response 61 of 260:

Dec 30 22:50 UTC 2005

re #60
User "mirror" was running an SQL exploit via lynx and perl against a site in
Kyrgyzstan.  The files are in mirror's home directory.

response 63 of 260:

Dec 31 19:11 UTC 2005

Without some kind of control on outbound internet e-mail abuse, grex will soon
be unusable as an e-mail sender.  Among other commercial sites, here is a
blacklisting auto reply against grex from AOL:

AOL does not accept e-mail transactions from IP addresses which
generate complaints or transmit unsolicited bulk e-mail.

response 65 of 260:

Jan 2 03:37 UTC 2006

Thanks.  You can safely ignore this for the time being.  It will go away
when picospan is recompiled for the releaes of OpenBSD now running on grex.

response 67 of 260:

Jan 2 08:57 UTC 2006

Any chance you were running fronttalk this time, instead of picospan?

response 69 of 260:

Jan 2 16:39 UTC 2006

For what it's worth, members of my family are among those who have no other
email access.  (This is regarding what cross said, way back.)  You might
be surprised at how many users there are in this state.

response 71 of 260:

Jan 2 17:16 UTC 2006

I got the warning again about the picospan library.  I must simply not be
noticing it the rest of the time.  

Can't you just throttle mail usage for non-members instead?

response 73 of 260:

Jan 2 18:39 UTC 2006

What, again, is the point of turning off e-mail use for non-members, even if
there are few dependent upon it (which is yet to be established)? Non-members
are the future life of Grex as that's the group from which members come. 
If some misuse is the problem, why should that be the reason to punish others?

response 75 of 260:

Jan 2 19:41 UTC 2006

Won't people simply wait 48 hours before spamming then?

response 77 of 260:

Jan 3 03:13 UTC 2006

Sdf has a 1-month free trial period with greatly reduced privileges then you
can send in $1 to join, which spammers are not likely to do.  Would it be
worth the nuisance of making people send in $1 to use outgoing email?

response 79 of 260:

Jan 3 06:03 UTC 2006

Sending a dollar by US mail is not difficult.

response 81 of 260:

Jan 3 14:00 UTC 2006

You could ask people living outside the US to send a postcard instead.
That should be enough to stop spammers.  I was thinking it might be a nuisance
to the treasurer having to collect this extra mail.  I have alternative mail
and  I still prefer grex mail (or sdf) to webmail or pop mail.

sdf takes 2-3 weeks to receive the dollar and activate the account.  

response 83 of 260:

Jan 3 17:37 UTC 2006

I don't think collecting the mail is a problem, but there is added work in 
doing something about it for every new user. Newuser is automatic for a 
reason. Instead, create some kind of online hoop the new user must jump 
through that delays activation of e-mail for a week or so. Like, writing a 
100 word essay....  8^}

response 85 of 260:

Jan 3 21:01 UTC 2006

When I tried to log in at 15:56:18 system time, I got the following
error, followed immediately by a disconnect. 

-bash in malloc(): error: recursive call

I've gotten this once or twice before, always using SSH (and always
from the "SSH Secure Shell" client for Windows (running XP), which
doesn't give any more information about itself than that in the
Help About box).

I connect again fine immediately (well, as soon as I can tell it
to connect and give my password, anyway).