From owner-fwtk-users@ex.tis.com Fri Jun 1 01:41 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id BAA05159 Fri, 1 Jun 2001 01:41:26 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id AAA04419; Fri, 1 Jun 2001 00:45:14 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 31 May 2001 22:05:41 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA26162 for fwtk-users-outgoing; Thu, 31 May 2001 22:04:20 -0500 (CDT) Message-Id: <5.1.0.14.0.20010531225749.01f4cec0@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Thu, 31 May 2001 22:59:06 -0400 To: Don Pro , fwtk From: Rick Murphy Subject: Re: spam patch compilation problem In-Reply-To: <3B169A00.D6F52254@lclcan.com> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 416 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 03:22 PM 5/31/01 -0400, Don Pro wrote: >/usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' >/usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' >collect2: ld returned 1 exit status Add "-lresolv" to the AUXLIB line in Makefile.config. -Rick From owner-fwtk-users@ex.tis.com Fri Jun 1 09:41 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA06343 Fri, 1 Jun 2001 09:41:50 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA28034; Fri, 1 Jun 2001 08:45:32 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Jun 2001 06:06:05 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA17326 for fwtk-users-outgoing; Fri, 1 Jun 2001 06:04:43 -0500 (CDT) From: dw@netzstation.net X-Authentication-Warning: fw.netzstation.net: Processed by hermes with -C /etc/sendmail.orig.cf Subject: Antwort: spam patch compilation problem To: Don Pro Cc: Message-ID: Date: Fri, 1 Jun 2001 11:58:59 +0100 February 2000) at 01/06/2001 12:59:26 MIME-Version: 1.0 X-AntiVirus: scanned for viruses by AMaViS 0.2.1 (http://amavis.org/) Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by relay2.nai.com id GAA17323 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 2405 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, I had the same Problem some time ago. You need to compile with "resolv". Write "AUXLIB= -lcrypt -lresolv" in your Makefile.config. Search for AUXLIB. Mit freundlichem Gruss / Best Regards ------------------------------------------------------------------------- - Dieter Windmüller - Netzstation Informationstechnik GmbH e-mail: dw@netzstation.net Don Pro An: fwtk Gesendet von: Kopie: owner-fwtk-users@ Thema: spam patch compilation problem ex.tis.com 31.05.01 20:22 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, I am attempting to compile Ted Keller's smap/smapd anti-spam, anti-relay patch. I am getting the following compilation error when I try to compile: smap.o: In function `main': /usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' /usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' collect2: ld returned 1 exit status make: *** [smap] Error 1 I am running RedHat 6.2 out of the box. Is this error documented? Thanks, Don From owner-fwtk-users@ex.tis.com Fri Jun 1 12:28 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA06734 Fri, 1 Jun 2001 12:28:07 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA21836; Fri, 1 Jun 2001 11:31:53 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Jun 2001 08:52:04 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA28780 for fwtk-users-outgoing; Fri, 1 Jun 2001 08:50:42 -0500 (CDT) Message-ID: <3B179B5B.15C37461@quest-innovations.com> Date: Fri, 01 Jun 2001 15:40:43 +0200 From: Richard Meester X-Mailer: Mozilla 4.7 [en] (Win98; I) X-Accept-Language: en MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: second internal smtp host. Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 906 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello all, Maybe this is the wrong place to ask, but i nees an answer and don't know where to ask. I have a machine setup with sendmail and smap. I have a domain x.y. Now i wan't to add another sub-domain a.x.y. I have entered an entry in my DNS record for this sub-domain machine.a.x.y. What i now need to do, and don't know how to do is that email send to my main mail sorter which is for the sub domain a.x.y is redirected to this other machine instead of out. Right know the mailer doesn't see that it should redirect mail for a.x.y. to another machine inside the network, and tries to send out the email to the smart host specified in the sendmail.cf. Can you help?? Regards, Richard -- Quest Innovations tel: +31 (0) 227 604046 http://www.quest-innovations.com From owner-fwtk-users@ex.tis.com Fri Jun 1 12:51 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA06810 Fri, 1 Jun 2001 12:51:43 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA26353; Fri, 1 Jun 2001 11:55:30 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Jun 2001 09:16:05 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA01647 for fwtk-users-outgoing; Fri, 1 Jun 2001 09:14:42 -0500 (CDT) Message-ID: <3B17A3DC.4CFBF2E7@lclcan.com> Date: Fri, 01 Jun 2001 10:17:00 -0400 From: Don Pro X-Mailer: Mozilla 4.75 [en] (Win98; U) X-Accept-Language: en,pdf MIME-Version: 1.0 To: Ted Keller CC: fwtk Subject: Re: spam patch compilation problem References: <5.1.0.14.0.20010531225749.01f4cec0@mail.itm-inst.com> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 2042 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi Ted, Thanks for all you help. I am happy to report that after initial testing, it looks to be working quite well. I have tested by sending e-mail from outside accounts that contain spam as well as blocked users and they have been rejected accordingly. I am quite pleased. If you don't mind, I have a few questions pertaining to the three files responsible for rejecting. spam ------ This file seems to be using the message envelope to block e-mail from 1) specific I.P. (wild card accepted) 2) specific domain (wild card accepted) 3) specific e-mail (must be enclosed between < >) Is the above analysis correct including the need to enclose email addressed in < > such as ? block ==== This file seems also uses the message envelope to block e-mail. What is the difference between this file and the 'spam' file? I'm also unsure of the syntax as I see various syntax such as: <*> <*> At 03:22 PM 5/31/01 -0400, Don Pro wrote: > >/usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' > >/usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' > >collect2: ld returned 1 exit status > Add "-lresolv" to the AUXLIB line in Makefile.config. > -Rick From owner-fwtk-users@ex.tis.com Fri Jun 1 13:11 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA06861 Fri, 1 Jun 2001 13:11:07 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA29158; Fri, 1 Jun 2001 12:14:55 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Jun 2001 09:36:05 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA04440 for fwtk-users-outgoing; Fri, 1 Jun 2001 09:34:44 -0500 (CDT) Message-ID: <3B17A881.6ADDE6BB@lclcan.com> Date: Fri, 01 Jun 2001 10:36:49 -0400 From: Don Pro X-Mailer: Mozilla 4.75 [en] (Win98; U) X-Accept-Language: en,pdf MIME-Version: 1.0 To: Ted Keller CC: fwtk Subject: smap patch Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 297 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi Ted, I have another question. Is there a way, using your smap patch, to block e-mails that contain undesirable attachments such as EXE or VBS files? Thanks, Don From owner-fwtk-users@ex.tis.com Fri Jun 1 13:25 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA06903 Fri, 1 Jun 2001 13:25:58 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA01429; Fri, 1 Jun 2001 12:29:46 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Jun 2001 09:50:42 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA05931 for fwtk-users-outgoing; Fri, 1 Jun 2001 09:49:20 -0500 (CDT) Message-ID: <3B17ABFD.7FB04090@lclcan.com> Date: Fri, 01 Jun 2001 10:51:41 -0400 From: Don Pro X-Mailer: Mozilla 4.75 [en] (Win98; U) X-Accept-Language: en,pdf MIME-Version: 1.0 To: fwtk Subject: email question Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 419 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, I received a piece of spam e-mail that had a "from" address of: admin@mydomain.com where mydomain.com is in fact my domain! Is this something that smap or sendmail is doing when receiving e-mails without a qualified "from" address or is the sender somehow doing this? Thanks, Don From owner-fwtk-users@ex.tis.com Fri Jun 1 13:29 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA06910 Fri, 1 Jun 2001 13:29:44 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA01886; Fri, 1 Jun 2001 12:33:32 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Jun 2001 09:53:52 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA06442 for fwtk-users-outgoing; Fri, 1 Jun 2001 09:52:30 -0500 (CDT) Date: Fri, 1 Jun 2001 10:52:25 -0400 From: Joseph S D Yao To: Don Pro Cc: fwtk Subject: Re: spam patch compilation problem Message-ID: <20010601105224.C7613@washington.cospo.osis.gov> Mail-Followup-To: Don Pro , fwtk References: <3B169A00.D6F52254@lclcan.com> Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3B169A00.D6F52254@lclcan.com>; from don@lclcan.com on Thu, May 31, 2001 at 03:22:40PM -0400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 924 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Thu, May 31, 2001 at 03:22:40PM -0400, Don Pro wrote: > I am attempting to compile Ted Keller's smap/smapd anti-spam, anti-relay > patch. I am getting the following compilation error when I try to > compile: > > smap.o: In function `main': > /usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' > /usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' > collect2: ld returned 1 exit status > make: *** [smap] Error 1 > > I am running RedHat 6.2 out of the box. Is this error documented? Yes. Add -lres to the end of the libraries. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao OSIS Center Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Fri Jun 1 14:48 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA07079 Fri, 1 Jun 2001 14:48:28 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA15895; Fri, 1 Jun 2001 13:52:15 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Jun 2001 11:10:30 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA18549 for fwtk-users-outgoing; Fri, 1 Jun 2001 11:09:08 -0500 (CDT) Date: Fri, 1 Jun 2001 09:08:29 -0700 X-Mini-Diatribe: To fix America: 1. Cut Government in half 2. Wait thirty years 3. Repeat as necessary Message-Id: <200106011608.JAA03795@noid.net> From: Tor Perkins To: fwtk Subject: max URL length in http-gw.c X-Operating-System: Linux 2.2.19 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 592 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] In http-gw.h there is: #define PATH_MAX 1024 PATH_MAX, however, never appears anywhere else in the source code ('doh!). Instead there are things like this in http-gw.c: static char newurl[1200]; /* field for rewriting */ and later: cpystr(value,newurl,1022); Well, mapquest.com can generate an URL > 1022 chars... :P Probably other sites do as well. Since this seems a bit messy, I was curious; has anyone already created a patch for this? - Tor From owner-fwtk-users@ex.tis.com Sat Jun 2 02:06 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id CAA08344 Sat, 2 Jun 2001 02:06:44 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id BAA11181; Sat, 2 Jun 2001 01:10:33 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Jun 2001 22:27:31 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA04731 for fwtk-users-outgoing; Fri, 1 Jun 2001 22:26:10 -0500 (CDT) Date: Fri, 1 Jun 2001 23:25:37 -0400 (EDT) From: Ted Keller To: Don Pro cc: fwtk Subject: Re: spam patch compilation problem In-Reply-To: <3B17A3DC.4CFBF2E7@lclcan.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 7435 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi Don, I'll attempt to answer your questions.... > spam > ------ > This file seems to be using the message envelope to block e-mail from > 1) specific I.P. (wild card accepted) > 2) specific domain (wild card accepted) > 3) specific e-mail (must be enclosed between < >) > > Is the above analysis correct including the need to enclose email > addressed in < > such as ? You analysis appears correct. The program uses the nacasematch which comes from the original tool kit. This appears to support wild-card processing (although I have not used it). You are correct - domains and IP numbers are listed without the <> brackets. E-mail address include the <> brackets. > block > ==== > This file seems also uses the message envelope to block e-mail. > What is the difference between this file and the 'spam' file? > I'm also unsure of the syntax as I see various syntax such as: > > <*> > <*> > > Finally, how do I use this file to block e-mail that comes in for > internal users who have long departed my organization? > The spam file is a basic block mechanism based on the connecting host or from address. The block file deals with the from/to address combinations. In the above examples... <*> <*> We block a internal system that was generating noise to an external site - and block an external site from responding to a bounced address. I had this occur one evening where one of my internal systems was ping-ponging between its printer daemon and an external site. Simply chewing up resources and filling up logs. Since this was after hours - I couldn't call the site to resolve the problem. This was an effective way to block that traffic. In this case - the internal user did not want to see e-mail from this one address at aol.com. The reasons aren't important - but it is an effective way to prevent abuse of your e-mail system by an external entity. <*> This example blocks all mail to user@bfg.com - a past employee who had signed up for many list servers... In each case - the remote system gets a user not found message - and we don't accept the mail into our network. > spamlist.dat > ========= > This file uses the message contents (header and body) top block e-mail > 1) anything prefaced by 'tag' appears to block by domain. Is this > redundant as it seems I can use the 'spam' file to accomplish this? > 2) Besides 'tag' and 'text', are there any other keys? > 3) Where can I update this list (as will as the 'spam' file)? > 4) Can I disable using this file if I find that the perfomance his is > much for my hardware? The spam file deals with the envelop. The spamlist.dat file deals with the message body (header and first few lines of text). What we find a lot is people (spammers) will put anything in the headers - few of these things are valid - or at least don't match the envelop. This mechanism allows us to do content filtering - at least to some degree. The types are.... from - header from: address. The from string must be "stand-alone". This implies that the string is either at the start or end of the line - or it is separated by white space. Multiple white space characters are omitted. The exception is the "@" In these cases, the @ does not have to be preceded or followed by white space. Kind of allows us to block anyone from xxx.com. to - header to: adrress. Again - the string must be stand alone. - Same rules apply as far as the @ character. subject - the subject line - text must be "stand alone" header - the text appears on any header line - bcc, ... text - body of the message - string is "stand alone". - note html body tags are ignored (replace by single space). Now comes the more interesting ones.... tag - this represents a text string located within an html tag. This is handy for the lines like... (or what ever). In this case - a line tag nude will capture this message as spam. Likewise (and I'm not sure you have this support yet) string nude will capture anything with the characters nude in the line - not necesarliy stand alone. This last options is great for things like casino .. casino! .. casino!!! sting will capture all of these with a single entry. Be careful, however, a line like string sex will capture the sex site - and sexton.com - a site that you may actually value (well at least I do). you have similar issues with blindly using adult - this captures adult education and the like. I've also added one additional support (again you probably don't have this one yet) which allows the mapping of users - and the overriding of file size limits for specific e-mail addresses. Our general limit is 15mb messages. However, we do have situations where, due to contract requirements, messages sizes larger than 15mb are required. With the stock smap, this is a hard feature to permit. The mapping file allows overrides for specific from or to address combinations. I'll get this out in my next tarball. Hope this helps. ted keller On Fri, 1 Jun 2001, Don Pro wrote: > Hi Ted, > > Thanks for all you help. I am happy to report that after initial > testing, it looks to be working quite well. I have tested by sending > e-mail from outside accounts that contain spam as well as blocked users > and they have been rejected accordingly. I am quite pleased. > > If you don't mind, I have a few questions pertaining to the three files > responsible for rejecting. > > spam > ------ > This file seems to be using the message envelope to block e-mail from > 1) specific I.P. (wild card accepted) > 2) specific domain (wild card accepted) > 3) specific e-mail (must be enclosed between < >) > > Is the above analysis correct including the need to enclose email > addressed in < > such as ? > > block > ==== > This file seems also uses the message envelope to block e-mail. > What is the difference between this file and the 'spam' file? > I'm also unsure of the syntax as I see various syntax such as: > > <*> > <*> > > Finally, how do I use this file to block e-mail that comes in for > internal users who have long departed my organization? > > spamlist.dat > ========= > This file uses the message contents (header and body) top block e-mail > 1) anything prefaced by 'tag' appears to block by domain. Is this > redundant as it seems I can use the 'spam' file to accomplish this? > 2) Besides 'tag' and 'text', are there any other keys? > 3) Where can I update this list (as will as the 'spam' file)? > 4) Can I disable using this file if I find that the perfomance his is > much for my hardware? > > Thanks again for all your help, > Don > > > At 03:22 PM 5/31/01 -0400, Don Pro wrote: > > >/usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' > > >/usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' > > >collect2: ld returned 1 exit status > > Add "-lresolv" to the AUXLIB line in Makefile.config. > > -Rick > > From owner-fwtk-users@ex.tis.com Sat Jun 2 02:06 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id CAA08345 Sat, 2 Jun 2001 02:06:44 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id BAA11185; Sat, 2 Jun 2001 01:10:33 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Jun 2001 22:28:29 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA04754 for fwtk-users-outgoing; Fri, 1 Jun 2001 22:27:08 -0500 (CDT) Date: Fri, 1 Jun 2001 23:26:37 -0400 (EDT) From: Ted Keller To: Don Pro cc: fwtk Subject: Re: smap patch In-Reply-To: <3B17A881.6ADDE6BB@lclcan.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 529 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Don, Haven't looked at this for the smap routine. We tend to do this type of work on our internal mail hubs -either with a commercial product - or a sendmail extension. tek On Fri, 1 Jun 2001, Don Pro wrote: > Hi Ted, > > I have another question. Is there a way, using your smap patch, to > block e-mails that contain undesirable attachments such as EXE or VBS > files? > > Thanks, > Don > > From owner-fwtk-users@ex.tis.com Sat Jun 2 02:07 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id CAA08350 Sat, 2 Jun 2001 02:06:59 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id BAA11189; Sat, 2 Jun 2001 01:10:49 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Jun 2001 22:30:59 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA04820 for fwtk-users-outgoing; Fri, 1 Jun 2001 22:29:37 -0500 (CDT) Date: Fri, 1 Jun 2001 23:29:12 -0400 (EDT) From: Ted Keller To: Don Pro cc: fwtk Subject: Re: email question In-Reply-To: <3B17ABFD.7FB04090@lclcan.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 874 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Don, Normally, this is a "feature" of sendmail - especially if you specify always add domain in your sendmail configuration file. Sendmail will detect body to: admin and convert that to to: admin@mydomain.com Just love working around this one.... tek On Fri, 1 Jun 2001, Don Pro wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hi, > > I received a piece of spam e-mail that had a "from" address of: > > admin@mydomain.com > > where mydomain.com is in fact my domain! > > Is this something that smap or sendmail is doing when receiving e-mails > without a qualified "from" address or is the sender somehow doing this? > > Thanks, > Don > > From owner-fwtk-users@ex.tis.com Sat Jun 2 07:13 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA08854 Sat, 2 Jun 2001 07:13:17 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA22064; Sat, 2 Jun 2001 06:17:06 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Sat, 2 Jun 2001 03:36:25 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA17014 for fwtk-users-outgoing; Sat, 2 Jun 2001 03:35:04 -0500 (CDT) From: kasiviswanath_nukala@ivillage.com Date: 2 Jun 2001 01:34:23 -0700 Message-ID: <20010602083423.18231.cpmta@c006.snv.cp.net> X-Sent: 2 Jun 2001 08:34:23 GMT Content-Disposition: inline Mime-Version: 1.0 To: don@lclcan.com Cc: fwtk-users@lists.nai.com X-Mailer: Web Mail 3.9.2.3 Subject: Re: email question X-Sent-From: kasiviswanath_nukala@ivillage.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 531 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi, i.ve recently joined u r community> i got a problem like i'm unable to find any kind of ide (integrated development environment) on linux platform if any of u knows please let me know how? thanking you _________________________________________________________________ iVillage.com: Solutions for Your Life Check out the most exciting women's community on the Web http://www.ivillage.com From owner-fwtk-users@ex.tis.com Mon Jun 4 00:22 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id AAA11654 Mon, 4 Jun 2001 00:22:22 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id XAA23774; Sun, 3 Jun 2001 23:25:23 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 3 Jun 2001 20:41:58 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id UAA16769 for fwtk-users-outgoing; Sun, 3 Jun 2001 20:40:37 -0500 (CDT) Message-ID: <3B1AE758.DD435A57@v-one.com> Date: Sun, 03 Jun 2001 21:41:44 -0400 From: Keith Young Organization: V-ONE X-Mailer: Mozilla 4.77 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: Rick Murphy , fwtk Subject: Re: smap References: <5.1.0.14.0.20010529185233.00ac1750@mail.itm-inst.com> <5.1.0.14.0.20010529200932.01f6d6f0@mail.itm-inst.com> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 674 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Rick Murphy wrote: > It's getting to be time to have only one smap, I think. I've got a few > weeks off at school in mid-june; maybe I should work on consolidating the > patches? > -Rick Rick, FYI, I've heard that we may hear an official response by the end of the month if NAI is going to make the FWTK open source. This may make it easier if we are all working off of one code tree rather than having several "private" patches floating around... -- --Keith Young -Director of Customer Care/Support, V-ONE Corp. -kyoung@v-one.com From owner-fwtk-users@ex.tis.com Mon Jun 4 11:39 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15178 Mon, 4 Jun 2001 11:39:01 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA20643; Mon, 4 Jun 2001 10:42:53 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Jun 2001 08:00:21 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA18534 for fwtk-users-outgoing; Mon, 4 Jun 2001 07:59:00 -0500 (CDT) Message-ID: <20010531170502.76576.qmail@web11005.mail.yahoo.com> Date: Thu, 31 May 2001 10:05:02 -0700 (PDT) From: Naresh Narang Subject: Re: reg : fetch mail To: Rajesh Bada , "fwtk-users@ex.tis.com " In-Reply-To: <20010531094906.8524.qmail@mailweb24.rediffmail.com> MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 907 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Use Fetchmail. Naresh --- Rajesh Bada wrote: > [To be removed from this list send the message > "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > hi > > i had setup senmail server on my linux server > by using static ip address. > > how can i fetch my mail from isp running dns server > with > mx record. > > PL SEND THE DEATILS SOON > > THANKS > RAJESH BADA > > > _____________________________________________________ > Chat with your friends as soon as they come online. > Get Rediff Bol at > http://bol.rediff.com ===== -- Naresh __________________________________________________ Do You Yahoo!? Get personalized email addresses from Yahoo! Mail - only $35 a year! http://personal.mail.yahoo.com/ From owner-fwtk-users@ex.tis.com Mon Jun 4 11:39 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15179 Mon, 4 Jun 2001 11:39:02 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA20649; Mon, 4 Jun 2001 10:42:54 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Jun 2001 08:01:20 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA18618 for fwtk-users-outgoing; Mon, 4 Jun 2001 07:59:59 -0500 (CDT) Message-ID: <3B17C83C.9EBA7A72@lclcan.com> Date: Fri, 01 Jun 2001 12:52:13 -0400 From: Don Pro X-Mailer: Mozilla 4.75 [en] (Win98; U) X-Accept-Language: en,pdf MIME-Version: 1.0 To: Adam Laurie CC: fwtk Subject: Re: email question References: <3B17ABFD.7FB04090@lclcan.com> <3B17C58F.C95B2F5A@algroup.co.uk> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 759 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Adam Laurie wrote: > Don Pro wrote: > > > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > > BODY of a mail message to majordomo@ex.tis.com.] > > > > Hi, > > > > I received a piece of spam e-mail that had a "from" address of: > > > > admin@mydomain.com > > > > where mydomain.com is in fact my domain! > > > > Is this something that smap or sendmail is doing when receiving e-mails > > without a qualified "from" address or is the sender somehow doing this? > > the sender is doing it - it is a spammers trick to bypass filters. > > cheers, > Adam Any idea how to trap this type of spamming? From owner-fwtk-users@ex.tis.com Mon Jun 4 11:39 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15184 Mon, 4 Jun 2001 11:39:03 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA20653; Mon, 4 Jun 2001 10:42:55 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Jun 2001 08:00:21 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA18533 for fwtk-users-outgoing; Mon, 4 Jun 2001 07:58:59 -0500 (CDT) Message-ID: <3B17C58F.C95B2F5A@algroup.co.uk> Date: Fri, 01 Jun 2001 17:40:47 +0100 From: Adam Laurie X-Mailer: Mozilla 4.7 [en-gb] (Win98; I) X-Accept-Language: en MIME-Version: 1.0 To: Don Pro Cc: fwtk Subject: Re: email question References: <3B17ABFD.7FB04090@lclcan.com> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 991 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Don Pro wrote: > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hi, > > I received a piece of spam e-mail that had a "from" address of: > > admin@mydomain.com > > where mydomain.com is in fact my domain! > > Is this something that smap or sendmail is doing when receiving e-mails > without a qualified "from" address or is the sender somehow doing this? the sender is doing it - it is a spammers trick to bypass filters. cheers, Adam -- Adam Laurie Tel: +44 (20) 8742 0755 A.L. Digital Ltd. Fax: +44 (20) 8742 5995 The Stores http://www.thebunker.net 2 Bath Road http://www.aldigital.co.uk London W4 1LT mailto:adam@algroup.co.uk UNITED KINGDOM PGP key on keyservers From owner-fwtk-users@ex.tis.com Mon Jun 4 11:39 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15216 Mon, 4 Jun 2001 11:39:49 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA20764; Mon, 4 Jun 2001 10:43:41 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Jun 2001 08:02:21 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA18683 for fwtk-users-outgoing; Mon, 4 Jun 2001 08:00:59 -0500 (CDT) Date: Fri, 1 Jun 2001 13:25:19 -0400 (EDT) From: David Hamm X-Sender: dhamm@itrepro.atlanta.itserve.com To: Richard Meester cc: fwtk-users@lists.nai.com Subject: Re: second internal smtp host. In-Reply-To: <3B179B5B.15C37461@quest-innovations.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1367 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] You'll have to work with DNS. The way I do this is have an entry in named.conf and a file db.thedomain. In named.conf I do primary name resolution and I set the MX record in db.thedomain to point to the target smtp server. On Fri, 1 Jun 2001, Richard Meester wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hello all, > > Maybe this is the wrong place to ask, but i nees an answer and don't > know where to ask. > > I have a machine setup with sendmail and smap. I have a domain x.y. Now > i wan't to add another sub-domain a.x.y. I have entered an entry in my > DNS record for this sub-domain machine.a.x.y. > > What i now need to do, and don't know how to do is that email send to my > main mail sorter which is for the sub domain a.x.y is redirected to this > other machine instead of out. Right know the mailer doesn't see that it > should redirect mail for a.x.y. to another machine inside the network, > and tries to send out the email to the smart host specified in the > sendmail.cf. > > Can you help?? > > Regards, > > Richard > > -- > Quest Innovations > tel: +31 (0) 227 604046 > http://www.quest-innovations.com > > From owner-fwtk-users@ex.tis.com Mon Jun 4 11:39 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15224 Mon, 4 Jun 2001 11:39:58 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA20789; Mon, 4 Jun 2001 10:43:50 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Jun 2001 08:02:21 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA18684 for fwtk-users-outgoing; Mon, 4 Jun 2001 08:00:59 -0500 (CDT) Message-Id: <5.1.0.14.0.20010601155443.020cd400@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Fri, 01 Jun 2001 15:59:45 -0400 To: Tor Perkins , fwtk From: Rick Murphy Subject: Re: max URL length in http-gw.c In-Reply-To: <200106011608.JAA03795@noid.net> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1238 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 09:08 AM 6/1/01 -0700, Tor Perkins wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > > >In http-gw.h there is: > > #define PATH_MAX 1024 > >PATH_MAX, however, never appears anywhere else in the source code >('doh!). If memory serves me, it does show up in some .h file on some operating system as undefined and this define works around that.. >Instead there are things like this in http-gw.c: > > static char newurl[1200]; /* field for rewriting */ > >and later: > > cpystr(value,newurl,1022); > >Well, mapquest.com can generate an URL > 1022 chars... :P >Probably other sites do as well. The code that uses the buffer above rewrites anchors - A href="foo" fields - which are usually relatively short. In fact, I don't think this code gets used if you use http-gw as your web proxy; it's only used if you use "http://firewall/http://external-site" type prefixing. What you're really looking for is the MAX_URL_LEN define. That currently is 4096 bytes, which should be more than enough. -Rick From owner-fwtk-users@ex.tis.com Mon Jun 4 11:40 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15247 Mon, 4 Jun 2001 11:40:33 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA20884; Mon, 4 Jun 2001 10:44:25 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Jun 2001 08:03:19 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA18777 for fwtk-users-outgoing; Mon, 4 Jun 2001 08:01:58 -0500 (CDT) Date: Thu, 31 May 2001 22:53:02 -0700 X-Mini-Diatribe: To fix America: 1. Cut Government in half 2. Wait thirty years 3. Repeat as necessary Message-Id: <200106010553.WAA19298@noid.net> From: Tor Perkins <991372746@noid.net> To: fwtk Subject: max URL length in http-gw.c X-Operating-System: Linux 2.2.19 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 591 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] In http-gw.h there is: #define PATH_MAX 1024 PATH_MAX, however, never appears anywhere else in the source code ('doh!). Instead there are things like this in http-gw.c: static char newurl[1200]; /* field for rewriting */ and later: cpystr(value,newurl,1022); Well, mapquest.com can generate an URL > 1022 chars... :P Probably other sites do as well. Since this seems a bit messy, I was curious; has anyone already created a patch for this? - Tor From owner-fwtk-users@ex.tis.com Mon Jun 4 11:41 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15301 Mon, 4 Jun 2001 11:41:55 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA21245; Mon, 4 Jun 2001 10:45:46 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Jun 2001 08:04:24 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA18870 for fwtk-users-outgoing; Mon, 4 Jun 2001 08:03:03 -0500 (CDT) Date: Fri, 1 Jun 2001 16:45:01 -0700 (PDT) From: Scott Campbell X-X-Sender: To: Fwtk Users Subject: Passive Ftp in http-gw Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 945 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I'm running fwtk 2.1 on FreeBSD 4.x and am having a problem with passive ftp through http-gw (IE and Netscape). I have applied patches to ftp-gw to get it working with passive transport - it works great. The passive ftp "patches" for http-gw on the FWTK website though are for fwtk 2.0 plus they appear to be patched versions of the source, not just patches. My http-gw is already patched with the "jumbo patch" from the site. I am getting error "425 - Can't build data connection: Operation timed out." when trying to connect to ftp sites through IE or Netscape. Question: Does anyone have passive ftp patches for http-gw (fwtk 2.1) that they are willing to share? Thank you in advance Scott E. Campbell _______________________________ Computer Operations Greater Victoria Public Library Victoria BC CANADA From owner-fwtk-users@ex.tis.com Mon Jun 4 11:46 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15479 Mon, 4 Jun 2001 11:46:47 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA22367; Mon, 4 Jun 2001 10:50:38 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Jun 2001 08:09:22 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA19419 for fwtk-users-outgoing; Mon, 4 Jun 2001 08:08:00 -0500 (CDT) Message-Id: <4.2.0.58.20010602221519.023d0620@pop.fnac.net> X-Sender: f088634_5_fnac@pop.fnac.net X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.58 Date: Sat, 02 Jun 2001 22:17:11 +0200 To: mikes@hartwellcorp.com From: Yomler Subject: Re: Trouble compiling ms-sql-gw addon Cc: fwtk-users@ex.tis.com In-Reply-To: <200103141119.OAA11627@paranoid.alpha.int> References: <91A5926EFF44D3118B1200104B7276EB654F64@hart-exchange.hartwellcorp.com> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 2045 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, Did you manage to compile the ms-sql-gw ? I 'd like to know which extra lib you use on RH and where I could find them in order to success the compile. Regards, At 13:19 14/03/01 , ark@eltex.ru wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >nuqneH, > >looks like you use incompatible md5 library. Try BSD one or one from OPIE. > > >"Michael St. Laurent" said : > > > I am trying to get the ms-sql-gw addon to compile using the crypto > functions > > from openssl. This is on a RedHat 7.0 i386 system. I've modified the > > include line to find the "blowfish.h" file but I still get the following > > errors: > > > > gcc -I.. -O -DLINUX -DPROTECTINBOUND -c -o ms-sql-gw.o ms-sql-gw.c > > In file included from ms-sql-gw.c:25: > > /usr/include/md5.h:27: parse error before `UINT4' > > /usr/include/md5.h:27: warning: no semicolon at end of struct or union > > /usr/include/md5.h:28: warning: data definition has no type or storage > class > > /usr/include/md5.h:30: parse error before `}' > > /usr/include/md5.h:30: warning: data definition has no type or storage > class > > /usr/include/md5.h:32: parse error before `PROTO_LIST' > > /usr/include/md5.h:33: parse error before `PROTO_LIST' > > /usr/include/md5.h:35: parse error before `PROTO_LIST' > > /usr/include/md5.h:37: parse error before `PROTO_LIST' > > ms-sql-gw.c:81: parse error before `md5_ctx' > > ms-sql-gw.c:81: warning: data definition has no type or storage class > > make: *** [ms-sql-gw.o] Error 1 > > > _ _ _ _ _ _ _ > {::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_ > (##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_| > [||] [||] [||] Do i believe in Bible? Hell,man,i've seen one! -- Yomler. From owner-fwtk-users@ex.tis.com Mon Jun 4 17:07 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA26642 Mon, 4 Jun 2001 17:07:32 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA28236; Mon, 4 Jun 2001 16:11:24 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Jun 2001 13:28:10 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA23522 for fwtk-users-outgoing; Mon, 4 Jun 2001 13:26:49 -0500 (CDT) Date: Mon, 4 Jun 2001 14:26:05 -0400 (EDT) From: Ted Keller To: Don Pro cc: fwtk Subject: Re: spam patch compilation problem In-Reply-To: <3B1B9E69.EF9A56F9@lclcan.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 9358 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Don, This would be an easy fix - but beware..... in the check_content routing, change strncmp to strncasecmp and things will be case insensitive. Now - by doing this, you will get into issues like Free vs FREE I have users who argue that Free is acceptable while FREE is most certainly spam (ie - we send out Free Samples in our business). I've tried to adopt the more conservative approach - but you are correct - it make for more entries - and therefore slower processing. your call... ted keller On Mon, 4 Jun 2001, Don Pro wrote: > Hi Ted, > > Thanks for your excellent response. I understand quite clearly now. > > An observation and a question, > > 1) I notice that any text I place next to types in the spamlist.dat file > appears to be case sensitive. In other words, > > header Make Money on the Internet > header Make MONEY on the Internet > > are treated as two separate headers. Do you have any plans to eliminate (at > least as an option) case sensitivity? Otherwise, I am forced to write > redundant lines. > > 2) When stable, can you send me the patch that include support for "string"? > > Thanks, > Don > > Ted Keller wrote: > > > Hi Don, > > > > I'll attempt to answer your questions.... > > > > > spam > > > ------ > > > This file seems to be using the message envelope to block e-mail from > > > 1) specific I.P. (wild card accepted) > > > 2) specific domain (wild card accepted) > > > 3) specific e-mail (must be enclosed between < >) > > > > > > Is the above analysis correct including the need to enclose email > > > addressed in < > such as ? > > > > You analysis appears correct. The program uses the nacasematch which > > comes from the original tool kit. This appears to support wild-card > > processing (although I have not used it). You are correct - domains and > > IP numbers are listed without the <> brackets. E-mail address include the > > <> brackets. > > > > > block > > > ==== > > > This file seems also uses the message envelope to block e-mail. > > > What is the difference between this file and the 'spam' file? > > > I'm also unsure of the syntax as I see various syntax such as: > > > > > > <*> > > > <*> > > > > > > > > Finally, how do I use this file to block e-mail that comes in for > > > internal users who have long departed my organization? > > > > > > > The spam file is a basic block mechanism based on the connecting host or > > from address. The block file deals with the from/to address combinations. > > In the above examples... > > > > <*> > > <*> > > > > We block a internal system that was generating noise to an external site - > > and block an external site from responding to a bounced address. I had > > this occur one evening where one of my internal systems was ping-ponging > > between its printer daemon and an external site. Simply chewing up > > resources and filling up logs. Since this was after hours - I couldn't > > call the site to resolve the problem. This was an effective way to block > > that traffic. > > > > > > > > In this case - the internal user did not want to see e-mail from this one > > address at aol.com. The reasons aren't important - but it is an effective > > way to prevent abuse of your e-mail system by an external entity. > > > > <*> > > > > This example blocks all mail to user@bfg.com - a past employee who had > > signed up for many list servers... > > > > In each case - the remote system gets a user not found message - and we > > don't accept the mail into our network. > > > > > spamlist.dat > > > ========= > > > This file uses the message contents (header and body) top block e-mail > > > 1) anything prefaced by 'tag' appears to block by domain. Is this > > > redundant as it seems I can use the 'spam' file to accomplish this? > > > 2) Besides 'tag' and 'text', are there any other keys? > > > 3) Where can I update this list (as will as the 'spam' file)? > > > 4) Can I disable using this file if I find that the perfomance his is > > > much for my hardware? > > > > The spam file deals with the envelop. The spamlist.dat file deals with > > the message body (header and first few lines of text). > > > > What we find a lot is people (spammers) will put anything in the headers - > > few of these things are valid - or at least don't match the envelop. This > > mechanism allows us to do content filtering - at least to some degree. > > > > The types are.... > > > > from - header from: address. The from string must be "stand-alone". This > > implies that the string is either at the start or end of the line - or it > > is separated by white space. Multiple white space characters are > > omitted. The exception is the "@" In these > > cases, the @ does not have to be preceded or followed by white space. > > Kind of allows us to block anyone from xxx.com. > > > > to - header to: adrress. Again - the string must be stand alone. - Same > > rules apply as far as the @ character. > > > > subject - the subject line - text must be "stand alone" > > > > header - the text appears on any header line - bcc, ... > > > > text - body of the message - string is "stand alone". - note html body > > tags are ignored (replace by single space). > > > > Now comes the more interesting ones.... > > > > tag - this represents a text string located within an html tag. This is > > handy for the lines like... > > > > (or what ever). In this case - a line > > > > tag nude > > > > will capture this message as spam. > > > > Likewise (and I'm not sure you have this support yet) > > > > string nude > > > > will capture anything with the characters nude in the line - not > > necesarliy stand alone. > > > > This last options is great for things like > > > > casino .. casino! .. casino!!! > > > > sting will capture all of these with a single entry. Be careful, however, > > a line like > > > > string sex > > > > will capture the sex site - and sexton.com - a site that you may actually > > value (well at least I do). > > > > you have similar issues with blindly using adult - this captures adult > > education and the like. > > > > I've also added one additional support (again you probably don't have this > > one yet) which allows the mapping of users - and the overriding of file > > size limits for specific e-mail addresses. Our general limit is 15mb > > messages. However, we do have situations where, due to contract > > requirements, messages sizes larger than 15mb are required. With the > > stock smap, this is a hard feature to permit. The mapping file allows > > overrides for specific from or to address combinations. I'll get this out > > in my next tarball. > > > > Hope this helps. > > > > ted keller > > > > On Fri, 1 Jun 2001, Don Pro wrote: > > > > > Hi Ted, > > > > > > Thanks for all you help. I am happy to report that after initial > > > testing, it looks to be working quite well. I have tested by sending > > > e-mail from outside accounts that contain spam as well as blocked users > > > and they have been rejected accordingly. I am quite pleased. > > > > > > If you don't mind, I have a few questions pertaining to the three files > > > responsible for rejecting. > > > > > > spam > > > ------ > > > This file seems to be using the message envelope to block e-mail from > > > 1) specific I.P. (wild card accepted) > > > 2) specific domain (wild card accepted) > > > 3) specific e-mail (must be enclosed between < >) > > > > > > Is the above analysis correct including the need to enclose email > > > addressed in < > such as ? > > > > > > block > > > ==== > > > This file seems also uses the message envelope to block e-mail. > > > What is the difference between this file and the 'spam' file? > > > I'm also unsure of the syntax as I see various syntax such as: > > > > > > <*> > > > <*> > > > > > > > > Finally, how do I use this file to block e-mail that comes in for > > > internal users who have long departed my organization? > > > > > > spamlist.dat > > > ========= > > > This file uses the message contents (header and body) top block e-mail > > > 1) anything prefaced by 'tag' appears to block by domain. Is this > > > redundant as it seems I can use the 'spam' file to accomplish this? > > > 2) Besides 'tag' and 'text', are there any other keys? > > > 3) Where can I update this list (as will as the 'spam' file)? > > > 4) Can I disable using this file if I find that the perfomance his is > > > much for my hardware? > > > > > > Thanks again for all your help, > > > Don > > > > > > > At 03:22 PM 5/31/01 -0400, Don Pro wrote: > > > > >/usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' > > > > >/usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' > > > > >collect2: ld returned 1 exit status > > > > Add "-lresolv" to the AUXLIB line in Makefile.config. > > > > -Rick > > > > > > > > From owner-fwtk-users@ex.tis.com Tue Jun 5 03:30 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id DAA13915 Tue, 5 Jun 2001 03:30:08 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id CAA25588; Tue, 5 Jun 2001 02:32:00 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Jun 2001 23:49:15 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id XAA17589 for fwtk-users-outgoing; Mon, 4 Jun 2001 23:47:54 -0500 (CDT) From: kasiviswanath_nukala@ivillage.com Date: 4 Jun 2001 21:47:21 -0700 Message-ID: <20010605044721.8565.cpmta@c006.snv.cp.net> X-Sent: 5 Jun 2001 04:47:21 GMT Content-Disposition: inline Mime-Version: 1.0 To: fwtk-users@lists.nai.com X-Mailer: Web Mail 3.9.2.3 X-Sent-From: kasiviswanath_nukala@ivillage.com Subject: ftp doubt Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 558 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] good morning ! hi, this is viswanath, Can any one can help me how to access ftp sites using any kind of ftp client/ie plugins ? if so can you give me the details where can i find some clients/plugins and how to go ahead? thanking you _________________________________________________________________ iVillage.com: Solutions for Your Life Check out the most exciting women's community on the Web http://www.ivillage.com From owner-fwtk-users@ex.tis.com Tue Jun 5 11:31 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15204 Tue, 5 Jun 2001 11:31:30 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA14787; Tue, 5 Jun 2001 10:35:21 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 5 Jun 2001 07:50:46 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA17793 for fwtk-users-outgoing; Tue, 5 Jun 2001 07:49:24 -0500 (CDT) Message-ID: <3B1B9E69.EF9A56F9@lclcan.com> Date: Mon, 04 Jun 2001 10:42:50 -0400 From: Don Pro X-Mailer: Mozilla 4.75 [en] (Win98; U) X-Accept-Language: en,pdf MIME-Version: 1.0 To: Ted Keller CC: fwtk Subject: Re: spam patch compilation problem References: Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 8368 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi Ted, Thanks for your excellent response. I understand quite clearly now. An observation and a question, 1) I notice that any text I place next to types in the spamlist.dat file appears to be case sensitive. In other words, header Make Money on the Internet header Make MONEY on the Internet are treated as two separate headers. Do you have any plans to eliminate (at least as an option) case sensitivity? Otherwise, I am forced to write redundant lines. 2) When stable, can you send me the patch that include support for "string"? Thanks, Don Ted Keller wrote: > Hi Don, > > I'll attempt to answer your questions.... > > > spam > > ------ > > This file seems to be using the message envelope to block e-mail from > > 1) specific I.P. (wild card accepted) > > 2) specific domain (wild card accepted) > > 3) specific e-mail (must be enclosed between < >) > > > > Is the above analysis correct including the need to enclose email > > addressed in < > such as ? > > You analysis appears correct. The program uses the nacasematch which > comes from the original tool kit. This appears to support wild-card > processing (although I have not used it). You are correct - domains and > IP numbers are listed without the <> brackets. E-mail address include the > <> brackets. > > > block > > ==== > > This file seems also uses the message envelope to block e-mail. > > What is the difference between this file and the 'spam' file? > > I'm also unsure of the syntax as I see various syntax such as: > > > > <*> > > <*> > > > > > Finally, how do I use this file to block e-mail that comes in for > > internal users who have long departed my organization? > > > > The spam file is a basic block mechanism based on the connecting host or > from address. The block file deals with the from/to address combinations. > In the above examples... > > <*> > <*> > > We block a internal system that was generating noise to an external site - > and block an external site from responding to a bounced address. I had > this occur one evening where one of my internal systems was ping-ponging > between its printer daemon and an external site. Simply chewing up > resources and filling up logs. Since this was after hours - I couldn't > call the site to resolve the problem. This was an effective way to block > that traffic. > > > > In this case - the internal user did not want to see e-mail from this one > address at aol.com. The reasons aren't important - but it is an effective > way to prevent abuse of your e-mail system by an external entity. > > <*> > > This example blocks all mail to user@bfg.com - a past employee who had > signed up for many list servers... > > In each case - the remote system gets a user not found message - and we > don't accept the mail into our network. > > > spamlist.dat > > ========= > > This file uses the message contents (header and body) top block e-mail > > 1) anything prefaced by 'tag' appears to block by domain. Is this > > redundant as it seems I can use the 'spam' file to accomplish this? > > 2) Besides 'tag' and 'text', are there any other keys? > > 3) Where can I update this list (as will as the 'spam' file)? > > 4) Can I disable using this file if I find that the perfomance his is > > much for my hardware? > > The spam file deals with the envelop. The spamlist.dat file deals with > the message body (header and first few lines of text). > > What we find a lot is people (spammers) will put anything in the headers - > few of these things are valid - or at least don't match the envelop. This > mechanism allows us to do content filtering - at least to some degree. > > The types are.... > > from - header from: address. The from string must be "stand-alone". This > implies that the string is either at the start or end of the line - or it > is separated by white space. Multiple white space characters are > omitted. The exception is the "@" In these > cases, the @ does not have to be preceded or followed by white space. > Kind of allows us to block anyone from xxx.com. > > to - header to: adrress. Again - the string must be stand alone. - Same > rules apply as far as the @ character. > > subject - the subject line - text must be "stand alone" > > header - the text appears on any header line - bcc, ... > > text - body of the message - string is "stand alone". - note html body > tags are ignored (replace by single space). > > Now comes the more interesting ones.... > > tag - this represents a text string located within an html tag. This is > handy for the lines like... > > (or what ever). In this case - a line > > tag nude > > will capture this message as spam. > > Likewise (and I'm not sure you have this support yet) > > string nude > > will capture anything with the characters nude in the line - not > necesarliy stand alone. > > This last options is great for things like > > casino .. casino! .. casino!!! > > sting will capture all of these with a single entry. Be careful, however, > a line like > > string sex > > will capture the sex site - and sexton.com - a site that you may actually > value (well at least I do). > > you have similar issues with blindly using adult - this captures adult > education and the like. > > I've also added one additional support (again you probably don't have this > one yet) which allows the mapping of users - and the overriding of file > size limits for specific e-mail addresses. Our general limit is 15mb > messages. However, we do have situations where, due to contract > requirements, messages sizes larger than 15mb are required. With the > stock smap, this is a hard feature to permit. The mapping file allows > overrides for specific from or to address combinations. I'll get this out > in my next tarball. > > Hope this helps. > > ted keller > > On Fri, 1 Jun 2001, Don Pro wrote: > > > Hi Ted, > > > > Thanks for all you help. I am happy to report that after initial > > testing, it looks to be working quite well. I have tested by sending > > e-mail from outside accounts that contain spam as well as blocked users > > and they have been rejected accordingly. I am quite pleased. > > > > If you don't mind, I have a few questions pertaining to the three files > > responsible for rejecting. > > > > spam > > ------ > > This file seems to be using the message envelope to block e-mail from > > 1) specific I.P. (wild card accepted) > > 2) specific domain (wild card accepted) > > 3) specific e-mail (must be enclosed between < >) > > > > Is the above analysis correct including the need to enclose email > > addressed in < > such as ? > > > > block > > ==== > > This file seems also uses the message envelope to block e-mail. > > What is the difference between this file and the 'spam' file? > > I'm also unsure of the syntax as I see various syntax such as: > > > > <*> > > <*> > > > > > Finally, how do I use this file to block e-mail that comes in for > > internal users who have long departed my organization? > > > > spamlist.dat > > ========= > > This file uses the message contents (header and body) top block e-mail > > 1) anything prefaced by 'tag' appears to block by domain. Is this > > redundant as it seems I can use the 'spam' file to accomplish this? > > 2) Besides 'tag' and 'text', are there any other keys? > > 3) Where can I update this list (as will as the 'spam' file)? > > 4) Can I disable using this file if I find that the perfomance his is > > much for my hardware? > > > > Thanks again for all your help, > > Don > > > > > At 03:22 PM 5/31/01 -0400, Don Pro wrote: > > > >/usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' > > > >/usr/local/fwtk/smap/smap.c:654: undefined reference to `res_query' > > > >collect2: ld returned 1 exit status > > > Add "-lresolv" to the AUXLIB line in Makefile.config. > > > -Rick > > > > From owner-fwtk-users@ex.tis.com Tue Jun 5 11:31 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15207 Tue, 5 Jun 2001 11:31:32 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA14795; Tue, 5 Jun 2001 10:35:23 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 5 Jun 2001 07:50:45 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA17790 for fwtk-users-outgoing; Tue, 5 Jun 2001 07:49:23 -0500 (CDT) Date: Thu, 31 May 2001 19:43:46 -0400 (EDT) From: Ted Keller To: Joseph S D Yao cc: Wes Szumera , Subject: Re: dealing with mail to non-existant accounts In-Reply-To: <20010531120434.G28794@washington.cospo.osis.gov> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1751 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Wes, My version of the smap code has the ability to block from/to address combinations - including <*> that is - all mail going to the internal address. I use this effectively to block people who have left our company - or occationally to block specivic from/to combinations. ted keller On Thu, 31 May 2001, Joseph S D Yao wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > On Thu, May 31, 2001 at 07:23:20AM -0400, Wes Szumera wrote: > > Date sent: Wed, 30 May 2001 16:38:02 -0400 > > From: Joseph S D Yao > > To: Wes Szumera > > Copies to: fwtk-users@lists.nai.com > > Subject: Re: dealing with mail to non-existant accounts > > > > Thanks. I tried to use your smam-block settings but ended up > > blocking email for every one so I went back to where I started. > > You have to read the comments - provide a list of smap domains and smap > hosts that are allowed internally. > > > Someone pointed out something similar to this using aliases to > > trundle the mail off to the bit bucket. > > Yes, with only a handful this approach also works. > > -- > Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao > OSIS Center Computer Support EMT-B > ----------------------------------------------------------------------- > This message is not an official statement of COSPO policies. > From owner-fwtk-users@ex.tis.com Tue Jun 5 19:54 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA16177 Tue, 5 Jun 2001 19:54:27 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id SAA04826; Tue, 5 Jun 2001 18:58:21 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 5 Jun 2001 16:20:39 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA12981 for fwtk-users-outgoing; Tue, 5 Jun 2001 16:19:16 -0500 (CDT) Message-ID: From: "Skolnik, Ed" To: fwtk-users@lists.nai.com Subject: ftp-gw poxy Date: Tue, 5 Jun 2001 16:18:29 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2094 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I don't understand, on some remote FTP servers this works like a charm and on others I get the "Invalid reply" Can anyone help? OS Net BSD 1.2.1 NetBSD 1.2.1 TIS Firewall Toolkit September 1996 # Example ftp gateway rules: # -------------------------- ftp-gw: denial-msg /usr/local/etc/ftp-deny.txt #ftp-gw: welcome-msg /usr/local/etc/ftp-welcome.txt #ftp-gw: help-msg /usr/local/etc/ftp-help.txt ftp-gw: timeout 3600 # uncomment the following line if you want internal users to be # able to do FTP with the internet # Added support for SCO Mail server Dec 16 1997 J. Adams ftp-gw: permit-hosts 10.10.5.254 #!/bin/ksh user1=xxxxxx -----------------------------To protect pswd1=ppppp rmte=ftp.xxxxxx.com logs=/tmp listings="/tmp/$(basename $0).$$" echo "$user1 $pswd1 $rmte" echo "$listings" echo "Press enter" read DUMMY #ftp -n $rmte << EOF > listing ftp -v -n firewall << EOF > $listings user $user1@$rmte $pswd1 ascii ls bye EOF OUTPUT: Connected to gateway. 220 gw.florsheim.com FTP proxy (Version V2.0) ready. ----GATEWAY CONNECTED TO ftp.xxxxxx.com Invalid reply. 220-You have connected to xxxxxx FTP Server 220- 220 Secure FTP Server ready. USER xxxxxxx Invalid reply. 530 Peer has closed connection 500 must be connected to remote server 500 must be connected to remote server 500 must be connected to remote server Ed Skolnik Florsheim Group Inc. MIT Consultants 200 N. LaSalle Chicago IL. 60601 312-458-2655 Phone 312-458-2661 Fax ed.skolnik@florsheim.com Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. Thank you. -- From owner-fwtk-users@ex.tis.com Wed Jun 6 03:08 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id DAA16970 Wed, 6 Jun 2001 03:08:53 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id CAA27714; Wed, 6 Jun 2001 02:12:47 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 5 Jun 2001 23:35:01 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id XAA19264 for fwtk-users-outgoing; Tue, 5 Jun 2001 23:33:40 -0500 (CDT) From: kasiviswanath_nukala@ivillage.com Date: 5 Jun 2001 21:32:27 -0700 Message-ID: <20010606043227.9106.cpmta@c006.snv.cp.net> X-Sent: 6 Jun 2001 04:32:27 GMT Content-Disposition: inline Mime-Version: 1.0 To: fwtk-users@ex.tis.com X-Mailer: Web Mail 3.9.2.3 X-Sent-From: kasiviswanath_nukala@ivillage.com Subject: svga drivers,emacs Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 706 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi, good morning! thanx for all of these hon'ble helpers, 1>> I have a (SIS)pci 6215 svga card which is not supported by redhat linux 7.0 ver any of u tell me where can i find driver for this > 2>> HOW TO install emacs on my system and how to start using it but i found some emacs directory in my system but no such setup files i found there. thanking you _________________________________________________________________ iVillage.com: Solutions for Your Life Check out the most exciting women's community on the Web http://www.ivillage.com From owner-fwtk-users@ex.tis.com Wed Jun 6 12:24 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA18926 Wed, 6 Jun 2001 12:24:51 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA09397; Wed, 6 Jun 2001 11:28:46 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Jun 2001 08:47:16 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA18291 for fwtk-users-outgoing; Wed, 6 Jun 2001 08:45:55 -0500 (CDT) Message-Id: <5.1.0.14.0.20010605204200.01f36050@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Tue, 05 Jun 2001 20:46:54 -0400 To: "Skolnik, Ed" , fwtk-users@lists.nai.com From: Rick Murphy Subject: Re: ftp-gw poxy In-Reply-To: Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1215 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 04:18 PM 6/5/01 -0500, Skolnik, Ed wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >I don't understand, on some remote FTP servers this works like a charm and >on others I get the "Invalid reply" Can anyone help? Without a pointer to the bad sites, it's going to be hard. However, looking at your output: >Connected to gateway. >220 gw.florsheim.com FTP proxy (Version V2.0) ready. >----GATEWAY CONNECTED TO ftp.xxxxxx.com >Invalid reply. >220-You have connected to xxxxxx FTP Server >220- >220 Secure FTP Server ready. >USER xxxxxxx >Invalid reply. >530 Peer has closed connection >500 must be connected to remote server >500 must be connected to remote server >500 must be connected to remote server The "----GATEWAY CONNECTED----" should really be 331-(----Gateway connnected to .... ----) 331- (more stuff) 331 Some prompt for a username It almost seems like your FTP client isn't happy with the "331" continuation lines. What happens when you run this interactively? -Rick From owner-fwtk-users@ex.tis.com Wed Jun 6 15:41 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA19692 Wed, 6 Jun 2001 15:41:25 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA09978; Wed, 6 Jun 2001 14:45:19 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Jun 2001 12:06:22 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA15388 for fwtk-users-outgoing; Wed, 6 Jun 2001 12:05:01 -0500 (CDT) Message-ID: <00c201c0eea9$9a6ea4c0$fc00a8c0@k62350> From: "Larry Jackson" To: "Skolnik, Ed" Cc: "FWTK List Server" References: Subject: Re: ftp-gw poxy Date: Wed, 6 Jun 2001 12:56:16 -0400 Organization: Falun Technical Service, Inc. MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2383 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Since the FTP server responds: 220 Secure FTP Server ready. I would guess that the proxy isn't handling the newer FTP Security Extensions from 1997 in RFC2228 http://www.csl.sony.co.jp/cgi-bin/hyperrfc?rfc2228.txt The two "> Invalid reply." messages probably mean the proxy is getting a different number response than it expects. These responses are defined in RFC2228 and probably contain the challenge/response info. Has anyone written a patch to add support for this RFC? LarryJackson@iName.com ----- Original Message ----- From: "Skolnik, Ed" To: > I don't understand, on some remote FTP servers this works like a charm and > on others I get the "Invalid reply" Can anyone help? > > OS Net BSD 1.2.1 NetBSD 1.2.1 > TIS Firewall Toolkit September 1996 > > > # Example ftp gateway rules: > # -------------------------- > ftp-gw: denial-msg /usr/local/etc/ftp-deny.txt > #ftp-gw: welcome-msg /usr/local/etc/ftp-welcome.txt > #ftp-gw: help-msg /usr/local/etc/ftp-help.txt > ftp-gw: timeout 3600 > # uncomment the following line if you want internal users to be > # able to do FTP with the internet > # Added support for SCO Mail server Dec 16 1997 J. Adams > ftp-gw: permit-hosts 10.10.5.254 > > > #!/bin/ksh > user1=xxxxxx -----------------------------To protect > pswd1=ppppp > rmte=ftp.xxxxxx.com > logs=/tmp > listings="/tmp/$(basename $0).$$" > echo "$user1 $pswd1 $rmte" > echo "$listings" > echo "Press enter" > read DUMMY > #ftp -n $rmte << EOF > listing > ftp -v -n firewall << EOF > $listings > user $user1@$rmte $pswd1 > ascii > ls > bye > EOF > > > OUTPUT: > > Connected to gateway. > 220 gw.florsheim.com FTP proxy (Version V2.0) ready. > ----GATEWAY CONNECTED TO ftp.xxxxxx.com > Invalid reply. > 220-You have connected to xxxxxx FTP Server > 220- > 220 Secure FTP Server ready. > USER xxxxxxx > Invalid reply. > 530 Peer has closed connection > 500 must be connected to remote server > 500 must be connected to remote server > 500 must be connected to remote server > > Ed Skolnik > Florsheim Group Inc. > MIT Consultants > 200 N. LaSalle > Chicago IL. 60601 > 312-458-2655 Phone > 312-458-2661 Fax > ed.skolnik@florsheim.com From owner-fwtk-users@ex.tis.com Thu Jun 7 10:59 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA22775 Thu, 7 Jun 2001 10:59:02 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA13078; Thu, 7 Jun 2001 10:02:56 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 7 Jun 2001 07:23:41 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA20498 for fwtk-users-outgoing; Thu, 7 Jun 2001 07:22:20 -0500 (CDT) X-Complaints-To: abuse@aycuens.com X-Url: http://www.aycuens.com Message-ID: <3B1F71C5.3070902@altavista.net> Date: Thu, 07 Jun 2001 14:21:25 +0200 From: "Alvaro Munoz-Aycuens Mtnz." Organization: =?ISO-8859-1?Q?=B8?=,=?ISO-8859-1?Q?=F8=A4=BA=B0=60=B0=BA=A4=F8?=, =?ISO-8859-1?Q?=B8=B8?=,=?ISO-8859-1?Q?=F8=A4=BA=B0=60?= Aycuens Security =?ISO-8859-1?Q?=B0=BA=A4=F8?=,=?ISO-8859-1?Q?=B8=B8?=, =?ISO-8859-1?Q?=F8=A4=BA=B0=60=B0=BA=A4=F8?=, =?ISO-8859-1?Q?=B8?= User-Agent: Mozilla/5.0 (X11; U; Linux 2.2.18 i686; en-US; rv:0.9+) Gecko/20010531 X-Accept-Language: en-us MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: Re: NAI response was smap Content-Transfer-Encoding: 8bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Length: 951 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Keith Young wrote: > FYI, I've heard that we may hear an official response by the end of the > month if NAI is going to make the FWTK open source. > > This may make it easier if we are all working off of one code tree > rather than having several "private" patches floating around... > > -- > --Keith Young > -Director of Customer Care/Support, V-ONE Corp. > -kyoung@v-one.com Hi to all, that's great I think most of us wanted this for long because enables the possibility on having a good work done on it, most of them in consolidate and tight the fwtk in general and integrate the patches, hope this gets along and NAI doesn't regrets about :) -- Alvaro Muñoz-Aycuens Martinez El Argonauta Virtual C\Gaztambide 9 28015 Madrid Spain alvarom@altavista.net "Security is a Process, Not a Single Solution" From owner-fwtk-users@ex.tis.com Thu Jun 7 11:29 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA22865 Thu, 7 Jun 2001 11:29:04 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA17709; Thu, 7 Jun 2001 10:32:58 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 7 Jun 2001 07:54:48 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA22742 for fwtk-users-outgoing; Thu, 7 Jun 2001 07:53:27 -0500 (CDT) Message-Id: <5.1.0.14.0.20010606171510.01f8a5b0@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Wed, 06 Jun 2001 17:17:44 -0400 To: "Larry Jackson" , "Skolnik, Ed" From: Rick Murphy Subject: Re: ftp-gw poxy Cc: "FWTK List Server" In-Reply-To: <00c201c0eea9$9a6ea4c0$fc00a8c0@k62350> References: Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1051 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 12:56 PM 6/6/01 -0400, Larry Jackson wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >Since the FTP server responds: >220 Secure FTP Server ready. > >I would guess that the proxy isn't handling the newer >FTP Security Extensions from 1997 in RFC2228 >http://www.csl.sony.co.jp/cgi-bin/hyperrfc?rfc2228.txt > >The two "> Invalid reply." messages probably mean >the proxy is getting a different number response than it expects. >These responses are defined in RFC2228 and probably >contain the challenge/response info. While you may be on the right track, it's not the fwtk proxy - the text "Invalid reply" doesn't show up anywhere in the ftp-gw source. By the way, is everyone else having really long lead times on the mailing list? A message I sent out yesterday didn't get sent out to the list for 16 hours! -Rick From owner-fwtk-users@ex.tis.com Thu Jun 7 16:03 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA24017 Thu, 7 Jun 2001 16:03:52 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA28604; Thu, 7 Jun 2001 15:07:47 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 7 Jun 2001 12:26:35 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA04083 for fwtk-users-outgoing; Thu, 7 Jun 2001 12:25:14 -0500 (CDT) X-Complaints-To: abuse@aycuens.com X-Url: http://www.aycuens.com Message-ID: <3B1FB8C1.804C2CBD@altavista.net> Date: Thu, 07 Jun 2001 19:24:17 +0200 From: Alvaro Munoz-Aycuens Martinez Reply-To: alvarom@altavista.net Organization: =?iso-8859-1?Q?=B8?=,=?iso-8859-1?Q?=F8=A4=BA=B0=60=B0=BA=A4=F8?=, =?iso-8859-1?Q?=B8=B8?=,=?iso-8859-1?Q?=F8=A4=BA=B0=60?= Aycuens Security =?iso-8859-1?Q?=B0=BA=A4=F8?=,=?iso-8859-1?Q?=B8=B8?=, =?iso-8859-1?Q?=F8=A4=BA=B0=60=B0=BA=A4=F8?=,=?iso-8859-1?Q?=B8?= X-Mailer: Mozilla 4.77 [en] (X11; U; Linux 2.2.18 i686) X-Accept-Language: en, es-ES MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: NAI response was smap Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by relay2.nai.com id MAA04080 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-15 Content-Length: 937 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Keith Young wrote: > FYI, I've heard that we may hear an official response by the end of the > month if NAI is going to make the FWTK open source. > > This may make it easier if we are all working off of one code tree > rather than having several "private" patches floating around... > > -- > --Keith Young > -Director of Customer Care/Support, V-ONE Corp. > -kyoung@v-one.com Hi to all, that's great I think most of us wanted this for long because enables the possibility on having a good work done on it, most of them in consolidate and tight the fwtk in general and integrate the patches, hope this gets along and NAI doesn't regrets about :) -- Alvaro Muñoz-Aycuens Martinez El Argonauta Virtual C\Gaztambide 9 28015 Madrid Spain alvarom@altavista.net "Security is a Process, Not a Single Solution" From owner-fwtk-users@ex.tis.com Thu Jun 7 19:01 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA24183 Thu, 7 Jun 2001 19:01:10 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id SAA21508; Thu, 7 Jun 2001 18:05:07 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 7 Jun 2001 15:28:07 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA01763 for fwtk-users-outgoing; Thu, 7 Jun 2001 15:26:45 -0500 (CDT) Message-ID: <3B1FE3FF.ABC40EC5@lclcan.com> Date: Thu, 07 Jun 2001 16:28:48 -0400 From: Don Pro X-Mailer: Mozilla 4.75 [en] (Win98; U) X-Accept-Language: en,pdf MIME-Version: 1.0 To: fwtk Subject: problems connecting to websites Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 666 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, Lately, I seem to be having problems connecting to web sites the FIRST time I try. Oddly enough, it works when I retry. Scanning the /var/log/messages file, I find the following suspicious looking messages: Jun 7 16:27:42 lclweb named[631]: Lame server on 'www.fwtk.org' (in 'ORG'?): [1 98.6.1.81].53 Jun 7 16:27:44 lclweb smapd[993]: delivered file=sma000905 pid=998 code=0 Jun 7 16:27:44 lclweb http-gw[1008]: failed to connect to http server www.fwtk.org (80) Any feedback on this would be much appreciated. Thanks, Don From owner-fwtk-users@ex.tis.com Fri Jun 8 19:03 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA27283 Fri, 8 Jun 2001 19:03:53 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id SAA18014; Fri, 8 Jun 2001 18:07:51 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 8 Jun 2001 15:28:59 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA28145 for fwtk-users-outgoing; Fri, 8 Jun 2001 15:27:37 -0500 (CDT) Message-ID: From: "Skolnik, Ed" To: "'Larry Jackson'" , "Skolnik, Ed" Cc: FWTK List Server Subject: RE: ftp-gw Proxy Date: Fri, 8 Jun 2001 15:19:37 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 3379 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Well if the ftp proxy is not handling the "FTP Security Extensions from 1997 in RFC2228" is there an update to the tool kit for this? Ed Skolnik Florsheim Group Inc. MIT Consultants 200 N. LaSalle Chicago IL. 60601 312-458-2655 Phone 312-458-2661 Fax ed.skolnik@florsheim.com Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. Thank you. -----Original Message----- From: Larry Jackson [mailto:LarryJackson@iName.com] Sent: Wednesday, June 06, 2001 11:56 AM To: Skolnik, Ed Cc: FWTK List Server Subject: Re: ftp-gw poxy [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Since the FTP server responds: 220 Secure FTP Server ready. I would guess that the proxy isn't handling the newer FTP Security Extensions from 1997 in RFC2228 http://www.csl.sony.co.jp/cgi-bin/hyperrfc?rfc2228.txt The two "> Invalid reply." messages probably mean the proxy is getting a different number response than it expects. These responses are defined in RFC2228 and probably contain the challenge/response info. Has anyone written a patch to add support for this RFC? LarryJackson@iName.com ----- Original Message ----- From: "Skolnik, Ed" To: > I don't understand, on some remote FTP servers this works like a charm and > on others I get the "Invalid reply" Can anyone help? > > OS Net BSD 1.2.1 NetBSD 1.2.1 > TIS Firewall Toolkit September 1996 > > > # Example ftp gateway rules: > # -------------------------- > ftp-gw: denial-msg /usr/local/etc/ftp-deny.txt > #ftp-gw: welcome-msg /usr/local/etc/ftp-welcome.txt > #ftp-gw: help-msg /usr/local/etc/ftp-help.txt > ftp-gw: timeout 3600 > # uncomment the following line if you want internal users to be > # able to do FTP with the internet > # Added support for SCO Mail server Dec 16 1997 J. Adams > ftp-gw: permit-hosts 10.10.5.254 > > > #!/bin/ksh > user1=xxxxxx -----------------------------To protect > pswd1=ppppp > rmte=ftp.xxxxxx.com > logs=/tmp > listings="/tmp/$(basename $0).$$" > echo "$user1 $pswd1 $rmte" > echo "$listings" > echo "Press enter" > read DUMMY > #ftp -n $rmte << EOF > listing > ftp -v -n firewall << EOF > $listings > user $user1@$rmte $pswd1 > ascii > ls > bye > EOF > > > OUTPUT: > > Connected to gateway. > 220 gw.florsheim.com FTP proxy (Version V2.0) ready. > ----GATEWAY CONNECTED TO ftp.xxxxxx.com > Invalid reply. > 220-You have connected to xxxxxx FTP Server > 220- > 220 Secure FTP Server ready. > USER xxxxxxx > Invalid reply. > 530 Peer has closed connection > 500 must be connected to remote server > 500 must be connected to remote server > 500 must be connected to remote server > > Ed Skolnik > Florsheim Group Inc. > MIT Consultants > 200 N. LaSalle > Chicago IL. 60601 > 312-458-2655 Phone > 312-458-2661 Fax > ed.skolnik@florsheim.com From owner-fwtk-users@ex.tis.com Thu Jun 14 09:57 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA12064 Thu, 14 Jun 2001 09:57:48 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA20368; Thu, 14 Jun 2001 09:01:38 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 14 Jun 2001 06:19:10 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA08703 for fwtk-users-outgoing; Thu, 14 Jun 2001 06:17:48 -0500 (CDT) Message-ID: <636A9B29EA94BC4194D844C27A3B1AAB0174EE7C@mercury.intrusion.com> From: "Kee, Brian" To: fwtk-users@lists.nai.com Subject: FWTK and LINUX 2.4 Kernel Date: Wed, 13 Jun 2001 15:49:27 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 661 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I was just curious if anyone out there has tried using the FWTK in conjunction with the linux kernel firewall/router capabilities, specifically Netfilter and IPtables. I really like the capabilities of the linux 2.4 kernel, however I feel that firewalling should be handled by a proxy firewall. I would like to setup a Linux firewall with IPtables/netfilter where the rules basically redirect the traffic to the specified proxies. In any case, I would like to hear from any of you who have tried this kind of config. Thanks BAK From owner-fwtk-users@ex.tis.com Thu Jun 14 18:15 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA15191 Thu, 14 Jun 2001 18:15:56 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA27508; Thu, 14 Jun 2001 17:20:02 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 14 Jun 2001 14:41:06 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA07036 for fwtk-users-outgoing; Thu, 14 Jun 2001 14:39:45 -0500 (CDT) Message-ID: <636A9B29EA94BC4194D844C27A3B1AAB0174EF37@mercury.intrusion.com> From: "Kee, Brian" To: David Lang Cc: fwtk-users@lists.nai.com Subject: RE: FWTK and LINUX 2.4 Kernel Date: Thu, 14 Jun 2001 14:39:00 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1603 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] When configuring, I am asuming, you have to set up netfilter/iptables as normal. Then use REDIRECT statements to send specified traffic to the specified (FWTK) proxy port on localhost. Would I be correct in this? Thanks BAK -----Original Message----- From: David Lang [mailto:david.lang@digitalinsight.com] Sent: Thursday, June 14, 2001 1:09 PM To: Kee, Brian Cc: fwtk-users@lists.nai.com Subject: Re: FWTK and LINUX 2.4 Kernel it works, and the other advantages of the 2.4 series make the proxies work quite a bit better (especially when you get to large numbers of them) David Lang On Wed, 13 Jun 2001, Kee, Brian wrote: > Date: Wed, 13 Jun 2001 15:49:27 -0500 > From: "Kee, Brian" > To: fwtk-users@lists.nai.com > Subject: FWTK and LINUX 2.4 Kernel > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > I was just curious if anyone out there has tried using the FWTK in > conjunction with the linux kernel firewall/router capabilities, specifically > Netfilter and IPtables. I really like the capabilities of the linux 2.4 > kernel, however I feel that firewalling should be handled by a proxy > firewall. I would like to setup a Linux firewall with IPtables/netfilter > where the rules basically redirect the traffic to the specified proxies. In > any case, I would like to hear from any of you who have tried this kind of > config. > > > > Thanks > BAK > From owner-fwtk-users@ex.tis.com Fri Jun 15 10:00 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA16768 Fri, 15 Jun 2001 10:00:10 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA25354; Fri, 15 Jun 2001 09:04:16 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 15 Jun 2001 06:23:28 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA13416 for fwtk-users-outgoing; Fri, 15 Jun 2001 06:22:06 -0500 (CDT) From: David Lang To: "Kee, Brian" Cc: fwtk-users@lists.nai.com Date: Thu, 14 Jun 2001 12:49:21 -0700 (PDT) Subject: RE: FWTK and LINUX 2.4 Kernel In-Reply-To: <636A9B29EA94BC4194D844C27A3B1AAB0174EF37@mercury.intrusion.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 2052 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] yes I haven't attempted to do this with FTP, but with simple TCP services it works with no problems. David Lang On Thu, 14 Jun 2001, Kee, Brian wrote: > Date: Thu, 14 Jun 2001 14:39:00 -0500 > From: "Kee, Brian" > To: David Lang > Cc: fwtk-users@lists.nai.com > Subject: RE: FWTK and LINUX 2.4 Kernel > > When configuring, I am asuming, you have to set up netfilter/iptables as > normal. Then use REDIRECT statements to send specified traffic to the > specified (FWTK) proxy port on localhost. Would I be correct in this? > > > Thanks > BAK > > -----Original Message----- > From: David Lang [mailto:david.lang@digitalinsight.com] > Sent: Thursday, June 14, 2001 1:09 PM > To: Kee, Brian > Cc: fwtk-users@lists.nai.com > Subject: Re: FWTK and LINUX 2.4 Kernel > > > it works, and the other advantages of the 2.4 series make the proxies work > quite a bit better (especially when you get to large numbers of them) > > David Lang > > On Wed, 13 Jun 2001, Kee, Brian wrote: > > > Date: Wed, 13 Jun 2001 15:49:27 -0500 > > From: "Kee, Brian" > > To: fwtk-users@lists.nai.com > > Subject: FWTK and LINUX 2.4 Kernel > > > > [To be removed from this list send the message "unsubscribe fwtk-users" in > the > > BODY of a mail message to majordomo@ex.tis.com.] > > > > I was just curious if anyone out there has tried using the FWTK in > > conjunction with the linux kernel firewall/router capabilities, > specifically > > Netfilter and IPtables. I really like the capabilities of the linux 2.4 > > kernel, however I feel that firewalling should be handled by a proxy > > firewall. I would like to setup a Linux firewall with IPtables/netfilter > > where the rules basically redirect the traffic to the specified proxies. > In > > any case, I would like to hear from any of you who have tried this kind of > > config. > > > > > > > > Thanks > > BAK > > > From owner-fwtk-users@ex.tis.com Fri Jun 15 12:42 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA17251 Fri, 15 Jun 2001 12:42:43 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA17677; Fri, 15 Jun 2001 11:46:50 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 15 Jun 2001 09:08:31 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA25567 for fwtk-users-outgoing; Fri, 15 Jun 2001 09:07:10 -0500 (CDT) From: David Lang To: "Kee, Brian" Cc: fwtk-users@lists.nai.com Date: Thu, 14 Jun 2001 11:08:56 -0700 (PDT) Subject: Re: FWTK and LINUX 2.4 Kernel In-Reply-To: <636A9B29EA94BC4194D844C27A3B1AAB0174EE7C@mercury.intrusion.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1257 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] it works, and the other advantages of the 2.4 series make the proxies work quite a bit better (especially when you get to large numbers of them) David Lang On Wed, 13 Jun 2001, Kee, Brian wrote: > Date: Wed, 13 Jun 2001 15:49:27 -0500 > From: "Kee, Brian" > To: fwtk-users@lists.nai.com > Subject: FWTK and LINUX 2.4 Kernel > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > I was just curious if anyone out there has tried using the FWTK in > conjunction with the linux kernel firewall/router capabilities, specifically > Netfilter and IPtables. I really like the capabilities of the linux 2.4 > kernel, however I feel that firewalling should be handled by a proxy > firewall. I would like to setup a Linux firewall with IPtables/netfilter > where the rules basically redirect the traffic to the specified proxies. In > any case, I would like to hear from any of you who have tried this kind of > config. > > > > Thanks > BAK > -- John C. Kelley Development Engineer NAILabs at Network Associates, Inc. Glenwood, MD From owner-fwtk-users@ex.tis.com Fri Jun 15 20:28 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA18109 Fri, 15 Jun 2001 20:28:42 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id TAA14284; Fri, 15 Jun 2001 19:31:29 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 15 Jun 2001 16:52:45 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA29029 for fwtk-users-outgoing; Fri, 15 Jun 2001 16:50:04 -0500 (CDT) Message-ID: <3B2A7EF4.AFD54D34@ordix.de> Date: Fri, 15 Jun 2001 23:32:36 +0200 From: Markus Schreier X-Mailer: Mozilla 4.7 [de]C-CCK-MCD QXW03237 (WinNT; I) X-Accept-Language: de,en MIME-Version: 1.0 To: fwtk-users@tis.com Subject: SSH to the Internet Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1648 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello all, i've found a simmilar thread in the Archives. But there didn't seem to be an answer. Perhaps someone can help. I need my users tu connect to a couple (one up to five) of Servers outside our Firewall. I would like to set up some ssh-Solution. At least the Communication between FW and Server should be encrypted. internal net : external Net encryption nice to have : encryption essential : Server X Server Y client A--+ +------+ | | +----------+ FWTK +---------+---------+ | +------+ client B--+ | | client C--+ I'm wondering if i could use plug-gw. To Tunnel ssh from Inside to Outside * Pros: both sides are encrypted * Cons: a) I would need diffrent plug-gw on diffrent ports for every Server to reach. b) The server would see One Client (the FWTK-Box) but it would always get diffrent Host-Authentications from the diffrent Clients (A B and C) Is anyone out there, who has a better solution than Plug-gw? a) Is there a possibility to get diffrent plug-gw on the same port on one Server (for instance with ip-aliassing). It would be more convinient for the users... b) Is there a possibility to let the server accept all thre client-authentications, even though they al seem to come from one IP-Source? Thanks for any suggestions, hints and tips Markus Schreier Systeme & Netze ORDIX AG From owner-fwtk-users@ex.tis.com Mon Jun 18 07:03 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA22550 Mon, 18 Jun 2001 07:03:49 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA20808; Mon, 18 Jun 2001 06:07:57 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 18 Jun 2001 03:25:06 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA13971 for fwtk-users-outgoing; Mon, 18 Jun 2001 03:23:45 -0500 (CDT) Message-ID: <3B2DBA54.F36EA5C0@tensor.ru> Date: Mon, 18 Jun 2001 12:22:44 +0400 From: Denis Tokarev Reply-To: den@tensor.ru Organization: Tensor X-Mailer: Mozilla 4.77 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: Squid 2.4Stable1 + HTTP-GW Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=koi8-r Content-Length: 356 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi! I see a strange behavior of fwtk acting as parent proxy for squid. When i try to get some urls, like "http://195.34.34.80/counter?" http-gw dies with signal 11 under freebsd 4.3-stable. What is a problem could be? /dvt From owner-fwtk-users@ex.tis.com Mon Jun 18 18:27 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA24914 Mon, 18 Jun 2001 18:27:43 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA03982; Mon, 18 Jun 2001 17:31:53 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 18 Jun 2001 14:51:22 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA08730 for fwtk-users-outgoing; Mon, 18 Jun 2001 14:50:00 -0500 (CDT) Message-ID: <3B2E1825.3040200@cuci.nl> Date: Mon, 18 Jun 2001 17:03:01 +0200 From: Maurice Lemmens User-Agent: Mozilla/5.0 (Windows; U; Win98; en-GB; m18) Gecko/20010131 Netscape6/6.01 X-Accept-Language: en MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: plug-gw Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii; format=flowed Content-Length: 366 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] June 18, 2001 Beware ! Use of the plug-gw has changed in FWTK 2.1. (inetd) /usr/local/etc/plug-gw -daemon nntp (netperm-table) nntp: port.. etc. works. Old notation doesn't. Regards, funki@cuci.nl Maurice Lemmens From owner-fwtk-users@ex.tis.com Tue Jun 19 09:58 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA27031 Tue, 19 Jun 2001 09:58:39 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA01688; Tue, 19 Jun 2001 09:02:51 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Jun 2001 06:20:52 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA17622 for fwtk-users-outgoing; Tue, 19 Jun 2001 06:19:32 -0500 (CDT) From: David Lang To: Maurice Lemmens Cc: fwtk-users@lists.nai.com Date: Mon, 18 Jun 2001 14:01:42 -0700 (PDT) Subject: Re: plug-gw In-Reply-To: <3B2E1825.3040200@cuci.nl> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 785 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] except if you use -daemon you don't want to start it through inetd. David Lang On Mon, 18 Jun 2001, Maurice Lemmens wrote: > Date: Mon, 18 Jun 2001 17:03:01 +0200 > From: Maurice Lemmens > To: fwtk-users@lists.nai.com > Subject: plug-gw > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > June 18, 2001 > > Beware ! > > Use of the plug-gw has changed in FWTK 2.1. > > (inetd) /usr/local/etc/plug-gw -daemon nntp > (netperm-table) nntp: port.. etc. > > > works. Old notation doesn't. > > > Regards, > funki@cuci.nl > Maurice Lemmens > From owner-fwtk-users@ex.tis.com Tue Jun 19 18:45 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA28140 Tue, 19 Jun 2001 18:45:31 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA23849; Tue, 19 Jun 2001 17:49:44 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Jun 2001 15:08:08 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA29036 for fwtk-users-outgoing; Tue, 19 Jun 2001 15:06:47 -0500 (CDT) Message-ID: <3B2FA41D.150BEC3B@ordix.de> Date: Tue, 19 Jun 2001 21:12:29 +0200 From: Markus Schreier X-Mailer: Mozilla 4.7 [de]C-CCK-MCD QXW03237 (WinNT; I) X-Accept-Language: de,en MIME-Version: 1.0 To: "Michael St. Laurent" , fwtk-users@ex.tis.com Subject: Re: SSH to the Internet References: <91A5926EFF44D3118B1200104B7276EB01084D78@hart-exchange.hartwellcorp.com> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 2754 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, Thanks for your (and other) ideas. How dos this work, if i have mor than one client which needs to connect throughthe plug-gw to a server? Does anyone have experiance with this? Markus Schreier "Michael St. Laurent" schrieb: > > I've used plug-gw to solve this problem at one of my clients. Just have > plug-gw listen to a different port number for each target ssh server and > then plug through to the ssh port. > > -------------------- > Michael St. Laurent > Hartwell Corporation > > > -----Original Message----- > > From: Markus Schreier [mailto:ms@ordix.de] > > Sent: Friday, June 15, 2001 2:33 PM > > To: fwtk-users@tis.com > > Subject: SSH to the Internet > > > > > > [To be removed from this list send the message "unsubscribe > > fwtk-users" in the > > BODY of a mail message to majordomo@ex.tis.com.] > > > > Hello all, > > i've found a simmilar thread in the Archives. But there didn't seem to > > be an answer. > > Perhaps someone can help. > > > > I need my users tu connect to a couple (one up to five) of Servers > > outside our Firewall. I would like to set up some > > ssh-Solution. At least > > the Communication between FW and Server should be encrypted. > > > > > > internal net : external Net > > encryption nice to have : encryption essential > > : > > Server X Server Y > > > > client A--+ +------+ | | > > +----------+ FWTK +---------+---------+ > > | +------+ > > client B--+ > > | > > | > > client C--+ > > > > I'm wondering if i could use plug-gw. To Tunnel ssh from Inside to > > Outside > > * Pros: both sides are encrypted > > * Cons: > > a) I would need diffrent plug-gw on diffrent ports for every Server > > to reach. > > b) The server would see One Client (the FWTK-Box) but it > > would always > > get diffrent Host-Authentications from the diffrent Clients (A B > > and C) > > > > Is anyone out there, who has a better solution than Plug-gw? > > > > a) Is there a possibility to get diffrent plug-gw on the same port on > > one Server (for instance with ip-aliassing). It would be more > > convinient > > for the users... > > > > b) Is there a possibility to let the server accept all thre > > client-authentications, even though they al seem to come from one > > IP-Source? > > > > > > Thanks for any suggestions, hints and tips > > > > > > Markus Schreier > > > > Systeme & Netze > > ORDIX AG > > > > Come and meet Hartwell and HASCO at the 2001 Paris Airshow > June 17-24, 2001 > Hall: 3 Stand: E-2 From owner-fwtk-users@ex.tis.com Wed Jun 20 10:08 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA00117 Wed, 20 Jun 2001 10:08:56 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA19371; Wed, 20 Jun 2001 09:13:08 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Jun 2001 06:29:04 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA05113 for fwtk-users-outgoing; Wed, 20 Jun 2001 06:27:42 -0500 (CDT) Date: Tue, 19 Jun 2001 15:21:48 -0500 (CDT) From: Sergio Jimenez Tovar X-Sender: sjimenez@laplace To: Fwtk Subject: ftp in two firewalls Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 243 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] How I can do ftp among two firewalls, one is mine, and the other is of a company what I too have access. Thanks. From owner-fwtk-users@ex.tis.com Wed Jun 20 10:30 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA00205 Wed, 20 Jun 2001 10:30:19 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA23481; Wed, 20 Jun 2001 09:34:33 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Jun 2001 06:54:10 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA06077 for fwtk-users-outgoing; Wed, 20 Jun 2001 06:52:49 -0500 (CDT) Message-ID: <8FF4A557FE65D311BDF80000E88EAB1979F2A6@DSISS002> From: =?iso-8859-1?Q?Beuserie_Fr=E9d=E9ric_=28stbrice_dsi=29?= To: "'Sergio Jimenez Tovar'" Cc: "'fwtk-users@ex.tis.com'" Subject: RE: ftp in two firewalls Date: Wed, 20 Jun 2001 13:54:55 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C0F97F.D27C53E0" Content-Length: 2849 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C0F97F.D27C53E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable log on at your firewall and when ready use 'USER username@ftp.secondfirewall.org' and then type password. you're logged on the second firewall. ----------------------------------------- Beuserie Frederic DSI / Syst=E8me et Exploitation - 3 Suisses Belgique Email: F.Beuserie@3Suisses.be -----Message d'origine----- De : Sergio Jimenez Tovar [mailto:sjimenez@galois.dgae.unam.mx] Envoy=E9 : mardi 19 juin 2001 21:22 =C0 : Fwtk Objet : ftp in two firewalls [To be removed from this list send the message "unsubscribe fwtk-users" = in the BODY of a mail message to majordomo@ex.tis.com.] How I can do ftp among two firewalls, one is mine, and the other is of a company what I too have access. Thanks. ------_=_NextPart_001_01C0F97F.D27C53E0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable RE: ftp in two firewalls

log on at your firewall and when ready
use 'USER username@ftp.secondfirewall.org' and then = type password.

you're logged on the second firewall.

-----------------------------------------
Beuserie Frederic
DSI / Syst=E8me et Exploitation - 3 Suisses = Belgique

Email: F.Beuserie@3Suisses.be

-----Message d'origine-----
De : Sergio Jimenez Tovar [mailto:sjimenez@galois.dgae= .unam.mx]
Envoy=E9 : mardi 19 juin 2001 21:22
=C0 : Fwtk
Objet : ftp in two firewalls


[To be removed from this list send the message = "unsubscribe fwtk-users" in the
BODY of a mail message to = majordomo@ex.tis.com.]

        How I can = do ftp among two firewalls, one is mine, and the
other is of a company what I too have access. = Thanks.

------_=_NextPart_001_01C0F97F.D27C53E0-- From owner-fwtk-users@ex.tis.com Wed Jun 20 16:03 EDT 2001 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA01017 Wed, 20 Jun 2001 16:03:24 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA13846; Wed, 20 Jun 2001 15:07:37 -0500 (CDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Jun 2001 12:25:46 -0500 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA19078 for fwtk-users-outgoing; Wed, 20 Jun 2001 12:24:24 -0500 (CDT) From: dreamwvr@dreamwvr.com Message-ID: <3B303770.8733C96E@dreamwvr.com> Date: Tue, 19 Jun 2001 23:41:05 -0600 X-Mailer: Mozilla 4.75 [en] (X11; U; OpenBSD 2.8 i386) X-Accept-Language: en MIME-Version: 1.0 To: Sergio Jimenez Tovar Cc: Fwtk Subject: Re: ftp in two firewalls References: Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 456 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi, Bad idea.. use scp or SSLFTP.. Sergio Jimenez Tovar wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > How I can do ftp among two firewalls, one is mine, and the > other is of a company what I too have access. Thanks.