Re: Strange outbound connections

2006-02-05 Thread Vittorio R Tracy
there a way to set a limit on how long such connections remain open? good question, I would read up on the iptables/connection tracking. > > Thanks for any help and links! > > Johannes > > NB: I'm running debian sarge (stable) on this mail and web server. links: http://www.google.com Regards, -- Vittorio R Tracy <[EMAIL PROTECTED]> Fastmetrics LLC. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: hardening checkpoints

2005-12-15 Thread Vittorio R Tracy
> > get server to run chkrootkit regularly and email results. > > run snort to check for attacks. > > get script to run and check status of server every day. > > > any comments gratefully received, > > kevin > > -- Vittorio R Tracy <[EMAIL PROTECTED]> Fastmetrics LLC. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: question about SSH / IPTABLES

2003-01-23 Thread Vittorio R Tracy
you may also try rbash as a shell type (in /etc/passwd), it is not super secure, and people can still use their own binaries, but you can restrict them to their own home directory and whatevers in their path. Its lazy persons way out of doing chroots for all. more info in the man for bash VRT <--

Re: question about SSH / IPTABLES

2003-01-23 Thread Vittorio R Tracy
you may also try rbash as a shell type (in /etc/passwd), it is not super secure, and people can still use their own binaries, but you can restrict them to their own home directory and whatevers in their path. Its lazy persons way out of doing chroots for all. more info in the man for bash VRT <--