Re: recommendations for FTP server

> Any recommendations, experiences, thoughts? Running ftp over a vpn would work but its not the easiest option. Sftp is exactly what you need. Why not just run it on another port? Hope this helps.

Re: recommendations for FTP server

> Any recommendations, experiences, thoughts? Running ftp over a vpn would work but its not the easiest option. Sftp is exactly what you need. Why not just run it on another port? Hope this helps. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact

re: Secure Proxy

> Can you provide a reference for that statement?  It certain seems secure> to me At least, I've never had any boxes cracked as a result of it, and> there are no outstanding (known) security issues for it.   Thanks. Its just what I have heard when asking around. I don't mind about securing t

Secure Proxy

Which is the best proxy server to use on debian? I have heard that squid is not secure...

re: Secure Proxy

> Can you provide a reference for that statement?  It certain seems secure> to me At least, I've never had any boxes cracked as a result of it, and> there are no outstanding (known) security issues for it.   Thanks. Its just what I have heard when asking around. I don't mind about securing t

Secure Proxy

Which is the best proxy server to use on debian? I have heard that squid is not secure...

Re: promiscuous mode

> tethereal -n not tcp port 22 Yep all I see is APR requests and Name queries now. I was using ssh at the time! > Are you sure it's not? Of course being connected on a big network you > will receive plenty of junk, specialy as your broadcast domain seems > quite big. Any machine looking for an o

Re: promiscuous mode

>Try using tcpdump to investigate the problem. Make sure you use the >'-p' flag to tcpdump to tell it not to set the interface into >promiscuous mode. Something like ># tcpdump -i eth0 -p -n I have no idea what all the output means. Below is an extract from the output: 23:17:22.564132 172.16.3

Re: promiscuous mode

>Try using tcpdump to investigate the problem. Make sure you use the >'-p' flag to tcpdump to tell it not to set the interface into >promiscuous mode. Something like ># tcpdump -i eth0 -p -n I have no idea what all the output means. Below is an extract from the output: 23:17:22.564132 172.16.3

Re: promiscuous mode

> What's the other end of your ethernet cable plugged into? A switch. This is what is confusing me. Its a very cheap netgear switch so it is probably sending out all the packets any way...

Re: promiscuous mode

> I have not got multicast enabled either so I don't know what is causing this... Oops looks like I have guys. I have read man 8 ifconfig but it will still not switch off. Is this what is causing it? The output from ifconfig is: eth0Link encap:Ethernet HWaddr inet addr:172.16.5.

Re: promiscuous mode

I have premoved promiscuous mode from my card. When checking ifconfig (eth0) I am still getting all the network traffic flowing through my computer or at least a lot of it. The system is sitting idle and I can see the traffic going up a few meg a minute with no one accessing it. I have re-installed

promiscuous mode

A while ago I installed snort on my debian woody box. After removing snort the card is still stuck in promiscuous mode. How can I stop this? If it helps my network is a FA310tx running on a tulip driver. Thanks

RE: Have I been hacked?

;It could also happen if he has been making changes to his "~/.ssh/known_hosts" file. > >HTH... > >Richard. > > >Quoting Ian Goodall <[EMAIL PROTECTED]>: > >> Thanks for your help Guys. >> >> It now says this: >> >> > wtmp beg

Re: Have I been hacked?

just lots of May 7 06:03:06 dev1 -- MARK -- - Original Message - From: "Hobbs, Richard" <[EMAIL PROTECTED]> To: "Ian Goodall" <[EMAIL PROTECTED]> Cc: Sent: Wednesday, May 07, 2003 3:27 PM Subject: Re: Have I been hacked? > Hello, > > C

Re: Have I been hacked?

computer? Thanks - Original Message - From: "Eric LeBlanc" <[EMAIL PROTECTED]> To: "Ian Goodall" <[EMAIL PROTECTED]> Cc: Sent: Wednesday, May 07, 2003 3:23 PM Subject: Re: Have I been hacked? > > Check if your program have rotated the logs... > > cd

Have I been hacked?

I am running a debian woody server and when I checked the last users yesterday I a large number of logins in the list. On running the command today I get the following: dev1:/home/ian# last ian pts/0172.16.3.195 Wed May 7 14:49 still logged in team1pts/0blue99.ex.ac

Re: iptables and apt-get

; > > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > Hi there > > On Tuesday 11 March 2003 15:48, Ian Goodall wrote: > > > All is fine now. Adding the line: > > > > > > iptables -A INPUT -m state --state ESTABLISHED,RELATE

Re: iptables and apt-get

get > > > > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > Hi there > > On Tuesday 11 March 2003 15:48, Ian Goodall wrote: > > > All is fine now. Adding the line: > > > > > > iptables -A INPUT -m state --state ESTABLISH

Re: iptables and apt-get

that this list should be used for instead of debating what should be on it / other spam :) - Original Message - From: "I.R.van Dongen" <[EMAIL PROTECTED]> To: "Ian Goodall" <[EMAIL PROTECTED]> Cc: Sent: Tuesday, March 11, 2003 12:59 PM Subject: Re: ipta

Re: iptables and apt-get

that this list should be used for instead of debating what should be on it / other spam :) - Original Message - From: "I.R.van Dongen" <[EMAIL PROTECTED]> To: "Ian Goodall" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, March 11, 2003 12:5

Re: iptables and apt-get

there is a problem with icmp. 172.16.5.92 is the linux box and 172.16.250.1:8080 is the proxy server... - Original Message - From: Jones, Steven To: 'Ian Goodall' ; debian-security@lists.debian.org Sent: Tuesday, March 11, 2003 1:39 AM Subject: RE: iptabl

Re: iptables and apt-get

take a look on the logs, > and you'll see why your connexion is blocked... > > Hoping this helps you. > > > On Tue, Mar 11, 2003 at 12:45:48AM -, Ian Goodall wrote: > > Hi Guys, > > > > I am setting up iptables on my debain woody box. I have decided to

Re: iptables and apt-get

op and log   /sbin/iptables -A INPUT -j drop-and-log-it     --- Thanks   ijg0 - Original Message - From: Jones, Steven To: 'Ian Goodall' ; debian-security@lists.debian.org Sent: Tuesday, March 11, 2003 1:11 AM Subject: RE: iptables and apt-

iptables and apt-get

Hi Guys,   I am setting up iptables on my debain woody box. I have decided to close everyting and then open up just ssh and ssl. This obviously prevents my apt-get update from working. What ports do I need to open for this to work. If it helps I am going through a proxy to get to the interne

Re: iptables and apt-get

there is a problem with icmp. 172.16.5.92 is the linux box and 172.16.250.1:8080 is the proxy server... - Original Message - From: Jones, Steven To: 'Ian Goodall' ; [EMAIL PROTECTED] Sent: Tuesday, March 11, 2003 1:39 AM Subject: RE: iptables and apt-get

Re: iptables and apt-get

take a look on the logs, > and you'll see why your connexion is blocked... > > Hoping this helps you. > > > On Tue, Mar 11, 2003 at 12:45:48AM -, Ian Goodall wrote: > > Hi Guys, > > > > I am setting up iptables on my debain woody box. I have decided to

Re: iptables and apt-get

op and log   /sbin/iptables -A INPUT -j drop-and-log-it     --- Thanks   ijg0 - Original Message - From: Jones, Steven To: 'Ian Goodall' ; [EMAIL PROTECTED] Sent: Tuesday, March 11, 2003 1:11 AM Subject: RE: iptables and apt-get shouldnt

iptables and apt-get

Hi Guys,   I am setting up iptables on my debain woody box. I have decided to close everyting and then open up just ssh and ssl. This obviously prevents my apt-get update from working. What ports do I need to open for this to work. If it helps I am going through a proxy to get to the interne