Vista bad!

[linuxgeek]

Ah I get you now. I was wondering what was the check to blacklist.

Again, sounds like a very useful app.

The way I have it segmented out, easily expandable to multiple servers doing firewall blacklisting. Basically 4 scripts.

One logdog calls when an invalid user login is attempted. It pulls out the IP address and send it via socket to another script

Second script keeps a hash of the ip addresses sent to it, when the ip first offended, the last time it offended, and how many times it has offended. If the number of offenses is greater than 3 a second or 20 a minute, this program sends via socket to a script on each of the Internet facing boxes the IP address to block. If more than one address is coming from a class C subnet, the subnet is sent.

Script on the internet facing boxes adds the offending address to the blacklist file read in when the firewall is restarted and adds it to the firewall iptable chain of addresses to drop packets from.

Have one last script that I use to send commands from the command line to the script keeping the hash so I can age out any address that haven't offended in the last 12 hours and restart, stop, clear the hash tables, email the the hash tables to me, etc. Mainly use it to run the aging process via cronjob.

 

[Wok]

The way I have it segmented out, easily expandable to multiple servers doing firewall blacklisting. Basically 4 scripts.

One logdog calls when an invalid user login is attempted. It pulls out the IP address and send it via socket to another script

Second script keeps a hash of the ip addresses sent to it, when the ip first offended, the last time it offended, and how many times it has offended. If the number of offenses is greater than 3 a second or 20 a minute, this program sends via socket to a script on each of the Internet facing boxes the IP address to block. If more than one address is coming from a class C subnet, the subnet is sent.

Script on the internet facing boxes adds the offending address to the blacklist file read in when the firewall is restarted and adds it to the firewall list of addresses to drop packets from.

Have one last script that I use to send commands from the command line to the script keeping the hash so I can age out any address that haven't offended in the last 12 hours and restart, stop, clear the hash tables, email the the hash tables to me, etc. Mainly use it to run the aging process via cronjob.

Again, sounds really, really neat.

 

[linuxgeek]

Again, sounds really, really neat.

I figure as I have a chance, I'll refine it some more. Make it have config files so it can easily be configured, and send it off to the logdog developer as an addon to the software.

Started reading through the Debian policy manual this afternoon. So I'd likely package it so it meets their standards.

 

[nymphony]

The way I have it segmented out, easily expandable to multiple servers doing firewall blacklisting. Basically 4 scripts.

One logdog calls when an invalid user login is attempted. It pulls out the IP address and send it via socket to another script

Second script keeps a hash of the ip addresses sent to it, when the ip first offended, the last time it offended, and how many times it has offended. If the number of offenses is greater than 3 a second or 20 a minute, this program sends via socket to a script on each of the Internet facing boxes the IP address to block. If more than one address is coming from a class C subnet, the subnet is sent.

Script on the internet facing boxes adds the offending address to the blacklist file read in when the firewall is restarted and adds it to the firewall iptable chain of addresses to drop packets from.

Have one last script that I use to send commands from the command line to the script keeping the hash so I can age out any address that haven't offended in the last 12 hours and restart, stop, clear the hash tables, email the the hash tables to me, etc. Mainly use it to run the aging process via cronjob.

LG, if you ever need a new job, I know people that would hire you in a New York minute. You probably do too, actually.

 

[crazycatt]

and here's why: http://badvista.fsf.org/

Microsoft's new Windows Vista operating system is a giant step backward for your freedoms.

.....

As more and more of our lives become digital, it is vital that we protect our digital freedoms just like we have always worked to protect our freedom of expression in print and speech.

Nice post, linuxgeek. Thanks for sharing.
I'm a debian guy myself, for the desktop.
My servers are lfs all the way.

 

[linuxgeek]

LG, if you ever need a new job, I know people that would hire you in a New York minute. You probably do too, actually.

Just changed jobs 2.5 months ago. Much happier than I was at the previous place.

However, programming and even some sysadmining is can be done remotely quite effectively these days. So, as long as it doesn't get in the way of day job, I'm always willing to look at additional contract work for fun and profit.

 

[linuxgeek]

Nice post, linuxgeek. Thanks for sharing.
I'm a debian guy myself, for the desktop.
My servers are lfs all the way.

No prob. seems like one of those thing it was good to get message out to anyone willing to read it.

I've come to have a great appreciation for Debian over the last couple months of using it nearly excusively for work. The only reason I wasn't using it before was the laziness factor of having to take the time to understand the method behind its madness.

 

[nymphony]

Just changed jobs 2.5 months ago. Much happier than I was at the previous place.

However, programming and even some sysadmining is can be done remotely quite effectively these days. So, as long as it doesn't get in the way of day job, I'm always willing to look at additional contract work for fun and profit.

Oh these guys would want every hour of your life, plus your first born, probably. They work people like you pretty hard. It's in Internet Security, which is a happening field these days, but you probably do soimething equally interesting. But if you're ever interested in exploring it, let me know, and I'll hook you up with the folks I know.

 

[linuxgeek]

Oh these guys would want every hour of your life, plus your first born, probably. They work people like you pretty hard. It's in Internet Security, which is a happening field these days, but you probably do soimething equally interesting. But if you're ever interested in exploring it, let me know, and I'll hook you up with the folks I know.

ah .. from that aspect, probably not something I'd jump into any time soon. Was at the last job 15 years where I had been on-call when not at work all but maybe 2 weeks of those 15y. It is nice having a job where, except for when product deadlines approach, the job hours are flexed in 8a to 6p M-F.

Would take a minimum of 6 figures after taxes for me to consider going back to an on-call job any time in the forseeable future.

 

[Simon_Moon]

My servers are lfs all the way.

Damn, yo. Linux From Scratch is some hard-core shit. Much love to you for pulling that off.

 

[nymphony]

I hear you. On-call does suck, bigtime. 15 years? That is a very long time to do those kinds of grueling hours. No wonder you're enjoying your new job.

 

[linuxgeek]

I hear you. On-call does suck, bigtime. 15 years? That is a very long time to do those kinds of grueling hours. No wonder you're enjoying your new job.

Oh very much so. The cool thing with leaving was it was an employer which actually paid for all comptime earned. I had 4 digits worth they paid at my currently hourly equivlent at the time I turned in my keys & cell phone.

 

[linuxgeek]

another psa bump since Lit is a global community.

 

[nymphony]

Oh very much so. The cool thing with leaving was it was an employer which actually paid for all comptime earned. I had 4 digits worth they paid at my currently hourly equivlent at the time I turned in my keys & cell phone.

So they actually rewarded you handsomely for leaving them? Boy, some companies....

 

[linuxgeek]

So they actually rewarded you handsomely for leaving them? Boy, some companies....

I don't think it was their plan.. just policy. I had done my best to bank away my comptime and only use the sick or vacation if I needed to be off work--they were both automatically increased each paycheck.

They also had it set up so there were two kinds of comp time. One for if there was a holiday in the week and one if it was a non-holiday week. Only the non-holiday week comp time had a cap before it had to be used or paid out. Think they had to pay that out to me 5 or 6 times over the 15 years--once, twice in one calendar year. The holiday comp time had no cap and it was not unusual for me to be putting in significant hours over 40 when holidays were around because it was when the least number of users were around to bitch if I took systems down for upgrades. At the time they paidout, I had more hours of holiday comp time than I had of vacation time. And all of it, vacation, sick, and comp time was due me in cash by policy.

I expect HR was figuring out if they really had to write me the check since it took them two months to finally pay and it is a process that usually only takes a month.

 

[pinkstarfish]

My husband has a brand new laptop with Vista built in. He likes it and has no problems with it. He says the reason why people are bitching about it is because people always bitch about new things because they fear change.

He's also the most computer savvy person I've ever met, but that's beside the point.

I know nothing, so I have no say in the matter.

 

[linuxgeek]

My husband has a brand new laptop with Vista built in. He likes it and has no problems with it. He says the reason why people are bitching about it is because people always bitch about new things because they fear change.

He's also the most computer savvy person I've ever met, but that's beside the point.

I know nothing, so I have no say in the matter.

I mainly dislike Micro$oft for their business practices (there is a reason many refer to them as the borg) and buggy code and sluggishness to fix it.

With what the FSF is stating, this falls under their business practices.

 

[pinkstarfish]

I mainly dislike Micro$oft for their business practices (there is a reason many refer to them as the borg) and buggy code and sluggishness to fix it.

With what the FSF is stating, this falls under their business practices.

So your beef is more on principle rather than product.

 

[islandman]

So, bottom line this for me because I'm about a year away from my next computer:

What O/S is out there that will allow me to continue to run Windows application, doesn't subject me to Microsoft's 'Big Brother' mentality, without requiring me to learn code stuff?

 

[Simon_Moon]

So your beef is more on principle rather than product.

*My* beef is on principal and product. MS is a very nasty competitor in the marketplace and the products they sell take about two years to get all of the bugs worked out...just in time to sell you the new buggy version. So basically, end users pay good money to become, in effect, beta testers for MS. If I'm going to be a beta tester, I'm not going to pay for the "privilege" to do so.

I use Linux and Mac OS X. Linux (free) satisfies my desires to hack around with the system, and OS X ($$) is a polished, finished product when you but it. Best of both worlds with no Microsoft.

 

[Simon_Moon]

What O/S is out there that will allow me to continue to run Windows application, doesn't subject me to Microsoft's 'Big Brother' mentality, without requiring me to learn code stuff?

Mac OS X. You can't run the exact same software as on Windows, but for most major software (including M$ Office) there is a Mac version available.

 

[WickedEve]

While I was on the phone with Dell tech support yesterday, waiting for my computer to run all sorts of tests, I asked the guy about Vista. He did all he could to talk me out of it.

 

[Radiohead]

While I was on the phone with Dell tech support yesterday, waiting for my computer to run all sorts of tests, I asked the guy about Vista. He did all he could to talk me out of it.

Thats kinda funny.

If I had my choices, I'd go with XP pro, but I had to get a new computer, so I got shithouse Vista, and turned all the options off, and/or back to "Windows Classic" so I've had no issues yet.

Having said that I had to dig a bit to turn some of the autostartup things off, but hey.

 

[WickedEve]

Thats kinda funny.

If I had my choices, I'd go with XP pro, but I had to get a new computer, so I got shithouse Vista, and turned all the options off, and/or back to "Windows Classic" so I've had no issues yet.

Having said that I had to dig a bit to turn some of the autostartup things off, but hey.

I have an XPS 400 that's just over a year old and it has Windows XP. I asked about upgrading to Vista and the tech guy was like, "NO!" He couldn't say much but he made it clear that I would not want it. I said that I'd get it when I get a new computer, which is about every 3 years. He said the computer I have should last 5 to 10 years and not to worry about upgrading to Vista. I think I got the hint. lol

 

[JazzManJim]

I have an XPS 400 that's just over a year old and it has Windows XP. I asked about upgrading to Vista and the tech guy was like, "NO!" He couldn't say much but he made it clear that I would not want it. I said that I'd get it when I get a new computer, which is about every 3 years. He said the computer I have should last 5 to 10 years and not to worry about upgrading to Vista. I think I got the hint. lol

I know three folks who have upgraded to Vista in the past month and they have uttered more curse words in my presence in that month than they have in all the years I have known them all put together.

I'm pretty convinced right now that Vista is an unfinished program that was shoved out to meet a marketing schedule. Unfortunately, you don't have much choice but to suck it up if you buy a new PC because that's what you're getting. I'm also convinced that Microsoft has taken it upon itself to play the ever-popular Big Daddy and put in all sorts of safeguards to make sure we can't do anything it (and plenty of others) think are inappropriate.

I'm more thankful every day that I shifted over to Mac about six months ago. I was quite content running a very stable and useful Windows 98b, but that has become untenable. It's true that a lot of the neat-o games (even the good shareware ones) aren't going to be available to me, but I can live with that. I have a computer that works every time I need it to.