From: "Jim Fleming" <jfleming@...>
To: <wzk@...>
Cc: <garsh@...>; <t.steffen@...>
Sent: Tuesday, January 22, 2002 10:43 PM
Subject: Changes to DNRD Master.c
> Attached is a copy of the master.c file from DNRD.
> I added some changes to work with the Lame-D cache/filter format.
>
> The optional format in the master file is...domain N|name dns1 dns2 ...
> ...if N is a digit it creates a Feature Set or Server Set...
> ...the Lame-D cache/filter has a tag for each premium name to a Feature Set...
>
> We are essentially evolving to a server that is dedicated for TLD
Registries...
>
> Here is some more info...
> http://www.dot-biz.com/IPv8/Papers
> http://www.dot-biz.com/IPv8/Papers/LameDCache/
>
>
> Jim Fleming
> 2002:[IPv4]:000X:03DB
> http://www.IPv8.info
>
>
Like a lot of folks, I have dnrd running as the DNS server for my home
local lan on a demand dial connection. This connection is ISDN in my
case and therefore costs me bukcs per minute (Thank you Verizon!).
Since the windoze machines on my network insist on doing nameserver
lookups for shortnames, dnrd was dial out every 15 minutes to do a
lookup for a host in my master file. For example:
gateway.localdomain (dns proxy machine, dial on demand
masquerading ISDN connection machine,
fileserver, etc.)
me.localdomain (my windoze desktop)
her.localdomain (my wife's windoze desktop)
etc.
Both me.localdomain & her.localdomain use gateway.localdomain as their
DNS server.
So, every 15 minutes, 'me' or 'her' do a dns lookup for 'gateway'.
JUST 'gateway'. While gateway.localdomain in in my /etc/dnrd/master
file, 'gateway' is not and so the link is brought up, earthlink's DNS
servers reply "Huh? We know nothing about this 'gateway' creature" and
the lookup fails.
Costs me 1 minute of uptime ($0.02) every 15 minutes (4 times/hour, 96
times /day, 2880 times a month) = $57 a month. Ouch. Assuming it
doesn't take longer than 1 minute of billable time.
So I wrote the incredibly complex patch attached here, which basically
says that for a hostname entry in the /etc/dnrd/master file, if it
ENDS with a period, delete the period and store the record as is. This
let me write my /etc/dnrd/master like this:
domain localdomain +auth
192.168.0.1 gateway.localdomain gateway.
192.168.0.10 me.localdomain me.
192.168.0.11 her.localdomain her.
with the second entries ensuring that Dnrd knows even about the short
names for my localhosts.
A better solution for these shortnames would be to have dnrd try all
the domains which it is authoritative for in turn, appending the
domain to the shortnames.
------------- cut here -------------------------
diff -ur dnrd-2.10/src/master.c dnrd-2.10-chris/src/master.c
--- dnrd-2.10/src/master.c Fri Jan 19 15:32:31 2001
+++ dnrd-2.10-chris/src/master.c Mon Oct 29 12:37:30 2001
@@ -290,6 +290,11 @@
word[len-1] = 0;
snprintf (name, size, "%s%s%s", word, domain[0] ? "." : "",
domain);
}
+ else if ((len = strlen(word)) > 0 && word[len-1] == '.') {
+ word[len-1] = 0;
+ size--;
+ copy_string(name, word, size);
+ }
else if (strchr(word, '.') == NULL) {
snprintf (name, size, "%s%s%s", word, domain[0] ? "." : "",
domain);
}
----- Forwarded message from Eduard Bloch <edi@...> -----
Subject: Bug#116096: dnrd: does not resolve short hostnames
Reply-To: Eduard Bloch <edi@...>, 116096@...
Date: Sun, 21 Oct 2001 00:30:40 +0200
From: Eduard Bloch <edi@...>
To: Thomas Schoepf <schoepf@...>
Cc: 116096@...
Sender: Eduard Bloch <inet@...>
#include <hallo.h>
Thomas Schoepf wrote on Sun Oct 21, 2001 um 12:11:33AM:
> On Thu, Oct 18, 2001 at 03:13:47PM +0200, Eduard Bloch wrote:
> > since dnrd is intended to be a master server for small LANs, I expect it too
> > resolve short hostnames without FQDN. Unfortunately, it does not. I
> > tried to add the host entries in the form:
> > IP HOSTNAME FQDN
> > or
> > IP FQDN HOSTNAME
> > but it does not work.
>
> Hm, how does your configuration look like? dnrd does resolve short
> hostnames here on my system:
Yes, on _your_ system. It works fine on my local machine too, but try
the same from a machine in the LAN.
> asterix:~$ host asterix
> asterix.gallien A 192.168.100.1
Similar here. hostname.domain is returned correctly. But not when
resolving from another machine.
> This is my configuration:
>
> asterix:~$ cat /etc/resolv.conf
> domain gallien
> search gallien informatik.tu-muenchen.de debian.org
> nameserver 127.0.0.1
Similar here.
> asterix:~$ cat /etc/hosts | grep asterix
> 192.168.100.1 asterix.gallien asterix
> asterix:~$
Dito. I tried "hostname FQDN" and "FQDN hostname", both did not help.
Gruss/Regards,
Eduard.
--
GNU GPL: "The source will be with you... always."
----- End forwarded message -----
--
Contact: Institut fuer Informatik, TU Muenchen, D-80290 Muenchen, Germany
Phone: +49-89-289-25354, Fax: -25702, Room: 3516, E-Mail: schoepf@...
----- Forwarded message from Paul Slootman <paul@...> -----
Subject: Bug#116501: dnrd: dnrd forgets entries it's master for
Reply-To: Paul Slootman <paul@...>, 116501@...
From: Paul Slootman <paul@...>
To: submit@...
Date: Sun, 21 Oct 2001 14:32:42 +0200
Package: dnrd
Version: 2.8-3
Severity: important
Check out this log:
Oct 21 14:20:41 server /dnrd[4918]: 81 records in master DNS database
Oct 21 14:20:52 server /dnrd[4918]: Received DNS query for "server.local"
Oct 21 14:20:52 server /dnrd[4918]: Replying to query as master
Oct 21 14:20:54 server /dnrd[4918]: Received DNS query for "bla.local"
Oct 21 14:20:54 server /dnrd[4918]: Forwarding the query to DNS server
194.159.73.136
[no answer, ISDN is stopped so cannot dialout to connect to 194.159.73.136]
Oct 21 14:23:01 server /dnrd[4918]: dnsquery_timeout: removed 1 entries
Oct 21 14:23:01 server /dnrd[4918]: Received DNS query for "server.local"
Oct 21 14:23:01 server /dnrd[4918]: Forwarding the query to DNS server
194.159.73.136
Note how it first responded as master for "server.local", but after a
failed lookup for "bla.local" (which isn't in the master file) it's
forgotten how to answer for "server.local".
The master file starts like this:
domain local server.local +auth
192.0.0.192 server
As it's authorative for domain local, it should never forward requests
for things like "bla.local" to another server. This causes unnecessary
ISDN dialouts, costing money. The whole point of dnrd is lost because of
this (hence the "important" severity level).
dnrd is invoked as:
dnrd --master=hosts -l -d -s 164.48.51.158:ericsson.se -s 194.159.73.136
Thanks,
Paul Slootman
-- System Information
Debian Release: testing/unstable
Kernel Version: Linux wurtel 2.2.20pre2 #2 Sun May 27 17:46:10 CEST 2001 i586
unknown
Versions of the packages dnrd depends on:
ii libc6 2.2.4-3 GNU C Library: Shared libraries and Timezone
----- End forwarded message -----
--
Contact: Institut fuer Informatik, TU Muenchen, D-80290 Muenchen, Germany
Phone: +49-89-289-25354, Fax: -25702, Room: 3516, E-Mail: schoepf@...
I have uninstalled Bind and installed DNRD (dnrd-2.8-1.i386.rpm). Typing ps aux | grep dnrd shows that it has been installed and is running.
Have setup the master file: dnrd master domain dbsystems.com dns +auth
Have also tried running dnrd with no master file as according to the dnrd(8) documentation “if the file doesn’t exist, it will act as the primary server for the hosts found in /etc/hosts”.
Have setup /etc/hosts:
/etc/hosts # Do not remove the following line, or various programs
# that require network functionality will fail.
192.168.0.1 dbsystems.com sparky localhost.localdomain localhost
192.168.0.1 dbsytems.com dts
192.168.0.1 dbsytems.com practice
Have setup the networking as follows: etc/resolv.conf search dbsystems.com
nameserver 192.168.0.1
etc/nsswitch.conf ## Hosts: db files nisplus nis dns
hosts: files dns
Have pinged the following: sparky.dbsystems.com
dts.dbsystems.com
pracice.dbsystems.com They all respond OK.
When I type htttp://sparky.dbsystems.com or http://sparky in Internet Explorer on another computer (iMac) on the network, the index page is found with no problem. However, typing htttp://dts.dbsystems.com or htttp://practice.dbsystems.com I get an error message “Attempt to load “Accessing URL: htttp://dts.dbsystems.com Failed” and “Attempt to load “Accessing URL: htttp://practice.dbsystems.com Failed”
Any help would be most appreciated? Have included httpd.conf below.
Kind regards
Gavin
## ## httpd.conf -- Apache HTTP server configuration file ##
#### Section 1: Global Environment #
# The directives in this section affect the overall operation of Apache,
# such as the number of concurrent requests it can handle or where it
# can find its configuration files.
#
# ServerType is either inetd, or standalone. Inetd mode is only supported on
# Unix platforms.
#
ServerType standalone
#
# ServerRoot: The top of the directory tree under which the server's
# configuration, error, and log files are kept.
# Do NOT add a slash at the end of the directory path.
#
ServerRoot "/etc/httpd"
#
# The LockFile directive sets the path to the lockfile used when Apache
# is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or
# USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at
# its default value. The main reason for changing it is if the logs
# directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL
# DISK. The PID of the main server process is automatically appended to
# the filename.
#
LockFile /var/lock/httpd.lock
#
# PidFile: The file in which the server should record its process
# identification number when it starts.
#
PidFile /var/run/httpd.pid
#
# ScoreBoardFile: File used to store internal server process information.
# Not all architectures require this. But if yours does (you'll know because
# this file will be created when you run Apache) then you *must* ensure that
# no two invocations of Apache share the same scoreboard file.
#
ScoreBoardFile /var/run/httpd.scoreboard
#
# In the standard configuration, the server will process this file,
# srm.conf, and access.conf in that order. The latter two files are
# now distributed empty, as it is recommended that all directives
# be kept in a single file for simplicity. The commented-out values
# below are the built-in defaults. You can have the server ignore
# these files altogether by using "/dev/null" (for Unix) or
# "nul" (for Win32) for the arguments to the directives.
#
#ResourceConfig conf/srm.conf
#AccessConfig conf/access.conf
#
# Timeout: The number of seconds before receives and sends time out.
#
Timeout 300
#
# KeepAlive: Whether or not to allow persistent connections (more than
# one request per connection). Set to "Off" to deactivate.
#
KeepAlive On
#
# MaxKeepAliveRequests: The maximum number of requests to allow
# during a persistent connection. Set to 0 to allow an unlimited amount.
# We recommend you leave this number high, for maximum performance.
#
MaxKeepAliveRequests 100
#
# KeepAliveTimeout: Number of seconds to wait for the next request from the
# same client on the same connection.
#
KeepAliveTimeout 15
#
# Server-pool size regulation. Rather than making you guess how many
# server processes you need, Apache dynamically adapts to the load it
# sees --- that is, it tries to maintain enough server processes to
# handle the current load, plus a few spare servers to handle transient
# load spikes (e.g., multiple simultaneous requests from a single
# Netscape browser).
#
# It does this by periodically checking how many servers are waiting
# for a request. If there are fewer than MinSpareServers, it creates
# a new spare. If there are more than MaxSpareServers, some of the
# spares die off. The default values are probably OK for most sites.
#
MinSpareServers 5
MaxSpareServers 20
#
# Number of servers to start initially --- should be a reasonable ballpark
# figure.
#
StartServers 8
#
# Limit on total number of servers running, i.e., limit on the number
# of clients who can simultaneously connect --- if this limit is ever
# reached, clients will be LOCKED OUT, so it should NOT BE SET TOO LOW.
# It is intended mainly as a brake to keep a runaway server from taking
# the system with it as it spirals down...
#
MaxClients 150
#
# MaxRequestsPerChild: the number of requests each child process is
# allowed to process before the child dies. The child will exit so
# as to avoid problems after prolonged use when Apache (and maybe the
# libraries it uses) leak memory or other resources. On most systems, this
# isn't really needed, but a few (such as Solaris) do have notable leaks
# in the libraries. For these platforms, set to something like 10000
# or so; a setting of 0 means unlimited.
#
# NOTE: This value does not include keepalive requests after the initial
# request per connection. For example, if a child process handles
# an initial request and 10 subsequent "keptalive" requests, it
# would only count as 1 request towards this limit.
#
MaxRequestsPerChild 100
#
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, in addition to the default. See also the <VirtualHost>
# directive.
#
#Listen 3000
#Listen 12.34.56.78:80
Listen 192.168.0.1:80
#
# BindAddress: You can support virtual hosts with this option. This directive
# is used to tell the server which IP address to listen to. It can either
# contain "*", an IP address, or a fully qualified Internet domain name.
# See also the <VirtualHost> and Listen directives.
#
#BindAddress *
BindAddress 192.168.0.1
#
# Dynamic Shared Object (DSO) Support
#
# To be able to use the functionality of a module which was built as a DSO you
# have to place corresponding `LoadModule' lines at this location so the
# directives contained in it are actually available _before_ they are used.
# Please read the file README.DSO in the Apache 1.3 distribution for more
# details about the DSO mechanism and run `httpd -l' for the list of already
# built-in (statically linked and thus always available) modules in your httpd
# binary.
#
# Note: The order is which modules are loaded is important. Don't change
# the order below without expert advice.
#
# Example:
# LoadModule foo_module modules/mod_foo.so
#
# ExtendedStatus: controls whether Apache will generate "full" status
# information (ExtendedStatus On) or just basic information (ExtendedStatus
# Off) when the "server-status" handler is called. The default is Off.
#
#ExtendedStatus On
### Section 2: 'Main' server configuration #
# The directives in this section set up the values used by the 'main'
# server, which responds to any requests that aren't handled by a
# <VirtualHost> definition. These values also provide defaults for
# any <VirtualHost> containers you may define later in the file.
#
# All of these directives may appear inside <VirtualHost> containers,
# in which case these default settings will be overridden for the
# virtual host being defined.
#
#
# If your ServerType directive (set earlier in the 'Global Environment'
# section) is set to "inetd", the next few directives don't have any
# effect since their settings are defined by the inetd configuration.
# Skip ahead to the ServerAdmin directive.
#
#
# Port: The port to which the standalone server listens. For
# ports < 1023, you will need httpd to be run as root initially.
#
Port 80
#
# If you wish httpd to run as a different user or group, you must run
# httpd as root initially and it will switch.
#
# User/Group: The name (or #number) of the user/group to run httpd as.
# . On SCO (ODT 3) use "User nouser" and "Group nogroup".
# . On HPUX you may not be able to use shared memory as nobody, and the
# suggested workaround is to create a user www and use that user.
# NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
# when the value of (unsigned)Group is above 60000;
# don't use Group nobody on these systems!
#
User apache
Group apache
#
# ServerAdmin: Your address, where problems with the server should be
# e-mailed. This address appears on some server-generated pages, such
# as error documents.
#
ServerAdmin root@localhost
#
# ServerName: allows you to set a host name which is sent back to clients for
# your server if it's different than the one the program would get (i.e., use
# "www" instead of the host's real name).
#
# Note: You cannot just invent host names and hope they work. The name you
# define here must be a valid DNS name for your host. If you don't understand
# this, ask your network administrator.
# If your host doesn't have a registered DNS name, enter its IP address here.
# You will have to access it by its address (e.g., http://123.45.67.89/)
# anyway, and this will make redirections work in a sensible way.
# ServerName Sparky
#
# DocumentRoot: The directory out of which you will serve your
# documents. By default, all requests are taken from this directory, but
# symbolic links and aliases may be used to point to other locations.
# DocumentRoot "/home/Gavin/html" #DocumentRoot "/home/Gavin/DTS"
#
# Each directory to which Apache has access, can be configured with respect
# to which services and features are allowed and/or disabled in that
# directory (and its subdirectories).
#
# First, we configure the "default" to be a very restrictive set of
# permissions.
#
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
#
# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.
#
#
# This should be changed to whatever you set DocumentRoot to.
# <Directory "/home/Gavin/html"> #<Directory "/home/Gavin/DTS">
#
# This may also be "None", "All", or any combination of "Indexes",
# "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews".
#
# Note that "MultiViews" must be named *explicitly* --- "Options All"
# doesn't give it to you.
#
Options Indexes Includes FollowSymLinks
#
# This controls which options the .htaccess files in directories can
# override. Can also be "All", or any combination of "Options", "FileInfo",
# "AuthConfig", and "Limit"
#
AllowOverride None
#
# Controls who can get stuff from this server.
#
Order allow,deny
Allow from all
</Directory>
#
# UserDir: The name of the directory which is appended onto a user's home
# directory if a ~user request is received.
#
# The path to the end user account 'public_html' directory must be
# accessible to the webserver userid. This usually means that ~userid
# must have permissions of 711, ~userid/public_html must have permissions
# of 755, and documents contained therein must be world-readable.
# Otherwise, the client will only receive a "403 Forbidden" message.
#
# See also: http://httpd.apache.org/docs/misc/FAQ.html#forbidden
#
UserDir public_html
#
# Control access to UserDir directories. The following is an example
# for a site where these directories are restricted to read-only.
#
#<Directory /home/*/public_html>
# AllowOverride FileInfo AuthConfig Limit
# Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
# <Limit GET POST OPTIONS PROPFIND>
# Order allow,deny
# Allow from all
# </Limit>
# <Limit PUT DELETE PATCH PROPPATCH MKCOL COPY MOVE LOCK UNLOCK>
# Order deny,allow
# Deny from all
# </Limit>
#</Directory>
#
# DirectoryIndex: Name of the file or files to use as a pre-written HTML
# directory index. Separate multiple entries with spaces.
#
DirectoryIndex index.html index.htm index.shtml index.php index.php4 index.php3
index.cgi
#
# AccessFileName: The name of the file to look for in each directory
# for access control information.
#
AccessFileName .htaccess
#
# The following lines prevent .htaccess files from being viewed by
# Web clients. Since .htaccess files often contain authorization
# information, access is disallowed for security reasons. Comment
# these lines out if you want Web visitors to see the contents of
# .htaccess files. If you change the AccessFileName directive above,
# be sure to make the corresponding changes here.
#
# Also, folks tend to use names such as .htpasswd for password
# files, so this will protect those as well.
#
<Files ~ "^\.ht">
Order allow,deny
Deny from all
</Files>
#
# CacheNegotiatedDocs: By default, Apache sends "Pragma: no-cache" with each
# document that was negotiated on the basis of content. This asks proxy
# servers not to cache the document. Uncommenting the following line disables
# this behavior, and proxies will be allowed to cache the documents.
#
#CacheNegotiatedDocs
#
# UseCanonicalName: (new for 1.3) With this setting turned on, whenever
# Apache needs to construct a self-referencing URL (a URL that refers back
# to the server the response is coming from) it will use ServerName and
# Port to form a "canonical" name. With this setting off, Apache will
# use the hostname:port that the client supplied, when possible. This
# also affects SERVER_NAME and SERVER_PORT in CGI scripts.
#
UseCanonicalName Off
#
# TypesConfig describes where the mime.types file (or equivalent) is
# to be found.
#
TypesConfig /etc/mime.types
#
# DefaultType is the default MIME type the server will use for a document
# if it cannot otherwise determine one, such as from filename extensions.
# If your server contains mostly text or HTML documents, "text/plain" is
# a good value. If most of your content is binary, such as applications
# or images, you may want to use "application/octet-stream" instead to
# keep browsers from trying to display binary files as though they are
# text.
#
DefaultType text/plain
#
# The mod_mime_magic module allows the server to use various hints from the
# contents of the file itself to determine its type. The MIMEMagicFile
# directive tells the module where the hint definitions are located.
# mod_mime_magic is not part of the default server (you have to add
# it yourself with a LoadModule [see the DSO paragraph in the 'Global
# Environment' section], or recompile the server and include mod_mime_magic
# as part of the configuration), so it's enclosed in an <IfModule> container.
# This means that the MIMEMagicFile directive will only be processed if the
# module is part of the server.
#
<IfModule mod_mime_magic.c>
MIMEMagicFile conf/magic
</IfModule>
#
# HostnameLookups: Log the names of clients or just their IP addresses
# e.g., www.apache.org (on) or 204.62.129.132 (off).
# The default is off because it'd be overall better for the net if people
# had to knowingly turn this feature on, since enabling it means that
# each client request will result in AT LEAST one lookup request to the
# nameserver.
#
HostnameLookups On
#
# ErrorLog: The location of the error log file.
# If you do not specify an ErrorLog directive within a <VirtualHost>
# container, error messages relating to that virtual host will be
# logged here. If you *do* define an error logfile for a <VirtualHost>
# container, that host's errors will be logged there and not here.
#
ErrorLog /var/log/httpd/error_log
#
# LogLevel: Control the number of messages logged to the error_log.
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
#
LogLevel warn
#
# The following directives define some format nicknames for use with
# a CustomLog directive (see below).
#
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
#
# The location and format of the access logfile (Common Logfile Format).
# If you do not define any access logfiles within a <VirtualHost>
# container, they will be logged here. Contrariwise, if you *do*
# define per-<VirtualHost> access logfiles, transactions will be
# logged therein and *not* in this file.
#
# CustomLog /var/log/httpd/access_log common
CustomLog /var/log/httpd/access_log combined
#
# If you would like to have agent and referer logfiles, uncomment the
# following directives.
#
#CustomLog /var/log/httpd/referer_log referer
#CustomLog /var/log/httpd/agent_log agent
#
# If you prefer a single logfile with access, agent, and referer information
# (Combined Logfile Format) you can use the following directive.
#
#CustomLog /var/log/httpd/access_log combined
#
# Optionally add a line containing the server version and virtual host
# name to server-generated pages (error documents, FTP directory listings,
# mod_status and mod_info output etc., but not CGI generated documents).
# Set to "EMail" to also include a mailto: link to the ServerAdmin.
# Set to one of: On | Off | EMail
#
ServerSignature On
#
# Aliases: Add here as many aliases as you need (with no limit). The format is
# Alias fakename realname
#
# Note that if you include a trailing / on fakename then the server will
# require it to be present in the URL. So "/icons" isn't aliased in this
# example, only "/icons/"..
#
Alias /icons/ "/var/www/icons/"
<Directory "/var/www/icons">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>
#
# ScriptAlias: This controls which directories contain server scripts.
# ScriptAliases are essentially the same as Aliases, except that
# documents in the realname directory are treated as applications and
# run by the server when requested rather than as documents sent to the client.
# The same rules about trailing "/" apply to ScriptAlias directives as to
# Alias.
#
ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
#
# "/var/www/cgi-bin" should be changed to whatever your ScriptAliased
# CGI directory exists, if you have that configured.
#
<Directory "/var/www/cgi-bin">
AllowOverride None
Options ExecCGI
Order allow,deny
Allow from all
</Directory>
#
# Redirect allows you to tell clients about documents which used to exist in
# your server's namespace, but do not anymore. This allows you to tell the
# clients where to look for the relocated document.
# Format: Redirect old-URI new-URL
#
#
# Directives controlling the display of server-generated directory listings.
#
#
# FancyIndexing: whether you want fancy directory indexing or standard
#
IndexOptions FancyIndexing
#
# AddIcon* directives tell the server which icon to show for different
# files or filename extensions. These are only displayed for
# FancyIndexed directories.
#
AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
#
# DefaultIcon: which icon to show for files which do not have an icon
# explicitly set.
#
DefaultIcon /icons/unknown.gif
#
# AddDescription: allows you to place a short description after a file in
# server-generated indexes. These are only displayed for FancyIndexed
# directories.
# Format: AddDescription "description" filename
#
#AddDescription "GZIP compressed document" .gz
#AddDescription "tar archive" .tar
#AddDescription "GZIP compressed tar archive" .tgz
#
# ReadmeName: the name of the README file the server will look for by
# default, and append to directory listings.
#
# HeaderName: the name of a file which should be prepended to
# directory indexes.
#
# The server will first look for name.html and include it if found.
# If name.html doesn't exist, the server will then look for name.txt
# and include it as plaintext if found.
#
ReadmeName README.html
HeaderName HEADER.html
#
# IndexIgnore: a set of filenames which directory indexing should ignore
# and not include in the listing. Shell-style wildcarding is permitted.
#
IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
#
# AddEncoding: allows you to have certain browsers (Mosaic/X 2.1+) uncompress
# information on the fly. Note: Not all browsers support this.
# Despite the name similarity, the following Add* directives have nothing
# to do with the FancyIndexing customization directives above.
#
AddEncoding x-compress Z
AddEncoding x-gzip gz tgz
#
# AddLanguage: allows you to specify the language of a document. You can
# then use content negotiation to give a browser a file in a language
# it can understand. Note that the suffix does not have to be the same
# as the language keyword --- those with documents in Polish (whose
# net-standard language code is pl) may wish to use "AddLanguage pl .po"
# to avoid the ambiguity with the common suffix for perl scripts.
#
AddLanguage en .en
AddLanguage fr .fr
AddLanguage de .de
AddLanguage da .da
AddLanguage el .el
AddLanguage it .it
#
# LanguagePriority: allows you to give precedence to some languages
# in case of a tie during content negotiation.
# Just list the languages in decreasing order of preference.
#
LanguagePriority en fr de
#
# AddType: allows you to tweak mime.types without actually editing it, or to
# make certain files to be certain types.
#
# The following is for PHP4 (conficts with PHP/FI, below):
<IfModule mod_php4.c>
AddType application/x-httpd-php .php4 .php3 .phtml .php
AddType application/x-httpd-php-source .phps
</IfModule>
# The following is for PHP3:
<IfModule mod_php3.c>
AddType application/x-httpd-php3 .php3
AddType application/x-httpd-php3-source .phps
</IfModule>
# The following is for PHP/FI (PHP2):
<IfModule mod_php.c>
AddType application/x-httpd-php .phtml
</IfModule>
AddType application/x-tar .tgz
#
# AddHandler: allows you to map certain file extensions to "handlers",
# actions unrelated to filetype. These can be either built into the server
# or added with the Action command (see below)
#
# If you want to use server side includes, or CGI outside
# ScriptAliased directories, uncomment the following lines.
#
# To use CGI scripts:
#
#AddHandler cgi-script .cgi
#
# To use server-parsed HTML files
#
AddType text/html .shtml
AddHandler server-parsed .shtml
#
# Uncomment the following line to enable Apache's send-asis HTTP file
# feature
#
#AddHandler send-as-is asis
#
# If you wish to use server-parsed imagemap files, use
#
AddHandler imap-file map
#
# To enable type maps, you might want to use
#
#AddHandler type-map var
#
# Action: lets you define media types that will execute a script whenever
# a matching file is called. This eliminates the need for repeated URL
# pathnames for oft-used CGI file processors.
# Format: Action media/type /cgi-script/location
# Format: Action handler-name /cgi-script/location
#
#
# MetaDir: specifies the name of the directory in which Apache can find
# meta information files. These files contain additional HTTP headers
# to include when sending the document
#
#MetaDir .web
#
# MetaSuffix: specifies the file name suffix for the file containing the
# meta information.
#
#MetaSuffix .meta
#
# Customizable error response (Apache style)
# these come in three flavors
#
# 1) plain text
#ErrorDocument 500 "The server made a boo boo.
# n.b. the (") marks it as text, it does not get output
#
# 2) local redirects
#ErrorDocument 404 /missing.html
# to redirect to local URL /missing.html
#ErrorDocument 404 /cgi-bin/missing_handler.pl
# N.B.: You can redirect to a script or a document using server-side-includes.
#
# 3) external redirects
#ErrorDocument 402 http://some.other_server.com/subscription_info.html
# N.B.: Many of the environment variables associated with the original
# request will *not* be available to such a script.
#
# The following directives modify normal HTTP response behavior.
# The first directive disables keepalive for Netscape 2.x and browsers that
# spoof it. There are known problems with these browser implementations.
# The second directive is for Microsoft Internet Explorer 4.0b2
# which has a broken HTTP/1.1 implementation and does not properly
# support keepalive when it is used on 301 or 302 (redirect) responses.
#
BrowserMatch "Mozilla/2" nokeepalive
BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
#
# The following directive disables HTTP/1.1 responses to browsers which
# are in violation of the HTTP/1.0 spec by not being able to grok a
# basic 1.1 response.
#
BrowserMatch "RealPlayer 4\.0" force-response-1.0
BrowserMatch "Java/1\.0" force-response-1.0
BrowserMatch "JDK/1\.0" force-response-1.0
# If the perl module is installed, this will be enabled.
<IfModule mod_perl.c>
Alias /perl/ /var/www/perl/
<Location /perl>
SetHandler perl-script
PerlHandler Apache::Registry
Options +ExecCGI
</Location>
</IfModule>
#
# Allow http put (such as Netscape Gold's publish feature)
# Use htpasswd to generate /etc/httpd/conf/passwd.
# You must unremark these two lines at the top of this file as well:
#LoadModule put_module modules/mod_put.so
#AddModule mod_put.c
#
#Alias /upload /tmp
#<Location /upload>
# EnablePut On
# AuthType Basic
# AuthName Temporary
# AuthUserFile /etc/httpd/conf/passwd
# EnableDelete Off
# umask 007
# <Limit PUT>
# require valid-user
# </Limit>
#</Location>
#
# Allow server status reports, with the URL of http://servername/server-status
# Change the ".your_domain.com" to match your domain to enable.
#
#<Location /server-status>
# SetHandler server-status
# Order deny,allow
# Deny from all
# Allow from .your_domain.com
#</Location>
#
# Allow remote server configuration reports, with the URL of
# http://servername/server-info (requires that mod_info.c be loaded).
# Change the ".your_domain.com" to match your domain to enable.
#
#<Location /server-info>
# SetHandler server-info
# Order deny,allow
# Deny from all
# Allow from .your_domain.com
#</Location>
# Allow access to local system documentation from localhost
Alias /doc/ /usr/share/doc/
<Location /doc>
order deny,allow
deny from all
allow from localhost .localdomain
Options Indexes FollowSymLinks
</Location>
#
# There have been reports of people trying to abuse an old bug from pre-1.1
# days. This bug involved a CGI script distributed as a part of Apache.
# By uncommenting these lines you can redirect these attacks to a logging
# script on phf.apache.org. Or, you can record them yourself, using the script
# support/phf_abuse_log.cgi.
#
#<Location /cgi-bin/phf*>
# Deny from all
# ErrorDocument 403 http://phf.apache.org/phf_abuse_log.cgi
#</Location>
#
# Proxy Server directives. Uncomment the following lines to
# enable the proxy server:
#
#<IfModule mod_proxy.c>
#ProxyRequests On
#
#<Directory proxy:*>
# Order deny,allow
# Deny from all
# Allow from .your_domain.com
#</Directory>
#
# Enable/disable the handling of HTTP/1.1 "Via:" headers.
# ("Full" adds the server version; "Block" removes all outgoing Via: headers)
# Set to one of: Off | On | Full | Block
#
#ProxyVia On
#
# To enable the cache as well, edit and uncomment the following lines:
# (no cacheing without CacheRoot)
#
#CacheRoot "/var/cache/httpd"
#CacheSize 5
#CacheGcInterval 4
#CacheMaxExpire 24
#CacheLastModifiedFactor 0.1
#CacheDefaultExpire 1
#NoCache a_domain.com another_domain.edu joes.garage_sale.com
#</IfModule>
# End of proxy directives.
### Section 3: Virtual Hosts #
# VirtualHost: If you want to maintain multiple domains/hostnames on your
# machine you can setup VirtualHost containers for them.
# Please see the documentation at <URL:http://www.apache.org/docs/vhosts/>
# for further details before you try to setup virtual hosts.
# You may use the command line option '-S' to verify your virtual host
# configuration.
#
# If you want to use name-based virtual hosts you need to define at
# least one IP address (and port number) for them.
#
#NameVirtualHost 12.34.56.78:80
#NameVirtualHost 12.34.56.78 NameVirtualHost 192.168.0.1:80
#
# VirtualHost example:
# Almost any Apache directive may go into a VirtualHost container.
#
#<VirtualHost ip.address.of.host.some_domain.com>
# ServerAdmin webmaster@..._domain.com
# DocumentRoot /www/docs/host.some_domain.com
# ServerName host.some_domain.com
# ErrorLog logs/host.some_domain.com-error_log
# CustomLog logs/host.some_domain.com-access_log common
# <VirtualHost>
# Apache will only listen on port 80 by default. Defining the virtual server
# (below) won't make it automatically listen on the virtual server's port. Listen 443 #Listen 192.168.0.1:80
# SSL Session Cache:
# The cache speeds up processing of multiple parallel requests from
# the same client.
SSLSessionCache shm:/var/cache/ssl_gcache_data(524288)
# General setup for the virtual host DocumentRoot "/home/Gavin/html"
# SSL Engine Switch:
# Enable/Disable SSL for this virtual host.
SSLEngine on
# SSL Cipher Suite:
# List the ciphers that the client is permitted to negotiate.
# See the mod_ssl documentation for a complete list.
#SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
# Server Certificate:
# Point SSLCertificateFile at a PEM encoded certificate. If
# the certificate is encrypted, then you will be prompted for a
# pass phrase. Note that a kill -HUP will prompt again. A test
# certificate can be generated with `make certificate' under
# built time. Keep in mind that if you've both a RSA and a DSA
# certificate you can configure both in parallel (to also allow
# the use of DSA ciphers, etc.)
SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
#SSLCertificateFile /etc/httpd/conf/ssl.crt/server-dsa.crt
# Server Private Key:
# If the key is not combined with the certificate, use this
# directive to point at the key file. Keep in mind that if
# you've both a RSA and a DSA private key you can configure
# both in parallel (to also allow the use of DSA ciphers, etc.)
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
#SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server-dsa.key
# Server Certificate Chain:
# Point SSLCertificateChainFile at a file containing the
# concatenation of PEM encoded CA certificates which form the
# certificate chain for the server certificate. Alternatively
# the referenced file can be the same as SSLCertificateFile
# when the CA certificates are directly appended to the server
# certificate for convinience.
#SSLCertificateChainFile /etc/httpd/conf/ssl.crt/ca.crt
# Certificate Authority (CA):
# Set the CA certificate verification path where to find CA
# certificates for client authentication or alternatively one
# huge file containing all of them (file must be PEM encoded)
# Note: Inside SSLCACertificatePath you need hash symlinks
# to point to the certificate files. Use the provided
# Makefile to update the hash symlinks after changes.
#SSLCACertificatePath /etc/httpd/conf/ssl.crt
#SSLCACertificateFile /etc/httpd/conf/ssl.crt/ca-bundle.crt
# Certificate Revocation Lists (CRL):
# Set the CA revocation path where to find CA CRLs for client
# authentication or alternatively one huge file containing all
# of them (file must be PEM encoded)
# Note: Inside SSLCARevocationPath you need hash symlinks
# to point to the certificate files. Use the provided
# Makefile to update the hash symlinks after changes.
#SSLCARevocationPath /etc/httpd/conf/ssl.crl
#SSLCARevocationFile /etc/httpd/conf/ssl.crl/ca-bundle.crl
# Client Authentication (Type):
# Client certificate verification type and depth. Types are
# none, optional, require and optional_no_ca. Depth is a
# number which specifies how deeply to verify the certificate
# issuer chain before deciding the certificate is not valid.
#SSLVerifyClient require
#SSLVerifyDepth 10
# Access Control:
# With SSLRequire you can do per-directory access control based
# on arbitrary complex boolean expressions containing server
# variable checks and other lookup directives. The syntax is a
# mixture between C and Perl. See the mod_ssl documentation
# for more details.
#<Location />
#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ \
# and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
# and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \
# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \
# or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
#</Location>
# SSL Engine Options:
# Set various options for the SSL engine.
# o FakeBasicAuth:
# Translate the client X.509 into a Basic Authorisation. This means that
# the standard Auth/DBMAuth methods can be used for access control. The
# user name is the `one line' version of the client's X.509 certificate.
# Note that no password is obtained from the user. Every entry in the user
# file needs this password: `xxj31ZMTZzkVA'.
# o ExportCertData:
# This exports two additional environment variables: SSL_CLIENT_CERT and
# SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
# server (always existing) and the client (only existing when client
# authentication is used). This can be used to import the certificates
# into CGI scripts.
# o StdEnvVars:
# This exports the standard SSL/TLS related `SSL_*' environment variables.
# Per default this exportation is switched off for performance reasons,
# because the extraction step is an expensive operation and is usually
# useless for serving static content. So one usually enables the
# exportation for CGI and SSI requests only.
# o CompatEnvVars:
# This exports obsolete environment variables for backward compatibility
# to Apache-SSL 1.x, mod_ssl 2.0.x, Sioux 1.0 and Stronghold 2.x. Use this
# to provide compatibility to existing CGI scripts.
# o StrictRequire:
# This denies access when "SSLRequireSSL" or "SSLRequire" applied even
# under a "Satisfy any" situation, i.e. when it applies access is denied
# and no other module can change it.
# o OptRenegotiate:
# This enables optimized SSL connection renegotiation handling when SSL
# directives are used in per-directory context.
#SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire
<Files ~ "\.(cgi|shtml)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
# Notice: Most problems of broken clients are also related to the HTTP
# keep-alive facility, so you usually additionally want to disable
# keep-alive for those clients, too. Use variable "nokeepalive" for this.
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
# Per-Server Logging:
# The home of a custom SSL log file. Use this when you want a
# compact non-error SSL logfile on a virtual host basis.
CustomLog /var/log/httpd/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
WOULDN'T AN EXTRA $8,000 A MONTH TAKE A LOT OF THE PRESURE OFF OF YOU?
Imagine being able to offer the hottest consumer savings package in America
today and
earn $1,000 each and every time someone joins for $0 DOWN!
Imagine being plugged into a proven system that puts your entire business on
auto-pilot
and has you earning $3,000 every week!
Time keeps ticking... We're all getting older
Are you flush or are you as far behind schedule in accomplishing your goals as
most people?
Lets be honest with one another...
Would you like to make some serious extra money... so that you could:
- Pay off your bills and mortgage?
- Send your children to the finest schools?
- Work when you want to and not when you have to?
I can show you how you can make an extra $5,000 a month working just 10-15 hours
a
week. I know you are probably skeptical... it's normal and healthy. I was
skeptical too the
first time I read this email. But I decided to check it out and I'm glad I
did...
... I made over $12,000 within my first 60 days! :-)
I'll be happy to show you how you can do the same.
To find out more send an e-mail to: make_10k_a_month@... with
<Send-Info> in the subject line
or JUST CLICK: mailto:make_10k_a_month@...?subject=Send_Info
START TODAY WITH $0 DOWN!
100% FINANCING - 100% CASH MACHINE
EVERYBODY IS A PROSPECT - 98% APPROVED
EARN $1,000 ON EACH AND EVERY SALE TO INFINITY!
OVER $15,000 IN FREE BONUSES
We provide you with all the tools and the absolute BEST marketing system
available on
the web. The only thing you need to do is join our team and plug into our proven
system
for success today!
Testimonials:
I did it all with my computer! People sign up like crazy! First I said, ok, I am
financially totally down, I need to give this one a try. But after two weeks I
am
already out of dept! Oh god, I did not expect that! And I am not a sales person
and I
did it! I am so excited, thank you Richard and Mary!
- Randy S. Los Angeles, CA
I was in my chiropractor's office when the secretary was about to throw out a
fax
that they had just received. The fax was similar to this email and caught my
eye. I
did exactly what it told me to do (a fax blast) and in my second day I made
$6,000.
No hard selling, no hustling my friends, just friendly people looking at a great
opportunity and wanting in. Even if it took me a month to make an extra $5,000 I
would have been happy, but $6,000 in my second day, wow! I'm excited!
- Dave W. Newport Beach, CA
If you have been looking for something that is NOT MLM, is turnkey and very easy
to do, then join us now. This is a truly explosive income opportunity! Sign up 3
people and earn $3,000! Sign up 10 people & earn $10,000...how much do you
want?
This is the easiest sale you will EVER make! GET STARTED WITH INCREDIBLE
$0 DOWN + START EARNING $1,000 COMMISSIONS YOUR FIRST MONTH!
All sales wired into your checking account on a daily basis!
To find out more send an e-mail to: make_10k_a_month@... with
<Send-Info> in the subject line
or JUST CLICK: mailto:make_10k_a_month@...?subject=Send_Info
IMPORTANT:
To remove please click:
mailto:make_10k_a_month@...?subject=remove
========================================================
This message is in full compliance with U.S. Federal requirements for commercial
email under bill S.1618 Title lll, Section
301, Paragraph (a)(2)(C) passed by the 105th U.S. Congress and cannot be
considered SPAM since it includes a remove mechanism.
At 07:53 AM 09/08/2001, you wrote:
>I'm sorry, but I don't see a problem here.
>This looks like everything has been built successfully.
>and So it has. What made me think that things weren't all ok was I was
>getting some 'No such file or directory" messages. The executable is there.
Doug
Hi,
I just upgraded my linux-system with redhat 7.1, and while I was at it I
also installed DHCP, it works just fine.
But now i ran in to some trouble, Apache can't no longer find the clients,
so i can't see any pages unless I add a trailing slash to the url. Earlier
this worked, because all clients where in the hosts-file, and dnrd sent the
clients ip back to Apache.
Now, since the IP-adress may change, i can't have them in the hosts-file,
and therefore dnrd doesn't find it.
What have I missed? Is it possible to use dnrd and dhcp together?
I'll be thankfull for any hints!
// Mvh Janne.
Direct Mail Information Industry Goes Internet!
Internet Direct Mail Experts Show You How!
Income Like the Lottery. . .but GUARANTEED!
Real results from real people; before you delete this read Rick and Katie's
experience with this business and then read how Donna turned her life completely
around:
TESTIMONY:
"I have received this email at least a half dozen times over the last year or so
and each time I discarded it as some kind of scam. About six months ago, I got
laid off; money got tight (bills were piling up unpaid and creditors were
calling), we were living off our credit cards and my wife and I (with three
kids) were seriously stressed. We saw this opportunity come up again in our
email and decided, what the heck! I scrounged 20 bucks from my brother (didn't
tell him what it was for) and started this direct mail internet information
business. Our results are overwhelming! We've paid off all of our credit cards
and other debt; we just moved to a new home by a lake in northern California and
for the first time in years, I am totally stress free. We are so incredibly
grateful; this has been an amazing blessing; please don't let it pass you by."
-Richard and Katherine Moore
Sacramento, CA
TESTIMONY:
"I am a single mom with no business experience. Several months ago I was living
in a one bed room apartment and starting in real estate. I saw this letter and
just like the lottery that I play sometime, I threw $20 at it never expecting
anything in return. This has surpassed my wildest imagination! I'm now buying
my own 3 bedroom home and I have a new car; I spend my time with my daughter and
not at a job. The income from this business is just like the lottery but the
results are guaranteed!!!"
-Donna Dunn
New Orleans, LA
Dear Friend;
As a cautious person and a natural skeptic my initial impulse was to treat the
following message as one more piece of overblown, over-hyped bulk mail whose
fate is to be rapidly dispatched to the infinite void. Something however made me
read on and then print out a copy of this message. Try it and judge for
yourself...
I am not a "spammer", I only send this message once. Please delete it now if
such messages are annoying to you.
But I urge you to find 5 minutes to review it. You won't be sorry.
Due to the popularity of this letter on the Internet, a major nightly news
program recently devoted an entire show to the investigation of the program
described below to see if it really can make people money. The show also
investigated whether or not the program was legal. Their findings proved that
there are absolutely no laws prohibiting the participation in the program. This
has helped to show people that this is a simple, harmless and fun way to make
some extra money at home. The results have been truly remarkable. So many people
are participating that those involved are doing much better than ever before.
Since everyone makes more as more people try it out, it's been very exciting.
You will understand once you try it yourself!
Under Bill s.1618 TITLE III passed by the 105th US Congress this letter cannot
be considered spam as long as the sender includes contact information and a
method of removal. This is a one time e-mail transmission. No request for
removal is necessary.
********* THE ENTIRE PLAN IS HERE BELOW *********
EVERYTHING YOU'LL NEED TO GET STARTED IS IN THIS ONE E-MAIL.
*** Print this now or save it to a folder for future reference ***
$$$$$ * I ONLY SEND THIS MESSAGE ONCE * $$$$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
If you would like to make at least $50,000 in less than 90 days please read this
program...THEN READ IT AGAIN!!
THIS IS A LEGITIMATE, LEGAL, MONEY MAKING OPPORTUNITY!!
It does NOT require you to come into contact with people or make or take any
telephone calls. Just follow the instructions and you will make money. This
simplified e-mail marketing program works perfectly 100% EVERY
TIME! E-mail is the sales tool of the future. Take advantage of this virtually
free method of advertising NOW!!! The longer you wait, the more people will be
doing business using email. Get your piece of this action!!!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
$20 = 2 trips to McDonalds for 2 people.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NOTE FROM THE ORIGINATOR OF THIS PROGRAM:
Hello;
My name is Johnathon Rourke.
In mid-year, I received this program in my e-mail. Six months prior
to receiving this program I had been sending away for information on various
business opportunities. All of the programs I received, in my opinion, were not
cost effective. They were either too difficult for me to comprehend, or the
initial investment was too much for me to risk to see if they would work.
But as I was saying, I received this message. I didn't send for it, or ask for
it, they just got my name off a mailing list. THANK GOODNESS FOR THAT!!! After
reading it several times, to make sure I was reading it correctly, I couldn't
believe my eyes! Here was a MONEY MAKING MACHINE I could start immediately
without any debt.
Like most of you I was still a little skeptical and a little worried about the
legal aspects of it all. So I checked it out with the U.S. Post Office
(1-800-725-2161 24-hrs) and they confirmed that it is indeed legal! After
determining that the program was LEGAL I decided "WHY NOT"?!?!
Initially I sent out 10,000 e-mails. It cost me about $15 for my time on-line.
The great thing about e-mail is that I don't need any for printing to send out
the program, and because I also send the product (reports) by e-mail, my only
expense is my time.
In less than one week, I was starting to receive orders for REPORT #1. Within
two weeks I had received 26 orders for REPORT #1. Your goal is to RECEIVE at
least 20 ORDERS FOR REPORT #1 WITHIN 2 WEEKS. IF YOU DON'T, SEND OUT MORE
PROGRAMS UNTIL YOU DO.
My first step in making $50,000 in 90 days was done. By month's end, I had
received 196 orders for REPORT #2. Your goal is to RECEIVE AT LEAST 100+ ORDERS
FOR REPORT #2 WITHIN 4 WEEKS. IF NOT, SEND OUT MORE PROGRAMS UNTIL YOU DO. ONCE
YOU HAVE 100 ORDERS, THE REST IS EASY, RELAX, YOU WILL MAKE YOUR $50,000 GOAL.
Well, I had 196 orders for REPORT #2. 96 more than I needed. So I sat back and
relaxed. Within 60 days of my e-mailing of 10,000, I received $58,000 with more
coming in every day. I paid off ALL my debts and bought a much-needed new car!
Please take your time to read this plan, IT WILL CHANGE YOUR LIFE FOREVER$!!!
Remember, it won't work if you don't try it.
This program does work but you must follow it EXACTLY, especially the rules of
not trying to place your name in a different place. It won't work and
you'll lose out on a lot of money! In order for this program to work, you must
meet your goal of 20+ orders for REPORT #1, and 100+ orders for REPORT #2 and
you will make $50,000 or more in 90 days.
I AM LIVING PROOF THAT IT WORKS!!! If you choose not to participate in this
program, I am sorry. It really is a great opportunity with little cost or risk
to you. If you choose to participate, follow the program
and you will be on your way to financial security. If you are a fellow business
owner and are in financial trouble like I was or you want to start your own
business, consider this a sign. I DID! $$
Follow the program EXACTLY AS INSTRUCTED. Do not change it in any way. It works
exceedingly well as it is now. Remember to e-mail a copy of
this exciting report to everyone you can think of. One of the people you send
this to may send out 50,000... and your name will be on every one of them!
Remember though, the more you send out, the more potential customers you will
reach.
So my friend, I have given you the ideas, information, materials and opportunity
to become financially independent.
Sincerely,
Johnathon Rourke, Rhode Island
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
$20 = = of a round of golf.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Before you delete this program from your in-box, as I almost did, take a
little time to read it and REALLY THINK ABOUT IT. Get a pencil and figure out
what could happen when YOU participate. Figure out the worst possible response
and no matter how you calculate it, you will still make a lot of money! You will
definitely get back what you invested. Any doubts you have will vanish when your
first orders come in. IT WORKS!!!"
-Jody Jacobs; Richmond, VA
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
HERE'S HOW THIS AMAZING PROGRAM WILL MAKE YOU THOUSANDS OF DOLLAR$$$$!!!!
This method of raising capital REALLY WORKS 100% EVERY TIME. I am sure that you
could use up to $50,000 or more in the next 90 days. Before you say, "BULL... "
please read this program carefully. This is not a
chain letter but a perfectly legal money making business.
THE METHOD: As with all direct mail businesses, we build our business by
contacting new people (customers) and selling our products. Every state in the
USA allows you to solicit new customers and we sell and deliver a product for
EVERY dollar received. YOUR ORDERS COME BY MAIL AND ARE FILLED BY E-MAIL so you
are not involved in personal selling. You do it privately in your own home,
store or office. This is the EASIEST marketing plan anywhere! It is simply order
filling by email!
THE PRODUCT: The product is informational and instructional material containing
the secrets on how to open the doors to the magic world of E-COMMERCE , the
information highway, the wave of the future! These reports were written by
experts who have been successful in internet based home businesses.
PLAN SUMMARY:
(1) You order the 4 reports listed below ($5 each) which come to you by
email.
2) Save a copy of this entire letter and put your name as the sender of Report
#1 and move the other names down, REMOVING the last name from the list.
(3) Access Yahoo.com or any of the other major search engines to locate hundreds
of bulk email service companies (search for "bulk email") and have them send 1
million+ email addresses to you.
4) Orders will come to you by postal mail - simply email them the report they
ordered.
Let me ask you - isn't this about as easy as it gets?
*************************************************************
By the way there are over 50 MILLION email addresses with millions more
joining the internet each year so don't worry about "running out" or
"saturation". People are used to seeing and hearing the same advertisements
every day on radio/TV. How many times have you received the same pizza flyers on
your door? Then one day you are hungry for pizza and you order one. Same thing
with this letter. I received this letter many times - then one day I decided it
was time to try it.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
$20 = 1 large combination pizza & wings.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
GETTING STARTED:
YOU CAN START TODAY - JUST DO THESE EASY STEPS:
STEP #1: ORDER THE FOUR REPORTS
Order the four reports shown on the list below (you can't sell them if you don't
order them). For each report, send:
7 $5.00 CASH (wrapped in paper for protection),
7 NAME AND NUMBER OF THE REPORT YOU ARE ORDERING,
7 YOUR E-MAIL ADDRESS,
7 YOUR NAME & RETURN ADDRESS (in case of a problem) to the person whose name
appears on the list next to the report.
MAKE SURE YOUR RETURN ADDRESS IS ON YOUR ENVELOPE IN CASE OF ANY MAIL PROBLEMS!
Within a few days you will receive, by e-mail, each of the four reports. Save
them on your computer so you can send them to the 1,000's of people who will
order them from you.
STEP #2: ADD YOUR MAILING ADDRESS TO THIS LETTER
a. Look below for the listing of the four reports.
b. After you've ordered the four reports, delete the name and address under
REPORT #4. This person has made it through the cycle.
c. Move the name and address under REPORT #3 down to REPORT #4.
d. Move the name and address under REPORT #2 down to REPORT #3.
e. Move the name and address under REPORT #1 down to REPORT #2.
f. Insert your name/address in the REPORT #1 position.
Please make sure you COPY ALL INFORMATION, every name and address, ACCURATELY!
STEP #3: MAILING YOUR LETTER
Take this entire letter, including the modified list of names, and save it to
your computer. Make NO changes to these instructions. Now you are ready to use
this entire message to send by email to prospects.
Report #1 will tell you how to download bulk email software and email addresses
so you can send it out to thousands of people while you sleep! Remember that
50,000+ new people are joining the Internet every month. Your cost to
participate in this is practically nothing (surely you can afford $20 and
initial bulk mailing cost). You obviously already have a computer and an
Internet connection and e-mail is FREE!
There are two primary methods of building your customers:
METHOD #1: SENDING BULK E-MAIL Let's say that you decide to start small, just to
see how it goes, and we'll assume you and all those involved email out only
2,000 programs each.
Let's also assume that the mailing receives a 0.5% response. The response could
be much better. Also, many people will email out hundreds of thousands of
programs instead of 2,000 (Why stop at 2000?). But continuing with this example,
you send out only 2,000 programs.
With a 0.5% response, that is only 10 orders for REPORT #1. Those 10 people
respond by sending out 2,000 programs each for a total of 20,000. Out of those
0.5%, 100 people respond and order REPORT #2. Those 100 mail out 2,000 programs
each for a total of 200,000. The 0.5% response to that is 1,000 orders for
REPORT #3.
Those 1,000 send out 2,000 programs each for a 2,000,000 total. The 0.5%
response to that is 10,000 orders for REPORT #4. That's 10,000 $5 bills for you.
CASH!!!
Your total income in this example is $50 + $500 + $5,000 + $50,000 for a total
of $55,550!!!
REMEMBER FRIEND, THIS IS ASSUMING 1,990 OUT OF THE 2,000 PEOPLE YOU MAIL TO WILL
DO ABSOLUTELY NOTHING AND TRASH THIS PROGRAM! DARE TO THINK FOR A MOMENT WHAT
WOULD HAPPEN IF EVERYONE, OR HALF, SENT IT OUT.
WHAT IF 100,000 letters are sent instead of 2,000? Believe me, many people will
do just that and more!
METHOD #2: PLACING FREE ADS ON THE INTERNET
Advertising on the Internet is very, very inexpensive, and there are HUNDREDS of
FREE places to advertise. Let's say you decide to start small just to see how
well it works. Assume your goal is to get ONLY 10 people to participate on your
first level. (Placing a lot of FREE ads on the Internet will EASILY get a larger
response.) Also assume that everyone else in YOUR ORGANIZATION gets ONLY 10
members. Look how this small number accumulates to achieve the STAGGERING
results below:
1st level--your first 10 send you $5 = $50
2nd level--10 customers from first 10 ($5 x 100) = $500
3rd level--10 customers from those 100 ($5 x 1,000) = $5,000
4th level--10 customers from those 1,000 ($5 x 10,000) = $50,000
$$$$$$ THIS TOTALS $55,550 $$$$$$
AMAZING ISN'T IT? Remember friends, this assumes that the people who
participate only recruit 10 people each. Think for a moment what would
happen if they got 20 people to participate! Most people get 100's of
participants and many will continue to work this program, sending out
programs WITH YOUR NAME ON THEM for years! THINK ABOUT IT!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
$20 = = a months cellular phone bill.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
People are going to get emails about this plan from you or somebody else and
many will work this plan - the question is - Don't you want your name to be on
the emails they will send out?
* * DON'T MISS OUT!!! * * * JUST TRY IT ONCE!!! * * *
* * SEE WHAT HAPPENS!!! *** YOU'LL BE AMAZED!!!* *
ALWAYS PROVIDE SAME-DAY SERVICE ON ALL ORDERS!
This will guarantee that the e-mail THEY send out with YOUR name and address on
it will be prompt because they can't advertise until they receive the report!
GET STARTED TODAY: PLACE YOUR ORDER FOR THE FOUR REPORTS NOW.
Notes: -- ALWAYS SEND $5 CASH (U.S. CURRENCY) FOR EACH REPORT. CHECKS NOT
ACCEPTED. Make sure the cash is protected by wrapping it in two sheets of paper.
On one of those sheets of paper write: (a) the number and name of the report you
are ordering, (b) your e-mail address, and (c) your name and postal address.
REPORT #1: "The Insider's Guide to Advertising for Free on the Internet"
ORDER REPORT #1 FROM:
DOUG AVERY
817 TORRANCE BLVD # 119
REDONDO BEACH, CA 90277
REPORT #2: "The Insider's Guide to Sending Bulk E-mail on the Internet"
ORDER REPORT #2 FROM:
RICHARD NEWTON
12036 NEVADA CITY HIGHWAY
#173
GRASS VALLEY, CA 95945
REPORT #3: "The Secrets to Multilevel Marketing on the Internet"
ORDER REPORT #3 FROM:
KEVIN JARACZ
4805 N. PRIMULA CT.
PHOENIX, AZ. 85037
REPORT #4: "How to Become a Millionaire Utilizing the Power of Multilevel
Marketing and the Internet"
ORDER REPORT #4 FROM:
RICH NEES
11917 E. HARVARD AVE. # 202
AURORA, CO. 80014
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
$20 = is it worth it? You decide.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
******* TIPS FOR SUCCESS *******
TREAT THIS AS YOUR BUSINESS! Be prompt, professional, and follow the directions
accurately. Send for the four reports IMMEDIATELY so you will have them when
the orders start coming in because:
When you receive a $5 order, you MUST send out the requested product, the
report. It is required for this to be a legal business and they need the reports
to send out their letters (with your name on them!) --ALWAYS PROVIDE SAME-DAY
SERVICE ON THE ORDERS YOU RECEIVE.
Be patient and persistent with this program. If you follow the instructions
exactly results WILL follow. $$$$
******* YOUR SUCCESS GUIDELINES *******
Follow these guidelines to guarantee your success:
1. If you don't receive 20 orders for REPORT #1 within two weeks, continue
advertising or sending e-mails until you do.
2. Then, a couple of weeks later you should receive at least 100 orders for
REPORT #2. If you don't, continue advertising or sending e-mails until you do.
3. Once you have received 100 or more orders for REPORT #2, YOU CAN RELAX,
because the system is already working for you, and the cash will continue to
roll in!
THIS IS IMPORTANT TO REMEMBER: Every time your name is moved down on the list,
you are placed in front of a DIFFERENT report. You can KEEP TRACK of your
PROGRESS by watching which report people are ordering from you.
To generate more income, simply send another batch of e-mails or continue
placing ads and start the whole process again! There is no limit to the income
you will generate from this business!
Before you make your decision as to whether or not you participate in this
program. Please answer one question.
ARE YOU HAPPY WITH YOUR PRESENT INCOME OR JOB?
If the answer is no, then please look at the following facts about this super
simple money-making program:
1. NO face to face selling, NO meetings, NO inventory! NO telephone calls, NO
big cost to start! Nothing to learn, NO skills needed! (Surely you know how to
send e-mail?)
2. No equipment to buy - you already have a computer and Internet connection -
so you have everything you need to fill orders!
3. You are selling a product that does NOT COST ANYTHING TO PRODUCE OR SHIP!
(E-mailing copies of the reports is FREE!)
4. All of your customers pay you in CA$H!
This program will change your LIFE FOREVER!! Look at the potential for
you to be able to quit your job and live a life of luxury you could only dream
about! Imagine getting out of debt and buying the car and home of your dreams
and being able to work a super-high paying leisurely easy business from home!
$$$ FINALLY MAKE SOME DREAMS COME TRUE! $$$
ACT NOW! Take your first step toward achieving financial independence.
Order the reports and follow the program outlined above-- SUCCESS will be your
reward. Thank you for your time and consideration.
PLEASE NOTE: If you need help with starting a business, registering a business
name, learning how income tax is handled, etc., contact your local office of the
Small Business Administration (a Federal Agency) 1-800-827-5722 for free help
and answers to questions. Also, the Internal Revenue Service offers free help
via telephone and free seminars about business tax requirements. Your earnings
are highly dependent on your activities and advertising. The information
contained on this site and in the report constitutes no guarantees neither
stated nor implied. In the event that it is determined that this site or report
constitutes a guarantee of any kind, that guarantee is now void. The earnings
amounts listed on this site and in the report are estimates only. Actual income
generated is determined by each individual's effort. If you have any questions
of the legality of this program, contact the Office of Associate Director for
Marketing Practices, Federal Trade Commission, Burea!
u of Consumer Protection in Wash
ington, DC.
================================================
Under Bill s.1618 TITLE III passed by the 105th US Congress this letter cannot
be considered spam as long as the sender includes contact information and a
method of removal. This is a one time e-mail transmission. No request for
removal is necessary.
============ MORE TESTIMONIALS ================
"My name is Mitchell. My wife, Jody and I live in Chicago. I am an accountant
with a major U.S. Corporation and I make pretty good money. When I received this
program I grumbled to Jody about receiving ''junk mail''. I made fun of the
whole thing, spouting my knowledge of the
population and percentages involved. I ''knew'' it wouldn't work. Jody totally
ignored my supposed intelligence and few days later she jumped in with both
feet. I made merciless fun of her, and was ready to lay the old ''I told you
so'' on her when the thing didn't work. Well, the laugh was on me! Within 3
weeks she had received 50 responses. Within the next 45 days she had received
total $147,200.00 ........... all cash! I was shocked. I have joined
Jody in her ''hobby''.
Mitchell Wolf, CPA., Chicago, Illinois
======================================================
''Not being the gambling type, it took me several weeks to make up my mind to
participate in this plan. But conservative that I am, I decided that the initial
investment was so little that there was just no way that I wouldn't get enough
orders to at least get my money back. I was surprised when I found my medium
size post office box crammed with orders. I made $319,210 in the first 12 weeks.
The nice thing about this deal is that it does not matter where people live.
There simply isn't a better investment with a faster return and so big."
-Dan Sondstrom, Alberta, Canada
======================================================
''I had received this program before. I deleted it but later I wondered if I
should have given it a try. Of course, I had no idea who to contact to get
another copy, so I had to wait until I was e-mailed again by someone
else.........11 months passed then it luckily came again...... I did not delete
this one! I made more than $490,000 on my first try and all the money came
within 24 weeks."
-Susan De Suza, New York, N.Y.
======================================================
''It really is a great opportunity to make relatively easy money with little
cost to you. I followed the simple instructions carefully and within 10 days the
money started to come in. My first month I made $20,560.00 and by the end of the
third month my total cash count was $362,840.00. Life is beautiful, Thanx to
internet direct mail.".
-Fred Dellaca, Westport, New Zealand
Hello!
I?m running debian gnu linux sid and dnrd 2.10-1 (bin package). dnrd is my
standard dns chache here at home, we have a dedicated router into the
internet and so we don?t use one of the dialup systems of linux.
Sometimes (every two or three days) all dns lookups here at home are
failing.
After restarting dnrd (/etc/init.d/dnrd restart) I can use dns quite normal.
dnrd has no config file etc. any idea?
cu floh
Hello,
I just upgraded to Linux 2.4.4, which seems to have broken DNRD.
Specifically, when invoking a new instance of dnrd, it almost
always died with the error message:
"ERROR: tcpsock: Couldn't bind local address"
Even though the socket option SO_REUSEADDR had been set, it wouldn't
bind to the address, because the system apparently hadn't completely
shut down the previous instance yet.
This quick'n'dirty (and somewhat naive) fix cured the problem for me
(I bet it could be solved in a more elegant manner, so you may prefer
to interpret this post just as a bug report :-)), by retrying to bind
a few times, in the hope that it will eventually succeed.
Regards,
Svenning
--- dnrd/src/main.c 2001/05/01 11:37:46 1.1.1.2
+++ dnrd/src/main.c 2001/05/01 11:45:32 1.2
@@ -62,7 +62,7 @@
DIR *dirp;
struct dirent *direntry;
struct stat st;
- int rslt;
+ int rslt, retries;
/*
* Setup signal handlers.
@@ -149,8 +149,17 @@
int opt = 1;
setsockopt(tcpsock, SOL_SOCKET, SO_REUSEADDR, &opt, sizeof(opt));
}
- if (bind(tcpsock, (struct sockaddr *)&recv_addr, sizeof(recv_addr)) < 0) {
- log_msg(LOG_ERR, "tcpsock: Couldn't bind local address");
+ /* If we just killed another instance, the system may need some time
+ to release the socket, so we'll retry a few times */
+ for (retries = 0; retries < 10; retries++) {
+ if (bind(tcpsock, (struct sockaddr *)&recv_addr, sizeof(recv_addr)) < 0) {
+ if (retries < 9)
+ usleep(50000);
+ }
+ else break;
+ }
+ if (retries == 10) {
+ log_msg(LOG_ERR, "tcpsock: Couldn't bind local address: %s", strerror(errno));
cleanexit(-1);
}
if (listen(tcpsock, 5) != 0) {
> I have two dnrds listening on the socket. From netstat and lsof they
> are identical. It would not affect the operation since Linux will
send
> new requests to one of the processes (like apache with spare
> processes). I'm just worried that this will lead to processes
spawning
> like rabbits if clients connect and send no data.
Ok, I compiled with -g and ran gdb on it. This time it faulted in a
different place when I connected to it with telnet. It segfaulted.
I suspect there is stack corruption in the tcp_handler thread. I think
the uses of buffer should be audited, especially under strange
circumstances. Admittedly connecting with telnet is strange and normal
clients would not do this so my tests are rather harsh. In the
meantime I found a small bug at tcp.c line 170:
if (tcpsize > (sizeof(buffer) + 2)) {
That should be sizeof(buffer) - 2.
On Tue, 17 Apr 2001 ken_yap_aus@... wrote:
> Has anybody seen anything like this?
I don't recall.
Compile with debugging on, and attach gdb to the process, and
let us know what it's doing.
Brad Garcia
Here's another quirk with dnrd 2.10. This is not related to the glibc
problems I mentioned earlier. It was compiled and run on a SuSE 7.1
system with the latest glibc 2.2.
I start the dnrd. ps shows one process. I do telnet localhost domain.
Then I abort the connection by ^]q, i.e. send no data. ps shows a
child process running and chewing up CPU. I kill it. It dies. But now
I have two dnrds listening on the socket. From netstat and lsof they
are identical. It would not affect the operation since Linux will send
new requests to one of the processes (like apache with spare
processes). I'm just worried that this will lead to processes spawning
like rabbits if clients connect and send no data.
Has anybody seen anything like this?
I'm trying to make a small dnrd package for the floppyfw distribution
(www.zelow.no/floppyfw). This is a one-floppy firewall distribution.
I want to run dnrd as a DNS proxy on the firewall.
The problem is the 1.0.10 distribution of floppyfw uses glibc 2.0.7.
When I run dnrd under floppyfw, it seems to have problems terminating
threads. I say it seems, because I see sockets stuck in CLOSE_WAIT
when I do a netstat -a. The same binary also has a similar problem
exiting on a standard Linux desktop (SuSE 7.1, kernel 2.4.2).
Are there any known issues with older glibcs and libpthread? If so
then I don't need to speculate and debug and will try a different
series of floppyfw, one that uses glibc 2.1.3. Are there any problems
with that too?
IPv6 support would be nice, even if as a translation of IPv4 addresses...
The reason? Well, I've switched to woody recently, and I found that
in.telnetd generates type 28 (AAAA) requests. Since dnrd doesn't handle
these, they get passed on to Demon's nameservers - and, since I'm using
dial-on-demand...
--
| Darren Salt | nr. Ashington, | d youmustbejoking.demon.co.uk
| Risc PC, Spec+3, A3010 | Northumberland | s zap.uk.eu.org
| BBC M128, Linux PC | Toon Army | @ retrospec.co.uk
| JSW. Bug. CTetris. Mindtrap. KPatience. SnakePit.
"He's not going to win this race but second will be the next best thing."
Would YOU like £10,000/month for life?
For a limited period we're offering the opportunity of a lifetime.
Make "tens of £1000's" without selling, experience, administration,
stock, investment or having to answer the phone EVER again.
Take advantage, get involved with the $35 billion dollar a year
adult XXX industry by taking one of our FREE FREE FREE adult web
site businesses and we'll make sure you earn a lot of money.
<<<<Its what over 70% of 250,000,000 surfers are looking for!>>>>
"No experience required"
Our Guarantee:
'We'll give you an adult web site, show you how to promote it and
'IF' YOU don't start earning over £10,000 EACH month within six
(with our help), we'll give YOU the business for FREE'. When you
start to earn over £10,000 a month, you pay £1950.00 once off for
the business.
"We already know that you'll reach the £10,000's target income
quickly"
That's why we don't ask you to part with your money until you've
tasted success.
You don't have to spend a penny to advertise. We'll show and teach
you how to promote it in each of the 4,500 FREE places on the
Internet to give you 70,000 to 100,000 customers each month.
You don't need any experience. We'll give you the site, show you
the way and pay you an excellent income. If you haven't got a PC
or experience we will help you promote your business. With our help,
you can't fail.
You can operate anonymously, even your wife/husband doesn't have to
know where the extra money's coming from. We pay YOU monthly.
We have turned this 'usually expensive to buy business' into a FREE
to start and EASY to operate package with the entire promotional
backup needed to succeed. We'll teach you everything there is to
know, plus guarantee that you earn over £10,000 a month before we
ask you for payment. Its a NO RISK proven business supported by a
'long term sustainable business plan' that will take you on a roller
-coaster ride to SUCCESS.
DON'T MISS THIS - APPLY NOW
E-mail meformore details:
go4it@...?subject=more_details_090
The attached patch allows dnrd 2.10 to save the cache on exit and reload it,
using the existing caching code, on startup. The cache is also saved on
SIGHUP. (This is the first step towards implementing the auto-restarting dnrd
which I described a few weeks ago.)
The cache is currently saved as /tmp/dnrd.cache and has the structure:
char[]: "#!/bin/true\ndnrd cache\n" (unterminated)
char: endianness - 1 if the cache was saved on a little endian machine
char: sizeof (int)
{
int: packet length
char[]: packet dump
} []
If the endianness and int size bytes don't match, the cache is ignored. I'm
unable to test this properly, not having any machines on which these have
values other than 1 and 4 :-)
Also, the cache loader hasn't been tested with malformed cache files; perhaps
some of you might like to help with that.
BTW, Brad: any chance of the trailing spaces in the source files being
removed for 2.11? I have this text editor which is (deliberately) configured
to remove them... :-)
--
| Darren Salt | nr. Ashington, | d youmustbejoking.demon.co.uk
| Risc PC, Spec+3, A3010 | Northumberland | s zap.uk.eu.org
| BBC M128, Linux PC | Toon Army | @ retrospec.co.uk
| ZapEmail. ZapDS. MakeExtern.
Who to himself is law no law doth need, offends no law, and is a king indeed.
Setup description:
| Notebook DNRD offline of forwarded to GATEWAY|
--> |GATEWAY DNRD with master list of local IP,offline or forward to ISP|
Situation:
Notebook online(TP), Sendmail smarthost is GATEWAY, "sendmail -q" sends MX
request to Notebook -> GATEWAY ignores local IP list -> ISP
-> wrong answer.
Workaround: Using "DS[ip.number.of.gateway]" in sendmail.cf
Solution:
Changing the line 820 in "master.c" fixes the problem.
Does this break anything else ?
--- dnrd-2.10/src/master.c Fri Jan 19 21:32:31 2001
+++ dnrd-2.10-patched/src/master.c Wed Mar 7 17:19:34 2001
@@ -817,7 +817,7 @@
/* Repair query for later authority lookup. */
query.name[k] = '.';
}
- else if (query.type == DNS_TYPE_A) {
+ else if (query.type == DNS_TYPE_A||query.type == DNS_TYPE_MX) {
if ((rec = name_lookup(query.name)) != NULL) {
dnsheader_t *x;
staying tuned
Holger Dunkel
--
Holger Dunkel |PGP-Key: finger:dunkel@...
E-Mail: hdunkel2@... |Tel: 0551/ 201-1380
http://www.physik4.gwdg.de/~dunkel|native language: German
I demand that Alan M Buckwalter may or may not have written...
> Is there a version of DNRD for Windows out there ? Can someone point me
> to a binary I can download ?
> The linux version is GREAT, but Windows is a necessary evil in my
> environment.
... oh dear. That one triggered my multipart/alternative bounce generator...
don't mail HTML!
--
| Darren Salt | d youmustbejoking.demon.co.uk | nr. Ashington,
| Risc PC, Spec+3, A3010 | s zap.uk.eu.org | Northumberland
| BBC M128, Linux PC | @ retrospec.co.uk | Toon Army
| We've got Shearer, you haven't
An honest tale speeds best being plainly told.
This is a small patch for dnrd 2.10 to honor comments at the end of
line in /etc/hosts
Please cc: any comments, questions, etc. to me, because im not
subscribed to this list.
*** master.c.orig Thu Mar 1 10:23:46 2001
--- master.c Thu Mar 1 10:27:29 2001
***************
*** 323,329 ****
* name makes one DNS record.
*/
get_word(&p, ipnum, sizeof(ipnum));
! while (*get_hostname(&p, domain, word, sizeof(word)) != 0) {
add_nameip(word, ipnum);
}
}
--- 323,329 ----
* name makes one DNS record.
*/
get_word(&p, ipnum, sizeof(ipnum));
! while (*get_hostname(&p, domain, word, sizeof(word)) != 0 &&
word[0]!='#') {
add_nameip(word, ipnum);
}
}
--
Alex Ivanisevic, 2e systems
Tel: +49 6192 978 497
Handy: +49 0174 310 9333
I demand that Filipe Custódio may or may not have written...
> --- Darren Salt <list@...>
> escreveu:
>>> 2. I wouldn't call auditing a 4000 line program a "major audit" needing a
>>> "possible rewrite";
>> Sanity checking, maybe. Incidentally, I don't suppose that these buffers
>> would overflow as a result of some legitimate query...? (I'm not saying
>> that they shouldn't be patched, but that perhaps some may need to be
>> enlarged or dynamically allocated.)
> To be honnest, I still didn't have enough time to read the DSN RFCs...
> This being said, as soon as I get the time to do it, some log must be
> generated in the cases where a buffer overflow would exist. These log
> events should be enough to identify situations where the buffers are too
> small.
That seems reasonable to me.
>>> 3. The package is absolutely "fixable". To prove my point, I'm attaching
>>> a patch to fix some of the ugliest buffer overflows;
>> And the rest of them? :-)
> I'm not sure there *are* more of them :-)
We'll see... :-)
> I'm now 99% sure that the function get_objectname() used to parse the DNS
> request is buffer-overflow-free.
1% unsure, I suppose. Which is better than being 100% sure, of course.
> With a little effort, I can check the rest of the source code in dns.c...
:-)
Incidentally, patch asked for the filenames when I applied your patch.
Perhaps you could use context or, preferably, unified format instead?
>>> 4. The daemon runs as user "nobody", chrooted to "/etc/dnrd". There is
>>> absolutely no serious security hazard in this package;
>> Well... 2.10 uses chroot... my somewhat patched version doesn't ATM in
>> order that it can reread /etc/hosts on receiving a SIGHUP.
> Just curious, but...
> Why do you need to read /etc/hosts?
/I/ don't :-)
The machine(s) running dnrd could be running as domain master(s). To me, it
makes more sense to use the entries in /etc/hosts - one less file to update
whenever it is decided that a machine should be added or a name be changed or
added.
It can be better to tell dnrd to reread this file and retain its cache than
to restart it, discarding the cache.
>> Although I have an idea which should fix this properly:
>> * A master, unchrooted, process
>> - responds to SIGHUP, starting a new child process;
>> - starts a new child process whenever it notices that none is running;
> Good... Anti-DOS protection :-)
The only other thing which would be useful is to preserve the good entries in
the cache during such a restart. Better to get the above working first,
though, I think.
--
| Darren Salt | d youmustbejoking.demon.co.uk | nr. Ashington,
| Risc PC, Spec+3, A3010 | s zap.uk.eu.org | Northumberland
| BBC M128, Linux PC | @ retrospec.co.uk | Toon Army
| We've got Shearer, you haven't
Those of you who believe in telekinesis, raise MY hand!
--- Darren Salt <list@...>
escreveu:
> > 2. I wouldn't call auditing a 4000 line program a
> "major audit" needing a
> > "possible rewrite";
>
> Sanity checking, maybe. Incidentally, I don't
> suppose that these buffers
> would overflow as a result of some legitimate
> query...? (I'm not saying that
> they shouldn't be patched, but that perhaps some may
> need to be enlarged or
> dynamically allocated.)
To be honnest, I still didn't have enough time to read
the DSN RFCs...
This being said, as soon as I get the time to do it,
some log must be generated in the cases where a buffer
overflow would exist. These log events should be
enough to identify situations where the buffers are
too small.
> > 3. The package is absolutely "fixable". To prove
> my point, I'm attaching a
> > patch to fix some of the ugliest buffer overflows;
>
> And the rest of them? :-)
I'm not sure there *are* more of them :-)
I'm now 99% sure that the function get_objectname()
used to parse the DNS request is buffer-overflow-free.
With a little effort, I can check the rest of the
source code in dns.c...
> > 4. The deamon runs as user "nobody", chrooted to
> "/etc/dnrd". There is
> > absolutely no serious security hazzard in this
> package;
>
> Well... 2.10 uses chroot... my somewhat patched
> version doesn't ATM in order
> that it can reread /etc/hosts on receiving a SIGHUP.
Just curious, but...
Why do you need to read /etc/hosts?
> Although I have an idea
> which should fix this properly:
>
> * A master, unchrooted, process
> - responds to SIGHUP, starting a new child
> process;
> - starts a new child process whenever it notices
> that none is running;
Good... Anti-DOS protection :-)
Regards,
Filipe Custodio
__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail - only $35
a year! http://personal.mail.yahoo.com/
Hi,
I've just started using dnrd on my small home network.
Very nice, much smaller footprint than bind, and much
easier to configure!
I'm running exim on my server, and noticed that when
a client on another of my machines sent local mail,
the dialup would start. It turns out that exim has
some (experimental) support for IPv6 and it was doing
an IPv6 query for the mail submitting machine.
dnrd was seeing the type=28 and just relaying it up
to the forwarders.
Here is an excerpt from rfc1886:
2.1 AAAA record type
The AAAA resource record type is a new record specific to the
Internet class that stores a single IPv6 address.
The value of the type is 28 (decimal).
Since dnrd doensn't (yet) handle these, I think
it is better to not pass them up. I don't think
my ISP was going to find tigger.wardle.home anyway!
Following is a patch to master.c, of rev 2.10,
to authoritatively give no response in my domains.
Thanks,
Jay Wardle
*** master.c.dist Fri Jan 19 12:32:31 2001
--- master.c Sat Feb 10 00:09:30 2001
***************
*** 872,877 ****
--- 872,887 ----
return (x->len);
}
}
+ else if (query.type == 28 /* DNS_TYPE_AAAA ? */ ) {
+ /* this is an IPv6 A query
+ * We can't really handle these, but we should fall
+ * through to see if we *should* have responded.
+ * If we are authoritative, return a failure!
+ * e.g. We shouldn't forward IPv6 queries for our
+ * domain !
+ */
+ log_debug("master: YIKES - got an IPv6 query for %s\n",
query.name);
+ }
else {
/*
* Return here if this type of request isn't handled
***************
I demand that Filipe Custódio may or may not have written...
> Hello fellow dnrd users,
> I'm sorry if I'm briging up an old issue, but I wanted to be half
> confortable with the source code before replying to this.
[snip bug report]
> After carefully browsing through the core of dnrd, I can safely say that:
> 1. Yes, there are a few buffer overflows in the code, mostly in the
> manipulation of the DNS packets;
> 2. I wouldn't call auditing a 4000 line program a "major audit" needing a
> "possible rewrite";
Sanity checking, maybe. Incidentally, I don't suppose that these buffers
would overflow as a result of some legitimate query...? (I'm not saying that
they shouldn't be patched, but that perhaps some may need to be enlarged or
dynamically allocated.)
> 3. The package is absolutely "fixable". To prove my point, I'm attaching a
> patch to fix some of the ugliest buffer overflows;
And the rest of them? :-)
> 4. The deamon runs as user "nobody", chrooted to "/etc/dnrd". There is
> absolutely no serious security hazzard in this package;
Well... 2.10 uses chroot... my somewhat patched version doesn't ATM in order
that it can reread /etc/hosts on receiving a SIGHUP. Although I have an idea
which should fix this properly:
* A master, unchrooted, process
- responds to SIGHUP, starting a new child process;
- starts a new child process whenever it notices that none is running;
- doesn't listen on any port;
- isn't chrooted.
* A child process (perhaps a thread?)
- on startup, reads its config files then chroots itself;
- listens on the usual ports, spawning threads as at present;
- stops listening on receiving a SIGHUP then quits as soon as there are
no queries to handle.
Although it occurs to me that this is only better than restarting it in that
you don't have to remember the command line. Although I'm using
/etc/init.d/dnrd, which is not much more than does 'dnrd `sed -e ...
/etc/dnrd/dnrd.conf`'.
--
| Darren Salt | nr. Ashington, | d youmustbejoking.demon.co.uk
| Risc PC, Spec+3, A3010 | Northumberland | s zap.uk.eu.org
| BBC M128, Linux PC | Toon Army | @ retrospec.co.uk
| Z80Em and 6502Em Support Packs. AY sound support.
You know that you've left the lawn too long when it needs harvesting.
begin 644 dnrd-i.zip
M4$L#!!0``@`(`/>C.2KQ1=X_=@$``/,"```/`!4`971C+VEN:70N9"]D;G)Da
M550)``,RC7`Z:$6$.E5X!```````A5)1:\(P$'YN?L49RZJ.]JPO`\N$P1Y\a
M'&Q[LA:[&C5,T]*K(JC_?4G:#@<.6[C<72[??1]WW0Y^286T8>SMY6/ZC*3#a
M,5JSI[()C:<=QBI!%?A'^+W#I2J7<#Z#.,H*AHQE*0G@;LA!UX/^J$K+JL\<a
MD6UR\!7P=Y.0:@W+?)=*!2K="2!1'F0FQF#P.'/D"F;@KP!%E=D>U@19KE8Pa
M9TZU$8HY!M[V7Y!8:FP!'F$RFXVI2#76?/Z(&`'A56;@UJE8F1.3+NH@">HTa
M)BYV8!J!"R=8-V6`VBLBN'BWR"RTL"V)FDLKT8/>GHS"4E"^/=C"OG>3+R9&a
MOE$ORGBBN[^:ME?):^YQ+QC$_;]J?((XM-RU%XZ>@J'^0Q<-T!TE5^RTC)5La
M9L0#[MC)11%K)I@7?P>8%\6]`5J=_O=_F+IWLQ?NL%Z1]MH<U@S:GOR3TK5&a
MMJ2EDE50#P!.]N'9\#LW@!<.DX>1?FC6,6PQ!:498\V*_@"9BJ2J,!?9'U!+a
M`P04``(`"`#4DT$JPVI*V&T```"'````$@`8`&5T8R]D;G)D+V1N<F0N8V]Na
M9D%#%`!!4D,P2OW__T!5($8S`````````%7+,0[",`Q&X=VG^*4.3(U4(%)Wa
MN`('B(@#D1(;V2GGI[`Q?GIZ$RXJI3XV2Z.JH-3&*&K(8IDFW)P=X\GPD20Ga
MR[^`N_:^&ZT*0U_?U8GF1OMRY:YR<$CJ[&QO-J?9L<0U+/$8EG`^_3NN]`%0a
M2P$"%P,4``(`"`#WHSDJ\47>/W8!``#S`@``#P`-```````!````[8$`````a
M971C+VEN:70N9"]D;G)D550%``,RC7`Z57@``%!+`0(4#10``@`(`-2302K#a
M:DK8;0```(<````2`!@```````````"&@<`!``!E=&,O9&YR9"]D;G)D+F-Oa
M;F9!0Q0`05)#,$K]__]`52!&,P````````!02P4&``````(``@"B````=0(`a
#````a
`a
end