KCLUG

kclug@kclug.org

3239 discussions

Re: Re: Re: Re: Help configuring fetchmail
by linux＠bizniche.com 13 Oct '04

13 Oct '04

Jeremy Turner <jeremy(a)linuxwebguy.com> wrote on 10/13/2004, 08:37:16 PM: > On Wed, October 13, 2004 1:26 pm, linux(a)bizniche.com said: > > That sounds exactly like what I want to do. I guess I get confused > > because I often see procmail and exim mentioned in the same > > context...leading me to believe they do the same thing. > > > > So, all I need to add is procmail. Currently, I guess exim sends the > > mail to my Maildir...and now I need to tell it to send to procmail > > instead. I'll read up on procmail and see how it might fit in. > > If you're using Debian, you can 'apt-get install procmail' then create > yourself a ~/.procmailrc file. exim in woody and in sarge is setup to > check for procmail _before_ delivering to maildir, unless you set it up > differently. Basically, if the procmail transport is listed before the > maildir transport, you're okay. I am using debian, but while trying to get it working, I did change the exim conf to use maildir. The related section looks like this: local_delivery: driver = appendfile group = mail mode = 0660 mode_fail_narrower = false envelope_to_add = true return_path_add = true directory=${home}/Maildir maildir_format = true prefix="" Is this the trasport that you mentioned? What does a procmail setup look like? I also see this procmail section in the conf file, but I'm not sure if it's doing anything. procmail_pipe: driver = pipe command = "/usr/bin/procmail" return_path_add delivery_date_add envelope_to_add # check_string = "From " # escape_string = ">From " suffix = "" > Now what should go in your .procmailrc? I used to list all of my mailing > lists by hand, then I found this script: > > http://www.dotfiles.com/files/12/215_.procmailrc > > This procmailrc will attempt to dynamically check for certain headers in > the email and then deliver them into that folder. It works great 99% of > the time. The only problem is that one mailing list uses the email > address of "talk@...." so that mailing list gets put under the 'talk' > folder. KCLUG, however gets put under the 'kclug' folder. > > The drawback is that if SpamAssassin (or your spam solution) doesn't catch > an email and the spam email has a header that _looks like_ it's from a > mailing list, then it creates a new folder to put the mail in. I have a > couple of folders that were created in this way. > > But like I said, 99% good. So, you're using it to filter mail into folders, and the mail is all coming from the same email account, correct? I have fetchmail checking a few different pop3 accounts, and so I could probably filter by the to: address or something, and place them in different folders, as you say. Either way, fetchmail will dump it all into one place and then procmail can filter it. Right? Matt

2 1

Re: Re: Re: Help configuring fetchmail
by linux＠bizniche.com 13 Oct '04

13 Oct '04

> Courier-IMAP provides the IMAP support for Mozilla Thunderbird and in my > case the backend for a webmail client like squirrelmail. > > Filtering for your local user accounts can come from exim/postfix/sendmail > or through procmail. In my setup, mail is received through exim, then > handed off to procmail, which sorts and delivers my mail to ~/Maildir > where my mail lives peacefully. > > The IMAP server accesses the mail from that location and allows me to > read, delete, etc it. That sounds exactly like what I want to do. I guess I get confused because I often see procmail and exim mentioned in the same context...leading me to believe they do the same thing. So, all I need to add is procmail. Currently, I guess exim sends the mail to my Maildir...and now I need to tell it to send to procmail instead. I'll read up on procmail and see how it might fit in. Matt

2 1

Re: Re: Help configuring fetchmail
by linux＠bizniche.com 13 Oct '04

13 Oct '04

> > Here is what's not working yet. > > 1) Fetchmail only runs when I tell it to ... > > There are a couple of ways: fetchmail -d will use fetchmail's > internal scheduling. This does some specific types of errorhandling for > servers that don't respond properly, and you may want to read the docs for > the specifics on this. > > I prefer to run fetchmail from cron, since cron is running anyway. This > allows me to use different config files for different times of day or days of > the week - I can leave my mail on the server so it can be fetched from both > home and work, then clean it all out at the weekend; I can check mail > frequently when I'm home and awake and infrequently when I'm away or asleep. > > > 2) I _really_ want to find out if there is way I can get fetchmail (or > > something else?) to put mail it gets from the pop accounts into IMAP > > folder based on which account it pulls from. > > What are you filtering/sorting your mail with now? You may need to filter on > the "to" address, or go a little deeper into the headers to select the pop > info. What fetchmail does is hand mail off to the local delivery agent > (LDA), which usually handles filtering and sorting. Right now I'm not filtering at all. All the mail just goes into my main inbox. So...am I currently using an LDA? Maybe that's what Courier-IMAP does? Matt

2 1

RE: Help configuring email server...
by linux＠bizniche.com 13 Oct '04

13 Oct '04

I've made some big progress getting the email working. Brian, I was looking at the How-To that B. Densmore pointed me to at www.amason.net. So far, the following working: 1) Sending and receiving local and remote mail from mutt or squirrelmail. 2) Mail is getting to ~/Maildir so IMAP stuff works. I can setup the IMAP connection via thunderbird, and pull mail from there. 3) Fetchmail is pulling mail from a pop3 account, and dumping it into my local account. Here is what's not working yet. 1) Fetchmail only runs when I tell it to (either with commandline or the webmin interface). I am supposing that cron could handle this for me, but want to make sure there is no built-in fetchmail periodic checking feature that I'm missing. 2) I _really_ want to find out if there is way I can get fetchmail (or something else?) to put mail it gets from the pop accounts into IMAP folder based on which account it pulls from. 3) I still need to get exim to send via my ISP's smtp server for those domains that block dynamic hosts. I was reading that you can set it up to only use the smarthost for some hosts, and not all. I'm not sure if it would be better to selectively use the smarthost, or to use it for all mail. So...huge improvements! It's being really fun to mess around with this stuff too. I'd love any comments on the remaining items, if anyone has been through this type of thing. Matt

2 1

RE: Help configuring email server...
by Brian Densmore 13 Oct '04

13 Oct '04

> -----Original Message----- > From: linux(a)bizniche.com > > > I've made some big progress getting the email working. > > Brian, I was looking at the How-To that B. Densmore pointed me to at > www.amason.net. Another happy customer! Glad it helped you! > > So far, the following working: > 1) Sending and receiving local and remote mail from mutt or > squirrelmail. > 2) Mail is getting to ~/Maildir so IMAP stuff works. I can setup the > IMAP connection via thunderbird, and pull mail from there. > 3) Fetchmail is pulling mail from a pop3 account, and dumping > it into my > local account. > > Here is what's not working yet. > 1) Fetchmail only runs when I tell it to (either with commandline or > the webmin interface). I am supposing that cron could handle this for > me, but want to make sure there is no built-in fetchmail periodic > checking feature that I'm missing. I don't use fetchmail, so YMMV. <quote> Simply invoking fetchmail -d 900 will, therefore, poll all the hosts described in your ~/.fetchmailrc file except those explicitly excluded with the 'skip' verb) once every fifteen minutes. </quote> If you run this then you shouldn't have to worry about fetchmail only running when you tell it to. Also, you can add this line to your rc.local file and every time the system boots fetchmail will run as a daemon. Provided of course you have an rc.local and it is called as part of your boot process. Sure it's ugly to put it in rc.local like this rather than as a full blown script procedure, but hey it should work. The 900 is of course 900 seconds. No need for a cron entry. > 2) I _really_ want to find out if there is way I can get > fetchmail (or > something else?) to put mail it gets from the pop accounts into IMAP > folder based on which account it pulls from. I'll have to research this one. > 3) I still need to get exim to send via my ISP's smtp server > for those > domains that block dynamic hosts. I was reading that you can > set it up > to only use the smarthost for some hosts, and not all. I'm > not sure if > it would be better to selectively use the smarthost, or to use it for > all mail. It should be possible but you'll need to go into the exim config files for this. There are documents on how to do this. I haven't done it, but have looked at the exim documentation. I wish you luck. Lots of it. ;')

1 0

Re: Shared teleconferencing in Linux
by Brian Kelsay 13 Oct '04

13 Oct '04

Gnomemeeting is one option. It is supposed to connect to Net Meeting. I don't know if you get the shared whiteboard. Brian Kelsay >>> Leo Mauler <webgiant(a)yahoo.com> 10/12/04 07:13AM >>> What I'm wanting here is the ability to type chat, draw on a shared whiteboard, share photos, and possibly audio teleconferencing. I'm not looking for video teleconferencing but it would be interesting as an option. I was adjusting Components for a friend with Windows98 and saw "NetMeeting". It sounded interesting but I'd like to be able to do that with Linux instead, and presumably things have improved a bit since 1998.

2 1

Re: Unsure of log report entry
by Brian Kelsay 13 Oct '04

13 Oct '04

Doc, your box is running iptables, which plugs into the kernel, so the kernel sends the error messages. What are you using for the router? A distro of Linux with iptables and Snort? Hopefully yes, with your server in a DMZ to limit access from it to the internal network. By you saying it runs DNS, I'm guessing it is not cordoned off. The logs on your router/firewall will probably have more info. I would check that the webserver is up to date for all security updates and run ckrootkit on it if it is way out of date. Ask Brian Densmore about this. Can you really shoot lasers and remove pain? Cool. Can you hook us up with something like Star trek has? I just want to do a little target practice. Brian Kelsay >>> docv <> 10/12/04 06:21PM >>> No, Logwatch doesn't tell me where it came from. I am running HTTP, DNS and POP3 on that box. I did have an alert message from my router letting me know that an attack was unsuccessful from that IP address, inbound from WAN, but was concerned when I say that this log message was coming from the kernel. I'm obviously not very knowledgeable about TCP/IP protocols but this old dog is still learning! ;-) And to answer Dustin's question, no, that's not my clinic. As in my signature lines, my clinic is the Laser Pain Relief Center in downtown Lee's Summit (just opened it up 3 weeks ago). Brian Kelsay wrote: > ICMP is a ping request. It just means that you are unable to get to that box. > But, you want to know why your box is trying to hit it. Are you running the > box as a webserver or any other type of server? Is this a ping from the > outside or inside? Does Logwatch tell you this? > > > Brian Kelsay -- Steve Vaitl, D.C. Certified Chiropractic Sports Physician Laser Pain Relief Center

1 0

Re: Unsure of log report entry
by Brian Kelsay 12 Oct '04

12 Oct '04

ICMP is a ping request. It just means that you are unable to get to that box. But, you want to know why your box is trying to hit it. Are you running the box as a webserver or any other type of server? Is this a ping from the outside or inside? Does Logwatch tell you this? Brian Kelsay >>> docv <> 10/12/04 07:37AM >>> I've got a box running RH9.0 and in the Logwatch report last night, I got the following entry; --------------------- Kernel Begin ------------------------ 8 Time(s): ICMP: 65.70.45.21: Source Route Failed. ---------------------- Kernel End ------------------------- Unfortunately, the is NOT my IP address!!! Is this telling me what I think it is, The box has been compromised????

2 1

Keystroke Macro Recording Software for Mozilla?
by Jon Moss 12 Oct '04

12 Oct '04

I want to automate some of the tasks I do daily (mostly checking websites that require I login but are SSL encrypted). Any suggestions on software or plugins for capturing keystrokes and mouse clicks? -- Thanks very much, Jon Moss jon.moss(a)cnonline.net

2 1

RE: Unsure of log report entry
by Brian Densmore 12 Oct '04

12 Oct '04

Like I was saying it's hard to say if he's been hacked, from this one message. Obviously he has been hit with scan, either automated or manually, to determine if there is a weakness in his system or not. I suspect a deeper look in the log files might dig up more information. It could just have been a harmless scan that someone dig to see what happens when you scan someone. Or it could be more sinister. > -----Original Message----- > From: Dustin Decker > > > > -----Original Message----- > > From: kclug-bounces(a)kclug.org > > > > I've got a box running RH9.0 and in the Logwatch report > last night, I > > got the following entry; > > > > --------------------- Kernel Begin ------------------------ > > > > > > 8 Time(s): ICMP: 65.70.45.21: Source Route Failed. > > > > ---------------------- Kernel End ------------------------- > > > > Unfortunately, the is NOT my IP address!!! Is this telling me what I > > think it is, The box has been compromised???? > > What it indicates is that 65.70.45.21 tried eight times to make use of > source routing. The short answer on source routing is that > it's a feature > of TCP/IP whereby you can direct the path a packet will > follow. This could > allow an attacker to cause traffic to pass through a host > they have control > of, to view its contents, etc. You can read up on this more in TCP/IP > Illustrated, Volume I by the late W. Richard Stevens - aka > The TCP/IP Bible. > > Here's an interesting bit - do a whois on the host in question: > 65.70.45.21 > > This turns out to be an SBC customer, most likely DSL. This > is registered > to a client named Gould Family Practice. I see from your > signature below > you're in medicine - is this where you work, or a competitor? > > The good news is, the source routing attempt failed. This > doesn't indicate > you have been hacked, but this type of traffic certainly isn't normal. > Someone is rattling the fence. > Dustin

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG