Re: Apache + ModSSL

2001-07-23 Thread Oohara Yuuma
My question is how to configure httpd.conf, so I can access my sites via https://www.mysite.com. from /etc/apache/httpd.conf: # ServerName allows you to set a host name which is sent back to clients for # your server if it's different than the one the program would get (i.e. use # www instead

Re: read-write to stdin-stdout or to a file?

2001-07-23 Thread David Wright
Quoting Pedro Zorzenon Neto ([EMAIL PROTECTED]): On Fri, Jul 20, 2001 at 12:42:13PM +0100, David Wright wrote: Do you mean this package? Programmer for Atmel AVR microcontrolers that uses PC parallel port Yes. If so, I'm not sure why you think it needs to be setuid. Just chgrp

Re: Apache + ModSSL

2001-07-23 Thread Thomas Morin
-. Oohara Yuuma (2001-07-23) : | | My question is how to configure httpd.conf, so I can access my sites via |https://www.mysite.com. | from /etc/apache/httpd.conf: | | # ServerName allows you to set a host name which is sent back to clients for | # your server I guess the question was

Re: iptables logging

2001-07-23 Thread Jeff Coppock
Matthias Richter, 2001-Jul-22 08:18 +0200: You need to tell iptables which packages should be logged. For example: iptables -N log # This table logs and hands package over to delete iptables -N delete - This table rejects anything iptables -A INPUT RULE -j log # Rule to be logged

OT: why they use IIS (was red worm amusement)

2001-07-23 Thread JonesMB
this morning I read an interesting article on the red worm amusement topic that led to the weekend's heated discussion. the article is at http://dailynews.yahoo.com/h/zd/20010723/tc/it_bugs_out_over_iis_security_1. html here are a few interesting quotes from the article - Despite

Unidentified subject!

2001-07-23 Thread Nick Name
Hi all. I run a stable with some package from testing (XFree86 4.02 and konqueror). Some week ago in the morning I found my computer had been rebooted by night and found some zeroes in my syslog, just before the reboot. I first thought of a worm, the latest ramen variant (don't remember the name

Re: iptables logging

2001-07-23 Thread Tamas TEVESZ
On Mon, 23 Jul 2001, Jeff Coppock wrote: other than /var/log/syslog. I'd like these Refected: log messages to go into /var/log/iptables.log instead. I can't figure out what changes to make to /etc/syslog.conf to make this happen. Any help is appreciated. apt-get install

Re: OT: why they use IIS (was red worm amusement)

2001-07-23 Thread Sven Hoexter
On Mon, Jul 23, 2001 at 12:02:00PM -0500, JonesMB wrote: this morning I read an interesting article on the red worm amusement topic that led to the weekend's heated discussion. the article is at http://dailynews.yahoo.com/h/zd/20010723/tc/it_bugs_out_over_iis_security_1. html here

Re: --no-run option (was: Re: red worm amusement)

2001-07-23 Thread Steve Greenland
On 22-Jul-01, 16:06 (CDT), Steven Barker [EMAIL PROTECTED] wrote: On Sun, Jul 22, 2001 at 04:00:43PM +0200, Bernhard R. Link wrote: The standard-config is normally sane, and when you do not think so, place another config-file there before installing it. Hmmm, I don't know that that would

umask for init

2001-07-23 Thread Dan Christensen
I read that certain kernel versions don't set the umask for init correctly (2.4.6 is one of them, I think). Does anyone know if a Debian system is susceptible to this problem, and if so, which files may have been created world-writable? Thanks, Dan -- Dan Christensen [EMAIL PROTECTED] --

Re: umask for init

2001-07-23 Thread Tim Haynes
Dan Christensen [EMAIL PROTECTED] writes: I read that certain kernel versions don't set the umask for init correctly (2.4.6 is one of them, I think). Does anyone know if a Debian system is susceptible to this problem, and if so, which files may have been created world-writable? I think

Re: umask for init

2001-07-23 Thread Ethan Benson
On Mon, Jul 23, 2001 at 04:53:55PM -0400, Dan Christensen wrote: I read that certain kernel versions don't set the umask for init correctly (2.4.6 is one of them, I think). Does anyone know if a Debian system is susceptible to this problem, and if so, which files may have been created

Re: iptables logging

2001-07-23 Thread Jeff Coppock
Tamas TEVESZ, 2001-Jul-23 19:17 +0200: On Mon, 23 Jul 2001, Jeff Coppock wrote: other than /var/log/syslog. I'd like these Refected: log messages to go into /var/log/iptables.log instead. I can't figure out what changes to make to /etc/syslog.conf to make this

Re: umask for init

2001-07-23 Thread Sami J. Juvonen
Ethan Benson [EMAIL PROTECTED] writes: On Mon, Jul 23, 2001 at 04:53:55PM -0400, Dan Christensen wrote: I read that certain kernel versions don't set the umask for init correctly (2.4.6 is one of them, I think). Does anyone know if a Debian system is susceptible to this problem, and if

Re: umask for init

2001-07-23 Thread Dan Christensen
Christian Jaeger [EMAIL PROTECTED] writes: I have put a line 'umask 022' at the top of /etc/init.d/rc to solve it (/etc/init.d/rcS already has a umask 022 command). And presumably I need to reboot after doing this, right? Dan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject

Re: iptables logging

2001-07-23 Thread dude
On Mon, 23 Jul 2001, Jeff Coppock wrote: iptables -A log -j LOG --log-prefix Rejected: # be verbose in syslog iptables -A log -j delete # hand over package to delete What more information does log prefix add to the log? thankx G -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Re: iptables logging

2001-07-23 Thread Rich Rudnick
On Mon, 23 Jul 2001 19:27:06 dude wrote: On Mon, 23 Jul 2001, Jeff Coppock wrote: iptables -A log -j LOG --log-prefix Rejected: # be verbose in syslog iptables -A log -j delete # hand over package to delete What more information does log prefix add to the log? Without:

Re: Unidentified subject!

2001-07-23 Thread Olaf Meeuwissen
Nick Name [EMAIL PROTECTED] writes: Hi all. I run a stable with some package from testing (XFree86 4.02 and konqueror). Some week ago in the morning I found my computer had been rebooted by night and found some zeroes in my syslog, just before the reboot. I first thought of a worm, the

Apache + ModSSL

2001-07-23 Thread A . Didit Mifanto
Dear Debian Security: I have a problem configuring apache + mod_ssl on debian. I already have installed apache and mod-ssl from debian site (potato), and in apache error log, I got: [Mon Jul 23 11:07:10 2001] [notice] Apache/1.3.9 (Unix) Debian/GNU mod_ssl/2.4.10 OpenSSL/0.9.4 PHP/4.0.3pl1

Re: Apache + ModSSL

2001-07-23 Thread Oohara Yuuma
My question is how to configure httpd.conf, so I can access my sites via https://www.mysite.com. from /etc/apache/httpd.conf: # ServerName allows you to set a host name which is sent back to clients for # your server if it's different than the one the program would get (i.e. use # www instead

Re: read-write to stdin-stdout or to a file?

2001-07-23 Thread David Wright
Quoting Pedro Zorzenon Neto ([EMAIL PROTECTED]): On Fri, Jul 20, 2001 at 12:42:13PM +0100, David Wright wrote: Do you mean this package? Programmer for Atmel AVR microcontrolers that uses PC parallel port Yes. If so, I'm not sure why you think it needs to be setuid. Just chgrp

Re: Apache + ModSSL

2001-07-23 Thread Thomas Morin
-. Oohara Yuuma (2001-07-23) : | | My question is how to configure httpd.conf, so I can access my sites via https://www.mysite.com. | from /etc/apache/httpd.conf: | | # ServerName allows you to set a host name which is sent back to clients for | # your server I guess the question was more

Re: apt-get install apache (was red worm amusement)

2001-07-23 Thread Kenneth Pronovici
Yes, but when you're upgrading your existing packages, and the dependencies have changed to such a degree to require *new* packages, that almost always implies a major change, such as a stable - testing transition, not a security fix for a package in stable (which is what security.debian.org

Re: iptables logging

2001-07-23 Thread Jeff Coppock
Matthias Richter, 2001-Jul-22 08:18 +0200: You need to tell iptables which packages should be logged. For example: iptables -N log # This table logs and hands package over to delete iptables -N delete - This table rejects anything iptables -A INPUT RULE -j log # Rule to be logged iptables

OT: why they use IIS (was red worm amusement)

2001-07-23 Thread JonesMB
this morning I read an interesting article on the red worm amusement topic that led to the weekend's heated discussion. the article is at http://dailynews.yahoo.com/h/zd/20010723/tc/it_bugs_out_over_iis_security_1. html here are a few interesting quotes from the article - Despite the widespread

Re: iptables logging

2001-07-23 Thread Tamas TEVESZ
On Mon, 23 Jul 2001, Jeff Coppock wrote: other than /var/log/syslog. I'd like these Refected: log messages to go into /var/log/iptables.log instead. I can't figure out what changes to make to /etc/syslog.conf to make this happen. Any help is appreciated. apt-get install

Re: OT: why they use IIS (was red worm amusement)

2001-07-23 Thread Sven Hoexter
On Mon, Jul 23, 2001 at 12:02:00PM -0500, JonesMB wrote: this morning I read an interesting article on the red worm amusement topic that led to the weekend's heated discussion. the article is at http://dailynews.yahoo.com/h/zd/20010723/tc/it_bugs_out_over_iis_security_1. html here

umask for init

2001-07-23 Thread Dan Christensen
I read that certain kernel versions don't set the umask for init correctly (2.4.6 is one of them, I think). Does anyone know if a Debian system is susceptible to this problem, and if so, which files may have been created world-writable? Thanks, Dan -- Dan Christensen [EMAIL PROTECTED]

Re: umask for init

2001-07-23 Thread Ethan Benson
On Mon, Jul 23, 2001 at 04:53:55PM -0400, Dan Christensen wrote: I read that certain kernel versions don't set the umask for init correctly (2.4.6 is one of them, I think). Does anyone know if a Debian system is susceptible to this problem, and if so, which files may have been created

Re: --no-run option (was: Re: red worm amusement)

2001-07-23 Thread Steve Greenland
On 22-Jul-01, 16:06 (CDT), Steven Barker [EMAIL PROTECTED] wrote: On Sun, Jul 22, 2001 at 04:00:43PM +0200, Bernhard R. Link wrote: The standard-config is normally sane, and when you do not think so, place another config-file there before installing it. Hmmm, I don't know that that would

Re: iptables logging

2001-07-23 Thread Jeff Coppock
Tamas TEVESZ, 2001-Jul-23 19:17 +0200: On Mon, 23 Jul 2001, Jeff Coppock wrote: other than /var/log/syslog. I'd like these Refected: log messages to go into /var/log/iptables.log instead. I can't figure out what changes to make to /etc/syslog.conf to make this happen.

Re: umask for init

2001-07-23 Thread Christian Jaeger
At 16:53 Uhr -0400 23.7.2001, Dan Christensen wrote: Does anyone know if a Debian system is susceptible to this problem, it is and if so, which files may have been created world-writable? Files from quite many servers: look in /var/run, for example (another place is /tmp). I have put a

Re: umask for init

2001-07-23 Thread Tim Haynes
Dan Christensen [EMAIL PROTECTED] writes: I read that certain kernel versions don't set the umask for init correctly (2.4.6 is one of them, I think). Does anyone know if a Debian system is susceptible to this problem, and if so, which files may have been created world-writable? I think 2.4.6

Re: umask for init

2001-07-23 Thread Nick Name
Il giorno Mon, 23 Jul 2001 15:58:33 -0800 Ethan Benson [EMAIL PROTECTED] ha scritto: kernels 2.4.3 - 2.4.6 set the umask to 000 so any thread/process created by the kernel, including init started with umask 000 and remained that way unless init changed it itself. Sincerely thanks. I did

Re: umask for init

2001-07-23 Thread Sami J. Juvonen
Ethan Benson [EMAIL PROTECTED] writes: On Mon, Jul 23, 2001 at 04:53:55PM -0400, Dan Christensen wrote: I read that certain kernel versions don't set the umask for init correctly (2.4.6 is one of them, I think). Does anyone know if a Debian system is susceptible to this problem, and if

Re: umask for init

2001-07-23 Thread Dan Christensen
Christian Jaeger [EMAIL PROTECTED] writes: I have put a line 'umask 022' at the top of /etc/init.d/rc to solve it (/etc/init.d/rcS already has a umask 022 command). And presumably I need to reboot after doing this, right? Dan