From owner-freebsd-hubs@FreeBSD.ORG Sun Mar 9 11:31:54 2008 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D8FB6106566C for ; Sun, 9 Mar 2008 11:31:54 +0000 (UTC) (envelope-from olli@lurza.secnetix.de) Received: from lurza.secnetix.de (unknown [IPv6:2a01:170:102f::2]) by mx1.freebsd.org (Postfix) with ESMTP id 322578FC15 for ; Sun, 9 Mar 2008 11:31:53 +0000 (UTC) (envelope-from olli@lurza.secnetix.de) Received: from lurza.secnetix.de (localhost [127.0.0.1]) by lurza.secnetix.de (8.14.1/8.14.1) with ESMTP id m29BVmff062019 for ; Sun, 9 Mar 2008 12:31:53 +0100 (CET) (envelope-from oliver.fromme@secnetix.de) Received: (from olli@localhost) by lurza.secnetix.de (8.14.1/8.14.1/Submit) id m29BVmK3062017 for freebsd-hubs@freebsd.org; Sun, 9 Mar 2008 12:31:48 +0100 (CET) (envelope-from olli) From: Oliver Fromme Message-Id: <200803091131.m29BVmK3062017@lurza.secnetix.de> To: freebsd-hubs@freebsd.org Date: Sun, 9 Mar 2008 12:31:48 +0100 (CET) In-Reply-To: <200803080806.m28869aN001433@lurza.secnetix.de> X-Mailer: ELM [version 2.5 PL8] MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.1.2 (lurza.secnetix.de [127.0.0.1]); Sun, 09 Mar 2008 12:31:53 +0100 (CET) Subject: Re: Wrong checksums for packages X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Mar 2008 11:31:55 -0000 Oliver Fromme wrote: > I think the CHECKSUMS.MD5 files for packages-7.0-release > needs to be regenerated, because some files fail the check. > The files uncompress fine, so I think the problem is not > my download. Those files also happen to have a newer date > on the FTP server, so my guess is that the packages have > been recreated. I'm terribly sorry, it was false alarm. :-( The files seem to be stale on the mirror I was using, i.e. it didn't resync some packages that were updated on the master, even though the date stamps on the mirror are fresh. I have no idea what's going on there. After I removed the files locally and downloaded them from the main FTP site, all checksums match. So everything seems to be OK. Sorry for the confusion. Best regards Oliver -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M. Handelsregister: Registergericht Muenchen, HRA 74606, Geschäftsfuehrung: secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün- chen, HRB 125758, Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart FreeBSD-Dienstleistungen, -Produkte und mehr: http://www.secnetix.de/bsd "IRIX is about as stable as a one-legged drunk with hypothermia in a four-hundred mile per hour wind, balancing on a banana peel on a greased cookie sheet -- when someone throws him an elephant with bad breath and a worse temper." -- Ralf Hildebrandt From owner-freebsd-hubs@FreeBSD.ORG Mon Mar 10 16:53:35 2008 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6F318106566C for ; Mon, 10 Mar 2008 16:53:35 +0000 (UTC) (envelope-from mit@mitayai.org) Received: from rn-out-0910.google.com (rn-out-0910.google.com [64.233.170.190]) by mx1.freebsd.org (Postfix) with ESMTP id 3F0F58FC1B for ; Mon, 10 Mar 2008 16:53:34 +0000 (UTC) (envelope-from mit@mitayai.org) Received: by rn-out-0910.google.com with SMTP id e11so1332937rng.7 for ; Mon, 10 Mar 2008 09:53:34 -0700 (PDT) Received: by 10.142.104.9 with SMTP id b9mr1886362wfc.48.1205166476654; Mon, 10 Mar 2008 09:27:56 -0700 (PDT) Received: by 10.142.253.1 with HTTP; Mon, 10 Mar 2008 09:27:56 -0700 (PDT) Message-ID: Date: Mon, 10 Mar 2008 12:27:56 -0400 From: "Mit Rowe" To: "FreeBSD Hubs Mailing List" , freebsd-docs@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: Email harvesting on X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Mar 2008 16:53:35 -0000 In the online documentation for freebsd, such as on this page: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mirrors-ftp.html Unmunged email addresses are scattered throughout. Is it possible that in order to thwart email harvesting that we institute a policy of munging the addresses? Like... hostmaster [at] ca.freebsd.org or even hostmaster [at] ca [dot] freebsd [dot] org I have received 200+ spam messages in the past 12 hours alone sent to that address, and that's after some pretty good filters... Cheers, Mit Rowe From owner-freebsd-hubs@FreeBSD.ORG Mon Mar 10 17:44:39 2008 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 869FE1065670; Mon, 10 Mar 2008 17:44:39 +0000 (UTC) (envelope-from rsk@gsp.org) Received: from taos.firemountain.net (taos.firemountain.net [207.114.3.54]) by mx1.freebsd.org (Postfix) with ESMTP id 22F018FC2A; Mon, 10 Mar 2008 17:44:38 +0000 (UTC) (envelope-from rsk@gsp.org) Received: from squonk.gsp.org (bltmd-207.114.17.152.dsl.charm.net [207.114.17.152]) by taos.firemountain.net (8.14.1/8.14.1) with ESMTP id m2AHEZ61029476; Mon, 10 Mar 2008 13:14:36 -0400 (EDT) Received: from avatar.gsp.org (avatar.gsp.org [192.168.0.11]) by squonk.gsp.org (8.14.1/8.14.1) with ESMTP id m2AHAtbJ003001; Mon, 10 Mar 2008 13:10:55 -0400 (EDT) Received: from avatar.gsp.org (localhost [127.0.0.1]) by avatar.gsp.org (8.14.1/8.14.1/Debian-8ubuntu1) with ESMTP id m2AHFlOJ015335; Mon, 10 Mar 2008 13:15:47 -0400 Received: (from rsk@localhost) by avatar.gsp.org (8.14.1/8.14.1/Submit) id m2AHFkD0015330; Mon, 10 Mar 2008 13:15:46 -0400 Date: Mon, 10 Mar 2008 13:15:46 -0400 From: Rich Kulawiec To: Mit Rowe Message-ID: <20080310171546.GA14548@gsp.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.15+20070412 (2007-04-11) Cc: FreeBSD Hubs Mailing List , freebsd-docs@freebsd.org Subject: Re: Email harvesting on X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Mar 2008 17:44:39 -0000 On Mon, Mar 10, 2008 at 12:27:56PM -0400, Mit Rowe wrote: > In the online documentation for freebsd, such as on this page: > > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mirrors-ftp.html > > Unmunged email addresses are scattered throughout. > > Is it possible that in order to thwart email harvesting that we institute a > policy of munging the addresses? Like... hostmaster [at] ca.freebsd.org or > even hostmaster [at] ca [dot] freebsd [dot] org This is completely, absolutely, utterly pointless for several reasons. First, spammers wrote the trivial bits of perl/awk/python/whatever to unmunge those forms many years ago. Second, spammers have also long since done the requisite RFC and statistical analysis to know that hostmaster@[anydomain] is reasonably likely to exist, as is webmaster@[anydomain], john@[anydomain], mary@[anydomain], etc. Third, unmunged addresses appear with regularity in message headers *because they have to* in order for mail to work. Fourth, there are an enormous number of fully-compromised systems worldwide (any estimate under 10e8 is badly outdated). Among the many uses that the new owners of those system have for them is mass harvesting of email addresses -- which means that they have long since gone through every "address book", all stored mail, and perhaps all stored documents as well. Note that some of those compromised systems are mail servers, in which case the harvesting is likely to be very fruitful. Fifth, spammers have many other methods of acquiring addresses, including but not limited to querying mail servers, acquiring corporate directories (sometimes from their web sites), insecure LDAP servers, insecure AD servers, use of backscatter/outscatter, use of auto-responders, use of mailing list mechanisms, dictionary attacks, and purchase of addresses in bulk on the open market. It's therefore reasonable to assume at this point that ANY email address is either (a) in the hands of spammers or (b) will be soon, and to plan defenses accordingly. (Yes, special-purpose addresses insulated from all this, only used in isolated cases, and sufficiently obscure as to avoid guesswork may be exceptions. But they're clearly a tiny fraction of "all valid email addresses worldwide".) ---Rsk From owner-freebsd-hubs@FreeBSD.ORG Mon Mar 10 17:53:28 2008 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E4A43106567E; Mon, 10 Mar 2008 17:53:28 +0000 (UTC) (envelope-from olli@lurza.secnetix.de) Received: from lurza.secnetix.de (unknown [IPv6:2a01:170:102f::2]) by mx1.freebsd.org (Postfix) with ESMTP id 5DB978FC1E; Mon, 10 Mar 2008 17:53:28 +0000 (UTC) (envelope-from olli@lurza.secnetix.de) Received: from lurza.secnetix.de (localhost [127.0.0.1]) by lurza.secnetix.de (8.14.1/8.14.1) with ESMTP id m2AHrQDx036612; Mon, 10 Mar 2008 18:53:27 +0100 (CET) (envelope-from oliver.fromme@secnetix.de) Received: (from olli@localhost) by lurza.secnetix.de (8.14.1/8.14.1/Submit) id m2AHrQMA036610; Mon, 10 Mar 2008 18:53:26 +0100 (CET) (envelope-from olli) From: Oliver Fromme Message-Id: <200803101753.m2AHrQMA036610@lurza.secnetix.de> To: mit@mitayai.org (Mit Rowe) Date: Mon, 10 Mar 2008 18:53:26 +0100 (CET) In-Reply-To: X-Mailer: ELM [version 2.5 PL8] MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.1.2 (lurza.secnetix.de [127.0.0.1]); Mon, 10 Mar 2008 18:53:27 +0100 (CET) Cc: FreeBSD Hubs Mailing List , freebsd-docs@freebsd.org Subject: Re: Email harvesting on X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Mar 2008 17:53:29 -0000 Mit Rowe wrote: > In the online documentation for freebsd, such as on this page: > > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mirrors-ftp.html > > Unmunged email addresses are scattered throughout. Which is a good thing. I think it is extremely annoying when you have to copy an address and "fix" it in order to send a message to a person. You should be able to just click on it. That's the purpose of the web and hyperlinks. I certainly do not want my address to be "munged" in any way, because I do want to be easily reachable. That's why I have an e-mail address. Apart from that -- as Rich pointed out -- such "munging" is rather useless for spam prevention. > I have received 200+ spam messages in the past 12 hours alone sent to that > address, and that's after some pretty good filters... You should use better anti-spam software. I saw almost zero spam messages in the past 12 hours, despite my address being listed unmunged on quite a lot of web sites. Greylisting, some simple filtering, a bayesian filter and similar things catches almost all of it. Best regards Oliver -- Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M. Handelsregister: Registergericht Muenchen, HRA 74606, Geschäftsfuehrung: secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht Mün- chen, HRB 125758, Geschäftsführer: Maik Bachmann, Olaf Erb, Ralf Gebhart FreeBSD-Dienstleistungen, -Produkte und mehr: http://www.secnetix.de/bsd One Unix to rule them all, One Resolver to find them, One IP to bring them all and in the zone to bind them. From owner-freebsd-hubs@FreeBSD.ORG Tue Mar 11 09:59:01 2008 Return-Path: Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 91E3C1065670 for ; Tue, 11 Mar 2008 09:59:01 +0000 (UTC) (envelope-from fbsd-hubs-mirror-list@heanet.ie) Received: from byron.heanet.ie (mx.virtual.heanet.ie [IPv6:2001:770:18:2::89]) by mx1.freebsd.org (Postfix) with ESMTP id 1C1E98FC2B for ; Tue, 11 Mar 2008 09:59:00 +0000 (UTC) (envelope-from fbsd-hubs-mirror-list@heanet.ie) Received: from tachikoma.heanet.ie ([193.1.228.241]) by byron.heanet.ie with esmtpsa (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.63) (envelope-from ) id 1JZ1G7-0006MB-G3 for freebsd-hubs@freebsd.org; Tue, 11 Mar 2008 09:58:59 +0000 Date: Tue, 11 Mar 2008 09:58:44 +0000 From: fbsd-hubs-mirror-list@heanet.ie To: "FreeBSD Hubs Mailing List" Message-ID: <20080311095844.73409bfa@tachikoma.heanet.ie> X-Mailer: Claws Mail 3.3.1 (GTK+ 2.12.8; i386-portbld-freebsd7.0) Mime-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/lGBOkPvSPjcCXYigY=o/CK2"; protocol="application/pgp-signature"; micalg=PGP-SHA1 Subject: cvsup2.ie.freebsd.org upgrade X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Mar 2008 09:59:01 -0000 --Sig_/lGBOkPvSPjcCXYigY=o/CK2 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi all, I'm planning on upgrading cvsup2.ie.freebsd.org to 7.0-RELEASE today, so it'll be offline for a few hours from about 11:30. rg --=20 Rob Gallagher | Public Key: 0x1DD13A78 HEAnet Limited, Ireland's Education and Research Network 1st Floor, 5 George's Dock, IFSC, Dublin 1. Registered in Ireland, no 275301 T: (+353-1) 6609040 F: (+353-1) 6603666 WWW: http://www.heanet.ie/ --Sig_/lGBOkPvSPjcCXYigY=o/CK2 Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (FreeBSD) iEYEARECAAYFAkfWV9QACgkQiSgypR3ROnheDACbBnMoIRs3qMj0/dsV97ARKzVE 2uYAnilQ9dpZT6kTKdIYu+PJHOu/gYZV =fXFP -----END PGP SIGNATURE----- --Sig_/lGBOkPvSPjcCXYigY=o/CK2--