Re: Paxtest results with default Grsec2 aren't impressive

2011-09-15 Thread Holger Schletz
Hi, I run: /usr/src# patch -p0 grsecurity-2.2.2-3.0.4-201109150655.patch You have /usr/src set as the working directory. Change it to /usr/src/linux-2.6-3.0.0 (or whatever your kernel source resides in) and run: patch -p1 -i ../grsecurity-2.2.2-3.0.4-201109150655.patch Failure is still

Re: Some services refreshed after upgrade following DSA-2054-1?

2010-06-07 Thread Holger Schletz
Hi, a default installation of apache on debian causes a reload every sunday as part of the log rotation. See /etc/logrotate.d/apache2. This behavior matches your description. I'm not familiar with the other services you mentioned, but I wouldn't be surprised if similar things happened here.

Re: apt-get not upgrading kernel

2008-09-12 Thread Holger Schletz
Hi, If dependencies change (which happens occasionally with kernel meta-packages), you will have to specify 'dist-upgrade' instead of 'upgrade'. Best regards, Holger Am Freitag 12 September 2008 04:21:53 schrieb Kheng Teong Goh: Hi! I have 2 system on slicehost running debian. apt-get

Re: halted firewalls

2007-02-25 Thread Holger Schletz
Hi, I'm actually not doing this for the improved security in ithis particular case. As this is a home LAN, I don't have tons of room/pc's. So the gateway in this case is just another pc, and using this idea I wouldn't have to boot this pc for no other reason than gatewaying. So it's mostly to

Re: help needed

2006-11-06 Thread Holger Schletz
Hi, at that mentioned time someone at least tried to access pages which are not accessable (index.php?img=1 e.g.) ther definately might be a problem in the code: if ( $_GET['page'] ) { include $_GET['page'].'/index.php'; } could this be the vulnerable code segment? Looks like

Re: Logauswertung

2006-04-24 Thread Holger Schletz
Hi, I use fwlogwatch. Greetings, Holger Am Sonntag, 23. April 2006 21:15 schrieb Bernd Eckenfels: Andreas [EMAIL PROTECTED] wrote: Mein Problem mit welchem Tool werte ich die Logs auf Angriffe aus (z. b. Portscans) und maile Sie mir zu. Ich weiss, die Frage wolltest du nicht hören, aber

Re: New squid packages 2.4.6-2woody9 restarts very often.

2005-07-26 Thread Holger Schletz
Hi, I can reproduce this by using wget on an URL which contains an ip (for example: wget http://193.99.144.85/;). Finally, this is the same issue I have with my SuSE box, but which I (and others) wasn't able to reproduce on Woody. There seems to be another factor. Very strange. As I

Re: New squid packages 2.4.6-2woody9 restarts very often.

2005-07-15 Thread Holger Schletz
Hi, I installed the reported package on a Woody box and wasn't able to reproduce it either. The problem on my SuSE Box seems to be of a different nature (BTW: I found that the crash is triggered by every numeric IP - I will work around with a redirector that tries to resolve the IP Address to a

Re: New squid packages 2.4.6-2woody9 restarts very often.

2005-07-12 Thread Holger Schletz
Hi, Just had the same Problem today on a SuSE server, where a patch was released last week that adresses (among others) the same DNS spoofing issue. Looks like a common bug. Wiping the cache didn't help for me. I increased the debug level to 2 and found the following URL in my cache.log,