Re: [Cooker] msec questions

2000-06-30 Thread Guy T. Rice

On Mon, 26 Jun 2000, Steve Fox wrote:
> I installed my masquerading box with a "high" setting for msec. When I
> do that I cannot SSH into my box, nor access http. Does anyone know if
> it's possible to run at "high" security while allowing these services
> through? I can get out just fine, but nothing can get in. They only odd
> thing I've done is to use a higher port for SSH than the default 22. 

I've installed Mandrake 7.0 on two systems used as masquerading firewalls
using the "High" security setting, so it can be done.  However, it doesn't
work right off the bat, and I don't recall for sure what I had to change
to get OpenSSH working.  I think it may have had something to do with the
/etc/hosts.allow or /etc/hosts.deny, though...




Re: [Cooker] msec questions

2000-06-29 Thread Bryan Paxton

On Mon, 26 Jun 2000, you wrote:
> I installed my masquerading box with a "high" setting for msec. When I
> do that I cannot SSH into my box, nor access http. Does anyone know if
> it's possible to run at "high" security while allowing these services
> through? I can get out just fine, but nothing can get in. They only odd
> thing I've done is to use a higher port for SSH than the default 22. 
> 
> -- 
> 
> Steve Fox
> http://k-lug.com

hummm ok well the only two things that would cause this would be:

1) If you're running these services out of inetd, I'm just gonna assume you're
not(it'd be quite silly to run these services out of inetd). 

2) You simply didn't turn these services back on. Level 4(high) does a chkconfig
task basically turning off ALL services except the bare ones that are needed
(e.g.: network, xfs, crond, etc...) So ya might wanna make sure these services
(sshd and httpd) are in fact running. 

 You can do this a few ways, I suggest you run 'drakxconf' and go to 
drakxservices and make sure these are checked to start up at boot. After so,
start up the servers by running it's script from /etc/rc.d/init.d/ 
(e.g.: /etc/rc.d/init.d/httpd start). 

 If I'm wrong, please reply back : )



-- 
Bryan Paxton

"How should I know if it works? That's what beta testers are for. I
  only coded it."
 -- Linus Torvalds.

Public key can be found at http://speedbros.org/Bryan_Paxton.asc




[Cooker] msec questions

2000-06-26 Thread Steve Fox

I installed my masquerading box with a "high" setting for msec. When I
do that I cannot SSH into my box, nor access http. Does anyone know if
it's possible to run at "high" security while allowing these services
through? I can get out just fine, but nothing can get in. They only odd
thing I've done is to use a higher port for SSH than the default 22. 

-- 

Steve Fox
http://k-lug.com