Sunday, May 11, 2008

Well then lets just go!

The family woke up Saturday morning and just decided to take off and go humping (hiking for you non combatants) up to Tannehill Historical State Park. If you live near Alabama and haven't been there it is beautiful this time of year. It was good leaving behind what I could of technology and just wondering through the woods. I of course couldn't leave it all behind being I am on call this weekend and the pager had to go nuts, but we had a great time. We will be going back soon, this month on the 24-25th they will have Civil War reenactments. If you have never seen this before, it is like stepping back in time... but with a pager.

 

 

Technorati Tags: ,

Whitelisting should be last resort!

I get tired of people trying to sell their spam filtering and all they do is turn up every filter so that all email is marked/quarantined as spam and they expect you to whitelist everything you want to get.

So what is whitelisting? Well it is a list of accepted items, in this case email address or domains. When whitelisted an emails skip the filtering so that they are delivered. If I wanted to make sure that any email from z3r010v3@gmail.com would get delivered to me I could whitelist the whole email or I could whitelist @gmail.com and then it would always get to me. This is not the way to do it, I believe whitelists should be a last resort.

With computers being infected with viruses that allow spammers to send emails from them, and email servers configured wrong allowing for open relays there is always a chance a domain you have whitelisted will spam you. To top it off most whitelist use the "From" address and this is easy to bypass. I had a client for example that whitelisted *@*.gov so that all emails from anything ending in .gov would get through. That is fine till you have a person complaining at the clients office because they are getting spam from not.a.real.host.gov. Then you have spammers that are smart and figure out what email address to use based on the company. For example here in Alabama lawyers always want to whitelist alacourt.gov, yea didn't take spammers long to figure out they could spam any law office in Alabama if they just used the alacourt domain for their email address.

The same that goes here for whitelisting also applies to blacklist. I have had clients inadvertently blacklist everyone at aol.com or gmail.com. So the same goes here for blacklisting.

If you do not trust your rules and filters  work at them more. Don't just start whitelisting every tom, dick, and harry.com

Technorati Tags: ,,

Saturday, May 10, 2008

Stop the Backscatter, er Joe Jobs!

Vbounce is the weapon!

What ever you are going to call it as some call it backscatter and some call it Joe Jobs, well it is annoying. People where complaining, it was an direct attack of this junk. No fear tho, I have added to my Ninja weapons. This time, I have activated.... vbounce. It was really that easy since it comes with Spamassassin 3.2.x and you are using that version right? Well you should be.

Configure

/etc/mail/spamassassin/v320.pre

Change:

# VBounce - anti-bounce-message rules, see rules/20_vbounce.cf
#
#loadplugin Mail::SpamAssassin::Plugin::VBounce

to

# VBounce - anti-bounce-message rules, see rules/20_vbounce.cf
#
loadplugin Mail::SpamAssassin::Plugin::VBounce

and then turn on if you have not shortcircuit see Justin Mason's entry at the Spamassassin Wiki here.

Then in /etc/mail/spamassassin/local.cf add
whitelist_bounce_relays myrelay.myhost.net you should add every server that sends email on your behalf. You must enable this or none of this will work correctly. Now also in /etc/mail/spamassassin/local.cf add score BOUNCE_MESSAGE 5.0.

What it does

So now when backscatter comes in, we are going to check and see if it came from one of our servers. If it does then we are going to mark it with vbounce and send it on in. Now if it is not from one of our servers it is going to hit BOUNCE_MESSAGE and get marked spam. I have enabled this on all my servers and have not yet got another complaint. This is one of those tools I think are going to be very important.

Monday, May 5, 2008

Twitter and the masters of the Twitterverse!

 

I've been using Twitter for a while now, and I know when it is something that I believe is going to be useful when I tell my wife about it and sign her up. So if you are not using Twitter yet, let me tell you what it is.

Well it isn't IM, and yet it is. It isn't a blog and yet it is. And it isn't a way to keep up with someone and find friends, and yet it is.

It is a way to chat with friends, meet new friends, keep up with people and read about what others are doing.

You can use Twitter via their web site, its real easy to sign up and get an account. I'm not going to go into that part of it here. Trust me it is simple. Once you have it then you can just use it to post your messages on the website. Then there is chat, using your favorite IM client (Pidgin) and your Google Talk account you can add a friend, twitter@twitter.com. Once you have done this, then you can chat your status/messages directly to Twitter. This doesn't stop here either. I can only speak as to what I have, but I have an T-Mobile Wing. Using it I can also SMS to Twitter, and I run ceTwit on the phone so when I have a network connection I can also send and receive twits. Twits are by the way messages from other people. We'll get into that in a minute. So I can send my updates and messages from web, chat, and phone while mobile.

Now when you add a friend, you can easily choose how you want to get updates. You can get them to any of the ways you can send, same as above web, chat, or phone. Just because you have a friend added you do not have to receive their chats via your phone for instance. You can set where you want to receive updates.  I have several people I follow, and some are really chatty or I just really don't want to know what they are talking about all the time. So I make sure not to follow them on chat and my phone. You can always check your Twitter site to see what people you are following have been saying.

A Blog you say? Yes it is a social blog. Remember what ever you chat on Twitter others will see. If you have clicked any of the Twitter links in this post you will see mine. It is NOT private, but then neither is IM unless you use a private server with encryption and we won't get into that.

It ends up being either a I love it! or an I don't get it? You will have to check it out for yourself to make that call. I also hear people saying it is a fad. I agree with that, but I see it leveling off in growth. I think it will stay around for a while. I can see a large company "Google" buying them. We will just have to wait and see.

Links for more information:

If you are a Birmingham Alabama Twitter user you can Follow Bhampulse (http://bhampulse.zerosource.org).

Twitters website is at http://www.twitter.com

Twitter Fan Wiki is at http://twitter.pbwiki.com/

 

Upcoming:

 Brightkite review, so far not looking good!

AndLinux nice... run Linux (Ubuntu) in windows

Sun VirtualBox good... acquired VM system

Technorati Tags: ,,

Wednesday, April 30, 2008

Let windows manage Linux Servers WTF!?!?!

Announcing System Center Operations Manager 2007 Cross Platform Extensions and Connectors

Of course not a lot of details but in essence Microsoft wants to manage your Linux Servers. Has someone lost their mind? I run Linux servers so that I don't have to deal with Microsoft servers? The most I want to use a windows machine to manage my Linux Servers is to be able to run SSH.

I believe Microsoft Servers have their place, don't get me wrong. I do not believe that place is however managing a Linux Server or having anything else to do with Linux except running SSH client.

Of course they could be making something where it will be easy for anyone to be able to run Linux. So we use something easy to install like Ubuntu, then run something that allows a windows server to connect and manage it from a MMC. No more knowing what is really happening, and or knowing how to run say vim. No more beating away at a config file. Just point and click! No more cli! Everyone will be able to run a Linux Server. So what would we put in front now to protect the MS Linux Servers?!? Will it make it reboot at least once a month now?

YOU HAVE UPDATED YOUR LINUX SERVER WINDOWS MANAGED! YOU MUST REBOOT TO HAVE CHANGES TAKE EFFECT!

Coming up I just got invite for Bright Kite, more information as I get a chance to use it. Thanks Mojo!

Technorati Tags: ,,

Sunday, April 27, 2008

The March for.... today!

 

So today we completed the March for Babies. It was very interesting mix of people. I was surprised on the number of people that showed up. You would have thought it would be more "organized" but it really wasn't. There was some items they took care of "Who raised the most money", "Who designed the best shirts", etc.. but other then that it was a free for all 5 mile walk. Some people cheated and cut across streets to get done faster and others just quit and had to be picked up by the bus. I am proud to say our whole team kids, wife, and friend all made it the whole way.  Here is a shot of the start.

 

march1

 

It was fun, but will we do it again. I'm not sure got some things to think about before we do.

 

Today was also my beautiful wife's birthday! She is great, seriously not just posting it here for point. She really is a great woman. I couldn't have asked for better.

 

Tomorrow Art Fest!

 

To all those that donated, Thanks. I appreciate it much. I hope the March of Dimes does great things with the money. We raised a good amount for a "Family Team".

Technorati Tags:

Thursday, April 24, 2008

ClamAV Update and Fix

So if you run ClamAV (and you should) to scan incoming email, the current release had some issue or did on several of my servers. The errors put out where:

cdiff.o(.text+0x190a): In function `cdiff_apply':
../shared/cdiff.c:984: undefined reference to `gzdopen'


cdiff.o(.text+0x1950):../shared/cdiff.c:994: undefined reference to `gzgets'


cdiff.o(.text+0x19a5):../shared/cdiff.c:1016: undefined reference to `gzclose'


cdiff.o(.text+0x19f5):../shared/cdiff.c:1010: undefined reference to `gzclose'


tar.o(.text+0xd4): In function `tar_addfile':
../shared/tar.c:82: undefined reference to `gzwrite'


tar.o(.text+0x109):../shared/tar.c:95: undefined reference to `gzwrite'


tar.o(.text+0x1a3):../shared/tar.c:111: undefined reference to `gzwrite'


etc..... then   


collect2: ld returned 1 exit status
make[2]: *** [freshclam] Error 1
make[2]: Leaving directory `/usr/local/src/clamav0.93/freshclam'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/local/src/clamav-0.93'
make: *** [all] Error 2


To fix recompile Zlib with --shared 


Don't forget to sponsor me for March of Babies use the Badge at the right to sponsor me. The walk is this weekend. 


The Birmingham Pulse is available and kicking online http://bhampulse.zerosource.org check it out!


Technorati Tags: ,,