Article delegate-en/677 of [1-5169] on the server localhost:119
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
[Reference:<_A676@delegate-en.ML_>]
Newsgroups: mail-lists.delegate-en

[DeleGate-En] Re: DeleGate/5.9.10 -- emergent service stop on fatal signals (intrusion!?)
13 Jan 2000 14:45:22 GMT ysato@etl.go.jp (Yutaka Sato)


On 01/13/00(19:47) you Pal Loberg <puqbabdyi-6rbemlgmwo3r.ml@ml.delegate.org> wrote
in <_A676@delegate-en.ML_>
 |>  + security: emergent service stop on fatal signals (which can be intrusion)
 |
 |I'm running a generalist server and some specialists, bowth version 5.9.12,
 |but the generalist is continously blocking my specialists because of this
 |feature (I get a lot of segfaults in the generalist, unknown why).

I will appreciate if you would send the LOGDIR/abort/* files to me. 
If the shutout is caused on FTP access in "XDC" mode data transfer
between DeleGates, you can disable XDC by defining the environment
variable "NOXDC", like setenv NOXDC.

 |Is it possible to turn off this feature for certain IP-addresses? I trust
 |my specialists, but the generalist apparently does not :)

No, unfortunately.

 |Currently I'm running a cron job to delete the adm/shutout/* files, but I
 |do not feel this is a good solution in the long run.

You can expire shutout files with "TIMEOUT" parameter like this:

  TIMEOUT=shutout:60s

Cheers,
Yutaka
--
Yutaka Sato <ysato@etl.go.jp> http://www.etl.go.jp/~ysato/   @ @ 
Computer Science Division, Electrotechnical Laboratory      ( - )
1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan            _<   >_

  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V