Re: PPP-= SERVER and RADIUS

2003-07-01 Thread Emile van Bergen
MSCHAPv2, accounting and Framed-IP-Address) or use the built-in RADIUS support in portslave. Last time I checked it only supported PAP, but this may no longer be true. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e

Re: PPP-= SERVER and RADIUS

2003-07-01 Thread Emile van Bergen
MSCHAPv2, accounting and Framed-IP-Address) or use the built-in RADIUS support in portslave. Last time I checked it only supported PAP, but this may no longer be true. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://

Re: Slightly OT: They're forcing me to install Red Hat

2003-06-17 Thread Emile van Bergen
t's Debian's job. But needless to say, it depends on the task at hand which qualities matter most. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl

Re: Slightly OT: They're forcing me to install Red Hat

2003-06-17 Thread Emile van Bergen
t's Debian's job. But needless to say, it depends on the task at hand which qualities matter most. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: synchronous interface card suggestions

2003-06-16 Thread Emile van Bergen
interface. The radios operate at > >>128kbps and provide clock signals, etc. > >> > >>Can anyone suggest a source for such a card -- preferably inexpensive as > >>this is a personal project -- that has Linux support? > >> > >>Thanks,

Re: synchronous interface card suggestions

2003-06-16 Thread Emile van Bergen
interface. The radios operate at > >>128kbps and provide clock signals, etc. > >> > >>Can anyone suggest a source for such a card -- preferably inexpensive as > >>this is a personal project -- that has Linux support? > >> > >>Thanks,

Re: XEON SMP KERNEL 2.4.20 tree

2003-06-11 Thread Emile van Bergen
ed that one, you may want to try using 3.x. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl

Re: XEON SMP KERNEL 2.4.20 tree

2003-06-11 Thread Emile van Bergen
ed that one, you may want to try using 3.x. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Using hash directories

2003-05-23 Thread Emile van Bergen
filesystems experience severe degradations above certain entry counts. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl

Re: sendmail or qmail or what?

2003-05-22 Thread Emile van Bergen
I've been deploying and managing qmail based mail servers for a number of years now, and am very happy with it. Cheers, Emile, -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl pgpEPgMxMKk3r.pgp Description: PGP signature

Re: which dns server to use ?

2003-04-08 Thread Emile van Bergen
ost importantly, that you should check if a string fits before you copy it somewhere. Some people think C makes these things hard, but I think that you can only have as trouble as the ISC's been having with it if you have a fundamentally broken programming style. All IMHO, of course. Cheers

Re: which dns server to use ?

2003-04-08 Thread Emile van Bergen
of bloat, root exploits and general ugliness is perhaps sendmail. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl

Re: Partitioning a Web Server

2003-04-04 Thread Emile van Bergen
Hi, On Fri, Apr 04, 2003 at 09:14:40AM +1000, Russell Coker wrote: > On Fri, 4 Apr 2003 06:52, Emile van Bergen wrote: > > Something just occurred to me. A lot of systems will have one (logical) > > disk, either physical or as a RAID-5 or RAID-1 set. > > > > Would

Re: Partitioning a Web Server

2003-04-04 Thread Emile van Bergen
Hi, On Fri, Apr 04, 2003 at 09:14:40AM +1000, Russell Coker wrote: > On Fri, 4 Apr 2003 06:52, Emile van Bergen wrote: > > Something just occurred to me. A lot of systems will have one (logical) > > disk, either physical or as a RAID-5 or RAID-1 set. > > > > Would

Re: Partitioning a Web Server

2003-04-03 Thread Emile van Bergen
Hi, On Thu, Apr 03, 2003 at 09:28:36AM +0200, Emile van Bergen wrote: > Partitioning your data across disks is important, but IMHO partitioning > a single disk is useless. Enforcing quota by splitting a disk in two, > with all the seek time it wastes, is an unreasonably expensive way t

Re: Partitioning a Web Server

2003-04-03 Thread Emile van Bergen
Hi, On Thu, Apr 03, 2003 at 09:28:36AM +0200, Emile van Bergen wrote: > Partitioning your data across disks is important, but IMHO partitioning > a single disk is useless. Enforcing quota by splitting a disk in two, > with all the seek time it wastes, is an unreasonably expensive way t

Re: Partitioning a Web Server

2003-04-03 Thread Emile van Bergen
x27;s quota and root reservation. If you can't trust your filesystems to your kernel, all hope is lost anyway. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl pgpa4Y7Aq865V.pgp Description: PGP signature

Re: Partitioning a Web Server

2003-04-03 Thread Emile van Bergen
r than swap. Having different filesystems with different properties can be immensely useful, but then you should use multiple disks. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl pgpBVs2PYpbYY.pgp Descr

Re: Partitioning a Web Server

2003-04-03 Thread Emile van Bergen
x27;s quota and root reservation. If you can't trust your filesystems to your kernel, all hope is lost anyway. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl pgp0.pgp Description: PGP signature

Re: Partitioning a Web Server

2003-04-02 Thread Emile van Bergen
r than swap. Having different filesystems with different properties can be immensely useful, but then you should use multiple disks. Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl pgp0.pgp Descr

Re: NON-US can anyone reach aljazeera.net?

2003-03-27 Thread Emile van Bergen
Hi, On Thu, Mar 27, 2003 at 10:03:32AM +0100, Emile van Bergen wrote: > Currently, I get two nameservers for aljazeera.net, 217.26.193.15 and > 213.30.180.218: [SNIP - never mind] The second one has just become reachable and gives 213.30.180.219 for both aljazeera.net and english.aljazee

Re: NON-US can anyone reach aljazeera.net?

2003-03-27 Thread Emile van Bergen
server that's not blocked here seems local to Completel's network; AMS-IX's BGP looking glass shows no longer prefix for 213.30.180.218 than the 213.30.128.0/18 route, and more than enough paths for that. So, anyone from Completel subscribed who wants to comment? (Slim chance, but

Re: NON-US can anyone reach aljazeera.net?

2003-03-27 Thread Emile van Bergen
Hi, On Thu, Mar 27, 2003 at 10:03:32AM +0100, Emile van Bergen wrote: > Currently, I get two nameservers for aljazeera.net, 217.26.193.15 and > 213.30.180.218: [SNIP - never mind] The second one has just become reachable and gives 213.30.180.219 for both aljazeera.net and english.aljazee

Re: NON-US can anyone reach aljazeera.net?

2003-03-27 Thread Emile van Bergen
ver that's not blocked here seems local to Completel's network; AMS-IX's BGP looking glass shows no longer prefix for 213.30.180.218 than the 213.30.128.0/18 route, and more than enough paths for that. So, anyone from Completel subscribed who wants to comment? (Slim chance, but

Re: NON-US can anyone reach aljazeera.net?

2003-03-25 Thread Emile van Bergen
ancetelecom.net (193.252.101.157) 191.089 ms 190.848 ms 192.119 ms 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * 29 * * * 30 * * * The first nameserver shows the same problem, the other one is in the US, but isn't reachable either. Cheers, Emile. -- E-Advies - Emile

Re: NON-US can anyone reach aljazeera.net?

2003-03-25 Thread Emile van Bergen
m.net (193.252.101.157) 191.089 ms 190.848 ms 192.119 ms 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * 29 * * * 30 * * * The first nameserver shows the same problem, the other one is in the US, but isn't reachable either. Cheers, Emile. -- E-Advies - Emile van Bergen

Re: iptables default

2003-03-12 Thread Emile van Bergen
tables -F # iptables -X customchain1 2>/dev/null # iptables -X customchain2 2>/dev/null [ $1 = stop ] && exit 0 ### Create custom chains and rules below ... Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http://www.e-advies.nl

Re: iptables default

2003-03-12 Thread Emile van Bergen
tables -F # iptables -X customchain1 2>/dev/null # iptables -X customchain2 2>/dev/null [ $1 = stop ] && exit 0 ### Create custom chains and rules below ... Cheers, Emile. -- E-Advies - Emile van Bergen [EMAIL PROTECTED] tel. +31 (0)70 3906153 http

Re: seeking input on rbls and anti-spam measures

2003-03-04 Thread Emile van Bergen
Hi, On Tue, Mar 04, 2003 at 09:43:20AM -0800, Sis wrote: > On Sun, Mar 02, 2003 at 01:46:47PM +0100, Emile van Bergen wrote: > > > # This script is intended for use in .qmail files. It scans a message's > > # Received: headers for IP addresses and checks each IP addr

Re: radius server choice

2003-03-04 Thread Emile van Bergen
. Oh, no, don't worry! You didn't sound rude and your English is fine, especially to a non-native speaker like me. I should be saying the same; I just wanted to point out the differences and am of course not bothered in the least by you suggesting XtRADIUS..! Cheers, Emile. -- E-Advies /

Re: seeking input on rbls and anti-spam measures

2003-03-04 Thread Emile van Bergen
Hi, On Tue, Mar 04, 2003 at 09:43:20AM -0800, Sis wrote: > On Sun, Mar 02, 2003 at 01:46:47PM +0100, Emile van Bergen wrote: > > > # This script is intended for use in .qmail files. It scans a message's > > # Received: headers for IP addresses and checks each IP address

Re: radius server choice

2003-03-04 Thread Emile van Bergen
. Oh, no, don't worry! You didn't sound rude and your English is fine, especially to a non-native speaker like me. I should be saying the same; I just wanted to point out the differences and am of course not bothered in the least by you suggesting XtRADIUS..! Cheers, Emile. -- E-Advies /

Re: radius server choice

2003-03-04 Thread Emile van Bergen
disadvantage here is that your external script is spawned for every request (read: a full Perl/Python interpreter is started and initialised). OpenRADIUS also allows you to use external scripts in any language, but keeps them running - fully supervised - as long as the server runs. Cheers, Emile.

Re: radius server choice

2003-03-04 Thread Emile van Bergen
disadvantage here is that your external script is spawned for every request (read: a full Perl/Python interpreter is started and initialised). OpenRADIUS also allows you to use external scripts in any language, but keeps them running - fully supervised - as long as the server runs. Cheers, Emile.

Re: radius server choice

2003-03-03 Thread Emile van Bergen
Hi, On Mon, Mar 03, 2003 at 05:30:10PM +0100, Francois Chenais wrote: > I can't find RAD-code in dictonaries ! Try RAD-Code (uppercase C). Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info

Re: radius server choice

2003-03-03 Thread Emile van Bergen
Hi, On Mon, Mar 03, 2003 at 05:30:10PM +0100, Francois Chenais wrote: > I can't find RAD-code in dictonaries ! Try RAD-Code (uppercase C). Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info -- To UNS

Re: radius server choice

2003-03-03 Thread Emile van Bergen
timeout or an answer is received. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info pgps1aq1zHit4.pgp Description: PGP signature

Re: radius server choice

2003-03-03 Thread Emile van Bergen
nd, a session database, lots of features, go for FreeRADIUS. If you need more flexibility and stability than FreeRADIUS and can live with the limited choice of modules (ASCII files, LDAP or Unix password db), go for OpenRADIUS. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL P

Re: radius server choice

2003-03-03 Thread Emile van Bergen
timeout or an answer is received. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info pgp0.pgp Description: PGP signature

Re: radius server choice

2003-03-03 Thread Emile van Bergen
nd, a session database, lots of features, go for FreeRADIUS. If you need more flexibility and stability than FreeRADIUS and can live with the limited choice of modules (ASCII files, LDAP or Unix password db), go for OpenRADIUS. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL P

Re: seeking input on rbls and anti-spam measures

2003-03-02 Thread Emile van Bergen
against a number of RBLs. If it gets a match, it tells qmail that it shouldn't follow further delivery instructions, preventing actual delivery. So, my .qmail files look like this: |/usr/local/bin/rcvchk ./Maildir/ The mentioned rcvchk script looks like this: #!/usr/bin/perl -w # # RCVCHK (C)

Re: seeking input on rbls and anti-spam measures

2003-03-02 Thread Emile van Bergen
st a number of RBLs. If it gets a match, it tells qmail that it shouldn't follow further delivery instructions, preventing actual delivery. So, my .qmail files look like this: |/usr/local/bin/rcvchk ./Maildir/ The mentioned rcvchk script looks like this: #!/usr/bin/perl -w # # RCVCHK (C)

Re: slapadd speed

2003-02-28 Thread Emile van Bergen
hat particularly well. Try setting threads and concurrency to 1, and enable dbnolocking. Lastly, even though the CPU time indicates no I/O seek latency problems, you may want to experiment enabling dbnosync as well. It can make a *huge* write throughput difference if you trust your backend sto

Re: slapadd speed

2003-02-28 Thread Emile van Bergen
hat particularly well. Try setting threads and concurrency to 1, and enable dbnolocking. Lastly, even though the CPU time indicates no I/O seek latency problems, you may want to experiment enabling dbnosync as well. It can make a *huge* write throughput difference if you trust your backend sto

Re: Cracking attempt

2003-02-24 Thread Emile van Bergen
ciated with that. Even the people upstairs have their gut feelings or prejudices about things they don't understand -- and we all know how hard that can make things -- they do tend to be sensitive to talks that mention well founded estimates of risks and costs. Cheers, Emile. -- E-Advies /

Re: Qmail and bounces

2003-02-18 Thread Emile van Bergen
e able to generate bounces. Qmail interprets error code 100 as a permanent error, and 111 as a temporary error. If qmail-ldap generates a 111 if the user is not found in LDAP, I guess that's what should be fixed... Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel.

Re: Oracle 9i on Linux

2003-02-17 Thread Emile van Bergen
you may need to sign up) Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info msg08095/pgp0.pgp Description: PGP signature

Re: Apache / PHP4 config problem (newbee on PHP)

2003-01-15 Thread Emile van Bergen
you expect? "Where does it hurt?" Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Cunning BIND trickery

2002-12-07 Thread Emile van Bergen
ind8 doesn't have > anything close enough to views. Why not run two instances of bind, bound to two different IP addresses, one that's queried from the inside and one from the outside network? Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 39

Re: Cistron Radius password file question

2002-11-28 Thread Emile van Bergen
7 +13,7 @@ #if defined(__FreeBSD__) || defined(__NetBSD__) || defined(bsdi) #define PASSWDFILE "/etc/master.passwd" #else -#define PASSWDFILE "/etc/passwd" +#define PASSWDFILE "/etc/ftpd.passwd" #endif /* bsdi*/ #define SHADOWFILE "/etc/shadow"

Re: djb and multiple IPs

2002-11-20 Thread Emile van Bergen
rom. This may or may not be a problem. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info pgpQSnpi7QYJi.pgp Description: PGP signature

Re: djb and multiple IPs

2002-11-20 Thread Emile van Bergen
rom. This may or may not be a problem. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info msg07239/pgp0.pgp Description: PGP signature

Re: DNS servers

2002-11-19 Thread Emile van Bergen
Hi, On Tue, Nov 19, 2002 at 03:34:42PM +0100, Russell Coker wrote: > So this leaves DNS caching as the only reason for BIND. Is there a > DNS server that does caching better than BIND? DJB's dnscache? *ducks* Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTE

Re: DNS servers

2002-11-19 Thread Emile van Bergen
Hi, On Tue, Nov 19, 2002 at 03:34:42PM +0100, Russell Coker wrote: > So this leaves DNS caching as the only reason for BIND. Is there a > DNS server that does caching better than BIND? DJB's dnscache? *ducks* Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTE

Re: expect problem

2002-11-04 Thread Emile van Bergen
y-related signal to be delivered to the just forked child, which terminates it before it gets a chance to call setsid() to detach it from the tty. As you can see, you can have nasty races without multithreading ;-) Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (

Re: expect problem

2002-11-04 Thread Emile van Bergen
y-related signal to be delivered to the just forked child, which terminates it before it gets a chance to call setsid() to detach it from the tty. As you can see, you can have nasty races without multithreading ;-) Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (

Re: CBQ.init

2002-11-01 Thread Emile van Bergen
m /etc/rc2.d/SxxCBQ and /etc/rc0.d/KyyCBQ, choosing numbers for xx and yy to reflect the desired place in the startup and shutdown procedures. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info pgpvJmHRza0bu.pgp Desc

Re: Correcting permissions on files

2002-11-01 Thread Emile van Bergen
all, even remapping uids if the usernames on the new machine use different ones. You do have to configure your old machine temporarily to trust newmachine enough to give people on it root access though, but that's all. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL

Re: Correcting permissions on files

2002-11-01 Thread Emile van Bergen
all, even remapping uids if the usernames on the new machine use different ones. You do have to configure your old machine temporarily to trust newmachine enough to give people on it root access though, but that's all. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL

Re: CBQ.init

2002-11-01 Thread Emile van Bergen
m /etc/rc2.d/SxxCBQ and /etc/rc0.d/KyyCBQ, choosing numbers for xx and yy to reflect the desired place in the startup and shutdown procedures. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info msg07101/pgp0.pgp

Re: DNS zone file audit tool

2002-10-31 Thread Emile van Bergen
you also looked at djbdns' dnstrace tool? It "searches for all DNS servers that can affect the resolution of records of type t under the domain name fqdn, starting from the root server r. You can list more than one root server.", and follows all possible paths. See http://cr.yp.to

Re: DNS zone file audit tool

2002-10-31 Thread Emile van Bergen
you also looked at djbdns' dnstrace tool? It "searches for all DNS servers that can affect the resolution of records of type t under the domain name fqdn, starting from the root server r. You can list more than one root server.", and follows all possible paths. See http://cr.yp.to

Re: General DNS question?

2002-10-29 Thread Emile van Bergen
host.of.your.choice. If this is about webserving, then you also need to set up a properly configured virtual host in apache if you want to give each old host its own customized redirect page. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153

Re: General DNS question?

2002-10-29 Thread Emile van Bergen
host.of.your.choice. If this is about webserving, then you also need to set up a properly configured virtual host in apache if you want to give each old host its own customized redirect page. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153

Re: port 137 scans

2002-10-28 Thread Emile van Bergen
haved, if it doesn't just assume port 137 but asks DCE-'portmapper' at 135 for the correct port first. Protocol-wise, that is, of course. ;-) Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info pgpE0kos2EKgt.pgp Description: PGP signature

Re: port 137 scans

2002-10-28 Thread Emile van Bergen
haved, if it doesn't just assume port 137 but asks DCE-'portmapper' at 135 for the correct port first. Protocol-wise, that is, of course. ;-) Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info msg07042/pgp0.pgp Description: PGP signature

Re: Fw: VIRUS IN YOUR MAIL (W32/BugBear.A (Clam))

2002-10-18 Thread Emile van Bergen
Hi, On Fri, Oct 18, 2002 at 08:48:05AM +1000, Brian May wrote: > On Thu, Oct 17, 2002 at 02:18:34PM +0200, Emile van Bergen wrote: > > Of course, you need to implement quite a bit of SMTP before getting at > > the DATA phase, but it's potentially cleaner than doing it in a &

Re: Fw: VIRUS IN YOUR MAIL (W32/BugBear.A (Clam))

2002-10-18 Thread Emile van Bergen
Hi, On Fri, Oct 18, 2002 at 08:48:05AM +1000, Brian May wrote: > On Thu, Oct 17, 2002 at 02:18:34PM +0200, Emile van Bergen wrote: > > Of course, you need to implement quite a bit of SMTP before getting at > > the DATA phase, but it's potentially cleaner than doing it in a &

Re: Fw: VIRUS IN YOUR MAIL (W32/BugBear.A (Clam))

2002-10-17 Thread Emile van Bergen
On Thu, Oct 17, 2002 at 11:41:20AM +0200, Emile van Bergen wrote a few disorganized lines, saying: > Qmail has such a smtp filter (rblsmtpd[2]) that checks MAIL FROM: > domains against RBLs; it only runs the real server (qmail-smtpd[3]) if > the domain is not listed. Of course, it c

Re: Fw: VIRUS IN YOUR MAIL (W32/BugBear.A (Clam))

2002-10-17 Thread Emile van Bergen
On Thu, Oct 17, 2002 at 11:41:20AM +0200, Emile van Bergen wrote a few disorganized lines, saying: > Qmail has such a smtp filter (rblsmtpd[2]) that checks MAIL FROM: > domains against RBLs; it only runs the real server (qmail-smtpd[3]) if > the domain is not listed. Of course, it c

Re: Fw: VIRUS IN YOUR MAIL (W32/BugBear.A (Clam))

2002-10-17 Thread Emile van Bergen
er (qmail-smtpd[3]) if the domain is not listed. Of course, other policies could be implemented this way as well. Have a look at Cheers, Emile. [1] http://cr.yp.to/ucspi-tcp/tcpserver.html [2] http://cr.yp.to/ucspi-tcp/rblsmtpd.html [3] http://www.qmail.org/qmail-manual-html/man8/qmail-s

Re: Fw: VIRUS IN YOUR MAIL (W32/BugBear.A (Clam))

2002-10-17 Thread Emile van Bergen
er (qmail-smtpd[3]) if the domain is not listed. Of course, other policies could be implemented this way as well. Have a look at Cheers, Emile. [1] http://cr.yp.to/ucspi-tcp/tcpserver.html [2] http://cr.yp.to/ucspi-tcp/rblsmtpd.html [3] http://www.qmail.org/qmail-manual-html/man8/qmail-s

Re: LSB and Debian, Commercial perspective

2002-10-11 Thread Emile van Bergen
ng there. Otherwise they would already support Mandrake and SuSE. Nothing to gain by LSB certification there. And do you know any other piece of proprietary software that is so worthwile that Debian should work hard for official support? Remember, Debian's agenda is excellent Free Software first, and a 'successful' Linux distribution second. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info pgpyD3WiUhm38.pgp Description: PGP signature

Re: LSB and Debian, Commercial perspective

2002-10-10 Thread Emile van Bergen
ng there. Otherwise they would already support Mandrake and SuSE. Nothing to gain by LSB certification there. And do you know any other piece of proprietary software that is so worthwile that Debian should work hard for official support? Remember, Debian's agenda is excellent Free Software first, and a 'successful' Linux distribution second. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info msg06943/pgp0.pgp Description: PGP signature

Re: [Help] Installation Question (55 PCs will install....)

2002-08-26 Thread Emile van Bergen
. Needless to say, the disks should be identical in size. The last step is that you boot the new PC and give it its new hostname and possibly a new IP address *in both OSes*. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info

Re: Newbie: Is there a basic Debian-for-ISP HOWTO?

2002-07-30 Thread Emile van Bergen
Hi, On Mon, Jul 29, 2002 at 03:10:42PM -0400, Bulent Murtezaoglu wrote: > [This is exactly the kind of exchange I was trying to avoid, oh well] Yes, but it's fun once in a while, isn't it ;-) > >>>>> "EvB" == Emile van Bergen <[EMAIL PROTECTED]

Re: Newbie: Is there a basic Debian-for-ISP HOWTO?

2002-07-29 Thread Emile van Bergen
t for example). HTH, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: LDAP in an ISP

2002-07-23 Thread Emile van Bergen
penalty (doesn't spawn per request), and it comes with a flexible LDAP backend module. You can not only put your users in LDAP but your NASes as well with this server. See http://www.openradius.net. No debian package is yet available though; you'll have to compile from source. Oh, and it&

Re: LDAP in an ISP

2002-07-23 Thread Emile van Bergen
penalty (doesn't spawn per request), and it comes with a flexible LDAP backend module. You can not only put your users in LDAP but your NASes as well with this server. See http://www.openradius.net. No debian package is yet available though; you'll have to compile from source. Oh, and it&

Re: pppd+radius ?

2002-06-21 Thread Emile van Bergen
S-Identifier attribute sent by the client using a 'radius-nas-identifier' option. The problem is that the code that was added doesn't handle the absense of the option correctly. So, as a workaround, add eg. 'radius-nas-identifier testnas' to your config file. I'll uploa

Re: pppd+radius ?

2002-06-21 Thread Emile van Bergen
S-Identifier attribute sent by the client using a 'radius-nas-identifier' option. The problem is that the code that was added doesn't handle the absense of the option correctly. So, as a workaround, add eg. 'radius-nas-identifier testnas' to your config file. I'll uploa

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
Hi, On Thu, 20 Jun 2002, Emile van Bergen wrote: > On Thu, 20 Jun 2002, Russell Coker wrote: > > > I've already started work on CHAP using libradius1, which is also what the > > PPP CVS code uses. > > > > I am going to eat the code that's in the PPP CVS

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
rried the PPP people aren't going to maintain their RADIUS plugin properly? I mean, if you both use libradius1... Portslave could then become a pure 'multiport-getty', i.e. everything a NAS does before running PPP, or another service/line discipline, as an external program. Why not

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
Hi, On Thu, 20 Jun 2002, Emile van Bergen wrote: > On Thu, 20 Jun 2002, Russell Coker wrote: > > > I've already started work on CHAP using libradius1, which is also what the > > PPP CVS code uses. > > > > I am going to eat the code that's in the PPP CVS

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
rried the PPP people aren't going to maintain their RADIUS plugin properly? I mean, if you both use libradius1... Portslave could then become a pure 'multiport-getty', i.e. everything a NAS does before running PPP, or another service/line discipline, as an external program. Why not

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
st @secret * > > in first and second case -- no packets to auth in radius Ugh. My fault. It's not "@secret" but "@radius" you should use (analogous to "@login" which selects system authentication). Cheers, Emile. -- E-Advies

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
st @secret * > > in first and second case -- no packets to auth in radius Ugh. My fault. It's not "@secret" but "@radius" you should use (analogous to "@login" which selects system authentication). Cheers, Emile. -- E-Advies

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
nd I see only > acct-stop packages from pppd to radius then client is desconnected. > where I was mistaken in a configuration?? I don't know. I'd have to see the debugging log... Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
On Thu, 20 Jun 2002, Russell Coker wrote: > On Thu, 20 Jun 2002 10:20, Emile van Bergen wrote (incorrectly ;): > > > > > > > Portslave's pppd doesn't do accounting, no. > > > > > > Yes it does, it's been doing it for quite a while, and ever

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
rs, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
iant) at http://www.xs4all.nl/~evbergen/doc-module-interface.html An example of a shell script using this can be found in the modules/radlogger subdirectory. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info -- To

Re: pppd+radius ?

2002-06-20 Thread Emile van Bergen
Hi, On Wed, 19 Jun 2002, Russell Coker wrote: > On Wed, 19 Jun 2002 20:12, Emile van Bergen wrote: > > > Wanted to use xtradius but I can not find pppd working with radius (pppd > > > from portslave in such situation to work I think will not be). > > > > Ports

Re: pppd+radius ?

2002-06-19 Thread Emile van Bergen
rts * Authentication through PAP, CHAP and MSCHAPv2 * MPPE support with key derivation from RADIUS * RADIUS accounting * Multiple redundant RADIUS servers for both authentication and accounting. You can find it at http://www.xs4all.nl/~evbergen/download/ . Cheers, Emile. -- E-Advies / Emile

Re: user name length

2002-05-16 Thread Emile van Bergen
s from Unix users (most schemes like that use the same Unix user for all POP3 users), thus allowing you to use POP3 username conventions (and user counts) not easily supported by unix's /etc/passwd. Look at eg. vpopmail. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED]

Re: user name length

2002-05-16 Thread Emile van Bergen
#x27;s mail. Of course, you also need your feed your MTA or delivery agent with a table that maps (multiple) addresses to virtual user maildirs in such a setup, and I don't know whether that's easily doable with sendmail (qmail uses a hash table for that that it generates from a flat ASCII ta

Re: [Fwd: Re: Spamassasin over RBL, was Re: rblsmtpd -t?]

2002-05-07 Thread Emile van Bergen
Hi, On Tue, 7 May 2002, [EMAIL PROTECTED] wrote: > On Tue, May 07, 2002 at 06:55:29PM +1000, Craig Sanders wrote: > > On Tue, May 07, 2002 at 10:21:30AM +0200, Emile van Bergen wrote: > > > > > Making the ISP accountible for the mail sent by their customers by > &

Re: [Fwd: Re: Spamassasin over RBL, was Re: rblsmtpd -t?]

2002-05-07 Thread Emile van Bergen
te with what > is static, what is dynamic, etc.? It sounds good, but would be a logistic > and administrative nightmare to keep it all current. Or has this been > automated (or some other way)? See http://www.mail-abuse.org/dul/adding.htm. Cheers, Emile. -- E-Advies / Emile van Bergen |

Re: [Fwd: Re: Spamassasin over RBL, was Re: rblsmtpd -t?]

2002-05-07 Thread Emile van Bergen
On Tue, 7 May 2002, Russell Coker wrote: > On Tue, 7 May 2002 18:21, Emile van Bergen wrote: > > > You must be kidding. This is a list that considers people who don't use > > their provider's MTA as "trespassers" (quote from MAPS' information page &

Re: [Fwd: Re: Spamassasin over RBL, was Re: rblsmtpd -t?]

2002-05-07 Thread Emile van Bergen
ense. Hopefully DUL indeed only lists dynamic IP blocks. Cheers, Emile. -- E-Advies / Emile van Bergen | [EMAIL PROTECTED] tel. +31 (0)70 3906153| http://www.e-advies.info -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: [Fwd: Re: Spamassasin over RBL, was Re: rblsmtpd -t?]

2002-05-07 Thread Emile van Bergen
Hi, On Tue, 7 May 2002, Craig Sanders wrote: > On Tue, May 07, 2002 at 10:25:12AM +0200, Emile van Bergen wrote: > > On Tue, 7 May 2002, Craig Sanders wrote: > > > no, it's not relative. there is an absolute, black-and-white > > > criteria which you are too stup

  1   2   >