Re: Iptables config

2002-04-21 Thread J C Lawrence
On Sun, 21 Apr 2002 18:34:58 +0200 (CEST) Cristian Ionescu-Idbohrn <[EMAIL PROTECTED]> wrote: > http://www.linuxguruz.org/iptables/ I've found that shorewall (now apt-gettable) makes a very nice iptables framework/wrapper. -- J C Lawrence -(*)

Re: Iptables config

2002-04-21 Thread J C Lawrence
On Sun, 21 Apr 2002 18:34:58 +0200 (CEST) Cristian Ionescu-Idbohrn <[EMAIL PROTECTED]> wrote: > http://www.linuxguruz.org/iptables/ I've found that shorewall (now apt-gettable) makes a very nice iptables framework/wrapper. -- J C Lawrence -(*)

Re: About user monitoring

2002-04-17 Thread J C Lawrence
ut this subject. Google ttysnoop. -- J C Lawrence -(*)Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live. -- To UNSUBSCRIBE,

Re: About user monitoring

2002-04-16 Thread J C Lawrence
ut this subject. Google ttysnoop. -- J C Lawrence -(*)Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live. -- To UNSUBSCRIBE,

Re: Exim mail Problem

2002-01-18 Thread J C Lawrence
eeing is exim mail chewing up resources and not letting anything > else play, like apache. ;o) Install the eximon package. Run it as root and then use that to investigate what messages are being held and why. -- J C Lawrence -(*)Satan, oscillate my meta

Re: Exim mail Problem

2002-01-18 Thread J C Lawrence
eeing is exim mail chewing up resources and not letting anything > else play, like apache. ;o) Install the eximon package. Run it as root and then use that to investigate what messages are being held and why. -- J C Lawrence -(*)Satan, oscillate my meta

Re: Mailserver HDD organization

2002-01-17 Thread J C Lawrence
On Thu, 17 Jan 2002 09:23:02 -0500 Dave Kline <[EMAIL PROTECTED]> wrote: > I know, I know, use what you feel comfortable with, but how > comfortable are you guys with Exim? -A. Dave Very. I like, and use both Exim and Postfix in deployed production systems. --

Re: Mailserver HDD organization

2002-01-17 Thread J C Lawrence
related > know-how to run a secure and stable mailserver on my network. There's been quite a bit of this sort of data on the Mailman lists from Chuq von Rospach, myself, Nigel Metherington, and others. -- J C Lawrence -(*)Satan, oscillate my

Re: Mailserver HDD organization

2002-01-17 Thread J C Lawrence
On Thu, 17 Jan 2002 09:23:02 -0500 Dave Kline <[EMAIL PROTECTED]> wrote: > I know, I know, use what you feel comfortable with, but how > comfortable are you guys with Exim? -A. Dave Very. I like, and use both Exim and Postfix in deployed production systems. --

Re: Mailserver HDD organization

2002-01-17 Thread J C Lawrence
related > know-how to run a secure and stable mailserver on my network. There's been quite a bit of this sort of data on the Mailman lists from Chuq von Rospach, myself, Nigel Metherington, and others. -- J C Lawrence -(*)Satan, oscillate my

Re: IPSec questions...

2002-01-08 Thread J C Lawrence
N packages seem to work. -- J C Lawrence -(*)Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

Re: IPSec questions...

2002-01-08 Thread J C Lawrence
eS/WAN packages seem to work. -- J C Lawrence -(*)Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live. -- To UNSUBSCRIBE, email to [

Re: MySQL<->Firewall

2002-01-08 Thread J C Lawrence
ports on the ppp0 have I to open, that the local > php-scripts can connect to the database ??? None. -- J C Lawrence -(*)Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.ka

Re: MySQL<->Firewall

2002-01-08 Thread J C Lawrence
hat ports on the ppp0 have I to open, that the local > php-scripts can connect to the database ??? None. -- J C Lawrence -(*)Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.kanga.nu/

Re: Apt-get is insecure

2001-12-17 Thread J C Lawrence
On 17 Dec 2001 14:34:12 +1100 Simon Hill <[EMAIL PROTECTED]> wrote: > so assuming that dpkg (and/or apt?) can deal with embedded gpg > signiatures in .deb files, how do we get maintainers to start > using them? File bugs? -- J C Lawrence -(*)

Re: Apt-get is insecure

2001-12-17 Thread J C Lawrence
On 17 Dec 2001 14:34:12 +1100 Simon Hill <[EMAIL PROTECTED]> wrote: > so assuming that dpkg (and/or apt?) can deal with embedded gpg > signiatures in .deb files, how do we get maintainers to start > using them? File bugs? -- J C Lawrence -(*)

Re: Apt-get is insecure

2001-12-13 Thread J C Lawrence
patch accepted? http://lists.debian.org/debian-dpkg/2001/debian-dpkg-200103/msg00024.html -- J C Lawrence -(*)Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

Re: Apt-get is insecure

2001-12-13 Thread J C Lawrence
patch accepted? http://lists.debian.org/debian-dpkg/2001/debian-dpkg-200103/msg00024.html -- J C Lawrence -(*)Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-21 Thread J C Lawrence
On Tue, 20 Nov 2001 22:25:36 -0600 Nathan E Norman wrote: > On Tue, Nov 20, 2001 at 12:01:32PM -0800, J C Lawrence wrote: >> Mail-Followup-To is a non-standard, un-RFC documented, generally >> unsupported header. > The guy is using mutt. mutt supports M-F-T. You fig

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-20 Thread J C Lawrence
On Tue, 20 Nov 2001 22:25:36 -0600 Nathan E Norman wrote: > On Tue, Nov 20, 2001 at 12:01:32PM -0800, J C Lawrence wrote: >> Mail-Followup-To is a non-standard, un-RFC documented, generally >> unsupported header. > The guy is using mutt. mutt supports M-F-T. You fig

Re: WAY OT (Re: In Praise of Dos (RE: Mutt & tmp files))

2001-11-20 Thread J C Lawrence
On Tue, 20 Nov 2001 13:00:58 -0800 Vineet Kumar <[EMAIL PROTECTED]> wrote: > * J C Lawrence ([EMAIL PROTECTED]) [011120 12:04]: >> Mail-Followup-To is a non-standard, un-RFC documented, generally >> unsupported header. > So are "please" and "thank you,&

Re: WAY OT (Re: In Praise of Dos (RE: Mutt & tmp files))

2001-11-20 Thread J C Lawrence
On Tue, 20 Nov 2001 13:00:58 -0800 Vineet Kumar <[EMAIL PROTECTED]> wrote: > * J C Lawrence ([EMAIL PROTECTED]) [011120 12:04]: >> Mail-Followup-To is a non-standard, un-RFC documented, generally >> unsupported header. > So are "please" and "thank you,&

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-20 Thread J C Lawrence
a non-standard, un-RFC documented, generally unsupported header. -- J C Lawrence -(*)Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

Re: In Praise of Dos (RE: Mutt & tmp files)

2001-11-20 Thread J C Lawrence
a non-standard, un-RFC documented, generally unsupported header. -- J C Lawrence -(*)Satan, oscillate my metallic sonatas. [EMAIL PROTECTED] He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live. -- To UNSUBSCRIBE, email to

Re: gnupg problem

2001-06-21 Thread J C Lawrence
GNU/Emacs crap from my .xemacs, and now, amazingly, finally have the damn thing under 250K. > better still, use mutt which has all the support in > there. Mutt can't handle MH folders properly (named sequence support to name but one). No thanks. -- J C Lawrence

Re: gnupg problem

2001-06-21 Thread J C Lawrence
GNU/Emacs crap from my .xemacs, and now, amazingly, finally have the damn thing under 250K. > better still, use mutt which has all the support in > there. Mutt can't handle MH folders properly (named sequence support to name but one). No thanks. -- J C Lawrence

Re: Good "secure" FTP server

2001-06-01 Thread J C Lawrence
rs and his commentary (Marcus Ranum's AFTPd is also rather nice for pure anonymous work). -- J C Lawrence [EMAIL PROTECTED] -(*) http://www.kanga.nu/~claw/ The pressure to survive and rhetoric may make strange bedfellows

Re: Good "secure" FTP server

2001-05-31 Thread J C Lawrence
rs and his commentary (Marcus Ranum's AFTPd is also rather nice for pure anonymous work). -- J C Lawrence [EMAIL PROTECTED] -(*) http://www.kanga.nu/~claw/ The pressure to survive and rhetoric may make strange bedfello

Re: Ports to block?

2001-04-05 Thread J C Lawrence
On Thu, 05 Apr 2001 13:40:54 -0700 Eric N Valor <[EMAIL PROTECTED]> wrote: > 53-UDP (DNS, if you have bind running) DNS will talk TCP on port 53 if the record requested is particularly large. -- J C Lawrence [EMAIL

Re: Ports to block?

2001-04-05 Thread J C Lawrence
On Thu, 05 Apr 2001 13:40:54 -0700 Eric N Valor <[EMAIL PROTECTED]> wrote: > 53-UDP (DNS, if you have bind running) DNS will talk TCP on port 53 if the record requested is particularly large. -- J C Lawrence [EMAIL

Re: Debian or Linux 7???

2001-02-20 Thread J C Lawrence
c) How to harden a system. d) How to audit and monitor a system. e) How to actively maintain a secure system. Choice of Linux distribution or kernel version really isn't going to help you much there (minor exceptions).. -- J C Lawrence

Re: Debian or Linux 7???

2001-02-19 Thread J C Lawrence
c) How to harden a system. d) How to audit and monitor a system. e) How to actively maintain a secure system. Choice of Linux distribution or kernel version really isn't going to help you much there (minor exceptions).. -- J C Lawrence

Re: secure install

2001-02-15 Thread J C Lawrence
mes as needed. Here I keep a stock of comparitive Woddy installs on various media types (IDE/SCSI/installation types) for just that purpose. Got a new desktop? Got a new web server? Got a new test box? What sort of drive? Grab a matching disk off the shelf and one `dd`

Re: secure install

2001-02-15 Thread J C Lawrence
mes as needed. Here I keep a stock of comparitive Woddy installs on various media types (IDE/SCSI/installation types) for just that purpose. Got a new desktop? Got a new web server? Got a new test box? What sort of drive? Grab a matching disk off the shelf and one `dd`

Re: Extremely simple MTA

2000-12-14 Thread J C Lawrence
n when i > configure exim in "satellite" mode, it still keeps port 25 open. Do a web search for SSMTP -- it does exactly this. Note that a number of mail applications deliver mail directly to localhost via SMTP (eg MH) and that use of something like SSMTP will rep

Re: Extremely simple MTA

2000-12-14 Thread J C Lawrence
n when i > configure exim in "satellite" mode, it still keeps port 25 open. Do a web search for SSMTP -- it does exactly this. Note that a number of mail applications deliver mail directly to localhost via SMTP (eg MH) and that use of something like SSMTP will rep

Re: Snort Log?

2000-12-05 Thread J C Lawrence
On Mon, 4 Dec 2000 20:37:39 +0100 keatch it <[EMAIL PROTECTED]> wrote: > 3) IDS246 - MISC - Large ICMP Packet: xxx.xx.xx.xx -> home_net ... > What kind of game is it?. It's a AIX features (the OS that the > host claims to run)? Typically with AIX this is an MTU di

Re: Snort Log?

2000-12-05 Thread J C Lawrence
On Mon, 4 Dec 2000 20:37:39 +0100 keatch it <[EMAIL PROTECTED]> wrote: > 3) IDS246 - MISC - Large ICMP Packet: xxx.xx.xx.xx -> home_net ... > What kind of game is it?. It's a AIX features (the OS that the > host claims to run)? Typically with AIX this is an MTU di

Re: What should a Debian-security metapackage should provide?

2000-12-04 Thread J C Lawrence
on servers are bad. X client libraries are not so bad. -- J C Lawrence [EMAIL PROTECTED] -(*): http://www.kanga.nu/~claw/ --=| A man is as sane as he is dangerous to his environment |=--

Re: What should a Debian-security metapackage should provide?

2000-12-04 Thread J C Lawrence
on servers are bad. X client libraries are not so bad. -- J C Lawrence [EMAIL PROTECTED] -(*): http://www.kanga.nu/~claw/ --=| A man is as sane as he is dangerous to his environment |=-- -- To UNSUBSCRIBE, email to [EMAIL PROTEC

Re: I want to try something for freedom.

2000-11-02 Thread J C Lawrence
On Wed, 1 Nov 2000 09:12:34 -0500 (EST) Patrick Maheral <[EMAIL PROTECTED]> wrote: > Isn't there a provision in American (or Canadian) law that allows > reverse engineering (not disassembling code) for interoperability > purposes? Tell that to the DMCA, DeCSS, and the EF

Re: I want to try something for freedom.

2000-11-02 Thread J C Lawrence
On Wed, 1 Nov 2000 09:12:34 -0500 (EST) Patrick Maheral <[EMAIL PROTECTED]> wrote: > Isn't there a provision in American (or Canadian) law that allows > reverse engineering (not disassembling code) for interoperability > purposes? Tell that to the DMCA, DeCSS, and the EF

Re: SecurityPortal Review of Potato

2000-08-30 Thread J C Lawrence
a nice idea, and damned useful, much like their describe tools (gives a full hardware and OS status report). -- J C Lawrence Home: [EMAIL PROTECTED] -(*) Other: [EMAIL PROTECTED] http://www.kanga.nu/~claw/Keys etc:

Re: Good Book

2000-01-18 Thread J C Lawrence
in. Very little of the security game is built on particular application specifics. A whole lot is built on patterns and behaviour. -- J C Lawrence Home: [EMAIL PROTECTED] --(*) Other: [EMAIL PROTECTED] --=| A man is as sane as