can't get .shosts authentication to run

2002-05-03 Thread Juergen Fiedler
Hello, I am trying to connect to a machine on our LAN with the .shosts method, but it seems that my ssh client is not even willing to try that. My $HOME/.ssh/config looks like this: --- Host myserver HostName myserver.mydomain.net Protocol 2 RhostsRSAAuthentication yes RhostsAuthentic

Re: Help

2002-05-03 Thread Carel Fellinger
On Fri, May 03, 2002 at 06:14:15PM -0400, Brian Furry wrote: > > Hello: > > I am in the process of getting a debian server in the high school that I > teach in. The network admin is concerned about the security of the > exsisting Novell Server, border manager, etc. Our ISP is very picky > about

Re: Help

2002-05-03 Thread Stephen Gran
This one time, at band camp, Brian Furry said: > (Speaking as the Net Admin) > I have described the Linux project, its uses, and its physical placement > within our network, to four knowledgeable people, and asked for their > thoughts and recommendations. > > A. Partner in a consulting company bas

Re: Help

2002-05-03 Thread Thomas Zimmerman
On 03-May 06:14, Brian Furry wrote: > > Hello: > > I am in the process of getting a debian server in the high school that I > teach in. The network admin is concerned about the security of the > exsisting Novell Server, border manager, etc. Our ISP is very picky > about not hogging more bandwid

Re: APT-GET Problems

2002-05-03 Thread Matt Zimmerman
On Fri, May 03, 2002 at 08:02:28PM -0300, Peter Cordes wrote: > On Fri, May 03, 2002 at 12:33:28PM -0400, Matt Zimmerman wrote: > > Or use squid to accomplish the same thing. > > If you use squid, you should tweak the config file: > Increase the maximum_object_size to handle big .debs: > maximum

can't get .shosts authentication to run

2002-05-03 Thread Juergen Fiedler
Hello, I am trying to connect to a machine on our LAN with the .shosts method, but it seems that my ssh client is not even willing to try that. My $HOME/.ssh/config looks like this: --- Host myserver HostName myserver.mydomain.net Protocol 2 RhostsRSAAuthentication yes RhostsAuthenti

Re: APT-GET Problems

2002-05-03 Thread Peter Cordes
On Fri, May 03, 2002 at 12:33:28PM -0400, Matt Zimmerman wrote: > Or use squid to accomplish the same thing. If you use squid, you should tweak the config file: Increase the maximum_object_size to handle big .debs: maximum_object_size 10 KB I also use LFUDA so squid doesn't mind caching larg

Re: Help

2002-05-03 Thread Steve Meyer
Tell him he you could easily setup iptables to restrict outgoing connection ie: you can telnet it but not telnet out, or send packets in but not out. I have worked on many servers that have this feature used ie: compaqs testdrive program. I also use this feature in one of my free shell servers

Re: Help

2002-05-03 Thread Carel Fellinger
On Fri, May 03, 2002 at 06:14:15PM -0400, Brian Furry wrote: > > Hello: > > I am in the process of getting a debian server in the high school that I > teach in. The network admin is concerned about the security of the > exsisting Novell Server, border manager, etc. Our ISP is very picky > abou

Help

2002-05-03 Thread Brian Furry
Hello: I am in the process of getting a debian server in the high school that I teach in. The network admin is concerned about the security of the exsisting Novell Server, border manager, etc. Our ISP is very picky about not hogging more bandwidth than we are suppossed to use. I have been care

Re: snort not recognizing dns server correctly

2002-05-03 Thread Robert van der Meulen
Hi Jeff, Quoting Jeff ([EMAIL PROTECTED]): > The 192... is a local private network and the next 2 addresses > are dns servers. Snort is constantly logging activity to the 1st > dns server as a portscan, and as I understand it, this config > entry is supposed to eliminate that. Is this incorrect?

Re: Help

2002-05-03 Thread Stephen Gran
This one time, at band camp, Brian Furry said: > (Speaking as the Net Admin) > I have described the Linux project, its uses, and its physical placement > within our network, to four knowledgeable people, and asked for their > thoughts and recommendations. > > A. Partner in a consulting company ba

Re: Help

2002-05-03 Thread Thomas Zimmerman
On 03-May 06:14, Brian Furry wrote: > > Hello: > > I am in the process of getting a debian server in the high school that I > teach in. The network admin is concerned about the security of the > exsisting Novell Server, border manager, etc. Our ISP is very picky > about not hogging more bandwi

Re: APT-GET Problems

2002-05-03 Thread Matt Zimmerman
On Fri, May 03, 2002 at 08:02:28PM -0300, Peter Cordes wrote: > On Fri, May 03, 2002 at 12:33:28PM -0400, Matt Zimmerman wrote: > > Or use squid to accomplish the same thing. > > If you use squid, you should tweak the config file: > Increase the maximum_object_size to handle big .debs: > maximu

Re: APT-GET Problems

2002-05-03 Thread Peter Cordes
On Fri, May 03, 2002 at 12:33:28PM -0400, Matt Zimmerman wrote: > Or use squid to accomplish the same thing. If you use squid, you should tweak the config file: Increase the maximum_object_size to handle big .debs: maximum_object_size 10 KB I also use LFUDA so squid doesn't mind caching lar

Re: Help

2002-05-03 Thread Steve Meyer
Tell him he you could easily setup iptables to restrict outgoing connection ie: you can telnet it but not telnet out, or send packets in but not out. I have worked on many servers that have this feature used ie: compaqs testdrive program. I also use this feature in one of my free shell server

Help

2002-05-03 Thread Brian Furry
Hello: I am in the process of getting a debian server in the high school that I teach in. The network admin is concerned about the security of the exsisting Novell Server, border manager, etc. Our ISP is very picky about not hogging more bandwidth than we are suppossed to use. I have been car

Re: snort not recognizing dns server correctly

2002-05-03 Thread Robert van der Meulen
Hi Jeff, Quoting Jeff ([EMAIL PROTECTED]): > The 192... is a local private network and the next 2 addresses > are dns servers. Snort is constantly logging activity to the 1st > dns server as a portscan, and as I understand it, this config > entry is supposed to eliminate that. Is this incorrect

Re: snort not recognizing dns server correctly

2002-05-03 Thread dafr
Jeff, I had this problem initially as well when I reconfigured snort, until I restarted the service. Quite obvious in retrospect, but when I missed it initially, I could see others doing the same. There is also a section towards the bottom of the snort.conf file that you _also_ have to unhash, fo

snort not recognizing dns server correctly

2002-05-03 Thread Jeff
I have the following entry in /etc/snort/snort.conf var DNS_SERVERS [192.168.0.0/24,216.148.227.68/32,204.127.202.4/32] The 192... is a local private network and the next 2 addresses are dns servers. Snort is constantly logging activity to the 1st dns server as a portscan, and as I understand it

Re: APT-GET Problems

2002-05-03 Thread Matt Zimmerman
On Thu, May 02, 2002 at 09:32:33PM -0700, tony mancill wrote: > this isn't exactly a debian-security answer (but then again, I'm not sure > that you've posed a debian-security question), but my recommendation is to > use the apt-proxy package on "server" machine (you can even use > apt-proxy-impor

Re: snort not recognizing dns server correctly

2002-05-03 Thread dafr
Jeff, I had this problem initially as well when I reconfigured snort, until I restarted the service. Quite obvious in retrospect, but when I missed it initially, I could see others doing the same. There is also a section towards the bottom of the snort.conf file that you _also_ have to unhash, f

snort not recognizing dns server correctly

2002-05-03 Thread Jeff
I have the following entry in /etc/snort/snort.conf var DNS_SERVERS [192.168.0.0/24,216.148.227.68/32,204.127.202.4/32] The 192... is a local private network and the next 2 addresses are dns servers. Snort is constantly logging activity to the 1st dns server as a portscan, and as I understand i

Re: APT-GET Problems

2002-05-03 Thread Matt Zimmerman
On Thu, May 02, 2002 at 09:32:33PM -0700, tony mancill wrote: > this isn't exactly a debian-security answer (but then again, I'm not sure > that you've posed a debian-security question), but my recommendation is to > use the apt-proxy package on "server" machine (you can even use > apt-proxy-impo

unsubscribe

2002-05-03 Thread Marc FERRE
Pavel Minev Penev wrote: > > On Thu, May 02, 2002 at 06:54:38PM -0700, Mike Shepherd wrote: > > # apt-get install uucp > > Reading Package Lists... Done > > Building Dependency Tree... Done > > The following NEW packages will be installed: > > uucp > > 0 packages upgraded, 1 newly installed, 0 t

html spam

2002-05-03 Thread Thomas Buhk
can someone plz remove the html spamer and also disable html for the mailinglist(s)? bye, tom. -- pub 1024D/DB69936B 2002-03-01 Thomas Buhk <[EMAIL PROTECTED]> Key fingerprint = DA11 1EC3 30EE BE59 3D47 9A0E F7E2 9CF1 DB69 936B -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subj

[no subject]

2002-05-03 Thread officegirl
    가브리엘향수 파운데이션 총알청바지 \25,000 \39,000 \31,500 허락 없이 메일을 보내드려 죄송합니다. 원치 않으시면 옆의 버튼을 눌러주세요. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: APT-GET Problems

2002-05-03 Thread Pavel Minev Penev
On Thu, May 02, 2002 at 06:54:38PM -0700, Mike Shepherd wrote: > # apt-get install uucp > Reading Package Lists... Done > Building Dependency Tree... Done > The following NEW packages will be installed: > uucp > 0 packages upgraded, 1 newly installed, 0 to remove and 0 not upgraded. > E: Could

unsubscribe

2002-05-03 Thread Marc FERRE
Pavel Minev Penev wrote: > > On Thu, May 02, 2002 at 06:54:38PM -0700, Mike Shepherd wrote: > > # apt-get install uucp > > Reading Package Lists... Done > > Building Dependency Tree... Done > > The following NEW packages will be installed: > > uucp > > 0 packages upgraded, 1 newly installed, 0

html spam

2002-05-03 Thread Thomas Buhk
can someone plz remove the html spamer and also disable html for the mailinglist(s)? bye, tom. -- pub 1024D/DB69936B 2002-03-01 Thomas Buhk <[EMAIL PROTECTED]> Key fingerprint = DA11 1EC3 30EE BE59 3D47 9A0E F7E2 9CF1 DB69 936B -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a sub

[no subject]

2002-05-03 Thread officegirl
  ¡¡ °¡ºê¸®¿¤Çâ¼ö ÆÄ¿îµ¥ÀÌ¼Ç ÃѾËû¹ÙÁö \25,000 \39,000 \31,500 Çã¶ô ¾øÀÌ ¸ÞÀÏÀ» º¸³»µå·Á Á˼ÛÇÕ´Ï´Ù. ¿øÄ¡ ¾ÊÀ¸½Ã¸é ¿·ÀÇ ¹öÆ°À» ´­·¯ÁÖ¼¼¿ä. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: APT-GET Problems

2002-05-03 Thread Pavel Minev Penev
On Thu, May 02, 2002 at 06:54:38PM -0700, Mike Shepherd wrote: > # apt-get install uucp > Reading Package Lists... Done > Building Dependency Tree... Done > The following NEW packages will be installed: > uucp > 0 packages upgraded, 1 newly installed, 0 to remove and 0 not upgraded. > E: Could