Re: [CentOS] sendmail many emails

2010-05-15 Thread mouss
Jerry Geis a écrit : > I was getting MANY emails from XXX.hinet.net - kind of filled my mqueue > directory. > I stopped sendmail. removed all the files in mqueue, added to sendmail > access a REJECT for hinet.net > This certainly seems to help - but is that the correct way to take care > of this

Re: [CentOS] OT: Possible for Malware against Windows boxes to attack Firefox on Linux?

2009-04-19 Thread mouss
Robert Heller a écrit : > At Sun, 19 Apr 2009 15:07:05 +0200 CentOS mailing list > wrote: > >> Robert Heller a écrit : >>> [snip] >>> >>> Linux does not care about file *names*. >> indeed Linux does not. but desktop managers do. That said, *.exe attacks > > Are you sure? I would think that *

Re: [CentOS] OT: Possible for Malware against Windows boxes to attack Firefox on Linux?

2009-04-19 Thread mouss
Robert Heller a écrit : > [snip] > > Linux does not care about file *names*. indeed Linux does not. but desktop managers do. That said, *.exe attacks should only affect systems running Wine. > [snip] ___ CentOS mailing list CentOS@centos.org http://l

Re: [CentOS] Postfix header check help

2009-01-13 Thread mouss
Plant, Dean a écrit : > Hi list, > > I have a requirement for a mail server that only allows email to pass > with a particular word in the subject line. > > Reading the header checks docs for Postfix I thought I may be able to > add this rule: > > !/^Subject: .*dingdong/ REJECT Need to add dingd

Re: [CentOS] restricting mails from "mail" command to specific domains only in postfix

2009-01-02 Thread mouss
ankush grover a écrit : > Hi Friends, > > I have configured Postfix mail server on Centos for relaying mails > from 5 linux servers (including itself) within the same LAN. The > postfix mail server should relay mails from these 5 linux servers for > specific domains only. For example hosts 192.16

Re: [CentOS] Test - please ignore

2009-01-02 Thread mouss
Anne Wilson a écrit : > On Friday 02 January 2009 13:04:45 Vandaman wrote: >> Anne Wilson wrote: >>> >> Hi, >> >> Welcome to CentOS. What can we do you for? >> > Hi, Vandaman. I had just made changes to my procmail system and needed a > test. CentOS is the last filter, so if that worked correct

Re: [CentOS] DNS resolver over IPv6

2008-12-30 Thread mouss
Kai Schaetzl a écrit : > Robert Moskowitz wrote on Mon, 29 Dec 2008 17:21:48 -0500: > >> nslookup > > is deprecated. it's no more deprecated (should we say: it is "re-precated"? :). I don't have a pointer right now (but run it and you should no more get a warning...). > Did you try with host

Re: [CentOS] IMAP rule problem

2008-11-29 Thread mouss
Anne Wilson a écrit : > I have a problem with local mail on this netbook. I'm > sure it's something obvious, but I could use another > brain's input. that would require surgery. you could try "another brain's output" instead ;-p > > Fri, 2008-11-28 13:15:27 - TCP Packet - > Source:192.168.0.

Re: THANKS - Re: [CentOS] [OT] List of all email users

2008-11-03 Thread mouss
Jussi Hirvi wrote: Thanks Mouss and others. I have now more than enough to get on with. mouss ([EMAIL PROTECTED]) kirjoitteli (2.11.2008 19:39): why comma? isn't LF better (one user per line)? LF or comma, it doesn't matter much. I said comma, because I am going to utilize the lis

Re: [CentOS] [OT] List of all email users

2008-11-02 Thread mouss
Jussi Hirvi wrote: This is not CentOS-specific, hence OT. I need a list of all email users on my system (there are hundreds of them). The list could be extracted from /etc/aliases and the virtusertable. Does anyone know of a script that would do this automatically? It would have to - exclude c

Re: [CentOS] Help with a sun cobalt with sendmail and centos with postfix

2008-10-24 Thread mouss
Erick Perez a écrit : > Hi, > I have a customer with a sun cobalt running Sendmail 8.10.2/8.10.2 and > we are phasing out the sun cube due to some limitations. So we have > installed a new centos 5.x server. > the format of our current emails are [EMAIL PROTECTED] and the new > format will be [EMAI

Re: [CentOS] Delete all mail users data (mail server)

2008-10-20 Thread mouss
Roberto Pereyra a écrit : > Hi > > Please I would like to delete all users date mail (not accounts) in my > mail server box. > > I using Centos 5 and Virtualmin with postifx (maildir) and dovecot and > sasl auth. > > Once I erased simply the files in the maildir folders and broke the > dovecot s

Re: [CentOS] ls and rm: "argument list too long"

2008-10-18 Thread mouss
Jussi Hirvi a écrit : > Since when is there a limit in how long directory listings CentOS can show > (ls), or how large directories can be removed (rm). It is really annoying to > say, for example > > rm -rf /var/amavis/tmp > > and get only "argument list too long" as feedback. I doubt this

Re: [CentOS] Postfix problem

2008-10-16 Thread mouss
Paolo Supino a écrit : > > Hi > I didn't think of checking if Sendmail is the one sending the email or > not. I will have to check this out. > I will only have access to this server next Wednesday. So until then I > can't check anything or post anything ... > If you find that it's sendmail,

Re: [CentOS] Postfix problem

2008-10-15 Thread mouss
Paolo Supino a écrit : > Hi > > I have a CentOS 4.2 server with postfix. The problem I'm having is > that postfix insists on using $myhostname in the from field even if I Prove that it is postfix that does so, and not Sendmail. show logs. > instruct it to use $mydomain in /etc/postfix/main.cf

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread mouss
Kai Schaetzl a écrit : > Ralph Angenendt wrote on Tue, 14 Oct 2008 17:24:08 +0200: > >> If you don't know the smallest MTU on the path to the mail server, you >> might not be able to send packets over that path, especially if DF is >> set. > > But if it's not set? Shouldn't most devices have it n

Re: [CentOS] Sendmail and pmtu discovery

2008-10-14 Thread mouss
Sean Carolan a écrit : > We have an issue with some customers who refuse to accept ICMP traffic > to their mail servers. It seems that they have put Mordac, preventer > of information services in charge of their firewall policy > (http://en.wikipedia.org/wiki/List_of_minor_characters_in_Dilbert#Mo

Re: [CentOS] my postfix ignores myhostname parameter

2008-10-13 Thread mouss
David Hláčik a écrit : > Hello guys, > > I do not know how it is posible : > > *vi /etc/postfix/main.cf * > > > # INTERNET HOST AND DOMAIN NAMES > # > # The myhostname parameter specifies the internet hostname of this > # mail system. The default is to use the fully-qualifie

Re: [CentOS] sudo

2008-10-10 Thread mouss
[EMAIL PROTECTED] a écrit : > Hi > > Biz_User needs to switch to Sales_User, and I tried following in > sudoers: > Biz_User ALL=(Sales_User) ALL > > but I get following error when I run sudo su - Sales_User > > "Sorry, user Biz_User is not allowed to execute '/usr/bin/su - > Sales_User' > as root

Re: [CentOS] NameVirtualHost and CGI Problems

2008-10-10 Thread mouss
Michael Peterson a écrit : >> Michael Peterson wrote on Thu, 09 Oct 2008 16:09:54 -0500: >> >> >>> You need to remove the :80 in the VirtualHost declarations that contains >>> Servername entries. >>> No, the ':80' is ok. >> No, that's perfectly ok and recommended. His problem was that

Re: [CentOS] For newcomers to the mailing list.

2008-10-02 Thread mouss
MHR wrote: On Thu, Oct 2, 2008 at 5:28 AM, <[EMAIL PROTECTED]> wrote: 1. Don't top post. Bottom post instead. 2. Don't hijack another thread with new unrelated info. Create a new thread for a new topic. 3. Trim your responses. Leave in the attribution lines of any included previous posts

Re: [CentOS] DKIM

2008-09-26 Thread mouss
Kai Schaetzl wrote: Mouss wrote on Thu, 25 Sep 2008 16:20:09 +0200: oh please no. hotmail don't delete my mail and I don't have an SPF record. no do yahoo/gmail. and this was before I implemented DKIM. and I've recently worked for a project where SPF didn't help with hotma

Re: [CentOS] DKIM

2008-09-25 Thread mouss
Kai Schaetzl wrote: Ralph Angenendt wrote on Wed, 24 Sep 2008 20:23:50 +0200: That's supposed to help with what regarding his problem? Hotmail seems to delete all mail from domains without SPF if it's not coming from the MX. Yahoo might be doing the same. oh please no. hotmail don't dele

Re: [CentOS] Re: DKIM

2008-09-25 Thread mouss
Josh Donovan wrote: Karanbir Singh wrote: Bob Hoffman wrote: Yeato hell with yahoo. I will just make all members use a different email service. Aint worth the effort. I think this conversation is at a point where it would make more sense on a yahoo / email specific list. Agreed! Its

Re: [CentOS] Re: DKIM

2008-09-25 Thread mouss
Bob Hoffman wrote: I think this conversation is at a point where it would make more sense on a yahoo / email specific list. Agreed! Its amazing to see the childishness of not being able to get one's server in order, ignoring Yahoo's FAQ's and then this kind of BS. Thanks, Josh. Um, no

Re: [CentOS] Re: DKIM

2008-09-24 Thread mouss
Craig White wrote: On Wed, 2008-09-24 at 19:00 -0400, Bob Hoffman wrote: And to follow up on the whole Domain keys. I found at least 30 people online who have the same issue, but they have working DKIMs but still being junked. Yeayahoo...whee. well it's not just yahoo as I know for ce

Re: [CentOS] Re: DKIM

2008-09-24 Thread mouss
Bob Hoffman wrote: Apparently now when I send an email from my yahoo account to the server, it just disappears. So now yahoo is eating the mail going to me. can you try after changing your hostname from "mail.creativeprogramdesigners.com" to "bobhoffman.com". I mean the name that appears i

Re: [CentOS] DKIM

2008-09-24 Thread mouss
Andrew Norris wrote: John Kordash wrote: mail.bobhoffman.com != bobhoffman.com Careful here. Email senders have nothing to do with MX records. Email receivers do. I believe bobhoffman.com is the email sender in this case. I would doubt this is an issue. Any split in/out mail server is g

Re: [CentOS] DKIM

2008-09-24 Thread mouss
Bob Hoffman wrote: $ host 72.35.68.56 Host 56.68.35.72.in-addr.arpa. not found: 3(NXDOMAIN) $ host 72.35.68.57 Host 57.68.35.72.in-addr.arpa. not found: 3(NXDOMAIN) $ host 72.35.68.62 Host 62.68.35.72.in-addr.arpa. not found: 3(NXDOMAIN) same for the IPs that don't belong to you in that

Re: [CentOS] Re: DKIM

2008-09-24 Thread mouss
RobertH wrote: prove what? if the machine with an rDNS of bobhoffman.com sends mail from <[EMAIL PROTECTED]>, and is the MX of this domain, would anybody think this is a forgery? Mouss... I mean Ratatouille :-) I'm feeling hungry now! Answer: Possibly Depends on many fact

Re: [CentOS] DKIM

2008-09-24 Thread mouss
Bob Hoffman wrote: If we ignore the surrounding IPs (too many without rDNS), he has a very simple setup, that should not cause any problems. generic PTRs are a different matter. Surrounding ips? A lot was from my computer to the smtp server..the rest was just mine. It is really simple, no

Re: [CentOS] DKIM

2008-09-24 Thread mouss
Andrew Norris wrote: Back to the PTR RR: $ dig +short MX bobhoffman.com 10 mail.bobhoffman.com. $ dig +short A mail.bobhoffman.com 72.35.68.59 $ dig +short -x 72.35.68.59 bobhoffman.com. ^^^ mail.bobhoffman.com != bobhoffman.com so what? mail.bobhoffman.co

Re: [CentOS] Re: DKIM

2008-09-24 Thread mouss
Bob Hoffman wrote: AFAIR yahoo only looks for proper SPF records and then looks at content so far. My users interact with them all the time. Out of curiosity: What happens if you don't have SPF records? Ralph Initially when I had to deal with sending to yahoo I would get a mix of mail du

Re: [CentOS] Re: DKIM

2008-09-24 Thread mouss
Ralph Angenendt wrote: Scott Silva wrote: AFAIR yahoo only looks for proper SPF records and then looks at content so far. My users interact with them all the time. Out of curiosity: What happens if you don't have SPF records? you'll be beaten to death by SPF fans. other than that, nothing.

Re: [CentOS] Changing hostname?

2008-09-13 Thread mouss
mouss wrote: admin wrote: It's worth checking that /etc/sysconfig/network also has whatever hostname you wish to use configured in it. To effect changes, it may be necessary to restart the network: service network restart no need to restart, just run the hostname command to set

Re: [CentOS] Changing hostname?

2008-09-13 Thread mouss
admin wrote: It's worth checking that /etc/sysconfig/network also has whatever hostname you wish to use configured in it. To effect changes, it may be necessary to restart the network: service network restart no need to restart, just run the hostname command to set your system hostname.

Re: [CentOS] mysql

2008-09-06 Thread mouss
nate wrote: Mad Unix wrote: However, am thinking to do the following mysqlhotcopy --allowold --flushlog -u --password= /var/backups/mysql/ mysqlhotcopy doesn't support InnoDB last I checked(past week). InnoDB is generally the suggested engine to use for MySQL th

Re: [CentOS] Virtual email with Postfix, MySQL and Dovecot problem

2008-09-05 Thread mouss
Lunix1618 wrote: Hello all, Anyone of you success to install virtual email with Postfix, MySQL and Dovecot on CentOS 5.2 ? I am running: mysql-server-5.0.45-7.el5, postfix-2.3.3-2.el5.centos.mysql_pgsql and dovecot-1.0.7-2.el5 on CentOS 5.2 box and can not make it work. All deamons (mysqld,

Re: [CentOS] OT: Migration from Evolution to Thunderbird (Thunderbird mbox files)

2008-09-04 Thread mouss
Lanny Marcus wrote: My email is on gmail.com IMAP and yes, If it's on imap, then forget about TB mbox files. the messages are on the server (TB can cache messages, but you are not supposed to know how it exactly does. so don't play this game). I could start over with Thunderbird by down

Re: [CentOS] OT: Migration from Evolution to Thunderbird (Thunderbird mbox files)

2008-09-04 Thread mouss
Lanny Marcus wrote: Background is that I have been using Evolution for my MUA for a number of years. Migrated to Evolution from Mozilla Mail. I only use Evolution for email and contacts. Getting bored with the issues (frequently not being able to exit and needing to kill it; Bug Buddy popping

Re: [CentOS] Anti Virus and Anti Spam

2008-08-30 Thread mouss
horas simalango wrote: New be in linux! Currently I have Install DNS, Email and Web server using centos 4.3. All functions are running properly! What anti virus and anti spam recomended for me to install to my server? What I have to configure after installing anti virus and anti spam? Would some

Re: [CentOS] Lies wide open ...!

2008-08-23 Thread mouss
ABBAS KHAN wrote: Being as a Windows geek tho, I consider Linux as a more powerful server operating system than Windows. When I saw OS comparison at http://www.microsoft.com/windowsserver/compare/linux/server-security.mspx I was shocked! Showed it to a friend and he felt like being brainwashed :D

Re: [CentOS] Unknown mail transport error

2008-08-20 Thread mouss
Anne Wilson wrote: I've just signed a bunch of keys using the caff tools. A few minutes ago they started bouncing back at me, with the above error. Received: by anne-wireless.lydgate.net (Postfix, from userid 500) id CA4B230EF7; Wed, 20 Aug 2008 11:15:39 +0100 (BST) MIME-Version: 1.0 S

Re: [CentOS] How to detect whether running on VMware?

2008-07-25 Thread mouss
Kai Schaetzl wrote: Tony Mountifield wrote on Thu, 24 Jul 2008 11:47:04 + (UTC): Does anyone know how a program, script or shell user can best determine whether the machine is running on bare metal or is a VMware guest? AFAIK, VMWare uses vmnet32 drivers for ethernet and possibly others f

Re: [CentOS] Ideas for stopping ssh brute force attacks

2008-07-23 Thread mouss
Ned Slider wrote: [snip] I don't think anyone is suggesting running SSH on a non-standard port as a sole means of defence, but rather as part of a layered approach where it is very effective in what it is designed to do - namely to vastly reduce the number of random brute-forcing attempts and

[CentOS] [OT] bad header (Was: Three Identical systems - short cut to setting up the drives?)

2008-07-04 Thread mouss
Robert Moskowitz wrote: I am building the Clonezilla live CD now is there any reason why your system sends multiple References: headers: References: <[EMAIL PROTECTED]> References: <[EMAIL PROTECTED]> References: <[EMAIL PROTECTED]> This is invalid according to RFC2822, section 3.6, wher

Re: [CentOS] enabling maildir @ cli

2008-06-13 Thread mouss
Ray Leventhal wrote: - Dovecot uses Maildir format (not mbox), so if you install ISPConfig on the server, please make sure you enable Maildir under Management -> Server -> Settings -> Email. ISPConfig will then do the necessary configuration. Since I'm ssh'd in to the box and X isn't in

Re: [CentOS] enabling maildir @ cli

2008-06-13 Thread mouss
Matt Hyclak wrote: On Fri, Jun 13, 2008 at 03:28:28PM -0400, Ray Leventhal enlightened us: I'm following a how-to for ISPConfig using CentOS5.1 and have run into the following instruction: - Dovecot uses Maildir format (not mbox), so if you install ISPConfig on the server, please make

Re: [CentOS] firewalled NFS

2008-06-04 Thread mouss
Jordi Prats wrote: I've no iptables, I'm using a PIX to firewall them :) did you open the ports on the pix? On Wed, Jun 4, 2008 at 1:53 AM, Jay Leafey <[EMAIL PROTECTED]> wrote: Jordi Prats wrote: Hi, I'm trying to setup a firewalled NFS server. I've configured my server (CentOS

Re: [CentOS] Re: ssl and NameVirtualHost

2008-04-10 Thread mouss
Scott Silva wrote: on 4-9-2008 6:14 PM Tony Schreiner spake the following: Jay Leafey wrote: Tony Schreiner wrote: Kai Schaetzl wrote: Tony Schreiner wrote on Wed, 9 Apr 2008 15:29:16 -0400: However, you didn't provide any of the information I asked for. You are not talking of www.bc.edu, d

Re: [CentOS] ssl and NameVirtualHost

2008-04-09 Thread mouss
Tony Schreiner wrote: I recently aquired a Verisign SSL certificate for my web server on Centos 4, with apache 2.0.59 from centosplus. It however doesn't seem to be working the way I've set it up, browsers connect but are told the certiticate is not recognized. Showing more info, the informat

Re: [CentOS] Apache Authorization Access Control - location of htpasswd in Centos 5.1?

2008-04-06 Thread mouss
Pam Astor wrote: Hi, I’m trying to set up a private family web site for genealogy, and want to set up Apache Authorization access control for this site, and once the user has logged in has access to the entire site. I’ve been reading the info at http://httpd.apache.org/docs/2.2/howto/auth.html

Re: [CentOS] using conf.d files to override options in httpd.conf

2008-04-04 Thread mouss
Johnny Tan wrote: Like many of you, I like to avoid modifying /etc/httpd/conf/httpd.conf as much as possible. Instead, modifying or adding files in /etc/httpd/conf.d However, because /var/www/html is declared within the main httpd.conf and certain directives are set along with "AllowOverride

Re: [CentOS] IMAP security

2008-03-28 Thread mouss
Anne Wilson wrote: On Friday 28 March 2008 11:06:06 Ned Slider wrote: Anne Wilson wrote: I have port 143 open so that I can get my mail when away from home. Occasionally, though, my router reports things like Thu, 2008-03-27 02:00:11 - TCP Packet - Source:200.122.134.9,3821 Destination

Re: [CentOS] Question on mail

2008-03-27 Thread mouss
Jerry Geis wrote: All of a sudden I am getting this error this morning. -- <<< 553 5.3.0 Spam blocked see: http://ordb.org/lookup/?host=mp;{client_addr} 501 5.6.0 Data format error Content-Type: message/delivery-status Action: failed Status: 5.3.0 Diagnosti

Re: [CentOS] Postfix - Maildir - MySQL - Cyrus Imap - Sieve

2008-03-27 Thread mouss
Tom Brown wrote: I would like to use the above config, i think. Can cyrus-imap work nicely with Maildir ? If so is there one available thats configured with msql support? In the past i have used courier-imap but ideally i want to use sieve if it's just for sieve, you can use dovecot. it

Re: [CentOS] Postfix - Maildir - MySQL - Cyrus Imap - Sieve

2008-03-26 Thread mouss
Tom Brown wrote: I would like to use the above config, i think. Can cyrus-imap work nicely with Maildir ? If so is there one available thats configured with msql support? In the past i have used courier-imap but ideally i want to use sieve if it's just for sieve, you can use dovecot. it's m

Re: [CentOS] Securing SSH

2008-03-26 Thread mouss
Tim Alberts wrote: So I setup ssh on a server so I could do some work from home and I think the second I opened it every sorry monkey from around the world has been trying every account name imaginable to get into the system. What's a good way to deal with this? - keep your ssh up to date. -

Re: [CentOS] Commands failing silently?

2008-03-25 Thread mouss
Dan Bongert wrote: mouss wrote: Dan Bongert wrote: Hello all: I have a couple CentOS 4 servers (all up-to-date) that are having strange command failures. I first noticed this with a perl script that uses lots of system calls. thoth(66) /tmp> uname -a Linux thoth.ssc.wisc.edu 2.6.9-67.

Re: [CentOS] Commands failing silently?

2008-03-24 Thread mouss
Dan Bongert wrote: Hello all: I have a couple CentOS 4 servers (all up-to-date) that are having strange command failures. I first noticed this with a perl script that uses lots of system calls. Basically, sometimes a command just won't run: thoth(52) /tmp> ls thoth(53) /tmp> ls thoth(54)

Re: [CentOS] /etc/resolv.conf changes

2008-03-24 Thread mouss
vincenzo romero wrote: Hello all, I'm getting frustrated attempting to understand; I googled and asked folks and am unable to get a straight answer. 1. How is the /etc/resolv.conf file maintained ? I do not seem to get a consistent result when I save resolv.conf configuration from GUI or by h

Re: [CentOS] simple DNS question - reverse nslookup fails.

2008-03-21 Thread mouss
vincenzo romero wrote: Hello all, I am trying to configure a subdomain DNS server on a Cent OS 5.1 - for my lab. Brief configuration: Lab machine ---> 192.168.17.2 (should respond to DNS queries from hosts in 192.168.16.0/20 network) 1. I would also like to forward any queries outside the ab

Re: [CentOS] clarifications

2008-03-20 Thread mouss
James B. Byrne wrote: Reply-To: <[EMAIL PROTECTED]> Sam Drinkard wrote: Hello all, I've been trying to get spamassassin and clamav working, but got really confused when I realized there are various incarnations of the software. Originally, I started out with just spamassassin, but learn

Re: [CentOS] remote command execution

2008-03-18 Thread mouss
Joseph L. Casale wrote: put everything in a shell script, and run the script. Yea, I tried that but neglected to see how it behaved from inside an ssh session. It works there but with plink :( Back to the drawing board... I just tried: % cat /tmp/test.sh nohup /usr/bin/tail -f /tmp/tes

Re: [CentOS] remote command execution

2008-03-18 Thread mouss
Joseph L. Casale wrote: nohup will allow you to run a command that is not connected to the shell: nohup command >> nohup.log & Devin, What is the correct way to encapsulate the command if its rather long. Just as a test, I am trying to run `dd if=/dev/random of=~/test bs=1024 count=5

Re: [CentOS] Server to server communication

2008-03-18 Thread mouss
D Steward wrote: Hi all, I have 2 servers online and wish them to communicate and exchange information with each other at times. I have been developing a web application which is extremely CPU-intensive, and since I don't want to overload the main server which deals with the apache/php/mysql stu

Re: [CentOS] Running network services as a non-root user

2008-03-16 Thread mouss
Craig White wrote: On Sun, 2008-03-16 at 15:33 -0500, Les Mikesell wrote: John R Pierce wrote: I am using open source Alfresco( alfresco.com ), written in java, which has own code for FTP, CIFS (running on tomcat apache and java). I need to run tomcat5 as root in order to achieve that

Re: [CentOS] Un Installing a hard drive in a Centos 5.1 box

2008-03-16 Thread mouss
Pam Astor wrote: Hi Guys, I'm fairly new to Linux and I'm trying to un install a hard drive from my Centos 5.1 box running KDE. When I built the PC, I installed two 500 gig maxtors in the tower, then I installed Centos. Now I've decided that I want to remove the slave drive and use it as an

Re: [CentOS] clarifications

2008-03-16 Thread mouss
Sam Drinkard wrote: Hello all, I've been trying to get spamassassin and clamav working, but got really confused when I realized there are various incarnations of the software. Originally, I started out with just spamassassin, but learned there is also an SA-milter. Can someone tell me wh

Re: [CentOS] Migrate Outlook Express mail to Thunderbird?

2008-03-14 Thread mouss
Jeff Larsen wrote: Taking a different approach than others... Load them back into Outlook Express on a Windows box. Open a gmail account and enable it for IMAP access. Configure Outlook Express for gmail/IMAP and copy the messages to gmail folders. Configure T-Bird on CentOS for gmail/IMAP and

Re: [CentOS] /etc/sysconfig/iptables on a stock CentOS 5 install

2008-02-26 Thread mouss
Tom Laramee wrote: Greetings: i have a pretty stock CentOS 5 machine with ports 80 and 22 exposed, so my /etc/sysconfig/iptables file is pretty standard/straightforward. my question is: how is this config file initially generated? i'd like to re-create it, and add a couple of rules so

Re: [CentOS] OFF Topic: mysql installation problem

2008-02-14 Thread mouss
Ed Morrison wrote: mouss wrote: # rpm -q mysql-libs mysql-libs-5.0.54-1.el4.centos so it's the same version, but: # rpm -ql mysql-libs|grep /etc /etc/ld.so.conf.d/mysql-i386.conf /etc/my.cnf has /etc/my.cnf. here are the contents if that could help. # cat /etc/my.cnf [mysqld] datadir

Re: [CentOS] OFF Topic: mysql installation problem

2008-02-14 Thread mouss
Ed Morrison wrote: mouss wrote: # yum install mysql mysql-server php-mysql # ls -a /var/lib/mysql . .. # rpm -qf /etc/my.cnf mysql-libs-5.0.54-1.el4.centos # service mysqld start Initializing MySQL database: [ OK ] Starting MySQL: [ OK ] [EMAIL PROTECTED] lib]# ls mysql ibdata1

Re: [CentOS] OFF Topic: mysql installation problem

2008-02-14 Thread mouss
Ed Morrison wrote: mouss wrote: But there isn't a my.cnf file in /etc/ if you want one, you need to create it. the package installs example file that you can use. In all my other mysql installs there has always been an /etc/my.cnf after the installation but you are correct this c

Re: [CentOS] OFF Topic: mysql installation problem

2008-02-14 Thread mouss
Ed Morrison wrote: Hi All: I'm trying to get mysql 5 installed on my CentOS 4.6 installation. I've installed mysql using yum: yum -y install perl-DBD-MySQL mysql-server mysql php-mysql mod_auth_mysql phpmyadmin mysqlclient Yum says it installed fine: Resolving Dependencies --> Populating

Re: [CentOS] securing web applications (Wiki CMS installation)

2008-02-12 Thread mouss
Johnny Hughes wrote: Simon Jolle wrote: 2008/2/11, James A. Peltier <[EMAIL PROTECTED]>: This is a very broad question to ask, however, I will appeal to the basics. 1) Use HTTPS whenever possible to avoid any passwords crossing the wire in clear text. 2) Ensure only the necessary modules are

Re: [CentOS] Security help desperately needed - more info

2008-02-07 Thread mouss
Anne Wilson wrote: /etc/hosts is fine. All possible connections on the lan are correctly defined. dns resolution is via my isp, and again the IP addresses are correctly set. That leaves the security settings, where I believe the problem is. So, let's start with iptables. I've never worked

Re: [CentOS] Security help desperately needed - more info

2008-02-07 Thread mouss
Milton Calnek wrote: Michael Simpson wrote: Hi there, Should the IP address supplied be the actual address for eth0 rather than the network address? ie 192.168.0.1/24 rather than 192.168.0.0/24 I dunno... what does 192.168.0.1/24 mean? this one is not always accepted. what does 192.168

Re: [CentOS] package 'synchronization' for multiple systems

2008-02-07 Thread mouss
Tim Alberts wrote: I'm setting up multiple systems and ideally I want the same package configuration on all of them. So I'm going through yum and rpm queries manually to try and get this done. There must be a better way. Is there a way to use yum or rpm to configure multiple systems with th

Re: [CentOS] system smtp server question

2008-02-07 Thread mouss
Luke Dudney wrote: There are lightweight SMTP clients that can be used as drop-in sendmail(1) replacements by speaking directly to a remote SMTP server instead of dropping the message in the local queue directory. One that I've used is mini_sendmail (http://www.acme.com/software/mini_sendmail/

Re: [CentOS] system smtp server question

2008-02-06 Thread mouss
Joseph L. Casale wrote: If I have a production mailserver and a series of Linux servers that all develop mail from logging etc, it seems slightly redundant to have so many smtp servers installed on each of those boxes simply forwarding mail as I choose to not have local delivery. Is there a me

Re: [CentOS] One approach to dealing with SSH brute force attacks.

2008-02-02 Thread mouss
Jay Leafey wrote: What I would I like to do is: - allow 22 from specific IPs - allow another port (redirected) from anywhere. this port is then redirected to 22. I do exactly this with a combination of SSH config options and iptables rules. In your /etc/ssh/sshd_config file, find the "Po

Re: [CentOS] Two Instances of Apache; Primary IP / Secondary IP

2008-02-01 Thread mouss
Al Sparks wrote: do you mean making apache use a specific IP when it proxies the request? (you really lost me, so I may be misunderstanding). why do need that at all? whatever IP is used should not matter since the backend will reply over the socket that was opened by the proxy (be it a productio

Re: [CentOS] One approach to dealing with SSH brute force attacks.

2008-02-01 Thread mouss
Les Bell wrote: mouss <[EMAIL PROTECTED]> wrote: If you consider this security through obscurity, then why not publish the list of your users on a public web page? after all, you should use strong passwords, so why hide usernames? << Usernames are comparatively hard to guess

Re: [CentOS] One approach to dealing with SSH brute force attacks.

2008-01-30 Thread mouss
James B. Byrne wrote: Message-ID: <[EMAIL PROTECTED]> On: Tue, 29 Jan 2008 07:30:11 -0600, Johnny Hughes <[EMAIL PROTECTED]> Subject Was: [CentOS] Unknown rootkit causes compromised servers SOME of the script kiddies check higher ports for SSH *_BUT_* I only see 4% of the brute force attemp

Re: [CentOS] Unknown rootkit causes compromised servers

2008-01-29 Thread mouss
Jim Perrin wrote: Along the lines of staying safe, now is probably a good time to check your password policies. 1. Don't allow root access to ssh. (modify /etc/ssh/sshd_config) why isn't this the default? 2. restrict root logins to only the local machine. (modify /etc/securetty) 3. Limit u

Re: [CentOS] Sendmail timout errors

2008-01-26 Thread mouss
Denis Croombs wrote: Denis Croombs wrote: I have 2 Centos servers that are currently giving me grief, I am getting the error:- SYSERR(root): timeout writing message to mail.server.co.uk Resource temporarily unavailable This is on both servers Any clues ? Yes, your MTAs see

Re: [CentOS] Two Instances of Apache; Primary IP / Secondary IP

2008-01-26 Thread mouss
Al Sparks wrote: Tried the apache group, and no response. Thought I'd try here. I have set up a development environment so that it mimics a production environment. The production environment has a proxy server (apache 2.x) that sends requests onto another back-end apache server, and of course

Re: [CentOS] Could not connect to host box.domain.tld

2008-01-25 Thread mouss
Craig White wrote: On Fri, 2008-01-25 at 16:09 +0100, mouss wrote: Craig White wrote: On Thu, 2008-01-24 at 22:46 +0100, mouss wrote: Craig White wrote: well, the opportune time to switch is probably when you are starting to set up a new mail server. Dovecot

Re: [CentOS] Could not connect to host box.domain.tld

2008-01-25 Thread mouss
Craig White wrote: On Thu, 2008-01-24 at 22:46 +0100, mouss wrote: Craig White wrote: well, the opportune time to switch is probably when you are starting to set up a new mail server. Dovecot is mostly featureless POP3/IMAP Come on. is it holy war time again? should I shoot

Re: [CentOS] Could not connect to host box.domain.tld

2008-01-24 Thread mouss
Craig White wrote: well, the opportune time to switch is probably when you are starting to set up a new mail server. Dovecot is mostly featureless POP3/IMAP Come on. is it holy war time again? should I shoot over cyrus software now or should we keep this list clean? If you like cryus softw

Re: [CentOS] centos authentication via ldap produces no name shell prompt

2008-01-20 Thread mouss
Dave wrote: Hello, I'm trying to set up centos 5.1 to authenticate against an openldap server. I've got the authentication working, in that i can log in as a user contained within the ldap database but not in the system passwd/group files. The problem is instead of a prompt that for exampl

Re: [CentOS] You can't get there from here -- SOLVED

2008-01-19 Thread mouss
Kai Schaetzl wrote: Miark wrote on Fri, 18 Jan 2008 17:55:32 -0500: The winning solution Nevertheless, Bowie's solution is the correct one. Indeed, 587 is the standard port for mail submission. http://www.ietf.org/rfc/rfc2476.txt http://www.ietf.org/rfc/rfc5068.txt and since "s

Re: [CentOS] name resolution question

2008-01-19 Thread mouss
Joe Greenseid wrote: Quoting Kai Schaetzl <[EMAIL PROTECTED]>: 1. nslookup is deprecated, use host 2. it interprets any hostname with a dot in it like an FQDN, e.g. it transforms abc.def -> abc.def. Host returns the same results. So there is no way to do name completion on any partial name

Re: [CentOS] You can't get there from here -- SOLVED

2008-01-18 Thread mouss
Les Mikesell wrote: Miark wrote: Thanks to everybody for the responses. The winning solution was Ricks (see below) which worked like a charm after poking a suitable hole in my firewall. I missed most of that conversation, but can't you configure postfix to use smtps on port 465 on both ends a

Re: [CentOS] Re: Re: Re: Re: Re: Re: What libs req'dto resolveDNSwithinachrootjail?

2008-01-18 Thread mouss
Eric B. wrote: but what is the benefit in managing the zone file instead of hosts.*? I mean, since you put the IP in the DNS zone file, why not put it in hosts.*? Looks like I prob. won't have a choice afterall. But was originally thinking that it would neater and easier to read by have FQDN

Re: [CentOS] Mounting /var directory to a new HardDisk

2008-01-18 Thread mouss
Indunil Jayasooriya wrote: On Jan 18, 2008 9:08 AM, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: For sure you will be able to mount /var on your new disk Thank you very much for it. but not before you boot single user and copy all the contents across manually and then modify /etc/fstab t

Re: [CentOS] Re: Re: Re: Re: Re: What libs req'd to resolveDNSwithinachrootjail?

2008-01-15 Thread mouss
Eric B. wrote: Can you post your complete hosts.allow and hosts.deny files? Not much to them actually: /chroot/tftpd/etc/hosts.allow: # # hosts.allow This file describes the names of the hosts which are # allowed to use the local INET services, as decided # by the '

Re: [CentOS] Re: What libs req'd to resolve DNS within a chroot jail?

2008-01-14 Thread mouss
Eric B. wrote: >>> I've been working at getting a tftp server up an running in a >>> chroot jail, and I have finally succeed getting almost everything >>> working. The server itself works fine, however, it is implemented >>> as a tcpwrapper application (ie: in.tftpd) and I am having trouble >>> get

Re: [CentOS] Can TFTPD run in a chroot jail?

2008-01-13 Thread mouss
Eric B. wrote: > Hi, > > I've been struggling with this problem for the last couple of hours and am > nowhere near solving the problem. I am trying to run a tftp server in a > chroot jail. Now perhaps I am being paranoid, but I would like to have it > launched from within its own jail even if

  1   2   >