Project 2000 on Debian (under Wine) ?

2001-10-24 Thread Thedore Knab
I am looking for a Linux based tool that is designed to help manage a variety of projects. This tool needs to be able to schedule and track tasks, and interface with Outlook clients. Anybody know one? -- GNU PGP public key http://www.annapolislinux.org/docs/public_key/Gnu

nameservers open to world - with test output

2001-11-03 Thread Thedore Knab
It has recently came to my attention that anyone can use our company's nameservers. I recently setup my home machine to use the company's nameserver to confirm this. I was wondering if there was anyway to prevent people from using our company's NS for their personal servers ? Would the extra t

Strange Read error on Network

2001-12-19 Thread Thedore Knab
I ran a nmap -p 515 192.168.10.* > our_printers to find the printers. This error was displayed anyone know what it means ? And where I should look to resolve it ? Strange read error from: 192.168.10.75: Protocol not available Strange read error from: 192.168.10.200: Protocol not available

Blackboard

2001-12-30 Thread Thedore Knab
I was wondering if anyone is running Blackboard on Debian ? The specs say designed for Redhat 6.2, but I would rather use Debian if possible. It appears that all the packages are availble in source, so I am assuming this wouldn't be a problem. -Ted -- To UNSUBSCRIBE, email to [EMAIL PROTECT

BIND exploited ?

2002-01-03 Thread Thedore Knab
I recently inherited a machine that I think has been exploited. It seems to have a stupid root kit installed unless this is a decoy. What does it look like to you professionals? [root@moe ...]# uname -a Linux moe. 2.2.14-5.0 #1 Tue Mar 7 21:07:39 EST 2000 i686 unknown [root@moe ...]# ps auxww

Re: BIND exploited ? -UPDATE

2002-01-05 Thread Thedore Knab
ing `z2'... nothing deleted I will keep you all up to date if I find any more new hacked machines. -Ted On Fri, Jan 04, 2002 at 01:43:16PM -0500, Andy Bastien wrote: > On Fri Jan 04, a day that will live in infamy, Russell Coker wrote: > > On Fri, 4 Jan 2002 17:54, Andy Bastien wrote

Re: BIND exploited ? -UPDATE #2

2002-01-06 Thread Thedore Knab
How does this sound ? The system has been rebuilt. It is running Bind 9.2 chroot version on RH 7.2. Someone else built it. I prefer Debian or OpenBSD. I will add tripwire and chkroot kit to run as a cron job. The harddrives will be saved for further investigation at a later date. Since the har

Re: user traffic accounting

2002-01-07 Thread Thedore Knab
How would ipfm work for this? http://freshmeat.net/projects/ipfm/ > please direct me to some documentation on ways to account for user > traffic on a single machine, acting as BIND9, apache, postfix, and sshd > server for a number of users. i need to get as close as possible to > exact traff

firewall / router devices (Topic: Network Security)

2002-01-10 Thread Thedore Knab
2 Questions: I want do some major subnetting on our network to help secure it better. Currently, everything is routed by a Catalyst 5500 series with 3 trays of Fiber for our internal network. I also want to put some machines on with a Free IDS like snort to monitor packets. Q1: Any recommeda

scsi error ?

2002-01-28 Thread Thedore Knab
I am having backup troubles. I ran a e2fsck on my /dev/sda1. I then ran dump /sbin/dump 0uaf /dev/ht0 /dev/sda1 I got the following error: DUMP: short read error from /dev/sda1: [sector -1693761273]: count=512, got=0 DUMP: bread: lseek fails DUMP: short read error from /dev/sda1: [blo

fork bomb protection

2002-01-31 Thread Thedore Knab
I am an admin of a Debian woody Linux box for computer science majors. The machine is running the 2.4.17 kernel with iptables and quotas. Although I have spent a lot of time securing things, I still fear that fork bombs may kill the box. Is there a way in the 2.4.17 kernel to prevent fork bomb

Re: fork bomb protection - thanks

2002-01-31 Thread Thedore Knab
Thanks for the tip. ted@albert:~$ ulimit -a core file size(blocks, -c) 0 data seg size (kbytes, -d) unlimited file size (blocks, -f) unlimited max locked memory (kbytes, -l) unlimited max memory size (kbytes, -m) unlimited open files(-n) 1

Eudora (Windows/ Mac) IMAP client with Cyrus IMAP Server

2002-01-31 Thread Thedore Knab
I was wondering if anyone has sucessfully intergrated the 5.1 version of the Eudora client with CMU's Cyrus Server. Has anyone had any problems with Eudora 5.1 and Cyrus recently ? >From the release notes, it appears that Eudora has had a long history of bugs related to the IMAP protocol. More s

dns to ldap

2002-02-04 Thread Thedore Knab
I was wondering if anyone has their DNS in an LDAP directory. For the people that have, does this cut down on adminstration time ? Are there any books, how-tos, or projects that you could recommend for this ? -Ted -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe"

TCP wrappers (syntax check)

2002-02-23 Thread Thedore Knab
What is wrong here ? Is this a reverse lookup error ? Feb 21 11:30:01 albert sshd[21141]: warning: /etc/hosts.allow, line 18: can't verify hostname: gethostbyname(WC-44-75.washcoll.edu) failed Feb 21 11:35:29 albert sshd[21163]: warning: /etc/hosts.allow, line 18: can't verify hostname: gethostb

RAID 0 risky ?

2002-03-19 Thread Thedore Knab
Is RAID 0 that risky anymore for data storage (IMAP mail files) ? I figure that under normal wear and tear a drive should last about 5 years. Does this sound right ? I have 3 IBM SCSI 18GB drives. With RAID 0, I get 51.5GB of storage space. With RAID 5, I only get 37 GB of space with 20% was

cold fusion 4.5 on Debian

2002-03-22 Thread Thedore Knab
Is anyone running Cold Fusion 4.5 on Debian ? People in my organization are looking at Cold Fusion for it's advertised simplicity. I prefer sticking with Debian. Are there any other simple packages that I might recommend as a dummy proof alternative ? -Ted References: Cold-Fusion Server 4.5

Re: postfix problem

2002-03-24 Thread Thedore Knab
Looks like your main.cf might have some problems. You should post the output of your postconf -n. You also might want to try doing a postfix check to make sure everything is where it is supposed to be. Ralf on the postfix list could solve your problem 30 minutes if you posted it there. ;-)

Open LDAP for Peer Review

2002-04-01 Thread Thedore Knab
Yippie, I have 29 days to get an IMAP server up with LDAP. I really am enjoying this task. :-) LDAP will provide + a general address lookup facility + account authentication This is the first time I have setup LDAP, so I am sending this for peer review. Help, I have no one h

Courier IMAP authldap with OpenLDAP

2002-04-11 Thread Thedore Knab
I was wondering if anyone is success fully running openldap from the debian packages with Courier IMAP's LDAP module for authentication. I am getting strange timeouts on a remote client which is preventing successful authentication. I have tested logins with both Netscape and Mulberry. Mulberry

Re: Courier IMAP authldap with OpenLDAP

2002-04-12 Thread Thedore Knab
Thanks for your reply. :-) It appears that courier needs to have 2 enteries for Maldir. LDAP_MAILDIR homeDirectory LDAP_HOMEDIR homeDirectory > Why are you using uidNumber/gidNumber attributes? In that case > you should use LDAP_UID and LDAP_GID instead of the globals I thought I needed them.

Postfix / Courier IMAP maildir quotas

2002-05-03 Thread Thedore Knab
Here's my setup: - a Woody box - Postfix delivers mail to /var/imap/mydomain/ - Courier IMAP is my generic IMAP server - There is a group quota for /var/imap partition Disk quotas for group vmail (gid 1001): Filesystem blocks soft hard inodes soft hard dev/sda5

Re: maildir with vacation

2002-05-31 Thread Thedore Knab
I am attempting to get the vacation notice working with Postfix with virtual users on a Maildir. I am not sure if I can use the vacation (Debian package) with virtual users. Is anyone using it ? Any suggestions ? Currently all my users are stored in an LDAP database where I use both the qmail a

kernel quota control with LDAP

2002-06-04 Thread Thedore Knab
I want to use kernel level quotas with LDAP to simplify adminstration of my mailserver. Can this be done ? Currently, I am keeping track of uids in both an /etc/passwd on the filesystem and an LDAP database. What would allow me to simplify this ? I have 2021 users on a new mail system with Cou

Re: Xeon on Linux

2002-06-04 Thread Thedore Knab
Seem to work fine here. I am running three Xeon Netfinity Servers X250 series. 2 have the 2.4.18 kernel running with ext3 while one is just an almost default install of Redhat. None of them had any problems so far. But, for the price/performance the dual P-III 1G would be better. > How does

understanding Routing Cisco vs. Linux

2002-09-25 Thread Thedore Knab
Currently, I am creating a simple Linux Router with CQB and Iptables. The machine I have only has 2 interfaces. We have the following devices on our network: 1 Cisco Catalyst connecting 16 Class C Networks 1 Cisco Router Routing packets to the inside The Catalyst uses VLans for our entire ne

Re: understanding Routing Cisco vs. Linux

2002-09-26 Thread Thedore Knab
> what exactly is that you are trying to do... I am trying to reduce latency, reduce peer to peer bandwidth hogs, and do some stateful firewalling while I am at it. I want to drop in one Debian Linux box running the 2.4.19 Kernel between the router and the switch. The Linux box has 2 interfaces

Re: understanding Routing Cisco vs. Linux

2002-09-26 Thread Thedore Knab
Forwarded email. --- Begin Message --- Hi Thedore On Thu, Sep 26, 2002 at 09:08:26AM -0400, Thedore Knab wrote: > I am trying to reduce latency, reduce peer to peer bandwidth > hogs, and do some stateful firewalling while I am at it. > Here is the part I am need to worry about

Re: understanding Routing Cisco vs. Linux

2002-09-26 Thread Thedore Knab
I put both the router config file and catalyst config file here. I did not create either of them. The only Cisco devices I have setup where Cisco Local Directors. http://albert.washcoll.edu/~tknab2/debian_isp/ If you want to look at it. user: debian pass: debian -- To UNSUBSCRIBE, email to

Re: understanding Routing Cisco vs. Linux

2002-10-10 Thread Thedore Knab
After reading more on this issue, I have decided that I have 2 choices. Use FreeBSD for a Bridging Bandwidth Shaper/ Firewall or use Linux as a Routing/ Bandwidth Shaping firewall. The later seems to be the best idea since I know more about Linux. I found that Linux does provide Bridging supp

xfs vs jfs performance

2003-02-11 Thread Thedore Knab
I am moving away from using ext3 on my servers due to its high overhead and lower performance. I am considering either XFS or JFS. Does anybody know how XFS compares to JFS or if they can be compared together. I want to use a journaled file-system on a IMAP server that holds 4000+ users mail. Th

Re: xfs vs jfs performance

2003-02-11 Thread Thedore Knab
I am not talking about huge delays but rather occasional 2-5 second delays. I am using Courier IMAP with the Ext3 file-system and kernel quotas. Postfix is delivering the Maildir file to the users' space. The way Courier IMAP works is each mail becomes a separate '.imap' file. Depending on the

Project 2000 on Debian (under Wine) ?

2001-10-24 Thread Thedore Knab
I am looking for a Linux based tool that is designed to help manage a variety of projects. This tool needs to be able to schedule and track tasks, and interface with Outlook clients. Anybody know one? -- GNU PGP public key http://www.annapolislinux.org/docs/public_key/GnuP

nameservers open to world - with test output

2001-11-03 Thread Thedore Knab
It has recently came to my attention that anyone can use our company's nameservers. I recently setup my home machine to use the company's nameserver to confirm this. I was wondering if there was anyway to prevent people from using our company's NS for their personal servers ? Would the extra

Strange Read error on Network

2001-12-19 Thread Thedore Knab
I ran a nmap -p 515 192.168.10.* > our_printers to find the printers. This error was displayed anyone know what it means ? And where I should look to resolve it ? Strange read error from: 192.168.10.75: Protocol not available Strange read error from: 192.168.10.200: Protocol not available

Blackboard

2001-12-30 Thread Thedore Knab
I was wondering if anyone is running Blackboard on Debian ? The specs say designed for Redhat 6.2, but I would rather use Debian if possible. It appears that all the packages are availble in source, so I am assuming this wouldn't be a problem. -Ted

BIND exploited ?

2002-01-03 Thread Thedore Knab
I recently inherited a machine that I think has been exploited. It seems to have a stupid root kit installed unless this is a decoy. What does it look like to you professionals? [EMAIL PROTECTED] ...]# uname -a Linux moe. 2.2.14-5.0 #1 Tue Mar 7 21:07:39 EST 2000 i686 unknown [EMAIL PROTECTED]

Re: BIND exploited ? -UPDATE

2002-01-05 Thread Thedore Knab
x27;... nothing deleted Checking `z2'... nothing deleted I will keep you all up to date if I find any more new hacked machines. -Ted On Fri, Jan 04, 2002 at 01:43:16PM -0500, Andy Bastien wrote: > On Fri Jan 04, a day that will live in infamy, Russell Coker wrote: > > On Fri,

Re: BIND exploited ? -UPDATE #2

2002-01-06 Thread Thedore Knab
How does this sound ? The system has been rebuilt. It is running Bind 9.2 chroot version on RH 7.2. Someone else built it. I prefer Debian or OpenBSD. I will add tripwire and chkroot kit to run as a cron job. The harddrives will be saved for further investigation at a later date. Since the hard

Re: user traffic accounting

2002-01-07 Thread Thedore Knab
How would ipfm work for this? http://freshmeat.net/projects/ipfm/ > please direct me to some documentation on ways to account for user > traffic on a single machine, acting as BIND9, apache, postfix, and sshd > server for a number of users. i need to get as close as possible to > exact traffi

firewall / router devices (Topic: Network Security)

2002-01-10 Thread Thedore Knab
2 Questions: I want do some major subnetting on our network to help secure it better. Currently, everything is routed by a Catalyst 5500 series with 3 trays of Fiber for our internal network. I also want to put some machines on with a Free IDS like snort to monitor packets. Q1: Any recommedat

dns to ldap

2002-02-04 Thread Thedore Knab
I was wondering if anyone has their DNS in an LDAP directory. For the people that have, does this cut down on adminstration time ? Are there any books, how-tos, or projects that you could recommend for this ? -Ted

TCP wrappers (syntax check)

2002-02-23 Thread Thedore Knab
What is wrong here ? Is this a reverse lookup error ? Feb 21 11:30:01 albert sshd[21141]: warning: /etc/hosts.allow, line 18: can't verify hostname: gethostbyname(WC-44-75.washcoll.edu) failed Feb 21 11:35:29 albert sshd[21163]: warning: /etc/hosts.allow, line 18: can't verify hostname: gethostby

Re: maildir with vacation

2002-05-31 Thread Thedore Knab
I am attempting to get the vacation notice working with Postfix with virtual users on a Maildir. I am not sure if I can use the vacation (Debian package) with virtual users. Is anyone using it ? Any suggestions ? Currently all my users are stored in an LDAP database where I use both the qmail an

kernel quota control with LDAP

2002-06-04 Thread Thedore Knab
I want to use kernel level quotas with LDAP to simplify adminstration of my mailserver. Can this be done ? Currently, I am keeping track of uids in both an /etc/passwd on the filesystem and an LDAP database. What would allow me to simplify this ? I have 2021 users on a new mail system with Cou

Re: Xeon on Linux

2002-06-04 Thread Thedore Knab
Seem to work fine here. I am running three Xeon Netfinity Servers X250 series. 2 have the 2.4.18 kernel running with ext3 while one is just an almost default install of Redhat. None of them had any problems so far. But, for the price/performance the dual P-III 1G would be better. > How does L

traffic shapper.deb

2002-09-16 Thread Thedore Knab
I was wondering if anyone is using shaper.deb to manage bandwidth. http://packages.debian.org/testing/net/shaper.html The kernel modules that this package depends on are experimental in the 2.4.19 kernel. I would like to implement it, but I experimental kernel modules scare me on servers. -Te

understanding Routing Cisco vs. Linux

2002-09-25 Thread Thedore Knab
Currently, I am creating a simple Linux Router with CQB and Iptables. The machine I have only has 2 interfaces. We have the following devices on our network: 1 Cisco Catalyst connecting 16 Class C Networks 1 Cisco Router Routing packets to the inside The Catalyst uses VLans for our entire net

Re: understanding Routing Cisco vs. Linux

2002-09-26 Thread Thedore Knab
> what exactly is that you are trying to do... I am trying to reduce latency, reduce peer to peer bandwidth hogs, and do some stateful firewalling while I am at it. I want to drop in one Debian Linux box running the 2.4.19 Kernel between the router and the switch. The Linux box has 2 interfaces.

Re: understanding Routing Cisco vs. Linux

2002-09-26 Thread Thedore Knab
Forwarded email. --- Begin Message --- Hi Thedore On Thu, Sep 26, 2002 at 09:08:26AM -0400, Thedore Knab wrote: > I am trying to reduce latency, reduce peer to peer bandwidth > hogs, and do some stateful firewalling while I am at it. > Here is the part I am need to worry about

Re: understanding Routing Cisco vs. Linux

2002-09-26 Thread Thedore Knab
I put both the router config file and catalyst config file here. I did not create either of them. The only Cisco devices I have setup where Cisco Local Directors. http://albert.washcoll.edu/~tknab2/debian_isp/ If you want to look at it. user: debian pass: debian

Re: understanding Routing Cisco vs. Linux

2002-10-10 Thread Thedore Knab
After reading more on this issue, I have decided that I have 2 choices. Use FreeBSD for a Bridging Bandwidth Shaper/ Firewall or use Linux as a Routing/ Bandwidth Shaping firewall. The later seems to be the best idea since I know more about Linux. I found that Linux does provide Bridging suppo