Re: arp table overflow due to windows worm

2004-10-17 Thread Jason Lunz
[EMAIL PROTECTED] said: > 135 is closed in both directions. However, I get the message "Neighbour > table overflow" on the firewall (debian stable w/ kernel 2.4.27) and the > entire network comes to a standstill. The cpu load isn't even close to a ... > Should it really be possible for a single inf

Re: Announcement: APT Secure

2003-07-01 Thread Jason Lunz
[EMAIL PROTECTED] said: > That answer is pretty easy to find, too. Look at the description of the > debian-keyring package. "The Debian project wants developers to digitally sign the announcements of their packages with GnuPG, to protect against forgeries. This package contains keyrings of GnuPG

Re: Announcement: APT Secure

2003-07-01 Thread Jason Lunz
[EMAIL PROTECTED] said: > That answer is pretty easy to find, too. Look at the description of the > debian-keyring package. "The Debian project wants developers to digitally sign the announcements of their packages with GnuPG, to protect against forgeries. This package contains keyrings of GnuPG

Re: Announcement: APT Secure

2003-06-30 Thread Jason Lunz
[EMAIL PROTECTED] said: >> Where should I get the key? And why isn't it in debian-keyring? I've got >> the current sid version. > > http://www.debian.org/releases/ Well, that wasn't too hard to find, of course. The "where" question was mostly rhetorical. More importantly, why on earth isn't the a

Re: Announcement: APT Secure

2003-06-30 Thread Jason Lunz
[EMAIL PROTECTED] said: >> Where should I get the key? And why isn't it in debian-keyring? I've got >> the current sid version. > > http://www.debian.org/releases/ Well, that wasn't too hard to find, of course. The "where" question was mostly rhetorical. More importantly, why on earth isn't the a

Re: Announcement: APT Secure

2003-06-29 Thread Jason Lunz
[EMAIL PROTECTED] said: > This is a call to the community to help test and audit this patch to > APT, and to eventually participate in the policy discussion about the > patch. > > Please see http://monk.debian.net/apt-secure/ for more information and > to download Debian packages. I'm trying the

Re: Announcement: APT Secure

2003-06-28 Thread Jason Lunz
[EMAIL PROTECTED] said: > This is a call to the community to help test and audit this patch to > APT, and to eventually participate in the policy discussion about the > patch. > > Please see http://monk.debian.net/apt-secure/ for more information and > to download Debian packages. I'm trying the

Re: Advice Needed On Recent Rootings

2003-05-29 Thread Jason Lunz
On Thu, May 29, 2003 at 12:12AM -0500, Jayson Vantuyl wrote: > Question: Can one use a key *AND* a password? That would make me > really happy. I just don't like getting ahold of a file or a password > being enough... That's how it's done, by default. The key is encrypted on-disk, and is only d

Re: Advice Needed On Recent Rootings

2003-05-29 Thread Jason Lunz
On Thu, May 29, 2003 at 12:12AM -0500, Jayson Vantuyl wrote: > Question: Can one use a key *AND* a password? That would make me > really happy. I just don't like getting ahold of a file or a password > being enough... That's how it's done, by default. The key is encrypted on-disk, and is only d

Re: Advice Needed On Recent Rootings

2003-05-29 Thread Jason Lunz
[EMAIL PROTECTED] said: > of them. It's not a password problem either. He seems to have hacked > multiple of them within an hour of each other (his rootkit files > aren't very clever about covering up mtime). I just can't tell how he > got in. Maybe he didn't use the same method for all of them

Re: Advice Needed On Recent Rootings

2003-05-28 Thread Jason Lunz
[EMAIL PROTECTED] said: > of them. It's not a password problem either. He seems to have hacked > multiple of them within an hour of each other (his rootkit files > aren't very clever about covering up mtime). I just can't tell how he > got in. Maybe he didn't use the same method for all of them

Re: DSA-288 - a question

2003-04-22 Thread Jason Lunz
[EMAIL PROTECTED] said: > DSA 288 [0] says: > > ] You will have to decide whether you want the security update which is > ] not thread-safe and recompile all applications that apparently fail >^^ > ] after the upgrade, [...] > > Does that mean th

Re: speaking of squid ports...

2003-03-26 Thread Jason Lunz
[EMAIL PROTECTED] said: > Umm... No. > > It's used for ICP, a protocol for intercommunication between squid > caches. For example, at my site we have two different caches. One is > basically transparent. The other provides anonymizing services. But, > through ICP, both caches can make use of

Re: speaking of squid ports...

2003-03-26 Thread Jason Lunz
[EMAIL PROTECTED] said: > Umm... No. > > It's used for ICP, a protocol for intercommunication between squid > caches. For example, at my site we have two different caches. One is > basically transparent. The other provides anonymizing services. But, > through ICP, both caches can make use of

speaking of squid ports...

2003-03-26 Thread Jason Lunz
does anyone know what squid's udp sockets are for, and how to close them? As far as I can tell, I don't need them, but I've been unable to find a combination of squid directives to make them all go away. The icp port can be closed using "icp_port 0", but the other one is dynamic and isn't referred

speaking of squid ports...

2003-03-26 Thread Jason Lunz
does anyone know what squid's udp sockets are for, and how to close them? As far as I can tell, I don't need them, but I've been unable to find a combination of squid directives to make them all go away. The icp port can be closed using "icp_port 0", but the other one is dynamic and isn't referred