From bounce-fwtk-users-303@listserv.nai.com Thu Mar  6 14:09 EST 2003
Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100])
	by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA05037
	Thu, 6 Mar 2003 14:09:05 -0500 (EST)
Received: by sentry.gw.tislabs.com; id OAA09474; Thu, 6 Mar 2003 14:13:43 -0500 (EST)
Received: from listserv.nai.com(205.227.136.196) by sentry.gw.tislabs.com via smap (V5.5)
	id xma009466; Thu, 6 Mar 03 14:13:12 -0500
X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to <mikes@hartwellcorp.com> using -f
Message-ID: <LYRIS-303-137523-2003.03.06-12.13.52--fwtk-archive#lists.tislabs.com@listserv.nai.com>
From: "Michael St. Laurent" <mikes@hartwellcorp.com>
To: "fwtk-users" <fwtk-users@listserv.nai.com>
Subject: [fwtk-users] More info on the Folder View problem
Date: Thu, 6 Mar 2003 10:33:53 -0800 
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
List-Unsubscribe: <mailto:leave-fwtk-users-303A@listserv.nai.com>
Reply-To: "fwtk-users" <fwtk-users@listserv.nai.com>
Content-Type: text/plain
Content-Length: 596

It seems that the problem is that once "Enable folder view for FTP sites" is
enabled, IE insists on using passive mode with a PASV command instead of a
PORT command.

What's the best option for getting PASV to work in http-gw?

According to the patches page the 'gopu' patch is for version 2.0 instead of
2.1.  Also, as far as I can see it's not a patch but rather replacement
source files.

-- 
Michael St. Laurent
Hartwell Corporation

---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com

From bounce-fwtk-users-303@listserv.nai.com Thu Mar  6 18:27 EST 2003
Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100])
	by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA05458
	Thu, 6 Mar 2003 18:27:41 -0500 (EST)
Received: by sentry.gw.tislabs.com; id SAA15024; Thu, 6 Mar 2003 18:32:20 -0500 (EST)
Received: from listserv.nai.com(205.227.136.196) by sentry.gw.tislabs.com via smap (V5.5)
	id xma015018; Thu, 6 Mar 03 18:31:43 -0500
Message-Id: <LYRIS-303-137611-2003.03.06-16.36.32--fwtk-archive#lists.tislabs.com@listserv.nai.com>
X-Sender: rmurphy@mail.itm-inst.com
X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9
Date: Thu, 06 Mar 2003 17:47:15 -0500
To: "fwtk-users" <fwtk-users@listserv.nai.com>
From: Rick Murphy <rmurphy@itm-inst.com>
Subject: [fwtk-users] Re: More info on the Folder View problem
In-Reply-To: <LYRIS-602-137523-2003.03.06-12.13.52--rmurphy#itm-inst.com
 @listserv.nai.com>
Mime-Version: 1.0
List-Unsubscribe: <mailto:leave-fwtk-users-303A@listserv.nai.com>
Reply-To: "fwtk-users" <fwtk-users@listserv.nai.com>
Content-Type: text/plain; charset="us-ascii"; format=flowed
Content-Length: 1116

At 10:33 AM 3/6/2003 -0800, Michael St. Laurent wrote:
>It seems that the problem is that once "Enable folder view for FTP 
>sites" is
>enabled, IE insists on using passive mode with a PASV command instead of a
>PORT command.
>
>What's the best option for getting PASV to work in http-gw?

You're using ftp-gw, not http-gw. Or, what you're saying makes no sense.
When you use the http-gw as a ftp proxy, the web browser sends a "GET 
ftp:// HTTP/1.0" format request to the http-gw; it then does all the 
FTP accesses from within the web proxy and returns the ftp information 
in html format.

I don't know what happens between the browser and the proxy when you 
enable folder view, but there's no way, given the protocol that's 
involved, for the browser to ask the proxy to format the FTP site 
differently. (Specifically, the PASV command is illegal at this point, 
since the protocol between the browser and the proxy is HTTP, not FTP.)
         -Rick


---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com

From bounce-fwtk-users-303@listserv.nai.com Mon Mar 10 20:25 EST 2003
Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100])
	by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA16948
	Mon, 10 Mar 2003 20:25:29 -0500 (EST)
Received: by sentry.gw.tislabs.com; id UAA19379; Mon, 10 Mar 2003 20:30:16 -0500 (EST)
Received: from listserv.nai.com(205.227.136.196) by sentry.gw.tislabs.com via smap (V5.5)
	id xma019345; Mon, 10 Mar 03 20:29:30 -0500
X-Authentication-Warning: guardian.hartwellcorp.com: mail set sender to <mikes@hartwellcorp.com> using -f
Message-ID: <LYRIS-303-138913-2003.03.10-19.08.28--fwtk-archive#lists.tislabs.com@listserv.nai.com>
From: "Michael St. Laurent" <mikes@hartwellcorp.com>
To: "fwtk-users" <fwtk-users@listserv.nai.com>
Subject: [fwtk-users] More info on the Folder View problem
Date: Mon, 10 Mar 2003 17:28:47 -0800
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
List-Unsubscribe: <mailto:leave-fwtk-users-303A@listserv.nai.com>
Reply-To: "fwtk-users" <fwtk-users@listserv.nai.com>
Content-Type: text/plain
Content-Length: 769

Forgive me if this has already been sent to the list but I haven't seen it
appear on the list.  For that matter, I've not seen ANYTHING from the list
for about a week now.

It seems that the problem is that once "Enable folder view for FTP sites" is
enabled, IE insists on using passive mode with a PASV command instead of a
PORT command.

What's the best option for getting PASV to work in http-gw?

According to the patches page the 'gopu' patch is for version 2.0 instead of
2.1.  Also, as far as I can see it's not a patch but rather replacement
source files.

-- 
Michael St. Laurent
Hartwell Corporation

---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com

From bounce-fwtk-users-303@listserv.nai.com Tue Mar 11 04:58 EST 2003
Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100])
	by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id EAA18044
	Tue, 11 Mar 2003 04:58:00 -0500 (EST)
Received: by sentry.gw.tislabs.com; id FAA06690; Tue, 11 Mar 2003 05:02:48 -0500 (EST)
Received: from listserv.nai.com(205.227.136.196) by sentry.gw.tislabs.com via smap (V5.5)
	id xma006667; Tue, 11 Mar 03 05:02:29 -0500
X-Authentication-Warning: spider.usrconsult.be: mail set sender to <mbardiaux@peaktime.be> using -f
Message-ID: <LYRIS-303-139085-2003.03.11-03.41.35--fwtk-archive#lists.tislabs.com@listserv.nai.com>
Date: Tue, 11 Mar 2003 11:00:53 +0100
From: Michel Bardiaux <mbardiaux@peaktime.be>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.1) Gecko/20020823 Netscape/7.0
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: "fwtk-users" <fwtk-users@listserv.nai.com>
Subject: [fwtk-users] Protecting smap against -d attacks?
Content-Transfer-Encoding: 7bit
List-Unsubscribe: <mailto:leave-fwtk-users-303A@listserv.nai.com>
Reply-To: "fwtk-users" <fwtk-users@listserv.nai.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Length: 582

Setup: firewall running smap; sendmail is the internal MTA.

Problem: we are repeatedly attacked with floods of mails with "Subject: 
-d". Although that very old-fashioned attack fails, it causes a DoS 
because it fills a disk on the central server.

Is there already a patch to smap to drop mails based on Subject?

-- 
Michel Bardiaux
Peaktime Belgium S.A.  Bd. du Souverain, 191  B-1160 Bruxelles
Tel : +32 2 790.29.41


---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com

From bounce-fwtk-users-303@listserv.nai.com Tue Mar 11 11:01 EST 2003
Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100])
	by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA19192
	Tue, 11 Mar 2003 11:01:37 -0500 (EST)
Received: by sentry.gw.tislabs.com; id LAA14988; Tue, 11 Mar 2003 11:06:26 -0500 (EST)
Received: from listserv.nai.com(205.227.136.196) by sentry.gw.tislabs.com via smap (V5.5)
	id xma014977; Tue, 11 Mar 03 11:06:01 -0500
Subject: [fwtk-users] Re: More info on the Folder View problem
From: Blair Lowe <blair.lowe@compeng.net>
To: "fwtk-users" <fwtk-users@listserv.nai.com>
In-Reply-To: <LYRIS-667-138913-2003.03.10-19.08.28--Blair.Lowe#compeng.net@listserv.nai.com>
Message-Id: <LYRIS-303-139267-2003.03.11-09.44.20--fwtk-archive#lists.tislabs.com@listserv.nai.com>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.1.90 (Preview Release)
Date: 11 Mar 2003 09:06:26 -0700
Content-Transfer-Encoding: 7bit
List-Unsubscribe: <mailto:leave-fwtk-users-303A@listserv.nai.com>
Reply-To: "fwtk-users" <fwtk-users@listserv.nai.com>
Content-Type: text/plain
Content-Length: 1197

Hi,

Why are you setting up your ftp with http-gw, and not ftp-gw? 

If you are only allowing downloads, why not use http exclusively in the
html downloads, and not ftp url's.

Blair.

On Mon, 2003-03-10 at 18:28, Michael St. Laurent wrote:
> Forgive me if this has already been sent to the list but I haven't seen it
> appear on the list.  For that matter, I've not seen ANYTHING from the list
> for about a week now.
> 
> It seems that the problem is that once "Enable folder view for FTP sites" is
> enabled, IE insists on using passive mode with a PASV command instead of a
> PORT command.
> 
> What's the best option for getting PASV to work in http-gw?
> 
> According to the patches page the 'gopu' patch is for version 2.0 instead of
> 2.1.  Also, as far as I can see it's not a patch but rather replacement
> source files.
-- 
    GET WEBMAIL FOR YOUR DOMAIN: https://www.zedemail.ca
                Computer Engineering Inc.
Tel 780 450 8494 or TOLL FREE 1 877 968 7626 (9-5 Mountain Time)
                    Fax 780 435 0693



---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com

From bounce-fwtk-users-303@listserv.nai.com Fri Mar 14 22:30 EST 2003
Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100])
	by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id WAA03878
	Fri, 14 Mar 2003 22:30:20 -0500 (EST)
Received: by sentry.gw.tislabs.com; id WAA23278; Fri, 14 Mar 2003 22:35:13 -0500 (EST)
Received: from listserv.nai.com(205.227.136.196) by sentry.gw.tislabs.com via smap (V5.5)
	id xma023203; Fri, 14 Mar 03 22:35:08 -0500
Message-Id: <LYRIS-303-141586-2003.03.14-21.13.57--fwtk-archive#lists.tislabs.com@listserv.nai.com>
X-Sender: rmurphy@mail.itm-inst.com
X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9
Date: Fri, 14 Mar 2003 22:33:16 -0500
To: "fwtk-users" <fwtk-users@listserv.nai.com>
From: Rick Murphy <rmurphy@itm-inst.com>
Subject: [fwtk-users] Forwarding message for Keith Young
Cc: "Young, Keith" <Keith.Young@MontgomeryCountyMD.gov>
Mime-Version: 1.0
List-Unsubscribe: <mailto:leave-fwtk-users-303A@listserv.nai.com>
Reply-To: "fwtk-users" <fwtk-users@listserv.nai.com>
Content-Type: text/plain; charset="us-ascii"; format=flowed
Content-Length: 2463

I'm not sure that this made it to the list or not. Just to make sure, 
I'm forwarding this versus redirecting it.

On a personal note, I am disappointed in Secure Computing's decision to 
interpret the FWTK license as prohibiting commercial usage.
         -Rick

>From: "Young, Keith" <Keith.Young@MontgomeryCountyMD.gov>
>To: <rmurphy@itm-inst.com>
>
>
>Rick,
>
>Would you mind sending this to the FWTK mailing list? The list server
>seems to keep eating my e-mails, even after subscribing/unsubscribing...
>
>Sorry to ask you, but you are the only person I recognize who is still
>active on the list...
>
>Thanks much,
>
>--Keith
>
>=========================================================
>Yep, after 7 years of being involved with the FWTK, I am stepping down
>as maintainer of WWW.FWTK.ORG. This is due to a couple of reasons:
>         1) Unlike TIS/NAI, SecureComputing has announced that they will
>be enforcing all aspects of the FWTK license, including the
>commercial-use clause:
>
>http://www.securecomputing.com/pdf/FWTK_Licensing_FAQ.pdf
>While TIS/NAI did not allow you to profit from the FWTK, they did not
>enforce the use of it within a for-profit organization.
>         2) I've spent a fair number of years trying to convince
>TIS/NAI/SC to changing the FWTK licensing to a more open/GPL based
>license. Unfortunately, as proven by the above link, I have not been
>successful.
>         3) Several packages now exist that "compete" with the FWTK and
>are being actively updated.
>         4) I never thought that raising a 2 year-old daughter would take
>so much time  ;-)
>
>So, if anyone would like to continue my efforts please let me know.
>
>Thanks to:
>         Rick Murphy, I think that SecureComputing *really* needs you
>right now ;-)
>         Bill Casti who donated the server, bandwidth, and domain fees
>since the first day
>         Ark, is "FWTK NG" released yet?
>         Joe Yao who told me two years ago that raising a daughter will
>take lots of time
>         Marcus Ranum who has long forgotten about the FWTK and has gone
>onto bigger things
>       *lots* of other people who I can't remember right now
>
>Special thanks to everyone who supplied patches, docs, and FAQ answers.
>
>Cheers,
>
>--Keith Young
>-Security Manager, Montgomery County Maryland USA


---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com

From bounce-fwtk-users-303@listserv.nai.com Fri Mar 14 23:28 EST 2003
Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100])
	by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id XAA03963
	Fri, 14 Mar 2003 23:28:10 -0500 (EST)
Received: by sentry.gw.tislabs.com; id XAA25465; Fri, 14 Mar 2003 23:33:04 -0500 (EST)
Received: from listserv.nai.com(205.227.136.196) by sentry.gw.tislabs.com via smap (V5.5)
	id xma025435; Fri, 14 Mar 03 23:32:51 -0500
X-Authentication-Warning: rainmaker.dreamwvr.com: neo set sender to dreamwvr@dreamwvr.com using -f
Date: Fri, 14 Mar 2003 21:31:49 -0700
From: "dreamwvr@dreamwvr.com" <dreamwvr@dreamwvr.com>
To: "fwtk-users" <fwtk-users@listserv.nai.com>
Subject: [fwtk-users] Re: Forwarding message for Keith Young
Message-ID: <LYRIS-303-141611-2003.03.14-22.11.55--fwtk-archive#lists.tislabs.com@listserv.nai.com>
Mime-Version: 1.0
Content-Disposition: inline
In-Reply-To: <LYRIS-165-141586-2003.03.14-21.13.57--dreamwvr#dreamwvr.com@listserv.nai.com>
User-Agent: Mutt/1.4i
List-Unsubscribe: <mailto:leave-fwtk-users-303A@listserv.nai.com>
Reply-To: "fwtk-users" <fwtk-users@listserv.nai.com>
Content-Type: text/plain; charset=us-ascii
Content-Length: 1241

On Fri, Mar 14, 2003 at 10:33:16PM -0500, Rick Murphy wrote:
> I'm not sure that this made it to the list or not. Just to make sure, 
> I'm forwarding this versus redirecting it.
> 
> On a personal note, I am disappointed in Secure Computing's decision to 
> interpret the FWTK license as prohibiting commercial usage.
>         -Rick
Helo;
   Keith and Rick;
	very long time no stream to. Anyhow I think this is 
personally a sad commentary from TIS. (Was it really ~7 years ago?)
Well I know where your coming from spawning children does 
make life interesting;-) So we are now at a impassable abyss?
Does this mean that the list/the site etc are finito?
This would be a 'dark_friday' if that is the case.

Very_Best Regards,
dreamwvr@dreamwvr.com

-- 
/*  Security is a work in progress - dreamwvr                 */
#                                                             
# Note: To begin Journey type man afterboot,man help,man hier[.]      
#                                                             
// "Who's Afraid of Schrodinger's Cat?" /var/(.)?mail/me \?  ;-]

---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com

From bounce-fwtk-users-303@listserv.nai.com Fri Mar 14 23:40 EST 2003
Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100])
	by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id XAA04002
	Fri, 14 Mar 2003 23:40:24 -0500 (EST)
Received: by sentry.gw.tislabs.com; id XAA25954; Fri, 14 Mar 2003 23:45:16 -0500 (EST)
Received: from listserv.nai.com(205.227.136.196) by sentry.gw.tislabs.com via smap (V5.5)
	id xma025940; Fri, 14 Mar 03 23:45:06 -0500
Subject: [fwtk-users] Re: Forwarding message for Keith Young
From: Blair Lowe <blair.lowe@compeng.net>
To: "fwtk-users" <fwtk-users@listserv.nai.com>
In-Reply-To: <LYRIS-667-141611-2003.03.14-22.11.55--Blair.Lowe#compeng.net@listserv.nai.com>
Message-Id: <LYRIS-303-141614-2003.03.14-22.24.13--fwtk-archive#lists.tislabs.com@listserv.nai.com>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.1.90 (Preview Release)
Date: 14 Mar 2003 21:46:51 -0700
Content-Transfer-Encoding: 7bit
List-Unsubscribe: <mailto:leave-fwtk-users-303A@listserv.nai.com>
Reply-To: "fwtk-users" <fwtk-users@listserv.nai.com>
Content-Type: text/plain
Content-Length: 1325

Ditto,

We used smap lots, but now we use qmail, so we no longer need it.

It was really a great piece of "open source", though.

Maybe someone wants to start a new project at source forge using GPL, or
something to create a new firewall from scratch. There is certainly
enough knowledge base in this group.

TTYL,
Blair.

On Fri, 2003-03-14 at 21:31, dreamwvr@dreamwvr.com wrote:
> On Fri, Mar 14, 2003 at 10:33:16PM -0500, Rick Murphy wrote:
> > I'm not sure that this made it to the list or not. Just to make sure, 
> > I'm forwarding this versus redirecting it.
> > 
> > On a personal note, I am disappointed in Secure Computing's decision to 
> > interpret the FWTK license as prohibiting commercial usage.
> >         -Rick
> Helo;
>    Keith and Rick;
> 	very long time no stream to. Anyhow I think this is 
> personally a sad commentary from TIS. (Was it really ~7 years ago?)
> Well I know where your coming from spawning children does 
> make life interesting;-) So we are now at a impassable abyss?
> Does this mean that the list/the site etc are finito?
> This would be a 'dark_friday' if that is the case.
> 
> Very_Best Regards,
dreamwvr@dreamwvr.com


---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com

From bounce-fwtk-users-303@listserv.nai.com Sun Mar 16 13:20 EST 2003
Received: from sentry.gw.tislabs.com (firewall-user@sentry.gw.tislabs.com [192.94.214.100])
	by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA07228
	Sun, 16 Mar 2003 13:20:39 -0500 (EST)
Received: by sentry.gw.tislabs.com; id NAA17462; Sun, 16 Mar 2003 13:25:36 -0500 (EST)
Received: from listserv.nai.com(205.227.136.196) by sentry.gw.tislabs.com via smap (V5.5)
	id xma017454; Sun, 16 Mar 03 13:25:27 -0500
X-Authentication-Warning: rainmaker.dreamwvr.com: neo set sender to dreamwvr@dreamwvr.com using -f
Date: Sun, 16 Mar 2003 11:24:08 -0700
From: "dreamwvr@dreamwvr.com" <dreamwvr@dreamwvr.com>
To: "fwtk-users" <fwtk-users@listserv.nai.com>
Subject: [fwtk-users] Re: Forwarding message for Keith Young
Message-ID: <LYRIS-303-142761-2003.03.16-12.04.15--fwtk-archive#lists.tislabs.com@listserv.nai.com>
Mime-Version: 1.0
Content-Disposition: inline
In-Reply-To: <LYRIS-165-141586-2003.03.14-21.13.57--dreamwvr#dreamwvr.com@listserv.nai.com>
User-Agent: Mutt/1.4i
List-Unsubscribe: <mailto:leave-fwtk-users-303A@listserv.nai.com>
Reply-To: "fwtk-users" <fwtk-users@listserv.nai.com>
Content-Type: text/plain; charset=us-ascii
Content-Length: 847

hello,
    Does this mean as well that the website and all historical
data contained as well as list traffic will be no more?
This 'should_be' kept for historical and relational reference.
I for one would like to see that. This also has been a great
adventure. Well appreciate any insights on this particular subject.

Best Regards,
dreamwvr@dreamwvr.com
 
-- 
/*  Security is a work in progress - dreamwvr                 */
#                                                             
# Note: To begin Journey type man afterboot,man help,man hier[.]      
#                                                             
// "Who's Afraid of Schrodinger's Cat?" /var/(.)?mail/me \?  ;-]

---
You are currently subscribed to fwtk-users as: fwtk-archive@lists.tislabs.com
To unsubscribe send a blank email to leave-fwtk-users-303A@listserv.nai.com

