KCLUG October 2004

53 participants
175 discussions

RE: Help configuring email server...
by linux＠bizniche.com 13 Oct '04

13 Oct '04

I've made some big progress getting the email working. Brian, I was looking at the How-To that B. Densmore pointed me to at www.amason.net. So far, the following working: 1) Sending and receiving local and remote mail from mutt or squirrelmail. 2) Mail is getting to ~/Maildir so IMAP stuff works. I can setup the IMAP connection via thunderbird, and pull mail from there. 3) Fetchmail is pulling mail from a pop3 account, and dumping it into my local account. Here is what's not working yet. 1) Fetchmail only runs when I tell it to (either with commandline or the webmin interface). I am supposing that cron could handle this for me, but want to make sure there is no built-in fetchmail periodic checking feature that I'm missing. 2) I _really_ want to find out if there is way I can get fetchmail (or something else?) to put mail it gets from the pop accounts into IMAP folder based on which account it pulls from. 3) I still need to get exim to send via my ISP's smtp server for those domains that block dynamic hosts. I was reading that you can set it up to only use the smarthost for some hosts, and not all. I'm not sure if it would be better to selectively use the smarthost, or to use it for all mail. So...huge improvements! It's being really fun to mess around with this stuff too. I'd love any comments on the remaining items, if anyone has been through this type of thing. Matt

2 1

RE: Help configuring email server...
by Brian Densmore 13 Oct '04

13 Oct '04

> -----Original Message----- > From: linux(a)bizniche.com > > > I've made some big progress getting the email working. > > Brian, I was looking at the How-To that B. Densmore pointed me to at > www.amason.net. Another happy customer! Glad it helped you! > > So far, the following working: > 1) Sending and receiving local and remote mail from mutt or > squirrelmail. > 2) Mail is getting to ~/Maildir so IMAP stuff works. I can setup the > IMAP connection via thunderbird, and pull mail from there. > 3) Fetchmail is pulling mail from a pop3 account, and dumping > it into my > local account. > > Here is what's not working yet. > 1) Fetchmail only runs when I tell it to (either with commandline or > the webmin interface). I am supposing that cron could handle this for > me, but want to make sure there is no built-in fetchmail periodic > checking feature that I'm missing. I don't use fetchmail, so YMMV. <quote> Simply invoking fetchmail -d 900 will, therefore, poll all the hosts described in your ~/.fetchmailrc file except those explicitly excluded with the 'skip' verb) once every fifteen minutes. </quote> If you run this then you shouldn't have to worry about fetchmail only running when you tell it to. Also, you can add this line to your rc.local file and every time the system boots fetchmail will run as a daemon. Provided of course you have an rc.local and it is called as part of your boot process. Sure it's ugly to put it in rc.local like this rather than as a full blown script procedure, but hey it should work. The 900 is of course 900 seconds. No need for a cron entry. > 2) I _really_ want to find out if there is way I can get > fetchmail (or > something else?) to put mail it gets from the pop accounts into IMAP > folder based on which account it pulls from. I'll have to research this one. > 3) I still need to get exim to send via my ISP's smtp server > for those > domains that block dynamic hosts. I was reading that you can > set it up > to only use the smarthost for some hosts, and not all. I'm > not sure if > it would be better to selectively use the smarthost, or to use it for > all mail. It should be possible but you'll need to go into the exim config files for this. There are documents on how to do this. I haven't done it, but have looked at the exim documentation. I wish you luck. Lots of it. ;')

1 0

Re: Shared teleconferencing in Linux
by Brian Kelsay 13 Oct '04

13 Oct '04

Gnomemeeting is one option. It is supposed to connect to Net Meeting. I don't know if you get the shared whiteboard. Brian Kelsay >>> Leo Mauler <webgiant(a)yahoo.com> 10/12/04 07:13AM >>> What I'm wanting here is the ability to type chat, draw on a shared whiteboard, share photos, and possibly audio teleconferencing. I'm not looking for video teleconferencing but it would be interesting as an option. I was adjusting Components for a friend with Windows98 and saw "NetMeeting". It sounded interesting but I'd like to be able to do that with Linux instead, and presumably things have improved a bit since 1998.

2 1

Re: Unsure of log report entry
by Brian Kelsay 13 Oct '04

13 Oct '04

Doc, your box is running iptables, which plugs into the kernel, so the kernel sends the error messages. What are you using for the router? A distro of Linux with iptables and Snort? Hopefully yes, with your server in a DMZ to limit access from it to the internal network. By you saying it runs DNS, I'm guessing it is not cordoned off. The logs on your router/firewall will probably have more info. I would check that the webserver is up to date for all security updates and run ckrootkit on it if it is way out of date. Ask Brian Densmore about this. Can you really shoot lasers and remove pain? Cool. Can you hook us up with something like Star trek has? I just want to do a little target practice. Brian Kelsay >>> docv <> 10/12/04 06:21PM >>> No, Logwatch doesn't tell me where it came from. I am running HTTP, DNS and POP3 on that box. I did have an alert message from my router letting me know that an attack was unsuccessful from that IP address, inbound from WAN, but was concerned when I say that this log message was coming from the kernel. I'm obviously not very knowledgeable about TCP/IP protocols but this old dog is still learning! ;-) And to answer Dustin's question, no, that's not my clinic. As in my signature lines, my clinic is the Laser Pain Relief Center in downtown Lee's Summit (just opened it up 3 weeks ago). Brian Kelsay wrote: > ICMP is a ping request. It just means that you are unable to get to that box. > But, you want to know why your box is trying to hit it. Are you running the > box as a webserver or any other type of server? Is this a ping from the > outside or inside? Does Logwatch tell you this? > > > Brian Kelsay -- Steve Vaitl, D.C. Certified Chiropractic Sports Physician Laser Pain Relief Center

1 0

Re: Unsure of log report entry
by Brian Kelsay 12 Oct '04

12 Oct '04

ICMP is a ping request. It just means that you are unable to get to that box. But, you want to know why your box is trying to hit it. Are you running the box as a webserver or any other type of server? Is this a ping from the outside or inside? Does Logwatch tell you this? Brian Kelsay >>> docv <> 10/12/04 07:37AM >>> I've got a box running RH9.0 and in the Logwatch report last night, I got the following entry; --------------------- Kernel Begin ------------------------ 8 Time(s): ICMP: 65.70.45.21: Source Route Failed. ---------------------- Kernel End ------------------------- Unfortunately, the is NOT my IP address!!! Is this telling me what I think it is, The box has been compromised????

2 1

Keystroke Macro Recording Software for Mozilla?
by Jon Moss 12 Oct '04

12 Oct '04

I want to automate some of the tasks I do daily (mostly checking websites that require I login but are SSL encrypted). Any suggestions on software or plugins for capturing keystrokes and mouse clicks? -- Thanks very much, Jon Moss jon.moss(a)cnonline.net

2 1

RE: Unsure of log report entry
by Brian Densmore 12 Oct '04

12 Oct '04

Like I was saying it's hard to say if he's been hacked, from this one message. Obviously he has been hit with scan, either automated or manually, to determine if there is a weakness in his system or not. I suspect a deeper look in the log files might dig up more information. It could just have been a harmless scan that someone dig to see what happens when you scan someone. Or it could be more sinister. > -----Original Message----- > From: Dustin Decker > > > > -----Original Message----- > > From: kclug-bounces(a)kclug.org > > > > I've got a box running RH9.0 and in the Logwatch report > last night, I > > got the following entry; > > > > --------------------- Kernel Begin ------------------------ > > > > > > 8 Time(s): ICMP: 65.70.45.21: Source Route Failed. > > > > ---------------------- Kernel End ------------------------- > > > > Unfortunately, the is NOT my IP address!!! Is this telling me what I > > think it is, The box has been compromised???? > > What it indicates is that 65.70.45.21 tried eight times to make use of > source routing. The short answer on source routing is that > it's a feature > of TCP/IP whereby you can direct the path a packet will > follow. This could > allow an attacker to cause traffic to pass through a host > they have control > of, to view its contents, etc. You can read up on this more in TCP/IP > Illustrated, Volume I by the late W. Richard Stevens - aka > The TCP/IP Bible. > > Here's an interesting bit - do a whois on the host in question: > 65.70.45.21 > > This turns out to be an SBC customer, most likely DSL. This > is registered > to a client named Gould Family Practice. I see from your > signature below > you're in medicine - is this where you work, or a competitor? > > The good news is, the source routing attempt failed. This > doesn't indicate > you have been hacked, but this type of traffic certainly isn't normal. > Someone is rattling the fence. > Dustin

2 1

Unsure of log report entry
by docv 12 Oct '04

12 Oct '04

I've got a box running RH9.0 and in the Logwatch report last night, I got the following entry; --------------------- Kernel Begin ------------------------ 8 Time(s): ICMP: 65.70.45.21: Source Route Failed. ---------------------- Kernel End ------------------------- Unfortunately, the is NOT my IP address!!! Is this telling me what I think it is, The box has been compromised???? -- Steve Vaitl, D.C. Certified Chiropractic Sports Physician Laser Pain Relief Center laser(a)vaitl.net (816)695-4897 Adjunct Professor, Biology and Human Anatomy Kansas City Kansas Community College 7250 State Avenue Kansas City, Kansas 66112

3 2

RE: BitTorrent + INDUCE Act + Linspire 5.0
by Brian Densmore 12 Oct '04

12 Oct '04

Is it possible to invoke Godwin's law by naming Eva Braun, it being a circular reference to Hitler? Or does that invoke the corollary of Godwin's law? Or is it in itself a circular reference to Godwin's law? For those with a curious mind Fidonet's name comes from old Tom's Fido BBS software way back in the 80s. "The name Fido came from the mishmash of 68000 hardware that Tom was using to run the BBS on ... a real mongrel." > -----Original Message----- > From: Dustin Decker > > > -----Original Message----- > > From: kclug-bounces(a)kclug.org > > [snip] > > > FIDOnet saw some similar accusations in it's day > > I, for one, am curious to know where the name FIDOnet came from. I'm > assuming it was named for someone's dog - the only real > question is whether > it was Eva Braun's dog, or perhaps that of her lover. Either > way, I'm sure > that poor pup grew up in hell.

3 2

RE: Unsure of log report entry
by Brian Densmore 12 Oct '04

12 Oct '04

It's hard to say without more information. > -----Original Message----- > From: docv > > I've got a box running RH9.0 and in the Logwatch report last night, I > got the following entry; > > --------------------- Kernel Begin ------------------------ > > > 8 Time(s): ICMP: 65.70.45.21: Source Route Failed. > > ---------------------- Kernel End ------------------------- > > Unfortunately, the is NOT my IP address!!! Is this telling me what I > think it is, The box has been compromised???? >

1 0

← Newer
1
...
10
11
12
13
14
15
16
17
18
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG October 2004