Re: Efficient way to keep track of security updates

2015-01-29 Thread Marcel Grabher (sallas)
it did help with the proftpd exploit http://webservsec.blogspot.co.at/2011/01/grsecurity-vs-proftpd-exploit.html but i haven't tried it with kernel exploits the video isn't online anymore but the screenshot should speak for itself 2015-01-30 7:40 GMT+01:00 Marco Galicia : > It would be interest

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-15 Thread Marcel Weber
Hi I finished the discussed mod_perl module and published it on CPAN. It's name is Apache::AutoLogin Thanks again for the input from everyone. Cheers Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-12 Thread Marcel Weber
Richard Atterer wrote: On Thu, Aug 12, 2004 at 01:56:53PM +0200, Marcel Weber wrote: No, it doesn't mean that. Current browsers will cache the password, AFAIK until the end of the session by default, and forever if you enable the option "Remember this password" or similar. I k

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-12 Thread Marcel Weber
Hi all Well, I figured out the problem, why my module hanged... It was a programming fault... Well in that case, I do not need any md5 checksum at all... Problem solved Thanks again for all precious input I got Cheers Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-12 Thread Marcel Weber
d a checksum of the encrypted data / key. Cheers, Richard Thanks Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

[OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

2004-08-12 Thread Marcel Weber
get stored in the cookie. Best regards Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: suspicious files in /tmp

2004-01-06 Thread Marcel Weber
), statically linked, not stripped So everythings clear now: One was statically linked, the other dynamically and I guess, that the meaning of stripped is, if there is debugging information in the file or not(?), which would make the file even bigger... Greettings Marcel

Re: suspicious files in /tmp

2004-01-06 Thread Marcel Weber
), statically linked, not stripped So everythings clear now: One was statically linked, the other dynamically and I guess, that the meaning of stripped is, if there is debugging information in the file or not(?), which would make the file even bigger... Greettings Marcel -- To UNSUBSCRIBE, email to

Re: suspicious files in /tmp

2004-01-05 Thread Marcel Weber
Bill Marcum wrote: On Mon, Jan 05, 2004 at 02:44:05PM +0100, Marcel Weber wrote: What exactly did chkrootkit say about those files? Were they writable by non-root users, did they have setuid permission, or what? They had the following access rights: They had the usual access rights 751

Re: suspicious files in /tmp

2004-01-05 Thread Marcel Weber
Bill Marcum wrote: On Mon, Jan 05, 2004 at 02:44:05PM +0100, Marcel Weber wrote: What exactly did chkrootkit say about those files? Were they writable by non-root users, did they have setuid permission, or what? They had the following access rights: They had the usual access rights 751

Re: suspicious files in /tmp

2004-01-05 Thread Marcel Weber
The env and netstat were false alarms and the /tmp files were some CPAN left overs... Thanks again! Marcel

Re: suspicious files in /tmp

2004-01-05 Thread Marcel Weber
nv and netstat were false alarms and the /tmp files were some CPAN left overs... Thanks again! Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

suspicious files in /tmp

2004-01-05 Thread Marcel Weber
-7955TMP.txt.gz Is this a left over from an attempt to hack my system? How can I check what happened and if the attacker succeeded? The bad thing is, there are no log files left from august. Has anybody a clue what this L8823-7955TMP.txt.gz file could be? Regards Marcel L8823-7955TMP.txt

suspicious files in /tmp

2004-01-05 Thread Marcel Weber
5TMP.txt.gz Is this a left over from an attempt to hack my system? How can I check what happened and if the attacker succeeded? The bad thing is, there are no log files left from august. Has anybody a clue what this L8823-7955TMP.txt.gz file could be? Regards Marcel L8823-7955TMP.txt

Re: Attempts to poison bayesian systems

2003-12-23 Thread Marcel Weber
ooked fine in OE. I fear that spammers are going a step further and try to trick systems like spamassassin. If they do this in a clever way, they whole spam thing will become even more cumbersome... Marcel

Re: Attempts to poison bayesian systems

2003-12-23 Thread Marcel Weber
ne in OE. I fear that spammers are going a step further and try to trick systems like spamassassin. If they do this in a clever way, they whole spam thing will become even more cumbersome... Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble?

Re: GnuPG & mutt on Woody 3.0r2.

2003-12-22 Thread Marcel Weber
trusts this key he should sign it and upload it to the key server. It interpreted his message as if he thinks that this key should be okay and wonders why gpg says something about lacking trust... Perhaps I interpreted to much, as his message wasn't really describing what he expected. Regards Marcel

Re: GnuPG & mutt on Woody 3.0r2.

2003-12-22 Thread Marcel Weber
: Signature made Sun Dec 21 17:50:12 2003 MST using DSA key ID 946886AE gpg: BAD signature from "Trey Sizemore <[EMAIL PROTECTED]>" Have you already tried another key server? For example wwwkeys.pgp.net? Regards Marcel

Re: GnuPG & mutt on Woody 3.0r2.

2003-12-22 Thread Marcel Weber
his key he should sign it and upload it to the key server. It interpreted his message as if he thinks that this key should be okay and wonders why gpg says something about lacking trust... Perhaps I interpreted to much, as his message wasn't really describing what he expected. Regard

Re: GnuPG & mutt on Woody 3.0r2.

2003-12-22 Thread Marcel Weber
gnature made Sun Dec 21 17:50:12 2003 MST using DSA key ID 946886AE gpg: BAD signature from "Trey Sizemore <[EMAIL PROTECTED]>" Have you already tried another key server? For example wwwkeys.pgp.net? Regards Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: [SECURITY] [DSA-403-1] userland can access Linux kernel memory

2003-12-02 Thread Marcel Weber
Marcel Weber wrote: In the actual case of the hacked servers it was not just a bug, but a security problem (CAN-2003-0961) without an existing exploit. I want to correct myself: CAN-2003-0961 dates from the 26th November 2003, as far I could see on the CVE.org site. This means that unless

Re: [SECURITY] [DSA-403-1] userland can access Linux kernel memory

2003-12-02 Thread Marcel Weber
Marcel Weber wrote: In the actual case of the hacked servers it was not just a bug, but a security problem (CAN-2003-0961) without an existing exploit. I want to correct myself: CAN-2003-0961 dates from the 26th November 2003, as far I could see on the CVE.org site. This means that unless

Re: [SECURITY] [DSA-403-1] userland can access Linux kernel memory

2003-12-02 Thread Marcel Weber
my mind... Regards Marcel

Re: [SECURITY] [DSA-403-1] userland can access Linux kernel memory

2003-12-02 Thread Marcel Weber
demand (and I cannot demand anything, as I could try to fix things by myself) that every bug should be fixed and that each time everyone has to update his / her kernel... And I did not want to offend anybody with this or my previous post. These were rather philosophical thoughts that came to my mind

Re: [SECURITY] [DSA-403-1] userland can access Linux kernel memory

2003-12-02 Thread Marcel Weber
tally risk free. The question is rather if we are willing to take a certain KNOWN risk or not. Marcel PS: I wanted to thank the whole debian security team and everyone who helped putting together this very detailed and concise report about the hacked servers.

Re: [SECURITY] [DSA-403-1] userland can access Linux kernel memory

2003-12-02 Thread Marcel Weber
free. The question is rather if we are willing to take a certain KNOWN risk or not. Marcel PS: I wanted to thank the whole debian security team and everyone who helped putting together this very detailed and concise report about the hacked servers. -- To UNSUBSCRIBE, email to [EMAIL PROTECTE

Re: More hacked servers?

2003-11-28 Thread Marcel Hicking
e we'll be informed right away. The secteam has done an amazing job in the past and I trust them to continue as responsible as before. Cheers, Marcel pgpzVq3vHaaS1.pgp Description: PGP signature

Re: More hacked servers?

2003-11-28 Thread Marcel Hicking
e we'll be informed right away. The secteam has done an amazing job in the past and I trust them to continue as responsible as before. Cheers, Marcel pgp0.pgp Description: PGP signature

Re: Fwd: Cron apt-get update && apt-get -y upgrade

2003-11-25 Thread Marcel Weber
19 für MIPS xnc verhindert Zusammenbruch des Menü-Systems zlib Sicherheits-Korrektur (CAN-2003-0107) Regards Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Fwd: Cron apt-get update && apt-get -y upgrade

2003-11-25 Thread Marcel Weber
19 für MIPS xnc verhindert Zusammenbruch des Menü-Systems zlib Sicherheits-Korrektur (CAN-2003-0107) Regards Marcel

Re: More hacked servers?

2003-11-25 Thread Marcel Weber
defense agency, that monitors and protects the debian systems on a 24/365 base ;-) Regards Marcel

Re: More hacked servers?

2003-11-25 Thread Marcel Weber
se agency, that monitors and protects the debian systems on a 24/365 base ;-) Regards Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: postfix security configuration

2003-08-14 Thread Marcel Weber
Tarjei Huse wrote: This might help: http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt On Mon, 2003-08-11 at 13:37, Marcel Weber wrote: Another good thing is the postfix ([EMAIL PROTECTED]) mailing list. It is quite a high traffic mailing list, but there are very expirienced people reading

Re: postfix security configuration

2003-08-11 Thread Marcel Weber
Tarjei Huse wrote: This might help: http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt On Mon, 2003-08-11 at 13:37, Marcel Weber wrote: Another good thing is the postfix ([EMAIL PROTECTED]) mailing list. It is quite a high traffic mailing list, but there are very expirienced people

Re: postfix security configuration

2003-08-11 Thread Marcel Weber
ming from a private masqueraded network, could misuse your server at their pleasure, if one user from this network has logged into his pop3 account. Regards Marcel -BEGIN PGP SIGNATURE- iD8DBQE/N3/y1EXMUTKVE5URAjPsAKD1sVpkeqHSIcYnungYkuF/fNyumgCg7pmF o2GTZhfgn7NnZ63P8HLSpEI= =B+0b -END PGP SIGNATURE-

Re: postfix security configuration

2003-08-11 Thread Marcel Weber
squeraded network, could misuse your server at their pleasure, if one user from this network has logged into his pop3 account. Regards Marcel -BEGIN PGP SIGNATURE- iD8DBQE/N3/y1EXMUTKVE5URAjPsAKD1sVpkeqHSIcYnungYkuF/fNyumgCg7pmF o2GTZhfgn7NnZ63P8HLSpEI= =B+0b -END PGP SIG

Re: Keeping files away from users

2003-06-06 Thread Marcel Weber
figuration server. Regards Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Keeping files away from users

2003-06-06 Thread Marcel Weber
another CPU, exchange anything in the box. So after a simple hardware problem all your own data is lost as well, even if the harddrive is not having any problems. Just my 2 cents. :-) Harry Hi That's right, but aren't you supposed to do backups anyway? Marcel -- To UNSUBSCRIBE

Re: Keeping files away from users

2003-06-05 Thread Marcel Weber
other computer... Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Keeping files away from users

2003-06-05 Thread Marcel Weber
s from the configuration server. Regards Marcel

Re: Keeping files away from users

2003-06-05 Thread Marcel Weber
, add another CPU, exchange anything in the box. So after a simple hardware problem all your own data is lost as well, even if the harddrive is not having any problems. Just my 2 cents. :-) Harry Hi That's right, but aren't you supposed to do backups anyway? Marcel

Re: Keeping files away from users

2003-06-05 Thread Marcel Weber
ve in another computer... Marcel

Re: Advice Needed On Recent Rootings

2003-05-28 Thread Marcel Weber
Is the firewall seperated from the servers or running ON the servers. It's a good advice to lock down the machines locally using iptables, but I think that doesn't save you a dedicated firewall. Might be a Debian GNU/Linux or BSD box or even something commercial. Regards Marcel --

Re: Advice Needed On Recent Rootings

2003-05-28 Thread Marcel Weber
t least: Is the firewall seperated from the servers or running ON the servers. It's a good advice to lock down the machines locally using iptables, but I think that doesn't save you a dedicated firewall. Might be a Debian GNU/Linux or BSD box or even something commercial. Regards Marcel

Re: Setting up VPN's

2003-05-17 Thread Marcel Weber
Raphael SurcouF wrote: On Fri, 16 May 2003 01:21:44 +0200, Marcel Weber wrote: I do this with vpnd. The server has a dyndns domain name. On the client side, you can put in the fully qualified domain name of the server instead of the ip address. Works quite reliable. Of course from time to

Re: Setting up VPN's

2003-05-15 Thread Marcel Weber
. Works quite reliable. Of course from time to time the link goes down: Each time the isp cuts the server's connection to set a new IP adress for it, you will get an interruption until the client is able to resolve the new IP. In any case you have to enable the keep alive option of vpnd. Regards Marcel

Re: Apt-get only security patches

2003-05-07 Thread Marcel Weber
ine: deb http://security.debian.org/ stable/updates main contrib non-free For updating pass apt-get the sources list it should use. In this example the above file. apt-get -o=Dir::Etc::SourceList=/etc/apt/sources.security update This should do the job (except anyone would disagree ;-) ) Regards Marcel

Re: Snort exploit in wild.

2003-04-25 Thread Marcel Weber
line: preprocessor stream4_reassemble in your /etc/snort/snort.conf as the vulnerability is in this module. Of course you will loose some information. But saver is better ;-) Regards Marcel [1] (http://www.heise.de/newsticker/result.xhtml?url=/newsticker/data/pab-16.04.03-000/default.shtml&words=Snort)

Re: grsec patch over debian 2.4.20 kernel

2003-04-22 Thread Marcel Weber
Hobbs, Richard wrote: Hello, Where is the 2.4.20 kernel in apt?? Hi You do not miss anything (or I would miss the same thing...). The 2.4.20 kernel is part of sid and not woody. For a 2.4.20 kernel grab sid's kernel source or the plain vanilla kernel from kernel.org. Regards Marcel

Re: Peace is not off topic

2003-03-11 Thread Marcel Hicking
gious background with whatever opinion that might results from this! Marcel -- -- .' ` ! :' ! `. `´ Debian/GNU Linux `- More than sofftware

Re: Peace is not off topic

2003-03-11 Thread Marcel Hicking
gious background with whatever opinion that might results from this! Marcel -- -- .' ` ! :' ! `. `´ Debian/GNU Linux `- More than sofftware -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Firewall Informer

2003-02-23 Thread Marcel Weber
Hi Isn't this a product advertisement? I'm quoting the debian mailing list policies: Debian mailing list advertising policy This policy is intended to fight mailing-list "spamming". The Debian mailing lists accept commercial advertising for payment. The fee for advertisments is a donat

Re: Firewall Informer

2003-02-23 Thread Marcel Weber
Hi Isn't this a product advertisement? I'm quoting the debian mailing list policies: Debian mailing list advertising policy This policy is intended to fight mailing-list "spamming". The Debian mailing lists accept commercial advertising for payment. The fee for advertisments is a donation

Re: what this logs means?

2003-02-19 Thread Marcel Weber
do this. It is part of the computer browser service. Marcel -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAj5T1wgACgkQ1EXMUTKVE5VXhQCggFE8rxBbMOfpXtLdPkeD/G0W BYoAoOw3TK5MNmfiKoE+YCzmYyu3dKV1 =KuRi -END

Re: what this logs means?

2003-02-19 Thread Marcel Weber
do this. It is part of the computer browser service. Marcel -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAj5T1wgACgkQ1EXMUTKVE5VXhQCggFE8rxBbMOfpXtLdPkeD/G0W BYoAoOw3TK5MNmfiKoE+YCzmYyu3dKV1 =KuRi -END

Re: machine monitoring packages

2003-02-13 Thread Marcel Hicking
ugins package. http://packages.debian.org/cgi-bin/search_packages.pl?keywords=nagios&searchon=names&subword=1&version=all&release=all Cheers, Marcel

Re: machine monitoring packages

2003-02-13 Thread Marcel Hicking
ugins package. http://packages.debian.org/cgi-bin/search_packages.pl?keywords=nagios&searchon=names&subword=1&version=all&release=all Cheers, Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

[OT]: Recommondations on hardware firewall / vpn device

2003-02-06 Thread Marcel Weber
ughput >100MBit/s Other nice things that were cool: - - Authentication against NT Domain / Active Directory I already took a look at the 3com Superstack III Firewall, which seems quite decent to me. But I did not find anything about VPN interop with Linux / Macs. Any ideas / advices? Regard

[OT]: Recommondations on hardware firewall / vpn device

2003-02-06 Thread Marcel Weber
t;100MBit/s Other nice things that were cool: - - Authentication against NT Domain / Active Directory I already took a look at the 3com Superstack III Firewall, which seems quite decent to me. But I did not find anything about VPN interop with Linux / Macs. Any ideas / advices? Regards Marcel -

Re: FW: Updated OPENSSL package for Debian?

2003-01-07 Thread Marcel Weber
www.openssl.org, upgrading to openssl-0.9.6g is recommended. Hi Don't worry about this message. As far as I know, all security fixes have been backported from 0.9.6g to the woody version. From a security point of view, both packages are equal. Marcel -- To UNSUBSCRIBE, email to [EMAIL PROT

Re: FW: Updated OPENSSL package for Debian?

2003-01-07 Thread Marcel Weber
www.openssl.org, upgrading to openssl-0.9.6g is recommended. Hi Don't worry about this message. As far as I know, all security fixes have been backported from 0.9.6g to the woody version. From a security point of view, both packages are equal. Marcel

Re: FTP-SSL

2002-12-18 Thread Marcel Haman
a 30 days period. And as far as I know there are no free ftp-ssl clients yet. -==- Regards, Marcel

Re: FTP-SSL

2002-12-18 Thread Marcel Haman
a 30 days period. And as far as I know there are no free ftp-ssl clients yet. -==- Regards, Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: pop mail recommendations

2002-12-06 Thread Marcel Weber
mysql tables. I would really recommend using sql tables for authentication. Like this the pop3 user base is seperated from the unix user base (imagine someone sniffing a unix password and you forgot to disable login for the pop3 users...) Marcel - -- Marcel Weber - [EMAIL PROTECTED] PGP/GP

Re: pop mail recommendations

2002-12-06 Thread Marcel Weber
mysql tables. I would really recommend using sql tables for authentication. Like this the pop3 user base is seperated from the unix user base (imagine someone sniffing a unix password and you forgot to disable login for the pop3 users...) Marcel - -- Marcel Weber - [EMAIL PROTECTED] PGP/GP

Re: SNORT not adding entries to snort/portscan ???

2002-11-29 Thread Marcel Weber
well as the tool itself. What about considering outdated security tools as hazardous to the system's security? Taking this point of view, why not distributing updated versions via debian-security? Marcel - -- Marcel Weber - [EMAIL PROTECTED] PGP/GPG Key: http://www.ncpro.com/GPG/mmweb

Re: SNORT not adding entries to snort/portscan ???

2002-11-29 Thread Marcel Weber
well as the tool itself. What about considering outdated security tools as hazardous to the system's security? Taking this point of view, why not distributing updated versions via debian-security? Marcel - -- Marcel Weber - [EMAIL PROTECTED] PGP/GPG Key: http://www.ncpro.com/GPG/mmweb

Re: SNORT not adding entries to snort/portscan ???

2002-11-29 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hanasaki JiJi schrieb: | 1.8.4-Beta1 Build 91 | | It also seems to be dying without any reports to syslog | This also happens to my setup. I'm restarting snort every night now. Marcel - -- Marcel Weber - [EMAIL PROTECTED] PGP/GPG Key:

Re: SNORT not adding entries to snort/portscan ???

2002-11-29 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hanasaki JiJi schrieb: | 1.8.4-Beta1 Build 91 | | It also seems to be dying without any reports to syslog | This also happens to my setup. I'm restarting snort every night now. Marcel - -- Marcel Weber - [EMAIL PROTECTED] PGP/GPG Key:

filtering between bridge device (br0) and regular ethernet device (ethx)

2002-11-21 Thread Marcel Weber
save me an additional switch though ;-) I hope that I am not asking a question too silly for this list... I did an RTFM, but I did not find any hint for this problem... Regards Marcel -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.

filtering between bridge device (br0) and regular ethernet device(ethx)

2002-11-21 Thread Marcel Weber
save me an additional switch though ;-) I hope that I am not asking a question too silly for this list... I did an RTFM, but I did not find any hint for this problem... Regards Marcel -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.

Re: Mirror Site Security

2002-11-20 Thread Marcel Hicking
--On Mittwoch, 20. November 2002 11:54 +0100 "Thomas J. Zeeman" <[EMAIL PROTECTED]> wrote: Well lets hope that the fire doesn't make and casualties. From the various news-articles I gather the firesquad doesn't expect them. But the question remains, where is the mirror for security.debai

Re: Mirror Site Security

2002-11-20 Thread Marcel Hicking
--On Mittwoch, 20. November 2002 11:54 +0100 "Thomas J. Zeeman" <[EMAIL PROTECTED]> wrote: Well lets hope that the fire doesn't make and casualties. From the various news-articles I gather the firesquad doesn't expect them. But the question remains, where is the mirror for security.debain.

Re: Strange Large ICMP packets IDS246

2002-11-18 Thread Marcel Weber
e good for. If by the way somebody knows it already I would appreciate. Regards Marcel Arne Rusek wrote: | On Mon, Nov 18, 2002 at 11:54:01PM +0100, Marcel Weber wrote: | |>Hi |> |>Today I had a whole bunch of large ICMP packages on the company's LAN |>(about 20). |>Interesting is

Re: Strange Large ICMP packets IDS246

2002-11-18 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Thanks very much. The probably hacked windows 2000 servers have nothing to do with debian though. I first thought of a false snort alarm of the debian box I am using as a nids. Goosh... Windoze is evil though... Marcel [EMAIL PROTECTED

Strange Large ICMP packets IDS246

2002-11-18 Thread Marcel Weber
re or less weird content. They have no "Don't fragment" flags set, so I wonder where they come from and what they good for. Has anybody seem such packets yet? (See attachment) Regards Marcel Frame 3 (2090 on wire, 2090 captured) Arrival Time: Nov 18, 2002 07:31:22.567756000

Re: Strange Large ICMP packets IDS246

2002-11-18 Thread Marcel Weber
e good for. If by the way somebody knows it already I would appreciate. Regards Marcel Arne Rusek wrote: | On Mon, Nov 18, 2002 at 11:54:01PM +0100, Marcel Weber wrote: | |>Hi |> |>Today I had a whole bunch of large ICMP packages on the company's LAN |>(about 20). |>Interesting is

Re: Strange Large ICMP packets IDS246

2002-11-18 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Thanks very much. The probably hacked windows 2000 servers have nothing to do with debian though. I first thought of a false snort alarm of the debian box I am using as a nids. Goosh... Windoze is evil though... Marcel [EMAIL PROTECTED] wrote

Strange Large ICMP packets IDS246

2002-11-18 Thread Marcel Weber
re or less weird content. They have no "Don't fragment" flags set, so I wonder where they come from and what they good for. Has anybody seem such packets yet? (See attachment) Regards Marcel Frame 3 (2090 on wire, 2090 captured) Arrival Time: Nov 18, 2002 07:31:22.567756000

Re: unsubscribe

2002-11-14 Thread Marcel Weber
uot;. Trouble? Contact [EMAIL PROTECTED] |>> |> |>-- |>Jonathan Crockett |>Network Engineer |>Midcontinent Communications |> |> |>-- |>To UNSUBSCRIBE, email to [EMAIL PROTECTED] |>with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] |> | | -

Re: unsubscribe

2002-11-14 Thread Marcel Weber
Contact [EMAIL PROTECTED] |>> |> |>-- |>Jonathan Crockett |>Network Engineer |>Midcontinent Communications |> |> |>-- |>To UNSUBSCRIBE, email to [EMAIL PROTECTED] |>with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] |> | | - -- Mar

Re: Chrooted mysqld sock file problem

2002-10-31 Thread marcel
hints apart from patching the init script to set/restore the hardlink? Cheers, Marcel

Re: Chrooted mysqld sock file problem

2002-10-31 Thread marcel
hints apart from patching the init script to set/restore the hardlink? Cheers, Marcel -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

AW: export problems on security updates?

2002-10-10 Thread Marcel Weber
I think he meant France with the limitation of 56 bit encription. Marcel PGP / GPG Key:http://www.ncpro.com/GPG/mmweber-at-ncpro-com.asc > -Ursprungliche Nachricht- > Von: Javier Fernandez-Sanguino Pena [mailto:[EMAIL PROTECTED] > Gesendet: Donne

AW: export problems on security updates?

2002-10-10 Thread Marcel Weber
I think he meant France with the limitation of 56 bit encription. Marcel PGP / GPG Key:http://www.ncpro.com/GPG/mmweber-at-ncpro-com.asc > -Ursprungliche Nachricht- > Von: Javier Fernandez-Sanguino Pena [mailto:[EMAIL PROTECTED]] > Gesendet: Donne

AW: Bizarre apache logs

2002-10-05 Thread Marcel Weber
hould have got a 403 response instead. Has he passed the "deny from all" then? (exerpt from the httpd.conf) Order allow,deny deny from all Like this he should never get an 404 response, should he? Regards Marcel PGP / GPG Key:http://www.

Bizarre apache logs

2002-10-05 Thread Marcel Weber
er is an older Compaq Proliant 800, some Pentium 133 MHz. Rather slow, perhaps this has an influence. Below are the error.log and access.log in question an at the end the relevant section of the httpd.conf. Regards M

AW: Bizarre apache logs

2002-10-05 Thread Marcel Weber
hould have got a 403 response instead. Has he passed the "deny from all" then? (exerpt from the httpd.conf) Order allow,deny deny from all Like this he should never get an 404 response, should he? Regards Marcel PGP / GPG Key:http://www.

Bizarre apache logs

2002-10-05 Thread Marcel Weber
erver is an older Compaq Proliant 800, some Pentium 133 MHz. Rather slow, perhaps this has an influence. Below are the error.log and access.log in question an at the end the relevant section of the httpd.conf. Regards M

AW: Debian (Unstable) problem with SSH and PAM

2002-10-04 Thread Marcel Weber
You're right. Apparently he IS a lamer, at least his name is lamer style. I remember those from my Amiga times... And further more they usually have a bigger problem with their spelling... Marcel PGP / GPG Key:http://www.ncpro.com/GPG/mmweber-at-ncpro-co

AW: Debian (Unstable) problem with SSH and PAM

2002-10-04 Thread Marcel Weber
You're right. Apparently he IS a lamer, at least his name is lamer style. I remember those from my Amiga times... And further more they usually have a bigger problem with their spelling... Marcel PGP / GPG Key:http://www.ncpro.com/GPG/mmweber-at-ncpro-co

[OT] Re: Debian (Unstable) problem with SSH and PAM

2002-10-03 Thread Marcel Weber
s. Enough flaming for today. Anyway, this list should not be the place for this, but I could not hold back... Marcel Am Donnerstag den, 3. Oktober 2002, um 06:51, schrieb _ArKiTeKt0_: Dont worry Ivo, debian's users are always dorks and lame people who doesnt know even how to insta

[OT] Re: Debian (Unstable) problem with SSH and PAM

2002-10-03 Thread Marcel Weber
gs. Enough flaming for today. Anyway, this list should not be the place for this, but I could not hold back... Marcel Am Donnerstag den, 3. Oktober 2002, um 06:51, schrieb _ArKiTeKt0_: > Dont worry Ivo, debian's users are always dorks and lame people who > doesnt know even how to

Re: Good Day - spamassin

2002-09-12 Thread Marcel Hicking
ed... When mutt had finally managed to delete 5000 mails, during that time at least the same amount of new mails had arrived already. Stuffed my line quite a bit... Cheers, Marcel

Re: "suspicious" apache log entries

2002-09-12 Thread Marcel Weber
tries. Marcel Am Donnerstag den, 12. September 2002, um 05:24, schrieb Peter Cordes: On Tue, Sep 10, 2002 at 10:00:13AM -0700, Vineet Kumar wrote: I understand that the tools exist, but I'd be very cautious before donning your white hat and becoming the next Internet vigilante. Of course

Re: [OT] AW: Printing ?

2002-09-10 Thread Marcel Welschbillig
Thanks to those who replied. I now have somewhere to start :) Marcel On Tue, 2002-09-10 at 16:16, Ralf Dreibrodt wrote: > Hi, > > > > Sorry i know this is off topic but dose anyone know where theres a good > > > HOW-TO on Seting up SAMBA as a print server ?? > >

AW: "suspicious" apache log entries

2002-09-10 Thread Marcel Weber
Well, but you're right: This is a beautyful tool on a companies network. But if used on the internet, there could be legal issues. Why not introduce an official "Internet Security Team" that officially has the right to do such things. It would be for the good of the net!

[OT] AW: Printing ?

2002-09-09 Thread Marcel Weber
WTO-5.html#ss5.8 Hope this helps a bit. Just a hint: There would be other mailinglists covering your question... Marcel PGP / GPG Key:http://www.ncpro.com/GPG/mmweber-at-ncpro-com.asc > -Ursprüngliche Nachricht- > Von: Marcel Welschbillig [ma

Printing ?

2002-09-09 Thread Marcel Welschbillig
Sorry i know this is off topic but dose anyone know where theres a good HOW-TO on Seting up SAMBA as a print server ?? Thanks Marcel

Re: Setting up a mail server

2002-09-03 Thread Marcel Weber
d for changing the user's information like passwords, name and so on. Marcel - PGP / GPG Key:http://www.ncpro.com/GPG/mmweber-at-ncpro-com.asc pgpymi5ohoIY9.pgp Description: PGP signature

  1   2   >