Re: i want to hide return path...

l in PHP and pass an "-f" switch to the sendmail invocation. That way, you can specify any sender address you like. HTH, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯

Re: Secure temporary fifo creation

code from the GNOME guidelines mentioned there, and just create your fifo instead of doing the open(). Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯

Re: Non-existent user able to log in??? hacked????

stall from scratch. Maybe also consider using a different ftpd... Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯

Re: Spam fights

dress in the From field. If I confirm, the person sending me the confirmation message will be delivered the spam. If more people did this, confirmation senders would notice that the system doesn't work. Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http:

Re: Advice needed, trying to find the vulnerable code on Debian webserver.

You could also try installing snoopy, which logs all commands executed by users to auth.log. Then look for unusual commands executed by user "www-data" if you suspect insecure PHP scripts etc. Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: |

Re: Need recomendations for https proxy that serves as a firewall proxy

hat case, squid is indeed the wrong solution. Maybe have a look at sslwrap+redir, or stunnel, which can run on any machine in your DMZ and forward incoming connections to the internal machine, adding SSL encryption to make it more secure. Cheers, Richard -- __ _ |_) /| Richard Atter

Re: Hacked - is it my turn? - interesting

On Tue, Feb 03, 2004 at 05:38:40AM +0100, Philipp Schulte wrote: > No, with REJECT they would show up as "closed". DROP produces "filtered". FWIW, you also need "--reject-with tcp-reset" to fool nmap. Richard -- __ _ |_) /| Richard Atterer

Re: Help! File permissions keep changing...

files. umask *is* the right solution (together with a sticky-bit dir). Set up a default umask which allows global read access and *let* users defeat it! If they know how to change their umask to something more restrictive, they're bound to know what they're doing! Cheers, Ri

Re: arpwatch and arp packets ...urgent

d that one host in your LAN is configured to the address 1.2.3.4. Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯

Re: Tripwire (clone) which would you prefer?

Also see this page for a useful comparison between AIDE and tripwire: http://www.fbunet.de/aide.shtml Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯

Re: Big VPN

big network, if I will > >choice freeswan (or other) without OE ? 100 VPN connections isn't /that/ much, I think FreeS/WAN or the 2.6.0 IPSec should be able to handle it. (Maybe ask the developers to ensure it does.) > >PS: Sorry, for my poor english, I'm not a native speaker. > me neither :) Ditto. :-) ü, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯

Re: Big VPN

//www.strongsec.com/freeswan/>, sections 3.1 and 3.2. HTH, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯

Re: Big VPN

rmance are a problem for you. Each of the 100 LANs would just route all 10.0.0.0/16 addresses to the central node, and only the central node would be trusted, so you don't have to mess with CAs etc... Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯

Re: mozilla - the forgotten package?

, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯

Re: name based virtual host and apache-ssl

x27;s even support for it in Apache 2... but do today's browsers support it? Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯

Re: Need recomendations for https proxy that serves as a firewall proxy

hat case, squid is indeed the wrong solution. Maybe have a look at sslwrap+redir, or stunnel, which can run on any machine in your DMZ and forward incoming connections to the internal machine, adding SSL encryption to make it more secure. Cheers, Richard -- __ _ |_) /| Richard Atter

Re: Hacked - is it my turn? - interesting

On Tue, Feb 03, 2004 at 05:38:40AM +0100, Philipp Schulte wrote: > No, with REJECT they would show up as "closed". DROP produces "filtered". FWIW, you also need "--reject-with tcp-reset" to fool nmap. Richard -- __ _ |_) /| Richard Atterer

Re: Help! File permissions keep changing...

files. umask *is* the right solution (together with a sticky-bit dir). Set up a default umask which allows global read access and *let* users defeat it! If they know how to change their umask to something more restrictive, they're bound to know what they're doing! Cheers, Ri

Re: arpwatch and arp packets ...urgent

d that one host in your LAN is configured to the address 1.2.3.4. Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Tripwire (clone) which would you prefer?

Also see this page for a useful comparison between AIDE and tripwire: http://www.fbunet.de/aide.shtml Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a su

Re: Big VPN

big network, if I will > >choice freeswan (or other) without OE ? 100 VPN connections isn't /that/ much, I think FreeS/WAN or the 2.6.0 IPSec should be able to handle it. (Maybe ask the developers to ensure it does.) > >PS: Sorry, for my poor english, I'm not a native speaker. > me neither :) Ditto. :-) ü, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Big VPN

//www.strongsec.com/freeswan/>, sections 3.1 and 3.2. HTH, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Big VPN

rmance are a problem for you. Each of the 100 LANs would just route all 10.0.0.0/16 addresses to the central node, and only the central node would be trusted, so you don't have to mess with CAs etc... Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key:

Re: mozilla - the forgotten package?

, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: name based virtual host and apache-ssl

x27;s even support for it in Apache 2... but do today's browsers support it? Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: i want to hide return path...

l in PHP and pass an "-f" switch to the sendmail invocation. That way, you can specify any sender address you like. HTH, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯ -- To UNSUBSCRIBE, email to [EMAIL PROT

Re: Secure temporary fifo creation

om the GNOME guidelines mentioned there, and just create your fifo instead of doing the open(). Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of &

Re: Non-existent user able to log in??? hacked????

stall from scratch. Maybe also consider using a different ftpd... Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Spam fights

dress in the From field. If I confirm, the person sending me the confirmation message will be delivered the spam. If more people did this, confirmation senders would notice that the system doesn't work. Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http:

Re: Advice needed, trying to find the vulnerable code on Debian webserver.

You could also try installing snoopy, which logs all commands executed by users to auth.log. Then look for unusual commands executed by user "www-data" if you suspect insecure PHP scripts etc. Cheers, Richard -- __ _ |_) /| Richard Atterer | GnuPG key: |

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

er via ARP poisoning, persuading them to try logging on on my machine, or just bribing them. :) But with my nitpicking-security-paranoia hat on, the solution is not ideal. > This is important because $s and $c get stored in the cookie. Why $s? Surely you'll only store $c in the cookie

Re: [OT] Is calculating an MD5 hash of a Rjindael encrypted block and it's key insecure?

On Thu, Aug 12, 2004 at 01:56:53PM +0200, Marcel Weber wrote: > Richard Atterer wrote: > >This strikes me as a weird solution. What's wrong with setting the > >cookie lifetime higher, so that people only need to log in e.g. once a > >day? Hmm, presumably the web applicat

Re: rm files owned by root?

file and no data can be written to the file. Only the superuser or a process possessing the CAP_LINUX_IMMUTABLE capability can set or clear this attribute. Is something similar also available for other filing systems? Cheers, Richard -- __ _ |_) /| Richard Atterer |