Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-04 Thread Jan Vroonhof
"Salman Ahmed" <[EMAIL PROTECTED]> writes: > Then there was the issue with not getting found. It was located in > /usr/include/db1 but I had to explicitly specify that dir with > --site-includes, which I thought was a bit strange. That is because the glibc maintainers have decide to move to db2

Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-04 Thread Mojahedul Hoque Abul Hasanat
On Sun, Oct 03, 1999 at 05:12:15PM -0500, Stephen R. Gore wrote: > > BTW, where is this port 1024 specified for WDM ? Just > > curious. > > I don't even know if it IS specified. I got the info like > this: Daemons that run stand-alone do not need a file like /etc/inetd.conf to specify on which po

Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-04 Thread Mario Olimpio de Menezes
On Sun, 3 Oct 1999, Salman Ahmed wrote: > You are right. I am using WDM. BTW, where is this port 1024 specified > for WDM ? Just curious. using a bind(2) call in the program source code. []s, Mario O.de Menezes"Many are the plans in a man's heart, but IPEN-CNEN/SP

Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-03 Thread Stephen R. Gore
Salman Ahmed wrote: > > "Stephen" == Stephen R Gore <[EMAIL PROTECTED]> writes: > Stephen> On my system wdm runs on port 1024. I don't know if you are > Stephen> running wdm, but I would suspect that xdm and gdm use the same > Stephen> port. YMMV. > > You are right. I am using WDM

Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-03 Thread Salman Ahmed
> "Stephen" == Stephen R Gore <[EMAIL PROTECTED]> writes: Stephen> On my system wdm runs on port 1024. I don't know if you are Stephen> running wdm, but I would suspect that xdm and gdm use the same Stephen> port. YMMV. You are right. I am using WDM. BTW, where is this port 1024 s

Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-03 Thread Stephen R. Gore
Salman Ahmed wrote: > (3) What service is running on port 1024 ? I grepped /etc/services and > there was no such port 1024 listed in there ? ---end quoted text--- On my system wdm runs on port 1024. I don't know if you are running wdm, but I would suspect that xdm and gdm use the same port. Y

Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-03 Thread Salman Ahmed
> "Jan" == Jan Vroonhof <[EMAIL PROTECTED]> writes: Jan> What struggle? XEmacs should compile on a typical Debian system, Jan> just using What I meant by that was that I didn't have all the dev libraries installed so, after installing a couple and trying make it would later bomb on so

Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-03 Thread Mark Brown
On Sun, Oct 03, 1999 at 11:01:15PM +0200, Jan Vroonhof wrote: > localhost still have access). I think you are more or less safe as > long as you don't do stupid things with xhosts. xhost + anyone? > > (6) I'd like to be able to respond to a port scan attempt in real-time, > > and possibly st

Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-03 Thread Jan Vroonhof
"Salman Ahmed" <[EMAIL PROTECTED]> writes: > them. The reason I hadn't noticed them when they were happening because > I was in another workspace and was struggling to get XEmacs to compile > from source. What struggle? XEmacs should compile on a typical Debian system, just using ./configure mak

Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-03 Thread Salman Ahmed
> "Nathan" == Nathan E Norman <[EMAIL PROTECTED]> writes: Nathan> RTFM /etc/services to find out what auth is, and RTFM Nathan> `host http.us.debian.org'. I'm tired of people complaining Nathan> about "hack attempts" from pavlov on the auth port. Please, Nathan> buy, steal, o

Re: Security Setup: how to respond to a portscan (This is long!)

1999-10-03 Thread Nathan E Norman
On Sun, 3 Oct 1999, Salman Ahmed wrote: [ snip ] : Oct 2 20:59:12 phoenix tcplogd: auth connection attempt from : pavlov.midco.net [24.220.0.13] RTFM /etc/services to find out what auth is, and RTFM `host http.us.debian.org'. I'm tired of people complaining about "hack attem

Security Setup: how to respond to a portscan (This is long!)

1999-10-03 Thread Salman Ahmed
First off, my apologies if this email is considered off-topic. The reason I am posting to this list about this subject is because I have received excellent help and support in the past from other debian users. Just yesterday I noticed in one of my log files a number of connection attempts to my b