Re: More security for screensavers

2002-01-08 Thread Benoît Sibaud
Ted Cabeen wrote: Good call. The default should probably be set to off. A debconf questio= n of low priority would probably also be a good thing. I opened the #128169 bug report ( http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=128169 ) For security reasons, xscreensaver shouldn't be

Re: IP accounting per user

2002-01-08 Thread Alexander Reelsen
On Mon, Jan 07, 2002 at 03:42:56PM +0100, Ralf Dreibrodt wrote: yeah, that looks nice, but who'd run a 2.4.6 these days??? dammit, i don't really want to patch 2.2.20 or 2.4.17 myself i use the patch with a 2.4.16. some parts of the patch failed (after the lids patch), it took less than

Re: A 2.4.[57] kernel crypto problem

2002-01-08 Thread Pavel Minev Penev
On Sun, Jan 06, 2002 at 04:10:12AM -0700, Stefan Srdic wrote: On January 6, 2002 02:00 pm, Pavel Minev Penev wrote: Hello. I had a peculiar experience with a password (forgot it). It is the password for an AE S-encrypted partition on my HDD. I am using the loop device and the

Re: A 2.4.[57] kernel crypto problem

2002-01-08 Thread Pavel Minev Penev
On Mon, Jan 07, 2002 at 07:59:35AM -0500, Anthony DeRobertis wrote: On Sunday, January 6, 2002, at 04:00 , Pavel Minev Penev wrote: There are about 3304 proceses with sequential PIDs and names of [loop7 defunct], and are all zombies. Are you calling fork in your code? Are you calling

Re: A 2.4.[57] kernel crypto problem

2002-01-08 Thread Pavel Minev Penev
On Mon, Jan 07, 2002 at 03:09:07PM +, Alexander Clouter wrote: On Jan 06, Pavel Minev Penev wrote: 1. Generate billions of passwords. For each of them: 1. Setup a loop device. 2. Read the block after the 1024-th byte and check it for

MySQL-Firewall

2002-01-08 Thread Jonas
Hello! I have at Home a Server with some services like Apache, proftp, Mysql. I have write a firewall script with IPtables. (Kernel 2.4.17 | iptables v1.2.4) On the Server there are some php-scripts witch connect to the MySQL Database. What ports on the ppp0 have I to open, that somebody

Re: MySQL-Firewall

2002-01-08 Thread François Bayart
What ports on the ppp0 have I to open, that somebody can access with phpmyadmin over the Internet?? phpMyAdmin is HTTP application so just the Apache port by default the port 80 And what ports on the ppp0 have I to open, that the local php-scripts can connect to the database ??? the 3128

Re: MySQL-Firewall

2002-01-08 Thread Davy Gigan
Jonas writes: What ports on the ppp0 have I to open, that somebody can access with phpmyadmin over the Internet?? phpmyadmin is accessible via your web server, probably port 80. You don't have to open anything else. You must modify your phpmyadmin scripts to access the local mysql server

Re: MySQL-Firewall

2002-01-08 Thread J C Lawrence
On Tue, 8 Jan 2002 19:28:52 +0100 jonasge Jonas wrote: What ports on the ppp0 have I to open, that somebody can access with phpmyadmin over the Internet?? One would hope that you are not allowing access to PhpMyAdmin in clear text via HTTP. At least SSL wrap it (port 143). And what ports

Re: MySQL-Firewall

2002-01-08 Thread Steve Mickeler
On Tue, 8 Jan 2002, J C Lawrence wrote: On Tue, 8 Jan 2002 19:28:52 +0100 jonasge Jonas wrote: What ports on the ppp0 have I to open, that somebody can access with phpmyadmin over the Internet?? One would hope that you are not allowing access to PhpMyAdmin in clear text via HTTP.

Re: MySQL-Firewall

2002-01-08 Thread Michael Feger
On Tue, Jan 08, 2002 at 07:40:12PM +0100, François Bayart wrote: And what ports on the ppp0 have I to open, that the local php-scripts can connect to the database ??? the 3128 with de lo ( local interface ) you can start mysql ./safe_mysqld --bind-address=127.0.0.1 and now you can just

Re: More security for screensavers

2002-01-08 Thread Thomas Bushnell, BSG
Benoît Sibaud [EMAIL PROTECTED] writes: For now, the xscreensaver maintainer disagrees. I disagree. It is NOT a security issue, it has been discussed the last 3 times it was brought up, and it's easy enough to change if it bothers you. Neither your bug or the discussion you pointed to adds

IPSec questions...

2002-01-08 Thread Stefan Srdic
I was curious about IPSec and had a few questions about it. Do you need more then one host on the network in order to use it? Can it be implemented without patching the kernel? Does Debian support it? Thanks, Stef -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: More security for screensavers

2002-01-08 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas == Thomas Bushnell, BSG [EMAIL PROTECTED] writes: [...] Thomas perhaps a *wishlist* item could be added to make this easy to Thomas toggle from the gnome (or other) capplets. It's there in Sid already (maybe Woody too -- haven't checked).

Re: IPSec questions...

2002-01-08 Thread J C Lawrence
On Tue, 8 Jan 2002 10:37:10 -0700 Stefan Srdic [EMAIL PROTECTED] wrote: I was curious about IPSec and had a few questions about it. Do you need more then one host on the network in order to use it? To do anything useful, yes. Can it be implemented without patching the kernel? In the case

Re: IPSec questions...

2002-01-08 Thread Jussi Tawaststjerna
Howdy, If you don't want to play with FreeS/WAN or CIPE or such, you could just rig an ssh connection and run PPP through it. This way you don't have to worry about patching kernels etc. (or at most, just compile PPP support in, as modules if you care about your uptime ;)

IPTABLES

2002-01-08 Thread Craigsc
Hi Fellows I am having a problem with getting iptables working with kernel 2.4.12. Getting the following error message: Can't locate module ip_tables iptables v1.2.4: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps I'm missing a module ? Any help

RE: IPTABLES

2002-01-08 Thread Howland, Curtis
Please flame me if I have this backwards, but I believe ip_tables only works under 2.2.x and earlier kernels, and the 2.4.x kernel introduced ip_chains and is incompatible with ip_tables. You have to use the right one, even thought the package/module for both shows up (at least in Woody) and

RE: IPTABLES

2002-01-08 Thread Jussi Tawaststjerna
Just the other way around, 2.2.x == ipchains, 2.4.x == iptables. Craig, just look at your kernel, and make sure every netfilter/iptables module is compiled/listed, and then look at your /lib/modules/2.4.12/ and make sure everything modprobes or insmods (if they haven't already) .. On Wed, 9 Jan

RE: IPTABLES

2002-01-08 Thread Howland, Curtis
Oh bloody hell, I thought it might be. Trouble is, every time I look for it I can't find it one way or the other. This time I'm going to write it down. Curt- -Original Message- From: Jussi Tawaststjerna [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 09, 2002 16:16 To:

Re: More security for screensavers

2002-01-08 Thread Benoît Sibaud
Ted Cabeen wrote: Good call. The default should probably be set to off. A debconf questio= n of low priority would probably also be a good thing. I opened the #128169 bug report ( http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=128169 ) For security reasons, xscreensaver shouldn't be allowed

Re: IP accounting per user

2002-01-08 Thread Alexander Reelsen
On Mon, Jan 07, 2002 at 03:42:56PM +0100, Ralf Dreibrodt wrote: yeah, that looks nice, but who'd run a 2.4.6 these days??? dammit, i don't really want to patch 2.2.20 or 2.4.17 myself i use the patch with a 2.4.16. some parts of the patch failed (after the lids patch), it took less than two

Re: A 2.4.[57] kernel crypto problem

2002-01-08 Thread Pavel Minev Penev
On Sun, Jan 06, 2002 at 04:10:12AM -0700, Stefan Srdic wrote: On January 6, 2002 02:00 pm, Pavel Minev Penev wrote: Hello. I had a peculiar experience with a password (forgot it). It is the password for an AE S-encrypted partition on my HDD. I am using the loop device and the

Re: A 2.4.[57] kernel crypto problem

2002-01-08 Thread Pavel Minev Penev
On Mon, Jan 07, 2002 at 07:59:35AM -0500, Anthony DeRobertis wrote: On Sunday, January 6, 2002, at 04:00 , Pavel Minev Penev wrote: There are about 3304 proceses with sequential PIDs and names of [loop7 defunct], and are all zombies. Are you calling fork in your code? Are you calling

Re: A 2.4.[57] kernel crypto problem

2002-01-08 Thread Pavel Minev Penev
On Mon, Jan 07, 2002 at 03:09:07PM +, Alexander Clouter wrote: On Jan 06, Pavel Minev Penev wrote: 1. Generate billions of passwords. For each of them: 1. Setup a loop device. 2. Read the block after the 1024-th byte and check it for

MySQL-Firewall

2002-01-08 Thread Jonas
Hello! I have at Home a Server with some services like Apache, proftp, Mysql. I have write a firewall script with IPtables. (Kernel 2.4.17 | iptables v1.2.4) On the Server there are some php-scripts witch connect to the MySQL Database. What ports on the ppp0 have I to open, that somebody

Re: MySQL-Firewall

2002-01-08 Thread François Bayart
What ports on the ppp0 have I to open, that somebody can access with phpmyadmin over the Internet?? phpMyAdmin is HTTP application so just the Apache port by default the port 80 And what ports on the ppp0 have I to open, that the local php-scripts can connect to the database ??? the 3128

Re: MySQL-Firewall

2002-01-08 Thread Davy Gigan
Jonas writes: What ports on the ppp0 have I to open, that somebody can access with phpmyadmin over the Internet?? phpmyadmin is accessible via your web server, probably port 80. You don't have to open anything else. You must modify your phpmyadmin scripts to access the local mysql server

Re: MySQL-Firewall

2002-01-08 Thread J C Lawrence
On Tue, 8 Jan 2002 19:28:52 +0100 jonasge Jonas wrote: What ports on the ppp0 have I to open, that somebody can access with phpmyadmin over the Internet?? One would hope that you are not allowing access to PhpMyAdmin in clear text via HTTP. At least SSL wrap it (port 143). And what ports

Re: MySQL-Firewall

2002-01-08 Thread Steve Mickeler
On Tue, 8 Jan 2002, J C Lawrence wrote: On Tue, 8 Jan 2002 19:28:52 +0100 jonasge Jonas wrote: What ports on the ppp0 have I to open, that somebody can access with phpmyadmin over the Internet?? One would hope that you are not allowing access to PhpMyAdmin in clear text via HTTP.

Re: More security for screensavers

2002-01-08 Thread Thomas Bushnell, BSG
Benoît Sibaud [EMAIL PROTECTED] writes: For now, the xscreensaver maintainer disagrees. I disagree. It is NOT a security issue, it has been discussed the last 3 times it was brought up, and it's easy enough to change if it bothers you. Neither your bug or the discussion you pointed to adds

IPSec questions...

2002-01-08 Thread Stefan Srdic
I was curious about IPSec and had a few questions about it. Do you need more then one host on the network in order to use it? Can it be implemented without patching the kernel? Does Debian support it? Thanks, Stef

Re: More security for screensavers

2002-01-08 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas == Thomas Bushnell, BSG [EMAIL PROTECTED] writes: [...] Thomas perhaps a *wishlist* item could be added to make this easy to Thomas toggle from the gnome (or other) capplets. It's there in Sid already (maybe Woody too -- haven't checked).

Re: IPSec questions...

2002-01-08 Thread J C Lawrence
On Tue, 8 Jan 2002 10:37:10 -0700 Stefan Srdic [EMAIL PROTECTED] wrote: I was curious about IPSec and had a few questions about it. Do you need more then one host on the network in order to use it? To do anything useful, yes. Can it be implemented without patching the kernel? In the case