Re: Blocking of domain strings in iptables

2014-02-08 Thread David Ford
I implemented this easily some time ago due to a situation where product development was unable or unwilling to disable open resolvers. i'll post my ruleset then describe it then describe it since it contains multiple functions. Chain INPUT (policy ACCEPT 68M packets, 4377M bytes) pkts b

Re: Dealing with abuse complaints to non-existent contacts

2014-08-10 Thread David Ford
i have numerous servers that must have open ssh access to everyone in multiple datacenters for several hundred users from many different and varying origins that change frequently. whitelist/blacklisting would be a nightmare. i use a PAM module that automatically adds every new ssh connection

Re: Linux: concerns over systemd [OT]

2014-10-22 Thread David Ford
> Which leads me to ask - those of you running server farms - what > distros are popular these days, for server-side operations? We've > been running Debian like forever (by way of Solaris and redhat) - but > this systemd thing is making me rethink things. Seems like an awful > lot of folks are n

Re: What's going on with NTP?

2013-12-25 Thread David Ford
On 12/25/2013 11:35 AM, John Levine wrote: > I have two FreeBSD servers where the NTP daemons are using double digit CPU > percentages today rather than the usual 0.01%. Restarting them didn't help. > > The clock on my Android phone is five hours slow. (It's not the time zone, > I checked that.)

Re: google contact? why is google hosting/supporting/encouraging spammers?

2010-02-03 Thread David Ford
Google groups cautions you about pre-emptively adding people if you choose this method of subscribing them. On 02/04/10 02:12, Jim Mercer wrote: > [...] > and google is ok with that? > > geez, "do no harm" > > really? > > --jim

Re: google contact? why is google hosting/supporting/encouraging spammers?

2010-02-04 Thread David Ford
I feel fairly sure in saying that most mailing list software, newsgroup software, and communication software in general, will allow you to preemptively add people to your address book, subscription lists, etc. Every router and switch out there allows forged packets through them, should we lambast

Re: google contact? why is google hosting/supporting/encouragingspammers?

2010-02-04 Thread David Ford
Lately I am flooded with Yahoo groups spammers and I have never gotten a response out of Yahoo. I've never got a response from Microsoft with regards to MSN or Hotmail spammers. I have gotten responses from Google and they've shut down the spammers in question. Our experience is not all encompas