Discuss

discuss@lists.centos.org

34753 discussions

sendmail/RPM question
by Dan Pritts 17 Nov '06

17 Nov '06

Hi all - I've got a regular problem that i've been fixing by hand for a long time but i'm hoping i can get some advice about the right way to solve it. I replace the default redhat/centos sendmail configuration files with my own set. I have always just done this by hand. One thing I do is completely whack submit.cf. when i update the system, RPM recreates this file. I've manually fixed things in the meantime, so I'm not sure of this, but I kinda think that it updates sendmail.cf too (specifically, I make a symlink sendmail.cf to my own cf file; i haven't experimented to see what happens when i install directly. I know at a very basic level how to create an RPM. But I expect that if I create an RPM containing sendmail.cf, I will get a conflict with the existing sendmail.cf from the sendmail rpm; and I don't know how to override it. I also don't know how to make it so that the submit.cf file just doesn't exist; I am pretty sure that if that file exists, it will get called by default when people call sendmail from the command line. Suggestions? (not to include, "give in to running sendmail as a daemon in submission mode, etc") thanks danno -- Dan Pritts, System Administrator Internet2 office: +1-734-352-4953 | mobile: +1-734-834-7224

3 2

pppd and radius
by Alex Palenschat 17 Nov '06

17 Nov '06

I've been googling, but after getting nowhere for a while I thought I'd ask for a direction to head in. I am replacing a RH7.1 box that was performing dial-in service using a pppd patched for radius support. I'd prefer not to do things this way and would like to use a more easily updated configuration. What I need it to do is do auth against a radius server and support windows clients. What is the RHEL/Centos way of doing this? alex

2 1

How to intergate openldap in to sendmail - cent os 4.4
by Indunil Jayasooriya 17 Nov '06

17 Nov '06

Hi All I want to intergrate openldap in to sendmail. How can I do it? I think I will have to write a few things in to sendmail.mc. The purpose of this is that I do not need system accounts anymore. But instead I nead Openldap users. How can I achieve this goal? Pls help me. -- Thank you Indunil Jayasooriya

2 1

X window for Centos-Serer CD 4.3
by Aravind gv 17 Nov '06

17 Nov '06

Hi All, First of all thanks to Centos Team for making a Centos-Server-CD. Its very handy it made my life easy. Now i have a small problem i want to have X on the installed box from Centos-Server CD. How can i update from Yum or wht are the packages i need to install to start X. ---------------------------- With Best Regards Aravind G V "You know what keeps me going??? Whenever I get all the answers of life, he changes the questions !!!....."

4 4

open source security daemon or script
by R Lists06 17 Nov '06

17 Nov '06

Can someone please tell me what the name and or website of the open source realtime daemon or script is that automatically puts ip addresses in the hosts.deny file when servers are repeatedly probed for login/password pairs on ftp ports etc please? It was mentioned in the last year on this list if I remember right. I had bookmarked at one time and I cant seem to web search or find it otherwise. Thanks - rh -- Robert - Abba Communications Computer & Internet Services (509) 624-7159 - www.abbacomm.net

2 2

Replay mail to test MTA + filtering
by MrKiwi 17 Nov '06

17 Nov '06

Hi All, My kit : Centos4.4 + Postfix + SA + ClamAV (not that its relevant) General question - Does anyone know of a product which can take a folder / mbox of mail (spam, ham, virus infected stuff, scam mail and hoaxes) and "replay" it back against a test server to determine the servers ability to filter? I have looked at some low level (IP) packet replayers, but i cant really find anything suitable at the mail/smtp level. It would have to "simulate" connections from external IP addresses to allow RBL etc to work and also i guess i would have to choose an "MTA style" of the sender to be simulated so that the MTA i am testing can do its thing when some tries something which fails the smtpd_*_restrictions tests. It will probably be the case that i need to "recapture" the mail at a higher detail, as an RFC compliant unit of mail in my mailbox doesn't tell me anything about how the smtp conversation went, and certainly doesn't allow me to recreate the conversation. Is anyone building something like this? Any hints appreciated. Regards, MrKiwi

3 2

RE: [CentOS] open source security daemon or script
by Alex Palenschat 16 Nov '06

16 Nov '06

> R Lists06 schrieb: > > Can someone please tell me what the name and or website of the open > > source realtime daemon or script is that automatically puts ip > > addresses in the hosts.deny file when servers are repeatedly probed > > for login/password pairs on ftp ports etc please? > > I have not tested it but I think you can do this with: > http://www.snortsam.net/ > I think portsentry does almost exactly what he wants. Snortsam manipulates firewall rules (optionally on multiple hosts/firewalls) and is quite a bit more work to set up if I recall from when I looked at it. The largest requirement is to have a working snort install which he may not have. alex

2 1

RE: [CentOS] open source security daemon or script
by Alex Palenschat 16 Nov '06

16 Nov '06

> Can someone please tell me what the name and or website of > the open source realtime daemon or script is that > automatically puts ip addresses in the hosts.deny file when > servers are repeatedly probed for login/password pairs on ftp > ports etc please? > > It was mentioned in the last year on this list if I remember right. > > I had bookmarked at one time and I cant seem to web search or > find it otherwise. > > Thanks > > - rh Is this what you're looking for? http://sourceforge.net/projects/sentrytools/ alex

2 1

Broken ncurses symlinks
by Moyena Bingi 16 Nov '06

16 Nov '06

Good day, Some of my ncurses symlinks are broken, can anyone help me repair these broken links. I tried installing ncurses 5.5 which added two more broken links. Attached is the orginal broken links I had. _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

5 18

RE: [CentOS] Re: IPTables Blocking Brute Forcers
by Ian Anderson 16 Nov '06

16 Nov '06

Another good one is http://denyhosts.sourceforge.net/ It runs as a daemon, and can either ban IP's addresses all together, or just ban certain services. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Brian Marshall Sent: Thursday, November 16, 2006 9:33 AM To: CentOS mailing list Subject: Re: [CentOS] Re: IPTables Blocking Brute Forcers Sweeeet! I'll give it a shot. Thanks Mike. > From: <mike.redan(a)bell.ca> > Reply-To: CentOS mailing list <centos(a)centos.org> > Date: Thu, 16 Nov 2006 12:18:00 -0500 > To: <centos(a)centos.org> > Conversation: [CentOS] Re: IPTables Blocking Brute Forcers > Subject: RE: [CentOS] Re: IPTables Blocking Brute Forcers > > You could try something like this: > > http://freshmeat.net/projects/blocksshd/ > >> From there readme: > BlockSSHD is a Perl script based on BruteForceBlocker v1.2.3 that > dynamically > adds IPTables rules for Linux and pf firewall rules for BSD that block > SSH > brute force attacks. It can also detect ProFTPd login failures. > > Cheers, > Mike > > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Brian Marshall > Sent: November 16, 2006 12:10 PM > To: CentOS mailing list > Subject: [CentOS] Re: IPTables Blocking Brute Forcers > > > Hi All, > > So I have a series of funny guys that are constantly trying to brute > force my FTP server. They are always in China, India or Japan, of > course. > > Unfortunately my clients do exchange emails with some people in China > and Japan so I can't just block off the entire region (as much as I'd > love to). > > Does anyone have suggestions on how I can script IPTables or put some > other security measure in place that could detect brute-forcing and > reject from their IP? > > Thanks > > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss