Re: FTP servers that ban abusers?

2003-06-30 Thread Jens Gutzeit
On Monday 30 June 2003 17:22, Andrew Sayers wrote: > Ideally. whenever someone tries to FTP in as root, ftp, backup, or some > other administrative account, I'd like iptables to DROP further incoming > FTP traffic from that address, and an e-mail to be sent automatically to > me and their network'

samba woody

2003-06-30 Thread Bencsath Boldizsar
Hi, Do You (We) really surely want to include buggy samba 2.2.3a-12, more than half year old in 'testing' release? I already know one guy with a 1 week old 'testing' debian hacked through samba. (I know, it's -12.3 on security for stable, and samba is not secure at all, but I think this one needs

OT: An Idea for an IDS

2003-06-30 Thread Phillip Hofmeister
Greets all, A previous post spawned an idea of mine. I am not sure if there is a project available for this or not. Here we go: A daemon sits running in the background listening to a special device (/dev) or an IPC which would originate from syslog-ng. This daemon would then parse the log and

Re: Why is proftpd always started when one update it?

2003-06-30 Thread Luis Gomez - InfoEmergencias
Or, which I usually prefer, leave the S and K files in their place (so that you know where they must be in case you need them), but chmod -x them. Regards Pope On Lunes, 30 de Junio de 2003 19:05, David Wright wrote: > Quoting Preben Randhol ([EMAIL PROTECTED]): > > I had to do a update

Re: request to german speaking users

2003-06-30 Thread Christoph Haas
On Sun, Jun 29, 2003 at 10:32:54PM +0200, Christian Kujau wrote: > hm, patches. i'm not good at creating patches. would it help too if i/we > send you "this word, sentence, page XX.." and the like? That's a terrible burden for Alexander to create text from it. Please get the docbook formatted cod

Re: Firewall with iptables and forwarding

2003-06-30 Thread Raymond Wood
On Fri, 27 Jun 2003 04:48:27 +0200 Linux <[EMAIL PROTECTED]> wrote: > Hi > > Have anybody a good recommendation for an easy to use firewall > with port forwarding ? > > I got a home network with a dedicated (Debian of course) > firewall box with ADSL connected, and ipmasq package installed. > >

Re: FTP servers that ban abusers?

2003-06-30 Thread Jens Gutzeit
On Monday 30 June 2003 17:22, Andrew Sayers wrote: > Ideally. whenever someone tries to FTP in as root, ftp, backup, or some > other administrative account, I'd like iptables to DROP further incoming > FTP traffic from that address, and an e-mail to be sent automatically to > me and their network'

RE: Why is proftpd always started when one update it?

2003-06-30 Thread CARMICHAEL, SHAWN (ASI)
That occurs because that is how it is packaged in the .deb when you download and update it. Unless you package your own from source there is no work around. That is something configured in the source or when you package the application I cant remember what way it is don't off the top of my head.

Re: evolution

2003-06-30 Thread Jon
On Mon, 2003-06-30 at 00:29, Martynas Domarkas wrote: > Pn, 2003-06-27 05:59, Jean Christophe ANDRÉ rašė: > > Matt Zimmerman écrivait : > > > > There are a LOT of connetcions: ~700 in a 5 minutes. I did not find any > > > > configuration options with that hosts. What could it be? > > > This is su

samba woody

2003-06-30 Thread Bencsath Boldizsar
Hi, Do You (We) really surely want to include buggy samba 2.2.3a-12, more than half year old in 'testing' release? I already know one guy with a 1 week old 'testing' debian hacked through samba. (I know, it's -12.3 on security for stable, and samba is not secure at all, but I think this one needs

Re: Accounts for client programs

2003-06-30 Thread Robert Vazan
On Sun, 29 Jun 2003 23:22:42 -0700 Simon Kirby <[EMAIL PROTECTED]> wrote: > I actually do this, and have been since when I was running Slackware > 2.2. > It takes some scripting and moving things around, What do you have to move around? > but I run X as root and > run each application (mozilla,

Re: Why is proftpd always started when one update it?

2003-06-30 Thread Ted Cabeen
Preben Randhol <[EMAIL PROTECTED]> writes: > Hi > > This is really annoying and insecure. I have proftpd installed on my > debian in those rare occations I cannot use SSH to transfer files > from another computer. However I do not want proftpd to run except when > I start it manually myself and af

OT: An Idea for an IDS

2003-06-30 Thread Phillip Hofmeister
Greets all, A previous post spawned an idea of mine. I am not sure if there is a project available for this or not. Here we go: A daemon sits running in the background listening to a special device (/dev) or an IPC which would originate from syslog-ng. This daemon would then parse the log and

Re: Announcement: APT Secure

2003-06-30 Thread Jason Lunz
[EMAIL PROTECTED] said: >> Where should I get the key? And why isn't it in debian-keyring? I've got >> the current sid version. > > http://www.debian.org/releases/ Well, that wasn't too hard to find, of course. The "where" question was mostly rhetorical. More importantly, why on earth isn't the a

Re: Why is proftpd always started when one update it?

2003-06-30 Thread Luis Gomez - InfoEmergencias
Or, which I usually prefer, leave the S and K files in their place (so that you know where they must be in case you need them), but chmod -x them. Regards Pope On Lunes, 30 de Junio de 2003 19:05, David Wright wrote: > Quoting Preben Randhol ([EMAIL PROTECTED]): > > I had to do a update

Re: request to german speaking users

2003-06-30 Thread Christoph Haas
On Sun, Jun 29, 2003 at 10:32:54PM +0200, Christian Kujau wrote: > hm, patches. i'm not good at creating patches. would it help too if i/we > send you "this word, sentence, page XX.." and the like? That's a terrible burden for Alexander to create text from it. Please get the docbook formatted cod

Re: Firewall with iptables and forwarding

2003-06-30 Thread Raymond Wood
On Fri, 27 Jun 2003 04:48:27 +0200 Linux <[EMAIL PROTECTED]> wrote: > Hi > > Have anybody a good recommendation for an easy to use firewall > with port forwarding ? > > I got a home network with a dedicated (Debian of course) > firewall box with ADSL connected, and ipmasq package installed. > >

RE: Why is proftpd always started when one update it?

2003-06-30 Thread CARMICHAEL, SHAWN (ASI)
That occurs because that is how it is packaged in the .deb when you download and update it. Unless you package your own from source there is no work around. That is something configured in the source or when you package the application I cant remember what way it is don't off the top of my head.

Re: evolution

2003-06-30 Thread Jon
On Mon, 2003-06-30 at 00:29, Martynas Domarkas wrote: > Pn, 2003-06-27 05:59, Jean Christophe ANDRÉ rašė: > > Matt Zimmerman écrivait : > > > > There are a LOT of connetcions: ~700 in a 5 minutes. I did not find any > > > > configuration options with that hosts. What could it be? > > > This is su

Re: Accounts for client programs

2003-06-30 Thread Robert Vazan
On Sun, 29 Jun 2003 23:22:42 -0700 Simon Kirby <[EMAIL PROTECTED]> wrote: > I actually do this, and have been since when I was running Slackware > 2.2. > It takes some scripting and moving things around, What do you have to move around? > but I run X as root and > run each application (mozilla,

Re: Why is proftpd always started when one update it?

2003-06-30 Thread Ted Cabeen
Preben Randhol <[EMAIL PROTECTED]> writes: > Hi > > This is really annoying and insecure. I have proftpd installed on my > debian in those rare occations I cannot use SSH to transfer files > from another computer. However I do not want proftpd to run except when > I start it manually myself and af

Re: Announcement: APT Secure

2003-06-30 Thread Jason Lunz
[EMAIL PROTECTED] said: >> Where should I get the key? And why isn't it in debian-keyring? I've got >> the current sid version. > > http://www.debian.org/releases/ Well, that wasn't too hard to find, of course. The "where" question was mostly rhetorical. More importantly, why on earth isn't the a

FTP servers that ban abusers?

2003-06-30 Thread Andrew Sayers
After yet another FTP-based attack today, it occurred to me: are there any FTP servers out there which will ban a user (or even better, run an arbitrary script) if he/she tries to log into a specific account? Ideally. whenever someone tries to FTP in as root, ftp, backup, or some other administrat

FTP servers that ban abusers?

2003-06-30 Thread Andrew Sayers
After yet another FTP-based attack today, it occurred to me: are there any FTP servers out there which will ban a user (or even better, run an arbitrary script) if he/she tries to log into a specific account? Ideally. whenever someone tries to FTP in as root, ftp, backup, or some other administrat

Re: Why is proftpd always started when one update it?

2003-06-30 Thread David Wright
Quoting Preben Randhol ([EMAIL PROTECTED]): > I had to do a update-rc.d -f proftpd remove again. > If somebody could explain why it is like this it would be nice. >From man update-rc.d: If any files /etc/rcrunlevel.d/[SK]??name already exist then update-rc.d does nothing. This

Re: request to german speaking users

2003-06-30 Thread Christian Kujau
Alexander Schmehl wrote: I just finished the translation of the security howto to german, but some parts are very ugly hacked. It would be very nice, if some of you would review my translation (or at least small parts of it), and send me some patches. hm, patches. i'm not good at creating patc

Re: evolution

2003-06-30 Thread Martynas Domarkas
Pn, 2003-06-27 05:59, Jean Christophe ANDRÉ rašė: > Matt Zimmerman écrivait : > > > There are a LOT of connetcions: ~700 in a 5 minutes. I did not find any > > > configuration options with that hosts. What could it be? > > This is surely an evolution "feature" where it means to provide you with >

Why is proftpd always started when one update it?

2003-06-30 Thread Preben Randhol
Hi This is really annoying and insecure. I have proftpd installed on my debian in those rare occations I cannot use SSH to transfer files from another computer. However I do not want proftpd to run except when I start it manually myself and after the transfer I turn it off. I saw now that there wa

Re: Accounts for client programs

2003-06-30 Thread Simon Kirby
On Sun, Jun 29, 2003 at 02:43:46PM +0200, Robert Vazan wrote: > Is it possible to run all programs including clients (browser, mp3 > player, compiler, ...) under separate accounts just like servers? Would > it be possible to add this as an option when installing the system? > > The problem I have

Re: Why is proftpd always started when one update it?

2003-06-30 Thread David Wright
Quoting Preben Randhol ([EMAIL PROTECTED]): > I had to do a update-rc.d -f proftpd remove again. > If somebody could explain why it is like this it would be nice. >From man update-rc.d: If any files /etc/rcrunlevel.d/[SK]??name already exist then update-rc.d does nothing. This

Re: request to german speaking users

2003-06-30 Thread Christian Kujau
Alexander Schmehl wrote: I just finished the translation of the security howto to german, but some parts are very ugly hacked. It would be very nice, if some of you would review my translation (or at least small parts of it), and send me some patches. hm, patches. i'm not good at creating patches.

Re: evolution

2003-06-30 Thread Martynas Domarkas
Pn, 2003-06-27 05:59, Jean Christophe ANDRÉ rašė: > Matt Zimmerman écrivait : > > > There are a LOT of connetcions: ~700 in a 5 minutes. I did not find any > > > configuration options with that hosts. What could it be? > > This is surely an evolution "feature" where it means to provide you with >

Why is proftpd always started when one update it?

2003-06-30 Thread Preben Randhol
Hi This is really annoying and insecure. I have proftpd installed on my debian in those rare occations I cannot use SSH to transfer files from another computer. However I do not want proftpd to run except when I start it manually myself and after the transfer I turn it off. I saw now that there wa

Re: Accounts for client programs

2003-06-30 Thread Simon Kirby
On Sun, Jun 29, 2003 at 02:43:46PM +0200, Robert Vazan wrote: > Is it possible to run all programs including clients (browser, mp3 > player, compiler, ...) under separate accounts just like servers? Would > it be possible to add this as an option when installing the system? > > The problem I have

Re: Firewall with iptables and forwarding

2003-06-30 Thread Peter Gossner
On Fri, 27 Jun 2003 04:48:27 +0200 Linux <[EMAIL PROTECTED]> scribed: :>Hi :> :>Have anybody a good recommendation for an easy to use firewall with port :>forwarding ? :> :>I got a home network with a dedicated (Debian of course) firewall box with :>ADSL connected, and ipmasq package installed.

Re: Firewall with iptables and forwarding

2003-06-30 Thread Peter Gossner
On Fri, 27 Jun 2003 04:48:27 +0200 Linux <[EMAIL PROTECTED]> scribed: :>Hi :> :>Have anybody a good recommendation for an easy to use firewall with port :>forwarding ? :> :>I got a home network with a dedicated (Debian of course) firewall box with :>ADSL connected, and ipmasq package installed.