From bounce-fwtk-users-303@listserv.nai.com Sun Mar 3 16:44 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id QAA19064 Sun, 3 Mar 2002 16:44:17 -0500 (EST) Message-Id: X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Sun, 03 Mar 2002 16:52:44 -0500 To: "fwtk-users" From: Rick Murphy Subject: [fwtk-users] Fwd: unable to post Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 6625 Status: RO Forwarding as requested.. -Rick >Date: Mon, 25 Feb 2002 17:25:56 -0800 (PST) >From: David Lang >To: rmurphy@itm-inst.com >Subject: unable to post > >Rick, I am unable to post to the fwtk-users list (my sending email address >changed and I am having trouble getting the listserver to let me subscribe >under the new one) could you post this to the list for me? > >David Lang > > >From ListManager-admin@listserv.nai.com Mon Feb 25 17:20:17 2002 >Date: Mon, 25 Feb 2002 19:08:51 -0600 >From: ListManager >Reply-To: ListManager >To: david.lang@digitalinsight.com >Subject: Re: plug-summ.sh > >Sorry, but ListManager did not find your email address >-> "david.lang@digitalinsight.com" > >listed as a member of fwtk-users. > >Only members of fwtk-users are allowed to contribute messages. > >Because ListManager could not confirm that you are a member of fwtk-users, >your message was not accepted. > >--- > >Return-Path: >Received: from [209.195.52.30] ([209.195.52.114]) by listserv.nai.com with >SMTP (ListManager WIN32 version 4.2); Mon, 25 Feb 2002 19:08:50 -0600 >Received: from MAIL ([10.3.84.114]) by [209.195.52.30] > via smtpd (for listserv.nai.com [161.69.213.6]) with SMTP; 26 > Feb 2002 01:38:18 UT >Received: from atlexc01.digitalinsight.com ([10.2.43.7] (may be forged)) > by mail.nfront.com (2.6 Build 1 (Berkeley 8.8.6)/8.8.4) with ESMTP > id UAA09356 for ; Mon, 25 Feb 2002 > 20:15:29 -0500 >Received: by ATLEXC01 with Internet Mail Service (5.5.2653.19) > id <1YC9914H>; Mon, 25 Feb 2002 20:13:03 -0500 >Received: from dlang.diginsite.com ([10.201.10.67]) by >calexc01.digitalinsight.com with SMTP (Microsoft Exchange Internet Mail >Service Version 5.5.2653.13) > id FACZGYZD; Mon, 25 Feb 2002 17:16:28 -0800 >From: David Lang >To: fwtk-users@listserv.nai.com >Date: Mon, 25 Feb 2002 17:13:27 -0800 (PST) >Subject: plug-summ.sh >Message-ID: >MIME-Version: 1.0 >Content-Type: TEXT/PLAIN; charset=US-ASCII > >in working on getting reasonable log reports for some of my firewalls I >adapted the ftp-summ.sh script to report on plug-gw connections instead. > >I also added logic to have it report on any strange messages that >appear. > >As the list does not accept attachments the full script is included below. > >David Lang > >#!/bin/sh ># ># Copyright (c) 1993, Trusted Information Systems, Incorporated ># All rights reserved. ># ># Redistribution and use are governed by the terms detailed in the ># license document ("LICENSE") included with the toolkit. ># > ># ># Author: Marcus J. Ranum, Trusted Information Systems, Inc. ># > ># ># MODIFIED 2-25-2002 by David Lang from the ftp-summ.sh script to ># analyse the useage of plug-gwB ># > ># THIS SCRIPT EXPECTS TO READ syslog() style log entries on its ># standard input > > >TMPS="/tmp/.permnet /tmp/.permden /tmp/.permdtot /tmp/.permtot \ > /tmp/.permsrv /tmp/.bytesin /tmp/.bytesout /tmp/.totalin > /tmp/.totalout" >rm -f $TMPS > >grep 'plug-gw.*:' | awk ' > >BEGIN { > total_permitted = 0; > total_phosts = 0; > total_denied = 0; > total_dhosts = 0; > total_input = 0; > total_output = 0; > total_errors = 0; >} > > >$6 == "deny" { > total_denied++; > x = substr($7,6) " -> " substr($8,9); > if(!denies[x]) > total_dhosts++; > denies[x]++; >} > > >$6 == "disconnect" { > x = substr($7,6) " -> " substr($8,13); > total_permitted++; > if(!permits[x]) > total_phosts++; > permits[x]++; > bytesin[x] += substr($9,4) / 1024; > total_input += substr($9,4) / 1024; > bytesout[x] += substr($10,5) / 1024; > total_output += substr($10,5) / 1024; >} > >$6 != "disconnect" && $6 != "deny" && $6 != "connect" { > x = ""; > for(i=6; i x = x " " $i; > total_errors++; > error[x]++; >} > >END { > if(total_permitted > 0) { > for(c in permits) > printf("%d %s\n",permits[c],c) >> "/tmp/.permnet"; > } > printf("%d\n",total_permitted) > "/tmp/.permtot"; > > > if(total_denied > 0) { > for(c in denies) > printf("%d %s\n",denies[c],c) >> "/tmp/.permden"; > } > printf("%d\n",total_denied) > "/tmp/.permdtot"; > > > if(total_input > 0) { > for(c in bytesin) > if(bytesin[c] > 0) > printf("%d %s\n",bytesin[c],c) >> "/tmp/.bytesin"; > } > printf("%d\n",total_input) > "/tmp/.totalin"; > > > if(total_output > 0) { > for(c in bytesout) > if(bytesout[c] > 0) > printf("%d %s\n",bytesout[c],c) >> "/tmp/.bytesout"; > } > printf("%d\n",total_output) > "/tmp/.totalout"; > > if(total_errors > 0) { > printf("unknown messages \n"); > for(c in error) > printf("%d %s\n",error[c],c); > } >}' > > >if [ -s /tmp/.permnet -a -s /tmp/.permtot ]; then >echo >echo "Plug service users (total: `cat /tmp/.permtot`)" >echo "Connects Host/Address" >echo "-------- ------------" >sort -r -n /tmp/.permnet | awk '{ printf("%-13d %s\n",$1,$2); }' >fi > > >if [ -s /tmp/.permden -a -s /tmp/.permdtot ]; then >echo >echo "Denied FTP service users (total: `cat /tmp/.permdtot`)" >echo "Connects Host/Address" >echo "-------- ------------" >sort -r -n /tmp/.permden | awk '{ printf("%-13d %s\n",$1,$2); }' >fi > > >if [ -s /tmp/.totalout -a -s /tmp/.bytesout ]; then >echo >echo "Plug service output thruput (total Kbytes: `cat /tmp/.totalout`)" >echo "KBytes Host/Address" >echo "------ ------------" >sort -r -n /tmp/.bytesout | awk '{ printf("%-13d %s\n",$1,$2); }' >fi > > >if [ -s /tmp/.totalin -a -s /tmp/.bytesin ]; then >echo >echo "Plug service input thruput (total Kbytes: `cat /tmp/.totalin`)" >echo "KBytes Host/Address" >echo "------ ------------" >sort -r -n /tmp/.bytesin | awk '{ printf("%-13d %s\n",$1,$2); }' >fi > >rm -f $TMPS --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 7 18:52 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id SAA00822 Thu, 7 Mar 2002 18:52:13 -0500 (EST) From: "James A. Giseburt" To: "fwtk-users" Subject: [fwtk-users] Apple iTools Date: Thu, 7 Mar 2002 18:00:37 -0600 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) X-Mimeole: Produced By Microsoft MimeOLE V6.00.2600.0000 Importance: Normal List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1014 Status: RO Good Day! Some of our academic people would like to use Apple's iTools and iDisk. To use this stuff, you go to Apple's web site and pick their iTools menu item. Simple web request. The iTools/iDisk stuff uses AFP over TCP (port 548) from their 204.179.120.x network. I plugged port 548. My last issue is iTools/iDisk uses an ICMP echo request/reply to initialize the conversation. I'm stumped on this one. (Maybe my mind is not working at this point.) What do I plug and how? I don't really think I want to do this, but... Any help would be appreciated. Jim James A. Giseburt Information Systems Manager E-mail: giseburt@moline.lth2.k12.il.us Moline School District No. 40 Voice : 309.736.2100 Ext. 157 1619 - 11th Avenue Fax : 309.736.2113 Moline, IL 61265 Web : http://www.moline.lth2.k12.il.us --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 7 23:09 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id XAA03084 Thu, 7 Mar 2002 23:09:32 -0500 (EST) Date: Thu, 7 Mar 2002 23:20:20 -0500 (EST) From: Ted Keller To: "fwtk-users" Subject: [fwtk-users] Re: Apple iTools In-Reply-To: Message-ID: MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1471 Status: RO James, The toolkit proxies only tcp/ip. It will not proxy icmp protocol. You will have to generate specific code on your bastion host to either pass teh icmp packets through - or simulate the icmp process. ted keller On Thu, 7 Mar 2002, James A. Giseburt wrote: > Good Day! > > Some of our academic people would like to use Apple's iTools and iDisk. To > use this stuff, you go to Apple's web site and pick their iTools menu item. > Simple web request. The iTools/iDisk stuff uses AFP over TCP (port 548) > from their 204.179.120.x network. I plugged port 548. My last issue is > iTools/iDisk uses an ICMP echo request/reply to initialize the conversation. > I'm stumped on this one. (Maybe my mind is not working at this point.) > What do I plug and how? I don't really think I want to do this, but... > > Any help would be appreciated. > > Jim > > > James A. Giseburt > Information Systems Manager E-mail: giseburt@moline.lth2.k12.il.us > Moline School District No. 40 Voice : 309.736.2100 Ext. 157 > 1619 - 11th Avenue Fax : 309.736.2113 > Moline, IL 61265 Web : http://www.moline.lth2.k12.il.us > > > --- > You are currently subscribed to fwtk-users as: keller@bfg.com > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Fri Mar 8 16:00 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id QAA11957 Fri, 8 Mar 2002 16:00:40 -0500 (EST) X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to using -f Message-ID: From: "Michael St. Laurent" To: "fwtk-users" Subject: [fwtk-users] FWTK module for Webmin? Date: Fri, 8 Mar 2002 13:12:53 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 268 Status: RO Does anyone know if a Webmin module has been written for FWTK? -- Michael St. Laurent Hartwell Corporation --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Sun Mar 10 09:14 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA27825 Sun, 10 Mar 2002 09:14:35 -0500 (EST) Date: Sun, 10 Mar 2002 09:25:47 -0500 (EST) From: Ted Keller To: "fwtk-users" Subject: [fwtk-users] Update on Spam Filtering Message-ID: MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 2359 Status: RO Frequently, I've seen a number of messages slip throught the spamfiltering routings that I've included in the smap routines. It took me a while - but I finally caught one of those messages - and determined that the message body was actually base64 encoded - thank you very much. It took me a while to catch these because our internal exchange system would decode these into normal text messages - when they would bounce, the encodeing was lost. So it was important to catch one of these (actually serveral) on the way in - before it got to a down-stream mailer. That allowed me to inspect the message - and have a few beers as I decided how to approach this little encoding problem. To fix these - and being very lazy - I grabbed the base64 routines from the apache code. They had done all the work - debugged it - and make a very stable package for base64 decoding. Then I included just enough code to provide basic mime-type recognition - and bingo - I got messages back into ascii that were able to be processed by the content filters. What has this done - well - I've increased my hit rate by some 25% based on total messages captured. Tipically, I filter out some 40,000 messages weekly. With this addition, last week (and I didn't have it in all week) I exceeded 50,000 messages - and my postmaster mailbox was reduced down to near zero! Keep in mind - this doesn't do virus checking - and it only looks at base64 encodeing. There may be others out there that I haven't hit yet. I use commercial products for the virus protection stuff and they do their job very well. I will be packaging this up shortly if any of you are interested. Just drop me a line and I will tell you where to get it. The package will also include the specific apache modules - direct from the apache source kits. My belief is this is in line with their licensing agreements since the copyrights are present in their routines. They've done a good job - they should get the credit. Let me know if your are interested. Keith - this should be quality enough to post on the fwtk.org site. Would like to have an offline conversation to verify it stays inline with the fwtk licensing as well. ted keller --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Mon Mar 11 09:10 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA05525 Mon, 11 Mar 2002 09:10:24 -0500 (EST) Message-ID: From: "Don" To: "fwtk-users" Subject: [fwtk-users] Re: Update on Spam Filtering Date: Mon, 11 Mar 2002 09:22:38 -0500 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4807.1700 X-Mimeole: Produced By Microsoft MimeOLE V5.50.4807.1700 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2721 Status: RO Hi Ted, As before, please let me know when your update is ready. Thanks, Don ----- Original Message ----- From: "Ted Keller" To: "fwtk-users" Sent: Sunday, March 10, 2002 9:25 AM Subject: [fwtk-users] Update on Spam Filtering > Frequently, I've seen a number of messages slip throught the spamfiltering > routings that I've included in the smap routines. It took me a while - > but I finally caught one of those messages - and determined that the > message body was actually base64 encoded - thank you very much. It took > me a while to catch these because our internal exchange system would > decode these into normal text messages - when they would bounce, the > encodeing was lost. So it was important to catch one of these (actually > serveral) on the way in - before it got to a down-stream mailer. That > allowed me to inspect the message - and have a few beers as I decided how > to approach this little encoding problem. > > To fix these - and being very lazy - I grabbed the base64 routines from > the apache code. They had done all the work - debugged it - and make a > very stable package for base64 decoding. Then I included just enough code > to provide basic mime-type recognition - and bingo - I got messages back > into ascii that were able to be processed by the content filters. > > What has this done - well - I've increased my hit rate by some 25% based > on total messages captured. Tipically, I filter out some 40,000 messages > weekly. With this addition, last week (and I didn't have it in all week) > I exceeded 50,000 messages - and my postmaster mailbox was reduced down to > near zero! > > Keep in mind - this doesn't do virus checking - and it only looks at > base64 encodeing. There may be others out there that I haven't hit yet. > I use commercial products for the virus protection stuff and they do their > job very well. > > I will be packaging this up shortly if any of you are interested. Just > drop me a line and I will tell you where to get it. The package will also > include the specific apache modules - direct from the apache source kits. > My belief is this is in line with their licensing agreements since the > copyrights are present in their routines. They've done a good job - they > should get the credit. > > Let me know if your are interested. > > Keith - this should be quality enough to post on the fwtk.org site. Would > like to have an offline conversation to verify it stays inline with the > fwtk licensing as well. > > ted keller --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Sat Mar 16 11:54 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id LAA23955 Sat, 16 Mar 2002 11:54:04 -0500 (EST) Reply-To: "fwtk-users" From: =?us-ascii?Q?Boringer=2C_Heiko?= To: "fwtk-users" Subject: [fwtk-users] AW: Update on Spam Filtering Date: Sat, 16 Mar 2002 18:05:40 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 In-Reply-To: List-Unsubscribe: Content-Type: text/plain; charset="us-ascii" Content-Length: 2924 Status: RO Hello Ted, where can i get the latest smap-release. My old one from fwtk 2.1 will not run on my Kernel 2.4.17. Smap -d shows a loop an delivers no mails. Please send me the link to the latest smap.tar. kind regards Heiko Boringer -----Ursprungliche Nachricht----- Von: Ted Keller [mailto:keller@bfg.com] Gesendet: Sonntag, 10. Marz 2002 15:26 An: fwtk-users Betreff: [fwtk-users] Update on Spam Filtering Frequently, I've seen a number of messages slip throught the spamfiltering routings that I've included in the smap routines. It took me a while - but I finally caught one of those messages - and determined that the message body was actually base64 encoded - thank you very much. It took me a while to catch these because our internal exchange system would decode these into normal text messages - when they would bounce, the encodeing was lost. So it was important to catch one of these (actually serveral) on the way in - before it got to a down-stream mailer. That allowed me to inspect the message - and have a few beers as I decided how to approach this little encoding problem. To fix these - and being very lazy - I grabbed the base64 routines from the apache code. They had done all the work - debugged it - and make a very stable package for base64 decoding. Then I included just enough code to provide basic mime-type recognition - and bingo - I got messages back into ascii that were able to be processed by the content filters. What has this done - well - I've increased my hit rate by some 25% based on total messages captured. Tipically, I filter out some 40,000 messages weekly. With this addition, last week (and I didn't have it in all week) I exceeded 50,000 messages - and my postmaster mailbox was reduced down to near zero! Keep in mind - this doesn't do virus checking - and it only looks at base64 encodeing. There may be others out there that I haven't hit yet. I use commercial products for the virus protection stuff and they do their job very well. I will be packaging this up shortly if any of you are interested. Just drop me a line and I will tell you where to get it. The package will also include the specific apache modules - direct from the apache source kits. My belief is this is in line with their licensing agreements since the copyrights are present in their routines. They've done a good job - they should get the credit. Let me know if your are interested. Keith - this should be quality enough to post on the fwtk.org site. Would like to have an offline conversation to verify it stays inline with the fwtk licensing as well. ted keller --- You are currently subscribed to fwtk-users as: heiko.boeringer@epost.de To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Sat Mar 16 19:47 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id TAA26585 Sat, 16 Mar 2002 19:47:20 -0500 (EST) Message-Id: X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Sat, 16 Mar 2002 19:58:14 -0500 To: "fwtk-users" From: Rick Murphy Subject: [fwtk-users] Re: AW: Update on Spam Filtering In-Reply-To: Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 741 Status: RO At 06:05 PM 3/16/02 +0100, =?us-ascii?Q?Boringer=2C_Heiko?= wrote: >Hello Ted, > >where can i get the latest smap-release. My old one from fwtk 2.1 will not >run on my Kernel 2.4.17. Smap -d shows a loop an delivers no mails. Not speaking for Ted, but a smap patch isn't likely to help you.. Mail is delivered by sendmail, run from smapd. Changing smap will probably not fix your problem. Is smapd running? Are the incoming mail messages being written to smapd's queue directory? What error messages are being logged by smap/smapd when a message is processed? -Rick --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Mon Mar 25 22:09 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id WAA18605 Mon, 25 Mar 2002 22:09:10 -0500 (EST) Message-ID: From: Mark Bergstrom To: "fwtk-users" Subject: [fwtk-users] authsrv cannot open .dir .pag Date: Mon, 25 Mar 2002 19:20:54 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1892 Status: RO The /etc/services, /etc/inetd.conf are correct. Running either authsrv or authmgr brings up the prompt. However, in authsrv, even an attempt to list yields: Cannot open database. In either authsrv or authmgr, an attempt to add even one user yields Permission denied. __________________ Note: the .dir and .pag did not even exist until I once experimented with running authload. Now they are there (in /usr/local/etc as fw-authdb.dir and fw-authdb.pag of zero size). They are permission 600 and hence readable/writeable. _________________- Been staring at the source and the mailing list, this does not even seem to be a possibility, but there it is. =============== I am assuming I need it to qualify non-directly connected users via passwd proto for ftp-gw since I sniff on connects from partner-users (arriving via WAN) attempting to use the ftp-proxy and see a reset sent. For all my locally connected nets, the netperm-table yields the correct functioning of the ftp-gw. I am at a loss to see any other source of the reset being sent immediately upon the entry of the Username: into the prompt from the non-local user. The user prompt is being passed to the debug log on the destination ftp machine, but then the ftp-gw box sends a reset after the Password Required message. In the router rules, I honestly cannot comprehend how the ftp-proxy box can differentiate between the 'outside nets' arriving via the WAN and the 'inside nets' since all the addresses sit in the same rule space for the routing to the ftp-proxy box. There should be no differentiation so long as the required 'outside net' is in the table. Plenty of plug-gw's for these same WAN source addresses have been functioning fine for years. MB --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Mon Mar 25 22:29 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id WAA18792 Mon, 25 Mar 2002 22:29:47 -0500 (EST) Message-Id: X-Mailer: exmh version 2.5 07/13/2001 with nmh-1.0.4 To: "fwtk-users" Subject: [fwtk-users] plug-gw as a ssh proxy. Mime-Version: 1.0 Date: Tue, 26 Mar 2002 13:41:40 +1000 From: Ian Mortimer List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 1052 Status: RO I'm trying to use plug-gw as a one to one ssh proxy. The setup is: /etc/services: sshgw 2022/tcp #Secure Shell Login gateway /etc/inetd.conf: sshgw stream tcp nowait root /usr/local/etc/plug-gw plug-gw sshgw /usr/local/etc/netperm-table: plug-gw: timeout 900 plug-gw: userid root plug-gw: groupid nobody plug-gw: port 2022 10.1.1.3 -plug-to 10.2.2.2 -port ssh Doing `ssh -p 2022 fwtk-host' gets: ... plug-gw[3236]: deny host=.../10.1.1.3 service=sshgw I think this should be possible even using the non-standard port 2022 for the initial connection but obviously I'm doing something wrong. Can anyone see what's wrong with this setup? Thanks -- Ian ian@physics.uq.edu.au Ian Mortimer Tel: +61 7 3365 3436 Department of Physics Fax: +61 7 3365 1242 University of Queensland --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Mon Mar 25 22:49 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id WAA19019 Mon, 25 Mar 2002 22:49:29 -0500 (EST) Message-ID: From: "Larry Moore" To: "fwtk-users" Subject: [fwtk-users] Re: plug-gw as a ssh proxy. Date: Tue, 26 Mar 2002 12:06:51 +0800 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1646 Status: RO I would suggest searching the mailliing list archives for vnc-gw. You should find a message from me about overcoming such a problem with vnc-gw. Cheers, Larry. ----- Original Message ----- From: "Ian Mortimer" To: "fwtk-users" Sent: Tuesday, March 26, 2002 11:41 AM Subject: [fwtk-users] plug-gw as a ssh proxy. > I'm trying to use plug-gw as a one to one ssh proxy. > > The setup is: > > /etc/services: > > sshgw 2022/tcp #Secure Shell Login gateway > > /etc/inetd.conf: > > sshgw stream tcp nowait root /usr/local/etc/plug-gw plug-gw > sshgw > > /usr/local/etc/netperm-table: > > plug-gw: timeout 900 > plug-gw: userid root > plug-gw: groupid nobody > plug-gw: port 2022 10.1.1.3 -plug-to 10.2.2.2 -port ssh > > Doing `ssh -p 2022 fwtk-host' gets: > > ... plug-gw[3236]: deny host=.../10.1.1.3 service=sshgw > > I think this should be possible even using the non-standard port 2022 > for the initial connection but obviously I'm doing something wrong. > Can anyone see what's wrong with this setup? > > > Thanks > > > > -- > Ian > ian@physics.uq.edu.au Ian Mortimer > Tel: +61 7 3365 3436 Department of Physics > Fax: +61 7 3365 1242 University of Queensland > > > > --- > You are currently subscribed to fwtk-users as: lmoore@starwon.com.au > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Mar 26 02:22 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id CAA20266 Tue, 26 Mar 2002 02:22:22 -0500 (EST) Message-Id: Date: Tue, 26 Mar 2002 08:33:08 +0100 (MET) From: lebayle Reply-To: "fwtk-users" Subject: [fwtk-users] Re: plug-gw as a ssh proxy. To: "fwtk-users" MIME-Version: 1.0 Content-MD5: YLCNIOKPjJlA43rFppXxBw== X-Mailer: dtmail 1.3.0 CDE Version 1.3 SunOS 5.7 sun4u sparc List-Unsubscribe: Content-Type: TEXT/plain; charset=us-ascii Content-Length: 2287 Status: RO Just replace the string 2022 with sshgw in netperm-table, in order to be consistent with inetd.conf. It should work. Bruno LEBAYLE (lebayle@esrf.fr) European Synchrotron Radiation Facility - Grenoble, FRANCE >To: "fwtk-users" >Subject: [fwtk-users] plug-gw as a ssh proxy. >Date: Tue, 26 Mar 2002 13:41:40 +1000 >From: Ian Mortimer >List-Unsubscribe: > >I'm trying to use plug-gw as a one to one ssh proxy. > >The setup is: > >/etc/services: > > sshgw 2022/tcp #Secure Shell Login gateway > >/etc/inetd.conf: > > sshgw stream tcp nowait root /usr/local/etc/plug-gw plug-gw >sshgw > >/usr/local/etc/netperm-table: > > plug-gw: timeout 900 > plug-gw: userid root > plug-gw: groupid nobody > plug-gw: port 2022 10.1.1.3 -plug-to 10.2.2.2 -port ssh > >Doing `ssh -p 2022 fwtk-host' gets: > > ... plug-gw[3236]: deny host=.../10.1.1.3 service=sshgw > >I think this should be possible even using the non-standard port 2022 >for the initial connection but obviously I'm doing something wrong. >Can anyone see what's wrong with this setup? > > >Thanks > > > >-- >Ian > ian@physics.uq.edu.au Ian Mortimer > Tel: +61 7 3365 3436 Department of Physics > Fax: +61 7 3365 1242 University of Queensland > > > >--- >You are currently subscribed to fwtk-users as: lebayle@esrf.fr >To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com Bruno LEBAYLE. _____________________________________________________________________ o o o o Bruno LEBAYLE - Network group o o o o o E.S.R.F (European Synchrotron Radiation Facility) o ooo o BP220, 38043 GRENOBLE CEDEX 9 o o o ooooo o o o phone (33)4-7688-2258 o ooo o fax (33)4-7688-2020 o o o o o email lebayle@esrf.fr o o o o http://www.esrf.fr/computing/cs/sysadmin/network/home.html _____________________________________________________________________ --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Mar 26 07:31 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id HAA21848 Tue, 26 Mar 2002 07:31:51 -0500 (EST) Message-ID: From: Michel.Marcon@equipement.gouv.fr To: "fwtk-users" Subject: [fwtk-users] Re: plug-gw as a ssh proxy. Date: Tue, 26 Mar 2002 13:42:50 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by lists.tislabs.com id HAA21848 Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2279 Status: RO Hi. (interested by both ssh anc vnc) It would be nice if you give us a link to this [for me] mysterious vnc-gw mail list... TYA !!! > -----Message d'origine----- > De : Larry Moore [mailto:lmoore@starwon.com.au] > Envoyé : mardi 26 mars 2002 05:07 > À : fwtk-users > Objet : [fwtk-users] Re: plug-gw as a ssh proxy. > > > I would suggest searching the mailliing list archives for vnc-gw. > > You should find a message from me about overcoming such a problem with > vnc-gw. > > Cheers, > > Larry. > ----- Original Message ----- > From: "Ian Mortimer" > To: "fwtk-users" > Sent: Tuesday, March 26, 2002 11:41 AM > Subject: [fwtk-users] plug-gw as a ssh proxy. > > > > I'm trying to use plug-gw as a one to one ssh proxy. > > > > The setup is: > > > > /etc/services: > > > > sshgw 2022/tcp #Secure Shell Login gateway > > > > /etc/inetd.conf: > > > > sshgw stream tcp nowait root > /usr/local/etc/plug-gw plug-gw > > sshgw > > > > /usr/local/etc/netperm-table: > > > > plug-gw: timeout 900 > > plug-gw: userid root > > plug-gw: groupid nobody > > plug-gw: port 2022 10.1.1.3 -plug-to 10.2.2.2 -port ssh > > > > Doing `ssh -p 2022 fwtk-host' gets: > > > > ... plug-gw[3236]: deny host=.../10.1.1.3 service=sshgw > > > > I think this should be possible even using the non-standard > port 2022 > > for the initial connection but obviously I'm doing something wrong. > > Can anyone see what's wrong with this setup? > > > > > > Thanks > > > > > > > > -- > > Ian > > ian@physics.uq.edu.au Ian Mortimer > > Tel: +61 7 3365 3436 Department of Physics > > Fax: +61 7 3365 1242 University of Queensland > > > > > > > > --- > > You are currently subscribed to fwtk-users as: lmoore@starwon.com.au > > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > > > > > > > --- > You are currently subscribed to fwtk-users as: > Michel.Marcon@equipement.gouv.fr > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Mar 26 10:42 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id KAA22904 Tue, 26 Mar 2002 10:41:59 -0500 (EST) Message-ID: From: "Larry Moore" To: "fwtk-users" Subject: [fwtk-users] Re: plug-gw as a ssh proxy. Date: Wed, 27 Mar 2002 00:00:14 +0800 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2896 Status: RO Try this link; http://marc.theaimsgroup.com/?l=fwtk-users&m=96769978907937&w=2 Cheers, Larry. ----- Original Message ----- From: To: "fwtk-users" Sent: Tuesday, March 26, 2002 8:42 PM Subject: [fwtk-users] Re: plug-gw as a ssh proxy. > Hi. (interested by both ssh anc vnc) > It would be nice if you give us a link to this [for me] mysterious vnc-gw > mail list... > TYA !!! > > > -----Message d'origine----- > > De : Larry Moore [mailto:lmoore@starwon.com.au] > > Envoyé : mardi 26 mars 2002 05:07 > > À : fwtk-users > > Objet : [fwtk-users] Re: plug-gw as a ssh proxy. > > > > > > I would suggest searching the mailliing list archives for vnc-gw. > > > > You should find a message from me about overcoming such a problem with > > vnc-gw. > > > > Cheers, > > > > Larry. > > ----- Original Message ----- > > From: "Ian Mortimer" > > To: "fwtk-users" > > Sent: Tuesday, March 26, 2002 11:41 AM > > Subject: [fwtk-users] plug-gw as a ssh proxy. > > > > > > > I'm trying to use plug-gw as a one to one ssh proxy. > > > > > > The setup is: > > > > > > /etc/services: > > > > > > sshgw 2022/tcp #Secure Shell Login gateway > > > > > > /etc/inetd.conf: > > > > > > sshgw stream tcp nowait root > > /usr/local/etc/plug-gw plug-gw > > > sshgw > > > > > > /usr/local/etc/netperm-table: > > > > > > plug-gw: timeout 900 > > > plug-gw: userid root > > > plug-gw: groupid nobody > > > plug-gw: port 2022 10.1.1.3 -plug-to 10.2.2.2 -port ssh > > > > > > Doing `ssh -p 2022 fwtk-host' gets: > > > > > > ... plug-gw[3236]: deny host=.../10.1.1.3 service=sshgw > > > > > > I think this should be possible even using the non-standard > > port 2022 > > > for the initial connection but obviously I'm doing something wrong. > > > Can anyone see what's wrong with this setup? > > > > > > > > > Thanks > > > > > > > > > > > > -- > > > Ian > > > ian@physics.uq.edu.au Ian Mortimer > > > Tel: +61 7 3365 3436 Department of Physics > > > Fax: +61 7 3365 1242 University of Queensland > > > > > > > > > > > > --- > > > You are currently subscribed to fwtk-users as: lmoore@starwon.com.au > > > To unsubscribe send a blank email to > > leave-fwtk-users-303A@listserv.nai.com > > > > > > > > > > > > --- > > You are currently subscribed to fwtk-users as: > > Michel.Marcon@equipement.gouv.fr > > To unsubscribe send a blank email to > > leave-fwtk-users-303A@listserv.nai.com > > > > --- > You are currently subscribed to fwtk-users as: lmoore@starwon.com.au > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Mar 26 11:14 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id LAA23034 Tue, 26 Mar 2002 11:14:04 -0500 (EST) Message-ID: From: "Don" To: "fwtk-users" Subject: [fwtk-users] Help! Scripting errror occurring ONLY behind the fwtk Date: Tue, 26 Mar 2002 11:26:22 -0500 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4807.1700 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4807.1700 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 4795 Status: RO Hi, I am using the FWTK 2.1 on RH 6.2. I am getting an "unterminated string literal" JavaScript error on a site I'm working on http://www.vitavet.com I suspect that the FWTK is the culprit; here is my reasoning. The site runs fine from my house, my friends house and my sisters house, etc... I only get the error here at work (I don't know anyone else running FWTK). In a moment of inspiration, I logged directly on to our in-house web server and tried vitavet.com. Guess what, no error. We run a LAN connected to a proxy server with a software based firewall (Linux FWTK) installed. The difference is that our users (including myself) are located behind the firewall while the server has direct access to the internet (no firewall). Conclusion: I suspect this is a software issue with the FWTK. FYI, the line of code where the error occurs is below (all one line - no line break). It looks like the FWTK is reaching a limit and truncating my line of code. Is there a new patch for this or have I found a new bug? --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Mar 26 14:23 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id OAA23969 Tue, 26 Mar 2002 14:23:40 -0500 (EST) From: thiel@zeus.univ-metz.fr To: "fwtk-users" Date: Tue, 26 Mar 2002 20:38:26 +0100 MIME-Version: 1.0 Subject: [fwtk-users] running under linux7.1 Message-ID: Priority: normal X-mailer: Pegasus Mail for Windows (v4.01) Content-description: Mail message body List-Unsubscribe: Reply-To: "fwtk-users" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from Quoted-printable to 8bit by lists.tislabs.com id OAA23969 Content-Type: text/plain; charset=ISO-8859-1 Content-Length: 497 Status: RO Hello, I am running the toolkit under linux 6.22 and it runs fine. Has somebody try to run fwtk under linuc 7.1 ? Are there specific problems with xinetd ? Thanks Robert Robert Thiel Ufr lettres et Sciences Humaines Administrateur réseau tel : +33 3 87 31 59 61 tel : +33 6 60 83 61 95 e_mail : thiel@zeus.lettres.univ-metz.fr --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Mar 26 16:35 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id QAA24681 Tue, 26 Mar 2002 16:35:58 -0500 (EST) Message-Id: X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Tue, 26 Mar 2002 16:38:29 -0500 To: "fwtk-users" From: Rick Murphy Subject: [fwtk-users] Re: authsrv cannot open .dir .pag In-Reply-To: Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1094 Status: RO At 07:20 PM 3/25/02 -0800, Mark Bergstrom wrote: >The /etc/services, /etc/inetd.conf are correct. > >Running either authsrv or authmgr brings up the prompt. > >However, in authsrv, even an attempt to list yields: > >Cannot open database. > >In either authsrv or authmgr, an attempt to add even one user yields > >Permission denied. > >__________________ > >Note: the .dir and .pag did not even exist until I once experimented with >running authload. >Now they are there (in /usr/local/etc as fw-authdb.dir and fw-authdb.pag of >zero size). They are permission 600 and hence readable/writeable. Depending on the DBM library you're using, the library is locked by creating a file with a ".lock" type - fw-authdb.lock, for example. It may be that that's what is going on in your case. Who is authsrv running as (in the inetd.conf)? Does that user have write permission on the directory containing the auth database? -Rick --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Mar 26 17:59 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id RAA25232 Tue, 26 Mar 2002 17:59:40 -0500 (EST) Message-Id: X-Mailer: exmh version 2.5 07/13/2001 with nmh-1.0.4 To: "fwtk-users" Subject: [fwtk-users] Re: plug-gw as a ssh proxy. In-reply-to: Your message of "Wed, 27 Mar 2002 00:00:14 +0800." Mime-Version: 1.0 Date: Wed, 27 Mar 2002 09:11:11 +1000 From: Ian Mortimer List-Unsubscribe: Reply-To: "fwtk-users" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by lists.tislabs.com id RAA25232 Content-Type: text/plain; charset=iso-8859-1 Content-Length: 962 Status: RO > Try this link; > > http://marc.theaimsgroup.com/?l=fwtk-users&m=96769978907937&w=2 Thanks Larry. This configuration works: /etc/services: sshgw 2022/tcp #Secure Shell Login gateway /etc/inetd.conf: sshgw stream tcp nowait root /usr/local/etc/netacl netacl sshgw /usr/local/etc/netperm-table: netacl-sshgw: permit-hosts 192.168.84.* -exec /usr/local/etc/plug-gw sshgw sshgw: permit-hosts 192.168.84.* sshgw: permit-service sshgw sshgw: timeout 900 sshgw: userid root sshgw: groupid nobody sshgw: port sshgw 10.1.1.3 -plug-to 10.2.2.2 -port ssh -- Ian ian@physics.uq.edu.au Ian Mortimer Tel: +61 7 3365 3436 Department of Physics Fax: +61 7 3365 1242 University of Queensland --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Mar 26 22:00 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id WAA26834 Tue, 26 Mar 2002 22:00:00 -0500 (EST) Date: Tue, 26 Mar 2002 22:11:34 -0500 (EST) From: Ted Keller To: "fwtk-users" Subject: [fwtk-users] Re: authsrv cannot open .dir .pag In-Reply-To: Message-ID: MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 2572 Status: RO Your authserve entries should look something like... authsrv: hosts 127.0.0.1 authsrv: database /var/adm/fw-authdb authsrv: badsleep 120 authsrv: nobogus true # clients using the auth server *: authserver 127.0.0.1 7777 Note the authserver entry which accepts connections from local host (where ftp-gw is running from). Check these out and let me know. tek On Mon, 25 Mar 2002, Mark Bergstrom wrote: > The /etc/services, /etc/inetd.conf are correct. > > Running either authsrv or authmgr brings up the prompt. > > However, in authsrv, even an attempt to list yields: > > Cannot open database. > > In either authsrv or authmgr, an attempt to add even one user yields > > Permission denied. > > __________________ > > Note: the .dir and .pag did not even exist until I once experimented with > running authload. > Now they are there (in /usr/local/etc as fw-authdb.dir and fw-authdb.pag of > zero size). They are permission 600 and hence readable/writeable. > > _________________- > Been staring at the source and the mailing list, this does not even seem to > be a possibility, but there it is. > > =============== > I am assuming I need it to qualify non-directly connected users via passwd > proto for ftp-gw since I sniff on connects from partner-users (arriving via > WAN) attempting to use the ftp-proxy and see a reset sent. For all my > locally connected nets, the netperm-table yields the correct functioning of > the ftp-gw. I am at a loss to see any other source of the reset being sent > immediately upon the entry of the Username: into the prompt from the > non-local user. The user prompt is being passed to the debug log on the > destination ftp machine, but then the ftp-gw box sends a reset after the > Password Required message. > > In the router rules, I honestly cannot comprehend how the ftp-proxy box can > differentiate between the 'outside nets' arriving via the WAN and the > 'inside nets' since all the addresses sit in the same rule space for the > routing to the ftp-proxy box. There should be no differentiation so long as > the required 'outside net' is in the table. > > Plenty of plug-gw's for these same WAN source addresses have been > functioning fine for years. > > MB > > > --- > You are currently subscribed to fwtk-users as: keller@bfg.com > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Mar 26 22:03 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id WAA26862 Tue, 26 Mar 2002 22:03:38 -0500 (EST) Date: Tue, 26 Mar 2002 22:13:13 -0500 (EST) From: Ted Keller To: "fwtk-users" Subject: [fwtk-users] Re: plug-gw as a ssh proxy. In-Reply-To: Message-ID: MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1646 Status: RO Change these plug-gw: timeout 900 plug-gw: userid root plug-gw: groupid nobody plug-gw: port 2022 10.1.1.3 -plug-to 10.2.2.2 -port ssh to sshgw: timeout 900 sshgw: userid root sshgw: groupid nobody sshgw: port 2022 10.1.1.3 -plug-to 10.2.2.2 -port ssh On Tue, 26 Mar 2002, Ian Mortimer wrote: > I'm trying to use plug-gw as a one to one ssh proxy. > > The setup is: > > /etc/services: > > sshgw 2022/tcp #Secure Shell Login gateway > > /etc/inetd.conf: > > sshgw stream tcp nowait root /usr/local/etc/plug-gw plug-gw > sshgw > > /usr/local/etc/netperm-table: > > plug-gw: timeout 900 > plug-gw: userid root > plug-gw: groupid nobody > plug-gw: port 2022 10.1.1.3 -plug-to 10.2.2.2 -port ssh > > Doing `ssh -p 2022 fwtk-host' gets: > > ... plug-gw[3236]: deny host=.../10.1.1.3 service=sshgw > > I think this should be possible even using the non-standard port 2022 > for the initial connection but obviously I'm doing something wrong. > Can anyone see what's wrong with this setup? > > > Thanks > > > > -- > Ian > ian@physics.uq.edu.au Ian Mortimer > Tel: +61 7 3365 3436 Department of Physics > Fax: +61 7 3365 1242 University of Queensland > > > > --- > You are currently subscribed to fwtk-users as: keller@bfg.com > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Tue Mar 26 22:30 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id WAA27026 Tue, 26 Mar 2002 22:30:00 -0500 (EST) Message-ID: From: Mark Bergstrom To: "fwtk-users" Subject: [fwtk-users] Re: authsrv cannot open .dir .pag Date: Tue, 26 Mar 2002 19:41:55 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1947 Status: RO OK. I spot the problem. Whatever the tree is ABOVE the fw-authdb has to be owned,grouped by the userid:groupid specified in the /etc/netperm-table. Didn't think of that. But changing it to nobody.nobody fixed things. Was thinking that the authsrv stream tcp nowait root /usr/etc/authsrv authsrv in /etc/inetd.conf would dominate the ownership for reading/writing. However, no .lock is ever created.....unless that is the 0 length file in /usr/local/etc called fw-authdb alongside fw-authdb.dir and fw-authdb.pag is in fact it. -------------- Now, on to the second half of my first posting. Can this be at all related to the 'reset' my sniffer sees sent when a WAN user hits the ftp-gw? When I put enabling permit-hosts rules for various hosts on our various nets here (to test), I get handed off to the destination ftp-box and using the login the WAN user would, use their password and I am in. However, the WAN user is not getting past the Username: from the destination ftp-box. The reset from the fwtk box follows directly upon the Reply from the ftp-box of 'Password required'. Then they get a reset which disconnects them. Since I have not yet added the -auth option in the ftp-gw rules, I am now at a loss to explain why the login behaves differently for them. TNX MB ==== Depending on the DBM library you're using, the library is locked by creating a file with a ".lock" type - fw-authdb.lock, for example. It may be that that's what is going on in your case. Who is authsrv running as (in the inetd.conf)? Does that user have write permission on the directory containing the auth database? -Rick --- You are currently subscribed to fwtk-users as: mjollnir@citysearch.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 09:29 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA01482 Wed, 27 Mar 2002 09:29:47 -0500 (EST) Sender: ssandau Message-ID: Date: Tue, 04 Dec 2001 20:59:05 -0500 From: Steve Sandau X-Mailer: Mozilla 4.7 [en] (X11; I; SunOS 5.8 sun4m) X-Accept-Language: en MIME-Version: 1.0 To: "fwtk-users" Subject: [fwtk-users] Re: Email filtering at the firewall Content-Transfer-Encoding: 7bit List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 1127 Status: RO Last issue of the Linux Journal had an issue on scanning attachments. Since, as I understand it, smap uses a temporary "holding" directory (right?), the sheme described in this article might work well. The author describes the system of scripts he wrote that, in conjunction with uvscan (McAffee?), decodes and scans attachments with extensions that are in a predefined list. Sounded good to me, but I have all my email on one server with just sendmail doing the receiving... Ken Long wrote: > > Ok, it has become painfully obvious that I can't depend on my users to > scan attachments before running them. Can anyone recommend a product to > scan email and block certain extensions that works with smap/sendmail on > Linux? > > TIA, > Ken Long > Lectrosonics, Inc. > > --- > You are currently subscribed to fwtk-users as: ssandau@bath.tmac.com > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com -- Steve Sandau ssandau@bath.tmac.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 09:32 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA01486 Wed, 27 Mar 2002 09:32:23 -0500 (EST) Date: Wed, 13 Feb 2002 16:25:08 -0500 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: ssmtp Message-ID: Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from ousdal-ml@sircon.no on Wed, Feb 13, 2002 at 10:33:44PM +0100 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 585 Status: RO On Wed, Feb 13, 2002 at 10:33:44PM +0100, Per Gustav Ousdal wrote: > Yep. Well, both of them (smap & smtpd) are actually required are they not? No!!! Either use smap/smapd, or use smtpd. -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 09:36 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA01505 Wed, 27 Mar 2002 09:36:00 -0500 (EST) From: "Takacs Istvan" To: "fwtk-users" Subject: [fwtk-users] Installation problems Date: Fri, 1 Feb 2002 09:55:49 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Importance: Normal List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-2" Content-Length: 1263 Status: RO Hi I tried to compile fwtk 2.1 on Red Hat Linux 7.2 I need just http-gw so I commented out the x-gw options in Makefile.conf.linux then I moved this file to Makefile.conf When I run make, it sends an error message which complains to ndbm.h... cc -g -static -o authmgr authmgr.o ../libauth.a ../libfwall.a cc -I.. -g -DLINUX -c -o authsrv.o authsrv.c cc -I.. -g -DLINUX -c proto.c cc -I.. -g -DLINUX -c -o db.o db.c db.c:16:25: ndbm.h: No such file or directory make[1]: *** [db.o] Error 1 make[1]: Leaving directory `/usr/src/fwtk/auth' [...] and the hole make process hangs up with x-gw error; make[1]: Entering directory `/usr/src/fwtk/x-gw' cc -I.. -g -DLINUX -I -c -o child.o child.c In file included from child.c:14: ulib.h:26:27: X11/Intrinsic.h: No such file or directory ulib.h:64:9: warning: extra tokens at end of #endif directive make[1]: *** [child.o] Error 1 make[1]: Leaving directory `/usr/src/fwtk/x-gw' make: *** [all] Error 2 What should I do to not use the X11 libs and how can I compile the package with ndbm.h? Thanks in advance! Regards, Istvan --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 09:39 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA01532 Wed, 27 Mar 2002 09:39:37 -0500 (EST) Date: Wed, 9 Jan 2002 10:04:07 +0100 (MET) From: mack-fischer@gmx.de To: "fwtk-users" MIME-Version: 1.0 Subject: [fwtk-users] http-gw in Version 2.1 / pages not complete ? X-Priority: 3 (Normal) X-Authenticated-Sender: #0011510670@gmx.net X-Authenticated-IP: [194.121.154.2] Message-ID: X-Mailer: WWW-Mail 1.5 (Global Message Exchange) X-Flags: 0001 Content-Transfer-Encoding: 7bit List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="us-ascii" Content-Length: 766 Status: RO I'm using the TIS firewall toolkit 2.1 on linux. Internal users are surfing in the internet via the http-gw. My problem is now that some few pages are not correctly loaded, it seems to depend an script code within those pages but I'm not sure. So some pages of Microsoft and other pages can not be viewed as they can in the internet, some parts of the pages maybe simply missed or script errors are coming up. What can I do to get closer to my problem ? Do I need a patch ? Or is it simply customizing ? Thanks for any help Peter -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 09:43 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA01571 Wed, 27 Mar 2002 09:43:14 -0500 (EST) Date: Thu, 7 Mar 2002 19:48:38 -0500 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: Apple iTools Message-ID: Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from giseburt@moline.lth2.k12.il.us on Thu, Mar 07, 2002 at 06:00:37PM -0600 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 910 Status: RO On Thu, Mar 07, 2002 at 06:00:37PM -0600, James A. Giseburt wrote: ... > iTools/iDisk uses an ICMP echo request/reply to initialize the conversation. > I'm stumped on this one. (Maybe my mind is not working at this point.) > What do I plug and how? I don't really think I want to do this, but... ... ICMP can't be proxied via TCP ... at least, not in the conventional way. It's not a TCP service. The only easy way to do this is allow ICMP through the firewall, which I would not be happy to advise you to do. -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 09:46 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA01607 Wed, 27 Mar 2002 09:46:52 -0500 (EST) From: "Takacs Istvan" To: "fwtk-users" Subject: [fwtk-users] I trustingly wrote this letter... Date: Fri, 8 Feb 2002 07:00:47 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Importance: Normal List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-2" Content-Length: 1408 Status: RO to see it on the fwtk-users list, because this is my fourth letter what I try to send, and never see them again... So, first of all; Hi. I tried to compile fwtk 2.1 on Red Hat Linux 7.2 I need just http-gw so I commented out the x-gw options in Makefile.conf.linux then I moved this file to Makefile.conf When I run make, it sends an error message which complains to ndbm.h... cc -g -static -o authmgr authmgr.o ../libauth.a ../libfwall.a cc -I.. -g -DLINUX -c -o authsrv.o authsrv.c cc -I.. -g -DLINUX -c proto.c cc -I.. -g -DLINUX -c -o db.o db.c db.c:16:25: ndbm.h: No such file or directory make[1]: *** [db.o] Error 1 make[1]: Leaving directory `/usr/src/fwtk/auth' [...] and at the end the hole make process hangs up with x-gw error; make[1]: Entering directory `/usr/src/fwtk/x-gw' cc -I.. -g -DLINUX -I -c -o child.o child.c In file included from child.c:14: ulib.h:26:27: X11/Intrinsic.h: No such file or directory ulib.h:64:9: warning: extra tokens at end of #endif directive make[1]: *** [child.o] Error 1 make[1]: Leaving directory `/usr/src/fwtk/x-gw' make: *** [all] Error 2 What should I do to not use the X11 libs and how can I compile the package with ndbm.h? Thanks in advance! Regards, Istvan --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 09:52 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA01646 Wed, 27 Mar 2002 09:52:02 -0500 (EST) Date: Tue, 26 Mar 2002 14:57:15 -0500 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: Help! Scripting errror occurring ONLY behind the fwtk Message-ID: Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from don@lclcan.com on Tue, Mar 26, 2002 at 11:26:22AM -0500 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 622 Status: RO I'm not where I can check on this quickly, but I'd suggest comparing the length of that somewhat long line to the length of the input buffer, and expanding the latter, if necessary. This might necessitate still other changes. -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 09:55 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA01657 Wed, 27 Mar 2002 09:55:07 -0500 (EST) From: "Takacs Istvan" To: "fwtk-users" Subject: [fwtk-users] Compilation error Date: Sun, 17 Feb 2002 17:08:49 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Importance: Normal List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-2" Content-Length: 966 Status: RO Hi Red Hat 7.2 I'd like to compile FWTK without x-gw support. I copied Makefile.config.linux to Makefile.config and commented out all of the line in the file which has any connection to X. When I run make, it sends these error messages; cc -I.. -g -DLINUX -c -o db.o db.c db.c:16:25: ndbm.h: No such file or directory make[1]: *** [db.o] Error 1 [...] make[1]: Entering directory `/usr/src/fwtk/x-gw' cc -I.. -g -DLINUX -I -c -o child.o child.c In file included from child.c:14: ulib.h:26:27: X11/Intrinsic.h: No such file or directory ulib.h:64:9: warning: extra tokens at end of #endif directive make[1]: *** [child.o] Error 1 make[1]: Leaving directory `/usr/src/fwtk/x-gw' make: *** [all] Error 2 What should I do to compile the source? Thanks in advance! Regards; Istvan --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 09:58 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id JAA01662 Wed, 27 Mar 2002 09:58:44 -0500 (EST) Sender: ssandau Message-ID: Date: Thu, 06 Dec 2001 22:55:09 -0500 From: Steve Sandau X-Mailer: Mozilla 4.7 [en] (X11; I; SunOS 5.8 sun4m) X-Accept-Language: en MIME-Version: 1.0 To: "fwtk-users" Subject: [fwtk-users] Re: Email filtering at the firewall Content-Transfer-Encoding: 7bit List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 1770 Status: RO I don't know whether it was on this list or another, but someone recently suggested inflex as a solution ot this type of problem. I downloaded it, installed it on my desktop linux box and found it so easy to understand and configure (and uninstall) that I installed it on my production server the next day. I caught the first virus-ridden attachment 45 minutes after I installed it. I don't have virus detection software installed on the email server, I just block certain types of attachments. (If anyone is sending me a .vbs I don't want it in *any* case!) It works like a charm. FWIW... Ted Keller wrote: > > I have used in the past some code based on libmilter. If you do a search > on libmilter using your favorite search engine, you should be able to find > a number of references that will provide the desired filtering through > sendmail. These have in the past been quite effective. > > ted keller > > On Tue, 4 Dec 2001, Ken Long wrote: > > > Ok, it has become painfully obvious that I can't depend on my users to > > scan attachments before running them. Can anyone recommend a product to > > scan email and block certain extensions that works with smap/sendmail on > > Linux? > > > > TIA, > > Ken Long > > Lectrosonics, Inc. > > > > > > --- > > You are currently subscribed to fwtk-users as: keller@bfg.com > > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > > > > --- > You are currently subscribed to fwtk-users as: ssandau@bath.tmac.com > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com -- Steve Sandau ssandau@bath.tmac.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 10:37 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id KAA01960 Wed, 27 Mar 2002 10:37:00 -0500 (EST) Message-Id: From: Constantin Brinzoi Organization: IRECSON To: "fwtk-users" Subject: [fwtk-users] Re: Apple iTools Date: Wed, 27 Mar 2002 17:09:21 -0500 X-Mailer: KMail [version 1.3.1] In-Reply-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 191 Status: RO Da'.... Bise??? Esti acolo???? --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 11:42 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id LAA02357 Wed, 27 Mar 2002 11:42:14 -0500 (EST) Date: Wed, 27 Mar 2002 11:54:01 -0500 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: Email filtering at the firewall Message-ID: Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from ssandau@bath.tmac.com on Tue, Dec 04, 2001 at 08:59:05PM -0500 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 1463 Status: RO On Tue, Dec 04, 2001 at 08:59:05PM -0500, Steve Sandau wrote: > Last issue of the Linux Journal had an issue on scanning attachments. > Since, as I understand it, smap uses a temporary "holding" directory > (right?), the sheme described in this article might work well. > > The author describes the system of scripts he wrote that, in conjunction > with uvscan (McAffee?), decodes and scans attachments with extensions > that are in a predefined list. Sounded good to me, but I have all my > email on one server with just sendmail doing the receiving... That was brought to my attention. AMaViS [A Mail Virus Scanner] can also do this. Works best with recent versions of 'sendmail', that implement "milter"s [mail filters] or with 'postfix'. I have to admit that after installing the last version of 'sendmail', I am tempted to become a fan of 'postfix', sight unseen. www.amavis.org www.sendmail.org www.milter.org www.postfix.org [detect a pattern?] Suggest that you do this on a separate virus-scanning machine. Yes, 'uvscan' is McAffee's Unix Virus Scanner. Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 11:47 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id LAA02445 Wed, 27 Mar 2002 11:47:55 -0500 (EST) X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to using -f Message-ID: From: "Michael St. Laurent" To: "fwtk-users" Subject: [fwtk-users] Re: Email filtering at the firewall Date: Wed, 27 Mar 2002 09:00:54 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 1985 Status: RO Aren't there some opensource virus scanners available? Are they any good? -- Michael St. Laurent Hartwell Corporation > -----Original Message----- > From: Joseph S D Yao [mailto:jsdy@center.osis.gov] > Sent: Wednesday, March 27, 2002 8:54 AM > To: fwtk-users > Subject: [fwtk-users] Re: Email filtering at the firewall > > > On Tue, Dec 04, 2001 at 08:59:05PM -0500, Steve Sandau wrote: > > Last issue of the Linux Journal had an issue on scanning > attachments. > > Since, as I understand it, smap uses a temporary "holding" directory > > (right?), the sheme described in this article might work well. > > > > The author describes the system of scripts he wrote that, > in conjunction > > with uvscan (McAffee?), decodes and scans attachments with > extensions > > that are in a predefined list. Sounded good to me, but I have all my > > email on one server with just sendmail doing the receiving... > > That was brought to my attention. AMaViS [A Mail Virus Scanner] can > also do this. Works best with recent versions of 'sendmail', that > implement "milter"s [mail filters] or with 'postfix'. I have to admit > that after installing the last version of 'sendmail', I am tempted to > become a fan of 'postfix', sight unseen. > www.amavis.org www.sendmail.org www.milter.org www.postfix.org [detect a pattern?] Suggest that you do this on a separate virus-scanning machine. Yes, 'uvscan' is McAffee's Unix Virus Scanner. Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: mikes@hartwellcorp.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 11:55 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id LAA02489 Wed, 27 Mar 2002 11:55:10 -0500 (EST) Message-ID: Date: Wed, 27 Mar 2002 18:06:56 +0100 In-Reply-To: From: =?iso-8859-1?Q?B=F6ringer=2C=20Heiko?= Subject: [fwtk-users] =?iso-8859-1?Q?AW=3A=20=5Bfwtk=2Dusers=5D=20http=2Dgw=20in=20Version=202=2E1=20/=20pages=20not=20complete=20=3F?= To: "fwtk-users" MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by lists.tislabs.com id LAA02489 Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1511 Status: RO Hello Peter, i had the same problem after an upgrade from Suse Linux 6.4 to 7.3. I cannot find a solution for this issue. My solution was the fallback to the original system. kind regards, Heiko Böringer -- Original Nachricht -- >I'm using the TIS firewall toolkit 2.1 on linux. Internal users are surfing >in the internet via the http-gw. >My problem is now that some few pages are not correctly loaded, it seems >to >depend an script code within those pages but I'm not sure. So some pages >of >Microsoft and other pages can not be viewed as they can in the internet, >some >parts of the pages maybe simply missed or script errors are coming up. > >What can I do to get closer to my problem ? > >Do I need a patch ? Or is it simply customizing ? > >Thanks for any help > >Peter > >-- >GMX - Die Kommunikationsplattform im Internet. >http://www.gmx.net > > >--- >You are currently subscribed to fwtk-users as: heiko.boeringer@epost.de >To unsubscribe send a blank email to leave-fwtk-users-500S@listserv.nai.com > --------------------------------------------------- Heiko Böringer - Birkenstraße 11 - 76744 Wörth Fon: 0173/8663798 - eMail: Heiko.Boeringer@epost.de --------------------------------------------------- ________________________________________ Zeitschriftenabos online bestellen - jetzt neu im Infoboten! http://www.epost.de --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 12:03 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA02501 Wed, 27 Mar 2002 12:03:33 -0500 (EST) Date: Wed, 27 Mar 2002 12:14:33 -0500 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: Email filtering at the firewall Message-ID: Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from mikes@hartwellcorp.com on Wed, Mar 27, 2002 at 09:00:54AM -0800 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 786 Status: RO On Wed, Mar 27, 2002 at 09:00:54AM -0800, Michael St. Laurent wrote: > Aren't there some opensource virus scanners available? Are they any good? AMaViS. Yes. Security mailing lists use it. Seems to be good and improving. -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- PLEASE ... send or Cc: all "OSIS Systems Support" mail to sys-adm@center.osis.gov ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 12:06 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA02564 Wed, 27 Mar 2002 12:06:40 -0500 (EST) Date: Wed, 27 Mar 2002 12:16:06 -0500 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] fwtk-users turn-around time Message-ID: Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from jsdy@center.osis.gov on Wed, Mar 27, 2002 at 11:54:01AM -0500 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 637 Status: RO Wow, turn-around time has suddenly and drastically improved! ;-) Time now is Wed Mar 27 12:15:28 EST 2002. On Wed, Mar 27, 2002 at 11:54:01AM -0500, Joseph S D Yao wrote: > On Tue, Dec 04, 2001 at 08:59:05PM -0500, Steve Sandau wrote: ... -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 12:10 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA02594 Wed, 27 Mar 2002 12:10:15 -0500 (EST) X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to using -f Message-ID: From: "Michael St. Laurent" To: "fwtk-users" Subject: [fwtk-users] Re: Email filtering at the firewall Date: Wed, 27 Mar 2002 09:21:03 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 1337 Status: RO Well, AMaViS _uses_ a virus scanner to scan email. I was asking about the scanner itself. -- Michael St. Laurent Hartwell Corporation > -----Original Message----- > From: Joseph S D Yao [mailto:jsdy@center.osis.gov] > Sent: Wednesday, March 27, 2002 9:15 AM > To: fwtk-users > Subject: [fwtk-users] Re: Email filtering at the firewall > > > On Wed, Mar 27, 2002 at 09:00:54AM -0800, Michael St. Laurent wrote: > > Aren't there some opensource virus scanners available? Are > they any good? > > AMaViS. Yes. Security mailing lists use it. Seems to be good and > improving. > > -- > Joe Yao jsdy@center.osis.gov - > Joseph S. D. Yao > OSIS Center Systems Support EMT-B > -------------------------------------------------------------- > --------- > PLEASE ... send or Cc: all "OSIS Systems Support" > mail to sys-adm@center.osis.gov > -------------------------------------------------------------- > --------- > This message is not an official statement of OSIS Center policies. > > --- > You are currently subscribed to fwtk-users as: mikes@hartwellcorp.com > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 12:13 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA02629 Wed, 27 Mar 2002 12:13:52 -0500 (EST) X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to using -f Message-ID: From: "Michael St. Laurent" To: "fwtk-users" Subject: [fwtk-users] RE: fwtk-users turn-around time Date: Wed, 27 Mar 2002 09:27:10 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 1214 Status: RO Yeah, isn't that weird. I've been noticing really long turn around times on most of the lists I subscribe to. I wonder what's up? -- Michael St. Laurent Hartwell Corporation > -----Original Message----- > From: Joseph S D Yao [mailto:jsdy@center.osis.gov] > Sent: Wednesday, March 27, 2002 9:16 AM > To: fwtk-users > Subject: [fwtk-users] fwtk-users turn-around time > > > Wow, turn-around time has suddenly and drastically improved! > ;-) Time > now is Wed Mar 27 12:15:28 EST 2002. > > On Wed, Mar 27, 2002 at 11:54:01AM -0500, Joseph S D Yao wrote: > > On Tue, Dec 04, 2001 at 08:59:05PM -0500, Steve Sandau wrote: > ... > > -- > Joe Yao jsdy@center.osis.gov - > Joseph S. D. Yao > OSIS Center Systems Support EMT-B > -------------------------------------------------------------- > --------- > This message is not an official statement of OSIS Center policies. > > --- > You are currently subscribed to fwtk-users as: mikes@hartwellcorp.com > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 12:22 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA02659 Wed, 27 Mar 2002 12:22:11 -0500 (EST) Date: Wed, 27 Mar 2002 12:33:12 -0500 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: Email filtering at the firewall Message-ID: Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from mikes@hartwellcorp.com on Wed, Mar 27, 2002 at 09:21:03AM -0800 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 999 Status: RO On Wed, Mar 27, 2002 at 09:21:03AM -0800, Michael St. Laurent wrote: > Well, AMaViS _uses_ a virus scanner to scan email. I was asking about the > scanner itself. Good point, and thanks for the distinction. Yes, AMaViS' job is disassembling the MIMEd and UUencoded messages, and calling the actual virus scanner on the parts. I don't know of any reliable open source virus scanner. Since it takes some large amount of effort to maintain virus data tables, I suspect that you will not find any good "free [as in free beer]" virus scanners. [Isn't this current mailing list turnaround awesome? ;-)] -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 12:25 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA02674 Wed, 27 Mar 2002 12:25:47 -0500 (EST) From: ark@eltex.ru Date: Wed, 27 Mar 2002 20:54:12 +0300 Message-Id: In-Reply-To: from "Steve Sandau " Organization: "Klingon Imperial Intelligence Service" Subject: [fwtk-users] Re: Email filtering at the firewall To: "fwtk-users" X-Virus-Scanned: by Eltex TC List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text Content-Length: 1455 Status: RO I think running untrusted binaries (as i see antivirus software) on the firewall machine itself is damn bad idea. The proper way is to write a thing that will communicate with, say, milter filters. Steve Sandau said : > Last issue of the Linux Journal had an issue on scanning attachments. > Since, as I understand it, smap uses a temporary "holding" directory > (right?), the sheme described in this article might work well. > > The author describes the system of scripts he wrote that, in conjunction > with uvscan (McAffee?), decodes and scans attachments with extensions > that are in a predefined list. Sounded good to me, but I have all my > email on one server with just sendmail doing the receiving... > > Ken Long wrote: > > > > Ok, it has become painfully obvious that I can't depend on my users to > > scan attachments before running them. Can anyone recommend a product to > > scan email and block certain extensions that works with smap/sendmail on > > Linux? _ _ _ _ _ _ _ {::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_ (##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_| [||] [||] [||] Do i believe in Bible? Hell,man,i've seen one! --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 12:27 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA02686 Wed, 27 Mar 2002 12:27:51 -0500 (EST) From: ark@eltex.ru Date: Wed, 27 Mar 2002 20:57:49 +0300 Message-Id: In-Reply-To: from "Joseph S D Yao " Organization: "Klingon Imperial Intelligence Service" Subject: [fwtk-users] Re: Email filtering at the firewall To: "fwtk-users" X-Virus-Scanned: by Eltex TC List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text Content-Length: 783 Status: RO It still requires some third-party binary to run. Joseph S D Yao said : > On Wed, Mar 27, 2002 at 09:00:54AM -0800, Michael St. Laurent wrote: > > Aren't there some opensource virus scanners available? Are they any good? > > AMaViS. Yes. Security mailing lists use it. Seems to be good and > improving. _ _ _ _ _ _ _ {::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_ (##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_| [||] [||] [||] Do i believe in Bible? Hell,man,i've seen one! --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 12:29 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA02706 Wed, 27 Mar 2002 12:29:56 -0500 (EST) From: ark@eltex.ru Date: Wed, 27 Mar 2002 21:00:04 +0300 Message-Id: In-Reply-To: from "Joseph S D Yao " Organization: "Klingon Imperial Intelligence Service" Subject: [fwtk-users] Re: Email filtering at the firewall To: "fwtk-users" X-Virus-Scanned: by Eltex TC List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text Content-Length: 1261 Status: RO Having no opensource engines out there really makes me wonder (keeping databases commercially available that would be nice idea) Joseph S D Yao said : > On Wed, Mar 27, 2002 at 09:21:03AM -0800, Michael St. Laurent wrote: > > Well, AMaViS _uses_ a virus scanner to scan email. I was asking about the > > scanner itself. > > Good point, and thanks for the distinction. > > Yes, AMaViS' job is disassembling the MIMEd and UUencoded messages, and > calling the actual virus scanner on the parts. > > I don't know of any reliable open source virus scanner. Since it takes > some large amount of effort to maintain virus data tables, I suspect > that you will not find any good "free [as in free beer]" virus scanners. > > [Isn't this current mailing list turnaround awesome? ;-)] _ _ _ _ _ _ _ {::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_ (##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_| [||] [||] [||] Do i believe in Bible? Hell,man,i've seen one! --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 14:08 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id OAA03259 Wed, 27 Mar 2002 14:08:45 -0500 (EST) Subject: [fwtk-users] Re: Email filtering at the firewall From: Tony Gale To: "fwtk-users" In-Reply-To: Content-Transfer-Encoding: 7bit X-Mailer: Ximian Evolution 1.0.3.99 Date: 27 Mar 2002 17:53:02 +0000 Message-Id: Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 820 Status: RO On Wed, 2002-03-27 at 17:33, Joseph S D Yao wrote: > On Wed, Mar 27, 2002 at 09:21:03AM -0800, Michael St. Laurent wrote: > > Well, AMaViS _uses_ a virus scanner to scan email. I was asking about the > > scanner itself. > > Good point, and thanks for the distinction. > > Yes, AMaViS' job is disassembling the MIMEd and UUencoded messages, and > calling the actual virus scanner on the parts. If you haven't looked at RAV antivirus I suggest you give it a go, there's a free trial. Supports: Sendmail Qmail Postfix CommuniGate Pro Exim Not free, but not expensive either. Don't now if it'll work with the smap/sendmail conbination; i use qmail. -tony --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 14:10 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id OAA03278 Wed, 27 Mar 2002 14:10:49 -0500 (EST) Date: Wed, 27 Mar 2002 14:18:09 -0500 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Open Anti-Virus Message-ID: Mail-Followup-To: fwtk-users@listserv.nai.com Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2.5i List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=us-ascii Content-Length: 490 Status: RO Lookit what I found. ;-) Co-incidence? Or conspiracy? -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 14:14 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id OAA03305 Wed, 27 Mar 2002 14:14:56 -0500 (EST) Subject: [fwtk-users] Re: AW: [fwtk-users] http-gw in Version 2.1 / pages not complete ? From: Tony Gale To: "fwtk-users" In-Reply-To: X-Mailer: Ximian Evolution 1.0.3.99 Date: 27 Mar 2002 17:48:09 +0000 Message-Id: Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by lists.tislabs.com id OAA03305 Content-Type: text/plain; charset=ISO-8859-1 Content-Length: 1957 Status: RO I'm not aware of any sites that don't load with the current jumbo patch. If there are, let me know and I'll look ito why. -tony On Wed, 2002-03-27 at 17:06, Böringer, Heiko wrote: > Hello Peter, > i had the same problem after an upgrade from Suse Linux 6.4 to 7.3. I cannot > find a solution for this issue. My solution was the fallback to the original > system. > kind regards, > Heiko Böringer > > -- Original Nachricht -- > > >I'm using the TIS firewall toolkit 2.1 on linux. Internal users are surfing > >in the internet via the http-gw. > >My problem is now that some few pages are not correctly loaded, it seems > >to > >depend an script code within those pages but I'm not sure. So some pages > >of > >Microsoft and other pages can not be viewed as they can in the internet, > >some > >parts of the pages maybe simply missed or script errors are coming up. > > > >What can I do to get closer to my problem ? > > > >Do I need a patch ? Or is it simply customizing ? > > > >Thanks for any help > > > >Peter > > > >-- > >GMX - Die Kommunikationsplattform im Internet. > >http://www.gmx.net > > > > > >--- > >You are currently subscribed to fwtk-users as: heiko.boeringer@epost.de > >To unsubscribe send a blank email to leave-fwtk-users-500S@listserv.nai.com > > > > > > --------------------------------------------------- > Heiko Böringer - Birkenstraße 11 - 76744 Wörth > Fon: 0173/8663798 - eMail: Heiko.Boeringer@epost.de > --------------------------------------------------- > > > > ________________________________________ > Zeitschriftenabos online bestellen - jetzt neu im Infoboten! http://www.epost.de > > > > --- > You are currently subscribed to fwtk-users as: gale@syntax.dstl.gov.uk > To unsubscribe send a blank email to leave-fwtk-users-769J@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 14:17 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id OAA03318 Wed, 27 Mar 2002 14:17:32 -0500 (EST) Date: Wed, 27 Mar 2002 11:41:19 -0600 (CST) From: Sender: Reply-To: "fwtk-users" To: "fwtk-users" Subject: [fwtk-users] tiny little request In-Reply-To: Message-ID: MIME-Version: 1.0 List-Unsubscribe: Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 790 Status: RO Is there a way to receive a digest version of this list? If there is I would like to know how to receive that instead of the regular list. I sent requests lists help to listserv@listserv.nai.com. The only list that listserv@listserv.nai.com seems to know about is 'test' (not even fwtk-users). Whomever has set up fwtk-users - thanks! -------------------------------------------------------- Stephen Liss 847-640-1837 500 Eagle Drive #103 Stephen.Liss@*attbi.com Elk Grove Village, IL, USA (remove the anti-spam *) 60007-4733 -------------------------------------------------------- --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 14:20 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id OAA03338 Wed, 27 Mar 2002 14:20:06 -0500 (EST) Subject: [fwtk-users] Re: http-gw in Version 2.1 / pages not complete ? From: Tony Gale To: "fwtk-users" In-Reply-To: Content-Transfer-Encoding: 7bit X-Mailer: Ximian Evolution 1.0.3.99 Date: 27 Mar 2002 14:57:19 +0000 Message-Id: Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 806 Status: RO On Wed, 2002-01-09 at 09:04, mack-fischer@gmx.de wrote: > I'm using the TIS firewall toolkit 2.1 on linux. Internal users are surfing > in the internet via the http-gw. > My problem is now that some few pages are not correctly loaded, it seems to > depend an script code within those pages but I'm not sure. So some pages of > Microsoft and other pages can not be viewed as they can in the internet, some > parts of the pages maybe simply missed or script errors are coming up. > > What can I do to get closer to my problem ? > > Do I need a patch ? Or is it simply customizing ? > Did you install the jumbo patch from www.fwtk.org? -tony --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 15:51 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id PAA04000 Wed, 27 Mar 2002 15:51:08 -0500 (EST) Reply-To: "fwtk-users" From: =?iso-8859-1?Q?B=F6ringer=2C_Heiko?= To: "fwtk-users" Subject: [fwtk-users] AW: Re: AW: [fwtk-users] http-gw in Version 2.1 / pages not complete ? Date: Wed, 27 Mar 2002 22:02:58 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2910.0) In-reply-to: X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 Importance: Normal List-Unsubscribe: Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2402 Status: RO Hello Tony, have a look at www.epost.de or www.bahn.de kind regards, Heiko -----Ursprüngliche Nachricht----- Von: Tony Gale [mailto:gale@syntax.dstl.gov.uk] Gesendet: Mittwoch, 27. März 2002 18:48 An: fwtk-users Betreff: [fwtk-users] Re: AW: [fwtk-users] http-gw in Version 2.1 / pages not complete ? I'm not aware of any sites that don't load with the current jumbo patch. If there are, let me know and I'll look ito why. -tony On Wed, 2002-03-27 at 17:06, Böringer, Heiko wrote: > Hello Peter, > i had the same problem after an upgrade from Suse Linux 6.4 to 7.3. I cannot > find a solution for this issue. My solution was the fallback to the original > system. > kind regards, > Heiko Böringer > > -- Original Nachricht -- > > >I'm using the TIS firewall toolkit 2.1 on linux. Internal users are surfing > >in the internet via the http-gw. > >My problem is now that some few pages are not correctly loaded, it seems > >to > >depend an script code within those pages but I'm not sure. So some pages > >of > >Microsoft and other pages can not be viewed as they can in the internet, > >some > >parts of the pages maybe simply missed or script errors are coming up. > > > >What can I do to get closer to my problem ? > > > >Do I need a patch ? Or is it simply customizing ? > > > >Thanks for any help > > > >Peter > > > >-- > >GMX - Die Kommunikationsplattform im Internet. > >http://www.gmx.net > > > > > >--- > >You are currently subscribed to fwtk-users as: heiko.boeringer@epost.de > >To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > > > > > > --------------------------------------------------- > Heiko Böringer - Birkenstraße 11 - 76744 Wörth > Fon: 0173/8663798 - eMail: Heiko.Boeringer@epost.de > --------------------------------------------------- > > > > ________________________________________ > Zeitschriftenabos online bestellen - jetzt neu im Infoboten! http://www.epost.de > > > > --- > You are currently subscribed to fwtk-users as: gale@syntax.dstl.gov.uk > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: heiko.boeringer@epost.de To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 15:59 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id PAA04091 Wed, 27 Mar 2002 15:59:56 -0500 (EST) X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to using -f Message-ID: From: "Michael St. Laurent" To: "fwtk-users" Subject: [fwtk-users] RE: AW: Re: AW: [fwtk-users] http-gw in Version 2.1 / pages not complete ? Date: Wed, 27 Mar 2002 13:12:39 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by lists.tislabs.com id PAA04091 Content-Type: text/plain; charset="iso-8859-1" Content-Length: 3197 Status: RO You must be missing a patch as both sites worked for me. Perhaps it would help if you enumerated the patched you have applied. -- Michael St. Laurent Hartwell Corporation > -----Original Message----- > From: Böringer, Heiko [mailto:Heiko.Boeringer@ePost.de] > Sent: Wednesday, March 27, 2002 1:03 PM > To: fwtk-users > Subject: [fwtk-users] AW: Re: AW: [fwtk-users] http-gw in > Version 2.1 / pages not complete ? > > > Hello Tony, > have a look at www.epost.de or www.bahn.de > kind regards, Heiko > > -----Ursprüngliche Nachricht----- > Von: Tony Gale [mailto:gale@syntax.dstl.gov.uk] > Gesendet: Mittwoch, 27. März 2002 18:48 > An: fwtk-users > Betreff: [fwtk-users] Re: AW: [fwtk-users] http-gw in Version 2.1 / > pages not complete ? > > > > I'm not aware of any sites that don't load with the current > jumbo patch. > If there are, let me know and I'll look ito why. > > -tony > > > On Wed, 2002-03-27 at 17:06, Böringer, Heiko wrote: > > Hello Peter, > > i had the same problem after an upgrade from Suse Linux 6.4 > to 7.3. I > cannot > > find a solution for this issue. My solution was the fallback to the > original > > system. > > kind regards, > > Heiko Böringer > > > > -- Original Nachricht -- > > > > >I'm using the TIS firewall toolkit 2.1 on linux. Internal users are > surfing > > >in the internet via the http-gw. > > >My problem is now that some few pages are not correctly > loaded, it seems > > >to > > >depend an script code within those pages but I'm not sure. > So some pages > > >of > > >Microsoft and other pages can not be viewed as they can in > the internet, > > >some > > >parts of the pages maybe simply missed or script errors > are coming up. > > > > > >What can I do to get closer to my problem ? > > > > > >Do I need a patch ? Or is it simply customizing ? > > > > > >Thanks for any help > > > > > >Peter > > > > > >-- > > >GMX - Die Kommunikationsplattform im Internet. > > >http://www.gmx.net > > > > > > > > >--- > > >You are currently subscribed to fwtk-users as: > heiko.boeringer@epost.de > > >To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > > > > > > > > > > > --------------------------------------------------- > > Heiko Böringer - Birkenstraße 11 - 76744 Wörth > > Fon: 0173/8663798 - eMail: Heiko.Boeringer@epost.de > > --------------------------------------------------- > > > > > > > > ________________________________________ > > Zeitschriftenabos online bestellen - jetzt neu im Infoboten! > http://www.epost.de > > > > > > > > --- > > You are currently subscribed to fwtk-users as: > gale@syntax.dstl.gov.uk > > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > > > > --- > You are currently subscribed to fwtk-users as: > heiko.boeringer@epost.de > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > > > --- > You are currently subscribed to fwtk-users as: mikes@hartwellcorp.com > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Wed Mar 27 16:35 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id QAA04274 Wed, 27 Mar 2002 16:35:05 -0500 (EST) Message-Id: X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Wed, 27 Mar 2002 16:43:58 -0500 To: "fwtk-users" From: Rick Murphy Subject: [fwtk-users] Re: I trustingly wrote this letter... In-Reply-To: Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 721 Status: RO At 07:00 AM 2/8/02 +0100, Takacs Istvan wrote: >I tried to compile fwtk 2.1 on Red Hat Linux 7.2 >I need just http-gw so I commented out the x-gw >options in Makefile.conf.linux then I moved this >file to Makefile.conf >When I run make, it sends an error message >which complains to ndbm.h... Based on my Red Hat 7.0 system, you'll need to add -I/usr/include/gdbm to the "CFLAGS" line in the authsrv Makefile. Change CFLAGS= -I.. $(COPT) to CFLAGS= -I.. -I/usr/include/gdbm $(COPT) At least on this system, there's a ndbm.h in that directory. -Rick --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 28 02:35 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id CAA07764 Thu, 28 Mar 2002 02:35:00 -0500 (EST) X-Authentication-Warning: localhost.localdomain: nobody set sender to using -f Message-ID: From: =?iso-8859-1?Q?Fr=E9d=E9ric_LE_BASTARD?= To: "fwtk-users" Subject: [fwtk-users] Re: running under linux7.1 Date: Tue, 26 Mar 2002 22:32:23 +0100 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1023 Status: RO Hello, Je viens d'installer fwtk sur un linux 7.2, ca fonctionne sans problème. La question est plutot de la sécurité du produit, donc la conception date un peu. A+ Fred ----- Original Message ----- From: To: "fwtk-users" Sent: Tuesday, March 26, 2002 8:38 PM Subject: [fwtk-users] running under linux7.1 Hello, I am running the toolkit under linux 6.22 and it runs fine. Has somebody try to run fwtk under linuc 7.1 ? Are there specific problems with xinetd ? Thanks Robert Robert Thiel Ufr lettres et Sciences Humaines Administrateur réseau tel : +33 3 87 31 59 61 tel : +33 6 60 83 61 95 e_mail : thiel@zeus.lettres.univ-metz.fr --- You are currently subscribed to fwtk-users as: Frederic.Lebastard@strathom.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 28 04:13 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id EAA08234 Thu, 28 Mar 2002 04:13:41 -0500 (EST) Subject: [fwtk-users] RE: AW: Re: AW: [fwtk-users] http-gw in Version 2.1 / pages not complete ? From: Tony Gale To: "fwtk-users" Cc: Heiko.Boeringer@ePost.de In-Reply-To: X-Mailer: Ximian Evolution 1.0.3.99 Date: 28 Mar 2002 09:24:42 +0000 Message-Id: Mime-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by lists.tislabs.com id EAA08234 Content-Type: text/plain; charset=ISO-8859-1 Content-Length: 3698 Status: RO Both look fine to me as well. Thanks -tony On Wed, 2002-03-27 at 21:12, Michael St. Laurent wrote: > You must be missing a patch as both sites worked for me. Perhaps it would > help if you enumerated the patched you have applied. > > -- > Michael St. Laurent > Hartwell Corporation > > > -----Original Message----- > > From: Böringer, Heiko [mailto:Heiko.Boeringer@ePost.de] > > Sent: Wednesday, March 27, 2002 1:03 PM > > To: fwtk-users > > Subject: [fwtk-users] AW: Re: AW: [fwtk-users] http-gw in > > Version 2.1 / pages not complete ? > > > > > > Hello Tony, > > have a look at www.epost.de or www.bahn.de > > kind regards, Heiko > > > > -----Ursprüngliche Nachricht----- > > Von: Tony Gale [mailto:gale@syntax.dstl.gov.uk] > > Gesendet: Mittwoch, 27. März 2002 18:48 > > An: fwtk-users > > Betreff: [fwtk-users] Re: AW: [fwtk-users] http-gw in Version 2.1 / > > pages not complete ? > > > > > > > > I'm not aware of any sites that don't load with the current > > jumbo patch. > > If there are, let me know and I'll look ito why. > > > > -tony > > > > > > On Wed, 2002-03-27 at 17:06, Böringer, Heiko wrote: > > > Hello Peter, > > > i had the same problem after an upgrade from Suse Linux 6.4 > > to 7.3. I > > cannot > > > find a solution for this issue. My solution was the fallback to the > > original > > > system. > > > kind regards, > > > Heiko Böringer > > > > > > -- Original Nachricht -- > > > > > > >I'm using the TIS firewall toolkit 2.1 on linux. Internal users are > > surfing > > > >in the internet via the http-gw. > > > >My problem is now that some few pages are not correctly > > loaded, it seems > > > >to > > > >depend an script code within those pages but I'm not sure. > > So some pages > > > >of > > > >Microsoft and other pages can not be viewed as they can in > > the internet, > > > >some > > > >parts of the pages maybe simply missed or script errors > > are coming up. > > > > > > > >What can I do to get closer to my problem ? > > > > > > > >Do I need a patch ? Or is it simply customizing ? > > > > > > > >Thanks for any help > > > > > > > >Peter > > > > > > > >-- > > > >GMX - Die Kommunikationsplattform im Internet. > > > >http://www.gmx.net > > > > > > > > > > > >--- > > > >You are currently subscribed to fwtk-users as: > > heiko.boeringer@epost.de > > > >To unsubscribe send a blank email to > > leave-fwtk-users-303A@listserv.nai.com > > > > > > > > > > > > > > > > --------------------------------------------------- > > > Heiko Böringer - Birkenstraße 11 - 76744 Wörth > > > Fon: 0173/8663798 - eMail: Heiko.Boeringer@epost.de > > > --------------------------------------------------- > > > > > > > > > > > > ________________________________________ > > > Zeitschriftenabos online bestellen - jetzt neu im Infoboten! > > http://www.epost.de > > > > > > > > > > > > --- > > > You are currently subscribed to fwtk-users as: > > gale@syntax.dstl.gov.uk > > > To unsubscribe send a blank email to > > leave-fwtk-users-303A@listserv.nai.com > > > > > > > > --- > > You are currently subscribed to fwtk-users as: > > heiko.boeringer@epost.de > > To unsubscribe send a blank email to > > leave-fwtk-users-303A@listserv.nai.com > > > > > > --- > > You are currently subscribed to fwtk-users as: mikes@hartwellcorp.com > > To unsubscribe send a blank email to > > leave-fwtk-users-303A@listserv.nai.com > > > > --- > You are currently subscribed to fwtk-users as: gale@syntax.dstl.gov.uk > To unsubscribe send a blank email to leave-fwtk-users-769J@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 28 07:13 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id HAA09211 Thu, 28 Mar 2002 07:13:02 -0500 (EST) Date: Thu, 28 Mar 2002 07:24:03 -0500 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: running under linux7.1 Message-ID: Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.2.5i In-Reply-To: ; from flb@strathom.com on Tue, Mar 26, 2002 at 10:32:23PM +0100 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=iso-8859-1 Content-Length: 917 Status: RO On Tue, Mar 26, 2002 at 10:32:23PM +0100, Frédéric LE BASTARD wrote: > Hello, > > Je viens d'installer fwtk sur un linux 7.2, ca fonctionne sans problème. > > La question est plutot de la sécurité du produit, donc la conception date un > peu. > > A+ > > Fred Given that it doesn't use any specific features of Linux, I would say that it's as secure on Linux 7.2 as on any other *x system. Note that I say that without having evaluated it on that platform. Glad to hear that you got it working without any problems. -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 28 07:40 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id HAA09335 Thu, 28 Mar 2002 07:40:24 -0500 (EST) X-Authentication-Warning: localhost.localdomain: nobody set sender to using -f Message-ID: From: =?iso-8859-1?Q?Fr=E9d=E9ric_LE_BASTARD?= To: "fwtk-users" Subject: [fwtk-users] Re: running under linux7.1 Date: Thu, 28 Mar 2002 13:50:35 +0100 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1740 Status: RO Hi, Sorry for my reply in french, it thought it was private :-) A question i've recentely been adsked is the strength (security) of FWTK. It didn't changed much since almost 3 years now, except a few patches / plugs, when other softwares have had several new versions in the mean time. Has its security been audited recentely ? In simple words, how reliable is it ? (i'm mainly using it as a smtp proxy for three years now on several sites). Thanks for your comments Fred ----- Original Message ----- From: "Joseph S D Yao" To: "fwtk-users" Sent: Thursday, March 28, 2002 1:24 PM Subject: [fwtk-users] Re: running under linux7.1 On Tue, Mar 26, 2002 at 10:32:23PM +0100, Frédéric LE BASTARD wrote: > Hello, > > Je viens d'installer fwtk sur un linux 7.2, ca fonctionne sans problème. > > La question est plutot de la sécurité du produit, donc la conception date un > peu. > > A+ > > Fred Given that it doesn't use any specific features of Linux, I would say that it's as secure on Linux 7.2 as on any other *x system. Note that I say that without having evaluated it on that platform. Glad to hear that you got it working without any problems. -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: flb@strathom.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 28 07:57 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id HAA09422 Thu, 28 Mar 2002 07:57:28 -0500 (EST) Date: Thu, 28 Mar 2002 08:08:35 -0500 From: Joseph S D Yao To: "fwtk-users" Subject: [fwtk-users] Re: running under linux7.1 Message-ID: Mail-Followup-To: fwtk-users Mime-Version: 1.0 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.2.5i In-Reply-To: ; from flb@strathom.com on Thu, Mar 28, 2002 at 01:50:35PM +0100 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset=iso-8859-1 Content-Length: 1262 Status: RO On Thu, Mar 28, 2002 at 01:50:35PM +0100, Frédéric LE BASTARD wrote: > Sorry for my reply in french, it thought it was private :-) > A question i've recentely been adsked is the strength (security) of FWTK. > It didn't changed much since almost 3 years now, except a few patches / > plugs, when other softwares have had several new versions in the mean time. > Has its security been audited recentely ? > In simple words, how reliable is it ? > > (i'm mainly using it as a smtp proxy for three years now on several sites). TIS, having been sold twice since then, has not been maintaining it. But its users have been. If you apply a select set of the patches found on www.fwtk.org, and install it properly, it should be as strong as any commercial firewall out there. Where it perhaps lags is in some new capabilities. IMHO. Others should chime in here ... ;-) -- Joe Yao jsdy@center.osis.gov - Joseph S. D. Yao OSIS Center Systems Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of OSIS Center policies. --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 28 08:48 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id IAA09675 Thu, 28 Mar 2002 08:48:13 -0500 (EST) X-Authentication-Warning: localhost.localdomain: nobody set sender to using -f Message-ID: From: =?iso-8859-1?Q?Fr=E9d=E9ric_LE_BASTARD?= To: "fwtk-users" Subject: [fwtk-users] Re: running under linux7.1 Date: Thu, 28 Mar 2002 14:58:51 +0100 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain; charset="iso-8859-1" Content-Length: 803 Status: RO >TIS, having been sold twice since then, has not been maintaining it. >But its users have been. If you apply a select set of the patches >found on www.fwtk.org, and install it properly, it should be as strong >as any commercial firewall out there. Where it perhaps lags is in some >new capabilities. > This is what i've been doing for almost three years now. I have to admit one of my box was 0wn3d once, but it was sshd's fault. I've never had a single problem with smap, especially since I applied you anti-relay patch ;-) The thing is to me it looks strong, but I wonder how strong it is. According to you it's fair, i'm fine :-) Fred --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 28 11:55 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id LAA10841 Thu, 28 Mar 2002 11:55:46 -0500 (EST) X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to using -f Message-ID: From: "Michael St. Laurent" To: "fwtk-users" Subject: [fwtk-users] Does http-gw ignore /etc/hosts? Date: Thu, 28 Mar 2002 09:08:32 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 570 Status: RO I've put entry in the /etc/hosts file to map a particular site's address to 127.0.0.1 as we don't want people to be able to get to that site. However, despite having "order hosts,bind" in the /etc/host.conf and "hosts: files dns" in the /etc/nsswitch.conf http-gw seems to be ignoring /etc/hosts. Is this expected behavior? If so is there some way to change it? -- Michael St. Laurent Hartwell Corporation --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 28 12:40 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id MAA11076 Thu, 28 Mar 2002 12:40:46 -0500 (EST) Date: Thu, 28 Mar 2002 12:50:27 -0500 (EST) From: Ted Keller To: "fwtk-users" Subject: [fwtk-users] Re: Does http-gw ignore /etc/hosts? In-Reply-To: Message-ID: MIME-Version: 1.0 List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1161 Status: RO Michael, This really depends on your resolver libraries. If you've replaced your vendors resolver libraries (by installing a current version of bind), you may have disabled this feature completely. One way you may be able to accomplish this is to become "authoratative" for that domain - and override the real internet address with what ever address you choose. tek On Thu, 28 Mar 2002, Michael St. Laurent wrote: > I've put entry in the /etc/hosts file to map a particular site's address to > 127.0.0.1 as we don't want people to be able to get to that site. However, > despite having "order hosts,bind" in the /etc/host.conf and "hosts: files > dns" in the /etc/nsswitch.conf http-gw seems to be ignoring /etc/hosts. Is > this expected behavior? If so is there some way to change it? > > -- > Michael St. Laurent > Hartwell Corporation > > --- > You are currently subscribed to fwtk-users as: keller@bfg.com > To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com From bounce-fwtk-users-303@listserv.nai.com Thu Mar 28 13:53 EST 2002 Received: from listserv.nai.com (firewall-user@listserv.nai.com [161.69.213.6]) by lists.tislabs.com (8.9.1/8.9.1) with SMTP id NAA11537 Thu, 28 Mar 2002 13:53:35 -0500 (EST) X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to using -f Message-ID: From: "Michael St. Laurent" To: "fwtk-users" Subject: [fwtk-users] Re: Does http-gw ignore /etc/hosts? Date: Thu, 28 Mar 2002 11:06:49 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) List-Unsubscribe: Reply-To: "fwtk-users" Content-Type: text/plain Content-Length: 1821 Status: RO Well, this is a Red Hat 7.0 system and I've installed any errata patches from Red Hat that may have come out. The output from "rpm -q bind" gives me bind-8.2.3-1. -- Michael St. Laurent Hartwell Corporation > -----Original Message----- > From: Ted Keller [mailto:keller@bfg.com] > Sent: Thursday, March 28, 2002 9:50 AM > To: fwtk-users > Subject: [fwtk-users] Re: Does http-gw ignore /etc/hosts? > > > Michael, > > This really depends on your resolver libraries. If you've > replaced your > vendors resolver libraries (by installing a current version > of bind), you > may have disabled this feature completely. > > One way you may be able to accomplish this is to become > "authoratative" > for that domain - and override the real internet address with > what ever > address you choose. > > tek > > > On Thu, 28 Mar 2002, Michael St. Laurent wrote: > > > I've put entry in the /etc/hosts file to map a particular > site's address to > > 127.0.0.1 as we don't want people to be able to get to that > site. However, > > despite having "order hosts,bind" in the /etc/host.conf and > "hosts: files > > dns" in the /etc/nsswitch.conf http-gw seems to be ignoring > /etc/hosts. Is > > this expected behavior? If so is there some way to change it? > > > > -- > > Michael St. Laurent > > Hartwell Corporation > > > > --- > > You are currently subscribed to fwtk-users as: keller@bfg.com > > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > > > > > --- > You are currently subscribed to fwtk-users as: mikes@hartwellcorp.com > To unsubscribe send a blank email to > leave-fwtk-users-303A@listserv.nai.com > --- You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com