Re: Dsniff/mailsnarf

2004-02-24 Thread Jose Alberto
John Keimel wrote: On Tue, Feb 24, 2004 at 06:11:20PM -0500, [EMAIL PROTECTED] wrote: I've been asked to place a sniffer on a network that handles HIPPA data, and watch for e-mail containing certain strings. I figured that mailsnarf would be the best way to do this. Aside from any of hte tec

Re: Dsniff/mailsnarf

2004-02-24 Thread Jose Alberto
John Keimel wrote: On Tue, Feb 24, 2004 at 06:11:20PM -0500, [EMAIL PROTECTED] wrote: I've been asked to place a sniffer on a network that handles HIPPA data, and watch for e-mail containing certain strings. I figured that mailsnarf would be the best way to do this. Aside from any of hte technical

Re: arpwatch and arp packets ...urgent

2004-02-19 Thread Jose Alberto Guzman
m wrote: Hello, Another question : it is possible to control arp protocol packets by kernel ? ... if so - this will solve some of problems. But how control arps? perhaps on firewall ? kern 2.4.24/grsec/... You can adjust the refresh timer by setting /proc/sys/net/ipv4/neigh/*/gc_stale_time,

Re: arpwatch and arp packets ...urgent

2004-02-19 Thread Jose Alberto Guzman
m wrote: Hello, Another question : it is possible to control arp protocol packets by kernel ? ... if so - this will solve some of problems. But how control arps? perhaps on firewall ? kern 2.4.24/grsec/... You can adjust the refresh timer by setting /proc/sys/net/ipv4/neigh/*/gc_stale_time, or yo

Re: DSA 438 - bad server time, bad kernel version or information delayed?

2004-02-18 Thread Jose Alberto Guzman
Sven Hoexter wrote: On Wed, Feb 18, 2004 at 07:54:45PM +0100, Jan Lühr wrote: After the last OpenSSH exploit, I thought that this kind of intransparency is limited to OpenBSD, but to what f*** h*** is OpenSource software driving to? Tranparency is the most important aspect of secure OpenSource

Re: DSA 438 - bad server time, bad kernel version or information delayed?

2004-02-18 Thread Jose Alberto Guzman
Sven Hoexter wrote: On Wed, Feb 18, 2004 at 07:54:45PM +0100, Jan Lühr wrote: After the last OpenSSH exploit, I thought that this kind of intransparency is limited to OpenBSD, but to what f*** h*** is OpenSource software driving to? Tranparency is the most important aspect of secure OpenSource So

Re: Help! File permissions keep changing...

2004-02-17 Thread Jose Alberto Guzman
From the manual page of umask ( man umask ): umask sets the umask to mask & 0777. The umask is used by open(2) to set initial file permissions on a newly-created file. Specifically, permissions in the umask are turned off from the mode argument to open(2) (so, for

Re: Help! File permissions keep changing...

2004-02-17 Thread Jose Alberto Guzman
From the manual page of umask ( man umask ): umask sets the umask to mask & 0777. The umask is used by open(2) to set initial file permissions on a newly-created file. Specifically, permissions in the umask are turned off from the mode argument to open(2) (so, for

Re: Web based password changer

2004-01-23 Thread Jose Alberto Guzman
Daniel Lysfjord wrote: Quoting Tom White <[EMAIL PROTECTED]>: Dear List, I'm looking for a decent, secure, web based password changer for user accounts. Something that I can install on a debian box with a minimum amount of tweaking, and that isn't really any less secure than a shell user cha

Re: Web based password changer

2004-01-23 Thread Jose Alberto Guzman
Daniel Lysfjord wrote: Quoting Tom White <[EMAIL PROTECTED]>: Dear List, I'm looking for a decent, secure, web based password changer for user accounts. Something that I can install on a debian box with a minimum amount of tweaking, and that isn't really any less secure than a shell user changi