swinog August 2006

swinog@lists.swinog.ch

45 participants
17 discussions

R: [swinog] SDSL
by Manuel Wenger 29 Aug '06

29 Aug '06

Michel Renfer wrote: > AFAIK they use multiple pairs... You're right, for 6M and 8M they use multiple pairs, but for 4M they use 1 pair (which is > 2.3M). Therefore this would be illegal according to Swisscom spectrum management... Or not? -Manuel

4 3

SDSL
by Xaver Aerni 29 Aug '06

29 Aug '06

I'm working on a Projekt we are needing a Line for ca 3 Mbit. Is it possible to multiplex 2 SDSL Lines to a 3 Mbit Line... that we have 3.6 Mbits We don't use Internet Connect we must only connect two Points. Greetings X. Aerni

8 10

Job Offer
by Viktor Steinmann 29 Aug '06

29 Aug '06

Hi all The company I'm working for (20 employees) is looking for an IT techie. Here are the needs: MUST - Oracle experience - Linux/Unix experience - English language skills - Willing to work in Zug OPTIONAL (Bonus points) - Networking experience with Cisco devices (BGP, switching) - Windows server knowledge - Scripting/programming know-how - IDS/Firewall know-how - VPN experience Since the company is quite small, the IT team does everything. Imagine supporting an MS Office user with his Excel formulas, setting up a new peer at SwissIX, implementing a PHP/MySQL CMS and then mounting some rack equipment on the same day. The company is in the financial sector, which means we have enough budget to buy cool hard- and software. But it also has some minor drawbacks: There are some clothing guidelines (shoes & shirt required), you cannot have a criminal record and you have to refrain from doing certain financial transactions while working here (insider trading laws). Still interested? Send me your CV offline (remember: the reply-to goes to the list - be careful not to send your CV out to the world :-)) Cheers, Viktor

1 0

SMSC via SIP
by Richard Klingler 28 Aug '06

28 Aug '06

Morning (o; Slightly off-topic again..but.... Tried this weekend to send alarming messages via asterisk with the smsq helper application.... Has anyone being successful on this topic? Or are there some limiations using a SIP provider calling the SMSC number 0622100000? All I get is a: -- Attempting call on SIP/voip/0622100000 for application SMS(0) (Retry 1) > Channel SIP/voip-fd36 was answered. > Launching SMS(0) on SIP/voip-fd36 -- SMS RX 93 00 6D -- SMS TX 91 13 05 06 0A 81 70 89 62 46 36 00 F1 08 C8 30 9B FD FE FD 7E ED -- SMS TX 92 01 FF 6E Aug 27 19:19:24 NOTICE[10380]: pbx_spool.c:279 attempt_thread: Call completed to SIP/voip/0622100000 cheers ritchie

1 0

R: [swinog] SDSL
by Manuel Wenger 28 Aug '06

28 Aug '06

Andre Oppermann wrote: > Unfortunatly everything doing more than 2.3Mbit/s per copper > pair is currently not allowed by Swisscom spectrum management. Do you mean Cablecom is currently illegal if it is offering copper G.SHDSL lines doing 8M on 2 wires? -Manuel

4 3

Formmailer-Scripts and Spam
by Matthias Hertzog 16 Aug '06

16 Aug '06

Hi Folks! We're facing a growing amount of automatically generated HTTP POST requests, all containing spamvertising links like http://19.altribeati.com/homoerectus/ As far as i know, there are the following ways to handle that: a) Spamfilter of recipient shall filter that b) Web-user has to enter a unique number (generated image) in the form to prove, he's a human being. c) Badword-Filtering in the formmail-script, some reqular expressions a.s.o. Does anyone out there has better ideas? How have you solved that problem? Best wishes, Matthias _________________________________________ mhs @ internet AG Zürcherstrasse 204, CH - 9014 St. Gallen Phone +41 71 274 93 93, Fax +41 71 274 93 94 http://www.mhs.ch _________________________________________

14 20

RE: [swinog] Formmailer-Scripts and Spam
by Daniel Rechsteiner 16 Aug '06

16 Aug '06

An interesting tool is Akismet: http://akismet.com/ We are using this in our Wordpress blogs and it is meant to be used against comment spam in blogs, but as formmailer spam is basically the same why not use it here too. Something like Spamassassin as a web service for comment spam. The API description and several implementations are available on the site. Daniel P.S. kismet: arabic for "fate" das Kismet - im Islam das dem Menschen von Allah zugeteilte, unabänderliche Schicksal

1 0

RE: [swinog] Formmailer-Scripts and Spam
by Glogger Steven 16 Aug '06

16 Aug '06

> Well, IMHO this is no better than my solution using JS What > do you do if someone has cookies disabled? > I for my part often reject cookies 'just because' when I dont > feel they're really needed... java script is client side. it only prevents that a form can be submittet. what if you circumvent that and post directly? as we know, simulating a post ist quite easy: telnet to host port 80: "POST /superposter/gna.php HTTP/1.1\r\n Host: www.blabla.ch \r\n User-Agent: whatever you want\r\n Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plai n;q=0.8,image/png,*/*;q=0.5\r\n Accept-Encoding: gzip,deflate\r\n Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n Keep-Alive: 300\r\n Connection: keep-alive\r\n Referer: www.blabla.ch/urli/index.php Cookie: PHPSESSID-1111111\r\n Content-Type: application/x-www-form-urlencoded\r\n Content-Length: 100\n \r\n action=login&nick=username&password=password&submit=LOGIN \r\n" if you get that you cannot check if he used your javascript or not ,-) he might check your session-id, but what if the client gets a session id and uses that one to fill in the form. that soo easy :-) (i'm using such a tool as a proxy for an online game since about 5 years ,-)) -steven

2 1

RE: [swinog] Formmailer-Scripts and Spam
by Randazzo Filippo 16 Aug '06

16 Aug '06

/lurking mode off Hi folks In my (recent) experience, this problem is not related with the form but directly with the database.. The spammer seems using an automatic bot that is sending content to generic database fields (so my suggestion would be changing the table field names to strange ones instead of changing field names of the form); Let me tell you what happened to me: I have a small guestbook in ASP (not self made, is a free code found online) used by me and 7 more friends for a private fanta-soccer-game website (so absolutely not a visited website). I begun to have those spam messages in it and I fgured out the following: I had since the beginnning the possibility to enable-disable the form fields 'sender email' and 'sender website' and, being only 8 ppl, I disabled them immediately during the guestbook installation: checkingthe database after the spamming I found those fields in the database FULL WITH INFO even if there was no input field in the form. Thats why I can tell tah tis problem is not form-related. Solutions (possibility that I had from this premade guestbook): 1) enable Session ID check (so the post must be submitted from the form and not from outside) 2) enable cookies (to prevent spamming the gustbook with multiple comments) 3) enable the loved/hated security images Hopes this helps Cheers Filippo P.S: another system that seems working (I'm testing it) is to put the guestbook pages on a different server from the main website (im including it in a <iframe>).. Seems that this is confusing the bots.. /lurking mode on -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Manuel Krummenacher Sent: martedì, 15. agosto 2006 18:01 To: swinog(a)swinog.ch Subject: Re: [swinog] Formmailer-Scripts and Spam Matthias Hertzog wrote: > b) Web-user has to enter a unique number (generated image) in the form > to prove, he's a human being. Works fine, but you think of the visually impaired. There are captchas which provide the number also as sound. But I wouldn't use captchas on business websites, it's to annoying for the users to type in the number. > c) Badword-Filtering in the formmail-script, some reqular expressions > a.s.o. Often it helps if you give the fields "unsuspicious" names. "meinfeld4" instead of "recipient" and so on... I use mod_security [1] with the rules from gotroot.com. mod_security blocks the spam before the form gets processed. Additionally, it protects the server from SQL-injection and other attacks. Greets, Manuel [1] http://www.modsecurity.org/ _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

AW: [swinog] (no subject)
by Michele Capobianco 14 Aug '06

14 Aug '06

Stuck at level 4 :( -----Ursprüngliche Nachricht----- Von: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Michel Renfer Gesendet: Samstag, 12. August 2006 08:12 An: swinog(a)swinog.ch Betreff: RE: [swinog] (no subject) for sure it's working - Find the rabbit hole :o) cheers, michel > -----Original Message----- > From: swinog-bounces(a)lists.swinog.ch > [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Andre Chapuis > Sent: Friday, August 11, 2006 11:20 PM > To: swinog(a)swinog.ch > Subject: Re: [swinog] (no subject) > > ...not working... > ----- Original Message ----- > From: "Olivier Mueller" <om-lists-swinog(a)omx.ch> > To: <swinog(a)swinog.ch> > Sent: Friday, August 11, 2006 9:10 AM > Subject: [swinog] (no subject) > > > Good morning! > > Everybody on the #swinog chan already knows about it, but you will > certainly enjoy it too: > > http://www.spale.com/quiz/ > > The first 3 levels are easy, but then it is just getting > interesting... :-) If you need some hints to reach Level F (yes, there > are 16 steps), you are welcome on irc.swinog.ch, #swinog. > > Thanks to Spale for that nice crazy toy! Of course do not start now > if you plan do some real work this morning... > > Regards from somewhere between Olten and Lausanne, Olivier > > PS: SBB/CFF-MMS Tickets are really working :-) > > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -------------------------------------------------------- 10 Jahre Online Consulting AG Seit Mai 1996 ist Online an Ihrer Seite - Wir danken allen herzlich, die zu unserem Erfolg und zehnjährigen Firmenbestehen beigetragen haben! --------------------------------------------------------

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog August 2006