Segfault in login

2001-03-09 Thread Mike Fedyk
I don't know if this could be exploited is any way, but here's something that I've seen. This is on x86 on two machines and a ppc g3. #su #login login: ^D Segmentation fault Maybe you guys can check this more. Mike -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: Firewalling

2001-03-12 Thread Mike Fedyk
On Tue, Mar 13, 2001 at 09:15:20AM +0200, Craig wrote: Hi All Have created a file which contains all my ipchains rules and I would like it to start when the machine loads. Not sure where the best place is for this. I used to use rc.local on RH but was told that this is a bush job and very

Re: Allow FTP in, but not shell login

2001-03-13 Thread Mike Fedyk
On Tue, Mar 13, 2001 at 06:55:32PM +0200, Andrius Kasparavicius wrote: On Tue, 13 Mar 2001, Kenneth Pronovici wrote: without interactive access. I want to do this specifically for a set of users, not for all users on the machine. you can change user's shell to /dev/null I change

Re: Server reboots

2001-03-13 Thread Mike Fedyk
On Wed, Mar 14, 2001 at 02:17:57AM +0100, [EMAIL PROTECTED] wrote: Hey there. I've just had the pleasure of a server which rebootet itself, and found it's ext2fs partition to be unclean. Now, I wonder if that could be a security problem in the direction of some nasty person having fun with

Re: Server reboots

2001-03-13 Thread Mike Fedyk
On Wed, Mar 14, 2001 at 12:23:52AM -0500, Josh Hattery wrote: I'm having a similar problem but it's only when running netscape or some other web browser such as konqueror or mozilla. Lynx doesn't do anything, and I've checked the RAM. It's easily reproducable and I can't ever run netscape

Re: Allow FTP in, but not shell login

2001-03-13 Thread Mike Fedyk
On Tue, Mar 13, 2001 at 10:09:58PM -0900, Ethan Benson wrote: On Tue, Mar 13, 2001 at 10:10:09PM +0200, Sami Haahtinen wrote: try falselogin, it acts as shell for the user, (what it really does it shows that the user can't login and dies) thats what i use for mail only accounts.

Re: Access to my server

2001-03-15 Thread Mike Fedyk
On Fri, Mar 16, 2001 at 12:27:25AM +0100, Luc MAIGNAN wrote: I've seen via iplog that someone had tried to access to my server. How can I know who he is knowing his IP address ? You really need something that is going to do lookups when the supposed attach occours. Looking up ident would

Re: anyone using telnet

2001-03-22 Thread Mike Fedyk
on Mon, Mar 19, 2001 at 01:07:51PM -0400, Peter Cordes ([EMAIL PROTECTED]) wrote: Don't even bother with telnet, it's obsolete. Install sshd on any machines that don't have it yet, and don't install telnet on the public machine. On Wed, Mar 21, 2001 at 11:46:34PM -0800, [EMAIL

Re: filelocking

2001-07-18 Thread Mike Fedyk
On Wed, Jul 18, 2001 at 11:22:38PM +0200, Kim De Smaele wrote: Hi all, I have written a script which enable a filelocking ( for one speciffic file ). Most of our users are using vi, but some of them are using the win-client ultra-edit ( via ftp protocol ) which gives me the problem that

Re: Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-07-25 Thread Mike Fedyk
On Wed, Jul 25, 2001 at 01:37:00PM -0300, Henrique de Moraes Holschuh wrote: On Wed, 25 Jul 2001, Mike Fedyk wrote: Yes, make the default configurable if you have your debconf setting to medium or low and default to Don't start otherwise. THAT is actually a good idea. Thanks

Re: Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-07-25 Thread Mike Fedyk
On Sat, Jul 21, 2001 at 11:59:17PM -0700, Mike Fedyk wrote: Personally, I think there should either be a /etc/do-not-start/package dir that packages' init scripts check for non-existance before starting, or a commented entry in the config file that the init script checks for non-existance

Re: Locking down a guest account - need help.

2001-08-06 Thread Mike Fedyk
On Sat, Aug 04, 2001 at 12:30:20AM +0200, Tobias wrote: Hello! you can disable password login in sshd and only run ssh with public key authentication, just don't forget to put a root owned non-writable folder or file called .ssh and .ssh2 in the accounts you do not wish people to log in

Re: Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-08-08 Thread Mike Fedyk
On Wed, Aug 08, 2001 at 08:44:50PM +0200, Marko Kreen wrote: On Wed, Jul 25, 2001 at 11:05:25AM -0700, Dale Southard wrote: Why not use something like the IRIX ``chkconfig'' system: Provide a simple program that takes the ``name'' of a service and then checks an external file/files for

Re: Say, wheres 2.2.20?

2002-03-06 Thread Mike Fedyk
On Wed, Mar 06, 2002 at 07:43:23PM -0800, Xeno Campanoli wrote: Say, stable doesn't seem to have 2.2.20 available to it yet, and yet that's supposed to be the most stable 2.2.* kernel out according to (I think it was the HOWTO on E-Infomax I read it, but they're down right now) a howto I was

Re: Say, wheres 2.2.20?

2002-03-07 Thread Mike Fedyk
On Thu, Mar 07, 2002 at 01:11:34PM +0800, Mo Zhen Guang wrote: as always, security update may be troublesome with testing distribution. stable is much easier Mo Version: 2.2.20-2 Provides: kernel-image Depends: fileutils (= 4.0) What version of fileutils is in potato? All that the package

Re: Say, wheres 2.2.20?

2002-03-07 Thread Mike Fedyk
On Thu, Mar 07, 2002 at 06:20:28PM -0600, Nathan E Norman wrote: On Thu, Mar 07, 2002 at 02:42:43PM -0800, Mike Fedyk wrote: On Thu, Mar 07, 2002 at 10:54:57AM -0800, Xeno Campanoli wrote: Mike Fedyk wrote: On Thu, Mar 07, 2002 at 01:11:34PM +0800, Mo Zhen Guang wrote

Re: Debian or Redhat 7???

2001-02-22 Thread Mike Fedyk
Tal Danzig wrote: There are no mirrors of security.debian.org (or shouldn't be) for security reasons. This way the authenticity of security packages can be better controlled. - Tal What about local mirrors? I can imagine a company with several hundred, or maybe thousands of debian

Segfault in login

2001-03-09 Thread Mike Fedyk
I don't know if this could be exploited is any way, but here's something that I've seen. This is on x86 on two machines and a ppc g3. #su #login login: ^D Segmentation fault Maybe you guys can check this more. Mike

Re: Firewalling

2001-03-13 Thread Mike Fedyk
On Tue, Mar 13, 2001 at 09:15:20AM +0200, Craig wrote: Hi All Have created a file which contains all my ipchains rules and I would like it to start when the machine loads. Not sure where the best place is for this. I used to use rc.local on RH but was told that this is a bush job and very

Re: Allow FTP in, but not shell login

2001-03-13 Thread Mike Fedyk
On Tue, Mar 13, 2001 at 06:55:32PM +0200, Andrius Kasparavicius wrote: On Tue, 13 Mar 2001, Kenneth Pronovici wrote: without interactive access. I want to do this specifically for a set of users, not for all users on the machine. you can change user's shell to /dev/null I change

Re: Server reboots

2001-03-13 Thread Mike Fedyk
On Wed, Mar 14, 2001 at 02:17:57AM +0100, [EMAIL PROTECTED] wrote: Hey there. I've just had the pleasure of a server which rebootet itself, and found it's ext2fs partition to be unclean. Now, I wonder if that could be a security problem in the direction of some nasty person having fun with me?

Re: Server reboots

2001-03-13 Thread Mike Fedyk
On Wed, Mar 14, 2001 at 12:23:52AM -0500, Josh Hattery wrote: I'm having a similar problem but it's only when running netscape or some other web browser such as konqueror or mozilla. Lynx doesn't do anything, and I've checked the RAM. It's easily reproducable and I can't ever run netscape

Re: Server reboots

2001-03-14 Thread Mike Fedyk
On Wed, Mar 14, 2001 at 01:07:26AM -0500, Josh Hattery wrote: The system is a Celeron 300a (o/c 450, haven't had a problem in 2 years) on an Abit BH6 motherboard. Bios is made by Award and I'm not sure Try without the o/cing, of course I know you don't want to do that, but if you really want

Re: Allow FTP in, but not shell login

2001-03-14 Thread Mike Fedyk
On Tue, Mar 13, 2001 at 10:09:58PM -0900, Ethan Benson wrote: On Tue, Mar 13, 2001 at 10:10:09PM +0200, Sami Haahtinen wrote: try falselogin, it acts as shell for the user, (what it really does it shows that the user can't login and dies) thats what i use for mail only accounts. ofcourse

Re: Access to my server

2001-03-15 Thread Mike Fedyk
On Fri, Mar 16, 2001 at 12:27:25AM +0100, Luc MAIGNAN wrote: I've seen via iplog that someone had tried to access to my server. How can I know who he is knowing his IP address ? You really need something that is going to do lookups when the supposed attach occours. Looking up ident would

Re: anyone using telnet

2001-03-22 Thread Mike Fedyk
on Mon, Mar 19, 2001 at 01:07:51PM -0400, Peter Cordes ([EMAIL PROTECTED]) wrote: Don't even bother with telnet, it's obsolete. Install sshd on any machines that don't have it yet, and don't install telnet on the public machine. On Wed, Mar 21, 2001 at 11:46:34PM -0800,

Re: red worm amusement

2001-07-20 Thread Mike Fedyk
On Sat, Jul 21, 2001 at 02:10:42AM +0200, Wichert Akkerman wrote: For amusement I checked the web logs for a few debian machines to see if they had some red worm attempts. Seems we've been probed a fair bit: 16 times on www.spi-inc.org, 22 on non-us.debian.org and 18 on www.debian.org.

Re: red worm amusement

2001-07-22 Thread Mike Fedyk
On Sun, Jul 22, 2001 at 02:50:14AM -0400, Steven Barker wrote: On Sat, Jul 21, 2001 at 08:51:23PM -0700, Jacob Meuser wrote: snip No, I'm simply saying not to start services immediately. snip ... I think that there should be a way to install a debian server packages without having

Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-07-25 Thread Mike Fedyk
On Sun, Jul 22, 2001 at 03:27:10AM -0400, Steven Barker wrote: On Sat, Jul 21, 2001 at 11:59:17PM -0700, Mike Fedyk wrote: On Sun, Jul 22, 2001 at 02:50:14AM -0400, Steven Barker wrote: I think that there should be a way to install a debian server packages without having

Re: Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-07-25 Thread Mike Fedyk
On Wed, Jul 25, 2001 at 01:37:00PM -0300, Henrique de Moraes Holschuh wrote: On Wed, 25 Jul 2001, Mike Fedyk wrote: Yes, make the default configurable if you have your debconf setting to medium or low and default to Don't start otherwise. THAT is actually a good idea. Thanks

Re: Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-07-25 Thread Mike Fedyk
On Sat, Jul 21, 2001 at 11:59:17PM -0700, Mike Fedyk wrote: Personally, I think there should either be a /etc/do-not-start/package dir that packages' init scripts check for non-existance before starting, or a commented entry in the config file that the init script checks for non

Re: Locking down a guest account - need help.

2001-08-06 Thread Mike Fedyk
On Sat, Aug 04, 2001 at 12:30:20AM +0200, Tobias wrote: Hello! you can disable password login in sshd and only run ssh with public key authentication, just don't forget to put a root owned non-writable folder or file called .ssh and .ssh2 in the accounts you do not wish people to log in to.

Re: Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-08-08 Thread Mike Fedyk
On Wed, Aug 08, 2001 at 08:44:50PM +0200, Marko Kreen wrote: On Wed, Jul 25, 2001 at 11:05:25AM -0700, Dale Southard wrote: Why not use something like the IRIX ``chkconfig'' system: Provide a simple program that takes the ``name'' of a service and then checks an external file/files for

Re: Say, wheres 2.2.20?

2002-03-06 Thread Mike Fedyk
On Wed, Mar 06, 2002 at 07:43:23PM -0800, Xeno Campanoli wrote: Say, stable doesn't seem to have 2.2.20 available to it yet, and yet that's supposed to be the most stable 2.2.* kernel out according to (I think it was the HOWTO on E-Infomax I read it, but they're down right now) a howto I was

Re: Say, wheres 2.2.20?

2002-03-07 Thread Mike Fedyk
On Thu, Mar 07, 2002 at 01:11:34PM +0800, Mo Zhen Guang wrote: as always, security update may be troublesome with testing distribution. stable is much easier Mo Version: 2.2.20-2 Provides: kernel-image Depends: fileutils (= 4.0) What version of fileutils is in potato? All that the package

Re: Say, wheres 2.2.20?

2002-03-07 Thread Mike Fedyk
On Thu, Mar 07, 2002 at 10:54:57AM -0800, Xeno Campanoli wrote: Mike Fedyk wrote: On Thu, Mar 07, 2002 at 01:11:34PM +0800, Mo Zhen Guang wrote: as always, security update may be troublesome with testing distribution. stable is much easier Mo Version: 2.2.20-2 Provides

Re: Say, wheres 2.2.20?

2002-03-07 Thread Mike Fedyk
On Thu, Mar 07, 2002 at 06:20:28PM -0600, Nathan E Norman wrote: On Thu, Mar 07, 2002 at 02:42:43PM -0800, Mike Fedyk wrote: On Thu, Mar 07, 2002 at 10:54:57AM -0800, Xeno Campanoli wrote: Mike Fedyk wrote: On Thu, Mar 07, 2002 at 01:11:34PM +0800, Mo Zhen Guang wrote