RE: Spam?!?

2001-12-17 Thread Howland, Curtis
And pleanty of open relay servers, too. obSec: You do have your SMTP transfer agent configured not to act as a relay, right? Curt- -Original Message- From: Petro [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 18, 2001 03:09 To: Yooseong Yang Cc: k l u r t; debian-security@lists.debian

RE: Spam?!?

2001-12-17 Thread Howland, Curtis
And pleanty of open relay servers, too. obSec: You do have your SMTP transfer agent configured not to act as a relay, right? Curt- -Original Message- From: Petro [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 18, 2001 03:09 To: Yooseong Yang Cc: k l u r t; [EMAIL PROTECTED] Subject:

RE: Problem with IPTables

2001-12-17 Thread Bender, Jeff
Ahh...hah. I looked a few times in the 'make menuconfig' and saw that I included everything in the kernel build. I didn't include Connection Tracking which I thought I only needed for NAT, but it looks like this gave me the option that I was missing. Thanks. Oh, yeah I only used the default ru

Re: Apt-get is insecure

2001-12-17 Thread J C Lawrence
On 17 Dec 2001 14:34:12 +1100 Simon Hill <[EMAIL PROTECTED]> wrote: > so assuming that dpkg (and/or apt?) can deal with embedded gpg > signiatures in .deb files, how do we get maintainers to start > using them? File bugs? -- J C Lawrence -(*)Satan, oscil

Re: Problem with IPTables

2001-12-17 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Jeff" == Bender, Jeff <[EMAIL PROTECTED]> writes: Jeff> I am having troubles with IPTables. My rules are having troubles Jeff> with handling "-m state --state ESTABLISHED" options. The error I Jeff> get is "iptables: No chain/target/match by

Re: Problem with IPTables

2001-12-17 Thread Daniel Rychlik
- Original Message - From: "Bender, Jeff" <[EMAIL PROTECTED]> To: Sent: Monday, December 17, 2001 12:08 PM Subject: Problem with IPTables > I am having troubles with IPTables. My rules are having troubles with > handling "-m state --state ESTABLISHED" options. The error I get is > "ip

Re: Problem with IPTables

2001-12-17 Thread Joe Ellis
i didn't see anything wrong with it, so i ran it: bash# ./test.firewall Start Rules Allow DNS servers incoming traffic...done i think your missing an option in your kernel when you compiled it last. check your kernel config. these are the commands i ran: iptables -F iptables -X iptables -Z

Re: Spam?!?

2001-12-17 Thread Petro
On Mon, Dec 17, 2001 at 11:48:13PM +0900, Yooseong Yang wrote: > >can you speak korean? if so give them a call or a nasty email for us. > I am be shameful of this kinda spam stuffs as a korean. > I send an email to hanmail mail administrator about this kinda > problem. If I got some mails from who

Problem with IPTables

2001-12-17 Thread Bender, Jeff
I am having troubles with IPTables. My rules are having troubles with handling "-m state --state ESTABLISHED" options. The error I get is "iptables: No chain/target/match by that name". Any ideas? Here is my script below. # http://www.cs.princeton.edu/~jns/security/iptables/index.html # Prepar

RE: Problem with IPTables

2001-12-17 Thread Bender, Jeff
Ahh...hah. I looked a few times in the 'make menuconfig' and saw that I included everything in the kernel build. I didn't include Connection Tracking which I thought I only needed for NAT, but it looks like this gave me the option that I was missing. Thanks. Oh, yeah I only used the default r

Re: Apt-get is insecure

2001-12-17 Thread J C Lawrence
On 17 Dec 2001 14:34:12 +1100 Simon Hill <[EMAIL PROTECTED]> wrote: > so assuming that dpkg (and/or apt?) can deal with embedded gpg > signiatures in .deb files, how do we get maintainers to start > using them? File bugs? -- J C Lawrence -(*)Satan, osci

Re: Problem with IPTables

2001-12-17 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Jeff" == Bender, Jeff <[EMAIL PROTECTED]> writes: Jeff> I am having troubles with IPTables. My rules are having troubles Jeff> with handling "-m state --state ESTABLISHED" options. The error I Jeff> get is "iptables: No chain/target/match by

Re: Problem with IPTables

2001-12-17 Thread Daniel Rychlik
- Original Message - From: "Bender, Jeff" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, December 17, 2001 12:08 PM Subject: Problem with IPTables > I am having troubles with IPTables. My rules are having troubles with > handling "-m state --state ESTABLISHED" options. The

Re: Problem with IPTables

2001-12-17 Thread Joe Ellis
i didn't see anything wrong with it, so i ran it: bash# ./test.firewall Start Rules Allow DNS servers incoming traffic...done i think your missing an option in your kernel when you compiled it last. check your kernel config. these are the commands i ran: iptables -F iptables -X iptables -Z

Re: Spam?!?

2001-12-17 Thread Petro
On Mon, Dec 17, 2001 at 11:48:13PM +0900, Yooseong Yang wrote: > >can you speak korean? if so give them a call or a nasty email for us. > I am be shameful of this kinda spam stuffs as a korean. > I send an email to hanmail mail administrator about this kinda > problem. If I got some mails from wh

Problem with IPTables

2001-12-17 Thread Bender, Jeff
I am having troubles with IPTables. My rules are having troubles with handling "-m state --state ESTABLISHED" options. The error I get is "iptables: No chain/target/match by that name". Any ideas? Here is my script below. # http://www.cs.princeton.edu/~jns/security/iptables/index.html # Prepa

Re: Apt-get is insecure

2001-12-17 Thread Wichert Akkerman
Previously Hendrik Naumann wrote: > All or just those that are not signed correctly? All, since none are signed currently. If we only use signatures from developers the debsig policy would also be huge since you would need to list 500+ keys in it and update it regularly. > Is there the possibilit

Re: Apt-get is insecure

2001-12-17 Thread Hendrik Naumann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi > > Could anyone point me to some documentation about how this fits > > within the 'usual' apt-get update apt-get install procedure. > > The idea is: > * packages are signed using debsig and get one (or more) embedded > signatures > * apt & frien

Re: Spam?!?

2001-12-17 Thread Yooseong Yang
>can you speak korean? if so give them a call or a nasty email for us. I am be shameful of this kinda spam stuffs as a korean. I send an email to hanmail mail administrator about this kinda problem. If I got some mails from whom is concerned, I'll get posted of it. Yooseong

postfix DoS problem

2001-12-17 Thread Patrick Hsieh
Hello list, Is postfix 0.0.2005.S(woody) also vulernable? -- Patrick Hsieh <[EMAIL PROTECTED]>

md5 check fails for emacs19

2001-12-17 Thread Hylton Guthrie
hi, on running debsums I find usr/bin/emacs19 and usr/bin/emacs-19.34 fail md5 check. So I then uninstall emacs19 package, ftp a fresh deb from debian site. After (re)install debsums reports the same problem - but the install involved a 'byte compile' (and dpkg -s emacs19 shows no md5 data anywa

Re: Apt-get is insecure

2001-12-17 Thread Wichert Akkerman
Previously Hendrik Naumann wrote: > All or just those that are not signed correctly? All, since none are signed currently. If we only use signatures from developers the debsig policy would also be huge since you would need to list 500+ keys in it and update it regularly. > Is there the possibili

Re: Apt-get is insecure

2001-12-17 Thread Hendrik Naumann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi > > Could anyone point me to some documentation about how this fits > > within the 'usual' apt-get update apt-get install procedure. > > The idea is: > * packages are signed using debsig and get one (or more) embedded > signatures > * apt & frie

Re: Spam?!?

2001-12-17 Thread Yooseong Yang
>can you speak korean? if so give them a call or a nasty email for us. I am be shameful of this kinda spam stuffs as a korean. I send an email to hanmail mail administrator about this kinda problem. If I got some mails from whom is concerned, I'll get posted of it. Yooseong -- To UNSUBSCRI

postfix DoS problem

2001-12-17 Thread Patrick Hsieh
Hello list, Is postfix 0.0.2005.S(woody) also vulernable? -- Patrick Hsieh <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: central administration techniques

2001-12-17 Thread Tollef Fog Heen
* nrvale0 | > maybe have a look at cfengine? | > or apt-cache search / freshmeat / google for other options | | I was down this road just a few months ago. cfengine is nice except | that the author doesn't believe that 'administrative information' is | something that should be protected and thus

md5 check fails for emacs19

2001-12-17 Thread Hylton Guthrie
hi, on running debsums I find usr/bin/emacs19 and usr/bin/emacs-19.34 fail md5 check. So I then uninstall emacs19 package, ftp a fresh deb from debian site. After (re)install debsums reports the same problem - but the install involved a 'byte compile' (and dpkg -s emacs19 shows no md5 data anyw

Re: Spam?!?

2001-12-17 Thread k l u r t
On Mon, 17 Dec 2001, Dietmar Braun wrote: > Hello list, > > For months I am now listening to various debian lists, and I am quite happy > about the help and the information I can gather from it. > > One annoying thing is the spam which comes regularly about once a week or > so from hanmail.net

Re: Apt-get is insecure

2001-12-17 Thread Henrique de Moraes Holschuh
On Mon, 17 Dec 2001, Simon Hill wrote: > so assuming that dpkg (and/or apt?) can > deal with embedded gpg signiatures in .deb > files, how do we get maintainers to start > using them? We deploy the required infrastructure to make good use of signatures in the archive, test it, send email explai

Re: central administration techniques

2001-12-17 Thread Tollef Fog Heen
* nrvale0 | > maybe have a look at cfengine? | > or apt-cache search / freshmeat / google for other options | | I was down this road just a few months ago. cfengine is nice except | that the author doesn't believe that 'administrative information' is | something that should be protected and thu

Re: Exim mail

2001-12-17 Thread Javier Fernández-Sanguino Peña
On Fri, Dec 14, 2001 at 06:22:03PM -0600, Daniel Rychlik wrote: > How do I stop this from happening. Apparently my bud telented to port 25 > and somehow sent mail from my root account. Any suggestions, white papers > or links? Id would like to block the telnet application all together, but I > d

Re: Spam?!?

2001-12-17 Thread k l u r t
On Mon, 17 Dec 2001, Dietmar Braun wrote: > Hello list, > > For months I am now listening to various debian lists, and I am quite happy > about the help and the information I can gather from it. > > One annoying thing is the spam which comes regularly about once a week or > so from hanmail.ne

Re: Apt-get is insecure

2001-12-17 Thread Henrique de Moraes Holschuh
On Mon, 17 Dec 2001, Simon Hill wrote: > so assuming that dpkg (and/or apt?) can > deal with embedded gpg signiatures in .deb > files, how do we get maintainers to start > using them? We deploy the required infrastructure to make good use of signatures in the archive, test it, send email expla

Spam - forgot the header:

2001-12-17 Thread Dietmar Braun
Example header: Return-Path: <[EMAIL PROTECTED]> Received: from m1000.netcologne.de (m1000.netcologne.de [194.8.194.104]) by mailstore1.netcologne.de (Mirapoint) with ESMTP id ADY56704; Sun, 16 Dec 2001 22:57:31 +0100 (CET) Received: from murphy.debian.org (murphy.debian.o

Spam?!?

2001-12-17 Thread Dietmar Braun
Hello list, For months I am now listening to various debian lists, and I am quite happy about the help and the information I can gather from it. One annoying thing is the spam which comes regularly about once a week or so from hanmail.net (see the headers below as example)... Isn't it possib

Re: Exim mail

2001-12-17 Thread Javier Fernández-Sanguino Peña
On Fri, Dec 14, 2001 at 06:22:03PM -0600, Daniel Rychlik wrote: > How do I stop this from happening. Apparently my bud telented to port 25 > and somehow sent mail from my root account. Any suggestions, white papers > or links? Id would like to block the telnet application all together, but I >

Spam - forgot the header:

2001-12-17 Thread Dietmar Braun
Example header: Return-Path: <[EMAIL PROTECTED]> Received: from m1000.netcologne.de (m1000.netcologne.de [194.8.194.104]) by mailstore1.netcologne.de (Mirapoint) with ESMTP id ADY56704; Sun, 16 Dec 2001 22:57:31 +0100 (CET) Received: from murphy.debian.org (murphy.debian.o

Spam?!?

2001-12-17 Thread Dietmar Braun
Hello list, For months I am now listening to various debian lists, and I am quite happy about the help and the information I can gather from it. One annoying thing is the spam which comes regularly about once a week or so from hanmail.net (see the headers below as example)... Isn't it possible