Re: Cyrus21/ Vulnerability

Hello Christoph! Do not use testing or unstable on machines exposed to the public. There is no security support for them: http://www.debian.org/security/faq#testing Hmmm .. is this information accurate? apt-setup gives me: deb http://security.debian.org/ testing/updates main contrib non-free Is thi

Cyrus21/ Vulnerability

zd in sarge, or? Any better ideas to solve the problem? rgds, j. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Help with pureftpd config

tpd/auth/../conf/PureDB: "yes": No such file ?? ANdrew -- +++ Andrew Mancey Sys Admin, Network/info specialist Phone (592) 227-5989,227-6198 Sustainable Development Networking Programme (Guyana) http://www.sdnp.org.gy -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +

Postfix/X-Envelope-To

Hello All! I wondering is someone knows how to add an X-Envelope-To header to all incoming e-mails which reveal the "real" username even when working with virtuals. I tried several apoaches like: --- # cat /etc/procmailrc ENV_TO=$1 :0f * ENV_TO ?? . | formail -i "X-Envelope-To: $ENV_TO" :0fE | f

Re: status of VLAN support in Debian/Linux in general

; if the switches and servers are distributed to 2 rooms) Both Servers have one NIC per "network X". If you change to the new setup you will lose redundancy! (if this is not the question you setup will be fine) Rgds, j. Leonardo Boselli wrote: Il 11 Sep 2004 alle 21:30 Andre

Re: status of VLAN support in Debian/Linux in general

Replying to myself: 1.) tulip driver in 2.6 does work with VLAN (test was: ping -s 1472 vs. ping -s 1468) 2.) I wrote about a framesize of a tagged frame with 1504 byte I correct myself by quoting candelatech: --- 2 - 802.1q tagging adds an additional header field (4 Bytes) to the ethernet heade

Re: status of VLAN support in Debian/Linux in general

ch to terminate the vlan - there is a confirmed bug in the cisco asic. Don't wonder why the error LEDs blink. Mr. Sascha Pollok wrote a patch that add a padding to the frames so the cisco gets more happy. 6.) To our experience the usage of VLAN does not cause siginifcant CPU load

Re: ssh and root logins

Russell Coker wrote: On Tue, 10 Aug 2004 20:52, Dale E Martin <[EMAIL PROTECTED]> wrote: I've noticed a fair number of attempted root logins on my various boxes Same here. Also attempted logins to "test", "admin", and some other accounts. ^ ^ ^ ^ ^ ^ ^ ^^ Uh

Re: ssh and root logins

find this most secure--no more worries about password cracks (I just have to worry about the physical security of the USB key on my keychain). Regards, Mark -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net -- To UNSUBSCRIBE, email to

Re: Streaming Video Server

ny customers. Let's say classical broadcasting :) Good Luck! Andreas -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net On Fri, Jul 09, 2004 at 11:02:46AM +0200, Stefan Neufeind wrote: Or you might want to try out the Helix Server (from

Re: Streaming Video Server

ny customers. Let's say classical broadcasting :) Good Luck! Andreas -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net On Fri, Jul 09, 2004 at 11:02:46AM +0200, Stefan Neufeind wrote: Or you might want to try out the Helix Server (from

Re: email server - how to

Best to use 2U machines with the maximum number of disks IMHO. A 2U machine should be able to have 5 disks. I say: 9 Disks without problems. e.g. pcicase http://www.pcicase.de/catalog/produktweb/IPC-C2-X/IPC-C2D.htm

Re: email server - how to

Best to use 2U machines with the maximum number of disks IMHO. A 2U machine should be able to have 5 disks. I say: 9 Disks without problems. e.g. pcicase http://www.pcicase.de/catalog/produktweb/IPC-C2-X/IPC-C2D.htm -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe"

Re: restricting sftp/ssh login access

Hi! 1.) Set users shell to /bin/false and add it to /etc/shells. This will prevent ssh access for users, but allows ftp etc. But what you are asking for is that (I think) 2.) http://chrootssh.sourceforge.net/index.php Chroot your ssh for non-admin users by - patching ssh - replacing Users homedir

Re: restricting sftp/ssh login access

Hi! 1.) Set users shell to /bin/false and add it to /etc/shells. This will prevent ssh access for users, but allows ftp etc. But what you are asking for is that (I think) 2.) http://chrootssh.sourceforge.net/index.php Chroot your ssh for non-admin users by - patching ssh - replacing Users homedir

Re: recommendation for gbit sx card?

any chipset with NAPI support in today's kernels? -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: recommendation for gbit sx card?

any chipset with NAPI support in today's kernels? -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: Configuring Wireless ISP

Hola! (2) http://jodies.de/ipcalc My answer to (2) in intl. language :-) apt-get install sipcalc

Re: Configuring Wireless ISP

Hola! (2) http://jodies.de/ipcalc My answer to (2) in intl. language :-) apt-get install sipcalc -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: DF bit - Dont Fragment

ter the traffic between myself and the server via a CIPE tunnel stopped working when the packets got tooo large) - Or is there a bug in packet fragmentation in the linux kernel? Regards -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: DF bit - Dont Fragment

ter the traffic between myself and the server via a CIPE tunnel stopped working when the packets got tooo large) - Or is there a bug in packet fragmentation in the linux kernel? Regards -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net -- To UNS

DROA and FTC

This may be interesting to all kind of ISPs. Not really Debian realted, but IMO it's worth mentioning here. FTC's opinion to DROA practices and refund decision! http://www.ftc.gov/opa/2003/12/domainreg.htm Rgds, j. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 6

DROA and FTC

This may be interesting to all kind of ISPs. Not really Debian realted, but IMO it's worth mentioning here. FTC's opinion to DROA practices and refund decision! http://www.ftc.gov/opa/2003/12/domainreg.htm Rgds, j. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 6

Re: how to relocate servers transparently

but not to me... is there any difference compared to using iptables DNAT? cheers -- vbi -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: how to relocate servers transparently

but not to me... is there any difference compared to using iptables DNAT? cheers -- vbi -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: how to relocate servers transparently

it won't be, > given the dns caching problem mentioned above. Is there a way to have > that 1 dns server act as a proxy or port forwarder in some way? Can that > be done between two different class A networks? As above, as long as both new and old servers are serving the same (ne

Re: how to relocate servers transparently

it won't be, > given the dns caching problem mentioned above. Is there a way to have > that 1 dns server act as a proxy or port forwarder in some way? Can that > be done between two different class A networks? As above, as long as both new and old servers are serving the same (ne

Re: [PHP] safe mode bug ?

own that safe_mode is not really safe. You might want to restrict access with open_basedir . The most secure solution is still to install php's cgi executable in an suexec environment. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: [PHP] safe mode bug ?

own that safe_mode is not really safe. You might want to restrict access with open_basedir . The most secure solution is still to install php's cgi executable in an suexec environment. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: LDAP for Services

r "LDAP using GSSAPI/SASL to Auth"? I would be interested in it. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: LDAP for Services

r "LDAP using GSSAPI/SASL to Auth"? I would be interested in it. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Postfix SMTP AUTH with TLS Problems

6 => /lib/libc.so.6 (0x40296000) libdl.so.2 => /lib/libdl.so.2 (0x403c9000) libgdbm.so.3 => /usr/lib/libgdbm.so.3 (0x403cc000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x4000) Any ideas about where I should go from here? thanks, Adam -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: Postfix SMTP AUTH with TLS Problems

6 => /lib/libc.so.6 (0x40296000) libdl.so.2 => /lib/libdl.so.2 (0x403c9000) libgdbm.so.3 => /usr/lib/libgdbm.so.3 (0x403cc000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x4000) Any ideas about where I should go from here? thanks, Adam -- Andreas John net-lab

Re: Chkrootkit - true/false ?

ften false positives, but this is no reason not look for a trojan. read the perl code to see what it checks. it's quite simple, it checks the existence of certain hidden directories, files or processes. try to invstigate, why they exist on your machine. rgds, j. -- Andreas John net-lab GmbH Lu

Re: Chkrootkit - true/false ?

ften false positives, but this is no reason not look for a trojan. read the perl code to see what it checks. it's quite simple, it checks the existence of certain hidden directories, files or processes. try to invstigate, why they exist on your machine. rgds, j. -- Andreas John net-lab GmbH Lu

Re: multiple IP addresses cause ZONE TRANSFER to fail.

n www.cshore.com "A management team distracted by a series of short-term targets is as pointless as a dieter stepping on a scale every half-hour," Larry Page, one of Google's co-founders -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: multiple IP addresses cause ZONE TRANSFER to fail.

n www.cshore.com "A management team distracted by a series of short-term targets is as pointless as a dieter stepping on a scale every half-hour," Larry Page, one of Google's co-founders -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-la

Re: [mailinglists] Ulimit and max processes

ore an for some weired reason there is d #define in the kernel source of 2.2.series that made it into Andrew's special 2.4.x. Andrew: Did you upgrade the "256er"-boxen from 2.2? Did you use "make oldconfig" or took you parts (patches) from the kernel before? rgds, A

Re: [mailinglists] Ulimit and max processes

ore an for some weired reason there is d #define in the kernel source of 2.2.series that made it into Andrew's special 2.4.x. Andrew: Did you upgrade the "256er"-boxen from 2.2? Did you use "make oldconfig" or took you parts (patches) from the kernel before? rgds, A

Re: [mailinglists] Ulimit and max processes

ymore :) -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: [mailinglists] Ulimit and max processes

ymore :) -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: Monitoring software

but in the end the config was just too much and too complex. Any suggestions are welcome. Thanks Craig -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: Monitoring software

but in the end the config was just too much and too complex. Any suggestions are welcome. Thanks Craig -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe&quo

Re: RaiserFS via NFS

knows whether or not any advantage to running raiserFS is swallowed by NFS? RaiserFs is a realy fast filesystem for very much smal files Greetings Michelle -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: RaiserFS via NFS

list knows whether or not any advantage to running raiserFS is swallowed by NFS? RaiserFs is a realy fast filesystem for very much smal files Greetings Michelle -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net -- To UNSUBSCRIBE, e

Re: RaiserFS via NFS

lly when it comes to mail. With Maildir you will have less problems than with mbox, but you still do NOT have atomic transactions, and as such you will at some stage statistically have a problem. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: RaiserFS via NFS

cially when it comes to mail. With Maildir you will have less problems than with mbox, but you still do NOT have atomic transactions, and as such you will at some stage statistically have a problem. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://ww

Re: debian on HP proliant

nother practical approch is an USB Stick as installer: http://d-i.pascal.at/ You may mount this an put modules to it's initrd easily. I could send you an dump vom my about 4 weeks old d-i on stick. Rgds, j. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: RaiserFS via NFS

ty, XFS offers ACLs by default, alloffer journals, reiser4 ships with a "database structure", for extX there are most recue utils out, for laptops a journaling FS can cause power consumption, so ext2 may be cool for them. Large file access may be better with FS A, databases may like

Re: debian on HP proliant

-)] Another practical approch is an USB Stick as installer: http://d-i.pascal.at/ You may mount this an put modules to it's initrd easily. I could send you an dump vom my about 4 weeks old d-i on stick. Rgds, j. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700

Re: RaiserFS via NFS

ty, XFS offers ACLs by default, alloffer journals, reiser4 ships with a "database structure", for extX there are most recue utils out, for laptops a journaling FS can cause power consumption, so ext2 may be cool for them. Large file access may be better with FS A, databases may like

Re: bandwidth

CRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: bandwidth

CRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: OSF for an ISP (was Re: ..idea; ddos spam hosts off Internet?)

ll mail comming directly from an dialup ip, so I think it would be an accepted way to try what Pulu wants to do. Rgds, j. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: OSF for an ISP (was Re: ..idea; ddos spam hosts off Internet?)

ll mail comming directly from an dialup ip, so I think it would be an accepted way to try what Pulu wants to do. Rgds, j. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject

Re: Little BIG problem with Backbone

Hello! Before all this begins to get silly: You are playing with amount of money which I would not concern as pennyware. As from you mails before, it's clearly to recognize that you haven an idea, but no concept nor the skills you need. You will need probably consultants who help you to find a c

Re: Little BIG problem with Backbone

Hello! Before all this begins to get silly: You are playing with amount of money which I would not concern as pennyware. As from you mails before, it's clearly to recognize that you haven an idea, but no concept nor the skills you need. You will need probably consultants who help you to find a

Re: Attempt on smtpd / faking remote ip

w, anyone ideas?) I don't want to spread fear, so 1.) Boot superrescue, knoppix or so 2.) Run chkrootkit (deb package is mostly a little old) 3.) If you run chkrotokit on Debian, chkrootkit reports one false positive! (AFAIR it was lkm rootkit, debian reports some ps processes to much,

Re: Attempt on smtpd / faking remote ip

know, anyone ideas?) I don't want to spread fear, so 1.) Boot superrescue, knoppix or so 2.) Run chkrootkit (deb package is mostly a little old) 3.) If you run chkrotokit on Debian, chkrootkit reports one false positive! (AFAIR it was lkm rootkit, debian reports some ps processes to much,

Re: Postfix MTA and amavisd-new (Debian) calls clamd and spamassassin on a mailgateway (success)

c/d you could also think about: cat /etc/procmailrc # Spamassassin :0fw | /usr/bin/spamc I weant spam only to be filtered when delivered locally, i.e. I don't want outgoing mail to be tagghed as spam, this sometimes happened. Amavis alterntively has a "local domains" variable. HTH. rgds,

Re: Postfix MTA and amavisd-new (Debian) calls clamd and spamassassin on a mailgateway (success)

/d you could also think about: cat /etc/procmailrc # Spamassassin :0fw | /usr/bin/spamc I weant spam only to be filtered when delivered locally, i.e. I don't want outgoing mail to be tagghed as spam, this sometimes happened. Amavis alterntively has a "local domains" variable. HTH.

Re: How to set up a Debian mirror..

irror say stable .. testing .. unstable i386 only? OR Are there utilities in Debian that will make it easy to maintain a mirror of i386 Debian ? Thanks! -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net

Re: How to set up a Debian mirror..

mirror say stable .. testing .. unstable i386 only? OR Are there utilities in Debian that will make it easy to maintain a mirror of i386 Debian ? Thanks! -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel: +49 69 85700331 http://www.net-lab.net -- To UNSUBSCRIBE, email to [EMAIL P

Re: Which SATA RAID controller?

based solutions, i.e. RocketRAID (1520 two channel ... 1820 8 channel). My experience with Highpoint is gerenally better than with Promise, but I ordered my first RR 1520 Controller 2 Days ago. It's not here yet ;-) Rgds, j. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbach Tel

Re: Which SATA RAID controller?

based solutions, i.e. RocketRAID (1520 two channel ... 1820 8 channel). My experience with Highpoint is gerenally better than with Promise, but I ordered my first RR 1520 Controller 2 Days ago. It's not here yet ;-) Rgds, j. -- Andreas John net-lab GmbH Luisenstrasse 30b 63067 Offenbac