Re: suid

2004-04-17 Thread Kuba Jakubik
IMHO, this would be bad. The Cron Daemon would have to sanitize the input of the crontab each time it checks the file for running (presumably every minute, unless their is a way of notifying the cron daemon of a new crontab.) The default crontab in debian creates a file in /tmp, the user modifies

Re: suid

2004-04-17 Thread Kuba Jakubik
IMHO, this would be bad. The Cron Daemon would have to sanitize the input of the crontab each time it checks the file for running (presumably every minute, unless their is a way of notifying the cron daemon of a new crontab.) The default crontab in debian creates a file in /tmp, the user

Network Operations Center?

2004-03-18 Thread Kuba Jakubik
Hello, does anybody know a good and free as in beer Network Monitoring Tool for linux? I don't want nagios or such, because it's web-based. Moodss is nice, but a little raw... anything more user-friendly? I want to see graphs of several things like bandwidth, ping times etc in realtime, on my

Network Operations Center?

2004-03-18 Thread Kuba Jakubik
Hello, does anybody know a good and free as in beer Network Monitoring Tool for linux? I don't want nagios or such, because it's web-based. Moodss is nice, but a little raw... anything more user-friendly? I want to see graphs of several things like bandwidth, ping times etc in realtime, on my

Re: SYN rate statistics.

2003-11-06 Thread Kuba Jakubik
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi list, | How to determine normal/peak rate of packets with SYN to my debian box, for using this value | in iptables limit match. here you are: - --- CUT --- #!/bin/sh TEMPFILE=`tempfile` SCOREFILE=/tmp/scorefile MYHOST=10.0.0.254 while [ 1 -eq 1 ];

re: strange broadcast packets

2003-06-10 Thread kuba . jakubik
Hello, isn't perhaps 10.208.64.1 your dhcp server and aren't this reply to dhcp requests from clients? Carpe Noctem, Kuba BIGHard Jakubik -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

re: strange broadcast packets

2003-06-10 Thread kuba . jakubik
Hello, isn't perhaps 10.208.64.1 your dhcp server and aren't this reply to dhcp requests from clients? Carpe Noctem, Kuba BIGHard Jakubik

Re: /etc/hosts on a router

2003-05-16 Thread kuba . jakubik
What is the best way? hmm... I've found a tool that spoofs dns replys basing on a config file - you can make it return YOUR answers instead the original ones - it's like having the /etc/hosts file accessible to all machines on the net. check it out at:

Re: idea for improving security

2003-05-07 Thread kuba . jakubik
my idea is to add some rules to iptables eg iptables -A INPUT -p tcp --dport 1985 -j LOG --prefix key port 1: iptables -A INPUT -p tcp --dport 1985 -j DROP iptables -A INPUT -p tcp --dport 12731 -j LOG --prefix key port 2: iptables -A INPUT -p tcp --dport 12731 -j DROP iptables -A INPUT -p tcp

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread Kuba Jakubik
Is there is any software to bypass http proxy Some kind of pptp via http $-). try doing ppp-over-ssh you launch ppp on the first end, tunel it through ssh and launch another ppp on the other end. Afair mini/VPN-HOWTO is about this... BIGHard -- () ascii |GIT d--- s: a--- C UL P+ L+++ E---

Re: HTTP tunnel with linux server and windows client

2003-03-03 Thread Kuba Jakubik
Is there is any software to bypass http proxy Some kind of pptp via http $-). try doing ppp-over-ssh you launch ppp on the first end, tunel it through ssh and launch another ppp on the other end. Afair mini/VPN-HOWTO is about this... BIGHard -- () ascii |GIT d--- s: a--- C UL P+ L+++

Re: securing pop3

2003-02-08 Thread Kuba Jakubik
Kristof Goossens wrote: Hello all, I need to make a pop3 account on my server. I intend to work with ipop3d to provide secure pop3 service. Now I want to provide this service for only few people, and I don't want them to have an account on the system. Well, they can have a pop3 account, but no

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Kuba Jakubik
Juha Jäykkä wrote: I am wondering... what would be the correct md5sum of the above file? In three machines I get twice the value 4b68a1146dfd0e326c4396e339abc750 and once the value cd59e38dfd54eca39a99094fd85a1af0. This seems quite suspicious to me, especially since I JUST INSTALLED the

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Kuba Jakubik
Fredrik Mollerstrand wrote: By the way, how do I go about calculating md5 sums? you mean HOWTO? md5sum file BIGHard -- -BEGIN GEEK CODE BLOCK- Version: 3.12 GIT d--- s: a--- C UL P+ L+++ E--- W+ N o-- K++ w--- O M- V- PS++ PE Y PGP t 5 X R tv-- b+ DI+ D+ G++ e- h! r+ y+ --END

Re: init.d startup sequence for shorewall

2002-12-10 Thread Kuba Jakubik
Yogesh Sharma wrote: Hello, I am using shorewall as firewall for my system. It has got 2 ethernet cards one connected to internet and one for internal network. init.d/networking script is linked as S35networking and init.d/shorewall script is linked as S90shorewall. In my opinion shorewall must

Re: init.d startup sequence for shorewall

2002-12-10 Thread Kuba Jakubik
Yogesh Sharma wrote: Hello, I am using shorewall as firewall for my system. It has got 2 ethernet cards one connected to internet and one for internal network. init.d/networking script is linked as S35networking and init.d/shorewall script is linked as S90shorewall. In my opinion shorewall