Re: PAM tarpit module for repeated SSH login attempts

2004-10-19 Thread Kevin B. McCarty
martin f. krafft wrote: > Nice, though it does not look like a tarpit... instead, it just > doesn't respond to requests. A tarpit would start the connection > and hold it instead. Maybe I misunderstand the code, I am not really > a PAM hacker. Well, I'm certainly not an expert either, this was my

Re: iptables problem

2004-10-19 Thread Geoff
Thiago Ribeiro wrote: Hello, I have any problems with DNAT iptables. I'm redirecting my external http port to remote host. I have 8 networks, beginning with 192.168.1-8. My remote machine and destination is 192.168.5.2 and all networks excluding 192.168.5.0/24 can navigate in this. When I'm runnin

Re: iptables problem

2004-10-19 Thread martin f krafft
also sprach Thiago Ribeiro <[EMAIL PROTECTED]> [2004.10.19.2203 +0200]: > -A PREROUTING -d 200.210.101.37 -p tcp -m tcp --dport 80 -j DNAT --to > 192.168.5.2:80 > > I'm using network 7's address and the redirecting is perfect. Only > network 5 can't to do this. If I read you correctly, this is be

iptables problem

2004-10-19 Thread Thiago Ribeiro
Hello, I have any problems with DNAT iptables. I'm redirecting my external http port to remote host. I have 8 networks, beginning with 192.168.1-8. My remote machine and destination is 192.168.5.2 and all networks excluding 192.168.5.0/24 can navigate in this. When I'm running tcpdump or some sim

Re: PAM tarpit module for repeated SSH login attempts

2004-10-19 Thread martin f krafft
also sprach Kevin B. McCarty <[EMAIL PROTECTED]> [2004.10.19.2052 +0200]: > Having tired of seeing attempts to log in as root via SSH in my logs, I > wrote a quick-and-dirty hack to the pam_tally module in order to > implement a tarpit. Nice, though it does not look like a tarpit... instead, it ju

PAM tarpit module for repeated SSH login attempts

2004-10-19 Thread Kevin B. McCarty
Hi list, Having tired of seeing attempts to log in as root via SSH in my logs, I wrote a quick-and-dirty hack to the pam_tally module in order to implement a tarpit. Here's the code: (License is of course GPL) http://www.princeton.edu/~kmccarty/downloads/pam_tarpit-0.0.1.tar.gz This will work i

Re: [SECURITY] [DSA 567-1] New libtiff packages fix remote code execution

2004-10-19 Thread Floris Kraak
Hoi, Onderstaand probleem vraagt om een upgrade van: libtiff3g libtiff3g-dev Het probleem is relatief serieus (veel packages gebruiken libtiff) en de upgrade waarschijnlijk low impact. Upgraden van libtiff3g-dev is niet mogelijk, daar is nog geen nieuwe versie van in "testing". Dit development p