Re: Security issue with Apache-ssl?

2003-02-05 Thread J.H.M. Dassen (Ray)
On Wed, Feb 05, 2003 at 22:14:58 -0700, Miles Beck wrote: > And on occasion I see this as well. > > [Mon Feb 3 06:25:11 2003] [notice] SIGUSR1 received. Doing graceful > restart Given the time, I'd guess that this is /etc/cron.daily/logrotate's execution of the postrotate part of /etc/logrotate

Security issue with Apache-ssl?

2003-02-05 Thread Miles Beck
Hello, I am using Apache-ssl 1.3.26.1+1.48-0woody3 and openssl 0.9.6c-2.woody.1. On a daily basis I am seeing the following errors. [Wed Feb 5 10:00:03 2003] [notice] child pid 3751 exit signal Segmentation fault (11) [Wed Feb 5 11:30:02 2003] [notice] child pid 3747 exit signal Segmentation f

Security issue with Apache-ssl?

2003-02-05 Thread Miles Beck
Hello, I am using Apache-ssl 1.3.26.1+1.48-0woody3 and openssl 0.9.6c-2.woody.1. On a daily basis I am seeing the following errors. [Wed Feb 5 10:00:03 2003] [notice] child pid 3751 exit signal Segmentation fault (11) [Wed Feb 5 11:30:02 2003] [notice] child pid 3747 exit signal Segmentation f

Re: LIDS vers. chroot

2003-02-05 Thread John Morton
On Wed, 05 Feb 2003 20:14, Benjamin Schuele wrote: > I would like to initiate a discussion about LIDS and chroot to setup a > secure server. In my opinion, a good customized LIDS is more reliable and > usable then chroot because of this reasons: > > Time to set up > I tooks a lot of time to get one

cluster on firewall?

2003-02-05 Thread Haim Ashkenazi
Hi I have setup a firewall with 4 legs as follows: * One leg goes to the router (cisco). * Second leg goes to a switch connected to the internal network (10.20...). * The third and fourth legs are both for the dmz. one goes to a switch with many dmz host

Re: LIDS vers. chroot

2003-02-05 Thread John Morton
On Wed, 05 Feb 2003 20:14, Benjamin Schuele wrote: > I would like to initiate a discussion about LIDS and chroot to setup a > secure server. In my opinion, a good customized LIDS is more reliable and > usable then chroot because of this reasons: > > Time to set up > I tooks a lot of time to get one

ACLs

2003-02-05 Thread Thomas Ritter
Hi all, does anyone know the actual status of ACL support in linux regarding usability? Are there any plans on shipping debian OSes using ACLs from installation on in its filesystem one day? At least ship a precompiled kernel for this? Or is it too experimental, tar doesn't get it, no easy NFS

cluster on firewall?

2003-02-05 Thread Haim Ashkenazi
Hi I have setup a firewall with 4 legs as follows: * One leg goes to the router (cisco). * Second leg goes to a switch connected to the internal network (10.20...). * The third and fourth legs are both for the dmz. one goes to a switch with many dmz host

ACLs

2003-02-05 Thread Thomas Ritter
Hi all, does anyone know the actual status of ACL support in linux regarding usability? Are there any plans on shipping debian OSes using ACLs from installation on in its filesystem one day? At least ship a precompiled kernel for this? Or is it too experimental, tar doesn't get it, no easy NFS

Re: Firewall testing

2003-02-05 Thread dsr
On Wed, Feb 05, 2003 at 11:14:50AM -0500, merk0020 wrote: > Hello I am about to make the Proxy/Firewall on your > www.aboutdebian.com web site. I was wondering how to go about testing > it when finished. I have multiple computers and various internet > connections. Put the firewall configuration o

Re: Firewall testing

2003-02-05 Thread Miguel Angel Aguilar Bermejo
Hello, You can test all the connectivity using tcpdump or ethereal (sniffing). If you want to attack your firewall use nessus. Good Look. sorry for my english. Bye. From: "merk0020" <[EMAIL PROTECTED]> To: Subject: Firewall testing Date: Wed, 5 Feb 2003 11:14:50 -0500 Hello I am about

Firewall testing

2003-02-05 Thread merk0020
Hello I am about to make the Proxy/Firewall on your www.aboutdebian.com web site. I was wondering how to go about testing it when finished. I have multiple computers and various internet connections.

Re: Firewall testing

2003-02-05 Thread dsr
On Wed, Feb 05, 2003 at 11:14:50AM -0500, merk0020 wrote: > Hello I am about to make the Proxy/Firewall on your > www.aboutdebian.com web site. I was wondering how to go about testing > it when finished. I have multiple computers and various internet > connections. Put the firewall configuration o

Re: Firewall testing

2003-02-05 Thread Miguel Angel Aguilar Bermejo
Hello, You can test all the connectivity using tcpdump or ethereal (sniffing). If you want to attack your firewall use nessus. Good Look. sorry for my english. Bye. From: "merk0020" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Firewall testing Date: Wed, 5 Feb 2003 11:14:50 -0500 H

Firewall testing

2003-02-05 Thread merk0020
Hello I am about to make the Proxy/Firewall on your www.aboutdebian.com web site. I was wondering how to go about testing it when finished. I have multiple computers and various internet connections. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact

Re: LIDS vers. chroot

2003-02-05 Thread Ralf Dreibrodt
Hi, > Benjamin Schuele wrote: > > I would like to initiate a discussion about LIDS and chroot to setup a > secure server. i prefer the solution to use chroot _with_ LIDS. Make everything you would do without chroot and chroot the process (e.g. bind, apache, etc.). Remove the CAP_SYS_CHROOT from

Re: LIDS vers. chroot

2003-02-05 Thread Ralf Dreibrodt
Hi, > Benjamin Schuele wrote: > > I would like to initiate a discussion about LIDS and chroot to setup a > secure server. i prefer the solution to use chroot _with_ LIDS. Make everything you would do without chroot and chroot the process (e.g. bind, apache, etc.). Remove the CAP_SYS_CHROOT from

LIDS vers. chroot

2003-02-05 Thread Benjamin Schuele
I would like to initiate a discussion about LIDS and chroot to setup a secure server. In my opinion, a good customized LIDS is more reliable and usable then chroot because of this reasons:   Time to set up I tooks a lot of time to get one programm running in a chroot environment, and unsualy