February 2003 - WLUG - wlug.mailman3.com

qmail - several domain!

by Aramico - pop3.nomadss.com

Hi all, I've got my qmail server run so well, it's all nice. Ups, I've got something that bother me alyways! I have several domains hosted in my server where my qmail server running on too, The mail problem is, If somebody send me a message where the address is one of the my listed domain in my server, then.. if I read the mail from one of the available account from my server, here,. I'll receive all the email that attach to my username, so all my email address from the available domain are received in on of the account that I use to open the mail. So, how can I open one of my email address and I just receive the mail that attach to the address where I mean to ? Thanks Man.

Feb. 10, 2003

Re: [Wlug] floppy question

by Gary Hanley

On Sun, 9 Feb 2003, Wesley Allen wrote: > I guess the easiest solution would be to just get a usb floppy drive and > have your mom use that. What are they $25 now? > Wes Geeze, is there anything they won't put on USB anymore? :-) I did quick look because I never heard of such a thing and they do indeed exist. However the cheapest I saw was as $36. One word of caution though: Don't rule out that the test floppy was bad also. It's happened to me before and also with two CDROM drives. Especially since those "nasty searching sounds" imply that the controller is fine and is talking to the drive. -- Gary

Feb. 10, 2003

Re: [Wlug] floppy question

by Bill Smith

On Mon, 10 Feb 2003 10:03:37 -0500 Theo Van Dinter <felicity(a)kluge.net> wrote: TVD> On Mon, Feb 10, 2003 at 07:20:25AM -0500, Gary Hanley wrote: TVD> > One word of caution though: Don't rule out that the test floppy TVD> > was bad also. It's happened to me before and also with two CDROM TVD> > drives. Especially since those "nasty searching sounds" imply TVD> > that the controller is fine and is talking to the drive. TVD> TVD> Just to note: I did try multiple floppy disks, 2 different floppy TVD> drives, and at least 2 different cables. TVD> TVD> While the drive looks like it's properly being searched at bootup, TVD> it doesn't actually ever seem to get read. Very confusing. knowing you guys, it's likely the floppy controller (i know you would have checked the pin alignment on the connectors, right? <g>)... you have an option that i might be able to help with: i have some OLD cards kicking around.... <g> you might be able to use one of them for the floppy controller on THAT, if you want to give it a stab. ;) i have to take a trip up your way sometime soon anyway.... ahhh... the Hardware Genie strikes again! -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- William Smith wsmith-at-chezsmith-dot-com Fall River, MA http://www.chezsmith.com Every cloud has a silver lining. ...except mushroom- shaped ones, which have a lining of Iridium and Strontium 90. * TAG! v3.1 *

Feb. 10, 2003

Re: [Wlug] floppy question

by Wesley Allen

On Sun, 2003-02-09 at 16:37, Michelle Vadeboncoeur wrote: > I hope you guys don't mind a hardware-related question... The short of it > is, if a floppy controller appears dead, short of getting a new > motherboard how do I get a floppy drive to work on that system? > > I guess the easiest solution would be to just get a usb floppy drive and have your mom use that. What are they $25 now? Wes

Feb. 9, 2003

floppy question

by Michelle Vadeboncoeur

I hope you guys don't mind a hardware-related question... The short of it is, if a floppy controller appears dead, short of getting a new motherboard how do I get a floppy drive to work on that system? I recently upgraded my home computer so that I could play the new game I got for Christmas... So, the usual course of events is to play hand-me-down computer parts in my family, so my old computer would go to upgrade my mother's computer (admittedly a Windows98 box, used for Juno email/web and playing Solitaire... so no heavy usage). My old box is old in computer terms, but it's a heck of a lot faster than the P200 that my mother currently has. I rarely used my floppy drive (the last time prior to taking that box down was a few months prior). When transferring files from my old box to my new computer, I needed to run a Windows app off of a floppy - and discovered that the floppy drive didn't work on my old box. I tried swapping the 3.5" floppy drive out for another one that I had lying around, and that one didn't work either... I also tried swapping out the floppy cables, and that didn't work. BIOS sees the 3.5" floppy drive, but the box won't boot off of a boot floppy (that is readable on other computers) or read anything off of the floppy drive (makes nasty searching sounds) when in Windows... So, my guess is that the floppy drive controller on the motherboard isn't working... My mother is adamant that she needs a working floppy drive (old files saved, and so she can transfer stuff from work to home and back). I'd really like to give her my old box for a nice CPU/RAM upgrade, but unless I can get it to use a 3.5" floppy drive, she won't take it... Any suggestions as to how I can get a floppy drive to work on my old box? Or am I just out of luck for upgrading her with my old box? -- --==*==-- --==*==-- Michelle R. Vadeboncoeur --==*==-- --==*==-- mrv(a)kluge.net: http://www.kluge.net/~mrv/

Feb. 9, 2003

Re: [Wlug] ssh-dummy-shell for OpenSSH???

by ele3＠bach.eenetworks.com

Here's a chroot patch to sftp-server.c for openssh-3.5p1 that I use that may be of some use to you: http://www.alt219.com/software/sftp-server-chroot/ Ebon On Wed, 30 Jan 2002, Keller, Tim wrote: > I'm setting up a test environment using OpenSSH built in sFTP server. What > I want to-do is build a chroot environment where people can connect to the > machine via sFTP but not via SSH. > > I know with the commercial version of SSH they have ssh-dummy-shell which > when you try to connect via SSH just bails on you, but lets sFTP work > properly. > > I've done some digging on the web and I haven't found anything that'll > replace this functionality on the OpenSSH side of things. > > Anybody got any ideas/links of an open source version of ssh-dummy-shell. > > Thanks, > Tim. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Feb. 9, 2003

Re: [Wlug] ssh-dummy-shell for OpenSSH???

by Charles R. Anderson

Be careful. OpenSSH has some features that could compromise your security. It lets the user set environment variables when the user connects. A user could upload a library and override C Library functions with LD_PRELOAD to execute whatever they want. There are a couple sftp-only shells that were designed to handle being used in the manner you want, but they caution you to disable the rc features in sshd_config or take other security precautions: http://www.pizzashack.org/rssh/security.shtml On Sat, Feb 08, 2003 at 03:51:38AM -0500, Brian K. White wrote: brian> I have sort-of got this by setting the shell to sftp-server. brian> bizarre, I know, but it works, and a copy of /bin/true does not. brian> brian> in both the real and chroot'ed /etc/passwd's I set the shell to the full brian> path to sftp-server, and sftp works, ssh does not. brian> brian> ssh actually connects and will sit there until you type something, but brian> as soon as you type anything sftp-server says "what is this rubbish?" brian> and promptly hangs up on you. brian> brian> I don't have any real shell, or any other binary besides sftp-server in brian> my chroot tree, and even though users can upload their own, they cannot brian> execute it because their shell is only sftp-server, which is not a shell brian> and cannot execute anything. I hope it doesn't have any cases where it brian> could execute any external program like ls (I know it doesn't need ls brian> specifically, just as an example the way ftpd often uses a ls binary in brian> the chroot path). otherwise a person might be able to upload a shell brian> named <whatever sftp-server might exec> brian> brian> this is OpenSSH 3.5p1 with chroot patch, on SCO Open Server 5.0.6 -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

Feb. 9, 2003

Re: [Wlug] ssh-dummy-shell for OpenSSH???

by Brian K. White

I have sort-of got this by setting the shell to sftp-server. bizarre, I know, but it works, and a copy of /bin/true does not. in both the real and chroot'ed /etc/passwd's I set the shell to the full path to sftp-server, and sftp works, ssh does not. ssh actually connects and will sit there until you type something, but as soon as you type anything sftp-server says "what is this rubbish?" and promptly hangs up on you. I don't have any real shell, or any other binary besides sftp-server in my chroot tree, and even though users can upload their own, they cannot execute it because their shell is only sftp-server, which is not a shell and cannot execute anything. I hope it doesn't have any cases where it could execute any external program like ls (I know it doesn't need ls specifically, just as an example the way ftpd often uses a ls binary in the chroot path). otherwise a person might be able to upload a shell named <whatever sftp-server might exec> this is OpenSSH 3.5p1 with chroot patch, on SCO Open Server 5.0.6 ------------ Actually it does. I tried /bin/false and it fails to setup the ssh connection properly. I guess the shell will let sftp only run specific sftp commands, anything else causes it to exit. -----Original Message----- From: Scott Venier [mailto:scottven@umich.edu] Sent: Wednesday, January 30, 2002 10:58 AM To: wlug(a)mail.wlug.org Subject: Re: [Wlug] ssh-dummy-shell for OpenSSH??? does the ssh-dummy-shell have to actually do anything for sFTP to work, or does it just have to be in /etc/shells? If it just has to be in /etc/shells, /bin/false works. Been using that for years for (non-s)FTP-only accounts. Scott On Wed, 30 Jan 2002, Keller, Tim wrote: > I'm setting up a test environment using OpenSSH built in sFTP server. What > I want to-do is build a chroot environment where people can connect to the > machine via sFTP but not via SSH. > > I know with the commercial version of SSH they have ssh-dummy-shell which > when you try to connect via SSH just bails on you, but lets sFTP work > properly. > > I've done some digging on the web and I haven't found anything that'll > replace this functionality on the OpenSSH side of things. > > Anybody got any ideas/links of an open source version of ssh-dummy-shell. > > Thanks, > Tim. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug -- Brian K. White -- brian(a)aljex.com -- http://www.aljex.com/bkw/ +++++[>+++[>+++++>+++++++<<-]<-]>>+.>.+++++.+++++++.-.[>+<---]>++. filePro BBx Linux SCO Prosper/FACTS AutoCAD #callahans Satriani

Feb. 8, 2003

RE: [Wlug] Disable telnet and ssh, but ftp and email still enable !

by Keller, Tim

Aramico, I'm taking the guess that your users are using pop3 to access their email. If you set their shell to /bin/false this will allow them to access email and ftp, but they won't be able to login. Hope this helps, Tim. -----Original Message----- From: Aramico [mailto:aramico@duahati.com] Sent: Thursday, February 06, 2003 2:33 AM To: wlug(a)mail.wlug.org Subject: [Wlug] Disable telnet and ssh, but ftp and email still enable! Hi all, I have several user in my linux machine. And now, I've just finished configure my qmail server. qmail only works for the user who has the home directory. by this, I've got to create several users with their directory if I want to create an email address for them. It's not secure! How can I make disable ssh and telnet to my user ? By this my user still can access the email and ftp, but can not login via telnet and ssh service. what configuration that I need to do ? Thanks Man.

Feb. 6, 2003

Disable telnet and ssh, but ftp and email still enable!

by Aramico

Hi all, I have several user in my linux machine. And now, I've just finished configure my qmail server. qmail only works for the user who has the home directory. by this, I've got to create several users with their directory if I want to create an email address for them. It's not secure! How can I make disable ssh and telnet to my user ? By this my user still can access the email and ftp, but can not login via telnet and ssh service. what configuration that I need to do ? Thanks Man.

Feb. 6, 2003