Re: A 2.4.[57] kernel crypto problem

2002-01-07 Thread Anthony DeRobertis
On Sunday, January 6, 2002, at 04:00 , Pavel Minev Penev wrote: There are about 3304 proceses with sequential PIDs and names of [loop7 defunct], and are all zombies. Are you calling fork in your code? Are you calling waitpid or friends? Who's children are those? (try ps fxa) -- To

Re: mounting /tmp noexec

2002-01-07 Thread David Wright
Quoting Alexey Vyskubov ([EMAIL PROTECTED]): That's not my experience. I can only assume your /tmp filesystem, like mine, is not vfat-like. Whereas this floppy is: You probably have some additional settings somewhere (where?). [...] Please show output for 'mount' command after mounting

Re: Secure Finger Daemon

2002-01-07 Thread Karl E. Jorgensen
On Sun, Jan 06, 2002 at 11:45:28PM +0100, eim wrote: my Finger Daemon conclusion... First, Thanks for all the answers to my question. Well, so it really seems it's better to avoid using any finger daemon, security has always priority. Anyway I thought the finger daemon would be a nice

RE: Secure Finger Daemon

2002-01-07 Thread Oliver Andrich
Hi! Well, running it chrooted will prevent it from accessing the .plan files and all the other information you want to provide via finger service. At least if you provide a correct chroot environment. Anything providing access to files outside the chroot environment would be a security issue

Re: Re: Funky Arp Stuff

2002-01-07 Thread Phillip Hofmeister
This is a cable network. The systems are configured correctly (10.67 is what the ISP uses for the addresses of the cable modems themselves (the bridges)) I found out, from calling my ISP, that several users were having SubSeven issues (dummy mode duwhy do we need a firewall onour

Re: strange auth log

2002-01-07 Thread Phillip Hofmeister
These messages would seem to suggest someone was pounding on your terminal keyboard trying to log in. The blank bad user names I would assume means no user name was entered. The p[d[d[c[c`...,,mmnnbbb and ^IZCXCGH^[[19~ would lead me to believe there was a furry animal running around your

RE: strange auth log

2002-01-07 Thread Rpsi Tibor
This box is hosted in a hosting center, I thing there aren't any cats or other animals. It is a possibility that somebody droped his coat or something else to the keyboard, but a more important question is, why crashes the system so that it needed a hw reset to restart? I don't find any

Re: IP accounting per user

2002-01-07 Thread martin f krafft
(i have started a thread on this on debian-isp btw.) also sprach Matthias Juchem [EMAIL PROTECTED] [2002.01.07.0244 +0100]: There is one problem with this: the module that matches user IDs can only be used in the OUTPUT chain (as said in the netfilter how-to). oh man, this sucks! The big

Re: IP accounting per user

2002-01-07 Thread martin f krafft
also sprach Matthias Juchem [EMAIL PROTECTED] [2002.01.07.0244 +0100]: The big problem are the ssh shell accounts. The user can start almost any program that listens on a socket. You wouldn't have log files from this program and you can only account the outgoing traffic with iptables. well

RE: strange auth log

2002-01-07 Thread VERBEEK, FRANCOIS
I rather think of a problem with a PS/2 and VGA switch-box failing or rebooting. Do you run GPM on your machine? Maybe it can have prblems when the PS/2 mouse is disconnected or when the switch reboots. I've seen that before (rather with Win9X, I daresay) -Original Message-

Re: IP accounting per user

2002-01-07 Thread Ralf Dreibrodt
Hi, There is a tool set, including a Linux kernel patch: UserIPacct (http://ramses.smeyers.be/homepage/useripacct/). But I do not know how stable it is. Besides, the last patch is for 2.4.6 and I need a more up-to-date 2.4 kernel. yeah, that looks nice, but who'd run a 2.4.6 these

Re: A 2.4.[57] kernel crypto problem

2002-01-07 Thread Alexander Clouter
On Jan 06, Pavel Minev Penev wrote: 1. Generate billions of passwords. For each of them: 1. Setup a loop device. 2. Read the block after the 1024-th byte and check it for Ext2/Ext3's magic ID. If the ID matches:

problems with ssh

2002-01-07 Thread Hernan Del Boca
i have problems with the ssh server.. im trying to connect to a server via ssh but i dont want the server to ask for the password. how can i fix it? thanks -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: problems with ssh

2002-01-07 Thread Tomasz Buchwald
Dnia Mon, Jan 07, 2002 at 01:56:08PM -0500, Phillip Hofmeister napisal(a): :Just an added note, I would include a password (passphrase!) on your RSA key, this :gives you added security against the key falLing into the wrong hands. : : Helo, You have to create new RSA key with 'ssh-keygen'

Re: problems with ssh

2002-01-07 Thread Joseph Pingenot
From Hernan Del Boca on Monday, 07 January, 2002: i have problems with the ssh server.. im trying to connect to a server via ssh but i dont want the server to ask for the password. It should also be noted that, if using RSA keys, you will be prompted for a password if the password for the RSA

Re: problems with ssh

2002-01-07 Thread debian
En réponse à Hernan Del Boca [EMAIL PROTECTED]: i have problems with the ssh server.. im trying to connect to a server via ssh but i dont want the server to ask for the password. how can i fix it? in /etc/ssh/sshd_config passwordauthentification is allowed by default just replace yes to

List guidelines(was: Re: problems with ssh)

2002-01-07 Thread David B Harris
Just a quick question :) I'm pretty new to the list. Is this sort of question generally the type that's discussed on this list? Thanks for your time :) -- .--=-=-=-=--=---=-=-=. /David Barclay HarrisAut agere, aut mori. \ \

Re: List guidelines(was: Re: problems with ssh)

2002-01-07 Thread Noah L. Meyerhans
On Mon, Jan 07, 2002 at 05:38:07PM -0500, David B Harris wrote: I'm pretty new to the list. Is this sort of question generally the type that's discussed on this list? Well, we usually hope that the users do their homework (i.e. RTFM) before asking questions with such well documented

Re: List guidelines(was: Re: problems with ssh)

2002-01-07 Thread Matthias Juchem
Am Montag, 7. Januar 2002 23:38 schrieb David B Harris: I'm pretty new to the list. Is this sort of question generally the type that's discussed on this list? You can have a look at http://www.debian.org/. There is a link to the mailing lists archive where you can find the discussed topics.

Re: List guidelines(was: Re: problems with ssh)

2002-01-07 Thread David B Harris
On Mon, 7 Jan 2002 17:38:07 -0500 David B Harris [EMAIL PROTECTED] wrote: I'm pretty new to the list. Is this sort of question generally the type that's discussed on this list? Thanks for all replies :) (BTW: keep in mind I subscribe to this list ... there's no need to CC: me ;) --

Re: IP accounting per user

2002-01-07 Thread craig
You may find the Debian package ipac-ng very useful if you don't want to write your own scripts to handle all the ip accounting. I don't think it'll do per-user on a single host (what can?!?) but certainly per-ip. -- Craig Ringer IT Manager, POST Newspapers http://www.postnewspapers.com.au/

strange auth log

2002-01-07 Thread Répási Tibor
Hi there, I've some strange lines in my auth.log : Jan 5 19:45:57 panda PAM_unix[500]: bad username [ ] Jan 5 19:46:00 panda login[500]: FAILED LOGIN (1) on `tty1' FOR `UNKNOWN', User not known to the underlying authentication module Jan 5 19:46:05 panda PAM_unix[500]: bad username [ ]

Re: strange auth log

2002-01-07 Thread Luke Q Campagnola
On Mon, 7 Jan 2002 08:27:53 +0100 R [EMAIL PROTECTED] wrote: Hi there, I've some strange lines in my auth.log : Jan 5 19:45:57 panda PAM_unix[500]: bad username [ ] Jan 5 19:46:00 panda login[500]: FAILED LOGIN (1) on `tty1' FOR `UNKNOWN', User not known to the underlying

Re: Funky Arp Stuff

2002-01-07 Thread Michael Wood
On Sun, Jan 06, 2002 at 01:52:45PM -0500, Phillip Hofmeister wrote: My computer is rambling on over eth0 (External interface) about a bunch of ARP request. Any Idea what could cause it? [snip] 20:50:05.245819 arp who-has 10.67.178.85 tell 10.67.178.1 20:50:05.367348 arp who-has 66.188.34.36

Re: mounting /tmp noexec

2002-01-07 Thread David Wright
Quoting Alexey Vyskubov ([EMAIL PROTECTED]): That's not my experience. I can only assume your /tmp filesystem, like mine, is not vfat-like. Whereas this floppy is: You probably have some additional settings somewhere (where?). [...] Please show output for 'mount' command after mounting

Re: Secure Finger Daemon

2002-01-07 Thread Karl E. Jorgensen
On Sun, Jan 06, 2002 at 11:45:28PM +0100, eim wrote: my Finger Daemon conclusion... First, Thanks for all the answers to my question. Well, so it really seems it's better to avoid using any finger daemon, security has always priority. Anyway I thought the finger daemon would be a nice

RE: Secure Finger Daemon

2002-01-07 Thread Oliver Andrich
Hi! Well, running it chrooted will prevent it from accessing the .plan files and all the other information you want to provide via finger service. At least if you provide a correct chroot environment. Anything providing access to files outside the chroot environment would be a security issue

Re: Re: Funky Arp Stuff

2002-01-07 Thread Phillip Hofmeister
This is a cable network. The systems are configured correctly (10.67 is what the ISP uses for the addresses of the cable modems themselves (the bridges)) I found out, from calling my ISP, that several users were having SubSeven issues (dummy mode duwhy do we need a firewall onour

Re: strange auth log

2002-01-07 Thread Phillip Hofmeister
These messages would seem to suggest someone was pounding on your terminal keyboard trying to log in. The blank bad user names I would assume means no user name was entered. The p[d[d[c[c`...,,mmnnbbb and ^IZCXCGH^[[19~ would lead me to believe there was a furry animal running around your

RE: strange auth log

2002-01-07 Thread Répási Tibor
This box is hosted in a hosting center, I thing there aren't any cats or other animals. It is a possibility that somebody droped his coat or something else to the keyboard, but a more important question is, why crashes the system so that it needed a hw reset to restart? I don't find any other

RE: strange auth log

2002-01-07 Thread VERBEEK, FRANCOIS
I rather think of a problem with a PS/2 and VGA switch-box failing or rebooting. Do you run GPM on your machine? Maybe it can have prblems when the PS/2 mouse is disconnected or when the switch reboots. I've seen that before (rather with Win9X, I daresay) -Original Message-

Re: IP accounting per user

2002-01-07 Thread martin f krafft
(i have started a thread on this on debian-isp btw.) also sprach Matthias Juchem [EMAIL PROTECTED] [2002.01.07.0244 +0100]: There is one problem with this: the module that matches user IDs can only be used in the OUTPUT chain (as said in the netfilter how-to). oh man, this sucks! The big

Re: IP accounting per user

2002-01-07 Thread martin f krafft
also sprach Matthias Juchem [EMAIL PROTECTED] [2002.01.07.0244 +0100]: The big problem are the ssh shell accounts. The user can start almost any program that listens on a socket. You wouldn't have log files from this program and you can only account the outgoing traffic with iptables. well no,

Re: IP accounting per user

2002-01-07 Thread Ralf Dreibrodt
Hi, There is a tool set, including a Linux kernel patch: UserIPacct (http://ramses.smeyers.be/homepage/useripacct/). But I do not know how stable it is. Besides, the last patch is for 2.4.6 and I need a more up-to-date 2.4 kernel. yeah, that looks nice, but who'd run a 2.4.6 these

Re: A 2.4.[57] kernel crypto problem

2002-01-07 Thread Alexander Clouter
On Jan 06, Pavel Minev Penev wrote: 1. Generate billions of passwords. For each of them: 1. Setup a loop device. 2. Read the block after the 1024-th byte and check it for Ext2/Ext3's magic ID. If the ID matches:

SSH configuration problem

2002-01-07 Thread Luc MAIGNAN
Hi, my SSH connections don't go to the 'auth.log' file, but the sshd_config seems to be good. What can happen ? Best regards

problems with ssh

2002-01-07 Thread Hernan Del Boca
i have problems with the ssh server.. im trying to connect to a server via ssh but i dont want the server to ask for the password. how can i fix it? thanks

Re: problems with ssh

2002-01-07 Thread Kenneth Pronovici
i have problems with the ssh server.. im trying to connect to a server via ssh but i dont want the server to ask for the password. how can i fix it? From 'man ssh' ssh implements the RSA authentication protocol automatically. The user creates his/her RSA key pair by running

Re: problems with ssh

2002-01-07 Thread Phillip Hofmeister
Just an added note, I would include a password (passphrase!) on your RSA key, this gives you added security against the key falLing into the wrong hands. Phil -Original Message- From: Kenneth Pronovici [EMAIL PROTECTED] To: Hernan Del Boca [EMAIL PROTECTED] Date: Mon, 7 Jan 2002

Re: problems with ssh

2002-01-07 Thread Justin R. Miller
Thus spake Kenneth Pronovici ([EMAIL PROTECTED]): From 'man ssh' snip Related: http://www-106.ibm.com/developerworks/library/l-keyc.html http://www-106.ibm.com/developerworks/linux/library/l-keyc2/?openl=252,t=grl,p=ossh2 -- Justin R. Miller [EMAIL PROTECTED] View my

Re: problems with ssh

2002-01-07 Thread Tomasz Buchwald
Dnia Mon, Jan 07, 2002 at 01:56:08PM -0500, Phillip Hofmeister napisal(a): :Just an added note, I would include a password (passphrase!) on your RSA key, this gives you added security against the key falLing into the wrong hands. : : Helo, You have to create new RSA key with 'ssh-keygen' on

Re: problems with ssh

2002-01-07 Thread Joseph Pingenot
From Hernan Del Boca on Monday, 07 January, 2002: i have problems with the ssh server.. im trying to connect to a server via ssh but i dont want the server to ask for the password. It should also be noted that, if using RSA keys, you will be prompted for a password if the password for the RSA

Re: problems with ssh

2002-01-07 Thread debian
En réponse à Hernan Del Boca [EMAIL PROTECTED]: i have problems with the ssh server.. im trying to connect to a server via ssh but i dont want the server to ask for the password. how can i fix it? in /etc/ssh/sshd_config passwordauthentification is allowed by default just replace yes to no

Re: problems with ssh

2002-01-07 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tomasz == Tomasz Buchwald [EMAIL PROTECTED] writes: Tomasz You have to create new RSA key with 'ssh-keygen' on your box and Tomasz secure it with the pass ofx. Then when you saved your new RSA Tomasz key you have to place it on the remote box in

List guidelines(was: Re: problems with ssh)

2002-01-07 Thread David B Harris
Just a quick question :) I'm pretty new to the list. Is this sort of question generally the type that's discussed on this list? Thanks for your time :) -- .--=-=-=-=--=---=-=-=. /David Barclay HarrisAut agere, aut mori. \ \

Re: List guidelines(was: Re: problems with ssh)

2002-01-07 Thread Noah L. Meyerhans
On Mon, Jan 07, 2002 at 05:38:07PM -0500, David B Harris wrote: I'm pretty new to the list. Is this sort of question generally the type that's discussed on this list? Well, we usually hope that the users do their homework (i.e. RTFM) before asking questions with such well documented

Re: List guidelines(was: Re: problems with ssh)

2002-01-07 Thread Matthias Juchem
Am Montag, 7. Januar 2002 23:38 schrieb David B Harris: I'm pretty new to the list. Is this sort of question generally the type that's discussed on this list? You can have a look at http://www.debian.org/. There is a link to the mailing lists archive where you can find the discussed topics.

Re: List guidelines(was: Re: problems with ssh)

2002-01-07 Thread David B Harris
On Mon, 7 Jan 2002 17:38:07 -0500 David B Harris [EMAIL PROTECTED] wrote: I'm pretty new to the list. Is this sort of question generally the type that's discussed on this list? Thanks for all replies :) (BTW: keep in mind I subscribe to this list ... there's no need to CC: me ;) --