Re: Firewall problem: Only works on a restart

2009-02-09 Thread McGuffey, David C.
On Sun, 8 Feb 2009 23:08:06 -0500 (EST), Steven W. Orr wrote On Sunday, Feb 8th 2009 at 17:15 -, quoth Mikkel L. Ellertson: =Steven W. Orr wrote: = I have a minor mystery and I don't know how to debug it. = = I have two computers in the house. Machine A has two NICS, one of which

Re: F10 64-bit - Wired Ethernet Problems with DNS

2009-02-06 Thread McGuffey, David C.
On Fri, 06 Feb 2009 00:50:47 -0500, Rick Bilonick wrote: On Thu, 2009-02-05 at 16:39 -0800, Aldo Foot wrote: On Thu, Feb 5, 2009 at 1:52 PM, Rick Bilonick r...@nauticom.net wrote: I installed F10 64-bit on a Dell quad computer without any problems. (The computer had been running F5.) I

F10 -- Xen, VirtualBox, or VMWare?

2009-02-05 Thread McGuffey, David C.
Rather than configuring a dual-boot machine for running those occasional Windows apps, which one of these virtualization tools provides the best (read most accurate) virtualization environment on F10? Which one is the easiest to install and configure? I had problems with VMWare on F7, and would

Re: F10, NetworkManager, and intermittent dns -- Update

2009-02-04 Thread McGuffey, David C.
On Date: Tue, 3 Feb 2009 15:59:25 -0500, McGuffey, David C. wrote: Problem persists. Have had several batches of patches pushed through yum auto update, but nothing concerning NM to fix this problem. I set PEERDNS=no with no affect. I set /etc/resolv.conf to a workable solution

Re: F10, NetworkManager, and intermittent dns -- Update

2009-02-03 Thread McGuffey, David C.
On Mon, 26 Jan 2009 07:21:05 -0700, Christopher A. Williams wrote: On Mon, 2009-01-26 at 08:47 -0500, Tom Horsley wrote: On Mon, 26 Jan 2009 23:23:49 +1100 David Timms wrote: Tom Horsley wrote: On Fri, 23 Jan 2009 13:32:08 -0500 McGuffey, David C. wrote: Update

Re: F10, NetworkManager, and intermittent dns -- Update

2009-01-23 Thread McGuffey, David C.
On Tue, 20 Jan 2009 14:41:39, McGuffey, David C. wrote: A couple of weeks back I did a fresh install of F10, blowing away F7. Got F10 up and running, did an update and then converted to static IP addressing. Everything went downhill from there. Could only get on the network about 1 out

Re: How does autofs/udev decide where to mount partitions?

2009-01-12 Thread McGuffey, David C.
I'm trying to figure out how my Windows partition gets automagically mounted as /media/disk. # mount ... fusectl on /sys/fs/fuse/connections type fusectl (rw) /dev/sdb1 on /media/disk type fuseblk (rw,nosuid,nodev,allow_other,blksize=4096) ... I used to have a line in

RE: F10 -- Failure to create ./resolv.conf.predhclient.eth0

2009-01-09 Thread McGuffey, David C.
Finally got some time to install F10 yesterday. Wiped away a working F7 install to do so. Selected dhcp to get up and running, and all worked A- OK. After the first reboot, I went back to configure static addressing on eth0. The operation failed and I received an SELinux alert that

F10 -- Failure to create ./resolv.conf.predhclient.eth0

2009-01-07 Thread McGuffey, David C.
Finally got some time to install F10 yesterday. Wiped away a working F7 install to do so. Selected dhcp to get up and running, and all worked A-OK. After the first reboot, I went back to configure static addressing on eth0. The operation failed and I received an SELinux alert that stated:

Bastille on F10?

2008-12-11 Thread McGuffey, David C.
Anyone tested the Bastille hardening process on F10? In a few days I'll be building an F10 box and plan to lock it down. Would be nice to start with Bastille rather than having keep tweaking old scripts. Dave McGuffey Principal Information System Security Engineer // NSA-IEM, NSA-IAM SAIC,

Mobile phone SIM card editing tool?

2008-12-11 Thread McGuffey, David C.
Have done a few searches and the only ones I've found have been for Windows. Anyone aware of a decent one that runs under Fedora? Dave McGuffey Principal Information System Security Engineer // NSA-IEM, NSA-IAM SAIC, IISBU, Columbia, MD -- fedora-list mailing list fedora-list@redhat.com To

RE: fedora-list Digest, Vol 55, Issue 157

2008-09-18 Thread McGuffey, David C.
Has any work taken place in the Linux community toward building a trusted loader into Linux. If so, what is the status? If not, why not? This would be against the very idea of Free Software, i.e. the right to freely modify your software and use such modified versions. See

Whitelisting only digitally signed binaries

2008-09-17 Thread McGuffey, David C.
There is quite a raging debate in the Information Assurance arena about the failure of blacklisting and that we need to migrate to whitelisting, or at least a balance between blacklisting and whitelisting. We spend a lot of time developing security functions (like SELinux, ClamAV, etc.), which is

RE: Lost DNS lookup

2008-07-21 Thread McGuffey, David C.
-Original Message- From: McGuffey, David C. Sent: 12 June, 2008 11:00 To: [EMAIL PROTECTED] Cc: fedora-list@redhat.com Subject: Re: Lost DNS lookup On Thu, 12 Jun 2008 22:48:12 +1000 David Timms [EMAIL PROTECTED] wrote McGuffey, David C. wrote: A few days ago, a workstation

RE: Lost DNS lookup (SOLVED)

2008-07-02 Thread McGuffey, David C.
In a previous message I wrote: A few days ago, a workstation in a lab stopped doing DNS lookups to support connectivity to SMTP, POP, and web services. As I think back, the behavior started in close proximity in time to a stunnel update. Checked the usual locations and all seems to be ok.

Re: Lost DNS lookup

2008-06-12 Thread McGuffey, David C.
On Thu, 12 Jun 2008 22:48:12 +1000 David Timms [EMAIL PROTECTED] wrote McGuffey, David C. wrote: A few days ago, a workstation in a lab stopped doing DNS lookups to support connectivity to SMTP, POP, and web services. As I think back, the behavior started in close proximity in time