RE: protection against buffer overflows

2002-01-18 Thread Hassard, Stephen
I'm not sure if anyone has tried this one, but a fairly extensive patch set for the 2.4 series of kernels is available called grsecurity (http://www.grsecurity.net). It includes whole whacks of stuff (take a look at the features page http://www.grsecurity.net/features.htm) .. I haven't had a

RE: protection against buffer overflows

2002-01-18 Thread Hassard, Stephen
I'm not sure if anyone has tried this one, but a fairly extensive patch set for the 2.4 series of kernels is available called grsecurity (http://www.grsecurity.net). It includes whole whacks of stuff (take a look at the features page http://www.grsecurity.net/features.htm) .. I haven't had a

RE: Hacked too?

2002-01-11 Thread Hassard, Stephen
still, I think that one of the first things you should do with your hacked systems is unplug the network cable. the majority of hacks these days are for stepping stones, they don't necessarily care about the data on your PC, but will have other PCs from your. I don't think you really want the FBI

RE: Hacked too?

2002-01-11 Thread Hassard, Stephen
still, I think that one of the first things you should do with your hacked systems is unplug the network cable. the majority of hacks these days are for stepping stones, they don't necessarily care about the data on your PC, but will have other PCs from your. I don't think you really want the FBI

RE: No local user authentication with openssh2.9

2001-08-07 Thread Hassard, Stephen
One other thing that I noticed, is that openssh doesn't but default configure with '--with-pam'. It used to, but doesn't any more. Make sure you've got that in there if you've built from source ... later, Steve -Original Message- From: Yussef Elsirgany [mailto:[EMAIL PROTECTED]]

RE: imap

2001-08-01 Thread Hassard, Stephen
A cool way to do this with stunnel is: stunnel -d 993 -r myimaphost:143 (or take a look at http://www.stunnel.org/examples/encrypt_services.html) the only problem I've seen with this method is that some imap+ssl combos require a proper signed cert to hook up with the imap server (maybe).

RE: imap

2001-08-01 Thread Hassard, Stephen
A cool way to do this with stunnel is: stunnel -d 993 -r myimaphost:143 (or take a look at http://www.stunnel.org/examples/encrypt_services.html) the only problem I've seen with this method is that some imap+ssl combos require a proper signed cert to hook up with the imap server (maybe). that'll