log_analysis configuration

2002-10-09 Thread Anne Carasik
find. Does anyone have any configurations that work well with log_analysis or have any tips on getting it to filter SSH, sudo, etc..? TIA, -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator

Re: Security on an old machine

2002-10-15 Thread Anne Carasik
;t need to stick it in a separate machine. Just get enough floppies and do the install over a network :) The only way this would be insecure is if someone broke into the machine you're installing from and you copied over bad files. -Anne -- .-"".__."``

Re: log_analysis configuration

2002-10-15 Thread Anne Carasik
on.. no matter what I put in the config file :( -Anne Mathias Palm grabbed a keyboard and typed... > On Thu, Oct 10, 2002 at 09:15:12AM -0700, Anne Carasik wrote: > > Hi Mathias, > > Hi Anne, > > I send this one to the list again, I hope this is ok. > > > > &g

Re: port 113

2002-12-02 Thread Anne Carasik
ntd daemon or comment out the entry in inetd.conf > > if you do it that way. > > > > Usually happens when you IRC, or some FTP sites check. Don't recall a > > vulnerability for it. > > > > Andy. > > > > > -- > To UNSUBSCRIBE, email to [EMA

Removing stupid HTTP methods from Apache

2002-12-03 Thread Anne Carasik
ething obvious. TIA, -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot caltech dot edu (O/ O) \-'

Re: SSH

2002-12-18 Thread Anne Carasik
ten to address these issues from the ground up. From what I remember, one of the biggest problems in SSH1 is that it uses weak authentication for the packets. There are other problems too, and the VUs issued by CERT only cover a portion of the issues. -Anne -- .-&q

Question about snort binaries..

2003-01-30 Thread Anne Carasik
ns or recommendations are also welcome. Thanks, -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot caltech dot edu (O/ O) \-' ` -=""

Re: Question about snort binaries..

2003-01-30 Thread Anne Carasik
Noah L. Meyerhans grabbed a keyboard and typed... > On Thu, Jan 30, 2003 at 09:35:05AM -0800, Anne Carasik wrote: > > Is there a way to define that I only want to use the unstable > > packages just related to snort or do I have to change my entire > > distribution to unstable?

Re: VPN: SSH or IPSec???

2003-04-16 Thread Anne Carasik
[EMAIL PROTECTED] > == > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Admin

Re: [despammed] Re: VPN: SSH or IPSec???

2003-04-16 Thread Anne Carasik
e and I are working on that), but I digress.. Here is a link on why PPP over SSH is a bad idea: http://sites.inka.de/sites/bigred/devel/tcp-tcp.html -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/)

Re: configure ssh-access

2003-07-07 Thread Anne Carasik
> SysAdmin at CAME (Center of Applied Molecular Engineering) > University of Salzburg, Jakob-Haringerstrasse 5, A-5020 Salzburg > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
> > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Adminis

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
91 1 > debug3: tty_parse_modes: 92 0 > debug3: tty_parse_modes: 93 0 > debug1: server_input_channel_req: channel 0 request shell reply 0 > debug1: session_by_channel: session 0 channel 0 > debug1: session_input_channel_req: session 0 req shell > debug1: PAM setting tty to "/dev/p

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
gt; Alexis Sukrieh (sukria), <[EMAIL PROTECTED]> > . homepage - [http://sukria.net] > . clef PGP - [http://sukria.net/print.php?c=privacy] > . mydynaweb - [http://www.mydynaweb.net] > __ > > > -- > To UNSUBSCRIBE, email

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
et remove --purge openssh and reinstall it after you get PAM working. > is the ssh package young in the unstable branch ? I haven't had any problems, but it is unstable after all ;) -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
no matter which group they're running. Why should it matter? Isn't this mailing list called debian-security? Not debian-security-stable. > Unstable is not just a name... Neither is testing nor stable :) -Anne -- .-"".__."``". Anne Carasik, System A

log_analysis configuration

2002-10-09 Thread Anne Carasik
I can find. Does anyone have any configurations that work well with log_analysis or have any tips on getting it to filter SSH, sudo, etc..? TIA, -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator

Re: Security on an old machine

2002-10-15 Thread Anne Carasik
x27;t need to stick it in a separate machine. Just get enough floppies and do the install over a network :) The only way this would be insecure is if someone broke into the machine you're installing from and you copied over bad files. -Anne -- .-"".__."``

Re: log_analysis configuration

2002-10-15 Thread Anne Carasik
on.. no matter what I put in the config file :( -Anne Mathias Palm grabbed a keyboard and typed... > On Thu, Oct 10, 2002 at 09:15:12AM -0700, Anne Carasik wrote: > > Hi Mathias, > > Hi Anne, > > I send this one to the list again, I hope this is ok. > > > > &g

Re: port 113

2002-12-02 Thread Anne Carasik
ntd daemon or comment out the entry in inetd.conf > > if you do it that way. > > > > Usually happens when you IRC, or some FTP sites check. Don't recall a > > vulnerability for it. > > > > Andy. > > > > > -- > To UNSUBSCRIBE, email to [EMA

Removing stupid HTTP methods from Apache

2002-12-03 Thread Anne Carasik
ething obvious. TIA, -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot caltech dot edu (O/ O) \-'

Re: SSH

2002-12-18 Thread Anne Carasik
ten to address these issues from the ground up. From what I remember, one of the biggest problems in SSH1 is that it uses weak authentication for the packets. There are other problems too, and the VUs issued by CERT only cover a portion of the issues. -Anne -- .-&q

Question about snort binaries..

2003-01-30 Thread Anne Carasik
ns or recommendations are also welcome. Thanks, -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot caltech dot edu (O/ O) \-' ` -=""

Re: Question about snort binaries..

2003-01-30 Thread Anne Carasik
Noah L. Meyerhans grabbed a keyboard and typed... > On Thu, Jan 30, 2003 at 09:35:05AM -0800, Anne Carasik wrote: > > Is there a way to define that I only want to use the unstable > > packages just related to snort or do I have to change my entire > > distribution to unstable?

Re: configure ssh-access

2003-07-07 Thread Anne Carasik
> SysAdmin at CAME (Center of Applied Molecular Engineering) > University of Salzburg, Jakob-Haringerstrasse 5, A-5020 Salzburg > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: failed ssh breakins on my exposed www box ..

2002-03-24 Thread Anne Carasik
ak in? None of my other services seem to have been probed, just > ssh. > > > >> > > > >>Thanks, > > > >>Steve > > > >> > > > >> > > > >>-- > > > >>To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Re: A question about some network services

2002-04-02 Thread Anne Carasik
are this services enabled by default and > for 'what' exactly do we need them ? Well, daytime spits out the time of day, time is for NTP, and I'm not sure what discard is used for. I usually turn off inetd completely. It helps makes things quieter on a

Re: A question about some network services

2002-04-04 Thread Anne Carasik
essus scan :) > Yes, this is good advice, and something that never occurs to most > people. Most common services these days run quite happily in standalone > mode, so there's often no reason to use inetd at all. Given most everything can run through SSH or SSL (at least TCP

Re: A question about some network services

2002-04-05 Thread Anne Carasik
el "carstein" Melewski| "One day, he said, in a taped segment > [EMAIL PROTECTED] | that suggested chemical interrogation, > mobile: 502 545 913 | everything had gone gray." > gpg: carstein.c.pl/carstein.txt

Re: does virus ELF.OSF.8759 affect debian?

2002-04-10 Thread Anne Carasik
ED]"); *sigh* -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL PROTECTED] (O/ O) \-' ` -="""=.', Center for Advanced Computing Research ~`~~

Re: does virus ELF.OSF.8759 affect debian?

2002-04-10 Thread Anne Carasik
Debian does this when you do an apt-get, I believe. -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL PROTECTED] (O/ O) \-

Re: Bastian Gl??er/PD/Kreditwerk ist au?er Haus.

2002-04-12 Thread Anne Carasik
> > > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > > > > > > > > > > > > > -- > To UNSUBSCRIBE, email to

Re: does virus ELF.OSF.8759 affect debian?

2002-04-17 Thread Anne Carasik
On Wed, Apr 17, 2002 at 12:13:46PM +0300, Jussi Ekholm wrote: > Anne Carasik <[EMAIL PROTECTED]> wrote: > > Compile from source is a good idea too. It's amazing what you > > can find in the source. I found a couple of stupid Trojans > > that way. > >

Re: does virus ELF.OSF.8759 affect debian?

2002-04-17 Thread Anne Carasik
); > Yeh, and it's buggy too > Take a close look at what really happens. I'm sure it is. [EMAIL PROTECTED] doesn't exist. ;) Seriously, I know it is. The other thing is, I use shadow most of the time. Still, the username information is never a good thing to share. -

Re: Guarding against evil software installation scripts?

2002-04-18 Thread Anne Carasik
chaos is > prevented by something more substantial than a social convention. > > I have to admit that the social convention is working very well at the > moment, though. > > -- > Tim Freeman > [EMAIL PROTECTED] > > > -- > To UNSUBSCRIB

Re: Lost root password!!

2002-04-23 Thread Anne Carasik
lid entries or gotten corrupted? > Is passwd in Woody broken? How can I fix my broken root password without harming my >system? I hope not :( -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL

Re: disable RPC

2002-04-24 Thread Anne Carasik
ion: 6.0.332 / Virus Database: 186 - Release Date: 3/6/02 > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, Sy

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
-+ > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administr

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
think (don't quote me on this) WinXP have builtin IPSec support. -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL PROTECTED] (O/ O) \-' ` -="""=.', Center fo

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
tion, but is content, > for now, to only allow himself and one other to even have accounts on > the box with the cleartext passwds) Ugh.. I'd never be content with cleartext passwords, especially given how many security solutions are around today. -Anne -

Re: Safe to use Mindterm?

2002-05-13 Thread Anne Carasik
! > > Preben > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (

Re: Safe to use Mindterm?

2002-05-13 Thread Anne Carasik
ct of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL PROTECTED] (O/ O) \-' ` -="""=.', Center for Advanced Comp

Re: force to use SSH2

2002-05-13 Thread Anne Carasik
h1? > > TIA > > -- > Eduardo Gargiulo > ^ejg(-.*)?@ar\.homelinux\.org$ -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL PROTECTED] (O/ O) \-&#

Re: SSH

2002-05-16 Thread Anne Carasik
; > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...'

Re: failed ssh breakins on my exposed www box ..

2002-03-24 Thread Anne Carasik
y other services seem to have been probed, just > ssh. > > > >> > > > >>Thanks, > > > >>Steve > > > >> > > > >> > > > >>-- > > > >>To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > > >>wi

Re: A question about some network services

2002-04-02 Thread Anne Carasik
are this services enabled by default and > for 'what' exactly do we need them ? Well, daytime spits out the time of day, time is for NTP, and I'm not sure what discard is used for. I usually turn off inetd completely. It helps makes things quieter on a

Re: A question about some network services

2002-04-04 Thread Anne Carasik
essus scan :) > Yes, this is good advice, and something that never occurs to most > people. Most common services these days run quite happily in standalone > mode, so there's often no reason to use inetd at all. Given most everything can run through SSH or SSL (at least TCP

Re: A question about some network services

2002-04-05 Thread Anne Carasik
el "carstein" Melewski| "One day, he said, in a taped segment > [EMAIL PROTECTED] | that suggested chemical interrogation, > mobile: 502 545 913 | everything had gone gray." > gpg: carstein.c.pl/carstein.txt

Re: does virus ELF.OSF.8759 affect debian?

2002-04-10 Thread Anne Carasik
ED]"); *sigh* -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL PROTECTED] (O/ O) \-' ` -="""=.', Center for Advanced Computing Research ~`~

Re: does virus ELF.OSF.8759 affect debian?

2002-04-10 Thread Anne Carasik
Debian does this when you do an apt-get, I believe. -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL PROTECTED] (O/ O) \-

Re: Bastian Gl??er/PD/Kreditwerk ist au?er Haus.

2002-04-12 Thread Anne Carasik
gt; > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > > > > > > > > > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of &q

Re: does virus ELF.OSF.8759 affect debian?

2002-04-17 Thread Anne Carasik
On Wed, Apr 17, 2002 at 12:13:46PM +0300, Jussi Ekholm wrote: > Anne Carasik <[EMAIL PROTECTED]> wrote: > > Compile from source is a good idea too. It's amazing what you > > can find in the source. I found a couple of stupid Trojans > > that way. > >

Re: does virus ELF.OSF.8759 affect debian?

2002-04-17 Thread Anne Carasik
> Yeh, and it's buggy too > Take a close look at what really happens. I'm sure it is. [EMAIL PROTECTED] doesn't exist. ;) Seriously, I know it is. The other thing is, I use shadow most of the time. Still, the username information is never a good thing to share. -

Re: Guarding against evil software installation scripts?

2002-04-18 Thread Anne Carasik
chaos is > prevented by something more substantial than a social convention. > > I have to admit that the social convention is working very well at the > moment, though. > > -- > Tim Freeman > [EMAIL PROTECTED] > > > -- > To UNSUBSCRIB

Re: Lost root password!!

2002-04-23 Thread Anne Carasik
ve invalid entries or gotten corrupted? > Is passwd in Woody broken? How can I fix my broken root password without > harming my system? I hope not :( -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``'

Re: disable RPC

2002-04-24 Thread Anne Carasik
: 6.0.332 / Virus Database: 186 - Release Date: 3/6/02 > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, Sy

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
-+ > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administr

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
think (don't quote me on this) WinXP have builtin IPSec support. -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL PROTECTED] (O/ O) \-' ` -="""=.', Center for Advan

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
tion, but is content, > for now, to only allow himself and one other to even have accounts on > the box with the cleartext passwds) Ugh.. I'd never be content with cleartext passwords, especially given how many security solutions are around today. -Anne -

Re: Safe to use Mindterm?

2002-05-13 Thread Anne Carasik
> Preben > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (

Re: Safe to use Mindterm?

2002-05-13 Thread Anne Carasik
t;unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL PROTECTED] (O/ O) \-' ` -="""=.', Center for Advanced Com

Re: force to use SSH2

2002-05-13 Thread Anne Carasik
h1? > > TIA > > -- > Eduardo Gargiulo > ^ejg(-.*)[EMAIL PROTECTED] -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' [EMAIL PROTECTED] (O/ O) \-&#

Re: SSH

2002-05-16 Thread Anne Carasik
; > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...'

Re: PGP Keyserver

2002-06-06 Thread Anne Carasik
s, > > Phil > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/)

Re: SSH2 Encryption

2002-06-10 Thread Anne Carasik
se ciphers actually available in my SSH package? Yep, as long as you have OpenSSL support :) > 2) The SHA1-96 hash should be better than MD5-96, correct? Correct. > 3) Any reason you *wouldn't* want to use compression in SSH? Yes, if you're going over a high speed line, no reaso

Re: SSH2 Encryption

2002-06-10 Thread Anne Carasik
This one time, Jeff Bonner wrote: > On Mon 10 Jun 2002 13:23, Anne Carasik wrote: > > This one time, Jeff Bonner wrote: > As in, "This one time, at band camp..."? >;) Also, sorry about > the wretched linebreaks, folks. Good ol Outlook. Yes, exactly. :) I got tire

Re: SSH2 Encryption

2002-06-17 Thread Anne Carasik
This one time, Loic Le Loarer wrote: > Le Monday 10 June 2002 ? 10:23:23 -0700, Anne Carasik a ?crit: > > Check the man page for what ciphers SSH2 accepts. I usually leave it on > > Blowfish because it's secure and it's the fastest cipher. AES sucks > > because it

Re: [Fwd: ISS Advisory: OpenSSH Remote Challenge Vulnerability]

2002-06-26 Thread Anne Carasik
gt; > X-Force PGP Key available on MIT's PGP key server and PGP.com's key > server, as well as at http://www.iss.net/security_center/sensitive.php > > Please send suggestions, updates, and comments to: X-Force > > -BEGIN PGP SIGNATURE- > Version: 2.6.2 >

Re: [Fwd: ISS Advisory: OpenSSH Remote Challenge Vulnerability]

2002-06-26 Thread Anne Carasik
my concerns? *raises hand* Both the Apache and OpenSSH announcements were done poorly, without any reasonable thought given to the user community. They should be taken out and shot ;-) (IMHO). -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--.

Re: YASP (Yet Another SSH Problem)

2002-06-28 Thread Anne Carasik
(Apache, Bind, mod_ssl, Proftpd...) > Any idea what might have happend? > > thanks a lot, > Andreas > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Tr

Re: SSH RSA Authentication

2002-06-29 Thread Anne Carasik
- > Version: GnuPG v1.0.7 (GNU/Linux) > > iD8DBQE9HTF2AtEARxQQCB4RAnoVAJ0TGFDzuAMxDuUhgaJ1ewMb+ZszkACgv583 > sNKWyjqZOkxho+qUm7Lc4NY= > =Mw0P > -END PGP SIGNATURE- > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] &g

More SSH Fun (X11 forwarding)

2002-07-01 Thread Anne Carasik
nothing useful :( -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot caltech dot edu (O/ O) \-'

Re: More SSH Fun (X11 forwarding)

2002-07-01 Thread Anne Carasik
This one time, Norbert Preining wrote: > On Mon, 01 Jul 2002, Anne Carasik wrote: > > Let me know if you have any ideas. Running the client and server in both > > verbose and debugging modes provides me with nothing useful :( > Did you set > X11Forwarding yes > in bo

Re: More SSH Fun (X11 forwarding)

2002-07-01 Thread Anne Carasik
This one time, Noah L. Meyerhans wrote: > On Mon, Jul 01, 2002 at 01:48:31PM -0700, Anne Carasik wrote: > > So, if I force X11 with the -X (even though my ssh_config on > > the client is set to X11Forwarding yes), I get this: > Get what? Uh, the output that I included. > Yo

Re: More SSH Fun (X11 forwarding)

2002-07-01 Thread Anne Carasik
said to check the ssh_config on the client and the server... not just the server. Anyway, let me know if you have any ideas. -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot caltech dot edu (O/ O

Re: More SSH Fun (X11 forwarding)

2002-07-01 Thread Anne Carasik
Clarifying myself.. sorry :) So, if I force X11 with the -X (even though my ssh_config on the client is set to X11Forwarding yes), I get the same as if I don't run ssh with the -X option. -Anne -- .-"".__."``". Anne Cara

Re: More SSH Fun (X11 forwarding)

2002-07-01 Thread Anne Carasik
18F8 BF17 4E3E 7197 B014 014D 64C1 > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Car

Re: More SSH Fun (X11 forwarding)

2002-07-01 Thread Anne Carasik
Okay, having X11 listening for TCP connections with xhost + enabled didn't help. I'm open to other suggestions. :) -Anne This one time, Anne Carasik wrote: > Hi David, > > Nope, that didn't help. It may be because X11 isn't listening on > port 6000, but I reall

Re: More SSH Fun (X11 forwarding)

2002-07-01 Thread Anne Carasik
Hi Vineet, It doesn't matter--it's still does not work no matter what I do to my X server. Anyway, I turned off xhost and X11 listening a while ago. -Anne This one time, Vineet Kumar wrote: > * Anne Carasik ([EMAIL PROTECTED]) [020701 16:01]: > > This one time, David Cap

Re: More SSH Fun (X11 forwarding)

2002-07-01 Thread Anne Carasik
ough.) > > good times, > Vineet > -- > http://www.doorstop.net/ > -- > "Computer Science is no more about computers > than astronomy is about telescopes." -E.W. Dijkstra -- .-"".__."``". Anne Carasik, System Admi

Re: error msg

2002-07-29 Thread Anne Carasik
0\220\220\220\220\220\220\220\220\220\220\220\220\220\220\220\2 > 20\220\220\220\2 > 20\220\220\220\220\220\220\220\220\220 > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL

Re: Telnet information.

2002-07-31 Thread Anne Carasik
o allow only the version > you want. > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator

Re: CERT advisories

2002-07-31 Thread Anne Carasik
2 $ uname -a Linux swamp 2.4.17 #1 Fri Feb 22 11:08:36 PST 2002 i686 unknown unknown GNU/Linux I'm running Woody on my boxes. -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot calte

Re: Telnet information.

2002-07-31 Thread Anne Carasik
at all. There's no debating that. The article doesn't refer to that--it refers to basic functionality of Secure Shell. -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot caltech do

Re: encrypting/decrypting partitions on the fly?

2002-08-08 Thread Anne Carasik
"unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot caltech

Re: Pgp/GPG MiM chosen ciphertext attack

2002-08-15 Thread Anne Carasik
> > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot

Re: Converting Users from Solaris to (Debian-)Linux

2002-08-30 Thread Anne Carasik
> > you use MD5 password on your linuxbox. > you should downgrade your crypt to normal hash password Isn't this a security list? :) Why would anyone downgrade a hash? All my hashes are MD5 based, and I haven't had a problem copying password hashes out of Solaris. -Anne --

Re: Converting Users from Solaris to (Debian-)Linux

2002-08-30 Thread Anne Carasik
n.. *sigh* -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...' (/) (/) ``' gator at cacr dot caltech dot edu (O/ O) \-' ` -="""=.', Center for Advanced Computing Research ~`~~~

Re: "suspicious" apache log entries

2002-09-10 Thread Anne Carasik
UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Administrator .-.--.

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
> > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > -- .-"".__."``". Anne Carasik, System Adminis

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
91 1 > debug3: tty_parse_modes: 92 0 > debug3: tty_parse_modes: 93 0 > debug1: server_input_channel_req: channel 0 request shell reply 0 > debug1: session_by_channel: session 0 channel 0 > debug1: session_input_channel_req: session 0 req shell > debug1: PAM setting tty to "/

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
gt; Alexis Sukrieh (sukria), <[EMAIL PROTECTED]> > . homepage - [http://sukria.net] > . clef PGP - [http://sukria.net/print.php?c=privacy] > . mydynaweb - [http://www.mydynaweb.net] > __ > > > -- > To UNSUBSCRIBE, email

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
et remove --purge openssh and reinstall it after you get PAM working. > is the ssh package young in the unstable branch ? I haven't had any problems, but it is unstable after all ;) -Anne -- .-"".__."``". Anne Carasik, System Administrator .-.--. _...

Re: Probem with openssh and pam modules

2002-10-02 Thread Anne Carasik
no matter which group they're running. Why should it matter? Isn't this mailing list called debian-security? Not debian-security-stable. > Unstable is not just a name... Neither is testing nor stable :) -Anne -- .-"".__."``". Anne Carasik, System A