Bom dia debian-security

2003-06-10 Thread kandrak
Message to [EMAIL PROTECTED] Ola debian-security GANHAMOS O PRÊMIO DE MELHOR SITE DO RAMO ==Estamos operando em Novo Formato== Confira em: escuta21.kit.netou http://www.escuta21.kit.net ei debian-security Cuidado com o que fala ao Celular... ele tb tem ouvidos...

IMAP is too secure...

2003-06-10 Thread Hobbs, Richard
Helo, I think my IMAP server has become too secure... I'm using the current version of uw-imapd and libc-client2003debian, as listed in stable and stable-proposed-updates. I cannot log into my IMAP server any more... It keeps saying Invalid password. I can only assume it's using password

apache

2003-06-10 Thread Martynas Domarkas
Hi. I would like to use date string in apache log file names. Is there a way to use some directive in httpd.conf to be parsed as shell command like `date +%Y%m%d` or some other way to solve the problem? I will use logrotate mechanism of debian, and this date string could be used only for file

Re: apache

2003-06-10 Thread Jamie Heilman
Martynas Domarkas wrote: Hi. I would like to use date string in apache log file names. Is there a way to use some directive in httpd.conf to be parsed as shell command like `date +%Y%m%d` or some other way to solve the problem? I will use logrotate mechanism of debian, and this date string

Re: apache

2003-06-10 Thread Martynas Domarkas
An, 2003-06-10 12:01, Jamie Heilman ra: Martynas Domarkas wrote: Hi. I would like to use date string in apache log file names. Is there a way to use some directive in httpd.conf to be parsed as shell command like `date +%Y%m%d` or some other way to solve the problem? I will use logrotate

Re: apache

2003-06-10 Thread Teun Vink
On Tue, 2003-06-10 at 11:07, Martynas Domarkas wrote: [...] Thanks, but I realy do not like instalation of another packages. There must be a way to do this with apache configuration. You could add a line to your /etc/logrotate.d/apache configuration, so it would look something like this:

Re: apache

2003-06-10 Thread Martynas Domarkas
An, 2003-06-10 12:56, Teun Vink ra: On Tue, 2003-06-10 at 11:07, Martynas Domarkas wrote: [...] Thanks, but I realy do not like instalation of another packages. There must be a way to do this with apache configuration. You could add a line to your /etc/logrotate.d/apache configuration,

Re[2]: apache

2003-06-10 Thread Dominik Schulz
Perhaps I've got you wrong but wouldn't --- snip --- TransferLog | /usr/sbin/rotatelogs /var/www/domain.tld/logs/domain.tld-%Y-%m-%d_access.log 604800 --- end --- do it? Martynas Domarkas [EMAIL PROTECTED] wrote on 10 Jun 2003 13:02:55 +0300: An, 2003-06-10 12:56, Teun Vink raðë: On Tue,

RE: OPENSSL

2003-06-10 Thread Reckhard, Tobias
I'm trying to generate a 40-bit certificate using OPENSSL.Can anybody tell me if this is possible and with which package? The RSA keys used in X.509 certificates are typically 1024 or 2048 bits in length. What length the symmetric key used between two parties that have authenticated via X.509

Re: OPENSSL

2003-06-10 Thread Berin Lautenbach
Reckhard, Tobias wrote: There are web browsers that will negotiate 128 bits only if the certificate presented by the web server is a step-up certificate. I'm not sure what makes a certificate a step-up certificate, however, nor if this restriction still applies to current browsers. The step up

Re: Re[2]: apache

2003-06-10 Thread Martynas Domarkas
An, 2003-06-10 13:46, Dominik Schulz ra: Perhaps I've got you wrong but wouldn't --- snip --- TransferLog | /usr/sbin/rotatelogs /var/www/domain.tld/logs/domain.tld-%Y-%m-%d_access.log 604800 --- end --- do it? Martynas Domarkas [EMAIL PROTECTED] wrote on 10 Jun 2003 13:02:55 +0300:

Bom dia debian-securityESCUTA21 em Novo Formato

2003-06-10 Thread kandrak
Message to [EMAIL PROTECTED] Ola debian-security GANHAMOS O PRÊMIO DE MELHOR SITE DO RAMO ==Estamos operando em Novo Formato== Confira em: escuta21.kit.netou http://www.escuta21.kit.net ei debian-security Cuidado com o que fala ao Celular... ele tb tem ouvidos...

Re: IMAP is too secure...

2003-06-10 Thread Jelmer Barhorst
Hi Richard, Since libc-client2003debian it's only posible to use a SSL connection. Most clients support it, but if you really want to allow plaintext IMAP again, please run 'dpkg-reconfigure libc-client2003debian' and awnser Yes to 'Should plaintext passwords be enabled?'. To enable it manualy,

Re: Default Apache install not fit for multiple domains/users

2003-06-10 Thread Stefan Neufeind
Thank you for the information. Am I right that php-skripts then would need an execute-bit set? Currently they don't have ... On 9 Jun 2003 at 17:59, Jon wrote: On Mon, 2003-06-09 at 17:28, Phillip Hofmeister wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 09 Jun 2003 at

Re: OPENSSL

2003-06-10 Thread Stefan Neufeind
I'm using a 128-bit-cert. But browsers that support less encryption (e.g. IE that comes with WinNT4) can't access my SSL-pages because the encryption doesn't allow degration. Is there any way to solve this prob? Using Apache with an official SSL-cert. PS: This just came to my mind when you

re: strange broadcast packets

2003-06-10 Thread kuba . jakubik
Hello, isn't perhaps 10.208.64.1 your dhcp server and aren't this reply to dhcp requests from clients? Carpe Noctem, Kuba BIGHard Jakubik -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

unsubscibe

2003-06-10 Thread loretta whitehead
hi my name is loretta i got this really cool incredimail downloaded on my computer..but it does not work...I've tried every thing my email will come to the incredimail account but i can not respond so i don't want it any more can you please take it off so i can use my sbcglobal account

Re: Default Apache install not fit for multiple domains/users

2003-06-10 Thread Jon
On Tue, 2003-06-10 at 08:24, Stefan Neufeind wrote: Thank you for the information. Am I right that php-skripts then would need an execute-bit set? Currently they don't have ... Unfortunately, yes. Otherwise you'll get a 500 Internal Server Error or the likes. - Jon -- [EMAIL PROTECTED]

Re: Default Apache install not fit for multiple domains/users

2003-06-10 Thread Phillip Hofmeister
On Tue, 10 Jun 2003 at 05:24:59PM +0200, Stefan Neufeind wrote: Thank you for the information. Am I right that php-skripts then would need an execute-bit set? Currently they don't have ... They will be being treated like a normal binary file, so yes (that is, if you want yours scripts to

Re: nautilus and portmapper port 111

2003-06-10 Thread Andreas Wüst
Hi Phillip On Dienstag, 10-Jun-03 at 01:33:07, Phillip Hofmeister wrote: On Tue, 10 Jun 2003 at 12:20:10AM +0100, Andreas W?st wrote: Hi Although I can see no evidence for portmapper being run by issuing netstat -tu -l -ee -p, everytime nautilus is started it connects to port 111, and

Re: strange broadcast packets

2003-06-10 Thread Andreas Wüst
Hi Hello, isn't perhaps 10.208.64.1 your dhcp server and aren't this reply to dhcp requests from clients? No lan here.. !! -- Best wishes, Andi -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Re[2]: apache

2003-06-10 Thread Mark L. Kahnt
On Tue, 2003-06-10 at 09:49, Martynas Domarkas wrote: An, 2003-06-10 13:46, Dominik Schulz ra: Perhaps I've got you wrong but wouldn't --- snip --- TransferLog | /usr/sbin/rotatelogs /var/www/domain.tld/logs/domain.tld-%Y-%m-%d_access.log 604800 --- end --- do it? Martynas

Re: strange broadcast packets

2003-06-10 Thread Phillip Hofmeister
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 10 Jun 2003 at 07:21:25PM +0100, Andreas W?st wrote: Hi Hello, isn't perhaps 10.208.64.1 your dhcp server and aren't this reply to dhcp requests from clients? No lan here.. !! That IP address might be used by your cable modem

unsubscribe

2003-06-10 Thread Johannes Kleinlercher
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: nautilus and portmapper port 111

2003-06-10 Thread Chris Caldwell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Wüst sent the following message Today: AW No matter if I try netstat -apn or netstat -atunp as someone pointed out AW in private, it gives the same result as netstat -tu -l -ee -p, apart AW from the established connections, namely there is

a weird script worm uploaded via php with debian 3.0 ?

2003-06-10 Thread Robert Ebright
Hello, I logged in to my server today to find that /usr/sbin/ncsd was running about 50 copies, since I don't have BIND installed, obviously something was up...they were also running with the user www-data... After a little bit of research I found a new crontab entryFile: /tmp/crontab.LYukbF 0

Re: apache

2003-06-10 Thread Jamie Heilman
Martynas Domarkas wrote: Thanks, but I realy do not like instalation of another packages. There must be a way to do this with apache configuration. Martynas Domarkas wrote: Thanks a lot. This is nice solution, but I still like apache do the job, and let logrotate simpy rotate

cronjob stuck

2003-06-10 Thread Dale Amon
Just ran across an interesting prob, wondered if anyone else has seen it. I added a repeating entry to /etc/cron.d/foo that ran every */5 minutes. I then tried to get rid of it... It will not die. I moved the file out of /etc/cron.d and it still is running. I cp'd the file and deleted the old

Re: nautilus and portmapper port 111

2003-06-10 Thread Andreas Wüst
Hello Chris Thank you for your answer! On Dienstag, 10-Jun-03 at 21:39:47, Chris Caldwell wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Wüst sent the following message Today: No matter if I try netstat -apn or netstat -atunp as someone in private, it gives the same

Re: strange broadcast packets

2003-06-10 Thread Andreas Wüst
Hi Phillip On Dienstag, 10-Jun-03 at 19:59:40, Phillip Hofmeister wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 10 Jun 2003 at 07:21:25PM +0100, Andreas W?st wrote: Hi Hello, isn't perhaps 10.208.64.1 your dhcp server and aren't this reply to dhcp requests from

Re: cronjob stuck

2003-06-10 Thread Dale Amon
On Tue, Jun 10, 2003 at 10:22:09PM +0100, Dale Amon wrote: Has anyone else had trouble making vixie cron STFU? Am I hallucinating? Is my brain in need of Coke and MM's? Actually I've now done pretty much just that and discovered it was a strange coincidence... some other process was doing

RE: OPENSSL

2003-06-10 Thread Reckhard, Tobias
On Tue, Jun 10, Stefan Neufeind wrote: I'm using a 128-bit-cert. You're using an X.509 certificate. The grade of symmetric encryption negotiated between browser and web server is (at least in theory) independent of the certificate. But browsers that support less encryption (e.g. IE that

Re: Scanning with reverse connections?

2003-06-10 Thread Phillip Hofmeister
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 09 Jun 2003 at 08:36:03PM -0500, Jones wrote: Phillip, I didn't post the entire file. Sorry, that was so far up in the thread I lost track of it... The default policy on the INPUT chain is DROP. I do allow incoming Good ssh ftp

Bom dia debian-security

2003-06-10 Thread kandrak
Message to debian-security@lists.debian.org Ola debian-security GANHAMOS O PRÊMIO DE MELHOR SITE DO RAMO ==Estamos operando em Novo Formato== Confira em: escuta21.kit.netou http://www.escuta21.kit.net ei debian-security Cuidado com o que fala ao Celular... ele tb tem

IMAP is too secure...

2003-06-10 Thread Hobbs, Richard
Helo, I think my IMAP server has become too secure... I'm using the current version of uw-imapd and libc-client2003debian, as listed in stable and stable-proposed-updates. I cannot log into my IMAP server any more... It keeps saying Invalid password. I can only assume it's using password

apache

2003-06-10 Thread Martynas Domarkas
Hi. I would like to use date string in apache log file names. Is there a way to use some directive in httpd.conf to be parsed as shell command like `date +%Y%m%d` or some other way to solve the problem? I will use logrotate mechanism of debian, and this date string could be used only for file

Re: apache

2003-06-10 Thread Jamie Heilman
Martynas Domarkas wrote: Hi. I would like to use date string in apache log file names. Is there a way to use some directive in httpd.conf to be parsed as shell command like `date +%Y%m%d` or some other way to solve the problem? I will use logrotate mechanism of debian, and this date string

Re: apache

2003-06-10 Thread Martynas Domarkas
An, 2003-06-10 12:01, Jamie Heilman rašė: Martynas Domarkas wrote: Hi. I would like to use date string in apache log file names. Is there a way to use some directive in httpd.conf to be parsed as shell command like `date +%Y%m%d` or some other way to solve the problem? I will use

Re: apache

2003-06-10 Thread Teun Vink
On Tue, 2003-06-10 at 11:07, Martynas Domarkas wrote: [...] Thanks, but I realy do not like instalation of another packages. There must be a way to do this with apache configuration. You could add a line to your /etc/logrotate.d/apache configuration, so it would look something like this:

Re: apache

2003-06-10 Thread Martynas Domarkas
An, 2003-06-10 12:56, Teun Vink rašė: On Tue, 2003-06-10 at 11:07, Martynas Domarkas wrote: [...] Thanks, but I realy do not like instalation of another packages. There must be a way to do this with apache configuration. You could add a line to your /etc/logrotate.d/apache

Re[2]: apache

2003-06-10 Thread Dominik Schulz
Perhaps I've got you wrong but wouldn't --- snip --- TransferLog | /usr/sbin/rotatelogs /var/www/domain.tld/logs/domain.tld-%Y-%m-%d_access.log 604800 --- end --- do it? Martynas Domarkas [EMAIL PROTECTED] wrote on 10 Jun 2003 13:02:55 +0300: An, 2003-06-10 12:56, Teun Vink raðë: On Tue,

RE: OPENSSL

2003-06-10 Thread Reckhard, Tobias
I'm trying to generate a 40-bit certificate using OPENSSL.Can anybody tell me if this is possible and with which package? The RSA keys used in X.509 certificates are typically 1024 or 2048 bits in length. What length the symmetric key used between two parties that have authenticated via X.509

Re: OPENSSL

2003-06-10 Thread Berin Lautenbach
Reckhard, Tobias wrote: There are web browsers that will negotiate 128 bits only if the certificate presented by the web server is a step-up certificate. I'm not sure what makes a certificate a step-up certificate, however, nor if this restriction still applies to current browsers. The step

Re: Re[2]: apache

2003-06-10 Thread Martynas Domarkas
An, 2003-06-10 13:46, Dominik Schulz rašė: Perhaps I've got you wrong but wouldn't --- snip --- TransferLog | /usr/sbin/rotatelogs /var/www/domain.tld/logs/domain.tld-%Y-%m-%d_access.log 604800 --- end --- do it? Martynas Domarkas [EMAIL PROTECTED] wrote on 10 Jun 2003 13:02:55 +0300:

Bom dia debian-securityESCUTA21 em Novo Formato

2003-06-10 Thread kandrak
Message to debian-security@lists.debian.org Ola debian-security GANHAMOS O PRÊMIO DE MELHOR SITE DO RAMO ==Estamos operando em Novo Formato== Confira em: escuta21.kit.netou http://www.escuta21.kit.net ei debian-security Cuidado com o que fala ao Celular... ele tb tem

Re: IMAP is too secure...

2003-06-10 Thread Jelmer Barhorst
Hi Richard, Since libc-client2003debian it's only posible to use a SSL connection. Most clients support it, but if you really want to allow plaintext IMAP again, please run 'dpkg-reconfigure libc-client2003debian' and awnser Yes to 'Should plaintext passwords be enabled?'. To enable it manualy,

Re: Default Apache install not fit for multiple domains/users

2003-06-10 Thread Stefan Neufeind
Thank you for the information. Am I right that php-skripts then would need an execute-bit set? Currently they don't have ... On 9 Jun 2003 at 17:59, Jon wrote: On Mon, 2003-06-09 at 17:28, Phillip Hofmeister wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 09 Jun 2003 at

Re: OPENSSL

2003-06-10 Thread Stefan Neufeind
I'm using a 128-bit-cert. But browsers that support less encryption (e.g. IE that comes with WinNT4) can't access my SSL-pages because the encryption doesn't allow degration. Is there any way to solve this prob? Using Apache with an official SSL-cert. PS: This just came to my mind when you

re: strange broadcast packets

2003-06-10 Thread kuba . jakubik
Hello, isn't perhaps 10.208.64.1 your dhcp server and aren't this reply to dhcp requests from clients? Carpe Noctem, Kuba BIGHard Jakubik

unsubscibe

2003-06-10 Thread loretta whitehead
hi my name is loretta i got this really cool incredimail downloaded on my computer..but it does not work...I've tried every thing my email will come to the incredimail account but i can not respond so i don't want it any more can you please take it off so i can use my sbcglobal account

Re: Default Apache install not fit for multiple domains/users

2003-06-10 Thread Jon
On Tue, 2003-06-10 at 08:24, Stefan Neufeind wrote: Thank you for the information. Am I right that php-skripts then would need an execute-bit set? Currently they don't have ... Unfortunately, yes. Otherwise you'll get a 500 Internal Server Error or the likes. - Jon -- [EMAIL PROTECTED]

Re: Default Apache install not fit for multiple domains/users

2003-06-10 Thread Phillip Hofmeister
On Tue, 10 Jun 2003 at 05:24:59PM +0200, Stefan Neufeind wrote: Thank you for the information. Am I right that php-skripts then would need an execute-bit set? Currently they don't have ... They will be being treated like a normal binary file, so yes (that is, if you want yours scripts to

Re: nautilus and portmapper port 111

2003-06-10 Thread Andreas Wüst
Hi Phillip On Dienstag, 10-Jun-03 at 01:33:07, Phillip Hofmeister wrote: On Tue, 10 Jun 2003 at 12:20:10AM +0100, Andreas W?st wrote: Hi Although I can see no evidence for portmapper being run by issuing netstat -tu -l -ee -p, everytime nautilus is started it connects to port 111, and

Re: strange broadcast packets

2003-06-10 Thread Andreas Wüst
Hi Hello, isn't perhaps 10.208.64.1 your dhcp server and aren't this reply to dhcp requests from clients? No lan here.. !! -- Best wishes, Andi

Re: Re[2]: apache

2003-06-10 Thread Mark L. Kahnt
On Tue, 2003-06-10 at 09:49, Martynas Domarkas wrote: An, 2003-06-10 13:46, Dominik Schulz rašė: Perhaps I've got you wrong but wouldn't --- snip --- TransferLog | /usr/sbin/rotatelogs /var/www/domain.tld/logs/domain.tld-%Y-%m-%d_access.log 604800 --- end --- do it? Martynas

Re: strange broadcast packets

2003-06-10 Thread Phillip Hofmeister
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 10 Jun 2003 at 07:21:25PM +0100, Andreas W?st wrote: Hi Hello, isn't perhaps 10.208.64.1 your dhcp server and aren't this reply to dhcp requests from clients? No lan here.. !! That IP address might be used by your cable modem

unsubscribe

2003-06-10 Thread Johannes Kleinlercher

a weird script worm uploaded via php with debian 3.0 ?

2003-06-10 Thread Robert Ebright
Hello, I logged in to my server today to find that /usr/sbin/ncsd was running about 50 copies, since I don't have BIND installed, obviously something was up...they were also running with the user www-data... After a little bit of research I found a new crontab entryFile: /tmp/crontab.LYukbF 0

Re: apache

2003-06-10 Thread Jamie Heilman
Martynas Domarkas wrote: Thanks, but I realy do not like instalation of another packages. There must be a way to do this with apache configuration. Martynas Domarkas wrote: Thanks a lot. This is nice solution, but I still like apache do the job, and let logrotate simpy rotate

cronjob stuck

2003-06-10 Thread Dale Amon
Just ran across an interesting prob, wondered if anyone else has seen it. I added a repeating entry to /etc/cron.d/foo that ran every */5 minutes. I then tried to get rid of it... It will not die. I moved the file out of /etc/cron.d and it still is running. I cp'd the file and deleted the old

Re: strange broadcast packets

2003-06-10 Thread Andreas Wüst
Hi Phillip On Dienstag, 10-Jun-03 at 19:59:40, Phillip Hofmeister wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 10 Jun 2003 at 07:21:25PM +0100, Andreas W?st wrote: Hi Hello, isn't perhaps 10.208.64.1 your dhcp server and aren't this reply to dhcp requests from

Re: nautilus and portmapper port 111

2003-06-10 Thread Andreas Wüst
Hello Chris Thank you for your answer! On Dienstag, 10-Jun-03 at 21:39:47, Chris Caldwell wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Wüst sent the following message Today: No matter if I try netstat -apn or netstat -atunp as someone in private, it gives the same

Re: cronjob stuck

2003-06-10 Thread Dale Amon
On Tue, Jun 10, 2003 at 10:22:09PM +0100, Dale Amon wrote: Has anyone else had trouble making vixie cron STFU? Am I hallucinating? Is my brain in need of Coke and MM's? Actually I've now done pretty much just that and discovered it was a strange coincidence... some other process was doing