Re: inetd questions

2001-08-18 Thread Jason Thomas
I tried this out on my system and it works for me! with disabled: Aug 19 12:58:21 imhotep xinetd[26847]: {init_services} no services. Exiting... without disabled: Aug 19 12:58:38 imhotep xinetd[26856]: xinetd Version 2.1.8.8p3 started with Aug 19 12:58:38 imhotep xinetd[26856]: libwrap Aug 19 1

Re: inetd questions

2001-08-18 Thread Jason Thomas
I tried this out on my system and it works for me! with disabled: Aug 19 12:58:21 imhotep xinetd[26847]: {init_services} no services. Exiting... without disabled: Aug 19 12:58:38 imhotep xinetd[26856]: xinetd Version 2.1.8.8p3 started with Aug 19 12:58:38 imhotep xinetd[26856]: libwrap Aug 19

configuring iptables logging

2001-08-18 Thread JonesMB
does anyone know how to configure the text that iptables logs to the system log files? this is what I get in my log files: IPT TCP-SYN: IN=eth0 OUT= MAC=01:01:01:01:01:01:01:03:6c:4e:68:54:08:00 SRC=64.221.41.22 DST=x.x.x.x LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=49349 DF PROTO=TCP SPT=3324 DPT=8

Re: strangelog

2001-08-18 Thread Brian P. Flaherty
Rudy Gevaert <[EMAIL PROTECTED]> writes: > Hello, > > This weekend I got a strange log: > > Unusual System Events > =-=-=-=-=-=-=-=-=-=-= > Aug 11 06:25:03 alhandra su[3584]: + ??? root-nobody > Aug 11 06:25:03 alhandra PAM_unix[3584]: (su) session opened for user > nobody by > +(uid=0) I also

Re: Linux box vs black box

2001-08-18 Thread Karsten M. Self
on Thu, Jun 07, 2001 at 12:53:59PM -0600, Hubert Chan ([EMAIL PROTECTED]) wrote: > "Security is a process, not a product." (another commonly uttered > phrase in c.o.l.s, and it's probably a quote from someone famous.) From the better-late-than-sober dept.: Bruce Schneier, Counterpane. It was

configuring iptables logging

2001-08-18 Thread JonesMB
does anyone know how to configure the text that iptables logs to the system log files? this is what I get in my log files: IPT TCP-SYN: IN=eth0 OUT= MAC=01:01:01:01:01:01:01:03:6c:4e:68:54:08:00 SRC=64.221.41.22 DST=x.x.x.x LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=49349 DF PROTO=TCP SPT=3324 DPT=8

Re: strangelog

2001-08-18 Thread Brian P. Flaherty
Rudy Gevaert <[EMAIL PROTECTED]> writes: > Hello, > > This weekend I got a strange log: > > Unusual System Events > =-=-=-=-=-=-=-=-=-=-= > Aug 11 06:25:03 alhandra su[3584]: + ??? root-nobody > Aug 11 06:25:03 alhandra PAM_unix[3584]: (su) session opened for user > nobody by > +(uid=0) I also

Re: Linux box vs black box

2001-08-18 Thread Karsten M. Self
on Thu, Jun 07, 2001 at 12:53:59PM -0600, Hubert Chan ([EMAIL PROTECTED]) wrote: > "Security is a process, not a product." (another commonly uttered > phrase in c.o.l.s, and it's probably a quote from someone famous.) From the better-late-than-sober dept.: Bruce Schneier, Counterpane. It wa

Re: inetd questions

2001-08-18 Thread Brian P. Flaherty
Alvin Oga <[EMAIL PROTECTED]> writes: > to tighten your sever > - comment out all entries in inetd.conf... > or xinet.d/* should have "disable=yes" Hello, I just tried the above in my xinetd.conf and I get errors. That is, I put 'disable = yes' in service sections. I also trie

disabled in xinetd doesn't work?

2001-08-18 Thread Brian P. Flaherty
Hello, I have spent a fair amount of time trying to limit access to my desktop. One thing I have done is switched over to xinetd and I have moved most services into xinetd.conf. Aug 18 11:03:48 c119756-b xinetd[27786]: xinetd Version 2.1.8.8p3 started with Aug 18 11:03:48 c119756-b xinetd[27786

Re: inetd questions

2001-08-18 Thread Brian P. Flaherty
Alvin Oga <[EMAIL PROTECTED]> writes: > to tighten your sever > - comment out all entries in inetd.conf... > or xinet.d/* should have "disable=yes" Hello, I just tried the above in my xinetd.conf and I get errors. That is, I put 'disable = yes' in service sections. I also tri

disabled in xinetd doesn't work?

2001-08-18 Thread Brian P. Flaherty
Hello, I have spent a fair amount of time trying to limit access to my desktop. One thing I have done is switched over to xinetd and I have moved most services into xinetd.conf. Aug 18 11:03:48 c119756-b xinetd[27786]: xinetd Version 2.1.8.8p3 started with Aug 18 11:03:48 c119756-b xinetd[2778

Re: sshd attack?

2001-08-18 Thread Andres Salomon
ippl is also quite helpful. http://pltplp.net/ippl/. On Wed, Aug 15, 2001 at 09:59:27AM +0200, J?rgen Persson wrote: [...] > > > How can I find out, from where this attack is originating? Must I increase > > the verbositiy level of sshd to achieve this? > > sshd might be able to do it. I'm log

Re: sshd attack?

2001-08-18 Thread Andres Salomon
ippl is also quite helpful. http://pltplp.net/ippl/. On Wed, Aug 15, 2001 at 09:59:27AM +0200, J?rgen Persson wrote: [...] > > > How can I find out, from where this attack is originating? Must I increase > > the verbositiy level of sshd to achieve this? > > sshd might be able to do it. I'm lo