<?xml version="1.0" encoding="utf-8" ?>
<?xml-stylesheet href="/blog/templates/default/atom.css" type="text/css" ?>

<feed 
   xmlns="http://www.w3.org/2005/Atom"
   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
   xmlns:dc="http://purl.org/dc/elements/1.1/"
   xmlns:admin="http://webns.net/mvcb/"
   xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
   xmlns:wfw="http://wellformedweb.org/CommentAPI/">
    <link href="http://wilmer.gaast.net/blog/feeds/atom10.xml" rel="self" title="Wilmer's stuff" type="application/atom+xml" />
    <link href="http://wilmer.gaast.net/blog/"                        rel="alternate"    title="Wilmer's stuff" type="text/html" />
    <link href="http://wilmer.gaast.net/blog/rss.php?version=2.0"     rel="alternate"    title="Wilmer's stuff" type="application/rss+xml" />
    <title type="html">Wilmer's stuff</title>
    <subtitle type="html">So today I...</subtitle>
    <icon>http://wilmer.gaast.net/blog/templates/default/img/s9y_banner_small.png</icon>
    <id>http://wilmer.gaast.net/blog/</id>
    <updated>2010-08-15T03:11:51Z</updated>
    <generator uri="http://www.s9y.org/" version="1.4.1">Serendipity 1.4.1 - http://www.s9y.org/</generator>
    <dc:language>en</dc:language>
    <admin:errorReportsTo rdf:resource="mailto:" />

    <entry>
        <link href="http://wilmer.gaast.net/blog/archives/65-Burn-all-spammers!.html" rel="alternate" title="Burn all spammers!" />
        <author>
            <name>Wilmer van der Gaast</name>
            <email>blog@wilmer.gaast.net</email>        </author>
    
        <published>2010-08-08T13:31:06Z</published>
        <updated>2010-08-15T03:11:51Z</updated>
        <wfw:comment>http://wilmer.gaast.net/blog/wfwcomment.php?cid=65</wfw:comment>
    
        <slash:comments>0</slash:comments>
        <wfw:commentRss>http://wilmer.gaast.net/blog/rss.php?version=atom1.0&amp;type=comments&amp;cid=65</wfw:commentRss>
    
    
        <id>http://wilmer.gaast.net/blog/archives/65-guid.html</id>
        <title type="html">Burn all spammers!</title>
        <content type="xhtml" xml:base="http://wilmer.gaast.net/blog/">
            <div xmlns="http://www.w3.org/1999/xhtml">
                I have a habit of always having a tail -f /var/log/mail.log running on my mailserver somewhere. It's noisy, but has been useful in the past. Over the last weeks/months, I noticed open relay probes are getting incredibly popular (again), but also extremely aggressive. They're frequent, done by hundreds of botnet drones all the time.<br />
<br />
Obviously my Postfix is configured properly, so this is mostly a waste of (fairly scarce, on a DSL box several km away from the exchange) bandwidth and annoying noise in the logs.  But getting rid of it is harder than I hoped. :-(<br />
<br />
This is what I have now: iptables -I FORWARD -p tcp --sport 25 -s 192.168.0.0/16 -m string --algo kmp --string '554 5.7.1 <' -j REJECT --reject-with tcp-reset<br />
<br />
This works as-in it kills the connection as soon as my mailserver sends a "554 5.7.1 Relaying denied" response. The REJECT goes to the mailserver, but together with the tcp-reset this also kills the TCP connection on both sides fairly quickly. However, the little fuckers are also using pipelining, so I still get a screen full of logspam for pretty much every attempt. Although this is mostly cosmetic, I'd love to get rid of that crap..<br />
<br />
What I really wonder is, WTF are they even doing this? Are open relays really still that common? Don't they have their botnets already? I guess the open relays are nice multipliers and are also more willing to deal with stuff like graylisting...<br />
<br />
[edit]Looks like "554 5.7.1" is not just about "relaying denied", so possibly not such a great idea. Don't try this at home!  
            </div>
        </content>
        
    </entry>
    <entry>
        <link href="http://wilmer.gaast.net/blog/archives/64-BitlBee,-alive-and-kicking.html" rel="alternate" title="BitlBee, alive and kicking" />
        <author>
            <name>Wilmer van der Gaast</name>
            <email>blog@wilmer.gaast.net</email>        </author>
    
        <published>2010-06-10T22:43:23Z</published>
        <updated>2010-06-10T23:09:34Z</updated>
        <wfw:comment>http://wilmer.gaast.net/blog/wfwcomment.php?cid=64</wfw:comment>
    
        <slash:comments>0</slash:comments>
        <wfw:commentRss>http://wilmer.gaast.net/blog/rss.php?version=atom1.0&amp;type=comments&amp;cid=64</wfw:commentRss>
    
            <category scheme="http://wilmer.gaast.net/blog/categories/3-BitlBee" label="BitlBee" term="BitlBee" />
    
        <id>http://wilmer.gaast.net/blog/archives/64-guid.html</id>
        <title type="html">BitlBee, alive and kicking</title>
        <content type="xhtml" xml:base="http://wilmer.gaast.net/blog/">
            <div xmlns="http://www.w3.org/1999/xhtml">
                As quin in #bitlbee said a little while ago, I stole someone's mojo and found an amazing amount of productivity when it comes to writing code, and it feels great. I'm quit relieved that I can still find plenty of time and motivation to work on BitlBee even though during the week I already spend a lot of time at the keyboard. This after not working much on it for probably at least a year.<br />
<br />
I managed to finally do the <a href="http://wiki.bitlbee.org/UiFix"  class="bb-url">IRC core rewrite + abstraction</a> that I intended to do for so long already. It'll allow adding non-IRC frontends to BitlBee if someone ever wants to, and also the IRC core has the flexibility it needs to add many more features that I wanted for years already, and were impossible to implement without adding even more horrible hacks.<br />
<br />
There's also a libpurple-based backend for a few months already, plus file transfer support (written by Uli Meis and Marijn Kruisselbrink actually, it just took me a long time to merge the >3000-line diff, fortunately <a href="http://code.bitlbee.org/rb/"  class="bb-url">Review Board</a> did make it a lot less painful), all thrown into a bleeding edge branch called <a href="http://code.bitlbee.org/lh/killerbee"  class="bb-url">killerbee</a>. It's code that needs a little bit more work before I really like it.<br />
<br />
Also, BitlBee has Twitter support for about two months already (thanks to hard work done by Geert Mulders), and according to the application registration page on Twitter it has almost 500 users already. It's quite likely that many of those used it for five minutes and went back to a client with more features, but it's still nice to see.<br />
<br />
Last of all, to help with the current lack/fragmentation of online documentation there's now a <a href="http://wiki.bitlbee.org/"  class="bb-url">BitlBee Wiki</a>. Its supposed to have easy-to-find docs about common FAQs, but the easy-to-find part isn't really working out yet since it hardly shows up in any search results. Hopefully this hyperlink from a high-profile weblog will improve that a tiny bit. ;o) Possibly the content is not that good yet either, so if anyone has something to add to it, by all means, please do!<br />
<br />
With a 1.2.8 release coming up, BitlBee is totally alive - and is for almost eight years already. It's been a fun project to work on so far, and hopefully will be for a long time.  
            </div>
        </content>
        
    </entry>
    <entry>
        <link href="http://wilmer.gaast.net/blog/archives/63-Sending-files-using-netcat.html" rel="alternate" title="Sending files using netcat" />
        <author>
            <name>Wilmer van der Gaast</name>
            <email>blog@wilmer.gaast.net</email>        </author>
    
        <published>2010-05-22T19:34:34Z</published>
        <updated>2010-05-22T19:47:55Z</updated>
        <wfw:comment>http://wilmer.gaast.net/blog/wfwcomment.php?cid=63</wfw:comment>
    
        <slash:comments>0</slash:comments>
        <wfw:commentRss>http://wilmer.gaast.net/blog/rss.php?version=atom1.0&amp;type=comments&amp;cid=63</wfw:commentRss>
    
            <category scheme="http://wilmer.gaast.net/blog/categories/1-OSS" label="OSS" term="OSS" />
    
        <id>http://wilmer.gaast.net/blog/archives/63-guid.html</id>
        <title type="html">Sending files using netcat</title>
        <content type="xhtml" xml:base="http://wilmer.gaast.net/blog/">
            <div xmlns="http://www.w3.org/1999/xhtml">
                There are plenty of articles about this already, but I couldn't find anyone who wrote a script to automate this simple task of transferring files using just netcat.<br />
<br />
<div class="bb-code-title">CODE:</div><div class="bb-code">wilmer@ruby&#58;~/src/bitlbee/devel$&#160;ncsend.sh&#160;/audio/03\&#160;Tree\&#160;of\&#160;Life.mp3&#160;<br />
nc&#160;87.198.255.202&#160;6886&#160;|&#160;pv&#160;&#62;&#160;03\&#160;Tree\&#160;of\&#160;Life.mp3</div><br />
<br />
Run it and it will give you a command to run/copy-paste on the remote side/pass to the person who wants the file. It uses pv as a nice progress indicator, and the script assumes pv is available on both sending and receiving ends. But that's good, everyone <i>should</i> have <a href="http://www.ivarch.com/programs/pv.shtml">pv</a> installed on his/her machine.<br />
<br />
I'd just include the code in this little article, but Serendipity would screw up the layout completely, so instead you can <a href="/downloads/ncsend.sh">download it here</a>.  
            </div>
        </content>
        
    </entry>
    <entry>
        <link href="http://wilmer.gaast.net/blog/archives/62-Gotta-love-Unix-hacks....html" rel="alternate" title="Gotta love Unix hacks..." />
        <author>
            <name>Wilmer van der Gaast</name>
            <email>blog@wilmer.gaast.net</email>        </author>
    
        <published>2010-05-05T22:35:07Z</published>
        <updated>2010-05-08T07:17:57Z</updated>
        <wfw:comment>http://wilmer.gaast.net/blog/wfwcomment.php?cid=62</wfw:comment>
    
        <slash:comments>2</slash:comments>
        <wfw:commentRss>http://wilmer.gaast.net/blog/rss.php?version=atom1.0&amp;type=comments&amp;cid=62</wfw:commentRss>
    
    
        <id>http://wilmer.gaast.net/blog/archives/62-guid.html</id>
        <title type="html">Gotta love Unix hacks...</title>
        <content type="xhtml" xml:base="http://wilmer.gaast.net/blog/">
            <div xmlns="http://www.w3.org/1999/xhtml">
                Forgetting your LUKS cryptopart password sucks. But writing a shell oneliner like this:<br />
<br />
<div class="bb-code-title">CODE:</div><div class="bb-code">for&#160;i&#160;in&#160;P{a,4}ssw{0,o}rd{-,}Permut{4,a}tions;&#160;do<br />
&#160;&#160;echo&#160;-n&#160;$i&#160;&#62;&#160;/tmp/pwd<br />
&#160;&#160;cryptsetup&#160;luksOpen&#160;/dev/loop0&#160;test&#160;--keyfile&#160;/tmp/pwd&#160;&amp;&amp;&#160;echo&#160;$i<br />
done</div><br />
<br />
is awesome. :-) Took me only ten minutes to get it back once I had a copy of the superblock onto my workstation.  
            </div>
        </content>
        
    </entry>

</feed>