RE: SSH1/2 compression (was: `SSH2 Encryption')

2002-06-10 Thread Jeff Bonner
On Mon 10 Jun 2002 18:00, Anne Carasik wrote: > > After reading the manpage to quote above, I noticed that it's > > only applicable to SSH1 anyway, so I guess it doesn't matter. > > :) > > What, compression? Compression should work with both SSH1 and SSH2 > protocols. Yes, that's what I was refe

Re: Help me

2002-06-10 Thread grok
Someone explain this to me: This guy is sitting back, waiting for suckers to visit his exploit-laden website, correct? grok. On Tue, 2002-05-14 at 01:33, Kim chulmin wrote: You're not going to believe what's happening to me now. someone is doing an experiment on me. I mean an experiment on a

Re: SSH2 Encryption

2002-06-10 Thread Anne Carasik
This one time, Jeff Bonner wrote: > On Mon 10 Jun 2002 13:23, Anne Carasik wrote: > > This one time, Jeff Bonner wrote: > As in, "This one time, at band camp..."? >;) Also, sorry about > the wretched linebreaks, folks. Good ol Outlook. Yes, exactly. :) I got tired of the typical attribution lin

Re: SSH2 Encryption

2002-06-10 Thread Oliver M. Bolzer
On Mon, Jun 10, 2002 at 01:13:06PM -0400, Jeff Bonner <[EMAIL PROTECTED]> wrote... > 3) Any reason you *wouldn't* want to use compression in SSH? Besides the potential save on bandwidth, it depends on what you transfer over the wire. If you are lucky, the space saving is so big that you save mor

unsubscribe

2002-06-10 Thread David Blood
unsubscribe -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

RE: SSH2 Encryption

2002-06-10 Thread Jeff Bonner
On Mon 10 Jun 2002 15:30, Jeremy T. Bouse wrote: > Should have absolutely no problems connecting to sshd on Woody > or Sid from Windows using SecureCRT 3.4 or SecureFX 1.9 as I run 3.4.1 > and 1.9.6 respectively from Windows 2000 with no problem on multiple > machines... I set the SSH Server

RE: SSH2 Encryption

2002-06-10 Thread Jeff Bonner
On Mon 10 Jun 2002 13:24, Mark Janssen wrote: > Run the ssh daemon with debugging on (2 levels or more) and check the > output: > > sshd -d -d -d -p > ssh -v -p 127.0.0.1 > > Look at all the pretty output... > Yeah, after I wrote that message, I tried to connect with a cipher that SSH *does

RE: SSH2 Encryption

2002-06-10 Thread Jeff Bonner
On Mon 10 Jun 2002 13:23, Anne Carasik wrote: > This one time, Jeff Bonner wrote: As in, "This one time, at band camp..."? >;) Also, sorry about the wretched linebreaks, folks. Good ol Outlook. > Check the man page for what ciphers SSH2 accepts. I usually > leave it on Blowfish because it's

Re: SSH2 Encryption

2002-06-10 Thread Jeremy T. Bouse
Should have absolutely no problems connecting to sshd on Woody or Sid from Windows using SecureCRT 3.4 or SecureFX 1.9 as I run 3.4.1 and 1.9.6 respectively from Windows 2000 with no problem on multiple machines... I set the SSH Server to "Auto Detect" and left all Ciphers and MAC options c

Re: SSH2 Encryption

2002-06-10 Thread Robert van der Meulen
Quoting Thomas Thurman ([EMAIL PROTECTED]): > I can see how [speed of line] and [whether to use compression] are > related, and how [trustedness of line] and [whether to use encryption] are > related. But I don't see how anyone could say that "If your data's going > over a high-speed line, there's

Re: SSH2 Encryption

2002-06-10 Thread Thomas Thurman
On Mon, 10 Jun 2002, Robert van der Meulen wrote: > Quoting Anne Carasik ([EMAIL PROTECTED]): > > This one time, Jeff Bonner wrote: > > > 3) Any reason you *wouldn't* want to use compression in SSH? > > > > Yes, if you're going over a high speed line, no reason to use > > compression. If you're co

Re: SSH2 Encryption

2002-06-10 Thread Robert van der Meulen
Quoting Anne Carasik ([EMAIL PROTECTED]): > This one time, Jeff Bonner wrote: > > 3) Any reason you *wouldn't* want to use compression in SSH? > > Yes, if you're going over a high speed line, no reason to use > compression. If you're connecting through a slow line (like a > modem), use compression

Re: netstat output

2002-06-10 Thread vdongen
Do netstat -anp as root instead, it gives process pid and name -Original Message- From: Ryan J Goss <[EMAIL PROTECTED]> Date: Mon, 10 Jun 2002 12:04:03 -0500 (CDT) Subject: netstat output > When I do a netstat -an, how do I properly decipher the output? To > me it > looks like a lot of po

Re: SSH2 Encryption

2002-06-10 Thread Mark Janssen
On Mon, 2002-06-10 at 19:13, Jeff Bonner wrote: > Questions: > > 1) Are all those ciphers actually available in my SSH package? Run the ssh daemon with debugging on (2 levels or more) and check the output: sshd -d -d -d -p ssh -v -p 127.0.0.1 Look at all the pretty output... debug2: kex_par

Re: SSH2 Encryption

2002-06-10 Thread Anne Carasik
Hi Jeff, This one time, Jeff Bonner wrote: > I've been playing around with a Woody installation, connecting to it via > SSH2, with SecureCRT 3.4 for Win32. I think I've finally figured out what > encryption types this Debian package (ssh 3.0.2p1-9) supports, but please > correct me if I'm wrong

RE: netstat output

2002-06-10 Thread James
I use: netstat -vat | grep LISTEN That will tell you everything that is really listening on your server. You should be able to use "lsof" to find out what is actually listening on those ports. - James > -Original Message- > From: Ryan J Goss [mailto:[EMAIL PROTECTED] > Sent: Monday, J

SSH2 Encryption

2002-06-10 Thread Jeff Bonner
I've been playing around with a Woody installation, connecting to it via SSH2, with SecureCRT 3.4 for Win32. I think I've finally figured out what encryption types this Debian package (ssh 3.0.2p1-9) supports, but please correct me if I'm wrong -- http://www.openssh.org/features.html lists *only*

Re: netstat output

2002-06-10 Thread Michael Scott Shappe
Ryan J Goss wrote: When I do a netstat -an, how do I properly decipher the output? To me it looks like a lot of ports are listening, is there a way to determine what daemon is running on those ports? netstat -anp will tell you which processes. lsof -i : will tell you more specifically who (e.g

netstat output

2002-06-10 Thread Ryan J Goss
When I do a netstat -an, how do I properly decipher the output? To me it looks like a lot of ports are listening, is there a way to determine what daemon is running on those ports? --Ryan Goss <[EMAIL PROTECTED]> Systems Staff "Counting in octal is just like counting in decimal--if you don't use

Re: userids introduced by package installs

2002-06-10 Thread Javier Fernández-Sanguino Peña
On Fri, Jun 07, 2002 at 11:03:11PM -0700, Luca Filipozzi wrote: > On Sat, Jun 08, 2002 at 12:51:00AM -0500, Jor-el wrote: > > On Sat, 8 Jun 2002, Phillip Hofmeister wrote: > > > > > Just a guess... > > > but it probably has something to do with another package may > > > be utilizing that ID >

Re: Things to watch on my server

2002-06-10 Thread Javier Fernández-Sanguino Peña
On Fri, Jun 07, 2002 at 02:21:05PM +0200, D.J. Bolderman wrote: > Hello ppl, > > What are some important things to watch on your debian box ? I'm checking > logfiles periodically, and run chkrootkit once in a while. > Are there any parameters in debian that can be turned on for some more > detaile

Re: aide and tiger sending gpg crypted files

2002-06-10 Thread Javier Fernández-Sanguino Peña
On Thu, Jun 06, 2002 at 08:28:24PM +0200, Thomas Schmid wrote: > Hi, > > So, I set up my server with aide and tiger to check it's integrity. The > reports are mailed to root which one is redirected to an other localadress > and to a second adresse on a other server. My question is now: is it > pos

OT: English and other languages

2002-06-10 Thread Andras GALAMBOSI
I think that you're a bit harsh, it is not necessary. if anyone take a look at debian lists, one would see, that there are spanish, french, and so on lists (even developers' lists as well). every list has a netiquette/faq or anything. if the "official" language of this list is not mentioned ther

Re: Forum for security-review of code?

2002-06-10 Thread Wichert Akkerman
Previously Karl E. Jorgensen wrote: > Can anybody suggest a suitable forum/mailing list to ask for help on > this? The security-audit list comes to mind. Google can tell you where to find it :) Wichert. -- _ /[EMAIL PROTECTED]

Re: frequent mail signing => is there a GPG agent?

2002-06-10 Thread Adrian 'Dagurashibanipal' von Bidder
On Sun, 2002-06-09 at 04:57, Jean Christophe ANDRÉ wrote: > Hello *, > > Probably a stupid question but... I can see lots of you on this list > frequently signing their e-mails, do you use some kind of GPG agent? afaik gpg-agent is only just developping. Search gpg-devel list for it. btw,

Re: OT: English and other languages (was ROUTED ET IDENTD)

2002-06-10 Thread Maximilian Szengel
On Mon, Jun 10, 2002 at 09:31:09AM +0200, VERBEEK, Francois wrote: > I didn't intend to start an extensive discussion when replying to > Aurelien's question. Anyway, I'd just like to say to close the > debate that something that makes the web so strong is that anyone > can express himself in it

English and other languages (was ROUTED ET IDENTD)

2002-06-10 Thread VERBEEK, Francois
I didn't intend to start an extensive discussion when replying to Aurelien's question. Anyway, I'd just like to say to close the debate that something that makes the web so strong is that anyone can express himself in its own language. I understand and strongly agree that distribution lists lik