Re: telnet mydomain.tld 465 ERROR : connection closed

2007-10-30 Thread Noel Jones
er you issue an EHLO command on port 465, the STARTTLS option won't be offered since TLS is already active. You can also test that TLS is working on port 25 (which requires the STARTTLS command) with: $ openssl s_client -connect localhost:25 -starttls smtp The above com

Re: telnet mydomain.ild 465 : connection closed

2007-10-30 Thread Noel Jones
er you issue an EHLO command on port 465, the STARTTLS option won't be offered since TLS is already active. You can also test that TLS is working on port 25 (which requires the STARTTLS command) with: $ openssl s_client -connect localhost:25 -starttls smtp The above comm

Re: Hopefully an easy header rewriting problem for Postfix

2007-12-07 Thread Noel Jones
you describe. Just set in main.cf: masquerade_domains = my.domain and then run "postfix reload" -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: postfix restrictions error

2003-11-26 Thread Noel Jones
ct_non_fqdn_recipient > Lines to be included in a parameter must be either all on the same line or indented with spaces. The comma is optional. examples: smtpd_helo_restrictions = permit_mynetworks, reject_unauth_pipelining, reject_invalid_hostname

Re: Simple Monitoring Of TCP/IP Question

2009-12-18 Thread Noel Jones
t? > > Thank you in advance for any direction. For a simple service/system monitor, monit may suit your needs. http://mmonit.com/monit/ ports/sysutils/monit -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/

Re: Supressing dd output

2009-12-23 Thread Noel Jones
> gets ridiculously long, and most of it being dd summaries. > > I guess I could hack the source code of dd, but I'd prefer not to have to. > Has anyone got any ideas? > > Thanks in advance and Merry Christmas to all of you, > > Rolf Nielsen Order matters. dd ... &

Re: RAM check

2006-01-26 Thread Noel Jones
; http://www.memtest86.com/ http://www.memtest.org/ -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: sshd possible breakin attempt messages

2006-02-06 Thread Noel Jones
Should I upgrade to 6.0 before I go live to be sure I > am in the best possible security situation going forward? Should I wait > until 6.1 for bug fixes (generally I am opposed to n.0 anything). Your call. Base your decision on what features you need. -- Noel Jones _

Re: Syslog

2006-02-15 Thread Noel Jones
eed to adjust the syslogd entry in /etc/rc.conf to remove the -s option, and add -a RemoteIP. Then stop and restart syslogd before continuing your test. You also likely need to clear the "program specification" in syslog.conf by using: !* +sphere *.* /var/log/sphere/messages -- No

Re: Redirecting Traffic with PF

2006-02-24 Thread Noel Jones
to do to fix it. > > Thanks in advance, > > -- > -Frank Staals > > I think you want something like rdr on $extif inet proto udp from any to self port 27902 -> 192.168.2.11 port 27902 -- Noel Jones ___ freebsd-questions@freebsd.org

Re: switching timezone within crontab?

2006-03-03 Thread Noel Jones
C as its locale, but I want to schedule a > UTC cron job in crontab, is it sufficient to put a little: > TZ=UTC > Right before the job? > Pretty sure the above will only set the timezone for your job, and not alter the schedule time. But I don't kno

Re: awk question

2006-03-06 Thread Noel Jones
Or is > there a "better" way to do it? I'd like to just pipe the information > from the logs to this mini-script and end up with a list of URLs > consisting of just the domain (http://www.happymountain.com). > | cut -d / -f 1-3 -- Noel Jones _

Re: AND COBOL

2006-03-07 Thread Noel Jones
On 3/7/06, Bob Hall <[EMAIL PROTECTED]> wrote: > ... > I couldn't figure out how to fit ALGOL in there. Ain't life a PISTOL? > After that, I need a Tylenol... -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://

Re: postfix on FreeBSD

2005-03-09 Thread Noel Jones
, postfix will use the defined default_database_type Unless you are using multiple database types, you don't need to specify this. -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: how to find files less than a day old?

2005-03-29 Thread Noel Jones
7;t work. How can I accomplish this? > find . -mtime -1h -type f man find -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: how to find files less than a day old?

2005-03-29 Thread Noel Jones
mp.txt > > > > > > However, this only grabs files that are less than a day old, so I get > some > > > files returned that I don't want. I tried using -0.5 instead of -1 > and it > > > didn't work. How can I accomplish this? > > > > &g

Re: how to find files less than a day old?

2005-03-29 Thread Noel Jones
> can calculate the time one hour ago by using a command something like > > TZ={your timezone 1} date > > > > > > -- > > Noel Jones > > > Is there a way that I could do this without using find? I basically just > need a listing of files to

Re: Is there a Data Communications Program Native to FreeBSD?

2005-10-22 Thread Noel Jones
on of my > modem? > tip and cu are part of the base system and should work for manually setting modem parameters. If you want something more sophisticated, ports/comms has several. I've used ecu and kermit for various projects in the past. -- Noel Jones ___

Re: How to have sshd log IP numbers instead of reverse lookups

2005-11-27 Thread Noel Jones
umber from whence the > authentication error originated? > > I believe adding UseDNS no to sshd_config will do what you want. -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Sendmail question

2007-07-26 Thread Noel Jones
t; Hmmm... no one seems to have cottoned onto the 'requires > authentication' statement in the original message. As far as I can > tell, ssmtp only allows authentication via the use of cryptographic > certificates -- which is probably the most secure way of doing > authentication

Re: Postfix/SpamAssassin Guru?

2007-08-24 Thread Noel Jones
*all* tagged spam would be delivered to a single mailbox. OK if that's what you want. an easier way is to run spamassassin under the control of amavisd-new and let amavisd-new add address extensions such as user+spam and to let dovecot file the mail in a spam folder. -- Noel Jones _

Re: Postfix/SpamAssassin Guru?

2007-08-26 Thread Noel Jones
On 8/25/07, Eric Crist <[EMAIL PROTECTED]> wrote: > > On Aug 24, 2007, at 11:26 PMAug 24, 2007, Noel Jones wrote: > > [snip] > > > an easier way is to run spamassassin under the control of amavisd-new > > and let amavisd-new add address extensions such as user+spa

Re: Named

2007-08-26 Thread Noel Jones
On 8/25/07, Narek Gharibyan <[EMAIL PROTECTED]> wrote: > Has Anyone tried to use Named under windows? What are results? > I used bind on windows a couple years ago. Seemed to work as expected. Official binary packages for Windows are available from isc.org --

Re: export nfs to a host with dynamic IP address

2007-03-19 Thread Noel Jones
om ports/security/openvpn and export NFS to the VPN tunnel address. OpenVPN is secure, fairly easy to configure, and works well with dynamic IP. -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd

Re: completly remove (or modify) a port

2007-04-18 Thread Noel Jones
On 4/18/07, Ray <[EMAIL PROTECTED]> wrote: Hello all, I have been trying to work with postfix from the ports collection. I need to rebuild it to include mysql support. I tried #make deinstall but a subsequent #make install doesn't give me the options screen. try "make config" __

Re: a bit OT - VPN+Windows

2007-01-08 Thread Noel Jones
usr/ports/security/openvpn docs and good sample configs: http://openvpn.net/ windows gui: http://openvpn.se/ -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send a

Re: Load balancing outgoing mail relay

2007-01-17 Thread Noel Jones
small amounts of mail, but leave it on if sending thousands of messages at a time. -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Load balancing outgoing mail relay

2007-01-17 Thread Noel Jones
list. http://www.postfix.org/DEBUG_README.html#mail -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ssh public key authentification

2007-01-18 Thread Noel Jones
refused out key." Did you copy the displayed "Public key for pasting into OpenSSH" from PuttyGEN, or did you paste the actual contents of the public key? Putty's on-disk format for public keys is not compatible with OpenSSH. -- Noel Jones __

Re: problem with email...

2005-08-31 Thread Noel Jones
rs are: - add a virus scanner to your mail server (clamav works well) - reject mail with invalid local sender addresses - add some spam controls to your mail server Specific answers depend on what mail software (sendmail? postfix? exim? qmail? some

Re: script advice

2005-09-14 Thread Noel Jones
in/who | /usr/bin/grep -v "$TTY"` [ -z "$USERS" ] && { echo Other users logged on! echo $USERS echo logging out... logout } -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/

Re: ntp problem :(

2005-09-15 Thread Noel Jones
es. I don't know how to tell ntpdate to use only IPv4 addresses, so a workaround is to use the IPv4 address directly. ntpdate -v 129.88.30.1 -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/fre

Re: bruteforceblocker + PF

2005-10-05 Thread Noel Jones
messages such as: 220.92.126.217 was logged with total count of 1. when an ssh login fails? And then after $max_attempts is exceeded you should see: IP 202.92.126.217 reached the maximum number of failed attempts!!! Adding IP to the firewall... -- Noel Jones _

Re: bruteforceblocker + PF

2005-10-06 Thread Noel Jones
On 10/6/05, Enrique Ayesta Perojo <[EMAIL PROTECTED]> wrote: > El Miércoles, 5 de Octubre de 2005 21:53, Noel Jones escribió: > > > I'm going to assume this is just a small part of your pf.conf, because > > the part you show doesn't allow any internet access.

Re: DomainsKeys/DKIM with Postfix - Questions

2007-05-07 Thread Noel Jones
otice dkim-milter-0.7.0 was just released yesterday, haven't tried it yet. -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: postgrey question

2005-06-02 Thread Noel Jones
fically add support for this type of access map. This is very different from amavisd-new which expects to receive the entire message via SMTP from postfix. -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: [OT] ssh security

2010-03-08 Thread Noel Jones
a zero-knowledge authentication method such as SRP[1]. Until new code is written for ssh to take advantage of something like this, we're stuck with what's available. -- Noel Jones [1] http://srp.stanford.edu/ ___ freebsd-questions@free

Re: warning: network_biopair_interop: error reading 5 bytes from the network: Connection reset by peer

2010-03-09 Thread Noel Jones
in a while, it can be safely ignored. If you get it on every connection, your TLS is broken. If you get it fairly consistently with some specific client, maybe that client has a busted TLS implementation. -- Noel Jones ___ freebsd-questions@freebsd.org

Re: warning: network_biopair_interop: error reading 5 bytes from the network: Connection reset by peer

2010-03-09 Thread Noel Jones
Add your client IP to the postfix debug peer list and follow up o the postfix users list On Mar 9, 2010 5:02 PM, "Jerry" wrote: On Tue, 9 Mar 2010 12:36:31 -0600 Noel Jones articulated: > Maybe you didn't have TLS enabled before? > > Anyway, this message caused by t

Re: FreeBSD 8: Postfix policyd-weight not working!!!

2010-04-08 Thread Noel Jones
net:[192.168.49.7]:12525 > soft_bounce = no > transport_maps = hash:/usr/local/etc/postfix/transport > unknown_local_recipient_reject_code = 550 > > Now, my transport file is: > > nis.X.org    smtp:[192.168.49.6]  ----->jail-A > > Is created:  transport.db > > An

Re: Setup Fail2Ban on FreeBSD

2010-04-23 Thread Noel Jones
On Fri, Apr 23, 2010 at 12:49 PM, Bauer, Aaron J. wrote: > I am currently using FreeNAS 0.7 for a file server.  I have multiple SSH > bruteforce attacks each week, and wish to use fail2ban to prevent this. > > I don't have much experience with BSD, and am having trouble getting > everything to w

Re: chown confusion

2006-04-27 Thread Noel Jones
ng like: # chgrp groupname dirname # chmod ug+rwx dirname http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/permissions.html -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: vacation for postfix

2006-04-27 Thread Noel Jones
ix however (and don't > have sendmail installed), will it work fine with postfix ? Yes, it will work fine as long as these are local (not virtual) users each with their own home directory. -- Noel Jones ___ freebsd-questions@freebsd.org mailing l

Re: Tailing logs

2008-08-23 Thread Noel Jones
g > > > When I get a free moment, I need to see about making that --color-always > the default. > ___ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe,

Re: How to prevent users from receiving email

2006-08-19 Thread Noel Jones
e error messages Postfix will return. See, for example: http://www.postfix.org/access.5.html Close. But check_client_access is unlikely to be effective matching a recipient address. Use check_recipient_access instead. There are lots of examples on the postfix-users list. -- Noel Jon

Re: Open Mail Relay

2010-08-14 Thread Noel Jones
hen it's unlikely your server is an open relay. But you may need to add some spam filtering to your lists, or at least restrict posting to members only. -- Noel Jones ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/l