April 2001 - WLUG - wlug.mailman3.com

Re: fwd: [Wlug] Filtering attachments via a Sendmail ruleset?
by Paul Lussier 06 Apr '01

06 Apr '01

In a message dated: Thu, 05 Apr 2001 15:48:11 EDT Jeffry Smith said: >OK, I know we do something to "defang" stuff, could I / you pass what it >is on to this list, to answer this question? > >jeff >------- Forwarded Message > >From: "Dave Coutu" <cout(a)alum.wpi.edu> >To: <wlug(a)mail.wlug.org> >Date: Thu, 5 Apr 2001 11:10:10 -0700 >Subject: [Wlug] Filtering attachments via a Sendmail ruleset? > >Hey Guys, > > Really simple question here... A while back I had asked whether = >sendmail could filter out mail based on a subject header , and found out = >that it could. Now I have a situation here at work where we want to = >filter out attachments, the obvious being .vbs, .exe, basically anything = >that may contain a virus. We don't run anti-virus software on the mail = >server that mail is being delivered to, nor on the sendmail relays = >feeding into it, since they are Solaris boxes and we currently don't = >have a unix version of Norton lying about. But I believe that we can = >filter out attachments through a sendmail ruleset, and I am wondering if = >this is the case. If so, can someone tell me how/where to do it please? = > Would be very appreciative for any help here! Thanks in advance! What we do here is use procmail on our local, internal mail server. There's a great filtering set of procmail rules for this located at: http://www.impsec.org/email-tools/procmail-security.html As long as you have procmail installed and sendmail is configured to use procmail, just drop this stuff in place and you'll instantly start filtering stuff based on content and/or extension. There's a lot of configuration and customization you can do with this thing, and we've found that it works fantastic. We've intercepted the "AnnaKournikova" virus many, many times since it's initial release, and I can't even count the number of other virii I've seen trapped since we installed this. HTH, Seeya, Paul -- Paul Lussier Chairman, Nashua Chapter, GNHLUG Senior Systems and Network Engineer Mission Critical Linux, Inc.

3 2

Filtering attachments via a Sendmail ruleset?
by Dave Coutu 05 Apr '01

05 Apr '01

Hey Guys, Really simple question here... A while back I had asked whether sendmail could filter out mail based on a subject header , and found out that it could. Now I have a situation here at work where we want to filter out attachments, the obvious being .vbs, .exe, basically anything that may contain a virus. We don't run anti-virus software on the mail server that mail is being delivered to, nor on the sendmail relays feeding into it, since they are Solaris boxes and we currently don't have a unix version of Norton lying about. But I believe that we can filter out attachments through a sendmail ruleset, and I am wondering if this is the case. If so, can someone tell me how/where to do it please? Would be very appreciative for any help here! Thanks in advance! Dave

3 2

Volunteers needed!
by Andy Stewart 05 Apr '01

05 Apr '01

HI gang, I have been asked to be the guest speaker at the Delphi Developers Group meeting in Newton, MA on Monday, April 23rd (http://www.discom.com/delphi). They are interested in Linux due to the recent product announcement of Borland Kylix (http://www.borland.com/kylix). These folks are a group of software developers living in the Windows world. I had planned to prepare a 45 - 60 minute talk, Q/A, and then demonstrate some apps for them, such as: StarOffice Netscape Developer tools and utilities VmWare LILO Desktops - KDE, Gnome, enlightenment, etc. Installation of Linux The above list was suggested to me by their representative as a list of things that would be interesting to their developers group. I am seeking 2 or 3 people would like to volunteer to demo some of these tools at the meeting, and who can provide support for the questions which I can't answer. I'm looking for folks with systems or laptops that they are willing to bring to this meeting for the demos. I would also appreciate a volunteer or two who would be willing to critique my presentation slides before the meeting. You would not need to actually attend the meeting. I'd e-mail the slides to you and request your written feedback. The Delphi group representative will also get a sneak preview. If you are interested in either of these opportunities, please contact me this week if at all possible. Thanks in advance! Andy -- Andy Stewart, Founder -o) | Harris's Lament: All the good ones are Worcester Linux Users' Group /\ | taken. Worcester, MA, USA _\_v | http://www.wlug.org |

2 2

RE: [Wlug] Friendly ISP in Worcester
by Keller, Tim 04 Apr '01

04 Apr '01

Well, I'm only on dialup and I've been using Erols (Its actually RCN) and I've had extremely good luck with them. Like everything, your mileage may very... Tim. -----Original Message----- From: Rodrigo Gomes [mailto:gomes_k@dr.com] Sent: Wednesday, April 04, 2001 5:18 PM To: wlug(a)mail.wlug.org Subject: [Wlug] Friendly ISP in Worcester I would like to know names and url of lnx friendly ISP's in Worcester area. Thanks in advance. ______________________________________________ FREE Personalized Email at Mail.com Sign up at http://www.mail.com/?sr=signup _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

2 1

Re: [Wlug] Friendly ISP in Worcester
by Richard H Fox 04 Apr '01

04 Apr '01

I've used AT&T Worldnet with great success - much faster than other dialups... yes, the big mega-ISP but with Linux loving employees who I've spoken with for server / network related issues... how Linux friendly is AT&T??? Visit: http://www.wurd.com/eng/setup/dialers/index.htm There's other Linux stuff on the AT&T WURD site ( http://www.wurd.com ) - but I think this is what you are looking for... OH! if you want to sign up for a Linux account use this method: https://registration.att.net/cgi-bin/inregister Hit the CONTINUE REGISTRATION button - the nine-character Registration Code is not needed... The only way to avoid downloading the Wintel or MAC dialer to setup an AT&T account is through this page... and AT&T customer (tech) support forwarded me a Linux guy (Debian his preference though he runs Mandrake on one of his machines) who gave me the link, only available by direct reference... Best... Richard ----- Original Message ----- From: "Rodrigo Gomes" <gomes_k(a)dr.com> To: <wlug(a)mail.wlug.org> Sent: Wednesday, April 04, 2001 5:17 PM Subject: [Wlug] Friendly ISP in Worcester I would like to know names and url of lnx friendly ISP's in Worcester area. Thanks in advance. ______________________________________________ FREE Personalized Email at Mail.com Sign up at http://www.mail.com/?sr=signup _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Friendly ISP in Worcester
by Rodrigo Gomes 04 Apr '01

04 Apr '01

I would like to know names and url of lnx friendly ISP's in Worcester area. Thanks in advance. ______________________________________________ FREE Personalized Email at Mail.com Sign up at http://www.mail.com/?sr=signup

2 1

Firewalls
by Michael Long 03 Apr '01

03 Apr '01

After spending many hours this past week trying to understand ipchains and firewalling in general I have come to the conclusion that I am spending a lot of time trying to recreate something that probably already exists. Does anyone have any experience with either open source or commercial firewalling products that can be configured to work in a small office network and allow VPN connections to larger networks. I do not have a very big budget but would be willing to pay for the appropriate solution. Mike

5 4

Startup issues
by Michael Long 02 Apr '01

02 Apr '01

I have been playing with my network settings today and have made a change that has caused my system to be unable to read this file during boot up. Also any script that tries to read from it is unable to. Unfortunately I have no idea what I did to cause this. The following is the out put from 'ls -l' -rw-r--r-- 1 root root 235 Jan 30 19:59/ etc/rc.config.d/idedma.rc.config I am running SuSE 7.0. Thanks, mike

2 2