From owner-freebsd-isp Sun Jan 5 16:51:51 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 94F8137B401 for ; Sun, 5 Jan 2003 16:51:49 -0800 (PST) Received: from hotmail.com (f82.law12.hotmail.com [64.4.19.82]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4EF5143EC5 for ; Sun, 5 Jan 2003 16:51:49 -0800 (PST) (envelope-from adrian_nospm@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sun, 5 Jan 2003 16:51:15 -0800 Received: from 203.12.22.37 by lw12fd.law12.hotmail.msn.com with HTTP; Mon, 06 Jan 2003 00:51:15 GMT X-Originating-IP: [203.12.22.37] From: "Adrian NoSpm!" To: jim@jwweeks.com Cc: freebsd-isp@freebsd.org Subject: Re: how do you have seperate UIDs for each frontpage web? Date: Mon, 06 Jan 2003 00:51:15 +0000 Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: X-OriginalArrivalTime: 06 Jan 2003 00:51:15.0889 (UTC) FILETIME=[B79B6A10:01C2B51D] Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi Jim, Thank-you very much indeed. The problem was that the fpuser account was privileged (was using tcsh). The error message didn't refect this a problem.. best regards, Adrian. >From: Jim Weeks >To: Adrian NoSpm! >CC: freebsd-isp@FreeBSD.ORG >Subject: Re: how do you have seperate UIDs for each frontpage web? >Date: Sat, 4 Jan 2003 20:24:45 -0500 (EST) > > >On Fri, 3 Jan 2003, Adrian NoSpm! wrote: > > > If I use fp_install and specify username and group > > I want, I just get that error...> > >Sorry for re-posting right on the heals of a previous reply, but I missed >this the first time around. > >You shouldn't need to run fp_install for all these accounts. The existing >/usr/local/frontpage/something.com:80.cnf should transfer to the new >machine and work as before. The only reason you might want to reinstall >extension is in the case of an upgrade. > >Barring an fp version upgrade, I would just tar /usr/local/frontpage and >user directories, and move to the new machine. > >Regards, > >-- >Jim _________________________________________________________________ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Jan 6 13:46:53 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2A87137B401 for ; Mon, 6 Jan 2003 13:46:53 -0800 (PST) Received: from kwiatek.eu.org (116-moc-8.acn.waw.pl [212.76.59.116]) by mx1.FreeBSD.org (Postfix) with ESMTP id B64A243EC2 for ; Mon, 6 Jan 2003 13:46:46 -0800 (PST) (envelope-from kwiatek@tpi.pl) Received: from localhost (localhost [127.0.0.1]) by kwiatek.eu.org (Postfix) with ESMTP id 5CF3E36180; Mon, 6 Jan 2003 22:46:37 +0100 (CET) Date: Mon, 6 Jan 2003 22:46:37 +0100 (CET) From: Andrzej Kwiatkowski X-X-Sender: kwiatek@kwiatek.eu.org To: freebsd-isp@freebsd.org Subject: frontpage and LDAP vhost Message-ID: <20030106224423.H11946@kwiatek.eu.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hello I'm using Apache with my own module which reads virtual sites config from LDAP database (it generate config from LDAP data).. and how can i setup frontpage extensions... with such apache config ?? Greetings Andrzej Kwiatkowski To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Jan 6 14:26:41 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8CDC337B401 for ; Mon, 6 Jan 2003 14:26:40 -0800 (PST) Received: from mail.day-light.net (day-light.net [64.37.72.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 07BD143EC5 for ; Mon, 6 Jan 2003 14:26:40 -0800 (PST) (envelope-from john@day-light.com) Received: from w1 (118-203.bestdsl.net [216.162.118.203]) by mail.day-light.net (Postfix) with SMTP id A04EB35250 for ; Mon, 6 Jan 2003 16:26:33 -0600 (CST) Reply-To: From: "John Brooks" To: Subject: Ports failing Date: Mon, 6 Jan 2003 16:27:26 -0600 Message-ID: <001001c2b5d2$cb4ee4a0$c905010a@daylight.net> MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org this is a new clean install of 4.7 release from cdrom. previously this box had 4.5 release. from a boot screen: Illegal instruction (core dumped) Jan 6 16:30:36 joseph /kernel: pid 94 (sed), uid 0: exited on signal 4 (core dumped) setting 'update_motd="NO"' bypasses this error release notes on 4.7 indicate: "sed(1) now takes a -i option to enable in-place editing of files." also, ports will not compile, returning errors of 'invalid syntax', 'syntax error', 'return makes integer from pointer without a cast', and 'data definition has no type or storage class' I suspect this is related. Has anyone dealt with this or seen this before? -- John Brooks john@stlbsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Jan 6 16:59: 1 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8991B37B401 for ; Mon, 6 Jan 2003 16:58:57 -0800 (PST) Received: from mail.rytecdoors.com (mail.rytecdoors.com [12.2.10.229]) by mx1.FreeBSD.org (Postfix) with ESMTP id AD1A543EC2 for ; Mon, 6 Jan 2003 16:58:56 -0800 (PST) (envelope-from tr666jh@allrahanda.is) Received: from mx1.skyrr.is=0 [202.105.138.19] by mail.rytecdoors.com with ESMTP (SMTPD32-7.13) id A623500136; Mon, 06 Jan 2003 18:58:11 -0600 Message-ID: <00006c33553a$000034d1$000030ed@aptiva.virgo.com.pl=0> To: Cc: , , , , , , , , , , , , , , , , , From: "Charlie Tuna" Subject: Small Bio-tech firm with Major Cancer Breakthrough12575 Date: Mon, 06 Jan 2003 17:07:00 -2000 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org STOCK ALERT: BUY OTC BB : RJVN The Company profiled below is expected to announce several major accomplishments via Press Releases, which could dramatically effect its stock price over the next 30-days. You can be among the first to receive this information by opting-in to our mailing list at this time. You will receive live and timely updates regarding the company profiled below as well as free trials to valuable investment tools. See Opt-in instructions below. Buy OTC BB : RJVN - Investors who are still making money in the stock market are those who know what stocks are in play or stocks about to be promoted/syndicated. By now you probably realize that stocks don't just go up but are pushed up by brokerage firms that give companies exposure and analyst coverage, they promote them! To make money, an investor needs to buy at the beginning of the PUSH and sell within a 60-day period. We report on which stocks are being pushed and at what price levels to buy and sell at. Our current pick, OTC BB : RJVN is ready to move quickly with news to be released and a promotion underway. Company----------RJV Networks, Inc. Symbol-----------RJVN Current Price----$0.26 52 Week High-----$2.10 52 Week Low------$0.12 Target Price $2 in Q1/2003 Update: Experts agree that RJVN cancer treatment therapies capable of treating most cancers. Investment Highlights RJVN projects it will be able to treat most cancers with its combined targeted therapy treatment, which is based upon an astounding discovery by a molecular biologist at the Univ. of Michigan - The causal link to breast and most other malignancies and cancers in the protein Mammastatin. RJVN has developed a series of cancer treatment therapies, which utilize pan-cancer market antibodies. Antibody therapies do not create chemical toxicity and, as such, are fast tracked through the regulatory approval process. Using the therapy approach, RJVN is targeted to enter testing for its products this spring. RJVN's combination of two leading, well known technologies previously announced by BioCurex and InNexus Corp along with RJVN's key MAb protein replicating technology has allowed the Company to create a series of patented therapeutic products that many molecular biologists believe will treat most cancers. RJVN's R&D and Management are led by Dr. John Todd, Dr. Charles Morgan (a world renowned molecular biologist and 5 other industry leading Dr's all with several years experience in bio-tech development. For more info see RJVN in the news. ******************* Special Offer ******************* As a member of our opt-in mailing list, you will be among the first to receive up to the minute information regarding the company profiled above as well as a free 10-day trial to a website with real-time Level II quotes, research reports, OTC BB promo / syndication calendar, trading chat rooms, full threading message boards, along with many other valuable and free investment tools not readily available to the general public. This is an incredible opportunity! Just click the link below to send us an email, and you will be immediately added to our Opt-in list. Please be sure that "opt-me-in" is in the subject line of the email. MailTo:christie721@excite.com?Subject=opt-me-in . Thank you. ***********************Disclaimer******************** Information within this email contains "forward looking statements" within the meaning of Section 27A of the Securities Act of 1933 and Section 21B of the Securities Exchange Act of 1934. Any statements that express or involve discussions with respect to predictions, goals, expectations, beliefs, plans, projections, objectives, assumptions or future events or performance are not statements of historical fact and may be "forward looking statements." Forward looking statements are based on expectations, estimates and projections at the time the statements are made that involve a number of risks and uncertainties which could cause actual results or events to differ materially from those presently anticipated. Forward looking statements in this action may be identified through the use of words such as: "projects", "foresee", "expects", "estimates," "believes," "understands" "will," "anticipates," or that by statements indicating certain actions "may," "could," or "might" occur. All information provided within this email pertaining to investing, stocks, securities must be understood as information provided and not investment advice. Emerging Equity Alert advises all readers and subscribers to seek advice from a registered professional securities representative before deciding to trade in stocks featured within this email. None of the material within this report shall be construed as any kind of investment advice. In compliance with the Securities Act of 1933, Section 17(b), Emerging Stock Alert discloses the receipt of 125,000 unrestricted shares of RJVN from a third party for the publication of this report. Be aware of an inherent conflict of interest resulting from such compensation due to our intent to profit from the liquidation of these shares. Shares may be sold at any time, even after positive statements have been made regarding the above company. All factual information in this report was gathered from public sources, including but not limited to SEC filings, Company Press Releases, and Market Guide. Emerging Equity Alert believes this information to be reliable but can make no guarantee as to its accuracy or completeness. Use of the material within this email constitutes your acceptance of these terms. ****** Advertising Disclaimer ****** We are an internet advertising company and have received a monetary payment for this mailing service. We hold no stocks and have no personal interest in this company whatsoever. We are simply being paid to perform a service. This message is an advertisement. ****** Removal Instructions ****** This message has been sent to you in compliance with our strict anti-abuse regulations. We will continue to bring you valuable offers on the products and services that interest you most. If you do not wish to receive further mailings, please click below. We respect all removal requests. To be removed immediately from our mailing lists just click on the link below: MailTo:berryja3116@excite.com?Subject=Please-Remove . Be sure that "Please-Remove" is in the subject line of the email prior to sending it. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Mon Jan 6 17: 4:46 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 44DA337B401 for ; Mon, 6 Jan 2003 17:04:45 -0800 (PST) Received: from hotmail.com (f169.law12.hotmail.com [64.4.19.169]) by mx1.FreeBSD.org (Postfix) with ESMTP id F300C43EA9 for ; Mon, 6 Jan 2003 17:04:44 -0800 (PST) (envelope-from adrian_nospm@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 6 Jan 2003 17:04:44 -0800 Received: from 203.12.22.37 by lw12fd.law12.hotmail.msn.com with HTTP; Tue, 07 Jan 2003 01:04:44 GMT X-Originating-IP: [203.12.22.37] From: "Adrian NoSpm!" To: freebsd-isp@freebsd.org Subject: upgrading Frontpage - CGI problem (msg=FrontPage security violation) Date: Tue, 07 Jan 2003 01:04:44 +0000 Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: X-OriginalArrivalTime: 07 Jan 2003 01:04:44.0884 (UTC) FILETIME=[C4380140:01C2B5E8] Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, I've seen this posted a few times but can't find a solution. I've built a new apache server with Frontpage extensions 2002 and copies some hosts across from frontpage 98 (and much older apache). When I try and use some of the CGI functions on the pages, I get this in my httpd-error.log: [2003-01-07 10:50:05]: cannot stat: /www/45.testsite/.htaccess The form in the browser returns: status=1 osstatus=0 msg=FrontPage security violation. osmsg=(not displayed for security reasons) I've tried creating a .htaccess file and allowing all, but then the browser just pops up a login dialog. Does anyone know how to fix this? Thanks, Adrian. _________________________________________________________________ The new MSN 8 is here: Try it free* for 2 months http://join.msn.com/?page=dept/dialup To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Jan 7 1:44:52 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B83A937B401 for ; Tue, 7 Jan 2003 01:44:50 -0800 (PST) Received: from riy-01-s1.saudi.net.sa (riy-01-s1.saudi.net.sa [212.118.133.133]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8194C43E4A for ; Tue, 7 Jan 2003 01:44:49 -0800 (PST) (envelope-from rayed@saudi.net.sa) Received: from saudi.net.sa (riy-ol-ws1.saudi.net.sa [212.118.133.49]) by riy-01-s1.saudi.net.sa (8.12.1/8.11.6) with ESMTP id h079p2eh084594 for ; Tue, 7 Jan 2003 12:51:03 +0300 (AST) (envelope-from rayed@saudi.net.sa) Message-ID: <3E1AA183.1060604@saudi.net.sa> Date: Tue, 07 Jan 2003 12:44:35 +0300 From: Rayed Al-Rashed User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021130 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-isp@FreeBSD.ORG Subject: Sendmail ignoring hosts.allow Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, Our mail server was under DOS attack, and I was trying to stop the new connections using /etc/hosts.allow but I couldn't do it. The entry in /etc/hosts.allow: sendmail : xx.xx.xx.xx : DENY and I even tried: ALL : ALL : DENY but still doesn't work, I installed sendmail from the port, and I also checked tcpwrapper support: --------------------------------------------------- # sendmail -d0.1 Version 8.12.1 Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MIME7TO8 MIME8TO7 NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS PIPELINING SCANF TCPWRAPPERS USERDB XDEBUG --------------------------------------------------- The /etc/mailer.conf also points to the port version. Any ideas on why it doesn't work!! P.S. I just added an entry on /etc/mail/access to reject emails from that IP but sendmail still need to fork. Thanks, - rayed To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Tue Jan 7 2:11:54 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3380D37B401 for ; Tue, 7 Jan 2003 02:11:54 -0800 (PST) Received: from brisefer.cediti.be (porquepix.cediti.be [213.189.188.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id C691543EA9 for ; Tue, 7 Jan 2003 02:11:52 -0800 (PST) (envelope-from Olivier.Cherrier@cediti.be) Received: by brisefer.nat.cediti.be with Internet Mail Service (5.5.2653.19) id ; Tue, 7 Jan 2003 11:10:18 +0100 Message-ID: From: Olivier Cherrier To: 'Rayed Al-Rashed' , freebsd-isp@FreeBSD.ORG Subject: RE: Sendmail ignoring hosts.allow Date: Tue, 7 Jan 2003 11:10:17 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > Our mail server was under DOS attack, and I was trying to > stop the new > connections using /etc/hosts.allow but I couldn't do it. Use a packet filter as IPFW or IPF for this purpose. It is far more powerfull and flexible. oc To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 0:37:13 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0A68237B401 for ; Wed, 8 Jan 2003 00:37:12 -0800 (PST) Received: from pdn.southernonline.net (southernonline.net [202.63.96.1]) by mx1.FreeBSD.org (Postfix) with SMTP id 72D3243E4A for ; Wed, 8 Jan 2003 00:37:07 -0800 (PST) (envelope-from vishal@southernonline.net) Received: (qmail 21810 invoked from network); 8 Jan 2003 08:59:50 -0000 Received: from unknown (HELO inetter) (202.63.111.11) by mail.southernonline.net with SMTP; 8 Jan 2003 08:59:50 -0000 Message-ID: <005401c2b6f1$2aa49d40$0b6f3fca@southernonline.net> From: "Vishal Gandhi Kommineni" To: "Rayed Al-Rashed" , References: <3E1AA183.1060604@saudi.net.sa> Subject: Re: Sendmail ignoring hosts.allow Date: Wed, 8 Jan 2003 14:07:23 +0530 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org try ALL: ALL Vishal Gandhi Kommineni ----- Original Message ----- From: "Rayed Al-Rashed" To: Sent: Tuesday, January 07, 2003 3:14 PM Subject: Sendmail ignoring hosts.allow > Hi, > > Our mail server was under DOS attack, and I was trying to stop the new > connections using /etc/hosts.allow but I couldn't do it. > > The entry in /etc/hosts.allow: > > sendmail : xx.xx.xx.xx : DENY > > and I even tried: > > ALL : ALL : DENY > > but still doesn't work, I installed sendmail from the port, and I also > checked tcpwrapper support: > --------------------------------------------------- > # sendmail -d0.1 > Version 8.12.1 > Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MIME7TO8 MIME8TO7 > NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS PIPELINING > SCANF TCPWRAPPERS USERDB XDEBUG > --------------------------------------------------- > The /etc/mailer.conf also points to the port version. > Any ideas on why it doesn't work!! > > P.S. I just added an entry on /etc/mail/access to reject emails from > that IP but sendmail still need to fork. > > > Thanks, > - rayed > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 1: 9:47 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 50E4337B405 for ; Wed, 8 Jan 2003 01:09:45 -0800 (PST) Received: from riy-01-s1.saudi.net.sa (riy-01-s1.saudi.net.sa [212.118.133.133]) by mx1.FreeBSD.org (Postfix) with ESMTP id B466E43EA9 for ; Wed, 8 Jan 2003 01:09:43 -0800 (PST) (envelope-from rayed@saudi.net.sa) Received: from saudi.net.sa (riy-ol-ws1.saudi.net.sa [212.118.133.49]) by riy-01-s1.saudi.net.sa (8.12.1/8.11.6) with ESMTP id h089FuA3040707; Wed, 8 Jan 2003 12:15:56 +0300 (AST) (envelope-from rayed@saudi.net.sa) Message-ID: <3E1BEAC8.4000500@saudi.net.sa> Date: Wed, 08 Jan 2003 12:09:28 +0300 From: Rayed Al-Rashed User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021130 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Vishal Gandhi Kommineni Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Sendmail ignoring hosts.allow References: <3E1AA183.1060604@saudi.net.sa> <005401c2b6f1$2aa49d40$0b6f3fca@southernonline.net> In-Reply-To: <005401c2b6f1$2aa49d40$0b6f3fca@southernonline.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Didn't work in both /etc/hosts.allow and /etc/hosts.deny Vishal Gandhi Kommineni wrote: >try >ALL: ALL > >Vishal Gandhi Kommineni >----- Original Message ----- >From: "Rayed Al-Rashed" >To: >Sent: Tuesday, January 07, 2003 3:14 PM >Subject: Sendmail ignoring hosts.allow > > > > >>Hi, >> >>Our mail server was under DOS attack, and I was trying to stop the new >>connections using /etc/hosts.allow but I couldn't do it. >> >>The entry in /etc/hosts.allow: >> >> sendmail : xx.xx.xx.xx : DENY >> >>and I even tried: >> >> ALL : ALL : DENY >> >>but still doesn't work, I installed sendmail from the port, and I also >>checked tcpwrapper support: >>--------------------------------------------------- >># sendmail -d0.1 >>Version 8.12.1 >> Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MIME7TO8 MIME8TO7 >> NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS PIPELINING >> SCANF TCPWRAPPERS USERDB XDEBUG >>--------------------------------------------------- >>The /etc/mailer.conf also points to the port version. >>Any ideas on why it doesn't work!! >> >>P.S. I just added an entry on /etc/mail/access to reject emails from >>that IP but sendmail still need to fork. >> >> >>Thanks, >>- rayed >> >> >>To Unsubscribe: send mail to majordomo@FreeBSD.org >>with "unsubscribe freebsd-isp" in the body of the message >> >> >> > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 1:23:50 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D463937B401 for ; Wed, 8 Jan 2003 01:23:47 -0800 (PST) Received: from pdn.southernonline.net (southernonline.net [202.63.96.1]) by mx1.FreeBSD.org (Postfix) with SMTP id B8A7143ED4 for ; Wed, 8 Jan 2003 01:23:39 -0800 (PST) (envelope-from vishal@southernonline.net) Received: (qmail 22761 invoked from network); 8 Jan 2003 09:46:25 -0000 Received: from unknown (HELO inetter) (202.63.111.11) by mail.southernonline.net with SMTP; 8 Jan 2003 09:46:25 -0000 Message-ID: <006901c2b6f7$ac8e9d00$0b6f3fca@southernonline.net> From: "Vishal Gandhi Kommineni" To: "Rayed Al-Rashed" Cc: References: <3E1AA183.1060604@saudi.net.sa> <005401c2b6f1$2aa49d40$0b6f3fca@southernonline.net> <3E1BEAC8.4000500@saudi.net.sa> Subject: Re: Sendmail ignoring hosts.allow Date: Wed, 8 Jan 2003 14:53:58 +0530 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org in /etc/hosts.allow it should be ALL: xxx.xxx.xxx.xxx ( ip's you want to allow) in /etc/hosts.deny it should be ALL: ALL Vishal Gandhi Kommineni ----- Original Message ----- From: "Rayed Al-Rashed" To: "Vishal Gandhi Kommineni" Cc: Sent: Wednesday, January 08, 2003 2:39 PM Subject: Re: Sendmail ignoring hosts.allow > > Didn't work in both /etc/hosts.allow and /etc/hosts.deny > > > Vishal Gandhi Kommineni wrote: > > >try > >ALL: ALL > > > >Vishal Gandhi Kommineni > >----- Original Message ----- > >From: "Rayed Al-Rashed" > >To: > >Sent: Tuesday, January 07, 2003 3:14 PM > >Subject: Sendmail ignoring hosts.allow > > > > > > > > > >>Hi, > >> > >>Our mail server was under DOS attack, and I was trying to stop the new > >>connections using /etc/hosts.allow but I couldn't do it. > >> > >>The entry in /etc/hosts.allow: > >> > >> sendmail : xx.xx.xx.xx : DENY > >> > >>and I even tried: > >> > >> ALL : ALL : DENY > >> > >>but still doesn't work, I installed sendmail from the port, and I also > >>checked tcpwrapper support: > >>--------------------------------------------------- > >># sendmail -d0.1 > >>Version 8.12.1 > >> Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MIME7TO8 MIME8TO7 > >> NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS PIPELINING > >> SCANF TCPWRAPPERS USERDB XDEBUG > >>--------------------------------------------------- > >>The /etc/mailer.conf also points to the port version. > >>Any ideas on why it doesn't work!! > >> > >>P.S. I just added an entry on /etc/mail/access to reject emails from > >>that IP but sendmail still need to fork. > >> > >> > >>Thanks, > >>- rayed > >> > >> > >>To Unsubscribe: send mail to majordomo@FreeBSD.org > >>with "unsubscribe freebsd-isp" in the body of the message > >> > >> > >> > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 1:40:10 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3B6BD37B401 for ; Wed, 8 Jan 2003 01:40:07 -0800 (PST) Received: from riy-01-s1.saudi.net.sa (riy-01-s1.saudi.net.sa [212.118.133.133]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2323143ED8 for ; Wed, 8 Jan 2003 01:40:06 -0800 (PST) (envelope-from rayed@saudi.net.sa) Received: from saudi.net.sa (riy-ol-ws1.saudi.net.sa [212.118.133.49]) by riy-01-s1.saudi.net.sa (8.12.1/8.11.6) with ESMTP id h089kVA3042341; Wed, 8 Jan 2003 12:46:31 +0300 (AST) (envelope-from rayed@saudi.net.sa) Message-ID: <3E1BF1F2.4090205@saudi.net.sa> Date: Wed, 08 Jan 2003 12:40:02 +0300 From: Rayed Al-Rashed User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021130 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Vishal Gandhi Kommineni Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Sendmail ignoring hosts.allow References: <3E1AA183.1060604@saudi.net.sa> <005401c2b6f1$2aa49d40$0b6f3fca@southernonline.net> <3E1BEAC8.4000500@saudi.net.sa> <006901c2b6f7$ac8e9d00$0b6f3fca@southernonline.net> In-Reply-To: <006901c2b6f7$ac8e9d00$0b6f3fca@southernonline.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org In /etc/hosts.deny I put ALL : ALL and restarted sendmail and it still ignores it. I remembered one thing, I have 2 IPs one that server, does this have any effect?! Thanks - rayed Vishal Gandhi Kommineni wrote: >in /etc/hosts.allow it should be >ALL: xxx.xxx.xxx.xxx ( ip's you want to allow) > >in /etc/hosts.deny it should be > >ALL: ALL > >Vishal Gandhi Kommineni >----- Original Message ----- >From: "Rayed Al-Rashed" >To: "Vishal Gandhi Kommineni" >Cc: >Sent: Wednesday, January 08, 2003 2:39 PM >Subject: Re: Sendmail ignoring hosts.allow > > > > >>Didn't work in both /etc/hosts.allow and /etc/hosts.deny >> >> >>Vishal Gandhi Kommineni wrote: >> >> >> >>>try >>>ALL: ALL >>> >>>Vishal Gandhi Kommineni >>>----- Original Message ----- >>>From: "Rayed Al-Rashed" >>>To: >>>Sent: Tuesday, January 07, 2003 3:14 PM >>>Subject: Sendmail ignoring hosts.allow >>> >>> >>> >>> >>> >>> >>>>Hi, >>>> >>>>Our mail server was under DOS attack, and I was trying to stop the new >>>>connections using /etc/hosts.allow but I couldn't do it. >>>> >>>>The entry in /etc/hosts.allow: >>>> >>>> sendmail : xx.xx.xx.xx : DENY >>>> >>>>and I even tried: >>>> >>>> ALL : ALL : DENY >>>> >>>>but still doesn't work, I installed sendmail from the port, and I also >>>>checked tcpwrapper support: >>>>--------------------------------------------------- >>>># sendmail -d0.1 >>>>Version 8.12.1 >>>> Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MIME7TO8 MIME8TO7 >>>> NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS >>>> >>>> >PIPELINING > > >>>> SCANF TCPWRAPPERS USERDB XDEBUG >>>>--------------------------------------------------- >>>>The /etc/mailer.conf also points to the port version. >>>>Any ideas on why it doesn't work!! >>>> >>>>P.S. I just added an entry on /etc/mail/access to reject emails from >>>>that IP but sendmail still need to fork. >>>> >>>> >>>>Thanks, >>>>- rayed >>>> >>>> >>>>To Unsubscribe: send mail to majordomo@FreeBSD.org >>>>with "unsubscribe freebsd-isp" in the body of the message >>>> >>>> >>>> >>>> >>>> >>> >>> >>> >> >> > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 1:48:59 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5912E37B401 for ; Wed, 8 Jan 2003 01:48:55 -0800 (PST) Received: from pdn.southernonline.net (southernonline.net [202.63.96.1]) by mx1.FreeBSD.org (Postfix) with SMTP id C5B1343ED1 for ; Wed, 8 Jan 2003 01:48:52 -0800 (PST) (envelope-from vishal@southernonline.net) Received: (qmail 23337 invoked from network); 8 Jan 2003 10:11:43 -0000 Received: from unknown (HELO inetter) (202.63.111.11) by mail.southernonline.net with SMTP; 8 Jan 2003 10:11:43 -0000 Message-ID: <007c01c2b6fb$35d51a00$0b6f3fca@southernonline.net> From: "Vishal Gandhi Kommineni" To: "Rayed Al-Rashed" Cc: References: <3E1AA183.1060604@saudi.net.sa> <005401c2b6f1$2aa49d40$0b6f3fca@southernonline.net> <3E1BEAC8.4000500@saudi.net.sa> <006901c2b6f7$ac8e9d00$0b6f3fca@southernonline.net> <3E1BF1F2.4090205@saudi.net.sa> Subject: Re: Sendmail ignoring hosts.allow Date: Wed, 8 Jan 2003 15:19:17 +0530 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Can you tell me what is in hosts.allow ??? Vishal Gandhi Kommineni ----- Original Message ----- From: "Rayed Al-Rashed" To: "Vishal Gandhi Kommineni" Cc: Sent: Wednesday, January 08, 2003 3:10 PM Subject: Re: Sendmail ignoring hosts.allow > In /etc/hosts.deny I put > > ALL : ALL > > and restarted sendmail and it still ignores it. > > I remembered one thing, I have 2 IPs one that server, does this have any > effect?! > Thanks > > - rayed > > Vishal Gandhi Kommineni wrote: > > >in /etc/hosts.allow it should be > >ALL: xxx.xxx.xxx.xxx ( ip's you want to allow) > > > >in /etc/hosts.deny it should be > > > >ALL: ALL > > > >Vishal Gandhi Kommineni > >----- Original Message ----- > >From: "Rayed Al-Rashed" > >To: "Vishal Gandhi Kommineni" > >Cc: > >Sent: Wednesday, January 08, 2003 2:39 PM > >Subject: Re: Sendmail ignoring hosts.allow > > > > > > > > > >>Didn't work in both /etc/hosts.allow and /etc/hosts.deny > >> > >> > >>Vishal Gandhi Kommineni wrote: > >> > >> > >> > >>>try > >>>ALL: ALL > >>> > >>>Vishal Gandhi Kommineni > >>>----- Original Message ----- > >>>From: "Rayed Al-Rashed" > >>>To: > >>>Sent: Tuesday, January 07, 2003 3:14 PM > >>>Subject: Sendmail ignoring hosts.allow > >>> > >>> > >>> > >>> > >>> > >>> > >>>>Hi, > >>>> > >>>>Our mail server was under DOS attack, and I was trying to stop the new > >>>>connections using /etc/hosts.allow but I couldn't do it. > >>>> > >>>>The entry in /etc/hosts.allow: > >>>> > >>>> sendmail : xx.xx.xx.xx : DENY > >>>> > >>>>and I even tried: > >>>> > >>>> ALL : ALL : DENY > >>>> > >>>>but still doesn't work, I installed sendmail from the port, and I also > >>>>checked tcpwrapper support: > >>>>--------------------------------------------------- > >>>># sendmail -d0.1 > >>>>Version 8.12.1 > >>>> Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MIME7TO8 MIME8TO7 > >>>> NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS > >>>> > >>>> > >PIPELINING > > > > > >>>> SCANF TCPWRAPPERS USERDB XDEBUG > >>>>--------------------------------------------------- > >>>>The /etc/mailer.conf also points to the port version. > >>>>Any ideas on why it doesn't work!! > >>>> > >>>>P.S. I just added an entry on /etc/mail/access to reject emails from > >>>>that IP but sendmail still need to fork. > >>>> > >>>> > >>>>Thanks, > >>>>- rayed > >>>> > >>>> > >>>>To Unsubscribe: send mail to majordomo@FreeBSD.org > >>>>with "unsubscribe freebsd-isp" in the body of the message > >>>> > >>>> > >>>> > >>>> > >>>> > >>> > >>> > >>> > >> > >> > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 2: 8:37 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D618B37B401 for ; Wed, 8 Jan 2003 02:08:32 -0800 (PST) Received: from riy-01-s1.saudi.net.sa (riy-01-s1.saudi.net.sa [212.118.133.133]) by mx1.FreeBSD.org (Postfix) with ESMTP id B629543EDC for ; Wed, 8 Jan 2003 02:08:31 -0800 (PST) (envelope-from rayed@saudi.net.sa) Received: from saudi.net.sa (riy-ol-ws1.saudi.net.sa [212.118.133.49]) by riy-01-s1.saudi.net.sa (8.12.1/8.11.6) with ESMTP id h08AEuA3043631; Wed, 8 Jan 2003 13:14:56 +0300 (AST) (envelope-from rayed@saudi.net.sa) Message-ID: <3E1BF89C.5020809@saudi.net.sa> Date: Wed, 08 Jan 2003 13:08:28 +0300 From: Rayed Al-Rashed User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021130 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Vishal Gandhi Kommineni Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Sendmail ignoring hosts.allow References: <3E1AA183.1060604@saudi.net.sa> <005401c2b6f1$2aa49d40$0b6f3fca@southernonline.net> <3E1BEAC8.4000500@saudi.net.sa> <006901c2b6f7$ac8e9d00$0b6f3fca@southernonline.net> <3E1BF1F2.4090205@saudi.net.sa> <007c01c2b6fb$35d51a00$0b6f3fca@southernonline.net> In-Reply-To: <007c01c2b6fb$35d51a00$0b6f3fca@southernonline.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --------/etc/hosts.allow-------- ALL : attack_ip : DENY sendmail : attack_ip : DENY smtp : attack_ip : DENY sshd : our_ip : allow sshd : ALL : deny # allow everything else ALL : ALL : allow -------------------------------- Vishal Gandhi Kommineni wrote: >Can you tell me what is in hosts.allow ??? > >Vishal Gandhi Kommineni >----- Original Message ----- >From: "Rayed Al-Rashed" >To: "Vishal Gandhi Kommineni" >Cc: >Sent: Wednesday, January 08, 2003 3:10 PM >Subject: Re: Sendmail ignoring hosts.allow > > > > >>In /etc/hosts.deny I put >> >> ALL : ALL >> >>and restarted sendmail and it still ignores it. >> >>I remembered one thing, I have 2 IPs one that server, does this have any >>effect?! >>Thanks >> >>- rayed >> >>Vishal Gandhi Kommineni wrote: >> >> >> >>>in /etc/hosts.allow it should be >>>ALL: xxx.xxx.xxx.xxx ( ip's you want to allow) >>> >>>in /etc/hosts.deny it should be >>> >>>ALL: ALL >>> >>>Vishal Gandhi Kommineni >>>----- Original Message ----- >>>From: "Rayed Al-Rashed" >>>To: "Vishal Gandhi Kommineni" >>>Cc: >>>Sent: Wednesday, January 08, 2003 2:39 PM >>>Subject: Re: Sendmail ignoring hosts.allow >>> >>> >>> >>> >>> >>> >>>>Didn't work in both /etc/hosts.allow and /etc/hosts.deny >>>> >>>> >>>>Vishal Gandhi Kommineni wrote: >>>> >>>> >>>> >>>> >>>> >>>>>try >>>>>ALL: ALL >>>>> >>>>>Vishal Gandhi Kommineni >>>>>----- Original Message ----- >>>>>From: "Rayed Al-Rashed" >>>>>To: >>>>>Sent: Tuesday, January 07, 2003 3:14 PM >>>>>Subject: Sendmail ignoring hosts.allow >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>>Hi, >>>>>> >>>>>>Our mail server was under DOS attack, and I was trying to stop the new >>>>>>connections using /etc/hosts.allow but I couldn't do it. >>>>>> >>>>>>The entry in /etc/hosts.allow: >>>>>> >>>>>>sendmail : xx.xx.xx.xx : DENY >>>>>> >>>>>>and I even tried: >>>>>> >>>>>>ALL : ALL : DENY >>>>>> >>>>>>but still doesn't work, I installed sendmail from the port, and I also >>>>>>checked tcpwrapper support: >>>>>>--------------------------------------------------- >>>>>># sendmail -d0.1 >>>>>>Version 8.12.1 >>>>>>Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MIME7TO8 MIME8TO7 >>>>>> NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS >>>>>> >>>>>> >>>>>> >>>>>> >>>PIPELINING >>> >>> >>> >>> >>>>>> SCANF TCPWRAPPERS USERDB XDEBUG >>>>>>--------------------------------------------------- >>>>>>The /etc/mailer.conf also points to the port version. >>>>>>Any ideas on why it doesn't work!! >>>>>> >>>>>>P.S. I just added an entry on /etc/mail/access to reject emails from >>>>>>that IP but sendmail still need to fork. >>>>>> >>>>>> >>>>>>Thanks, >>>>>>- rayed >>>>>> >>>>>> >>>>>>To Unsubscribe: send mail to majordomo@FreeBSD.org >>>>>>with "unsubscribe freebsd-isp" in the body of the message >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> >>>> >>>> >>> >>> >>> >>> >> >> > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 4:26:56 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5995F37B401 for ; Wed, 8 Jan 2003 04:26:55 -0800 (PST) Received: from miata.ath.cx (pcp01454703pcs.blumtn01.pa.comcast.net [68.82.90.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id 77DAF43ED8 for ; Wed, 8 Jan 2003 04:26:49 -0800 (PST) (envelope-from mm@miata.ath.cx) Received: by miata.ath.cx (Postfix, from userid 1000) id B0ECA14A; Wed, 8 Jan 2003 07:26:48 -0500 (EST) Received: from localhost (localhost [127.0.0.1]) by miata.ath.cx (Postfix) with ESMTP id A4829147; Wed, 8 Jan 2003 07:26:48 -0500 (EST) Date: Wed, 8 Jan 2003 07:26:48 -0500 (EST) From: Michael McDowell To: Rayed Al-Rashed Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Sendmail ignoring hosts.allow In-Reply-To: <3E1AA183.1060604@saudi.net.sa> Message-ID: <20030108072118.M3165-100000@miata.ath.cx> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Have you tryed specifing an IP in hosts.allow from which you could try a telnet to your machine from? This is an easy way to see if indeed tcpwrappers is working or not. M. McDowell On Tue, 7 Jan 2003, Rayed Al-Rashed wrote: > Hi, > > Our mail server was under DOS attack, and I was trying to stop the new > connections using /etc/hosts.allow but I couldn't do it. > > The entry in /etc/hosts.allow: > > sendmail : xx.xx.xx.xx : DENY > > and I even tried: > > ALL : ALL : DENY > > but still doesn't work, I installed sendmail from the port, and I also > checked tcpwrapper support: > --------------------------------------------------- > # sendmail -d0.1 > Version 8.12.1 > Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MIME7TO8 MIME8TO7 > NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS PIPELINING > SCANF TCPWRAPPERS USERDB XDEBUG > --------------------------------------------------- > The /etc/mailer.conf also points to the port version. > Any ideas on why it doesn't work!! > > P.S. I just added an entry on /etc/mail/access to reject emails from > that IP but sendmail still need to fork. > > > Thanks, > - rayed > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 4:33:22 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B19F237B401 for ; Wed, 8 Jan 2003 04:33:20 -0800 (PST) Received: from riy-01-s1.saudi.net.sa (riy-01-s1.saudi.net.sa [212.118.133.133]) by mx1.FreeBSD.org (Postfix) with ESMTP id C2BC443ED8 for ; Wed, 8 Jan 2003 04:33:17 -0800 (PST) (envelope-from rayed@saudi.net.sa) Received: from saudi.net.sa (riy-ol-ws1.saudi.net.sa [212.118.133.49]) by riy-01-s1.saudi.net.sa (8.12.1/8.11.6) with ESMTP id h08CdcA3050326; Wed, 8 Jan 2003 15:39:38 +0300 (AST) (envelope-from rayed@saudi.net.sa) Message-ID: <3E1C1A81.3080207@saudi.net.sa> Date: Wed, 08 Jan 2003 15:33:05 +0300 From: Rayed Al-Rashed User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021130 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Michael McDowell Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Sendmail ignoring hosts.allow References: <20030108072118.M3165-100000@miata.ath.cx> In-Reply-To: <20030108072118.M3165-100000@miata.ath.cx> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Yes, I did. Actually I tried ALL after the IP didn't work with me! Michael McDowell wrote: >Have you tryed specifing an IP in hosts.allow from which you could >try a telnet to your machine from? This is an easy way to see if >indeed tcpwrappers is working or not. > >M. McDowell > >On Tue, 7 Jan 2003, Rayed Al-Rashed wrote: > > > >>Hi, >> >>Our mail server was under DOS attack, and I was trying to stop the new >>connections using /etc/hosts.allow but I couldn't do it. >> >>The entry in /etc/hosts.allow: >> >> sendmail : xx.xx.xx.xx : DENY >> >>and I even tried: >> >> ALL : ALL : DENY >> >>but still doesn't work, I installed sendmail from the port, and I also >>checked tcpwrapper support: >>--------------------------------------------------- >># sendmail -d0.1 >>Version 8.12.1 >> Compiled with: DNSMAP LOG MAP_REGEX MATCHGECOS MIME7TO8 MIME8TO7 >> NAMED_BIND NETINET NETINET6 NETUNIX NEWDB NIS PIPELINING >> SCANF TCPWRAPPERS USERDB XDEBUG >>--------------------------------------------------- >>The /etc/mailer.conf also points to the port version. >>Any ideas on why it doesn't work!! >> >>P.S. I just added an entry on /etc/mail/access to reject emails from >>that IP but sendmail still need to fork. >> >> >>Thanks, >>- rayed >> >> >>To Unsubscribe: send mail to majordomo@FreeBSD.org >>with "unsubscribe freebsd-isp" in the body of the message >> >> >> > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 6:16: 0 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 31E7A37B401 for ; Wed, 8 Jan 2003 06:15:59 -0800 (PST) Received: from mail.day-light.net (day-light.net [64.37.72.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id A14CD43E4A for ; Wed, 8 Jan 2003 06:15:58 -0800 (PST) (envelope-from john@day-light.com) Received: from w1 (118-203.bestdsl.net [216.162.118.203]) by mail.day-light.net (Postfix) with SMTP id 2AFCC35275 for ; Wed, 8 Jan 2003 08:15:57 -0600 (CST) Reply-To: From: "John Brooks" To: Subject: Sendmail and NIS files Date: Wed, 8 Jan 2003 08:16:54 -0600 Message-ID: <000b01c2b720$98bf3720$c905010a@daylight.net> MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) In-Reply-To: Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Does anyone know where I can find a complete list of all files specific to sendmail and nis, that exist in 4.7? -- John Brooks john@stlbsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 14:44:10 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9979937B401 for ; Wed, 8 Jan 2003 14:44:09 -0800 (PST) Received: from boreas.primus.ca (mail.tor.primus.ca [216.254.136.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1397943E4A for ; Wed, 8 Jan 2003 14:44:09 -0800 (PST) (envelope-from leth@primus.ca) Received: from dialin-150-109.tor.primus.ca ([216.254.150.109]) by boreas.primus.ca with esmtp (Exim 3.36 #3) id 18WOvZ-0007o9-0A; Wed, 08 Jan 2003 17:44:01 -0500 Date: Wed, 8 Jan 2003 17:44:25 -0500 (EST) From: Jason Hunt X-X-Sender: leth@lethargic.dyndns.org To: Andrzej Kwiatkowski Cc: freebsd-isp@FreeBSD.ORG Subject: Re: frontpage and LDAP vhost In-Reply-To: <20030106224423.H11946@kwiatek.eu.org> Message-ID: <20030108174306.V14458-100000@lethargic.dyndns.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 6 Jan 2003, Andrzej Kwiatkowski wrote: > I'm using Apache with my own module which reads > virtual sites config from LDAP database (it generate > config from LDAP data).. and how can i setup frontpage > extensions... with such apache config ?? My (very brief) experience with the FrontPage Extensions has made me believe that the config information must be in a text file, but I am not 100% certain. You could write a script to generate an apache config file based on data read from LDAP. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 14:48:57 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F1C1B37B401 for ; Wed, 8 Jan 2003 14:48:55 -0800 (PST) Received: from notus.primus.ca (mail.tor.primus.ca [216.254.136.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 943D443EA9 for ; Wed, 8 Jan 2003 14:48:55 -0800 (PST) (envelope-from leth@primus.ca) Received: from dialin-150-109.tor.primus.ca ([216.254.150.109]) by notus.primus.ca with esmtp (Exim 3.36 #3) id 18WP0H-0000uz-0A; Wed, 08 Jan 2003 17:48:54 -0500 Date: Wed, 8 Jan 2003 17:49:18 -0500 (EST) From: Jason Hunt X-X-Sender: leth@lethargic.dyndns.org To: John Brooks Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Ports failing In-Reply-To: <001001c2b5d2$cb4ee4a0$c905010a@daylight.net> Message-ID: <20030108174725.F14482-100000@lethargic.dyndns.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 6 Jan 2003, John Brooks wrote: > this is a new clean install of 4.7 release from cdrom. previously this box > had 4.5 release. > > from a boot screen: > Illegal instruction (core dumped) > Jan 6 16:30:36 joseph /kernel: pid 94 (sed), uid 0: exited on signal 4 > (core dumped) > > setting 'update_motd="NO"' bypasses this error > > release notes on 4.7 indicate: > "sed(1) now takes a -i option to enable in-place editing of files." > > also, ports will not compile, returning errors of 'invalid syntax', > 'syntax error', > 'return makes integer from pointer without a cast', and 'data definition > has no type > or storage class' I suspect this is related. > > Has anyone dealt with this or seen this before? > This is just a shot in the dark, but could it be a hardware issue that arose in the time between having 4.5 and 4.7 on the machine? Have you tried 4.5 again? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Wed Jan 8 16:54:10 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1B5FE37B401 for ; Wed, 8 Jan 2003 16:54:08 -0800 (PST) Received: from mail.day-light.net (day-light.net [64.37.72.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7463143EA9 for ; Wed, 8 Jan 2003 16:54:07 -0800 (PST) (envelope-from john@day-light.com) Received: from w1 (118-203.bestdsl.net [216.162.118.203]) by mail.day-light.net (Postfix) with SMTP id 46A1535189; Wed, 8 Jan 2003 18:54:01 -0600 (CST) Reply-To: From: "John Brooks" To: "'Jason Hunt'" Cc: Subject: RE: Ports failing Date: Wed, 8 Jan 2003 18:54:59 -0600 Message-ID: <001401c2b779$bc8a47e0$c905010a@daylight.net> MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) In-Reply-To: <20030108174725.F14482-100000@lethargic.dyndns.org> X-MIMEOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Importance: Normal Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Thanks for responding, here is what finally happened: I installed 4.7 on a different box and captured the 'make' results of the same application that was failing on the problem box. Comparing the results of the two boxes seemed to indicate some corrupted libraries. I finally wiped the disk and reinstalled 4.7 using a different cd - the sed errors have ceased and I am unable to duplicate any of the other problems. Why or how the libraries got corrupted... God only knows. -- John Brooks john@stlbsd.org > -----Original Message----- > From: Jason Hunt [mailto:leth@primus.ca] > Sent: Wednesday, January 08, 2003 4:49 PM > To: John Brooks > Cc: freebsd-isp@FreeBSD.ORG > Subject: Re: Ports failing > > > On Mon, 6 Jan 2003, John Brooks wrote: > > > this is a new clean install of 4.7 release from cdrom. > previously this box > > had 4.5 release. > > > > from a boot screen: > > Illegal instruction (core dumped) > > Jan 6 16:30:36 joseph /kernel: pid 94 (sed), uid 0: > exited on signal 4 > > (core dumped) > > > > setting 'update_motd="NO"' bypasses this error > > > > release notes on 4.7 indicate: > > "sed(1) now takes a -i option to enable in-place editing > of files." > > > > also, ports will not compile, returning errors of 'invalid syntax', > > 'syntax error', > > 'return makes integer from pointer without a cast', and > 'data definition > > has no type > > or storage class' I suspect this is related. > > > > Has anyone dealt with this or seen this before? > > > > This is just a shot in the dark, but could it be a hardware issue that > arose in the time between having 4.5 and 4.7 on the machine? Have you > tried 4.5 again? > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Jan 9 1:39:46 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CC22237B401 for ; Thu, 9 Jan 2003 01:39:45 -0800 (PST) Received: from flock1.newmail.ru (flock1.newmail.ru [212.48.140.157]) by mx1.FreeBSD.org (Postfix) with SMTP id 2769043F5B for ; Thu, 9 Jan 2003 01:39:44 -0800 (PST) (envelope-from Andrew.Karjagin@newmail.ru) Received: (qmail 13736 invoked by alias); 9 Jan 2003 09:39:41 -0000 Message-ID: <20030109093941.13735.qmail@flock1.newmail.ru> From: Andrew Karjagin To: freebsd-isp@freebsd.org Subject: access-list from scan X-Priority: 3 MIME-Version: 1.0 X-Mailer: DenMail v1.0 by ORC X-Uid: 689 X-RemoteIP: 81.89.65.2 (81.89.64.66) Date: Thu, 09 Jan 2003 12:39:41 +0300 Content-type: text/plain; charset="koi8-r" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hello! I have a four class C networks behind a Cisco 7206. That networks processed by some smaller cisco routers and FreeBSD servers. Sometimes I have a problem with scanning my networks from other hosts. Some smaller cisco routers stop work. Freebsd servers stop the scanning by portsentry program and it work Ok! Question: Where can I find resources/sites with docs about configuring access-list on Cisco, that can help me to stop the scanning of my networks on main Cisco 7206? Is that possible to stop scan and other attacks on Cisco by using access-list or I have to use another features/progs? Thank you very much for help! __________ www.newmail.ru -- Новая Почта: все по новому. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Jan 9 18:15:48 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1C32A37B50D for ; Thu, 9 Jan 2003 18:15:46 -0800 (PST) Received: from blue.centerone.com (blue.centerone.com [204.133.183.111]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9131B43E4A for ; Thu, 9 Jan 2003 18:15:45 -0800 (PST) (envelope-from rf-list@centerone.com) Received: from DELIVERANCE-XP.centerone.com (ppp-168-253-9-193.den1.ip.ricochet.net [168.253.9.193]) by blue.centerone.com (8.9.3/8.9.3) with ESMTP id TAA26480; Thu, 9 Jan 2003 19:30:56 -0700 Message-Id: <5.1.0.14.2.20030109190409.0126adb0@mail.centerone.com> X-Sender: rf-list@mail.centerone.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Thu, 09 Jan 2003 19:07:13 -0700 To: Andrew Karjagin , freebsd-isp@FreeBSD.ORG From: Ralph Forsythe Subject: Re: access-list from scan In-Reply-To: <20030109093941.13735.qmail@flock1.newmail.ru> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1"; format=flowed Content-Transfer-Encoding: quoted-printable Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Check the Cisco support site. ACL's can be used to stop scans, but it's a manual thing - you need to know= =20 where they are coming from, then modify your ACL to block them. A router=20 does not do Intrusion Detection. The ACL's in them are rudimentary. FYI I do not know what kind of connection you're running into the 7200, or= =20 what feeds into the Cisco's behind them, but no scan should stop a router -= =20 by that I mean the router should be fully capable of handling the speed of= =20 the traffic allowed by it's interfaces. If your routers are being DoS'd,=20 make sure you are running current levels of IOS on all of them. It's not=20 uncommon for Cisco to put security fixes in code revisions. -rf At 12:39 PM 1/9/2003 +0300, Andrew Karjagin wrote: >Hello! >I have a four class C networks behind a Cisco 7206. That networks=20 >processed by some smaller cisco routers and FreeBSD servers. Sometimes I=20 >have a problem with scanning my networks from other hosts. Some smaller=20 >cisco routers stop work. Freebsd servers stop the scanning by portsentry=20 >program and it work Ok! >Question: Where can I find resources/sites with docs about configuring=20 >access-list on Cisco, that can help me to stop the scanning of my networks= =20 >on main Cisco 7206? Is that possible to stop scan and other attacks on=20 >Cisco by using access-list or I have to use another features/progs? >Thank you very much for help! > >__________ >www.newmail.ru -- =EE=CF=D7=C1=D1 =F0=CF=DE=D4=C1: =D7=D3=C5 =D0=CF =CE=CF= =D7=CF=CD=D5. > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Jan 9 18:16: 6 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 753BF37B401 for ; Thu, 9 Jan 2003 18:16:05 -0800 (PST) Received: from debaser.madridwireless.net (26.Red-80-34-212.pooles.rima-tde.net [80.34.212.26]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8BD5143F1E for ; Thu, 9 Jan 2003 18:16:03 -0800 (PST) (envelope-from one-@madridwireless.net) Received: from irie.one-land.geored.org (82.Red-80-33-65.pooles.rima-tde.net [80.33.65.82]) by debaser.madridwireless.net (Postfix) with ESMTP id 8212CBBF1 for ; Fri, 10 Jan 2003 03:16:01 +0100 (CET) Date: Fri, 10 Jan 2003 03:16:01 +0100 From: Victor Sanchez To: freebsd-isp@freebsd.org Message-Id: <20030110031601.1ae677a7.one-@madridwireless.net> X-Mailer: Sylpheed version 0.8.8 (GTK+ 1.2.10; i386-portbld-freebsd5.0) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org subscribe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Thu Jan 9 22:29:13 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0D94337B401 for ; Thu, 9 Jan 2003 22:29:12 -0800 (PST) Received: from mail.tcworks.net (mail.tcworks.net [216.61.218.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id 599E043E4A for ; Thu, 9 Jan 2003 22:29:11 -0800 (PST) (envelope-from ccook@tcworks.net) Received: from tcworks.net (stp.tcworks.net [216.61.218.6]) by mail.tcworks.net (8.12.6/8.12.6) with ESMTP id h0A6S3sw097470; Fri, 10 Jan 2003 00:28:03 -0600 (CST) Message-ID: <3E1E684A.85704C56@tcworks.net> Date: Fri, 10 Jan 2003 00:29:30 -0600 From: Chris Cook X-Mailer: Mozilla 4.78 [en] (X11; U; Linux 2.4.2 i386) X-Accept-Language: en MIME-Version: 1.0 To: Ralph Forsythe Cc: Andrew Karjagin , freebsd-isp@FreeBSD.ORG Subject: OFF TOPIC Re: access-list from scan References: <5.1.0.14.2.20030109190409.0126adb0@mail.centerone.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-RAVMilter-Version: 8.4.1(snapshot 20020920) (mail.tcworks.net) Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Ralph Forsythe wrote: > > Check the Cisco support site. > > ACL's can be used to stop scans, but it's a manual thing - you need to know > where they are coming from, then modify your ACL to block them. A router > does not do Intrusion Detection. The ACL's in them are rudimentary. > > FYI I do not know what kind of connection you're running into the 7200, or > what feeds into the Cisco's behind them, but no scan should stop a router - > by that I mean the router should be fully capable of handling the speed of > the traffic allowed by it's interfaces. If your routers are being DoS'd, > make sure you are running current levels of IOS on all of them. It's not > uncommon for Cisco to put security fixes in code revisions. You are quite incorrect, there are many versions of IDS (Intrustion Detection Software) and IOS enhancements available for Cisco products starting at even 800 series routers. http://www.cisco.com/warp/public/732/Tech/security/intrusion/ Look for the IOS version like so: IP Plus/FW/IDS Now let's please stop this thread or move it to a Cisco list. -- Chris o----< ccook@tcworks.net >------------------------------------o |Chris Cook - Admin |TCWORKS.NET - http://www.tcworks.net | |The Computer Works ISP |FreeBSD - http://www.freebsd.org | o-------------------------------------------------------------o To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Jan 10 3:27: 0 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 737C037B401 for ; Fri, 10 Jan 2003 03:26:57 -0800 (PST) Received: from rivendell.unixhosts.net (rivendell.unixhosts.net [150.101.60.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id 24A2A43F13 for ; Fri, 10 Jan 2003 03:26:56 -0800 (PST) (envelope-from greg@hurrell.cc) Received: from hurrell.cc (dsl-202-45-118-62.SA.netspace.net.au [202.45.118.62]) (AUTH: LOGIN greg@hurrell.cc) by rivendell.unixhosts.net with esmtp; Fri, 10 Jan 2003 21:56:54 +1030 Date: Fri, 10 Jan 2003 21:56:51 +1030 Mime-Version: 1.0 (Apple Message framework v551) Content-Type: text/plain; charset=US-ASCII; format=flowed Subject: SpamAssassin spawned 700 perl processes From: Greg Hurrell To: freebsd-isp@FreeBSD.ORG Content-Transfer-Encoding: 7bit Message-Id: <6A4FC9DF-248E-11D7-93AF-000393BC25EC@hurrell.cc> X-Mailer: Apple Mail (2.551) Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Weird thing happened today to my mail server (FreeBSD 4.7-RELEASE-p2 #6: Thu Nov 14 21:42:32 CST 2002). After 55 days of uptime, the machine suddenly went down like a town of bricks. It appears that over a period of several hours, several hundred perl processes built up -- all running either spamc or spamd (from SpamAssassin). Here's the first part of the output of "top -u" which I managed to snag before the machine finally died: > last pid: 47611; load averages: 2.86, 2.30, 2.29 up 56+14:46:56 > 12:52:17 > 652 processes: 1 running, 651 sleeping > CPU states: 51.0% user, 0.0% nice, 8.6% system, 1.0% interrupt, > 39.4% idle > Mem: 329M Active, 36M Inact, 118M Wired, 15M Cache, 60M Buf, 992K Free > Swap: 1024M Total, 961M Used, 63M Free, 93% Inuse, 48K In, 740K Out > > PID UID PRI NICE SIZE RES STATE TIME WCPU CPU > COMMAND > 80276 0 2 0 3028K 1192K select 5:38 1.07% 1.07% named > 44480 0 2 0 24344K 7020K connec 1:06 0.39% 0.39% perl > 47145 0 2 0 22208K 7268K connec 0:45 0.34% 0.34% perl > 43834 0 2 0 24832K 7084K connec 1:08 0.29% 0.29% perl > 44995 0 2 0 24280K 7236K connec 1:02 0.29% 0.29% perl > 43996 0 2 0 24668K 7032K connec 1:08 0.24% 0.24% perl > 44841 0 2 0 24724K 7292K connec 1:05 0.24% 0.24% perl > 44280 0 2 0 24672K 7228K connec 1:07 0.20% 0.20% perl And here is a partial sample from "ps auxww": > 1002 44851 0.0 0.0 628 0 ?? IWJ - 0:00.00 sh -c > /usr/bin/spamc > 1002 44852 0.0 0.0 2268 0 ?? IWJ - 0:00.00 > /usr/bin/spamc > nobody 44853 0.1 1.4 24496 7196 ?? SJ 7:19AM 1:04.03 > /usr/bin/perl /usr/bin/spamd -x -i 203.2.192.76 -A 203.2.192.76 -r > /var/run/spamd.pid -d > 1002 44875 0.0 0.0 628 0 ?? IWJ - 0:00.00 sh -c > /usr/bin/spamc > 1002 44876 0.0 0.0 2268 0 ?? IWJ - 0:00.00 > /usr/bin/spamc > nobody 44877 0.0 1.4 24412 7108 ?? SJ 7:24AM 1:03.90 > /usr/bin/perl /usr/bin/spamd -x -i 203.2.192.76 -A 203.2.192.76 -r > /var/run/spamd.pid -d > 1002 44887 0.0 0.0 628 0 ?? IWJ - 0:00.00 sh -c > /usr/bin/spamc > 1002 44888 0.0 0.0 2268 0 ?? IWJ - 0:00.00 > /usr/bin/spamc > nobody 44889 0.0 1.4 24292 7100 ?? SJ 7:24AM 1:02.23 > /usr/bin/perl /usr/bin/spamd -x -i 203.2.192.76 -A 203.2.192.76 -r > /var/run/spamd.pid -d Except of course, that this went on for hundreds and hundreds of lines... The machine eventually got so bogged down that I couldn't even ssh into it, although I could still ping it. After a reboot I disabled spamassassin and now I am looking for answers as to why this suddenly occurred after 55 days of uptime (and before that, months of trouble-free operation interrupted only by reboots for security updates). What might have caused spamassassin to spawn so many processes? (By way of information I am running courier with a .courier file containing | /usr/local/bin/maildrop and a .mailfilter file containing: xfilter "/usr/bin/spamc" for each mail account on the system. I start *one* spamd process from /usr/local/etc/rc.d/spamd.sh at boot time, so I have no idea why I had so many of these processes spawn at around 7:20 AM this morning... all of them launched by "/usr/bin/perl" which I find to be a little odd! My /etc/mail/spamassassin/local.cf file contains very little: only this: > subject_tag [---SPAM---] > spam_level_char . > report_header 1 > use_terse_report 1 > defang_mime 0 > header WHITELISTED_DELIVERY_STATUS From =~ /"Courier mail server > at rivendell.unixhosts.net" <\@>/ > describe WHITELISTED_DELIVERY_STATUS From: indicates delivery > status message > score WHITELISTED_DELIVERY_STATUS -2.0 ...) Any ideas for why this might have happened, and how I can prevent it in the future? I don't really want to turn off spamassassin forever because I quite like it! Cheers :-) Greg To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Jan 10 4: 2:38 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7B9C837B401 for ; Fri, 10 Jan 2003 04:02:34 -0800 (PST) Received: from scorpio.DrkShdw.org (user205.net239.fl.sprint-hsd.net [209.26.20.205]) by mx1.FreeBSD.org (Postfix) with ESMTP id CF19643F6B for ; Fri, 10 Jan 2003 04:02:27 -0800 (PST) (envelope-from scorpio@drkshdw.org) Received: from scorpio (jeff [192.168.1.2]) by scorpio.DrkShdw.org (8.12.6/8.12.6) with ESMTP id h0AC3Ekn002698 for ; Fri, 10 Jan 2003 07:03:23 -0500 (EST) (envelope-from scorpio@drkshdw.org) From: "Jeff Palmer" To: Subject: RE: SpamAssassin spawned 700 perl processes Date: Fri, 10 Jan 2003 07:03:17 -0500 Message-ID: <000001c2b8a0$461f26c0$0201a8c0@scorpio> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2616 Importance: Normal In-Reply-To: <6A4FC9DF-248E-11D7-93AF-000393BC25EC@hurrell.cc> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Seems yesterday that razor, razor2 and pyzor were down. The current thinking on the SA mailing lists, is that the razor timeout setting was uneffective. There has been a work-around implemented in 2.50 (due any time now) which should eliminate this problem in the future should the situation arise again. Jeff Palmer scorpio@drkshdw.org > -----Original Message----- > From: owner-freebsd-isp@FreeBSD.ORG [mailto:owner-freebsd-isp@FreeBSD.ORG] > On Behalf Of Greg Hurrell > Sent: Friday, January 10, 2003 6:27 AM > To: freebsd-isp@FreeBSD.ORG > Subject: SpamAssassin spawned 700 perl processes > > Weird thing happened today to my mail server (FreeBSD 4.7-RELEASE-p2 > #6: Thu Nov 14 21:42:32 CST 2002). > > After 55 days of uptime, the machine suddenly went down like a town of > bricks. It appears that over a period of several hours, several > hundred perl processes built up -- all running either spamc or spamd > (from SpamAssassin). > > Here's the first part of the output of "top -u" which I managed to snag > before the machine finally died: > > > last pid: 47611; load averages: 2.86, 2.30, 2.29 up 56+14:46:56 > > 12:52:17 > > 652 processes: 1 running, 651 sleeping > > CPU states: 51.0% user, 0.0% nice, 8.6% system, 1.0% interrupt, > > 39.4% idle > > Mem: 329M Active, 36M Inact, 118M Wired, 15M Cache, 60M Buf, 992K Free > > Swap: 1024M Total, 961M Used, 63M Free, 93% Inuse, 48K In, 740K Out > > > > PID UID PRI NICE SIZE RES STATE TIME WCPU CPU > > COMMAND > > 80276 0 2 0 3028K 1192K select 5:38 1.07% 1.07% named > > 44480 0 2 0 24344K 7020K connec 1:06 0.39% 0.39% perl > > 47145 0 2 0 22208K 7268K connec 0:45 0.34% 0.34% perl > > 43834 0 2 0 24832K 7084K connec 1:08 0.29% 0.29% perl > > 44995 0 2 0 24280K 7236K connec 1:02 0.29% 0.29% perl > > 43996 0 2 0 24668K 7032K connec 1:08 0.24% 0.24% perl > > 44841 0 2 0 24724K 7292K connec 1:05 0.24% 0.24% perl > > 44280 0 2 0 24672K 7228K connec 1:07 0.20% 0.20% perl > > And here is a partial sample from "ps auxww": > > > 1002 44851 0.0 0.0 628 0 ?? IWJ - 0:00.00 sh -c > > /usr/bin/spamc > > 1002 44852 0.0 0.0 2268 0 ?? IWJ - 0:00.00 > > /usr/bin/spamc > > nobody 44853 0.1 1.4 24496 7196 ?? SJ 7:19AM 1:04.03 > > /usr/bin/perl /usr/bin/spamd -x -i 203.2.192.76 -A 203.2.192.76 -r > > /var/run/spamd.pid -d > > 1002 44875 0.0 0.0 628 0 ?? IWJ - 0:00.00 sh -c > > /usr/bin/spamc > > 1002 44876 0.0 0.0 2268 0 ?? IWJ - 0:00.00 > > /usr/bin/spamc > > nobody 44877 0.0 1.4 24412 7108 ?? SJ 7:24AM 1:03.90 > > /usr/bin/perl /usr/bin/spamd -x -i 203.2.192.76 -A 203.2.192.76 -r > > /var/run/spamd.pid -d > > 1002 44887 0.0 0.0 628 0 ?? IWJ - 0:00.00 sh -c > > /usr/bin/spamc > > 1002 44888 0.0 0.0 2268 0 ?? IWJ - 0:00.00 > > /usr/bin/spamc > > nobody 44889 0.0 1.4 24292 7100 ?? SJ 7:24AM 1:02.23 > > /usr/bin/perl /usr/bin/spamd -x -i 203.2.192.76 -A 203.2.192.76 -r > > /var/run/spamd.pid -d > > Except of course, that this went on for hundreds and hundreds of > lines... > > The machine eventually got so bogged down that I couldn't even ssh into > it, although I could still ping it. > > After a reboot I disabled spamassassin and now I am looking for answers > as to why this suddenly occurred after 55 days of uptime (and before > that, months of trouble-free operation interrupted only by reboots for > security updates). > > What might have caused spamassassin to spawn so many processes? > > (By way of information I am running courier with a .courier file > containing > > | /usr/local/bin/maildrop > > and a .mailfilter file containing: > > xfilter "/usr/bin/spamc" > > for each mail account on the system. I start *one* spamd process from > /usr/local/etc/rc.d/spamd.sh at boot time, so I have no idea why I had > so many of these processes spawn at around 7:20 AM this morning... all > of them launched by "/usr/bin/perl" which I find to be a little odd! > > My /etc/mail/spamassassin/local.cf file contains very little: only this: > > > subject_tag [---SPAM---] > > spam_level_char . > > report_header 1 > > use_terse_report 1 > > defang_mime 0 > > header WHITELISTED_DELIVERY_STATUS From =~ /"Courier mail server > > at rivendell.unixhosts.net" <\@>/ > > describe WHITELISTED_DELIVERY_STATUS From: indicates delivery > > status message > > score WHITELISTED_DELIVERY_STATUS -2.0 > > ...) Any ideas for why this might have happened, and how I can prevent > it in the future? I don't really want to turn off spamassassin forever > because I quite like it! > > Cheers :-) > Greg > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Jan 10 4:12:25 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C908A37B401 for ; Fri, 10 Jan 2003 04:12:23 -0800 (PST) Received: from scorpio.DrkShdw.org (user205.net239.fl.sprint-hsd.net [209.26.20.205]) by mx1.FreeBSD.org (Postfix) with ESMTP id 99D9143F6D for ; Fri, 10 Jan 2003 04:12:17 -0800 (PST) (envelope-from scorpio@drkshdw.org) Received: from scorpio (jeff [192.168.1.2]) by scorpio.DrkShdw.org (8.12.6/8.12.6) with ESMTP id h0ACD5kn002723 for ; Fri, 10 Jan 2003 07:13:13 -0500 (EST) (envelope-from scorpio@drkshdw.org) From: "Jeff Palmer" To: Subject: RE: SpamAssassin spawned 700 perl processes Date: Fri, 10 Jan 2003 07:13:09 -0500 Message-ID: <000101c2b8a1$a66a3960$0201a8c0@scorpio> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2616 Importance: Normal In-Reply-To: <000001c2b8a0$461f26c0$0201a8c0@scorpio> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hate to follow up my own post, but I left some information out. Currently, calling spamassassin with the -L switch allows spamassassin to work, without doing any of the DNS lookups, and thereby not letting razor et al affect it's performance. This of course decreases spamassassins ability to accurately tag spam, but for now seems a very viable option. At least the mail server will continue running. And at least some spam will still be tagged. Jeff > -----Original Message----- > From: owner-freebsd-isp@FreeBSD.ORG [mailto:owner-freebsd-isp@FreeBSD.ORG] > On Behalf Of Jeff Palmer > Sent: Friday, January 10, 2003 7:03 AM > To: freebsd-isp@FreeBSD.ORG > Subject: RE: SpamAssassin spawned 700 perl processes > > Seems yesterday that razor, razor2 and pyzor were down. > The current thinking on the SA mailing lists, is that the razor > timeout setting was uneffective. > > There has been a work-around implemented in 2.50 (due any time now) > which should eliminate this problem in the future should the situation > arise again. > > > Jeff Palmer > scorpio@drkshdw.org > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Jan 10 7: 3:54 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0C2E937B401 for ; Fri, 10 Jan 2003 07:03:50 -0800 (PST) Received: from rivendell.unixhosts.net (rivendell.unixhosts.net [150.101.60.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id F1D9043EB2 for ; Fri, 10 Jan 2003 07:03:48 -0800 (PST) (envelope-from greg@hurrell.cc) Received: from hurrell.cc (dsl-202-45-118-62.SA.netspace.net.au [202.45.118.62]) (AUTH: LOGIN greg@hurrell.cc) by rivendell.unixhosts.net with esmtp; Sat, 11 Jan 2003 01:33:46 +1030 Date: Sat, 11 Jan 2003 01:33:37 +1030 Subject: Rsync problems (was: SpamAssassin spawned 700 perl processes) Content-Type: text/plain; charset=ISO-8859-1; format=flowed Mime-Version: 1.0 (Apple Message framework v551) From: Greg Hurrell To: freebsd-isp@FreeBSD.ORG Content-Transfer-Encoding: quoted-printable In-Reply-To: <000101c2b8a1$a66a3960$0201a8c0@scorpio> Message-Id: X-Mailer: Apple Mail (2.551) Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Given today's scare with spamassassin taking my server down, I decided=20= it's time to get some backups over the network happening a little more=20= regularly (one of my databases was corrupted during the crash, but=20 thankfully I was able to repair it). One of the reasons I only backup over the network once per week is that=20= I use rsync to do the backup, but it often gives me error messages: > usr/home/cust42/public_html/service/usage/webalizer.current > 3903 100% 0.00kB/s 0:00:00 > usr/home/cust42/public_html/service/usage/webalizer.hist > 187 100% 0.00kB/s 0:00:00 > total: matches=3D402 tag_hits=3D2424 false_alarms=3D0 data=3D14308139 > wrote 22337 bytes read 11811403 bytes 9198.40 bytes/sec > total size is 123336221 speedup is 10.42 > rsync error: partial transfer (code 23) at=20 > /SourceCache/rsync/rsync-8/rsync/main.c(883) So I try again and it gets a little further this time: > usr/home/cust42/public_html/service/usage/webalizer.hist is uptodate > usr/home/cust42/public_html/spacer.gif is uptodate > usr/home/cust42/public_html/text1.swf is uptodate > usr/home/cust42/public_html/yoursay.htm is uptodate > usr/home/cust39/public_html/resumes/Resume Rosana Garc=EDa.doc > 41472 100% 19.78MB/s 0:00:00 > usr/home/cust39/public_html/resumes/Resum=E92_antonio.doc > 87040 100% 243.55kB/s 0:00:00 > total: matches=3D0 tag_hits=3D0 false_alarms=3D0 data=3D128512 > wrote 69 bytes read 443351 bytes 4243.25 bytes/sec > total size is 123336221 speedup is 278.15 > rsync error: partial transfer (code 23) at=20 > /SourceCache/rsync/rsync-8/rsync/main.c(883) Perhaps this one has a clue to the problem... This time I see a special=20= character (=E9) in one of the filenames... And so on and so forth, until the backup is completely done. Here is the script I use to do the backup. It uses a file called=20 "syncdirs" to know which dirs to back up. The file just contains a list=20= of dirs like this: > /etc > /usr/local/etc > /var/db/mysqldumps > /usr/home/ Anyway, here is the actual script: > #!/bin/sh -e > > # rsync.sh -- remote host backup script > > # list of dirs to sync (stored locally): > syncdirlist=3D"/usr/backups/rsync/host1/syncdirs" > > # remote host to backup from: > remotehost=3D"host1" > > # directory for storing backup on local machine: > localbackupdir=3D"/usr/backups/rsync/host1/store/" > > # check to make sure we are root > if [ $(whoami) !=3D "root" ]; then > echo "You must run this script as root. [Exiting]" > exit > fi > > # read dirs to sync from file, ignoring comments and blank lines > for syncdir in `/bin/cat ${syncdirlist} | /usr/bin/grep -v "#" | \ > /usr/bin/grep -v "^\$"` > do > echo Backing up $syncdir from remote host: > /usr/bin/rsync -avvcRz -e ssh --delete --partial --numeric-ids \ > --modify-window=3D10 --bwlimit=3D10 --progress --exclude = "Maildir/" \ > --exclude "logs/" root@${remotehost}:${syncdir} \ > ${localbackupdir} > echo -e "Backup of $syndir complete.\n\n" > > done Any ideas on what could be causing these failures? Generally if I do=20 the sync again, it will get a little further before failing. After a=20 few tries, the entire backup is done; but I would much prefer it if it=20= would just work the first time! I am running rsync locally on Mac OS X 10.2.3. The output of "rsync=20 --version" is: > rsync version 2.5.2 protocol version 26 > Copyright (C) 1996-2002 by Andrew Tridgell and others > > Capabilities: 64-bit files, socketpairs, hard links, symlinks,=20 > batchfiles, IPv6, > 32-bit system inums, 64-bit internal inums The machine being backed-up is a FreeBSD box (FreeBSD 4.7-RELEASE-p2=20 #6: Thu Nov 14 21:42:32 CST 2002) and the output of "ssh -V" on that=20 machine is: > OpenSSH_3.4p1 FreeBSD-20020702, SSH protocols 1.5/2.0, OpenSSL=20 > 0x0090607f "rsync --version" on the FreeBSD box yields: > rsync version 2.5.5 protocol version 26 > Copyright (C) 1996-2002 by Andrew Tridgell and others > > Capabilities: 64-bit files, socketpairs, hard links, symlinks,=20 > batchfiles, > IPv6, 32-bit system inums, 64-bit internal inums Thanks for any insight you can provide! Cheers :-) Greg El Viernes, 10 enero, 2003, a las 10:43 PM, Jeff Palmer escribi=F3: > Hate to follow up my own post, but I left some information out. > > Currently, calling spamassassin with the -L switch allows=20 > spamassassin > to work, without doing any of the DNS lookups, and thereby not=20 > letting > razor et al affect it's performance. This of course decreases > spamassassins ability to accurately tag spam, but for now seems a very > viable option. At least the mail server will continue running. And = at > least some spam will still be tagged. > > Jeff > > >> -----Original Message----- >> From: owner-freebsd-isp@FreeBSD.ORG > [mailto:owner-freebsd-isp@FreeBSD.ORG] >> On Behalf Of Jeff Palmer >> Sent: Friday, January 10, 2003 7:03 AM >> To: freebsd-isp@FreeBSD.ORG >> Subject: RE: SpamAssassin spawned 700 perl processes >> >> Seems yesterday that razor, razor2 and pyzor were down. >> The current thinking on the SA mailing lists, is that the razor >> timeout setting was uneffective. >> >> There has been a work-around implemented in 2.50 (due any time now) >> which should eliminate this problem in the future should the = situation >> arise again. >> >> >> Jeff Palmer >> scorpio@drkshdw.org >> >> > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Jan 10 8:16:53 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5C24137B405 for ; Fri, 10 Jan 2003 08:16:52 -0800 (PST) Received: from mail.lambertfam.org (www.lambertfam.org [216.223.196.6]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7A4D443F5B for ; Fri, 10 Jan 2003 08:16:51 -0800 (PST) (envelope-from lambert@lambertfam.org) Received: from laptop.lambertfam.org (unknown [10.1.0.2]) by mail.lambertfam.org (Postfix) with ESMTP id C3E46351BF for ; Fri, 10 Jan 2003 11:16:43 -0500 (EST) Received: by laptop.lambertfam.org (Postfix, from userid 1000) id A4B9528B0E; Fri, 10 Jan 2003 11:16:42 -0500 (EST) Date: Fri, 10 Jan 2003 11:16:42 -0500 From: Scott Lambert To: freebsd-isp@FreeBSD.ORG Subject: Re: SpamAssassin spawned 700 perl processes Message-ID: <20030110161642.GA4076@laptop.lambertfam.org> Mail-Followup-To: freebsd-isp@FreeBSD.ORG References: <6A4FC9DF-248E-11D7-93AF-000393BC25EC@hurrell.cc> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <6A4FC9DF-248E-11D7-93AF-000393BC25EC@hurrell.cc> User-Agent: Mutt/1.4i Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Fri, Jan 10, 2003 at 09:56:51PM +1030, Greg Hurrell wrote: > Weird thing happened today to my mail server (FreeBSD 4.7-RELEASE-p2 > #6: Thu Nov 14 21:42:32 CST 2002). > > After 55 days of uptime, the machine suddenly went down like a town of > bricks. It appears that over a period of several hours, several > hundred perl processes built up -- all running either spamc or spamd > (from SpamAssassin). > > >/usr/bin/perl /usr/bin/spamd -x -i 203.2.192.76 -A 203.2.192.76 -r > >/var/run/spamd.pid -d Remote checks backed up on you and you went deep into swap. Use the -m argument to spamd. Unfortunately this causes some bad signal interaction with of the spamassassin subsystems (razor IIRC) that causes the master spamd process to die at random. So then you have to run it under something that will restart spamd if it dies. For instance: daemontools, init (via /etc/ttys) daemontools "run" script to run your config: #!/bin/sh exec /usr/local/bin/spamd -x -i 203.2.192.76 -A 203.2.192.76 -m (somenumber) daemontools "run" script for my config: #!/bin/sh exec /usr/local/bin/spamd -u spamd -a -q -x --allowed-ips=10.10.10.10,10.10.10.35 -i 0.0.0.0 -m 75 -H /etc/mail/spamassassin/ -- Scott Lambert KC5MLE Unix SysAdmin lambert@lambertfam.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Jan 10 11: 3: 2 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F1D1537B406 for ; Fri, 10 Jan 2003 11:02:58 -0800 (PST) Received: from ns3.unixmexico.net (ns3.unixmexico.net [64.141.69.184]) by mx1.FreeBSD.org (Postfix) with SMTP id 0549243F13 for ; Fri, 10 Jan 2003 11:02:58 -0800 (PST) (envelope-from nbari@unixmexico.com) Received: (qmail 18833 invoked by uid 85); 10 Jan 2003 19:02:55 -0000 Received: from nbari@unixmexico.com by ns3.unixmexico.net by uid 82 with qmail-scanner-1.15 (hbedv: 6.16.0.0/6.16.0.17. Clear:. Processed in 0.31515 secs); 10 Jan 2003 19:02:55 -0000 Received: from unknown (HELO unixmexico.com) (127.0.0.1) by localhost.unixmexico.net with SMTP; 10 Jan 2003 19:02:55 -0000 Received: from 148.243.246.5 (proxying for 170.169.46.200) (SquirrelMail authenticated user nbari@unixmexico.com) by mail.unixmexico.com with HTTP; Fri, 10 Jan 2003 13:02:55 -0600 (CST) Message-ID: <10497.148.243.246.5.1042225375.squirrel@mail.unixmexico.com> Date: Fri, 10 Jan 2003 13:02:55 -0600 (CST) Subject: DOS attack From: To: X-Priority: 1 Importance: High X-Mailer: SquirrelMail (version 1.2.9) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org First sorry me if this messages is out of topic for some email-lists, but if some one know a solution, please help me. Hi was victim of a DOS attack, my server was out for about 5 hours, services like web and email where down. I am using round robind dns for a load balancing, but this only help for my web services, any idea on how can i make a redundant service for web and email services? something like mysql does with his replication function? I don't want to use hardware only software regards To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Jan 10 12: 8:22 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 61D5937B401 for ; Fri, 10 Jan 2003 12:08:21 -0800 (PST) Received: from flavatown.mail.pas.earthlink.net (flavatown.mail.pas.earthlink.net [207.217.120.148]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8E95B43EB2 for ; Fri, 10 Jan 2003 12:08:20 -0800 (PST) (envelope-from tlambert2@mindspring.com) Received: from heron (heron.mail.pas.earthlink.net [207.217.120.189]) by flavatown.mail.pas.earthlink.net (8.11.6+Sun/8.11.6) with ESMTP id h0AK5lV20138 for ; Fri, 10 Jan 2003 12:05:47 -0800 (PST) Received: from pool0200.cvx22-bradley.dialup.earthlink.net ([209.179.198.200] helo=mindspring.com) by heron with asmtp (SSLv3:RC4-MD5:128) (Exim 3.33 #1) id 18X5PK-00073H-00; Fri, 10 Jan 2003 12:05:35 -0800 Message-ID: <3E1F2739.7BBFB04F@mindspring.com> Date: Fri, 10 Jan 2003 12:04:09 -0800 From: Terry Lambert X-Mailer: Mozilla 4.79 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: nbari@unixmexico.com Cc: freebsd-isp@freebsd.org Subject: Re: DOS attack References: <10497.148.243.246.5.1042225375.squirrel@mail.unixmexico.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-ELNK-Trace: b1a02af9316fbb217a47c185c03b154d40683398e744b8a49f8695b2875ef6e6836aafa9336d4229a2d4e88014a4647c350badd9bab72f9c350badd9bab72f9c Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org nbari@unixmexico.com wrote: > Hi was victim of a DOS attack, my server was out for about 5 hours, > services like web and email where down. > > I am using round robind dns for a load balancing, but this only help for > my web services, any idea on how can i make a redundant service for web > and email services? something like mysql does with his replication > function? SMTP is handled via MX records in your DNS; just set up backup mail exchangers. POP3/IMAP4 is problematic. The data there has locality on the server, and there's no way, short of storing you data in a shared storage area, to guarantee accessability from more than one front end server. One possible approach is to use a small proxy, and when the proxy server is DDOS'ed, just switch over to a different proxy server. This works better for IMAP (persistant connections) than for POP3 (new conection on each download attempt). In any implementation, your "real" back end servers should only be reachable from the fornt end servers, so that a DDOS on one back end server does not starve a bunch of front end servers. The typical way this is handled is by buying a load balancer and configuring it to act as a "circuit breaker". This assumes that the load balancer knows how to shed load properly, such that it won't livelock, and can't be overwhelmed (e.g. RED-queuing, etc.). > I don't want to use hardware only software Looks like you are going to be spending money on rack space and PCs doing no useful work, other than running proxies. You can get an IMAP4 proxy from the Cyrus project; there are POP3 proxies out there (search for them), or you can write your own. -- Terry To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Jan 10 12:54:52 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9F66837B401 for ; Fri, 10 Jan 2003 12:54:50 -0800 (PST) Received: from clover.kientzle.com (user-112uh9a.biz.mindspring.com [66.47.69.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id B24BE43F18 for ; Fri, 10 Jan 2003 12:54:49 -0800 (PST) (envelope-from kientzle@acm.org) Received: from acm.org (c43 [66.47.69.43]) by clover.kientzle.com (8.11.3/8.11.3) with ESMTP id h0AKskE64956; Fri, 10 Jan 2003 12:54:46 -0800 (PST) (envelope-from kientzle@acm.org) Message-ID: <3E1F3312.8070605@acm.org> Date: Fri, 10 Jan 2003 12:54:42 -0800 From: Tim Kientzle Reply-To: kientzle@acm.org User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:0.9.6) Gecko/20011206 X-Accept-Language: en-us, en MIME-Version: 1.0 To: nbari@unixmexico.com Cc: freebsd-isp@FreeBSD.ORG Subject: Re: DOS attack References: <10497.148.243.246.5.1042225375.squirrel@mail.unixmexico.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org nbari@unixmexico.com wrote: > I am using round robind dns for a load balancing, but this only help for > my web services Round robin DNS is a simple way to distribute load, but it doesn't do it very evenly and provides no failover. (Each client only sees one of your IP addresses; if that server is inaccessible for any reason, those clients won't be able to connect.) Also, remember that if a DoS attack is saturating your link(s), then there's nothing you can do at your end. If there's no bandwidth for legitimate requests, then they won't be able to reach your server. However, with careful firewalling and load-testing, you should be able to ensure that your servers don't actually crash during an attack. How you handle this will depend on your bandwidth, of course; if you have a 384kbps DSL line, then a spare PC running ipfw should be able to handle your firewall requirements. If you have multiple T3s, then you'll need something more robust. > .. any idea on how can i make a redundant service for web > and email services? something like mysql does with his replication > function? Set up multiple MX records for email pointing to various servers. Each of those forwards to a common back-end mailbox server. If those servers are on different subnets with independent connections, that's even better. Redundant web services depends a lot on your particular application architecture. Static data is easy to replicate; it's also easy to set up redundant application servers against a shared database. Replicating live data over a distance in real-time? That's hard. Tim Kientzle To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Fri Jan 10 13:22:27 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 81C1C37B401 for ; Fri, 10 Jan 2003 13:22:22 -0800 (PST) Received: from in-clab-with.ads.iu.edu (with.iupui.edu [134.68.158.15]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2C53F43F13 for ; Fri, 10 Jan 2003 13:22:21 -0800 (PST) (envelope-from nuftas@www.vrg.se) Received: from oyoypknbcvff.nu ([216.248.148.244]) by in-clab-with.ads.iu.edu with Microsoft SMTPSVC(5.0.2195.5329); Fri, 10 Jan 2003 16:22:14 -0500 Message-ID: <000015e73e9a$00004ace$00003d61@mail.thinkhot.co.kr> To: Cc: , , , , , , , , From: "Pete Stills" Subject: Micro-cap Stocks bringing great profits9055 Date: Fri, 10 Jan 2003 13:21:57 -2000 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 10 Jan 2003 21:22:15.0101 (UTC) FILETIME=[58C7C6D0:01C2B8EE] Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org BioCurex PRESS RELEASE Source: BioCurex, Inc. January 9, 2003 OTCBB Listed BioTech Companies BOCX & RJVN - Creating a Non-Toxic Therapeutic Antibody Cancer Treatment That May Arrest Development and Replication of Cancerous Cells. Rancho Santa Margarita, Calif., January 9, 2003 BioCurex, Inc., (OTC BB:BOCX), Announces further developments relating to its licensing agreement with BioKinetix, a company being acquired by RJV Networks, Inc., (OTC BB : RJVN). BioCurex and RJV networks (through Biokinetix) are behind the development of a new therapeutic product, which experts believe will arrest the development of and replication of cancerous cells that cause the growth of malignant tumors. BOCX's proprietary technology has identified a New Widespread Cancer marker Molecule named RECAF. Cancer "markers" are molecules that appear on cancer cells but not on normal cells and have been hailed as The Holy Grail of cancer research since they can be used to detect (diagnose) and then specifically target cancer cells (therapy) - offering the potential to provide treatment of cancer by delivering antibodies to the targeted cancerous cells. RJVN and BioKinetics have proprietary technology for developing "superantibodies", an enhancement of antibody technology that makes ordinary antibodies much more lethal. The combination of anti-RECAF antibodies from BioCurex with the superantibody technology from RJVN - BioKinetics is expected to produce a powerful therapeutic agent to combat most types of cancer. If the antibodies prove to be cancer cell specific, it is unlikely that there would be any adverse side effects. This lack of toxicity should accelerate testing and approval process. Dr. Moro, President of Biocurex stated: "Our ultimate goal is to fight cancer. We have the cancer marker that identifies the cancer cells and RJV Networks-BioKinetix has the superantibody technology to kill them. It is only natural that we join forces in the battle against this horrible disease. I see tremendous potential for success in this joint effort. Dr. John Todd, President of BioKinetix Corporation stated that Bio Kinetix Corporation's mission is to acquire intellectual property rights for existing products and intellectual property. Then, through a series of collaborative relationships, we will facilitate the development of a new generation of monoclonal antibodies (termed "Superantibodies), which will have a significantly improved therapeutic potency as anticancer agents. BioCurex, Inc. Richard Moro, President RJV Networks-BioKinetix Grant Young For more info see RJVN and BOCX in the news. You can also see this Press Release at Yahoo Finance biz.yahoo.com/pz/030109/35412.html You can also look them up by their symbols: OTC BB:BOCX or OTC BB : RJVN **** Special Financial-Stock Opt-in mailing list Offer **** As a member of our special opt-in mailing list, you will be among the first to receive up to the minute information regarding the companies we profile above as well as a free 10-day trial to a website with real-time Level II quotes, research reports, OTC BB promo / syndication calendar, trading chat rooms, full threading message boards, along with many other valuable and free investment tools not readily available to the general public. This is an incredible opportunity! Just click the link below to send us an email, and you will be immediately added to our Opt-in list. Please be sure that "opt-in" is in the subject line of the email. If opt-in is not in the subject line you will not be added. MailTo:bartonjr46@excite.com?Subject=Opt-In Thank you. **See Removal instructions below ***********************Disclaimer******************** Information within this email contains "forward looking statements" within the meaning of Section 27A of the Securities Act of 1933 and Section 21B of the Securities Exchange Act of 1934. Any statements that express or involve discussions with respect to predictions, goals, expectations, beliefs, plans, projections, objectives, assumptions or future events or performance are not statements of historical fact and may be "forward looking statements." Forward looking statements are based on expectations, estimates and projections at the time the statements are made that involve a number of risks and uncertainties which could cause actual results or events to differ materially from those presently anticipated. Forward looking statements in this action may be identified through the use of words such as: "projects", "foresee", "expects", "estimates," "believes," "understands" "will," "anticipates," or that by statements indicating certain actions "may," "could," or "might" occur. All information provided within this email pertaining to investing, stocks, securities must be understood as information provided and not investment advice. Emerging Equity Alert advises all readers and subscribers to seek advice from a registered professional securities representative before deciding to trade in stocks featured within this email. None of the material within this report shall be construed as any kind of investment advice. In compliance with the Securities Act of 1933, Section 17(b), Emerging Stock Alert discloses the receipt of 125,000 unrestricted shares of RJVN from a third party for the publication of this report. Be aware of an inherent conflict of interest resulting from such compensation due to our intent to profit from the liquidation of these shares. Shares may be sold at any time, even after positive statements have been made regarding the above company. All factual information in this report was gathered from public sources, including but not limited to SEC filings, Company Press Releases, and Market Guide. Emerging Equity Alert believes this information to be reliable but can make no guarantee as to its accuracy or completeness. Use of the material within this email constitutes your acceptance of these terms. ****** Advertising Disclaimer ****** We are an Internet Advertising Company and have received a monetary payment for this mailing service. We hold no stocks and have no personal interest in this company whatsoever. We are simply being paid to perform a service. This message is a copy of a BioCurex press release. ****** Removal Instructions ****** This message has been sent to you in compliance with our strict anti-abuse regulations. We will continue to bring you valuable offers on the products and services that interest you most. If you do not wish to receive further mailings, please click below. We respect all removal requests. To be removed immediately from our mailing lists just click on the link below: MailTo:danny4618@excite.com?Subject=expunge . Be sure that "purge-me" is in the subject line of the email prior to sending it. **************************************************************** *************************** ***************************************************************** _____________________________________________ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message From owner-freebsd-isp Sat Jan 11 6:15:25 2003 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D042C37B401 for ; Sat, 11 Jan 2003 06:15:22 -0800 (PST) Received: from net2.dinoex.sub.org (net2.dinoex.de [212.184.201.182]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1005943F13 for ; Sat, 11 Jan 2003 06:15:21 -0800 (PST) (envelope-from dirk.meyer@dinoex.sub.org) Received: from net2.dinoex.sub.org (dinoex@net2.dinoex.de [212.184.201.182]) by net2.dinoex.sub.org (8.12.6/8.12.6) with ESMTP id h0BEF50k019541; Sat, 11 Jan 2003 15:15:07 +0100 (CET) (envelope-from dirk.meyer@dinoex.sub.org) X-Authentication-Warning: net2.dinoex.sub.org: Host dinoex@net2.dinoex.de [212.184.201.182] claimed to be net2.dinoex.sub.org Received: from gate.dinoex.sub.org (dinoex@localhost) by net2.dinoex.sub.org (8.12.6/8.12.6/Submit) with BSMTP id h0BEF4M7019524; Sat, 11 Jan 2003 15:15:04 +0100 (CET) (envelope-from dirk.meyer@dinoex.sub.org) To: freebsd-isp@FreeBSD.ORG, vishal@southernonline.net (Vishal Gandhi Kommineni) Message-ID: From: dirk.meyer@dinoex.sub.org (Dirk Meyer) Organization: privat Subject: Re: Sendmail ignoring hosts.allow Date: Sat, 11 Jan 2003 15:09:30 +0100 X-Mailer: Dinoex 1.79 References: <3E1AA183.1060604@saudi.net.sa> X-Gateway: ZCONNECT gate.dinoex.sub.org [UNIX/Connect 0.94] X-Accept-Language: de,en X-PGP-Fingerprint: 44 16 EC 0A D3 3A 4F 28 8A 8A 47 93 F1 CF 2F 12 X-Noad: Please don't send me ad's by mail. I'm bored by this type of mail. X-Copyright: (C) Copyright 2001 by Dirk Meyer -- All rights reserved. X-Note: sending SPAM is a violation of both german and US law and will at least trigger a complaint at your provider's postmaster. X-PGP-Key-Avail: mailto:pgp-public-keys@keys.de.pgp.net Subject:GET 0x331CDA5D X-No-Archive: yes X-ZC-VIA: 20030111000000W+1@dinoex.sub.org Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Rayed Al-Rashed wrote: > Our mail server was under DOS attack, and I was trying to stop the new > connections using /etc/hosts.allow but I couldn't do it. > The entry in /etc/hosts.allow: > sendmail : xx.xx.xx.xx : DENY > and I even tried: > ALL : ALL : DENY > but still doesn't work, I installed sendmail from the port, and I also > checked tcpwrapper support: I checked myself and /etc/hosts.allow is checked after the connection has been established: $ telnet test 25 Connected to test. Escape character is '^]'. 220 xxxxxxxxxxxxxxxxxx ESMTP Sendmail 8.12.6/8.12.5; Sat, 11 Jan 2003 13:29:01 +0100 (CET) EHLO fqdn.com 550 5.0.0 Access denied QUIT 221 2.0.0 xxxxxxxxxxxxxxxxxx closing connection Connection closed by foreign host. connect from a denied IP in /etc/hosts.allow and see if you get "550 5.0.0 Access denied" too. It keep sendmail not from forking, but forking is relativly cheep on FreeBSD. you might like to configur some limtes with: confCONNECTION_RATE_THROTTLE ConnectionRateThrottle [undefined] The maximum number of connections permitted per second per daemon. After this many connections are accepted, further connections will be delayed. If not set or <= 0, there is no limit. confREFUSE_LA RefuseLA [varies] Load average at which incoming SMTP connections are refused. Default values is (12 * numproc) where numproc is the number of processors online (if that can be determined). confDELAY_LA DelayLA [0] Load average at which sendmail will sleep for one second on most SMTP commands and before accepting connections. 0 means no limit. kind regards Dirk - Dirk Meyer, Im Grund 4, 34317 Habichtswald, Germany - [dirk.meyer@dinoex.sub.org],[dirk.meyer@guug.de],[dinoex@FreeBSD.org] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message