Re: SSH with potato, not very secure?

2001-03-02 Thread William R. Ward
Ethan Benson <[EMAIL PROTECTED]> writes: > > One reason why I did not install any security-updates to SSH1.1 is that on > > the web page of www.debian.org they say that there is a remote exploit in > > OpenSSH (DSA-027) but it is fixed in Debian 2.2 (potato) and that is the > > one I installed. I d

Re: promiscuous eth0

2001-03-02 Thread Kristian F. Høgh
Hi Jeff. My pcmcia netcard also don't work when i switch on my laptop. When i type ifconfig it prints: UP BROADCAST RUNNING then I enable multicast (ifconfig eth0 multicast) It works and ifconfig prints UP BROADCAST RUNNING MULTICAST Kristian F. Høgh. Jeff Coppock wrote: > I recently install s

Re: promiscuous eth0

2001-03-02 Thread Alexander Hvostov
Jeff, It can potentially slow your machine down somewhat, as now the kernel has to handle each and every frame transmitted on the network eth0 is attached to, rather than only the ones addressed to your machine and broadcasts. Quite a lot of load if your system isn't addressed much on a high-traff

promiscuous eth0

2001-03-02 Thread Jeff Coppock
I recently install snort on my laptop to check it out and now my pcmcia network card will pass IP only when snort is running (daemon mode or not), or I have to put my network card in promiscuous mode [#ifconfig eth0 -promisc]. I can't find any configuration that is obvious to me that would cause

Re: SSH with potato, not very secure?

2001-03-02 Thread William R. Ward
Ethan Benson <[EMAIL PROTECTED]> writes: > > One reason why I did not install any security-updates to SSH1.1 is that on > > the web page of www.debian.org they say that there is a remote exploit in > > OpenSSH (DSA-027) but it is fixed in Debian 2.2 (potato) and that is the > > one I installed. I

Re: promiscuous eth0

2001-03-02 Thread Kristian F. Høgh
Hi Jeff. My pcmcia netcard also don't work when i switch on my laptop. When i type ifconfig it prints: UP BROADCAST RUNNING then I enable multicast (ifconfig eth0 multicast) It works and ifconfig prints UP BROADCAST RUNNING MULTICAST Kristian F. Høgh. Jeff Coppock wrote: > I recently install

Re: promiscuous eth0

2001-03-02 Thread Alexander Hvostov
Jeff, It can potentially slow your machine down somewhat, as now the kernel has to handle each and every frame transmitted on the network eth0 is attached to, rather than only the ones addressed to your machine and broadcasts. Quite a lot of load if your system isn't addressed much on a high-traf

promiscuous eth0

2001-03-02 Thread Jeff Coppock
I recently install snort on my laptop to check it out and now my pcmcia network card will pass IP only when snort is running (daemon mode or not), or I have to put my network card in promiscuous mode [#ifconfig eth0 -promisc]. I can't find any configuration that is obvious to me that would caus

Re: SSH with potato, not very secure?

2001-03-02 Thread Ethan Benson
On Fri, Mar 02, 2001 at 08:39:09AM +0100, Runar Bell wrote: > Hi, > > and thanks to everybody for all the useful information I have received. :) > One good thing about using SSH2.4 in stead of OpenSSH is that if someone > installed an RSA key in my .ssh/authorized_keys file, it would be of no > us

Re: SSH with potato, not very secure?

2001-03-02 Thread Kevin van Haaren
At 06:08 + 3/2/2001, Jacob Meuser wrote: I believe it becomes uncommented if one installs over the network? (That would make sense to ME anyway.) <[EMAIL PROTECTED]> It didn't on my network install. I did an FTP install of PowerPC Debian (Potato). I had to uncomment the security line a

Re: SSH with potato, not very secure?

2001-03-02 Thread Runar Bell
On Fri, 2 Mar 2001, Jacob Meuser wrote: > On Fri, Mar 02, 2001 at 11:39:15AM +0100, Tollef Fog Heen wrote: > > * Ethan Benson > > > > | On Thu, Mar 01, 2001 at 05:07:43AM +, Jacob Meuser wrote: > > | > > > | > My potatos have > > | > deb http://security.debian.org stable/updates main contrib n

Re: SSH with potato, not very secure?

2001-03-02 Thread Jacob Meuser
On Thu, Mar 01, 2001 at 10:30:35AM -0700, Hubert Chan wrote: > > On the other hand, OpenSSH was created by the OpenBSD people, who are > famous for secure programming. > And also for quick security fixes. They had a patch for sudo about 5 hours after the recent bug was discovered. It took a few

Re: SSH with potato, not very secure?

2001-03-02 Thread Jacob Meuser
On Fri, Mar 02, 2001 at 11:39:15AM +0100, Tollef Fog Heen wrote: > * Ethan Benson > > | On Thu, Mar 01, 2001 at 05:07:43AM +, Jacob Meuser wrote: > | > > | > My potatos have > | > deb http://security.debian.org stable/updates main contrib non-free > | > in /etc/apt/sources.list > | > That

Re: Proposal: OpenSSH 2.3.0/2.5.1 to proposed updates

2001-03-02 Thread Jacob Meuser
On Fri, Mar 02, 2001 at 07:13:22PM +1100, Steve wrote: > Hi, > > Would it be possible for the latest version of OpenSSH (2.5.1 in > unstable) to be back-ported to potato and added to proposed updates > once it enters testing. > I second that. > > Disclaimer: I am not a developer. However, I am

Re: SSH with potato, not very secure?

2001-03-02 Thread Ethan Benson
On Fri, Mar 02, 2001 at 08:39:09AM +0100, Runar Bell wrote: > Hi, > > and thanks to everybody for all the useful information I have received. :) > One good thing about using SSH2.4 in stead of OpenSSH is that if someone > installed an RSA key in my .ssh/authorized_keys file, it would be of no > u

Re: SSH with potato, not very secure?

2001-03-02 Thread Kevin van Haaren
At 06:08 + 3/2/2001, Jacob Meuser wrote: >I believe it becomes uncommented if one installs over the network? (That >would make sense to ME anyway.) > ><[EMAIL PROTECTED]> It didn't on my network install. I did an FTP install of PowerPC Debian (Potato). I had to uncomment the security line

Re: SSH with potato, not very secure?

2001-03-02 Thread Runar Bell
On Fri, 2 Mar 2001, Jacob Meuser wrote: > On Fri, Mar 02, 2001 at 11:39:15AM +0100, Tollef Fog Heen wrote: > > * Ethan Benson > > > > | On Thu, Mar 01, 2001 at 05:07:43AM +, Jacob Meuser wrote: > > | > > > | > My potatos have > > | > deb http://security.debian.org stable/updates main contrib

Re: SSH with potato, not very secure?

2001-03-02 Thread Jacob Meuser
On Thu, Mar 01, 2001 at 10:30:35AM -0700, Hubert Chan wrote: > > On the other hand, OpenSSH was created by the OpenBSD people, who are > famous for secure programming. > And also for quick security fixes. They had a patch for sudo about 5 hours after the recent bug was discovered. It took a fe

Re: SSH with potato, not very secure?

2001-03-02 Thread Jacob Meuser
On Fri, Mar 02, 2001 at 11:39:15AM +0100, Tollef Fog Heen wrote: > * Ethan Benson > > | On Thu, Mar 01, 2001 at 05:07:43AM +, Jacob Meuser wrote: > | > > | > My potatos have > | > deb http://security.debian.org stable/updates main contrib non-free > | > in /etc/apt/sources.list > | > Tha

Re: Proposal: OpenSSH 2.3.0/2.5.1 to proposed updates

2001-03-02 Thread Jacob Meuser
On Fri, Mar 02, 2001 at 07:13:22PM +1100, Steve wrote: > Hi, > > Would it be possible for the latest version of OpenSSH (2.5.1 in > unstable) to be back-ported to potato and added to proposed updates > once it enters testing. > I second that. > > Disclaimer: I am not a developer. However, I a

Re: SSH with potato, not very secure?

2001-03-02 Thread Tollef Fog Heen
* Ethan Benson | On Thu, Mar 01, 2001 at 05:07:43AM +, Jacob Meuser wrote: | > | > My potatos have | > deb http://security.debian.org stable/updates main contrib non-free | > in /etc/apt/sources.list | > That was in there by default, I just uncommented it. (it was there in r0 too, | | i

Exchange & firewall

2001-03-02 Thread Jakub Ambrożewicz
I need to protect exchange server on NT with firewall. What ports should I leave open? SMTP, POP3, IMAP, dns? Does it spawn something on high ports? JA

Re: SSH with potato, not very secure?

2001-03-02 Thread Tollef Fog Heen
* Ethan Benson | On Thu, Mar 01, 2001 at 05:07:43AM +, Jacob Meuser wrote: | > | > My potatos have | > deb http://security.debian.org stable/updates main contrib non-free | > in /etc/apt/sources.list | > That was in there by default, I just uncommented it. (it was there in r0 too, | | i

just say 'no' to root passwords

2001-03-02 Thread TeknoDragon
On Fri, 2 Mar 2001, Alexander Hvostov wrote: > Of course, all of this is meaningless, since with PAM, `su' _can_ > understand and honor the `wheel' group. Also, if RMS is so against > authority and power, why is there a GNU `su' at all? > > In addition, where the rulers' (ie, sysadmins') power is

Exchange & firewall

2001-03-02 Thread Jakub Ambrożewicz
I need to protect exchange server on NT with firewall. What ports should I leave open? SMTP, POP3, IMAP, dns? Does it spawn something on high ports? JA -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Proposal: OpenSSH 2.3.0/2.5.1 to proposed updates

2001-03-02 Thread Steve
Hi, Would it be possible for the latest version of OpenSSH (2.5.1 in unstable) to be back-ported to potato and added to proposed updates once it enters testing. I propose this due to the recent set of ssh vulnerabilities most (all?) of which didn't apply to 2.3.0, and the concerns over the fundam

Re: SSH with potato, not very secure?

2001-03-02 Thread Runar Bell
Hi, and thanks to everybody for all the useful information I have received. :) One good thing about using SSH2.4 in stead of OpenSSH is that if someone installed an RSA key in my .ssh/authorized_keys file, it would be of no use :) Besides, I have heard that the SSH1.1 protocol is unsecure, and tha

Re: Quitting debian-java

2001-03-02 Thread Alexander Hvostov
[Note: This is Cc'd to debian-devel and debian-security because of the discussion regarding RMS' su diatribe; subscribers to these lists might find it interesting, scroll down past the Java stuff if you are, and feel free to ignore this message if you're not. Please don't flame me. I'm thin-skinned

just say 'no' to root passwords

2001-03-02 Thread TeknoDragon
On Fri, 2 Mar 2001, Alexander Hvostov wrote: > Of course, all of this is meaningless, since with PAM, `su' _can_ > understand and honor the `wheel' group. Also, if RMS is so against > authority and power, why is there a GNU `su' at all? > > In addition, where the rulers' (ie, sysadmins') power is