Re: Creating a logfile for Netfilter

Tim Haynes wrote: > FWIW, my approach: assert a log-prefix in your logging iptables rules, and > install syslog-ng with a regexp match to pick up your prefix (make it > distinctive, eg 'Catch-all: .*IN=.*OUT=' would probably be precise enough). > > HTH, > > ~Tim > -- > The blade cuts clean through

Re: Creating a logfile for Netfilter

Tim Haynes wrote: > FWIW, my approach: assert a log-prefix in your logging iptables rules, and > install syslog-ng with a regexp match to pick up your prefix (make it > distinctive, eg 'Catch-all: .*IN=.*OUT=' would probably be precise enough). > > HTH, > > ~Tim > -- > The blade cuts clean throug

Re: Creating a logfile for Netfilter

Stefan Srdic <[EMAIL PROTECTED]> writes: > Anyway, as you can guess I am using netfilter for firewalling. > > How can I pipe all logs from Netfilter into a single logfile? > > Lets say I wanted all log messages from netfilter to be loged into > /var/log/netfilter. How could I accomplish that? F

Creating a logfile for Netfilter

Okay, I'm running Debian Patato with kernel 2.4.5, Xfree 4.0.3 and the XFCE desktop :-D Anyway, as you can guess I am using netfilter for firewalling. How can I pipe all logs from Netfilter into a single logfile? Lets say I wanted all log messages from netfilter to be loged into /var/log/netfilt

Re: Creating a logfile for Netfilter

Stefan Srdic <[EMAIL PROTECTED]> writes: > Anyway, as you can guess I am using netfilter for firewalling. > > How can I pipe all logs from Netfilter into a single logfile? > > Lets say I wanted all log messages from netfilter to be loged into > /var/log/netfilter. How could I accomplish that?

Creating a logfile for Netfilter

Okay, I'm running Debian Patato with kernel 2.4.5, Xfree 4.0.3 and the XFCE desktop :-D Anyway, as you can guess I am using netfilter for firewalling. How can I pipe all logs from Netfilter into a single logfile? Lets say I wanted all log messages from netfilter to be loged into /var/log/netfil

Re: #100409 GnuPG printf format string vulnerability

Wichert Akkerman <[EMAIL PROTECTED]> writes: > Previously Florian Weimer wrote: > > With GnuPG 1.0.4, the web of trust can be compromised by an attacker, > > How? GnuPG 1.0.4 automatically assigns ultimate trust to public keys if a corresponding private key is present in the private key ring. W

strange flickering ports

Hi... I have a box with something listening to "flickering" ports. nmap reports various random ports open from run to run. I can't telnet to them and ID w/ netstat, because they're gone the instant nmap finds them. I can't see the culprit in the output of lsof. Does anyone here know what might

Re: #100409 GnuPG printf format string vulnerability

Previously Florian Weimer wrote: > With GnuPG 1.0.4, the web of trust can be compromised by an attacker, How? > and there's a pretty severe problem with detached signature > verification. That was fixed months ago, check the changelog. Wichert. -- __

Re: #100409 GnuPG printf format string vulnerability

Wichert Akkerman <[EMAIL PROTECTED]> writes: > Previously Florian Weimer wrote: > > With GnuPG 1.0.4, the web of trust can be compromised by an attacker, > > How? GnuPG 1.0.4 automatically assigns ultimate trust to public keys if a corresponding private key is present in the private key ring.

Re: #100409 GnuPG printf format string vulnerability

Wouter Cloetens <[EMAIL PROTECTED]> writes: > Extra details on the bug report for gnupg-1.04-2 can be found > on http://www.securityfocus.com/bid/2797. Most distributions > appear to have reported a security alert, but all recommend > upgrading to 1.0.6. A backport for stable is in order, I > gue

strange flickering ports

Hi... I have a box with something listening to "flickering" ports. nmap reports various random ports open from run to run. I can't telnet to them and ID w/ netstat, because they're gone the instant nmap finds them. I can't see the culprit in the output of lsof. Does anyone here know what migh

Re: #100409 GnuPG printf format string vulnerability

Previously Florian Weimer wrote: > With GnuPG 1.0.4, the web of trust can be compromised by an attacker, How? > and there's a pretty severe problem with detached signature > verification. That was fixed months ago, check the changelog. Wichert. -- _

Re: #100409 GnuPG printf format string vulnerability

Wouter Cloetens <[EMAIL PROTECTED]> writes: > Extra details on the bug report for gnupg-1.04-2 can be found > on http://www.securityfocus.com/bid/2797. Most distributions > appear to have reported a security alert, but all recommend > upgrading to 1.0.6. A backport for stable is in order, I > gu