Re: Need advise aobut allowing only sftp on woody

2003-10-14 Thread Yogesh Sharma
Hi, I am not if I got your question correct but here how my setup is: FTP access disabled Running sshd which only supports certificate based auth I copied my public certificate in my home dir Now I can do sftp using certificates. So I don't have to type password (if my certificate was created

Re: Need advise aobut allowing only sftp on woody

2003-10-14 Thread Yogesh Sharma
Can't SSH run in chroot ? Haim Ashkenazi wrote: this is a good setup, but I want chroot enviroment. thanx -- Haim -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Need advise aobut allowing only sftp on woody

2003-10-14 Thread Yogesh Sharma
Hi, I am not if I got your question correct but here how my setup is: FTP access disabled Running sshd which only supports certificate based auth I copied my public certificate in my home dir Now I can do sftp using certificates. So I don't have to type password (if my certificate was created

Re: Need advise aobut allowing only sftp on woody

2003-10-14 Thread Yogesh Sharma
Can't SSH run in chroot ? Haim Ashkenazi wrote: this is a good setup, but I want chroot enviroment. thanx -- Haim

Re: The same debian - different packages

2003-09-24 Thread Yogesh Sharma
As far as my understanding goes, ssh was patched recently for security fixes, so it should be coming from security.debian.org not us.debian.org. Now security.debian.org is not at all mirrored for security reason than how he has 2 different versions of ssh ? 1 Does he has proper

Re: init.d startup sequence for shorewall

2002-12-12 Thread Yogesh Sharma
On Thu, 2002-12-12 at 12:55, Matt Zimmerman wrote: On Wed, Dec 11, 2002 at 05:39:37PM -0800, Yogesh Sharma wrote: networking comes up at S35 in runlevel 0 so my internet is up and there is no firewall running so far. runlevel 0 is system shutdown and halt. The network is not brought up

Re: init.d startup sequence for shorewall

2002-12-12 Thread Yogesh Sharma
On Thu, 2002-12-12 at 12:55, Matt Zimmerman wrote: On Wed, Dec 11, 2002 at 05:39:37PM -0800, Yogesh Sharma wrote: networking comes up at S35 in runlevel 0 so my internet is up and there is no firewall running so far. runlevel 0 is system shutdown and halt. The network is not brought up

Re: init.d startup sequence for shorewall

2002-12-11 Thread Yogesh Sharma
On Tue, 2002-12-10 at 16:37, Kuba Jakubik wrote: Yogesh Sharma wrote: In my opinion shorewall must be started as soon as network is up. can't you just mv S90shorewall S35shorewall ? Yes, I can move this link but question is for security. In my opinion this should be fixed in package

Re: init.d startup sequence for shorewall

2002-12-11 Thread Yogesh Sharma
2 where it will start other serverices and at S90 it will start the firewall. So for this short time between S35networking and S90shorewall my system is not protected at all, this is my concern and question is isn't this a security risk ? Thanks Yogesh -- Yogesh Sharma [EMAIL PROTECTED

init.d startup sequence for shorewall

2002-12-10 Thread Yogesh Sharma
as network is up. What does list sugguests ? Is this a security problem ? Thanks -- Yogesh Sharma [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part

Re: init.d startup sequence for shorewall

2002-12-10 Thread Yogesh Sharma
On Tue, 2002-12-10 at 16:37, Kuba Jakubik wrote: Yogesh Sharma wrote: In my opinion shorewall must be started as soon as network is up. can't you just mv S90shorewall S35shorewall ? Yes, I can move this link but question is for security. In my opinion this should be fixed in package

init.d startup sequence for shorewall

2002-12-10 Thread Yogesh Sharma
as network is up. What does list sugguests ? Is this a security problem ? Thanks -- Yogesh Sharma [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part

RE: unsubscribe

2002-11-15 Thread Yogesh Sharma
they are capable of reading and following instructions grin... I guess thats just my inner BOFH showing through... I've been trying to avoid it...but it looks like it's time to adjust my procmail filters... -- Yogesh Sharma [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message

RE: unsubscribe

2002-11-15 Thread Yogesh Sharma
they are capable of reading and following instructions grin... I guess thats just my inner BOFH showing through... I've been trying to avoid it...but it looks like it's time to adjust my procmail filters... -- Yogesh Sharma [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message

Re: XFree86 4.2 bug in Debian Testing

2002-11-08 Thread Yogesh Sharma
xhost is for working with connections coming over tcp. :0.0 uses a named socket (/tmp/Xsomething), and Debian's X servers don't listen in on a tcp socket by default (security. No chance of someone sniffing your password if nobody can connect remotely!). Thus, xhost won't work. I am

Re: XFree86 4.2 bug in Debian Testing

2002-11-08 Thread Yogesh Sharma
xhost is for working with connections coming over tcp. :0.0 uses a named socket (/tmp/Xsomething), and Debian's X servers don't listen in on a tcp socket by default (security. No chance of someone sniffing your password if nobody can connect remotely!). Thus, xhost won't work. I am