[SECURITY] [DSA-071-1] fetchmail remote exploit

2001-08-09 Thread Wichert Akkerman
-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-071-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman August 10, 2001 -

Mutt and inline gpg

2001-08-09 Thread Marc Leeman
This is about the 4th time in as many years that I changed my e-mail client and every time I feel I have gained. I'm now using mutt now and am still in the process of finetuning. However, I have the following problem, of which I didn't find a solution yet. I am using gpg and in communication

Re: Mutt and inline gpg

2001-08-09 Thread Matt Hope
On Thu, 09 Aug 2001, Marc Leeman [EMAIL PROTECTED] wrote... : kmail sends the gpg messages inline, and upon arrival decodes them : immediately. In my config, mutt sends them as attachments. : When I get a kmail message, I have to save it to file and manually : decode it (not that difficult, but

Re: Mutt and inline gpg

2001-08-09 Thread Martin Domig
Hello list On Thu, Aug 09, 2001 at 08:03:15PM +1000, Matt Hope wrote: [...] : When my friends (2 differnt ones, one of which is planning to switch : to mutt) get the mails, they get it in an attachment, have to save it : and decode it manually (apparently kmail is expecting inline messages).

Re: Mutt and inline gpg

2001-08-09 Thread Brandon High
On Thu, Aug 09, 2001 at 03:19:42PM +0200, Martin Domig wrote: I am using the same procmail filter and can say that it works perfectly for incoming pgp/gpg mails. However, this does not solve the problem with other mail clients that want to have inline PGP messages, and those are many. Is

what's the error?

2001-08-09 Thread Viljo Marrandi
Hello, I'm not sure this is aan security issue, but i could be exploitable... From time to time one of my nic's just dies and in /var/log/messages i have stuff like this: Aug 9 16:08:59 server kernel: eth1: Oversized Ethernet frame c7f9f460 vs c7f9f460. Aug 9 16:08:59 server kernel: eth1:

Re: what's the error?

2001-08-09 Thread Nathan E Norman
On Thu, Aug 09, 2001 at 06:05:38PM +0200, Viljo Marrandi wrote: Hello, I'm not sure this is aan security issue, but i could be exploitable... From time to time one of my nic's just dies and in /var/log/messages i have stuff like this: Aug 9 16:08:59 server kernel: eth1: Oversized

Re: Mutt and inline gpg

2001-08-09 Thread Sami Haahtinen
On Thu, Aug 09, 2001 at 11:55:49AM +0200, Marc Leeman wrote: kmail sends the gpg messages inline, and upon arrival decodes them immediately. In my config, mutt sends them as attachments. When I get a kmail message, I have to save it to file and manually decode it (not that difficult, but

Re: Mutt and inline gpg

2001-08-09 Thread Christian Kurz
On 01-08-09 Martin Domig wrote: On Thu, Aug 09, 2001 at 08:03:15PM +1000, Matt Hope wrote: [...] : When my friends (2 differnt ones, one of which is planning to switch : to mutt) get the mails, they get it in an attachment, have to save it : and decode it manually (apparently kmail is

Re: Mutt and inline gpg

2001-08-09 Thread Rob VanFleet
On Thu, Aug 09, 2001 at 05:26:50PM +0200, Christian Kurz wrote: option pgp_create_traditional. That option might help you very much, but instead I would suggest that the other MUA's get fixed. Um, wouldn't that be every other MUA asid from mutt and maybe one or two others? -Rob -- To

apt-get do not douwnload new packages announced in debian-security-announce

2001-08-09 Thread Alberto Cortés
I have a little problem with apt-get, i think i am not doing it the proper way. When there is a announce that certain package has a bug, (like gnupg v1.0.5) you can read in www.debian.org that there is a new package to download (1.0.6-0potato1). Thats OK, but i can't download it with my

Re: Mutt and inline gpg

2001-08-09 Thread Nathan E Norman
On Thu, Aug 09, 2001 at 03:51:14PM -0500, Rob VanFleet wrote: On Thu, Aug 09, 2001 at 05:26:50PM +0200, Christian Kurz wrote: option pgp_create_traditional. That option might help you very much, but instead I would suggest that the other MUA's get fixed. Um, wouldn't that be every other

Delivery Failure: Re: Mutt and inline gpg

2001-08-09 Thread iComMand Support
Your message, Re: Mutt and inline gpg, was not delivered to the following recipient: [EMAIL PROTECTED] Reason: System error: Please re-send your message later. Recipient: [EMAIL PROTECTED]

Delivery Failure: Re: Mutt and inline gpg

2001-08-09 Thread iComMand Support
Your message, Re: Mutt and inline gpg, was not delivered to the following recipient: [EMAIL PROTECTED] Reason: System error: Please re-send your message later. Recipient: [EMAIL PROTECTED]

Delivery Failure: Port 6000/X11 Won't Close!

2001-08-09 Thread iComMand Support
Your message, Port 6000/X11 Won't Close!, was not delivered to the following recipient: [EMAIL PROTECTED] Reason: System error: Please re-send your message later. Recipient: [EMAIL PROTECTED]

Re: Unidentified subject!

2001-08-09 Thread Francis 'Dexter' Gois
Hello, First, you should (keep cool and ... ;o) ) know which dns server you are running. Look in the processes (ps -ax) if there is something like bind or djbdns, or anything that could be a dns server. The lsof command can help (look at what listens to port 53), as the dpkg and apt-get

Mutt and inline gpg

2001-08-09 Thread Marc Leeman
This is about the 4th time in as many years that I changed my e-mail client and every time I feel I have gained. I'm now using mutt now and am still in the process of finetuning. However, I have the following problem, of which I didn't find a solution yet. I am using gpg and in communication with

Re: Mutt and inline gpg

2001-08-09 Thread Matt Hope
On Thu, 09 Aug 2001, Marc Leeman [EMAIL PROTECTED] wrote... : kmail sends the gpg messages inline, and upon arrival decodes them : immediately. In my config, mutt sends them as attachments. : When I get a kmail message, I have to save it to file and manually : decode it (not that difficult, but

Re: Mutt and inline gpg

2001-08-09 Thread Martin Domig
Hello list On Thu, Aug 09, 2001 at 08:03:15PM +1000, Matt Hope wrote: [...] : When my friends (2 differnt ones, one of which is planning to switch : to mutt) get the mails, they get it in an attachment, have to save it : and decode it manually (apparently kmail is expecting inline messages).

Re: Mutt and inline gpg

2001-08-09 Thread Brandon High
On Thu, Aug 09, 2001 at 03:19:42PM +0200, Martin Domig wrote: I am using the same procmail filter and can say that it works perfectly for incoming pgp/gpg mails. However, this does not solve the problem with other mail clients that want to have inline PGP messages, and those are many. Is

Re: Mutt and inline gpg

2001-08-09 Thread Paul C. Nendick
It sounds like the real fix for this is to change kmail's behavior If none of the involved parties is willing to, I volunteer to take it to the kmail mailing list at: subscribe: mailto:[EMAIL PROTECTED] archive: http://lists.kde.org/?l=kmailr=1w=2 I did notice that there is a bug

what's the error?

2001-08-09 Thread Viljo Marrandi
Hello, I'm not sure this is aan security issue, but i could be exploitable... From time to time one of my nic's just dies and in /var/log/messages i have stuff like this: Aug 9 16:08:59 server kernel: eth1: Oversized Ethernet frame c7f9f460 vs c7f9f460. Aug 9 16:08:59 server kernel: eth1:

AW: what's the error?

2001-08-09 Thread Michael Boehme
Viljo, actually I can´t help with the error you posted. But to complete the collection here´s an error that I see frequently on the external interfaces of our routers. Suspect short first fragment. eth0 PROTO=6 213.13.177.121:0 217.29.8.82:0 L=20 S=0x00 I=63073 F=0x6000 T=102 (#0) They do not

Re: what's the error?

2001-08-09 Thread Nathan E Norman
On Thu, Aug 09, 2001 at 06:05:38PM +0200, Viljo Marrandi wrote: Hello, I'm not sure this is aan security issue, but i could be exploitable... From time to time one of my nic's just dies and in /var/log/messages i have stuff like this: Aug 9 16:08:59 server kernel: eth1: Oversized

Re: Mutt and inline gpg

2001-08-09 Thread Sami Haahtinen
On Thu, Aug 09, 2001 at 11:55:49AM +0200, Marc Leeman wrote: kmail sends the gpg messages inline, and upon arrival decodes them immediately. In my config, mutt sends them as attachments. When I get a kmail message, I have to save it to file and manually decode it (not that difficult, but

Re: Mutt and inline gpg

2001-08-09 Thread Christian Kurz
On 01-08-09 Martin Domig wrote: On Thu, Aug 09, 2001 at 08:03:15PM +1000, Matt Hope wrote: [...] : When my friends (2 differnt ones, one of which is planning to switch : to mutt) get the mails, they get it in an attachment, have to save it : and decode it manually (apparently kmail is

Re: Mutt and inline gpg

2001-08-09 Thread Alan Shutko
Christian Kurz [EMAIL PROTECTED] writes: That option might help you very much, but instead I would suggest that the other MUA's get fixed. I'd like to see all mailers complying with RFC2822 first. -- Alan Shutko [EMAIL PROTECTED] - In a variety of flavors! If at first you don't succeed,

Re: Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-08-09 Thread Marko Kreen
On Wed, Aug 08, 2001 at 05:17:33PM -0700, Dale Southard wrote: Marko Kreen marko@l-t.ee writes: I think this is not good, it takes away flexibility. IMHO it would be better if only /etc/init.d/rc ( rcS) checks whether a service should be auto-started on boot. That way the responsibility

Re: Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-08-09 Thread Dale Southard
Marko Kreen marko@l-t.ee writes: If the ``do I run service X'' check is done in rcS it means that each init.d script is either on or off. This would eliminate the possibility of having more than one check in a script -- for example, it would be logical to configure the existing Debian

Re: Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-08-09 Thread Marko Kreen
On Thu, Aug 09, 2001 at 12:38:52PM -0700, Dale Southard wrote: Marko Kreen marko@l-t.ee writes: Well, we have basically one init script per package. Now I want state, that _nothing_ from this package gets started. Do I need examine the init script then one-by-one disable all vars?

Re: Mutt and inline gpg

2001-08-09 Thread Rob VanFleet
On Thu, Aug 09, 2001 at 05:26:50PM +0200, Christian Kurz wrote: option pgp_create_traditional. That option might help you very much, but instead I would suggest that the other MUA's get fixed. Um, wouldn't that be every other MUA asid from mutt and maybe one or two others? -Rob

Re: Daemon init scripts and apt-get [was: Re: red worm amusement]

2001-08-09 Thread Dale Southard
Marko Kreen marko@l-t.ee writes: On Thu, Aug 09, 2001 at 12:38:52PM -0700, Dale Southard wrote: Marko Kreen marko@l-t.ee writes: Well, we have basically one init script per package. Now I want state, that _nothing_ from this package gets started. Do I need examine the init script

apt-get do not douwnload new packages announced in debian-security-announce

2001-08-09 Thread Alberto Cortés
I have a little problem with apt-get, i think i am not doing it the proper way. When there is a announce that certain package has a bug, (like gnupg v1.0.5) you can read in www.debian.org that there is a new package to download (1.0.6-0potato1). Thats OK, but i can't download it with my

Re: apt-get do not douwnload new packages announced in debian-security-announce

2001-08-09 Thread Haris Sehic
Hi On Thu, Aug 09, 2001 at 11:51:30PM +0200, Alberto Cort?s wrote: deb http://http.us.debian.org/debian stable main contrib non-free deb http://non-us.debian.org/debian-non-US stable/non-US main contrib non-free What are the official sources if you want to have an up to date, secure

Re: apt-get do not douwnload new packages announced in debian-security-announce

2001-08-09 Thread Emmanuel Valliet
-. Alberto Cortés (2001-08-09) : | I have a little problem with apt-get, i think i am not doing it the | proper way. | |When there is a announce that certain package has a bug, (like | gnupg v1.0.5) you can read in www.debian.org that there is a new | package to download

Re: Mutt and inline gpg

2001-08-09 Thread Nathan E Norman
On Thu, Aug 09, 2001 at 03:51:14PM -0500, Rob VanFleet wrote: On Thu, Aug 09, 2001 at 05:26:50PM +0200, Christian Kurz wrote: option pgp_create_traditional. That option might help you very much, but instead I would suggest that the other MUA's get fixed. Um, wouldn't that be every other

Delivery Failure: Re: Mutt and inline gpg

2001-08-09 Thread iComMand Support
Your message, Re: Mutt and inline gpg, was not delivered to the following recipient: [EMAIL PROTECTED] Reason: System error: Please re-send your message later. Recipient: [EMAIL PROTECTED] ---BeginMessage--- On Thu, Aug 09, 2001 at 03:51:14PM -0500, Rob VanFleet wrote: On Thu, Aug 09, 2001 at

Re: Mutt and inline gpg

2001-08-09 Thread Henrique de Moraes Holschuh
Hi Martin! On Thu, 09 Aug 2001, Martin Domig wrote: Is there a way to make mutt send inline PGP messages instead of the MIME attachment form? Although there is a way to tell mutt not to use PGP/MIME, Don't Do It. Mutt will mistype the message as application/pgp and royally screw up the

Delivery Failure: Re: Mutt and inline gpg

2001-08-09 Thread iComMand Support
Your message, Re: Mutt and inline gpg, was not delivered to the following recipient: [EMAIL PROTECTED] Reason: System error: Please re-send your message later. Recipient: [EMAIL PROTECTED] ---BeginMessage--- Hi Martin! On Thu, 09 Aug 2001, Martin Domig wrote: Is there a way to make mutt send

Port 6000/X11 Won't Close!

2001-08-09 Thread vexation
I use debian 2.2 (woody/unstable) with kernal 2.4.7, i use login.app to login to X. I believe i have the --no-listen command set. However, no madder what i do port 6000 still remains open. I really want to close this port for security reasons! can someone please help me?! - Thank you! --

Delivery Failure: Port 6000/X11 Won't Close!

2001-08-09 Thread iComMand Support
Your message, Port 6000/X11 Won't Close!, was not delivered to the following recipient: [EMAIL PROTECTED] Reason: System error: Please re-send your message later. Recipient: [EMAIL PROTECTED] ---BeginMessage--- I use debian 2.2 (woody/unstable) with kernal 2.4.7, i use login.app to login to X.