Re: Identifying used patches

Jens Bauer <[email protected]>
Newsgroups gmane.mail.qmail.general
Message-ID <[email protected]>
Hi Erwin and Ed.

Believe me, I've been thinking about this more than once. ;)
-But I need to make sure that I stay compatible with my current installation.
I'm pretty sure that I will switch, when I make a fresh install on my new Linux server, though (I've prepared myself already and subscribed to s/qmail, as you probably already know).

I've now discovered that I am not using John M. Simpsons's patch. (Fortunately for everyone else; because that means his version will most likely work with debian.org and other domains).

As I found the string 'netqmail' in the binary, this is also an indication that I'm using another version.
I made a very neat 2-liner for this:
---8<-----8<-----8<----- [ file: ~/bin/bcat ]
#!/bin/bash
sed -E -e $'s/[^\40-\176]+/\xc2\xb7/g' $@
--->8----->8----->8-----
(You can change \xc2\xb7 to a single space if you wish; but the above allows you to clearly see where the real spaces are).

I've examined the strings in the qmail-smtpd binary and a number of those environment variables I supply do not exist in the binary.
That means I only made my launch-control file compatible with John's patch.

Ed's tests also confirms that I'm not on a JMS version.

So all that's left is that I now have to do a lot of hard work. ;)
Thank you John, Ed and Erwin for the pointers and hints; I think I'm on the right track now.


Note for everyone: I was just attacked by Dmitry Kaplanov at 185.103.253.223.
He apparantly has a bot that go through all your domains on your server in order to guess the passwords for the following usernames:
	'[email protected]',
	'[email protected]',
	'[email protected]',
	'[email protected]',
	'[email protected]',
	'[email protected]'
	'[email protected]'
-He's trying that on port 587, but he stops attacking, when you flood his IP (yez, I know - it wasn't nice of me to do that).
(it might be a good idea to set up an auto-block trap on those account names - or on any accounts that do not exist on your server).


Love
Jens

On Sat, 26 Mar 2016 12:34:09 +0100, Erwin Hoffmann wrote:
> Hi Jens,
> 
> you may have a look at my qmail follow-up s/qmail 
> (http://fehcom.de/sqmail.html).
> 
> It does the trick as well (among others).
> 
> regards.
> --eh.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.