| Author |
Nymserver in testing
|
|
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
I have a nymserver running at nym.mixmin.net. If anyone fancies trying it
out I'd appreciate some feedback.
It's based on the aarg code that's modified to be openpgp compliant. In
addition, it contains no IDEA support so encryption requests
(Encrypt-Key, Encrypt-Idea) will result in 3des encryption being used.
This only affects the nymserver-remailer leg of the reply block,
directives for other phases of the reply block depend on the config of
the selected remailers. I'd suggest using the Encrypt-Des directive for
all legs.
All messages are passed through spamassassin to try and weed out the
junk. Obviously the nature of a nymserver will require some customised
scoring that I'll hopefully improve over time. Suggestions welcomed.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iQEVAwUBRW2TlGoLu9HNUqmMAQrnjgf/VQuKEAqqD7SQWSR7cahvEHxl1pk1C8Yw
H3b8ij+FyTWMmA+HrXhRMRxfBX4Nfm9n2uk7WrPK
gWYodybshV31BrZjPNXR8Gg4
U9cfs+KlrK+P6BGVhSdqD5S4N0MDquCpzD6Fh+Tf
5b/K5SeJxz0S7kOoR3J4kJe3
SuftIXFQECEfqLOJDFPDrgJK+ROW7Gk+asa/HtCDtvK+ut6Q1oM31NAYJ1ylzxod
gh7MzNl1PcE79LUFx3MBKi7kaxj8XC1o8T4Qi9OW
c6H00uuvUVwOQ8u6Rtsd3eNe
TZF/ 2hkZAAjZTkjxRFaXiXbhyXhjv+XuHbFRNdlB8qyD
goHXHiJHEQ==
=HZov
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Eelbash Admin 2006-11-29, 1:12 pm |
| On Wed, 29 Nov 2006 14:05:09 +0000, Zax wrote:
Any chance of your code being made available?
| |
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Wed, 29 Nov 2006 09:14:28 -0500, Eelbash Admin wrote in
Message-Id: <ebfc3$456d95c2$cef8886b$8024@TEKSAVVY.COM>:
> Any chance of your code being made available?
You can get it from http://sourceforge.net/projects/nymserv under the
Code section. Nothing has ever been published from this project but the
code has been tested for some time by aarg/hod.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iQEVAwUBRW2YD2oLu9HNUqmMAQquHAf/Zjl6n1YblfnRyquGqFRRaiDPgQMFE58t
dl+s1+p5cm6F/ ZRUDZayJw+xsLsDVzEhFiSTQoIUQx6V1jKNiiex4
BzUDJXxk+9f
ubc1wtvx3EYirKRLXWn5O2B58yU9APMHpDGlHkIS
oycE99ZV8MzscbK8PifTxyLQ
h7/m/cv3MnLQB+qmBJg97oWiNUQp5/Q1FUrlDIvVoHC3iPtqMCYxP6lKBNlGEz5I
ZaZov44Zy6TfHZmSZQbWV60BMlFy2YJPeTv6tMKd
Vrvp9bbYnParTTU4s4K+Gr7f
L8758dk4xloiaufj8oKCIJXx7ALY9Q4deIGLerix
RDMoHE+QvxRAKg==
=6ROe
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Eelbash Admin 2006-11-29, 1:12 pm |
| On Wed, 29 Nov 2006 14:24:15 +0000, Zax wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On Wed, 29 Nov 2006 09:14:28 -0500, Eelbash Admin wrote in
> Message-Id: <ebfc3$456d95c2$cef8886b$8024@TEKSAVVY.COM>:
>
>
> You can get it from http://sourceforge.net/projects/nymserv under the
> Code section. Nothing has ever been published from this project but the
> code has been tested for some time by aarg/hod.
Thanks.
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (GNU/Linux)
>
> iQEVAwUBRW2YD2oLu9HNUqmMAQquHAf/Zjl6n1YblfnRyquGqFRRaiDPgQMFE58t
> dl+s1+p5cm6F/ ZRUDZayJw+xsLsDVzEhFiSTQoIUQx6V1jKNiiex4
BzUDJXxk+9f
> ubc1wtvx3EYirKRLXWn5O2B58yU9APMHpDGlHkIS
oycE99ZV8MzscbK8PifTxyLQ
> h7/m/cv3MnLQB+qmBJg97oWiNUQp5/Q1FUrlDIvVoHC3iPtqMCYxP6lKBNlGEz5I
> ZaZov44Zy6TfHZmSZQbWV60BMlFy2YJPeTv6tMKd
Vrvp9bbYnParTTU4s4K+Gr7f
> L8758dk4xloiaufj8oKCIJXx7ALY9Q4deIGLerix
RDMoHE+QvxRAKg==
> =6ROe
> -----END PGP SIGNATURE-----
| |
| Christian Danner 2006-11-29, 1:12 pm |
| Hi Steve!
>I have a nymserver running at nym.mixmin.net. If anyone fancies trying it
>out I'd appreciate some feedback.
Congratulations. That's great news.
I just sent a config request.
>It's based on the aarg code that's modified to be openpgp compliant. In
>addition, it contains no IDEA support so encryption requests
>(Encrypt-Key, Encrypt-Idea) will result in 3des encryption being used.
>This only affects the nymserver-remailer leg of the reply block,
>directives for other phases of the reply block depend on the config of
>the selected remailers. I'd suggest using the Encrypt-Des directive for
>all legs.
Encrypt-CAST is o.k.?
>All messages are passed through spamassassin to try and weed out the
>junk. Obviously the nature of a nymserver will require some customised
>scoring that I'll hopefully improve over time. Suggestions welcomed.
Finger support will come?
Currently I feel lost without a nym list at hand ;-)
Kind regards
Christian
--
OmniMix .. protect your privacy
http://www.danner-net.de/om.htm
| |
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On 29 Nov 2006 15:59:15 -0000, Christian Danner wrote in
Message-Id: <1YQ4SL2Z39050.4161458333@anonymous.poster>:
> Encrypt-CAST is o.k.?
Yes it is. I debated treating all encrypt-* requests as 3des, but at
the moment encrypt-cast is the one exception.
> Finger support will come?
It can if there's a requirement.
> Currently I feel lost without a nym list at hand ;-)
Send an email to list@nym.foo 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iQEVAwUBRW2wM2oLu9HNUqmMAQoNsgf/XOTwPRoOkE9E8/otjU7yecOBmACeFdhe
2/y9MC/ YiKVzJkChKvXAnn9GrVj29CiQAqz695jAfZzfdhi
rD+Y0Ew1/3vv++rSt
fQ4yPXwrlKxI59NjLy6eE+CFEl4HdAFrwkdOGoKD
UEqOL8NAKd3AUur5WaFHNADk
Q4WUiclXchLCpB7DYnoCj4AffAcml8FfZSEDt30H
tjQu5EDgJioiBJ7wx5acrpmK
UtLXats/ 8dRTLFa+cF1Uk2bIxztJA5j06kg01gp6n460LEBM
8QQI3RWvr6AtdWl+
y6j2gvTu1bT1+wysgv9YQ2Nl97sg6nyFuuG99ktf
16Qw0fpe2qN+nA==
=i6VC
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| George Orwell 2006-11-29, 1:12 pm |
| On Wed, 29 Nov 2006, Eelbash Admin <admin@eelbash.org> wrote:
>On Wed, 29 Nov 2006 14:05:09 +0000, Zax wrote:
>
>Any chance of your code being made available?
Wow, just imagine how badly you can XXXX up a nymserver!
| |
| George Orwell 2006-11-29, 7:13 pm |
| Zax wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> I have a nymserver running at nym.mixmin.net. If anyone fancies
> trying it out I'd appreciate some feedback.
>
> It's based on the aarg code that's modified to be openpgp compliant.
> In addition, it contains no IDEA support so encryption requests
> (Encrypt-Key, Encrypt-Idea) will result in 3des encryption being used.
> This only affects the nymserver-remailer leg of the reply block,
> directives for other phases of the reply block depend on the config of
> the selected remailers. I'd suggest using the Encrypt-Des directive
> for all legs.
>
> All messages are passed through spamassassin to try and weed out the
> junk. Obviously the nature of a nymserver will require some
> customised scoring that I'll hopefully improve over time.
> Suggestions welcomed.
Just a bit of input regarding spam, if you're using procmail you might
want to take a look at Bogofilter. In my opinion it's a little bit
smarter when it comes to learning odd setups. I was using SA for
quite a while but getting it to do a good job with mailing lists like
Full Disclosure was a pain, and it left the Polipo list with all its
random words spam (now in German I see) unbearable. It took Bogo about
a week to learn enough to clean it out about 95% where the best SA ever
achieved was around 50%. And that's with Bogo configured to mark
yes/no, not yes/no/maybe. If you wanted to take the time to isolate and
deal with a lot of "unsure" messages I'd bet you could nuke close to 99%
of all that random spam crap. With little if any false positives.
FWIW, ClamAV is actively maintaining a database of, and detecting
phishing emails too. In fact Clam even hits on "sploit" code in emails.
I don't know if you could even use something like that because it would
likely kill legitimate discussions of expolits at times, but it's
something to think about.
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (GNU/Linux)
>
> iQEVAwUBRW2TlGoLu9HNUqmMAQrnjgf/VQuKEAqqD7SQWSR7cahvEHxl1pk1C8Yw
> H3b8ij+FyTWMmA+HrXhRMRxfBX4Nfm9n2uk7WrPK
gWYodybshV31BrZjPNXR8Gg4
> U9cfs+KlrK+P6BGVhSdqD5S4N0MDquCpzD6Fh+Tf
5b/K5SeJxz0S7kOoR3J4kJe3
> SuftIXFQECEfqLOJDFPDrgJK+ROW7Gk+asa/HtCDtvK+ut6Q1oM31NAYJ1ylzxod
> gh7MzNl1PcE79LUFx3MBKi7kaxj8XC1o8T4Qi9OW
c6H00uuvUVwOQ8u6Rtsd3eNe
> TZF/ 2hkZAAjZTkjxRFaXiXbhyXhjv+XuHbFRNdlB8qyD
goHXHiJHEQ==
> =HZov
> -----END PGP SIGNATURE-----
>
| |
| Christian Danner 2006-11-29, 7:13 pm |
| Zax wrote:
>
>Yes it is. I debated treating all encrypt-* requests as 3des, but at
>the moment encrypt-cast is the one exception.
To ban patented IDEA was a wise decision. But CAST5 does no harm apart
from being considered an inferior algorithm. OTOH you may be right,
the recipient might not even notice which kind of encryption is
removed by PGP/GPG.
>It can if there's a requirement.
With an alternative to that email to-and-fro it would be easier to
automate updates. Though personally I'd prefer some retrieval through
an SSL secured connection (e.g. https dl), but that's another story.
>Send an email to list@nym.foo
And if I only knew how to finger? ;-)
Ciao
Christian
--
OmniMix .. protect your privacy
http://www.danner-net.de/om.htm
| |
| George Orwell 2006-11-29, 7:13 pm |
| References: <ekk42l$m9v$1@bananasplit.info> <1YQ4SL2Z39050.4161458333@anonymous.Q
<ekkb7j$s48$1@bananasplit.info>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
There's also one at nym.4096.net
http://www.4096.net/nymserver.html
alex
admin@4096.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iQEVAwUBRW4QJt6Y1weNWtfeAQIE5wf8CjOW4kQ2
KCZPp9YLUrlPO5wh9b9pFz0U
jDt+/jCbWoMxJmzkTk2CRqq04/MGZJTs74/jk5eXuzdc/aylMkDa2CvZGwi6HJ6K
zqiP+nA+Z63iTFl+ka7+r1v7ZnPmsdIq7uXsGaSe
MffFwhbaU/1rLnHcLxHGrsdk
ZZqzD5x5m168FgokGAHeCCpNXHetzqtaqnq2uPJm
p9ksijovTrZVfyKImQadKOp7
MN0MKvDaV4NQmhMDHo5+JUZa6qq+GuZggtGkzpCN
pGTv0iItEXr9hmHsQPUvnNO7
dNDzclBrQyOybrUvUzJSuJcADeVgPvvEBbK3xK5+
1+JB3St1sV3DRw==
=SGDo
-----END PGP SIGNATURE-----
| |
| OmniMix 2006-11-29, 7:13 pm |
| Zax wrote:
>I have a nymserver running at nym.mixmin.net. If anyone fancies trying it
>out I'd appreciate some feedback.
Seems to work fine.
Christian
--
OmniMix .. protect your privacy
http://www.danner-net.de/om.htm
| |
|
| On Wed, 29 Nov 2006 20:50:07 +0100 (CET), George Orwell wrote in
Message-Id: < 5d711e09a72341dd662dd1d0221500d9@mixmast
er.it>:
> Just a bit of input regarding spam, if you're using procmail you might
> want to take a look at Bogofilter.
Thanks for the info. I use bogofilter (and spambayes) on my user
accounts and it does work well. I'll integrate them both into the
nymserver and just leave the thresholds high until they get some
training.
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Thanks to Bikikii for pointing out that the send@ uid was missing from
the public key sent in response to a remailer-key request. I must have
added the uid after creating the email response file. This has now been
corrected and I've also sent the key to the sks keyserver network for
people who prefer to obtain it that way.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iQEVAwUBRW61CWoLu9HNUqmMAQodzwf8DlRlBiPM
xNoYEQhvqM9lrQ4dn3XH2PX/
rVjJZ/xFJ3fLoEQRPoHlNyaytVnvra1w/8abjnCrr3769pUySJl4jvhS3b/REUMk
NL9uHcXsJD7gB4mo1uLzxgDwQjAO7anx2tN07fxP
Im1V0m6+e+GWRa0eYXZrB1G+
YKgK2H9XWOeQSjDghMX5R/ sPbJ6kaUFoyudREnqMnWf2fSTRo5E3EleBgE3zsU
s1
yd/ 6RTGGPg1cPT9bCt7piMVKOeuOCy0jvl7s2aqW1UR
OL2Y/+qcsx+Z4VkugdwwS
ikBYXKu3HUmGuW/ 3cg32hTaw85pWzYbMNp02F6CPEtvAgQZP8iRBYA=
=
=2KUf
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Anonymous via Panta Rhei 2006-12-06, 1:14 am |
| In article <ebfc3$456d95c2$cef8886b$8024@TEKSAVVY.COM>
Eelbash Admin <admin@eelbash.org> wrote:
>
> Any chance of your code being made available?
Oh Gawd! Eelbitch is gonna start screwing up nymserver code.
Anyone ignorant enough to be using his POS remailer should
prob'ly expect it to be down quite a bit now...
~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown. Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups other
than alt.test and alt.anonymous.messages. Visit www.panta-rhei.eu.org
for abuse and hashcash info.
| |
| BiKiKii Admin 2006-12-07, 7:13 am |
| -----BEGIN PGP SIGNED MESSAGE-----
On Thu, 30 Nov 2006, George Orwell wrote:
>There's also one at nym.4096.net
>http://www.4096.net/nymserver.html
>
>alex
>
Still can not create any account on your nymserver.
Ciao!
BiKiKii
-----BEGIN PGP SIGNATURE-----
Version: N/A
iQEVAwUBRXdZgfRwi/ QFFzi5AQENyQf+PabMxCb8QnnrSN1ZW6YTU+xy8J
b+5Njo
KnfxQxHfdg9QV0hyLmts5KkF+BNHtCPZ/osqUnjAURM1B00lwR2PzyhHctdk6iQT
9KtWqVie4SyW0gmlJ4dh2qqIgWNEYP2fTVaZEUQ3
2T3YiEiJPHTUt3LSYrCvWWps
NoV56ng4/MFvbCVNlWcIhz7mBqM/svKjoCjpQWLDJWsANmBYoo6PMmIt3DzQVvR4
OgeGcwiyQTQ0yJGrMSE/ kxe6zD4NGa7aLtE0SUJrWFthmOWIPYFvd+zh2gHL
GR5U
Lxfgl2m6HPo2L0DWbaQM/tMOapdZbFCVO63IwIbeBEVbWny30RPxGg==
=nLpV
-----END PGP SIGNATURE-----
|
|
|
|