Re: fail2ban vs. syslogd compression

2007-08-28 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: >> Wouldn't a better option be to teach fail2ban how to parse the "last >> message repeated".. messages? > > Maxim or Dann: When you find out how to do that, please post it to the list > for archiving / information-sharing purposes. I can tell you the ob

Re: fail2ban vs. syslogd compression

2007-08-28 Thread Jonathan Wilson
On Tuesday 28 August 2007 12:24, dann frazier wrote: > On Tue, Aug 28, 2007 at 12:43:10PM +0200, Maxim Kammerer wrote: > > > > I then sought to disable this kind of log compression, but it is not > > stated in the man pages how to do that. > > > > So I ended up with not knowing what to do and tu

Re: [DSA 1359-1] New dovecot packages fix directory traversal

2007-08-28 Thread Simon Valiquette
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Simon Valiquette un jour écrivit: > > There is no updated packages for Debian Etch PowerPC, contrarily > to what is stated on the previous line. > > > In case sec.deb.org/dists/etch/updates/main/binary-powerpc/Packages.gz > would not have been

Re: [DSA 1360-1] New rsync packages fix arbitrary code execution

2007-08-28 Thread Simon Valiquette
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Steve Kemp un jour écrivit: > > Sebastian Krahmer discovered that rsync, a fast remote file copy > program, contains an off-by-one error which might allow remote > attackers to execute arbitary code via long directory names. > > For the stable di

Re: fail2ban vs. syslogd compression

2007-08-28 Thread dann frazier
On Tue, Aug 28, 2007 at 12:43:10PM +0200, Maxim Kammerer wrote: > Hello everybody, > > I believe this belongs to the security-mailing list. I recently took a > server online and it was immediately hit by pop3-cracking attempts. Well, > they were quite stupid, since they were attempting once for e

fail2ban vs. syslogd compression

2007-08-28 Thread Maxim Kammerer
Hello everybody, I believe this belongs to the security-mailing list. I recently took a server online and it was immediately hit by pop3-cracking attempts. Well, they were quite stupid, since they were attempting once for each name taken from a 'frequent names list', so I guess somebody was looki