RE: Quality of security assurance with Debian vs. RedHat vs. SuSE

2002-06-11 Thread Howland, Curtis
> On Tue 11 Jun 2002 19:54, Noah L. Meyerhans wrote: > > There is a lot of collaboration between the respective security > > teams for the major Linux distributions. As a result of this, > > they all tend to release necessary security updates at the same > > time. Known security updates are rarel

RE: Quality of security assurance with Debian vs. RedHat vs. SuSE

2002-06-11 Thread Jeff Bonner
On Tue 11 Jun 2002 19:54, Noah L. Meyerhans wrote: > > reminded me of a flap that arose over a list of > > vulnerabilities posted by platform, etc on SecurityFocus: > > > >http://securityfocus.com/vulns/stats.shtml > > I'm not sure this data is worth much. Debian, Redhat, SuSE, et al > typ

Re: Quality of security assurance with Debian vs. RedHat vs. SuSE

2002-06-11 Thread Noah L. Meyerhans
On Tue, Jun 11, 2002 at 07:20:50PM -0400, Jeff Bonner wrote: > I am certainly not in a position to say which is more secure, but this > reminded me of a flap that arose over a list of vulnerabilities posted > by platform, etc on SecurityFocus: > >http://securityfocus.com/vulns/stats.shtml I'm

RE: Quality of security assurance with Debian vs. RedHat vs. SuSE

2002-06-11 Thread Jeff Bonner
On Tue 11 Jun 2002 11:54, Eduard Bloch wrote: > I look for good comparison about the security of Debian and Redhat or > SuSE systems, especial about number of found local exploits or DOS > attacks. I assume that Debian Stable should be less invulnerable since > the software is more tested, but I w

RE: Bug #149436 (was: `SSH log weirdness')

2002-06-11 Thread Jeff Bonner
On 11 Jun 2002 14:31, Sam Hartman wrote: > > There is already a response to this report, and the > > maintainer (I think?) is asking for confirmation, because he > > isn't seeing the same errors. I assume it's okay with > > everyone involved, so I have put together a list of those of > > us for

Re: Bug #149436 (was: `SSH log weirdness')

2002-06-11 Thread Sam Hartman
> "Jeff" == Jeff Bonner <[EMAIL PROTECTED]> writes: Jeff> Christian Kurz was kind enough to file a bug report for me, Jeff> at http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=149436, Jeff> which describes this problem. Jeff> There is already a response to this report, and th

Re: attack of the marsians

2002-06-11 Thread Thomas Thurman
On Tue, 11 Jun 2002, Proud Debian-User wrote: > Jun 11 19:01:14 abyss kernel: martian source 10.10.151.255 from > 10.10.151.43, on dev eth0 > Jun 11 19:03:19 abyss kernel: martian source 10.10.150.1 from 10.10.151.43, > on dev eth0 > > in the last 5 days these logging messages increases. > Normall

Re: attack of the marsians

2002-06-11 Thread Henrique de Moraes Holschuh
On Tue, 11 Jun 2002, Proud Debian-User wrote: > Jun 11 19:01:14 abyss kernel: martian source 10.10.151.255 from > 10.10.151.43, on dev eth0 > Jun 11 19:03:19 abyss kernel: martian source 10.10.150.1 from 10.10.151.43, > on dev eth0 Looks like someone has a screwed up netmask to me. -- "One dis

RE: Bug #149436 (was: `SSH log weirdness')

2002-06-11 Thread Jeff Bonner
On Tue 11 Jun 2002 08:27, Jussi Ekholm wrote @ debian-security: > > >June 4 19:36:26 firegate sshd[24364]: PAM pam_putenv: > > >delete non-existent entry; MAIL > > > > I'm not sure exactly why it's carping like that, but take a > > look at your /etc/pam.d/ssh . Removing the noenv option

attack of the marsians

2002-06-11 Thread Proud Debian-User
Hi Jun 11 19:01:14 abyss kernel: martian source 10.10.151.255 from 10.10.151.43, on dev eth0 Jun 11 19:03:19 abyss kernel: martian source 10.10.150.1 from 10.10.151.43, on dev eth0 in the last 5 days these logging messages increases. Normally i ignore them, but now there are 7 machines in my net

Quality of security assurance with Debian vs. RedHat vs. SuSE

2002-06-11 Thread Eduard Bloch
Hello people, I look for good comparison about the security of Debian and Redhat or SuSE systems, especial about number of found local exploits or DOS attacks. I assume that Debian Stable should be less invulnerable since the software is more tested, but I would need some argumentation help to con

Re: SSH log weirdness

2002-06-11 Thread Jussi Ekholm
Vineet Kumar <[EMAIL PROTECTED]> wrote: > * Jeff Bonner ([EMAIL PROTECTED]) [020604 16:47]: >>June 4 19:36:26 firegate sshd[24364]: PAM pam_putenv: delete >>non-existent entry; MAIL > > I'm not sure exactly why it's carping like that, but take a look at your > /etc/pam.d/ssh . Removing t

Re: netstat output

2002-06-11 Thread Javier Fernández-Sanguino Peña
On Tue, Jun 11, 2002 at 11:57:34AM +0200, Bart-Jan Vrielink wrote: > > As a native dutch speaker I find it very easy to remember 'netstat > -tulpen': > -t: tcp > -u: udp > -l: show only listening sockets > -p: show pid and program using the socket > -e: display aditional information. > -n: numeric

Re: netstat output

2002-06-11 Thread Bart-Jan Vrielink
On Tue, 2002-06-11 at 11:39, Javier Fernández-Sanguino Peña wrote: > On Mon, Jun 10, 2002 at 01:17:02PM -0400, James wrote: > > I use: netstat -vat | grep LISTEN > > > > That will tell you everything that is really listening on your server. > > > Not really, IIRC it will not show you udp s

Re: netstat output

2002-06-11 Thread Javier Fernández-Sanguino Peña
On Mon, Jun 10, 2002 at 01:17:02PM -0400, James wrote: > I use: netstat -vat | grep LISTEN > > That will tell you everything that is really listening on your server. > Not really, IIRC it will not show you udp servers. You might want to check Tiger's test: check_listeningprocs

unsubscribe

2002-06-11 Thread
Join Excite! - http://www.excite.comThe most personalized portal on the Web!