ychaouche

15:22:19 ~ -1- $ apt-cache show libruby1.9.1 | grep -E '(Depends|Package)' | pretty.ellipsis
Package: libruby1.9.1
Depends: ruby1.9.1 (= 1.9.3.484-2ubuntu1.14), ca-certificates, libc6 (>= 2.14), libffi6 (>= 3.0.4), libgdbm3 (>= 1.8.3), libncursesw5 (>= 5.6+20070908), libreadline6 (>= 6.0), libssl1.0.0 (>= 1.0.0), libtinfo5, libyaml-0-2, zlib1...
Package: libruby1.9.1
Depends: ruby1.9.1 (= 1.9.3.484-2ubuntu1), ca-certificates, libc6 (>= 2.14), libffi6 (>= 3.0.4), libgdbm3 (>= 1.8.3), libncursesw5 (>= 5.6+20070908), libreadline6 (>= 6.0), libssl1.0.0 (>= 1.0.0), libtinfo5, libyaml-0-2, zlib1g (...
15:40:53 ~ -1- $ apt-cache show ruby1.9.1 | grep -E '(Depends|Package)' | pretty.ellipsis
Package: ruby1.9.1
Depends: ruby (>= 1:1.9.3.1), libruby1.9.1 (= 1.9.3.484-2ubuntu1.14), libc6 (>= 2.2.5)
Package: ruby1.9.1
Depends: ruby (>= 1:1.9.3.1), libruby1.9.1 (= 1.9.3.484-2ubuntu1), libc6 (>= 2.2.5)

ychaouche

root@messagerie-prep[10.10.10.19] ~ # ps x | sort -k 2 | head
 1925 pts/0    Ss+    0:00 -bash
28053 pts/1    R+     0:00 ps x
28055 pts/1    S+     0:00 head
28054 pts/1    S+     0:00 sort -k 2
 7695 pts/1    Ss     0:00 -bash
 5126 pts/2    S+     0:00 /bin/bash /root/SYNCHRO/bin/pretty.colorize.reverse (Firefox|Edge|Opera|Chrome)
 5124 pts/2    S+     0:03 tail -f /var/log/apache2/roundcube.access
 5127 pts/2    S+     0:06 sed -uE /(Firefox|Edge|Opera|Chrome)/!s/(.*)/\x1b[7m\1\x1b[0m/
 5125 pts/2    S+     0:26 /usr/bin/awk -f /root/SYNCHRO/bin/sys.log.apache.access.awkfilter

ychaouche

root@messagerie-prep[10.10.10.19] ~ # _asroot tcpdump -i eth0 -l -n "host 10.10.10.19 and (tcp[13]==2 or icmp or udp) and src net not (192.168.0.0/16 or 172.16.0.0/16 or 10.0.0.0/8) and port 53"
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
12:56:08.111496 IP 199.249.120.1.53 > 10.10.10.19.56505: 36063- 0/8/9 (821)
12:56:08.239833 IP 192.99.37.66.53 > 10.10.10.19.63603: 27326*- 1/4/8 TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh9VtkDG1wmhnqLYLoSlnKcA0IA738GmsKa/HC2Q790KJkslz8Q3lq4W/1aeOPNxK0iASSWcetcbAI+KDGqxXf9UfRay8oSfNc+SmcFOihoY" "iwVcFnzoPfU0QZVLQUjKCKv2ovlkiMqT2NgZa7+i53DrcCzCwe06PbB6eXmMFD/eLSeinPqeMC9vdZ6AG/Y9LoBFCCqxTGJ4rSv6XzBzDOFPSYYFiKAZQBzX0q0oNxtEtextYOFGIaINtBpcA5cA9Z8EX4xqbgQS77fWi79TVSHWOXMITdvkoKyx6EeCPDEl3TwsfZmm2WqaRCrZJZfSgKtzmpM3UWJcM50Cn6J5ywIDAQAB" (716)
12:58:36.291710 IP 192.5.6.30.53 > 10.10.10.19.34266: 14639- 0/6/1 (477)
12:58:36.305884 IP 162.159.3.11.53 

ychaouche

root@messagerie-prep[10.10.10.19] ~ # mail.dsn.report.failed | head | pr -l11


2024-11-28 10:03                                                  Page 1


Nov 24 06:29:02 to=<[email protected]>, status=deferred (host mailstore1.secureserver.net[92.204.80.3] refused to talk to me: 554 sxb1plibsmtp01-30.prod.sxb1.secureserver.net CMGW IB106. Connection refused. 197.201.1.126 is listed on the Policy Block List (PBL).?? <http://www.spamhaus.org/query/ip/197.201.1.126> Please visit http://www.spamhaus.org/pbl/ for more information.)

ychaouche

root@messagerie-prep[10.10.10.19] ~ # head /tmp/interactivebans.banned.sorted
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!
101.207.142.141 banned!

ychaouche

# lsmod | grep geo
xt_geoip               12558  2
x_tables               27392  17 xt_mark,xt_CT,xt_comment,ipt_ULOG,xt_recent,ip_tables,xt_tcpudp,xt_NFLOG,xt_geoip,xt_conntrack,xt_LOG,xt_multiport,iptable_filter,ipt_REJECT,iptable_mangle,xt_addrtype,iptable_raw
#

ychaouche

Got a list of helpful bash scripts/functions/aliases to deal with packages

 /**************************/
 /* 1. all package.* utils */
 /**************************/


11:11:28 ~ -1- $ package.
package.count              package.list.all
package.describe           package.list.installed

ychaouche

17:16:27 ~ -1- $ openssl s_client -connect messagerie.algerian-radio.dz:993 -crlf
CONNECTED(00000003)
depth=3 C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
 0 s:/CN=*.algerian-radio.dz
   i:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
 1 s:/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA

ychaouche

    Start Time: 1727712531
    Timeout   : 300 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)
---
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLA
a login [email protected] password with spaces
a BAD Error in IMAP command received by server.

ychaouche

* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.
77 authenticate PLAIN
+ 
xxx
77 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA ACL RIGHTS=texk] Logged in
78 ID ("name" "Thunderbird" "version" "91.13.1")
* ID ("name" "Dovecot")
78 OK ID completed.
79 ENABLE UTF8=ACCEPT
79 OK Enabled.