Re: enforcing resource limits

2002-04-21 Thread Peter Cordes
On Sun, Apr 21, 2002 at 11:44:25AM +1000, Ian Cumming wrote: > Anyway, if anyone is using limits.conf, could you please post your > configuration with perhaps a little comment describing why you have > chosen certain values, etc.. When I have set up limits, it's been to prevent runaway processes

Re: logging iptables

2002-04-21 Thread Jean-Francois Dive
Hi, As from the man: LOG: This is a "non-terminating target", i.e. rule traversal continues at the next rule. So if you want to LOG the packets you refuse, use two separate rules with the same matching criterias, first using target LOG then DROP (or REJECT).

logging iptables

2002-04-21 Thread Lars Roland Kristiansen
Hi i have a fairly simple iptables script that blocks all except from port 22, 25, 110 and 113. it looks like this --- iptables -P INPUT DROP iptables -A INPUT -p tcp -m multiport -s 0/0 --dport 22,25,110,113 -i eth0 -j ACCEP

Re: Iptables config

2002-04-21 Thread J C Lawrence
On Sun, 21 Apr 2002 18:34:58 +0200 (CEST) Cristian Ionescu-Idbohrn <[EMAIL PROTECTED]> wrote: > http://www.linuxguruz.org/iptables/ I've found that shorewall (now apt-gettable) makes a very nice iptables framework/wrapper. -- J C Lawrence -(*)Satan, os

Re: Iptables config

2002-04-21 Thread J C Lawrence
On Sun, 21 Apr 2002 18:34:58 +0200 (CEST) Cristian Ionescu-Idbohrn <[EMAIL PROTECTED]> wrote: > http://www.linuxguruz.org/iptables/ I've found that shorewall (now apt-gettable) makes a very nice iptables framework/wrapper. -- J C Lawrence -(*)Satan, o

Re: Iptables config

2002-04-21 Thread Cristian Ionescu-Idbohrn
On Sun, 21 Apr 2002, Jussi Ekholm wrote: [snip] > Thank you, I'll take a look at them. But, I'd still need some help > concerning the DROP chain -- I've read the Packet-filtering-HOWTO, > and eyed all related HOWTOs from LDP (actually, the Debian package > doc-linux-html), but *still* I'm unable

Re: Webserver questions: using samba, avoiding cleartext passwords, co-existing with Windows

2002-04-21 Thread Cristian Ionescu-Idbohrn
On Thu, 18 Apr 2002, Tom Dominico wrote: [snip] > 3) Do none of the above and use an SCP client to manually transfer > things back and forth when necessary. Yes, but not manually. Take a look at this: http://winscp.vse.cz/eng/ Cheers, Cristian -- To UNSUBSCRIBE, email to [EMAIL PROTECTED

Lütfen Yardým edin...Çok önemli...

2002-04-21 Thread aytekingunduz
Title: Lütfen Yardým Edin   Lutfen Yardim Edin...( Cok Onemli )   Ben Ankaradan Aytekin Gunduz...1 senedir kayip olan bir yakinimizi ariyoruz.Kayip olan yakinimizi asagida fotografi olan kisi ile beraber 03.03.2002 tarihinde Show TVde gordukBu kisiyi su an Medya ve kisisel gayretlerimi

Re: Iptables config

2002-04-21 Thread Cristian Ionescu-Idbohrn
On Sun, 21 Apr 2002, Jussi Ekholm wrote: [snip] > Thank you, I'll take a look at them. But, I'd still need some help > concerning the DROP chain -- I've read the Packet-filtering-HOWTO, > and eyed all related HOWTOs from LDP (actually, the Debian package > doc-linux-html), but *still* I'm unable

Re: Webserver questions: using samba, avoiding cleartext passwords,co-existing with Windows

2002-04-21 Thread Cristian Ionescu-Idbohrn
On Thu, 18 Apr 2002, Tom Dominico wrote: [snip] > 3) Do none of the above and use an SCP client to manually transfer > things back and forth when necessary. Yes, but not manually. Take a look at this: http://winscp.vse.cz/eng/ Cheers, Cristian -- To UNSUBSCRIBE, email to [EMAIL PROTECTE

Lütfen Yardým edin...Çok önemli...

2002-04-21 Thread aytekingunduz
Title: Lütfen Yardým Edin   Lutfen Yardim Edin...( Cok Onemli )   Ben Ankaradan Aytekin Gunduz...1 senedir kayip olan bir yakinimizi ariyoruz.Kayip olan yakinimizi asagida fotografi olan kisi ile beraber 03.03.2002 tarihinde Show TVde gordukBu kisiyi su an Medya ve kisisel gayretlerimi

Re: one more iplogger question.

2002-04-21 Thread Jussi Ekholm
A.J. Rossini <[EMAIL PROTECTED]> wrote: > "jussi" == Jussi Ekholm <[EMAIL PROTECTED]> writes: >> What software tries to connect to port 16001? > > GNOME. Yeah, it was gconfd which was doing that. It just made me wonder, because I've used Galeon a million times (and AFAIK it launches up gconfd), a

Re: Iptables config

2002-04-21 Thread Jussi Ekholm
Sami Dalouche <[EMAIL PROTECTED]> wrote: > Here's a set of rules to replace ipmasq's ones.. Thank you, I'll take a look at them. But, I'd still need some help concerning the DROP chain -- I've read the Packet-filtering-HOWTO, and eyed all related HOWTOs from LDP (actually, the Debian package doc-

Re: one more iplogger question.

2002-04-21 Thread Jussi Ekholm
A.J. Rossini <[EMAIL PROTECTED]> wrote: > "jussi" == Jussi Ekholm <[EMAIL PROTECTED]> writes: >> What software tries to connect to port 16001? > > GNOME. Yeah, it was gconfd which was doing that. It just made me wonder, because I've used Galeon a million times (and AFAIK it launches up gconfd),

Re: Iptables config

2002-04-21 Thread Jussi Ekholm
Sami Dalouche <[EMAIL PROTECTED]> wrote: > Here's a set of rules to replace ipmasq's ones.. Thank you, I'll take a look at them. But, I'd still need some help concerning the DROP chain -- I've read the Packet-filtering-HOWTO, and eyed all related HOWTOs from LDP (actually, the Debian package doc

RE: Many Virtual Hosts security problem with PHP

2002-04-21 Thread Arild Evensen
You can also put other directives in section, like Addtypes for scripting and other file types. Override settings for .htaccess. Other php related settings.(includepath, sendmail from, upload tmp dir,..) errdoc,... Keep ftp root over www root, gives you a private space to have includefiles, tmp