Re: Major TCP Vulnerability

2004-04-23 Thread Florian Weimer
Greg Folkert [EMAIL PROTECTED] writes: This Vulnerability is ancient news, and it is not really a Vulnerability. It's one instance of a more general set of vulnerabilities which stem from the lack of control plane separation. What happens if the route goes dead? Same effect. Not quite.

Re: Squid proxy help

2004-04-23 Thread Volker Tanger
I was just wondering if you know how I could possibly setup squid so that it will accept connections from the internet and filter before they hit a IIS6 hosted intranet. RTFM! http://www.squid-cache.org/Doc/FAQ/FAQ-10.html http://squid.visolve.com/squid/squid24s1/access_controls.htm Bye

Re: Squid proxy help

2004-04-23 Thread Vincent Deffontaines
Craig Schneider a dit : Hi Guys I was just wondering if you know how I could possibly setup squid so that it will accept connections from the internet and filter before they hit a IIS6 hosted intranet. Any ideas at this point would be welcome. Thanks Craig Squid has quite nice docs

Re: Woody Backport of tripwire

2004-04-23 Thread Lupe Christoph
On Thursday, 2004-04-22 at 20:32:42 -0400, Phillip Hofmeister wrote: Can anyone refer me to a woody backport of tripwire (or a version such as 2.3.1.2+)? I recently did a backport, but it's not up for downloads. I could mail it to you, or you can do it yourself from the package source. If you

Re: kernel security problems again?

2004-04-23 Thread Giacomo Mulas
On Fri, 23 Apr 2004, Henrique de Moraes Holschuh wrote: There is also: * e1000: fix probable security hole yes, but while the other two problems affect almost any Linux workstation running 2.4.x the latter is relevant only to a specific piece of hardware (although I do have a few of

Re: Woody Backport of tripwire

2004-04-23 Thread Giacomo Mulas
On Fri, 23 Apr 2004, Phillip Hofmeister wrote: I did not realize 3.0+ was needed. The build dependencies did not specify that. I might file a bug against tripwire for that build dependency. it is meant for sid, the default compiler in sid is 3.3. I suppose this is the reason it does not

Re: Woody Backport of tripwire

2004-04-23 Thread Noah Meyerhans
On Fri, Apr 23, 2004 at 03:48:59PM -0400, Phillip Hofmeister wrote: Therefore, in my mind, it is mean for sid is not an excuse to omit a build dependency. What is to say there won't be a g++2 and g++3 package in sarge when it is released? If the build dependency is part of build-essential

Squid proxy help

2004-04-23 Thread Craig Schneider
Hi Guys I was just wondering if you know how I could possibly setup squid so that it will accept connections from the internet and filter before they hit a IIS6 hosted intranet. Any ideas at this point would be welcome. Thanks Craig

Re: Squid proxy help

2004-04-23 Thread Adrian Minta
Try this link: http://www.google.com/search?q=squid+web+acceleratorsourceid=operanum=0ie=utf-8oe=utf-8 -- Adrian Minta [EMAIL PROTECTED]

Re: Major TCP Vulnerability

2004-04-23 Thread Florian Weimer
Greg Folkert [EMAIL PROTECTED] writes: This Vulnerability is ancient news, and it is not really a Vulnerability. It's one instance of a more general set of vulnerabilities which stem from the lack of control plane separation. What happens if the route goes dead? Same effect. Not quite.

Re: Squid proxy help

2004-04-23 Thread Volker Tanger
I was just wondering if you know how I could possibly setup squid so that it will accept connections from the internet and filter before they hit a IIS6 hosted intranet. RTFM! http://www.squid-cache.org/Doc/FAQ/FAQ-10.html http://squid.visolve.com/squid/squid24s1/access_controls.htm Bye

kernel security problems again?

2004-04-23 Thread Giacomo Mulas
I just read the changelog for the 2.4.27-pre1 kernel released by Marcelo Tosatti, and saw two worrying lines in there: * Fix potential memory leak in devpts * Fix potential memory access to free memory in /proc handling Since most people use devpts and almost all use procfs, this

Re: kernel security problems again?

2004-04-23 Thread Henrique de Moraes Holschuh
On Fri, 23 Apr 2004, Giacomo Mulas wrote: * Fix potential memory leak in devpts * Fix potential memory access to free memory in /proc handling There is also: * e1000: fix probable security hole -- One disk to rule them all, One disk to find them. One disk to bring them all

Re: Squid proxy help

2004-04-23 Thread Vincent Deffontaines
Craig Schneider a dit : Hi Guys I was just wondering if you know how I could possibly setup squid so that it will accept connections from the internet and filter before they hit a IIS6 hosted intranet. Any ideas at this point would be welcome. Thanks Craig Squid has quite nice docs

Re: Woody Backport of tripwire

2004-04-23 Thread Lupe Christoph
On Thursday, 2004-04-22 at 20:32:42 -0400, Phillip Hofmeister wrote: Can anyone refer me to a woody backport of tripwire (or a version such as 2.3.1.2+)? I recently did a backport, but it's not up for downloads. I could mail it to you, or you can do it yourself from the package source. If you

Re: kernel security problems again?

2004-04-23 Thread Giacomo Mulas
On Fri, 23 Apr 2004, Henrique de Moraes Holschuh wrote: There is also: * e1000: fix probable security hole yes, but while the other two problems affect almost any Linux workstation running 2.4.x the latter is relevant only to a specific piece of hardware (although I do have a few of

Re: Woody Backport of tripwire

2004-04-23 Thread Phillip Hofmeister
On Fri, 23 Apr 2004 at 11:07:23AM -0400, Lupe Christoph wrote: I recently did a backport, but it's not up for downloads. I could mail it to you, or you can do it yourself from the package source. If you do that, you will need to use CXX=g++-3.0 GCC=gcc-3.0 dpkg-buildpackage -rfakeroot -us

Re: Woody Backport of tripwire

2004-04-23 Thread Giacomo Mulas
On Fri, 23 Apr 2004, Phillip Hofmeister wrote: I did not realize 3.0+ was needed. The build dependencies did not specify that. I might file a bug against tripwire for that build dependency. it is meant for sid, the default compiler in sid is 3.3. I suppose this is the reason it does not

Re: Woody Backport of tripwire

2004-04-23 Thread Phillip Hofmeister
On Fri, 23 Apr 2004 at 01:19:13PM -0400, Giacomo Mulas wrote: On Fri, 23 Apr 2004, Phillip Hofmeister wrote: I did not realize 3.0+ was needed. The build dependencies did not specify that. I might file a bug against tripwire for that build dependency. it is meant for sid, the default

Re: Woody Backport of tripwire

2004-04-23 Thread Noah Meyerhans
On Fri, Apr 23, 2004 at 03:48:59PM -0400, Phillip Hofmeister wrote: Therefore, in my mind, it is mean for sid is not an excuse to omit a build dependency. What is to say there won't be a g++2 and g++3 package in sarge when it is released? If the build dependency is part of build-essential