Security

This is the 6th security advisory of FreeBSD for the year 2004. The problem is with FreeBSD’s IPv6 implementation, which in turn does not affect our systems at all, because all servers I maintain has disabled IPv6 completely, since there’s no IPv6 devices available at Beijing University of Technology’s public network.

It’s believed that blog is going to be a victim of business spams, after mail spams :(

看来我不适合做特工，虽然这次是跟一群喜欢入侵的人打交道，但我的目的并不是进攻以两台服务器 :)

I’ve decided to disclose here (to a small group of people) due to the unresponsiveness from the phpBB group, which is the authoritive vendor of phpBB. A official public full disclose of this vulnerablity will be posted to BugTraq someday later.

Finally I have built it and deployed it. Apparantly, it DOES NOT WORK(detects spams correctly, but did not take any actions!), but I hope the virus filter will be working, as the viruses are growing too fast.

The idea of our (Grid Distribute) access control’s design is somewhat simple one. To maintain maximum security, it turns out that we must keep the directory highly consistent, to prevent ACL distribution problems.

From my statistics on beastie.frontfree.net, the winner is Worm.SomeFool family.

I am really disappointing about this news. An earlier discussion on this topic could be founded here.

There are two common way to process unaccepted letters: One is bounce, a.k.a. give the sender a message saying “Your letter is bounced.” Another is discard, in other words, drop the letter silently.