Security: gnome-screensaver VS. switch user

2011-02-13 Thread erikmccaskey64
People "usually" suspend their laptop, so that they can continue their work when they open the laptop. OK! Two choices [GNOME]: 1 - Menu -> Shut Down -> Suspend in this case, the gnome-screensaver locks the PC. but the gnome-screensaver is just a "normal process", and it could be killed e.g

Is it safe to run tcpdump?

2011-03-05 Thread erikmccaskey64
Is it safe to always run tcpdump on the server, e.g.: like this: tcpdump -qn dst net 192.168.1.0/24 I need it to "audit the network" .. :\

Ideas for securing OpenVPN on an OpenWrt router

2011-03-08 Thread erikmccaskey64
ok, i putted an OpenVPN server on port 1194 on an OpenWrt 10.03 router. https://pastebin.com/raw.php?i=xEZTvnhT http://pastebin.mozilla.org/1138443 Questions: what could i do to increase security regarding this OpenVPN server? - i mean on server side! 1 - i sed 's/1194/5/' the port number

Re: Ideas for securing OpenVPN on an OpenWrt router

2011-03-08 Thread erikmccaskey64
Why does using only UDP gives more security?? Be Tue, 08 Mar 2011 14:04:08 -0800 Kapetanakis Giannis <bil...@edu.physics.uoc.gr> C-rta On 08/03/11 17:34, erikmccaskey64 wrote: > ok, i putted an OpenVPN server on port 1194 on an OpenWrt 10.03 router. > https://pastebin.c

what is the “Online Certificate Status Protocol”

2011-03-09 Thread erikmccaskey64
I use privoxy. In the user.action file i have a redirect rule and a few websites: { +redirect{s@http://@https://@} } .twitter.com .facebook.com Ok! it's working great, e.g.: if i visit any "*twitter.com" URL it gets redirected to HTTPS! But: with wireshark i can see some "OCSP" packets [

Re: Ideas for securing OpenVPN on an OpenWrt router

2011-03-09 Thread erikmccaskey64
23:40:16 -0800, erikmccaskey64 wrote: >Why does using only UDP gives more security?? He didn't say it did. TCP-over-TCP is the problem. TCP-over-UDP is less fractious. http://sites.inka.de/bigred/devel/tcp-tcp.html *** NOTE *** Please DO NOT CC me. I <am> subscribed to the list