freebsd.munk.me.uk - Comments

techinterview: Forwarding Mail To Gmail

nospam@example.com (techinterview) — Wed, 14 Jul 2010 06:33:40 +0100

Does any body have code to send email using google smtp server (smtp.google.com)?

Anonymous: Portupgrade fails to upgrade dependencies

nospam@example.com () — Tue, 01 Jun 2010 22:24:50 +0100

make deinstall reinstall

Ruslan: Installing Exim, SASLAuthd, ClamAV and SpamAssassin on FreeBSD 6.2

nospam@example.com (Ruslan) — Mon, 18 May 2009 11:34:51 +0100

If authentication don't work correctly, check
exim -bV | grep Authenticators
Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa
uv got cyrus_sasl support. if u dont, uncomment lines in exim Makefile:
WITH_SASLAUTHD= yes
WITH_AUTH_SASL= yes
Then make rebuild your exim and reinstall it.

Good luck!

munk: Block Brute Force Attacks Against sshd and proftpd Using blockhosts

nospam@example.com (munk) — Sat, 21 Mar 2009 12:58:42 +0000

Thank you very much for that, excellent comments there much obliged.

Eventually I ended up moving SSH from the default port since noone uses my server now apart from me really...

Another option I was using / moved to using AFTER I'd used this blockhosts method was to use a nifty tool called grok to watch various logfiles for repeated failed authentication attempts. Once a threshold had been met for any IP address, grok would automatically add that IP address to a table which the pf firewall uses to block inbound traffic.

I don't think I added an article on that, I stopped updating this site some time ago as other things became more pressing(!)... would have made a good article though, grok is a really nice tool.

See here:

http://www.semicomplete.com/projects/grok/

there are a handful of emails I sent regarding my configuration on the grok mailing list as well, here for example:

http://groups.google.com/group/grok-users/browse_thread/thread/e8e756c0e5e01a5d

All the best.

Alexander Kuprikov: Block Brute Force Attacks Against sshd and proftpd Using blockhosts

nospam@example.com (Alexander Kuprikov) — Sat, 21 Mar 2009 04:34:37 +0000

Good article, but since hosts.allow is now serving for both allow and deny, mod_wrap (ProFTPD standalone) has issues with that...
also inetd is an old way to rund ProFTPD.... standalone is recommended.
The "better" (bustards still can connect to the server=USE FIREWALL) solution is in ProFTPD intself called mod_ban
just recompile ProFTPD with mod_ban
add those lines in your /usr/local/etc/proftpd.conf

CODE:

MaxLoginAttempts 1

  BanEngine on
  BanLog /var/log/proftpd-ban.log
  BanTable /var/db/proftpd/ban.tab

  # If the same client reaches the MaxLoginAttempts limit 2 times
  # within 10 minutes, automatically add a ban for that client that will expire after 24 hours.
  BanOnEvent MaxLoginAttempts 2/00:10:00 24:00:00

  # Configure a rule to automatically ban scripts looking for anonymous servers to which they can upload
  # will expire after ~100 hours
  BanOnEvent AnonRejectPasswords 1/01:00:00 99:99:99

  # Allow the FTP admin(-s) to manually add/remove bans
  BanControlsACLs all allow user vasya,john,rediska

  BanMessage "GO AWAY! [ %a ]"

restart your proftpd with /usr/local/etc/rc.d/proftpd restart
and that's it.

http://castaglia.org/proftpd/modules/mod_ban.html
at the end of the article there's an example.... just point to real location of your banlog and bantable i.e. /var/log/banlog and /var/db/proftpd/ban.tab (create dir proftpd in /var/db) - works like a charm.

BlockHosts still can be run for sshd and etc.

Jez: Expand shell globs using 'ctrl-z'

nospam@example.com (Jez) — Thu, 19 Feb 2009 21:16:25 +0000

Type in 'fg' on the commandline to put the last 'backgrounded' process back to the foreground (fg). See the man page for 'sh' or 'csh' for more info (look for 'Jobs').

Nate: Expand shell globs using 'ctrl-z'

nospam@example.com (Nate) — Thu, 19 Feb 2009 19:44:21 +0000

ctrl + z may be great but Im not sure how to go back... it says suspended and the process is still shown in PS anyone know how to go back to the program you suspended?

munk: Installing Exim, SASLAuthd, ClamAV and SpamAssassin on FreeBSD 6.2

nospam@example.com (munk) — Wed, 28 Jan 2009 11:29:48 +0000

This is fixed now, thanks again.

munk: Installing Exim, SASLAuthd, ClamAV and SpamAssassin on FreeBSD 6.2

nospam@example.com (munk) — Mon, 26 Jan 2009 10:31:33 +0000

Hi Brian,

Thanks for the heads up, yes it is a bit messed up for me on windows in firefox as well! I will try and sort it out when I get some time, bit busy right now but will leave reminder in inbox.

Cheers again,

Jez

Brian: Installing Exim, SASLAuthd, ClamAV and SpamAssassin on FreeBSD 6.2

nospam@example.com (Brian) — Mon, 26 Jan 2009 04:16:02 +0000

the formatting is kinda messed up in the example boxes... maybe it's just a mac thing, but it makes it difficult to read. I've made it through most of it, just having a hard time deciphering the testing of the debugging part.

floor Haverkamp: FTP Transfer Failure With A Firewall

nospam@example.com (floor Haverkamp) — Thu, 26 Jun 2008 15:46:25 +0100

Hello,
I am updating a website with extra textual information. The transfer of the XML data from my computer to the FTP server fails every time I try. So i can't upload the new XML version. The FTP server is disconnected every time! I tried it in the auto mode and in the text mode. Does anybody know what the problem is?
I hope to hear from anybody,
GReets
floor

James: ProFTPD Delay Whilst Authenticating

nospam@example.com (James) — Sun, 04 May 2008 12:06:15 +0100

Thanks! Have been putting up with this for a long time and this simple fix worked wonders :)

munk: Installing Exim, SASLAuthd, ClamAV and SpamAssassin on FreeBSD 6.2

nospam@example.com (munk) — Wed, 27 Feb 2008 01:10:54 +0000

Hey Darrin,

Thanks for those kind words, great to hear positive feedback!

I think the exim rc script was renamed from exim.sh to just 'exim' some time after I wrote the article... I'll change the line now to keep it up to date, thanks for that!

All the best.

Jez

Darrin Ward: Installing Exim, SASLAuthd, ClamAV and SpamAssassin on FreeBSD 6.2

nospam@example.com (Darrin Ward) — Tue, 26 Feb 2008 16:07:39 +0000

Munk,

I don't normally comment on blogs, but in this case, I just have to post to thank you for this article.

It was so very valuable to me in setting up a new FreeBSD server (which I knew nothing about, moving from a mandrake box). Genius - thanks you very much! It was literally cut and past your code line by line, and it worked great.

PS.. One very small thing though... Your line for restarting exim after the installation spamd and clamxv is "root@win /root# /usr/local/etc/rc.d/exim.sh restart" - for mem this should have been "root@win /root# /usr/local/etc/rc.d/exim restart" (no ".sh" file extension). I got a hot flash once I saw the error after typing your command, but a quick ls unveiled the naming discrepancy.

Darrin Ward.

Jez Hancock: Installing Exim, SASLAuthd, ClamAV and SpamAssassin on FreeBSD 6.2

nospam@example.com (Jez Hancock) — Thu, 24 Jan 2008 18:01:07 +0000

I think you should be able to just remove the check_spam router so that the message isn't routed to the spam file. You also want to remove the warnings set in the exim conf in the data acl but it wouldn't harm anything if they're left.