Re: new tool: openportd

2006-10-22 Thread Antti Harri
On Sat, 21 Oct 2006, Nick Guenther wrote: On 10/21/06, Steffen Wendzel [EMAIL PROTECTED] wrote: 40tg340503n5 pf/iptables (load some other rules or whatever) So this is like an insecure version of SSH? If you configure it to behave like that, probably. But if you configure it to open a

Re: new tool: openportd

2006-10-22 Thread Steffen Wendzel
On Sat, 21 Oct 2006 20:57:39 -0400 Nick Guenther [EMAIL PROTECTED] wrote: : On 10/21/06, Steffen Wendzel [EMAIL PROTECTED] wrote: : hi, : : I wrote a new tool I call OpenPortd for my linux distribution : but since I my linux distribution is still under development : and I want to release the

Re: new tool: openportd

2006-10-22 Thread Kian Mohageri
On 10/22/06, Steffen Wendzel [EMAIL PROTECTED] wrote: You normaly have different open ports pf(4) makes this a minor issue. No offense, but what you have there (in the example specifically) is no better than a limited (if you consider ability to reboot or kill ssh limited) version of

Re: new tool: openportd

2006-10-22 Thread Clint M. Sand
On Sun, Oct 22, 2006 at 03:55:39AM -0700, Kian Mohageri wrote: On 10/22/06, Steffen Wendzel [EMAIL PROTECTED] wrote: You normaly have different open ports pf(4) makes this a minor issue. No offense, but what you have there (in the example specifically) is no better than a limited

Re: new tool: openportd

2006-10-22 Thread Inigo T. A.
El dom, 22-10-2006 a las 12:40 +0200, Steffen Wendzel escribis: On Sat, 21 Oct 2006 20:57:39 -0400 Nick Guenther [EMAIL PROTECTED] wrote: : : So this is like an insecure version of SSH? it has nothing todo with SSH. And of course it isn't very secure BUT it adds security where normaly no

Re: new tool: openportd

2006-10-22 Thread Steffen Wendzel
On Sun, 22 Oct 2006 14:42:18 +0200 Inigo T. A. [EMAIL PROTECTED] wrote: : El dom, 22-10-2006 a las 12:40 +0200, Steffen Wendzel escribis: : On Sat, 21 Oct 2006 20:57:39 -0400 Nick Guenther [EMAIL PROTECTED] wrote: : : : : : So this is like an insecure version of SSH? : : it has nothing

Re: new tool: openportd

2006-10-22 Thread Darrin Chandler
On Sun, Oct 22, 2006 at 04:41:17PM +0200, Steffen Wendzel wrote: this isn't correct. Every service had some security problems in the past. Imagin that your service X is vulnerable (only since a few h by a zero day exploit or so) and someone tries to exploit it at 2:00 in the morning. but

Re: new tool: openportd

2006-10-22 Thread Tobias Weisserth
Hi, On Oct 22, 2006, at 4:41 PM, Steffen Wendzel wrote: this isn't correct. Every service had some security problems in the past. Imagin that your service X is vulnerable (only since a few h by a zero day exploit or so) and someone tries to exploit it at 2:00 in the morning. but if you run

Re: new tool: openportd

2006-10-22 Thread ropers
On 22/10/06, Steffen Wendzel [EMAIL PROTECTED] wrote: On Sun, 22 Oct 2006 14:42:18 +0200 Inigo T. A. [EMAIL PROTECTED] wrote: : El dom, 22-10-2006 a las 12:40 +0200, Steffen Wendzel escribis: : On Sat, 21 Oct 2006 20:57:39 -0400 Nick Guenther [EMAIL PROTECTED] wrote: : : : : : So this is

Re: new tool: openportd

2006-10-22 Thread Nick Holland
Steffen Wendzel wrote: On Sun, 22 Oct 2006 14:42:18 +0200 Inigo T. A. [EMAIL PROTECTED] wrote: ... : If you have a security problem with a service, the only more secure : action is to fix it, don't to open it eventually. : this isn't correct. Every service had some security problems in the

Re: new tool: openportd

2006-10-22 Thread Jan Stary
It is like a port knocking service but a little bit different: Normaly a port knocking service uses TCP/UDP, but openportd uses ICMP echo response packets because they are not so easy to send like echo requests or TCP/UDP port tests (kiddies could simply use ping or nmap for this job).

Re: new tool: openportd

2006-10-22 Thread Lars Hansson
On Sunday 22 October 2006 22:41, you wrote: this isn't correct. Every service had some security problems in the past. Imagin that your service X is vulnerable (only since a few h by a zero day exploit or so) and someone tries to exploit it at 2:00 in the morning. Good thing there cant be any

new tool: openportd

2006-10-21 Thread Steffen Wendzel
hi, I wrote a new tool I call OpenPortd for my linux distribution but since I my linux distribution is still under development and I want to release the tool, I wrote an OpenBSD version too, you maybe like it. It is like a port knocking service but a little bit different: Normaly a port

Re: new tool: openportd

2006-10-21 Thread Nick Guenther
On 10/21/06, Steffen Wendzel [EMAIL PROTECTED] wrote: hi, I wrote a new tool I call OpenPortd for my linux distribution but since I my linux distribution is still under development and I want to release the tool, I wrote an OpenBSD version too, you maybe like it. [...] You can define keys and