these things, allowing my organization, and others out there to
> keep track of these time changes.

Dear Noam,

NTP servers are clueless about timezone. They only tell the time in UTC. It is 
your local Operating System that knows about timezone, and adjusts the time 
by it.

As such, no NTP server will ever know when the local time was moved to 
daylight savings time and back. NTP servers are universal, and anyone can 
sync with any NTP server, be it here or in Timbaktu.

Hope this helps.

--Ariel
>
> Thanks
> Noam Rathaus
> CTO
> Beyond Security Ltd.
> http://www.securiteam.com
>
>
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]

-- 
--
Ariel Biener
e-mail: [EMAIL PROTECTED]
PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



unsubscribe

2003-09-25 Thread Shlomo Yona


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Reading hebrew emails with evolution

2003-09-25 Thread Micha Feigin
Hello,

I occasionally get hebrew emails in evolution. I can see the text ok,
and each word is shown in the right direction, but the sentence
direction is left to right instead if right to left.
Any ideas if its possible to fix this behviour?
-- 
Micha Feigin
[EMAIL PROTECTED]


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: live website mirroring

2003-09-25 Thread Dan Fruehauf
On Thursday 25 September 2003 11:45, [EMAIL PROTECTED] wrote:
it was probably my mistake, i said NAS, but i meant SAN (Storage Area 
Network).
I can see people are showing interest, so i'll give some more details on what 
were doing at work.

Assuming one server is always active, and the other one is passive, we map the 
same disks drives to them through the SAN (while only one server mounts the 
storage at a given time).
when a failover happens, the passive server "steals" the ip of the active 
server, and it's storage as well and mounts it.
after this, the application is being executed and all should be fine.
what's not too good is that sessions are lost, so if youre application is 
stateful, your users will feel the crash that happened, while if it's 
stateless the damage will be much smaller.

Dan.

> Sagi Bashari wrote:
> >> It's a possible solution, but:
> >>
> >> 1. The NAS is still a single point of failure.
> >> 2. They are talking about having a server at a different location,
> >> so they'll need to replicate the NAS as well.
> >
> > We would like to do this with our current hardware at this stage, we
> > already have RAID1 on both servers so I would just like to keep the
> > arrays identical.
>
> As far as I understood it, the meaning of "NAS" is that you'll have
> common storage accessed over the network ("NAS" = "Network Attached
> Storage"). What does this have to do with each server having its own
> RAID?
>
> BTW, If you already have RAID 1 (mirroring) and if you have more than
> one disk on each mirror side (i.e. at least 4 disks total in each
> mirror) then you better do RAID 0+1 (mirroring over stripping), to
> enhance your access times.
> (e.g. http://www.acnc.com/04_01_0p1.html)
>
> > Right now we will stick to having both servers at the same location, my
> > question was about changing the IP address dynamically if something
> > happens if we ever decide to setup a backup server on another location.
>
> You had two questions, haven't you?
>
> As for this IP question:
>
> 1. If you want the backup server to serve also at "regular times"
> then just advertise both addresses in A records in DNS, the DNS
> server will alternate their order when resolving the server's address
> which will be a very cheap way to load-balance between them.
>
> 2. If you just want the bakcup server to be accessed only when the
> primary one goes down then the only way I can think off right now is
> with having setting the A record with a very short time to live (5-15)
> minutes, as much as you can stand with having an inaccessible server)
> so your DNS will be accessed almost every time the site is accessed,
> when the primary goes down (which can be discovered with various High
> Availability solutions) the secondary updates your DNS server and takes
> over control.
>
> See http://linux-ha.org/ for instance.
>
> (1) and (2) can be implemented together (advertise both, when one
> server goes down the other will delete its address from DNS, when the
> downed server goes back up it will register with the DNS).
>
> There are also mailing lists, forums and sites about Linux high
> availability, maybe you'll find there more knowledgeable crowde, though
> I for one would be curious to hear what you decided to do.
>
> >> My suggestion for a general direction to investigate:
> >>
> >> 1. Check rsync more closely - as far as I remember from using it, it
> >> is actually a very efficient program in CPU, memory, and network
> >> usage.
> >
> > Yes, but I'm not sure that running it every 10 minutes is a good idea,
> > especially if you have many files and some of them are being changed
> > while rsync is running.
>
> Have you conducted your own tests or found results of such tests?
> In general, rsync is supposed to cope well with changing files.
>
> > I found out about a kernel module named "enbd" which is supposed to do
> > RAID over network somehow, but I would like to hear about the experience
> > of others before I start to play with it.
>
> Never heard of it, though I did see the "Network Block Device" option
> in the Kernel 2.4 config, which sounds related to this.  I'd expect you
> can google for a community of this module.
>
> >> 2. What about using a content-management (CM) solution which manages
> >> your site instead of handling files "manualy"? Keeping track of your
> >> files through a CM software will enable it to copy over every file
> >> when it's updated, and it can also sort-of track changes and versions.
> >> I can't recall a particular software for this, maybe you can start
> >> by looking for WebDAV implementations (e.g. Apache's WebDAV module).
> >
> > I'm not sure. Basically we're storing all the data in our database and
> > only use the filesystem for files - image  files, flash files, website
> > root directories etc.
>
> That's what content management is about.
>
> > All the files must be accessible by apache (it is serving the images
> > directly, we don't read them in our application) .
>
> W

Re: linux compatible online maps site?

2003-09-25 Thread Beni Cherniavsky
Christoph Bugel wrote on 2003-09-25:

> On 2003-09-25  Ittay Dror wrote:
> > On Thu, 2003-09-25 at 16:27, Alon Barzilai wrote:
> > > hi,
> > >
> > > try emap ( http://www.emap.co.il )
> > > It works for me with mozilla 1.4.

Yoo-hoo!  They changed the site, it used to be IE-only or something
like that.  Thanks for the info!

> >
> > upgraded to the latest mozilla and emap (still) doesn't work for me.
> > afaik there's a problem in flash<->javascript interaction in mozilla.
>
> For me it works (Thanks for the links :)
>
> - Mozilla 1.4  (Gecko/20030624)
> - Shockwave Flash 5.0 r47
> - Java(TM) Plug-in Blackdown-1.4.1-01
>
It also works for me on FireBird and I'm sorry to disappoint you but I
can't see any traces on the site of either Java or Shockwave (modulo
ads ;).

-- 
Beni Cherniavsky <[EMAIL PROTECTED]>

Python - the best programming diet.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



RE: Israeli NTP server with support for Day Light Savings

2003-09-25 Thread Tzahi Fadida
Hi noam,
The problem is with your time zone settings in your Distro.
Because in israel, the day light saving is changed on a different times then most 
distro timezone settings for israel.
here, read this faq from iglu, it works great.
http://www.iglu.org.il/faq/cache/116.html


* - * - *
Tzahi Fadida
MSc Student
Information System Engineering Area
Faculty of Industrial Engineering & Management
Technion - Israel Institute of Technology
Technion City, Haifa, Israel 32000
Email [EMAIL PROTECTED]
Technion Email: [EMAIL PROTECTED]
* - * - * - * - * - * - * - * - * - *

WARNING TO SPAMMERS:  see at http://members.lycos.co.uk/my2nis/spamwarning.html

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Noam Rathaus
> Sent: Thursday, September 25, 2003 12:28 PM
> To: [EMAIL PROTECTED]
> Subject: Israeli NTP server with support for Day Light Savings
> 
> 
> Hi,
> 
> Lately I heard rumors of the idea of changing the Day Light Savings 
> from +-1 hour to +-2 hours, and changing it on less of a regular 
> basis that it is now (I didn't notice it was on a regular basis ... 
> It always appeared to be changing at random).
> 
> Anyhow my question is whether there is an Israeli NTP server that 
> keeps track of these things, allowing my organization, and others out 
> there to keep track of these time changes.
> 
> Thanks
> Noam Rathaus
> CTO
> Beyond Security Ltd.
> http://www.securiteam.com 
> 
> 
> ==
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
> 
> 
> 



To unsubscribe, send 
mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



unsubscribe

2003-09-25 Thread Sonia Tepikin
unsubscribe

_
MSN 8 with e-mail virus protection service: 2 months FREE* 
http://join.msn.com/?page=features/virus

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


mail origin verification

2003-09-25 Thread Moshe Kaminsky
Hi,

I was wondering, how can I verify that an email really arrived from 
where it claims? For example, how does the mailing list program know 
that this mail really came from me? I saw nothing in the headers that 
allows it.

Thanks,
Moshe

-- 
  Moshe Kaminsky <[EMAIL PROTECTED]>
  Home: 08-9456841


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Fw: unsubscribe

2003-09-25 Thread Lior Kaplan
Hi Sonia,

See what I've wrote to Shlomo...

Regards,

Lior Kaplan
[EMAIL PROTECTED]
http://www.Guides.co.il

Come to write at the forums: http://www.guides.co.il/forums

- Original Message -
From: "Lior Kaplan" <[EMAIL PROTECTED]>
To: "Shlomo Yona" <[EMAIL PROTECTED]>
Sent: Thursday, September 25, 2003 6:54 PM
Subject: Re: unsubscribe


> Hi,
>
> The message about unsubscribe should be sent to
> [EMAIL PROTECTED] and not to [EMAIL PROTECTED] as you did.
>
> Regards,
>
> Lior Kaplan
> [EMAIL PROTECTED]
> http://www.Guides.co.il
>
> Come to write at the forums: http://www.guides.co.il/forums
>
> - Original Message -
> From: "Shlomo Yona" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, September 25, 2003 5:43 PM
> Subject: unsubscribe
>
>
> >
> >
> > =
> > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > the word "unsubscribe" in the message body, e.g., run the command
> > echo unsubscribe | mail [EMAIL PROTECTED]
> >
> >
> >
> >
>


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: live website mirroring

2003-09-25 Thread Lior Kaplan
As far as I know, the cost of SAN is very high. It also gives your more GB
then you need. And if you need less GB than what given - you just pay too
much extra on each GB.

Also, don't forget the equipment using to work with fiber optic cables
(control cards, switches and so on).

At this cost I think you can build a HA solution:
1. A red rubin DNS.
2. heart bit.
3. using another computer for db/files and two servers to serve the files
(sure, has lower performance).


Regards,

Lior Kaplan
[EMAIL PROTECTED]
http://www.Guides.co.il

Come to write at the forums: http://www.guides.co.il/forums

- Original Message -
From: "Dan Fruehauf" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, September 25, 2003 7:39 PM
Subject: Re: live website mirroring


> On Thursday 25 September 2003 11:45, [EMAIL PROTECTED] wrote:
> it was probably my mistake, i said NAS, but i meant SAN (Storage Area
> Network).
> I can see people are showing interest, so i'll give some more details on
what
> were doing at work.
>
> Assuming one server is always active, and the other one is passive, we map
the
> same disks drives to them through the SAN (while only one server mounts
the
> storage at a given time).
> when a failover happens, the passive server "steals" the ip of the active
> server, and it's storage as well and mounts it.
> after this, the application is being executed and all should be fine.
> what's not too good is that sessions are lost, so if youre application is
> stateful, your users will feel the crash that happened, while if it's
> stateless the damage will be much smaller.
>
> Dan.
>
> > Sagi Bashari wrote:
> > >> It's a possible solution, but:
> > >>
> > >> 1. The NAS is still a single point of failure.
> > >> 2. They are talking about having a server at a different location,
> > >> so they'll need to replicate the NAS as well.
> > >
> > > We would like to do this with our current hardware at this stage, we
> > > already have RAID1 on both servers so I would just like to keep the
> > > arrays identical.
> >
> > As far as I understood it, the meaning of "NAS" is that you'll have
> > common storage accessed over the network ("NAS" = "Network Attached
> > Storage"). What does this have to do with each server having its own
> > RAID?
> >
> > BTW, If you already have RAID 1 (mirroring) and if you have more than
> > one disk on each mirror side (i.e. at least 4 disks total in each
> > mirror) then you better do RAID 0+1 (mirroring over stripping), to
> > enhance your access times.
> > (e.g. http://www.acnc.com/04_01_0p1.html)
> >
> > > Right now we will stick to having both servers at the same location,
my
> > > question was about changing the IP address dynamically if something
> > > happens if we ever decide to setup a backup server on another
location.
> >
> > You had two questions, haven't you?
> >
> > As for this IP question:
> >
> > 1. If you want the backup server to serve also at "regular times"
> > then just advertise both addresses in A records in DNS, the DNS
> > server will alternate their order when resolving the server's address
> > which will be a very cheap way to load-balance between them.
> >
> > 2. If you just want the bakcup server to be accessed only when the
> > primary one goes down then the only way I can think off right now is
> > with having setting the A record with a very short time to live (5-15)
> > minutes, as much as you can stand with having an inaccessible server)
> > so your DNS will be accessed almost every time the site is accessed,
> > when the primary goes down (which can be discovered with various High
> > Availability solutions) the secondary updates your DNS server and takes
> > over control.
> >
> > See http://linux-ha.org/ for instance.
> >
> > (1) and (2) can be implemented together (advertise both, when one
> > server goes down the other will delete its address from DNS, when the
> > downed server goes back up it will register with the DNS).
> >
> > There are also mailing lists, forums and sites about Linux high
> > availability, maybe you'll find there more knowledgeable crowde, though
> > I for one would be curious to hear what you decided to do.
> >
> > >> My suggestion for a general direction to investigate:
> > >>
> > >> 1. Check rsync more closely - as far as I remember from using it, it
> > >> is actually a very efficient program in CPU, memory, and network
> > >> usage.
> > >
> > > Yes, but I'm not sure that running it every 10 minutes is a good idea,
> > > especially if you have many files and some of them are being changed
> > > while rsync is running.
> >
> > Have you conducted your own tests or found results of such tests?
> > In general, rsync is supposed to cope well with changing files.
> >
> > > I found out about a kernel module named "enbd" which is supposed to do
> > > RAID over network somehow, but I would like to hear about the
experience
> > > of others before I start to play with it.
> >
> > Never heard of it, though I 

Re: mail origin verification

2003-09-25 Thread Lior Kaplan
AFAIK, you can't. Just by adding PGP over the content of the mail and
comparing it to the sender's signature.

The SMTP server can ask the user for auth. but you can't know that.

Regards,

Lior Kaplan
[EMAIL PROTECTED]
http://www.Guides.co.il

Come to write at the forums: http://www.guides.co.il/forums

- Original Message -
From: "Moshe Kaminsky" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, September 25, 2003 8:33 PM
Subject: mail origin verification


> Hi,
>
> I was wondering, how can I verify that an email really arrived from
> where it claims? For example, how does the mailing list program know
> that this mail really came from me? I saw nothing in the headers that
> allows it.
>
> Thanks,
> Moshe
>
> --
>   Moshe Kaminsky <[EMAIL PROTECTED]>
>   Home: 08-9456841
>
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>
>
>


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: mail origin verification

2003-09-25 Thread Gilad Ben-Yossef
On Thursday 25 September 2003 21:33, Moshe Kaminsky wrote:
> Hi,
>
> I was wondering, how can I verify that an email really arrived from
> where it claims? For example, how does the mailing list program know
> that this mail really came from me? I saw nothing in the headers that
> allows it.

It's very simple - it doesn't. You can sometime make some inteligent 
guesses based on SMTP headers, but nothing really secure.

If you want (pretty) good  authenticity use GPG.

Gilad

-- 
Gilad Ben-Yossef <[EMAIL PROTECTED]>
http://benyossef.com


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: mail origin verification

2003-09-25 Thread kaminsky
On a second thought, I assume that the list does not try very hard to capture
fake "from" addresses... :)

A close scruteny on the mail headers will show that this specific message
did not originate in math.huji, if you know what I mean.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: mail origin verification

2003-09-25 Thread Moshe Kaminsky
That's what I meant. The fact that some technion address appear in the
headers is not a big consolation. If you send the mail from your own
machine, it might come from localhost.localdomain (as it does in my
case). Basically, you are saying that people have absolutely no problem
sending e-mails that appear to come from me. I find it quite amazing.

+ [EMAIL PROTECTED] <[EMAIL PROTECTED]> [25/09/03 22:21]:
> On a second thought, I assume that the list does not try very hard to capture
> fake "from" addresses... :)
> 
> A close scruteny on the mail headers will show that this specific message
> did not originate in math.huji, if you know what I mean.
> 
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
> 

-- 
Linux, cause I reboot less than windows users reinstall...

  Moshe Kaminsky <[EMAIL PROTECTED]>
  Home: 08-9456841


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: live website mirroring

2003-09-25 Thread linux-il
Dan Fruehauf wrote:

On Thursday 25 September 2003 11:45, [EMAIL PROTECTED] wrote:
it was probably my mistake, i said NAS, but i meant SAN (Storage Area 
Network).

But still, wouldn't that keep the NAS as a single point of failure? Or 
is the NAS
implemented by some HA cluster of servers?
Also, the original author said, as far as I understood it, that when the 
backup
server moves to a separate location he won't be able to use the same IP (or
maybe he can channel the same IP over IP?)

what's not too good is that sessions are lost, so if youre application is 
stateful, your users will feel the crash that happened, while if it's 
stateless the damage will be much smaller.

If your application is writen as a Java web-app then you can take 
advantage of
clustered Servlet engines, which enable sharing of sessions in a 
cluster, just
for this kind of situations (in addition to the scalability advantage).

Does PHP have such stuff?

--Amos

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: live website mirroring

2003-09-25 Thread Shachar Shemesh
Lior Kaplan wrote:

As far as I know, the cost of SAN is very high. It also gives your more GB
then you need. And if you need less GB than what given - you just pay too
much extra on each GB.
Also, don't forget the equipment using to work with fiber optic cables
(control cards, switches and so on).
At this cost I think you can build a HA solution:
1. A red rubin DNS.
2. heart bit.
3. using another computer for db/files and two servers to serve the files
(sure, has lower performance).
 

What you are saying is called "NAS". With SAN, you can achieve true no 
single point of failure. If you disks are fiber connected, and you are 
doing RAID over them, you can have two disks (raid-1) serving two 
computers (not simultaniously). Viola!

With NAS, you introduce a third computer, that serves the files to both 
servers (single point of failure), you need some way to ballance the 
load (round robin DNS, in your case, which suffers serious problems when 
trying to cope with a failure).

I'm not even sure that the fiber option is so expensive (quite honestly, 
I don't know). In any case, it appears as if the entire industry is 
shifting torwards NAS (Netapps, special Emc hardware that incorporates 
an NFS server, etc.). This means that most IT managers agree with you, 
on one level or another.

 Shachar

--
Shachar Shemesh
Open Source integration consultant
Home page & resume - http://www.shemesh.biz/


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: live website mirroring

2003-09-25 Thread Sagi Bashari
On 25/09/2003 21:53, [EMAIL PROTECTED] wrote:

But still, wouldn't that keep the NAS as a single point of failure? Or 
is the NAS
implemented by some HA cluster of servers?
Also, the original author said, as far as I understood it, that when 
the backup
server moves to a separate location he won't be able to use the same 
IP (or
maybe he can channel the same IP over IP?)
For now both servers will be on the same location. I might have confused 
you when I asked that question, it wasn't directly connected to the 
original question (how to sync the data directories and database) - I 
just wanted to know if such thing as possible.

You confirmed my original thoughts about the DNS in your previous message.


what's not too good is that sessions are lost, so if youre 
application is stateful, your users will feel the crash that 
happened, while if it's stateless the damage will be much smaller.

If your application is writen as a Java web-app then you can take 
advantage of
clustered Servlet engines, which enable sharing of sessions in a 
cluster, just
for this kind of situations (in addition to the scalability advantage).

Does PHP have such stuff?


Thats not a problem. PHP uses plain files to store sessions data, so all 
I need to do is to set the sessions directory to a location that is 
shared by both servers.

Sagi



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: live website mirroring

2003-09-25 Thread Sagi Bashari
On 25/09/2003 21:58, Lior Kaplan wrote:

As far as I know, the cost of SAN is very high. It also gives your more GB
then you need. And if you need less GB than what given - you just pay too
much extra on each GB.
 

Exactly. Those solutions are way out of our current budget - and right 
now the files that we store outside the database do not even reach 1GB 
so we won't invest in such expensive solution.

3. using another computer for db/files and two servers to serve the files
(sure, has lower performance).
 

We don't need this, our system runs perfectly on our server. My original 
idea was having 1 low end PC as a backup - not as an extra server (it 
won't be used when the main server is up).

So going back to my original question: is there a simple way to 
synchronize a directory between two linux servers, like rsync does -- 
but in real time?

Sagi



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: mail origin verification

2003-09-25 Thread Nadav Har'El
On Thu, Sep 25, 2003, Moshe Kaminsky wrote about "Re: mail origin verification":
> That's what I meant. The fact that some technion address appear in the
> headers is not a big consolation. If you send the mail from your own
> machine, it might come from localhost.localdomain (as it does in my
> case). Basically, you are saying that people have absolutely no problem
> sending e-mails that appear to come from me. I find it quite amazing.

Welcome to the world of SMTP (the "Simple Mail Transfer Protocol", the
standard protocol used to send mail on the Internet). Circa 1992 I used
to amaze my friends (those who studied in the Technion and had email
addresses, that is) by sending them email "from" [EMAIL PROTECTED]
Nothing has changed since...

PGP (or the freeer GPG) is a good solution for mail authentication (and
privacy) that lets you "sign" your email in an unfakeable fashing, and yet
does not require central authentication [1]. It is not trivial to understand
PGP's concepts, but if you are willing to spend a few hours learning them
you might actually like it. And best of all, GPG is free software.

Just watch out: do you really want each and every one of your emails to
be 100% traceable to you? After sending fakable email for so many years,
I got used to it, and I actually started to get scared that people could
prove that I sent a certain email. Sometimes I write stupid things on
this list - why would I want not to be able to deny that I wrote them? :)
This is why I never sign my outgoing email, even though I'm perfectly
capable technically to do so. I do sign other things that I deem important
enough - like free software packages I publish. I think we had this discussion
on this list a while ago, so I won't continue further.

and now for the Educational Footnote of the week ;)

[1] An example of central authentication is government-issued ID cards
or driver licenses. Another example are credit-cards issued by certain
large (and supposedly trustworthy) companies. Yet another example (on the
Internet) are SSL certificates issued by certain companies called "certificate
authorities" (CAs). The problem with all those centralized schemes is that
they require a central entity to authorize you - this usually requires
significant fees, and a significant amount of effort and red-tape to set up.

Decentralized systems like PGP, on the other hand, let anyone invent their
own unique identity (or several such identities). How does that help in
authentication you might ask? Well, the "trick" is that nobody trusts just
any random identity shown to them - you only recognize the identities sent
to you by friends you know from real-life and you previously got their
PGP identities from secure channels (like face-to-face meetings). Also,
if your friends recognize other people, you can recognize (to a slightly
less degree of confidence) your friends' friends', and so on. This is
called a Web of Trust.

For example, I recognize Muli's key because he showed it to me when we
were in last year's August Penguin event. Muli might have signed with his
key a statement that he knows Linus Torvalds' key because he (may have)
met Linus in a conference last month. Now, if Linus Torvalds sends me
a signed email, I can recognize his signature to be genuine (with a certain
degree of confidence) - even though I never met him before, and no central
authority has decreed this signature to be authentic.

All the operations I mentioned above are made secure and unfakable by using
public-key cryptography (it's a very interesting mathematical subject,
really, you'll like it ;)).

-- 
Nadav Har'El|Friday, Sep 26 2003, 29 Elul 5763
[EMAIL PROTECTED] |-
Phone: +972-53-790466, ICQ 13349191 |I had a lovely evening. Unfortunately,
http://nadav.harel.org.il   |this wasn't it. - Groucho Marx

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: linux compatible online maps site?

2003-09-25 Thread Ilya Konstantinov
On Thu, Sep 25, 2003 at 05:20:23PM +0300, Ittay Dror wrote:
> On Thu, 2003-09-25 at 16:27, Alon Barzilai wrote:
> > hi,
> > 
> > try emap ( http://www.emap.co.il )
> > It works for me with mozilla 1.4.
> 
> upgraded to the latest mozilla and emap (still) doesn't work for me.
> afaik there's a problem in flash<->javascript interaction in mozilla.

There's no Java or Flash used on this site, just cleverly-made
cross-browser DHTML (JavaScript). Really a piece of fine work!

Works on Mozilla 1.4. Java was not loaded. Flash was only used for
the ad banner.

BTW, their site is actually based on a commercial product by ESRI. See
a demo at:
http://maps.esri.com/website/Viewer/presentation/compass/map.asp?Cmd=INIT

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Israeli NTP server with support for Day Light Savings

2003-09-25 Thread Vadim Vygonets
Quoth Shachar Shemesh on Thu, Sep 25, 2003:
> NTP gives out the time in UTC/GMT/Zulu/whatever they call it now.

To be precise, timezone is irrelevant in context of NTP.

> I know, for my part, that the debian maintainers have been doing a 
> wonderful job of keeping my timezone info on my machine up to date. 

It's not Debian, actually (just because it makes more sense to
maintain it in one place for all OSes).
http://www.twinsun.com/tz/tz-link.htm

Vadik.

-- 
To err is human, to moo bovine.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Re: Israeli NTP server with support for Day Light Savings

2003-09-25 Thread linux-il
Vadim Vygonets wrote:

Quoth Shachar Shemesh on Thu, Sep 25, 2003:
 

NTP gives out the time in UTC/GMT/Zulu/whatever they call it now.
   

To be precise, timezone is irrelevant in context of NTP.

To be even more precise - *LOCAL* timezone is irrelevant, but NTP
must keep the time in SOME timezone so you can relate to it when
translating to a convenient timezone by date(1) and friends. That is
what UTC (a universal timezone, which happens to be similar (not
identical) to GMT) is about.
It's not Debian, actually (just because it makes more sense to

maintain it in one place for all OSes).
http://www.twinsun.com/tz/tz-link.htm
But do other distributions keep the Israeli timezone up-to-date out
of the box? I didn't know about the link above and didn't have to go to
Ephraim's TZ page at HUJI CS (the real authority for Israeli UNIX
timezone files) since I installed Debian except in order to tell Linux
users of other distributions how to keep up with the Israeli TZ, it's
just a question that never comes up when you use Debian unstable.
--Amos



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]


Re: mail origin verification

2003-09-25 Thread Muli Ben-Yehuda
On Fri, Sep 26, 2003 at 01:02:20AM +0300, Nadav Har'El wrote:

> For example, I recognize Muli's key because he showed it to me when we
> were in last year's August Penguin event. Muli might have signed with his
> key a statement that he knows Linus Torvalds' key because he (may have)
> met Linus in a conference last month. Now, if Linus Torvalds sends me

Actually, if Linus showed his face there, I must've been too busy
hacking or chatting on IRC to see ;-) I did meets lots of other people
whose code we all run every day. 

> a signed email, I can recognize his signature to be genuine (with a certain
> degree of confidence) - even though I never met him before, and no central
> authority has decreed this signature to be authentic.

Stupid geek bragging: according to the latest keyanalyze report
(http://keyserver.kjsl.com/~jharris/ka/2003-09-07/top1000table.html) I
am number 733 in the global web of trust. Nyah ;-) 
-- 
Muli Ben-Yehuda
http://www.mulix.org



signature.asc
Description: Digital signature