Re: Telnet forwarding ??

2003-02-20 Thread Alan James
On Thu, 20 Feb 2003 05:35:01 +, Dale Amon <[EMAIL PROTECTED]> wrote: >> or maybe a FreeS/WAN implementation for cygwin (is there a native win >> implementation?) >> ... but thats a different problem ... > >I doubt it. FreeSWAN uses Linux kernel patches and >kernel crypto. You'd be suprised: h

Re: configure ssh-access

2003-07-07 Thread Alan James
On Mon, 7 Jul 2003 11:08:38 +0200, [EMAIL PROTECTED] wrote: >The problem is that I can only login to the ssh-machine >when I enter the IP-address to the hosts.allow file. >Specifying the hosts DNS-name does not work! Thats probably because it does a reverse lookup on the connecting ip to see if i

Re: Woody security updates report.

2003-07-29 Thread Alan James
On Mon, 28 Jul 2003 09:18:31 -0500, Andrés Roldán <[EMAIL PROTECTED]> wrote: >Is there any way, a tool or something to do that? > You could install apt-listchanges. You'll get an email with the relevant changelog entries when something is upgraded.

Re: Debian Stable server hacked

2003-08-06 Thread Alan James
On Wed, 06 Aug 2003 16:01:39 +0200, Thijs Welman <[EMAIL PROTECTED]> wrote: > >My loganalyzer showed four "Did not receive identification string from >w.x.y.z" logentries from sshd. This happens all the time and i certainly >don't check all of them out, but i happen to do so this time. That's pro

Re: Uhm, so, what happened...?

2003-11-25 Thread Alan James
On Tue, 25 Nov 2003 12:09:11 +0100, Kjetil Kjernsmo <[EMAIL PROTECTED]> wrote: >I bet there are a lot of users running around scared, not knowing what >to do really... Any advices for us?? Keep your eye on http://www.wiggy.net/debian/status/ Expect more details to appear there in a day or two.

Re: Apache banner

2004-04-06 Thread Alan James
On Tue, 6 Apr 2004 16:02:42 +0200, "Craig Schneider" <[EMAIL PROTECTED]> wrote: >Hi Guys > >Is there any way of changing the banner in Apache like you can for >proftpd lets say? If you specify: ServerTokens ProductOnly in httpd.conf it'll just say "Apache" instead of giving out version numbers

Re: Using PAM with SFS

2002-09-30 Thread Alan James
On Mon, 30 Sep 2002 14:02:54 +0200, Massimiliano Mirra <[EMAIL PROTECTED]> wrote: >Yes, non-US source is there now (that was the reason apt-get source >libpam-sfs was not working in the first place). The problem with >libsfscrypt happens at configure time: the lib is there but configure >can't s

Re: Telnet forwarding ??

2003-02-20 Thread Alan James
On Thu, 20 Feb 2003 05:35:01 +, Dale Amon <[EMAIL PROTECTED]> wrote: >> or maybe a FreeS/WAN implementation for cygwin (is there a native win >> implementation?) >> ... but thats a different problem ... > >I doubt it. FreeSWAN uses Linux kernel patches and >kernel crypto. You'd be suprised: h

Re: configure ssh-access

2003-07-07 Thread Alan James
On Mon, 7 Jul 2003 11:08:38 +0200, [EMAIL PROTECTED] wrote: >The problem is that I can only login to the ssh-machine >when I enter the IP-address to the hosts.allow file. >Specifying the hosts DNS-name does not work! Thats probably because it does a reverse lookup on the connecting ip to see if i

Re: Woody security updates report.

2003-07-29 Thread Alan James
On Mon, 28 Jul 2003 09:18:31 -0500, Andrés Roldán <[EMAIL PROTECTED]> wrote: >Is there any way, a tool or something to do that? > You could install apt-listchanges. You'll get an email with the relevant changelog entries when something is upgraded. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED

Re: Debian Stable server hacked

2003-08-14 Thread Alan James
On Wed, 06 Aug 2003 16:01:39 +0200, Thijs Welman <[EMAIL PROTECTED]> wrote: > >My loganalyzer showed four "Did not receive identification string from >w.x.y.z" logentries from sshd. This happens all the time and i certainly >don't check all of them out, but i happen to do so this time. That's pro

Re: Uhm, so, what happened...?

2003-11-25 Thread Alan James
On Tue, 25 Nov 2003 12:09:11 +0100, Kjetil Kjernsmo <[EMAIL PROTECTED]> wrote: >I bet there are a lot of users running around scared, not knowing what >to do really... Any advices for us?? Keep your eye on http://www.wiggy.net/debian/status/ Expect more details to appear there in a day or two.

Re: Apache banner

2004-04-06 Thread Alan James
On Tue, 6 Apr 2004 16:02:42 +0200, "Craig Schneider" <[EMAIL PROTECTED]> wrote: >Hi Guys > >Is there any way of changing the banner in Apache like you can for >proftpd lets say? If you specify: ServerTokens ProductOnly in httpd.conf it'll just say "Apache" instead of giving out version numbers

Re: Apt-get is insecure

2001-12-13 Thread Alan James
On Thu, 13 Dec 2001 16:24:47 +0100, Wichert Akkerman <[EMAIL PROTECTED]> wrote: >apt-get install debsign don't you mean debsig-verify ? Alan. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: protection against buffer overflows

2002-01-24 Thread Alan James
On Wed, 23 Jan 2002 18:03:26 -0500 (EST), Emmanuel Valliet <[EMAIL PROTECTED]> wrote: >There was a good article of Aleph One on buffer overflows called >'Smashing the stack for fun and profit'. Phrack 49. >Search the web and enjoy :) I found this one to be quite informative too: http://www.cult

Re: Problems with chrooting bind 9.2.0

2002-02-13 Thread Alan James
On Wed, 13 Feb 2002 17:19:33 +0100, Marcus Frings <[EMAIL PROTECTED]> wrote: >Dear all, > >first I would like to apologize for my English as I am not a native >speaker. Your English is very good actually, you need not apologise. >*a* and *b* confuses me a little. Although rndc.key is in the chr

Re: ssh without reverse DNS lookup

2002-03-11 Thread Alan James
On Mon, 11 Mar 2002 09:02:17 -0300, Pedro Zorzenon Neto <[EMAIL PROTECTED]> wrote: > I've looked in "man sshd" and "man ssh" and I didn't see any >configuration option which bypass the reverse lookup, enabling >connections from machines without reverse DNS lookup. How can I do >this? (I don't w

Re: Can the troian Trin00 infect a Debian Machine?

2002-04-02 Thread Alan James
On Tue, 2 Apr 2002 13:25:18 +0100, Jose Manuel dos Santos Calhariz <[EMAIL PROTECTED]> wrote: >Where I can more information about Trin00? Well google of course: http://www.google.com/search?hl=en&q=Trin00&btnG=Google+Search First hit: http://staff.washington.edu/dittrich/misc/trinoo.analysis T

Re: OT: Re: beach towel

2002-05-15 Thread Alan James
On Wed, 15 May 2002 11:37:32 +0200, Simon Langhof <[EMAIL PROTECTED]> wrote: >I wrote: > >> Well, a towel could be your chance to get away from the earth when it >> is destroyed. So is _is_ a form of security :) > >Oops, time to read it again. It is obviously not the towel, that gets you away. N

Re: Apt-get is insecure

2001-12-13 Thread Alan James
On Thu, 13 Dec 2001 16:24:47 +0100, Wichert Akkerman <[EMAIL PROTECTED]> wrote: >apt-get install debsign don't you mean debsig-verify ? Alan.

Re: protection against buffer overflows

2002-01-24 Thread Alan James
On Wed, 23 Jan 2002 18:03:26 -0500 (EST), Emmanuel Valliet <[EMAIL PROTECTED]> wrote: >There was a good article of Aleph One on buffer overflows called >'Smashing the stack for fun and profit'. Phrack 49. >Search the web and enjoy :) I found this one to be quite informative too: http://www.cultd

Re: Problems with chrooting bind 9.2.0

2002-02-13 Thread Alan James
On Wed, 13 Feb 2002 17:19:33 +0100, Marcus Frings <[EMAIL PROTECTED]> wrote: >Dear all, > >first I would like to apologize for my English as I am not a native >speaker. Your English is very good actually, you need not apologise. >*a* and *b* confuses me a little. Although rndc.key is in the chro

Re: ssh without reverse DNS lookup

2002-03-11 Thread Alan James
On Mon, 11 Mar 2002 09:02:17 -0300, Pedro Zorzenon Neto <[EMAIL PROTECTED]> wrote: > I've looked in "man sshd" and "man ssh" and I didn't see any >configuration option which bypass the reverse lookup, enabling >connections from machines without reverse DNS lookup. How can I do >this? (I don't wa

Re: Can the troian Trin00 infect a Debian Machine?

2002-04-02 Thread Alan James
On Tue, 2 Apr 2002 13:25:18 +0100, Jose Manuel dos Santos Calhariz <[EMAIL PROTECTED]> wrote: >Where I can more information about Trin00? Well google of course: http://www.google.com/search?hl=en&q=Trin00&btnG=Google+Search First hit: http://staff.washington.edu/dittrich/misc/trinoo.analysis Tr

Re: OT: Re: beach towel

2002-05-15 Thread Alan James
On Wed, 15 May 2002 11:37:32 +0200, Simon Langhof <[EMAIL PROTECTED]> wrote: >I wrote: > >> Well, a towel could be your chance to get away from the earth when it >> is destroyed. So is _is_ a form of security :) > >Oops, time to read it again. It is obviously not the towel, that gets you away. No

Re: [Fwd: [SECURITY] [DSA-131-1] Apache chunk handling vulnerability]

2002-06-19 Thread Alan James
On Wed, 19 Jun 2002 13:46:14 +1000, Shane Machon <[EMAIL PROTECTED]> wrote: >Does anyone know if this effects potato's apache-ssl package also? Yes it does. >Is anyone able to confirm this? > The maintainer ? http://lists.debian.org/debian-apache/2002/debian-apache-200206/msg00024.html -- To

Re: Can you direct kernel messages?

2002-07-23 Thread Alan James
nf I've changed : *.=notice;*.=warn |/dev/xconsole to *.=notice;*.=warn |/dev/tty8 Does the trick for me. Alan. -- Alan James PGP: 0x66EB09FC -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: VPN between 2 dynamic ip's ?

2002-08-22 Thread Alan James
On Thu, 22 Aug 2002 11:05:23 +1000, Geoff Crompton <[EMAIL PROTECTED]> wrote: > I can't remember, but does FreeSwan support specifying connections > with domain names? It does, but it seems to learn the ip address at startup and not bother to look it up again before bringing up the connection

Re: IPSec VPN and Watchguard Firebox 2

2002-08-22 Thread Alan James
Apparently it is possible with Firebox 2 using ipsec manual: http://lists.freeswan.org/pipermail/users/2001-June/000566.html

Re: Using PAM with SFS

2002-09-30 Thread Alan James
On Mon, 30 Sep 2002 14:02:54 +0200, Massimiliano Mirra <[EMAIL PROTECTED]> wrote: >Yes, non-US source is there now (that was the reason apt-get source >libpam-sfs was not working in the first place). The problem with >libsfscrypt happens at configure time: the lib is there but configure >can't se