Re: [SECURITY] [DSA 567-1] New libtiff packages fix remote code execution

2004-10-19 Thread Floris Kraak
Hoi, Onderstaand probleem vraagt om een upgrade van: libtiff3g libtiff3g-dev Het probleem is relatief serieus (veel packages gebruiken libtiff) en de upgrade waarschijnlijk low impact. Upgraden van libtiff3g-dev is niet mogelijk, daar is nog geen nieuwe versie van in testing. Dit development

PAM tarpit module for repeated SSH login attempts

2004-10-19 Thread Kevin B. McCarty
Hi list, Having tired of seeing attempts to log in as root via SSH in my logs, I wrote a quick-and-dirty hack to the pam_tally module in order to implement a tarpit. Here's the code: (License is of course GPL) http://www.princeton.edu/~kmccarty/downloads/pam_tarpit-0.0.1.tar.gz This will work

iptables problem

2004-10-19 Thread Thiago Ribeiro
Hello, I have any problems with DNAT iptables. I'm redirecting my external http port to remote host. I have 8 networks, beginning with 192.168.1-8. My remote machine and destination is 192.168.5.2 and all networks excluding 192.168.5.0/24 can navigate in this. When I'm running tcpdump or some

Re: iptables problem

2004-10-19 Thread martin f krafft
also sprach Thiago Ribeiro [EMAIL PROTECTED] [2004.10.19.2203 +0200]: -A PREROUTING -d 200.210.101.37 -p tcp -m tcp --dport 80 -j DNAT --to 192.168.5.2:80 I'm using network 7's address and the redirecting is perfect. Only network 5 can't to do this. If I read you correctly, this is because

Re: iptables problem

2004-10-19 Thread Geoff
Thiago Ribeiro wrote: Hello, I have any problems with DNAT iptables. I'm redirecting my external http port to remote host. I have 8 networks, beginning with 192.168.1-8. My remote machine and destination is 192.168.5.2 and all networks excluding 192.168.5.0/24 can navigate in this. When I'm

Re: PAM tarpit module for repeated SSH login attempts

2004-10-19 Thread Kevin B. McCarty
martin f. krafft wrote: Nice, though it does not look like a tarpit... instead, it just doesn't respond to requests. A tarpit would start the connection and hold it instead. Maybe I misunderstand the code, I am not really a PAM hacker. Well, I'm certainly not an expert either, this was my