[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure

2003-03-26 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 269-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze March 26th, 2003

[SECURITY] [DSA 270-1] New Linux kernel packages (mips + mipsel) fix local root exploit

2003-03-26 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 270-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze March 27sh, 2003

Re: is iptables enough?

2003-03-26 Thread Steffen Burmeister
Hi all, On Tue, Mar 25, 2003 at 01:46:32PM -0600, Jones wrote: One thing they forgot to mention was that they used Exchange for email. That means instead of running exim, I will have to forward SMTP POP traffic to their Exchange server. The Exchange server will not be directly connected

noboby with a shell !!

2003-03-26 Thread Yoann
hi, I look at in the file /etc/passwd on my server today, and I saw the user nobody has a shell !!. When I installed my debian (sarge, I know it's bad, but it's just a server for me...) I put /bin/false. A few days ago, while an upgrade, apt asked to me to upgrade that file to the new version

Re: noboby with a shell !!

2003-03-26 Thread Sven Hoexter
On Wed, Mar 26, 2003 at 11:35:38AM +0100, Yoann wrote: Hi, I look at in the file /etc/passwd on my server today, and I saw the user nobody has a shell !!. When I installed my debian (sarge, I know it's bad, but it's just a server for me...) I put /bin/false. A few days ago, while an

Re: noboby with a shell !!

2003-03-26 Thread robjeh
Does the user nobody has got a password in /etc/shadow ? greets Robbert Citeren Yoann [EMAIL PROTECTED]: hi, I look at in the file /etc/passwd on my server today, and I saw the user nobody has a shell !!. When I installed my debian (sarge, I know it's bad, but it's just a server for

Re: noboby with a shell !!

2003-03-26 Thread Yoann
Hi, I look at in the file /etc/passwd on my server today, and I saw the user nobody has a shell !!. When I installed my debian (sarge, I know it's bad, but it's just a server for me...) I put /bin/false. A few days ago, while an upgrade, apt asked to me to upgrade that file to the new version and

bind squid to interface

2003-03-26 Thread Michael West
I would like to bind squid to a specific interface. I thought the easy way to do this would be with xinetd, but I get: Mar 26 06:05:09 localhost squid: Cannot open HTTP Port Mar 26 06:05:49 localhost last message repeated 10 times When I try to use it. Normally this would mean there is a

Re: noboby with a shell !!

2003-03-26 Thread François TOURDE
Yoann [EMAIL PROTECTED] writes: there is an * in /etc/shadow for nobody, but all services (ftp, web...) are running with the uid nobody so if there is an attack on an unknow bug (I keep up to date all services) on those services (buffer overflow for example), It's will be unsercure.. . It

Re: bind squid to interface

2003-03-26 Thread Michael Streb
On Wednesday 26 March 2003 15:16, Michael West wrote: Hi there, how about : http_port xxx.xxx.xxx.xxx:8000 tcp_outgoing_address xxx.xxx.xxx.xxx udp_outgoing_address xxx.xxx.xxx.xxx in the squid config and run squid as daemon ? Michi I would like to bind squid to a specific interface. I

Re: noboby with a shell !!

2003-03-26 Thread Noah L. Meyerhans
On Wed, Mar 26, 2003 at 12:11:58PM +0100, Sven Hoexter wrote: Well yes it could :) As long as the user has no valid password it's not very usefull. Take a look into the /etc/shadow and in the second field you'll find ! or * indicating that this user has a invalid password. See man 5 shadow.

Re: Re: noboby with a shell !!

2003-03-26 Thread martin . j
Dit e-mail adres bestaat niet -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: bind squid to interface

2003-03-26 Thread Christoph Moench-Tegeder
## Michael West ([EMAIL PROTECTED]): I would like to bind squid to a specific interface. http_port hostname:port http_port ip:port http_port port It's documented. Regards, cmt -- Spare Space -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact

Re: bind squid to interface

2003-03-26 Thread Jens Schuessler
* Michael West [EMAIL PROTECTED] [26-03-03 15:16]: I would like to bind squid to a specific interface. Look at /etc/squid.conf: # NETWORK OPTIONS # - # TAG: http_port # Usage: port #

Re: bind squid to interface

2003-03-26 Thread Frank Peters
Michael West wrote: I would like to bind squid to a specific interface. [...] What am I doing wrong with xinetd? What other ways are there to make squid bind to an interface? IIRC there used to be an option tcp_incoming_adress in /etc/squid.conf, but I think lately it was changed to be

Removing invalid keys from keyring

2003-03-26 Thread Kjetil Kjernsmo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, I guess this question might be more suited on gnupg-users, but as I'm not subscribed to that list, I hope you can forgive me for asking here... It is a really short question... Is there a way to remove revoked/expired and otherwise invalid

Re: noboby with a shell !!

2003-03-26 Thread Sven Hoexter
On Wed, Mar 26, 2003 at 10:50:48AM -0500, Noah L. Meyerhans wrote: On Wed, Mar 26, 2003 at 12:11:58PM +0100, Sven Hoexter wrote: Well yes it could :) As long as the user has no valid password it's not very usefull. Take a look into the /etc/shadow and in the second field you'll find ! or *

speaking of squid ports...

2003-03-26 Thread Jason Lunz
does anyone know what squid's udp sockets are for, and how to close them? As far as I can tell, I don't need them, but I've been unable to find a combination of squid directives to make them all go away. The icp port can be closed using icp_port 0, but the other one is dynamic and isn't referred

Re: speaking of squid ports...

2003-03-26 Thread Kevin Cheek
I believe that UDP port is for receiving DNS responses. -Kevin Jason Lunz [EMAIL PROTECTED] writes: does anyone know what squid's udp sockets are for, and how to close them? As far as I can tell, I don't need them, but I've been unable to find a combination of squid directives to make them

Re: speaking of squid ports...

2003-03-26 Thread Noah L. Meyerhans
On Wed, Mar 26, 2003 at 02:15:28PM -0500, Kevin Cheek wrote: I believe that UDP port is for receiving DNS responses. Umm... No. It's used for ICP, a protocol for intercommunication between squid caches. For example, at my site we have two different caches. One is basically transparent.

Re: speaking of squid ports...

2003-03-26 Thread Alexander Reelsen
On Wed, Mar 26, 2003 at 03:18:36PM -0500, Noah L. Meyerhans wrote: On Wed, Mar 26, 2003 at 02:15:28PM -0500, Kevin Cheek wrote: I believe that UDP port is for receiving DNS responses. It's used for ICP, a protocol for intercommunication between squid caches. For example, at my site we have

Re: speaking of squid ports...

2003-03-26 Thread Kevin Cheek
Noah L. Meyerhans [EMAIL PROTECTED] writes: On Wed, Mar 26, 2003 at 02:15:28PM -0500, Kevin Cheek wrote: I believe that UDP port is for receiving DNS responses. Umm... No. It's used for ICP, a protocol for intercommunication between squid caches. For example, at my site we have two

Re: speaking of squid ports...

2003-03-26 Thread Jason Lunz
[EMAIL PROTECTED] said: Umm... No. It's used for ICP, a protocol for intercommunication between squid caches. For example, at my site we have two different caches. One is basically transparent. The other provides anonymizing services. But, through ICP, both caches can make use of each

Re: is iptables enough?

2003-03-26 Thread Steffen Burmeister
Hi all, On Tue, Mar 25, 2003 at 01:46:32PM -0600, Jones wrote: One thing they forgot to mention was that they used Exchange for email. That means instead of running exim, I will have to forward SMTP POP traffic to their Exchange server. The Exchange server will not be directly connected

noboby with a shell !!

2003-03-26 Thread Yoann
hi, I look at in the file /etc/passwd on my server today, and I saw the user nobody has a shell !!. When I installed my debian (sarge, I know it's bad, but it's just a server for me...) I put /bin/false. A few days ago, while an upgrade, apt asked to me to upgrade that file to the new

Re: noboby with a shell !!

2003-03-26 Thread Sven Hoexter
On Wed, Mar 26, 2003 at 11:35:38AM +0100, Yoann wrote: Hi, I look at in the file /etc/passwd on my server today, and I saw the user nobody has a shell !!. When I installed my debian (sarge, I know it's bad, but it's just a server for me...) I put /bin/false. A few days ago, while an

Re: noboby with a shell !!

2003-03-26 Thread robjeh
Does the user nobody has got a password in /etc/shadow ? greets Robbert Citeren Yoann [EMAIL PROTECTED]: hi, I look at in the file /etc/passwd on my server today, and I saw the user nobody has a shell !!. When I installed my debian (sarge, I know it's bad, but it's just a server for

Re: noboby with a shell !!

2003-03-26 Thread Yoann
Hi, I look at in the file /etc/passwd on my server today, and I saw the user nobody has a shell !!. When I installed my debian (sarge, I know it's bad, but it's just a server for me...) I put /bin/false. A few days ago, while an upgrade, apt asked to me to upgrade that file to the new version

bind squid to interface

2003-03-26 Thread Michael West
I would like to bind squid to a specific interface. I thought the easy way to do this would be with xinetd, but I get: Mar 26 06:05:09 localhost squid: Cannot open HTTP Port Mar 26 06:05:49 localhost last message repeated 10 times When I try to use it. Normally this would mean there is a

Re: noboby with a shell !!

2003-03-26 Thread François TOURDE
Yoann [EMAIL PROTECTED] writes: there is an * in /etc/shadow for nobody, but all services (ftp, web...) are running with the uid nobody so if there is an attack on an unknow bug (I keep up to date all services) on those services (buffer overflow for example), It's will be unsercure.. . It

Re: bind squid to interface

2003-03-26 Thread Michael Streb
On Wednesday 26 March 2003 15:16, Michael West wrote: Hi there, how about : http_port xxx.xxx.xxx.xxx:8000 tcp_outgoing_address xxx.xxx.xxx.xxx udp_outgoing_address xxx.xxx.xxx.xxx in the squid config and run squid as daemon ? Michi I would like to bind squid to a specific interface. I

Re: noboby with a shell !!

2003-03-26 Thread Noah L. Meyerhans
On Wed, Mar 26, 2003 at 12:11:58PM +0100, Sven Hoexter wrote: Well yes it could :) As long as the user has no valid password it's not very usefull. Take a look into the /etc/shadow and in the second field you'll find ! or * indicating that this user has a invalid password. See man 5 shadow.

Re: Re: noboby with a shell !!

2003-03-26 Thread martin . j
Dit e-mail adres bestaat niet

Re: bind squid to interface

2003-03-26 Thread Christoph Moench-Tegeder
## Michael West ([EMAIL PROTECTED]): I would like to bind squid to a specific interface. http_port hostname:port http_port ip:port http_port port It's documented. Regards, cmt -- Spare Space

Re: bind squid to interface

2003-03-26 Thread Frank Peters
Michael West wrote: I would like to bind squid to a specific interface. [...] What am I doing wrong with xinetd? What other ways are there to make squid bind to an interface? IIRC there used to be an option tcp_incoming_adress in /etc/squid.conf, but I think lately it was changed to be

Re: bind squid to interface

2003-03-26 Thread Jens Schuessler
* Michael West [EMAIL PROTECTED] [26-03-03 15:16]: I would like to bind squid to a specific interface. Look at /etc/squid.conf: # NETWORK OPTIONS # - # TAG: http_port # Usage: port #

Removing invalid keys from keyring

2003-03-26 Thread Kjetil Kjernsmo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, I guess this question might be more suited on gnupg-users, but as I'm not subscribed to that list, I hope you can forgive me for asking here... It is a really short question... Is there a way to remove revoked/expired and otherwise invalid

Re: noboby with a shell !!

2003-03-26 Thread Sven Hoexter
On Wed, Mar 26, 2003 at 10:50:48AM -0500, Noah L. Meyerhans wrote: On Wed, Mar 26, 2003 at 12:11:58PM +0100, Sven Hoexter wrote: Well yes it could :) As long as the user has no valid password it's not very usefull. Take a look into the /etc/shadow and in the second field you'll find ! or

speaking of squid ports...

2003-03-26 Thread Jason Lunz
does anyone know what squid's udp sockets are for, and how to close them? As far as I can tell, I don't need them, but I've been unable to find a combination of squid directives to make them all go away. The icp port can be closed using icp_port 0, but the other one is dynamic and isn't referred

Re: speaking of squid ports...

2003-03-26 Thread Kevin Cheek
I believe that UDP port is for receiving DNS responses. -Kevin Jason Lunz [EMAIL PROTECTED] writes: does anyone know what squid's udp sockets are for, and how to close them? As far as I can tell, I don't need them, but I've been unable to find a combination of squid directives to make them

Re: speaking of squid ports...

2003-03-26 Thread Noah L. Meyerhans
On Wed, Mar 26, 2003 at 02:15:28PM -0500, Kevin Cheek wrote: I believe that UDP port is for receiving DNS responses. Umm... No. It's used for ICP, a protocol for intercommunication between squid caches. For example, at my site we have two different caches. One is basically transparent.

Re: speaking of squid ports...

2003-03-26 Thread Alexander Reelsen
On Wed, Mar 26, 2003 at 03:18:36PM -0500, Noah L. Meyerhans wrote: On Wed, Mar 26, 2003 at 02:15:28PM -0500, Kevin Cheek wrote: I believe that UDP port is for receiving DNS responses. It's used for ICP, a protocol for intercommunication between squid caches. For example, at my site we have

Re: speaking of squid ports...

2003-03-26 Thread Kevin Cheek
Noah L. Meyerhans [EMAIL PROTECTED] writes: On Wed, Mar 26, 2003 at 02:15:28PM -0500, Kevin Cheek wrote: I believe that UDP port is for receiving DNS responses. Umm... No. It's used for ICP, a protocol for intercommunication between squid caches. For example, at my site we have two

Re: speaking of squid ports...

2003-03-26 Thread Jason Lunz
[EMAIL PROTECTED] said: Umm... No. It's used for ICP, a protocol for intercommunication between squid caches. For example, at my site we have two different caches. One is basically transparent. The other provides anonymizing services. But, through ICP, both caches can make use of each