Re: FTP in general (Re: Watch out! vsftpd anonymous access always enabled!)

2003-09-21 Thread Rick Moen
Quoting Matt Zimmerman ([EMAIL PROTECTED]): > Regarding point #3 in the last message at that URL: > > > 3. Multiple recursive gets/puts using ftp is fast, easy, and reliable. > > Closest http alternative is wget, which is nice but not quite as > > nice. > > lftp http://http.us.debian.or

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > Unfortunately some customers want to pay for a solution where they can just > use their silly M$ program like they're used to, and refuse 'complicated' > solutions. In that case, WebDAV is the way to go, or using WinSCP3 and ssh. Greetings Bernd -- eck

FTP in general (Re: Watch out! vsftpd anonymous access always enabled!)

2003-09-21 Thread Matt Zimmerman
On Sun, Sep 21, 2003 at 04:41:25PM -0700, Rick Moen wrote: > Quoting Bernd Eckenfels ([EMAIL PROTECTED]): > > > Actually one should think about using FTP at all :) > > http://linuxmafia.com/~rick/linux-info/ftp-justification Regarding point #3 in the last message at that URL: > 3. Multiple re

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Robert van der Meulen
Hi Dan (& list) Quoting Daniel Jacobowitz ([EMAIL PROTECTED]): > 1.2.0-3 is in incoming, or remove the pam_ftp line. Thanks! (I've migrated to $other_ftpd for the time being, but will switch back) > If you're running something in situations that could be "quite a > disaster", I suggest you immed

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Robert van der Meulen
Quoting Robert Brockway ([EMAIL PROTECTED]): > If he really cares about the data (and let's face it, everyone cares about > their data :) then I'd recommend dispensing with ftp entirely and using > scp or sftp (ssh v2) if the client needs to shift data to or from the box. > Configure this for RSA/

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Rick Moen
Quoting Bernd Eckenfels ([EMAIL PROTECTED]): > Actually one should think about using FTP at all :) http://linuxmafia.com/~rick/linux-info/ftp-justification -- Cheers, Founding member of the Hyphenation Society, a grassroots-based, Rick Moen not-for-profit, locally-owned-and-operated, coo

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > Unfortunately some customers want to pay for a solution where they can just > use their silly M$ program like they're used to, and refuse 'complicated' > solutions. In that case, WebDAV is the way to go, or using WinSCP3 and ssh. Greetings Bernd -- eck

FTP in general (Re: Watch out! vsftpd anonymous access always enabled!)

2003-09-21 Thread Matt Zimmerman
On Sun, Sep 21, 2003 at 04:41:25PM -0700, Rick Moen wrote: > Quoting Bernd Eckenfels ([EMAIL PROTECTED]): > > > Actually one should think about using FTP at all :) > > http://linuxmafia.com/~rick/linux-info/ftp-justification Regarding point #3 in the last message at that URL: > 3. Multiple re

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Robert van der Meulen
Hi Dan (& list) Quoting Daniel Jacobowitz ([EMAIL PROTECTED]): > 1.2.0-3 is in incoming, or remove the pam_ftp line. Thanks! (I've migrated to $other_ftpd for the time being, but will switch back) > If you're running something in situations that could be "quite a > disaster", I suggest you immed

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Robert van der Meulen
Quoting Robert Brockway ([EMAIL PROTECTED]): > If he really cares about the data (and let's face it, everyone cares about > their data :) then I'd recommend dispensing with ftp entirely and using > scp or sftp (ssh v2) if the client needs to shift data to or from the box. > Configure this for RSA/

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Rick Moen
Quoting Bernd Eckenfels ([EMAIL PROTECTED]): > Actually one should think about using FTP at all :) http://linuxmafia.com/~rick/linux-info/ftp-justification -- Cheers, Founding member of the Hyphenation Society, a grassroots-based, Rick Moen not-for-profit, locally-owned-and-operated, coo

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > If you're running something in situations that could be "quite a > disaster", I suggest you immediately rething using the version of > vsftpd from _unstable_. Actually one should think about using FTP at all :) Greetings Bernd -- eckes privat - http://

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > On Sat, Sep 20, 2003 at 12:47:21PM +0200, Robert van der Meulen wrote: >> Hi, >> >> I was working on a newly-installed machine for a customer who requires an >> ftp server. After installing vsftpd (which i *had* good experience with), I >> noticed that t

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > On Sat, Sep 20, 2003 at 12:47:21PM +0200, Robert van der Meulen wrote: >> Hi, >> >> I was working on a newly-installed machine for a customer who requires an >> ftp server. After installing vsftpd (which i *had* good experience with), I >> noticed that t

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Daniel Jacobowitz
On Sun, Sep 21, 2003 at 10:40:40PM +0400, tokza wrote: > > > > I was working on a newly-installed machine for a customer who requires an > > > ftp server. After installing vsftpd (which i *had* good experience with), > > > I noticed that the 'anonymous_enable' switch in /etc/vsftpd.conf, when > >

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread tokza
> > I was working on a newly-installed machine for a customer who requires an > > ftp server. After installing vsftpd (which i *had* good experience with), > > I noticed that the 'anonymous_enable' switch in /etc/vsftpd.conf, when > > set to 'NO' *does* allow anonymous access. > > Logging in using

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > If you're running something in situations that could be "quite a > disaster", I suggest you immediately rething using the version of > vsftpd from _unstable_. Actually one should think about using FTP at all :) Greetings Bernd -- eckes privat - http://

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Daniel Jacobowitz
On Sat, Sep 20, 2003 at 12:47:21PM +0200, Robert van der Meulen wrote: > Hi, > > I was working on a newly-installed machine for a customer who requires an > ftp server. After installing vsftpd (which i *had* good experience with), I > noticed that the 'anonymous_enable' switch in /etc/vsftpd.conf,

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > On Sat, Sep 20, 2003 at 12:47:21PM +0200, Robert van der Meulen wrote: >> Hi, >> >> I was working on a newly-installed machine for a customer who requires an >> ftp server. After installing vsftpd (which i *had* good experience with), I >> noticed that t

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > On Sat, Sep 20, 2003 at 12:47:21PM +0200, Robert van der Meulen wrote: >> Hi, >> >> I was working on a newly-installed machine for a customer who requires an >> ftp server. After installing vsftpd (which i *had* good experience with), I >> noticed that t

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Daniel Jacobowitz
On Sat, Sep 20, 2003 at 12:47:21PM +0200, Robert van der Meulen wrote: > Hi, > > I was working on a newly-installed machine for a customer who requires an > ftp server. After installing vsftpd (which i *had* good experience with), I > noticed that the 'anonymous_enable' switch in /etc/vsftpd.conf,

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Daniel Jacobowitz
On Sun, Sep 21, 2003 at 10:40:40PM +0400, tokza wrote: > > > > I was working on a newly-installed machine for a customer who requires an > > > ftp server. After installing vsftpd (which i *had* good experience with), > > > I noticed that the 'anonymous_enable' switch in /etc/vsftpd.conf, when > >

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread tokza
> > I was working on a newly-installed machine for a customer who requires an > > ftp server. After installing vsftpd (which i *had* good experience with), > > I noticed that the 'anonymous_enable' switch in /etc/vsftpd.conf, when > > set to 'NO' *does* allow anonymous access. > > Logging in using

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Daniel Jacobowitz
On Sat, Sep 20, 2003 at 12:47:21PM +0200, Robert van der Meulen wrote: > Hi, > > I was working on a newly-installed machine for a customer who requires an > ftp server. After installing vsftpd (which i *had* good experience with), I > noticed that the 'anonymous_enable' switch in /etc/vsftpd.conf,

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Daniel Jacobowitz
On Sat, Sep 20, 2003 at 12:47:21PM +0200, Robert van der Meulen wrote: > Hi, > > I was working on a newly-installed machine for a customer who requires an > ftp server. After installing vsftpd (which i *had* good experience with), I > noticed that the 'anonymous_enable' switch in /etc/vsftpd.conf,

Fw: coIIege naive girIs ready for H/\RD /\CTlON zmq oaj I i uV YqQ GBAIV

2003-09-21 Thread Fyzupuwez
Title: tijlN WV It's funny 'Here's your skateboard' Texas Saturday in 2003 in 1840 HjT CDC: West Nile dtkm ONnffpg Just a moment! Let's face facts. Firefighters in 1903 in 1882 in 1842 in 1918

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Robert Brockway
On Sat, 20 Sep 2003, Robert van der Meulen wrote: > If anyone here is running vsftpd on a non-anonymous box, I'd make sure to > check this too. In the case of this customer (who has pretty sensitive data > on his box), this could have been quite a disaster. If he really cares about the data (and

Fw: coIIege naive girIs ready for H/\RD /\CTlON zmq oaj I i uV YqQ GBAIV

2003-09-21 Thread Fyzupuwez
Title: tijlN WV It's funny 'Here's your skateboard' Texas Saturday in 2003 in 1840 HjT CDC: West Nile dtkm ONnffpg Just a moment! Let's face facts. Firefighters in 1903 in 1882 in 1842 in 1918

Re: Watch out! vsftpd anonymous access always enabled!

2003-09-21 Thread Robert Brockway
On Sat, 20 Sep 2003, Robert van der Meulen wrote: > If anyone here is running vsftpd on a non-anonymous box, I'd make sure to > check this too. In the case of this customer (who has pretty sensitive data > on his box), this could have been quite a disaster. If he really cares about the data (and

Re: OpenSSH in Woody

2003-09-21 Thread Birzan George Cristian
On Sat, Sep 20, 2003 at 06:34:53AM +0300, Birzan George Cristian wrote: > When is there going to be a patched version of OpenSSH for stable? Sid > got the fixed one (3.6.1p2-9), but there's no fixed version for Stable > on security.debian.org. I've rolled my own version of this. It can be found at

Re: Will Bind9 in stable get patched?

2003-09-21 Thread J.H.M. Dassen (Ray)
On Sat, Sep 20, 2003 at 11:13:35 -0700, Bill Moseley wrote: > Will Bind9 in stable get the delegation-only patch? Probably not. Stable only gets updated for security issues. A Bind9 with the delegation-only patch is available for woody from http://people.debian.org/~lamont/ . > I would conside

Re: Strange segmentation faults and Zombies

2003-09-21 Thread Michelle Konzack
Am 2003-09-19 08:47:35, schrieb Michel Messerschmidt: >On Thu, Sep 18, 2003 at 07:20:08PM +0200, Javier Fernández-Sanguino Peña wrote: >Be careful! >These files are really infected and will infect other ELF binaries if >you execute them (and if user rights allow it). >I've done replication tests

Re: Debian + Verisign's .com/.net hijack

2003-09-21 Thread Michelle Konzack
Am 2003-09-17 10:48:33, schrieb Oliver Hitz: >Hi all, > >By now probably everybody has heard about Verisign's latest change to >the .net and .com domains (otherwise read about it in your favourite >tech news site). While the security of dns per se is not really >affected, the change influences othe

Re: OpenSSH in Woody

2003-09-21 Thread Birzan George Cristian
On Sat, Sep 20, 2003 at 06:34:53AM +0300, Birzan George Cristian wrote: > When is there going to be a patched version of OpenSSH for stable? Sid > got the fixed one (3.6.1p2-9), but there's no fixed version for Stable > on security.debian.org. I've rolled my own version of this. It can be found at

Re: Will Bind9 in stable get patched?

2003-09-21 Thread J.H.M. Dassen (Ray)
On Sat, Sep 20, 2003 at 11:13:35 -0700, Bill Moseley wrote: > Will Bind9 in stable get the delegation-only patch? Probably not. Stable only gets updated for security issues. A Bind9 with the delegation-only patch is available for woody from http://people.debian.org/~lamont/ . > I would conside

Re: Strange segmentation faults and Zombies

2003-09-21 Thread Michelle Konzack
Am 2003-09-19 08:47:35, schrieb Michel Messerschmidt: >On Thu, Sep 18, 2003 at 07:20:08PM +0200, Javier Fernández-Sanguino Peña wrote: >Be careful! >These files are really infected and will infect other ELF binaries if >you execute them (and if user rights allow it). >I've done replication tests

Re: Debian + Verisign's .com/.net hijack

2003-09-21 Thread Michelle Konzack
Am 2003-09-17 10:48:33, schrieb Oliver Hitz: >Hi all, > >By now probably everybody has heard about Verisign's latest change to >the .net and .com domains (otherwise read about it in your favourite >tech news site). While the security of dns per se is not really >affected, the change influences othe