March 2013 - skunkworks - Skunkworks Site

Postfix and SpamAssassin - SPAM mail filling server queues despite blacklisting rules
by ndungu stephen 22 Mar '13

22 Mar '13

Hi gurus; I am new to Postfix,Amavis,SpamAssassin ; spam mail have been filling up our server - filling up the hardisk, and queues with useless mail that seem to be from self spawning domains and email addresses. This is preventing genuine email from functioning properly. However, I followed instructions on the net to do "soft blacklisting" and "hard blacklisting" - but it does not seem to work. I am assuming soft blacklisting gives an email a maximum number of hits before the address is given low priority and eventually blocked out. I also assumed hard blacklisting totally prevents a domain from sending email and filling up the queues. What to do to stop these domains from sending emails permanently ? ---------- LOGS ---------- *Blacklisting Rules: *on /etc/mail/spamassassin/local.cf blacklist_from t.co hotmail.com jhdgsndhj.com sgnbxhfghd.com hjsnbfg.com snybfhf.com 265kt.com 10t1v.com q9cho.com d10vx_.com jhdgsn dhj.com snybfhf.com djsnhdh.com hjndgsycfs.com jhgsnvdgh.com dhjgnsghfs.com sgnghfsg.com sgnhscgfs.com ucidgsnhcvds.com jhcgsngfdgh. com hydgsnhcvdsngh.com jhgsnhsxffg.com hycgndsgjfdg.com eungfyuds.com 2udfwnw.com blacklist_to t.co hotmail.com jhdgsndhj.com snybfhf.com sgnbxhfghd.com hjsnbfg.com djsnhdh.com hjndgsycfs.com jhgsnvdgh.com dhjgnsgh fs.com sgnghfsg.com sgnhscgfs.com ucidgsnhcvds.com jhcgsngfdgh.com hydgsnhcvdsngh.com jhgsnhsxffg.com hycgndsgjfdg.com eungfyuds.com 2udfwnw.com *Blacklisting Rules Global:* /etc/amavisd/amavisd.conf @score_sender_maps = ({ # a by-recipient hash lookup table, [ # the _first_ matching sender determines the score boost new_RE( # regexp-type lookup table, just happens to be all soft-blacklist [qr'^(bulkmail|offers|cheapbenefits|earnmoney|foryou)@'i => 5.0], [qr'^(greatcasino|investments|lose_weight_today|market\.alert)@'i => 5.0], [qr'^(money2you|MyGreenCard|new\.tld\.registry|opt-out|opt-in)@'i => 5.0], [qr'^(optin|saveonlsmoking2002k|specialoffer|specialoffers)@'i => 5.0], [qr'^(stockalert|stopsnoring|wantsome|workathome|yesitsfree)@'i => 5.0], [qr'^(your_friend|greatoffers)@'i => 5.0], [qr'^(inkjetplanet|marketopt|MakeMoney)\d*@'i => 5.0], [qr'^(sex|fck)\d*@'i => -5.0], [qr'.*(a)\.*\.hotmail\.com$'i => -10.0], [qr'.*(a)\.*\.yahoo\.com$'i => -10.0], ), This does not seem to work (see active queues) - always close to 20000 (saturation) with useless domains. T 5 10 20 40 80 160 320 640 1280 1280+ TOTAL 19979 0 4 890 3237 3470 2085 140 51 5110 4992 yahoo.com 6803 0 0 222 925 536 942 37 0 2308 1833 eungfyuds.com 467 0 0 52 186 227 0 0 0 0 2 coldthree.ru 422 0 0 0 0 0 0 0 0 0 422 top10new.ru 371 0 0 0 0 0 0 0 0 0 371 hjsgvnbfcgf.com 336 0 0 36 123 177 0 0 0 0 0 jhgvsnghsvg.com 313 0 1 30 117 164 0 0 0 0 1 dhgnvdbcfgf.com 302 0 1 37 111 153 0 0 0 0 0 suynghjfsngf.com 295 0 0 34 120 139 0 0 0 0 2 hygtjdfsfds.com 275 0 1 40 109 119 0 0 0 1 5 uysdgnhjgfh.com 274 0 0 30 110 128 0 0 0 0 6 wehjnsvcghfdg.com 262 0 0 39 102 119 0 0 0 0 2 jgswnhd.com 223 0 0 24 102 97 0 0 0 0 0 jdgsngdfgh.com 215 0 1 19 91 102 0 0 0 0 2 jdsgngyd.com 213 0 0 21 99 90 0 0 0 0 3 uficdgsnjgdg.com 190 0 0 25 74 91 0 0 0 0 0 dugnhdff.com 185 0 0 26 80 79 0 0 0 0 0 judgsyfdg.com 184 0 0 19 96 69 0 0 0 0 0 jdegngdfgh.com 184 0 0 23 80 79 0 0 0 0 2 cauen.com 174 0 0 0 0 0 172 2 0 0 0

7 10

Linksys WRT54G Administration
by Bwana Lawi 22 Mar '13

22 Mar '13

Hi guys, For some reason I cant access the router management page via browser ( http://192.168.1.1) Anyone with any idea why this is happening? I can access the router via telnet. The ISP that provided the router claims that this router does not have a browser interface and we must do all the management via telnet. Router: linksys wireless G wrt54g

3 4

Computer Networking
by Andrew Nduati 21 Mar '13

21 Mar '13

Evening, Does anyone know of a website with accurate and up-to-date information on computer networks? Both theory and practical.

2 1

iebc network compromise: an insiders view
by Bogi Benga 21 Mar '13

21 Mar '13

http://www.wanjiku.co.ke/2013/03/was-the-iebc-network-compromise-an-insider…

6 7

Safaricom SDP
by Simon Mburu 21 Mar '13

21 Mar '13

Hi Guys, Is anyone working with the Safaricom SDP? Is it true that you have to use only IE8 or lower? I think this is preposterous

5 5

Fwd: Kenya’s PKI Destined for Failure?
by Brian Munyao Longwe 21 Mar '13

21 Mar '13

Any comments from the skunks? ---------- Forwarded message ---------- From: Brian Munyao Longwe <blongwe(a)gmail.com> Date: Wed, Mar 20, 2013 at 6:06 PM Subject: Kenya’s PKI Destined for Failure? To: KICTAnet ICT Policy Discussions <kictanet(a)lists.kictanet.or.ke> Disclaimer: All the opinions expressed herein are my own. #140friday <http://140friday.com> » Business <http://140friday.com/?cat=3>» Politics <http://140friday.com/?cat=6> » Technology<http://140friday.com/?cat=8>» Kenya’s PKI Destined for Failure? March 20, 2013 Kenya’s PKI Destined for Failure? Today I had the opportunity to attend a seminar organized by the Ministry of Information & Communications and Samsung SDS as part of the implementation of Kenya’s National Public Key Infrastructure (NPKI). The project is undertaken within the framework of the Kenya Transparency & Communications Infrastructure Project (KTCIP), a World Bank funded initiative that will help Kenya achieve a number of the goals under the ICT pillar of Vision 2030. The presentations from the team from Korea consisted of representatives of Samsung SDS (who won the International tender for Kenya’s NPKI implementation) as well as representatives from some of the key actors in Korea’s own NPKI. The Korean presentations were interesting, informative and very well prepared. Over the period of a few hours they were able to take the relatively complex subject of National Public Kenya Infrastructure and unpack it in a way that was both easy to understand as well as clear and straightforward. They left no shadow of doubt as to whether Samsung SDS can successfully implement this project. They also shared the organizational structure for the project, which is as follows: [image: CAM00454]<http://140friday.com/wp-content/uploads/2013/03/CAM00454.jpg> During the course of their presentations the team from Korea shared the high level plan for the implementation of Kenya’s SDS. They made it clear that they had spent a good deal of time working closely with Government officials responsible from the Kenyan side. In describing the structure and hierarchy that has proven successful in Korea for the implementation and operation of their NPKI, the team shared the following diagram. [image: CAM00455]<http://140friday.com/wp-content/uploads/2013/03/CAM00455.jpg> At the very top, there is the Ministry responsible for the NPKI, they provide the legal and regulatory framework, national authentication plan and other high level functions. Below them is the “Root Certification Authority” an organization known as the Korea Internet Security Agency (KISA), which provides operation of the National Authentication system, licensing/accreditation of certificate authorities (CA) to provide service to the public as well as development of technical standards. Below them are the accredited CAs of which Korea has 5 who provide certificate issuance and management services to the public. In a presentation which came later, the Korean team shared the proposed structure for the Kenyan implementation which had been arrived at after consultations with Government. The diagram is as follows. [image: CAM00457]<http://140friday.com/wp-content/uploads/2013/03/CAM00457.jpg> In this structure, Government who will be responsible for legal and regulatory framework, national authentication plan, other high level functions as well as licensing and auditing are to be represented by the Communications Commission of Kenya (CCK). Below them and responsible for operation of the Root Certification Authority is CCK. Below that are a proposed “Government CA” which will issue certificates for Government agencies and employees and a proposed “Private Sector CA” which will issue certificates to the rest of the country. I have a big problem with this structure. First and foremost because CCK is being proposed as BOTH the licensing authority as well as the licensed operator of the Root Certification Authority. The potential for conflict of interest is immediately evident, not to mention the fact that the end-to-end integrity of a structure that ensures top-down accountability is rendered completely void. Even worse was the mumbled suggestions by some of the government participants at the seminar that CCK might also act as the Government CA. In addition that is the fact that a project as crucial as this has not gone through a proper stakeholder consultative process and is seemingly being shoved down our throats. In his closing remarks a director a the E-Government directorate asked the ICT Board to engage stakeholders further and receive input before moving too far. I raised this point as a question during the Q & A session at the end of the seminar and would like to emphasise that it would be *very wrong* for CCK to be the Root Certification Authority for a number of reasons: 1. *Conflict of Interest:* As per the proposed structure the representative of Government, CCK needs to serve as the top level entity that handles the legal and regulatory framework and the national authentication plan. Adding a subsidiary role would not only compromise their integrity but would also expose them to all manner of challenges with regards to operation of an infrastructure that is supposed to be based on trust. 2. *Procurement Issues:* In sharing to a certain level of detail the complexity of the Root Authority setup, it became evident that there would be a continuous need for procurement of various goods and services. As a government agency, CCK is subject to public procurement regulations, this means that even very basic, small and simple items could take months if not years to procure. The problems with our public procurement are well known. Subjecting the Root Authority to this kind of environment is in itself a major risk for successful implementation and operation. 3. *Human Resource Issues:* Several times in their presentations the Koreans complained that they had observed a critical lack of human resources. They emphasized that they were not referring to *skilled*human resources but simply to *enough people* for the project requirements. Shock of shocks! With the incredible numbers of well educated Kenyans who are unemployed or underemployed? They could obviously have only been referring to what they had seen as far as the people available for the project from the Ministry and CCK. It is no secret that CCK has extremely limited human resources in their ICT division and those few are oveworked, stretched beyond measure and juggling multipe roles. Isn’t adding additional responsibilities into this mix a formula for disaster? 4. *Inertia*: CCK has proven to be very poor at the timely execution of functions that fall outside their core mandate of licensing, regulation and resource management. A perfect example is the implementation of the Universal Service Fund, which CCK insisted on handling as an inhouse function instead of facilitating the setup of a dedicated entity to handle the task. It has been over 6 years since regulation and legislation regarding the USF came into place and there is still nothing to speak of. I will reserve this as a subject for another day (it is a long and detailed one!) *Recommendations* The Government should immediately consider adopting a *Public Private Partnership* approach for the implementation of Kenya’s NPKI. This is especially timely because we now have a fully ratified Public Private Partnership Policy that provides a variety of models for project implementation. This will not only ensure involvement from crucial stakeholders but also free the Root Authority from the problems highlighted above (and probably many others) while at the same time ensuring that enough private sector energy and enthusiasm is infused into the project so that it moves with speed and determination. Success stories such as KENIC and TEAMS show that it is not only possible but that it can be done with ease.

6 8

zip drive
by Ronnie kilel 21 Mar '13

21 Mar '13

Anyone with a zip drive need to read so backup done by a zip drive -- Thanks *Ronnie Kilel* ronniekilel(a)gmail.com *squeaky wheel gets the grease** *

1 0

Under 16 drivers wanted
by The Awakening . 21 Mar '13

21 Mar '13

http://www2.mercedes-benz.co.uk/content/unitedkingdom/mpc/mpc_unitedkingdom…

2 1

DNS troubleshooting FYI
by nerdalf 21 Mar '13

21 Mar '13

Hi people....... and robots, Came across this infographic the above refers check it out http://bit.ly/10c9qsA maybe even print it and stick it on your wall :-D :-D -- *"One who ask questions is a fool for five minutes one who doesn't is a fool forever."*

1 0

Mozilla Dev Derby
by Stephen 21 Mar '13

21 Mar '13

Hi folks, May I introduce to you the Mozilla dev Derby whichis a monthly web development contest open to anyone willing to learn. Visit https://developer.mozilla.org/en-US/demos/devderby for details. Cheers, Stephen Mozilla Representative

1 0