[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Re: HELP Spam Attack



206.168.65.1 is our DNS server, we are not running DNS on the RAQ3. I have deleted those two sites ( they were just test sites). These particular sites don't have true DNS entries. They were just test sites. So am I leaving myself more "vulnerable" since they do not resolve upstream? ( hope that makes since). I'll see what happens.

Thanks,
Dawn

At 09:02 AM 12/9/2002 -0800, you wrote:
Send cobalt-users mailing list submissions to
        cobalt-users@xxxxxxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
        http://list.cobalt.com/mailman/listinfo/cobalt-users
or, via email, send a message with subject or body 'help' to
        cobalt-users-request@xxxxxxxxxxxxxxx

You can reach the person managing the list at
        cobalt-users-admin@xxxxxxxxxxxxxxx

When replying, please edit your Subject line so it is more specific
than "Re: Contents of cobalt-users digest..."

Today's Topics:

   1. Problem with admin interface after reinstalling php (Nicolas Cartron)
   2. Re: OWM 1.81 E-Mail Notif Problem w/ Qube3 (William J.A. Brillinger)
   3. openwebmail -  user@xxxxxxxxxxxxxx (Mike Hughes)
   4. Re: openwebmail -  user@xxxxxxxxxxxxxx (Nicolas Cartron)
   5. RE: openwebmail -  user@xxxxxxxxxxxxxx (Paul Shuttleworth)
   6. RE: php search script needed (Brent Sims)
   7. Re: php search script needed (Steve Werby)
   8. How to list more than 15 users in user management - anyone? (H2M Lists)
   9. Re: clear mailq (Parker Morse)
10. Re: How to list more than 15 users in user management - anyone? (Herby K) 11. Re: How to list more than 15 users in user management - anyone? (www.RaQTweak.com) 12. RE: HOWTO: Rebuild PostgreSQL 'cobalt' database due to corrupt quota table (Steven Depuydt - www.BeNe.WS)
  13. HELP Spam attack (Dawn D. Pfaltzgraff)
  14. [RAQ3] Apache User-Agent blocking for all sites (Greg Hewitt-Long)
  15. Re: HELP Spam attack (Larry Smith)
Message: 1
Message-ID: <57006.213.41.92.76.1039442614.squirrel@xxxxxxxxxxxxxxxxx>
Date: Mon, 9 Dec 2002 14:03:34 -0000 (GMT)
From: "Nicolas Cartron" <nc@xxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Importance: Normal
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Subject: [cobalt-users] Problem with admin interface after reinstalling php
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

All,

I just installed php 4.2.2 on a raq550 (instead of basic php 4.0.6 provided
with the machine).
Everything's fine with the sites, but i've got some troubles with
the admin part of the cobalt :
when i go to http://myip/login here is what i get :


Fatal error: Call to undefined function: i18n_new() in
/usr/sausalito/ui/libPhp/I18n.php on line 47

ok, i compiled php with the same options...

Any help would be appreciated, i browsed the archives but found nothing.
Thanks.

--
Nicolas Cartron


Message: 2
Message-Id: <5.2.0.9.0.20021209065702.00a096c0@xxxxxxxxxxxxxxx>
Date: Mon, 09 Dec 2002 06:57:25 -0600
To: cobalt-users@xxxxxxxxxxxxxxx
From: "William J.A. Brillinger" <billy@xxxxxxxxxx>
Subject: Re: [cobalt-users] OWM 1.81 E-Mail Notif Problem w/ Qube3
In-Reply-To: <>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

At 01:27 AM 09/12/02 -0800, you wrote:
The new version of OWM, version 1.81, has a feature I would really like to
get to work, the calendar event e-mail notification.  For some reason if I
setup the e-mail notification it won't work, it won't send the reminder
e-mail like it is supposed to.  Any ideas?

Thanks,

Santiago.

Check the OWM forum at http://sourceforge.net/forum/forum.php?forum_id=108433

- Bill B.




---------------------------------
William J.A. Brillinger
Precision Design Co.

E-Mail:   mailto:billy@xxxxxxxxxx
Web site: http://www.pdcweb.net



Message: 3
From: "Mike Hughes" <mike@xxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Date: Tue, 10 Dec 2002 13:13:02 -0000
Message-ID: <>
MIME-Version: 1.0
Content-Type: text/plain;
        charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Importance: Normal
In-Reply-To: <20021209125501.4335.90686.Mailman@xxxxxxxxxxxxxxx>
Subject: [cobalt-users] openwebmail -  user@xxxxxxxxxxxxxx
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

Hi, on openwebmail when people send emails its always from
user@xxxxxxxxxxxxxx rather than user@xxxxxxxxxxx I have tried the
tutorial fix that comeswith openwebmail with no luck, how can I get it
to send from user@xxxxxxxxxx??

Regards,
Mike Hughes.
VisionHost.net

Message: 4
Message-ID: <61639.213.41.92.76.1039444631.squirrel@xxxxxxxxxxxxxxxxx>
Date: Mon, 9 Dec 2002 14:37:11 -0000 (GMT)
Subject: Re: [cobalt-users] openwebmail -  user@xxxxxxxxxxxxxx
From: "Nicolas Cartron" <nc@xxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
In-Reply-To: <>
References: <20021209125501.4335.90686.Mailman@xxxxxxxxxxxxxxx>
        <>
Importance: Normal
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

> Hi, on openwebmail when people send emails its always from
> user@xxxxxxxxxxxxxx rather than user@xxxxxxxxxxx I have tried the
> tutorial fix that comeswith openwebmail with no luck, how can I get it
> to send from user@xxxxxxxxxx??
>
> Regards,
> Mike Hughes.
> VisionHost.net

Mike,

you should try to use the sendmail's genericstable which will
rewrite the outgoing emails:

the syntaxe is :

local_user   the_mail_you_want

for your example:
user         user@xxxxxxxxxx

then just type makemap hash genericstable < genericstable


--
Nicolas Cartron


Message: 5
From: "Paul Shuttleworth" <paul@xxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Subject: RE: [cobalt-users] openwebmail -  user@xxxxxxxxxxxxxx
Date: Mon, 9 Dec 2002 13:49:32 -0000
Message-ID: <NEBBKCDBCLLJHFECACANGEEEDFAA.paul@xxxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
        charset="Windows-1252"
Content-Transfer-Encoding: 7bit
In-Reply-To: <>
Importance: Normal
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>



> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Mike Hughes
> Sent: 10 December 2002 13:13
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: [cobalt-users] openwebmail - user@xxxxxxxxxxxxxx
>
>
> Hi, on openwebmail when people send emails its always from
> user@xxxxxxxxxxxxxx rather than user@xxxxxxxxxxx I have tried the
> tutorial fix that comeswith openwebmail with no luck, how can I get it
> to send from user@xxxxxxxxxx??
>


A fix which I use from Bill B (thanks Bill)

<snip>

Using an idea suggested by Kim Schulz, I have came up with this and it
works for all users:

As root, Create a copy of the virtusertable for OWM:
   cd /etc/mail
   cp virtusertable virtusertable.owm
   perl -pi -e "s/www\.//g" virtusertable.owm

Set this up as a script to run hourly from cron.

Add this line to openwebmail.conf
   virtusertable           /etc/mail/virtusertable.owm

This will remove the 'www' from everyone, no need to reset any options.

- Bill B.
 <snip>


This make a copy of the virtusertable every hour which owm then uses, simple
and it works!!

Regards
Paul.


Message: 6
From: "Brent Sims" <listmail@xxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Subject: RE: [cobalt-users] php search script needed
Date: Mon, 9 Dec 2002 07:10:51 -0700
Message-ID: <>
MIME-Version: 1.0
Content-Type: text/plain;
        charset="US-ASCII"
Content-Transfer-Encoding: 7bit
In-Reply-To: <>
Importance: Normal
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>



> I am looking for an easy to setup yet secure php based
> search script to allow users to search 1500 + html docs
> for the specific text they want. The search needs to
> return the titles wit links and be sorted by published
> date, as the files are named by published date. (raq4)

http://www.freshmeat.net/

        There's plenty of choices available at the above listed link.

        Brent Sims
[>]

Message: 7
Message-ID: <>
From: "Steve Werby" <steve-lists@xxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
References: <20021209040801.30597.95368.Mailman@xxxxxxxxxxxxxxx> <>
Subject: Re: [cobalt-users] php search script needed
Date: Mon, 9 Dec 2002 10:34:16 -0500
Organization: Befriend Internet Services LLC
MIME-Version: 1.0
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

"Linuxman" <linuxman@xxxxxxxxxxxxxxxx> wrote:
> I am looking for an easy to setup yet secure php based search script to
> allow users to search 1500 + html docs for the specific text they want.
The
> search needs to return the titles wit links and be sorted by published
date,
> as the files are named by published date. (raq4)

As Brent mentioned search on freshmeat.net (or hotscripts.com).  I'm partial
to mnoGoSearch at http://www.mnogosearch.org/.  If you spend 10 minutes
reading the archives at
http://marc.theaimsgroup.com/?l=cobalt-users&w=2&r=2&s=php+search+engine&q=b
you'll find it and several other (of many) options mentioned by me and
others.

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/


Message: 8
User-Agent: Microsoft-Entourage/10.1.0.2006
Date: Mon, 09 Dec 2002 09:42:55 -0600
From: H2M Lists <lists@xxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Message-ID: <BA1A161F.4C55%lists@xxxxxxx>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Subject: [cobalt-users] How to list more than 15 users in user management - anyone?
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

Does anyone know how to change the default setting of showing 15 users per
page in the user management section in the siteadmin.  I have on average
about 35 or so users per domain, so I would like to set it so they just all
show up on one list instead of 3 separate lists of 15 each.

Thanks.

Message: 9
Date: Mon, 9 Dec 2002 10:44:43 -0500
Subject: Re: [cobalt-users] clear mailq
Content-Type: text/plain; charset=US-ASCII; format=flowed
Mime-Version: 1.0 (Apple Message framework v482)
From: Parker Morse <morse@xxxxxxxxxxx>
To: cobalt-users@xxxxxxxxxxxxxxx
Content-Transfer-Encoding: 7bit
In-Reply-To: <35402807.3682BEE5.024D2F18@xxxxxxx>
Message-Id: <22CE08E1-0B8D-11D7-8F29-0003938174B4@xxxxxxxxxxx>
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

On Saturday, December 7, 2002, at 02:23  PM, Gregg1492@xxxxxxx wrote:
Would someone please either send directions on how to clear the mailq or suggest another way to stop the problem.

Does your ability to see "mailq" mean you have CLI (SSH) access to your server? You imply that. You can clear the queue pretty easily from the command line, as root (I've removed email addresses below, but otherwise this is cut-and-paste):

[root mail]# mailq
/var/spool/mqueue/q1 is empty
                /var/spool/mqueue/q2 (1 request)
----Q-ID---- --Size-- -----Q-Time----- ------------Sender/Recipient------------
gB4KIAw18128      642 Wed Dec  4 15:18 <x@xxxxx>
                 (Deferred: Name server: x.x.net.: host name lookup)
                                       <x@xxxxx>
                /var/spool/mqueue/q3 (1 request)
----Q-ID---- --Size-- -----Q-Time----- ------------Sender/Recipient------------
gB5KRaw15024     1405 Thu Dec  5 15:27 <x@xxxxx>
                 (Deferred: Connection refused by x.x.edu.)
                                       <x@xxxxx>
/var/spool/mqueue/q4 is empty
                Total Requests: 2
[root mail]#

Notice I've got two files in the mail queue. There are four queue directories here - /var/spool/mqueue/q1 through q4. My queued messages are in q2 and q3. Their file names are under the "Q-ID" column of the mailq output. So I could remove them from the queue with the following commands:

[root mail]# rm /var/spool/mqueue/q2/gB4KIAw18128
[root mail]# rm /var/spool/mqueue/q3/gB5KRaw15024

...and I'd have an empty queue.

Make sense?

Of course, if you've really got 84 pending messages, I suspect that the queue itself is a symptom of a larger problem!

pjm



Message: 10
Message-ID: <>
From: "Herby K" <mad1.z@xxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
References: <BA1A161F.4C55%lists@xxxxxxx>
Subject: Re: [cobalt-users] How to list more than 15 users in user management - anyone?
Date: Mon, 9 Dec 2002 16:55:45 +0100
MIME-Version: 1.0
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

in the Usermanagement go to the "Set User Defaults"

HTH
Herby
----- Original Message -----
From: "H2M Lists" <lists@xxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Monday, December 09, 2002 4:42 PM
Subject: [cobalt-users] How to list more than 15 users in user management -
anyone?


> Does anyone know how to change the default setting of showing 15 users per
> page in the user management section in the siteadmin.  I have on average
> about 35 or so users per domain, so I would like to set it so they just
all
> show up on one list instead of 3 separate lists of 15 each.
>
> Thanks.
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>

Message: 11
From: "www.RaQTweak.com" <mailinglists@xxxxxxxxxxxx>
To: cobalt-users@xxxxxxxxxxxxxxx
Date: Mon, 9 Dec 2002 16:57:16 +0100
Message-Id: <20021209155716.M10379@xxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Subject: [cobalt-users] Re: How to list more than 15 users in user management - anyone?
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

> Does anyone know how to change the default setting of showing 15 users per
> page in the user management section in the siteadmin.  I have on average
> about 35 or so users per domain, so I would like to set it so they just all
> show up on one list instead of 3 separate lists of 15 each.
>
> Thanks.

Yup.

In the GREEN section (not the server config, but the SITE config) click on
the "user defaults" buttom. (nexto add user)
There it is :)

Good luck!

www.RAQTWEAK.com

Message: 12
From: "Steven Depuydt - www.BeNe.WS" <Steven@xxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Subject: RE: [cobalt-users] HOWTO: Rebuild PostgreSQL 'cobalt' database due to corrupt quota table
Date: Mon, 9 Dec 2002 17:04:42 +0100
Message-ID: <>
MIME-Version: 1.0
Content-Type: text/plain;
        charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Importance: Normal
In-Reply-To: <200212081043.06794.bruce@xxxxxxxxxx>
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

Hello Bruce,

I followed everything but I have the following error when I erase the
'cobalt' database: (After the DEEP BREATH)


[postgres@ns1 pgsql]$ destroydb cobalt
Connection to database 'template1' failed.
No pg_hba.conf entry for host localhost, user postgres, database
template1
destroydb: database destroy failed on cobalt.

----------

In my original pg_hba.conf file I had the following line:
Local COBALT crypt (an not local ALL crypt)

I changed this into

Local cobalt trust  or must this be local ALL trust ??

Can you give me some more advise ?

Thanks

Steven Depuydt
www.BeNe.WS

-----Oorspronkelijk bericht-----
Van: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] Namens Bruce Timberlake
Verzonden: zondag 8 december 2002 19:43
Aan: cobalt-users@xxxxxxxxxxxxxxx
Onderwerp: [cobalt-users] HOWTO: Rebuild PostgreSQL 'cobalt' database
due to corrupt quota table

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> Can you tell me what you have done (DETAILED) because I have the
> same problems with my RAQ3I and I have also the same error message
> with DiskUsage.

HOWTO: Rebuild the PostgreSQL database "cobalt" due to corrupt quota
table

CAUTION: This procedure completely deletes and recreates the 'cobalt'
database. Use with care, as this database holds all the info about
every domain on your RaQ. If you mess it up, you might as well
reformat the drive and start over...

NOTE: This procedure should work for RaQ3 and RaQ4.  RaQ3 is the model
with this problem, but the database is the same between the 2
systems.


*** START OF PROCEDURE ***

MAKE IT SO THAT WE CAN GET EASIER ACCESS TO THE DATABASE:

- -  Establish shell session as root
- -  cd /home/pgsql
- -  cp pg_hba.conf pg_hba.conf.safe
- -  Edit pg_hba.conf and change "local all crypt" to "local all trust"
- -  su - postgres
- -  psql cobalt

CONFIRM THE ERROR:

- -  At "cobalt=>" prompt type "SELECT * FROM quota;" and press Enter.

   If you see "ERROR:  cannot find attribute 1 of relation quota" then
the quota table is corrupt

   If you do not get an error, STOP. The quota table is not the
problem.

- -  \q (to exit psql tool)

SAVE THE DATABASE SCHEMA:

- -  pg_dump cobalt > cobalt-schema

REMOVE THE QUOTA STUFF (SINCE IT'S BROKEN ANYWAY):

- -  Edit 'cobalt-schema' and remove the 'CREATE TABLE "quota" ( );"
section (spread over 2-3 lines)
- -  Remove the 'COPY "quota" FROM stdin;' line (end of schema file)
- -  Exit editor and save changes

TAKE DEEP BREATH AND DESTROY EXISTING (but corrupt) 'cobalt' DATABASE:

- -  destroydb cobalt
- -  createdb cobalt

REBUILD THE 'cobalt' DATABASE FROM THE SCHEMA FILE:

- -  psql cobalt < cobalt-schema
- -  exit (to become root again)

RUN SCRIPT TO REBUILD QUOTA TABLE:

- -  /usr/local/sbin/swatch

CHECK TO MAKE SURE IT WORKED:

- -  su - postgres
- -  psql cobalt
- -  SELECT * FROM quota;
        You should not get an error message this time...
- -  \q

- -  Go into the UI and try stuff to make sure UI works too

- -  exit (to become root)

CLEAN EVERYTHING UP:

- -  rm cobalt-schema
- -  mv pg_hba.conf.safe pg_hba.conf

*** END OF PROCEDURE ***

- --
Bruce Timberlake

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE985K5vLA2hUZ9kgwRAvCKAJ9VEeQ5o03ocvGFWbQQE71DNOaHxwCfQANE
JbfmngZPrFLt4IKAxxaH6AU=
=5Wag
-----END PGP SIGNATURE-----

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.427 / Virus Database: 240 - Release Date: 6/12/2002


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.427 / Virus Database: 240 - Release Date: 6/12/2002


Message: 13
Message-Id: <5.2.0.9.0.20021209090513.028bb380@xxxxxxxxxxxxxxxxxxxxx>
Date: Mon, 09 Dec 2002 09:12:49 -0700
To: cobalt-users@xxxxxxxxxxxxxxx
From: "Dawn D. Pfaltzgraff" <ddpfz@xxxxxxxxxx>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Subject: [cobalt-users] HELP Spam attack
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

Need some help on this one.
We are running a RAQ 3 and I have been receiving the mail for the admin account. About Wednesday of last week I noticed that we started to get a WHOLE BUNCH of Mail Delivery unknown. So I went into the maillog and notice that someone appears to be trying to use our server as a relay for spam. What I don't understand, is the following: We are using poprelayd and we have are caught up on all the patches from Cobalt so I KNOW we got the fix for poprelayd way back in July. I have done tests from abuse.net and it says that none of our relays are open??? Does it have to be someone inside our network? How can I track this down. Please let me know what other info I might have that could be helpful. I really at a lost here. Thanks in advance.

EXAMPLE OF MAIL LOG  ( you'll see the mail sent to all those aol users.)
Dec 9 07:41:44 sage in.qpopper[7644]: (v?) Unable to get canonical name of client 207.174.213.122: Unknown host (1) Dec 9 07:41:44 sage in.qpopper[7644]: (v?) POP login by user "rseedorf" at (207.174.213.122) 207.174.213.122 Dec 9 07:41:46 sage in.qpopper[7645]: (v?) Unable to get canonical name of client 206.168.65.20: Unknown host (1) Dec 9 07:41:53 sage sendmail[7665]: NOQUEUE: Null connection from [206.168.65.20]
Dec  9 07:42:03 sage sendmail[7666]: gethostbyaddr(206.168.65.251) failed: 1
Dec  9 07:42:03 sage sendmail[7666]: gethostbyaddr(206.168.65.250) failed: 1
Dec 9 07:42:03 sage sendmail[7666]: HAA07666: from=admin, size=15963, class=0, pri=615963, nrcpts=20, msgid=<200212091442.HAA07666@xxxxxxxxxxxxxxx>, relay=admin@localhost Dec 9 07:42:05 sage sendmail[7668]: HAA07666: to=delphisman@xxxxxxx,jcallaham1@xxxxxxx,jcallahan2@xxxxxxx,shacked44@xxxxxxx,shacked5@xxxxxxx,gammonja@xxxxxxx,gammonje@xxxxxxx,shackee@xxxxxxx,aholnewrld@xxxxxxx,lamonique1@xxxxxxx ,pltrobert@xxxxxxx,delphiserv@xxxxxxx,tlrubin@xxxxxxx,delphisis@xxxxxxx,pltroiani@xxxxxxx,jcallagy@xxxxxxx,gammonite@xxxxxxx,gammonites@xxxxxxx,jcallah@xxxxxxx,missyheel@xxxxxxx, ctladdr=admin (110/27), delay=00:00:02, xdelay=00:00:02, mailer=esmtp, relay=mailin-04.mx.aol.com. [64.12.136.153], stat=Sent (OK) Dec 9 07:42:29 sage sendmail[7597]: HAA07597: from=<test@xxxxxxxxxxxxxxxxxx>, size=0, class=0, pri=0, nrcpts=0, proto=SMTP, relay=CPE-203-45-170-23.qld.bigpond.net.au [203.45.170.23]

Dawn


Dawn D. Pfaltzgraff
System Administrator
Premier Systems -plains.net
ddpfz@xxxxxxxxxx
(970-848-0475)


Message: 14
Mime-Version: 1.0
Message-Id: <>
Date: Mon, 9 Dec 2002 09:29:42 -0600
To: cobalt-users@xxxxxxxxxxxxxxx
From: Greg Hewitt-Long <cobaltusers@xxxxxxxxxxxxxxxxxxx>
Content-Type: text/plain; charset="us-ascii"
Subject: [cobalt-users] [RAQ3] Apache User-Agent blocking for all sites
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

I'm fed up with a number of bots and various user-agents slamming one of our servers, and I have a REAL problem with one particular bot using ANY of our resources at all, so I've taken the decision to block the access to ALL virtual sites at once - I figured that the best way to do this is either by altering the httpd.conf or access.conf - someone with a little more apache knowledge than me scan this and advise if this is the right/best way to ban access in access.conf:

SetEnvIfNoCase User-Agent "^EmailSiphon" bad_bot
SetEnvIfNoCase User-Agent "^EmailWolf" bad_bot

<Directory "/home/sites/*/">
        Order Allow,Deny
        Allow from all
        Deny from env=bad_bot
</Directory>



tia

Greg Hewitt-Long
--
http://www.webyourbusiness.com/
Providers of E-Commerce Software &
Web Design Consultancy and Services.
PH: (970) 266-0195   FAX: (970) 266-0158

Message: 15
Message-Id: <m18LR9B-0000LRC@xxxxxxxxxxxxxx>
Content-Type: text/plain;
  charset="iso-8859-1"
From: Larry Smith <lesmith@xxxxxxxxx>
Organization: ECSIS.NET
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] HELP Spam attack
Date: Mon, 9 Dec 2002 10:52:45 -0600
References: <5.2.0.9.0.20021209090513.028bb380@xxxxxxxxxxxxxxxxxxxxx>
In-Reply-To: <5.2.0.9.0.20021209090513.028bb380@xxxxxxxxxxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Sender: cobalt-users-admin@xxxxxxxxxxxxxxx
Precedence: bulk
Reply-To: cobalt-users@xxxxxxxxxxxxxxx
List-Help: <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=help>
List-Post: <mailto:cobalt-users@xxxxxxxxxxxxxxx>
List-Subscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=subscribe>
List-Id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
List-Unsubscribe: <http://list.cobalt.com/mailman/listinfo/cobalt-users>,
        <mailto:cobalt-users-request@xxxxxxxxxxxxxxx?subject=unsubscribe>
List-Archive: <http://list.cobalt.com/pipermail/cobalt-users/>

On Monday 09 December 2002 10:12 am, Dawn D. Pfaltzgraff wrote:
> Does it have to be someone inside our network?  How can
> I track this down.  Please let me know what other info I might have that
> could be helpful.

Dawn,

No, but it appears to be from your network:

<QUOTE>
Dec  9 07:42:03 sage sendmail[7666]: gethostbyaddr(206.168.65.251) failed: 1
Dec  9 07:42:03 sage sendmail[7666]: gethostbyaddr(206.168.65.250) failed: 1
Dec  9 07:42:03 sage sendmail[7666]: HAA07666: from=admin, size=15963,
class=0, pri=615963, nrcpts=20,
msgid=<200212091442.HAA07666@xxxxxxxxxxxxxxx>, relay=admin@localhost
</QUOTE>

It appears that 206.168.65.1 has a "name" - great.plains.net - BUT - that
none of your other IP addresses in this block (206.168.65.0/24) have been
assigned DNS names.  While the combination of the various logs is required to
really tell what is happening, ( auth, secure, maillog) it appears that
either IP 206.168.65.250 or IP 206.168.65.251 is sending the mail - which
also appears to be your IP range (eg inhouse)...

--
Larry Smith
SysAd ECSIS.NET
sysad@xxxxxxxxx




_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users

Dawn D. Pfaltzgraff
System Administrator
Premier Systems -plains.net
ddpfz@xxxxxxxxxx
(970-848-0475)