Re: Security issue with Apache-ssl?

2003-02-06 Thread J.H.M. Dassen (Ray)
On Wed, Feb 05, 2003 at 22:14:58 -0700, Miles Beck wrote: > And on occasion I see this as well. > > [Mon Feb 3 06:25:11 2003] [notice] SIGUSR1 received. Doing graceful > restart Given the time, I'd guess that this is /etc/cron.daily/logrotate's execution of the postrotate part of /etc/logrotate

Re: Security issue with Apache-ssl?

2003-02-06 Thread I.R. van Dongen
Is this machine doing webmail by any chance? On Wed, 5 Feb 2003 22:14:58 -0700, [EMAIL PROTECTED] wrote: > Hello, > > I am using Apache-ssl 1.3.26.1+1.48-0woody3 and openssl 0.9.6c-2.woody.1. > > On a daily basis I am seeing the following errors. > > [Wed Feb 5 10:00:03 2003] [notice] child

Re: cluster on firewall?

2003-02-06 Thread Kristof Goossens
On Thu, Feb 06, 2003 at 03:09:34AM +0200, Haim Ashkenazi wrote: > Hi > > I have setup a firewall with 4 legs as follows: > * One leg goes to the router (cisco). > * Second leg goes to a switch connected to the internal network > (10.20...). > * The third and fourt

Re: Firewall testing

2003-02-06 Thread Javier Fernández-Sanguino Peña
On Wed, Feb 05, 2003 at 11:56:42AM -0500, [EMAIL PROTECTED] wrote: > On Wed, Feb 05, 2003 at 11:14:50AM -0500, merk0020 wrote: > > Hello I am about to make the Proxy/Firewall on your > > www.aboutdebian.com web site. I was wondering how to go about testing > > it when finished. I have multiple comp

Re: cluster on firewall?

2003-02-06 Thread Marcin Owsiany
On Thu, Feb 06, 2003 at 03:09:34AM +0200, Haim Ashkenazi wrote: > Now, since the firewall is the most critical host, I want to setup some > kind of failsafe, so even if that host dies all the traffic will go > through another host. > > Since I don't even have an idea where to start, I'll appreciat

Postfix return-path with formmail

2003-02-06 Thread Stefaan Teerlinck
Thx for the pointers on finding the insecure pormmail.pl An other problem: Forms sent on a webpage always have [EMAIL PROTECTED] (if www-data is the user in httpd.conf)as return path. How do I change this, or how can I set this to the "from"-field of the form? I tried on setting a different user o

Re: ACLs

2003-02-06 Thread sean finney
heya thomas, assuming you mean exclusively filesystem acls, acl support is there... kind of. for ext2/ext3, there's a kernel-patch package you can use to build your own kernel quite easily the Debian Way with make-kpkg. the trouble is stuff you already hinted at, and a little more. for ext2 and

AW: ACLs

2003-02-06 Thread Andreas Rabus
The posix acl mentiond are at http://acl.bestbits.at/mailman/listinfo/acl-devel. And Samba from testing uses these ACLs for NT ACL. kind of at least, there are not the same. I installed the acl on a non-prod system with Dual Processor without problems. Perhaps the fileutil package is needed in

[OT]: Recommondations on hardware firewall / vpn device

2003-02-06 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I need some advice for this decision: We are about to replace our existing watchguard firebox II. There has been a decision for a hardware device which I cannot alter. But with all the VPN interop problems we had with the watchguard products I am

Re: ACLs

2003-02-06 Thread Rick Moen
Quoting sean finney ([EMAIL PROTECTED]): > assuming you mean exclusively filesystem acls, acl support is > there... kind of. for ext2/ext3, there's a kernel-patch package > you can use to build your own kernel quite easily the Debian Way > with make-kpkg. > > the trouble is stuff you already hin

RE: ACLs

2003-02-06 Thread ??????? ?????????
UNSUBSCRIBE [EMAIL PROTECTED] or visit http://www.grammy.ru !!! -Original Message- From: Rick Moen [mailto:[EMAIL PROTECTED] Sent: Thursday, February 06, 2003 5:41 PM To: debian-security@lists.debian.org Subject: Re: ACLs Quoting sean finney ([EMAIL PROTECTED]): > assuming you mean e

Re: cluster on firewall? (thanx)

2003-02-06 Thread Haim Ashkenazi
thanx everybody, there are some interesting links here. Bye -- Haim

Re: Security issue with Apache-ssl?

2003-02-06 Thread Matt Zimmerman
On Wed, Feb 05, 2003 at 10:14:58PM -0700, Miles Beck wrote: > [Wed Feb 5 10:00:03 2003] [notice] child pid 3751 exit signal Segmentation > fault (11) > [Wed Feb 5 11:30:02 2003] [notice] child pid 3747 exit signal Segmentation > fault (11) > [Wed Feb 5 14:00:03 2003] [notice] child pid 3748 exi

Re: cluster on firewall?

2003-02-06 Thread Glen Mehn
Haim Ashkenazi wrote: Hi I have setup a firewall with 4 legs as follows: * One leg goes to the router (cisco). * Second leg goes to a switch connected to the internal network (10.20...). * The third and fourth legs are both for the dmz. one goes to a s

Re: [OT]: Recommondations on hardware firewall / vpn device

2003-02-06 Thread Glen Mehn
Marcel Weber wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I need some advice for this decision: We are about to replace our existing watchguard firebox II. There has been a decision for a hardware device which I cannot alter. But with all the VPN interop problems we had with the wat

Re: Security issue with Apache-ssl?

2003-02-06 Thread I.R. van Dongen
Is this machine doing webmail by any chance? On Wed, 5 Feb 2003 22:14:58 -0700, [EMAIL PROTECTED] wrote: > Hello, > > I am using Apache-ssl 1.3.26.1+1.48-0woody3 and openssl 0.9.6c-2.woody.1. > > On a daily basis I am seeing the following errors. > > [Wed Feb 5 10:00:03 2003] [notice] child

Re: cluster on firewall?

2003-02-06 Thread Kristof Goossens
On Thu, Feb 06, 2003 at 03:09:34AM +0200, Haim Ashkenazi wrote: > Hi > > I have setup a firewall with 4 legs as follows: > * One leg goes to the router (cisco). > * Second leg goes to a switch connected to the internal network > (10.20...). > * The third and fourt

Re: Firewall testing

2003-02-06 Thread Javier Fernández-Sanguino Peña
On Wed, Feb 05, 2003 at 11:56:42AM -0500, [EMAIL PROTECTED] wrote: > On Wed, Feb 05, 2003 at 11:14:50AM -0500, merk0020 wrote: > > Hello I am about to make the Proxy/Firewall on your > > www.aboutdebian.com web site. I was wondering how to go about testing > > it when finished. I have multiple comp

Re: cluster on firewall?

2003-02-06 Thread Marcin Owsiany
On Thu, Feb 06, 2003 at 03:09:34AM +0200, Haim Ashkenazi wrote: > Now, since the firewall is the most critical host, I want to setup some > kind of failsafe, so even if that host dies all the traffic will go > through another host. > > Since I don't even have an idea where to start, I'll appreciat

Postfix return-path with formmail

2003-02-06 Thread Stefaan Teerlinck
Thx for the pointers on finding the insecure pormmail.pl An other problem: Forms sent on a webpage always have www-data@maindomain (if www-data is the user in httpd.conf)as return path. How do I change this, or how can I set this to the "from"-field of the form? I tried on setting a different user

Re: ACLs

2003-02-06 Thread sean finney
heya thomas, assuming you mean exclusively filesystem acls, acl support is there... kind of. for ext2/ext3, there's a kernel-patch package you can use to build your own kernel quite easily the Debian Way with make-kpkg. the trouble is stuff you already hinted at, and a little more. for ext2 and

AW: ACLs

2003-02-06 Thread Andreas Rabus
The posix acl mentiond are at http://acl.bestbits.at/mailman/listinfo/acl-devel. And Samba from testing uses these ACLs for NT ACL. kind of at least, there are not the same. I installed the acl on a non-prod system with Dual Processor without problems. Perhaps the fileutil package is needed in

[OT]: Recommondations on hardware firewall / vpn device

2003-02-06 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I need some advice for this decision: We are about to replace our existing watchguard firebox II. There has been a decision for a hardware device which I cannot alter. But with all the VPN interop problems we had with the watchguard products I am

Re: ACLs

2003-02-06 Thread Rick Moen
Quoting sean finney ([EMAIL PROTECTED]): > assuming you mean exclusively filesystem acls, acl support is > there... kind of. for ext2/ext3, there's a kernel-patch package > you can use to build your own kernel quite easily the Debian Way > with make-kpkg. > > the trouble is stuff you already hin

RE: ACLs

2003-02-06 Thread ??????? ?????????
UNSUBSCRIBE *@gorod.ru or visit http://www.grammy.ru !!! -Original Message- From: Rick Moen [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 5:41 PM To: [EMAIL PROTECTED] Subject: Re: ACLs Quoting sean finney ([EMAIL PROTECTED]): > assuming you mean exclusively filesystem

Re: cluster on firewall? (thanx)

2003-02-06 Thread Haim Ashkenazi
thanx everybody, there are some interesting links here. Bye -- Haim -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Security issue with Apache-ssl?

2003-02-06 Thread Matt Zimmerman
On Wed, Feb 05, 2003 at 10:14:58PM -0700, Miles Beck wrote: > [Wed Feb 5 10:00:03 2003] [notice] child pid 3751 exit signal Segmentation > fault (11) > [Wed Feb 5 11:30:02 2003] [notice] child pid 3747 exit signal Segmentation > fault (11) > [Wed Feb 5 14:00:03 2003] [notice] child pid 3748 exi

Re: cluster on firewall?

2003-02-06 Thread Glen Mehn
Haim Ashkenazi wrote: Hi I have setup a firewall with 4 legs as follows: * One leg goes to the router (cisco). * Second leg goes to a switch connected to the internal network (10.20...). * The third and fourth legs are both for the dmz. one goes to a sw

Re: [OT]: Recommondations on hardware firewall / vpn device

2003-02-06 Thread Glen Mehn
Marcel Weber wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I need some advice for this decision: We are about to replace our existing watchguard firebox II. There has been a decision for a hardware device which I cannot alter. But with all the VPN interop problems we had with the watc