Re: [leaf-user] Bering uClibc LEAF user says THANKS!

2004-12-20 Thread Mike Noyes
On Sun, 2004-12-19 at 12:32, Terry Erickson wrote:
Now I want to learn about how to test how secure my setup is. Any
 suggestions? I know next to nothing technically about network security;
 I just barely made it through installing Bering uClibc here but I'm
 relatively confident I did it right, thanks to the good documentation.
 Still there's no reason why I shouldn't make sure. 

Terry,
Install Nessus, and test away. There are on-line services too, but they
usually want money to test you external connection thoroughly.

Nessus
http://www.nessus.org/

Security Scanning
http://directory.google.com/Top/Computers/Security/Internet/Services/Security_Scanning/

-- 
Mike Noyes mhnoyes at users.sourceforge.net
http://sourceforge.net/users/mhnoyes/
SF.net Projects: ffl, leaf, phpwebsite, phpwebsite-comm, sitedocs



---
SF email is sponsored by - The IT Product Guide
Read honest  candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Bash and Bering 1.2

2004-12-20 Thread rawdata
I found the bash.lrp package from Charles Steinkuehler's Bering-CD site 
and would like to use it with my pre-existing Bering 1.2 setup.  What 
exactly is involved (obviously more than lrpkg -i etc...), and what other 
modifications do I have to make for it (I've read that it throws a few 
scripts for a loop)?

All I want is command-line completion, really.  If there's a simpler way 
to accomplish it, please let me know.

Thanks as always.  And happy holidays, where applicable.
:Max

---
SF email is sponsored by - The IT Product Guide
Read honest  candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Bash and Bering 1.2

2004-12-20 Thread Erich Titl
rawdata wrote:
I found the bash.lrp package from Charles Steinkuehler's Bering-CD 
site and would like to use it with my pre-existing Bering 1.2 setup.  
What exactly is involved (obviously more than lrpkg -i etc...), and 
what other modifications do I have to make for it (I've read that it 
throws a few scripts for a loop)?
Basically just lrpkg -i :-)
You will have to relink /bin/sh with /bin/ash to make all Bering scripts 
happy. Dig in the archives, there is a message explaining the details.

cheers
Erich


---
SF email is sponsored by - The IT Product Guide
Read honest  candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Bering uClibc LEAF user says THANKS!

2004-12-20 Thread gctaylor2004-leaf
If I understand your question, one place you can go to
is http://www.grc.com/default.htm

Look for ShieldsUP!, click the link and follow the
directions there.  You'll need to do this from one of
your machines inside your firewall.

Gary

--- Terry Erickson [EMAIL PROTECTED]
wrote:

Now I want to learn about how to test how secure
 my setup is. Any
 suggestions? 





---
SF email is sponsored by - The IT Product Guide
Read honest  candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Strange firewall hits

2004-12-20 Thread Troy Aden
Hello list, 

I am getting these hits showing up on my firewall box running Bering UcLibc
2.2.2 with shorewall 2.0. I am not sure why these are happening...

Dec 21 12:23:15 Kronos-Saskatoon Shorewall:all2all:REJECT: IN=eth1 OUT=
MAC=00:04:75:90:02:b2:00:0d:bc:26:c4:80:08:00  SRC=192.168.0.12
DST=154.123.247.142 LEN=44 TOS=00 PREC=0x00 TTL=127 ID=16967 DF PROTO=TCP
SPT=1368 DPT=25 SEQ=767837137 ACK=0 WINDOW=8192 SYN URGP=0

My firewall rules clearly say that my mail server can e-mail outbound PORT
25 TCP. I am not sure why it looks like the mail server is trying to resolve
to the external interface address. (154.123.247.142)
These hits are generated 1:1 for every e-mail that comes in to our mail
server at 192.168.0.12. 

My Policy looks like this:
#SOURCE DESTPOLICY  LOG LIMIT:BURST
#   LEVEL
loc net DROPULOG
net all DROPULOG
# If you want open access to the Internet from your Firewall
# remove the comment from the following line.
fw net ACCEPT
fw  loc ACCEPT
#
# THE FOLLOWING POLICY MUST BE LAST
#
all all REJECT  ULOG

My Rules look like this:

#Allow Mail inbound
DNATnet loc:192.168.0.150 tcp 25 #Postoffice
(Mail relay - Virus / Spam scanner - Relay's mail to Exchange server @
192.168.0.12)

#Allow MAIL outbound FROM EXCHANGE ONLY!!!
ACCEPT  loc:192.168.0.12  net tcp 25

Can anyone tell me what could be happening here that would cause these hits?
Am I missing something in my polices or rules?

Thanks in advance!


Troy



---
SF email is sponsored by - The IT Product Guide
Read honest  candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Help! Problems getting Raid5 to work. Banging my head against the wall!

2004-12-20 Thread Michael McClure
Hi, it's been a very long time since I've posted, but I'm stuck on my raid 
config.  I'm running Dachstein w/the raid-ide kernal:

# uname -a
Linux toaster 2.2.19-3-LEAF-RAID #2 Sat Dec 1 17:15:49 CST 2001 i386 unknown
I loaded the raid0,1,5 modules, and raid.lrp.  I also have the hdsupp tools:
# lrpkg -l
NameVersionDescription
===-==-==
root4.0.6
etc 4.0.1
ramlog  1.1Creates additinal ramdisks on boot
local   4.0.6  Local package. This package does not contain a
modules 4.0.6  Modules package. Contains kernel modules and u
libz1.1.4  zlib compression library. Needed for openssh
vim 5.3-1
sshd3.5p1  OpenSSH sshd daemon.
raid0.90.0 RAID support
sftp3.5p1  OpenSSH sftp client  server programs.
ssh 3.5p1  OpenSSH ssh  scp programs.
hdsupp  1.18-1 This package installs full hard drive support
smb
swat   This program is part of the Samba suite.
I have the following raid conf file:
raiddev /dev/md0
  raid-level  5
  nr-raid-disks   3
  nr-spare-disks  0
  chunk-size  4
  persistent-superblock   1
  device  /dev/hdc1
  raid-disk   0
  device  /dev/hdd1
  raid-disk   1
  device  /dev/hdd2
  raid-disk   2
Yes, I know, ignore the fact that the 2nd partition sets are on the same
disk -- I'm just trying to see if I can get it to work.  I also tried
doing a straight Raid 1 using the first two partitions in the set above
and get the same error.
When I do my mkraid command, I get the following:
# mkraid /dev/md0
cannot determine md version: No such file or directory
#
What am I missing?
thanks.
mike.


---
SF email is sponsored by - The IT Product Guide
Read honest  candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html