顯示文章

這裡允許您檢視這個會員的所有文章。請注意, 您只能看見您有權限閱讀的文章。


文章 - askpc

頁: [1] 2
1
肉腳版 / 一個網路問題-色情網站的頻寬
« 於: 2002-08-13 15:41 »
一張圖算100k好了
 幾乎同一時間2000人次來溜灠
那就是200M的流量
而同一頁又有十張圖,那就是2g
流量,
 那麼大的頻寬,不是要另外向isp申請嗎
 為何那些色情網站能申請得到
  即便在美國,好像全露在性交旳也是非法的吧
 為何警方就是抓不到呢

2
鳥大大教授(呵..說過了,因為您是博士嘛)
剛去您網站找到了
 最低安裝是以下選幾項
_____________
Network Support
Dialup Support
Messaging and Web Tools
Router/Firewall
Network/Managed Workstation
Utilities
Software Development
Kernel Development
__________
以上部分小弟沒選到是utilities 和dialup support
 是否前者就是影響到kde選單沒中文的因素呢??

3
1鳥哥您所列的網址不能顯示呢???
2謝謝myz先生,等下我就拔下硬碟換專跑紅帽的那個試
 不過您的方法
 是否裝了之後那個kde拉開後的選單就都能有中文了呢???
還是只是解決了不能中文輸入的問題呢?/謝謝

4
感謝樓上大大
 第一個tarball問題我己解決
 就是第二個問題
 沒有rxvt xcin,kde選單裡各選項裡沒有中文
 (不像選everything時都是中文)

煩請大大們賜教 謝謝囉

5
之前我自己的紅帽是安裝時是選everything
但幾天前去某公家單位考試,因對方的機子是舊的PII
 選everything時根本就幾乎不動
 不得己就選部分安裝,然後實作時出了些問題
1編緝tar ball時會出問題(現在小弟己知沒選develpment software)
 會如此
2.就是沒有rxvt xcin (當然也不能中文輸入),kde選單拉開後
 每個選項當然也都不是中文
 不知這個要怎麼解決呢

 小弟在家裡把紅帽按當天情境重灌不選everything
 還是搞不懂問題出在那

 煩請各位大大幫我一下吧謝謝

6
看來原發文者是聯成學生
小弟以前也是在聯成學的
後來也改用紅帽
 我的經驗是, win98 openlinxu redhat 三機一體時
(紅帽最後灌和你的次序不同)
 1,安裝時,安裝多重開機畫面不會有火山口(calderal openlinux)的選項
 (但custom 的partition上卻有)
 你 必須重開機後去lilo裡面改才會有三重開機

2這樣的三機並存情形,以小弟的情形紅帽會在x-windows時非常慢
 甚至硬碟燈閃個不停.後來乾脆去買新硬碟專門跑紅帽
省得麻煩


3現在學linux幾乎人人都認為一定要紅帽,認為其他的一定不行
 可是呢..嘿!!不是替聯成打廣告(他們在中華電信首頁上面幾欄也打得很大了)
也不是為在聯成教書的網大大和鳥哥打廣告
事實上,openlinux
除了server部分不同外,其他都一樣,openlinux沒差到那
難不成chown usrer.group file這樣的指令會不一樣嗎???
 

而像ssh profptd,也一樣可以跑甚至安裝方式還幾乎一樣
(哈..我前幾天鼓起勇氣試果然也可以)
那些有的沒的套件如openwebmail proftpd的readme install檔裡
 不是常有寫適合unix-like嗎
那如果很少人玩的freebsd上都能跑起來
那在美國,是linux第二大品牌的openlinux又怎會跑不起來呢????


所以說呀,剛去聯成,或還是很菜時,你會很幹,說什麼被聯成騙了學的不是紅帽

久了後,比較熟時,就不太會了啦

7
而且,我剛去看臥龍三網站那個方法
 還得先改/etc/inetd.conf
砍掉全部ftp telnet以外的服務
 再進行host allow deny的工作
 這樣不是遠比用ipchains來得麻煩嗎??

8
再請問樓上twu2大大,那就是說用上面ipchains方法一樣可也以囉???
是嗎??
謝謝

9
一位網友,他去參加某公家單位考試(附考linux)
其中一題是限制只能某特定一台電腦,能連到你(考生)這台電腦的ftp telnte port
(也只能這個port服務)
由於當時考前就寫要考簡單防駭設定
 他就只讀ipchains的東西

 看到考題,直接就以這個思考方向來寫,沒用臥龍三那個網站方式解題
(例如在hosts.allow 寫
in.telnetd: 163.26.199.0/255.255.255.0, 163.26.198.1, .sample.edu.tw : Allow
in.proftpd: 163.26.199.0/255.255.255.0, 163.26.198.1, .sample.edu.tw : Allow

然後
:/etc/hosts.deny

in.telnetd: ALL : Deny
in.proftpd: ALL : Deny)

 結果好像錯(因只公布結果幾分)

為何不能寫ipchains -A input -p tcp -s (來源) -d (本機) (port數) -j ACCEPT


結果不是一樣嗎??

10
Linux 討論版 / dns
« 於: 2002-08-03 22:32 »
你就把自己斷線,
這樣ip就不同了,然後再連線
然後執行它
 ,然後開www,打入你自己的主機加網域名
 連得到就表示成功了呀

11
看不出來像鳥哥那樣斯文的人竟能跑完4000公尺
 厲害唷
 真是人不可貌相呀

12
嗯...這個老問題嘛(因為新問題都是有關postfix的)
 好像會出問題都是在
1./etc/sendmail.cf檔
 改某一行(舊文章裡有)把127.0.0.1改成都是0就可
2.或/etc/sendmail.cw
寫入自己的主機或ip(這個在openlinux裡的0
 不過舊文裡好像紅帽的也有

3.及/etc/mail/access檔改一改

4你的滴嗯a細(dns)沒設好所以.....



ps:嘿...偶竟然也有教人家的一天,呵...

13
哦,對那年也是和你一樣30歲
^-^
 呵..把鳥大大給嚇到了吧

 不過他是明明可以向班長報備不舒服
 但因自尊心或愛面子
 都不說硬撐才.....

14
以前在聯成被你教(3月時周日班第一至三周)
就聽你說你常徹夜不睡,
 所以要問你別早上12點以前打來


 長期這樣下來
 難怪身體不好

 聽說你要去當兵了啦你是博士是不用考的當然預官
 告訴你哦,小弟當兵時也是預官(政戰)
那年,民87年48期第一梯受預官訓就有一位成大博士(好像是電機或化工的吧)
活活操死,(身體不好又熱又硬撐)
 那年在營中的我們聽說外面電視有報,
 台南知母義117師師長還為此事親自登門向他們父母道歉呢


 呵...不是要嚇你哦,只是看你上面醫生對你說的情形那麼差
 怕你...也///////....
 反正快快好好養身體吧

15
感謝感謝樓上的大大們 :lol:

16
久抖媽 de
上面那位twu2先生說policy是ACCEPT所以我寫的那個等於是白寫
??
之前我看網站教學(linuxfab那個)
它說先寫-P input deny後再寫特定的input aceept都會失效
所以我才像上面那樣寫(先預定P全input accept ,再寫特定幾個規則
 讓它變成只能少數port能連(這觀念對嗎???))
 實作確實也是

 可是聽完t先生說法,我改試別法,我先寫特定的input accept幾條規則後
 才在"最後面"寫ipchians -P input DENY
結果和ipchians -P input DENY寫"最前面"一樣,全不能連進去
(嗚..我現在在網咖,把自己擋在外面了啦)

17
這是nmap自己的情形
[root@trytest /root]# nmap localhosts |more
                                                                               
Starting nmap V. 2.3BETA10 by Fyodor (fyodor@dhp.com, www.insecure.org/nmap/)
Interesting ports on localhosts (127.0.0.1):
Port    State       Protocol  Service
9       open        tcp       discard
13      open        tcp       daytime
21      open        tcp       ftp
22      open        tcp       ssh
23      open        tcp       telnet
25      open        tcp       smtp
37      open        tcp       time
53      open        tcp       domain
79      open        tcp       finger
80      open        tcp       http
109     open        tcp       pop-2
110     open        tcp       pop-3
111     open        tcp       sunrpc
113     open        tcp       auth
143     open        tcp       imap2
512     open        tcp       exec
513     open        tcp       login
514     open        tcp       shell
540     open        tcp       uucp
786     open        tcp       concert
885     open        tcp       unknown
886     open        tcp       unknown
901     open        tcp       unknown
1024    open        tcp       unknown
6000    open        tcp       X11

18
我用ipchains -F先將規則全刪掉
 後in out forward都先設成ACCEPT(因我先設deny的話都會後面設的都失效)
然後ipchains -A input -p tcp -s 0/0 -d ( 我主機名) 21 -j ACCEPT
然後又再加上port22 23 80等只剩七個
以下是我ipchains -L的情形
[root@trytest /root]# ipchains -L
Chain input (policy ACCEPT):
target     prot opt     source                destination           ports
ACCEPT     tcp  ------  anywhere             192.168.0.37          any ->   ftp
ACCEPT     tcp  ------  anywhere             192.168.0.37          any ->   ssh
ACCEPT     tcp  ------  anywhere             192.168.0.37          any ->   teln
et
ACCEPT     tcp  ------  anywhere             192.168.0.37          any ->   www
ACCEPT     tcp  ------  anywhere             192.168.0.37          any ->   pop2
ACCEPT     tcp  ------  anywhere             192.168.0.37          any ->   pop3
ACCEPT     tcp  ------  anywhere             192.168.0.37          any ->   imap
2
Chain forward (policy ACCEPT):
Chain output (policy ACCEPT):

可是我用nmap掃自已卻顯示還有一堆port開放咧
為何呢??請大大們解惑一下
謝謝囉

19
上次小弟重灌,也是有類似問題
 但在kde什麼控制中心不知怎麼改就好了
 但這次,kde選單拉開,各個選項就是沒中文
 不知怎麼改才好呢
ps:上次我是灌時選custom然後是everything
但就是隨意選其中幾項,就這樣

20
愈改愈慘,連寄都不能寄到外面了
把main.cf貼出來請大大們幫忙看吧 >_<
# Global Postfix configuration file. This file lists only a subset
# of all 100+ parameters. See the sample-xxx.cf files for a full list.
#
# The general format is lines with parameter = value pairs. Lines
# that begin with whitespace continue the previous line. A value can
# contain references to other $names or ${name}s.
#
# NOTE - CHANGE NO MORE THAN 2-3 PARAMETERS AT A TIME, AND TEST IF
# POSTFIX STILL WORKS AFTER EVERY CHANGE.
                                                                               
# SOFT BOUNCE
#
# The soft_bounce parameter provides a limited safety net for
# testing.  When soft_bounce is enabled, mail will remain queued that
# would otherwise bounce. This parameter disables locally-generated
# bounces, and prevents the SMTP server from rejecting mail permanently
# (by changing 5xx replies into 4xx replies). However, soft_bounce
# is no cure for address rewriting mistakes or mail routing mistakes.
#
#soft_bounce = no
                                                                               
# LOCAL PATHNAME INFORMATION
#
# The queue_directory specifies the location of the Postfix queue.
# This is also the root directory of Postfix daemons that run chrooted.
# See the files in examples/chroot-setup for setting up Postfix chroot
# environments on different UNIX systems.
#
queue_directory = /var/spool/postfix
                                                                               
# The command_directory parameter specifies the location of all
# postXXX commands.  The default value is $program_directory.
#
command_directory = /usr/sbin
                                                                               
# The daemon_directory parameter specifies the location of all Postfix
# daemon programs (i.e. programs listed in the master.cf file). The
# default value is $program_directory. This directory must be owned
# by root.
#
daemon_directory = /usr/libexec/postfix
                                                                               
# QUEUE AND PROCESS OWNERSHIP
#
# The mail_owner parameter specifies the owner of the Postfix queue
# and of most Postfix daemon processes.  Specify the name of a user
# account THAT DOES NOT SHARE ITS USER OR GROUP ID WITH OTHER ACCOUNTS
# AND THAT OWNS NO OTHER FILES OR PROCESSES ON THE SYSTEM.  In
# particular, don't specify nobody or daemon. PLEASE USE A DEDICATED
# USER.
#
mail_owner = postfix
                                                                               
# The default_privs parameter specifies the default rights used by
# the local delivery agent for delivery to external file or command.
# These rights are used in the absence of a recipient user context.
# DO NOT SPECIFY A PRIVILEGED USER OR THE POSTFIX OWNER.
#
#default_privs = nobody
                                                                               
# INTERNET HOST AND DOMAIN NAMES
#
# The myhostname parameter specifies the internet hostname of this
# mail system. The default is to use the fully-qualified domain name
# from gethostname(). $myhostname is used as a default value for many
# other configuration parameters.
#
myhostname = trytest.yangguochang.adsldns.org
 #myhostname = virtual.domain.name
                                                                               
# The mydomain parameter specifies the local internet domain name.
# The default is to use $myhostname minus the first component.
# $mydomain is used as a default value for many other configuration
# parameters.
#
Mydomain = yangguochang.adsldns.org
                                                                               
# SENDING MAIL
#
# The myorigin parameter specifies the domain that locally-posted
# mail appears to come from. The default is to append $myhostname,
# which is fine for small sites.  If you run a domain with multiple
# machines, you should (1) change this to $mydomain and (2) set up
# a domain-wide alias database that aliases each user to
# user@that.users.mailhost.
#
myorigin = $myhostname
myorigin = $mydomain
                                                                               
# RECEIVING MAIL
                         # The inet_interfaces parameter specifies the network interface
# addresses that this mail system receives mail on.  By default,
# the software claims all active interfaces on the machine. The
# parameter also controls delivery of mail to user@[ip.address].
#
#inet_interfaces = all
#inet_interfaces = $myhostname
#inet_interfaces = $myhostname, localhost
                                                                               
# The mydestination parameter specifies the list of domains that this
# machine considers itself the final destination for. That includes
# Sendmail-style virtual domains hosted on this machine.
#
# Do not include Postfix-style virtual domains - those domains are
# specified elsewhere (see sample-virtual.cf, and sample-transport.cf).
#
# The default is $myhostname + localhost.$mydomain.  On a mail domain
# gateway, you should also include $mydomain. Do not specify the
# names of domains that this machine is backup MX host for. Specify
# those names via the relay_domains or permit_mx_backup settings for
# the SMTP server (see sample-smtpd.cf).
#
# The local machine is always the final destination for mail addressed
                                                                      # to user@[the.net.work.address] of an interface that the mail system
# receives mail on (see the inet_interfaces parameter).
#
# Specify a list of host or domain names, /file/name or type:table
# patterns, separated by commas and/or whitespace. A /file/name
# pattern is replaced by its contents; a type:table is matched when
# a name matches a lookup key.  Continue long lines by starting the
# next line with whitespace.
#
mydestination = $myhostname, localhost.$mydomain
#mydestination = $myhostname, localhost.$mydomain $mydomain
#mydestination = $myhostname, localhost.$mydomain, $mydomain,
#       mail.$mydomain, www.$mydomain, ftp.$mydomain
                                                                               
# TRUST AND RELAY CONTROL
                                                                               
# The mynetworks parameter specifies the list of "trusted" SMTP
# clients that have more privileges than "strangers".
#
# In particular, "trusted" SMTP clients are allowed to relay mail
# through Postfix.  See the smtpd_recipient_restrictions parameter
# in file sample-smtpd.cf.
# You can specify the list of "trusted" network addresses by hand
# or you can let Postfix do it for you (which is the default).
#
# By default (mynetworks_style = subnet), Postfix "trusts" SMTP
# clients in the same IP subnetworks as the local machine.
# On Linux, this does works correctly only with interfaces specified
# with the "ifconfig" command.
#
# Specify "mynetworks_style = class" when Postfix should "trust" SMTP
# clients in the same IP class A/B/C networks as the local machine.
# Don't do this with a dialup site - it would cause Postfix to "trust"
# your entire provider's network.  Instead, specify an explicit
# mynetworks list by hand, as described below.
#
# Specify "mynetworks_style = host" when Postfix should "trust"
# only the local machine.
#
#mynetworks_style = class
#mynetworks_style = subnet
#mynetworks_style = host
                                                                               
# Alternatively, you can specify the mynetworks list by hand, in
# which case Postfix ignores the mynetworks_style setting.
                                                                   # Alternatively, you can specify the mynetworks list by hand, in
# which case Postfix ignores the mynetworks_style setting.
#
# Specify an explicit list of network/netmask patterns, where the
# mask specifies the number of bits in the network part of a host
# address.
#
# You can also specify the absolute pathname of a pattern file instead
# of listing the patterns here. Specify type:table for table-based lookups
# (the value on the table right-hand side is not used).
#
mynetworks = 61.225.0.0/16, 192.168.0.0
#mynetworks = $config_directory/mynetworks
#mynetworks = hash:/etc/postfix/network_table
                                                                               
# The relay_domains parameter restricts what clients this mail system
# will relay mail from, or what destinations this system will relay
# mail to.  See the smtpd_recipient_restrictions restriction in the
# file sample-smtpd.cf for detailed information.
#
# By default, Postfix relays mail
# - from "trusted" clients whose IP address matches $mynetworks,
# - from "trusted" clients matching $relay_domains or subdomains thereof,
                                                                           
# - from untrusted clients to destinations that match $relay_domains
#   or subdomains thereof, except addresses with sender-specified routing.
# The default relay_domains value is $mydestination.
#
# In addition to the above, the Postfix SMTP server by default accepts mail
# that Postfix is final destination for:
# - destinations that match $inet_interfaces,
# - destinations that match $mydestination
# - destinations that match $virtual_maps.
# These destinations do not need to be listed in $relay_domains.
#
# Specify a list of hosts or domains, /file/name patterns or type:name
# lookup tables, separated by commas and/or whitespace.  Continue
# long lines by starting the next line with whitespace. A file name
# is replaced by its contents; a type:name table is matched when a
# (parent) domain appears as lookup key.
#
# NOTE: Postfix will not automatically forward mail for domains that
# list this system as their primary or backup MX host. See the
# permit_mx_backup restriction in the file sample-smtpd.cf.
#
relay_domains = $mydestination
# INTERNET OR INTRANET
                                                                               
# The relayhost parameter specifies the default host to send mail to
# when no entry is matched in the optional transport(5) table. When
# no relayhost is given, mail is routed directly to the destination.
#
# On an intranet, specify the organizational domain name. If your
# internal DNS uses no MX records, specify the name of the intranet
# gateway host instead.
#
# In the case of SMTP, specify a domain, host, host:port, [host]:port,
# [address] or [address]:port; the form [host] turns off MX lookups.
#
# If you're connected via UUCP, see also the default_transport parameter.
#
relayhost = $mydomain
#relayhost = gateway.my.domain
#relayhost = uucphost
#relayhost = [an.ip.add.ress]
                                                                               
# REJECTING UNKNOWN LOCAL USERS
#
# The local_recipient_maps parameter specifies optional lookup tables
# with all names (not addresses) of users that are local with respect
# to $mydestination and $inet_interfaces.  If this parameter is
# defined, then the SMTP server will reject mail for unknown local
# users.
#
# If you use the default Postfix local delivery agent for local
# delivery, uncomment the definition below.
#
# Beware: if the Postfix SMTP server runs chrooted, you may have to
# copy the passwd (not shadow) database into the jail. This is
# system dependent.
#
#local_recipient_maps = $alias_maps unix:passwd.byname
                                                                               
# INPUT RATE CONTROL
#
# The in_flow_delay configuration parameter implements mail input
# flow control. This feature is turned on by default, although it
# still needs further development (it's disabled on SCO UNIX due
# to an SCO bug).
#
# A Postfix process will pause for $in_flow_delay seconds before
                                                                     
# accepting a new message, when the message arrival rate exceeds the
# message delivery rate. With the default 50 SMTP server process
# limit, this limits the mail inflow to 50 messages a second more
# than the number of messages delivered per second.
#
# Specify 0 to disable the feature. Valid delays are 0..10.
#
#in_flow_delay = 1s
                                                                               
# ADDRESS REWRITING
#
# Insert text from sample-rewrite.cf if you need to do address
# masquerading.
#
# Insert text from sample-canonical.cf if you need to do address
# rewriting, or if you need username->Firstname.Lastname mapping.
                                                                               
# ADDRESS REDIRECTION (VIRTUAL DOMAIN)
#
# Insert text from sample-virtual.cf if you need virtual domain support.
                                                                               
# "USER HAS MOVED" BOUNCE MESSAGES
#
#
# Insert text from sample-relocated.cf if you need "user has moved"
# style bounce messages. Alternatively, you can bounce recipients
# with an SMTP server access table. See sample-smtpd.cf.
                                                                               
# TRANSPORT MAP
#
# Insert text from sample-transport.cf if you need explicit routing.
                                                                               
# ALIAS DATABASE
#
# The alias_maps parameter specifies the list of alias databases used
# by the local delivery agent. The default list is system dependent.
# On systems with NIS, the default is to search the local alias
# database, then the NIS alias database. See aliases(5) for syntax
# details.
#
# If you change the alias database, run "postalias /etc/aliases" (or
# wherever your system stores the mail alias file), or simply run
# "newaliases" to build the necessary DBM or DB file.
#
# It will take a minute or so before changes become visible.  Use
# "postfix reload" to eliminate the delay.
                                           
alias_maps = hash:/etc/aliases
#alias_maps = hash:/etc/aliases, nis:mail.aliases
#alias_maps = netinfo:/aliases
                                                                               
# The alias_database parameter specifies the alias database(s) that
# are built with "newaliases" or "sendmail -bi".  This is a separate
# configuration parameter, because alias_maps (see above) may specify
# tables that are not necessarily all under control by Postfix.
#
#alias_database = dbm:/etc/aliases
#alias_database = dbm:/etc/mail/aliases
alias_database = hash:/etc/aliases
#alias_database = hash:/etc/aliases, hash:/opt/majordomo/aliases
                                                                               
# ADDRESS EXTENSIONS (e.g., user+foo)
#
# The recipient_delimiter parameter specifies the separator between
# user names and address extensions (user+foo). See canonical(5),
# local(8), relocated(5) and virtual(5) for the effects this has on
# aliases, canonical, virtual, relocated and .forward file lookups.
# Basically, the software tries user+foo and .forward+foo before
# trying user and .forward.
#
       
#recipient_delimiter = +
                                                                               
# DELIVERY TO MAILBOX
#
# The home_mailbox parameter specifies the optional pathname of a
# mailbox file relative to a user's home directory. The default
# mailbox file is /var/spool/mail/user or /var/mail/user.  Specify
# "Maildir/" for qmail-style delivery (the / is required).
#
#home_mailbox = Mailbox
#home_mailbox = Maildir/
                                                                               
# The mail_spool_directory parameter specifies the directory where
# UNIX-style mailboxes are kept. The default setting depends on the
# system type.
#
#mail_spool_directory = /var/mail
#mail_spool_directory = /var/spool/mail
                                                                               
# The mailbox_command parameter specifies the optional external
# command to use instead of mailbox delivery. The command is run as
# the recipient with proper HOME, SHELL and LOGNAME environment settings.
# Exception:  delivery for root is done as $default_user.
#
# Other environment variables of interest: USER (recipient username),
# EXTENSION (address extension), DOMAIN (domain part of address),
# and LOCAL (the address localpart).
#
# Unlike other Postfix configuration parameters, the mailbox_command
# parameter is not subjected to $parameter substitutions. This is to
# make it easier to specify shell syntax (see example below).
#
# Avoid shell meta characters because they will force Postfix to run
# an expensive shell process. Procmail alone is expensive enough.
#
# IF YOU USE THIS TO DELIVER MAIL SYSTEM-WIDE, YOU MUST SET UP AN
# ALIAS THAT FORWARDS MAIL FOR ROOT TO A REAL USER.
#
#mailbox_command = /some/where/procmail
#mailbox_command = /some/where/procmail -a "$EXTENSION"
                                                                               
# The mailbox_transport specifies the optional transport in master.cf
# to use after processing aliases and .forward files. This parameter
# has precedence over the mailbox_command, fallback_transport and
# luser_relay parameters.
#
# Specify a string of the form transport:nexthop, where transport is
# the name of a mail delivery transport defined in master.cf.  The
# :nexthop part is optional. For more details see the sample transport
# configuration file.
#
#mailbox_transport = lmtp:unix:/file/name
#mailbox_transport = cyrus
                                                                               
# The fallback_transport specifies the optional transport in master.cf
# to use for recipients that are not found in the UNIX passwd database.
# This parameter has precedence over the luser_relay parameter.
#
# Specify a string of the form transport:nexthop, where transport is
# the name of a mail delivery transport defined in master.cf.  The
# :nexthop part is optional. For more details see the sample transport
# configuration file.
#
#fallback_transport = lmtp:unix:/file/name
#fallback_transport = cyrus
#fallback_transport =
                                                                               
# The luser_relay parameter specifies an optional destination address
# for unknown recipients.  By default, mail for unknown local recipients
# is bounced.
#
# The following expansions are done on luser_relay: $user (recipient
# username), $shell (recipient shell), $home (recipient home directory),
# $recipient (full recipient address), $extension (recipient address
# extension), $domain (recipient domain), $local (entire recipient
# localpart), $recipient_delimiter. Specify ${name?value} or
# ${name:value} to expand value only when $name does (does not) exist.
#
# luser_relay works only for the default Postfix local delivery agent.
#
#luser_relay = $user@other.host
#luser_relay = $local@other.host
#luser_relay = admin+$local
                                                                               
# JUNK MAIL CONTROLS
#
# The controls listed here are only a very small subset. See the file
# sample-smtpd.cf for an elaborate list of anti-UCE controls.
                                                                               
# The header_checks parameter specifies an optional table with patterns
# that each logical message header is matched against, including
# headers that span multiple physical lines.  Patterns are matched
                                                                      # in the specified order, and the search stops upon the first match.
# When a pattern matches, what happens next depends on the associated
# action that is specified in the right-hand side of the table:
#
# REJECT the entire message is rejected.
# REJECT text.... The text is sent to the originator.
# IGNORE the header line is silently discarded.
# WARN   the header is logged (not rejected) with a warning message.
# WARN text... as above, and the text is logged, too.
#
# These patterns do not apply to MIME headers in the message body.
#
# See also the body_checks example in the sample-filter.cf file.
#
#header_checks = regexp:/etc/postfix/header_checks
                                                                               
# FAST ETRN SERVICE
#
# Postfix maintains per-destination logfiles with information about
# deferred mail, so that mail can be flushed quickly with the SMTP
# "ETRN domain.name" command, or by executing "sendmail -qRdomain.name".
#
# By default, Postfix maintains deferred mail logfile information
# only for destinations that Postfix is willing to relay to (as
# specified in the relay_domains parameter). For other destinations,
# Postfix attempts to deliver ALL queued mail after receiving the
# SMTP "ETRN domain.name" command, or after execution of "sendmail
# -qRdomain.name". This can be slow when a lot of mail is queued.
#
# The fast_flush_domains parameter controls what destinations are
# eligible for this "fast ETRN/sendmail -qR" service.
#
#fast_flush_domains = $relay_domains
#fast_flush_domains =
                                                                               
# SHOW SOFTWARE VERSION OR NOT
#
# The smtpd_banner parameter specifies the text that follows the 220
# code in the SMTP server's greeting banner. Some people like to see
# the mail version advertised. By default, Postfix shows no version.
#
# You MUST specify $myhostname at the start of the text. That is an
# RFC requirement. Postfix itself does not care.
#
#smtpd_banner = $myhostname ESMTP $mail_name
#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
                                                            # PARALLEL DELIVERY TO THE SAME DESTINATION
#
# How many parallel deliveries to the same user or domain? With local
# delivery, it does not make sense to do massively parallel delivery
# to the same user, because mailbox updates must happen sequentially,
# and expensive pipelines in .forward files can cause disasters when
# too many are run at the same time. With SMTP deliveries, 10
# simultaneous connections to the same domain could be sufficient to
# raise eyebrows.
#
# Each message delivery transport has its XXX_destination_concurrency_limit
# parameter.  The default is $default_destination_concurrency_limit for
# most delivery transports. For the local delivery agent the default is 2.
                                                                               
#local_destination_concurrency_limit = 2
#default_destination_concurrency_limit = 10
                                                                               
# DEBUGGING CONTROL
#
# The debug_peer_level parameter specifies the increment in verbose
# logging level when an SMTP client or server host name or address
# matches a pattern in the debug_peer_list parameter.
#
debug_peer_level = 2
                                                                               
# The debug_peer_list parameter specifies an optional list of domain
# or network patterns, /file/name patterns or type:name tables. When
# an SMTP client or server host name or address matches a pattern,
# increase the verbose logging level by the amount specified in the
# debug_peer_level parameter.
#
#debug_peer_list = 127.0.0.1
#debug_peer_list = some.domain
                                                                               
# The debugger_command specifies the external command that is executed
# when a Postfix daemon program is run with the -D option.
#
# Use "command .. & sleep 5" so that the debugger can attach before
# the process marches on. If you use an X-based debugger, be sure to
# set up your XAUTHORITY environment variable before starting Postfix.
#
debugger_command =
         PATH=/usr/bin:/usr/X11R6/bin
         xxgdb $daemon_directory/$process_name $process_id & sleep 5
                                                                               
# INSTALL-TIME CONFIGURATION INFORMATION
                                             #
# The following parameters are used when installing a new Postfix version.
#
# sendmail_path: The full pathname of the Postfix sendmail command.
# This is the Sendmail-compatible mail posting interface.
#
sendmail_path = /usr/sbin/sendmail
                                                                               
# newaliases_path: The full pathname of the Postfix newaliases command.
# This is the Sendmail-compatible command to build alias databases.
#
newaliases_path = /usr/bin/newaliases
                                                                               
# mailq_path: The full pathname of the Postfix mailq command.  This
# is the Sendmail-compatible mail queue listing command.
#
mailq_path = /usr/bin/mailq
                                                                               
# setgid_group: The group for mail submission and queue management
# commands.  This must be a group name with a numerical group ID that
# is not shared with other accounts, not even with the Postfix account.
#
setgid_group = postdrop
# manpage_directory: The location of the Postfix on-line manual pages.
#
manpage_directory = /usr/local/man
                                                                               
# sample_directory: The location of the Postfix sample configuration files.
#
sample_directory = /etc/postfix
                                                                               
# readme_directory: The location of the Postfix README files.
#
readme_directory = no

21
小弟改用postfix
telnet localhost 25
telnet localhost 110 都正常
但就是不能收,查bbs.openfind.com舊文
章它說查 /var/log/maillog
果然是有不正常訊息
 可否請先進們教小弟如何改正它
Jul 28 17:20:42 trytest postfix/smtpd[26105]: reject: RCPT from webmail0-2.hinet
.net[168.95.4.235]: 554 <root@yangguochang.adsldns.org>: Recipient address rejec
ted: Relay access denied; from=<dakahow@ms51.hinet.net> to=<root@yangguochang.ad
sldns.org>
Jul 28 17:20:48 trytest postfix/smtpd[26105]: disconnect from webmail0-2.hinet.n
et[168.95.4.235]
Jul 28 17:29:06 trytest postfix/smtpd[26144]: connect from webmail0-2.hinet.net[
168.95.4.235]
Jul 28 17:29:06 trytest postfix/smtpd[26144]: 73AF71EF146: client=webmail0-2.hin
et.net[168.95.4.235]
Jul 28 17:29:06 trytest postfix/smtpd[26144]: reject: RCPT from webmail0-2.hinet
.net[168.95.4.235]: 554 <root@yangguochang.adsldns.org>: Recipient address rejec
ted: Relay access denied; from=<dakahow@ms51.hinet.net> to=<root@yangguochang.ad
sldns.org>
Jul 28 17:29:11 trytest postfix/smtpd[26144]: disconnect from webmail0-2.hinet.n
et[168.95.4.235]
Jul 28 17:32:48 trytest postfix/smtpd[26193]: connect from webmail0-2.hinet.net[
168.95.4.235]
謝謝囉

22
標題太長,後面有loss
掉,小弟是指關掉只剩所要的四個port

23
我看另一個站它是在/etc/inetd.d關的
不過rh7.2並沒此檔
難道要在/etc/services中
在那麼多行中一個一個關嗎???

謝謝大大們 :(  :(  :(

24
肉腳版 / 這個linuxfab.cx站這樣寫有寫錯嗎??
« 於: 2002-07-27 23:04 »
有一頁在教設設火牆,
它對內的設定如下
網域                虛擬網域
網路號         192.168.1.0
網路遮罩        255.255.255.0

閘道(gateway) 192.168.1.1
然後它下頁如這個這樣寫
#############################################
以 eth1 做為對內的網路介面,其虛擬 IP 位址為 192.168.1.0 ~ 192.168.1.255,因為其第一個為網路號碼,最後一個為廣播號,
<font color=red>所以可用的虛擬 IP 為 192.168.0.1 ~ 192.168.255.254,我們將閘道器(gateway)設為 192.168.0.1、</font>子網路遮罩設為 255.255.255.0,將 192.168.1.2 ~ 192.168.1.254 之間的 IP 分配給內部的機器,之後內部的機器就可以互相通訊(‘ping’),但對於要連出去,還需要一個步驟,那就是使用一支程式,ipchains 來達成這個目的。先針對上述的問題,如果要讓內部的機器連接到外部的網路,可先執行:



 /sbin/ipchains -A forward –s 192.168.0.0/24 - d 0.0.0.0/0  -j MASQ
/sbin/ipchains -P forward DENY

#########################################

 怎麼會有這段話呢""所以可用的虛擬 IP 為 192.168.0.1 ~ 192.168.255.254,"
 按前述設定
應該是192.168.1.2 ~ 192.168.1.254 吧
而其後的ipchains也該是以此為準來設的吧??

實在是不懂,煩請大大們賜教

25
我看另一個站它是在/etc/inetd.d關的
 不過rh7.2並沒此檔
 難道要在/etc/services中
 在那麼多行中一個一個關嗎???

26
肉腳版 / 一些基本觀念問題
« 於: 2002-07-23 19:32 »
網路上有某些神明級的大大的口頭禪是"打好基礎""
 偶現在才發現一個例子,例如反解1 IN PTR ..
 為何要寫1
 以前以為是要寫幾個,就1 2 3 一直寫下去,只是次序
沒想到最近改用紅帽才努力看study-area,才發現錯得離譜
(以前用openlinux又有補習班原文書,所以沒怎麼看這裡)
哦,以上是題外話,只是覺得說""server跑得起來不見得真的懂"真是有道理
要問的在下面這段
1.________________________________________
例如﹕我的網路為 192.168.100.0/24﹐它的反查詢區域名則是﹕“100.168.192.in-addr.arpa”﹔假如我將 netmask 改為 16 bit ﹐即變成 192.168.0.0/16﹐它的反解區域名就會變成﹕“168.192.in-addr.arpa”
_________________

為何改成16bit就會把192.168.100.0/24變192.168.0.0/16呢
 而就算變成後者,為何後者反解為何不是0.168.192呢
而是上面寫的168.192.in....???


2是否變動ip架的站不能成功設反解
我看網大大網站裡有這樣一段話
______________________
注意哦﹕如果您要設定外部 DNS 的反解﹐那就先獲得 ISP 的授權才能自己設定﹔否則反解部份就不用自己擔心了﹐但一定要請 ISP 幫忙
____________________________________________。
小弟的反解都會是這樣>_<
______________________
Server:         168.95.1.1
Address:        168.95.1.1#53
                                                                               
Non-authoritative answer:
248.196.225.61.in-addr.arpa     name = 61-225-196-248.HINET-IP.hinet.net.

_______________

27
感謝各位大大
不過還有問題哦
 既然沒有啟動檔,
 那小弟的proftp它到底是如何跑起來的呀
 好奇怪
 又,如果我將主機關機,又重開,會不會proftp就不動了呀
 因為,我真的不知道它到底是怎麼跑起來的,
(我只是將wuftp移掉,照找到的資料改一些東東)
 也沒有/etc/rc.d/......start
 它就跑起來了,>_<

28
proftpd-1.2.5.tar.gz ,這個好奇怪,裝完也可以跑了
 可是我看臥龍小三的站上寫著,寫啟動要/etc/rc.d/init.d/proftpd start
但我看就是沒有
 一氣之下要proftpd-1.2.5其目錄都砍掉,連那個gz檔也砍掉
 但砍掉之後,就能連了,怎麼會這樣(我在現在在網咖,真的能連)

 又proftpd-1.2.5.....i386.rpm那個版本也好奇怪
 之前我將wu-ftp移掉後,起先是裝他
 rpm -ivh之後,也顯示100%沒錯誤訊息,但是
 連接時就是connection refused(就是不能解決才改用上面的targz版的)
是我忽略什麼嗎??/

謝謝各位大大

29
明天下午,哦,不行耶
 就算行嘛
 一來那個台南版寫得並不清楚也沒地點
 二來小弟正""因故失業中,己達半年"
 網中人嘛,神明級人物,又是以前補習班老師
 鳥哥也是(他那時教我們前三節)
 你們其他幾位大大嘛,....
 反正小弟現在自慚形穢,自卑啦
 不會去啦

 不過我倒是真的會找機會 賄賂一下他們兩位
 因為以前向他們問過太多問題了
^-^

30
不過小弟還是比較希望有一個
 收費制的機構較好
 ,這樣問得也安心
  也不造成別人的困擾(對方也可兼顧賺錢不會做白工)
 至於補習班嘛
 我去過了,聯成,(以前是學openlinux)
  可是不可能每個月都處在有補習狀態下呀(太費了吧)

 反而是這種在實作中的不大不小的問題
 而可能是對方一句話就能解決的
 如果有一個收費機構(但收得比補習班便宜很多)
,都能及時回答,甚或連到學習者主機裡幫忙看
 那不是更好??/

頁: [1] 2