Re: iptables logging

2001-07-22 Thread Matthias Richter
es -A log -j delete # hand over package to "delete" iptables -A delete -j REJECT # gracefully reject package It would be bad to have iptables log everything by default --> man DOS Matth¡as -- Matthias Richter --+- stud. soz. & inf. -+-- http://www.uni-leipzig.de -->GPG P

Re: iptables logging

2001-07-21 Thread Matthias Richter
es -A log -j delete # hand over package to "delete" iptables -A delete -j REJECT # gracefully reject package It would be bad to have iptables log everything by default --> man DOS Matth¡as -- Matthias Richter --+- stud. soz. & inf. -+-- http://www.uni-leipzig.de -->GPG P

Re: iptables install

2001-07-20 Thread Matthias Richter
upgrade stable to kernel 2.4.x --- including iptables. Works fine here. Matth¡as -- Matthias Richter --+- stud. soz. & inf. -+-- http://www.uni-leipzig.de -->GPG Public Key: http://www.matthias-richter.de/gpg.ascii<-- · Projekt Deutscher Wortschatz: http://wortschatz.uni-leipzig.de> pgpPJF0rzaEE0.pgp Description: PGP signature

Re: iptables install

2001-07-20 Thread Matthias Richter
upgrade stable to kernel 2.4.x --- including iptables. Works fine here. Matth¡as -- Matthias Richter --+- stud. soz. & inf. -+-- http://www.uni-leipzig.de -->GPG Public Key: http://www.matthias-richter.de/gpg.ascii<-- · Projekt Deutscher Wortschatz: http://wortschatz.uni-leipzig.de> PGP signature

Re: How to write a secure C program..

2001-07-03 Thread Matthias Richter
Lukas Ruf wrote on Tue Jul 03, 2001 at 10:34:44AM: > On Tue, 03 Jul 2001, SDiZ Cheng wrote: > > > I am going to rewrite suexec.c of apache ( to suit my boss's need ). > > As this program is SUID, I don't want to make any mistake. > > > Are you really sure you wanna do that? If so, there is a HOW

Re: How to write a secure C program..

2001-07-03 Thread Matthias Richter
Lukas Ruf wrote on Tue Jul 03, 2001 at 10:34:44AM: > On Tue, 03 Jul 2001, SDiZ Cheng wrote: > > > I am going to rewrite suexec.c of apache ( to suit my boss's need ). > > As this program is SUID, I don't want to make any mistake. > > > Are you really sure you wanna do that? If so, there is a HO

Re: Basic question about ipchains being useful

2001-06-19 Thread Matthias Richter
Julien Dupre wrote on Tue Jun 19, 2001 at 11:14:06PM: > I'm using these packages with the latest versions in stable : postfix, > apache 1.3.9 (quite old btw but not necessarily a problem), bind > 8.2.3, openssh 1.2.3 [...] > My idea is not to look at security alerts but trust that debian > mai

Re: proftpd exploit??

2001-05-26 Thread Matthias Richter
Marcelo Drudi Miranda wrote on Sat May 26, 2001 at 02:49:02AM: > Matthias Richter <[EMAIL PROTECTED]> escreveu: > > > Andres Herrera wrote on Thu May 24, 2001 at 07:43:50PM: > > [proftpd exploit ls ../*/../*/../*/../*/../*/../*/../*/../*/../*/../*/../] > > > A

Re: proftpd exploit??

2001-05-25 Thread Matthias Richter
Marcelo Drudi Miranda wrote on Sat May 26, 2001 at 02:49:02AM: > Matthias Richter <[EMAIL PROTECTED]> escreveu: > > > Andres Herrera wrote on Thu May 24, 2001 at 07:43:50PM: > > [proftpd exploit ls ../*/../*/../*/../*/../*/../*/../*/../*/../*/../*/../] > > > A

Re: proftpd exploit??

2001-05-24 Thread Matthias Richter
hth, Matthias -- Matthias Richter --+- stud. soz. & inf. -+-- http://www.uni-leipzig.de -->GPG Public Key: http://www.matthias-richter.de/gpg.ascii<-- «Reality must take precedence over public relations, for Mother Nature cannot be fooled.» -- R.P. Feynman pgpCuKMLd9tnI.pgp Des

Re: proftpd exploit??

2001-05-24 Thread Matthias Richter
hth, Matthias -- Matthias Richter --+- stud. soz. & inf. -+-- http://www.uni-leipzig.de -->GPG Public Key: http://www.matthias-richter.de/gpg.ascii<-- «Reality must take precedence over public relations, for Mother Nature cannot be fooled.» -- R.P. Feynman PGP signature