Re: HARASS ME MORE.........

2001-09-03 Thread Ade Talabi
Layne, Do you call this being mad? You come across like an idiot. The only e-mail address you could have sent a mail to, you did not. It is the list administrator that I blame for this kind of mails gracing my screen. As for you, you are forgiven. Layne ([EMAIL PROTECTED]) said thusly on

Re: HARASS ME MORE.........

2001-09-03 Thread Ade Talabi
Pedro Zorzenon Neto, Why do you assume he's got parents. He comes across as an orphan. Pedro Zorzenon Neto ([EMAIL PROTECTED]) said thusly on [01/09/01 at 15:01]: I also blame him for not complaining politely at his first reply to the list. He just started complaining with words I won't

Sendmail patches in work?

2001-09-03 Thread Thomas Gebhardt
Hi, I wonder whether a sendmail security patch (input validation error, BUGTRAQ ID: 3163) will be available soon? It is reported that a working exploit is available on the net. So I consider to get an updated version from sendmail.org, if a debian package will not be available in the near

a filter for tcp socket

2001-09-03 Thread Samu
hello, this is a work i would like to study but i fall in problem when looking for Linux Socket Filtering Documentation. I want to make a filter that can alterate data on tcp packets following some rules ( e.g. faking icq messages to give you an idea ) and must block the original packet (or

BOFH

2001-09-03 Thread vdongen
Because of loads of resonses to me willing to send the script I've put it on the web for now, it's at: http://www.insecure.nl/~vdong/ Greetz, Ivo Without the darkness, how would you recognize the light?

Re: Can someone help a Newbie

2001-09-03 Thread Sander Smeenk (CistroN Medewerker)
Quoting cdpye ([EMAIL PROTECTED]): I have noticed recently that attempted connections to my box aren't being logged in syslog. It's possible that RH installed a deamon like 'tcplogd' and 'icmplogd' by default or you just enabled that option. These deamons show incomming connection attempts

Running/Compiling latest snort on potato

2001-09-03 Thread Shane Machon
Greetings, Anyone had success compiling snort 1.81 on a stable potato box? Looking at the snort website, there is a question regarding libpcap 0.5 under Redhat that will cause problems, does anyone know if this is this redhat specific? Potato only offers libpcap0 0.4a6-3. I dont have to have

Portsentry vs snort

2001-09-03 Thread Andrew Pollock
Hi, I'm currently running Portsentry on a box, and I've got it configured to add an ipchains rule firewalling off all access to an IP that touches one of the ports that Portsentry is listening on (after doing some sanity checks on where the portscan/port access came from). I find the way that

Re: Running/Compiling latest snort on potato

2001-09-03 Thread sjk
Compiled and ran fine for me with libpcap 0.4a6. --sjk On 4 Sep, Shane Machon wrote: Greetings, Anyone had success compiling snort 1.81 on a stable potato box? Looking at the snort website, there is a question regarding libpcap 0.5 under Redhat that will cause problems, does anyone

FW: a filter for tcp socket

2001-09-03 Thread Antropov Anton
Hello! Did you hear about netfilter/iptables/ipchains etc? This is a firewall task, isn't it? And there are tons of documentation - visit netfilter.samba.org. Or google :). -Original Message- From: Samu [mailto:[EMAIL PROTECTED]] Sent: Monday, September 03, 2001 9:04 PM To: [EMAIL

Re: Running/Compiling latest snort on potato

2001-09-03 Thread Vladislav
Hello, --- Shane Machon [EMAIL PROTECTED] wrote: I dont have to have 1.81 of snort (would be nice though!), just db support (1.7 or above) Any success stories? I used compiled from sources snort for 2 month. Then, I decide to add db support and try to recompile it. But it depends on so

Re: answer from abuse@ptd.net

2001-09-03 Thread Charles Fulmer
bwuahahahahahaahhahahahahahhaahhahahahaahahhahahahahahaahahhahahahahahahahahaaa know how many copies of that i have on ptd account [EMAIL PROTECTED]

Re: HARASS ME MORE.........

2001-09-03 Thread Ade Talabi
Layne, Do you call this being mad? You come across like an idiot. The only e-mail address you could have sent a mail to, you did not. It is the list administrator that I blame for this kind of mails gracing my screen. As for you, you are forgiven. Layne ([EMAIL PROTECTED]) said thusly on

Re: HARASS ME MORE.........

2001-09-03 Thread Ade Talabi
Pedro Zorzenon Neto, Why do you assume he's got parents. He comes across as an orphan. Pedro Zorzenon Neto ([EMAIL PROTECTED]) said thusly on [01/09/01 at 15:01]: I also blame him for not complaining politely at his first reply to the list. He just started complaining with words I won't

Sendmail patches in work?

2001-09-03 Thread Thomas Gebhardt
Hi, I wonder whether a sendmail security patch (input validation error, BUGTRAQ ID: 3163) will be available soon? It is reported that a working exploit is available on the net. So I consider to get an updated version from sendmail.org, if a debian package will not be available in the near

Re: Is ident secure?

2001-09-03 Thread Sunny Dubey
slightly off topic ... but identd is pretty insecure ... directly copied from the nmap man page As noted by Dave Goldsmith in a 1996 Bugtraq post, the ident protocol (rfc 1413) allows for the disclosure of the username that owns

a filter for tcp socket

2001-09-03 Thread Samu
hello, this is a work i would like to study but i fall in problem when looking for Linux Socket Filtering Documentation. I want to make a filter that can alterate data on tcp packets following some rules ( e.g. faking icq messages to give you an idea ) and must block the original packet (or

BOFH

2001-09-03 Thread vdongen
Because of loads of resonses to me willing to send the script I've put it on the web for now, it's at: http://www.insecure.nl/~vdong/ Greetz, Ivo Without the darkness, how would you recognize the light?

Re: Can someone help a Newbie

2001-09-03 Thread Sander Smeenk \(CistroN Medewerker\)
Quoting cdpye ([EMAIL PROTECTED]): I have noticed recently that attempted connections to my box aren't being logged in syslog. It's possible that RH installed a deamon like 'tcplogd' and 'icmplogd' by default or you just enabled that option. These deamons show incomming connection attempts and

Running/Compiling latest snort on potato

2001-09-03 Thread Shane Machon
Greetings, Anyone had success compiling snort 1.81 on a stable potato box? Looking at the snort website, there is a question regarding libpcap 0.5 under Redhat that will cause problems, does anyone know if this is this redhat specific? Potato only offers libpcap0 0.4a6-3. I dont have to have

Portsentry vs snort

2001-09-03 Thread Andrew Pollock
Hi, I'm currently running Portsentry on a box, and I've got it configured to add an ipchains rule firewalling off all access to an IP that touches one of the ports that Portsentry is listening on (after doing some sanity checks on where the portscan/port access came from). I find the way that

CODA + portmapper == insecure?

2001-09-03 Thread Doug Alcorn
I'm interested in doing CODA file system over the internet. It has all the features of a networked filesystem that I'm interested in. The only problem seems to be that it requires the use of the portmapper. From my NFS day, I seem to remember that portmapper is insecure. Is this true? Is CODA

Problems with pam_access

2001-09-03 Thread Philipp Schulte
Hello, I am using pure-ftpd 0.99.1b (compiled from source) on a potato-system with kernel 2.4.9. I want to make one ftp-account accessible only for certain IP-addresses. This is possible by using pam_access and it works fine with ssh. I added this line to /etc/pam.d/pure-ftpd: account required

Re: Running/Compiling latest snort on potato

2001-09-03 Thread sjk
Compiled and ran fine for me with libpcap 0.4a6. --sjk On 4 Sep, Shane Machon wrote: Greetings, Anyone had success compiling snort 1.81 on a stable potato box? Looking at the snort website, there is a question regarding libpcap 0.5 under Redhat that will cause problems, does anyone

FW: a filter for tcp socket

2001-09-03 Thread Antropov Anton
Hello! Did you hear about netfilter/iptables/ipchains etc? This is a firewall task, isn't it? And there are tons of documentation - visit netfilter.samba.org. Or google :). -Original Message- From: Samu [mailto:[EMAIL PROTECTED] Sent: Monday, September 03, 2001 9:04 PM To:

Re: Running/Compiling latest snort on potato

2001-09-03 Thread Vladislav
Hello, --- Shane Machon [EMAIL PROTECTED] wrote: I dont have to have 1.81 of snort (would be nice though!), just db support (1.7 or above) Any success stories? I used compiled from sources snort for 2 month. Then, I decide to add db support and try to recompile it. But it depends on so