Re: "suspicious" apache log entries

2002-09-12 Thread Geoff Crompton
Ok. So it is good to warn owners of cracked boxes. Does that mean it is good for me to walk into a house that has been robbed, and write a note to the owner that it has been robbed? In this case the analogy doesn't work so well, as the owner is more likely going to notice that the place w

Re: "suspicious" apache log entries

2002-09-12 Thread Peter Cordes
On Fri, Sep 13, 2002 at 09:42:26AM +1000, Geoff Crompton wrote: > I can see that sending an email is an approriate legal, and > responsible course of action. > However to make his servers beep, you still need to perform an illegal > act of cracking into his box. Regardless of what you inten

Re: "suspicious" apache log entries

2002-09-12 Thread Geoff Crompton
On Thu, Sep 12, 2002 at 09:22:43AM +0200, Marcel Weber wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Something that would be totally legal would be to send an email to the > [EMAIL PROTECTED], in the hope, that they have such an email > address. Of course one has to pay attention,

Re: Postgres buffer overflow in stable .

2002-09-12 Thread Florian Weimer
Jean-Francois Dive <[EMAIL PROTECTED]> writes: > The bug 155419 opened 37 days old point to a serious security issue > with postgres as i can lead to DOS from local users You can't get rid of the authenticated user DoS easily, see 160673. This requires the ability to execute arbitrary SQL stateme

Re: "suspicious" apache log entries

2002-09-12 Thread Phillip Hofmeister
On Thu, 12 Sep 2002 at 12:24:47AM -0300, Peter Cordes wrote: > Taking down the TCP stack is of questionable legality, and it would be nice > if there was an easier way to call attention to the machine. Maybe beeping > the PC speaker in morse code for S.O.S. would work. (Do rackmount servers > ha

Re: Good Day - spamassin

2002-09-12 Thread Lupe Christoph
On Thursday, 2002-09-12 at 10:20:39 +0200, Marcel Hicking wrote: > --On Mittwoch, 3. Juli 2002 14:04 +0300 Samuli Suonpaa <[EMAIL PROTECTED]> > wrote: > >>i would rather see that the spam senders see a bounce email that > >>fills up their boxes with returned undeliverables.. > >So if some spamme

Re: Good Day - spamassin

2002-09-12 Thread Marcel Hicking
--On Mittwoch, 3. Juli 2002 14:04 +0300 Samuli Suonpaa <[EMAIL PROTECTED]> wrote: Alvin Oga <[EMAIL PROTECTED]> writes: a silly question ... if spamassassin caught the spam, i assume it still received the spam and dumped it into a "rejected spam" folder ??? i would rather see that the spam se

Re: "suspicious" apache log entries

2002-09-12 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Something that would be totally legal would be to send an email to the [EMAIL PROTECTED], in the hope, that they have such an email address. Of course one has to pay attention, that this email address does not get flooded, when thousands of the ca