Re: Firewall with iptables and forwarding

2003-06-30 Thread Raymond Wood
On Fri, 27 Jun 2003 04:48:27 +0200 Linux [EMAIL PROTECTED] wrote: Hi Have anybody a good recommendation for an easy to use firewall with port forwarding ? I got a home network with a dedicated (Debian of course) firewall box with ADSL connected, and ipmasq package installed. My problem

Re: Firewall with iptables and forwarding

2003-06-30 Thread Raymond Wood
On Fri, 27 Jun 2003 04:48:27 +0200 Linux [EMAIL PROTECTED] wrote: Hi Have anybody a good recommendation for an easy to use firewall with port forwarding ? I got a home network with a dedicated (Debian of course) firewall box with ADSL connected, and ipmasq package installed. My problem

Re: Probable SSH Vulnerability

2003-06-13 Thread Raymond Wood
On Fri, Jun 13, 2003 at 02:18:44PM -0400, Tim Peeler remarked: In the last 4-5 days we have had 8 servers come under attack. We are working frantically to keep ahead of these attacks. We have come to the conclusion that the SSH in woody is likely vulnerable. Of the 8 servers that have been

Re: Probable SSH Vulnerability

2003-06-13 Thread Raymond Wood
On Fri, Jun 13, 2003 at 02:18:44PM -0400, Tim Peeler remarked: In the last 4-5 days we have had 8 servers come under attack. We are working frantically to keep ahead of these attacks. We have come to the conclusion that the SSH in woody is likely vulnerable. Of the 8 servers that have been

Re: HELP, my Debian Server was hacked!

2003-04-24 Thread Raymond Wood
On Thu, Apr 24, 2003 at 02:17:48PM +0200, Adam ENDRODI imagined: On Thu, Apr 24, 2003 at 11:43:06AM +0200, I.R. van Dongen wrote: lamorak:~# crontab -l @daily apt-get -q -q -q -q update apt-get -s -q -q -q -q dist-upgrade Before you deploy such a mechanism, I advise that

Re: is this an attack ?

2003-03-29 Thread Raymond Wood
On Sat, Mar 29, 2003 at 02:35:39PM +, Tom Goulet (UID0) imagined: On Sat, Mar 29, 2003 at 10:46:02AM -0300, danilo lujambio wrote: sorry by a large of the message , but I am not a security expert and I have a ftp server secured with the directives that I found in general docs.

Re: is this an attack ?

2003-03-29 Thread Raymond Wood
On Sat, Mar 29, 2003 at 02:35:39PM +, Tom Goulet (UID0) imagined: On Sat, Mar 29, 2003 at 10:46:02AM -0300, danilo lujambio wrote: sorry by a large of the message , but I am not a security expert and I have a ftp server secured with the directives that I found in general docs.

Re: is iptables enough?

2003-03-19 Thread Raymond Wood
On Wed, Mar 19, 2003 at 01:44:13PM -0600, Jones remarked: I am planning to replace a (dead) Windows 2000 computer that was used as a web server and email server with a Debian Linux solution. This machine is connected to the net via DSL and would run apache and exim/qpopper and sshd.

Re: Peace is not off topic

2003-03-10 Thread Raymond Wood
On Mon, Mar 10, 2003 at 04:53:41PM -0500, Robert B Wilson imagined: On Mon, 10 Mar 2003 11:23:04 -0800 Ted Parvu [EMAIL PROTECTED] writes: The Bush Doctrine clearly spells out that America is now an Empire. You are either with us or against us. When did Bush actually say that America is

Re: Peace is not off topic

2003-03-10 Thread Raymond Wood
On Mon, Mar 10, 2003 at 04:53:41PM -0500, Robert B Wilson imagined: On Mon, 10 Mar 2003 11:23:04 -0800 Ted Parvu [EMAIL PROTECTED] writes: The Bush Doctrine clearly spells out that America is now an Empire. You are either with us or against us. When did Bush actually say that America is

Re: [SECURITY] [DSA 253-1] New OpenSSL packages fix timing-based attack vulnerability

2003-02-24 Thread Raymond Wood
On Mon, Feb 24, 2003 at 03:00:47PM +0100, Martin Schulze imagined: -- Debian Security Advisory DSA 253-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze

Re: [SECURITY] [DSA 222-1] New xpdf packages fix arbitrary command execution

2003-01-07 Thread Raymond Wood
On Mon, Jan 06, 2003 at 05:22:48PM +0100, Martin Schulze remarked: -- Debian Security Advisory DSA 222-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze

Re: How to get the current security updates on CD?

2003-01-04 Thread Raymond Wood
On Sun, Jan 05, 2003 at 12:26:12AM +0100, SteX imagined: In a stormy day a lighting flash occurred: it carried the message from [EMAIL PROTECTED]: § How can I get the security updates in CD form? § I went to http://www.debian.org/security, but I couldn't § find anything § like CD images.

Re: init.d startup sequence for shorewall

2002-12-12 Thread Raymond Wood
On Thu, Dec 12, 2002 at 03:55:56PM -0500, Matt Zimmerman remarked: On Wed, Dec 11, 2002 at 05:39:37PM -0800, Yogesh Sharma wrote: networking comes up at S35 in runlevel 0 so my internet is up and there is no firewall running so far. runlevel 0 is system shutdown and halt. The network is

Re: init.d startup sequence for shorewall

2002-12-12 Thread Raymond Wood
On Thu, Dec 12, 2002 at 03:55:56PM -0500, Matt Zimmerman remarked: On Wed, Dec 11, 2002 at 05:39:37PM -0800, Yogesh Sharma wrote: networking comes up at S35 in runlevel 0 so my internet is up and there is no firewall running so far. runlevel 0 is system shutdown and halt. The network is

Re: test of non-subscribed user

2002-12-02 Thread Raymond Wood
On Mon, Dec 02, 2002 at 05:37:54PM +0100, IT - Sven Mueller remarked: On Monday 02 December 2002 16:43, Nathan E Norman wrote: On Mon, Dec 02, 2002 at 03:21:28PM +0100, IT - Sven Mueller wrote: However, I am not really able to tell why this kind of users is allowed to post here. A

Re: test of non-subscribed user

2002-12-02 Thread Raymond Wood
On Mon, Dec 02, 2002 at 11:11:41AM -0600, Nathan E Norman remarked: On Mon, Dec 02, 2002 at 11:48:23AM -0500, Raymond Wood wrote: This makes sense to me, so I can accept the Spam I receive through the debian lists. One thing I'm still unclear about though is the recent post from someone

Re: Using Razor and Debian Mailing lists

2002-12-02 Thread Raymond Wood
On Mon, Dec 02, 2002 at 11:23:11PM -0500, Phillip Hofmeister imagined: All, Please do not have your procmail or anything else automatically mark mail sent from debian's list as spam. Several valid emails have ended up in my Junk folder because someone is reporting them to razor. Once

Re: test of non-subscribed user

2002-12-02 Thread Raymond Wood
On Mon, Dec 02, 2002 at 05:37:54PM +0100, IT - Sven Mueller remarked: On Monday 02 December 2002 16:43, Nathan E Norman wrote: On Mon, Dec 02, 2002 at 03:21:28PM +0100, IT - Sven Mueller wrote: However, I am not really able to tell why this kind of users is allowed to post here. A

Re: test of non-subscribed user

2002-12-02 Thread Raymond Wood
On Mon, Dec 02, 2002 at 06:52:27PM +0100, Kjetil Kjernsmo remarked: On Monday 02 December 2002 18:25, Raymond Wood wrote: OK, so the problem is not with reporting genuine Spam to Razor; rather the problem is with incorrectly reporting legitimate email as Spam to Razor? Right

Re: Using Razor and Debian Mailing lists

2002-12-02 Thread Raymond Wood
On Mon, Dec 02, 2002 at 11:23:11PM -0500, Phillip Hofmeister imagined: All, Please do not have your procmail or anything else automatically mark mail sent from debian's list as spam. Several valid emails have ended up in my Junk folder because someone is reporting them to razor. Once

Re: [SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities

2002-11-13 Thread Raymond Wood
On Thu, Nov 14, 2002 at 02:23:30AM +0700, Jean Christophe ANDRÉ remarked: Raymond Wood écrivait : Respectfully, does anyone know when Sid will receive patches for the previous Apache vulnerabilities that were fixed for Potato and Woody, but not Sid? It's been days... Raymond Because

Re: [SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities

2002-11-13 Thread Raymond Wood
On Thu, Nov 14, 2002 at 07:45:34AM +0700, Jean Christophe ANDRÉ imagined: Raymond Wood écrivait : Jean Christophe ANDRÉ remarked: Raymond Wood écrivait : Respectfully, does anyone know when Sid will receive patches for the previous Apache vulnerabilities that were fixed

Re: [SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities

2002-11-13 Thread Raymond Wood
On Wed, Nov 13, 2002 at 04:33:30PM +0100, Martin Schulze remarked: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 195-1 [EMAIL PROTECTED]

Re: [SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities

2002-11-13 Thread Raymond Wood
On Thu, Nov 14, 2002 at 02:23:30AM +0700, Jean Christophe ANDRÉ remarked: Raymond Wood écrivait : Respectfully, does anyone know when Sid will receive patches for the previous Apache vulnerabilities that were fixed for Potato and Woody, but not Sid? It's been days... Raymond Because

Re: [SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities

2002-11-13 Thread Raymond Wood
On Thu, Nov 14, 2002 at 07:45:34AM +0700, Jean Christophe ANDRÉ imagined: Raymond Wood écrivait : Jean Christophe ANDRÉ remarked: Raymond Wood écrivait : Respectfully, does anyone know when Sid will receive patches for the previous Apache vulnerabilities that were fixed

Re: Apache in SID

2002-11-07 Thread Raymond Wood
On Thu, Nov 07, 2002 at 02:10:08PM +0100, Christophe Suire remarked: Hi, Is the apache packages 1.3.26-1 and 1.3.26-1.1 are vulnerable to the DSA-187 advisory ? Thanks a lot. -- Christophe Suire Don't quote me, but I believe they are. The next question, of course, is: When are we

(fwd) OpenSSH trojan!

2002-08-01 Thread Raymond Wood
Hi, I have no idea if this affects Debian in any way, shape, or form -- but better safe than sorry, so here it is FYI... Cheers, Raymond - Forwarded message from [...] - From: [somebody] To: [another list] Subject: OpenSSH trojan! (fwd) Date: Thu, 1 Aug 2002 07:30:37 -0400 (EDT)

Re: Some more port closing questions

2002-07-31 Thread Raymond Wood
On Wed, Jul 31, 2002 at 07:06:09PM +0900, [EMAIL PROTECTED] imagined: On a related note, I just ran dselect and noticed rcconf -- may be that's what I want (-; I'll have to check that out. rcconf is simple and works very well for me - FYI. Cheers, Raymond -- You deserve to be able to

Re: [SECURITY] [DSA-134-4] OpenSSH Remote Challenge Vulnerability

2002-06-27 Thread Raymond Wood
On Thu, Jun 27, 2002 at 02:50:54PM +0200, Michael Stone remarked: -BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-134-4 [EMAIL PROTECTED] http://www.debian.org/security/

Re: [SECURITY] [DSA-134-2] Unknown OpenSSH remote vulnerability

2002-06-25 Thread Raymond Wood
On Tue, Jun 25, 2002 at 02:37:12PM +0200, Wichert Akkerman remarked: -BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-134-2 [EMAIL PROTECTED] http://www.debian.org/security/

Seawall firewall (was Re: ipchains rules for dmz??)

2002-05-29 Thread Raymond Wood
On Wed, May 29, 2002 at 12:30:32PM -0400, Rishi L Khan remarked: I looked into shorewall. It doesn't support ipchains, but seawall does. Would you suggest updating to iptables or using seawall? I am also curious to know if anyone has played with seawall and can comment on whether it comes

Seawall firewall (was Re: ipchains rules for dmz??)

2002-05-29 Thread Raymond Wood
On Wed, May 29, 2002 at 12:30:32PM -0400, Rishi L Khan remarked: I looked into shorewall. It doesn't support ipchains, but seawall does. Would you suggest updating to iptables or using seawall? I am also curious to know if anyone has played with seawall and can comment on whether it comes

Re: possible hole in mozilla et al

2002-05-08 Thread Raymond Wood
On Wed, May 08, 2002 at 02:51:51PM -0400, Noah L. Meyerhans imagined: On Wed, May 08, 2002 at 03:26:46PM +0200, Robert Millan wrote: http://sec.greymagic.com/adv/gm001-ns/ It claims to affect 0.9.7+ but on 1.0 all it does is crashing my browser. That bug was fixed in the version of

Re: A question about some network services

2002-04-05 Thread Raymond Wood
On Fri, Apr 05, 2002 at 04:31:19PM +0200, Michal Melewski remarked: Yikes! I guess, you didn't remove inetd that way, right? But how then? I think that you should just turn it off :) 'Don't' use isn't equal to 'wipe it out' I have found the 'rcconf' utility to be very helpful in these