path: root/xml/htdocs/news/en/gwn/20030526-newsletter.txt

---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of May 26th, 2003.
---------------------------------------------------------------------------
 
==============
1. Gentoo News
==============
  
Summary
-------
  
 * Hardware failures on Oregon State mirror 
 * Gentoo Linux is seeking developers for the GNOME team 
 * Gentoo Linux in the news 
    
Hardware failures on Oregon State mirror
----------------------------------------
  
On Friday, the server that hosts gentoo.oregonstate.edu suffered two hard 
disk failures in its RAID 5 array, one of which was unfortunately the hot 
spare. This caused a series of problems, including a number of corrupted 
files and bad digests. We are actively working with the folks at OSU to 
resolve the problem, both in the short term as well as the long term. In 
the mean time, users are asked to use an alternate mirror[1] until the 
problem has been fully resolved. 

 1. http://www.gentoo.org/main/en/mirrors.xml
    
Gentoo Linux is seeking developers for the GNOME team
-----------------------------------------------------
  
The Gentoo GNOME Desktop team is looking for new developers to help squash 
bugs and keep the Gentoo GNOME-related ebuilds on the bleeding edge of 
development. We are looking for dedicated developers, preferably with 
experience in developing for GNOME/GTK, some experience in creating 
ebuilds and solid problem solving capabilities. A plus would be experience 
in the area of accessibility, possibly in combination with GNOME. Most of 
all we're looking for people who stand completely behind the current GNOME 
development philosophy. If you think you got what it takes and can help us 
out then please send a resume to Marinus Schraal[2], explain why you would 
like to be part of the team, include references to work you've done on OSS 
and provide us with your bugzilla email address if possible. 

 2. foser@gentoo.org
    
Gentoo Linux in the news
------------------------
  
Gentoo Linux has been generating some good press of late, with a mention 
on Slashdot[3] discussing our intent to port Gentoo Linux to the AMD 
Opteron platform. Additionally, Gentoo Linux received a favorable 
review[4] from LinuxWorld.com, where the author states, "[U]ntil further 
notice, Gentoo is now my flavor of Linux." 

 3. 
http://developers.slashdot.org/article.pl?sid=03/05/13/0019245&mode=thread&
tid=185&tid=106
 4. http://www.linuxworld.com/2003/0516.petreley.html
    
==================
2. Gentoo Security
==================
  
Summary
-------
  
 * GLSA: lv 
 * GLSA: cdrtools 
 * GLSA: xinetd 
 * GLSA: ut2003-demo 
 * New Security Bug Reports 
    
GLSA: lv
--------
  
The lv file viewer reads a configuration file from the current directory. 
This could permit a malicious user to insert commands that would be 
executed by lv on viewing a particular file. 
 
 * Severity: High - Potential local root exploit. 
 * Packages Affected: app-text/lv prior to lv-4.49.5 
 * Rectification: Synchronize and emerge lv, emerge clean. 
 * GLSA Announcement[5] 
 
 5. http://forums.gentoo.org/viewtopic.php?t=54905
    
GLSA: cdrtools
--------------
  
cdrecord contains a format string vulnerability that could permit the 
execution of arbitrary code. 
 
 * Severity: High - Arbitrary code execution. 
 * Packages Affected:
 * app-cdr/cdrtools prior to cdrtools-1.11.33-r1 (xcdroast users) 
 * app-cdr/cdrtools prior to cdrtools-1.11.39-r1 (sparc) 
 * app-cdr/cdrtools prior to cdrtools-2.01_alpha14 (others)  
 * Rectification: Synchronize and emerge \=app-cdr/(your_version), emerge 
   clean. 
 * GLSA Announcement[6] 
 * Advisory[7] 
 
 6. http://forums.gentoo.org/viewtopic.php?t=54904
 7. http://marc.theaimsgroup.com/?l=bugtraq&m=105285564307225&w=2
    
GLSA: xinetd
------------
  
The xinet daemon contains a memory leak associated with rejecting 
connections. 
 
 * Severity: Moderate - Memory leak. 
 * Packages Affected: sys-apps/xinetd prior to xinetd-2.3.11 
 * Rectification: Synchronize and emerge xinetd, emerge clean. 
 * GLSA Announcement[8] 
 * Advisory[9] 
 
 8. http://forums.gentoo.org/viewtopic.php?t=54982
 9. http://marc.theaimsgroup.com/?l=bugtraq&m=105068673220605&w=2
    
GLSA: ut2003-demo
-----------------
  
The Unreal Tournament game demo has a bug in how it handles spoofed 
negative index values. This could permit a denial of service attack on the 
client. 
 
The security fix for this bug caused problems with the game itself. As 
such, it has been removed in -r2 of the ebuild until a better patch can be 
integrated. 
 
 * Severity: Moderate - DoS. 
 * Packages Affected: app-games/ut2003-demo prior to ut2003-demo-2206-r1 
 * Rectification: Synchronize and emerge ut2003-demo, emerge clean. 
 * GLSA Announcement[10] 
 * Advisory[11] 
 
 10. http://forums.gentoo.org/viewtopic.php?t=54902
 11. http://marc.theaimsgroup.com/?l=bugtraq&m=105285351304781&w=2
    
New Security Bug Reports
------------------------
  
The following new security bugs were posted this week: 
 
 * [12]imap clients 
 * [13]kernel 
 * [14]app-games/maelstrom 
 * [15]net-analyzer/nessus 
 
 12. http://bugs.gentoo.org/show_bug.cgi?id=21268
 13. http://bugs.gentoo.org/show_bug.cgi?id=21269
 14. http://bugs.gentoo.org/show_bug.cgi?id=21499
 15. http://bugs.gentoo.org/show_bug.cgi?id=21529
    
===============
3. User stories
===============
  
Mathy and lanzone.be
 
Mathy Vanvoorden[16] from Belgium organizes LAN parties together with his 
brother and some other people. He is the webmaster of lanzone.be[17] 
(where he also did the HTML and PHP coding) and politics.be[18]. A few 
months ago the LANzone team decided to switch all their gameservers to 
Gentoo Linux (except for Delta Force Land Warrior, which only runs on 
Windows) and now we're going to learn about the tricks involved:

 16. matje@lanzone.be
 17. http://www.lanzone.be
 18. http://www.politics.be
 
Avoiding backaches
 
All of Mathy's gameservers are thin clients which boot from a Dual Pentium 
III. This setup has many benefits over regular servers. Firstly they don't 
need any hard drives, which saves money and leads to lighter servers which 
is really nice for the backs of the people carrying them. :-) But the 
greatest advantage is the easiness of hooking up a new game server: just 
plug in two network cards, set the MAC adress in dhcpd so the machine gets 
a static IP adress, copy a base directory and have fun!
 
Details on the thin clients
 
The setup used by Mathy and his friends is slightly based on the Linux 
Terminal Server Project[19] but evolved beyond that. Although they are 
using the project's kernel patch, the initrd script has already been 
modified and lots of changes were made to the Gentoo Linux init scripts 
(e.g. removing dependencies so that init wouldn't try to fsck mounted NFS 
systems).

 19. http://www.ltsp.org
 
Using these thin clients is very easy: they are connected to the main 
server using a 100 MBit switch and boot from a floppy (although the 
LANzone guys are thinking about buying network cards with boot roms so 
they can get rid of the disk drives which would be even better for their 
backs ;-). After booting they just present a regular login. Based on which 
user one enters a gameserver will be started. This is accomplished by 
replacing the login shells with a script that starts up the server. So for 
example login in using the UID 'ut2k3instadm' will bring up an UT 2003 
Instagib deathmatch server.
 
Final words
 
Many other small adaptations had to been done for specific gameservers, 
but this would go to far to be covered here. As a last note, LANzone also 
uses Gentoo Linux for the 0.5 Terabyte FTP server (running ProFTPD[20]) 
and the router (using iptables[21] and Squid[22] to limit incoming traffic 
to 5 kB/s per user), although Mathy's thinking about switching the router 
to a BSD because he heard that they handle traffic shaping better than 
Linux and he's curious about trying it out.

 20. http://www.proftpd.net/
 21. http://www.iptables.org
 22. http://www.squid-cache.org/
   
=========================
4. Heard In The Community
=========================
  
Web Forums
----------
  
Gnome 2.3.2
 
Forum veteran Lovechild[23] started a thread announcing the ebuild he 
concocted mere minutes after the new Gnome version was published, and ever 
since then the band of Gnome fanatics in the forums has been merrily 
patching and tweaking it to almost stable use. Get carried away by the 
enthusiasm in this thread:

 * GNOME 2.3.2 is out now. [EBUILDS INSIDE][24] 

 23. http://forums.gentoo.org/profile.php?mode=viewprofile&u=1402
 24. http://forums.gentoo.org/viewtopic.php?t=55683
 
When Portage Chokes
 
You'd expect critical alerts on bugs.gentoo.org or the mailing lists 
first, but whenever something affects a large number of people, many of 
them look to the Forums as the main emergency alert mechanism. Last week, 
Oregon State University's rsync server had temporary trouble that 
immediately got spotted by a lot of users. Check the sticky thread for an 
instant workaround in cases like this: 
 
 * corrupt portage? MD5 sum problems[25] 
 
 25. http://forums.gentoo.org/viewtopic.php?t=55926
     
gentoo-dev
----------
  
JRE Support - Is it worth it?
 
It has been brought up that there might be a couple of good reasons to 
remove the Java Runtime Envirronment (JRE) support from Gentoo. Read the 
full discussion.[26]

 26. http://article.gmane.org/gmane.linux.gentoo.devel/8719
    
=======================
5. Gentoo International
=======================
  
Gentoo Poland Established
 
Their URL[27] points to more than just Poland as a base, but it's essentially
for their compatriots here and there and everywhere that the Polish Gentooists
busied themselves with setting up a complete Gentoo Poland framework. Started
by a handful of activists a few weeks ago, the #gentoo-pl IRC channel on
irc.freenode.net is now quite popular, and the very well organized website has
made great progress in providing translations of the Gentoo documentation, a
forum of their own, and many other features. And to round it all up, the group
around Jaroslaw Swierad is currently bringing together enough translators to
work on a Polish version of the Gentoo Weekly Newsletter, too.

 27. http://gentoo.eu.org
 
German Gentoo User Meeting Planning
 
A small group of Gentoo Linux users, led by Gentoo developer Sascha 
Schwabbauer and Gentoo Linux user Tilman Klar, have started an effort to 
put together a German Gentoo User Meeting. As part of the effort, Sascha 
has put up a web page[29] that asks German Gentoo Linux users where they 
live. The responses to this survey will determine where the meeting will 
be held. Anyone interested in attending is invited to input their location 
using the above form.

 29. http://cybersystem.iq-computing.de/gentoo/
 
Additional details about the German Gentoo Linux user meeting will be made 
available in future editions of the GWN. 
   
================
6. Portage Watch
================
  
The following stable packages were updated or added to portage this week
------------------------------------------------------------------------
  

 * app-arch/file-roller: archive manager for GNOME[30] 
 * app-doc/abs-guide: An advanced reference and a tutorial on bash shell 
scripting.[31] 
 * app-editors/bluefish: Bluefish is a GTK HTML editor for the experienced 
web designer or programmer.[32] 
 * app-editors/gvim: Graphical Vim[33] 
 * app-i18n/canna: A client-server based Kana-Kanji conversion system[34] 
 * app-office/gnucash: A personal finance manager[35] 
 * app-office/scribus: Layout program similar to Adobe® PageMaker, 
QuarkXPress, or Adobe® InDesign[36] 
 * app-pda/gtkpod: GUI for iPod using GTK2[37] 
 * app-sci/elph: ELPH -- general-purpose Gibbs sampler for finding motifs 
in a set of DNA or protein sequences[38] 
 * app-sci/libnova: Celestial Mechanics and Astronomical Calculation 
Library[39] 
 * app-shells/bash-completion: Programmable Completion for bash (includes 
emerge and ebuild commands).[40] 
 * app-shells/tcsh: Enhanced version of the Berkeley C shell (csh)[41] 
 * app-text/a2ps: Any to PostScript filter[42] 
 * dev-db/mysql: A fast, multi-threaded, multi-user SQL database 
server[43] 
 * dev-haskell/haddock: A documentation tool for Haskell[44] 
 * dev-java/blackdown-jdk: Blackdown Java Development Kit 1.3.1[45] 
 * dev-java/blackdown-jre: Blackdown Java Runtime Environment 1.4.1[46] 
 * dev-java/infobus: InfoBus enables dynamic exchange of data between 
JavaBeans component architecture.[47] 
 * dev-java/jaf: Sun's JavaBeans Activation Framework (JAF)[48] 
 * dev-lisp/mule-ucs: A character code translator.[49] 
 * dev-perl/Attribute-Handlers: A Perl module for I/O on in-core objects 
like strings and arrays[50] 
 * dev-python/Cheetah: Python-powered template engine and code 
generator.[51] 
 * dev-python/PyOpenGL: Python OpenGL bindings[52] 
 * dev-python/bsddb3: Python bindings for BerkelyDB[53] 
 * dev-ruby/amrita: A HTML/XHTML template library for Ruby[54] 
 * dev-ruby/amstd: Ruby utility collection by Minero Aoki[55] 
 * dev-ruby/devel-logger: Lightweight logging utility[56] 
 * dev-ruby/fxruby: Ruby language binding to the FOX GUI toolkit[57] 
 * dev-ruby/http-access2: HTTP accessing library[58] 
 * dev-ruby/mysql-ruby: A Ruby extention library to use MySQL[59] 
 * kde-base/arts: aRts, the KDE sound (and all-around multimedia) 
server/output manager[60] 
 * kde-base/kde: KDE 3.1 - merge this to pull in all non-developer 
kde-base/* packages[61] 
 * media-sound/alsa-driver: Advanced Linux Sound Architecture kernel 
modules[62] 
 * media-sound/aumix: Aumix volume/mixer control program.[63] 
 * media-sound/cm: Common Music: An object oriented music composition 
environment in LISP/scheme[64] 
 * media-video/ati-drivers: Ati precompiled drivers for r300, r250 and 
r200 chipsets[65] 
 * media-video/avidemux: Great Video editing/encoding tool. New, gtk2 
version[66] 
 * media-video/avifile: Library for AVI-Files[67] 
 * net-dialup/diald: Daemon that provides on demand IP links via SLIP or 
PPP[68] 
 * net-dialup/freeradius: Free RADIUS server with MySQL support[69] 
 * net-dialup/gnokii: a client that plugs into your handphone[70] 
 * net-firewall/shorewall: Full state iptables firewall[71] 
 * net-fs/nfs-utils: NFS client and server daemons[72] 
 * net-irc/cyclone: IRC daemon with hostname cloaking, SOCKS proxy 
checking and other advanced features[73] 
 * net-irc/kvirc: An advanced IRC Client[74] 
 * net-libs/libnet: library to provide an API for commonly used low-level 
network [75] 
 * net-libs/linc: A library to ease the writing of networked 
applications[76] 
 * net-mail/courier-imap: An IMAP daemon designed specifically for 
maildirs[77] 
 * net-news/yydecode: A decoder for yENC format, popular on Usenet.[78] 
 * net-print/foomatic: Generates printer configurations automagically[79] 
 * net-wireless/bluez-utils: bluetooth utilities[80] 
 * net-wireless/hostap: HostAP wireless drivers[81] 
 * net-www/amphetadesk: AmphetaDesk is a free syndicated news 
aggregator[82] 
 * net-www/apache: Apache Web Server, Version 2.0.x[83] 
 * sys-apps/baselayout: Base layout for Gentoo Linux filesystem (incl. 
initscripts and sysvinit)[84] 
 * sys-apps/console-tools: Console and font utilities[85] 
 * sys-apps/dcron: A cute little cron from Matt Dillon[86] 
 * sys-apps/debianutils: A selection of tools from Debian[87] 
 * sys-devel/distcc: a program to distribute compilation of C code across 
several machines on a network[88] 
 * sys-devel/gcc: The GNU Compiler Collection. Includes C/C++ and java 
compilers[89] 
 * sys-kernel/ac-sources: Full sources for Alan Cox's Linux kernel[90] 
 * sys-libs/cracklib: Password Checking Library[91] 
 * sys-libs/db: Berkeley DB for transaction support in MySQL[92] 
 * sys-libs/glibc: GNU libc6 (also called glibc2) C library[93] 
 * sys-libs/libieee1284: Library to query devices using IEEE1284[94] 
 * x11-base/xfree: Xfree86: famous and free X server[95] 
 * x11-libs/gtkglextmm: C++ bindings for gtkglext[96] 
 * x11-libs/gtkmm: C++ interface for GTK+2[97] 
 * x11-themes/gnome-icon-theme: Gnome2 default icon theme[98] 
 
 30. http://fileroller.sourceforge.net/
 31. http://www.tldp.org/LDP/abs/html
 32. http://bluefish.openoffice.nl/
 33. http://www.vim.org/
 34. http://canna.sourceforge.jp/
 35. http://www.gnucash.org/
 36. http://web2.altmuehlnet.de/fschmid/
 37. http://gtkpod.sourceforge.net/
 38. http://www.tigr.org/software/ELPH/index.shtml
 39. http://libnova.sourceforge.net/
 40. http://www.caliban.org/bash/index.shtml#completion
 41. http://www.tcsh.org/
 42. http://www-inf.enst.fr/~demaille/a2ps/
 43. http://www.mysql.com/
 44. http://www.haskell.org/haddock
 45. http://www.blackdown.org
 46. http://www.blackdown.org
 47. http://java.sun.com/products/javabeans/infobus/index.html
 48. http://java.sun.com/products/javabeans/glasgow/jaf.html
 49. http://www.m17n.org/mule/ 
 50. http://www.cpan.org/author/ABERGMAN/${P}/
 51. http://www.cheetahtemplate.org/
 52. http://pyopengl.sourceforge.net/
 53. http://pybsddb.sourceforge.net/
 54. http://www.brain-tokyo.jp/research/amrita/index.html
 55. http://www.loveruby.net/en/amstd.html
 56. http://rrr.jin.gr.jp/doc/devel-logger/
 57. http://www.fxruby.org/
 58. http://rrr.jin.gr.jp/doc/http-access2/
 59. http://www.tmtm.org/en/mysql/ruby/
 60. http://multimedia.kde.org
 61. http://www.kde.org/
 62. http://www.alsa-project.org/
 63. http://jpj.net/~trevor/aumix/
 64. http://www-ccrma.stanford.edu/software/cm/doc/cm.html
 65. http://www.ati.com
 66. http://fixounet.free.fr/avidemux/
 67. http://avifile.sourceforge.net/
 68. http://diald.sourceforge.net
 69. http://www.freeradius.org
 70. http://www.gnokii.org
 71. http://www.shorewall.net
 72. http://nfs.sourceforge.net/
 73. http://www.slashnet.org
 74. http://www.kvirc.net
 75. http://www.packetfactory.net/libnet/
 76. http://www.gnome.org/
 77. http://www.courier-mta.org/
 78. http://yydecode.sf.net/
 79. http://www.linuxprinting.org/foomatic
 80. http://bluez.sourceforge.net/
 81. http://hostap.epitest.fi/
 82. http://www.disobey.com/amphetadesk/
 83. http://www.apache.org/
 84. http://www.gentoo.org/
 85. http://lct.sourceforge.net/
 86. http://apollo.backplane.com/
 87. http://packages.debian.org/unstable/base/debianutils.html
 88. http://distcc.samba.org/
 89. http://www.gnu.org/software/gcc/gcc.html
 90. http://www.kernel.org/ 
 91. http://www.crypticide.org/users/alecm/
 92. http://www.sleepycat.com/
 93. http://www.gnu.org/software/libc/libc.html
 94. http://cyberelk.net/tim/libieee1284/index.html
 95. http://www.xfree.org
 96. http://gtkglext.sourceforge.net/
 97. http://gtkmm.sourceforge.net/
 98. http://www.gnome.org/

Total categories: 82
 
Total packages: 4428 (32 new packages added this week).
    
===========
7. Bugzilla
===========
  
Summary
-------
  
 * Statistics 
 * Closed Bug Ranking 
 * New Bug Rankings 
    
Statistics
----------
  
The Gentoo community uses Bugzilla (bugs.gentoo.org[99]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. In the last 7 days, activity on the site has resulted 
in: 

 99. http://bugs.gentoo.org
 
 * 343 new bugs this week 
 * 346 bugs closed or resolved this week 
 * 7 previously closed bugs were reopened this week. 
 * 2669 total bugs currently marked 'new' 
 * 339 total bugs currently assigned to developers 
 
There are currently 3056 bugs open in Bugzilla. Of these: 44 are labeled 
'blocker', 111 are labeled 'critical', and 242 are labeled 'major'. 
    
Closed Bug Rankings
-------------------
  
The developers and teams who have closed the most bugs this week are: 
 
 * Martin Holzer[100], with 23 closed bugs[101]  
 * Martin Schlemmer[102], with 14 closed bugs[103]  
 * The Gnome Team[104], with 12 closed bugs[105]  
 * The Games Team[106], with 10 closed bugs[107]  
 * Todd Berman[108], with 8 closed bugs[109]  
 
 100. mholzer@gentoo.org
 101. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED 
&chfield=bug_status&chfieldfrom=2003-05-16&chfieldto=2003-05-22 
&resolution=FIXED&assigned_to=mholzer%40gentoo.org
 102. azarah@gentoo.org
 103. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED 
&chfield=bug_status&chfieldfrom=2003-05-16&chfieldto=2003-05-22 
&resolution=FIXED&assigned_to=azarah%40gentoo.org
 104. gnome@gentoo.org
 105. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED 
&chfield=bug_status&chfieldfrom=2003-05-16&chfieldto=2003-05-22 
&resolution=FIXED&assigned_to=gnome%40gentoo.org
 106. games@gentoo.org
 107. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED 
&chfield=bug_status&chfieldfrom=2003-05-16&chfieldto=2003-05-22 
&resolution=FIXED&assigned_to=games%40gentoo.org
 108. tberman@gentoo.org
 109. 
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED 
&chfield=bug_status&chfieldfrom=2003-05-16&chfieldto=2003-05-22 
&resolution=FIXED&assigned_to=tberman%40gentoo.org

New Bug Rankings
----------------
  
The developers and teams who have been assigned the most new bugs this 
week are: 
 
 * Nicholas Jones[110], with 14 new bugs[111]  
 * The Sound Team[112], with 9 new bugs[113]  
 * Vitaly Kushneriuk[114], with 8 new bugs[115]  
 * The x86-Kernel Team[116], with 8 new bugs[117]  
 * The XFree Team[118], with 8 new bugs[119]  
 
 110. carpaski@gentoo.org
 111. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED 
&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2003-05-16 
&chfieldto=2003-05-22&=&assigned_to=carpaski%40gentoo.org
 112. sound@gentoo.org
 113. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED 
&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2003-05-16 
&chfieldto=2003-05-22&=&assigned_to=sound%40gentoo.org
 114. vitaly@gentoo.org
 115. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED 
&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2003-05-16 
&chfieldto=2003-05-22&=&assigned_to=vitaly%40gentoo.org
 116. x86-kernel@gentoo.org
 117. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED 
&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2003-05-16 
&chfieldto=2003-05-22&=&assigned_to=x86-kernel%40gentoo.org
 118. xfree@gentoo.org
 119. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED 
&bug_status=REOPENED&chfield=assigned_to&chfieldfrom=2003-05-16 
&chfieldto=2003-05-22&=&assigned_to=xfree%40gentoo.org

==================
8. Tips and Tricks
==================
  
Blocking Spam with bogofilter
 
While we've already had one tip on blocking spam with SpamAssassin, this 
week we look at another way to block spam using bogofilter (available in 
portage), crontab and Evolution. This example uses MH style mailboxes but 
could be extended to other types as well. 

This week's tip was submitted by John Mylchreest[120]. 

 120. mailto:johnm_NOSPAM_@gentoo.org
 
You will need bogofilter and a mail client that reads MH style mailboxes 
such as mutt or Evolution. 
 
---------------------------------------------------------------------------
| Code Listing 8.1:                                                       |
| Installing bogofilter                                                   |
---------------------------------------------------------------------------
|                                                                         |
|# emerge bogofilter                                                      |
|                                                                         |
---------------------------------------------------------------------------
 
Create a folder called SPAM and mark it as MH format. Additionally, mark 
Inbox as MH format. 
 
Add a filter for incoming mail that pipes to a shell command. The shell 
command should be /usr/bin/bogofilter. Set the return condition to 0 and 
set the action as "Move to Folder SPAM". Add another action to this filter 
called "Stop Processing". 

Create another filter than runs after the first one. This filter should 
have two criteria. The first is that Size should be greater than 0. The 
second is another external pipe; this time to /usr/bin/bogofilter -Sn 
(notice the -Sn). The -Sn option tells bogofilter to register the text as 
non-spam and to undo any prior registrations of the message as spam. 
 
The last step is to set up a crontab to evaluate spam messages. Add the 
following to your crontab with crontab -e. 
 
---------------------------------------------------------------------------
| Code Listing 8.2:                                                       |
| crontab                                                                 |
--------------------------------------------------------------------------|
|                                                                         |
|Go through the SPAM folder and learn what spam looks like                |
|0 0 * * * cd ~/evolution/local/SPAM/mbox/ ; for i in *; do if \          |
|[ ! "$i" = "*" ] ; then /usr/bin/bogofilter -Ns < $i ; \                 |
|rm $i ; fi ; done                                                        |
|Go through the Inbox folder and learn what spam is not.                  |
|5 0 * * * cd ~/evolution/local/Inbox/mbox/; for i in *; do if \          |
|[ ! "$i" = "*" ] ; then /usr/bin/bogofilter -Sn < $i ; fi ; done         |
|                                                                         |
---------------------------------------------------------------------------
   
==============================
9. Quote/Signature of the week
==============================
  
Old but still good: "There are 10 types of people in the world; those who 
understand binary, and those who don't". (Signature of forums user 
ssjf[121])

 121. http://forums.gentoo.org/profile.php?mode=viewprofile&u=11634
   
===========================
10. Moves, Adds and Changes
===========================
  
Moves
-----
  
The following developers recently left the Gentoo team: 
 
 * none this week 
    
Adds
----
  
The following developers recently joined the Gentoo Linux team:
 
 * none this week 
    
Changes
-------
  
The following developers recently changed roles within the Gentoo Linux 
project.
 
 * none this week 
    
=====================
11. Contribute to GWN
=====================
  
Interested in contributing to the Gentoo Weekly Newsletter? Send us an 
email[122].

 122. gwn-feedback@gentoo.org
   
================
12. GWN Feedback
================
  
Please send us your feedback[123] and help make GWN better.

 123. gwn-feedback@gentoo.org
   
================================
13. GWN Subscription Information
================================
  
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn-subscribe@gentoo.org.
 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn-unsubscribe@gentoo.org from the email address you are 
subscribed under.
   
===================
14. Other Languages
===================
  
The Gentoo Weekly Newsletter is also available in the following languages:
 
 * Dutch[124] 
 * English[125] 
 * German[126] 
 * French[127] 
 * Japanese[128] 
 * Italian[129] 
 * Portuguese (Brazil)[130] 
 * Portuguese (Portugal)[131] 
 * Russian[132] 
 * Spanish[133] 
 * Turkish[134] 
 
 124. http://www.gentoo.org/news/be/gwn/gwn.xml
 125. http://www.gentoo.org/news/en/gwn/gwn.xml
 126. http://www.gentoo.org/news/de/gwn/gwn.xml
 127. http://www.gentoo.org/news/fr/gwn/gwn.xml
 128. http://www.gentoo.org/news/ja/gwn/gwn.xml
 129. http://www.gentoo.org/news/it/gwn/gwn.xml
 130. http://www.gentoo.org/news/br/gwn/gwn.xml
 131. http://www.gentoo.org/news/pt/gwn/gwn.xml
 132. http://www.gentoo.org/news/ru/gwn/gwn.xml
 133. http://www.gentoo.org/news/es/gwn/gwn.xml
 134. http://www.gentoo.org/news/tr/gwn/gwn.xml
  
Kurt Lieber <klieber@gentoo.org> - Editor
AJ Armstrong <aja@clanarmstrong.com> - Contributor
Brice Burgess <nesta@iceburg.net> - Contributor
Michael Kohl <citizen428@gentoo.org> - Contributor
Yuji Carlos Kosugi <carlos@gentoo.org> - Contributor
Rafael Cordones Marcos <rcm@sasaska.net> - Contributor
David Narayan <david@phrixus.net> - Contributor
Ulrich Plate <plate@gentoo.org> - Contributor
Peter Sharp <mail@psharp.uklinux.net> - Contributor
Kim Tingkaer <kim@thinkit.dk> - Contributor
Mathy Vanvoorden <matje@lanzone.be> - Dutch Translation
Hendrik Eeckhaut <Hendrik.Eeckhaut@UGent.be> - Dutch Translation
Jorn Eilander <sephiroth@quicknet.nl> - Dutch Translation
Bernard Bernieke <bernieke@bernieke.com> - Dutch Translation
Peter Ter Borg <peter@daborg.nl> - Dutch Translation
Jochen Maes <linux@sejo.be> - Dutch Translation
Roderick Goessen <rgoessen@home.nl> - Dutch Translation
Gerard van den Berg <gerard@steelo.net> - Dutch Translation
Matthieu Montaudouin <mat@frheaven.com> - French Translation
Martin Prieto <riverdale@linuxmail.org> - French Translation
Antoine Raillon <cabec2@pegase.net> - French Translation
Sebastien Cevey <seb@cine7.net> - French Translation
Jean-Christophe Choisy <mabouya@petitefleure.org> - French Translation
Steffen Lassahn <madeagle@gentoo.org> - German Translation
Matthias F. Brandstetter <haim@gentoo.org> - German Translation
Thomas Raschbacher <lordvan@gentoo.org> - German Translation
Klaus-J. Wolf <yanestra@gentoo.org> - German Translation
Marco Mascherpa <mush@monrif.net> - Italian Translation
Claudio Merloni <paper@tiscali.it> - Italian Translation
Christian Apolloni <bsolar@bluewin.ch> - Italian Translation
Daniel Ketel <kage-chan@gentoo.org> - Japanese Translation
Yoshiaki Hagihara <hagi@p1d.com> - Japanese Translation
Andy Hunne <andy@billydpro.com> - Japanese Translation
Yuji Carlos Kosugi <carlos@gentoo.org> - Japanese Translation
Yasunori Fukudome <yasunori@mail.portland.co.uk> - Japanese Translation
Takashi Ota <088@t.email.ne.jp> - Japanese Translation
Ventura Barbeiro <venturasbarbeiro@ig.com.br> - Portuguese (Brazil) 
Translation
Bruno Ferreira <blueroom@digitalmente.net> - Portuguese (Portugal) 
Translation
Gustavo Felisberto <gustavo@felisberto.net> - Portuguese (Portugal) 
Translation
Ricardo Jorge Louro <rjlouro@rjlouro.org> - Portuguese (Portugal) 
Translation
Ricardo Nogueira <R.Nogueira@records.usyd.edu.au> - Portuguese (Brazil) 
Translation
Sergey Kuleshov <infapx@yandex.ru> - Russian Translation
Dmitry Suzdalev <dimsuz@mail.ru> - Russian Translation
Lanark <lanark@lanark.com.ar> - Spanish Translation
Rafael Cordones Marcos <rcm@sasaska.net> - Spanish Translation
Julio Castillo <julio@castillobueno.com> - Spanish Translation
Sergio Gómez <s3r@fibertel.com.ar> - Spanish Translation
Pablo Pita Leira <pablo.leira@pitagoral.com> - Spanish Translation
Carlos Castillo <carlos@castillobueno.com> - Spanish Translation
Tirant <tirant@menta.net> - Spanish Translation
Jaime Freire <jfreire@ya.com> - Spanish Translation
Lucas Sallovitz <krusty_ar@yahoo.com> - Spanish Translation
Aycan Irican <aycan@core.gen.tr> - Turkish Translation
Bugra Cakir <bugra@myrealbox.com> - Turkish Translation
Cagil Seker <cagils@biznet.com.tr> - Turkish Translation
Emre Kazdagli <emre@core.gen.tr> - Turkish Translation
Evrim Ulu <evrim@core.gen.tr> - Turkish Translation
Gursel Kaynak <gurcell@core.gen.tr> - Turkish Translation