kind of virtual server

2003-11-09 Thread LeVA
Hello!

Is it possible to make some kind of a little virtual server inside a
debian box? I want to run a separate sshd (for example on port ),
and when someone connects to it, it reads the passwd file, and the
shadow file from a different directory than /etc (for example
/users/etc). And under that /users dir there will be another home dir
for the users, who connects to the  port, and a separate /bin and so
on. I thought that I could make this with installing everything (sshd,
apache, etc...) undert that /users dir, and after that I'm chrooting to
/users. But how can I setup debian to read a different shadow/passwd
file right after the connection (not after chrooting to /users/).
Thanks!

Daniel

--
LeVA


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: Mysterious process talking on 799=2049 tcp - what is using the ports?

2003-11-09 Thread Ingo Strüwing
Hanasaki JiJi wrote:
How do i find out what is using those ports?

netstat  -natl | grep 799
tcp0  0192.168.1.200:799
192.168.1.1:2049ESTABLISHED
below returns no output
lsof -i tcp:799
Nothing is using the port but it is in netstat
Did you run the command as root?

If you run lsof and netstat -p under a normal uid,
they will show only the processes of that uid.
Regards
Ingo Struwing


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: clamscan avavis spamassassin with exim4 on sarge

2003-11-09 Thread Thomas Ritter
On Sunday 09 November 2003 07:08, Hanasaki JiJi wrote:
 Anyone have/working on integration of these?

There is a clamscan.pl somewhere on the net. This works, like Spamassassin, 
with procmail. But be aware! When I turn on my desktop system with this setup 
in the morning and lots of spam/virus mails are in my inbox, the system load 
jumps up to 25 (!!)

==SNIP procmailrc
:0fw
|/usr/bin/spamassassin

:0fw
|/usr/local/bin/clamfilter.pl
==SNIP

Greetings,
-- 
Thomas Ritter

Those who would give up essential liberty, to purchase a little temporary 
safety, deserve neither liberty nor safety.  - Benjamin Franklin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Mysterious process talking on 799=2049 tcp - what is using the ports?

2003-11-09 Thread Hanasaki JiJi
Thus the reason for posting to this list.  the command was run as root. 
 Does the following theory seem plausable?
	This is a kernel process for nfs over tcp

Ingo Strüwing wrote:
Hanasaki JiJi wrote:

How do i find out what is using those ports?

netstat  -natl | grep 799
tcp0  0192.168.1.200:799
192.168.1.1:2049ESTABLISHED
below returns no output
lsof -i tcp:799
Nothing is using the port but it is in netstat


Did you run the command as root?

If you run lsof and netstat -p under a normal uid,
they will show only the processes of that uid.
Regards
Ingo Struwing




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: clamscan avavis spamassassin with exim4 on sarge

2003-11-09 Thread Christian G. Warden
On Sun, Nov 09, 2003 at 12:08:40AM -0600, Hanasaki JiJi wrote:
 Anyone have/working on integration of these?
 
 clam spamc and amavis are installed however, they dont seem to update
 the /etc/exim4/conf.d  of the new packaging system.
 
 thank you.

exim4-daemon-heavy has the exiscan-acl patch providing clamav and
spamassassin processing in your data acl.  I don't know if amavis offers
anything additional, but the exiscan-acl/clamav/spamassassin combination
works well for me.

xn


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: kind of virtual server

2003-11-09 Thread John West
You might check out the vserver package.  It uses kernel-patch-ctx to 
create a virtual server environment that is chroot'd as well as isolated 
in its own security context.

--John

LeVA wrote:

Date: Sun, 09 Nov 2003 10:43:52 +0100
From: LeVA [EMAIL PROTECTED]
To: Debian-Security [EMAIL PROTECTED]
Subject: kind of virtual server
Hello!

Is it possible to make some kind of a little virtual server inside a
debian box? I want to run a separate sshd (for example on port ),
and when someone connects to it, it reads the passwd file, and the
shadow file from a different directory than /etc (for example
/users/etc). And under that /users dir there will be another home dir
for the users, who connects to the  port, and a separate /bin and so
on. I thought that I could make this with installing everything (sshd,
apache, etc...) undert that /users dir, and after that I'm chrooting to
/users. But how can I setup debian to read a different shadow/passwd
file right after the connection (not after chrooting to /users/).
Thanks!

Daniel

--
LeVA


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
--
John West  [EMAIL PROTECTED]
- 'tis an ill wind that blows no minds -
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: kind of virtual server

2003-11-09 Thread Volker Birk
LeVA [EMAIL PROTECTED] wrote:
 Is it possible to make some kind of a little virtual server inside a
 debian box?

User Mode Linux, vserver.

VB.
-- 
X-Pie Software GmbH
Postfach 1540, 88334 Bad Waldsee
Phone +49-7524-996806 Fax +49-7524-996807
mailto:[EMAIL PROTECTED]  http://www.x-pie.de


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



clamscan avavis spamassassin with exim4 on sarge

2003-11-09 Thread Hanasaki JiJi

Anyone have/working on integration of these?

clam spamc and amavis are installed however, they dont seem to update
the /etc/exim4/conf.d  of the new packaging system.

thank you.




kind of virtual server

2003-11-09 Thread LeVA

Hello!

Is it possible to make some kind of a little virtual server inside a
debian box? I want to run a separate sshd (for example on port ),
and when someone connects to it, it reads the passwd file, and the
shadow file from a different directory than /etc (for example
/users/etc). And under that /users dir there will be another home dir
for the users, who connects to the  port, and a separate /bin and so
on. I thought that I could make this with installing everything (sshd,
apache, etc...) undert that /users dir, and after that I'm chrooting to
/users. But how can I setup debian to read a different shadow/passwd
file right after the connection (not after chrooting to /users/).

Thanks!

Daniel

--
LeVA





Re: Mysterious process talking on 799=2049 tcp - what is using the ports?

2003-11-09 Thread Ingo Strüwing

Hanasaki JiJi wrote:

How do i find out what is using those ports?

netstat  -natl | grep 799
tcp0  0192.168.1.200:799
192.168.1.1:2049ESTABLISHED

below returns no output
lsof -i tcp:799
Nothing is using the port but it is in netstat


Did you run the command as root?

If you run lsof and netstat -p under a normal uid,
they will show only the processes of that uid.

Regards
Ingo Struwing




Re: clamscan avavis spamassassin with exim4 on sarge

2003-11-09 Thread Thomas Ritter
On Sunday 09 November 2003 07:08, Hanasaki JiJi wrote:
 Anyone have/working on integration of these?

There is a clamscan.pl somewhere on the net. This works, like Spamassassin, 
with procmail. But be aware! When I turn on my desktop system with this setup 
in the morning and lots of spam/virus mails are in my inbox, the system load 
jumps up to 25 (!!)

==SNIP procmailrc
:0fw
|/usr/bin/spamassassin

:0fw
|/usr/local/bin/clamfilter.pl
==SNIP

Greetings,
-- 
Thomas Ritter

Those who would give up essential liberty, to purchase a little temporary 
safety, deserve neither liberty nor safety.  - Benjamin Franklin



Re: Mysterious process talking on 799=2049 tcp - what is using the ports?

2003-11-09 Thread Hanasaki JiJi
Thus the reason for posting to this list.  the command was run as root. 
 Does the following theory seem plausable?

This is a kernel process for nfs over tcp

Ingo Strüwing wrote:

Hanasaki JiJi wrote:


How do i find out what is using those ports?

netstat  -natl | grep 799
tcp0  0192.168.1.200:799
192.168.1.1:2049ESTABLISHED

below returns no output
lsof -i tcp:799
Nothing is using the port but it is in netstat



Did you run the command as root?

If you run lsof and netstat -p under a normal uid,
they will show only the processes of that uid.

Regards
Ingo Struwing







Re: clamscan avavis spamassassin with exim4 on sarge

2003-11-09 Thread Christian G. Warden
On Sun, Nov 09, 2003 at 12:08:40AM -0600, Hanasaki JiJi wrote:
 Anyone have/working on integration of these?
 
 clam spamc and amavis are installed however, they dont seem to update
 the /etc/exim4/conf.d  of the new packaging system.
 
 thank you.

exim4-daemon-heavy has the exiscan-acl patch providing clamav and
spamassassin processing in your data acl.  I don't know if amavis offers
anything additional, but the exiscan-acl/clamav/spamassassin combination
works well for me.

xn



Re: kind of virtual server

2003-11-09 Thread John West


You might check out the vserver package.  It uses kernel-patch-ctx to 
create a virtual server environment that is chroot'd as well as isolated 
in its own security context.


--John

LeVA wrote:


Date: Sun, 09 Nov 2003 10:43:52 +0100
From: LeVA [EMAIL PROTECTED]
To: Debian-Security debian-security@lists.debian.org
Subject: kind of virtual server

Hello!

Is it possible to make some kind of a little virtual server inside a
debian box? I want to run a separate sshd (for example on port ),
and when someone connects to it, it reads the passwd file, and the
shadow file from a different directory than /etc (for example
/users/etc). And under that /users dir there will be another home dir
for the users, who connects to the  port, and a separate /bin and so
on. I thought that I could make this with installing everything (sshd,
apache, etc...) undert that /users dir, and after that I'm chrooting to
/users. But how can I setup debian to read a different shadow/passwd
file right after the connection (not after chrooting to /users/).

Thanks!

Daniel

--
LeVA




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]


--
John West  [EMAIL PROTECTED]
- 'tis an ill wind that blows no minds -



Re: kind of virtual server

2003-11-09 Thread Volker Birk
LeVA [EMAIL PROTECTED] wrote:
 Is it possible to make some kind of a little virtual server inside a
 debian box?

User Mode Linux, vserver.

VB.
-- 
X-Pie Software GmbH
Postfach 1540, 88334 Bad Waldsee
Phone +49-7524-996806 Fax +49-7524-996807
mailto:[EMAIL PROTECTED]  http://www.x-pie.de