Re: port-scanning. advise?

2001-01-15 Thread Bryan Andersen
Bradley M Alexander wrote: > Fortunately, that is the vast minority of the hacker community. But the > true professionals are probably not gunning for your home machine. > Ordinarily they are the ones that are doing industrial espionage, > intelligence etc. Not hacking home machines. However, secu

Re: Firewall administering tool/whatever...

2001-01-15 Thread Bradley M Alexander
On Sun, Jan 14, 2001 at 08:37:09AM +, sena wrote: > Hi... > > I've used PMFirewall for a long time to create my ipchains rules... > > Recently, I've switched to rc.firewall. > > Can you give feedback on what utility of this kind (if any) are you using on > your machine(s), or have you used i

Re: port-scanning. advise?

2001-01-15 Thread Bryan Andersen
Bradley M Alexander wrote: > Fortunately, that is the vast minority of the hacker community. But the > true professionals are probably not gunning for your home machine. > Ordinarily they are the ones that are doing industrial espionage, > intelligence etc. Not hacking home machines. However, sec

wtmp question

2001-01-15 Thread MHR
I was just browsing through the Linux Security HOWTO for tips on further securing my new firewall/router when I came across the following. http://www.linuxdoc.org/HOWTO/Security-HOWTO-5.html The /var/log/wtmp and /var/run/utmp files contain the login records for all users on your system. Their int

Re: Firewall administering tool/whatever...

2001-01-15 Thread Bradley M Alexander
On Sun, Jan 14, 2001 at 08:37:09AM +, sena wrote: > Hi... > > I've used PMFirewall for a long time to create my ipchains rules... > > Recently, I've switched to rc.firewall. > > Can you give feedback on what utility of this kind (if any) are you using on > your machine(s), or have you used

Re: [OT?] inverted `limit' match support in iptables/netfilter

2001-01-15 Thread Patrick Dreker
Am Montag, 15. Januar 2001 23:06 schrieb Alexander Hvostov: > Hello, > > I'm trying to get the `limit' match support in iptables/netfilter to be > inverted in the sense that it only matches when the limit has been > exceeded. For instance, to log a flood: > > iptables -I INPUT -m limit ! --limit 1/

wtmp question

2001-01-15 Thread MHR
I was just browsing through the Linux Security HOWTO for tips on further securing my new firewall/router when I came across the following. http://www.linuxdoc.org/HOWTO/Security-HOWTO-5.html The /var/log/wtmp and /var/run/utmp files contain the login records for all users on your system. Their in

[OT?] inverted `limit' match support in iptables/netfilter

2001-01-15 Thread Alexander Hvostov
Hello, I'm trying to get the `limit' match support in iptables/netfilter to be inverted in the sense that it only matches when the limit has been exceeded. For instance, to log a flood: iptables -I INPUT -m limit ! --limit 1/s -j LOG However, for some reason, the `!' flag does not seem to change

Re: [OT?] inverted `limit' match support in iptables/netfilter

2001-01-15 Thread Patrick Dreker
Am Montag, 15. Januar 2001 23:06 schrieb Alexander Hvostov: > Hello, > > I'm trying to get the `limit' match support in iptables/netfilter to be > inverted in the sense that it only matches when the limit has been > exceeded. For instance, to log a flood: > > iptables -I INPUT -m limit ! --limit 1

[OT?] inverted `limit' match support in iptables/netfilter

2001-01-15 Thread Alexander Hvostov
Hello, I'm trying to get the `limit' match support in iptables/netfilter to be inverted in the sense that it only matches when the limit has been exceeded. For instance, to log a flood: iptables -I INPUT -m limit ! --limit 1/s -j LOG However, for some reason, the `!' flag does not seem to chang

Re: lprng

2001-01-15 Thread Ethan Benson
On Mon, Jan 15, 2001 at 10:10:08AM +0100, V. Achiaga wrote: > > > Hey, > > What u mean debian-specific patch? > > I only want to mean a patch including the patch.diff file, or an > official debian package (.deb file) if debian is vulnerable then a updated package should indeed be placed in se

Re: lprng

2001-01-15 Thread Ethan Benson
On Mon, Jan 15, 2001 at 10:10:08AM +0100, V. Achiaga wrote: > > > Hey, > > What u mean debian-specific patch? > > I only want to mean a patch including the patch.diff file, or an > official debian package (.deb file) if debian is vulnerable then a updated package should indeed be placed in s

Re: lprng

2001-01-15 Thread V. Achiaga
> Hey, > What u mean debian-specific patch? I only want to mean a patch including the patch.diff file, or an official debian package (.deb file) > > I know there's a debian package of lprng, but I don't know if the patch > > you're talking about is applied to this package, I guess you should

RE: port-scanning. advise?

2001-01-15 Thread Johan Segernas
Title: RE: port-scanning. advise? I'm very sorry about the html-mail I just sent, i'll never happen again. I think i hate this place, running outlook and other crap. =) Here's the mail again so everyone can read it. =) Jeje, whatever. -Original Message- From: Johan Segernas [ma

RE: port-scanning. advise?

2001-01-15 Thread Johan Segernas
Title: RE: port-scanning. advise? > >   What makes me curious is the fact that no ip came from the same > > geographical area. Literraly the ips resolved to machines > from all the > > continents of the world! As if I was under global attack! :-) > > Of course these could be spoofed, but sure

Re: lprng

2001-01-15 Thread V. Achiaga
> Hey, > What u mean debian-specific patch? I only want to mean a patch including the patch.diff file, or an official debian package (.deb file) > > I know there's a debian package of lprng, but I don't know if the patch > > you're talking about is applied to this package, I guess you should

RE: port-scanning. advise?

2001-01-15 Thread Johan Segernas
Title: RE: port-scanning. advise? I'm very sorry about the html-mail I just sent, i'll never happen again. I think i hate this place, running outlook and other crap. =) Here's the mail again so everyone can read it. =) Jeje, whatever. -Original Message- From: Johan Segernas [ma

RE: port-scanning. advise?

2001-01-15 Thread Johan Segernas
Title: RE: port-scanning. advise? > >   What makes me curious is the fact that no ip came from the same > > geographical area. Literraly the ips resolved to machines > from all the > > continents of the world! As if I was under global attack! :-) > > Of course these could be spoofed, but sure