Re: A more secure form of .htaccess?

2002-04-27 Thread martin f krafft
also sprach Dan Faerch <[EMAIL PROTECTED]> [2002.04.27.2120 +0200]: > > you know their algorithm against MAC table overflow? > No i dont.. I would be very interrested in reading about it, if you know of > a link.. Im sure that it would be possible to enforce some level of > security.. it's quite s

Re: A more secure form of .htaccess?

2002-04-27 Thread martin f krafft
also sprach Dan Faerch <[EMAIL PROTECTED]> [2002.04.27.2120 +0200]: > > you know their algorithm against MAC table overflow? > No i dont.. I would be very interrested in reading about it, if you know of > a link.. Im sure that it would be possible to enforce some level of > security.. it's quite

Re: A more secure form of .htaccess?

2002-04-27 Thread Dan Faerch
Gareth Bowker wrote: >If someone's already logged in, and they visit a webpage on the same domain >which asks for a username and password for the same realm as the one used to >log in, the browser will send the username/password pair without asking the >user for any confirmation. >At least I assu

Re: A more secure form of .htaccess?

2002-04-27 Thread Dan Faerch
Gareth Bowker wrote: >If someone's already logged in, and they visit a webpage on the same domain >which asks for a username and password for the same realm as the one used to >log in, the browser will send the username/password pair without asking the >user for any confirmation. >At least I ass

Re: IPtables and Connection Tracking

2002-04-27 Thread martin f krafft
also sprach vdongen <[EMAIL PROTECTED]> [2002.04.27.1812 +0200]: > > Does the connection tracking hold the connections even if the > > firewall > > was flushed? > > > > If it is so, is it a bug or a feature? > did you by chance forget to flush all tables and just flushed by doing > iptables -F ??

Re: IPtables and Connection Tracking

2002-04-27 Thread vdongen
> Does the connection tracking hold the connections even if the > firewall > was flushed? > > If it is so, is it a bug or a feature? did you by chance forget to flush all tables and just flushed by doing iptables -F ??? Gr, Ivo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: IPtables and Connection Tracking

2002-04-27 Thread martin f krafft
also sprach vdongen <[EMAIL PROTECTED]> [2002.04.27.1812 +0200]: > > Does the connection tracking hold the connections even if the > > firewall > > was flushed? > > > > If it is so, is it a bug or a feature? > did you by chance forget to flush all tables and just flushed by doing > iptables -F ?

Re: IPtables and Connection Tracking

2002-04-27 Thread vdongen
> Does the connection tracking hold the connections even if the > firewall > was flushed? > > If it is so, is it a bug or a feature? did you by chance forget to flush all tables and just flushed by doing iptables -F ??? Gr, Ivo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject o

Re: connection refuse by tcp_wrapper - error message

2002-04-27 Thread Alvin Oga
hi ya On Thu, 25 Apr 2002, Marcin Bednarz wrote: > > but when i try to connect from 192.168.1.10 and 11 my server is allways > > give a message : > > ssh_exchange_identification: Connection closed by remote host i just ran into that same silly exact message turns out in our case... that t

Re: connection refuse by tcp_wrapper - error message

2002-04-27 Thread Alvin Oga
hi ya On Thu, 25 Apr 2002, Marcin Bednarz wrote: > > but when i try to connect from 192.168.1.10 and 11 my server is allways > > give a message : > > ssh_exchange_identification: Connection closed by remote host i just ran into that same silly exact message turns out in our case... that

Re: A more secure form of .htaccess?

2002-04-27 Thread Schusselig Brane
Steve Mickeler wrote: > > Trust not in switches. > > They too can be easily manipulated unless you have locked them down at a > mac address and port level. > > 'apt-get install dsniff' ; 'man arpspoof' Of course, which is one of the things I had in mind when I said: > > topology. Switches tend

Re: A more secure form of .htaccess?

2002-04-27 Thread Gareth Bowker
On Sat, Apr 27, 2002 at 03:32:45AM +0200, martin f krafft wrote: > also sprach Dan Faerch <[EMAIL PROTECTED]> [2002.04.26.1955 +0200]: > > Second more, if your users are allowed to have pages on the same > > address as the login system, the browser can, without much effort, > > be tricked into givi

Re: A more secure form of .htaccess?

2002-04-27 Thread Schusselig Brane
Steve Mickeler wrote: > > Trust not in switches. > > They too can be easily manipulated unless you have locked them down at a > mac address and port level. > > 'apt-get install dsniff' ; 'man arpspoof' Of course, which is one of the things I had in mind when I said: > > topology. Switches ten

Re: A more secure form of .htaccess?

2002-04-27 Thread Gareth Bowker
On Sat, Apr 27, 2002 at 03:32:45AM +0200, martin f krafft wrote: > also sprach Dan Faerch <[EMAIL PROTECTED]> [2002.04.26.1955 +0200]: > > Second more, if your users are allowed to have pages on the same > > address as the login system, the browser can, without much effort, > > be tricked into giv