search for: riping

ah, i banned his ass from our network a few weeks ago, same spew.. <p>Best Regards Dave St. John Mediacast1 Administration (720-641-7586) ----- Original Message ----- From: "Raymond" <rsteding@tecwise.com> To: <icecast@xiph.org> Sent: Sunday, November 10, 2002 1:29 AM Subject: Re: [icecast] Slava Shklyar <p>> Yes please get rid of the user Slava Shklyar.

Hi Duncan, > I think this is probably due to stack variables being output lazily, i.e. > when first used. For example, if you declare variables A and B but use B > first then probably B will get output to the LLVM IR first. I think you're right: I fixed my particular problem by initializing all stack variables. > I guess I could arrange for them all to be output in one fell

Looks like one of my name servers (CentOS 5) gets a lot of malicious queries. The cpu load is constantly about 3 %. I put on stricter limits on who is allowed recursive queries, but this does not affect the CPU load. I also updated bind. I temporarily turned on querylog (command: rndc querylog), and noticed that I get over 200 queries like this per second: > Aug 17 07:41:38 mx2

Hi all, for some strange reason, our still-under-test Asterisk deployment wants to contact the outside world and that raised some eyebrows here... Just a sample of our firewall log: -- ...a=DROPIN=eth0 OUT=eth2 SRC=192.168.36.199 DST=195.77.113.194 LEN=476 TOS=0x10 PREC=0x00 TTL=62 ID=39572 DF PROTO=UDP SPT=5060 DPT=62975 LEN=456 -- Why is this happening? We got no relationship with the DST

I have noticed that dragonegg sometimes allocates stack objects in a different order than they were declared in the source file. I experienced this behavior when compiling RIPE (https://github.com/johnwilander/RIPE) in the function perform_attack. Unfortunately, I haven't been able to reproduce this in a minimal example. (Note that when compiling RIPE with GCC, the order of stack

> I need this to make RIPE (https://github.com/johnwilander/RIPE) work. RIPE is > the "runtime intrusion prevention evaluator" and it is a program that performs > a lot of different attacks on itself. It relies on the order of stack > variables for its stack smashing attacks. Interesting, how much of other undefined / implementation-defined behaviors it uses then? :) --

What''s the difference between a newnotsyn DROP and a blacklist DROP? Also, there''s a web site (SRC=62.193.203.132) that has been trying to connect to port 25 for a couple of weeks now. Is there a way to get someone upstream to add a block to that site for a small fish like me?

Hi, in src/lib-smtp/smtp-address.c line 759 the localpart is compared with null_strcmp, which does not ignore the case. While this is the correct behavior (according to the RFC) it causes problems in real life. In my case the vacation notices are not sent, if someone writes to First.Last at ruhr-uni-bochum.de because :addresses contains (only) first.last at ruhr-uni-bochum.de. Regards,

################# VIRUS NOTIFICATION ################# A message you sent to bc@ripe.net contains a virus or a worm, and was not delivered. -- DATE : Tue, 2 Mar 2004 21:50:25 +0000 SUBJECT : Status VIRUS : W32/Rox-A -- It is possible your computer is infected without your knowledge. Please download a current virus scanner and check your computer. If you think it's an

Dear colleagues, experimenting with new amd64-based router we found strange re(4) behaviour when working in autoselect media mode: whenever promisc mode turned on, renegotiating occurs, leading to 3 to 45 (depending on STP settings on the switch) network unavailability. Moreover, some other re(4) setting changes seem to disturb link state unneededly (such as ifconfig re0 -vlanhwtag) The most

As I reported a while back rsync doesn't handle metadata (permissions and ownership) in dryrun mode. I offered to make a patch and that offer still stands. I didn't have the time for it until now and want to pick it up again. I had some ugly hack back then but I want to redo it in a clean way. I would like some input on my thoughts. IMHO, it would be ideally if the check for dry_run

I have Gentoo host where `ifconfig -a` prints long interface names truncated to 9 chars (there is closed bug report [1]). Unfortunately, `facter` uses `ifconfig -a` output to get list of interface names and because of truncation it generates `interfaces` fact with incorrect interface names. Also it fails to retrieve individual interface information with following message for each interface with

Colleagues, I have encountered a weird problem (FreeBSD 8.2, samba34-3.4.14). A user can create files in a samba share but cannot delete files from it (unless she is the owner of the file). The user is a member of a group with rwx permissions on this directory granted by a Posix ACL entry. The user can create and delete files in the directory from the shell on the file server (which is correct

Colleagues, I am running smbd in a setup described in http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html#id2604553 under "Winbind is not used; users and groups are local". Samba is running in the security=domain mode, but all Windows users are being mapped to Unix users in /etc/passwd. Now I need to run winbindd for Squid authentication. The problem is, as soon as

There is a samba compiled without winbind support, with the following options configured: workgroup = MYDOMAIN security = domain allow trusted domains = yes add user script = /usr/sbin/pw useradd %u -m -Y -M 755 When a Windows user MYDOMAIN\john connects to the samba server, he is mapped to the Unix user john. If there is no Unix user "john", it is created by the add user script. How

Just throwing out some thoughts here. I know Timo has high standards and is trying to make 1.0 bug free before calling it 1.0. But I want to argue for an earlier less perfect 1.0. Dovecot is already way past the quality of most 1.0 releases. So it is good enough by common standards. No one really expects a 1.0 release to be perfect. But - some people don't consider a product ripe until it

...ull the indices out > from Dovecot's feet. What passwordless access methods does Dovecot support? I'm more or less experienced with GSSAPI but for the present I would not like to set up a KDC somewhere on a box exposed to the Internet. > > You'll also get a lot of innocuous griping in the log files about > UIDVALIDITY and mailbox corruption, but they can be safely ignored. My mail goes through procmail, so Dovecot will not be the only one to touch the mboxes anyway. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN 2:5005/49 at fidonet http://vas.tomsk.ru/

It appears to be a low-level attack, not so frequent as to be banned permanently, just a number of times a day. I did google on this, and I gather it's looking for phpmyadmin. We've been getting one from one specific network in Russia for weeks Here are more information about 91.201.64.24: [Querying whois.ripe.net] [whois.ripe.net] <snip> % Information related to '91.201.64.0

Hi Karl, I would like to send you the output, but after installing strace on my FreeBSD, i get the following: <p>/usr/local/bin/strace -o output -s 100 -f /usr/local/bin/ices /usr/local/etc/icecast/ices.xml strace: open("/proc/...", ...): No such file or directory trouble opening proc file Is there another way to send you a trace? <p><p><p>On Mon, 2003-08-11

On 4/8/06, Dmitry Morozovsky <marck@rinet.ru> wrote: > On Fri, 7 Apr 2006, Mars G. Miro wrote: > > MGM> Greetz! > MGM> > MGM> I have an HP DL145 that I'm having problems with when connecting via > MGM> serial console. I think it's acpi-related. This is on 6.1-BETA4/amd64 > MGM> (5.X is the same also) > > [snip] > > It seems it's