Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-24 Thread Ethan Benson
On Wed, Oct 24, 2001 at 01:18:52AM +, Martin WHEELER wrote: On Tue, 23 Oct 2001, Ethan Benson wrote: kernels are never upgraded automatically by apt, you have to do it yourself: That's not quite true -- should you recompile your own kernel, and for whatever reason, NOT give that

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-24 Thread Blars Blarson
In article [EMAIL PROTECTED] [EMAIL PROTECTED] writes: On Wed, Oct 24, 2001 at 01:18:52AM +, Martin WHEELER wrote: On Tue, 23 Oct 2001, Ethan Benson wrote: kernels are never upgraded automatically by apt, you have to do it yourself: That's not quite true -- should you recompile your

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Christian Kurz
On 23/10/01, Michael Robinson wrote: On Tue, Oct 23, 2001 at 09:55:04AM +0200, Christian Kurz wrote: Do you know how difficult and time-consuming it really is to do a manual source code audit? Also the available programs for source code audits can only give you hints which parts of a

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Paul Haesler
The alternative is the ostrich method of security management. What's that kind of method? I never heared about that name. It was once a widespread belief that the ostrich's method of hiding from predators was to bury it's head in the sand. This is obviously untrue, but the concept has worked

qmail ERR- authorization

2001-10-24 Thread skubij
I have problem with authorization qmail pop3 clients. I don't know why qmail-pop3 not authorize my users on all accounts. When we use client from WWW that is goot. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Connection problem

2001-10-24 Thread Emmanuel Lacour
On Tue, Oct 23, 2001 at 12:09:36PM +0200, Emmanuel Lacour wrote: Hi, It's maybe a little bit off topic, but I think someone in this list can help me: I've got a firewall debian potato, kernel 2.2.17pre6, doing masquerading and other rules over an adsl pppoe line. All worked perfectly but

Re: Firewall Related Question

2001-10-24 Thread Alson van der Meulen
On Wed, Oct 24, 2001 at 01:36:10AM -0400, James wrote: That link might help... http://www.linuxdoc.org/HOWTO/mini/Bridge+Firewall.html quote Note also that until recently (kernel 2.0.25) the 3c509 driver could not be used for more than one card if used as a module. I have seen a patch floating

Intro - Design, Engineering, Manufacturing, and more

2001-10-24 Thread Igoework.com Inc.
Please allow us to introduce ourselves, Igoework.com is represented by a group that includes: - Talented engineers(Mechanical and Electrical) - Software solutions(CAD, FEA) - Manufacturing vendors (Castings, Sheet Metal, Plastics, SLA, etc) - Technical placement (Direct placement of

Re: Firewall Related Question

2001-10-24 Thread J.R. Blain
Using kernel 2.2, I run a bridge, that handles packet filtering with ipchains. Patches are available here: http://www.ac2i.tzo.com/bridge_filter/ James wrote: That link might help... http://www.linuxdoc.org/HOWTO/mini/Bridge+Firewall.html - James -Original Message- From:

Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread eim
Actually I'm subscribed to the famous bugtraq Mailing List and of course the Debian Security Mailing List. Bugtraq is a 'high volume' Mailing List which forwards to me many important mails about security in General and not only Debian Specific Because I really work only with Debian GNU/Linux

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread Henrique de Moraes Holschuh
On Wed, 24 Oct 2001, eim wrote: My question is: Is it convenient to subscirbe _only_ to the Debian Security Mailing List keeping in mind only security related to this Distribution and Server Platform, or are there maybe some 'important' informations on BugTraq which maybe will never be posted

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Patrice Neff
Michael Robinson [EMAIL PROTECTED] writes: FreeBSD does it for their ports tree. In fact, this has been a matter of controversy, as the FreeBSD team issues a huge number of security advisories for software that really has nothing to do with FreeBSD. This has caused casual observers to

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread victor
Hello eim, Wednesday, October 24, 2001, 7:58:15 PM, you wrote: e Actually I'm subscribed to the famous bugtraq Mailing List e and of course the Debian Security Mailing List. i dont think that buqtraq [EMAIL PROTECTED] ... i understand you refer that make a high volume, i recieve 9 mail at day

Re: FUCK YOU

2001-10-24 Thread Nicolas M . M
Hello Layne, if you have'nt subscribed, why do you think do you receive mails from debian-security?, maybe you're too stupid to remember but you receive a confirmation email before being added to a mailing lists, so shut up and unsubscribe *** ! -- La bonne humeur est une vertue,

Re: Is ident secure?

2001-10-24 Thread Nicolas M . M
do you know what the word sollicitors mean? i don't think so, you should go to school you lil' brainless. -- La bonne humeur est une vertue, celle qui différencie l'humain de l'animal. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL

Re: Connection problem

2001-10-24 Thread Jason Thomas
On Wed, Oct 24, 2001 at 02:35:51PM +0200, Emmanuel Lacour wrote: Ok , to close this message (out of list topics), I just explain how I solved my problem. A few days ago I was playing with ipsec and adsl pppoe. This was a mtu problem so I played with clampmss fragicmp overridemtu in rp-pppoe

Re: Is ident secure?

2001-10-24 Thread Malcolm Herbert
... don't know if it's happening to others, however I seem to be receiving mail from the 'Is Ident secure' thread of earlier in September (with the idiot who was subscribed and who wouldn't/couldn't unsubscribe himself) ... is anyone else seeing this replay? I have the original in my mailbox if

Re[2]: FUCK YOU

2001-10-24 Thread victor
Hello Nicolas, Sunday, September 02, 2001, 5:31:01 PM, you wrote: NMM Hello Layne, NMM if you have'nt subscribed, why do you think do you receive mails from NMM debian-security?, maybe you're too stupid to remember but you receive a NMM confirmation email before being added to a mailing lists,

Re: Is ident secure?

2001-10-24 Thread Adam Olsen
On Thu, Oct 25, 2001 at 09:45:49AM +1000, Malcolm Herbert wrote: ... don't know if it's happening to others, however I seem to be receiving mail from the 'Is Ident secure' thread of earlier in September (with the idiot who was subscribed and who wouldn't/couldn't unsubscribe himself) ... is

Debian GNU/Linux 2.2r3 vulnerabilities ?

2001-10-24 Thread Petre Daniel
-BEGIN PGP SIGNED MESSAGE- Hash: MD5 Heya, I run a potato at home and i will set the computer at work with potato as well.Since that will be a 24h internet connected pc,i am wondering what are the 2.2 release 3 vulnerabilities for the sistem installed from the cds without any

Re: Debian GNU/Linux 2.2r3 vulnerabilities ?

2001-10-24 Thread Osamu Aoki
On Thu, Oct 25, 2001 at 04:31:05AM +0200, Petre Daniel wrote: I run a potato at home and i will set the computer at work with potato as well.Since that will be a 24h internet connected pc,i am wondering what are the 2.2 release 3 vulnerabilities for the sistem installed from the cds

RE: ADSL connection problem

2001-10-24 Thread James
Not really the list for this, but... 1. Is your link really up? Can you ping the IP of yahoo.com (64.58.76.226)? 2. Can you ping your ISP's DNS? Is that IP correct? 3. Have you tried putting in another organization's DNS server? 4. What is your syntax in /etc/resolv.conf? Mine is:

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-24 Thread Nicole Zimmerman
I would suggest adding the testing source to your /etc/apt/sources.list and grabbing kernel-source-2.2.19 (version 2.2.19.1-1 has the security patches in question). Edit /etc/apt/sources.list Add deb http://http.us.debian.org/debian/ testing main Save the file. apt-get update apt-get install

RE: Firewall Related Question

2001-10-24 Thread James
That link might help... http://www.linuxdoc.org/HOWTO/mini/Bridge+Firewall.html - James -Original Message- From: Alson van der Meulen [mailto:[EMAIL PROTECTED] Sent: Monday, October 22, 2001 1:31 PM To: Debian Security List Subject: Re: Firewall Related Question On Mon, Oct 22, 2001 at

RE: Unidentified subject!

2001-10-24 Thread James
I've been told that usually means just a corrupt/damaged packet and shouldn't be much to worry about, unless you are getting lots of them (Might be an attack). - James -Original Message-From: sonam dukda [mailto:[EMAIL PROTECTED]Sent: Tuesday, October 23, 2001 4:52 AMTo:

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-24 Thread Ethan Benson
On Wed, Oct 24, 2001 at 01:18:52AM +, Martin WHEELER wrote: On Tue, 23 Oct 2001, Ethan Benson wrote: kernels are never upgraded automatically by apt, you have to do it yourself: That's not quite true -- should you recompile your own kernel, and for whatever reason, NOT give that new

Re: Potato 2.2r3 and Kernel 2.2.19 Questions

2001-10-24 Thread Blars Blarson
In article [EMAIL PROTECTED] [EMAIL PROTECTED] writes: On Wed, Oct 24, 2001 at 01:18:52AM +, Martin WHEELER wrote: On Tue, 23 Oct 2001, Ethan Benson wrote: kernels are never upgraded automatically by apt, you have to do it yourself: That's not quite true -- should you recompile your

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Christian Kurz
On 23/10/01, Michael Robinson wrote: On Tue, Oct 23, 2001 at 09:55:04AM +0200, Christian Kurz wrote: Do you know how difficult and time-consuming it really is to do a manual source code audit? Also the available programs for source code audits can only give you hints which parts of a

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Paul Haesler
The alternative is the ostrich method of security management. What's that kind of method? I never heared about that name. It was once a widespread belief that the ostrich's method of hiding from predators was to bury it's head in the sand. This is obviously untrue, but the concept has worked

qmail ERR- authorization

2001-10-24 Thread skubij
I have problem with authorization qmail pop3 clients. I don't know why qmail-pop3 not authorize my users on all accounts. When we use client from WWW that is goot.

Re: Connection problem

2001-10-24 Thread Emmanuel Lacour
On Tue, Oct 23, 2001 at 12:09:36PM +0200, Emmanuel Lacour wrote: Hi, It's maybe a little bit off topic, but I think someone in this list can help me: I've got a firewall debian potato, kernel 2.2.17pre6, doing masquerading and other rules over an adsl pppoe line. All worked perfectly but

Re: Firewall Related Question

2001-10-24 Thread Alson van der Meulen
On Wed, Oct 24, 2001 at 01:36:10AM -0400, James wrote: That link might help... http://www.linuxdoc.org/HOWTO/mini/Bridge+Firewall.html quote Note also that until recently (kernel 2.0.25) the 3c509 driver could not be used for more than one card if used as a module. I have seen a patch floating

Intro - Design, Engineering, Manufacturing, and more

2001-10-24 Thread Igoework.com Inc.
Please allow us to introduce ourselves, Igoework.com is represented by a group that includes: - Talented engineers(Mechanical and Electrical) - Software solutions(CAD, FEA) - Manufacturing vendors (Castings, Sheet Metal, Plastics, SLA, etc) - Technical placement (Direct placement of

Re: Intro - Design, Engineering, Manufacturing, and more

2001-10-24 Thread Richard Ibbotson
Dear All Igoework.com is represented by a group that includes: Pardon me for wasting bandwidth but am I the only person who is getting a bounced multiple repeated message of this sort from the Debian security list ? Thank you -- Richard

Re: Firewall Related Question

2001-10-24 Thread J.R. Blain
Using kernel 2.2, I run a bridge, that handles packet filtering with ipchains. Patches are available here: http://www.ac2i.tzo.com/bridge_filter/ James wrote: That link might help... http://www.linuxdoc.org/HOWTO/mini/Bridge+Firewall.html - James -Original Message- From:

Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread eim
Actually I'm subscribed to the famous bugtraq Mailing List and of course the Debian Security Mailing List. Bugtraq is a 'high volume' Mailing List which forwards to me many important mails about security in General and not only Debian Specific Because I really work only with Debian GNU/Linux as

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread Henrique de Moraes Holschuh
On Wed, 24 Oct 2001, eim wrote: My question is: Is it convenient to subscirbe _only_ to the Debian Security Mailing List keeping in mind only security related to this Distribution and Server Platform, or are there maybe some 'important' informations on BugTraq which maybe will never be posted

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread Stefano Canepa
mercoledì 24 ottobre 2001, alle 19:58, eim: : Actually I'm subscribed to the famous bugtraq Mailing List : and of course the Debian Security Mailing List. : : Bugtraq is a 'high volume' Mailing List which forwards to me : many important mails about security in General and not only : Debian

Re: Does Debian need to enforce a better Security policy for packages?

2001-10-24 Thread Patrice Neff
Michael Robinson [EMAIL PROTECTED] writes: FreeBSD does it for their ports tree. In fact, this has been a matter of controversy, as the FreeBSD team issues a huge number of security advisories for software that really has nothing to do with FreeBSD. This has caused casual observers to

Re: Question about BugTraq and Debian-Security Mailing Lists

2001-10-24 Thread victor
Hello eim, Wednesday, October 24, 2001, 7:58:15 PM, you wrote: e Actually I'm subscribed to the famous bugtraq Mailing List e and of course the Debian Security Mailing List. i dont think that buqtraq bugtraq@securityfocus.com ... i understand you refer that make a high volume, i recieve 9 mail

Re: FUCK YOU

2001-10-24 Thread Nicolas M . M
Hello Layne, if you have'nt subscribed, why do you think do you receive mails from debian-security?, maybe you're too stupid to remember but you receive a confirmation email before being added to a mailing lists, so shut up and unsubscribe *** ! -- La bonne humeur est une vertue,

Re: Is ident secure?

2001-10-24 Thread Nicolas M . M
do you know what the word sollicitors mean? i don't think so, you should go to school you lil' brainless. -- La bonne humeur est une vertue, celle qui différencie l'humain de l'animal.

Re: Connection problem

2001-10-24 Thread Jason Thomas
On Wed, Oct 24, 2001 at 02:35:51PM +0200, Emmanuel Lacour wrote: Ok , to close this message (out of list topics), I just explain how I solved my problem. A few days ago I was playing with ipsec and adsl pppoe. This was a mtu problem so I played with clampmss fragicmp overridemtu in rp-pppoe

Re: Is ident secure?

2001-10-24 Thread Malcolm Herbert
... don't know if it's happening to others, however I seem to be receiving mail from the 'Is Ident secure' thread of earlier in September (with the idiot who was subscribed and who wouldn't/couldn't unsubscribe himself) ... is anyone else seeing this replay? I have the original in my mailbox if

Re[2]: FUCK YOU

2001-10-24 Thread victor
Hello Nicolas, Sunday, September 02, 2001, 5:31:01 PM, you wrote: NMM Hello Layne, NMM if you have'nt subscribed, why do you think do you receive mails from NMM debian-security?, maybe you're too stupid to remember but you receive a NMM confirmation email before being added to a mailing lists,

Re: Is ident secure?

2001-10-24 Thread Adam Olsen
On Thu, Oct 25, 2001 at 09:45:49AM +1000, Malcolm Herbert wrote: ... don't know if it's happening to others, however I seem to be receiving mail from the 'Is Ident secure' thread of earlier in September (with the idiot who was subscribed and who wouldn't/couldn't unsubscribe himself) ... is

Debian GNU/Linux 2.2r3 vulnerabilities ?

2001-10-24 Thread Petre Daniel
-BEGIN PGP SIGNED MESSAGE- Hash: MD5 Heya, I run a potato at home and i will set the computer at work with potato as well.Since that will be a 24h internet connected pc,i am wondering what are the 2.2 release 3 vulnerabilities for the sistem installed from the cds without any online

Re: Debian GNU/Linux 2.2r3 vulnerabilities ?

2001-10-24 Thread Osamu Aoki
On Thu, Oct 25, 2001 at 04:31:05AM +0200, Petre Daniel wrote: I run a potato at home and i will set the computer at work with potato as well.Since that will be a 24h internet connected pc,i am wondering what are the 2.2 release 3 vulnerabilities for the sistem installed from the cds