Re: Advice on inetd Denial of Service Bug

2000-03-30 Thread Herbert Xu
Drew Bloechl <[EMAIL PROTECTED]> wrote: > On Thu, Mar 30, 2000 at 01:11:09PM +0200, Paul Slootman wrote: >> -p, --programs >> displays process name and PID of the owner of each socket >> it dumps. You have to be the owner of such process to have >> all it's sock

Re: Advice on inetd Denial of Service Bug

2000-03-30 Thread Drew Bloechl
On Thu, Mar 30, 2000 at 01:11:09PM +0200, Paul Slootman wrote: > -p, --programs > displays process name and PID of the owner of each socket > it dumps. You have to be the owner of such process to have > all it's sockets matched to it or generally root user will

Re: Advice on inetd Denial of Service Bug

2000-03-30 Thread Paul Slootman
On Thu 30 Mar 2000, Herbert Xu wrote: > > As to the dependency on fuser, hmm, now what's that thing called netstat(1) > which happens to be in your package and also happens to have a flag called > -p? :) $ man netstat [...] SYNOPSIS netstat [-venaoc] [--tcp|-t] [--udp|-u]

Re: Advice on inetd Denial of Service Bug

2000-03-30 Thread Anthony Towns
On Thu, Mar 30, 2000 at 02:35:43PM +1000, Herbert Xu wrote: > As to the dependency on fuser, hmm, now what's that thing called netstat(1) > which happens to be in your package and also happens to have a flag called > -p? :) *blush* On the upside, netstat also distinguishes between listening and a

Re: Advice on inetd Denial of Service Bug

2000-03-30 Thread Herbert Xu
Anthony Towns wrote: > > Unfortunately I can't think of a reasonable way of checking for this > in the preinst. The shell code I posted to the bug report works okay > for testing, but it'll report existing connections that are perfectly > reasonable, rather than just programs listening where they

Re: Advice on inetd Denial of Service Bug

2000-03-30 Thread Ben Collins
> Unfortunately I can't think of a reasonable way of checking for this > in the preinst. The shell code I posted to the bug report works okay > for testing, but it'll report existing connections that are perfectly > reasonable, rather than just programs listening where they shouldn't be, > so it's

Advice on inetd Denial of Service Bug

2000-03-30 Thread Anthony Towns
Hello world, inetd currently has a bug (Bug#60770) whereby internal services (in particular discard/tcp) that fork don't close their inherited listening sockets. This means that if: * [EMAIL PROTECTED] telnets to debian.victim.com port 9 (discard/sink/null) * subsequent