Re: Debian mirrors and MITM

2014-05-30 Thread Hans Spaans
On vr, 2014-05-30 at 10:53 -0400, Michael Stone wrote: > On Sat, May 31, 2014 at 12:46:12AM +1000, Alfie John wrote: > >Sorry for asking questions. > > Don't apologize for asking questions, it's perfectly reasonable to do so > and you'll find that many people in debian are more than happy to answ

Re: Fixing stupid PHP application design flaws

2005-04-29 Thread Hans Spaans
On Fri, April 29, 2005 1:42, Javier Fernández-Sanguino Peña said: > On Thu, Apr 28, 2005 at 10:04:00PM +0200, Hans Spaans wrote: >> Is this going to solve the problems? Don't get me wrong, because I love >> your goal but I don't believe that what you suggesting right now

Re: Fixing stupid PHP application design flaws

2005-04-28 Thread Hans Spaans
Martin Schulze wrote: > Hey! > > What do people on this list think about fixing PHP include files in a > DSA that are accessible via HTTP as well and contain one bug or > another as they are not supposed to be accessible via HTTP but > accidently are. Patching them like Squirrelmail has fixed thi

Re: Query NS

2004-02-01 Thread Hans Spaans
On Sunday 01 February 2004 16:21, Dale Amon wrote: > I'd still be interested to know if anyone knows *why* > so many people are doing this. I know what they are doing; > I can block it; but I'm curious. I've got a gut feeling > it has something to do with spammers hiding their tracks, > but I'm no

Re: Query NS

2004-02-01 Thread Hans Spaans
On Sunday 01 February 2004 16:21, Dale Amon wrote: > I'd still be interested to know if anyone knows *why* > so many people are doing this. I know what they are doing; > I can block it; but I'm curious. I've got a gut feeling > it has something to do with spammers hiding their tracks, > but I'm no

Re: Query NS

2004-02-01 Thread Hans Spaans
On Sunday 01 February 2004 14:50, Dale Amon wrote: > Actually that's precisely how I discovered it. I added > allow queries and was trying to figure out why I was > denying so many queries per second. You added it globally and to every zone? Also allow-transfer is a nice own to get into place. Bu

Re: Query NS

2004-02-01 Thread Hans Spaans
On Sunday 01 February 2004 14:50, Dale Amon wrote: > Actually that's precisely how I discovered it. I added > allow queries and was trying to figure out why I was > denying so many queries per second. You added it globally and to every zone? Also allow-transfer is a nice own to get into place. Bu

Re: Query NS

2004-02-01 Thread Hans Spaans
On Sunday 01 February 2004 14:02, Dale Amon wrote: > What is the purpose of a DNS query NS ? It returns > to the requester my list of root servers, which seems > pointless... and I am getting hit by them at the rate > of several a second from various nameservers. 'dig . ns @ > /etc/bind/db.root' c

Re: Query NS

2004-02-01 Thread Hans Spaans
On Sunday 01 February 2004 14:02, Dale Amon wrote: > What is the purpose of a DNS query NS ? It returns > to the requester my list of root servers, which seems > pointless... and I am getting hit by them at the rate > of several a second from various nameservers. 'dig . ns @ > /etc/bind/db.root' c

Re: passwd character limitations

2003-11-30 Thread Hans Spaans
On Sunday 30 November 2003 06:42, Andrew Pollock wrote: > Hello, > > I've always avoided the # character, because I read in a book way > back when I first got into Unix that you shouldn't use this > character. Recently, a friend had issues logging in via KDM using a > password with a # in it, that

Re: passwd character limitations

2003-11-30 Thread Hans Spaans
On Sunday 30 November 2003 06:42, Andrew Pollock wrote: > Hello, > > I've always avoided the # character, because I read in a book way > back when I first got into Unix that you shouldn't use this > character. Recently, a friend had issues logging in via KDM using a > password with a # in it, that

Re: idea for improving security

2003-05-07 Thread Hans Spaans
On Wed, May 07, 2003 at 11:27:16AM +0200, Tim van Erven wrote: > On Wed, 07/05/2003 07:40 +0200, Hans Spaans wrote: > > > > How are you going to handle firewalls and stuff? This because you need > > to accept traffic for those ports. > > You always need to let the tr

Re: idea for improving security

2003-05-07 Thread Hans Spaans
On Wed, May 07, 2003 at 01:14:04AM +0200, Tim van Erven wrote: > On Tue, 06/05/2003 13:07 -0500, Mark Edgington wrote: > > incorporate functionality into inetd/xinetd/rinetd which listens for a > > predefined sequence of connection attempts on certain ports. Upon noticing > > the correct sequenc

Re: Fwd: [bugtraq@securityfocus.com] Multiple-Vendor-FTP-Vuln. (old?)

2001-08-22 Thread Hans Spaans
On Wednesday 22 August 2001 02:53, A. Didit Mifanto wrote: > I'm using proftpd 1.2.0pre10-2.0potato1, tried this vulnerability, > and still affects to this version of proftpd. I see that > ftp://ftp.debian.org is still using this version, and I think also > affected. Add this line to global and t

Re: Fwd: [bugtraq@securityfocus.com] Multiple-Vendor-FTP-Vuln. (old?)

2001-08-22 Thread Hans Spaans
On Wednesday 22 August 2001 02:53, A. Didit Mifanto wrote: > I'm using proftpd 1.2.0pre10-2.0potato1, tried this vulnerability, > and still affects to this version of proftpd. I see that > ftp://ftp.debian.org is still using this version, and I think also > affected. Add this line to global and

Re: Ports to block?

2001-04-05 Thread Hans Spaans
On Friday 06 April 2001 00:09, Cherubini Enrico wrote: > Ciao, > > Thu, Apr 05, 2001 at 09:38:46PM +0100, Steve Ball wrote: > > It is most secure to block everything and only open the ports that are > > absolutely necessary. > > ok, this is clear. What's the way you ppl do that throught > ipchains

Re: Ports to block?

2001-04-05 Thread Hans Spaans
On Friday 06 April 2001 00:09, Cherubini Enrico wrote: > Ciao, > > Thu, Apr 05, 2001 at 09:38:46PM +0100, Steve Ball wrote: > > It is most secure to block everything and only open the ports that are > > absolutely necessary. > > ok, this is clear. What's the way you ppl do that throught > ipchain

Re: SSH with potato, not very secure?

2001-03-01 Thread Hans Spaans
On Thursday 01 March 2001 14:08, Maarten Vink wrote: > Yes it does, security.debian.org is located somewhere outside the US and > also carries non-US updates. security.debian.org is located in The Netherlands at the Rijks Universiteit Leiden to be correctly. Hans

Re: SSH with potato, not very secure?

2001-03-01 Thread Hans Spaans
On Thursday 01 March 2001 14:08, Maarten Vink wrote: > Yes it does, security.debian.org is located somewhere outside the US and > also carries non-US updates. security.debian.org is located in The Netherlands at the Rijks Universiteit Leiden to be correctly. Hans -- To UNSUBSCRIBE, email to