Re: IPChains and IPtables

2005-06-03 Thread Martin G.H. Minkler
Adam Majer wrote: This is not a newsgroup. Sorry, I'm subscribed to so many usenet groups via parallel-izing/synching mailing lists, I do lose track. Martin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: IPChains and IPtables

2005-06-03 Thread Adam Majer
Martin G.H. Minkler wrote: Oh, and please take this thread to debian-firewall, I think although it certainly is security-related, that newsgroup still is the better choice for firewall questions :-) This is not a newsgroup. - Adam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subjec

Re: IPChains and IPtables

2005-06-03 Thread Thiago Ribeiro
I think that if you are using a firewall you want security... but using an old kernel version is a problem... You need to get the newer kernel version at http://www.kernel.org .. The more recently kernel version is 2.4.31 to iptables and 2.2.26 to ipchains. Iptables in my opinion is the most in

Re: IPChains and IPtables

2005-06-03 Thread Martin G.H. Minkler
Oh, and please take this thread to debian-firewall, I think although it certainly is security-related, that newsgroup still is the better choice for firewall questions :-) Martin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: IPChains and IPtables

2005-06-03 Thread Martin G.H. Minkler
Alohá! justme wrote: I am new to IPChains and IPtables welcome to the wonderful world of shooting Yourself in the foot ;-) I don't know if it can change the IPCHAINS to something else? with 'apt-get update && apt-get install iptables' You should be able to get iptables which is the righfu

Re: IPChains and IPtables

2005-06-03 Thread Adam Garside
On Fri, Jun 03, 2005 at 04:31:30PM +0200, justme wrote: > But I still have the Kernel 2.2.20-idepci That's the 2.2 installer kernel. It doesn't have ipchains support. install a real 2.2.20 kernel (apt-get install kernel-image and pick) or a real 2.4.18 image (if you want iptables instead of ipchain

IPChains and IPtables

2005-06-03 Thread justme
HI, I am new to IPChains and IPtables I have installed Debian woody but did upgrates and DIST upgrades I don't know if it can change the IPCHAINS to something else? But I still have the Kernel 2.2.20-idepci I am totaly new to Firewalls and I am learnig with the IPCHAINS HOWTO and when I t

Re: HTTP over SSH probes? [solved?]

2005-06-03 Thread Kevin B. McCarty
[EMAIL PROTECTED] wrote: me> But why would random IPs be requesting sciencedirect.com at my me> workstation which has nothing to do with it? Even for a worm that me> doesn't make any sense. > > For university wide subsciptions at sciencedirect it is sometimes > necessary to use a special proxy ser

Re: Please allow drupal 4.5.3-1

2005-06-03 Thread Hilko Bengen
Package: drupal Version: 4.5.2-0 Severity: critical Tags: security, sarge John Goerzen <[EMAIL PROTECTED]> writes: > On Fri, Jun 03, 2005 at 10:56:47AM +0200, Hilko Bengen wrote: >> Steve Langasek <[EMAIL PROTECTED]> writes: >> >> So, you are not accepting my drupal_4.5.3-1 (or -2) package into

Re: HTTP over SSH probes?

2005-06-03 Thread sfritsch
Hi! Example: Jun 2 17:46:42 benjo sshd[17291]: Bad protocol version identification 'GET http://www.sciencedirect.com/ HTTP/1.1' from :::202.207.192.30 The IP in this case seems to be in China. As far as I can tell nothing is listening at www.sciencedirect.com:22. The web site on port 80

Re: HTTP over SSH probes?

2005-06-03 Thread Martin Minkler
Kevin B. McCarty wrote: But why would random IPs be requesting sciencedirect.com at my workstation which has nothing to do with it? Even for a worm that doesn't make any sense. Maybe You were mistakenly queried as an anonymizing proxy of some sort by a project providing workarounds against

HTTP over SSH probes?

2005-06-03 Thread Kevin B. McCarty
Hi list, What on earth is up with the latest log entries where something is apparently trying to speak HTTP on the SSH port? Any ideas? Example: Jun 2 17:46:42 benjo sshd[17291]: Bad protocol version identification 'GET http://www.sciencedirect.com/ HTTP/1.1' from :::202.207.192.30 The

Re: Please allow drupal 4.5.3-1

2005-06-03 Thread John Goerzen
On Fri, Jun 03, 2005 at 10:56:47AM +0200, Hilko Bengen wrote: > Steve Langasek <[EMAIL PROTECTED]> writes: > > So, you are not accepting my drupal_4.5.3-1 (or -2) package into sarge > because 4.5.3 fixes more than cited security issue? Why are you not using the simple patch available at http://dr

Re: Please allow drupal 4.5.3-1

2005-06-03 Thread Hilko Bengen
Steve Langasek <[EMAIL PROTECTED]> writes: >> Umh, the release team most probably has even stricter rules than the >^^^ security, I guess :) >> release team when it comes to cluttering the diff... > > Absolutely -- but the release team has a deadline before which the > fix must be

Debian-security

2005-06-03 Thread Sandra Diaz
ENVIAMOS SU PUBLICIDAD POR E-MAIL (servicio unico en su tipo) # Mas de 450 bases EXCLUSIVAS (por rubro, provincia, pais, dominio...) Nacionales e Internacionales (NO vendemos bases de datos, ofrecemos el SERVICIO de envio masivo) # NOSOTROS hacemos el envio (no tenga problemas con su servidor) #