Jump to content

TCH-Dick

Admins
  • Posts

    6,029
  • Joined

  • Last visited

Everything posted by TCH-Dick

  1. found this on google. THE BLACK SCREEN OF DEATH! TRAP 00000006 ===================== EXCEPTION ================================ tr=0028 cr0=00000011 cr2=00000000 cr3=000000000 gdt limit=03FF base=00017000 idt limit=07FF base=00017400 cd:eip=0008:412AC1B7 ss:esp=0010:00061FEB errcode=0000 flags=00010013 Cy NoZr IntDis Down TrapDis eax=023EE94A ebx=00401280 ecx=0000FE18 edx=534D0040 ds=0010 es=0010 edi=00461643 esi=00051D68 ebp=000609E8 cr0=00000011 fs=0030 gs=0000 I have not the faintest idea as to what all this means but I have a feeling that the "Cy NoZr Int Did Down TrapDis" bit might be telling me that the problem lies in the hard disk (though I'm probably talking through my heatsink and fan!). To solve the problem, take the following steps: - Set the Bios to boot from CD-ROM Place the XP CD-ROM in the drive. Boot the PC and when prompted tell it to boot from the CD. You are asked if you want to install Windows or go into Repair mode (Console Mode) - choose the install option. The procedure then detects that you already have Windows XP install and asks you if you want a new installation or if you want to repair the existing installation. Choose the latter option - REPAIR THE EXISTING INSTALLATION. Then you just sit back for half-an-hour. You may get occasional prompts regarding drivers for hardware installed or updated since the original installation and if you have those drivers on the hard disk you can do them at that point or later on as you prefer. This will fix the installation but you will then need to apply any Service Packs and ensure that you are fully up-to-date via Windows Update. The end result is a fully fixed installation that look and works exactly as it did before. During the process a reinstallation of Windows takes place although all the installed applications and data seem properly to be registered afterwards and nothing has been found to be missing. This problem has now occurred to me several times on two different PCs so the repair feature on the XP CD is worth its weight in gold. I'm pretty convinced that, for whatever reason, the boot sector plus some other stuff (that prevents FIXBOOT and.or FIXMBR from working) is being trashed but, whatever the reason, this solution has worked every time.
  2. Welcome to the team adnan!
  3. Yes 50 e-mails every 300 seconds, I would advise against mailman (my opinion is its not that good of a program) a much better program is Dada mail http://mojo.skazat.com/ You can configure it to send mail over time, so say you have 500 messages that need to go out, you can set it to send 50 every 300 seconds, that way you dont hit the cap and the mails go throgh rather than being denied.
  4. hog
  5. Just open ssi.php and it will include the directions to do this. ><?php /* +-------------------------------------------------------------------------- | IBFORUMS v1.2 | ======================================== | by Matthew Mecham | (c) 2001,2002 IBForums | http://www.ibforums.com | ======================================== | Web: http://www.ibforums.com | Email: phpboards@ibforums.com | Licence Info: phpib-licence@ibforums.com +--------------------------------------------------------------------------- | | > SSI script | > Script written by Matt Mecham | > Date started: 29th April 2002 | +-------------------------------------------------------------------------- */ /* USAGE: ------ Simply call this script via PHP includes, or SSI .shtml tags to generate content on the fly, streamed into your own webpage. To show the last 10 topics and posts in the news forums... include("http://domain.com/forums/ssi.php?a=news&show=10"); You can adjust the "show" attribute to display a different amount of topics. To show the board statistics include("http://domain.com/forums/ssi.php?a=stats"); To show the active users stats (x Members, X Guests, etc) include("http://domain.com/forums/ssi.php?a=active"); Syndication.. RSS: http://domain.com/forums/ssi.php?a=out&f=1,2,3,4,5&show=10&type=rss http://domain.com/forums/ssi.php?a=out&f=1,2,3,4,5&show=10&type=xml Will show last 10 topics in reverse chronological last post date order from all the forums in the comma separated list */ //----------------------------------------------- // USER CONFIGURABLE ELEMENTS //----------------------------------------------- // Root path $root_path = "./"; $templates_dir = "./ssi_templates"; $max_show = 100; // Maximum number of topics possible to show... $allow_syndication = 1; // To turn off, use $allow_syndication = 0; //----------------------------------------------- // NO USER EDITABLE SECTIONS BELOW //----------------------------------------------- error_reporting (E_ERROR | E_WARNING | E_PARSE); set_magic_quotes_runtime(0); class info { var $input = array(); var $base_url = ""; var $vars = ""; function info() { global $sess, $std, $DB, $root_path, $INFO; $this->vars = &$INFO; } } //-------------------------------- // Import $INFO, now! //-------------------------------- require $root_path."conf_global.php"; //-------------------------------- // Require our global functions //-------------------------------- require $root_path."sources/functions.php"; $std = new FUNC; //-------------------------------- // Load the DB driver and such //-------------------------------- $INFO['sql_driver'] = !$INFO['sql_driver'] ? 'mySQL' : $INFO['sql_driver']; $to_require = $root_path."sources/Drivers/".$INFO['sql_driver'].".php"; require ($to_require); $DB = new db_driver; $DB->obj['sql_database'] = $INFO['sql_database']; $DB->obj['sql_user'] = $INFO['sql_user']; $DB->obj['sql_pass'] = $INFO['sql_pass']; $DB->obj['sql_host'] = $INFO['sql_host']; $DB->obj['sql_tbl_prefix'] = $INFO['sql_tbl_prefix']; // Get a DB connection $DB->connect(); //-------------------------------- // Wrap it all up in a nice easy to // transport super class //-------------------------------- $ibforums = new info(); //-------------------------------- // Set up our vars //-------------------------------- $ibforums->input = $std->parse_incoming(); $ibforums->base_url = $ibforums->vars['board_url'].'/index.'.$ibforums->vars['php_ext']; //-------------------------------- // What to do? //-------------------------------- switch ($ibforums->input['a']) { case 'news': do_news(); break; case 'active': do_active(); break; case 'stats': do_stats(); break; case 'out': if ( $allow_syndication == 1 ) { do_syndication(); } else { exit(); } break; default: echo("An error occured whilst processing this directive"); exit(); break; } //+------------------------------------------------- // SYNDICATION! //+------------------------------------------------- function do_syndication() { global $DB, $ibforums, $root_path, $templates_dir, $std, $max_show; //---------------------------------------- // Sort out the forum ids //---------------------------------------- if ( $ibforums->input['f'] ) { $forums = explode( ",", $ibforums->input['f'] ); } else { fatal_error("Fatal error: no forum id specified"); } if ( count($forums) < 1 ) { fatal_error("Fatal error: no forum id specified"); } $sql_fields = implode( ",", $forums ); //---------------------------------------- // Number of topics to return? //---------------------------------------- $perpage = intval($ibforums->input['show']) ? intval($ibforums->input['show']) : 10; $perpage = ( $perpage > $max_show ) ? $max_show : $perpage; //---------------------------------------- // Load the template... //---------------------------------------- if ( $ibforums->input['type'] == 'xml' ) { $template = load_template("syndicate_xml.html"); } else { $template = load_template("syndicate_rss.html"); } //---------------------------------------- // parse.. //---------------------------------------- $to_echo = ""; $top = ""; $row = ""; $bottom = ""; preg_match( "#\[TOP\](.+?)\[/TOP\]#is", $template, $match ); $top = trim($match[1]); preg_match( "#\[ROW\](.+?)\[/ROW\]#is", $template, $match ); $row = trim($match[1]); preg_match( "#\[BOTTOM\](.+?)\[/BOTTOM\]#is", $template, $match ); $bottom = trim($match[1]); //---------------------------------------- // Header parse... //---------------------------------------- @header('Content-Type: text/xml'); @header('Expires: ' . gmdate('D, d M Y H:i:s') . ' GMT'); @header('Cache-Control: must-revalidate, post-check=0, pre-check=0'); @header('Pragma: public'); $to_echo .= parse_template( $top, array ( 'board_url' => $ibforums->base_url , 'board_name' => $ibforums->vars['board_name'], ) ); $DB->query("SELECT g_id, g_perm_id FROM ibf_groups WHERE g_id={$ibforums->vars['guest_group']}"); $group = $DB->fetch_row(); $ibforums->perm_id_array = explode( ",", $group['g_perm_id'] ); //---------------------------------------- // Get the topics, member info and other stuff //---------------------------------------- $DB->query("SELECT t.*, f.name as forum_name, f.read_perms, f.password FROM ibf_topics t LEFT JOIN ibf_forums f ON ( f.id=t.forum_id ) WHERE t.forum_id IN ($sql_fields) AND t.approved=1 ORDER BY t.last_post DESC LIMIT 0, $perpage"); if ( ! $DB->get_num_rows() ) { fatal_error("Could not get the information from the database"); } while ( $i = $DB->fetch_row() ) { if ( $std->check_perms( $i['read_perms'] ) != TRUE ) { continue; } if ($i['password'] != "" ) { continue; } $to_echo .= parse_template( $row, array ( 'topic_title' => str_replace( '', '&#', $i['title'] ), 'topic_id' => $i['tid'], 'topic_link' => $ibforums->base_url."?showtopic=".$i['tid'], 'forum_title' => htmlspecialchars($i['forum_name']), 'forum_id' => $i['forum_id'], 'last_poster_id' => $i['last_poster_id'], 'last_post_name' => $i['last_poster_name'], 'last_post_time' => $std->get_date( $i['last_post'] , 'LONG' ), 'timestamp' => $i['last_post'], 'starter_id' => $i['starter_id'], 'starter_name' => $i['starter_name'], 'board_url' => $ibforums->base_url , 'board_name' => $ibforums->vars['board_name'], 'rfc_date' => date( 'r', $i['last_post'] ), ) ) . "\r\n"; } echo $to_echo."\r\n".$bottom; exit(); } //+------------------------------------------------- // Import the stats! WOOHOO //+------------------------------------------------- function do_stats() { global $DB, $ibforums, $root_path, $templates_dir, $std; // Load the template... $template = load_template("stats.html"); $to_echo = ""; // Get the topics, member info and other stuff $time = time() - 900; $DB->query("SELECT * FROM ibf_stats"); $stats = $DB->fetch_row(); $total_posts = $stats['TOTAL_REPLIES']+$stats['TOTAL_TOPICS']; $to_echo = parse_template( $template, array ( 'total_posts' => $total_posts, 'topics' => $stats['TOTAL_TOPICS'], 'replies' => $stats['TOTAL_REPLIES'], 'members' => $stats['MEM_COUNT'] ) ); echo $to_echo; exit(); } function do_news() { global $DB, $ibforums, $root_path, $templates_dir, $std, $max_show; if ( (! $ibforums->vars['news_forum_id']) or ($ibforums->vars['news_forum_id'] == "" ) ) { fatal_error("No news forum assigned"); } require $root_path."sources/lib/post_parser.php"; $parser = new post_parser(); $perpage = intval($ibforums->input['show']) > 0 ? intval($ibforums->input['show']) : 10; $perpage = ( $perpage > $max_show ) ? $max_show : $perpage; // Load the template... $template = load_template("news.html"); $to_echo = ""; // Get the topics, member info and other stuff $DB->query("SELECT m.name as member_name, m.id as member_id,m.title as member_title, m.avatar, m.avatar_size, m.posts, t.*, p.*, g.g_dohtml, f.use_html FROM ibf_topics t LEFT JOIN ibf_posts p ON (p.new_topic=1 AND p.topic_id=t.tid) LEFT JOIN ibf_members m ON (m.id=t.starter_id) LEFT JOIN ibf_groups g ON (g.g_id=m.mgroup) LEFT JOIN ibf_forums f ON (t.forum_id=f.id) WHERE t.forum_id={$ibforums->vars['news_forum_id']} AND t.approved=1 ORDER BY t.tid DESC LIMIT 0, $perpage"); if ( ! $DB->get_num_rows() ) { fatal_error("Could not get the information from the database"); } while ( $row = $DB->fetch_row() ) { $row['post'] = str_replace( '<br>', '<br />', $row['post'] ); $to_echo .= parse_template( $template, array ( 'profile_link' => $ibforums->base_url."?act=Profile&CODE=03&MID=".$row['member_id'], 'member_name' => $row['member_name'], 'post_date' => $std->get_date( $row['start_date'], 'LONG' ), 'topic_title' => $row['title'], 'post' => $parser->post_db_parse($row['post'], ($row['use_html'] AND $row['g_dohtml']) ? 1 : 0 ), 'comments' => $row['posts'], 'view_all_link' => $ibforums->base_url."?act=ST&f={$row['forum_id']}&t={$row['tid']}" ) ); } echo $to_echo; exit(); } function do_active() { global $DB, $ibforums, $root_path, $templates_dir, $std; // Load the template... $template = load_template("active.html"); $to_echo = ""; // Get the topics, member info and other stuff $time = time() - 900; $DB->query("SELECT s.member_id, s.member_name, s.login_type, g.suffix, g.prefix FROM ibf_sessions s, ibf_groups g WHERE running_time > '$time' AND g.g_id=s.member_group ORDER BY running_time DESC"); // cache all printed members so we don't double print them $cached = array(); $active = array(); while ($result = $DB->fetch_row() ) { if ($result['member_id'] == 0) { $active['GUESTS']++; } else { if (empty( $cached[ $result['member_id'] ] ) ) { $cached[ $result['member_id'] ] = 1; if ($result['login_type'] == 1) { $active['ANON']++; } else { $active['MEMBERS']++; } } } } $active['TOTAL'] = $active['MEMBERS'] + $active['GUESTS'] + $active['ANON']; $to_echo = parse_template( $template, array ( 'total' => $active['TOTAL'] ? $active['TOTAL'] : 0 , 'members' => $active['MEMBERS'] ? $active['MEMBERS'] : 0, 'guests' => $active['GUESTS'] ? $active['GUESTS'] : 0, 'anon' => $active['ANON'] ? $active['ANON'] : 0, ) ); echo $to_echo; exit(); } //+------------------------------------------------- // GLOBAL ROUTINES //+------------------------------------------------- function parse_template( $template, $assigned=array() ) { foreach( $assigned as $word => $replace) { $template = preg_replace( "/\{$word\}/i", "$replace", $template ); } return $template; } function load_template($template="") { global $templates_dir; $filename = $templates_dir."/".$template; if ( file_exists($filename) ) { if ( $FH = fopen($filename, 'r') ) { $template = fread( $FH, filesize($filename) ); fclose($FH); } else { fatal_error("Couldn't open the template file"); } } else { fatal_error("Template file does not exist"); } return $template; } function fatal_error($message="") { echo("An error occured whilst processing this directive"); if ($message) { echo("<br>$message"); } exit(); } ?>
  6. Here is an option you might like to try. Give access to AWSTATS without giving access to cPanel!
  7. **Note, this guide makes use of a program called visualroute, you can download a free demo at visualware.com*** Every received e-mail has Internet Headers. Using Microsoft Outlook as an example (other mail programs are very similar), just follow these steps to view the headers: Right-click on the mail message that is still in your Outlook Inbox Select 'Options...' from the resulting popup menu Examine the 'Internet Headers' in the resulting 'Message Options' dialog TIP: Right-click in the 'Internet Headers' field and click on 'Select All' in the popup menu (or type ctrl-A). Then right-click again and click on 'Copy' in the popup menu (or type ctrl-C). Finally, paste all the Internet Headers into your favorite text editor for full examination (such as 'Notepad', included with Windows). Example: What you see will be very similar to the following (with 'line numbers' added for clarity and discussion in following sections): 1: Received: from tes1a623.OneMail.com.sg ([203.127.89.129]) by visualroute.com (8.11.6) id f9CIVSk24480; Fri, 12 Oct 2001 12:31:29 -0600 (MDT) 2: Message-Id: 3: Received: from drb.com (IIM1608 [203.127.89.138]) by tes1a623.OneMail.com.sg with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2448.0) 4: ....id 4XNK9ATR; Sat, 13 Oct 2001 01:19:10 +0800 5: From: paylesslongdistance@somedomain.com 6: To: 7: Subject: Long Distance - 4.9 cents per min - NO FEES! 8: Date: Fri, 12 Oct 2001 13:24:26 -0400 9: X-Sender: paylesslongdistance@yahoo.com 10: X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1 11: Content-Type: text/plain; charset="us-ascii" 12: X-Priority: 3 13: X-MSMail-Priority: Normal 14: X-UIDL: 8`Y!!0GR!!"?H"!k:O!! 15: Status: U Header Line Syntax: The Internet Header Fields are just a series of text lines, where each line looks like: Header-Name: Header-Value And if a line starts with a tab or spaces, like line 4 above, that line is a continuation of the previous Header-Value line. So, the Header-Name Received in line 3 has a Header-Value that spans lines 3 and 4. 'Received' Headers The most important header field for tracking purposes is the Received header field, which usually has a syntax similar to: Received: from ? by ? via ? with ? id ? for ? ; date-time Where from, by, via, with, id, and for are all tokens with values within a single Header-Value, which may span multiple lines. Note: Some mail servers may not include all of these tokens -- or additional tokens/values may be added to this field, but now you are prepared to break it apart and understand it. Every time an e-mail moves through a new mail server, a new Received header line (and possibly other header lines, like line 2 above) is added to the beginning of the headers list. This is similar to FedEx package tracking, when your package enters a new sorting facility and is 'swiped' through a tracking machine. This means that as you read the Received headers from top to bottom, that you are gradually moving closer to the computer/person that sent you the e-mail. But please note that as you read through the Received header fields and get closer to the computer/person that sent you the e-mail, you need to consider the possibility that the sender added one or more false Received header lines to the list (at the time, the senders beginning of the list) in an attempt to redirect you to another location and prevent you from finding the true sender. But, now that you know false header lines are possible, just stay alert. You will probably find it very useful to break a single Received line into multiple lines, with one token per line. Namely, the header line: Received: from tes1a623.OneMail.com.sg ([203.127.89.129]) by visualroute.com (8.11.6) id f9CIVSk24480; Fri, 12 Oct 2001 12:31:29 -0600 (MDT) is much easier to read and understand when formatted so that each token is on a new line, as in: Received: from tes1a623.OneMail.com.sg ([203.127.89.129]) by visualroute.com (8.11.6) id f9CIVSk24480 ; Fri, 12 Oct 2001 12:31:29 -0600 (MDT) The Sender's IP Address For tracking purposes, we are most interested in the from and by tokens in the Received header field. In general, you are looking for a pattern similar to: Received: from BBB (dns-name [ip-address]) by AAA ... Received: from CCC (dns-name [ip-address]) by BBB ... Received: from DDD (dns-name [ip-address]) by CCC ... In other words, mail server AAA received the e-mail from BBB and provides as much information about BBB, including the IP Address BBB used to connect to AAA. This patterns repeats itself on each Received line. The syntax of the from token most times looks like: name (dns-name [ip-address]) Where: name is the name the computer has named itself. Most of the time we never look at this name because it can be intentionally misnamed in an attempt to foil your tracking (but it may leak the windows computer name). dns-name is the reverse dns lookup on the ip-address. ip-address is the ip-address of the computer used to connect to the mail server that generated this Received header line. So, the ip-address is gold to us for tracking purposes. The by token syntax just provides us with the name that the mail server gives itself. But since the last mail server could be under the control of a spammer, we should not trust this name. So, what is crucial for tracking, is to pay attention to the trail of ip-address in the from tokens and not necessarily the host name provided to us in the by tokens. Hopefully an example will make the reason why very clear: 1: Received: from tes1a623.OneMail.com.sg ([203.127.89.129]) by visualroute.com (8.11.6) id f9CIVSk24480; Fri, 12 Oct 2001 12:31:29 -0600 (MDT) 3: Received: from drb.com (IIM1608 [203.127.89.138]) by tes1a623.OneMail.com.sg with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2448.0) If you ignore line 1, you would conclude from line 3 that mail server tes1a623.OneMail.com.sg sent you an e-mail and then use VisualRoute to trace to that host, but you would be wrong. When you trace to the host name tes1a623.OneMail.com.sg, you are actually tracing to the IP Address lookup on that host name, which is 192.9.200.230. But as you can see from line 1, the IP Address used was really 203.127.89.129. Do not be fooled by this attempted misdirection by spammers. Determine the IP Address of the Sender: Using the example e-mail headers above and analyzing the Received header lines we can conclude: A Visualware employee received an e-mail which came from visualroute.com (line 1) which came from tes1a623.OneMail.com.sg (line 1; line 3 confirms) but whose ip-address used was 203.127.89.129 (line 1) which came from drb.com/IIM1608 (line 3) but whose ip-address used was 203.127.89.138 (line 3) So, we have just tracked this e-mail to the source -- IP Address 203.127.89.138. The next step is to track down this IP Address using VisualRoute. TIP: Practice! Track down the e-mails received from friends and family. Since you know where they are really located, that will help you to analyze the Internet Headers. You will quickly gain experience and confidence in your ability to track down the computer/person that sent you an e-mail message. Track the IP Address Use VisualRoute to track the IP Address! Track down the person! In the case above, this is IP Address 203.127.89.138. The resulting trace will look somewhat like this generic trace: Then, use the domain (by clicking on 'Node Name' rows) or network (by clicking on 'Network' rows) popup WHOIS capability of VisualRoute to discover the domain (company) or network (ISP) contact information -- to file a complaint or report the abuser. Ideally, you want domain or popup WHOIS information for the IP Address of interest. But, if that is not possible, just move up the list and obtain 'Network' WHOIS information for the next network up in the list and report the abuse to them -- since the abuser is connected through them. Leaked Sender Information The Internet Headers for an e-mail message may contain some really interesting information about the sender. Windows Computer Name: It appears that the Windows computer name is sometimes leaked. Consider the following partial header information from an actual e-mail: Received: from hanksdell (11-22-33-44.xyz.net [11.22.33.44]) by visualroute.com (8.8.5) id SAA26331; Thu, 11 Oct 2001 18:46:53 -0600 (MDT) Where we can clearly see the IP Address of the sender, but we can also see the computer name of hanksdell. While the computer name can be named anything, in this case, I might assume that the person is named Hank and uses a Dell computer. This computer name may be intentionally misleadingly named or not be meaningful but it can become very useful confirming information if law enforcement can confirm that the name of the suspect's computer matches the name in the e-mail header. Timezone Information: Consider lines 3 and 4 from the Internet Header discussion above: 3: Received: from drb.com (IIM1608 [203.127.89.138]) by tes1a623.OneMail.com.sg with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2448.0) 4: id 4XNK9ATR; Sat, 13 Oct 2001 01:19:10 +0800 Notice that in the Internet Headers, when a time is displayed, many times it is followed with a plus/minus and four digits, which represent HHMM (hour and minutes) from GMT (Greenwich Mean Time), or London, UK time. Plus means east of GMT. Minus means west of GMT. So, according to +0800, the server is 8 hours east of GMT. TIP: Go into the Windows Control panel and enter into the Date/Time dialog, where there is a Time Zone list. This time zone appears to be in Singapore. Then, the .sg in tes1a623.OneMail.com.sg means Singapore, which is one more confirmation of this information. A final confirmation comes from performing a VisualRoute trace 203.127.89.129 (the IP Address for tes1a623.OneMail.com.sg). TIP: Trace to the IP Address, not the host name. X-Mailer:This will usually tell you the mailer software used by the sender of the e-mail. Consider: 10: X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1 This may or may not be immediately useful, but it can be very useful if there is a follow-up investigation by authorities. X-Originating-IP: If you are attempting to track down an e-mail received from a Hotmail e-mail account, look for the X-Originating-IP header field, which will tell you the IP Address of the computer that sent the e-mail. Consider: 1: Received: from hotmail.com (f105.pav1.hotmail.com [64.4.31.105]) by s2.xyz.com (8.11.6) id f9BIvve34655; Thu, 11 Oct 2001 12:58:00 -0600 (MDT) 2: Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; 3: Thu, 11 Oct 2001 11:57:51 -0700 4: Received: from 202.156.2.147 by pv1fd.pav1.hotmail.msn.com with HTTP; 5: Thu, 11 Oct 2001 18:57:51 GMT 6: X-Originating-IP: [202.156.2.147] However, notice that we could have obtained the same IP Address information by examining the Received header fields. But it is nice to have this extra confirmation. Final Warnings Please pay attention to these warnings when attempting to track e-mail messages: 1) Host Names vs IP Addresses: Always base your tracking decisions based upon the IP Addresses that you find in the header information and not on host names (which are a lookup from the IP Address anyway). Because mapping an IP Address into a host name and then back into an IP Address may yield a different IP Address. 2) False Header Information: Be aware that spammers may try to insert fake Received: header lines into the Internet Headers of the e-mail message to confuse you. Just follow the trail through the Received: header fields from mail server to mail server and use some common sense when the information makes no sense. 3) False IP Address: The IP Address that you finally end up at is the IP Address of the computer that sent the e-mail. But is that computer the real sender, or a computer that was broken into, so that a false e-mail could be sent. Or the sender could try to hide behind an 'anonymizer' service -- where you will get to the IP Address of the 'anonymizer' company. 4) IP Addresses Change: Do not assume that the sender's computer has a fixed, constant IP Address. This may be true in some cases, but most people who dial into the Internet almost always get a different IP Address each and every time they connect into the Internet. However, all is not lost. Many times you can report the IP Address and full e-mail Internet Headers (which many times contain time-of-day information) to the person's ISP and the ISP can track this down to a unique end-user (by examining login and logout logs) and take action. 5) Viruses: Do not assume the worst of the person sending the e-mail. They may have just been infected with a virus, which is using a person's computer to spread itself. 6) Open Mail Servers: Do not assume the worst of the company whose mail server was used to send the original e-mail. They may be involved in the spam, but they also may just have a misconfigured e-mail server, which is allowing a spammer to send the e-mail through their mail server.
  8. A support ticket isnt the way to go, since this isn't something we would provide support for. There are several programs available for reading raw log files and outputting stats as HTML documaents, but they are more work than they are worth considering all of the info awstats makes available via your cpanel. There is a quick rundown of the basic of awstats here that might help you educate your clients on how to read it.
  9. Whats your domain name and I'll take a look
  10. We havent stopped taking new customers, and have had several sign up over the past few weeks. Try clearing your cache and temp internet files and see if that halps any.
  11. 1) I'll look into the space notification, as far as back ups go, they can be downloaded directly to your PC. We already do weekly and monthly back ups of all client sites. Allowing backups to be stored, even temporarily outside your alloted space could create more problems than it solves. 2) Additional space can be bought, or account can be upgraded, for the most part just upgrading from one level to the next is a significant boost in space and bandwidth without a HUGE cost. 3) someone already beat me to the IMAP one
  12. Dont worry about sounding negative, this was posted so we could hear the good, bad AND the ugly. Honest comments are always appreciated!
  13. http://www.microsoft.com/presspass/press/2...ndowssource.asp
  14. no, I didnt say high security....I didnt write any of that
  15. http://www.totalchoicehosting.com/web-hosting-smtp.html
  16. We dont auto upgrade your bandwidth if you go over. You get a notice via e-mail when you reach 80%, then you can either buy more @ $2.50 per GB, upgrade your account, or do nothing and the site would be suspended until the 1st of the next month if it goes over. We dont EVER charge you anything additional unless you request it.
  17. No one, it is still here. twelve
  18. We allow them, as long as you are the LEGAL copyright owner of the files, or can provide proof you have permission to post them on your site. Also keep in mind, these types of files you LARGE amounts of bandwidth.
  19. go to www.domain.com/webmail once they sign in there is a change password link on the bottom of the page.
  20. Yup it is, glad i thought of it.. muahahahahahahahahaha *it was actually HG's idea, but dont tell anyone
  21. No, this was not an issue on our end. Our DNS has ZERO affect on any other site you visit that isnt hosted on TCH servers. It is an ISP problem, if you are on broadband, go into your TCP/IP settings and specify a different DNS IP. My ISP is pbol.net (very small company with tons of DNS issues) and I use EV1's DNS
  22. Congratulations Glenn
  23. Check out this thread Raul http://www.totalchoicehosting.com/forums/i...wtopic=6486&hl= I use that to allow potential sponsors to check out my stats without having to give them access to my cpanel
  24. We do allow the hosting of adult content as long as it is LEGAL content per US laws. what is and isnt obscene can be looked at many ways, but common sense goes a long way in helping determine what might or might not be considered obscene material for your website. In the case of a DoS attack, yes your account "could" be terminated without warning, but I cant think of one site that has been terminated due to a DoS attack. What happens is, if a site is being DoS'd we suspend the site until the inbound traffic stops, then we bring it back up.
  25. Hold On To Your Hats - WORM_DEADHAT.B (Low Risk) WORM_DEADHAT.B is a destructive, memory-resident worm that is currently spreading in-the-wild. It propagates on systems that are infected with WORM_MYDOOM.A and WORM_MYDOOM.B, and is capable of spreading via the peer-to-peer file-sharing application, SoulSeek. WORM_DEADHAT.B has the capability to drop itself as a file in the Windows folder, enumerate all running processes, terminate processes associated with antivirus programs, delete several system files, and connect to an Internet Relay Chat (IRC) server and wait for commands from a remote user. It runs on Windows 95, 98, ME, NT, 2000, and XP. Upon execution, this virus drops a copy of itself as MSGSVR32.EXE in the Windows system folder, and creates a registry entry that allows it to execute at every system startup. To propagate, this worm scans random IP addresses for infected systems at certain ports. These ports are opened by a backdoor component of the MYDOOM worm, which allows remote users to access the machines. It sends a command that causes the MYDOOM backdoor component to automatically upload its copy to the systems. It also can spread via SoulSeek, a peer-to-peer file-sharing application, by retrieving the shared folder and querying a registry key. It then drops a copy of itself in the shared folder using any of 17 specific names. This malware’s backdoor routine opens a port and listens for commands from a remote user. It also connects to an Internet Relay Chat (IRC) server and joins a channel where it listens for commands that could allow a remote user to execute malicious actions. The worm enumerates all running processes and terminates processes associated with antivirus programs. It also terminates instances of WORM_MYDOOM.A and WORM_MYDOOM.B in memory by terminating specific processes, and deletes registry entries which are added by these two MYDOOM variants. It may also delete the following files: * C:\BOOT.INI * C:\AUTOEXEC.BAT * C:\CONFIG.SYS * C:\Windows\WIN.INI * C:\Windows\SYSTEM.INI * C:\Windows\WININIT.INI * C:\WINNT\WIN.INI * C:\WINNT\SYSTEM.INI * C:\WINNT\WININIT.INI The following internal text strings are embedded within this worm’s code: Well, show me the way, To the next whiskey bar, Oh, don't ask why, Oh, don't ask why, Show me the way, To the next whiskey bar, Oh, don't ask why, Oh, don't ask why, For if we don't find, The next whiskey bar, I tell you we must die, I tell you we must die, I tell you, I tell you, I tell you we must die, Oh, moon of Alabama, We now must say goodbye, We've lost our good old mama, And must have whiskey, oh, you now why, Oh, moon of Alabama, We now must say goodbye, We've lost our good old mama, And must have whiskey, oh, you now why, Well, show me the way, To the next little girl, Oh, don't ask why, Oh, don't ask why, Show me the way, To the next little girl, Oh, don't ask why, Oh, don't ask why, For if we don't find, The next little girl, I tell you we must die, I tell you we must die, I tell you, I tell you, I tell you we must die, Oh, moon of Alabama, We now must say goodbye, We've lost our good old mama, And must have whiskey, oh, you now why. If you would like to scan your computer for WORM_DEADHAT.B or thousands of other worms, viruses, Trojans and malicious code, visit HouseCall, Trend Micro's free, online virus scanner at: http://housecall.trendmicro.com/ WORM_DEADHAT.B is detected and cleaned by Trend Micro pattern file #762 and above. 3. Top 10 Most Prevalent Global Malware (from February 5, 2004 to February 12, 2004) 1. WORM_MYDOOM.A 2. WORM_NACHI.A 3. PE_FUNLOVE.4099 4. WORM_LOVGATE.F 5. PE_VALLA.A 6. WORM_SOBIG.F 7. WORM_MOFEI.B 8. WORM_KLEZ.H 9. PE_NIMDA.E 10. WORM_LOVGATE.G
×
×
  • Create New...