Re: How to prevent daemons from ever being started?

2006-05-15 Thread Neal Murphy
On Monday 15 May 2006 11:09, Uwe Hermann wrote: > Hi, > > just a random question I wanted to ask for quite a while now: > > What is "the Debian way" to prevent any daemon from ever starting, > whether upon reboot, upon upgrade, upon new install etc. > ... > How would you go about ensuring that _n

FYI: Reiserfs 3.5 problem

2006-03-29 Thread Neal Murphy
Yeah, yeah, I know 3.5 is really old. In the odd chance that I'm not the only one still running a 3.5 FS (and hasn't chanced upon the instructions to upgrade it to 3.6), I thought I might share this with y'all, since this problem can lead to DOS (by hanging/crashing the system). Files in Reiser

Re: Idea to secure ssh

2006-03-15 Thread Neal Murphy
On Wednesday 15 March 2006 11:06, Goswin von Brederlow wrote: > He trying to solve that a tcp connect to port 22 establishes a > connection and thereby reveals that the server is running an sshd and > attcking it makes sense. > > His idea is to add a 100% non responsive knocking (using udp) before

Re: Idea to secure ssh [was: howto block ssh brute-force]

2006-03-13 Thread Neal Murphy
On Monday 13 March 2006 20:07, Michael Stone wrote: > On Mon, Mar 13, 2006 at 03:03:24PM -0500, Neal Murphy wrote: > >The idea is to present information to the server that only the server can > >decrypt, and that, in theory, only the authorized user could have > > genera

Re: Idea to secure ssh [was: howto block ssh brute-force]

2006-03-13 Thread Neal Murphy
On Monday 13 March 2006 09:38, [EMAIL PROTECTED] wrote: > On Mon, Mar 13, 2006 at 03:19:30AM -0500, Neal Murphy wrote: > > It seems kind-of counterproductive to set up SSH for secure access, then > > advertise to the universe that it's there. Thus my idea: > > > > C

Idea to secure ssh [was: howto block ssh brute-force]

2006-03-13 Thread Neal Murphy
On Monday 13 March 2006 01:24, fgeek wrote: > > Hello, > > > > once in a while (say, every two weeks) I get a brute-force > > login/password scan attempt in my server (i.e., a single ip tries > > dictionary account names and passwords at random). SSH access is > > needed by many users, and (RSA/DS

Re: Using multicast for security updates

2006-02-23 Thread Neal Murphy
On Thursday 23 February 2006 17:05, Michael Loftis wrote: > Good idea except this requires large scale rollout of mutlicast, which > AFAIK, hasn't happened. I thought it had progressed further than being a curiosity. Is its current scale enough to make a difference? N -- To UNSUBSCRIBE, email