Re: Yeh

2001-08-03 Thread Robert Davidson Security
On Fri, Aug 03, 2001 at 03:50:23AM +1000, Ian Miller wrote: I know this may not be the place for it... but its a real laugh. http://www.linuks.mine.nu/debian/ Yep, it's not the place but it's a great site! I love the porn.conf file... links actually work (well the ones I tryed did

Re: secure pop3

2001-08-03 Thread Alvin Oga
hi ya list of secure pop3 methodologies http://www.Linux-Sec.net/Mail/secure_pop3.txt c ya alvin On Thu, 2 Aug 2001, GARGIULO Eduardo INGDESI wrote: Hi all. I have a smtp/pop3 server behind a firewall at work and I can login the server using ssh. The problem is that the port 110

Locking down a guest account - need help.

2001-08-03 Thread David Ehle
Howdy all, Not debian specific, but this is the best batch of security minds I have access too so I figured I'd see if this interests anyone. I need to set up some Xterminal replacemnets - linux boxes that will mostly only be running netscape and ssh. They are going to be used for

Re: Locking down a guest account - need help.

2001-08-03 Thread Jim Breton
On Fri, Aug 03, 2001 at 01:56:26PM -0400, Andrew Lattis wrote: 1. Check the openssh man page for AllowGroups and AllowUsers, both allow you to specify users that are allowed to login, everyone else is denied. You can also disable access with PAM, using the sshd pam control file. Just use

Re: apache log entry

2001-08-03 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wouter == Wouter van Gils [EMAIL PROTECTED] writes: Wouter So, it's probably a code red infected machine, trying to reach Wouter others to infect. I tried telnetting to port 80 to see some Wouter activity. With some I've got no respons, which can

Re: apache log entry

2001-08-03 Thread Igor Goldenberg
Hello! On Thu, Aug 02, 2001 at 12:32:27AM +0800, Peter Crystal wrote: one suggested solution to it is something like #--- LoadModule rewrite_module /usr/lib/apache/mod_rewrite.so RewriteEnging On RewriteRule ^default.ida(.*) http://someothersite.com/ [L,R] #---

Re: Locking down a guest account - need help.

2001-08-03 Thread Vineet Kumar
* David Ehle ([EMAIL PROTECTED]) [010803 14:53]: Thanks Andrew, Thanks Jim. I'll layer them on and sleep better tonight ;). Stopping the middle button menu behavior is still causing me to pull my hair out though. Tried changing the behavior of the middle button in the

Re: apache log entry

2001-08-03 Thread John Galt
10K in the last 48 hours here. Welcome to CodeRed Aren't you glad you do Linux? On Thu, 2 Aug 2001, Wouter van Gils wrote: Hi, today I came say a lot of these: tnt-7-28.easynet.co.uk - - [01/Aug/2001:21:59:02 +0200] GET /default.ida?N

Re: Yeh

2001-08-03 Thread Mike Dresser
Robert Davidson Security wrote: On Fri, Aug 03, 2001 at 03:50:23AM +1000, Ian Miller wrote: I know this may not be the place for it... but its a real laugh. http://www.linuks.mine.nu/debian/ Yep, it's not the place but it's a great site! I love the porn.conf file... links actually work

Re: Yeh

2001-08-03 Thread [EMAIL PROTECTED]
At 09.58 03/08/2001 -0400, Mike Dresser wrote: Robert Davidson Security wrote: and so did wget -m -i porn.conf ;) Mike hahahaha does a porn.dev exist too??

Re: Yeh

2001-08-03 Thread Michel Decima
At 09.58 03/08/2001 -0400, Mike Dresser wrote: hahahaha does a porn.dev exist too?? yes : http://www.fu-fme.com/ but there is no drivers for GNU/Linux yet. the FAQ says that Macintosh and Linux versions are currently being developed -- mailto:[EMAIL PROTECTED] Gates' Law: Every 18 months,

Re: Yeh

2001-08-03 Thread [EMAIL PROTECTED]
At 16.56 03/08/2001 +0200, Michel Decima wrote: At 09.58 03/08/2001 -0400, Mike Dresser wrote: hahahaha does a porn.dev exist too?? yes : http://www.fu-fme.com/ does it work over an ipsec tunnel??

Locking down a guest account - need help.

2001-08-03 Thread David Ehle
Howdy all, Not debian specific, but this is the best batch of security minds I have access too so I figured I'd see if this interests anyone. I need to set up some Xterminal replacemnets - linux boxes that will mostly only be running netscape and ssh. They are going to be used for

Re: Locking down a guest account - need help.

2001-08-03 Thread Andrew Lattis
On Fri, 03 Aug 2001 13:46:10 David Ehle wrote: Howdy all, Not debian specific, but this is the best batch of security minds I have access too so I figured I'd see if this interests anyone. I need to set up some Xterminal replacemnets - linux boxes that will mostly only be running

Re: apache log entry

2001-08-03 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wouter == Wouter van Gils [EMAIL PROTECTED] writes: Wouter So, it's probably a code red infected machine, trying to reach Wouter others to infect. I tried telnetting to port 80 to see some Wouter activity. With some I've got no respons, which can

Re: Yeh

2001-08-03 Thread Christian Surchi
On Fri, Aug 03, 2001 at 05:04:52PM +0200, [EMAIL PROTECTED] wrote: yes : http://www.fu-fme.com/ does it work over an ipsec tunnel?? And what about IPv6? -- Christian Surchi | [EMAIL PROTECTED] | [EMAIL PROTECTED] FLUG: http://www.firenze.linux.it | Debian GNU/Linux:

Re: Locking down a guest account - need help.

2001-08-03 Thread Jim Breton
On Fri, Aug 03, 2001 at 01:56:26PM -0400, Andrew Lattis wrote: 1. Check the openssh man page for AllowGroups and AllowUsers, both allow you to specify users that are allowed to login, everyone else is denied. You can also disable access with PAM, using the sshd pam control file. Just use

Re: Locking down a guest account - need help.

2001-08-03 Thread David Ehle
Thanks Andrew, Thanks Jim. I'll layer them on and sleep better tonight ;). Stopping the middle button menu behavior is still causing me to pull my hair out though. Tried changing the behavior of the middle button in the /enlightenment/keybind.cfg file - both global and local version, but it

Re: Locking down a guest account - need help.

2001-08-03 Thread Jim Breton
On Fri, Aug 03, 2001 at 08:09:25PM +, Jim Breton wrote: You can also disable access with PAM, using the sshd pam control file. Just use pam_deny.so to deny authentication. /me pops foot out of mouth When I wrote that I was not considering your previous statement of needing to still be

Re: Locking down a guest account - need help.

2001-08-03 Thread Tobias
Hello! you can disable password login in sshd and only run ssh with public key authentication, just don't forget to put a root owned non-writable folder or file called .ssh and .ssh2 in the accounts you do not wish people to log in to. And I agree with Jim Breton about locking down PAM as much

Re: Locking down a guest account - need help.

2001-08-03 Thread Vineet Kumar
* David Ehle ([EMAIL PROTECTED]) [010803 14:53]: Thanks Andrew, Thanks Jim. I'll layer them on and sleep better tonight ;). Stopping the middle button menu behavior is still causing me to pull my hair out though. Tried changing the behavior of the middle button in the