Re: TLS1.0 and 1.1 with Cyrus (Debian Buster)

2020-05-09 Thread Jonas Andradas
Hi Roman, Did you try with the following in imapd.conf? tls_prefer_server_ciphers: 1 Regards, Jonas. On Sat, 9 May 2020, 01:22 Roman Medina-Heigl Hernandez, wrote: > Gracias Alberto. Now it's solved (it has been a little bit tricky). > > My final config: > > * /etc/imap

Re: Dual-Boot w/ encryption

2016-05-17 Thread Jonas Andradas
f I choose entire disk lvm with encrypted, which isn't what I want at all and is unmodifiable Hi Ralph, Probably you need to start the installer in expert graphical mode, and then choose to manually do the partitions, not rely on the presets there. Regards, Jonas

Re: Vulnerable PHP version according to nessus

2011-12-28 Thread Jonas Andradas
2011/12/28 Moritz Mühlenhoff > Dave Henley schrieb: > > --_08b89ad2-8af0-454c-bd3d-7274adf10707_ > > Content-Type: text/plain; charset="iso-8859-1" > > Content-Transfer-Encoding: quoted-printable > > > > > > I recently installed a Debian Squeeze system along with apache2 and PHP5. > > The system

Re: Zope2 packaging

2011-06-02 Thread Jonas Meurer
ether the solution we've choosen is ok for them for the time being. Please send us your comments in case you've any. On behalf of the Debian Zope2 packagers, Jonas Meurer signature.asc Description: Digital signature

Re: Question related to FDE (Full Disk Encryption) solution under Linux Debian Lenny

2011-01-24 Thread Jonas Andradas
On Mon, Jan 24, 2011 at 17:47, Andrew McGlashan < andrew.mcglas...@affinityvision.com.au> wrote: > Hi, > > > Thomas Nguyen Van wrote: > >> Correct me if I'm wrong but Mandos only works on a LAN according to the >> technical overview ( >> http://wiki.fukt.bsnet.se/wiki/Mandos#Architectural_Overview

Re: Question related to FDE (Full Disk Encryption) solution under Linux Debian Lenny

2011-01-24 Thread Jonas Andradas
On Mon, Jan 24, 2011 at 12:06, Andrew McGlashan < andrew.mcglas...@affinityvision.com.au> wrote: > Jonas Andradas wrote: > >> In particular, both "mandos" and "mandos-client" have Debian packages >> available. >> >> [1] http://www.fukt.bsn

Re: Question related to FDE (Full Disk Encryption) solution under Linux Debian Lenny

2011-01-24 Thread Jonas Andradas
, but not impossible), they only need it to > boot and the BIOS would decrypt the data for the attacker. > > Hello Jonas, Thomas, > > Actually, I beg to differ. I've both heard of and experienced situations > where a server room was raided by criminals in which cases almost

Re: Question related to FDE (Full Disk Encryption) solution under Linux Debian Lenny

2011-01-24 Thread Jonas Andradas
On Mon, Jan 24, 2011 at 09:51, Thomas Nguyen Van wrote: > Morning Jeroen, > > Thanks for your quick reply. I agree with you in general, Software FDE does > not protect your datas. > > However, in this Seagate solution (ATA Security and/or Drive Trust), we > have a hardware FDE which is faster. As

Re: scans in my hosts. (Debian 5.0 and Apache 2.2.9)

2010-07-30 Thread Jonas Andradas
On Thu, Jul 29, 2010 at 16:49, Sjors Gielen wrote: > > Op 29 jul 2010, om 16:34 heeft OLCESE, Marcelo Oscar. het volgende > geschreven: > > > Estimated: > > I am taking these scans in my hosts. (Debian 5.0 and Apache 2.2.9) > > This has been repeating since a weeks. > > Know what can be? What ca

Re: Live Penetration Testing.

2009-10-21 Thread Jonas Andradas
On Wed, Oct 21, 2009 at 09:48, Mike Mestnik wrote: > Are there any applications or projects to provide this *badly needed > service? I'm willing to assist in using or putting together an nmap > type applications that scans for known vulnerabilities and attempts to > make use of them for security

zope2.10 packages prepared for stable-security (bug#540464)

2009-08-09 Thread Jonas Meurer
and tell me whether it's ok to upload them to stable-security. debdiff is attached as well. greetings, jonas ps: packages with new (fixed) upstream versions are ready for upload to unstable as well, i just wait for comments on pkg-zope-developers due to a rather intrusive fix for an

Re: Scalable Debian vulnerability tracking

2009-01-06 Thread Jonas Andradas
Hello Sheldon, On Tue, Jan 6, 2009 at 21:34, Sheldon Hearn wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Hi folks, > > I work for an hosting provider, and am looking at how to improve > visibility into vulnerability exposure. > > We have over 800 Debian hosts that we manage for

Re: [Yaird-devel] Bug#496500: yaird: fails to create initrd when running 2.6.24 etchnhalf kernel

2008-09-17 Thread Jonas Smedegaard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Sep 12, 2008 at 09:44:35AM -0600, dann frazier wrote: >On Fri, Aug 29, 2008 at 11:51:38AM +0200, Jonas Smedegaard wrote: >> On Tue, Aug 26, 2008 at 10:33:00PM +0200, maximilian attems wrote: >> >On Mon, 25 Aug 2008, Jona

Re: [Yaird-devel] Bug#496500: yaird: fails to create initrd when running 2.6.24 etchnhalf kernel

2008-08-29 Thread Jonas Smedegaard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Aug 26, 2008 at 10:33:00PM +0200, maximilian attems wrote: >On Mon, 25 Aug 2008, Jonas Smedegaard wrote: > >> +1021_new-style_firewire.patch > >etch+half kernel has old ieee1394, no need for that one. Thanks for your con

Re: [Yaird-devel] Bug#496500: yaird: fails to create initrd when running 2.6.24 etchnhalf kernel

2008-08-25 Thread Jonas Smedegaard
On Mon, Aug 25, 2008 at 04:43:48PM +0200, Maximilian Attems wrote: On Mon, Aug 25, 2008 at 12:26 PM, Jonas Smedegaard <[EMAIL PROTECTED]> wrote: NB! Even if yaird really is "generally too buggy" as judged in bug#457177, the current release in unstable is far better than the v

Re: [Yaird-devel] Bug#496500: yaird: fails to create initrd when running 2.6.24 etchnhalf kernel

2008-08-25 Thread Jonas Smedegaard
recent Linux kernels whereas etch release don't). - Jonas - -- * Jonas Smedegaard - idealist og Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private -BEGIN PGP

Re: Why not have firewall rules by default?

2008-01-27 Thread Jonas Andradas
Hello, As Javier says: > See > > http://www.debian.org/doc/manuals/securing-debian-howto/ch-sec-services..en.html#s-firewall-setup > : > > Just in case somebody doesn't notice, there is a typo in this URL (double-dot), so I will post it correctly http://www.debian.org/doc/manuals/securing-debian

Re: large campus network ... sugestions

2007-12-15 Thread Jonas Andradas
ave the CA inside the Bluecoat appliance as a trusted CA, then your browser (or whatever program you are using) would complain. In Windows environments, to trust the Bluecoat's CA can be easily achieved by setting it that way in the Active Directory policies. Regards, Jonas. On Dec 15, 2007 4:

Re: large campus network ... sugestions

2007-12-15 Thread Jonas Andradas
appliances, which act as SSL ends, inspecting all traffic, and generating on the fly SSL certificates... Of course, they are not cheap at all... (maybe around $20.000 each). Best regards, Jonas. On Dec 15, 2007 8:53 AM, Roman Medina-Heigl Hernandez <[EMAIL PROTECTED]> wrote: > Hi Jonas, &

Re: large campus network ... sugestions

2007-12-14 Thread Jonas Andradas
quot; user... Or maybe I am wrong. Regards, Jonas Andradas On Dec 14, 2007 7:40 PM, Adrian Minta <[EMAIL PROTECTED]> wrote: > Tirla Adrian wrote: > > Hello, > > > > I`m currently one of the network administrators of a 3000+ students > > and i have some issues m

Re: large campus network ... sugestions

2007-12-14 Thread Jonas Andradas
For Layer-7 filtering, you could check Application Layer Packet Classifier for Linux: http://l7-filter.sourceforge.net/ Kernel Iptables Layer 7: http://l7-filter.sourceforge.net/HOWTO-kernel Best regards, Jonas Andradas. On Dec 14, 2007 6:53 PM, Roman Medina-Heigl Hernandez <[EM

Re: large campus network ... sugestions

2007-12-14 Thread Jonas Andradas
Hello Tirla, Please, find my reply inline with your response. On Dec 14, 2007 5:19 PM, Tirla Adrian <[EMAIL PROTECTED]> wrote: > hello Andradas, > > On Dec 14, 2007 1:31 PM, Jonas Andradas <[EMAIL PROTECTED]> wrote: > > Hello Adrian, > > > > I do no

Re: large campus network ... sugestions

2007-12-14 Thread Jonas Andradas
H by using Corkscrew. Once SSH is tunneled, almost anything can be tunneled through SSH. Maybe others can shed some more light on this, or even propose more adequate ideas and/or solutions. Best regards, Jonas Andradas On Dec 14, 2007 12:04 PM, Tirla Adrian <[EMAIL PROTECTED]> wrote:

Re: security.debian.org: MD5Sum mismatch

2007-08-17 Thread Jonas Andradas
Hello Lupe, how long have you noticed this mismatch? I mean, an update on the mirror could be taking place, and the Packages.bz2 file not yet been updated... Jonás. On 8/17/07, Lupe Christoph <[EMAIL PROTECTED]> wrote: > > Hi! > > I can't apt-get update testing/updates main: > > Failed to fetc

DSA 992-1 affecting other packages?

2006-03-15 Thread Jonas Smedegaard
suspect, however, that this could be dealt with differently for Debian (and I suspect this to be against policy, but is incapable technically to take up an argument about that). - Jonas -- * Jonas Smedegaard - idealist og Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk

Password authentication with LDAP and SSH

2006-01-31 Thread Jonas Liljenfeldt
Hello all, I run Debian Sarge and I have a problem with my SSH server (in combination with password authentication and LDAP). It doesn't work well with password authentication when I try to login as a LDAP user but it works well for users in /etc/passwd. If I try to login as a LDAP user via SSH an

Re: Mail processing tool

2004-01-26 Thread Jonas J Linde
And [EMAIL PROTECTED] spoke unto the world. And said: > From: Florent Rougon <[EMAIL PROTECTED]> >> Jonas J Linde <[EMAIL PROTECTED]> wrote: >> >> >> Procmail is a big tool, I need something different: small, reliable, >> >> secure. >>

Re: Mail processing tool

2004-01-26 Thread Jonas J Linde
And [EMAIL PROTECTED] spoke unto the world. And said: > From: Florent Rougon <[EMAIL PROTECTED]> >> Jonas J Linde <[EMAIL PROTECTED]> wrote: >> >> >> Procmail is a big tool, I need something different: small, reliable, >> >> secure. >>

Re: Mail processing tool

2004-01-25 Thread Jonas J Linde
And [EMAIL PROTECTED] spoke unto the world. And said: > From: "s. keeling" <[EMAIL PROTECTED]> >> Incoming from Jonas J Linde: >> > And [EMAIL PROTECTED] spoke unto the world. And said: >> > > I need a tool that does the following work: &

Re: Mail processing tool

2004-01-25 Thread Jonas J Linde
And [EMAIL PROTECTED] spoke unto the world. And said: > From: "s. keeling" <[EMAIL PROTECTED]> >> Incoming from Jonas J Linde: >> > And [EMAIL PROTECTED] spoke unto the world. And said: >> > > I need a tool that does the following work: &

Re: Mail processing tool

2004-01-25 Thread Jonas J Linde
you only wish to delete the mail from the server under certain conditions I guess you would need another tool to be called from procmail; no idea which tool that would be though. -- Jonas J Linde <[EMAIL PROTECTED]> http://www.

Re: Mail processing tool

2004-01-25 Thread Jonas J Linde
you only wish to delete the mail from the server under certain conditions I guess you would need another tool to be called from procmail; no idea which tool that would be though. -- Jonas J Linde <[EMAIL PROTECTED]> http://www.

Re: security.debian.org is down

2002-06-25 Thread Jonas Weismüller
> I can ping it, and I just did an apt-get update which connected fine. > Maybe it just came back up. Yes, it came back! Everything fine now ! ;-) Cheers Jonas -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a s

Re: security.debian.org is down

2002-06-25 Thread Jonas Weismüller
ages Could not connect to security.debian.org:21 (130.89.175.34), connection timed out Best regards Jonas -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

MySQL<->Firewall

2002-01-08 Thread Jonas
can access with phpmyadmin over the Internet?? And what ports on the ppp0 have I to open, that the local php-scripts can connect to the database ??? Thanks for your help! bye Jonas

MySQL<->Firewall

2002-01-08 Thread Jonas
can access with phpmyadmin over the Internet?? And what ports on the ppp0 have I to open, that the local php-scripts can connect to the database ??? Thanks for your help! bye Jonas -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Cont

Re: The unwanted fish...

2001-08-15 Thread Jonas bazz Egidius
From: "Martin Fluch" <[EMAIL PROTECTED]> > I'm running unstable and (maybe) a month ago I spoted a fish swiming over > my desktop from left to right, just a small one, just once. Today again. > > Does anybody know where this fish is coming from? (I'm a little bit > confused, since I have never req

Re: The unwanted fish...

2001-08-15 Thread Jonas bazz Egidius
From: "Martin Fluch" <[EMAIL PROTECTED]> > I'm running unstable and (maybe) a month ago I spoted a fish swiming over > my desktop from left to right, just a small one, just once. Today again. > > Does anybody know where this fish is coming from? (I'm a little bit > confused, since I have never re

Re: MASQUERADE

2001-06-15 Thread Jonas bazz Egidius
E Try: iptables -t nat -A POSTROUTING -s 192.168.0.0/255.255.255.0 -o eth0 -j SNAT --to-source 10.0.0.1 It works fine for me. -- IRL Jonas bazz Egidius IRC [EMAIL PROTECTED] CEL +46709841071 WEB http://bazz.nu ICQ 41245779 POP[EMAIL PROTECTED] JOB gronaverket.se VIM Yes, ofcourse!

Re: MASQUERADE

2001-06-15 Thread Jonas bazz Egidius
E Try: iptables -t nat -A POSTROUTING -s 192.168.0.0/255.255.255.0 -o eth0 -j SNAT --to-source 10.0.0.1 It works fine for me. -- IRL Jonas bazz Egidius IRC bazz@ZuhlNet CEL +46709841071 WEB http://bazz.nu ICQ 41245779 POP[EMAIL PROTECTED] JOB gronaverket.se

Re: SSH

2001-02-09 Thread Jonas Carlsson
Christian Hammers wrote: > > On Fri, Feb 09, 2001 at 03:28:11PM +0100, Jonas Carlsson wrote: > > Why does Debian only have SSH-1 not SSH-2 ? > It does not. > The ssh package at non-us.debian.org is ssh_2.3.0p1-1.11_i386.deb I have non-us.debian.org in my list. deb http://non-us

SSH

2001-02-09 Thread Jonas Carlsson
Why does Debian only have SSH-1 not SSH-2 ? Some restrictions or is it something else ? I have been recommended to use OpenSSH, version 2.3.0p1 instead of OpenSSH 1 // Jonas C

Re: SSH

2001-02-09 Thread Jonas Carlsson
Christian Hammers wrote: > > On Fri, Feb 09, 2001 at 03:28:11PM +0100, Jonas Carlsson wrote: > > Why does Debian only have SSH-1 not SSH-2 ? > It does not. > The ssh package at non-us.debian.org is ssh_2.3.0p1-1.11_i386.deb I have non-us.debian.org in my list. deb http:/

SSH

2001-02-09 Thread Jonas Carlsson
Why does Debian only have SSH-1 not SSH-2 ? Some restrictions or is it something else ? I have been recommended to use OpenSSH, version 2.3.0p1 instead of OpenSSH 1 // Jonas C -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Cont