- swinog - vmaill01.sys

RE: [swinog] Formmailer-Scripts and Spam
by Daniel Rechsteiner 16 Aug '06

16 Aug '06

An interesting tool is Akismet: http://akismet.com/ We are using this in our Wordpress blogs and it is meant to be used against comment spam in blogs, but as formmailer spam is basically the same why not use it here too. Something like Spamassassin as a web service for comment spam. The API description and several implementations are available on the site. Daniel P.S. kismet: arabic for "fate" das Kismet - im Islam das dem Menschen von Allah zugeteilte, unabänderliche Schicksal

1 0

RE: [swinog] Formmailer-Scripts and Spam
by Glogger Steven 16 Aug '06

16 Aug '06

> Well, IMHO this is no better than my solution using JS What > do you do if someone has cookies disabled? > I for my part often reject cookies 'just because' when I dont > feel they're really needed... java script is client side. it only prevents that a form can be submittet. what if you circumvent that and post directly? as we know, simulating a post ist quite easy: telnet to host port 80: "POST /superposter/gna.php HTTP/1.1\r\n Host: www.blabla.ch \r\n User-Agent: whatever you want\r\n Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plai n;q=0.8,image/png,*/*;q=0.5\r\n Accept-Encoding: gzip,deflate\r\n Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n Keep-Alive: 300\r\n Connection: keep-alive\r\n Referer: www.blabla.ch/urli/index.php Cookie: PHPSESSID-1111111\r\n Content-Type: application/x-www-form-urlencoded\r\n Content-Length: 100\n \r\n action=login&nick=username&password=password&submit=LOGIN \r\n" if you get that you cannot check if he used your javascript or not ,-) he might check your session-id, but what if the client gets a session id and uses that one to fill in the form. that soo easy :-) (i'm using such a tool as a proxy for an online game since about 5 years ,-)) -steven

2 1

RE: [swinog] Formmailer-Scripts and Spam
by Randazzo Filippo 16 Aug '06

16 Aug '06

/lurking mode off Hi folks In my (recent) experience, this problem is not related with the form but directly with the database.. The spammer seems using an automatic bot that is sending content to generic database fields (so my suggestion would be changing the table field names to strange ones instead of changing field names of the form); Let me tell you what happened to me: I have a small guestbook in ASP (not self made, is a free code found online) used by me and 7 more friends for a private fanta-soccer-game website (so absolutely not a visited website). I begun to have those spam messages in it and I fgured out the following: I had since the beginnning the possibility to enable-disable the form fields 'sender email' and 'sender website' and, being only 8 ppl, I disabled them immediately during the guestbook installation: checkingthe database after the spamming I found those fields in the database FULL WITH INFO even if there was no input field in the form. Thats why I can tell tah tis problem is not form-related. Solutions (possibility that I had from this premade guestbook): 1) enable Session ID check (so the post must be submitted from the form and not from outside) 2) enable cookies (to prevent spamming the gustbook with multiple comments) 3) enable the loved/hated security images Hopes this helps Cheers Filippo P.S: another system that seems working (I'm testing it) is to put the guestbook pages on a different server from the main website (im including it in a <iframe>).. Seems that this is confusing the bots.. /lurking mode on -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Manuel Krummenacher Sent: martedì, 15. agosto 2006 18:01 To: swinog(a)swinog.ch Subject: Re: [swinog] Formmailer-Scripts and Spam Matthias Hertzog wrote: > b) Web-user has to enter a unique number (generated image) in the form > to prove, he's a human being. Works fine, but you think of the visually impaired. There are captchas which provide the number also as sound. But I wouldn't use captchas on business websites, it's to annoying for the users to type in the number. > c) Badword-Filtering in the formmail-script, some reqular expressions > a.s.o. Often it helps if you give the fields "unsuspicious" names. "meinfeld4" instead of "recipient" and so on... I use mod_security [1] with the rules from gotroot.com. mod_security blocks the spam before the form gets processed. Additionally, it protects the server from SQL-injection and other attacks. Greets, Manuel [1] http://www.modsecurity.org/ _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

2 1

AW: [swinog] (no subject)
by Michele Capobianco 14 Aug '06

14 Aug '06

Stuck at level 4 :( -----Ursprüngliche Nachricht----- Von: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Michel Renfer Gesendet: Samstag, 12. August 2006 08:12 An: swinog(a)swinog.ch Betreff: RE: [swinog] (no subject) for sure it's working - Find the rabbit hole :o) cheers, michel > -----Original Message----- > From: swinog-bounces(a)lists.swinog.ch > [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Andre Chapuis > Sent: Friday, August 11, 2006 11:20 PM > To: swinog(a)swinog.ch > Subject: Re: [swinog] (no subject) > > ...not working... > ----- Original Message ----- > From: "Olivier Mueller" <om-lists-swinog(a)omx.ch> > To: <swinog(a)swinog.ch> > Sent: Friday, August 11, 2006 9:10 AM > Subject: [swinog] (no subject) > > > Good morning! > > Everybody on the #swinog chan already knows about it, but you will > certainly enjoy it too: > > http://www.spale.com/quiz/ > > The first 3 levels are easy, but then it is just getting > interesting... :-) If you need some hints to reach Level F (yes, there > are 16 steps), you are welcome on irc.swinog.ch, #swinog. > > Thanks to Spale for that nice crazy toy! Of course do not start now > if you plan do some real work this morning... > > Regards from somewhere between Olten and Lausanne, Olivier > > PS: SBB/CFF-MMS Tickets are really working :-) > > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > > _______________________________________________ > swinog mailing list > swinog(a)lists.swinog.ch > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog > _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -------------------------------------------------------- 10 Jahre Online Consulting AG Seit Mai 1996 ist Online an Ihrer Seite - Wir danken allen herzlich, die zu unserem Erfolg und zehnjährigen Firmenbestehen beigetragen haben! --------------------------------------------------------

2 1

(no subject)
by Olivier Mueller 12 Aug '06

12 Aug '06

Good morning! Everybody on the #swinog chan already knows about it, but you will certainly enjoy it too: http://www.spale.com/quiz/ The first 3 levels are easy, but then it is just getting interesting... :-) If you need some hints to reach Level F (yes, there are 16 steps), you are welcome on irc.swinog.ch, #swinog. Thanks to Spale for that nice crazy toy! Of course do not start now if you plan do some real work this morning... Regards from somewhere between Olten and Lausanne, Olivier PS: SBB/CFF-MMS Tickets are really working :-)

4 3

URI extractor script
by Jean-Pierre Schwickerath 10 Aug '06

10 Aug '06

Hello, on the NANOG-List people are currently slaughting each other in matters of RBL-Usage and -Policy. This reminded me of a project I've been wanting to start for a long time. Does someone have a decent script that would extract URIs from mails that have been classified as spam in order to feed an URIDNSBL with it? Regards. Jean-Pierre -- HILOTEC Engineering + Consulting AG Energietechnik und Datensysteme Tel: +41 34 402 74 00 - http://www.hilotec.com/

2 1

Hoi
by Nico -telmich- Schottelius 09 Aug '06

09 Aug '06

Hello together! Just wanted to say 'hoi' to everybody! Was a nice meeting the day before yesterday, I hope to see you all again in about one or two months! Nico -- ``...if there's one thing about Linux users, they're do-ers, not whiners.'' (A quotation of Andy Patrizio I completely agree with)

1 0

[update] *SPECIAL* SwiNOG-BE40 - BBQ/Beer Event 40 - 7th of August @ Oerlikerpark Block this subject
by Glogger Steven 09 Aug '06

09 Aug '06

hi all since the weather is quite bad we will go to the "Outback" at Bahnhof Stadelhofen. so the BBQ is cancelled. registration is still open until 12:00 - then i have to make the reservation. greetings -steven

2 1

Selling hardware...
by Daniele Guazzoni 07 Aug '06

07 Aug '06

Would someone please remove Knowledge Computers from the list ? During the last discussion regarding what is allowed to be posted for sales we got an agreement. see http://lists.swinog.ch/public/swinog/2006-May/subject.html "Rules for used hardware selling" Knowledge Computers is definitely no ISP nor it has in any way something to do with Switzerland. Actually if they would send e-mail to my account they would be tagged as spam... Daniele -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

7 7

New SwiNOG Member
by Viktor Steinmann 03 Aug '06

03 Aug '06

Hi all I'm glad to announce, that SwiNOG has a new member: Jonas Justus Steinmann was born yesterday (2.8.2006) at 07:53. He's 50.5 cm, 2780g and healthy. Cheers, Viktor P.S.: If anybody wants to visit us, please contact me first off-list.

7 6

NPE-G2 for sale
by Sarpreet 01 Aug '06

01 Aug '06

Hi All, I have a few NPE-G2 available to sell if there is any interested. NPE-G2 $12,225 USD (NEW) Cheers, Sarpreet Basi Knowledge Computers Email: sar(a)knowledgecomputers.net Toll-free: 800.967.6609 x102 International: 250.748.0818 x102 Fax: 250.748.3388 Mobile: 250.709.0336 AOL IM: sarpreetb MSN: sarpreet(a)hotmail.com www.knowledgecomputers.net

1 0

Cern power outage
by Thomas Kernen 29 Jul '06

29 Jul '06

Either everyone is asleep or no one noticed ;) but there is an ongoing power outage at Cern that started around 7:04 UTC this morning. Thomas

3 2

Cern power outage
by Jon Nicholas 29 Jul '06

29 Jul '06

Yes we noticed - if I'm not mistaken its the third time this year. We lost our IP-Plus connection as a result. But when I called the Swisscom IP-plus Helpdesk at 10:15 this morning they denied there was any problem. Regards Jonathan Safe Host - Geneva

1 0

Open job position (Network engineer)
by Michel Renfer 29 Jul '06

29 Jul '06

Hi All! Finecom Telecommunications has a new job position in the network engineering team. We will bring: - Workplace in Biel (Directly at the central railway station) - Job inside a small team - etc :-) You should bring: - Good cisco know-how and operational experience - Familar with technologies like IP, OSPF, BGP4, MPLS, DOCSIS - Language: German / English / French For more informations or further questions please contact me offlist (michel.renfer(a)finecom.ch). cheers, mike

1 1

I think we must change to france
by Xaver Aerni 28 Jul '06

28 Jul '06

"Presence-pc at reports that France Telecom just announced they are offering 2.5 Gb/s internet connection to select cities in the Paris region. For... $85(70 Euros) a month you also get free phone and TV. >From the article (in French): "The historical operator opted for a GPON (Gigabit Passive Optical Network) FTTH architecture (Fiber To The Home). This technology allows up to 2.5 Gbits/s download and 1.2 Gigabits/s upload.""

6 8

7970G SIP
by Richard Klingler 28 Jul '06

28 Jul '06

Afternoon (o; Was anyone lucky getting the 7970G with SIP image working with Asterisk? Or for now better to stick with the SCCP image? cheers and a cool weekend (o; rick

3 3

Berne Beer Event No. 4!
by Nik Hug 28 Jul '06

28 Jul '06

Hello everybody It's time to announce the forth Berne Beer-Event, also known as BE2-Event 4 The proposal is as usual: - Location: Altes Tramdepot Bern [1] - Date: Friday 2006-07-28 - Time: starting 18.00 until ? - Attendees: the usual (network and servers admins...) also non-swinog members are welcome (feel free to forward this email to colleagues) [1] http://www.altestramdepot.ch/ Please give me a short feedback if you will attend in order to make a reserveration as early as possible. Regards, Nik

1 1

Happy Sysadmin Day!
by Michele Capobianco 28 Jul '06

28 Jul '06

Hey all I wish all Admins a nice Sysadmin Day and lots of Gifts! Here is the official website www.sysadminday.com I made yesthurday evening in this small one www.sysadminday.ch (sorry, only in german) More content will come soonish (i hope) See ya Michele -------- Online Consulting AG, Michele Capobianco, System Administrator, Weststrasse 38, CH-9500 Wil Phone +41 (0)71 913 31 31, Fax +41 (0)71 913 31 32 http://www.online.ch, mailto:michele.capobianco@online.ch -------- -------------------------------------------------------- 10 Jahre Online Consulting AG Seit Mai 1996 ist Online an Ihrer Seite - Wir danken allen herzlich, die zu unserem Erfolg und zehnjahrigen Firmenbestehen beigetragen haben! --------------------------------------------------------

1 0

Out-of-Office Policies?
by Matthias Leisi 26 Jul '06

26 Jul '06

Hi there, I'm trying to gather arguments to stop the Out-of-Office notification nonsense. I know the technical arguments against OoO and other forms of auto-responders, but I'm interested to learn how different organisations are handling it. If you don't want to answer publicly, please respond to me directly (matthias(a)leisi.net - remember that the Swinog list overrides my Reply-To: header). I will respect any requests for anonymous handling, but I will send a summary to the list. You may also answer in verbose form instead of using the questionnaire below :) My questions: 0. What kind of organisation are you answering for (eg for your ISP staff, for your ISP customers, for your company users etc.)? About how many users do you handle? 1. Does your organisation allow OoO to external recipients? If you answer no to question 1, no further questions required :) If you answer yes, please continue below: 2. Do you have any restrictions as to when/how OoO notifications are sent? [ ] No restriction _or_ [ ] No OoO to detected spam [ ] OoO only to senders in the user's address book [ ] Only to senders with matching SPF/DKIM/Sender-Id etc [ ] Other restriction: 3. Have you had any DNSBL listings due to OoO notifications? If yes, which DNSBLs? 4. How do you send out OoO notifications? [ ] No special handling [ ] Over a dedicated IP address Thanks a lot for your contribution, -- Matthias

4 3

Cisco 876
by Richard Klingler 25 Jul '06

25 Jul '06

EHLO (o; Someone got by any chance 1 876 on his desk he wants to get rid of? (o; thanx in advance rick

1 0

Preventive blocking
by Michel Renfer 22 Jul '06

22 Jul '06

Hi All Anyone saw the "10vor10" -report about blocking access to child pornographic sites yesterday evening? I'm really surprised, that bigger ISPs like Cablecom now would support that. Interesting is also the statement, that smaller ISPs already confirmed their support for this "preventive blocking"... Article on SWISSTXT: http://www.swisstxt.ch/SF1/114-00.html 10vor10 Report: http://www.sf.tv/var/videoplayer.php?videourl=http%3A%2F%2Freal.sri.ch%2 Framgen%2Fsfdrs%2F10vor10%2F2006%2F10vor10_21072006.rm%3Fstart%3D0%3A14% 3A27.159%26amp%3Bend%3D0%3A17%3A33.736 cheers, michel

6 6

Re: [swinog] Preventive blocking
by Rudolphi 22 Jul '06

22 Jul '06

Blocking is as well political activism as nonsense, as long as many of the childporn-sellers set up as many as 20 sites a day on yahoo. These sites are pointing on perfectly legal sites on which one can make a payment for receiving a password which enables user to get into a p2p-network where the cp-material is distributed. Furthermore: ISPs would have to update the list all day and night - a neverending job. And as long as some police departments in some other countries are setting up cp-sites as a trap and therefore are actively distributing child pornography, the whole "plan of action" as described in TV becomes pretty weird. Are elections soon? But anyway, if Cablecom _really_ wants to block all these sites, the responsible guy may contact me off-list. I'll be glad to send him may daily harvest of cp-addresses :-p guido ____________ Ursprüngliche Mitteilung ____________ Betreff: Re: [swinog] Preventive blocking Autor: Fredy Kuenzler <kuenzler(a)init7.net> Datum: 22. Juli 2006 18.32.21 Michel Renfer schrieb: > There were a few approches until now, already with low success or > technical implications (other sites also blocked, etc.) > > The discussion now happend on society level. Any bigger ISP will > never offically reject such blocking requests for child pornography > in a tv interview as this can hardly hit their image in the public. > > The technical questions of the blocking are completly fadet out. They > didn't really care anyone. Blocking can and will definitivly not > work. Endusers can implement workarrounds in less than a minute. > Other questions like, who's maintaining the list etc. are not even > discussed. > > I'm really concerned about the way that this story will/ can go... Full Ack. After this letter arrived, I wrote a blog entry: http://www.blogg.ch/index.php?/archives/444-Kampagne-Stopp-Kinderpornografi… Few days later I got a call from the journalist of SF who did the report in 10vor10. Means: the journalist was perfectly aware of all the technical and political issues in this case, but he masked out it completly. IMHO a bad job, 10vor10. F. _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

1 0

*SPECIAL* SwiNOG-BE40 - BBQ/Beer Event 40 - 7th of August @ Oerlikerpark Block this subject
by Glogger Steven 21 Jul '06

21 Jul '06

hi all yesss.. already the 40th beer event and its summer! so be prepared for another great swinog-beer and grill event ;-) we go again for this BBQ event Oerlikerpark (near Center Eleven / Zurich Oerlikon). Link for registration http://swinog.mrmouse.ch/ please read the whole e-mail - there are some important informations :) when is it? ------------ 7th of august at around 18.30 - until.. well..open end ;) Registration deadline: 06.08.2006 24:00:00 ok, the registration deadline is kind of obsolete. anyone who wants to come just comes. we have enough space ,-) (but for the restaurant in case of bad weather it's quite important) what to food / drink? ----------------------- quite simple: what you bring with you is what you can eat and drink. some ppl are sponsoring some things, but don't rely on that. we will have some grills and some place to seat. since i'm just coming back from holidays one day before the event i might not be able to get some charcoal but i will at least sponsor some one-way-usable-trow-away grills. and for sure i'll bring the little ventilator ;-) (thanks another time to roman ;-)) so, if you register and you want to contribute something for others please note it to the "COMMENTS" field when registering. this is very helpful for others to know, that to bring ;-) this could be: - beer - some hot sauces (venty?) - chips & snacks - good mood - bread - desserts - salads - etc.. where is it? ------------- http://www.gis.zh.ch/gb4/zvv/zvv.asp?zvv=ja&hst=0103789 it's in the 'Oerlikerpark' near Center Eleven / Zurich Oerlikon. with the bus 64 or 75 from bahnhof oerlikon until 'Bollingerweg'. or you come with the bus number 80 until 'Birchstrasse' and then walk behind the credit suisse building. ith the car you might park in the Parkhaus Octavo (in the CS building) or in he near of the center eleven (coop; 5min away and has open until 20.00). see pictures on http://gallery.glogger.ch/swinogbe16 problems (!!!): --------------- there is NO public toilet in the near. so please consider this before leaving for the BE ,-) there might be some toilets walking some minutes around ;-) if there is (very) bad weather: -------------------------------- On Bad weather (will be communicated on the same day around noon) we go to the "Outback" Bahnhof Stadelhofen if the weather is very bad on that date we would move to the "Outback" at Bahnhof Stadelhofen. I will make an email until 12:00 about the change if necessairy and update the website. If someone cannot find us: call me on my handy: 079 / 277 92 35 greetings -steven

2 1

isp evaluation in Shanghai
by Frédéric Jutzet 19 Jul '06

19 Jul '06

Hi All, Any personal experience, top-x report, to select a good ISP (broadband with business services, or only business product) in Shanghai ? Thank. Best regards. Frédo

2 1

SwiNOG-BE39 - Beer Event 39 - 17th of July 06 @Pumpstation / Zurich Lake
by Glogger Steven 13 Jul '06

13 Jul '06

dear swinogers sorry i'm a little bit late with this mail. but in one of my last posts i told you to reserve the 17th :) anyway, deadline is sunday 18:00 for reg. some important words: ====================== since we're reserving at the pumpstation, and officially we're not allowed to reserve any table there, we have to be really on time. i have to give up the remaining space around 18:45/18:50. so, if you're not punctional it might be that your seat is already gone and you'll organize a new seat by yourself... we've had some troubles with the restaurant last year because people came too late, we've had an almost empty table around for about an hour. this is bad for their business and this is bad for us (no reservations anymore...). if you're not sure if you'll be on time just drop a note to the comment field... the facts for the next event: ----------------------------- Date: 17th of July 2006 Time: starting around 18.30 o'clock Location: @lake in restaurant "Pumpstation" (see image; www.pumpstation.ch) On Bad weather (will be communicated the same day around noon) we go to the "Outback" Bahnhof Stadelhofen Registration deadline: 16.07.2006 18:00:00 Registration: ------------- Please register here: http://swinog.mrmouse.ch/ Since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap. Important: If someone cannot find us: call me on my handy: 079 / 277 92 35 greetings -steven

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog