KCLUG

kclug@kclug.org

3239 discussions

OT: Cymor/Evil_machine
by Brian Kelsay 26 Oct '04

26 Oct '04

If you find out the hospital, forward the name and room number, possibly a link via mapquest to find it. If anyone can they should visit or send something. I'll visit if I find out where he is. I consider Chris a good friend. He has helped me out numerous times and an attempt to cheer him up and show a friendly face is the least I could do. Maybe I'll go get him a toy motorcycle to play with in the hospital. That wouldn't be bad taste would it? Anybody remember what his "dream bike" is? I'll have some time to go a few places tonight and visit tonight or tomorrow. Brian Kelsay >>> Thomas Bruno <> 10/26/04 09:15AM >>> I should also add, that I was told he doesn't remember anything at all about that entire day. On Tue, 2004-10-26 at 09:13 -0500, Thomas Bruno wrote: > Chris Bier (Cymor/Evil_machine) was in a motorcycle accident on Sunday, > and is going to have surgery today for a open fracture on his arm. I was > told he was ok, and that his helmet only had a few scratches, and his > body armor wasn't damaged at all. > > He's been sitting in the hospital. I don't know what hospital or > anything yet. > > Tom (crweb/allyourrejects)

1 0

RE: spamassassin question [with blacklist question]
by Brian Densmore 26 Oct '04

26 Oct '04

Well you were right about sed. Not something I could do with sed. I wound up using awk, and temporarily putting the addresses in a separate file until I feel comfortable it won't jack up my firewall. #!/bin/sh # list of ip address to allow always MYIP=yyy.yyy.yyy.yyy MYIP2=xxx.xxx.xxx.xxx # name of logfile to scan - need to variablize so I can call it with an alternate # logfile and default to this lfl=/var/log/auth.log # ugly all on one line, but it works cat $lfl | grep -i failed\ password | awk '{ print $11 }' |uniq | grep -v $MYIP | grep -v $MYIP2 >> /etc/illegalips.txt # still to do add commands to extract ips from above file # and add to actual blacklist and call firewall restart > -----Original Message----- > From: Jeremy Turner > > > So I guess it's time > > to pull out the sed pocket reference I have and learn > > something in there to help. > > Nah... you're crying out for Perl =) > > #--------------------------------------------------------------- > #!/usr/bin/perl > > $my_ip = "192.168.0.1"; > %seen = (); > > # get input from stdin > while (<>) { > > # illegal = no username > # failed = wrong password > if (/Failed/ || /Illegal/) { > > # match an ip address > /(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})/; > > if ($my_ip !~ $1) { > $seen{$1}++; > } > } > } > @ips = sort keys %seen; > foreach (@ips) { > print "$_\n"; > } > #----------------------------------------------------------- > > The "Failed" and "Illegal" words are lines you would check to > contain IP > addresses. The hash table is to knock out duplicate IP addresses. > > Jeremy > > -- > Jeremy Turner <jeremy(a)linuxwebguy.com> > Linux Tips and News! ---> http://linuxwebguy.com > > _______________________________________________ > Kclug mailing list > Kclug(a)kclug.org > http://kclug.org/mailman/listinfo/kclug >

1 0

We got an ITEC Booth!
by Chris Bier 26 Oct '04

26 Oct '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi All, ~ I just heard from ITEC a few minutes ago that they have a 10x10 booth for us. ITEC is Oct 27-28th at the Overland Park Convention Center. http://www.goitec.com/ They are also going to give us tickets to the pay sessions that they are holding. Chris - -- I digitally sign my emails. If you see an attachment with .asc, then that means your email client doesn't support PGP digital signatures. http://www.gnupg.org/(en)/documentation/faqs.html#q1.1 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBdXz6E5xXU3JS1mQRAk7UAKCfeN5BYAkST28jY3ClUY4iocsnKgCeP1PK 0fqNp7804N2z/hFYn2S0ag4= =gEdw -----END PGP SIGNATURE-----

6 7

Re: We got an ITEC Booth!
by Brian Kelsay 26 Oct '04

26 Oct '04

"It's jacket weather. It's a T-shirt day. It's an Adidas jock strap sort of an afternoon." Remembered words from a forgotten comedian. Definitely wear bunny slippers. Brian Kelsay >>> Leo Mauler <> 10/26/04 08:44AM >>> So, what's the dress code? Business casual? Casual Day? Casual Day with blue jeans? Casual Day Has Gone Too Far? :)

1 0

RE: OT: Cymor/Evil_machine
by Brian Densmore 26 Oct '04

26 Oct '04

Finally a thread to show our vast medical knowledge. Sounds like a head trauma as well as badly fractured arm. I worry about that every time I ride. Here's wishing Chris a full and speedy recovery (well, within the speed limits of course). Brian > -----Original Message----- > From: Thomas Bruno [mailto:crweb@vwords.com] > Sent: Tuesday, October 26, 2004 9:15 AM > To: kclug(a)kclug.org > Subject: Re: OT: Cymor/Evil_machine > > > I should also add, that I was told he doesn't remember anything at all > about that entire day. > > > On Tue, 2004-10-26 at 09:13 -0500, Thomas Bruno wrote: > > Chris Bier (Cymor/Evil_machine) was in a motorcycle > accedent on sunday, > > and is going to have surgury today for a open fractur on > his arm. I was > > told he was ok, and that his helmet only had a few > scratches, and his > > body armor wasn't damaged at all. > > > > He's been sitting in the hospital. I don't know what hospital or > > anything yet. > > > > Tom (crweb/allyourrejects) > > > > _______________________________________________ > > Kclug mailing list > > Kclug(a)kclug.org > > http://kclug.org/mailman/listinfo/kclug > > _______________________________________________ > Kclug mailing list > Kclug(a)kclug.org > http://kclug.org/mailman/listinfo/kclug >

1 0

OT: Cymor/Evil_machine
by Thomas Bruno 26 Oct '04

26 Oct '04

Chris Bier (Cymor/Evil_machine) was in a motorcycle accedent on sunday, and is going to have surgury today for a open fractur on his arm. I was told he was ok, and that his helmet only had a few scratches, and his body armor wasn't damaged at all. He's been sitting in the hospital. I don't know what hospital or anything yet. Tom (crweb/allyourrejects)

1 3

RE: spamassassin question [with blacklist question]
by Jeremy Turner 25 Oct '04

25 Oct '04

This should have gone to kclug too.. On Mon, October 25, 2004 5:04 pm, Brian Densmore said: > My only problem here is sometimes I need to use 'cut -d\ -f11' and sometimes > 'cut -d\ f12'. Sometimes I have to do both in the same file. So I guess it's time > to pull out the sed pocket reference I have and learn something in there to help. Nah... you're crying out for Perl =) #--------------------------------------------------------------- #!/usr/bin/perl $my_ip = "192.168.0.1"; %seen = (); # get input from stdin while (<>) { # illegal = no username # failed = wrong password if (/Failed/ || /Illegal/) { # match an ip address /(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})/; if ($my_ip !~ $1) { $seen{$1}++; } } } @ips = sort keys %seen; foreach (@ips) { print "$_\n"; } #----------------------------------------------------------- The "Failed" and "Illegal" words are lines you would check to contain IP addresses. The hash table is to knock out duplicate IP addresses. Jeremy -- Jeremy Turner <jeremy(a)linuxwebguy.com> Linux Tips and News! ---> http://linuxwebguy.com

1 0

RE: spamassassin question
by Brian Densmore 25 Oct '04

25 Oct '04

Spelling counts. Spamassassin now running and email coming in. I still have some frozen email, but only because it's really malformed spam, from Russia with love. It's not blocking all spam though, going to have to look at upgrading it, but not to crazy about mixing "stable" and "testing" on a "in the wild" server. Now I can update my howto for spamassassin. > -----Original Message----- > From: Jeremy Turner > > > On Mon, October 25, 2004 1:28 pm, Brian Densmore said: > > Also, you can run: > > # exim -v -qff > > and it'll force frozen messages to thaw and attempt to > deliver/relay them, > giving you feedback as it goes. > >

2 1

RE: spamassassin question
by Brian Densmore 25 Oct '04

25 Oct '04

Thanks for the link. Seems I forgot to start spamd and needed to add a transport and a director to exim. Now to let it run for a while and see what happens. I'm also running spamhous RBL on it, but it's not catching very many of the spams. I may also have to upgrade my spamassassin to a newer version, according to the link you sent. Right now I'm hoping I didn't break anything, because there are some frozen messages on the system. > -----Original Message----- > From: Jeremy Turner > > > On Mon, October 25, 2004 11:48 am, Brian Densmore said: > > Ok today, I tried something to get spamassassin working on my box. > > > > The mail arrived in the regular mailbox, but I got this message > > back from the server: > > > [SNIP] > > So what have I done wrong here? Does the "rescue" message > > mean it sent it without filtering, and that is why I got the mail? > > > > my .forward looks like this for the time being: > > |/usr/bin/procmail > > /home/brian/Maildir > > > > I may have to do some tweaking in my ~/.procmailrc file, > but it looks like > > procmail is functioning, but I need to tweak spamassassin. > > I'm confused... is exim sending your mail through the .forward file > mechanism to procmail who then sends it to spamassassin? > What version of > exim do you have? > > There are some good writeups on how to integrate spamassassin > and exim at: > http://dman13.dyndns.org/~dman/config_docs/exim-spamassassin > > I think the stock install of exim3 or exim4 on debian will > check for the > procmailrc file and attempt to run that before it looks for a .forward > file, so you might not even need that step. > > Jeremy

2 1

spamassassin question
by Brian Densmore 25 Oct '04

25 Oct '04

Ok today, I tried something to get spamassassin working on my box. The mail arrived in the regular mailbox, but I got this message back from the server: ************************************ This message was created automatically by mail delivery software (Exim). A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: pipe to |/usr/bin/procmail generated by brian(a)amason.net The following text was generated during the delivery attempt: ------ pipe to |/usr/bin/procmail generated by brian(a)amason.net ------ Could not lock /home/brian/Maildir/: File exists at /usr/share/perl5/Mail/SpamAssassin/NoMailAudit.pm line 381. procmail: Program failure (70) of "/usr/bin/spamassassin" procmail: Rescue of unfiltered data succeeded *********************************** So what have I done wrong here? Does the "rescue" message mean it sent it without filtering, and that is why I got the mail? my .forward looks like this for the time being: |/usr/bin/procmail /home/brian/Maildir I may have to do some tweaking in my ~/.procmailrc file, but it looks like procmail is functioning, but I need to tweak spamassassin. "The President is merely the most important among a large number of public servants. He should be supported or opposed exactly to the degree which is warranted by his good conduct or bad conduct, his efficiency or inefficiency in rendering loyal, able, and disinterested service to the Nation as a whole. Therefore it is absolutely necessary that there should be full liberty to tell the truth about his acts, and this means that it is exactly necessary to blame him when he does wrong as to praise him when he does right. Any other attitude in an American citizen is both base and servile. To announce that there must be no criticism of the President, or that we are to stand by the President, right or wrong, is not only unpatriotic and servile, but is morally treasonable to the American public. Nothing but the truth should be spoken about him or any one else. But it is even more important to tell the truth, pleasant or unpleasant, about him than about any one else." --Theodore Roosevelt, Kansas City Star, May 7, 1918

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG