From owner-freebsd-isp Sun Oct 13 7:40:34 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7DF7537B401 for ; Sun, 13 Oct 2002 07:40:33 -0700 (PDT) Received: from net2.dinoex.sub.org (net2.dinoex.de [212.184.201.182]) by mx1.FreeBSD.org (Postfix) with ESMTP id A3A8E43E97 for ; Sun, 13 Oct 2002 07:40:31 -0700 (PDT) (envelope-from dirk.meyer@dinoex.sub.org) Received: from net2.dinoex.sub.org (dinoex@net2.dinoex.de [212.184.201.182]) by net2.dinoex.sub.org (8.12.6/8.12.6) with ESMTP id g9DEe7ge020004 for ; Sun, 13 Oct 2002 16:40:08 +0200 (CEST) (envelope-from dirk.meyer@dinoex.sub.org) X-MDaemon-Deliver-To: X-Authentication-Warning: net2.dinoex.sub.org: Host dinoex@net2.dinoex.de [212.184.201.182] claimed to be net2.dinoex.sub.org Received: from gate.dinoex.sub.org (dinoex@localhost) by net2.dinoex.sub.org (8.12.6/8.12.6/Submit) with BSMTP id g9DEe6a6019987 for ; Sun, 13 Oct 2002 16:40:06 +0200 (CEST) (envelope-from dirk.meyer@dinoex.sub.org) To: freebsd-isp@FreeBSD.ORG Message-ID: From: dirk.meyer@dinoex.sub.org (Dirk Meyer) Organization: privat Subject: Re: Advice: Upgrading Sendmail on FreeBSD Date: Sun, 13 Oct 2002 16:33:24 +0200 X-Mailer: Dinoex 1.79 References: <20021012090620.S15224-100000@floyd.gnulife.org> X-Gateway: ZCONNECT gate.dinoex.sub.org [UNIX/Connect 0.94] X-Accept-Language: de,en X-PGP-Fingerprint: 44 16 EC 0A D3 3A 4F 28 8A 8A 47 93 F1 CF 2F 12 X-Noad: Please don't send me ad's by mail. I'm bored by this type of mail. X-Copyright: (C) Copyright 2001 by Dirk Meyer -- All rights reserved. X-Note: sending SPAM is a violation of both german and US law and will at least trigger a complaint at your provider's postmaster. X-PGP-Key-Avail: mailto:pgp-public-keys@keys.de.pgp.net Subject:GET 0x331CDA5D X-No-Archive: yes X-ZC-VIA: 20021013000000S+2@dinoex.sub.org Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Jamie schrieb:, > Hi, wasn't sure if this belonged in a Sendmail board or here. I am > running Sendmail 8.11.6 on FreeBSD 4.5. I want to upgrade to 8.12.6. This > is going to be on a production machine so I am a bit nervous about it. > Here are my questions: > > 1) If I install it from ports, will it over-write and replace the original > installation, or is there something special I should do? no, you can switch between the old buildin and the new installation. by changing /etc/mail/mailer.conf. > 2) Would anyone advise that I build it from source in /usr/src instead of > using ports on an upgrade? It's less work to use the port, quicker to update too. > 3) Is there anything else I may want to bear in mind? /etc/make.conf: SENDMAIL_CF_DIR=/usr/local/share/sendmail/cf kind regards Dirk - Dirk Meyer, Im Grund 4, 34317 Habichtswald, Germany - [dirk.meyer@dinoex.sub.org],[dirk.meyer@guug.de],[dinoex@FreeBSD.org] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Oct 14 11: 0:49 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9919637B404 for ; Mon, 14 Oct 2002 11:00:47 -0700 (PDT) Received: from mailtoaster1.pipeline.ch (mailtoaster1.pipeline.ch [62.48.0.70]) by mx1.FreeBSD.org (Postfix) with SMTP id 2965D43EB3 for ; Mon, 14 Oct 2002 11:00:45 -0700 (PDT) (envelope-from oppermann@pipeline.ch) Received: (qmail 41005 invoked from network); 14 Oct 2002 17:57:42 -0000 Received: from unknown (HELO pipeline.ch) ([62.48.0.53]) (envelope-sender ) by mailtoaster1.pipeline.ch (qmail-ldap-1.03) with SMTP for ; 14 Oct 2002 17:57:42 -0000 Message-ID: <3DAB0604.7E780B3B@pipeline.ch> Date: Mon, 14 Oct 2002 19:59:32 +0200 From: Andre Oppermann X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-net@freebsd.org, freebsd-isp@freebsd.org Subject: Statistical Email Message Size Distribution Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org The first numbers of the Swiss Internet Analysis performed by Olivier Mueller and Daniel Graf are available. The whole study will be available in November 2002. Here is the statistical message size distribution of email messages observed in the analysis. These numbers are very important to find the right parameters for the filesystem the message store resides on. For example you have to tune the block size, fragment size and inode to block ratio to hold so many small files. We see that in total 49.3% of all messages are 4KB or smaller and that 80% are smaller than 16KB. 11% are between 17 and 64KB big. Almost 97% are smaller than 512KB. up to 2KB 23.53% up to 4KB 25.64% up to 8KB 18.43% up to 16KB 11.98% up to 32KB 5.78% up to 64KB 5.11% up to 128KB 2.83% up to 256KB 2.44% up to 512KB 1.50% up to 1MB 1.25% up to 10MB 1.47% more 10MB 0.0054% For these numbers 13.97 million messages flowing through the five largest Swiss ISPs in the first week of September 2002 have been analysed. So these numbers clearly apply to an ISP environment. -- Andre Oppermann To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Oct 14 14: 3:31 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B197437B404 for ; Mon, 14 Oct 2002 14:03:29 -0700 (PDT) Received: from ra.upan.org (ra.upan.org [204.107.76.19]) by mx1.FreeBSD.org (Postfix) with ESMTP id 007A443EAC for ; Mon, 14 Oct 2002 14:03:29 -0700 (PDT) (envelope-from mikel@ocsinternet.com) Received: from ocsinternet.com (thoth.clstr [10.0.0.7] (may be forged)) by ra.upan.org (8.12.3/8.11.6) with ESMTP id g9EL3NRN031191; Mon, 14 Oct 2002 17:03:28 -0400 (EDT) (envelope-from mikel@ocsinternet.com) Message-ID: <3DAB3137.9000100@ocsinternet.com> Date: Mon, 14 Oct 2002 17:03:51 -0400 From: Mikel King User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.0.0) Gecko/20020806 X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Kenneth P. Stox" Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Rackspace-like provider for FreeBSD? References: <1033400978.81362.4.camel@stox.sa.enteract.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Kenneth P. Stox wrote: >The vendor I have been using for several years now, Rackspace, is no >longer supporting FreeBSD due to claims that the latest versions of >FreeBSD of too insecure. > >So, can anyone make any recommendations for a similar provider who does >support FreeBSD? > >Please reply to me directly, as I don't think we need to clog up the >list with this. > >Many thanks, > >-Ken Stox > stox@imagescape.com > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message > > You should asked them where they're buying their crack? In any event have you had any luck with this? The company I work for has absolutely no probs hosting FreeBSD in fact we really don't like anthing else... -- Cheers, Mikel King Optimized Computer Solutions, INC 39 West Fourteenth Street Second Floor New York, NY 10011 http://www.ocsny.com +------------------------------------------+ Ok I'll go fsck my brain for a while as it's been a rather long night. Unix the other OS, a.k.a. Windows older, wiser, stronger, more efficient, sexier stable cousin. +------------------------------------------+ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Oct 14 14:19: 4 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8303E37B404 for ; Mon, 14 Oct 2002 14:19:03 -0700 (PDT) Received: from buffnet4.buffnet.net (buffnet4.buffnet.net [205.246.19.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id 810CE43EB3 for ; Mon, 14 Oct 2002 14:19:02 -0700 (PDT) (envelope-from shovey@buffnet.net) Received: from buffnet11.buffnet.net (buffnet11.buffnet.net [205.246.19.55]) by buffnet4.buffnet.net (8.9.3/8.8.7) with ESMTP id RAA29732; Mon, 14 Oct 2002 17:19:06 -0400 (EDT) (envelope-from shovey@buffnet.net) Date: Mon, 14 Oct 2002 17:18:53 -0400 (EDT) From: Stephen Hovey To: Mikel King Cc: "Kenneth P. Stox" , freebsd-isp@FreeBSD.ORG Subject: Re: Rackspace-like provider for FreeBSD? In-Reply-To: <3DAB3137.9000100@ocsinternet.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > Kenneth P. Stox wrote: > > >The vendor I have been using for several years now, Rackspace, is no > >longer supporting FreeBSD due to claims that the latest versions of > >FreeBSD of too insecure. > You should asked them where they're buying their crack? In any event The insecure statement usually really means, they have no one on staff who knows it that can keep it running etc. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Oct 14 15: 1:15 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C9D9B37B435 for ; Mon, 14 Oct 2002 15:01:09 -0700 (PDT) Received: from stox.sa.enteract.com (stox.sa.enteract.com [207.229.132.161]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4383243E97 for ; Mon, 14 Oct 2002 15:01:03 -0700 (PDT) (envelope-from stox@imagescape.com) Received: from localhost (localhost [127.0.0.1]) by stox.sa.enteract.com (8.12.6/8.12.3) with ESMTP id g9EM0xif092506; Mon, 14 Oct 2002 17:01:00 -0500 (CDT) (envelope-from stox@imagescape.com) Subject: END OF THREAD: Re: Rackspace-like provider for FreeBSD? From: "Kenneth P. Stox" To: Mikel King Cc: freebsd-isp@FreeBSD.ORG In-Reply-To: <3DAB3137.9000100@ocsinternet.com> References: <1033400978.81362.4.camel@stox.sa.enteract.com> <3DAB3137.9000100@ocsinternet.com> Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Ximian Evolution 1.0.8 Date: 14 Oct 2002 17:00:59 -0500 Message-Id: <1034632861.466.8002.camel@stox.sa.enteract.com> Mime-Version: 1.0 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 2002-10-14 at 16:03, Mikel King wrote: > > > You should asked them where they're buying their crack? In any event > have you had any luck with this? The company I work for has absolutely > no probs hosting FreeBSD in fact we really don't like anthing else... Well, as I mentioned in an earlier post, one of their salesmen was on crack, and personally I don't want to know where he got it from. I received a call from Rackspace the evening, of the same day, I posted this originally, and straightened out the whole mess. I think it is time for this thread to end, and to get back to useful discussion. Again, thanks to all who responded, -Ken Stox stox@imagescape.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Oct 14 22:51:27 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 14B0137B401 for ; Mon, 14 Oct 2002 22:51:25 -0700 (PDT) Received: from hotmail.com (oe24.pav2.hotmail.com [64.4.36.81]) by mx1.FreeBSD.org (Postfix) with ESMTP id B318A43EAF for ; Mon, 14 Oct 2002 22:51:24 -0700 (PDT) (envelope-from unixtools@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 14 Oct 2002 22:51:24 -0700 X-Originating-IP: [202.41.224.36] From: "Unix Tools" To: "Mikel King" , "Kenneth P. Stox" Cc: References: <1033400978.81362.4.camel@stox.sa.enteract.com> <3DAB3137.9000100@ocsinternet.com> Subject: Re: Rackspace-like provider for FreeBSD? Date: Mon, 14 Oct 2002 23:18:42 +0530 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-ID: X-OriginalArrivalTime: 15 Oct 2002 05:51:24.0559 (UTC) FILETIME=[E55321F0:01C2740E] Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, Try http://www.gainwithus.com 99.99% uptime 24/7 support ----- Original Message ----- From: "Mikel King" To: "Kenneth P. Stox" Cc: Sent: Tuesday, October 15, 2002 02:33 AM Subject: Re: Rackspace-like provider for FreeBSD? > Kenneth P. Stox wrote: > > >The vendor I have been using for several years now, Rackspace, is no > >longer supporting FreeBSD due to claims that the latest versions of > >FreeBSD of too insecure. > > > >So, can anyone make any recommendations for a similar provider who does > >support FreeBSD? > > > >Please reply to me directly, as I don't think we need to clog up the > >list with this. > > > >Many thanks, > > > >-Ken Stox > > stox@imagescape.com > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org > >with "unsubscribe freebsd-isp" in the body of the message > > > > > You should asked them where they're buying their crack? In any event > have you had any luck with this? The company I work for has absolutely > no probs hosting FreeBSD in fact we really don't like anthing else... > > -- > Cheers, > Mikel King > Optimized Computer Solutions, INC > 39 West Fourteenth Street > Second Floor > New York, NY 10011 > http://www.ocsny.com > > +------------------------------------------+ > Ok I'll go fsck my brain for a while as it's > been a rather long night. Unix the other OS, > a.k.a. Windows older, wiser, stronger, more > efficient, sexier stable cousin. > +------------------------------------------+ > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Oct 14 23:51:13 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B5D1E37B401 for ; Mon, 14 Oct 2002 23:51:11 -0700 (PDT) Received: from scan.pnc.com.au (scan.pnc.com.au [203.13.174.123]) by mx1.FreeBSD.org (Postfix) with SMTP id B957C43E77 for ; Mon, 14 Oct 2002 23:51:10 -0700 (PDT) (envelope-from peterh@ripewithdecay.com) Received: (qmail 22220 invoked by uid 84); 15 Oct 2002 17:00:20 +1000 Received: from unknown (HELO dialup-251.129.221.203.acc02-high-pen.comindico.com.au) (203.13.174.1) by scan.pnc.com.au with SMTP; 15 Oct 2002 17:00:14 +1000 Date: Tue, 15 Oct 2002 16:52:50 +1000 (EST) From: Peter Hoskin X-X-Sender: peterh@extortion.peterh.dropbear.id.au To: Unix Tools Cc: Mikel King , "Kenneth P. Stox" , Subject: Re: Rackspace-like provider for FreeBSD? In-Reply-To: Message-ID: <20021015165134.G38432-100000@extortion.peterh.dropbear.id.au> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org That doesn't look like a dedicated server provider. Although, fastservers.net are pretty decent. he.net bandwidth, cheap transfer rates, and they'll install FreeBSD. On Mon, 14 Oct 2002, Unix Tools wrote: > Hi, > Try http://www.gainwithus.com > 99.99% uptime > 24/7 support > > > > ----- Original Message ----- > From: "Mikel King" > To: "Kenneth P. Stox" > Cc: > Sent: Tuesday, October 15, 2002 02:33 AM > Subject: Re: Rackspace-like provider for FreeBSD? > > > > Kenneth P. Stox wrote: > > > > >The vendor I have been using for several years now, Rackspace, is no > > >longer supporting FreeBSD due to claims that the latest versions of > > >FreeBSD of too insecure. > > > > > >So, can anyone make any recommendations for a similar provider who does > > >support FreeBSD? > > > > > >Please reply to me directly, as I don't think we need to clog up the > > >list with this. > > > > > >Many thanks, > > > > > >-Ken Stox > > > stox@imagescape.com > > > > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org > > >with "unsubscribe freebsd-isp" in the body of the message > > > > > > > > You should asked them where they're buying their crack? In any event > > have you had any luck with this? The company I work for has absolutely > > no probs hosting FreeBSD in fact we really don't like anthing else... > > > > -- > > Cheers, > > Mikel King > > Optimized Computer Solutions, INC > > 39 West Fourteenth Street > > Second Floor > > New York, NY 10011 > > http://www.ocsny.com > > > > +------------------------------------------+ > > Ok I'll go fsck my brain for a while as it's > > been a rather long night. Unix the other OS, > > a.k.a. Windows older, wiser, stronger, more > > efficient, sexier stable cousin. > > +------------------------------------------+ > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 3:21: 5 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4AB5A37B401 for ; Tue, 15 Oct 2002 03:21:04 -0700 (PDT) Received: from westhost30.westhost.net (westhost30.westhost.net [216.71.84.171]) by mx1.FreeBSD.org (Postfix) with ESMTP id 635AA43E65 for ; Tue, 15 Oct 2002 03:21:03 -0700 (PDT) (envelope-from ank@ozinsight.com) Received: from anna (CPE-203-51-188-52.vic.bigpond.net.au [203.51.188.52]) by westhost30.westhost.net (8.11.6/8.11.6) with SMTP id g9FAL1Q12169 for ; Tue, 15 Oct 2002 05:21:01 -0500 Message-ID: <000f01c27434$903aa8c0$0200a8c0@anna> From: "Arkadi Kosmynin" To: Subject: An attack? Does it happen to anybody else? Date: Tue, 15 Oct 2002 20:20:55 +1000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, There were 3 incidents of high volume downloading from our site during the past week. I can't understand what is going on and would appreciate any info on the issue. I checked our logs: Folks from 195.210.137.130 downloaded ~140MB of the same file. Folks from 212.160.201.118 ~ 350MB. Folks from 213.17.138.154 ~ 590MB. This hurts us. What can I do about it? Thanks, Arkadi. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 4:29:53 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E053237B401 for ; Tue, 15 Oct 2002 04:29:50 -0700 (PDT) Received: from westhost30.westhost.net (westhost30.westhost.net [216.71.84.171]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5A37143EAF for ; Tue, 15 Oct 2002 04:29:50 -0700 (PDT) (envelope-from ank@ozinsight.com) Received: from anna (CPE-203-51-188-52.vic.bigpond.net.au [203.51.188.52]) by westhost30.westhost.net (8.11.6/8.11.6) with SMTP id g9FBTkG20332; Tue, 15 Oct 2002 06:29:47 -0500 Message-ID: <000a01c2743e$2fd41de0$0200a8c0@anna> From: "Arkadi Kosmynin" To: Cc: References: <000f01c27434$903aa8c0$0200a8c0@anna> <20021015110223.GA15252@surreal.seattlefenix.net> Subject: Re: An attack? Does it happen to anybody else? Date: Tue, 15 Oct 2002 21:29:48 +1000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Thanks Benjamin, Sorry about neglecting to provide more complete information. It was HTTP. The content is publicly available. All requests were like this: 212.160.201.118 - - [12/Oct/2002:05:09:07 -0500] "GET /client/ozum286.zip?Cache HTTP/1.0" 200 1757520 213.17.138.154 - - [12/Oct/2002:05:09:13 -0500] "GET /client/ozum286.zip?Cache HTTP/1.0" 200 1339080 195.210.137.130 - - [14/Oct/2002:08:09:22 -0500] "GET /download/ozway/ozway-401.tar.gz HTTP/1.0" 200 119838 I don't think this is an attack, really. Looks more like a virus or a broken automatic downloader of some kind. This is why I would like to know if it happened to anyone else. And the hosts don't seem to be closely related. Two are from Poland and one from Russia. I ignored the first two incidents, but now it seems to be a tendency... Arkadi. ----- Original Message ----- From: "Benjamin Krueger" To: "Arkadi Kosmynin" Cc: Sent: Tuesday, October 15, 2002 9:02 PM Subject: Re: An attack? Does it happen to anybody else? > * Arkadi Kosmynin (ank@ozinsight.com) [021015 03:21]: > > Hi, > > > > > > There were 3 incidents of high volume downloading from our site during the > > past week. I can't understand what is going on and would appreciate any info > > on the issue. > > > > I checked our logs: > > > > Folks from 195.210.137.130 downloaded ~140MB of the same file. > > Folks from 212.160.201.118 ~ 350MB. > > Folks from 213.17.138.154 ~ 590MB. > > > > This hurts us. What can I do about it? > > > > > > Thanks, > > > > Arkadi. > > You neglect to mention what service (ftp, http?) this is affecting, what they > were downloading, and whether the content is publicly available. Personally, I > never recommend that one assume every painful action on the internet is malicious. > Often folks end up acting hostile in return, only to find that the problem was > simply misconfigured software or a misguided server administrator. > > If it hurts, stop it. Block the hosts at the firewall, contact the administrator > of those machines or that network space, remove or move the files, use tcp wrappers > to lock them out, implement rate limiting, hide the content behind a username and > password, or cry. All are reasonable options, and all but one are productive. > > -- > Benjamin Krueger > ---------------------------------------------------------------- > Send mail w/ subject 'send public key' or query for (0x251A4B18) > Fingerprint = A642 F299 C1C1 C828 F186 A851 CFF0 7711 251A 4B18 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 5:11: 7 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1309E37B401 for ; Tue, 15 Oct 2002 05:11:06 -0700 (PDT) Received: from seattlefenix.net (seattleFenix.net [216.39.145.247]) by mx1.FreeBSD.org (Postfix) with ESMTP id A014543EC2 for ; Tue, 15 Oct 2002 05:11:05 -0700 (PDT) (envelope-from roo@seattlefenix.net) Received: by surreal.seattlefenix.net (Postfix, from userid 1001) id D531136B2E; Tue, 15 Oct 2002 04:02:23 -0700 (PDT) Date: Tue, 15 Oct 2002 04:02:23 -0700 From: Benjamin Krueger To: Arkadi Kosmynin Cc: freebsd-isp@FreeBSD.ORG Subject: Re: An attack? Does it happen to anybody else? Message-ID: <20021015110223.GA15252@surreal.seattlefenix.net> Reply-To: benjamin@seattleFenix.net References: <000f01c27434$903aa8c0$0200a8c0@anna> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <000f01c27434$903aa8c0$0200a8c0@anna> User-Agent: Mutt/1.4i X-PGP-Key: http://www.macguire.net/benjamin/public_key.asc Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org * Arkadi Kosmynin (ank@ozinsight.com) [021015 03:21]: > Hi, > > > There were 3 incidents of high volume downloading from our site during the > past week. I can't understand what is going on and would appreciate any info > on the issue. > > I checked our logs: > > Folks from 195.210.137.130 downloaded ~140MB of the same file. > Folks from 212.160.201.118 ~ 350MB. > Folks from 213.17.138.154 ~ 590MB. > > This hurts us. What can I do about it? > > > Thanks, > > Arkadi. You neglect to mention what service (ftp, http?) this is affecting, what they were downloading, and whether the content is publicly available. Personally, I never recommend that one assume every painful action on the internet is malicious. Often folks end up acting hostile in return, only to find that the problem was simply misconfigured software or a misguided server administrator. If it hurts, stop it. Block the hosts at the firewall, contact the administrator of those machines or that network space, remove or move the files, use tcp wrappers to lock them out, implement rate limiting, hide the content behind a username and password, or cry. All are reasonable options, and all but one are productive. -- Benjamin Krueger ---------------------------------------------------------------- Send mail w/ subject 'send public key' or query for (0x251A4B18) Fingerprint = A642 F299 C1C1 C828 F186 A851 CFF0 7711 251A 4B18 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 7: 1:16 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2625F37B401 for ; Tue, 15 Oct 2002 07:01:13 -0700 (PDT) Received: from hotmail.com (oe35.pav2.hotmail.com [64.4.36.92]) by mx1.FreeBSD.org (Postfix) with ESMTP id C0DDE43EAF for ; Tue, 15 Oct 2002 07:01:12 -0700 (PDT) (envelope-from unixtools@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue, 15 Oct 2002 07:01:12 -0700 X-Originating-IP: [202.41.224.36] From: "Unix Tools" To: "Arkadi Kosmynin" , Cc: References: <000f01c27434$903aa8c0$0200a8c0@anna> <20021015110223.GA15252@surreal.seattlefenix.net> <000a01c2743e$2fd41de0$0200a8c0@anna> Subject: Re: An attack? Does it happen to anybody else? Date: Tue, 15 Oct 2002 07:28:33 +0530 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-ID: X-OriginalArrivalTime: 15 Oct 2002 14:01:12.0726 (UTC) FILETIME=[52098B60:01C27453] Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, If it is apache use mod_throttle. Quite configurable. You can handle this situation with ease. I installed it and was quite happy ----- Original Message ----- From: "Arkadi Kosmynin" To: Cc: Sent: Tuesday, October 15, 2002 04:59 PM Subject: Re: An attack? Does it happen to anybody else? > Thanks Benjamin, > > > Sorry about neglecting to provide more complete information. It was HTTP. > The content is publicly available. All requests were like this: > > > 212.160.201.118 - - [12/Oct/2002:05:09:07 -0500] "GET > /client/ozum286.zip?Cache HTTP/1.0" 200 1757520 > > 213.17.138.154 - - [12/Oct/2002:05:09:13 -0500] "GET > /client/ozum286.zip?Cache HTTP/1.0" 200 1339080 > > 195.210.137.130 - - [14/Oct/2002:08:09:22 -0500] "GET > /download/ozway/ozway-401.tar.gz HTTP/1.0" 200 119838 > > I don't think this is an attack, really. Looks more like a virus or a broken > automatic downloader of some kind. This is why I would like to know if it > happened to anyone else. And the hosts don't seem to be closely related. Two > are from Poland and one from Russia. > > I ignored the first two incidents, but now it seems to be a tendency... > > Arkadi. > > ----- Original Message ----- > From: "Benjamin Krueger" > To: "Arkadi Kosmynin" > Cc: > Sent: Tuesday, October 15, 2002 9:02 PM > Subject: Re: An attack? Does it happen to anybody else? > > > > * Arkadi Kosmynin (ank@ozinsight.com) [021015 03:21]: > > > Hi, > > > > > > > > > There were 3 incidents of high volume downloading from our site during > the > > > past week. I can't understand what is going on and would appreciate any > info > > > on the issue. > > > > > > I checked our logs: > > > > > > Folks from 195.210.137.130 downloaded ~140MB of the same file. > > > Folks from 212.160.201.118 ~ 350MB. > > > Folks from 213.17.138.154 ~ 590MB. > > > > > > This hurts us. What can I do about it? > > > > > > > > > Thanks, > > > > > > Arkadi. > > > > You neglect to mention what service (ftp, http?) this is affecting, what > they > > were downloading, and whether the content is publicly available. > Personally, I > > never recommend that one assume every painful action on the internet is > malicious. > > Often folks end up acting hostile in return, only to find that the problem > was > > simply misconfigured software or a misguided server administrator. > > > > If it hurts, stop it. Block the hosts at the firewall, contact the > administrator > > of those machines or that network space, remove or move the files, use tcp > wrappers > > to lock them out, implement rate limiting, hide the content behind a > username and > > password, or cry. All are reasonable options, and all but one are > productive. > > > > -- > > Benjamin Krueger > > ---------------------------------------------------------------- > > Send mail w/ subject 'send public key' or query for (0x251A4B18) > > Fingerprint = A642 F299 C1C1 C828 F186 A851 CFF0 7711 251A 4B18 > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 7: 4:42 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2E12637B401 for ; Tue, 15 Oct 2002 07:04:40 -0700 (PDT) Received: from hotmail.com (oe65.pav2.hotmail.com [64.4.36.199]) by mx1.FreeBSD.org (Postfix) with ESMTP id CC90743EAC for ; Tue, 15 Oct 2002 07:04:39 -0700 (PDT) (envelope-from unixtools@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue, 15 Oct 2002 07:04:39 -0700 X-Originating-IP: [202.41.224.36] From: "Unix Tools" To: "Peter Hoskin" Cc: "Mikel King" , "Kenneth P. Stox" , References: <20021015165134.G38432-100000@extortion.peterh.dropbear.id.au> Subject: Re: Rackspace-like provider for FreeBSD? Date: Tue, 15 Oct 2002 07:32:02 +0530 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-ID: X-OriginalArrivalTime: 15 Oct 2002 14:04:39.0795 (UTC) FILETIME=[CD75C430:01C27453] Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org hi, They provide dedicated servers also Try contacting them. I myself have three servers with them two loaded with freebsd and one with WIN 2k. ----- Original Message ----- From: "Peter Hoskin" To: "Unix Tools" Cc: "Mikel King" ; "Kenneth P. Stox" ; Sent: Tuesday, October 15, 2002 12:22 PM Subject: Re: Rackspace-like provider for FreeBSD? > That doesn't look like a dedicated server provider. > > Although, fastservers.net are pretty decent. he.net bandwidth, cheap > transfer rates, and they'll install FreeBSD. > > On Mon, 14 Oct 2002, Unix Tools wrote: > > > Hi, > > Try http://www.gainwithus.com > > 99.99% uptime > > 24/7 support > > > > > > > > ----- Original Message ----- > > From: "Mikel King" > > To: "Kenneth P. Stox" > > Cc: > > Sent: Tuesday, October 15, 2002 02:33 AM > > Subject: Re: Rackspace-like provider for FreeBSD? > > > > > > > Kenneth P. Stox wrote: > > > > > > >The vendor I have been using for several years now, Rackspace, is no > > > >longer supporting FreeBSD due to claims that the latest versions of > > > >FreeBSD of too insecure. > > > > > > > >So, can anyone make any recommendations for a similar provider who does > > > >support FreeBSD? > > > > > > > >Please reply to me directly, as I don't think we need to clog up the > > > >list with this. > > > > > > > >Many thanks, > > > > > > > >-Ken Stox > > > > stox@imagescape.com > > > > > > > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org > > > >with "unsubscribe freebsd-isp" in the body of the message > > > > > > > > > > > You should asked them where they're buying their crack? In any event > > > have you had any luck with this? The company I work for has absolutely > > > no probs hosting FreeBSD in fact we really don't like anthing else... > > > > > > -- > > > Cheers, > > > Mikel King > > > Optimized Computer Solutions, INC > > > 39 West Fourteenth Street > > > Second Floor > > > New York, NY 10011 > > > http://www.ocsny.com > > > > > > +------------------------------------------+ > > > Ok I'll go fsck my brain for a while as it's > > > been a rather long night. Unix the other OS, > > > a.k.a. Windows older, wiser, stronger, more > > > efficient, sexier stable cousin. > > > +------------------------------------------+ > > > > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-isp" in the body of the message > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 8:37:14 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 56EFB37B401 for ; Tue, 15 Oct 2002 08:37:11 -0700 (PDT) Received: from inetworx.pcgameauthority.com (dsl081-233-167.lax1.dsl.speakeasy.net [64.81.233.167]) by mx1.FreeBSD.org (Postfix) with ESMTP id A566643E9C for ; Tue, 15 Oct 2002 08:37:10 -0700 (PDT) (envelope-from ahall@pcgameauthority.com) Received: from inetworx.pcgameauthority.com (localhost.pcgameauthority.com [127.0.0.1]) by inetworx.pcgameauthority.com (Postfix) with ESMTP id 22EE456349; Tue, 15 Oct 2002 08:37:57 -0700 (PDT) Received: (from nobody@localhost) by inetworx.pcgameauthority.com (8.12.3/8.12.3/Submit) id g9FFbrXx043467; Tue, 15 Oct 2002 08:37:53 -0700 (PDT) Date: Tue, 15 Oct 2002 08:37:53 -0700 (PDT) Message-Id: <200210151537.g9FFbrXx043467@inetworx.pcgameauthority.com> X-Authentication-Warning: inetworx.pcgameauthority.com: nobody set sender to ahall@pcgameauthority.com using -f From: "Andre Hall" To: "Arkadi Kosmynin" , Subject: Re: An attack? Does it happen to anybody else? X-Mailer: NeoMail 1.25 X-IPAddress: 10.10.10.1 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org What they are downloading seems to be publicly available on your sight. I search Google for Ozway-401 and I was directed to your web sight where I found this: Product Name OzWay - Binary Enhanced Web Gateway Great Introduction to the Usenet Download Files ozway-401.tar.gz File Size : 771.66Kb Version : 4.01 Release Date: 11th Oct 2002 Other Files manual.php System Requirements FreeBSD 4.6. Linux RedHat 7.3. Windows NT/2000/XP. Appears to be just a group of people who like your software. > Thanks Benjamin, > > > Sorry about neglecting to provide more complete information. It was HTTP. > The content is publicly available. All requests were like this: > > > 212.160.201.118 - - [12/Oct/2002:05:09:07 -0500] "GET > /client/ozum286.zip?Cache HTTP/1.0" 200 1757520 > > 213.17.138.154 - - [12/Oct/2002:05:09:13 -0500] "GET > /client/ozum286.zip?Cache HTTP/1.0" 200 1339080 > > 195.210.137.130 - - [14/Oct/2002:08:09:22 -0500] "GET > /download/ozway/ozway-401.tar.gz HTTP/1.0" 200 119838 > > I don't think this is an attack, really. Looks more like a virus or a broken > automatic downloader of some kind. This is why I would like to know if it > happened to anyone else. And the hosts don't seem to be closely related. Two > are from Poland and one from Russia. > > I ignored the first two incidents, but now it seems to be a tendency... > > Arkadi. > > ----- Original Message ----- > From: "Benjamin Krueger" > To: "Arkadi Kosmynin" > Cc: > Sent: Tuesday, October 15, 2002 9:02 PM > Subject: Re: An attack? Does it happen to anybody else? > > > > * Arkadi Kosmynin (ank@ozinsight.com) [021015 03:21]: > > > Hi, > > > > > > > > > There were 3 incidents of high volume downloading from our site during > the > > > past week. I can't understand what is going on and would appreciate any > info > > > on the issue. > > > > > > I checked our logs: > > > > > > Folks from 195.210.137.130 downloaded ~140MB of the same file. > > > Folks from 212.160.201.118 ~ 350MB. > > > Folks from 213.17.138.154 ~ 590MB. > > > > > > This hurts us. What can I do about it? > > > > > > > > > Thanks, > > > > > > Arkadi. > > > > You neglect to mention what service (ftp, http?) this is affecting, what > they > > were downloading, and whether the content is publicly available. > Personally, I > > never recommend that one assume every painful action on the internet is > malicious. > > Often folks end up acting hostile in return, only to find that the problem > was > > simply misconfigured software or a misguided server administrator. > > > > If it hurts, stop it. Block the hosts at the firewall, contact the > administrator > > of those machines or that network space, remove or move the files, use tcp > wrappers > > to lock them out, implement rate limiting, hide the content behind a > username and > > password, or cry. All are reasonable options, and all but one are > productive. > > > > -- > > Benjamin Krueger > > ---------------------------------------------------------------- > > Send mail w/ subject 'send public key' or query for (0x251A4B18) > > Fingerprint = A642 F299 C1C1 C828 F186 A851 CFF0 7711 251A 4B18 > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > > -- NeoMail - Webmail that doesn't suck... as much. http://neomail.sourceforge.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 9:17:19 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F0C3B37B401 for ; Tue, 15 Oct 2002 09:17:17 -0700 (PDT) Received: from mail.day-light.net (day-light.net [64.37.72.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3EED743EB1 for ; Tue, 15 Oct 2002 09:17:17 -0700 (PDT) (envelope-from john@day-light.com) Received: from w1 (118-203.bestdsl.net [216.162.118.203]) by mail.day-light.net (Postfix) with SMTP id 178C03520C; Tue, 15 Oct 2002 10:45:18 -0500 (CDT) Reply-To: From: "John Brooks" To: "'Arkadi Kosmynin'" , Subject: RE: An attack? Does it happen to anybody else? Date: Tue, 15 Oct 2002 10:45:41 -0500 Message-ID: <001801c27461$eafe9dc0$c905010a@daylight.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) In-Reply-To: <000f01c27434$903aa8c0$0200a8c0@anna> X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Importance: Normal Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Maybe there are multiple users NAT'ed behind those IP's. -- John Brooks john@stlbsd.org > -----Original Message----- > From: owner-freebsd-isp@FreeBSD.ORG > [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Arkadi Kosmynin > Sent: Tuesday, October 15, 2002 5:21 AM > To: freebsd-isp@FreeBSD.ORG > Subject: An attack? Does it happen to anybody else? > > > Hi, > > > There were 3 incidents of high volume downloading from our > site during the > past week. I can't understand what is going on and would > appreciate any info > on the issue. > > I checked our logs: > > Folks from 195.210.137.130 downloaded ~140MB of the same file. > Folks from 212.160.201.118 ~ 350MB. > Folks from 213.17.138.154 ~ 590MB. > > This hurts us. What can I do about it? > > > Thanks, > > Arkadi. > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 13:12:47 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 51F2237B401 for ; Tue, 15 Oct 2002 13:12:46 -0700 (PDT) Received: from arthur.tacni.net (colocateusa.net [64.247.218.8]) by mx1.FreeBSD.org (Postfix) with SMTP id B9D9B43E9C for ; Tue, 15 Oct 2002 13:12:45 -0700 (PDT) (envelope-from erichz@superhero.org) Received: (qmail 46988 invoked by uid 85); 15 Oct 2002 19:56:44 -0000 Received: from erichz@superhero.org by arthur.tacni.net by uid 81 with qmail-scanner-1.11 (uvscan: v4.1.60/v4200. . Clear:. Processed in 0.368144 secs); 15 Oct 2002 19:56:44 -0000 Received: from unknown (HELO superhero.org) (66.169.172.133) by arthur.tacni.net with SMTP; 15 Oct 2002 19:56:43 -0000 Message-ID: <3DAC7081.70809@superhero.org> Date: Tue, 15 Oct 2002 14:46:09 -0500 From: Erich Zigler User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.0.1) Gecko/20020826 X-Accept-Language: en-us, en MIME-Version: 1.0 To: isp@freebsd.org Subject: CGI on Tilde Websites Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I was wondering if anyone actually allows cgi-bin directories for tilde websites? Pros, Cons? Thanks. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 14:16:17 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4FB1737B401 for ; Tue, 15 Oct 2002 14:16:16 -0700 (PDT) Received: from mtiwmhc13.worldnet.att.net (mtiwmhc13.worldnet.att.net [204.127.131.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id A20D243E7B for ; Tue, 15 Oct 2002 14:16:15 -0700 (PDT) (envelope-from cswiger@mac.com) Received: from prime ([12.88.90.29]) by mtiwmhc13.worldnet.att.net (InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with SMTP id <20021015211613.BTBU23792.mtiwmhc13.worldnet.att.net@prime> for ; Tue, 15 Oct 2002 21:16:13 +0000 Message-ID: <014301c27490$15d04ac0$0301a8c0@prime> From: "Charles Swiger" To: References: <3DAC7081.70809@superhero.org> Subject: Re: CGI on Tilde Websites Date: Tue, 15 Oct 2002 17:16:10 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Erich Zigler wrote: > I was wondering if anyone actually allows cgi-bin directories for > tilde websites? > > Pros, Cons? If you mean, do ISPs exist which allow cgi-bin execution of content such as http://www.example.com/~user/script.cgi (or whatever)...? Sure, it's a service which is available. It's typically something which involves hosting fees (but that includes stuff like a $99/year mac.com account (*)), which go up in cost as you head towards having a dedicated machine or a dedicated rack at a colo facility. -Chuck To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 15: 1:54 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F2DD737B401; Tue, 15 Oct 2002 15:01:53 -0700 (PDT) Received: from worldnet.att.net (200-206-185-69.dsl.telesp.net.br [200.206.185.69]) by mx1.FreeBSD.org (Postfix) with SMTP id 9A95843E4A; Tue, 15 Oct 2002 15:01:37 -0700 (PDT) (envelope-from tommies6732107w47@worldnet.att.net) Reply-To: Message-ID: <038e76a18a5e$8183e3b3$1cb52ad8@warjsh> From: To: tommies673@worldnet.att.net Subject: Hi there! 1803hbXJ2-65-11 Date: Tue, 15 Oct 2002 22:37:55 -0100 MiME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: QUALCOMM Windows Eudora Version 5.1 Importance: Normal Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Cum Kitten is waiting for you! I set up a new homepage with a webcam, so we can talk live now! I WILL DO WHATEVER YOU WANT go here: http://www.cumkitten.20m.com/ 7261cRZMl8 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Oct 15 17:26:35 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8CE3537B401 for ; Tue, 15 Oct 2002 17:26:34 -0700 (PDT) Received: from mercury.jorsm.com (mercury.jorsm.com [207.112.128.9]) by mx1.FreeBSD.org (Postfix) with ESMTP id 408D243E42 for ; Tue, 15 Oct 2002 17:26:34 -0700 (PDT) (envelope-from steveb@mercury.jorsm.com) Received: by mercury.jorsm.com (Postfix, from userid 4147) id 85FCE1E1F14; Tue, 15 Oct 2002 19:26:10 -0500 (CDT) Received: from localhost (localhost [127.0.0.1]) by mercury.jorsm.com (Postfix) with ESMTP id 848A71E1E8A; Tue, 15 Oct 2002 19:26:10 -0500 (CDT) Date: Tue, 15 Oct 2002 19:26:10 -0500 (CDT) From: Stephen Bader To: Erich Zigler Cc: isp@freebsd.org Subject: Re: CGI on Tilde Websites In-Reply-To: <3DAC7081.70809@superhero.org> Message-ID: <20021015192412.E55929-100000@mercury.jorsm.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org We use a program called cgiwrap, which works quite well for this. You can get it at: http://cgiwrap.unixtools.org/ We just have users use www.domain.com/cgi-bin/cgiwrap/username/filename This prevents us from having to actually setup cgi-bins for all of our users in the apache config. cgiwrap just reads from their ~public_html/cgi-bin directory to find the proper script. -Steve ------------------------------------------------------------------------- Stephen Bader JORSM Internet, Regional Internet Services Systems Administrator 7 Area Codes in Chicagoland and NW Indiana steveb@jorsm.com 100Mbps+ Connectivity, 56K-DS3, V.90, ISDN (219) 322-2180 Quality Service, Affordable Prices http://www.jorsm.com Serving Gov, Biz, Indivds Since 1995 ------------------------------------------------------------------------- On Tue, 15 Oct 2002, Erich Zigler wrote: > I was wondering if anyone actually allows cgi-bin directories for tilde > websites? > > Pros, Cons? > > Thanks. > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 2:57:56 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 69A7B37B401 for ; Wed, 16 Oct 2002 02:57:52 -0700 (PDT) Received: from westhost30.westhost.net (westhost30.westhost.net [216.71.84.171]) by mx1.FreeBSD.org (Postfix) with ESMTP id BED7C43EAC for ; Wed, 16 Oct 2002 02:57:51 -0700 (PDT) (envelope-from ank@ozinsight.com) Received: from anna (CPE-203-51-188-52.vic.bigpond.net.au [203.51.188.52]) by westhost30.westhost.net (8.11.6/8.11.6) with SMTP id g9G9vYd02529; Wed, 16 Oct 2002 04:57:34 -0500 Message-ID: <001501c274fa$79a64120$0200a8c0@anna> From: "Arkadi Kosmynin" To: "Andre Hall" , References: <200210151537.g9FFbrXx043467@inetworx.pcgameauthority.com> Subject: Re: An attack? Does it happen to anybody else? Date: Wed, 16 Oct 2002 19:57:37 +1000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I wish it were so. Ozway is software for ISPs only, not for home use. Even though it is freeware, it is hard to imagine that suddenly almost 200 copies were downloaded by 200 ISPs via the same IP address. ----- Original Message ----- From: "Andre Hall" To: "Arkadi Kosmynin" ; Sent: Wednesday, October 16, 2002 1:37 AM Subject: Re: An attack? Does it happen to anybody else? > What they are downloading seems to be publicly available on your > sight. I search Google for Ozway-401 and I was directed to your web > sight where I found this: > > > Product Name OzWay - Binary Enhanced Web Gateway > Great Introduction to the Usenet > > Download Files ozway-401.tar.gz > File Size : 771.66Kb > Version : 4.01 > Release Date: 11th Oct 2002 > > Other Files manual.php > > System Requirements > FreeBSD 4.6. > Linux RedHat 7.3. > Windows NT/2000/XP. > > Appears to be just a group of people who like your software. > > > > > > > > Thanks Benjamin, > > > > > > Sorry about neglecting to provide more complete information. It was > HTTP. > > The content is publicly available. All requests were like this: > > > > > > 212.160.201.118 - - [12/Oct/2002:05:09:07 -0500] "GET > > /client/ozum286.zip?Cache HTTP/1.0" 200 1757520 > > > > 213.17.138.154 - - [12/Oct/2002:05:09:13 -0500] "GET > > /client/ozum286.zip?Cache HTTP/1.0" 200 1339080 > > > > 195.210.137.130 - - [14/Oct/2002:08:09:22 -0500] "GET > > /download/ozway/ozway-401.tar.gz HTTP/1.0" 200 119838 > > > > I don't think this is an attack, really. Looks more like a virus or > a broken > > automatic downloader of some kind. This is why I would like to know > if it > > happened to anyone else. And the hosts don't seem to be closely > related. Two > > are from Poland and one from Russia. > > > > I ignored the first two incidents, but now it seems to be a > tendency... > > > > Arkadi. > > > > ----- Original Message ----- > > From: "Benjamin Krueger" > > To: "Arkadi Kosmynin" > > Cc: > > Sent: Tuesday, October 15, 2002 9:02 PM > > Subject: Re: An attack? Does it happen to anybody else? > > > > > > > * Arkadi Kosmynin (ank@ozinsight.com) [021015 03:21]: > > > > Hi, > > > > > > > > > > > > There were 3 incidents of high volume downloading from our site > during > > the > > > > past week. I can't understand what is going on and would > appreciate any > > info > > > > on the issue. > > > > > > > > I checked our logs: > > > > > > > > Folks from 195.210.137.130 downloaded ~140MB of the same file. > > > > Folks from 212.160.201.118 ~ 350MB. > > > > Folks from 213.17.138.154 ~ 590MB. > > > > > > > > This hurts us. What can I do about it? > > > > > > > > > > > > Thanks, > > > > > > > > Arkadi. > > > > > > You neglect to mention what service (ftp, http?) this is > affecting, what > > they > > > were downloading, and whether the content is publicly available. > > Personally, I > > > never recommend that one assume every painful action on the > internet is > > malicious. > > > Often folks end up acting hostile in return, only to find that the > problem > > was > > > simply misconfigured software or a misguided server administrator. > > > > > > If it hurts, stop it. Block the hosts at the firewall, contact > the > > administrator > > > of those machines or that network space, remove or move the files, > use tcp > > wrappers > > > to lock them out, implement rate limiting, hide the content behind > a > > username and > > > password, or cry. All are reasonable options, and all but one are > > productive. > > > > > > -- > > > Benjamin Krueger > > > ---------------------------------------------------------------- > > > Send mail w/ subject 'send public key' or query for (0x251A4B18) > > > Fingerprint = A642 F299 C1C1 C828 F186 A851 CFF0 7711 251A 4B18 > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > > > > -- > NeoMail - Webmail that doesn't suck... as much. > http://neomail.sourceforge.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 3:36:49 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 888D737B401 for ; Wed, 16 Oct 2002 03:36:48 -0700 (PDT) Received: from smtp1.gh.com (smtp1.gh.com [196.3.64.7]) by mx1.FreeBSD.org (Postfix) with ESMTP id 240CC43E75 for ; Wed, 16 Oct 2002 03:36:47 -0700 (PDT) (envelope-from gagbey@ghana.com) Received: from [213.172.132.86] (helo=bgp) by smtp1.gh.com with smtp (Exim 4.05) id 181lXe-000PLE-00 for freebsd-isp@freebsd.org; Wed, 16 Oct 2002 10:36:43 +0000 Message-ID: <007f01c274ff$d45c5aa0$5684acd5@ghana.com> From: "Agbenya Adotey" To: "Freebsd" Subject: logging Date: Wed, 16 Oct 2002 10:36:04 -0000 Organization: N.C.S MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2720.3000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi folks, i work in an ISP. we are looking for a dedicated logging server for our customers. we want to build a freebsd box that would communicate with our dial-in routers and logging in all activities that go on. Does any body have a solution for this? Any help is greatly appreciated. Regards, Agbenya Adotey NOC Engineer Network Computer Systems Accra , Ghana. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 3:40:26 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 23DD837B401 for ; Wed, 16 Oct 2002 03:40:25 -0700 (PDT) Received: from www.golsyd.net.au (golsyd.net.au [203.57.20.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7E9CD43EB3 for ; Wed, 16 Oct 2002 03:40:24 -0700 (PDT) (envelope-from kaltorak@quake.com.au) Received: from [203.51.15.181] by www.quake.com.au (NTMail 4.30.0012/AB6169.63.5324aadf) with ESMTP id ijzhaaaa for ; Wed, 16 Oct 2002 20:40:11 +1000 Message-ID: <3DAD4204.5050501@quake.com.au> Date: Wed, 16 Oct 2002 20:40:04 +1000 From: Kal Torak Organization: Quake Networking User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.9) Gecko/20020311 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Arkadi Kosmynin Cc: freebsd-isp@FreeBSD.ORG Subject: Re: An attack? Does it happen to anybody else? References: <200210151537.g9FFbrXx043467@inetworx.pcgameauthority.com> <001501c274fa$79a64120$0200a8c0@anna> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Arkadi Kosmynin wrote: > I wish it were so. Ozway is software for ISPs only, not for home use. Even > though it is freeware, it is hard to imagine that suddenly almost 200 copies > were downloaded by 200 ISPs via the same IP address. I dont know about an attack.. Most likely a misconfigured something... Proxy or cache of some sort maybe... Best idea is to find out who owns the IP block and send them some mail about it.. I mean its just stupid that something is downloading the same file again and again... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 3:40:36 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F3F9F37B401 for ; Wed, 16 Oct 2002 03:40:35 -0700 (PDT) Received: from freebsd.rf0.com (ns.rf0.com [198.78.66.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id 41E4D43E75 for ; Wed, 16 Oct 2002 03:40:35 -0700 (PDT) (envelope-from rghf@fsck.me.uk) Received: from localhost (rghf@localhost) by freebsd.rf0.com (8.11.6/8.11.6) with ESMTP id g9GAeJ045810; Wed, 16 Oct 2002 11:40:19 +0100 (BST) (envelope-from rghf@fsck.me.uk) Date: Wed, 16 Oct 2002 11:40:19 +0100 (BST) From: Rus Foster X-X-Sender: rghf@freebsd.rf0.com To: Agbenya Adotey Cc: Freebsd Subject: Re: logging In-Reply-To: <007f01c274ff$d45c5aa0$5684acd5@ghana.com> Message-ID: <20021016113932.F42678-100000@freebsd.rf0.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, 16 Oct 2002, Agbenya Adotey wrote: > Hi folks, > i work in an ISP. we are looking for a dedicated logging server for our > customers. we want to build a freebsd box that would communicate with our > dial-in routers and logging in all activities that go on. > Does any body have a solution for this? > Any help is greatly appreciated. See if your routers can sent messages to a SYSLOG host. If so config syslogd.conf on the FreeBSD box to accept it Rus -- http://www.fsck.me.uk - My blog http://shells.fsck.me.uk - Hosting how you want it. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 4:11:26 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A4E0E37B401 for ; Wed, 16 Oct 2002 04:11:24 -0700 (PDT) Received: from mail.tcworks.net (mail.tcworks.net [216.61.218.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id A08D943EA9 for ; Wed, 16 Oct 2002 04:11:23 -0700 (PDT) (envelope-from ccook@tcworks.net) Received: from tcworks.net (stp.tcworks.net [216.61.218.6]) by mail.tcworks.net (8.11.6/8.11.6) with ESMTP id g9GBB2h23055; Wed, 16 Oct 2002 06:11:02 -0500 (CDT) Message-ID: <3DAD496E.7A8EBB78@tcworks.net> Date: Wed, 16 Oct 2002 06:11:42 -0500 From: Chris Cook X-Mailer: Mozilla 4.78 [en] (X11; U; Linux 2.4.2 i386) X-Accept-Language: en MIME-Version: 1.0 To: Rus Foster Cc: Agbenya Adotey , Freebsd Subject: Re: logging References: <20021016113932.F42678-100000@freebsd.rf0.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-RAVMilter-Version: 8.4.1(snapshot 20020920) (mail.tcworks.net) Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Rus Foster wrote: > > On Wed, 16 Oct 2002, Agbenya Adotey wrote: > > > Hi folks, > > i work in an ISP. we are looking for a dedicated logging server for our > > customers. we want to build a freebsd box that would communicate with our > > dial-in routers and logging in all activities that go on. > > Does any body have a solution for this? > > Any help is greatly appreciated. > > See if your routers can sent messages to a SYSLOG host. If so config > syslogd.conf on the FreeBSD box to accept it > > Rus On this note I am having trouble with syslogd accepting outside logging since upgrading from 3-stable to 4-stable. I understand that the syslog in the 4-x branch is much more secure and that you have to specify for it to allow logging from hosts but even when I use: syslogd -a "ip address" it will not log from localhosts... it WILL log from hosts on a different subnet. any ideas? Thanks. -- Chris o----< ccook@tcworks.net >------------------------------------o |Chris Cook - Admin |TCWORKS.NET - http://www.tcworks.net | |The Computer Works ISP |FreeBSD - http://www.freebsd.org | o-------------------------------------------------------------o To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 7:45: 6 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0766937B401 for ; Wed, 16 Oct 2002 07:45:02 -0700 (PDT) Received: from inetworx.pcgameauthority.com (dsl081-233-167.lax1.dsl.speakeasy.net [64.81.233.167]) by mx1.FreeBSD.org (Postfix) with ESMTP id 61CBB43EAA for ; Wed, 16 Oct 2002 07:45:01 -0700 (PDT) (envelope-from ahall@pcgameauthority.com) Received: from inetworx.pcgameauthority.com (localhost.pcgameauthority.com [127.0.0.1]) by inetworx.pcgameauthority.com (Postfix) with ESMTP id 0982B56349; Wed, 16 Oct 2002 07:45:54 -0700 (PDT) Received: (from nobody@localhost) by inetworx.pcgameauthority.com (8.12.3/8.12.3/Submit) id g9GEjrlE047080; Wed, 16 Oct 2002 07:45:53 -0700 (PDT) Date: Wed, 16 Oct 2002 07:45:53 -0700 (PDT) Message-Id: <200210161445.g9GEjrlE047080@inetworx.pcgameauthority.com> X-Authentication-Warning: inetworx.pcgameauthority.com: nobody set sender to ahall@pcgameauthority.com using -f From: "Andre Hall" To: "Arkadi Kosmynin" , "Andre Hall" , Subject: Re: An attack? Does it happen to anybody else? X-Mailer: NeoMail 1.25 X-IPAddress: 10.10.10.1 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org http://www.ozinsight.com/download/index.php I don't know what the motive of these individuals are but they are downloading a file publicly available. Another issue may be that they are using your site as a link from another site. Not highly likely but possible. If you want to stop the downloads just block those IPs access. > I wish it were so. Ozway is software for ISPs only, not for home use. Even > though it is freeware, it is hard to imagine that suddenly almost 200 copies > were downloaded by 200 ISPs via the same IP address. > > > ----- Original Message ----- > From: "Andre Hall" > To: "Arkadi Kosmynin" ; > Sent: Wednesday, October 16, 2002 1:37 AM > Subject: Re: An attack? Does it happen to anybody else? > > > > What they are downloading seems to be publicly available on your > > sight. I search Google for Ozway-401 and I was directed to your web > > sight where I found this: > > > > > > Product Name OzWay - Binary Enhanced Web Gateway > > Great Introduction to the Usenet > > > > Download Files ozway-401.tar.gz > > File Size : 771.66Kb > > Version : 4.01 > > Release Date: 11th Oct 2002 > > > > Other Files manual.php > > > > System Requirements > > FreeBSD 4.6. > > Linux RedHat 7.3. > > Windows NT/2000/XP. > > > > Appears to be just a group of people who like your software. > > > > > > > > > > > > > > > Thanks Benjamin, > > > > > > > > > Sorry about neglecting to provide more complete information. It was > > HTTP. > > > The content is publicly available. All requests were like this: > > > > > > > > > 212.160.201.118 - - [12/Oct/2002:05:09:07 -0500] "GET > > > /client/ozum286.zip?Cache HTTP/1.0" 200 1757520 > > > > > > 213.17.138.154 - - [12/Oct/2002:05:09:13 -0500] "GET > > > /client/ozum286.zip?Cache HTTP/1.0" 200 1339080 > > > > > > 195.210.137.130 - - [14/Oct/2002:08:09:22 -0500] "GET > > > /download/ozway/ozway-401.tar.gz HTTP/1.0" 200 119838 > > > > > > I don't think this is an attack, really. Looks more like a virus or > > a broken > > > automatic downloader of some kind. This is why I would like to know > > if it > > > happened to anyone else. And the hosts don't seem to be closely > > related. Two > > > are from Poland and one from Russia. > > > > > > I ignored the first two incidents, but now it seems to be a > > tendency... > > > > > > Arkadi. > > > > > > ----- Original Message ----- > > > From: "Benjamin Krueger" > > > To: "Arkadi Kosmynin" > > > Cc: > > > Sent: Tuesday, October 15, 2002 9:02 PM > > > Subject: Re: An attack? Does it happen to anybody else? > > > > > > > > > > * Arkadi Kosmynin (ank@ozinsight.com) [021015 03:21]: > > > > > Hi, > > > > > > > > > > > > > > > There were 3 incidents of high volume downloading from our site > > during > > > the > > > > > past week. I can't understand what is going on and would > > appreciate any > > > info > > > > > on the issue. > > > > > > > > > > I checked our logs: > > > > > > > > > > Folks from 195.210.137.130 downloaded ~140MB of the same file. > > > > > Folks from 212.160.201.118 ~ 350MB. > > > > > Folks from 213.17.138.154 ~ 590MB. > > > > > > > > > > This hurts us. What can I do about it? > > > > > > > > > > > > > > > Thanks, > > > > > > > > > > Arkadi. > > > > > > > > You neglect to mention what service (ftp, http?) this is > > affecting, what > > > they > > > > were downloading, and whether the content is publicly available. > > > Personally, I > > > > never recommend that one assume every painful action on the > > internet is > > > malicious. > > > > Often folks end up acting hostile in return, only to find that the > > problem > > > was > > > > simply misconfigured software or a misguided server administrator. > > > > > > > > If it hurts, stop it. Block the hosts at the firewall, contact > > the > > > administrator > > > > of those machines or that network space, remove or move the files, > > use tcp > > > wrappers > > > > to lock them out, implement rate limiting, hide the content behind > > a > > > username and > > > > password, or cry. All are reasonable options, and all but one are > > > productive. > > > > > > > > -- > > > > Benjamin Krueger > > > > --------------------------------------------------------------- - > > > > Send mail w/ subject 'send public key' or query for (0x251A4B18) > > > > Fingerprint = A642 F299 C1C1 C828 F186 A851 CFF0 7711 251A 4B18 > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-isp" in the body of the message > > > > > > > > > > -- > > NeoMail - Webmail that doesn't suck... as much. > > http://neomail.sourceforge.net > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > > -- NeoMail - Webmail that doesn't suck... as much. http://neomail.sourceforge.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 7:55:34 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B788337B401 for ; Wed, 16 Oct 2002 07:55:33 -0700 (PDT) Received: from moat.teksupport.net.au (moat.teksupport.net.au [203.17.1.98]) by mx1.FreeBSD.org (Postfix) with ESMTP id F231743ECD for ; Wed, 16 Oct 2002 07:55:31 -0700 (PDT) (envelope-from robseco@teksupport.net.au) Received: from teksupport.net.au (rob.secombe.teksupport.net.au [192.168.1.4]) by moat.teksupport.net.au (8.11.0/8.11.0) with ESMTP id g9GEtTI47494 for ; Thu, 17 Oct 2002 00:55:30 +1000 (EST) (envelope-from robseco@teksupport.net.au) Message-ID: <3DAD7DF7.69892012@teksupport.net.au> Date: Thu, 17 Oct 2002 00:55:51 +1000 From: Rob Secombe Organization: Teksupport Pty Ltd X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.2 i386) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-isp@FreeBSD.ORG Subject: Cold Fusion MX and FreeBSD Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi all, I was just wondering if anyone on the list has tried to get the Linux version of Cold Fusion MX to run under the FreeBSD Linux emulation? Cheers Rob To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 8:58:25 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CF4D537B401; Wed, 16 Oct 2002 08:58:23 -0700 (PDT) Received: from corserv.corserv.com (user153.net516.tx.sprint-hsd.net [65.40.201.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9845E43EAA; Wed, 16 Oct 2002 08:58:09 -0700 (PDT) (envelope-from klyons@corserv.com) Received: from corserv.com (cygni.corserv.com [192.168.1.2]) by corserv.corserv.com (8.11.6/8.11.6) with ESMTP id g9GF18s46644; Wed, 16 Oct 2002 10:01:09 -0500 (CDT) (envelope-from klyons@corserv.com) Message-ID: <3DAD8FD1.3989F2AB@corserv.com> Date: Wed, 16 Oct 2002 11:12:01 -0500 From: Kevin Lyons X-Mailer: Mozilla 4.72 [en]C-CCK-MCD NSCPCD472 (Win95; U) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-chat@freebsd.org, freebsd-isp@freebsd.org Subject: Verisign dns trick Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Thought this might save some of you out there some needless annoyance and or surprises and downtime. I just went to verisign and wanted to change the dns server of a particular domain. Previously, one could just type in the ip address and hostname to add, or click the old one do delete. Well verisign has changed the link. Now when you click "Manage DNS" it will change the DNS server records to verisign nameservers. Then, to get the actual dns server adjusted, you have to go back and click "Manage DNS" again, and enter the ip addresses that you actually want- that's if you realize what happened to begin with. If one doesn't realize what happened, he will have a hell of a time figuring out why aliases and MX records aren't working. I find it ironic that Verisign tries to be a "trust" broker when they themselves are resorting to underhanded tactics. If they keep this up, I suspect everyone will be using people like godaddy.com. The only justification for such action seems to be the fine print disclaimer which says "If you have services connected to this domain from another company, those services may no longer be available. By continuing, you will be able to add services from Verisign, such as Personalized Email and Web sites". - no kidding! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 9:22:51 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 57DA937B401 for ; Wed, 16 Oct 2002 09:22:50 -0700 (PDT) Received: from mgw1-out.MEIway.com (mgw1.meiway.com [212.73.210.75]) by mx1.FreeBSD.org (Postfix) with ESMTP id 707B843E42 for ; Wed, 16 Oct 2002 09:22:49 -0700 (PDT) (envelope-from LConrad@Go2France.com) Received: from VirusGate.MEIway.com (virus-gate.meiway.com [212.73.210.91]) by mgw1-out.MEIway.com (Postfix Relay Hub) with ESMTP id 61398EF6A5 for ; Wed, 16 Oct 2002 18:04:19 +0200 (CEST) Received: from localhost (localhost.meiway.com [127.0.0.1]) by VirusGate.MEIway.com (Postfix) with SMTP id 98BC35D00A for ; Wed, 16 Oct 2002 18:29:09 +0200 (CEST) Received: from mail.Go2France.com (ms1.meiway.com [212.73.210.73]) by VirusGate.MEIway.com (Postfix) with ESMTP id 375575D008 for ; Wed, 16 Oct 2002 18:29:09 +0200 (CEST) Received: from tx0-go2france-c.Go2France.com [32.100.173.138] by mail.Go2France.com with ESMTP (SMTPD32-6.06) id A458EC900CE; Wed, 16 Oct 2002 18:31:20 +0200 Message-Id: <5.1.1.6.2.20021016112117.02930ff0@mail.go2france.com> X-Sender: LConrad@Go2France.com@mail.go2france.com X-Mailer: QUALCOMM Windows Eudora Version 5.1.1 Date: Wed, 16 Oct 2002 11:22:41 -0500 To: freebsd-isp@freebsd.org From: Len Conrad Subject: Re: Cold Fusion MX and FreeBSD In-Reply-To: <3DAD7DF7.69892012@teksupport.net.au> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > Hi all, > >I was just wondering if anyone on the list has tried to get the Linux >version of Cold Fusion MX to run under the FreeBSD Linux emulation? MM doesn't support FreeBSD, but I think some while ago the non-MX versions could be forced to work, but I haven't seen anybody talk about CFMX working. Len To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 10: 7:20 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BCF4A37B401 for ; Wed, 16 Oct 2002 10:07:18 -0700 (PDT) Received: from platinum.daweb.net (platinum.daweb.net [217.158.56.20]) by mx1.FreeBSD.org (Postfix) with ESMTP id B912743EA9 for ; Wed, 16 Oct 2002 10:07:17 -0700 (PDT) (envelope-from jk@burstfire.net) Received: from platinum.daweb.net (localhost [127.0.0.1]) by platinum.daweb.net (8.12.6/8.12.6) with ESMTP id g9GH73YR064237 for ; Wed, 16 Oct 2002 18:07:03 +0100 (BST) (envelope-from jk@burstfire.net) Received: from localhost (jk@localhost) by platinum.daweb.net (8.12.6/8.12.6/Submit) with ESMTP id g9GH6wJc064234 for ; Wed, 16 Oct 2002 18:06:58 +0100 (BST) X-Authentication-Warning: platinum.daweb.net: jk owned process doing -bs Date: Wed, 16 Oct 2002 18:06:58 +0100 (BST) From: Jess Kitchen X-X-Sender: jk@platinum.daweb.net To: Freebsd Subject: Re: logging In-Reply-To: <3DAD496E.7A8EBB78@tcworks.net> Message-ID: <20021016173823.S62516-100000@platinum.daweb.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, 16 Oct 2002, Chris Cook wrote: [snip] > syslogd -a "ip address" > > it will not log from localhosts... it WILL log from hosts on a different > subnet. any ideas? Hi Chris, Try this in rc.conf syslogd_enable="YES" syslogd_flags="-a 1.2.3.0/23:*" If you have rogue devices on your network that don't originate packets from port 514 you should use the wildcard option in this case. -b will set the bind address, which obviously will break @localhost logging though you wouldn't be doing that anyway. Additionally you can stack the -a option, "-a x.x.1.1 -a x.x.2.1" but I think as default it will accept from a whole /24 if you only specify an IP without a mask. In any case, -d will spew debug output to stdout(err?) so you can see if its being refused or just lost locally due to syslog.conf being broken. Cheers, J. -- Jess Kitchen http://www.burstfire.net/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 10:23:55 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 24A5B37B659 for ; Wed, 16 Oct 2002 10:23:48 -0700 (PDT) Received: from blue.centerone.com (blue.centerone.com [204.133.183.111]) by mx1.FreeBSD.org (Postfix) with ESMTP id 249E243E9E for ; Wed, 16 Oct 2002 10:23:48 -0700 (PDT) (envelope-from rf-list@centerone.com) Received: from localhost (rf-list@localhost) by blue.centerone.com (8.9.3/8.9.3) with ESMTP id LAA17336 for ; Wed, 16 Oct 2002 11:35:45 -0600 Date: Wed, 16 Oct 2002 11:35:45 -0600 (MDT) From: Ralph Forsythe To: freebsd-isp@freebsd.org Subject: [ISN] Spam Masquerades as Admin Alerts (fwd) Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Generally I don't forward stuff, but this is something a few people might want to read through. I block all netbios in and out of my networks by default just from a security standpoint (including 135 - use a VPN if you need it!), but I suspect most people dont. Pop-up ads on web sites are bad enough, but this... -rf ---------- Forwarded message ---------- Date: Wed, 16 Oct 2002 02:24:08 -0500 (CDT) From: InfoSec News To: isn@attrition.org Subject: [ISN] Spam Masquerades as Admin Alerts http://www.wired.com/news/technology/0,1282,55795,00.html By Brian McWilliams Oct. 15, 2002 PDT A new breed of pop-up ads is appearing mysteriously on Microsoft Windows users' computers. The so-called "Messenger spams" have security experts and system administrators scratching their heads -- and recipients fuming. Some of the ads, which hit Windows systems through backdoor networking ports and not by e-mail or Web browsing, appear to have been generated by Direct Advertiser, a $700 software program developed by Florida-based DirectAdvertiser.com. By tapping into Messenger, a Windows service originally designed to enable system administrators to send messages to users on a network, Direct Advertiser can deliver "completely anonymous and virtually untraceable" ads "straight to the screen of your client," according to the company's website. "Now somebody on the other side of the world can sit there and pop up messages on your screen," said Gary Flynn, a security engineer at James Madison University, where users have recently reported receiving pop-up spam selling university diplomas. The Messenger service, not to be confused with Microsoft's MSN Messenger chat client, is enabled by default on Windows 2000, NT and XP systems, according to Lawrence Baldwin, operator of the myNetWatchman computer intrusion reporting service. Baldwin said potentially millions of systems may be vulnerable to the pop-ups, also known as "NetBIOS Spam." According to DirectAdvertiser.com's lead developer Lenard Iszak, the program can generate about 5,000 pop-up messages per hour, hitting more than one recipient per second. A demonstration of the Direct Advertiser software enables users to target a range of Internet addresses, such as those assigned to a specific ISP or a particular country. Zoltan Kovacs, founder of DirectAdvertiser.com, said the company has sold about 200 copies of the program since launching two months ago. According to Kovacs, the software is ideal for advertising 900-number and other telephone services. "I have customers who call me back and tell me they love it and it generates hundreds of calls right away," said Kovacs, who noted that Direct Advertiser is a good alternative to bulk e-mail because its messages are not regulated by spam laws. According to Flynn, many network administrators are puzzled over how the ads have weaseled through firewalls onto users' computers. While Windows Messenger traditionally uses commonly protected ports 137 and 139, Flynn said the recent pop-ups appear to use port 135, which is often left unprotected by a firewall because it's a vital conduit for communicating with a Microsoft service called RPC. Since mid-September, numerous myNetWatchman participants have received repeated probes on port 135 from a handful of Internet protocol addresses assigned to Everyones Internet (EV1.net), an Internet service provider in Houston, according to Baldwin. The numeric addresses translate into "NetBIOS machine names" that begin with WEBPOPUP and that have appeared in several recent ads, he said. EV1.net officials, who did not respond to interview requests, are investigating the issue, according to Baldwin. Now that spammers have pioneered the Windows Messenger technology, worm writers may be next to target the service, according to Harlan Carvey, a security engineer with a financial services firm. "I'm sure we're going to see spyware or malware that makes use of this," Carvey said. Carvey and other security experts said users can protect themselves from unwanted pop-ups by disabling the Windows Messenger service and/or properly configuring their firewalls. According to Kovacs, he hasn't promoted Direct Advertiser aside from touting it in a link from the control panel of StealthMail Master, a program he also markets that promises to hide bulk e-mailers' IP addresses. In December 2001, DirectAdvertiser.com's Iszak lost a dispute with America Online over the domain ICQmultipager.com. According to an archive of the site, ICQ MultiPager enabled users to broadcast ads to users of AOL's ICQ chat service. - ISN is currently hosted by Attrition.org To unsubscribe email majordomo@attrition.org with 'unsubscribe isn' in the BODY of the mail. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 22:28:16 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 414B237B401 for ; Wed, 16 Oct 2002 22:28:16 -0700 (PDT) Received: from opensrs.saignon.net (211.saignon.net [63.210.176.211]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7510743EA9 for ; Wed, 16 Oct 2002 22:28:15 -0700 (PDT) (envelope-from tony@saign.com) Received: from [192.168.1.102] (214.saignon.net [63.210.176.214]) by opensrs.saignon.net (8.11.6/8.11.3) with ESMTP id g9H5YAx94787 for ; Wed, 16 Oct 2002 22:34:11 -0700 (PDT) (envelope-from tony@saign.com) Subject: Bandwidth testing scripts, applications? From: Tony Saign To: freebsd-isp@FreeBSD.ORG In-Reply-To: References: Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Ximian Evolution 1.0.7 Date: 16 Oct 2002 22:27:19 -0700 Message-Id: <1034832439.1433.1.camel@frankenmobl> Mime-Version: 1.0 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Anyone have any recommendations? -Tony To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Oct 16 23:15: 4 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5BF4037B401 for ; Wed, 16 Oct 2002 23:15:03 -0700 (PDT) Received: from inet03.citec.qld.gov.au (inet03.citec.qld.gov.au [203.5.10.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id A83CA43E65 for ; Wed, 16 Oct 2002 23:14:52 -0700 (PDT) (envelope-from sgcccdc@citec.qld.gov.au) Received: by inet03.citec.qld.gov.au; id g9H6EGs79098; Thu, 17 Oct 2002 16:14:16 +1000 (EST) Received: from citecub.citec.qld.gov.au( 131.242.4.98) by inet03.citec.qld.gov.au via smap (V2.0) id xma078971; Thu, 17 Oct 02 16:14:08 +1000 Received: from guru.citec.qld.gov.au by citecub.citec.qld.gov.au (SMI-8.6/SMI-SVR4) id QAA00699; Thu, 17 Oct 2002 16:14:07 +1000 Received: by guru.citec.qld.gov.au (Postfix, from userid 60097) id 6987ED96A; Thu, 17 Oct 2002 16:14:07 +1000 (EST) Received: from localhost (localhost [127.0.0.1]) by guru.citec.qld.gov.au (Postfix) with ESMTP id 4F3471F5B; Thu, 17 Oct 2002 16:14:07 +1000 (EST) Date: Thu, 17 Oct 2002 16:14:07 +1000 (EST) From: Colin Campbell To: Tony Saign Cc: Subject: Re: Bandwidth testing scripts, applications? In-Reply-To: <1034832439.1433.1.camel@frankenmobl> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, Search google for "pathchar". On 16 Oct 2002, Tony Saign wrote: > Anyone have any recommendations? > > -Tony > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > Colin -- Colin Campbell Unix Support/Postmaster/Hostmaster CITEC +61 7 3227 6334 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Oct 17 2:57:43 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B156A37B401 for ; Thu, 17 Oct 2002 02:57:42 -0700 (PDT) Received: from mordrede.visionsix.com (mordrede.visionsix.com [65.202.119.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2A57743E97 for ; Thu, 17 Oct 2002 02:57:42 -0700 (PDT) (envelope-from watson@visionsix.com) Received: from yogi (unverified [65.202.119.169]) by mordrede.visionsix.com (Vircom SMTPRS 1.4.232) with SMTP id for ; Thu, 17 Oct 2002 04:57:41 -0500 Message-ID: <006401c275c2$5f28a680$a977ca41@yogi> From: "Lewis Watson" To: Subject: Amanda-Client Port Configuration Date: Thu, 17 Oct 2002 04:48:39 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hey everyone, I have done a make and make install on the amanda-client port and did the same for the xinetd port prior to that. I need some help on a few issues. What user/group should I use for amanda on freebsd? On RH I have always used xinetd for the amanda service config. Is there a recommended or "this is what works for me" way that someone can help me with so I can have my amanda server start backing up my freebsd machine. Thanks for the help! Lewis To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Oct 17 2:58:58 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5BD4437B401 for ; Thu, 17 Oct 2002 02:58:57 -0700 (PDT) Received: from mordrede.visionsix.com (mordrede.visionsix.com [65.202.119.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id DC4CB43E75 for ; Thu, 17 Oct 2002 02:58:56 -0700 (PDT) (envelope-from lists@visionsix.com) Received: from yogi (unverified [65.202.119.169]) by mordrede.visionsix.com (Vircom SMTPRS 1.4.232) with SMTP id for ; Thu, 17 Oct 2002 04:58:56 -0500 Message-ID: <007201c275c2$8bb69860$a977ca41@yogi> From: "Lewis Watson" To: Subject: Amanda-Client Config Issues Date: Thu, 17 Oct 2002 04:49:54 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hey everyone, I have done a make and make install on the amanda-client port and did the same for the xinetd port prior to that. I need some help on a few issues. What user/group should I use for amanda on freebsd? On RH I have always used xinetd for the amanda service config. Is there a recommended or "this is what works for me" way that someone can help me with so I can have my amanda server start backing up my freebsd machine. Thanks for the help! Lewis To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Oct 17 3:25:25 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 10A4437B401 for ; Thu, 17 Oct 2002 03:25:24 -0700 (PDT) Received: from smtp05.retemail.es (smtp05.iddeo.es [62.81.186.15]) by mx1.FreeBSD.org (Postfix) with ESMTP id 350FA43E88 for ; Thu, 17 Oct 2002 03:25:22 -0700 (PDT) (envelope-from JBIANQUETTI@sadiel.es) Received: from mailscan ([62.81.202.67]) by smtp05.retemail.es (InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with SMTP id <20021017102520.TFXC22666.smtp05.retemail.es@mailscan> for ; Thu, 17 Oct 2002 12:25:20 +0200 Received: FROM CORREO.sadiel.es BY mailscan ; Thu Oct 17 12:22:38 2002 +0200 Received: from bsd.sadiel.es ([172.18.1.41]) by CORREO.sadiel.es with Microsoft SMTPSVC(5.0.2195.3779); Thu, 17 Oct 2002 12:25:09 +0200 Date: Thu, 17 Oct 2002 12:25:06 +0200 From: Jorge Bianquetti de las Heras To: "Lewis Watson" Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Amanda-Client Port Configuration Message-Id: <20021017122506.79703cd5.jbianquetti@sadiel.es> In-Reply-To: <006401c275c2$5f28a680$a977ca41@yogi> References: <006401c275c2$5f28a680$a977ca41@yogi> X-Mailer: Sylpheed version 0.8.5 (GTK+ 1.2.10; i386-portbld-freebsd4.7) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 17 Oct 2002 10:25:09.0753 (UTC) FILETIME=[78545690:01C275C7] Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thu, 17 Oct 2002 04:48:39 -0500 "Lewis Watson" wrote: Operator is the user in the port package. > Hey everyone, > I have done a make and make install on the amanda-client port and did the > same for the xinetd port prior to that. I need some help on a few issues. > What user/group should I use for amanda on freebsd? On RH I have always used > xinetd for the amanda service config. Is there a recommended or "this is > what works for me" way that someone can help me with so I can have my amanda > server start backing up my freebsd machine. > Thanks for the help! > Lewis > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message -- Saludos, Jorge. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Oct 17 14: 6:16 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 93F4137B401 for ; Thu, 17 Oct 2002 14:06:14 -0700 (PDT) Received: from mordrede.visionsix.com (mordrede.visionsix.com [65.202.119.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5821643E4A for ; Thu, 17 Oct 2002 14:06:10 -0700 (PDT) (envelope-from lists@visionsix.com) Received: from yogi (unverified [65.202.119.169]) by mordrede.visionsix.com (Vircom SMTPRS 1.4.232) with SMTP id for ; Thu, 17 Oct 2002 16:06:05 -0500 Message-ID: <002201c2761f$c97d6fe0$a977ca41@yogi> From: "Lewis Watson" To: References: <006401c275c2$5f28a680$a977ca41@yogi> <20021017122506.79703cd5.jbianquetti@sadiel.es> Subject: Re: Amanda-Client Port Configuration Date: Thu, 17 Oct 2002 15:57:21 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org When I try do run an amcheck from the server the bsd machine running amanda client errors out with 'file descriptor service amanda has been closed'. The port no longer shows as being open either after this happens.... Of course the error on the server is Host Down? Why is the port closing with the above error? Thanks. Lewis ----- Original Message ----- From: "Jorge Bianquetti de las Heras" To: "Lewis Watson" Cc: Sent: Thursday, October 17, 2002 5:25 AM Subject: Re: Amanda-Client Port Configuration > On Thu, 17 Oct 2002 04:48:39 -0500 > "Lewis Watson" wrote: > > Operator is the user in the port package. > > > Hey everyone, > > I have done a make and make install on the amanda-client port and did the > > same for the xinetd port prior to that. I need some help on a few issues. > > What user/group should I use for amanda on freebsd? On RH I have always used > > xinetd for the amanda service config. Is there a recommended or "this is > > what works for me" way that someone can help me with so I can have my amanda > > server start backing up my freebsd machine. > > Thanks for the help! > > Lewis > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > -- > Saludos, Jorge. > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Oct 17 20:42:28 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0A5F237B401 for ; Thu, 17 Oct 2002 20:42:27 -0700 (PDT) Received: from mordrede.visionsix.com (mordrede.visionsix.com [65.202.119.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5AC1643E6A for ; Thu, 17 Oct 2002 20:42:26 -0700 (PDT) (envelope-from lists@visionsix.com) Received: from yogi (unverified [65.202.119.169]) by mordrede.visionsix.com (Vircom SMTPRS 1.4.232) with SMTP id for ; Thu, 17 Oct 2002 22:42:22 -0500 Message-ID: <005001c27657$249e9480$a977ca41@yogi> From: "Lewis Watson" To: References: <006401c275c2$5f28a680$a977ca41@yogi> <20021017122506.79703cd5.jbianquetti@sadiel.es> Subject: Re: Amanda-Client Port Configuration Date: Thu, 17 Oct 2002 22:33:36 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hey there, I am still not having any luck. Basically my xinetd.conf file specifies operator as the user for amanda and the port shuts down as soon as any connection is attempted, ie amcheck and/ or nmap scan..... 'file descriptor service amanda has been closed' I have googled the web and archive and have not found anything to put the peices together.... I am stumped.. Lewis ----- Original Message ----- From: "Jorge Bianquetti de las Heras" To: "Lewis Watson" Cc: Sent: Thursday, October 17, 2002 5:25 AM Subject: Re: Amanda-Client Port Configuration > On Thu, 17 Oct 2002 04:48:39 -0500 > "Lewis Watson" wrote: > > Operator is the user in the port package. > > > Hey everyone, > > I have done a make and make install on the amanda-client port and did the > > same for the xinetd port prior to that. I need some help on a few issues. > > What user/group should I use for amanda on freebsd? On RH I have always used > > xinetd for the amanda service config. Is there a recommended or "this is > > what works for me" way that someone can help me with so I can have my amanda > > server start backing up my freebsd machine. > > Thanks for the help! > > Lewis > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > -- > Saludos, Jorge. > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Oct 17 23:14:16 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E0C3637B401 for ; Thu, 17 Oct 2002 23:14:15 -0700 (PDT) Received: from mordrede.visionsix.com (mordrede.visionsix.com [65.202.119.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6FEB343E91 for ; Thu, 17 Oct 2002 23:14:15 -0700 (PDT) (envelope-from lists@visionsix.com) Received: from yogi (unverified [65.202.119.169]) by mordrede.visionsix.com (Vircom SMTPRS 1.4.232) with SMTP id for ; Fri, 18 Oct 2002 01:14:14 -0500 Message-ID: <000901c2766c$5c025f00$a977ca41@yogi> From: "Lewis Watson" To: Subject: Xinetd Suspending Amanda Service Date: Fri, 18 Oct 2002 01:05:29 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi all, I have been trying to run the amanda client on a freebsd machine using xinetd. After having xinetd fail each time anything tried to connect to the port it was connecting on I ran xinetd -d to see the debugs... It appears that xinetd starts off running and offering the amanda service.. Then, as soon as I run amcheck from there server xinetd suspends the amanda service, then tries to start it back up again! Any suggestions would be greatly appreciated. I am running freebsd 4.7. Thanks! Lewis To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Oct 18 0:42:50 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7DB8D37B401 for ; Fri, 18 Oct 2002 00:42:48 -0700 (PDT) Received: from smtp04.retemail.es (smtp04.iddeo.es [62.81.186.14]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1FEEE43EA3 for ; Fri, 18 Oct 2002 00:42:41 -0700 (PDT) (envelope-from JBIANQUETTI@sadiel.es) Received: from mailscan ([62.81.202.67]) by smtp04.retemail.es (InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with SMTP id <20021018074234.DODI4396.smtp04.retemail.es@mailscan> for ; Fri, 18 Oct 2002 09:42:34 +0200 Received: FROM CORREO.sadiel.es BY mailscan ; Fri Oct 18 09:39:50 2002 +0200 Received: from bsd.sadiel.es ([172.18.1.41]) by CORREO.sadiel.es with Microsoft SMTPSVC(5.0.2195.3779); Fri, 18 Oct 2002 09:42:21 +0200 Date: Fri, 18 Oct 2002 09:42:21 +0200 From: Jorge Bianquetti de las Heras To: "Lewis Watson" Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Amanda-Client Port Configuration Message-Id: <20021018094221.28e44e1d.jbianquetti@sadiel.es> In-Reply-To: <002201c2761f$c97d6fe0$a977ca41@yogi> References: <006401c275c2$5f28a680$a977ca41@yogi> <20021017122506.79703cd5.jbianquetti@sadiel.es> <002201c2761f$c97d6fe0$a977ca41@yogi> X-Mailer: Sylpheed version 0.8.5 (GTK+ 1.2.10; i386-portbld-freebsd4.7) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 18 Oct 2002 07:42:21.0640 (UTC) FILETIME=[E47E5480:01C27679] Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thu, 17 Oct 2002 15:57:21 -0500 "Lewis Watson" wrote: Are you modificated /etc/services adn /etc/inetd.conf? amanda dgram udp wait operator /usr/local/libexec/amanda/amandad amandad amandaidx stream tcp nowait operator /usr/local/libexec/amanda/amindexd amindexd amidxtape stream tcp nowait operator /usr/local/libexec/amanda/amidxtaped amidxtaped > When I try do run an amcheck from the server the bsd machine running amanda > client errors out with 'file descriptor service amanda has been closed'. The > port no longer shows as being open either after this happens.... Of course > the error on the server is Host Down? Why is the port closing with the above > error? > Thanks. > Lewis > > > > ----- Original Message ----- > From: "Jorge Bianquetti de las Heras" > To: "Lewis Watson" > Cc: > Sent: Thursday, October 17, 2002 5:25 AM > Subject: Re: Amanda-Client Port Configuration > > > > On Thu, 17 Oct 2002 04:48:39 -0500 > > "Lewis Watson" wrote: > > > > Operator is the user in the port package. > > > > > Hey everyone, > > > I have done a make and make install on the amanda-client port and did > the > > > same for the xinetd port prior to that. I need some help on a few > issues. > > > What user/group should I use for amanda on freebsd? On RH I have always > used > > > xinetd for the amanda service config. Is there a recommended or "this is > > > what works for me" way that someone can help me with so I can have my > amanda > > > server start backing up my freebsd machine. > > > Thanks for the help! > > > Lewis > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-isp" in the body of the message > > > > > > -- > > Saludos, Jorge. > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message -- Saludos, Jorge. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Oct 18 1:42:38 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A079137B401 for ; Fri, 18 Oct 2002 01:42:35 -0700 (PDT) Received: from mordrede.visionsix.com (mordrede.visionsix.com [65.202.119.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id 98B4143EA3 for ; Fri, 18 Oct 2002 01:42:31 -0700 (PDT) (envelope-from lists@visionsix.com) Received: from yogi (unverified [65.202.119.169]) by mordrede.visionsix.com (Vircom SMTPRS 1.4.232) with SMTP id for ; Fri, 18 Oct 2002 03:42:30 -0500 Message-ID: <003301c27681$12470c20$a977ca41@yogi> From: "Lewis Watson" To: References: <006401c275c2$5f28a680$a977ca41@yogi><20021017122506.79703cd5.jbianquetti@sadiel.es><002201c2761f$c97d6fe0$a977ca41@yogi> <20021018094221.28e44e1d.jbianquetti@sadiel.es> Subject: Re: Amanda-Client Port Configuration Date: Fri, 18 Oct 2002 03:33:44 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi Jorge, Actually, when I did the client install of amanda it did not add any of those lines to my inetd.conf. I went in and added the lines for xinetd to take care of amanda and then using xinetd -d, it showed that the amanda service was loaded. Once anything tried to connect to the port; xinetd would suspend the service amanda, and then close the port. Strangely enough, after doing so it would try to unsuspend amanda but would fail. The port would remain closed. At this time I am upgrading to xinetd 2.3.9 as 2.3.8 was included in the 4.7 distribution. Also the amanda services are listed in the /etc/services file... Any helpful thoughts? Thanks.. Lewis ----- Original Message ----- From: "Jorge Bianquetti de las Heras" To: "Lewis Watson" Cc: Sent: Friday, October 18, 2002 2:42 AM Subject: Re: Amanda-Client Port Configuration > On Thu, 17 Oct 2002 15:57:21 -0500 > "Lewis Watson" wrote: > > Are you modificated /etc/services adn /etc/inetd.conf? > > amanda dgram udp wait operator /usr/local/libexec/amanda/amandad amandad > amandaidx stream tcp nowait operator /usr/local/libexec/amanda/amindexd amindexd > amidxtape stream tcp nowait operator /usr/local/libexec/amanda/amidxtaped amidxtaped > > > > > When I try do run an amcheck from the server the bsd machine running amanda > > client errors out with 'file descriptor service amanda has been closed'. The > > port no longer shows as being open either after this happens.... Of course > > the error on the server is Host Down? Why is the port closing with the above > > error? > > Thanks. > > Lewis > > > > > > > > ----- Original Message ----- > > From: "Jorge Bianquetti de las Heras" > > To: "Lewis Watson" > > Cc: > > Sent: Thursday, October 17, 2002 5:25 AM > > Subject: Re: Amanda-Client Port Configuration > > > > > > > On Thu, 17 Oct 2002 04:48:39 -0500 > > > "Lewis Watson" wrote: > > > > > > Operator is the user in the port package. > > > > > > > Hey everyone, > > > > I have done a make and make install on the amanda-client port and did > > the > > > > same for the xinetd port prior to that. I need some help on a few > > issues. > > > > What user/group should I use for amanda on freebsd? On RH I have always > > used > > > > xinetd for the amanda service config. Is there a recommended or "this is > > > > what works for me" way that someone can help me with so I can have my > > amanda > > > > server start backing up my freebsd machine. > > > > Thanks for the help! > > > > Lewis > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > > with "unsubscribe freebsd-isp" in the body of the message > > > > > > > > > -- > > > Saludos, Jorge. > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-isp" in the body of the message > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > -- > Saludos, Jorge. > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Oct 18 8:32:10 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9364F37B401; Fri, 18 Oct 2002 08:32:08 -0700 (PDT) Received: from ms3.mail2000.com.tw (ms3.mail2000.com.tw [211.72.252.187]) by mx1.FreeBSD.org (Postfix) with SMTP id 2F03943E4A; Fri, 18 Oct 2002 08:32:06 -0700 (PDT) (envelope-from sjs@mail2000.com.tw) Received: from 211.72.252.247 by ms3.mail2000.com.tw with Mail2000 ESMTP Server V2.71M(80288:0:AUTH_RELAY) Fri, 18 Oct 2002 23:32:00 +0800 (CST); (envelope-from ) Received: By OpenMail Mailer;Fri, 18 Oct 2002 23:31:59 +0800 (CST) From: "sjs" Reply-To: Subject: NAS via NFS crashes with vinvalbuf: flush failed Message-ID: <1034955118.86889.sjs@mail2000.com.tw> To: "" , "" Date: Fri, 18 Oct 2002 23:31:58 +0800 (CST) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, I have two FreeBSD servers mount NetApp NAS via NFS and run under layer 4 switch to be redundant. I upgraded FreeBSD version from 4.2R to 4.6.1-RC2, the panic crash still happen very often. The messages I got from every crash are all the same which is about "vinvalbuf: flush failed". Once the server-1 crashes, server-2 will crash very soon. I guess there's some problems with accessing NFS files on NAS, so when server-1 crashes, server-2 keeps accessing the same file and then crahes, too. So is there any suggestion? Does it help to upgrade to 4.7R? PS: Both servers are with dual CPU with SMP enabled. I tried to turn off SMP, but it didn't help anything. Thanks! Best regards, Gareth ===========================Message attached===================== Oct 18 23:12:09 mail savecore: reboot after panic: vinvalbuf: flush failed (kgdb) bt #0 0xc01b0096 in dumpsys () #1 0xc01afe67 in boot () #2 0xc01b028c in poweroff_wait () #3 0xc01dc4c9 in vinvalbuf () #4 0xc023007c in nfs_vinvalbuf () #5 0xc0252ee9 in nfs_open () #6 0xc01e3943 in vn_open () #7 0xc01df848 in open () #8 0xc02e8aba in syscall2 () #9 0xc02da2f5 in Xint0x80_syscall () #10 0x804f62f in ?? () #11 0x804d9f8 in ?? () #12 0x804d2af in ?? () #13 0x804cac1 in ?? () #14 0x804adfc in ?? () #15 0x804a289 in ?? () To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Oct 18 10:16:49 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A324437B401; Fri, 18 Oct 2002 10:16:47 -0700 (PDT) Received: from blackhelicopters.org (geburah.blackhelicopters.org [209.69.178.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1EF1F43E88; Fri, 18 Oct 2002 10:16:47 -0700 (PDT) (envelope-from mwlucas@blackhelicopters.org) Received: from blackhelicopters.org (mwlucas@localhost [127.0.0.1]) by blackhelicopters.org (8.12.5/8.12.5) with ESMTP id g9IHGfJ6056757; Fri, 18 Oct 2002 13:16:41 -0400 (EDT) (envelope-from mwlucas@blackhelicopters.org) Received: (from mwlucas@localhost) by blackhelicopters.org (8.12.5/8.12.5/Submit) id g9IHGe8I056756; Fri, 18 Oct 2002 13:16:40 -0400 (EDT) Date: Fri, 18 Oct 2002 13:16:40 -0400 From: Michael Lucas To: sjs Cc: freebsd-isp@FreeBSD.ORG, freebsd-fs@FreeBSD.ORG Subject: Re: NAS via NFS crashes with vinvalbuf: flush failed Message-ID: <20021018131640.A56728@blackhelicopters.org> References: <1034955118.86889.sjs@mail2000.com.tw> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <1034955118.86889.sjs@mail2000.com.tw>; from sjs@mail2000.com.tw on Fri, Oct 18, 2002 at 11:31:58PM +0800 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hello, Could you prepare a debugging kernel, so people can get a better idea of what happens? If you need some hints, take a look at: http://www.onlamp.com/pub/a/bsd/2002/03/21/Big_Scary_Daemons.html Various filesystem gurus will have a much better shot at figuring out the real problem if you have a dump on a debug kernel. Thanks! On Fri, Oct 18, 2002 at 11:31:58PM +0800, sjs wrote: > Hi, > > I have two FreeBSD servers mount NetApp NAS via NFS and run > under layer 4 switch to be redundant. I upgraded FreeBSD version > from 4.2R to 4.6.1-RC2, the panic crash still happen very often. > The messages I got from every crash are all the same which is about > "vinvalbuf: flush failed". Once the server-1 crashes, server-2 will > crash very soon. I guess there's some problems with accessing NFS > files on NAS, so when server-1 crashes, server-2 keeps accessing > the same file and then crahes, too. > > So is there any suggestion? Does it help to upgrade to 4.7R? > > PS: Both servers are with dual CPU with SMP enabled. I tried to > turn off SMP, but it didn't help anything. > > Thanks! > > Best regards, > Gareth > > ===========================Message attached===================== > > Oct 18 23:12:09 mail savecore: reboot after panic: vinvalbuf: flush failed > (kgdb) bt > #0 0xc01b0096 in dumpsys () > #1 0xc01afe67 in boot () > #2 0xc01b028c in poweroff_wait () > #3 0xc01dc4c9 in vinvalbuf () > #4 0xc023007c in nfs_vinvalbuf () > #5 0xc0252ee9 in nfs_open () > #6 0xc01e3943 in vn_open () > #7 0xc01df848 in open () > #8 0xc02e8aba in syscall2 () > #9 0xc02da2f5 in Xint0x80_syscall () > #10 0x804f62f in ?? () > #11 0x804d9f8 in ?? () > #12 0x804d2af in ?? () > #13 0x804cac1 in ?? () > #14 0x804adfc in ?? () > #15 0x804a289 in ?? () > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-fs" in the body of the message -- Michael Lucas mwlucas@FreeBSD.org, mwlucas@BlackHelicopters.org http://www.oreillynet.com/pub/q/Big_Scary_Daemons Absolute BSD: http://www.AbsoluteBSD.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Oct 18 10:56:22 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0B38637B401; Fri, 18 Oct 2002 10:56:19 -0700 (PDT) Received: from elvis.mu.org (elvis.mu.org [192.203.228.196]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9918E43E88; Fri, 18 Oct 2002 10:56:18 -0700 (PDT) (envelope-from ps@mu.org) Received: by elvis.mu.org (Postfix, from userid 1000) id 7A68DAE160; Fri, 18 Oct 2002 10:56:18 -0700 (PDT) Date: Fri, 18 Oct 2002 10:56:18 -0700 From: Paul Saab To: sjs Cc: freebsd-isp@FreeBSD.ORG, freebsd-fs@FreeBSD.ORG Subject: Re: NAS via NFS crashes with vinvalbuf: flush failed Message-ID: <20021018175618.GA97335@elvis.mu.org> References: <1034955118.86889.sjs@mail2000.com.tw> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="k1lZvvs/B4yU6o8G" Content-Disposition: inline In-Reply-To: <1034955118.86889.sjs@mail2000.com.tw> User-Agent: Mutt/1.4i Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --k1lZvvs/B4yU6o8G Content-Type: text/plain; charset=us-ascii Content-Disposition: inline sjs (sjs@mail2000.com.tw) wrote: > Hi, > > I have two FreeBSD servers mount NetApp NAS via NFS and run > under layer 4 switch to be redundant. I upgraded FreeBSD version > from 4.2R to 4.6.1-RC2, the panic crash still happen very often. > The messages I got from every crash are all the same which is about > "vinvalbuf: flush failed". Once the server-1 crashes, server-2 will > crash very soon. I guess there's some problems with accessing NFS > files on NAS, so when server-1 crashes, server-2 keeps accessing > the same file and then crahes, too. Try this patch.. We've been running with it at Yahoo for about 3-4 weeks now. Its a hack, but something like this will eventually get committed to FreeBSD. --k1lZvvs/B4yU6o8G Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename=xxx Index: kern/vfs_subr.c =========================================================================== --- kern/vfs_subr.c 2002/10/18 08:38:40 #23 +++ kern/vfs_subr.c 2002/10/18 08:38:40 @@ -781,6 +781,10 @@ struct buf *nbp, *blist; int s, error; vm_object_t object; + int retrycount; + + retrycount = 0; +restart: if (flags & V_SAVE) { s = splbio(); @@ -884,8 +888,30 @@ } simple_unlock(&vp->v_interlock); - if (!TAILQ_EMPTY(&vp->v_dirtyblkhd) || !TAILQ_EMPTY(&vp->v_cleanblkhd)) - panic("vinvalbuf: flush failed"); + if (!TAILQ_EMPTY(&vp->v_dirtyblkhd) || !TAILQ_EMPTY(&vp->v_cleanblkhd)){ + /* + * NFS calls vinvalflush on *live* vnodes. This kind of + * failure is to be expected. Retry a few times and give + * up if we are not getting anywhere. It isn't really + * important in this case anyway as long as we flushed + * everything that existed before we were called. + */ + if (flags & V_NFSFLUSH) { + retrycount++; + if (retrycount <= 5) { + printf( + "vinvalbuf: lost flush race #%d on NFS live vnode; restarting\n", + retrycount); + goto restart; + } else { + printf( + "vinvalbuf: lost flush race #%d on NFS live vnode; giving up\n", + retrycount); + } + } else { + panic("vinvalbuf: flush failed"); + } + } return (0); } Index: nfs/nfs_vnops.c =========================================================================== --- nfs/nfs_vnops.c 2002/10/18 08:38:40 #5 +++ nfs/nfs_vnops.c 2002/10/18 08:38:40 @@ -492,16 +492,16 @@ return (error); if (np->n_lrev != np->n_brev || (np->n_flag & NQNFSNONCACHE)) { - if ((error = nfs_vinvalbuf(vp, V_SAVE, ap->a_cred, - ap->a_p, 1)) == EINTR) + if ((error = nfs_vinvalbuf(vp, V_SAVE | V_NFSFLUSH, + ap->a_cred, ap->a_p, 1)) == EINTR) return (error); np->n_brev = np->n_lrev; } } } else { if (np->n_flag & NMODIFIED) { - if ((error = nfs_vinvalbuf(vp, V_SAVE, ap->a_cred, - ap->a_p, 1)) == EINTR) + if ((error = nfs_vinvalbuf(vp, V_SAVE | V_NFSFLUSH, + ap->a_cred, ap->a_p, 1)) == EINTR) return (error); np->n_attrstamp = 0; if (vp->v_type == VDIR) @@ -517,7 +517,8 @@ if (np->n_mtime != vattr.va_mtime.tv_sec) { if (vp->v_type == VDIR) np->n_direofoffset = 0; - if ((error = nfs_vinvalbuf(vp, V_SAVE, + if ((error = nfs_vinvalbuf(vp, + V_SAVE | V_NFSFLUSH, ap->a_cred, ap->a_p, 1)) == EINTR) return (error); np->n_mtime = vattr.va_mtime.tv_sec; @@ -595,7 +596,7 @@ error = nfs_flush(vp, ap->a_cred, MNT_WAIT, ap->a_p, cm); /* np->n_flag &= ~NMODIFIED; */ } else { - error = nfs_vinvalbuf(vp, V_SAVE, ap->a_cred, ap->a_p, 1); + error = nfs_vinvalbuf(vp, V_SAVE | V_NFSFLUSH, ap->a_cred, ap->a_p, 1); } np->n_attrstamp = 0; } @@ -3450,7 +3451,7 @@ vm_object_page_clean(vp->v_object, 0, 0, OBJPC_INVAL|OBJPC_SYNC); } VOP_UNLOCK(vp, 0, p); - error = nfs_vinvalbuf(vp, V_SAVE, ap->a_cred, p, 1); + error = nfs_vinvalbuf(vp, V_SAVE | V_NFSFLUSH, ap->a_cred, p, 1); if (error) { return (error); } Index: sys/vnode.h =========================================================================== --- sys/vnode.h 2002/10/18 08:38:40 #15 +++ sys/vnode.h 2002/10/18 08:38:40 @@ -263,6 +263,7 @@ #define WRITECLOSE 0x0004 /* vflush: only close writable files */ #define DOCLOSE 0x0008 /* vclean: close active files */ #define V_SAVE 0x0001 /* vinvalbuf: sync file first */ +#define V_NFSFLUSH 0x0002 /* vinvalbuf: live vnode via nfs */ #define REVOKEALL 0x0001 /* vop_revoke: revoke all aliases */ #define VREF(vp) vref(vp) --k1lZvvs/B4yU6o8G-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Oct 18 16:38:32 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EC24B37B401 for ; Fri, 18 Oct 2002 16:38:29 -0700 (PDT) Received: from vineyard.net (K1.VINEYARD.NET [204.17.195.90]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3A06743EA3 for ; Fri, 18 Oct 2002 16:38:29 -0700 (PDT) (envelope-from ericx@vineyard.net) Received: from alice (loopback [127.0.0.1]) by vineyard.net (Postfix) with ESMTP id E3F2391554; Fri, 18 Oct 2002 19:38:27 -0400 (EDT) Message-ID: <001d01c276ff$a58881c0$3ee380cc@alice> From: "Eric W. Bates" To: "Lewis Watson" Cc: References: <006401c275c2$5f28a680$a977ca41@yogi> <20021017122506.79703cd5.jbianquetti@sadiel.es> <005001c27657$249e9480$a977ca41@yogi> Subject: Re: Amanda-Client Port Configuration Date: Fri, 18 Oct 2002 19:39:45 -0400 Organization: Vineyard.NET, Inc. MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Have you confirmed that 'operator' has a valid home dir? For my config I have set the homedir to /usr/local/etc/amanda. /usr/local/etc/amanda is owned by user operator and has permissions 750 /usr/local/etc/amanda/.amandahosts is owned by user operator and has permissions 400 ----- Original Message ----- From: "Lewis Watson" To: Sent: Thursday, October 17, 2002 11:33 PM Subject: Re: Amanda-Client Port Configuration > Hey there, > I am still not having any luck. Basically my xinetd.conf file specifies > operator as the user for amanda and the port shuts down as soon as any > connection is attempted, ie amcheck and/ or nmap scan..... 'file descriptor > service amanda has been closed' I have googled the web and archive and have > not found anything to put the peices together.... I am stumped.. > Lewis > > > ----- Original Message ----- > From: "Jorge Bianquetti de las Heras" > To: "Lewis Watson" > Cc: > Sent: Thursday, October 17, 2002 5:25 AM > Subject: Re: Amanda-Client Port Configuration > > > > On Thu, 17 Oct 2002 04:48:39 -0500 > > "Lewis Watson" wrote: > > > > Operator is the user in the port package. > > > > > Hey everyone, > > > I have done a make and make install on the amanda-client port and did > the > > > same for the xinetd port prior to that. I need some help on a few > issues. > > > What user/group should I use for amanda on freebsd? On RH I have always > used > > > xinetd for the amanda service config. Is there a recommended or "this is > > > what works for me" way that someone can help me with so I can have my > amanda > > > server start backing up my freebsd machine. > > > Thanks for the help! > > > Lewis > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-isp" in the body of the message > > > > > > -- > > Saludos, Jorge. > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Oct 18 16:57:57 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A4EF137B401 for ; Fri, 18 Oct 2002 16:57:54 -0700 (PDT) Received: from mordrede.visionsix.com (mordrede.visionsix.com [65.202.119.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id 51ADC43E7B for ; Fri, 18 Oct 2002 16:57:50 -0700 (PDT) (envelope-from lists@visionsix.com) Received: from yogi (unverified [65.202.119.169]) by mordrede.visionsix.com (Vircom SMTPRS 1.4.232) with SMTP id ; Fri, 18 Oct 2002 18:57:44 -0500 Message-ID: <000f01c27700$eb287e00$a977ca41@yogi> From: "Lewis Watson" To: "Eric W. Bates" Cc: References: <006401c275c2$5f28a680$a977ca41@yogi> <20021017122506.79703cd5.jbianquetti@sadiel.es> <005001c27657$249e9480$a977ca41@yogi> <001d01c276ff$a58881c0$3ee380cc@alice> Subject: Re: Amanda-Client Port Configuration Date: Fri, 18 Oct 2002 18:48:54 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hey Eric. I finally got it resolved. Once I upgraded xinetd to the latest version 2.3.9 I could get the port to stay open, then I set my .amandahosts file in / (default home dir for operator) Then I started getting parse errors returned when I would run amdump. The strange part was that the debugs on the client looked fine. I found a message in the amanda list archives that spoke of the parse error I was getting. The only way around it that I found was to leave the port for amanda-client and get the latest stable release from amanda's website (2.4.3) This appears to have completely resolved the issue. First, I tried to put the new version in the port but it broke on a AD patch.... Thanks for the replies though and I am really starting to like freebsd over linux. That's the only port I have tried so far that was broken. Thanks. Lewis ----- Original Message ----- From: "Eric W. Bates" To: "Lewis Watson" Cc: Sent: Friday, October 18, 2002 6:39 PM Subject: Re: Amanda-Client Port Configuration > Have you confirmed that 'operator' has a valid home dir? > > For my config I have set the homedir to /usr/local/etc/amanda. > > /usr/local/etc/amanda is owned by user operator and has permissions 750 > /usr/local/etc/amanda/.amandahosts is owned by user operator and has > permissions 400 > > ----- Original Message ----- > From: "Lewis Watson" > To: > Sent: Thursday, October 17, 2002 11:33 PM > Subject: Re: Amanda-Client Port Configuration > > > > Hey there, > > I am still not having any luck. Basically my xinetd.conf file specifies > > operator as the user for amanda and the port shuts down as soon as any > > connection is attempted, ie amcheck and/ or nmap scan..... 'file > descriptor > > service amanda has been closed' I have googled the web and archive and > have > > not found anything to put the peices together.... I am stumped.. > > Lewis > > > > > > ----- Original Message ----- > > From: "Jorge Bianquetti de las Heras" > > To: "Lewis Watson" > > Cc: > > Sent: Thursday, October 17, 2002 5:25 AM > > Subject: Re: Amanda-Client Port Configuration > > > > > > > On Thu, 17 Oct 2002 04:48:39 -0500 > > > "Lewis Watson" wrote: > > > > > > Operator is the user in the port package. > > > > > > > Hey everyone, > > > > I have done a make and make install on the amanda-client port and did > > the > > > > same for the xinetd port prior to that. I need some help on a few > > issues. > > > > What user/group should I use for amanda on freebsd? On RH I have > always > > used > > > > xinetd for the amanda service config. Is there a recommended or "this > is > > > > what works for me" way that someone can help me with so I can have my > > amanda > > > > server start backing up my freebsd machine. > > > > Thanks for the help! > > > > Lewis > > > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > > with "unsubscribe freebsd-isp" in the body of the message > > > > > > > > > -- > > > Saludos, Jorge. > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-isp" in the body of the message > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-isp" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Oct 18 17:22:59 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DEC2E37B401; Fri, 18 Oct 2002 17:22:56 -0700 (PDT) Received: from yahoo.com (host-148-244-235-5.block.alestra.net.mx [148.244.235.5]) by mx1.FreeBSD.org (Postfix) with SMTP id 6CABF43EA3; Fri, 18 Oct 2002 17:22:53 -0700 (PDT) (envelope-from bigdaddyflo1632x43@yahoo.com) Reply-To: Message-ID: <003e20e75c4a$1127a0e4$2cb87bc2@wuwwty> From: To: bigdaddyflo@yahoo.com Subject: Meet Married Women!! 1226xpWf8-941arzZ0-17 Date: Fri, 18 Oct 2002 15:14:39 +0900 MiME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Adult Listings!

These ladies only represent a small sample of our actual listings!

7666BXcM5-896KTEj3119qiCK3-792SLCD5089KwqQ2-132OpXV1779pgl54 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Oct 19 23:29:24 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9B36237B401 for ; Sat, 19 Oct 2002 23:29:23 -0700 (PDT) Received: from mail.geek.sh (decoder.geek.sh [196.36.198.81]) by mx1.FreeBSD.org (Postfix) with ESMTP id EE3B743E7B for ; Sat, 19 Oct 2002 23:29:21 -0700 (PDT) (envelope-from aragon@geek.sh) Received: by mail.geek.sh (Postfix, from userid 1000) id 7947024F29; Sun, 20 Oct 2002 08:29:18 +0200 (SAST) Date: Sun, 20 Oct 2002 08:29:18 +0200 From: Aragon Gouveia To: freebsd-isp@freebsd.org Subject: Userland PPP, MSCHAPv2, MPPE, and Radius Message-ID: <20021020062918.GB51620@phat.za.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i X-Operating-System: FreeBSD 4.6-RC i386 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, Has anyone had experience with setting up MSCHAPv2+MPPE authentication via Radius using FreeBSD's userland ppp? I can get it working 100% with ppp.secret auth, but after sniffing the radius Access-Request packets, it doesn't look like userland ppp is querying the radius server appropriately for MSCHAPv2 authentication. Is this authentication possible? Any help appreciated. Thanks, Aragon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message