what is the “Online Certificate Status Protocol”

2011-03-09 Thread erikmccaskey64
I use privoxy. In the user.action file i have a redirect rule and a few websites: { +redirect{s@http://@https://@} } .twitter.com .facebook.com Ok! it's working great, e.g.: if i visit any "*twitter.com" URL it gets redirected to HTTPS! But: with wireshark i can see some "OCSP" packets [

how to only allow tcp on dport 443 on the OUTPUT chain?

2011-03-08 Thread erikmccaskey64
it's a normal desktop machines iptables firewall: If i want to block udp on dport 80 on the output chain, then is this enough? i want to only allow tcp on it! iptables -P OUTPUT DROP iptables -A OUTPUT -o $PUBIF --dport 80 -j ACCEPT or i need this rule? iptables -P OUTPUT DROP iptables -A OUT

Is locking the screen is SAFE?

2011-03-08 Thread erikmccaskey64
http://www.h-online.com/open/news/item/USB-driver-bug-exposed-as-Linux-plug-pwn-1203617.html http://www.h-online.com/security/news/item/GNOME-screen-lock-ineffective-in-openSUSE-Linux-Update-928794.html Two choices [GNOME, Fedora 14]: 1 - use the gnome-screensaver 2 - use the "switch user" func

Ideas for securing OpenVPN on an OpenWrt router

2011-03-08 Thread erikmccaskey64
ok, i putted an OpenVPN server on port 1194 on an OpenWrt 10.03 router. https://pastebin.com/raw.php?i=xEZTvnhT http://pastebin.mozilla.org/1138443 Questions: what could i do to increase security regarding this OpenVPN server? - i mean on server side! 1 - i sed 's/1194/5/' the port number

IPTABLES rule for separating users

2011-03-05 Thread erikmccaskey64
I have an OpenWrt 10.03 router [ IP: 192.168.1.1 ], and it has a DHCP server pool: 192.168.1.0/24 - clients are using it through wireless/wired connection. Ok! Here's the catch: I need to separate the users from each other. How i need to do it: by IPTABLES rule [ /etc/firewall.user ]. Ok! "

host.conf order WHY doesn't WORK?? Fedora 14..

2011-03-04 Thread erikmccaskey64
https://pastebin.com/raw.php?i=n2660q6u Why does "ping" sees "audit.median.hu" as 127.0.0.0, and why does "host -t a audit.median.hu" sees it as "193.68.35.149"? I just have a caching nameserver on my Fedora PC: yum -y install caching-nameserver service named restart chkconfig named on I conf

HOW to REDIRECT to HTTPS?

2011-03-03 Thread erikmccaskey64
I'm searching for a method [on client side] to redirect to HTTPS in a few given domains. e.g.: http://www.facebook.com/ to https://www.facebook.com/ Ok. I use several webbrowsers, and not all of them has "add-ons" to redirect these pages to https. My purpose is this: when i go to "htt

Sorting by date

2011-02-28 Thread erikmccaskey64
Original: Jan 23 2011 10:42 SOMETHING 2007.12.20.avi Jun 26 2009 SOMETHING 2009.06.25.avi Feb 12 2010 SOMETHING 2010.02.11.avi Jan 29 2011 09:17 SOMETHING 2011.01.27.avi Feb 11 2011 20:06 SOMETHING 2011.02.10.avi Feb 27 2011 23:05 SOMETHING 2011.02.24.avi Output: Feb 27 2011 23:05 SOMETHING 2011.

opened OpenSSL port

2011-02-27 Thread erikmccaskey64
Main question: is it safe, to open a port for an openssl server? e.g.: server side - generate a self-signed cert. time openssl req -x509 -nodes -days 365 -newkey rsa:8192 -keyout mycert.pem -out mycert.pem openssl s_server -accept 52310 -cert mycert.pem Is it secure? - it could be DOSed' [D

How can I disable Internet access for programs running in Wine?

2011-02-25 Thread erikmccaskey64
I just can find any solution... Please help! thanks.. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

sandboxie like application for Fedora?

2011-02-14 Thread erikmccaskey64
http://www.filehippo.com/download_sandboxie/ It's a great application [ for windows... :\ ] Are there any programs under Fedora, that has the ~same features? To be specific: The user could launch a program [e.g.: Google Chrome] inside this sandbox, and when he/she exits Google Chrome, all th

Security: gnome-screensaver VS. switch user

2011-02-13 Thread erikmccaskey64
People "usually" suspend their laptop, so that they can continue their work when they open the laptop. OK! Two choices [GNOME]: 1 - Menu -> Shut Down -> Suspend in this case, the gnome-screensaver locks the PC. but the gnome-screensaver is just a "normal process", and it could be killed e.g

PPTP VPN how?

2011-02-12 Thread erikmccaskey64
Originally i'm searching for a PPTP VPN howto for OpenWrt...but i just can't seem to find one...OpenWrt Backfire 10.03.. Can someone post a link about PPTP VPN for Fedora? at least to start somewhere... thanks -- users mailing list users@lists.fedoraproject.org To unsubscribe or change

Re: how to run kdesu without asking password?

2011-02-12 Thread erikmccaskey64
0800 suvayu ali <fatkasuvayu+li...@gmail.com> írta On Fri, Feb 11, 2011 at 1:41 PM, erikmccaskey64 <erikmccaske...@zoho.com> wrote: > i don't want to run it with root > the MYUSER is a user with low permissions!! > i just don't know how to run a GUI applica

Re: how to run kdesu without asking password?

2011-02-11 Thread erikmccaskey64
09:21:56 -0800 suvayu ali <fatkasuvayu+li...@gmail.com> írta On Fri, Feb 11, 2011 at 1:47 AM, erikmccaskey64 <erikmccaske...@zoho.com> wrote: > > visudo > MYUSER ALL=(transmission-user) NOPASSWD: /usr/bin/transmission-gtk Why do you want to run transmission as supe

Re: how to run kdesu without asking password?

2011-02-11 Thread erikmccaskey64
ut thank you! Be Fri, 11 Feb 2011 03:27:59 -0800 Tom H <tomh0...@gmail.com> írta On Fri, Feb 11, 2011 at 6:09 AM, erikmccaskey64 <erikmccaske...@zoho.com> wrote: > [root@a ~]# kdesudo > bash: kdesudo: command not found... > [root@a ~]# yum search kdesudo

Re: how to run kdesu without asking password?

2011-02-11 Thread erikmccaskey64
2011 at 4:47 AM, erikmccaskey64 <erikmccaske...@zoho.com> wrote: > > Fedora 14, with GNOME: > > sudo works without password: > > visudo > MYUSER ALL=(transmission-user) NOPASSWD: /usr/bin/transmission-gtk > > then: > xhost local:transmission-user > sudo -u

how to run kdesu without asking password?

2011-02-11 Thread erikmccaskey64
Fedora 14, with GNOME: sudo works without password: visudo MYUSER ALL=(transmission-user) NOPASSWD: /usr/bin/transmission-gtk then: xhost local:transmission-user sudo -u transmission-user -- /usr/bin/transmission-gtk ok, it runs without prompting for a password. [I'm logged in with the "MYUSER