Re: [techtalk] Better snort/logcheck reporting

2001-04-22 Thread Kath
I added *ipop3d*.* and *pumpd*.* to logcheck.ignore and everything is working out great. - Kath - Original Message - From: "Nicole Zimmerman" <[EMAIL PROTECTED]> To: "Kath" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Sunday, April 22, 2001 2:43 AM Subject: Re: [techtalk] Better sno

Re: [techtalk] pine and virtual domains

2001-04-22 Thread Nicole Zimmerman
That doesn't sound like a pine problem, it sounds like a mail server problem. Whatever mail server you are using (sendmail, exim, etc) ALSO has to know about the virtual domains. I have several virtual domains on one box and we are able to send mail seamlessly locally and remotely to all of the

Re: [techtalk] pine and virtual domains

2001-04-22 Thread Makiko Itoh
> >Just set the "user-domain" value in the configuration, provided the >username is correct. If the username is different as well, it's a bit >more difficult, but you don't suggest that's the case? > James, that did the trick! I hadn't even thought of changing the pine config. Thanks so much! Th

Re: [techtalk] pine and virtual domains

2001-04-22 Thread Jenny Bernard
On Sun, 22 Apr 2001, James A. Sutherland wrote: > >553 error. The question is - is it possible to set up an alias or > >something so that he can send out messages via pine, as > >user@virtualdomain? Or is it just something that can't be done? > > Just set the "user-domain" value in the configur

Re: [techtalk] Better snort/logcheck reporting - portsentry

2001-04-22 Thread Erin Clarke
On Sat, Apr 21, 2001 at 11:43:19PM -0700, Nicole Zimmerman wrote: > You might also check out 'portsentry': it looks for port scans on specific > ports so you don't have to get all of the other traffic as well. Snort is > good for all around stuff. portsentry is great, not least because its free..

Re: [techtalk] Better snort/logcheck reporting - portsentry

2001-04-22 Thread Kath
Will portsentry automatically add the blackhole route? I'd rather manually add it, because sometimes I run portscans and even attacks on my own machines to check for vulnerabilities. Also, is there any security mailing lists I should be on? I just signed up for the debian security annoucements

Re: [techtalk] Better snort/logcheck reporting - portsentry

2001-04-22 Thread Erin Clarke
On Sun, Apr 22, 2001 at 08:35:47PM -0400, Kath wrote: > Will portsentry automatically add the blackhole route? If you configure it to, yes. It is an option in the config file. > I'd rather manually add it, because sometimes I run portscans and even > attacks on my own machines to check for vul

Re: [techtalk] Better snort/logcheck reporting - portsentry

2001-04-22 Thread Nicole Zimmerman
debian-security and debian-security-announce are great for debian-specific security questions and announcements. Make sure you have security.debian.org in your apt sources too. Even if you're not on mailing lists, I would keep up to date with some of the bigger websites -- stuff like CERT. Their

[techtalk] NAT, Routing, or something else?

2001-04-22 Thread Samuel Tesla
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 So I recently got DSL and a /27 subnet of static IPs to play with. Problem is, I can't quite figure out what I need to do to set up the routing for the IPs. Here's how the network is set up Internet ---> ISP Gateway ---> My Cisco 678 ---> My Firewa

Re: [techtalk] mod_rewrite

2001-04-22 Thread Almut Behrens
Hi all, I'm new to the list. While doing a google search, I accidentally came across a link to linuxchix... I browsed a little through the archives and quickly concluded that this is definitely something worth subscribing ;) While browsing, the message "mod_rewrite" somehow caught my attention,

RE: [techtalk] NAT, Routing, or something else?

2001-04-22 Thread Angela Nash
The problem here is you were assigned one subnet, but you need two. You need one between the router and the firewall, and then another behind the firewall. To get around this, assign a private address space to the link between the router and the firewall. Use something like 10.x.x.x. Then use

Re: [techtalk] pine and virtual domains

2001-04-22 Thread James A . Sutherland
On Sun, 22 Apr 2001 16:41:13 -0400, you wrote: >> >>Just set the "user-domain" value in the configuration, provided the >>username is correct. If the username is different as well, it's a bit >>more difficult, but you don't suggest that's the case? >> > >James, that did the trick! I hadn't even t

Re: [techtalk] Better snort/logcheck reporting

2001-04-22 Thread Nicole Zimmerman
If you go into /etc/logcheck/ you can specify strings to ignore and strings to mark as violations (rather than "unusual events"). I would imagine there are logcheck rules out ther on the 'net that you can grab for known attacks that are not included in the defaults. If you are using the potato ve

[techtalk] Better snort/logcheck reporting

2001-04-22 Thread Kath
Does anyone know of a way for better snort/logcheck out putting?   I get stuff from ipop3d about regular (completely normal) pop3 logins by myself.  I'd rather not get these all together.   Also I'm getting the following:   Apr 21 22:30:59 hwnet pptpd[2226]: CTRL: Client 24.186.89.xx control

[techtalk] pine and virtual domains

2001-04-22 Thread Makiko Itoh
We have a small server (literally...it's a Cobalt RaQ, Redhat Linux 7, etc) hosting about 15 virtual domains/sites at the moment. We have this one user who for (I quote) "religious reasons" wants to be able to check and send out mail on the server itself, via pine, and refuses to use an email

Re: [techtalk] pine and virtual domains

2001-04-22 Thread James A . Sutherland
On Sun, 22 Apr 2001 06:02:53 -0400, you wrote: >We have a small server (literally...it's a Cobalt RaQ, Redhat Linux >7, etc) hosting about 15 virtual domains/sites at the moment. We >have this one user who for (I quote) "religious reasons" wants to be >able to check and send out mail on the s