顯示文章

這裡允許您檢視這個會員的所有文章。請注意, 您只能看見您有權限閱讀的文章。


主題 - francisyap

頁: [1] 2
1
Linux 討論版 / 停止FETCHMAIL-DAEMON回覆給SPAM
« 於: 2007-03-26 00:56 »
大家好

我設定了fetchmail ..我的domain所有user都fetch回來

結果很多SPAM...fetchmai找不到local的account就使用FETCHMAIL-DAEMON回覆但email有些是假的這樣造成很大的流量, 請問如何停止FETCHMAIL-DAEMON回覆給錯誤的信件..我googling不到答案

謝謝

代碼: [選擇]
l2PGUOKb011668     1314 Mon Mar 26 00:30 <FETCHMAIL-DAEMON@abc.com
                                         <frorimkusesjs@pp-bus.dk>
l2PGPLKb011660     1378 Mon Mar 26 00:25 <FETCHMAIL-DAEMON@abc.com
                                         <nellyrhum@jleh.com>
l2PGPMKb011663     1375 Mon Mar 26 00:25 <FETCHMAIL-DAEMON@abc.com
                                         <rochellecoorbyeku@fgbnet.net>

2
網頁技術 / big5轉換成utf8
« 於: 2006-10-27 17:39 »
大家好! 我做了大概30頁的網頁是big5的編碼, 現在要轉成utf編碼, 請問有甚麼工具可以不用逐一開檔更換!

謝謝!

3
Linux 討論版 / procmailrc 問題請教
« 於: 2006-08-19 20:30 »
大家好, 小弟嘗試做一個procmailrc的Rule

任何從gmail發信的郵件以及subject是包含"abc"就另外轉寄一份給本地的Mail User francis以及francly.

我找網路上沒有實際我這個案例, 我就參考別人的做一個
引用

:H
* From:.*\@gmail.com
* Subject: .*Digi*
! francis, francly

但是失敗

請問我這個語法有問題嗎?

4
大家好
我電腦中了rootkit,
想盡辦法要刪除或移動但失敗, 請教各位了
系統是RH9 目錄是/bin
代碼: [選擇]

[root@a bin]# lsattr -a netstat ps
------------- netstat
------------- ps
[root@a bin]# ls -als netstat ps
  32 -rwxrwxrwx   1 root     root        30640 Dec 14  2001 netstat
  32 -rwxr-xr-x   1 root     root        32756 Dec 14  2001 ps
[root@a bin]# mv netstat ps /root
mv: overwrite `/root/netstat'? y
mv: cannot move `netstat' to `/root/netstat': Permission denied
mv: overwrite `/root/ps'? y
mv: cannot move `ps' to `/root/ps': Permission denied
[root@a bin]#
[root@a bin]# rm -rf netstat ps
rm: cannot remove `netstat': Permission denied
rm: cannot remove `ps': Permission denied

5
大家好

小弟在sendmail上做一些測試但不能夠成功

問題

我的Domain為abc.com

所有從qwerty.com寄來的Email給john@abc.com, 只有他一個人收到但我要設定每次john@abc.com收到的同時其他人例如may@abc.com以及rachel@abc.com也能收到一份

我研究了aliases以及virtualusertable好像都做不到

請問那位大大可以分享一些經驗

6
Linux 討論版 / Fetchmail與Sendmail使用問題
« 於: 2005-05-29 23:20 »
各位學長
我在做了Fetchmail與Sendmail+MailScanner+ClamaV
OS是FC3.
比如:
test.com原本是在一間公司使用的Mail
Email使用者
a@test.com
b@test.com
c@test.com
d@test.com

c@test.com , d@test.com到其他國家開分公司
分公司的Mail Server設定fetchmail, fetch兩人的email.
其實一切都很順利

但當c@test.com , d@test.com要寄信給
a@test.com , b@test.com但Server把他當成本地Server處理.
我知道這個是sendmail的local-host-names把他當成本地的Domain處理. 我拿掉了只使用virtusertable也是一樣.

有甚麼辦法把這樣些同樣Domain的的Email在分公司先檢查本地使用者如果找不到這個使用者就route出去internet檢查DNS的MX然後send到總公司的Mail Server.

希望大家知道我要講的是甚麼
我做了很久的測試就是還沒有結果

7
Linux 討論版 / FC3的Kernel Source的套件找不到
« 於: 2005-04-24 19:47 »
大家好
我的系統為FC3,套件全部安裝
我要安裝Dazuko
需要重新編譯Kernel
cd /usr/src/linux-`uname -r`
找不到相關目錄
我try尋找kernel-source的套件
在rpm-find.net那兒找到了FC2的
請問FC3的Kernel-Source到那兒可以找到呢?

8
Computer 討論版 / [問題]多重顯示技術技術
« 於: 2005-02-05 01:14 »
小弟有些問題想請教前輩們
如何從電腦的顯示卡輸出到三個顯示器做水平顯示呢?
水平顯示我怕我解釋的不對
打個比喻 比如要顯示一個瓶子到顯示器
瓶頭顯示在顯示器1
瓶身顯示在顯示器2
瓶尾顯示在顯示器3
我做過了research
我本身使用過Nvidia的Nview以及ATI的Dual View
顯示卡本是支援一個一個DVI一個Analog的輸出
我使用一個CRT一個LCD就做到了...但怎麼做只有兩個顯示器而已
關於第三個顯示器
除了Matrox的專用顯示卡可以做(這個顯示卡售價超貴的)
還有SLI可以做到但硬體不普遍
我正在尋找一個廉價的方案..不懂那位前輩有做過 請指教...

9
看了dandy的教學 http://phorum.study-area.org/viewtopic.php?t=28635&highlight=

我照著在RHEL3.0做沒問題
現在我要轉到RH9.0做

套件rpm安裝也是參考dandy的教學
http://phorum.study-area.org/viewtopic.php?t=26544&highlight=

我的RH9的Postfix本來是1.x版本
我要使用2.x版本到網路上找到了postfix-2.1.4-2.3.rh9.at.i386.rpm這個版本

我安裝了..然後設定spamassassin以及clamav參數測試結果也滿意
然後重開機後

引用

Jan 10 00:55:48 yap last message repeated 12 times
Jan 10 00:56:53 yap last message repeated 13 times
Jan 10 00:57:58 yap last message repeated 13 times
Jan 10 00:59:03 yap last message repeated 13 times
Jan 10 01:00:08 yap last message repeated 13 times
Jan 10 01:00:58 yap last message repeated 10 times
Jan 10 01:01:01 yap update.virus.scanners: Delaying cron job up to 600 seconds
Jan 10 01:01:03 yap MailScanner[1914]: Messages found but no hashed queue directories. Please enable hashed queues for incoming and deferred with a depth of 1 or 2. See the Postfix documentation for hash_queue_names and hash_queue_depth
Jan 10 01:01:38 yap last message repeated 7 times
Jan 10 01:02:43 yap last message repeated 13 times
Jan 10 01:03:44 yap last message repeated 12 times
Jan 10 01:04:49 yap last message repeated 13 times
Jan 10 01:05:54 yap last message repeated 13 times
Jan 10 01:06:59 yap last message repeated 13 times
Jan 10 01:08:04 yap last message repeated 13 times
Jan 10 01:08:44 yap last message repeated 8 times
Jan 10 01:08:49 yap update.virus.scanners: Found clamav installed
Jan 10 01:08:49 yap update.virus.scanners: Running autoupdate for clamav
Jan 10 01:08:49 yap ClamAV-autoupdate[2091]: ClamAV updater /usr/local/bin/freshclam cannot be run
Jan 10 01:08:49 yap update.virus.scanners: Found generic installed
Jan 10 01:08:49 yap update.virus.scanners: Running autoupdate for generic
Jan 10 01:08:49 yap MailScanner[1914]: Messages found but no hashed queue directories. Please enable hashed queues for incoming and deferred with a depth of 1 or 2. See the Postfix documentation for hash_queue_names and hash_queue_depth
Jan 10 01:09:24 yap last message repeated 7 times
Jan 10 01:10:29 yap last message repeated 13 times
Jan 10 01:11:30 yap last message repeated 12 times
Jan 10 01:12:35 yap last message repeated 13 times
Jan 10 01:13:40 yap last message repeated 13 times

就一直出現錯誤
我在postfix加了
引用

#MailScanner
hash_queue_depth = 1
hash_queue_names = incoming,active,deferred,bounce,defer,flush,hold

hash_queue_depth 有換成1 或 2 或 3 結果都不成功
還有postfix reload出現
引用

postfix/postfix-script: refreshing the Postfix mail system
postsuper: warning: bogus file name: hold/razor-agent.log

郵件收發就能夠正常運作...
請問各位學長..我的問題要如何解決呢?

10
Linux 討論版 / [問題]Openwebmail的Quota有問題
« 於: 2004-12-22 12:21 »
引用

[root@mail mail]# quota -uvs francis
Disk quotas for user francis (uid 502):
     Filesystem  blocks   quota   limit   grace   files   quota   limit   grace
      /dev/hda7      16     100     100               3       0       0
[root@mail mail]# du -h francis
8.0K    francis
[root@mail mail]# tail /var/www/cgi-bin/openwebmail/etc/openwebmail.conf
#quota_threshold         0
#delmail_ifquotahit      no
#delfile_ifquotahit      n
quota_module            quota_unixfs.pl
spool_limit             100
quota_limit             50
quota_threshold         0
delmail_ifquotahit      no
delfile_ifquotahit      no

我的OpenWeb Quota的設定...
試過了..如果Quota滿了就真的登入不到..Quota是生效的
但是進入Openwebmail..內的顯示
引用

 Quota usage: 0Byte  2 unread / 3 messages / 4KB  

依然是0Byte...我測試過很多設定都還是一樣...0 Byte..
請各位學長幫忙了

11
Linux 討論版 / [問題]Spamassassin 出了問題
« 於: 2004-12-13 18:49 »
大家好我根據dandy的教學
http://phorum.study-area.org/viewtopic.php?t=26544&highlight=
Postfix+MailScanner+Sophos+Spamassassin+Procmail+MailScanner-MRTG+openwebmail+snmp RH90&RHEL30安裝筆

大部分都完成了
現在只卡到spamassassin那兒
我的spam email是要啟用autolearn的功能
結果把相關要檔的信件寄到spam帳號
然後執行spam-learn但相關信件還是可以進來
我查看log發現
這一段有問題
引用
Dec 13 18:26:18 mail spamd[3867]: Bareword found where operator expected at /etc/mail/spamassassin/local.cf, rule __CC_8BIT_LOCAL, line 10, near "usr"_  (Might be a runaway multi-line // string starting on line 1)
Dec 13 18:26:18 mail spamd[3867]: _(Missing operator before usr?)
Dec 13 18:26:18 mail spamd[3867]: Misplaced _ in number at /etc/mail/spamassassin/local.cf, rule __CC_8BIT_LOCAL, line 10, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Bareword found where operator expected at /etc/mail/spamassassin/local.cf, rule __CC_8BIT_LOCAL, line 10, near "20_head_tests"
Dec 13 18:26:19 mail spamd[3867]: _(Missing operator before head_tests?)
Dec 13 18:26:19 mail spamd[3867]: Failed to run header SpamAssassin tests, skipping some: syntax error at /etc/mail/spamassassin/local.cf, rule __CC_8BIT_LOCAL, line 11, near "_["
引用


以下是完整的log由一封信進來到結束

引用
Dec 13 18:26:00 mail postfix/smtpd[4121]: 3EBB2124043: client=rproxy.gmail.com[64.233.170.197]
Dec 13 18:26:00 mail postfix/cleanup[4124]: 3EBB2124043: hold: header Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.197])??by mail.myitsun.com (Postfix) with ESMTP id 3EBB2124043??for <francis@mail.myitsun.com>; Mon, 13 Dec 2004 18:25:59 +0800 (MYT) from rproxy.gmail.com[64.233.170.197]; from=<francly@gmail.com> to=<francis@mail.myitsun.com> proto=ESMTP helo=<rproxy.gmail.com>
Dec 13 18:26:00 mail postfix/cleanup[4124]: 3EBB2124043: hold: header Received: by rproxy.gmail.com with SMTP id r35so1096327rna?        for <francis@mail.myitsun.com>; Mon, 13 Dec 2004 02:26:15 -0800 (PST) from rproxy.gmail.com[64.233.170.197]; from=<francly@gmail.com> to=<francis@mail.myitsun.com> proto=ESMTP helo=<rproxy.gmail.com>
Dec 13 18:26:00 mail postfix/cleanup[4124]: 3EBB2124043: hold: header Received: by 10.38.9.50 with SMTP id 50mr904919rni;?        Mon, 13 Dec 2004 02:26:15 -0800 (PST) from rproxy.gmail.com[64.233.170.197]; from=<francly@gmail.com> to=<francis@mail.myitsun.com> proto=ESMTP helo=<rproxy.gmail.com>
Dec 13 18:26:00 mail postfix/cleanup[4124]: 3EBB2124043: hold: header Received: by 10.38.161.79 with HTTP; Mon, 13 Dec 2004 02:26:14 -0800 (PST) from rproxy.gmail.com[64.233.170.197]; from=<francly@gmail.com> to=<francis@mail.myitsun.com> proto=ESMTP helo=<rproxy.gmail.com>
Dec 13 18:26:00 mail postfix/cleanup[4124]: 3EBB2124043: message-id=<44ff99c804121302262b06097@mail.gmail.com>
Dec 13 18:26:01 mail postfix/smtpd[4121]: disconnect from rproxy.gmail.com[64.233.170.197]
Dec 13 18:26:01 mail MailScanner[4025]: New Batch: Scanning 1 messages, 1562 bytes
Dec 13 18:26:05 mail MailScanner[4025]: Virus and Content Scanning: Starting
Dec 13 18:26:05 mail MailScanner[4025]: Requeue: 3EBB2124043 to A5337124052
Dec 13 18:26:05 mail postfix/qmgr[3996]: A5337124052: from=<francly@gmail.com>, size=1447, nrcpt=1 (queue active)
Dec 13 18:26:05 mail MailScanner[4025]: Uninfected: Delivered 1 messages
Dec 13 18:26:06 mail spamd[3867]: connection from localhost.localdomain [127.0.0.1] at port 32854
Dec 13 18:26:06 mail spamd[3867]: info: setuid to francis succeeded
Dec 13 18:26:08 mail spamd[3867]: processing message <44ff99c804121302262b06097@mail.gmail.com> for francis:502.
Dec 13 18:26:18 mail spamd[3867]: Subroutine RATWARE_HASH_2_V2_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule RATWARE_HASH_2_V2, line 5, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine NIGERIAN_SUBJECT1_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule NIGERIAN_SUBJECT1, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUBJ_YOUR_OWN_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule SUBJ_YOUR_OWN, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUB_HELLO_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule SUB_HELLO, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __IMS_HTML_RCVD_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __IMS_HTML_RCVD, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine RATWARE_MOZ_MALFORMED_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule RATWARE_MOZ_MALFORMED, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine HELO_DYNAMIC_OOL_head_test redefined at /usr/share/spamassassin/20_fake_helo_tests.cf, rule HELO_DYNAMIC_OOL, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine UNRESOLVED_TEMPLATE_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule UNRESOLVED_TEMPLATE, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine MSGID_YAHOO_CAPS_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule MSGID_YAHOO_CAPS, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine RATWARE_GECKO_BUILD_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule RATWARE_GECKO_BUILD, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __IMS_HTML_BUILDS_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __IMS_HTML_BUILDS, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine FROM_WEBMAIL_END_NUMS6_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule FROM_WEBMAIL_END_NUMS6, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine FORGED_TELESP_RCVD_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule FORGED_TELESP_RCVD, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __HAS_MSGID_head_test redefined at /usr/share/spamassassin/20_meta_tests.cf, rule __HAS_MSGID, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __0_TZ_1_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __0_TZ_1, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine X_PRIORITY_HIGH_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule X_PRIORITY_HIGH, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine MSGID_NO_HOST_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule MSGID_NO_HOST, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __MSGID_APPLEMAIL_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __MSGID_APPLEMAIL, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUB_FREE_OFFER_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule SUB_FREE_OFFER, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine MIME_BOUND_DIGITS_15_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule MIME_BOUND_DIGITS_15, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine X_LIBRARY_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule X_LIBRARY, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine FROM_HAS_MIXED_NUMS_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule FROM_HAS_MIXED_NUMS, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __HAS_MIMEOLE_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __HAS_MIMEOLE, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __CTYPE_HTML_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __CTYPE_HTML, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __ANY_AOL_MUA_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __ANY_AOL_MUA, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUBJ_YOUR_DEBT_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule SUBJ_YOUR_DEBT, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __USER_AGENT_MSN_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __USER_AGENT_MSN, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __MSGID_OK_DIGITS_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __MSGID_OK_DIGITS, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __CT_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __CT, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __CTE_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __CTE, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __0_TZ_7_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __0_TZ_7, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine HELO_DYNAMIC_VTR_head_test redefined at /usr/share/spamassassin/20_fake_helo_tests.cf, rule HELO_DYNAMIC_VTR, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine FAKED_UNDISC_RECIPS_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule FAKED_UNDISC_RECIPS, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine MSGID_FROM_MTA_HOTMAIL_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule MSGID_FROM_MTA_HOTMAIL, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine HELO_DYNAMIC_VELOX_head_test redefined at /usr/share/spamassassin/20_fake_helo_tests.cf, rule HELO_DYNAMIC_VELOX, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __0_TZ_6_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __0_TZ_6, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __SANE_MSGID_head_test redefined at /usr/share/spamassassin/20_meta_tests.cf, rule __SANE_MSGID, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __OE_MUA_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __OE_MUA, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __HAS_X_PRIORITY_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __HAS_X_PRIORITY, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __X_MAILER_APPLEMAIL_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __X_MAILER_APPLEMAIL, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __MANY_EXCLS_head_test redefined at /usr/share/spamassassin/20_meta_tests.cf, rule __MANY_EXCLS, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine RATWARE_RCVD_LC_ESMTP_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule RATWARE_RCVD_LC_ESMTP, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __DOUBLE_IP_SPAM_1_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __DOUBLE_IP_SPAM_1, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine MIME_BOUND_MANY_HEX_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule MIME_BOUND_MANY_HEX, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine FROM_NO_USER_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule FROM_NO_USER, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine HELO_DYNAMIC_DIALIN_head_test redefined at /usr/share/spamassassin/20_fake_helo_tests.cf, rule HELO_DYNAMIC_DIALIN, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUBJECT_DRUG_GAP_VIC_head_test redefined at /usr/share/spamassassin/20_drugs.cf, rule SUBJECT_DRUG_GAP_VIC, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine MIME_BOUND_RKFINDY_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule MIME_BOUND_RKFINDY, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __THEBAT_MUA_V1_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __THEBAT_MUA_V1, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine HELO_DYNAMIC_DHCP_head_test redefined at /usr/share/spamassassin/20_fake_helo_tests.cf, rule HELO_DYNAMIC_DHCP, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __THEBAT_MUA_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __THEBAT_MUA, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine REPLY_TO_EMPTY_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule REPLY_TO_EMPTY, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine MIME_BOUND_DD_DIGITS_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule MIME_BOUND_DD_DIGITS, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __PC_RND_HEADER_head_test redefined at /usr/share/spamassassin/20_meta_tests.cf, rule __PC_RND_HEADER, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUBJECT_DRUG_GAP_VIA_head_test redefined at /usr/share/spamassassin/20_drugs.cf, rule SUBJECT_DRUG_GAP_VIA, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __MOZILLA_MSGID_head_test redefined at /usr/share/spamassassin/20_meta_tests.cf, rule __MOZILLA_MSGID, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine NO_REAL_NAME_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule NO_REAL_NAME, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUBJECT_DIET_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule SUBJECT_DIET, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUBJECT_DRUG_GAP_S_head_test redefined at /usr/share/spamassassin/20_drugs.cf, rule SUBJECT_DRUG_GAP_S, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __AOL_FROM_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __AOL_FROM, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __HAS_SQUIRRELMAIL_IN_MAILER_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __HAS_SQUIRRELMAIL_IN_MAILER, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine MSGID_SPAM_ZEROES_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule MSGID_SPAM_ZEROES, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __USER_AGENT_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __USER_AGENT, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine HDR_ORDER_MTSRIX_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule HDR_ORDER_MTSRIX, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine HELO_DYNAMIC_HEXIP_head_test redefined at /usr/share/spamassassin/20_fake_helo_tests.cf, rule HELO_DYNAMIC_HEXIP, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine RATWARE_RCVD_PF_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule RATWARE_RCVD_PF, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __HAS_X_MAILING_LIST_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __HAS_X_MAILING_LIST, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __CT_TEXT_PLAIN_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __CT_TEXT_PLAIN, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUBJECT_DRUG_GAP_VA_head_test redefined at /usr/share/spamassassin/20_drugs.cf, rule SUBJECT_DRUG_GAP_VA, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __MOZILLA_MUA_head_test redefined at /usr/share/spamassassin/20_meta_tests.cf, rule __MOZILLA_MUA, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUBJ_AS_SEEN_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule SUBJ_AS_SEEN, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUBJECT_DRUG_GAP_P_head_test redefined at /usr/share/spamassassin/20_drugs.cf, rule SUBJECT_DRUG_GAP_P, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __OE_MSGID_2_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __OE_MSGID_2, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __CTYPE_CHARSET_QUOTED_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __CTYPE_CHARSET_QUOTED, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine X_ORIG_IP_NOT_IPV4_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule X_ORIG_IP_NOT_IPV4, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __MSGID_BEFORE_RECEIVED_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __MSGID_BEFORE_RECEIVED, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __EUDORA_MSGID_head_test redefined at /usr/share/spamassassin/20_ratware.cf, rule __EUDORA_MSGID, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __CD_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __CD, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine __FROM_PHONE_head_test redefined at /usr/share/spamassassin/20_head_tests.cf, rule __FROM_PHONE, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine SUBJECT_DRUG_GAP_C_head_test redefined at /usr/share/spamassassin/20_drugs.cf, rule SUBJECT_DRUG_GAP_C, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Subroutine HELO_DYNAMIC_CHELLO_NO_head_test redefined at /usr/share/spamassassin/20_fake_helo_tests.cf, rule HELO_DYNAMIC_CHELLO_NO, line 6, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Bareword found where operator expected at /etc/mail/spamassassin/local.cf, rule __CC_8BIT_LOCAL, line 10, near "usr"_  (Might be a runaway multi-line // string starting on line 1)
Dec 13 18:26:18 mail spamd[3867]: _(Missing operator before usr?)
Dec 13 18:26:18 mail spamd[3867]: Misplaced _ in number at /etc/mail/spamassassin/local.cf, rule __CC_8BIT_LOCAL, line 10, <GEN3> line 36.
Dec 13 18:26:18 mail spamd[3867]: Bareword found where operator expected at /etc/mail/spamassassin/local.cf, rule __CC_8BIT_LOCAL, line 10, near "20_head_tests"
Dec 13 18:26:19 mail spamd[3867]: _(Missing operator before head_tests?)
Dec 13 18:26:19 mail spamd[3867]: Failed to run header SpamAssassin tests, skipping some: syntax error at /etc/mail/spamassassin/local.cf, rule __CC_8BIT_LOCAL, line 11, near "_["
Dec 13 18:26:25 mail spamd[3867]: clean message (2.2/5.0) for francis:502 in 19.2 seconds, 1583 bytes.
Dec 13 18:26:25 mail spamd[3867]: result: .  2 - AWL,MISSING_SUBJECT,TRACKER_ID scantime=19.2,size=1583,mid=<44ff99c804121302262b06097@mail.gmail.com>,autolearn=no
Dec 13 18:26:25 mail postfix/local[4135]: A5337124052: to=<francis@mail.myitsun.com>, relay=local, delay=26, status=sent (delivered to command: /usr/bin/procmail)
Dec 13 18:26:25 mail postfix/qmgr[3996]: A5337124052: removed


我的/etc/mail/spamassassin/local.cf
引用

[root@mail root]# less /etc/mail/spamassassin/local.cf
# These values can be overridden by editing ~/.spamassassin/user_prefs.cf
# (see spamassassin(1) for details)

# These should be safe assumptions and allow for simple visual sifting
# without risking lost emails.

use_bayes 1
bayes_path /var/spool/MailScanner/spamassassin/bayes
auto_learn 1
skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 1
always_add_headers 0
dcc_add_header 0
report_safe 0
use_terse_report 0
spam_level_stars 1
dns_available yes

ok_languages zh en
ok_locales zh en

whitelist_from *@Newsletters.Microsoft.com

# From addr like <some chinese>@myitzone.com
header __FROM_8BIT_LOCAL From:addr =~ /[a-zA-Z0-9_-]*[\x80xff][a-zA-Z0-9_-]*\@myitzone\.com\/i
header __TO_8BIT_LOCAL To:addr =~ /[a-zA-Z0-9_-]*[\x80-\xff][a-zA-Z0-9_-]*\@myitzone\.com\/i
header __CC_8BIT_LOCAL Cc:addr =~ /[a-zA-Z0-9_-]*[\x80-\xff][a-zA-Z0-9_-]*\@myitzone\.com\/i
meta LOCAL_8BIT_USER (__FROM_8BIT_LOCAL || __TO_8BIT_LOCAL || __CC_8BIT_LOCAL)
describe LOCAL_8BIT_USER From or To a chinese@mydomain
score LOCAL_8BIT_USER 3.0


我的/etc/MailScanner/spam.assassin.prefs.conf以及/etc/MailScanner/MailScanner.conf的關於spam設定是安裝教學做的

我的procmailrc使用獨立的常駐程式spamc
:0fw
| /usr/bin/spamc -s 200000
把spamassassin開機就start了

要怎麼debug這個問題呢?謝謝學長們的幫忙

12
學長好!
我的Linux的df -h訊息如下
引用

Filesystem            Size  Used Avail Use% Mounted on
/dev/sda3             1.5G  1.4G   51M  97% /
/dev/sda2              99M   26M   69M  27% /boot
none                  251M     0  251M   0% /dev/shm
/dev/sda6             6.1G  4.6G  1.2G  80% /usr

/那兒快撐爆了..這是一台跑Mail有MailScanner,Clamav,Spamassassin以及Webf服務httpd,mysqld,php
空間一直增長...請問有甚麼辦法檢查甚麼檔案佔最大空間
或者/那兒有甚麼檔案可以移掉的呢?
我安裝RH Linux9使用完整安裝方法
spool以及log那兒的size都還好....沒甚麼大問題
謝謝給予指導

13
我系統被安裝rootkit了
我該怎麼辦?
怎麼清除呢?

引用
[root@linux chkrootkit-0.44]# ./chkrootkit -q
Checking `ifconfig'... INFECTED
can't exec ./strings-static, Checking `login'... INFECTED
Checking `pstree'... INFECTED
/etc/ld.so.hash
Possible t0rn v8 \(or variation\) rootkit installed

/usr/lib/perl5/5.8.0/i386-linux-thread-multi/.packlist /usr/lib/perl5/site_perl/
5.8.0/i386-linux-thread-multi/auto/Text/Iconv/.packlist /usr/lib/openoffice/shar
e/gnome/net/.directory /usr/lib/openoffice/share/gnome/net/.order /usr/lib/openo
ffice/share/kde/net/applnk/OpenOffice.org/.directory /usr/lib/openoffice/share/k
de/net/applnk/OpenOffice.org/.order /usr/lib/qt-3.1/etc/settings/.qtrc.lock /usr
/lib/qt-3.1/etc/settings/.qt_plugins_3.1rc.lock

Warning: Possible Showtee Rootkit installed
 /usr/include/file.h /usr/include/proc.h
Warning: /sbin/init INFECTED
Possible ShKit rootkit installed
not tested: can't exec ./ifpromisc
not tested: can't exec ./chkwtmp
not tested: can't exec ./chklastlog

14
各位學長好....
最近客戶機器..不是很穩定而且關機會出現
引用
Broadcast message from root (pts/1) (Wed Sep  8 14:28:45 2004):    The system is going down for reboot NOW!  /dev/null  RK_Init: idt=0xc0356000, sct[]=0xc32c4000, 不雅文字: Can't find kmalloc()!

就這麼訊息找一找Google
發現有個仁兄的Blog http://www.iuiuiu.com/plog/post/2/41 有解決方法
我下載chkrootkit檢查看看...
請學長們看看...Bold的部分是infected
引用
[root@linux chkrootkit-0.44]# ./chkrootkit
ROOTDIR is `/'
Checking `amd'... not infected
Checking `basename'... not infected
Checking `biff'... not infected
Checking `chfn'... not infected
Checking `chsh'... not infected
Checking `cron'... not infected
Checking `date'... not infected
Checking `du'... not infected
Checking `dirname'... not infected
Checking `echo'... not infected
Checking `egrep'... not infected
Checking `env'... not infected
Checking `find'... not infected
Checking `fingerd'... not infected
Checking `gpm'... not infected
Checking `grep'... not infected
Checking `hdparm'... not infected
Checking `su'... not infected
Checking `ifconfig'... INFECTED
Checking `inetd'... not tested
Checking `inetdconf'... not found
Checking `identd'... not infected
Checking `init'... not infected
Checking `killall'... not infected
Checking `ldsopreload'... can't exec ./strings-static, not tested
Checking `login'... INFECTED
Checking `ls'... not infected
Checking `lsof'... not infected
Checking `mail'... not infected
Checking `mingetty'... not infected
Checking `netstat'... not infected
Checking `named'... not infected
Checking `passwd'... not infected
Checking `pidof'... not infected
Checking `pop2'... not found
Checking `pop3'... not found
Checking `ps'... not infected
Checking `pstree'... INFECTED
Checking `rpcinfo'... not infected
Checking `rlogind'... not infected
Checking `rshd'... not infected
Checking `slogin'... not infected
Checking `sendmail'... not infected
Checking `sshd'... not infected
Checking `syslogd'... not infected
Checking `tar'... not infected
Checking `tcpd'... not infected
Checking `tcpdump'... not infected
Checking `top'... not infected
Checking `telnetd'... not infected
Checking `timed'... not found
Checking `traceroute'... not infected
Checking `vdir'... not infected
Checking `w'... not infected
Checking `write'... not infected
Checking `aliens'... /etc/ld.so.hash
Searching for sniffer's logs, it may take a while... nothing found
Searching for HiDrootkit's default dir... nothing found
Searching for t0rn's default files and dirs... nothing found
Searching for t0rn's v8 defaults... Possible t0rn v8 \(or variation\) rootkit in
stalled
Searching for Lion Worm default files and dirs... nothing found
Searching for RSHA's default files and dir... nothing found
Searching for RH-Sharpe's default files... nothing found
Searching for Ambient's rootkit (ark) default files and dirs... nothing found
Searching for suspicious files and dirs, it may take a while...
/usr/lib/perl5/5.8.0/i386-linux-thread-multi/.packlist /usr/lib/perl5/site_perl/
5.8.0/i386-linux-thread-multi/auto/Text/Iconv/.packlist /usr/lib/openoffice/shar
e/gnome/net/.directory /usr/lib/openoffice/share/gnome/net/.order /usr/lib/openo
ffice/share/kde/net/applnk/OpenOffice.org/.directory /usr/lib/openoffice/share/k
de/net/applnk/OpenOffice.org/.order /usr/lib/qt-3.1/etc/settings/.qtrc.lock /usr
/lib/qt-3.1/etc/settings/.qt_plugins_3.1rc.lock
Searching for LPD Worm files and dirs... nothing found
Searching for Ramen Worm files and dirs... nothing found
Searching for Maniac files and dirs... nothing found
Searching for RK17 files and dirs... nothing found
Searching for Ducoci rootkit... nothing found
Searching for Adore Worm... nothing found
Searching for ShitC Worm... nothing found
Searching for Omega Worm... nothing found
Searching for Sadmind/IIS Worm... nothing found
Searching for MonKit... nothing found
Searching for Showtee... Warning: Possible Showtee Rootkit installed
Searching for OpticKit... nothing found
Searching for T.R.K... nothing found
Searching for Mithra... nothing found
Searching for LOC rootkit... nothing found
Searching for Romanian rootkit...  /usr/include/file.h /usr/include/proc.h
Searching for HKRK rootkit... nothing found
Searching for Suckit rootkit... Warning: /sbin/init INFECTED
Searching for Volc rootkit... nothing found
Searching for Gold2 rootkit... nothing found
Searching for TC2 Worm default files and dirs... nothing found
Searching for Anonoying rootkit default files and dirs... nothing found
Searching for ZK rootkit default files and dirs... nothing found
Searching for ShKit rootkit default files and dirs... Possible ShKit rootkit ins
talled

Searching for AjaKit rootkit default files and dirs... nothing found
Searching for zaRwT rootkit default files and dirs... nothing found
Searching for Madalin rootkit default files... nothing found
Searching for anomalies in shell history files... nothing found
Checking `asp'... not infected
Checking `bindshell'... not infected
Checking `lkm'... Checking `rexedcs'... not found
Checking `sniffer'... not tested: can't exec ./ifpromisc
Checking `w55808'... not infected
Checking `wted'... not tested: can't exec ./chkwtmp
Checking `scalper'... not infected
Checking `slapper'... not infected
Checking `z2'... not tested: can't exec ./chklastlog

我發現我受感染的檔案和別人不一樣
我也有參考這一個網頁 http://www.soohrt.org/stuff/linux/suckit/index.html
但就沒有類似這個錯誤
引用
./sk.15252

測試結果如下....
引用
[root@linux proc]# for i in *; do test -f $i/cmdline && (cat $i/cmdline; echo $i); done
init1
10
/usr/sbin/httpd1001
crond1010
1028
1040
1041
1042
1043
1044
1045
1046
1047
/usr/bin/perl/usr/libexec/webmin/miniserv.pl/etc/webmin/miniserv.conf1053
login -- root1058
/sbin/mingettytty51060
/sbin/mingettytty61061
1065
1253
1398
1399
14
1417
1418
1422
180
181
182
183
-bash1845
/usr/bin/fetchmail-a-K-t60-d3001909
1994
2
/sbin/mingettytty22280
/sbin/mingettytty42282
/sbin/mingettytty12283
2300
2775
2776
3
/usr/sbin/xntps-q300
3046
/usr/sbin/sshd3565
-bash3567
3644
3653
4
4558
5
6
/usr/sbin/sshd6410
-bash6412
7
73
8
9
/usr/sbin/sshd907
xinetd-stayalive-reuse-pidfile/var/run/xinetd.pid921
gpm-tps/2-m/dev/mouse990
catself/cmdlineself

小弟Linux認識不是很深入
看看有遇過此問題的學校可以給予一些執導看看如何解決我的問題

15
Source的Mail Server
RH 9.0
Sendmail
MailScanner
Clamav

Destination的Mail Server
Windows 2003
Exchange 2003
Symantec AntiVirus for SMTP Gateways

對方說全部Mail從我的Mail Server發過去的...都發現被on hold住
Symantec的參考文件
http://service1.symantec.com/SUPPORT/ent-gate.nsf/dc983c4134c90dfd88256c0e00592490/4d9b4fb636faa23d88256c78005fe2cb?OpenDocument&src=bar_sch_nam
只教導如何設定on hold還是直接reject
錯誤訊息是這樣
引用
Info: Message could not be scanned completely.  Scan Status: 56 - Malformed MIME file.  

請問我從Linux的Mail Server下手如何才能夠把Mail順利..經過對方Symantec SMTP Gateway呢?
網頁上寫到
引用
Solution:
This error indicates that the scanned email message did not conform to the Multipurpose Internet Mail Extensions (MIME) standards as set forth in RFC 2045 - RFC 2049. Strict adherence to this standard prevents incoming email with virus payloads encapsulated within malformed MIME headers and form.

AV for SMTP processes email according to MIME standards. AV for SMTP handles malformed email that does not conform to MIME standards in one of three ways. AV for SMTP can be configured to Deliver, Drop, Bounce to sender, or Hold email.

我要怎麼改..我MailScanner的設定呢?...MailScanner那兒我沒有做任何特別的設定..

謝謝學長們指導

16
各位學長好!!
不曉得各位有安裝Openwebmail在Sun OS 5.9嗎?
小弟只懂少許的Linux...
至於SUN的Solaris更不懂
但因為公司有台Sun要拿來當Mail Server
Sendmail那兒都已經完成了
再來...就是Openwebmail了
RPM套件安裝很簡單....一下子就安裝好了
但Sun就必須使用Tarball安裝
我安裝了Perl...但找不到suidperl..沒有辦法繼續
我也找過Google了..好像沒有tarball的suidperl
suidperl是perl裡面的一個module嗎?
如何設定呢?

謝謝

17
各位大大
最近要搞一個網頁的專案
要使用以下的Component
ASP Components
Server Objects ASP Bundle
-ASPMail   
-ASPHTTP   
-ASPImage   

Software Artisans ASPStudio   
-FileManager   
-FileUp   


Persits ASP Component
-ASPUpload   
-ASPEncrypt

我現在..想試用而已...請問可以到那兒找到測試版呢?
這些Component都是很貴的啊
謝謝

18
各位學長好...

本人架設一台PROXY
RH9+Squid+NAT (有tranparent的功能)
User Authenticate and mac address的acl
現在設定superuser也就是通過mac address認證的都可以無限制的存取
網路
使用user auth的使用者有特別限制
現在有一個IP..不能使用PROXY存取
我設定了superuser的IE上面bypass一個address....但發現還是會透過proxy來存取確定是有transparent proxy的功能啊
我嘗試使用always direct..但這個功能不是使用在我這種case的啊

請問可以在squid.conf..設定說..這個dst ip要直接連線不要使用proxy來抓呢

謝謝

19
各位學長好
Linux的伺服器架設好了進入Xwin如何show一些msg以及單位logo?
那個xwin登入的畫面可以更改嗎?
我要做這個主要原因是...如果user到server前面玩
可以看到Server的訊息告知他不要隨便亂碰

謝謝有經驗的學長提供意見

20
引用

Jul  2 14:25:37 linux kernel: NET: 227 messages suppressed.
Jul  2 14:25:37 linux kernel: Neighbour table overflow.
Jul  2 14:25:42 linux kernel: NET: 561 messages suppressed.
Jul  2 14:25:42 linux kernel: Neighbour table overflow.
Jul  2 14:25:47 linux kernel: NET: 427 messages suppressed.
Jul  2 14:25:47 linux kernel: Neighbour table overflow.
Jul  2 14:25:52 linux kernel: NET: 495 messages suppressed.
Jul  2 14:25:52 linux kernel: Neighbour table overflow.
Jul  2 14:25:57 linux kernel: NET: 572 messages suppressed.
Jul  2 14:25:57 linux kernel: Neighbour table overflow.
Jul  2 14:26:02 linux kernel: NET: 484 messages suppressed.
Jul  2 14:26:02 linux kernel: Neighbour table overflow.
Jul  2 14:26:07 linux kernel: NET: 536 messages suppressed.
Jul  2 14:26:07 linux kernel: Neighbour table overflow.


各位學長好!!我的message一直出現以上的訊息
我使用RedHat 9.0..機器做NAT,MAIL,PROXY的服務
好像NAT開始..就一直出現此訊息
我找過google了
有人說loopback if沒有設好我檢查過了.沒有問題
有人說arp問題....
我tcpdump -i eth1看看 我的內部IP為 169.254.25.0/24
引用

14:43:29.189010 arp who-has 169.254.94.239 tell linux.com.my
14:43:29.329010 arp who-has 169.254.195.208 tell linux.com.my
14:43:29.343738 169.254.25.171.3373 > 169.254.189.121.135: S 3822308533:3822308533(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:29.469009 arp who-has 169.254.190.212 tell linux.com.my
14:43:29.619011 arp who-has 169.254.72.96 tell linux.com.my
14:43:29.619015 arp who-has 169.254.200.244 tell linux.com.my
14:43:29.619017 arp who-has 169.254.56.41 tell linux.com.my
14:43:29.769010 arp who-has 169.254.244.140 tell linux.com.my
14:43:29.908127 169.254.25.171.3392 > 169.254.32.13.135: S 3823349977:3823349977(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:30.089009 arp who-has 169.254.119.83 tell linux.com.my
14:43:30.339010 arp who-has 169.254.189.121 tell linux.com.my
14:43:30.729010 arp who-has 169.254.130.179 tell linux.com.my
14:43:30.889009 arp who-has 169.254.4.99 tell linux.com.my
14:43:31.217623 169.254.25.171.3426 > 169.254.197.54.135: S 3825371144:3825371144(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:31.932325 169.254.25.171.3449 > 169.254.36.127.135: S 3826660954:3826660954(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:32.159013 arp who-has 169.254.75.66 tell linux.com.my
14:43:32.379369 169.254.25.171.3465 > 169.254.3.126.135: S 3827568841:3827568841(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:32.529010 arp who-has 169.254.24.93 tell linux.com.my
14:43:32.679012 arp who-has 169.254.203.21 tell linux.com.my
14:43:32.819015 arp who-has 169.254.12.246 tell linux.com.my
14:43:32.959016 arp who-has 169.254.51.66 tell linux.com.my
14:43:33.124948 169.254.25.171.3483 > 169.254.96.141.135: S 3828641322:3828641322(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:33.278189 169.254.25.171.3486 > 169.254.223.56.135: S 3828844507:3828844507(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:33.399013 arp who-has 169.254.21.59 tell linux.com.my
14:43:33.549010 arp who-has 169.254.50.66 tell linux.com.my
14:43:33.709012 arp who-has 169.254.12.202 tell linux.com.my
14:43:33.869009 arp who-has 169.254.220.74 tell linux.com.my
14:43:34.029012 arp who-has 169.254.213.193 tell linux.com.my
14:43:34.129016 arp who-has 169.254.221.233 tell linux.com.my
14:43:34.320368 169.254.25.171.3508 > 169.254.141.38.135: S 3830136432:3830136432(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:34.441378 169.254.25.171.3433 > 169.254.66.44.135: S 3825777959:3825777959(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:34.569408 169.254.25.171.3509 > 169.254.203.105.135: S 3830267356:3830267356(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:34.719009 arp who-has 169.254.169.5 tell linux.com.my
14:43:34.929011 arp who-has 169.254.68.213 tell linux.com.my
14:43:35.029016 arp who-has 169.254.161.140 tell linux.com.my
14:43:35.149658 169.254.25.171.3520 > 169.254.209.240.135: S 3830917772:3830917772(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:35.444561 169.254.25.171.3467 > 169.254.158.86.135: S 3827691671:3827691671(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:35.645172 169.254.25.171.3470 > 169.254.45.234.135: S 3827875228:3827875228(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:35.818373 169.254.25.171.3537 > 169.254.193.113.135: S 3831790293:3831790293(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:36.005743 169.254.25.171.3544 > 169.254.30.131.135: S 3832188460:3832188460(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:36.124246 169.254.25.171.3552 > 169.254.201.203.135: S 3832577936:3832577936(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)
14:43:36.327011 169.254.25.171.3561 > 169.254.207.250.135: S 3833075966:3833075966(0) win 64240 <mss 1460,nop,nop,sackOK> (DF)

不懂以上資料有沒有問題
我發覺都是170以及171在發送packet給Server...沒有間斷過..
會是中毒嗎?
所以想說只抓arp看看
....太多arp訊息了...簡直像攻擊Server
我只擷取小部分..讓大家參考看看
引用

[root@linux backup]# tcpdump -f arp -i  eth1
tcpdump: listening on eth1
14:49:18.741505 arp who-has 169.254.184.66 tell linux.com.my
14:49:19.039010 arp who-has 169.254.106.38 tell linux.com.my
14:49:19.049008 arp who-has 169.254.183.76 tell linux.com.my
14:49:19.555557 arp who-has 169.254.228.181 tell linux.com.my
14:49:19.739009 arp who-has 169.254.184.66 tell linux.com.my
14:49:20.039010 arp who-has 169.254.106.38 tell linux.com.my
14:49:20.398053 arp who-has 169.254.25.128 tell 169.254.25.254
14:49:20.549011 arp who-has 169.254.228.181 tell linux.com.my
14:49:20.694573 arp who-has 169.254.92.26 tell linux.com.my
14:49:20.739009 arp who-has 169.254.184.66 tell linux.com.my
14:49:20.879008 arp who-has 169.254.25.170 tell linux.com.my
14:49:20.879088 arp reply 169.254.25.170 is-at 0:c:76:e8:1f:c6
14:49:21.491112 arp who-has 169.254.25.131 tell 169.254.25.254
14:49:21.491211 arp who-has 169.254.25.254 tell 169.254.25.137
14:49:21.549010 arp who-has 169.254.228.181 tell linux.com.my
14:49:21.689009 arp who-has 169.254.92.26 tell linux.com.my
14:49:22.599460 arp who-has 169.254.228.181 tell linux.com.my
14:49:22.689010 arp who-has 169.254.92.26 tell linux.com.my
14:49:23.120193 arp who-has 169.254.91.219 tell linux.com.my

同時也有內部User報告說有時候連不上這個Server的Webmail...也Ping也ping不到...但正常的時候就很正常
所以我想說..先解決這個問題再仔細了解User的問題

請學長們給我一些解決方法的建議...謝謝

21
學長大家好!

我使用RH 9.0架了NAT/SQUID Server
我的SQUID有做User的認證以及MAC的存取限制
現在如果User設定Proxy了...自然可以受限制去存取網頁
但User不設定Proxy因為Gateway是同一台機器所以也能夠直接上網
我又不能做Transparent Mode的Proxy因為認證會失效
我應該怎麼做呢?限制所有User使用Proxy..不然就上不到網

謝謝學長們指教!

22
各位學長好
我要設定Squid用Linux的帳號做Proxy_Auth認證
如果我設定甚麼時間User帳號會disable是不是這樣可以做帳號使用的時間限制呢?

我有到Google找了一些資料都是關於PAM的...我也有實做看看但一直失敗
在這兒想請教有相關經驗的學長給予一些指教

23
各位學長好!
小弟目前正在實做NAT/Transparent Proxy with Authenticate Mode

其實NAT/Transparent Proxy那一端都已經好了...在IE連線那兒填上proxy的ip在重新開ie也會進行認證
問題
1.如果我把proxy ip拿掉使用transparent mode就沒有辦法做認證啊
但能夠直接上internet,但我需要在transparent mode的時候也要認證.
2)當使用authenticate mode的時候每開次視窗都會要求auth一次
,密碼可不可以..enter一次直到reboot的時候才失效

我的acl設定
引用

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/password
auth_param basic children 5
auth_param basic realm ###Internet access authenticate###
auth_param basic credentialsttl 12 hours

acl company src 192.168.1.0/24
acl normal proxy_auth REQUIRED
acl all src 0.0.0.0/0.0.0.0
acl advance arp 00:D0:B7:9D:D4:71
acl mmxfile urlpath_regex \.mp3$ \.avi$ \.exe$
acl yahoopage dstdomain mail.yahoo.com
acl yahoo dstdomain .tw.yahoo.com

http_access allow localhost
http_access allow advance
http_access deny mmxfile
http_access deny yahoopage
http_access deny yahoo
http_access allow normal
http_access allow company
http_access deny all


請學長指點迷津
感謝!!

24
各位學長好!
我現在使用RHEL3.0,Full install使用RPM安裝的squid-2.5.STABLE3-3.3E版本
我使用acl advance arp 00:01:02:1f:2c:3e 00:01:02:3c:1a:8b
然後restart squid發現
引用

[root@rhent pam.d]# service squid restart
Stopping squid: 2004/06/04 17:38:01| squid.conf line 1715: acl advance arp 00:01:02:1f:2c:3e 00:01:02:3c:1a:8b
2004/06/04 17:38:01| aclParseAclLine: Invalid ACL type 'arp'
2004/06/04 17:38:01| squid.conf line 1784: http_access allow advance
2004/06/04 17:38:01| aclParseAccessLine: ACL name 'advance' not found.
2004/06/04 17:38:01| squid.conf line 1784: http_access allow advance
2004/06/04 17:38:01| aclParseAccessLine: Access line contains no ACL's, skipping
..                                                         [  OK  ]
Starting squid: ...                                        [  OK  ]

失敗竟然是Invalid ACL type 'arp'
我知道如果使用tar ball方式安裝加"“--enable-arp-acl"就可以使用了
但我現在使用rpm安裝有辦法使用arp功能嗎?....
我有找過文件了但沒甚麼人提到rpm的安裝
所以上來請教學長給些意見

25
各位學長好
我安裝Sendmail + Clamav + MailScanner安裝在RH 9.0
MailScanner使用tgz安裝
Clamav使用rpm

一切運常正確
我在設定Freshclam的時候
使用Crontab來...排程
本來教學是使用 /usr/local/bin/freshclam
但我使用rpm安裝的方法...想路徑有點不一樣
[root@linux root]# which freshclam
/usr/bin/freshclam
我改成這個路徑了
但我發現maillog出現clamav update error的問題
ClamAV updater /usr/local/bin/freshclam cannot be run
我已經改了Crontab的路徑為甚麼還是使用tar ball安裝的路徑呢?
我tail clamav的update log看看

daily.cvd updated (version: 316, sigs: 445, f-level: 1, builder: tkojm)
Database updated (21541 signatures) from database.clamav.net (203.28.142.36).
ERROR: Clamd was NOT notified: Can't connect to clamd on 127.0.0.1:3310
--------------------------------------
main.cvd is up to date (version: 23, sigs: 21096, f-level: 2, builder: ddm)
main.cvd is up to date (version: 23, sigs: 21096, f-level: 2, builder: ddm)
daily.cvd is up to date (version: 316, sigs: 445, f-level: 1, builder: tkojm)
--------------------------------------
daily.cvd is up to date (version: 316, sigs: 445, f-level: 1, builder: tkojm)
--------------------------------------

好像都有update到但...Bold那兒是甚麼error呢?
...嗯..我已經設定我的MailScanner重新開機會啟動
how about sendmail...要關閉還是啟動呢?....
教學那兒...我看了不是很明白

謝謝各位學長的指導

26
學長們好!我這兒想做這樣的東西
好像有點概念..好像沒有!

客戶那兒有Mail Server可以直接運作
但沒有防毒以及防垃圾郵件的過濾
我可不可以設定所有客戶的Mail都先到我建置的Mail Server含ClamV以及Spamassin設定經過過濾後才送到客戶的Mail Server
客戶端要發mail也是經過我Mail Server才寄到對方那兒

-------                  -------             -----------------
Client MS  <------>  My MS  <-----> Destination/Source
-------                  -------             -------------------

我所知道的是設定客戶Domain的MX指到我的Mail Server
然後我不太了解怎麼設定了...怎麼過濾後再發給客戶那兒
至於客戶那兒寄信..我想設定SmartHost就可以...對嗎?
希望學長們給意見..參考
謝謝!!

27
各位學長好!!
我有個Case是Linux自動Dial up然後到Server那兒Fetch Mail
我在公司測試沒問題..ppp0的demand=yes以及idletimeout=25
也沒問題
我搬到顧客那兒要運作的時候發現Modem不是disconnect
tcpdump 一下...發現這個奇怪的packet
我的主機主動連線到224.0.0.5..還跑OSPFv2
我檢查過我的Service..沒開zebra
這個Linux只是Clean and Full install RH9.0而已然後設定fetchmail而已..

要麻煩學長給一些建議...我該怎麼對付這個packet

引用

[root@linux root]# tcpdump dst host 224.0.0.5 -i ppp0
tcpdump: listening on ppp0
11:00:19.155901 203.106.82.1 > 224.0.0.5:  OSPFv2-hello 44: area 0.0.0.103 [tos 0xc0]  [ttl 1]
11:00:29.153947 203.106.82.1 > 224.0.0.5:  OSPFv2-hello 44: area 0.0.0.103 [tos 0xc0]  [ttl 1]
11:00:39.167619 203.106.82.1 > 224.0.0.5:  OSPFv2-hello 44: area 0.0.0.103 [tos 0xc0]  [ttl 1]
11:00:49.171525 203.106.82.1 > 224.0.0.5:  OSPFv2-hello 44: area 0.0.0.103 [tos 0xc0]  [ttl 1]
11:00:59.169572 203.106.82.1 > 224.0.0.5:  OSPFv2-hello 44: area 0.0.0.103 [tos 0xc0]  [ttl 1]
11:01:09.169573 203.106.82.1 > 224.0.0.5:  OSPFv2-hello 44: area 0.0.0.103 [tos 0xc0]  [ttl 1]
11:01:21.706688 203.106.82.1 > 224.0.0.5:  OSPFv2-hello 44: area 0.0.0.103 [tos 0xc0]  [ttl 1]

28
我的fstab
引用

LABEL=/                 /                       ext3    defaults        1 1
LABEL=/boot             /boot                   ext3    defaults        1 2
none                    /dev/pts                devpts  gid=5,mode=620  0 0
LABEL=/home             /home                   ext3    defaults        1 2
LABEL=/library  /libary  ext3  defaults  0  2
LABEL=/library1  /libary1  ext3  defaults  0  2
none                    /proc                   proc    defaults        0 0
none                    /dev/shm                tmpfs   defaults        0 0
LABEL=/usr              /usr                    ext3    defaults        1 2
LABEL=/var              /var                    ext3    defaults        1 2
/dev/hda3               swap                    swap    defaults        0 0
/dev/cdrom              /mnt/cdrom              udf,iso9660 noauto,owner,kudzu,ro 0 0
/dev/fd0                /mnt/floppy             auto    noauto,owner,kudzu 0 0
/libary1/iso/ZJ/09.ISO  /libary1/vcd/zhenjioulogy/1 auto    loop           0 0
/libary1/iso/ZJ/10.ISO  /libary1/vcd/zhenjioulogy/2 auto    loop           0 0
/libary1/iso/ZJ/11.ISO  /libary1/vcd/zhenjioulogy/3 auto    loop           0 0
/libary1/iso/ZJ/12.ISO  /libary1/vcd/zhenjioulogy/4 auto    loop           0 0
/libary1/iso/PHA/PHA.ISO /libary1/PHA           auto    loop           0 0
/libary1/iso/ZH/SETUP.ISO /libary1/zhenjiouquanshu/SETUP    auto    loop           0 0
/libary1/iso/ZH/A1.ISO /libary1/zhenjiouquanshu/A1       auto    loop           0 0
/libary1/iso/ZH/A2.ISO /libary1/zhenjiouquanshu/A2       auto    loop           0 0
/libary1/iso/ZH/A3.ISO /libary1/zhenjiouquanshu/A3       auto    loop           0 0
/libary1/iso/ZH/A4.ISO /libary1/zhenjiaoquanshu/A4       auto    loop           0 0
/libary1/iso/ZH/A5.ISO /libary1/zhenjiouquanshu/A5       auto    loop           0 0
/libary1/iso/ZH/A6.ISO /libary1/zhenjiouquanshu/A6       auto    loop           0 0
/libary1/iso/ZH/A7.ISO /libary1/zhenjiouquanshu/A7       auto    loop           0 0
/libary1/iso/ZH/B1.ISO /libary1/zhenjiouquanshu/B1       auto    loop           0 0
/libary1/iso/ZH/C1.ISO /libary1/zhenjiouquanshu/C1       auto    loop           0 0
/libary1/iso/ZH/C2.ISO /libary1/zhenjiouquanshu/C2       auto    loop           0 0
/libary1/iso/ZH/C3.ISO /libary1/zhenjiouquanshu/C3       auto    loop           0 0
/libary1/iso/ZH/D1.ISO /libary1/zhenjiouquanshu/D1       auto    loop           0 0
/libary1/iso/ZH/D2.ISO /libary1/zhenjiouquanshu/D2       auto    loop           0 0
/libary1/iso/ZH/D3.ISO /libary1/zhenjiouquanshu/D3       auto    loop           0 0
/libary1/iso/ZH/D4.ISO /libary1/zhenjiouquanshu/D4       auto    loop           0 0
/libary1/iso/ZH/E1.ISO /libary1/zhenjiouquanshu/E1       auto    loop           0 0
/libary1/iso/ZH/F1.ISO /libary1/zhenjiouquanshu/F1       auto    loop           0 0


當 mount -a時候出現
引用

mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device
mount: could not find any free loop device


檢查發現最後幾個ISO檔沒有辦法mount上去

各位學長有遇過嗎?...怎麼解決呢?

感謝指導!

29
各位學長好,
我想請教一些問題是關於DLC Protocol
現在有台機器是跑DLC Protocol所以沒有IP
因為這台機器是需要Share Resource給Client端
現有的Client端是使用Win98的OS安裝了NetBEUI Protocol就可以到網芳找到這台主機的名字
現在有一台WindowsXP也是要存取這台跑DLC Protocol的Client的資源
我知道WindowsXP沒有內建這個NetBEUI Protocol所以我到光碟的安裝工具那兒找來安裝了
但奇怪的是WindowsXP還是一直沒有辦法在網芳看那台跑DLC Protocol的電腦名字

請問有相關經驗的朋友指導

謝謝

30
各位學長好
剛裝起來的Mandrake PostFix + sasl 1.5xx有點點問題

tail -f /var/log/mail/error
引用

Mar 24 23:48:27 mail postfix/smtp[1918]: fatal: specify a password table via the `smtp_sasl_password_maps' configuration param


出現很多此類的訊息

postconf -n
引用

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
default_privs = nobody
delay_warning_time = 4
inet_interfaces = all
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailbox_command = /usr/bin/procmail -Y -a $DOMAIN
mailq_path = /usr/bin/mailq.postfixa
manpage_directory = /usr/share/man
maps_rbl_domains = relays.ordb.org
mydestination = $myhostname, localhost.$mydomain, mail.im.abc.edu.tw, im.abc.edu.tw, mail.ppp, ppp.net, zone.net, zone.com
mydomain = im.abc.edu.tw
myhostname = mail.im.abc.edu.tw
mynetworks = 140.126.107.0/24
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-1.1.13/README_FILES
relay_domains = $mydestination
sample_directory = /usr/share/doc/postfix-1.1.13/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_sasl_auth_enable = yes
smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (Mandrake Linux)
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_relay_domains
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous


所有mail發出去都會queue在那兒一堆,連postfix flush也沒有用
但可以收到mail

sasl做到auth plain {測試密碼}..都是auth fail

全部設定按照鳥哥的教學

請各位學長指點

頁: [1] 2