Lotus.BlueGeek.fr

Category domino pop3
Hi all.

Last week, i decided to take a look at an old problem on my 6.5.4 fp3 domino.

Some time ago, i needed to enable internet site document to play with web site.

Of course, we use smtp and pop3 on this server, so i needed to create internet site documents for smtp and pop3.

If smtp is running well with internet site document enabled, the pop3 server refuse to answer my requests, saying: "Connection attempted on <Organisation>, but not configured in POP3 Internet Site Document"

This problem was old and i found some new things last week:

http://www-01.ibm.com/support/docview.wss?uid=swg21199698 and http://chris-linfoot.net/d6plinks/CWLT-6EVC8Z  show me the way.

In fact, i were not using ip address in the internet site document for pop3, so i checked that and put the local ip address of my server in it.

Then i restarted the pop3 task and the http task to see the result.

And ...Magic...pop3 started to answer my requests.

But today, after the sever restarted during the week end, pop3 still say:"Connection attempted on <Organisation>, but not configured in POP3 Internet Site Document"

All i can do now is to disable the loading of internet site documents on the default document server.

i opened a pmr to lotus as i do not know what to do next.

Edit and solution with read more...

Posted by Benoit MAILLET At 10:40 AM Location Nancy | Permalink | Comments (0)

Category apache domino web attack

If you have not heard about SlowLoris and other HTTP DOS tools, it's time to listen

All version of Apache server are vulnerable by this http dos attack.

very simple to experiment, just a few commands to get the tool and test against any webserver.

For my first test, i have attacked my webserver, a simple apache2 server, listening on the default 80 port.

3 seconds later, the site became unavailable.

The only informations i found against this is:
Mod_antiloris which is a mod for apache. --> this was not working for me, maybe a bad config.
A reverse proxy (not apache based of course) in front of apache. --> the only real solution for the moment, plus it can help to create High availaible service.

After installing the reverse proxy, i decided to test slowloris against my domino server.
3 seconds later, the domino web server became very long to answer but continue to serve page (very slowly)


So i can advice you to check you apache and domino server and put a reverse proxy in front of them.
more info here: http://ha.ckers.org/blog/20090617/slowloris-http-dos/

Posted by Benoit MAILLET At 3:19 PM Location Nancy | Permalink | Comments (0)