Re: Debian GNU/Linux 2.2r3 vulnerabilities ?

2001-10-24 Thread Sebastiaan
Hi, On Thu, 25 Oct 2001, Petre Daniel wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: MD5 > > Heya, > I run a potato at home and i will set the computer at work > with potato as well.Since that will be a 24h internet connected > pc,i am wondering what are the 2.2 release 3 vulnerabiliti

Re: Debian GNU/Linux 2.2r3 vulnerabilities ?

2001-10-24 Thread Osamu Aoki
On Thu, Oct 25, 2001 at 04:31:05AM +0200, Petre Daniel wrote: > I run a potato at home and i will set the computer at work > with potato as well.Since that will be a 24h internet connected > pc,i am wondering what are the 2.2 release 3 vulnerabilities for > the sistem installed from the cds w

Debian GNU/Linux 2.2r3 vulnerabilities ?

2001-10-24 Thread Petre Daniel
-BEGIN PGP SIGNED MESSAGE- Hash: MD5 Heya, I run a potato at home and i will set the computer at work with potato as well.Since that will be a 24h internet connected pc,i am wondering what are the 2.2 release 3 vulnerabilities for the sistem installed from the cds without any online

Re: Is ident secure?

2001-10-24 Thread Adam Olsen
On Thu, Oct 25, 2001 at 09:45:49AM +1000, Malcolm Herbert wrote: > ... don't know if it's happening to others, however I seem to be > receiving mail from the 'Is Ident secure' thread of earlier in September > (with the idiot who was subscribed and who wouldn't/couldn't unsubscribe > himself) ... is

Re[2]: FUCK YOU

2001-10-24 Thread victor
Hello Nicolas, Sunday, September 02, 2001, 5:31:01 PM, you wrote: NMM> Hello Layne, NMM> if you have'nt subscribed, why do you think do you receive mails from NMM> debian-security?, maybe you're too stupid to remember but you receive a NMM> confirmation email before being added to a mailing lists

Re: Debian GNU/Linux 2.2r3 vulnerabilities ?

2001-10-24 Thread Osamu Aoki
On Thu, Oct 25, 2001 at 04:31:05AM +0200, Petre Daniel wrote: > I run a potato at home and i will set the computer at work > with potato as well.Since that will be a 24h internet connected > pc,i am wondering what are the 2.2 release 3 vulnerabilities for > the sistem installed from the cds

Re: Is ident secure?

2001-10-24 Thread Malcolm Herbert
... don't know if it's happening to others, however I seem to be receiving mail from the 'Is Ident secure' thread of earlier in September (with the idiot who was subscribed and who wouldn't/couldn't unsubscribe himself) ... is anyone else seeing this replay? I have the original in my mailbox if an

Re: Connection problem

2001-10-24 Thread Jason Thomas
On Wed, Oct 24, 2001 at 02:35:51PM +0200, Emmanuel Lacour wrote: > Ok , to close this message (out of list topics), I just explain how I > solved my problem. > > A few days ago I was playing with ipsec and adsl pppoe. This was a mtu > problem so I played with clampmss fragicmp overridemtu in rp-pp

Debian GNU/Linux 2.2r3 vulnerabilities ?

2001-10-24 Thread Petre Daniel
-BEGIN PGP SIGNED MESSAGE- Hash: MD5 Heya, I run a potato at home and i will set the computer at work with potato as well.Since that will be a 24h internet connected pc,i am wondering what are the 2.2 release 3 vulnerabilities for the sistem installed from the cds without any online

Re: Is ident secure?

2001-10-24 Thread Adam Olsen
On Thu, Oct 25, 2001 at 09:45:49AM +1000, Malcolm Herbert wrote: > ... don't know if it's happening to others, however I seem to be > receiving mail from the 'Is Ident secure' thread of earlier in September > (with the idiot who was subscribed and who wouldn't/couldn't unsubscribe > himself) ... i

Re: Is ident secure?

2001-10-24 Thread Nicolas M . M
do you know what the word sollicitors mean? i don't think so, you should go to school you lil' brainless. -- "La bonne humeur est une vertue, celle qui différencie l'humain de l'animal."

Re: FUCK YOU

2001-10-24 Thread Nicolas M . M
Hello Layne, if you have'nt subscribed, why do you think do you receive mails from debian-security?, maybe you're too stupid to remember but you receive a confirmation email before being added to a mailing lists, so shut up and unsubscribe *** ! -- "La bonne humeur est une vertue, ce

Re[2]: FUCK YOU

2001-10-24 Thread victor
Hello Nicolas, Sunday, September 02, 2001, 5:31:01 PM, you wrote: NMM> Hello Layne, NMM> if you have'nt subscribed, why do you think do you receive mails from NMM> debian-security?, maybe you're too stupid to remember but you receive a NMM> confirmation email before being added to a mailing list

Re: Is ident secure?

2001-10-24 Thread Malcolm Herbert
... don't know if it's happening to others, however I seem to be receiving mail from the 'Is Ident secure' thread of earlier in September (with the idiot who was subscribed and who wouldn't/couldn't unsubscribe himself) ... is anyone else seeing this replay? I have the original in my mailbox if a

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread victor
Hello eim, Wednesday, October 24, 2001, 7:58:15 PM, you wrote: e> Actually I'm subscribed to the famous bugtraq Mailing List e> and of course the Debian Security Mailing List. i dont think that buqtraq bugtraq@securityfocus.com ... i understand you refer that make a high volume, i recieve 9 mail

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Patrice Neff
Michael Robinson <[EMAIL PROTECTED]> writes: > FreeBSD does it for their ports tree. In fact, this has been a > matter of controversy, as the FreeBSD team issues a huge number of > security advisories for software that really has nothing to do with > FreeBSD. This has caused casual observers to e

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread Stefano Canepa
mercoledì 24 ottobre 2001, alle 19:58, eim: : Actually I'm subscribed to the famous bugtraq Mailing List : and of course the Debian Security Mailing List. : : Bugtraq is a 'high volume' Mailing List which forwards to me : many important mails about security in General and not only : Debian Specif

Re: Connection problem

2001-10-24 Thread Jason Thomas
On Wed, Oct 24, 2001 at 02:35:51PM +0200, Emmanuel Lacour wrote: > Ok , to close this message (out of list topics), I just explain how I > solved my problem. > > A few days ago I was playing with ipsec and adsl pppoe. This was a mtu > problem so I played with clampmss fragicmp overridemtu in rp-p

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread Henrique de Moraes Holschuh
On Wed, 24 Oct 2001, eim wrote: > My question is: Is it convenient to subscirbe _only_ to the Debian > Security Mailing List keeping in mind only security related to this > Distribution and Server Platform, or are there maybe some 'important' > informations on BugTraq which maybe will never be post

Re: Is ident secure?

2001-10-24 Thread Nicolas M . M
do you know what the word sollicitors mean? i don't think so, you should go to school you lil' brainless. -- "La bonne humeur est une vertue, celle qui différencie l'humain de l'animal." -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EM

Re: FUCK YOU

2001-10-24 Thread Nicolas M . M
Hello Layne, if you have'nt subscribed, why do you think do you receive mails from debian-security?, maybe you're too stupid to remember but you receive a confirmation email before being added to a mailing lists, so shut up and unsubscribe *** ! -- "La bonne humeur est une vertue, c

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread victor
Hello eim, Wednesday, October 24, 2001, 7:58:15 PM, you wrote: e> Actually I'm subscribed to the famous bugtraq Mailing List e> and of course the Debian Security Mailing List. i dont think that buqtraq [EMAIL PROTECTED] ... i understand you refer that make a high volume, i recieve 9 mail at day

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Patrice Neff
Michael Robinson <[EMAIL PROTECTED]> writes: > FreeBSD does it for their ports tree. In fact, this has been a > matter of controversy, as the FreeBSD team issues a huge number of > security advisories for software that really has nothing to do with > FreeBSD. This has caused casual observers to

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread Stefano Canepa
mercoledì 24 ottobre 2001, alle 19:58, eim: : Actually I'm subscribed to the famous bugtraq Mailing List : and of course the Debian Security Mailing List. : : Bugtraq is a 'high volume' Mailing List which forwards to me : many important mails about security in General and not only : Debian Speci

Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread eim
Actually I'm subscribed to the famous bugtraq Mailing List and of course the Debian Security Mailing List. Bugtraq is a 'high volume' Mailing List which forwards to me many important mails about security in General and not only Debian Specific Because I really work only with Debian GNU/Linux as

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread Henrique de Moraes Holschuh
On Wed, 24 Oct 2001, eim wrote: > My question is: Is it convenient to subscirbe _only_ to the Debian > Security Mailing List keeping in mind only security related to this > Distribution and Server Platform, or are there maybe some 'important' > informations on BugTraq which maybe will never be pos

Re: Firewall Related Question

2001-10-24 Thread J.R. Blain
Using kernel 2.2, I run a bridge, that handles packet filtering with ipchains. Patches are available here: http://www.ac2i.tzo.com/bridge_filter/ James wrote: > > That link might help... > http://www.linuxdoc.org/HOWTO/mini/Bridge+Firewall.html > > - James > > -Original Message- > Fro

Re: Intro - Design, Engineering, Manufacturing, and more

2001-10-24 Thread Richard Ibbotson
Dear All > Igoework.com is represented by a group that includes: Pardon me for wasting bandwidth but am I the only person who is getting a bounced multiple repeated message of this sort from the Debian security list ? Thank you -- Richard

Intro - Design, Engineering, Manufacturing, and more

2001-10-24 Thread Igoework.com Inc.
Please allow us to introduce ourselves, Igoework.com is represented by a group that includes: - Talented engineers(Mechanical and Electrical) - Software solutions(CAD, FEA) - Manufacturing vendors (Castings, Sheet Metal, Plastics, SLA, etc) - Technical placement (Direct placement of tal

Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread eim
Actually I'm subscribed to the famous bugtraq Mailing List and of course the Debian Security Mailing List. Bugtraq is a 'high volume' Mailing List which forwards to me many important mails about security in General and not only Debian Specific Because I really work only with Debian GNU/Linux as

Re: Firewall Related Question

2001-10-24 Thread J.R. Blain
Using kernel 2.2, I run a bridge, that handles packet filtering with ipchains. Patches are available here: http://www.ac2i.tzo.com/bridge_filter/ James wrote: > > That link might help... > http://www.linuxdoc.org/HOWTO/mini/Bridge+Firewall.html > > - James > > -Original Message- > Fr

Re: Intro - Design, Engineering, Manufacturing, and more

2001-10-24 Thread Richard Ibbotson
Dear All > Igoework.com is represented by a group that includes: Pardon me for wasting bandwidth but am I the only person who is getting a bounced multiple repeated message of this sort from the Debian security list ? Thank you -- Richard -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Intro - Design, Engineering, Manufacturing, and more

2001-10-24 Thread Igoework.com Inc.
Please allow us to introduce ourselves, Igoework.com is represented by a group that includes: - Talented engineers(Mechanical and Electrical) - Software solutions(CAD, FEA) - Manufacturing vendors (Castings, Sheet Metal, Plastics, SLA, etc) - Technical placement (Direct placement of ta

Re: Firewall Related Question

2001-10-24 Thread Alson van der Meulen
On Wed, Oct 24, 2001 at 01:36:10AM -0400, James wrote: > That link might help... > http://www.linuxdoc.org/HOWTO/mini/Bridge+Firewall.html Note also that until recently (kernel 2.0.25) the 3c509 driver could not be used for more than one card if used as a module. I have seen a patch floating aroun

Re: Connection problem

2001-10-24 Thread Emmanuel Lacour
On Tue, Oct 23, 2001 at 12:09:36PM +0200, Emmanuel Lacour wrote: > Hi, > > It's maybe a little bit off topic, but I think someone in this list can > help me: > > I've got a firewall debian potato, kernel 2.2.17pre6, doing masquerading > and other rules over an adsl pppoe line. All worked perfectl

Re: Firewall Related Question

2001-10-24 Thread Alson van der Meulen
On Wed, Oct 24, 2001 at 01:36:10AM -0400, James wrote: > That link might help... > http://www.linuxdoc.org/HOWTO/mini/Bridge+Firewall.html Note also that until recently (kernel 2.0.25) the 3c509 driver could not be used for more than one card if used as a module. I have seen a patch floating arou

qmail ERR- authorization

2001-10-24 Thread skubij
I have problem with authorization qmail pop3 clients. I don't know why qmail-pop3 not authorize my users on all accounts. When we use client from WWW that is goot.

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Paul Haesler
> > The alternative is the "ostrich" method of security management. > > What's that kind of method? I never heared about that name. It was once a widespread belief that the ostrich's method of "hiding" from predators was to bury it's head in the sand. This is obviously untrue, but the concept has

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Christian Kurz
On 23/10/01, Michael Robinson wrote: > On Tue, Oct 23, 2001 at 09:55:04AM +0200, Christian Kurz wrote: > > Do you know how difficult and time-consuming it really is to do a manual > > source code audit? Also the available programs for source code audits > > can only give you hints which parts of a

Re: Connection problem

2001-10-24 Thread Emmanuel Lacour
On Tue, Oct 23, 2001 at 12:09:36PM +0200, Emmanuel Lacour wrote: > Hi, > > It's maybe a little bit off topic, but I think someone in this list can > help me: > > I've got a firewall debian potato, kernel 2.2.17pre6, doing masquerading > and other rules over an adsl pppoe line. All worked perfect

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-24 Thread Blars Blarson
In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] writes: >On Wed, Oct 24, 2001 at 01:18:52AM +, Martin WHEELER wrote: >> On Tue, 23 Oct 2001, Ethan Benson wrote: >> > kernels are never upgraded automatically by apt, you have to do it >> > yourself: >> That's not quite true -- should you recom

qmail ERR- authorization

2001-10-24 Thread skubij
I have problem with authorization qmail pop3 clients. I don't know why qmail-pop3 not authorize my users on all accounts. When we use client from WWW that is goot. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Paul Haesler
> > The alternative is the "ostrich" method of security management. > > What's that kind of method? I never heared about that name. It was once a widespread belief that the ostrich's method of "hiding" from predators was to bury it's head in the sand. This is obviously untrue, but the concept has

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Christian Kurz
On 23/10/01, Michael Robinson wrote: > On Tue, Oct 23, 2001 at 09:55:04AM +0200, Christian Kurz wrote: > > Do you know how difficult and time-consuming it really is to do a manual > > source code audit? Also the available programs for source code audits > > can only give you hints which parts of a

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-24 Thread Ethan Benson
On Wed, Oct 24, 2001 at 01:18:52AM +, Martin WHEELER wrote: > On Tue, 23 Oct 2001, Ethan Benson wrote: > > > kernels are never upgraded automatically by apt, you have to do it > > yourself: > > That's not quite true -- should you recompile your own kernel, and for > whatever reason, NOT give

RE: Unidentified subject!

2001-10-24 Thread James
I've been told that usually means just a corrupt/damaged packet and shouldn't be much to worry about, unless you are getting lots of them (Might be an attack).   - James -Original Message-From: sonam dukda [mailto:[EMAIL PROTECTED]Sent: Tuesday, October 23, 2001 4:52 AMTo: d

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-24 Thread Blars Blarson
In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] writes: >On Wed, Oct 24, 2001 at 01:18:52AM +, Martin WHEELER wrote: >> On Tue, 23 Oct 2001, Ethan Benson wrote: >> > kernels are never upgraded automatically by apt, you have to do it >> > yourself: >> That's not quite true -- should you reco

RE: Firewall Related Question

2001-10-24 Thread James
That link might help... http://www.linuxdoc.org/HOWTO/mini/Bridge+Firewall.html - James -Original Message- From: Alson van der Meulen [mailto:[EMAIL PROTECTED] Sent: Monday, October 22, 2001 1:31 PM To: Debian Security List Subject: Re: Firewall Related Question On Mon, Oct 22, 2001 at

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-24 Thread Nicole Zimmerman
I would suggest adding the testing source to your /etc/apt/sources.list and grabbing kernel-source-2.2.19 (version 2.2.19.1-1 has the security patches in question). Edit /etc/apt/sources.list Add deb http://http.us.debian.org/debian/ testing main Save the file. apt-get update apt-get install kern