Discuss

discuss@lists.centos.org

34758 discussions

Replay mail to test MTA + filtering
by MrKiwi 17 Nov '06

17 Nov '06

Hi All, My kit : Centos4.4 + Postfix + SA + ClamAV (not that its relevant) General question - Does anyone know of a product which can take a folder / mbox of mail (spam, ham, virus infected stuff, scam mail and hoaxes) and "replay" it back against a test server to determine the servers ability to filter? I have looked at some low level (IP) packet replayers, but i cant really find anything suitable at the mail/smtp level. It would have to "simulate" connections from external IP addresses to allow RBL etc to work and also i guess i would have to choose an "MTA style" of the sender to be simulated so that the MTA i am testing can do its thing when some tries something which fails the smtpd_*_restrictions tests. It will probably be the case that i need to "recapture" the mail at a higher detail, as an RFC compliant unit of mail in my mailbox doesn't tell me anything about how the smtp conversation went, and certainly doesn't allow me to recreate the conversation. Is anyone building something like this? Any hints appreciated. Regards, MrKiwi

3 2

RE: [CentOS] open source security daemon or script
by Alex Palenschat 16 Nov '06

16 Nov '06

> R Lists06 schrieb: > > Can someone please tell me what the name and or website of the open > > source realtime daemon or script is that automatically puts ip > > addresses in the hosts.deny file when servers are repeatedly probed > > for login/password pairs on ftp ports etc please? > > I have not tested it but I think you can do this with: > http://www.snortsam.net/ > I think portsentry does almost exactly what he wants. Snortsam manipulates firewall rules (optionally on multiple hosts/firewalls) and is quite a bit more work to set up if I recall from when I looked at it. The largest requirement is to have a working snort install which he may not have. alex

2 1

RE: [CentOS] open source security daemon or script
by Alex Palenschat 16 Nov '06

16 Nov '06

> Can someone please tell me what the name and or website of > the open source realtime daemon or script is that > automatically puts ip addresses in the hosts.deny file when > servers are repeatedly probed for login/password pairs on ftp > ports etc please? > > It was mentioned in the last year on this list if I remember right. > > I had bookmarked at one time and I cant seem to web search or > find it otherwise. > > Thanks > > - rh Is this what you're looking for? http://sourceforge.net/projects/sentrytools/ alex

2 1

Broken ncurses symlinks
by Moyena Bingi 16 Nov '06

16 Nov '06

Good day, Some of my ncurses symlinks are broken, can anyone help me repair these broken links. I tried installing ncurses 5.5 which added two more broken links. Attached is the orginal broken links I had. _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

5 18

RE: [CentOS] Re: IPTables Blocking Brute Forcers
by Ian Anderson 16 Nov '06

16 Nov '06

Another good one is http://denyhosts.sourceforge.net/ It runs as a daemon, and can either ban IP's addresses all together, or just ban certain services. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Brian Marshall Sent: Thursday, November 16, 2006 9:33 AM To: CentOS mailing list Subject: Re: [CentOS] Re: IPTables Blocking Brute Forcers Sweeeet! I'll give it a shot. Thanks Mike. > From: <mike.redan(a)bell.ca> > Reply-To: CentOS mailing list <centos(a)centos.org> > Date: Thu, 16 Nov 2006 12:18:00 -0500 > To: <centos(a)centos.org> > Conversation: [CentOS] Re: IPTables Blocking Brute Forcers > Subject: RE: [CentOS] Re: IPTables Blocking Brute Forcers > > You could try something like this: > > http://freshmeat.net/projects/blocksshd/ > >> From there readme: > BlockSSHD is a Perl script based on BruteForceBlocker v1.2.3 that > dynamically > adds IPTables rules for Linux and pf firewall rules for BSD that block > SSH > brute force attacks. It can also detect ProFTPd login failures. > > Cheers, > Mike > > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Brian Marshall > Sent: November 16, 2006 12:10 PM > To: CentOS mailing list > Subject: [CentOS] Re: IPTables Blocking Brute Forcers > > > Hi All, > > So I have a series of funny guys that are constantly trying to brute > force my FTP server. They are always in China, India or Japan, of > course. > > Unfortunately my clients do exchange emails with some people in China > and Japan so I can't just block off the entire region (as much as I'd > love to). > > Does anyone have suggestions on how I can script IPTables or put some > other security measure in place that could detect brute-forcing and > reject from their IP? > > Thanks > > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

CentOS-announce Digest, Vol 21, Issue 10
by centos-announce-request＠centos.org 16 Nov '06

16 Nov '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0719 Moderate CentOS 4 x86_64 nss_ldap - security update (Johnny Hughes) 2. CESA-2006:0719 Moderate CentOS 4 i386 nss_ldap - security update (Johnny Hughes) 3. CESA-2006:0738 Low CentOS 4 x86_64 openssh - security update (Johnny Hughes) 4. CESA-2006:0738 Low CentOS 4 i386 openssh - security update (Johnny Hughes) 5. CESA-2006:0742 Critical CentOS 4 x86_64 elinks - security update (Johnny Hughes) 6. CESA-2006:0742 Critical CentOS 4 i386 elinks - security update (Johnny Hughes) 7. CESA-2006:0742 Critical CentOS 4 ia64 elinks - security update (Pasi Pirhonen) 8. CESA-2006:0742 Critical CentOS 4 s390(x) elinks - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Nov 2006 14:41:03 -0600 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2006:0719 Moderate CentOS 4 x86_64 nss_ldap - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1163623263.4979.383.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0719 https://rhn.redhat.com/errata/RHSA-2006-0719.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: nss_ldap-226-17.i386.rpm nss_ldap-226-17.x86_64.rpm src: nss_ldap-226-17.src.rpm

2 1

pam ulimit 64 bit
by Peter van Eck 16 Nov '06

16 Nov '06

Hi, Although this is on RHEL 4 update 2 x86-64 I would like to place the question on this list. I'm trying to set up some shell limits for a user. I've added the user to /etc/security/limits.conf There is an entry in /etc/pam.d/login with pam_limits.so as well as in /etc/pam.d/sshd When I try to set ulimit -n <value> I get : cannot modify limit : Operation not permitted Even if I replace all entries in /etc/pam.d/login with the absolute path to /lib64/security it doesn't work. Any suggestions on where to look now ? thanks, Peter

1 0

Firefox 2.0 on CentOS 4.4
by Edward Diener 16 Nov '06

16 Nov '06

I realize that CentOS 4.4 is all about stability but I would still like to install Firefox 2.0 on it, since I am sharing my Firefox project across OSs on a multi-boot machine and the other OSs have Firefox 2.0. Is it possible to get CentOS 4.4 to work properly with Firefox 2.0 and, if so, does anybody know of a CentOS 4.4 repository which has a Firefox 2.0 RPM available.

6 16

RE: [CentOS] About download ISO image, again
by Mark Schoonover 16 Nov '06

16 Nov '06

Karl R. Balsmeier wrote: > The installer still asks you if you want various options, -I don't > seem to remember it having X. > > One thing I can say however is that it's VERY HANDY for me to not have > to burn 3 or 4 CD's, or the DVD, just to get a server deployed. > > So thanks to the CentOS staff who came up with that clever idea. It > is truly handy. > > -karl > > I just did a server install, actually a 2.4TB NAS using the first CentOS disk, but choosing a minimal install option. What's the difference between that option and the server CD?? Thanks! Mark

5 4

RE: [CentOS] Java JDK on CentOS 4.4
by Cady, Josh 16 Nov '06

16 Nov '06

Yesterday I downloaded the "Linux x64 RPM in self-extracting file" jdk-1_5_0_09-linux-amd64-rpm.bin from Sun's website and it installed it easily. "chmod +x jdk-1_5_0_09-linux-amd64-rpm.bin" "./jdk-1_5_0_09-linux-amd64-rpm.bin" It ends up in /usr/java/jdk1.5.0_09/ > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Edward Diener > Sent: Wednesday, November 15, 2006 3:28 PM > To: centos(a)centos.org > Subject: [CentOS] Java JDK on CentOS 4.4 > > I did not choose Java when I installed CentOS 4.4 and I want to install > a JDK to do Java programming. What is the default Java JDK for CentOS > 4.4 ? I see under YumEx very little which looks like a Java JDK. Is > there one in the distribution ? Is there a way to get Sun's latest JDK 5 > installed safely and successfully on CentOS 4.4, perhaps via an RPM for > it tailored to CentOS 4.4, or should I just use the one on Sun's web > site ? After installing the RPM is there anything else I have to do to > get it to work properly in CentOS 4.4 ? Any help is gratefully > appreciated. > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss