Bug#397991: harden-doc: please explain the raw socket issue further

2006-11-23 Thread Javier Fernández-Sanguino Peña
On Sat, Nov 11, 2006 at 12:17:13AM +0100, Francesco Poli wrote: > Firstoff, is having such processes listening on raw sockets dangerous? No, it's not. > Of course, Trojans are no good and should be removed, but what about > IDSes? Is there any danger in having IDSes listening to such raw > sock

Bug#397991: harden-doc: please explain the raw socket issue further

2006-11-13 Thread Simon Kelley
> On a system of mine (which performs NAT for a LAN behind it), I use > dnsmasq to provide a caching name server and a DHCP server for the > LAN. > On this system: > # netstat -anp | grep raw > raw0 0 0.0.0.0:1 0.0.0.0:* 7 > 1106/dnsmasq > Should

Bug#397991: harden-doc: please explain the raw socket issue further

2006-11-10 Thread Francesco Poli
Package: harden-doc Version: 3.10 Severity: wishlist Hi! Section 12.1.14.5 _I have services using port 1 and 6, what are they and how can I remove them?_ talks about processes listening on raw sockets. It's not really clear to me. Firstoff, is having such processes listening on raw sockets danger