Re: Network traffic monitoring. (which IP makes big traffic?)

day. > > > > byebye > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- GPG key-id: 1024D/DF04A255 Dmitriy AA16 8FAB 74E1 3511 83D0 9F4B F

Re: Network traffic monitoring. (which IP makes big traffic?)

day. > > > > byebye > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- GPG key-id: 1024D/DF04A255 Dmitriy AA16 8FAB 74E1 3511 83D0

Re: How do I disable (close) ports?

After reading the whole thread, I think I finally understand what is going on. /etc/services really is only for mapping names to port numbers, but at least one daemon on your system uses service names instead of numbers. The daemon is inetd and it is that daemon that handles services such as cha

Re: Fw: Re: How do I disable (close) ports?

The only thing you can accomplish by commenting stuff in /etc/services is that netstat and other programs will show the ports by number instead of by name ( you commented the translation entry ) :) The ports are still open. On Wednesday 05 December 2001 07:59 am, J. Paul Bruns-Bielkowicz wrote:

Re: How do I disable (close) ports?

After reading the whole thread, I think I finally understand what is going on. /etc/services really is only for mapping names to port numbers, but at least one daemon on your system uses service names instead of numbers. The daemon is inetd and it is that daemon that handles services such as ch

Re: Fw: Re: How do I disable (close) ports?

The only thing you can accomplish by commenting stuff in /etc/services is that netstat and other programs will show the ports by number instead of by name ( you commented the translation entry ) :) The ports are still open. On Wednesday 05 December 2001 07:59 am, J. Paul Bruns-Bielkowicz wrote:

Re: How do I disable (close) ports?

/etc/services doesn't control services. The only function of this file is to translate between port numbers and service names. Commenting stuff in there doesn't help. What you need is to figure out what processes are keeping the ports open and shut down all the unneeded ones. In this case you ap

Re: How do I disable (close) ports?

/etc/services doesn't control services. The only function of this file is to translate between port numbers and service names. Commenting stuff in there doesn't help. What you need is to figure out what processes are keeping the ports open and shut down all the unneeded ones. In this case you a

Re: Mentioning Layne one more time

The proper english spelling is Herostratus On Wednesday 14 November 2001 01:59 pm, Dmitriy Kropivnitskiy wrote: > The name was Gerastrat :)

Re: 'mirror' with iptables

installed on both my home system and my work system. In any case, I get 20-100 port scans about once in ~2-3 days. There are a lot of idiots out there you know. To protect from single port scans use LaBrea. On Wednesday 14 November 2001 03:21 pm, Tim Haynes wrote: > Dmitriy Kropivnitskiy <

Re: Mentioning Layne one more time

The proper english spelling is Herostratus On Wednesday 14 November 2001 01:59 pm, Dmitriy Kropivnitskiy wrote: > The name was Gerastrat :) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: 'mirror' with iptables

installed on both my home system and my work system. In any case, I get 20-100 port scans about once in ~2-3 days. There are a lot of idiots out there you know. To protect from single port scans use LaBrea. On Wednesday 14 November 2001 03:21 pm, Tim Haynes wrote: > Dmitriy Kropivnitskiy <

Re: is iptables slow?

FTP is a funny protocol. Do you use masquarading? Did you use state modules or just opened port 21? You need to have -s RELATED in order to have nice FTP. On Wednesday 14 November 2001 02:33 pm, phadell wrote: > I am having some problems in relation to speed of traffic of packages when > using ip

Re: 'mirror' with iptables

On Wednesday 14 November 2001 08:08 am, thomas lakofski wrote: > On 14 Nov 2001, Tim Haynes wrote: > > If you want to stop port-scans, use a proper firewall with DENY > > (ipchains) or DROP (iptables) by default. > > how does this stop the scanner from identifying open ports? > If you actually dro

Re: Mentioning Layne one more time

--Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of Christian Haugan > > Toldnes Sent: Wednesday, November 14, 2001 12:02 PM > > To: [EMAIL PROTECTED] > > Cc: debian-security@lists.debian.org > > Subject: Re: Mentioning La

Re: is iptables slow?

FTP is a funny protocol. Do you use masquarading? Did you use state modules or just opened port 21? You need to have -s RELATED in order to have nice FTP. On Wednesday 14 November 2001 02:33 pm, phadell wrote: > I am having some problems in relation to speed of traffic of packages when > using i

Re: 'mirror' with iptables

On Wednesday 14 November 2001 08:08 am, thomas lakofski wrote: > On 14 Nov 2001, Tim Haynes wrote: > > If you want to stop port-scans, use a proper firewall with DENY > > (ipchains) or DROP (iptables) by default. > > how does this stop the scanner from identifying open ports? > If you actually dr

Re: Mentioning Layne one more time

--Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of Christian Haugan > > Toldnes Sent: Wednesday, November 14, 2001 12:02 PM > > To: [EMAIL PROTECTED] > > Cc: [EMAIL PROTECTED] > > Subject: Re: Mentioning Layne one mo

Mentioning Layne one more time

I have just found a residiual page in the google cache. It shows that Layne ( remember the rude guy from september was subscribed to a whole bunch of mls most of them debian related ) http://www.google.com/search?q=cache:SPW2_7zBmf8:justinfinity.2y.net:8080/misc/subscribe-fucker.html+a515luna&hl=

Mentioning Layne one more time

I have just found a residiual page in the google cache. It shows that Layne ( remember the rude guy from september was subscribed to a whole bunch of mls most of them debian related ) http://www.google.com/search?q=cache:SPW2_7zBmf8:justinfinity.2y.net:8080/misc/subscribe-fucker.html+a515luna&hl

Re: IS THERE ANY INTELLIGENT LIFE AT YOUR END AT ALL????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact > > [EMAIL PROTECTED] > > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAI

Re: IS THERE ANY INTELLIGENT LIFE AT YOUR END AT ALL????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact > > [EMAIL PROTECTED] > > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAI

snort 's logs go to /var/log/auth.log for some reason?

Thank you. P.S. I asked on debian-user, but no one replied to me. -- GPG key-id: 1024D/5BE3DCFD Dmitriy CCAB 5F17 A099 9E43 1DBE 295C 9A21 2F1C 5BE3 DCFD Free Dmitry Sklyarov! http://www.boycottadobe.com pgpoIUCRNpdFw.pgp Descri

snort 's logs go to /var/log/auth.log for some reason?

Thank you. P.S. I asked on debian-user, but no one replied to me. -- GPG key-id: 1024D/5BE3DCFD Dmitriy CCAB 5F17 A099 9E43 1DBE 295C 9A21 2F1C 5BE3 DCFD Free Dmitry Sklyarov! http://www.boycottadobe.com PGP signature