Mac CLI copy and paste - use with unix pipes

| | Comments (0)

A ride in a B-17

| | Comments (0)

Today, Danae and I got a nice ride in a restored B-17 bomber. What a hoot! See the pictures here.

My favorite: Don't !@$!@ with Mom!

dfwm-b17.jpg

SSH server abuse

| | Comments (0)
Something started about 2 hours ago here; ssh scans for user "root" hitting all public IP's for gigo.com.
Looking at it with a packet sniffer, all IP's get hit in parallel; sometimes without port randomization from the other side.  Looking at the hosts, looks like they all have old sshd's running.  Can't even blame windows this time.

Expect connections to gigo.com to be spotty - sshd is getting overran.  gigo.com users:  I'd like your feedback on whether or not moving the SSH port would be a big impact to you. If it would be.. what if port 22 was open to specific subnets (ie where you work); or having a web CGI that re-enables port 22 for your current IP?

tsocks on the mac

| | Comments (0)
At work, we use socks proxies a lot.  I'm hoping to run some unix-y apps on the mac, "soxified" (where the app does not know it is being sent via socks).   Tonight I installed tsocks using the macports collection. This was my final working config (after beating my head on DNS being broken over and over):

local = 127.0.0.1/255.255.255.255
local = 192.168.1.0/255.255.255.0
server = 127.0.0.1
server_port = 1080
server_type = 5
tordns_enable = 0


tordns_enable had a crappy default; once I found and set it 0, things started to work over my socks tunnel on 127.0.0.1:1080.   I can now run "tsocks alpine" to run my mail client, for example.

If you are going to use IMAP on gigo.com, and you're going to use Mozilla, I recommend these options:

 

Tools -> Account Settings -> Server Settings -> "When I delete a message" is set to "Move it to the Trash folder"

Tools -> Account Settings -> Outgoing SMTP server -> [your server setting]    -- Set the port number to 587, and enable "TLS if possible".

 

Tools -> Options -> Advanced -> General -> Config Editor

   type "mail.imap.expunge_after_delete" and set the value to "true".

   (this will make sure the server actually deletes messages, not just marks them)


 

Restart thunderbird.

 

Moderating comments on the blog.

| | Comments (1)
!$%!@$ spammers.  All comments on my blog are now subject to approval before being shown.  No, I will NOT be used for your link spam.

Screen and the delete key

| | Comments (0)

Found on http://mike.magin.org/2008/02/20/making-the-delete-key-work-in-screen-termcap-capabilities/

This did however remind me of what was wrong. My termcap (well, terminfo) was missing the proper capability for the delete key. So, I looked what the terminal type claimed by OS X's Terminal.app was:
$ echo $TERM
xterm-color
I poked around some .screenrc examples and an old termcap file and composed this line to put in my .screenrc :
termcapinfo xterm-color kD=\E[3~

Windows and processes/ports

| | Comments (0)

I'm not a big windows head, so here are a few notes to myself next time I need them. These help identify what ports are in a "listen" state; and what processes own those ports.

To see listening ports: netstat -o -a -n

To see processes, open up windows task manager, view->select columns, and add "pid".

A gui process explorer that looks to be a good replacement for lsof (except for sockets):
Process Explorer

A gui lsof replacement for sockets only:
TcpView

Spam problem @ gigo

| | Comments (0)
Since midnight something has been posting spam via the web server; I've killed everything in the queue that was going outbound spam. Outbound mail to AOL, YAHOO, etc mail be delayed considerably (They blacklisted us due to the spam).  The entry point for it has been neutralized (and the vulnerable software is now on the ban list here).


imap server updated

| | Comments (0)
..for security reasons.  

Hollar if anything is still amiss.