Re: Recent minor vulnerabilities in Apache: status in woody?

2004-05-27 Thread Rick Moen
t. (/me waves to the Web Guys.) [1] Which I'd somehow missed until now. Thus my point. -- Cheers, No trees were destroyed in the sending of this message. Rick Moen We do concede, though, that a large number of electrons [EMAIL PROTECTED] were terribly inconvenienced.

Re: Recent minor vulnerabilities in Apache: status in woody?

2004-05-27 Thread Rick Moen
Quoting Luk Claes ([EMAIL PROTECTED]): > Well, it is linked from the www.d-o/security page (at the bottom click > on woody). Ah, mea culpa. I'd somehow managed to miss that.

Re: Unusual spam recently - hummm

2004-06-03 Thread Rick Moen
Quoting s. keeling ([EMAIL PROTECTED]): > However, I _would_ like to STOP it from being delivered at all, as > defined by simple rules like those above. As far as I can tell, this > must be done in the SMTP negotiation phase. Mostly. > What's it going to cost my ISP to implement this? Is it fe

Re: Unusual spam recently - hummm

2004-06-03 Thread Rick Moen
ir head on > backwards and thinks blocking port 25 outbound will reduce spam abuse. http://spf.pobox.com/srs.html http://www.linuxjournal.com/article.php?sid=7328 (Tell your ISP: "Adapt or die." ;-> ) -- Cheers, find / -user your -name base -print | xargs chown us:us Rick Moen [EMAIL PROTECTED]

Re: Unusual spam recently - hummm

2004-06-03 Thread Rick Moen
ot;die". If death becomes you, enjoy! > For a big organization with thousands of users, what's Spam is not > really all that easy to quantify. And another fine, ruddy herring! Delicious, thanks. -- Cheers, Rick Moen Age, baro, fac ut gaudeam. [EMAIL PROTECTED]

Re: Unusual spam recently - hummm - postprocess

2004-06-03 Thread Rick Moen
lready accepted the mail and handed it off to an LDA or MDA -- so the opportunity is lost. -- Cheers, Rick MoenBu^so^stopu min per kulero. [EMAIL PROTECTED]

Re: Unusual spam recently - hummm

2004-06-03 Thread Rick Moen
dark overnight because so many > admins were still running Sendmail versions that had been obsoleted > years before. > > Ah, those were the days. :-P Yes, indeed! http://linuxmafia.com/pub/humour/500-mile-e-mail -- Cheers,Remember: The day after tomorrow is the third day Rick Moen of the rest of your life. [EMAIL PROTECTED]

Re: Unusual spam recently - hummm - postprocess

2004-06-03 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > Yeah, big difference. If the spam is going through a relay, the relay > will send the same bounce and the same person will get the bounce > message. Oh, oh! Gee, I guess that relay should have rejected the spam instead of relaying it, right? Then,

Re: Unusual spam recently - hummm - postprocess

2004-06-03 Thread Rick Moen
Quoting Blu ([EMAIL PROTECTED]): > Are you suggesting then, that we should not relay mail at all?, not even > to/from our customers? I'm quite non-plussed at this question, since it seems to suggest that you weren't following the thread. Earlier, I mentioned (to summarise and review) that I take

Re: Unusual spam recently - hummm - postprocess

2004-06-03 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > I'm sure the guy who got joe jobbed is happy that you can point out the > source of his misforture. Must be real comforting and all. Was there a particular part of the immediately preceding reference to SPF that you didn't get, or was it the concept as

Re: Unusual spam recently - hummm - postprocess

2004-06-03 Thread Rick Moen
Quoting Blu ([EMAIL PROTECTED]): > If my relay server (not open, but relay for customers) has no means to > verify recipients, what to do when the destination server rejects that > mail already accepted by my server?. Bounce. (Implicit assumption that you have no option but to accept forged-send

Re: Unusual spam recently - hummm

2004-06-03 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > On Thu, Jun 03, 2004 at 04:24:35PM -0700, Rick Moen wrote: > >One can pretend that the matter's open for debate, but that would be a > >waste of time: It's happening. > > Sure it is. How do you manage to sleep, fixing

Re: Unusual spam recently - hummm - postprocess

2004-06-03 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > The end result is the same in a lot of cases. I'm sorry, what part of "fixing local problems first, and understanding the scope of one's responsibility" are you not quite getting? > The point is that you shouldn't take a holier-than-thou attitude abou

Re: Unusual spam recently - hummm - postprocess

2004-06-03 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > On Thu, Jun 03, 2004 at 05:32:17PM -0700, Rick Moen wrote: > >Was there a particular part of the immediately preceding reference to > >SPF that you didn't get, or was it the concept as a whole? > > I get the concept of vaporw

Re: Unusual spam recently - hummm - postprocess

2004-06-04 Thread Rick Moen
Quoting Bernd Eckenfels ([EMAIL PROTECTED]): > If you relay mail from your customers, you have to deliver them their > bounces if they spam. Well, that's the trick, isn't it? If they're sending spam (either deliberately or -- much more likely of late -- because customer hosts have been zombifi

Re: Unusual spam recently - hummm - postprocess

2004-06-04 Thread Rick Moen
Quoting Phillip Hofmeister ([EMAIL PROTECTED]): > While I am sure finding out whose is bigger is exciting to you. I > feel comfortable in speaking for the rest of the list when I say this > thread has become WAY OT. I'm surprised that an allegation that SPF -- highly relevant to SMTP security

Re: Unusual spam recently - hummm - postprocess

2004-06-04 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > Well, it is vaporware. Until it's used by a noticable percentage of > hosts, it's irrelevant. (1) Where I come from, the term "vapourware" means software touted far in advance of its availability. As noted, such is most emphatically not the case, here

Re: Unusual spam recently - hummm - postprocess

2004-06-04 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > yeah, aol's pleased as punch about it. they also don't have much > interest in customers sending email with @aol from off their own system > unless they use an obnoxious webmail client. same goes for hotmail. > anyone with users who isn't aol and whose

Re: Unusual spam recently - hummm - postprocess

2004-06-04 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > There's a line between advocacy and zealotry. Still stuck in name-calling mode? Pity. > It's fine for a home user to implement it quickly but it's not so easy > for a lot of large organizations that currently allow people to send > mail from offsite

Re: Unusual spam recently - hummm - postprocess

2004-06-04 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > What name calling? There's a difference. Cute. Ah, well. > You're assuming unrestricted outbound connections. Might even be true in > your environment. It's true that there will be interim problems with corporate firewalls (etc.) closing off outb

Re: Unusual spam recently - hummm - postprocess

2004-06-04 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > No, I'm not. You _weren't_ ignoring the point I just made and changing the subject? Then, some villain apparently snuck into your MTA and substituted different text that did, for the original message you tried to send. You should sue! ;-> > I'm poin

Re: Unusual spam recently - hummm - postprocess

2004-06-07 Thread Rick Moen
Quoting Michael Stone ([EMAIL PROTECTED]): > You're talking about SPF. That's a concept, not an implementation. Implementation details have already been posted. > Effective use of SPF requires widespread adoption. Until/unless > widespread adoption happens the promises of SPF are vaporware. Re

Re: Spam fights

2004-06-11 Thread Rick Moen
Quoting Russell Coker ([EMAIL PROTECTED]): > Some of the anti-spam people are very enthusiastic about their work. I > wouldn't be surprised if someone writes a bot to deal with CR systems. A bot to detect C-R queries and add them to the refused-mail ACL list would be most useful. ;->

Re: Light weight IDSes and then some

2005-07-15 Thread Rick Moen
Quoting George P Boutwell ([EMAIL PROTECTED]): > The Security Debian How-To mentions Tripwire. Looking at AIDE and > Tripwire in the debian packages repositories it's hard to tell the > difference. I'm sure they both do the job, anyone with experience > with both these packages can describe some

Re: Is there a known rpc.statd buffer overflow?

2005-11-09 Thread Rick Moen
ious. That would probably be Ramen, a January 2001 worm that attacks an rpc.statd bug fixed in summer 2000, plus attacking input validation bugs in wu-ftpd v. 2.6 and earlier and LPRng versions earlier than Aug. 2000. -- Cheers, Rick Moen Support your local medical examine

Re: chkrootkit has me worried!

2005-11-29 Thread Rick Moen
nly run required services - and check them closely - and don't > rely on your distro to incorporate every single security patch required for > your server. Right, and remember that the health inspectors can't guarantee every oyster -- and that fugu from a reputable restaurant can stil

Re: chkrootkit has me worried!

2005-11-29 Thread Rick Moen
Quoting Geoff Crompton ([EMAIL PROTECTED]): > The most recent vulnerability that I was aware of in Awstats can still > work even in static mode. http://www.securityfocus.com/bid/14525. The > referrer in the log file is not sanity checked. Hmm. I note: "It should be noted this vulnerability is o

Re: chkrootkit has me worried!

2005-11-30 Thread Rick Moen
and on a dedicated filesystem, on the backup target host.) Details: "SSH Public-key Process" on http://linuxmafia.com/kb/Security/ -- Cheers, Rick Moen "Anger makes dull men witty, but it keeps them poor." [EMAIL PROTECTED]

Re: closing unwanted ports - and what is 1720/tcp filtered H.323/Q.931

2005-12-15 Thread Rick Moen
Quoting kevin bailey ([EMAIL PROTECTED]): > } 21/tcp open ftp > > Off. Security hole if passwords are sent, they aren't encrypted. Even in deployments where the only login supported is "anonymous"? ;-> P.S.: http://linuxmafia.com/faq/Network_Other/ftp-justification.html -- To UNSUBSCR

Re: avahi-daemon

2006-02-22 Thread Rick Moen
Quoting aliban ([EMAIL PROTECTED]): > MS Blaster infected many million system within seconds... Relying on the vulnerable MSDE embedded SQL database engine being embedded into a large number of consumer software products, and irresponsibly left bound to all network ports, not just loopback. Don'

Re: avahi-daemon

2006-02-23 Thread Rick Moen
ogies for my misrecollection. -- Cheers, Rick Moen "Anger makes dull men witty, but it keeps them poor." [EMAIL PROTECTED] -- Elizabeth Tudor -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubs

Re: secure installation

2007-08-16 Thread Rick Moen
al extremities with those, without any idea what they're doing, is a leading cause of networking problems. -- Cheers, English is essentially Plattdeutsch as spoken Rick Moenby a Frisian pretending to be French. [EMAIL PROTECTED] -- Andreas Johansson, http://c

Re: secure installation

2007-08-17 Thread Rick Moen
ian-relevant way. All hail to the Debian Project's sysadmins, who in November 2003 showed everyone how to do it right: http://linuxgazette.net/issue98/moen.html -- Cheers,English is essentially a text parser's way of getting Rick Moen faster processors built. [E

Re: secure installation

2007-08-17 Thread Rick Moen
Quoting Russ Allbery ([EMAIL PROTECTED]): > Yup. IDS systems are wonderful. But they do require discipline. Indeed. I'd still like to see a trial project, to see _if_ a default IDS setup (Samhain, AIDE, or Prelude-IDS) can be made to be generally useful. (Yeah, I know: "Sooner if you help."

Re: secure installation

2007-08-18 Thread Rick Moen
Quoting Michelle Konzack ([EMAIL PROTECTED]): > How can this happen? > I was never hacked since 1999-03... One way: "Break-in without Remote Exploit" on http://linuxmafia.com/kb/Security (***cough*** shells.sourceforge.net ***cough***) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subj

Re: ping22: can not kill this process

2008-01-03 Thread Rick Moen
Quoting Luis Mondesi ([EMAIL PROTECTED]): > It's time to tell PHP (via php.ini) not to allow any of those > functions that allow executing stuff from the system (system, > passthru, whatever). Amen to that. Good starting point: disable_functions = system, exec, passthru, popen, escapeshellcmd,

Re: ping22: can not kill this process

2008-01-04 Thread Rick Moen
Quoting Javier Fernandez-Sanguino ([EMAIL PROTECTED]): > Even better: /usr/share/doc/php5-common/examples/php.ini-paranoid > (it includes some more functions in that definition) Excellent. Amended to: disable_functions = dl, phpinfo, system, mail, include, shell_exec, exec, escapeshellarg, esc

Re: ping22: can not kill this process

2008-01-04 Thread Rick Moen
Quoting Raphael Geissert ([EMAIL PROTECTED]): > include()? I don't want to imagine how many scripts will break. Good catch. (It was very late in my time zone. I need to review that list.) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL P

Re: ping22: can not kill this process

2008-01-05 Thread Rick Moen
= On error_log = syslog display_errors = Off -- Cheers, I have /usr/sbin/coffee mounted from /dev/mug right now, Rick Moen and you can't have it. Oh no, I just tried to seek past [EMAIL PROTECTED] end-of-beverage. *sigh* -- Graham Reed, in The Monastery -- T

Re: oCERT

2008-04-12 Thread Rick Moen
Quoting Yves-Alexis Perez ([EMAIL PROTECTED]): > But CC-BY-NC is not considered > DFSG-free so it may be an issue (see > http://people.debian.org/~evan/ccsummary.html) It is considered DFSG-non-free by some number of (not identified) members of the public mailing list debian-legal, as summarised

Re: Microsoft-IIS/6.0 serves up Debian... WTF!

2008-06-08 Thread Rick Moen
t /etc/{issue|issue.net} to make the system claim to be a Super Nintendo, just for laughs. -- Cheers, "Entia non sunt multiplicanta praeter necessitatem." Rick Moen -- William of Ockham (attr.) [EMAIL PROTECTED] -- To UNSUBSCRIBE,

Re: [SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-07-08 Thread Rick Moen
Quoting Josip Rodin ([EMAIL PROTECTED]): > Why is this phrased in a way that it prefers BIND as a recursive resolver, > when that same software was *only just* patched to be acceptable for the > same purpose? Although I'm not much of a BIND9 fan -- it remains RAM-hogging, slow, overfeatured, and

Re: [SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-07-09 Thread Rick Moen
Quoting Wolfgang Jeltsch ([EMAIL PROTECTED]): > Am Mittwoch, 9. Juli 2008 20:51 schrieb Noah Meyerhans: > > > > I suggest that you install bind9, > > How do I tell bind9 what DNS servers to ask? Is this also done by > resolv.conf? If yes, named would ask itself if 127.0.0.1 is the first entry.

Re: [SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-07-09 Thread Rick Moen
Quoting Hubert Chathi ([EMAIL PROTECTED]): > Hmm... libnss-lwres is orphaned (#475089), and is uninstallable on sid. I'll bet the version of the missing dependency package (liblwres30) in lenny would suffice. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Troubl

Re: [SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-07-10 Thread Rick Moen
Quoting Hubert Chathi ([EMAIL PROTECTED]): > I'm really more concerned about the fact that it's orphaned. And it > appears to be unmaintained upstream (last release in 2001, and > upstream moved it from the "releases" directory to the "old-releases" > directory). Point taken. I assume you are r

Re: [SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-07-10 Thread Rick Moen
Quoting Florian Weimer ([EMAIL PROTECTED]): > lwresd is far less-tested than BIND, and tweaking the NSS configuration > is something few people like to do. Incidentally, the documentation for nss_lwres suggests the following entry in /etc/nsswitch.conf, for Linux systems installing lwresd: "hosts

Re: [SECURITY] [DSA 1615-1] New xulrunner packages fix several vulnerabilities

2008-07-27 Thread Rick Moen
Quoting Richard Hartmann ([EMAIL PROTECTED]): > http://www.unicom.com/pw/reply-to-harmful.html vs > http://www.metasystema.net/essays/reply-to.mhtml ...was obsoleted by RFCs 2822 and 2369: Munging lost. http://linuxmafia.com/~rick/faq/index.php?page=netiquette#replyto -- To UNSUBSCRIBE, email

Re: Tinydns - cache poisoning?

2008-07-30 Thread Rick Moen
Quoting Stephen Vaughan ([EMAIL PROTECTED]): > Does anyone know if TinyDNS is vulnerable to the dns cache poisoning > exploit? The Kaminsky-publicised attack method applies _only_ to caching recursive-resolver nameservers: tinydns is an authoritative-only DNS daemon, not a recursive resolver.

Re: [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-08-11 Thread Rick Moen
Quoting Hideki Yamane ([EMAIL PROTECTED]): > I want to know that, too. > Should ALL systems (servers or desktops/laptops) need to be installed > and configure bind9 (or something) package, or need to wait for update? My own preference is, indeed, to have one of the following as a local recursi

Re: [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-08-13 Thread Rick Moen
Quoting Vincent Deffontaines ([EMAIL PROTECTED]): > And the Linux kernel (Netfilter) implements NAT source port randomization > since 2.6.21, which can make it a conveninent way to protect your natted > hosts without any patching. > > See http://software.inl.fr/trac/wiki/contribs/RandomSkype for

Re: [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-08-13 Thread Rick Moen
Quoting Vincent Deffontaines ([EMAIL PROTECTED]): > No I confirm NAT source port randomization was included in 2.6.21 as far > as Netfilter NAT is concerned. > Commit is : > http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=41f4689a7c8cd76b77864461b3c58fde8f322b2c > > Th

Re: "Ian Murdock" Death

2016-07-16 Thread Rick Moen
well... > seriously? The Internet famously contains people who, um, think different. Have a look at this gentleman's Twitter stream, for context. https://twitter.com/cvaillance -- Cheers,"Why struggle to open a door between us, Rick Moen

Re: DSA for CVE-2016-5696 (off-path blind TCP session attack)

2016-08-12 Thread Rick Moen
x/kernel/git/torvalds/linux.git/commit/?id=083ae308280d13d187512b9babe3454342a7987e) toward that end has been merged as well. The fix has not made it to the stable kernels yet [...]. -- Cheers, Grossman's Law: "In time of crisis, people do not rise to Rick Moen the occasion. They fall

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
.20/doc/html/spec_38.html Sendmail http://www.sendmail.org/~ca/email/starttls.html Courier-MTA http://www.courier-mta.org/ -- Cheers,Emacs is a good operating system, but I prefer Linux. Rick Moen [EMAIL PROTECTED]

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
omparisons qmail/postfix (modular) and exim/sendmail/courierd (monolithic)? My attempt at relatively dispassionate MTA-comparison notes: http://linuxmafia.com/~rick/linux-info/mtas -- Cheers, Rick Moen FORTH heart if honk then. [EMAIL PROTECTED]

Re: SMTP and POP3 with ssl + login/password

2002-10-10 Thread Rick Moen
Quoting Scott Moynes ([EMAIL PROTECTED]): > Thanks, that was enlightening. Yr. very welcome. I count it a major success when I can add clarity to a traditionally flame-shrouded subject. ;->

Re: Vulnerabilities found by Nessus

2002-10-15 Thread Rick Moen
re aren't DSAs for its contents, the security.debian.org host does include a branch for "testing", and that branch does furnish packages on occasion. What's the deal? -- Cheers, "That article and its poster have been cancelled." Rick Moen

Re: DHCP

2002-10-28 Thread Rick Moen
ding the ifconfig manpage. Acquiring one to "borrow" requires nothing more than unning tcpdump or equivalent. -- Cheers, Before enlightenment, caffeine. Rick Moen After enlightenment, caffeine. [EMAIL PROTECTED]

Re: DHCP

2002-10-28 Thread Rick Moen
ootkit 1. That's not what a rootkit does. 2. The sophistication required to read an ifconfig manpage is mighty low. -- Cheers, "Learning Java has been a slow and tortuous process for me. Every Rick Moen few minutes, I start screaming 'No, you fools!' and have to go [EMAIL PROTECTED] read something from _Structure and Interpretation of Computer Programs_ to de-stress." -- The Cube, www.forum3000.org

Re: DHCP - rootkit

2002-10-28 Thread Rick Moen
. It's something the intruder uses _after_ breaking in. -- Cheers, "Learning Java has been a slow and tortuous process for me. Every Rick Moen few minutes, I start screaming 'No, you fools!' and have to go [EMAIL PROTECTED] read something from _Structure and In

Re: DHCP

2002-10-28 Thread Rick Moen
an agent of Satan, Rick Moenbut my duties are largely ceremonial. [EMAIL PROTECTED]

Re: XFree86 4.2 bug in Debian Testing

2002-11-09 Thread Rick Moen
s just as before as the normal user. It's a little simpler to do: $ ssh -X [EMAIL PROTECTED] -- Cheers, Right to keep and bear Rick Moen Haiku shall not be abridged [EMAIL PROTECTED] Or denied. So there.

Re: spam

2002-11-10 Thread Rick Moen
- Cheers, Live Faust, die Jung. Rick Moen [EMAIL PROTECTED]

Re: [SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities

2002-11-14 Thread Rick Moen
s have been made. Others will be blamed. Rick Moen [EMAIL PROTECTED]

Re: unsubscribe

2002-11-17 Thread Rick Moen
e mailing list. _Always_ to the list daemon's address. Those are always distinct, and the distinction is vital. -- Cheers,My pid is Inigo Montoya. You kill -9 Rick Moen my parent process. Prepare to vi. [EMAIL PROTECTED]

Re: X Security Issues?

2002-11-19 Thread Rick Moen
yourself. -- Cheers, "Get the facts first. You can distort them later." Rick Moen -- Mark Twain [EMAIL PROTECTED]

Re: File system integrity checkers - comparison?

2002-12-05 Thread Rick Moen
t. AIDE, by comparison, is pure C, with autoconf support, and thus very portable. -- Cheers,Open-source SourceForge retakes the lead: Rick Moen http://gforge.org/ Thank you, Tim Perdue. [EMAIL PROTECTED]

Re: smtp-auth

2002-12-15 Thread Rick Moen
above is from personal experience; I'm just reading docs.) -- Cheers, "Reality is not optional." Rick Moen -- Thomas Sowell [EMAIL PROTECTED]

Re: smtp-auth

2002-12-16 Thread Rick Moen
pauth.shtml The author does take into account the chroot environment. -- Cheers, Chaos, panic, & disorder - my work here is done. Rick Moen [EMAIL PROTECTED]

Re: FTP-SSL

2002-12-18 Thread Rick Moen
Cheers,There are only 10 types of people in this world -- Rick Moen those who understand binary arithmetic and those who don't. [EMAIL PROTECTED]

Re: FTP-SSL

2002-12-18 Thread Rick Moen
just Kerberos. o SRP -- but that's not SSH at all Am I missing something? -- Cheers, "Transported to a surreal landscape, a young girl kills the first Rick Moen woman she meets, and then teams up with three complete strangers [EMAIL PROTECTED] to kill again

Re: FTP-SSL

2002-12-18 Thread Rick Moen
eat deal more universally supported than is sftp.) -- Cheers, Chaos, panic, & disorder - my work here is done. Rick Moen [EMAIL PROTECTED]

Re: FTP-SSL

2002-12-18 Thread Rick Moen
Quoting Xavier Santolaria ([EMAIL PROTECTED]): > Because sftp(1) understands a set of commands similar to those of > ftp(1). I'm unclear on why this is such an attraction, but whatever Works for Him[tm]. > It may also use many features of ssh. sftp is really an odd beast, which is part of why

Re: Need an advise about isolating a host in the DMZ

2002-12-18 Thread Rick Moen
secure enough)? These files may help: http://linuxmafia.com/pub/linux/security/ftp-daemons http://linuxmafia.com/~rick/faq/#djb http://linuxmafia.com/~rick/linux-info/mtas -- Cheers,There are only 10 types of people in this world -- Rick Moen those who understand binary ar

Re: FTP-SSL

2002-12-18 Thread Rick Moen
Win does include working ssh and scp. I'm guessing that would be Corinna Vinschen's port to Cygwin, right? Or is it Jarle Aase's or Mark Bradshaw's? -- Cheers, "Besides, Debian runs Web sites, Red Hat runs Rick Moen Quake, and

Re: FTP-SSL

2002-12-18 Thread Rick Moen
Quoting Jeffrey Taylor ([EMAIL PROTECTED]): > Quoting Rick Moen <[EMAIL PROTECTED]>: > > Quoting Alvin Oga ([EMAIL PROTECTED]): > > > > > otherwise secure windoze clients ... > > > ( winscp and equivalent ... > > > http://www.linux-s

Re: FTP-SSL

2002-12-26 Thread Rick Moen
ers, We write preciselyWe say exactly Rick Moen Since such is our habit inHow to do a thing or how [EMAIL PROTECTED] Talking to machines; Every detail works. Excerpt from Prof. Touretzky's decss-haiku.txt @ http://www.cs.cmu.edu/~dst/

Re: How to get the current security updates on CD?

2003-01-04 Thread Rick Moen
Real Programmers don't use Python. Rick Moen Thorfinn: Real Programmers don't use *whitespace*. [EMAIL PROTECTED]

Re: ACLs

2003-02-06 Thread Rick Moen
well as for the two server-end alternatives. The bigger problem for heterogeneous sites is that there's no agreed-upon standard in the NFS definition for exactly how ACCESS is to be implemented, so such tend to be vendor-specific. -- Resize your browser so the following line touches b

Re: what this logs means?

2003-02-19 Thread Rick Moen
--log-level DEBUG --log-prefix "IPT FORWARD packet died: " -- Cheers, It is by caffeine alone I set my mind in motion. Rick Moen It is by the beans of Java that thoughts acquire speed, rick@The hands acquire shaking, the shaking becomes a warnin

Re: OT: Is it so easy to break into an NIS?

2003-03-18 Thread Rick Moen
AFS/Kerberos (entailing non-free server-end software). Substituting LDAP-SSL for NIS is arguably a step forward, but then NFS remains a problem (No Friggin' Security). -- Cheers, The genius of you Americans is that you never make Rick Moen clear-cut stupid moves,

Re: OT: Is it so easy to break into an NIS?

2003-03-19 Thread Rick Moen
e. A quick perusal of that site plus some Google hits suggests that such is not the case now, if it ever was. Can someone confirm from experience that AFS can be done with all open source, both ends? (Yes, I do consider IBM PL code to qualify.) -- Cheers

Re: OT: Is it so easy to break into an NIS?

2003-03-19 Thread Rick Moen
Cheers, kill -9 them all. Rick Moen Let init sort it out. [EMAIL PROTECTED]

Re: is iptables enough?

2003-03-19 Thread Rick Moen
pace. -- Cheers, "Java is COBOL 2.0." Rick Moen -- Deirdre Saoirse Moen [EMAIL PROTECTED]

Re: OT: Is it so easy to break into an NIS?

2003-03-19 Thread Rick Moen
s that changed? -- Cheers, "Not using Microsoft products is like being a non-smoker Rick Moen 40 or 50 years ago: You can choose not to smoke, yourself, [EMAIL PROTECTED] but it's hard to avoid second-hand smoke." -- M. Tiemann

Re: looking for a good source to start learning about kerberos

2003-03-20 Thread Rick Moen
Kerberos Authentication System", Proceedings of the 1991 USENIX Conference, Dallas, TX 1991. -- Cheers, A host is a host, from coast to coast. Rick Moen And nobody talks to a host that's close, [EMAIL PROTECTED] Unless the host that isn't close is busy, hung, or dead.

Re: Daylight Saving

2003-03-28 Thread Rick Moen
(File gets updated from time to time, and therefore changes filenames.) You'll find there a set of time rulesets for various parts of the world, including rulesets that specify the details of DST changeovers. -- Cheers, A: No. Rick Moen Q: Sho

Re: chkrootkit output questions

2003-04-20 Thread Rick Moen
es this mean That's not coming from chkrootkit, but rather netstat. If I understand the C code correctly, it means that some Unix domain socket changed while being viewed, and doesn't indicate a problem, really. -- Cheers, "Transported to a surreal landscape, a young girl

Re: cracked? "rm uses obsolete (PF_INET,SOCK_PACKET)"

2003-06-15 Thread Rick Moen
ity, if the process modified /bin/*, yes? -- Cheers, First they came for the verbs, and I said nothing, for Rick Moenverbing weirds language. Then, they arrival for the nouns [EMAIL PROTECTED] and I speech nothing, for I no verbs. - Peter Ellis

Re: recommendations for FTP server

2003-06-20 Thread Rick Moen
ented in Midnight Commander, KD3 3.1's kio_fish plugin, and lftp (ftp-like browsing over generic SSH transport). http://linuxmafia.com/~rick/linux-info/fish-protocol -- Cheers, First they came for the verbs, and I said nothing, for Rick Moenverbing weirds language.

Re: [d-security] Re: ssh vulnerability in the wild

2003-09-16 Thread Rick Moen
n.org/debian/pool/main/g/glibc/libc6_2.3.2-7_i386.deb -- Cheers, Wall Street has all the emotional stability of a Rick Moenthirteen-year-old girl. -- Louis Rukeyser [EMAIL PROTECTED]

Re: [d-security] Re: ssh vulnerability in the wild

2003-09-16 Thread Rick Moen
quot;=" syntax to fetch a specified package version: apt-get install somepackage=12.17.4-4 Tutorial: http://jaqque.sbih.org/kplug/apt-pinning.html -- Cheers, "I don't like country music, but I don't mean to denigrate Rick Moen those who do. And, for the people wh

Re: [d-security] Re: ssh vulnerability in the wild

2003-09-17 Thread Rick Moen
.debian.org/ssh_3.6.1p2-8_powerpc.deb ...and would guess they're built from upstream's v. 3.7.1. (The two latter arrived within the last fifteen minutes.) -- Cheers, Founding member of the Hyphenation Society, a grassroots-based, Rick Moen not-for-profit, locally-owned-and-operated,

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Rick Moen
Quoting Bernd Eckenfels ([EMAIL PROTECTED]): > Actually one should think about using FTP at all :) http://linuxmafia.com/~rick/linux-info/ftp-justification -- Cheers, Founding member of the Hyphenation Society, a grassroots-based, Rick Moen not-for-profit, locally-owned-and-opera

Re: FTP in general (Re: Watch out! vsftpd anonymous access always enabled!)

2003-09-22 Thread Rick Moen
"wget -c" fixes many ills.) -- Cheers, The cynics among us might say: "We laugh, Rick Moen monkeyboys -- Linux IS the mainstream UNIX now! [EMAIL PROTECTED] MuaHaHaHa!" but that would be rude. -- Jim Dennis

Re: FTP in general (Re: Watch out! vsftpd anonymous access always enabled!)

2003-09-24 Thread Rick Moen
to what I was referring to. -- Cheers,Linux: It is now safe to turn on your computer. Rick Moen [EMAIL PROTECTED]

Re: Can anyone help me ID who is trying to hack my system?

2003-10-03 Thread Rick Moen
Quoting Alderbrook ([EMAIL PROTECTED]): > Can anyone help me identify who is trying to get into my system? > > 9/1/03 7:14:51 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 > 9/1/03 7:14:50 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 > 9/1/03 7:14:49 PM Deny unknown 1080 TCP 64

Re: certificate server

2003-11-04 Thread Rick Moen
tart Apache. -- Cheers, * Contributing Editor, Linux Gazette * Rick Moen -*- See the Linux Gazette in its new home: -*- [EMAIL PROTECTED] <http://linuxgazette.net/>

Re: certificate server

2003-11-04 Thread Rick Moen
* Important that during CSR the Common Name match the web server name > that browsers will use. Indeed. I've been intending to revise my article to insert mention of that fact. Thanks for the reminder. -- Cheers, * Contributing Editor, Linux Gazette * Rick Moe

Re: certificate server

2003-11-04 Thread Rick Moen
er fix I spoke of. -- Cheers, * Contributing Editor, Linux Gazette * Rick Moen -*- See the Linux Gazette in its new home: -*- [EMAIL PROTECTED] <http://linuxgazette.net/>

  1   2   3   >