Re: iptables and nmap

2007-06-08 Thread Repasi Tibor
Joan Hérisson wrote: Hello, Config: - Debian 2.4.18 - iptables with many rules Problems: - I have installed a tomcat 5.5 server. The server is unreachable (connection failed from locahost or another host on my local network). Hey Joan, how do You installed tomcat? Because, if installed fro

Re: iptables and nmap

2007-06-08 Thread Andreas Kreuzinger
Hi ! * Manuel García <[EMAIL PROTECTED]> [2007-06-07 10:01]: > On 6/7/07, Joan Hérisson <[EMAIL PROTECTED]> wrote: [...snip...] > > Results: > > - The server is still unreachable. > > - When I do nmap localhost, I have port 80 open but not 8080. > > - When I comment out the line for port 80 in fir

Re: Package management and security

2007-06-08 Thread Andrew M.A. Cater
On Fri, Jun 08, 2007 at 09:56:09AM +0200, Frédéric PICA wrote: > Ok, so apt-get update/upgrade -y in a cron job will work but what about my > first question ? Don't do this :( The pace of change in Debian stable is very slow: as you correctly say, fixes are back ported and so on but it is still

Re: Package management and security

2007-06-08 Thread Mark Lanett
You want to use a combination of these commands at different times: apt-get -qq update # necessary, no email desired apt-get -dy upgrade # download minor updates, do not install, send email apt-get -yupgrade # install minor updates, send email apt-get -qqdy dist-upgrade #

Re: Package management and security

2007-06-08 Thread John Wright
The security team looks at the diffs for the patch to version 2 of the software, identifies the parts that fix the bug in version 1 and manually back port the bug fix to version 1. We end up with a Debian specific version that doesn¹t introduce new dependencies or features. This works with great su

Re: iptables and nmap

2007-06-08 Thread Giacomo A. Catenazzi
Joan Hérisson wrote: Chain INPUT (policy DROP 17 packets, 1088 bytes) pkts bytes target prot opt in out source destination 164 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 225 18816 bad_tcp_packets tcp --

Re: Package management and security

2007-06-08 Thread Frédéric PICA
Ok, so apt-get update/upgrade -y in a cron job will work but what about my first question ? Lets say debian stable has foo-1.0 package. I does apt-get upgrade -y in my cron job and one day I have foo-1.0 updated to foo-1.0.1 for bugfix reason. Meanwhile the author of foo release version 2, debian