ndiswrapper packages ready for testing

2009-02-27 Thread Steffen Joeris
Hi If anyone is using ndiswrapper on etch (oldstable), please give these packages[0] a try. The packages are ready for release and fix a few buffer overflows, but I would appreciate some more test results from people using ndiswrapper, before releasing them. Please feel free to send your test

Ofertas em Higiêne Bucal

2009-02-27 Thread Dental Supplies
Use o código de desconto NOSSOSITE  e receba 10% de desconto em todas as suas compras Temos os melhores preços do Mercado.  Se você encontrar um preço menor não faremos o mesmo preço. Você esta recebendo este por causa da sua relação com Gemas Brasil . Por favor confirme o seu interesse em rec

AUTO: Cheree Hort/CAED/09/USCOURTS is out of the office. (returning 03/02/2009)

2009-02-27 Thread CHort
I am out of the office until 03/02/2009. If you require immediate assistance, please contact Technical Support at 916-930-4335. Note: This is an automated response to your message "[SECURITY] [DSA 1728-1] New dkim-milter packages fix denial of service" sent on 2/27/2009 10:16:12 AM. This is t

Re: security advice wanted for home server

2009-02-27 Thread andy baxter
andy baxter wrote: Sorry, forgot to send this to the list. Martin Bartenberger wrote: andy baxter schrieb: Thanks to those who replied about ssh config. Would be good to know more about whether it's worth setting up aide for a small home server like this, and if the way I'm thinking of doing

Re: [Secure-testing-team] Security support for volatile?

2009-02-27 Thread Florian Weimer
* Kurt Roeckx: >> For ClamAV and ClamAV-derived packages, I'd prefer to see uploads of >> new upstream versions to stable-security or stable-proposed-updates >> (that is, remove it from volatile). > > I think one the reason why clamav is in volatile is that the engine > might need updating to dete

Re: security advice wanted for home server

2009-02-27 Thread andy baxter
Sorry, forgot to send this to the list. Martin Bartenberger wrote: andy baxter schrieb: Thanks to those who replied about ssh config. Would be good to know more about whether it's worth setting up aide for a small home server like this, and if the way I'm thinking of doing it is OK. My main w

Re: security advice wanted for home server

2009-02-27 Thread Martin Bartenberger
andy baxter schrieb: andy baxter wrote: [... I'm planning to ...] - use aide to check the system files regularly. The way I'm thinking of doing this is to put a bootable debian image (with aide installed) on a flash disk, then every week or so boot my laptop from this with the slug's usb har

Lenny Security Improvements

2009-02-27 Thread Martin Bartenberger
Hi List, while reading the release information for the new Debian Lenny I noticed some informations about security improvements in Lenny: "Further improvements in system security include the installation of available security updates before the first reboot by the Debian Installer, the reduc

Re: security advice wanted for home server

2009-02-27 Thread andy baxter
andy baxter wrote: [... I'm planning to ...] - use aide to check the system files regularly. The way I'm thinking of doing this is to put a bootable debian image (with aide installed) on a flash disk, then every week or so boot my laptop from this with the slug's usb hard drive plugged into t

Re: security advice wanted for home server

2009-02-27 Thread Gerardo Castillo Alvarado
Tom Allison escribió: >> I would use another port than 22 for the SSH. If your machine's ports >> are >> being scanned and it appears port 22 is open, then you'll probably >> have a >> lot of brute-force attacks to SSH. >> Personally, I redirected on my router a high port number (1234, for >> examp

Re: security advice wanted for home server

2009-02-27 Thread Paul Staroch
On Freitag 27 Februar 2009 14:07:02 andy baxter wrote: > Sébastien NOBILI wrote: > > Le vendredi 27 février 09 à 10:43, andy baxter a écrit : > >> I can make sure that the server doesn't have any incoming ports open > >> except http and ssh) > > > > I would use another port than 22 for the SSH. If

Re: security advice wanted for home server

2009-02-27 Thread Dmitry Nedospasov
I would use public key and fail2ban D. On Feb 27, 2009, at 14:05 , Tom Allison wrote: Better to use public/private key authentication than to rely on passwords. On Feb 27, 2009, at 7:41 AM, Sébastien NOBILI wrote: Le vendredi 27 février 09 à 10:43, andy baxter a écrit : I can make su

Re: security advice wanted for home server

2009-02-27 Thread Tom Allison
Better to use public/private key authentication than to rely on passwords. On Feb 27, 2009, at 7:41 AM, Sébastien NOBILI wrote: Le vendredi 27 février 09 à 10:43, andy baxter a écrit : I can make sure that the server doesn't have any incoming ports open except http and ssh) I would use

Re: security advice wanted for home server

2009-02-27 Thread andy baxter
Sébastien NOBILI wrote: Le vendredi 27 février 09 à 10:43, andy baxter a écrit : I can make sure that the server doesn't have any incoming ports open except http and ssh) I would use another port than 22 for the SSH. If your machine's ports are being scanned and it appears port 22 is

Re: security advice wanted for home server

2009-02-27 Thread Sébastien NOBILI
Le vendredi 27 février 09 à 10:43, andy baxter a écrit : > I can make sure that the server doesn't have any incoming ports open > except http and ssh) I would use another port than 22 for the SSH. If your machine's ports are being scanned and it appears port 22 is open, then you'll probably have

security advice wanted for home server

2009-02-27 Thread andy baxter
I have an embedded device with attached usb hard disk (a Linksys NSLU2) which I have installed debian on, with the aim of using it as a home server over ADSL. (The idea being that it's quiet and consumes very little power, so I'm happy leaving it switched on all the time, which I wouldn't be wi