[Dshield] Newbie submission questions

Deb Hale haled at pionet.net
Fri Jun 17 12:47:28 GMT 2005

Allen,  On your second and third items Johannes can provide the answer.  I
will make sure he sees your email.

-----Original Message-----
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org]
On Behalf Of Allen Kistler
Sent: Thursday, June 16, 2005 10:36 PM
To: list at lists.dshield.org
Subject: [Dshield] Newbie submission questions

Responding to the ISC rally a few days ago for high-speed home users to
join, I have joined.  But I have some questions (and I haven't found a
FAQ that addresses them).  I posed the first question below to
info at dshield.org, but I haven't received a response.  (For some reason,
it also took a few times trying to subscribe to this list before I got a
mailman "confirm" number.  Hmm.)

The Linux iptable script send log submissions to report at dshield.org.
However, all the documentation indicates that submissions should go to
reports at dshield.org (extra s).  report at dshield.org seems to work, but is
all the documentation wrong or are the two addresses supposed to be
equivalent?  I tried sending to "reports" once, but I didn't get an
acknowledgment email.  Sending to "report" results in acknowledgment
emails and increases in line counts on the reporting web page.

Acknowledgment emails say "PGP: No" at the bottom.  Taking a hint from
http://www.dshield.org/pgp_doc.php, I hacked the .pl script to add a GPG
signature, and I uploaded my public key to my DShield profile (days
ago).  I have tested the resultant email.  Enigmail, the Mozilla Mail
GPG plugin, verifies the signature, so I know my hack is good.  However,
the acknowledgment emails say the GPG signature lines are rejected, and
the bottom still says "PGP: No."  What's up?

The (expired January 2005) GPG key to encrypt submissions is for
reports at dshield.org.  I did find an old key (expired 2001 sometime, I
think) for report at dshield.org.  Does DShield support encryption
currently (unrecognized correct signatures suggest not)?  What should be
the recipient address for encrypted mail: report, reports, or something

Thanks for any wisdom you can provide.
-------------- Sponsor Message ------------------------------------
Join us at SANSFIRE 2005 in Atlanta!
The Internet Storm Center Conference.
Details: http://www.sans.org/sansfire2005

send all posts to list at lists.dshield.org
To change your subscription options (or unsubscribe), see:

More information about the list mailing list