Discuss

discuss@lists.centos.org

8 participants
34745 discussions

RE: [CentOS] Re: postfix tightening
by Mark A. Lewis 03 Apr '05

03 Apr '05

>There is certainly nothing there > to override the earlier RFC (which I've forgotten) that > specifies a similar recommendation but goes on to say that > the receiver MUST NOT reject the message based on an address > lookup mismatch for the HELO/EHLO name (obviously written by > someone who realized that multi-homed servers are common and > that corporate servers often live behind NAT firewalls and > don't even know the address that will be used the public side). > > -- > Les Mikesell > les(a)futuresource.com I believe you are referring to RFC 821: The HELO receiver MAY verify that the HELO parameter really corresponds to the IP address of the sender. However, the receiver MUST NOT refuse to accept a message, even if the sender's HELO command fails verification. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

RE: [CentOS] Re: postfix tightening
by Mark A. Lewis 03 Apr '05

03 Apr '05

> Wrong. RFC2821 says: > > 4.1.1.1 Extended HELLO (EHLO) or HELLO (HELO) > > These commands are used to identify the SMTP client to the SMTP > server. The argument field contains the fully-qualified > domain name > of the SMTP client if one is available. In situations in which the > SMTP client system does not have a meaningful domain name > (e.g., when > its address is dynamically allocated and no reverse > mapping record is > available), the client SHOULD send an address literal (see section > 4.1.3), optionally followed by information that will help > to identify > the client system. The SMTP server identifies itself to the SMTP > client in the connection greeting reply and in the response to this > command. > > > Cheers, > Gavin It specifically mentions that dynamic addresses are acceptable. It specifically states that there are alternatives (an address literal) RFC 2821 also says: There are two exceptions to the rule requiring FQDNs: - The domain name given in the EHLO command MUST BE either a primary host name (a domain name that resolves to an A RR) or, if the host has no name, an address literal as described in section 4.1.1.1. So, it seems to me that the RFC compliant way to do this is to use the literal address in the HELO Meaning that those who reject this are the non RFC compliant ones... -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

CentOS4 laptop touchpad erratic operation
by Collins Richey 02 Apr '05

02 Apr '05

I've just put up CentOS4 on my HP ze4630us laptop, and the installation produced only two problems of note, both related to X operations. 1. The installer refused to allow 1024x768 resoultion for the screen. After install, manually setting the resolution in xorg.conf was no problem. 2. Erratic touchpad operation. This unit has a synaptic touchpad. I've also noted similar problems on my previous Gentoo install (also 2.6 kernel and xorg). Never really resolved this. When scrolling across a screen in a browser panel where there are multiple links, the mouse will trigger click operations all on its own, so it's difficult to reach the link you want without inadvertently opening another link that you scroll past. In googling, I didn't have much luck finding a matching problem; nor did I have much luck earlier. Most of the problems reported seemed to be "touchpad unable to respond to clicks", i.e. the opposite of my problem. The installer generated the following mouse definition in xorg.conf: Section "InputDevice" Identifier "Mouse0" Driver "mouse" Option "Protocol" "IMPS/2" Option "Device" "/dev/input/mice" Option "ZAxisMapping" "4 5" Option "Emulate3Buttons" "yes" EndSection Has anyone else seen this type of problem with a touchpad, and does anyone have knowledge of a fix? TIA, -- Collins When I saw the Iraqi people voting three weeks ago, 8 million of them, it was the start of a new Arab world.... The Berlin Wall has fallen. - Lebanese Druze leader Walid Jumblatt

2 3

mkbootdisk!
by israel.garcia＠cimex.com.cu 02 Apr '05

02 Apr '05

I'm trying to make a bootdisk in my CentOS server and I got this error.. any ideas? [root@server:~]$ rpm -qa kernel kernel-2.6.9-5.0.3.EL [root@server:~]$ mkbootdisk 2.6.9-5.0.3.EL --device /dev/fd0 Insert a disk in /dev/fd0. Any information on the disk will be lost. Press <Enter> to continue or ^C to abort: cp: writing `/tmp/mkbootdisk.d20227/initrd.img': No space left on device cat: write error: No space left on device cat: write error: No space left on device 20+0 records in 20+0 records out I have enogh space on the disk: [root@server:~]$ df -h Filesystem Size Used Avail Use% Mounted on /dev/md5 17G 1.8G 14G 12% / /dev/md1 99M 8.4M 86M 9% /boot none 126M 0 126M 0% /dev/shm /dev/md3 9.7G 2.7G 6.5G 30% /home /dev/md0 981M 26M 905M 3% /usr/local/salva /dev/md4 4.9G 262M 4.4G 6% /var/log /dev/md2 981M 24M 908M 3% /var/spool regards, Israel

2 1

CentOS-announce Digest, Vol 2, Issue 1
by centos-announce-request＠centos.org 02 Apr '05

02 Apr '05

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CentOS-4 ia64 errata: Important: gtk2 security update (Pasi Pirhonen) 2. CentOS-3 ia64 errata: Important: gtk2 security update (Pasi Pirhonen) 3. CESA-2005:354 Moderate CentOS 3 ia64 tetex - security update (Pasi Pirhonen) 4. CESA-2005:344: Important CentOS 3 i386 gtk2 - security update (Tru Huynh) 5. CESA-2005:344: Important CentOS 3 x86_64 gtk2 - security update (Tru Huynh) 6. CESA-2005:354: Moderate CentOS 3 x86_64 tetex - security update (Tru Huynh) 7. CESA-2005:354: Moderate CentOS 3 i386 tetex - security update (Tru Huynh) 8. CESA-2005:344 Important CentOS 3 s390(x) gtk2 - security update (Pasi Pirhonen) 9. CESA-2005:344 Important CentOS 4 i386 and x86_64 gtk2 - security update (Johnny Hughes) 10. CESA-2005:354 Moderate CentOS 3 s390(x) tetex - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Fri, 1 Apr 2005 23:31:02 +0300 From: Pasi Pirhonen <upi(a)iki.fi> Subject: [CentOS-announce] CentOS-4 ia64 errata: Important: gtk2 security update To: centos-announce(a)centos.org Message-ID: <20050401203102.GA9816(a)core.upi.iki.fi> Content-Type: text/plain; charset="us-ascii" Security update for CentOS 4 ia64 https://rhn.redhat.com/errata/RHSA-2005-344.html The following updated files have been uploaded and are currently syncing to the mirrors: ia64: updates/ia64/RPMS/gtk2-2.4.13-14.ia64.rpm updates/ia64/RPMS/gtk2-devel-2.4.13-14.ia64.rpm -- Pasi Pirhonen - upi(a)iki.fi - http://iki.fi/upi/

1 0

Re: [Centos] email server partition scheme
by Ralph Angenendt 02 Apr '05

02 Apr '05

Bill Baird wrote: > I like to have my /var directory on a different partition, just in case log files start to get large. I would rather have my /var fill up, than have services stop working... In case of a mailserver: If /var fills up, the service stops working :) But I also like to have a pretty big /var-Partition on my mailservers in case one of the other partitions fills up ... Ralph -- Ralph Angenendt......ra(a)br-online.de | .."Text processing has made it possible Bayerischer Rundfunk...HA-Multimedia | ....to right-justify any idea, even one Rundfunkplatz 1........80300 München | .which cannot be justified on any other Tl:089.5900.16023..Fx:089.5900.16240 | ..........grounds." -- J. Finnegan, USC

1 0

RE: [CentOS] postfix tightening
by Mark A. Lewis 02 Apr '05

02 Apr '05

<snip> > > I have never understood the precived connection between reverse DNS > > and spam. I have seen some go as far as if the reverse DNS does not > > match the senders domain they will kick it. > ---- > it doesn't seem to be too difficult to have the smtp server > helo to be locatable in reverse dns - the thing that this > blocks is people running smtp servers on dynamic ip space and > forces them to use a smart host - can't see what the big deal > is here since it provides accountability for the mail path. It's not a matter of difficult, nor does it provide any accountability. I can tell my mail server to helo whatever I want and make the ptr say whatever I want. It doesn't authenicate anything. Nor does someone running an SMTP server with a dynamic address prove anything about it being spam. The big problem that I have with it is that it completely ignores shared hosting. Not everyone wants someone to be able to look at the mail headers and know what company is hosting them, particularly a business. There are plenty of legitimate reasons to not have it. > Now that AOL is doing this, it pretty much dictates that smtp > servers comply with this restriction. I don't see the problem with it. So, you are saying that we should let AOL dictate standards? I see a HUGE problem with that. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

Centos 4 & Cisco 350 MiniPCI Wireless
by Barry L. Kline 02 Apr '05

02 Apr '05

I have an IBM Thinkpad with this beastie in it. The card was immediately recognized and uses the airo driver. No matter what I do, I can't get it to successfully connect to my WAP. Sometimes it sees the access point (as evidenced by an iwlist wifi0 scan seeing the network) and sometimes I can actually get it to connect ( as evidenced by the iwlist command showing the WAP ID). Eventually the connection between the card and the AP simply dies. I'm not new to wireless and have had no problems manually configuring other wireless cards to work properly, so I have gone through most of the gyrations. Right now I've fallen back to an Orinoco silver. Google doesn't seem to be helpful in this endeavor (lots of hits but most having to do with the 2.4 kernel series) so my question is relatively simple: Before I waste an inordinate amonut of time trying to make this thing work I would like to know if anyone else has had success here? If so, could you tell me the firmware version of your card? Even if you can't I'd be delighted to hear that the fact that the kernel manages to turn on my wireless light isn't the kernel's way of teasing me. Thanks very much! BK

1 0

RE: [CentOS] postfix tightening
by Mark A. Lewis 02 Apr '05

02 Apr '05

> On Fri, 2005-04-01 at 20:19 -0600, Mark A. Lewis wrote: > > I have never understood the precived connection between reverse DNS > > and spam. I have seen some go as far as if the reverse DNS does not > > match the senders domain they will kick it. > > Mostly because a trojaned machine on a broadband connection > spewing SPAM will not have a valid reverse DNS entry. Riight. Ever done a reverse lookup on a RR IP? Rogers? SBC? All of them will have valid reverse entries. > By forcing a policy of accurate reverse DNS, most of the > home-broadband- SPAM factories are shut down. I would argue that using that logic none of them will be shut down. Not trying to pick any fights here, I just feel very strongly that the logic is very flawed and am looking for some real justification of this. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

RE: [CentOS] postfix tightening
by Mark A. Lewis 02 Apr '05

02 Apr '05

> -----Original Message----- > From: centos-bounces(a)centos.org > [mailto:centos-bounces@centos.org] On Behalf Of RNuno > Sent: Friday, April 01, 2005 4:12 PM > To: CentOS mailing list > Subject: Re: [CentOS] postfix tightening > > Ajay Sharma wrote: > > >I run an "office" mail server and my boss would kill me if > we bounced a > >message just because the client is using a brain dead ISP. So our > >approach is a little different in that we accept a lot of mail and I > >spend my time on tuning spamassassin. > > > > > > > Same here. We cannot going on rejecting every server that > don't reverse I'ts not that I would like to but the truth is > MANY companies have them. I have never understood the precived connection between reverse DNS and spam. I have seen some go as far as if the reverse DNS does not match the senders domain they will kick it. I am all for blocking spam, but it is a fine line to block it without being an ass and catching all kinds of legitimate mail in the process. Perfect example is the one RBL that will list entire ISPs until the sufficently grovel in their newsgroup, all the while not caring that this is impacting hundreds or thousands of servers that are not spamming or supporting spam. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss