Here you can see an amazing photograph:

Can you find out whats odd?


Can not figure it out?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
?
OK, OK!
In a closer look you can find it out that the black camels are not camels at all, they are just SHADOWS! And the photograph is taken from sky to ground view! Thats just great!



Aniruddha

Just 2-3 days ago I (Aniruddha) , Nitin Kshirsagar, Nityanand Parab & Bhushan Kamble had went to a short trip to Mahabaleshwar.
A few photographs (taken by Bhushan) can be seen here:-

Flying High:
Three para gliders flying in the sky:
(Although only one can be spotted in this photograph)

A comment from the crowd:
If you fell in water, you can try to swim... But what about the skies?
Another comment from the crowd:
Hope, they don't play "Kata Kati" in air!!
(Kata Kati is a game played using Kites, where everybody tries to cut the strings of other's Kites.)

A lot of other images are there and we really missed the high resolution cameras in Thoseghar (A place near Sajjangarh, Satara) waterfall.


Aniruddha

Hi,

Here is a simple guide to harden redhat / centos linux

Although its not based on hard and fast rules, you will get some
good hints how its done.

I hope it helps someone.


Thanks,

Aniruddha

Motivational

Mary Tyler Moore
"Take chances, make mistakes. That's how you grow. Pain nourishes your courage. You have to fail in order to practice being brave."


Samuel Johnson
"Few things are impossible to diligence and skill. Great works are performed not by strength, but perseverance."

Benjamin Disraeli (1804 - 1881)
"Dost thou love life? Then do not squander time, for that's the stuff life is made of."

David Lloyd George
"Don't be afraid to take a big step if one is indicated. You can't cross a chasm in two small jumps."

Narenda Rocherolle
"Aspiring to a small business that does what it does very well is a noble pursuit."

Anne Morrow Lindbergh
"Arranging a bowl of flowers in the morning can give a sense of quiet in a crowded day - like writing a poem, or saying a prayer."

Henry Wadsworth Longfellow
We judge ourselves by what we feel capable of doing, while others judge us by what we have already done.

Benjamin Disraeli (1804 - 1881)
Nurture your mind with great thoughts; to believe in the heroic makes heroes.

Bette Davis (1908 - 1989)
There are new words now that excuse everybody. Give me the good old days of heroes and villains. the people you can bravo or hiss. There was a truth to them that all the slick credulity of today cannot touch.

Bob Dylan (1941 - )
I think of a hero as someone who understands the degree of responsibility that comes with his freedom.

Ralph Waldo Emerson (1803 - 1882)
A hero is no braver than an ordinary man, but he is braver five minutes longer.

Susan J. Bissonette
An optimist is the human personification of spring.

Donald Trump (1946 - ), "Trump: Art of the Deal"
Money was never a big motivation for me, except as a way to keep score. The real excitement is playing the game.


Aniruddha

Hurray,

Thats just great! I had never thought that www.aniruddhas.com will go above a few hundred hits. But it just crossed the silver jubilee mark of twenty five thousand (25,000) hits.

I (Aniruddha) will grab this opportunity to thank all those visitors of www.aniruddhas.com that have visited www.aniruddhas.com and are continuing to visit. I would also like to ensure all the visitors of www.aniruddhas.com, that I will keep on adding some interesting content to the site.

This content will include tutorials, some random thoughts, some poems , jokes and essays.

Only one thing I would complain about is, a lot of visitors send mails through contact me section of the site. It would be better if comments are added to the respective sections. That would help everybody else in getting that information.

I hope that Aniruddha's blog at aniruddhas.com will be of some help to the visitors in some ways.

Thanks again,

Aniruddha

This is in ref. with "A MIMEDefang filter to block spam, mail forging, adding boilerplates, smtp dictionary attacks"


Few Things that I had not mentioned clearly in the above post:
The filter DOES accept the first spam mail from any ip address, adds boilerplate ("the ip has got banned please contact admin in case of any issues...") and then sends it to the recipient.
Then it adds the ip into the database and the next time when spammer tries to connect to the server, it simply rejects the spammer.

This is the default behavior so that false alert should not ban the genuine user forever. This way the filter will become more and more mature as and when new ip addresses are banned.

But yes, If you want this action to be changed to:

"Discarding the first spam message from certain ip address too"
then I would suggest following change in the code:

------------------------Original code snippet---------

my($hits, $req, $names, $report) = spam_assassin_check();
action_change_header("X-Spam-Score","$hits :: $names ");
if (($hits > 10 ) && (!&ISMYIP($RelayAddr))) {
my $dbh = DB_CONNECT();
my $ath = $dbh->prepare(qq{insert into `blockedip` values('$RelayAddr')});
$ath->execute();
$ath->finish();

$dbh->disconnect();
$BOILit = "This is a Spammer $RelayAddr so it has got banned. Contact admin if any issues " ;

}
append_text_boilerplate($entity, "$BOILit ", 0);

}
# DO NOT delete the next line, or Perl will complain.
1;


------------------------Suggested code snippet---------

my($hits, $req, $names, $report) = spam_assassin_check();
action_change_header("X-Spam-Score","$hits :: $names ");
if (($hits > 10 ) && (!&ISMYIP($RelayAddr))) {
my $dbh = DB_CONNECT();
my $ath = $dbh->prepare(qq{insert into `blockedip` values('$RelayAddr')});
$ath->execute();
$ath->finish();

$dbh->disconnect();
$BOILit = "SpAmMeR";
}
if ($BOILit ne "SpAmMeR") {
append_text_boilerplate($entity, "$BOILit ", 0);
} else {
action_discard();
}
}
# DO NOT delete the next line, or Perl will complain.
1;


############################
#CODE ENDED HERE
############################

Few more things that users keep on asking me:

1) About Boiler Plate Data:
These boiler plates are to be added manually and they are not added automatically.
Each mail account can have his /her own boiler plate.
Don't use this as a signature because this costs cpu power and other resources.
This is to be added as per the "Organizational role played by the mail account holder". Thats defined by the organizational policies in most cases.

2) Currently there are no tools to add or remove mail ids, blocked ips, boiler plates or for any data manipulation in the database.

3) About further developments of this basic simple filter:
Hmmm..
I am seriously thinking of creating A GPL based complete spam protection suit. Which would use:
i) SpamAssassin
ii) MIMEDefang
iii) Apache for web based administration
iv) MySQL
v) PHP as a development language for web based control panel.
vi) A MIMEDefang filter to bring i, ii, iv and sendmail together.
AND
vii) Most Important SENDMAIL!

I would appreciate if some one can suggest me features that should be included.

Hey, but I have not promised that I will be doing all of the above though I would be very much happy if I can.




- Aniruddha Thombre
<a href="http://www.aniruddhas.com/" target="_blank">- Aniruddha Thombre</a>

MySQL Replication made simple

Edit /etc/my.cnf on Primary / Master MySQL server from which you want to replicate the data
to add following lines:
------------------------------------------------------
#Name of Binary log File Which has to be provided to slave server too.
log-bin=mysql-bin.log

#Name of the database which you want to replicate or the one which you dont want to be replicated.
binlog-do-db=replicatethisdb
binlog-ignore-db=dontreplicatedb

#Unique server id (Unique among all replication master / slaves)
server-id=1
------------------------------------------------------

---------------------------------------------------------------------
Sample MySQL Configuration file On the Master:
/etc/my.cnf
---------------------------------------------------------------------
[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
log-bin=mysql-bin.log
binlog-do-db=replicatethisdb
binlog-ignore-db=mysql

server-id=1

[mysql.server]
user=mysql
basedir=/var/lib

[mysqld_safe]
log-error=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
---------------------------------------------------------------------


restart mysql on server

Connect to the mysql server:-

mysql -u root -p

Execute following:-

GRANT REPLICATION SLAVE ON *.* TO 'slave'@'remote.hostname' IDENTIFIED BY '<some_password>';
FLUSH TABLES WITH READ LOCK;

#You need to say *.* not replicatethisdb.* as REPLICATION is an administrative right.


SHOW MASTER STATUS;

 +------------------+----------+----------------+------------------+
| File             | Position | Binlog_Do_DB    | Binlog_Ignore_DB |
+------------------+----------+-----------------+------------------+
| mysql-bin.000001 |       98 | replicatethisdb |  mysql           |
+------------------+----------+-----------------+------------------+

#Record filename and Position in above table.


on slave edit in /etc/my.cnf to add :

server-id=2
master-host = my.masterhostip.or.name
master-user = slave
master-password = some_password
replicate-do-db = replicatethisdb
log-warnings


restart mysqld on slave



On slave connect to mysql:

mysql -u root -p
#Stop slave if it is working with:
STOP SLAVE;

#Execute following:
CHANGE MASTER TO MASTER_HOST='my.masterhostip.or.name', MASTER_USER='slave', MASTER_PASSWORD='some_password', MASTER_LOG_FILE='recorded_log_file_name', MASTER_LOG_POS=recorded_log_position;

# that becomes following in our case:
CHANGE MASTER TO MASTER_HOST='my.masterhostip.or.name', MASTER_USER='slave', MASTER_PASSWORD='some_password', MASTER_LOG_FILE='mysql-bin.000001', MASTER_LOG_POS=98;


#Restart both mysql servers to check if it is working.
#To check that fire up following queries:
#This is to be executed on the master server
SHOW MASTER STATUS;

#This is to be executed on the slave server
SHOW SLAVE STATUS;

#Record log file names and positions and check if both are matching. It should, if it is working.

Thats it! We have got MySQL Replication working!
Isn't that "MySQL Replication made simple" ?




- Aniruddha Thombre
Other Tutorials on aniruddhas.com

So, Whats MyDNS?

Its a DNS server.
For further details on how to install and configure it, you may have to visit:-
http://mydns.bboy.net/
or also mysql and postgresql's respective home pages.

We are just going to discuss the features and benefits of MyDNS

MyDNS:- MySQL (Also PostgreSQL) backed DNS server

Features:-

"stability, security, interoperability, and speed" as the author says!

No need to reload dns server after any change in any or all zones.
Speed is not affected no matter how many zones we have, and how many entries a zone has.
As it is backed up by MySQL /PostgreSQL we may load balance / mirror the databases.
The structure may look like this:-

1) Master DNS server
-- has a database holding all required zone info
-- that database is allowed to be replicated on slaves
-- gets zone info from zone files located on respective servers
-- we can use tools such as myphp or admin scripts for myDNS to change the settings for individual or all files manually whenever required
-- We can also use API's for control panels to directly modify the databases on DNS servers If any control panels such as plesk / cpanel etc are used.
-- Developing a simple application for a database with just two tables is not difficult .
-- we can have completely different database server setup if required

2) Slave DNS server
-- database is replicated from the master dns server, every 60 seconds or so

If any thing goes wrong with master dns server (such as major hardware failures) we may immediately add master dns server's ip to the slave and stop replication process.

Homepage for MyDNS is located here:-

http://mydns.bboy.net/


- Aniruddha Thombre

Hi Everyone,


Here is a simple MIMEDefang filter which tries to defend from spam . Although is useful to know how to use mimedefang filters, it is not perfect, it doesn't do any error checking (for example database connection failure and so on ) and needs some improvements.

This filter is supposed to be used where:-

There are multiple servers / hosts on behalf of which this mail server accepts the mails.

Setup:-

mail.example.com (sendmail server with mimedefang): 10.0.0.1
mimedefang on mail.example.com considers 10.0.0.1, 10.0.0.2 as own ip and everything else is the world.

mimedefang on Server needs mysql running which holds database 'defang' (user defang , pass dbpassword)


Features of the first filter:-

filter allows own network to do anything (127.0.0.1 / 10.0.0.1, 10.0.0.7 ) whats with smtp norms

filter blocks ip address if someone tries sending mails to nonexistent users.
filter blocks ip address if someone tries mail forging by own mail ids from other ip addresses.
filter accepts mails for users which exist in database.
filter rejects every command from the ip which is listed as blocked.
filter blocks ip address if someone sends spam scoring more than 10 on spamassassin. Then adds a boiler plate to reciving user that the ip has been blocked and contact admin in case of any issues.

user defined boilerplates can be added (or may be domain specific if needed).

So this filter is supposed to be used to act against:-
spammers and spam, a filter against mail forging, a filter to add boilerplates, a filter to act against smtp dictionary attacks.

#############################################################
database structure:-
Database name:- "defang"

+------------------+
| Tables_in_defang |
+------------------+
| blockedip        |
| mailnames        |
+------------------+

mysql> select * from blockedip;
+--------------+
| ipaddress    |
+--------------+
| 10.0.0.9     |
+--------------+
mysql> select * from mailnames;
+-------------------------------------+-----------------+
| mailname                            | boilerplate     |
+-------------------------------------+-----------------+
| aniruddha@example.com               | Zakkasss....... |
+-------------------------------------+-----------------+


code begins here:-

#############################################################
detect_and_load_perl_modules();

sub DB_CONNECT() {
use DBI;
my $dsn = 'DBI:mysql:defang:localhost';
my $db_user_name = 'defang';
my $db_password = 'dbpassword';
my $dbh = DBI->connect($dsn, $db_user_name, $db_password);
return $dbh;
}

sub ISMYIP($) {
my ($ISITOUR) = @_;
my @NETWORK = ('127.0.0.1' , '10.0.0.1' , '10.0.0.7');
        foreach my $ADDRESS (@NETWORK) {
        if ( $ISITOUR eq $ADDRESS) {
                                return true;
                                }
                }
        }


sub filter_relay($$$) {
my ($hostip, $hostname, $helo) = @_;
{

if ( &ISMYIP($hostip) ) {
            return ('CONTINUE', "You are allowed $hostip");
                        }

my $dbh = DB_CONNECT() or return  ('CONTINUE', "ok");
my $sth = $dbh->prepare(qq{select `ipaddress` from `blockedip` where `ipaddress` = '$hostip'});
$sth->execute();
($ipexists) = $sth->fetchrow_array();
$sth->finish();
$dbh->disconnect();
                  if ($hostip eq $ipexists) {
return ('REJECT', "Go away you spammer!");
            }

return ('CONTINUE', "ok");


}
}

sub filter_sender ($$$$) {
my ($sender, $hostip, $hostname, $helo ) = @_;
if ( &ISMYIP($hostip) ) {
            return ('CONTINUE', "You are allowed $hostip");
                        }
my $dbh = DB_CONNECT() or return  ('CONTINUE', "ok yup");
my $sth = $dbh->prepare(qq{select `ipaddress` from `blockedip` where `ipaddress` = '$hostip'});
$sth->execute();
($ipexists) = $sth->fetchrow_array();
$sth->finish();
#$dbh->disconnect();
                  if ($hostip eq $ipexists) {
$dbh->disconnect();
return ('REJECT', "Did you just decide to spam me?");
            }

my $sndr =  substr("$Sender",1,(length($Sender) - 2 ));
my $sth = $dbh->prepare(qq{select  `mailname` from `mailnames` where `mailname` = '$sndr'});
$sth->execute();
($exists) = $sth->fetchrow_array();
$sth->finish();
if ( ($sndr = $exists) && (!&ISMYIP($RelayAddr) ) ) {
my $ath = $dbh->prepare(qq{insert into `blockedip` values('$RelayAddr')});
$ath->execute();
$ath->finish();
$dbh->disconnect();
return ('REJECT',"Go find someone else you forger");
}
return ('CONTINUE', "ok done");
}


sub filter_recipient ($$$$$$) {
my ($recipient, $sender, $ip, $hostname, $first, $helo) = @_;
my $dbh = DB_CONNECT() or return  ('CONTINUE', "ok");
my $rcp =  substr("@Recipients",1,(length(@Recipients) - 2 ));
my $sth = $dbh->prepare(qq{select  `mailname` from `mailnames` where `mailname` = '$rcp'});
$sth->execute();
($exists) = $sth->fetchrow_array();
$sth->finish();
my $isth = $dbh->prepare(qq{select `ipaddress` from `blockedip` where `ipaddress` = '$ip'});
$isth->execute();
($iexists) = $isth->fetchrow_array();
$isth->finish();

 if ($ip eq $iexists) {
$dbh->disconnect();
                if (&ISMYIP($ip)) {
                        return ('CONTINUE', "ok");
                        }
            return ('REJECT', "Dont try to be wise");
            }


            if ($rcp eq $exists) {
$dbh->disconnect();
            return ('CONTINUE', "ok");
            }
if ( &ISMYIP($ip)) {

return ('REJECT', "$rcp  $recipient  @Recipients ! I really don't know this mail id!");
}
my $ath = $dbh->prepare(qq{insert into `blockedip` values('$ip')});
$ath->execute();
$ath->finish();

$dbh->disconnect();
return ('REJECT', "$recipient! I really don't know this mail id!");

}


sub filter_end ($) {
    my($entity) = @_;
    return if message_rejected();
sub boilit  {
my $ABC = substr("$Sender",1,(length($Sender) - 2 ));
my $dbh = DB_CONNECT();
my $sth = $dbh->prepare(qq{select `boilerplate` from `mailnames` where `mailname` = '$ABC'});
$sth->execute();
($BOILER) = $sth->fetchrow_array();
$sth->finish();
$dbh->disconnect();
if ($BOILER eq "") {
return $ABC;
}
return $BOILER;
}

my $BOILit = &boilit();
my($hits, $req, $names, $report) = spam_assassin_check();
action_change_header("X-Spam-Score","$hits :: $names ");
if (($hits > 10 ) && (!&ISMYIP($RelayAddr))) {
my $dbh = DB_CONNECT();
my $ath = $dbh->prepare(qq{insert into `blockedip` values('$RelayAddr')});
$ath->execute();
$ath->finish();

$dbh->disconnect();
$BOILit = "This is a Spammer $RelayAddr  so it has got banned. Contact admin if any issues " ;

}
append_text_boilerplate($entity, "$BOILit   ", 0);

}
# DO NOT delete the next line, or Perl will complain.
1;
###############################################
# Code ends here
###############################################

This is a very simple filter but still it gives a glimpse at the power of MIMEDefang

Please Visit:- http://www.mimedefang.org/ for further details.

Hope, someone gets benefited from this post 
Let me know if somebody has any suggestions, improvements, or requires any filters developed for.

- Aniruddha Thombre

It was a great movie, somehow I found this quote from the film and felt it should be produced. Its a perfectly practical view towards "What is love?"

The quote:-

Love is a temporary madness. It erupts like an earthquake and then subsides. And when it subsides you have to make a decision. You have to work out whether your roots have become so entwined together that it is inconceivable that you should ever part. Because this is what love is. Love is not breathlessness, it is not excitement, it is not the promulgation of promises of eternal passion. That is just being "in love" which any of us can convince ourselves we are.
Love itself is what is left over when being in love has burned away, and this is both an art and a fortunate accident. Your mother and I had it, we had roots that grew towards each other underground, and when all the pretty blossom had fallen from our branches we found that we were one tree and not two.

- Captain Corelli's Mandolin





- Aniruddha Thombre