Etanisla

I use KMail for all my POP3 accounts now that I use Linux as my primary OS. I'm in the process of condensing all my free webmail accounts to just the Gmail. It is a lot easier on the eyes that way. When I was using Windows as my OS, I was using Pegasus for my client, and K9 as my bayesnian filter. Whichever means I used, I would then check the spam for trends, and adjust my cPanel mail filter accordingly. For instance, once I noticed that 75% of the spams used the 'seznam.cz' domain for a dropbox, I /dev/nulled all email with 'seznam.cz' in the "From" header. That alone has dropped my spam intake to the irritating mosquito level instead of the flash flood level. If you want to see what domains I've banned from my email, check out: h*tp://www.etanisla.com/banned/ Any public displays of my email address is now either etanisla@gmail.com or etanislalo@comcast.net. Since I never use my ISP's email for ANYTHING, it makes a good spam trap as well. My 1/50th of a dollar, your mileage may vary

@Jikrantz: Marysville is about an hour north of Seattle, I'm 30 mins south of Seattle. Although, I have gotten lost in Marysville several times already!

Seattle area, northwest Washington state... 55F, light rain with a 50% chance of thunderstorms. If the sun does come out, it will be to entice you to wash your car, so it can rain again! Althought lately we've have a streak of low power funnel clouds/tornadoes...

The spam filters are very efficient. I'm not sure what specifics they are using, but it is on par with SpamAssassin. The ads are not intrusive, even less intrusive than the AdSense program that feeds them. So far, I like how replys are grouped together with the original email. A neat way to thread subjects. The ads are a constant reminder that Gmail is less private than other email solutions. But if I wanted to make sure no one could eavesdrop on a message (at least in this decade), I would encrypt it with GPG, or call the person up on the telephone instead!

I dual-boot with WinXP and Fedora Core 2. Linux started out as a hobby, but my job may soon require intimate knowledge with Linux, so I'm trying to work & play under FC2. Philosophical arguments aside (as well as all cyber-jihads), I like Linux simply because it seems that I can do more with less. The housekeeping overhead is less with Linux, and I have more control over what is happening. Which is to say, if it breaks I can't blame M$ anymore

With that .htaccess redirect, anything following the 'index.php?' would go over as well? So if someone went to "www.etanisla.com/scribble/index.php?m=200405", they would wind up at "www.carelessthought.com/index?m=200405"? Or does that require listing each and every permutation of 'options' that could be appended onto 'index.php?' Yuck! If so, then I'll stay with the meta-redirect I have up now. (It's embarassing when what I think is a hard problem turns out to be deceptively easy...)

I've moved my blog from www.etanisla.com/scribble to www.carelessthought.com. That was the easy part. This is the hard part. Figuring out a way to do this: Redirecting from: www.etanisla.com/scribble/index.php?optionalstuff To: www.carelessthought.com/index.php?optionalstuff Any suggestions?

Site Name: Careless Thought URL: http://www.carelessthought.com Description: "Rants, Raves, Recollections, and um... other stuff" My personal blog, usually focusing on crazy things in my life, Linux, and whatever has moved me to the point of saying something about it (which happens to be crazy things in my life, and Linux). Location of your TotalChoice Web Hosting Link: In the right menu bar, under the 'Links' Heading, titled "Total Choice Hosting"

Let me add four more entries from my access logs: >208.34.72.9 - - [16/May/2004:18:00:14 -0500] "POST /cgi/contactus.cgi HTTP/1.0" 404 591 "http://etanisla.com/" "-" 210.179.233.125 - - [16/May/2004:18:00:22 -0500] "POST /responsemailif.cgi HTTP/1.0" 404 596 "http://etanisla.com/" "-" 80.58.47.44 - - [16/May/2004:18:00:26 -0500] "POST /techformsend HTTP/1.0" 404 586 "http://etanisla.com/" "-" 64.14.144.85 - - [16/May/2004:18:00:27 -0500] "POST /cgi-bin/anfrage.pl HTTP/1.1" 404 605 "http://etanisla.com/" "-" Please note, that the only interactive component of etanisla.com is the WordPress blog. And that is going to be deleted on June 1st.

My opinion: Each computer needs its own firewall. Reason: What if one system gets infected with something. Then all the systems behind your router firewall are vulnerable. But, that's just my opinion... Zone Alarm Free is installed on all three of my personal systems. My employer has Black Ice on the work laptop.

That tar ball is the compressed file. Save it to your favorite location, and extract it with your favorite utility. (I use WinRAR to extract .gz files on my WinXP box, my Linux box can handle it without extra help.) The resulting text file is the current month's info. New entries are at the bottom. Each line contains info in this order: [iP address] - - [Date Time Timezone-correction] [process] [browser compliance] [result code] [referrer, if any] [type of browser or user agent] If you suspect something, or are generally nosy like me, you can run a google search with some of these items. Sometimes the results are really surprising. HTH! Etanisla

@kaseytraeger: If your cpanel is set up the same way as mine, (and I'm sure it is), you can find the raw logs at the "Raw Access Logs" icon, and a quick rundown of the last 300 visitors by clicking on "Web/FTP Stats", then on "Latest Visitors". What I do, is click on the "Latest Visitors" to get a basic idea of who's looking, and then if I see an interesting IP or referral, open the raw log to get the details. Makes for interesting traffic analysis...

I don't use PHP-Nuke. (I'm not even sure if it is a portal software, news management, or some hybrid thereof). The only scripts (or script-like) I have going is the chat offered through cpanel, and WordPress for my blog. And the chat page is about to be removed for lack of use ! Thank you for jumping on this so quickly. P.S. The bugger just tried 'POST' again! Five more entries. All 403'd. Ahh, what a lovely number, 403.

Reading through the overnight access logs, I found this entry: >200-158-70-148.dsl.telesp.net.br - - [13/May/2004:08:42:53 -0500] "POST /admin.php?op=AddAuthor&add_aid=kiegera&add_name=Goda&add_pwd=playboya&add_email=r00t_System@hush.com&add_radminsuper=1&admin=eCcgVU5JT04gU0VMRUNUIDEvKjox HTTP/1.0" 404 - "-" "Mozilla 4.0 (Linux)" There were no other entries from that address. Only that POST attempt. Read through the line carefully, you will see that this person attempted to add himself to the author list as a 'super admin' with full powers over the site. Doing a quick google of 'kiegera' and 'r00t_System@hush.com' turned up 6 pages of sites that had been defaced by Kiegera. I've since put 200.158.70.148 on my 'deny from' list in .htaccess. Check your logs.

I've been checking Awstats on an almost daily basis. (Wow, I have an audience! And they come back! Wow!) And I have noticed that Awstats would update on a daily basis. Well, now, it hasn't updated since May 6th. And I'm wondering if it is time to be worried. Or time to unplug and do something offline and outside. Tell me straight, I can take it.

I've been hacking on whoisjohngalt's email filtering script. But I think I've munged something way off. whoisjohngalt, in his example, placed his filtering script in /procmail.pl and then set his redirect to |/home/<accountname>/procmail.pl. When I tried that, I got the following error message: > pipe to |/home/<etanisla's account>/myfilter.pl generated by thisuser@etanisla.com local delivery failed Is there a special place to put this code? Is there a certain syntax to redirect to this code in cpanel? (The stupid question is the one not asked, right?)

@jandafields: Thanks for pointing out this thread! Exactly what I was looking for! @whoisjohngalt: Forgive my perl-noobness, but I have a question about your 'hack'... I have three email accounts to my domain. For discussion's sake, let's call them test1, test2, and test3. I am using test3 as my 'catch-all' box. I've copy/pasted your 'hack', and adjusted the necessary entries to match my situation. In cpanel, I made a filter that will send all email specifically to test1@!there.com to /path/to/test1/procmail.pl. Same with test2, and test3. All email sent directly to test1, test2, or test3 work fine. Anything else, that should go to the catch-all, bounces with errors. In the default email address, I set all default email to go to /path/to/test3/procmail.pl. My question is, should I have sent it to test3@!there.com? Or did I misread your script worse than I thought?

Hello all, I've been using the server-side email filters through cPanel, and it appears I've hit a limit of 20 filters. After that, any filter testing outputs 'filter too large' and the test message is 'deliverable'. Is cPanel the only means of setting up server-side email filters, or is there a config file I can hack? :Nerd: I already have SpamAssassin enabled, and love how K9 works on my desktop. I just would like to have a pre-emptive strike and not download certain messages in the first place! Thanks to all, Etanisla