Re: Bash scripting info needed.

2001-09-08 Thread Thor
Hi > I'm not sure I understand you correctly, but how about this: > > ## 0 == LOG > ## 1 == DROP > ## 2 == LOG & DROP > LOGTCP=2; > if [ $LOGTCP -eq 0 ]; then > #Log forbidden TCP datagrams > iptables -A TCP --protocol tcp -m limit --limit 1/minute \ > --limit-burst 4 -j LOG --log-le

Re: Bash scripting info needed.

2001-09-08 Thread Thor
Hi > I'm not sure I understand you correctly, but how about this: > > ## 0 == LOG > ## 1 == DROP > ## 2 == LOG & DROP > LOGTCP=2; > if [ $LOGTCP -eq 0 ]; then > #Log forbidden TCP datagrams > iptables -A TCP --protocol tcp -m limit --limit 1/minute \ > --limit-burst 4 -j LOG --log-l

Re: MASQUERADE

2001-06-15 Thread Thor
Hi > Hi all, > > I still have a masquerade problem, and nothing helps me to go to the right > way. > > This is my configuration : > > A server (10.0.0.1) with internet access on eth0, and local network access why you don't assign an internet number on eth0 if your eth0 interfaces is on the inter

Re: MASQUERADE

2001-06-15 Thread Thor
Hi > Hi all, > > I still have a masquerade problem, and nothing helps me to go to the right > way. > > This is my configuration : > > A server (10.0.0.1) with internet access on eth0, and local network access why you don't assign an internet number on eth0 if your eth0 interfaces is on the inte

Re: Ports to block?

2001-04-06 Thread Thor
hi [...] > If you disable icmp pings then you can hide from most scans. ... and you break also the RFC ... --- ;---+---; bye | bye |hor

Re: Ports to block?

2001-04-06 Thread Thor
hi [...] > If you disable icmp pings then you can hide from most scans. ... and you break also the RFC ... --- ;---+---; bye | bye |hor -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: secure install

2001-02-17 Thread Thor
Hi > On Friday 16 February 2001 09:38, Thor wrote: > --snip-- > > You can use 'dd' only if you have the same identical model of hard-disk > > or at least the same geometry ! In other case you may have several problem > > on the cloned hd ... > > >

Re: secure install

2001-02-17 Thread Thor
Hi > On Sat, 17 Feb 2001 [EMAIL PROTECTED] wrote: > > > i am sure that is note the case, > > the only requirement is that the target media is the > > same size or larger? > > Indeed. Most filesystems, including ext2, are independent of the disk > geometry. So you can "dd" _partitions_ (eg /dev/hda

Re: secure install

2001-02-17 Thread Thor
Hi > On Friday 16 February 2001 09:38, Thor wrote: > --snip-- > > You can use 'dd' only if you have the same identical model of hard-disk > > or at least the same geometry ! In other case you may have several problem > > on the cloned hd ... > > >

Re: secure install

2001-02-17 Thread Thor
Hi > On Sat, 17 Feb 2001 [EMAIL PROTECTED] wrote: > > > i am sure that is note the case, > > the only requirement is that the target media is the > > same size or larger? > > Indeed. Most filesystems, including ext2, are independent of the disk > geometry. So you can "dd" _partitions_ (eg /dev/hd

Re: secure install

2001-02-16 Thread Thor
Hi > On Thu, 15 Feb 2001 15:34:07 +0100 > Raphael Bauduin <[EMAIL PROTECTED]> wrote: > > > Hi, I'm looking for a way to install a debian potato as securely > > as possible. I would follow this procedure in the future to > > install a lot of servers. The problem I have is that a lot of > > unwa

Re: secure install

2001-02-16 Thread Thor
Hi > On Thu, 15 Feb 2001 15:34:07 +0100 > Raphael Bauduin <[EMAIL PROTECTED]> wrote: > > > Hi, I'm looking for a way to install a debian potato as securely > > as possible. I would follow this procedure in the future to > > install a lot of servers. The problem I have is that a lot of > > unw

Re: Strange logs for connection

2001-01-23 Thread Thor
Hi I receive this log by mail from my server but dont understand   In my /etc/hosts.deny i have :   ALL:ALL:spawn (safe_finger -l @%h | mail -s %u-%c root) &:banners /usr/local/etc/banners/denyportmap: ALL   This is a mail f

Re: Strange logs for connection

2001-01-23 Thread Thor
Hi I receive this log by mail from my server but dont understand   In my /etc/hosts.deny i have :   ALL:ALL:spawn (safe_finger -l @%h | mail -s %u-%c root) &:banners /usr/local/etc/banners/denyportmap: ALL   This is a mail f

OTP 4 ftp

2000-12-14 Thread Thor
Hi all I would authenticate the ftp access with an OTP system. It's possible ? Can i apply otp to wu-ftpd or i must change the ftp server ? Someone have an idea, url, news, library, program to do this ? everything is good for me ;-) TIA --- ;---+---; bye | bye |hor

OTP 4 ftp

2000-12-14 Thread Thor
Hi all I would authenticate the ftp access with an OTP system. It's possible ? Can i apply otp to wu-ftpd or i must change the ftp server ? Someone have an idea, url, news, library, program to do this ? everything is good for me ;-) TIA --- ;---+---; bye | bye |hor -- To UNSUBSCRIBE, e

Re: Bind-8.2.2-P5 DOS

2000-11-09 Thread Thor
m sure .. i've tryed the command as explained in bugtraq i've waited 15 minute but nothing else except this 2 line in the log > > On Thu, 9 Nov 2000, Thor wrote: > > > Hi > > > > > > > > > > Debian 2.2 IS vulnerable to the following DO

Re: Bind-8.2.2-P5 DOS

2000-11-09 Thread Thor
Hi > > Debian 2.2 IS vulnerable to the following DOS reported by Fabio > Pietrosanti (naif) <[EMAIL PROTECTED]> in bugtraq: > i'm sorry but i've tryed also on my system with debian potato 2.2 and bind 8.2.2P5-11 and the server appear NOT vulnerable > >> > > Here is my daemon.log: > > Nov 9 1

Re: Bind-8.2.2-P5 DOS

2000-11-09 Thread Thor
m sure .. i've tryed the command as explained in bugtraq i've waited 15 minute but nothing else except this 2 line in the log > > On Thu, 9 Nov 2000, Thor wrote: > > > Hi > > > > > > > > > > Debian 2.2 IS vulnerable to the following DO

Re: Bind-8.2.2-P5 DOS

2000-11-09 Thread Thor
Hi > > Debian 2.2 IS vulnerable to the following DOS reported by Fabio > Pietrosanti (naif) <[EMAIL PROTECTED]> in bugtraq: > i'm sorry but i've tryed also on my system with debian potato 2.2 and bind 8.2.2P5-11 and the server appear NOT vulnerable > >> > > Here is my daemon.log: > > Nov 9

Re: log permissions

2000-11-03 Thread Thor
> On Fri, Nov 03, 2000 at 04:50:27PM +1100, Ian wrote: > > Hi, > > > > I have a slink->potato->woody server, and I am a little concerned about the permissions some of the log files in /var/log have. > > > > There are too many to list, but here are some: > > -rw-r--r--1 root root 823234

Re: log permissions

2000-11-03 Thread Thor
> On Fri, Nov 03, 2000 at 04:50:27PM +1100, Ian wrote: > > Hi, > > > > I have a slink->potato->woody server, and I am a little concerned about the permissions some of the log files in /var/log have. > > > > There are too many to list, but here are some: > > -rw-r--r--1 root root 82323

Re: SECURITY PROBLEM: autofs [all versions]

2000-07-01 Thread Thor
Hi, > I'm obviously doing something wrong ... > > I've written to the maintainer of the autofs package according to the > page summary listed under 'packages' from the website, and as I also saw > somewhere else (dpkg -s listing?). I filed a bug report against autofs > and marked it as release

Re: SECURITY PROBLEM: autofs [all versions]

2000-07-01 Thread Thor
Hi, > I'm obviously doing something wrong ... > > I've written to the maintainer of the autofs package according to the > page summary listed under 'packages' from the website, and as I also saw > somewhere else (dpkg -s listing?). I filed a bug report against autofs > and marked it as release