RDJ, wget, and proxy

[le...@srs.gov]

I'm trying to get rulesdejour going here and having one heck of a time 
making it through my proxy.

I would rather use wget than curl (curl has too many pre-reqs), and have 
it installed and configured 
to access the proxy server.  I have the proxy_user and proxy_password 
configured in my 
/usr/local/etc/wgetrc file, but continue to receive "407 Authentication 
Required" whenever the wget requests try to process.

Does anyone have any experience with this and/or have any suggestions?

Thanks!

/etc/shadow access from SA

[le...@srs.gov]

Our intrusion detection software started picking up thousands of access 
attempts to /etc/shadow (the UNIX user password store) shortly after 
installing SpamAssassin on our mail gateway.

Could one of the developers comment on why SA might be doing this and/or 
if this is even an intent? (Running SA 3.1.0)

Thanks!

Re: RDJ, wget, and proxy

[le...@srs.gov]

I finally got curl installed and "fixed".  The problem with both is our 
proxy server obviously doesn't handle "basic" proxy authentication. 
There's a curl option that's something like --any_authentication that 
tries all different kinds of auth.  That finally got me through.

I have been only trying from the command line so far (early in setup). I'm 
sure there are more challenges ahead when I get to cron.

Thanks!




Chris Thielen <cm...@someone.dhs.org> 
02/14/2006 01:45 PM

To
leonard.gray@srs.gov
cc
SpamAssassin <us...@spamassassin.apache.org>
Subject
Re: RDJ, wget, and proxy






leonard.gray@srs.gov wrote:

>
> I'm trying to get rulesdejour going here and having one heck of a time
> making it through my proxy.
>
> to access the proxy server.  I have the proxy_user and proxy_password
> configured in my
> /usr/local/etc/wgetrc file, but continue to receive "407
> Authentication Required" whenever the wget requests try to process.

Does rules_du_jour run from the command line OK, but not via cron?  If
so, one problem you *may* be experiencing is that the cron program runs
jobs with NO ENVIRONMENT by default.  Does wget look to
/usr/local/etc/wgetrc by default? 


One thing you could try is forcing the wget parameters --proxy-user and
--proxy-password into the wget parameters variable in your RDJ config
file.  The default WGET_OPTS is "-N", so if you are OK with putting a
password in a config file, you could add this to your RDJ config:

WGET_OPTS="-N --proxy-user=foo --proxy-password=bar"



Chris Thielen

Re: RDJ, wget, and proxy

[Chris Thielen <cm...@someone.dhs.org>]

leonard.gray@srs.gov wrote:

>
> I'm trying to get rulesdejour going here and having one heck of a time
> making it through my proxy.
>
> to access the proxy server.  I have the proxy_user and proxy_password
> configured in my
> /usr/local/etc/wgetrc file, but continue to receive "407
> Authentication Required" whenever the wget requests try to process.

Does rules_du_jour run from the command line OK, but not via cron?  If
so, one problem you *may* be experiencing is that the cron program runs
jobs with NO ENVIRONMENT by default.  Does wget look to
/usr/local/etc/wgetrc by default? 


One thing you could try is forcing the wget parameters --proxy-user and
--proxy-password into the wget parameters variable in your RDJ config
file.  The default WGET_OPTS is "-N", so if you are OK with putting a
password in a config file, you could add this to your RDJ config:

WGET_OPTS="-N --proxy-user=foo --proxy-password=bar"



Chris Thielen

Re: RDJ, wget, and proxy

[Mike Jackson <mj...@barking-dog.net>]

> I would rather use wget than curl (curl has too many pre-reqs)

Sorry not to answer the question and go off on an tangent, but what 
requirements does curl have that you can't install? If you build from 
source, about the only requirement that may not be on any stock system would 
be OpenSSL, and you can opt not to configure SSL support. curl is my 
favorite tool in my sys admin/programmer's toolkit. wget can't touch its 
flexibility.