Re: XP box inside the firewall

2003-07-30 Thread Jeff
Kristof Goossens, 2003-Jul-30 14:09 +0200: > On Wed, Jul 30, 2003 at 02:01:06PM +0200, Kjetil Kjernsmo wrote: > > Hi all! > > [snip] > > > The question is really if I could do something in the firewall that > > would help isolate the XP box somewhat. Closing outgoing ports (input > > ports are

Re: XP box inside the firewall

2003-07-30 Thread Jeff
Kristof Goossens, 2003-Jul-30 14:09 +0200: > On Wed, Jul 30, 2003 at 02:01:06PM +0200, Kjetil Kjernsmo wrote: > > Hi all! > > [snip] > > > The question is really if I could do something in the firewall that > > would help isolate the XP box somewhat. Closing outgoing ports (input > > ports are

Re: configure ssh-access

2003-07-30 Thread Costas Magos
[EMAIL PROTECTED] wrote: Hi! I want to make ssh-access possible only from a restricted number of hosts - those that are named in /etc/hosts.allow. Users who want to login have a DynDNS host-name that shall be listed in hosts.allow to make it possible for users with a dial-up internet connecti

unsubscribe

2003-07-30 Thread Angela Jaschinski

Re: configure ssh-access

2003-07-30 Thread Costas Magos
[EMAIL PROTECTED] wrote: Hi! I want to make ssh-access possible only from a restricted number of hosts - those that are named in /etc/hosts.allow. Users who want to login have a DynDNS host-name that shall be listed in hosts.allow to make it possible for users with a dial-up internet connection

Re: XP box inside the firewall

2003-07-30 Thread Matthijs Mohlmann
Installing Woody on your parents laptop ? On Wed, 2003-07-30 at 14:01, Kjetil Kjernsmo wrote: > Hi all! > > It seems I have to have an Windows XP box inside the firewall for some > time to come... :-( (It's not my network, it's my parent's, and they > have a laptop with XP, their workstation is

Re: XP box inside the firewall

2003-07-30 Thread Kristof Goossens
On Wed, Jul 30, 2003 at 02:01:06PM +0200, Kjetil Kjernsmo wrote: > Hi all! [snip] > The question is really if I could do something in the firewall that > would help isolate the XP box somewhat. Closing outgoing ports (input > ports are all closed), drop certain types of packages, or something

XP box inside the firewall

2003-07-30 Thread Kjetil Kjernsmo
Hi all! It seems I have to have an Windows XP box inside the firewall for some time to come... :-( (It's not my network, it's my parent's, and they have a laptop with XP, their workstation is allready on Woody). What I'm worried about is that someone may get into the XP box (by sending a troj

unsubscribe

2003-07-30 Thread Angela Jaschinski
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: capabilities

2003-07-30 Thread Wolfgang Fischer
Hello, maybe kernel-patch-ctx (together with some user space utilities included in the vserver package) can help. It gives you the possibility to limit the superuser.

Re: XP box inside the firewall

2003-07-30 Thread Matthijs Mohlmann
Installing Woody on your parents laptop ? On Wed, 2003-07-30 at 14:01, Kjetil Kjernsmo wrote: > Hi all! > > It seems I have to have an Windows XP box inside the firewall for some > time to come... :-( (It's not my network, it's my parent's, and they > have a laptop with XP, their workstation is

Re: XP box inside the firewall

2003-07-30 Thread Kristof Goossens
On Wed, Jul 30, 2003 at 02:01:06PM +0200, Kjetil Kjernsmo wrote: > Hi all! [snip] > The question is really if I could do something in the firewall that > would help isolate the XP box somewhat. Closing outgoing ports (input > ports are all closed), drop certain types of packages, or something

XP box inside the firewall

2003-07-30 Thread Kjetil Kjernsmo
Hi all! It seems I have to have an Windows XP box inside the firewall for some time to come... :-( (It's not my network, it's my parent's, and they have a laptop with XP, their workstation is allready on Woody). What I'm worried about is that someone may get into the XP box (by sending a troj

Re: capabilities

2003-07-30 Thread Wolfgang Fischer
Hello, maybe kernel-patch-ctx (together with some user space utilities included in the vserver package) can help. It gives you the possibility to limit the superuser. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]