netwok problem

write2indya write2indya at indiatimes.com
Tue May 4 04:53:05 UTC 2004 

hi there
          the same problem occurs with me on the Red Hat 9.0 then i remove my network device from nertork configuration wizard then add a new one by clicking on the new tab in the same wizard this solve my problem and donot worry abt the /etc/hosts file mine also contain the self ip,hostname and domain
try this solution and hope that this will solve your problem
bye 


redhat-list at redhat.com wrote:
Send redhat-list mailing list submissions to
	redhat-list at redhat.com

To subscribe or unsubscribe via the World Wide Web, visit
	https://www.redhat.com/mailman/listinfo/redhat-list
or, via email, send a message with subject or body 'help' to
	redhat-list-request at redhat.com

You can reach the person managing the list at
	redhat-list-owner at redhat.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of redhat-list digest..."


Today's Topics:

   1. Re: Help Needed (Matthew Saltzman)
   2. unset / change env settings (Johnson, Shaunn)
   3. Need help with Samba and DOS client (Billy Davis)
   4. Re: new to list / network eth0 issue (Crucificator)
   5. Antivirus 4 linux (again, didn't reach list) (Crucificator)
   6. RE: new to list / network eth0 issue (Johnson, Shaunn)
   7. Re: Question about network setup (kluu te)
   8. Re: Question about network setup (Norman Elton)
   9. Re: mount: /dev/cdrom is not a valid block device (Ladinig Rudolf)
  10. gedit/gnome very slow (Ladinig Rudolf)
  11. RE : Antivirus 4 linux (again, didn't reach list)
      (Cyril Drouin - Bysoft)
  12. samba as pdc (pop)
  13. RE: RE : Antivirus 4 linux (again, didn't reach list)
      (Tobias Speckbacher)
  14. cron/shell/find problem (Hugh E Cruickshank)
  15. dns entry  (pop)
  16. RE: dns entry  (Tobias Speckbacher)
  17. RE: [redhat] Re: Remote Desktop/Firewall (Frank Reichenbacher)


----------------------------------------------------------------------

Message: 1
Date: Mon, 3 May 2004 12:15:55 -0400 (EDT)
From: Matthew Saltzman <mjs at ces.clemson.edu>
Subject: Re: Help Needed
To: General Red Hat Linux discussion list <redhat-list at redhat.com>
Message-ID: <Pine.GSO.4.58.0405031209320.20943 at access.ces.clemson.edu>
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Mon, 3 May 2004, [iso-8859-1] Anish Mathew wrote:

>  --- "Sriramkrishna B C, Noida"
> <sriramkrishnac at noida.hcltech.com> wrote: > Hi,
> >
> > Please clarify whether i can install gcc2.95 on
> > Redhat Linux 8. How to
> > downgrade gcc 3.2 to gcc 2.95 .
> >
>
> i think it is not possible...
> bcz several application/modules depends on the default
> vesion...
> i have tried many times but in vain..
>
> but in theory.. if we can downgrade the dependencies
> too .. there is some hope.
> Anish

*Do not* downgrade system-installed compilers and libraries!

To get Red Hat's 2.96 compilers, install the compat-gcc* RPMs.  To get
the original 2.95.3 compiler, grab the tarballs from gcc.gnu.org and
build from scratch.  If you do the latter, then be sure to do static
linking.


-- 
		Matthew Saltzman

Clemson University Math Sciences
mjs AT clemson DOT edu
http://www.math.clemson.edu/~mjs




------------------------------

Message: 2
Date: Mon, 3 May 2004 12:21:59 -0400 
From: "Johnson, Shaunn" <SJohnson6 at bcbsm.com>
Subject: unset / change env settings
To: "'General Red Hat Linux discussion list'" <redhat-list at redhat.com>
Message-ID:
	<73309C2FDD95D11192E60008C7B1D5BB07360FB5 at snt452.corp.bcbsm.com>
Content-Type: text/plain; charset="iso-8859-1"

Howdy:

Running RHEL v. 3.0 (new installation); logged
onto the X session (KDE).

I had recovered  my users directory when 
I seem to recall that some environment had been
preset in the .bash_profile.  So, I edited
the file and tried to re-source it.  When I did
an 'env', I saw that the settings were still there;
so I unset <whatever> by hand and made sure
that there was nothing like this in the /etc/profile
or /etc/bashrc files. 

I open a different shell and env says the settings
are still there.

On my ssh term (Putty) - I su-ed to that user and
the settings were not there.

Why is that?

Thanks!

-X
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/redhat-list/attachments/20040503/ad47424d/attachment.htm

------------------------------

Message: 3
Date: Mon, 3 May 2004 12:28:47 -0400
From: "Billy Davis" <bdavis at cds-corp.com>
Subject: Need help with Samba and DOS client
To: <redhat-list at redhat.com>
Message-ID: <006101c4312b$d2fda710$320000c8 at billyd>
Content-Type: text/plain; charset="iso-8859-1"

We have just installed Samba on RH 9 and it appeared
to install properly.  When we attempt to login with:
    smbclient //myserver/myfolder
we get a successful connection.

We also have a DOS client on the same network,
that is running LanMan.   At the DOS prompt, when we 
enter 'net', a window displays that has a 'browse' selection.
When we select 'browse', we see a list of all users in the
workgroup, including the Samba server.  However, when
we select the Samba Server, we get this message:

Error 53: The computer name sepcified in the network
    path cannot be located.

The Server can successfully ping the DOS client, and the
DOS client can successfully ping the Server.  The Server
name and IP address were added to the DOS 'lmhosts'
file, and the DOS client was added to the Server /etc/hosts
file.

We have a disk share named 'hostpc' set up on the Server,
and the 'smbclient -L bigdog' command will display the share.

On the DOS client, when we enter:
    net use G: \\bigdog\hostpc

we get the same error 53 message.

Attached is a copy of the smb.conf file.

Can anyone tell us what we have missed in the setup?

Thanks,
BillyD
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smb.conf
Type: application/octet-stream
Size: 1085 bytes
Desc: not available
Url : /archives/redhat-list/attachments/20040503/10532a4a/smb.obj

------------------------------

Message: 4
Date: Mon, 3 May 2004 19:20:49 +0300
From: "Crucificator" <crucificator at xnet.ro>
Subject: Re: new to list / network eth0 issue
To: "General Red Hat Linux discussion list" <redhat-list at redhat.com>
Message-ID: <000201c43137$f145c3e0$6800000a at Annihilator>
Content-Type: text/plain; charset="iso-8859-1"

new to list / network eth0 issuesorry, make that ifconfig -a
  ----- Original Message ----- 
  From: Crucificator 
  To: General Red Hat Linux discussion list 
  Sent: Monday, May 03, 2004 11:23 AM
  Subject: Re: new to list / network eth0 issue


  pls post ifconfig -all
    ----- Original Message ----- 
    From: Johnson, Shaunn 
    To: 'General Red Hat Linux discussion list' 
    Sent: Wednesday, April 28, 2004 9:34 PM
    Subject: new to list / network eth0 issue


    Howdy: 

    Brand new to the list, hope to learn and help as much 
    as I can. 

    I installed RHEL ES 3.0 on an Intel box.  The install went 
    smoothly and I am at the point where I can do just about 
    all I need.  I want to ping an Windows 2000 server but 
    I get "Destination Host Unreachable".  I try to ping the 
    Linux box, but get 'Request timed out'. 

    I am able to ping all other machines from other domains but 
    the Linux and Windows server aren't talking to each other. 

    The IS / network team suggested that because the network is doing 
    100T full-duplex, the servers may not talk to each other 
    (It is my understanding that the network auto negotiates, but 
    that's another story) and I need to configure my eth0 card 
    to do 100 Full instead of 100 Half Duplex (the messages 
    file confirms that I am doing 100 Half Dup on the Linux box). 

    Is it possible to force the eth0 card to do 100 Full on a 
    auto negotiating network like the Windows box?  If so, how? 

    Thanks! 

    -X 



----------------------------------------------------------------------------


    -- 
    redhat-list mailing list
    unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
    https://www.redhat.com/mailman/listinfo/redhat-list



----------------------------------------------------------------------------



    -------------------------------------------------------
    Connex scaneaza automat toate mesajele impotriva virusilor folosind RAV AntiVirus.
    Connex automatically scans all messages for viruses using RAV AntiVirus.

    Nota: RAV AntiVirus poate sa nu detecteze toti virusii noi sau toate variantele lor. 
    Pentru a inlatura efectele nedorite si din dorinta de a va oferi in permanenta servicii 
    de cea mai buna calitate mesajele detectate ca fiind infectate vor fi sterse automat .
    Va rugam sa luati in considerare ca exista un risc de fiecare data cand deschideti 
    fisiere atasate si ca MobiFon nu este responsabila pentru nici un prejudiciu cauzat de 
    virusi.

    Disclaimer: RAV Antivirus may not be able to detect all new viruses and variants. In 
    order to remove  unwanted effects and to continuously provide quality services all 
    infected e-mails will be automatically deleted .Please be aware that there is a risk 
    involved whenever opening e-mail attachments to your computer and that MobiFon is not 
    responsible for any damages caused by viruses.



------------------------------------------------------------------------------


  -- 
  redhat-list mailing list
  unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
  https://www.redhat.com/mailman/listinfo/redhat-list



------------------------------------------------------------------------------



  -------------------------------------------------------
  Connex scaneaza automat toate mesajele impotriva virusilor folosind RAV AntiVirus.
  Connex automatically scans all messages for viruses using RAV AntiVirus.

  Nota: RAV AntiVirus poate sa nu detecteze toti virusii noi sau toate variantele lor. 
  Pentru a inlatura efectele nedorite si din dorinta de a va oferi in permanenta servicii 
  de cea mai buna calitate mesajele detectate ca fiind infectate vor fi sterse automat .
  Va rugam sa luati in considerare ca exista un risc de fiecare data cand deschideti 
  fisiere atasate si ca MobiFon nu este responsabila pentru nici un prejudiciu cauzat de 
  virusi.

  Disclaimer: RAV Antivirus may not be able to detect all new viruses and variants. In 
  order to remove  unwanted effects and to continuously provide quality services all 
  infected e-mails will be automatically deleted .Please be aware that there is a risk 
  involved whenever opening e-mail attachments to your computer and that MobiFon is not 
  responsible for any damages caused by viruses.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/redhat-list/attachments/20040503/c38dc366/attachment.htm

------------------------------

Message: 5
Date: Mon, 3 May 2004 20:58:02 +0300
From: "Crucificator" <crucificator at xnet.ro>
Subject: Antivirus 4 linux (again, didn't reach list)
To: "General Red Hat Linux discussion list" <redhat-list at redhat.com>
Message-ID: <001e01c43138$3f49fe80$6800000a at Annihilator>
Content-Type: text/plain; charset="iso-8859-1"

Bare with me for a few seconds, I know this topic has been discussed but I
need a few more details that didn't got touched by previous postings.
So mainly I need an av solution for e-mail scanning on mail server. BUT...
:)
I need to know what is your experience on dealing with mail attachments:
1. forbidding extensions
2. automatic deletion of attachments infected or that come in conflict with
no.1
3. Creating new mail for user with formerly infected message as attachment
and with body containing message like "Infected mail received from <>"
4. Auto-replying ONLY with verification of mail sender with mail like: "We
received infected mail from address <>"

10ks in advance

P.S. Must be free, with as much sig. updates as possible

-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/redhat-list/attachments/20040503/8a405a4d/attachment.htm

------------------------------

Message: 6
Date: Mon, 3 May 2004 14:05:38 -0400 
From: "Johnson, Shaunn" <SJohnson6 at bcbsm.com>
Subject: RE: new to list / network eth0 issue
To: "'General Red Hat Linux discussion list'" <redhat-list at redhat.com>
Message-ID:
	<73309C2FDD95D11192E60008C7B1D5BB07360FB8 at snt452.corp.bcbsm.com>
Content-Type: text/plain; charset="iso-8859-1"

--howdy:

[snip ifconfig -a]

eth0      Link encap:Ethernet  HWaddr 00:B0:D0:FC:19:7A
          inet addr:xx.xx.xx  Bcast:xx.xx.xx.255  Mask:255.255.254.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:69145386 errors:0 dropped:0 overruns:0 frame:0
          TX packets:49575308 errors:0 dropped:0 overruns:0 carrier:0
          collisions:81 txqueuelen:1000
          RX bytes:1702865863 (1623.9 Mb)  TX bytes:3221088258 (3071.8 Mb)
          Interrupt:11 Base address:0xecc0 Memory:fe123000-fe123038

eth1      Link encap:Ethernet  HWaddr 00:02:B3:95:E1:79
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
          Interrupt:10 Base address:0xec80 Memory:fe122000-fe122038

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:616649 errors:0 dropped:0 overruns:0 frame:0
          TX packets:616649 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:65411009 (62.3 Mb)  TX bytes:65411009 (62.3 Mb)

[/snip ifconfig -a]

* * * * *

[snip ethtool]
Settings for eth0:
   Supported ports: [ TP MII ]
   Supported link modes:   10baseT/Half 10baseT/Full
                           100baseT/Half 100baseT/Full
   Supports auto-negotiation: Yes
   Advertised link modes:  10baseT/Half 10baseT/Full
                           100baseT/Half 100baseT/Full
   Advertised auto-negotiation: No
   Speed: 100Mb/s
   Duplex: Full
   Port: Twisted Pair
   PHYAD: 1
   Transceiver: internal
   Auto-negotiation: off
   Supports Wake-on: puag
   Wake-on: g
   Link detected: yes

[/snip ethtool]

--is there something that i should know between
--this machine and the network?  it doesn't seem 
--(to me) that the servers should talk to everyone
--else but to each other (RHEL 3.0 / Windows 2000)

--thanks!

-X
-----Original Message-----
From: Crucificator [mailto:crucificator at xnet.ro]

sorry, make that ifconfig -a
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/redhat-list/attachments/20040503/115f7718/attachment.htm

------------------------------

Message: 7
Date: Mon, 03 May 2004 19:22:29 +0100
From: "kluu te" <linuxpower at operamail.com>
Subject: Re: Question about network setup
To: "General Red Hat Linux discussion list" <redhat-list at redhat.com>
Message-ID: <20040503182229.0060B23ABC at ws5-3.us4.outblaze.com>
Content-Type: text/plain; charset="iso-8859-1"

I don't know why RH 9 doesn't connet eth0 at reboot, but you
can put the bring up line(/sbin/ifconfig xxxxx dont know exactly what statement you use after reboot) in /etc/rc.local 
In my /etc/hosts there is an entry for all network hosts and the loopback ip (127.0.0.1 localhost.localdomain localhost)
but I dont have rh9

----- Original Message -----
From: Jack Wang <jwus2001 at yahoo.com>
Date: Sun, 2 May 2004 17:30:46 -0700 (PDT)
To: redhat-list at redhat.com
Subject: Question about network setup

> Hi all,
> 
> My OS is Red Hat 9.0. I use DSL and wireless router.
> I set up the network by using "Network Device Control"
> of Red Hat. The problem is that everytime I reboot the
> machine, I need to re-activate the eth0 device. After
> that the network works fine. I have selected "activate
> the network device automatically when booting up". Why
> it does not work?
> Another question is that there is only one line in the
> file /etc/hosts, which is:
> 192.167.7.12   mypc
> 
> Is it correct?
> 
> Thanks a lot.
> 
> Jack
>  
> 
> 
> 	
> 		
> __________________________________
> Do you Yahoo!?
> Win a $20,000 Career Makeover at Yahoo! HotJobs  
> http://hotjobs.sweepstakes.yahoo.com/careermakeover 
> 
> 
> -- 
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list

-- 
_____________________________________________________________
Web-based SMS services available at http://www.operamail.com.
>From your mailbox to local or overseas cell phones.

Powered by Outblaze




------------------------------

Message: 8
Date: Mon, 3 May 2004 14:50:46 -0400
From: Norman Elton <wnelto at net.wm.edu>
Subject: Re: Question about network setup
To: General Red Hat Linux discussion list <redhat-list at redhat.com>
Message-ID: <C9D888D0-9D32-11D8-AFE4-000A95B0A866 at net.wm.edu>
Content-Type: text/plain; charset=US-ASCII; format=flowed

Add "ONBOOT=yes" to your /etc/sysconfig/network-scripts/ifcfg-eth0 file.

Norman

------------------------------------------------------
Norman Elton
Information Technology - Network Engineering
College of William & Mary
757-221-7790


On May 3, 2004, at 2:22 PM, kluu te wrote:

> I don't know why RH 9 doesn't connet eth0 at reboot, but you
> can put the bring up line(/sbin/ifconfig xxxxx dont know exactly what 
> statement you use after reboot) in /etc/rc.local
> In my /etc/hosts there is an entry for all network hosts and the 
> loopback ip (127.0.0.1 localhost.localdomain localhost)
> but I dont have rh9
>
> ----- Original Message -----
> From: Jack Wang <jwus2001 at yahoo.com>
> Date: Sun, 2 May 2004 17:30:46 -0700 (PDT)
> To: redhat-list at redhat.com
> Subject: Question about network setup
>
>> Hi all,
>>
>> My OS is Red Hat 9.0. I use DSL and wireless router.
>> I set up the network by using "Network Device Control"
>> of Red Hat. The problem is that everytime I reboot the
>> machine, I need to re-activate the eth0 device. After
>> that the network works fine. I have selected "activate
>> the network device automatically when booting up". Why
>> it does not work?
>> Another question is that there is only one line in the
>> file /etc/hosts, which is:
>> 192.167.7.12   mypc
>>
>> Is it correct?
>>
>> Thanks a lot.
>>
>> Jack
>>
>>
>>
>> 	
>> 		
>> __________________________________
>> Do you Yahoo!?
>> Win a $20,000 Career Makeover at Yahoo! HotJobs
>> http://hotjobs.sweepstakes.yahoo.com/careermakeover
>>
>>
>> -- 
>> redhat-list mailing list
>> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
>> https://www.redhat.com/mailman/listinfo/redhat-list
>
> -- 
> _____________________________________________________________
> Web-based SMS services available at http://www.operamail.com.
>> From your mailbox to local or overseas cell phones.
>
> Powered by Outblaze
>
>
> -- 
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
>




------------------------------

Message: 9
Date: Mon, 03 May 2004 21:29:17 +0200
From: Ladinig Rudolf <r.ladinig at aon.at>
Subject: Re: mount: /dev/cdrom is not a valid block device
To: edwin at ironstone.com.au,	General Red Hat Linux discussion list
	<redhat-list at redhat.com>
Message-ID: <40969D8D.6080303 at aon.at>
Content-Type: text/plain; charset=us-ascii; format=flowed

Edwin Humphries schrieb:
> G'day,
> 
> I'm getting the error message "mount: /dev/cdrom is not a valid block 
> device" when I try to mount the CD.
> 
> This is after installing RH7.2 on an old Pentium I/166 (to modify an 
> old 7.2-based application); the box has no floppy drive. I raise that 
> because the /dev/cdrom symlink points to /dev/hdb (not hdc as I 
> believe is normal) and the log shows the following:
> 
> localhost kernel: ide-floppy driver 0.97
> localhost insmod: /lib/modules/2.4.7-10/kernel drivers/ide/ide-cd.o: 
> insmod ide-cd failed
> localhost kernel: hdb: driver not present
> 
> dmesg shows multiple repeats of:
> ide-floppy driver 0.97
> hdb: driver not present
> 
> The fstab line shows:
> /dev/cdrom/  /mnt/cdrom/  iso9660  noauto,owner,kudzu,ro  0 0
> 
> Should the /dev/cdrom symlink be pointing to /dev/hdc rather than 
> dev/hdb? If so, how do I change it - I haven't done that yet?
> 
> Edwin Humphries,
> Ironstone Technology Pty Ltd
> edwin at ironstone.com.au
> www.ironstone.com.au
> Phone: 02 4233 2285
> Fax: 02 4233 2299
> Mobile: 0419 233 051
> 
> 

Some time I got the same error message,
depmod -ae
fixed it.

RLadinig
Borg Innsbruck





------------------------------

Message: 10
Date: Mon, 03 May 2004 21:41:29 +0200
From: Ladinig Rudolf <r.ladinig at aon.at>
Subject: gedit/gnome very slow
To: General Red Hat Linux discussion list <redhat-list at redhat.com>
Message-ID: <4096A069.6070609 at aon.at>
Content-Type: text/plain; charset=us-ascii; format=flowed

Hi,

I installed RH 9 on 10 linux boxes, home directory is mounted via nfs, 
users are authenticated by LDAP-Server.
Everything looks okay, but:
If users work with gedit and they save their file (on a local 
directory), gedit freezes for 10 to 20 seconds.
On the other hand Staroffice loads a file from nfs very fast, you don't 
have to wait for network directories, This problem only appears with gedit.
I have no idea where to look for. As top reports no cpu or memory 
problem, I think access to nfs or ldap server might cause this slow down.
This problem didn't appear in RH8.0

Any ideas?





------------------------------

Message: 11
Date: Mon, 3 May 2004 21:37:57 +0200
From: "Cyril Drouin - Bysoft" <cyril.drouin at bysoft.fr>
Subject: RE : Antivirus 4 linux (again, didn't reach list)
To: "'General Red Hat Linux discussion list'" <redhat-list at redhat.com>
Message-ID: <002801c43146$2367bf50$ec1e3251 at CyrilBysoft>
Content-Type: text/plain; charset="iso-8859-1"

One of the solution :
 
postfix+amavisdnew+clamav.
 
I just built a new box like that this week-end. It works quite well.
 
Cheers,
 
Cyril

-----Message d'origine-----
De : redhat-list-bounces at redhat.com [mailto:redhat-list-bounces at redhat.com]
De la part de Crucificator
Envoyé : lundi 3 mai 2004 19:58
À : General Red Hat Linux discussion list
Objet : Antivirus 4 linux (again, didn't reach list)


Bare with me for a few seconds, I know this topic has been discussed but I
need a few more details that didn't got touched by previous postings.
So mainly I need an av solution for e-mail scanning on mail server. BUT...
:)
I need to know what is your experience on dealing with mail attachments:
1. forbidding extensions
2. automatic deletion of attachments infected or that come in conflict with
no.1
3. Creating new mail for user with formerly infected message as attachment
and with body containing message like "Infected mail received from <>"
4. Auto-replying ONLY with verification of mail sender with mail like: "We
received infected mail from address <>"

10ks in advance

P.S. Must be free, with as much sig. updates as possible

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/redhat-list/attachments/20040503/d450baf1/attachment.htm

------------------------------

Message: 12
Date: Tue, 4 May 2004 01:27:04 +0530
From: "pop" <net_wise at hotpop.com>
Subject: samba as pdc
To: <redhat-list at redhat.com>
Message-ID: <005f01c43148$e0761d60$8a06050a at au58fqeeygrwm>
Content-Type: text/plain; charset="iso-8859-1"

samba as pdc
http://www-106.ibm.com/developerworks/eserver/tutorials/samba/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/redhat-list/attachments/20040504/f80816ce/attachment.htm

------------------------------

Message: 13
Date: Mon, 3 May 2004 13:38:42 -0700
From: "Tobias Speckbacher" <tobias at quova.com>
Subject: RE: RE : Antivirus 4 linux (again, didn't reach list)
To: "General Red Hat Linux discussion list" <redhat-list at redhat.com>
Message-ID:
	<FF83FA30299A76448B4AC6026257A88403650A at exchangemv.quova.com>
Content-Type: text/plain; charset="iso-8859-1"

I can only second that.

 

It is very easy to set up and amavid-new already ties into SpamAssassin so that's takes care of Spam as well.

amavisd-new already has a list of attachments you can block and you can add or remove to/from that list very easily.

Notification emails are also configured via amavid-new.

 

If you are going to configure spam filtering as well, consider installing Razor/DCC/Pyzor as well to aid SpamAssasin.

 

ClamAV from watching the logs updates daily if not more often. http://news.gmane.org/gmane.comp.security.virus.clamav.virusdb

 

 

Offsite notification for infections is pretty much useless these days, the infected email hardly ever originates from the actual person owning the mailbox.

 

http://www.ijs.si/software/amavisd/ - Amavid site

http://www.postfix.org/documentation.html - postfix docs

http://www.clamav.net <http://www.clamav.net/>  - clamav

 

As a sample of files I block by default (pipe separated):

 

vbs|pif|scr|bat|com|exe|dll|ade|adp|bas|bat|chm|cmd|com|cpl|crt|exe|hlp|hta|inf|ins|isp|js|jse|lnk|mdb|mde|msc|msi|msp|mst|pcd|pif|reg|scr|sct|shs|shb|vb|vbe|wsc|wsf|wsh

 

All my infected emails are quarantined and the receiving user in my domain is sent a notification, should there be a case where the email actually contains content of value it is easy enough to retrieve it from the quarantine location.

 

-Tobias

 

 

-----Original Message-----
From: redhat-list-bounces at redhat.com [mailto:redhat-list-bounces at redhat.com] On Behalf Of Cyril Drouin - Bysoft
Sent: Monday, May 03, 2004 11:38 AM
To: 'General Red Hat Linux discussion list'
Subject: RE : Antivirus 4 linux (again, didn't reach list)

 

One of the solution :

 

postfix+amavisdnew+clamav.

 

I just built a new box like that this week-end. It works quite well.

 

Cheers,

 

Cyril

	-----Message d'origine-----
	De : redhat-list-bounces at redhat.com [mailto:redhat-list-bounces at redhat.com] De la part de Crucificator
	Envoyé : lundi 3 mai 2004 19:58
	À : General Red Hat Linux discussion list
	Objet : Antivirus 4 linux (again, didn't reach list)

	Bare with me for a few seconds, I know this topic has been discussed but I
	need a few more details that didn't got touched by previous postings.
	So mainly I need an av solution for e-mail scanning on mail server. BUT...
	:)
	I need to know what is your experience on dealing with mail attachments:
	1. forbidding extensions
	2. automatic deletion of attachments infected or that come in conflict with
	no.1
	3. Creating new mail for user with formerly infected message as attachment
	and with body containing message like "Infected mail received from <>"
	4. Auto-replying ONLY with verification of mail sender with mail like: "We
	received infected mail from address <>"
	
	10ks in advance
	
	P.S. Must be free, with as much sig. updates as possible

	 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/redhat-list/attachments/20040503/29b49cf8/attachment.htm

------------------------------

Message: 14
Date: Mon, 3 May 2004 14:08:31 -0700
From: "Hugh E Cruickshank" <hugh at forsoft.com>
Subject: cron/shell/find problem
To: "Redhat-List" <redhat-list at redhat.com>
Message-ID: <00f501c43152$ca1ca250$3d02a8c0 at FISMTL>
Content-Type: text/plain;	charset="iso-8859-1"

Hi All:

I having a bit of a problem adding an entry to a crontab file.
Actually the adding works fine, it is just the command will not
work.

Here is what I have so far:

1. The following command works correctly from the command line:

   /usr/bin/find /usr/faq/xpt -name "RCTTAX.*" -mtime +90 -exec rm {} \;

2. When the command is added to a shell script file as above or
   to a crontab file as:

   0 2 * * * /usr/bin/find /usr/faq/xpt -name "RCTTAX.*" -mtime +90 -exec rm
{} \;

   The execution fails with

   /usr/bin/find: missing argument to `-exec'

3. I have been doing this for years on various different UNIX
   systems without any problems.

Any thoughts of suggestions would be greatly appreciated.

Regards, Hugh

--
Hugh E Cruickshank, Forward Software, www.forward-software.com




------------------------------

Message: 15
Date: Tue, 4 May 2004 05:05:22 +0530
From: "pop" <net_wise at hotpop.com>
Subject: dns entry 
To: <redhat-list at redhat.com>
Message-ID: <000801c43167$57020840$8a06050a at au58fqeeygrwm>
Content-Type: text/plain; charset="iso-8859-1"

how to manually enter dns server address in the file
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/redhat-list/attachments/20040504/65c0288f/attachment.htm

------------------------------

Message: 16
Date: Mon, 3 May 2004 16:51:47 -0700
From: "Tobias Speckbacher" <tobias at quova.com>
Subject: RE: dns entry 
To: "General Red Hat Linux discussion list" <redhat-list at redhat.com>
Message-ID:
	<FF83FA30299A76448B4AC6026257A88442B9BA at exchangemv.quova.com>
Content-Type: text/plain; charset="us-ascii"

Open /etc/resolv.conf

 

Put something like this in there.

 

search domain.com

nameserver xxx.xxx.xxx.xxx

nameserver xxx.xxx.xxx.xxx

 

 

 

alternatively you can use redhat-config-network to edit these settings
(this is an X-interface)

 

-Tobias

 

 

 

-----Original Message-----
From: redhat-list-bounces at redhat.com
[mailto:redhat-list-bounces at redhat.com] On Behalf Of pop
Sent: Monday, May 03, 2004 3:35 PM
To: redhat-list at redhat.com
Subject: dns entry 

 

how to manually enter dns server address in the file

-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/redhat-list/attachments/20040503/7f38ce06/attachment.htm

------------------------------

Message: 17
Date: Mon, 3 May 2004 18:37:05 -0700
From: "Frank Reichenbacher" <frank at bio-con.com>
Subject: RE: [redhat] Re: Remote Desktop/Firewall
To: "'General Red Hat Linux discussion list'" <redhat-list at redhat.com>
Message-ID: <021501c43178$51707ea0$0201a8c0 at frankhome>
Content-Type: text/plain;	charset="us-ascii"



> -----Original Message-----
> From: redhat-list-bounces at redhat.com 
> [mailto:redhat-list-bounces at redhat.com] On Behalf Of Pete Nesbitt
> Sent: Monday, May 03, 2004 8:11 AM
> To: frank at bio-con.com; General Red Hat Linux discussion list
> Subject: Re: [redhat] Re: Remote Desktop/Firewall


<snip>


> > > It's been a while since I used IPchains, but I beleive you want 
> > > something
> > > like:
> > >
> > > $IPCHAINS -A input -p tcp -s 64.232.168.34 -sport 3389 -d 
> > > 66.93.153.62 -dport 3389  -j REDIRECT  192.168.1.2
> > > $IPCHAINS -A forward -p tcp -d 192.168.1.2 -dport 3389 -j
> > > ACCEPT $IPCHAINS -A output -p tcp -d 192.168.1.2 -dport 
> 3389 -j ACCEPT
> >
> > Here's what didn't generate error messages when I restarted the
> > firewall:
> >
> > $IPCHAINS -A input -p tcp -s 64.232.168.34 3389 -d 
> 66.93.153.62 3389 
> > -j REDIR 192.168.1.2 3389 $IPCHAINS -A forward -p tcp -d 
> 192.168.1.2 
> > 3389 -j ACCEPT $IPCHAINS -A output -p tcp -d 192.168.1.2 3389 -j 
> > ACCEPT
> >
> > (RH barks at REDIRECT)
> >
> > And then this is what shows up in /var/log/messages:
> > May  2 19:35:25 mollynet kernel: Packet log: input DENY 
> eth0 PROTO=47 
> > 64.232.168.34:65535 66.93.153.62:65535 L=65 S=0x00 I=52375 F=0x0000 
> > T=54
> > (#42)
> >
> > It's always port 65535. It occurs to me that the Microsoft 
> RDP is not 
> > only using port 3389. I think my connection request is 
> received by the 
> > remote machine and then answered, but the firewall isn't 
> allowing the 
> > return packets to be received on the local machine. I've 
> tried a dozen 
> > configurations of port openings, but I admit that I have no idea of 
> > what would be correct, and, of course, none of them work.
>  <snip>
> > Frank
> >
> 
> Frank,
> Aside from this RDP service, can you confirm the firewall is 
> correctly passing 
> packets? Is the routing table correct to pass things back and forth?

Yes absolutely. I've been using this machine as a home network gateway
and firewall (and I run a website and email server on it, the latter
even earns me money) very successfully for about 2 years(?) Pmfirewall
is great. Part of the reason I'm so blindingly ignorant is that I
haven't had to think about it. 


> 
> Are IP Masquerading & ICMP Masquerading both enabled in the kernel?

Yes definitely. I'm looking at the pmfirewall script, which consists of
several components. The initiating script speficially allows incoming
and outgoing icmp and then calls a masquerading script. 


> 
> Can you confirm the port exchanges for RDP (protocols and 
> what the server uses 
> as a source/destination when it responds?

I looked it up as best I could in several Internet sources and all I
could find is that RDP uses port 3389.


> 
> IPForwarding should also be enabled. To enable it add the 
> following to 
> /etc/rc.local or execute at command:
> echo "1" > /proc/sys/net/ipv4/ip_forward

This statement is already in pmfirewall and it appears to run correctly.


> (if working  'cat /proc/sys/net/ipv4/ip_forward'  will return "1")
> 
> I remember ipchains had a rule testing command, there are 
> also a number of 
> options you may look at for ststus "ipchains -L forward" for example.


Here are the three statements I inserted at the end of the pmfirewall
script:
$IPCHAINS -A input -p tcp -s 64.232.168.34 3389 -d 66.93.153.62 3389 -j
REDIR 192.168.1.2 3389 
$IPCHAINS -A forward -p tcp -d 192.168.1.2 3389 -j ACCEPT 
$IPCHAINS -A output -p tcp -d 192.168.1.2 3389 -j ACCEPT

Running "ipchains -L input" appears to show that the first statement
above is not loading, so that must be what the error message refers to
when I try to restart pmfirewall. 

"ipchains -L input" shows (among other entries):
ACCEPT   tcp    anywhere    192.168.1.2    any->  3389


"ipchains -L output" shows (among other entries):
ACCEPT   tcp    anywhere    192.168.1.2    any->  3389

Now I strongly suspect there is something wrong with the syntax of the
input statement. I tried several different variations, but could not
find one that would appear to do what I want that would not produce an
error message. The message BTW is, "Try '/sbin/ipchains -h' or
'/sbin/ipchains --help' for more information." If I rem out the
statement and then restart pmfirewall, the message does not appear.


> 
> What other error messages in the logs?

Hundreds of messages a day reflecting denials from a wide variety of IP
addresses, but nothing, I think, out of the ordinary. 


> 
> One option, if windows has something like tcpdump, or else 
> set the linux box 
> as a router, not a firewall, and monitor a successful 
> connection to see what 
> ports are used.

You mean shut down my firewall -- on purpose? 

Ho brother, does that make me nervous, but I guess I can do it for a
couple of minutes.

Frank



> -- 
> Pete Nesbitt, rhce
> 
> 
> -- 
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
> 





------------------------------

__
redhat-list mailing list
Unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list


End of redhat-list Digest, Vol 3, Issue 6
*****************************************
Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.com

 Buy The Best In BOOKS at http://www.bestsellers.indiatimes.com

Bid for for Air Tickets @ Re.1 on Air Sahara Flights. Just log on to http://airsahara.indiatimes.com and Bid Now!

More information about the redhat-list mailing list