Re: PaX on Debian

2006-01-26 Thread Martin G.H. Minkler
[EMAIL PROTECTED] wrote: Can everbody tell me where I can download PaX patch for debian kernel? Maybe look into a bigger / more complete solution such as http://www.grsecurity.net or SELinux? grsecurity is highly configurable, just use the PaX features if You like regards Martin -- To U

Re: IPChains and IPtables

2005-06-03 Thread Martin G.H. Minkler
Adam Majer wrote: This is not a newsgroup. Sorry, I'm subscribed to so many usenet groups via parallel-izing/synching mailing lists, I do lose track. Martin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: IPChains and IPtables

2005-06-03 Thread Martin G.H. Minkler
Oh, and please take this thread to debian-firewall, I think although it certainly is security-related, that newsgroup still is the better choice for firewall questions :-) Martin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: IPChains and IPtables

2005-06-03 Thread Martin G.H. Minkler
Alohá! justme wrote: I am new to IPChains and IPtables welcome to the wonderful world of shooting Yourself in the foot ;-) I don't know if it can change the IPCHAINS to something else? with 'apt-get update && apt-get install iptables' You should be able to get iptables which is the righfu

Re: Interpreting Snort SID 1 result

2005-05-06 Thread Martin G.H. Minkler
Jeremy Hewlett wrote: You can look at /etc/gen-msg.map for a listing of all the possible combinations you might see. The FAQ in section 4.32 also describes this. Must be a different than this one: http://www.snort.org/docs/faq/1Q05/node55.html I'm not sure if this is in the official manual or not

Interpreting Snort SID 1 result

2005-05-06 Thread Martin G.H. Minkler
Alohá! Not sure whether this belongs here but no one answered over at debian-firewall - I've had strange results in my snort logs that I can't really interpret, the sid 1 doesn't look like a "normal" snort result to me and the owner of the machine (which happens to be a large institution) says

Re: chkrootkit - possible bad news`

2004-02-24 Thread Martin G.H. Minkler
Alohá! Noah Meyerhans wrote: > On Tue, Feb 24, 2004 at 09:14:05AM +0200, Sneferu wrote: > >> Looks like there are a lot of false positives on it. >> > > > It looks like there are a lot of false positives with chkrootkit in > general. Seriously, has anybody here ever had chkrootkit detect an > a

Re: chkrootkit - possible bad news`

2004-02-24 Thread Martin G.H. Minkler
Alohá! Noah Meyerhans wrote: > On Tue, Feb 24, 2004 at 09:14:05AM +0200, Sneferu wrote: > >> Looks like there are a lot of false positives on it. >> > > > It looks like there are a lot of false positives with chkrootkit in > general. Seriously, has anybody here ever had chkrootkit detect an > ac

Re: getting started with SELinux

2003-11-28 Thread Martin G.H. Minkler
Alohá! A little OT, but http://www.adamantix.org 's distro provides everything and more SELinux has to offer while IMHO being a little easier to handle. Don't want to discourage anybody from SELinux, especially not with kernel 2.6 reaching production status, just my 2c ;-) best regards Mar

Re: getting started with SELinux

2003-11-28 Thread Martin G.H. Minkler
Alohá! A little OT, but http://www.adamantix.org 's distro provides everything and more SELinux has to offer while IMHO being a little easier to handle. Don't want to discourage anybody from SELinux, especially not with kernel 2.6 reaching production status, just my 2c ;-) best regards Martin

Re: Debian Stable server hacked

2003-08-14 Thread Martin G.H. Minkler
*** REPLY SEPARATOR *** On 12.08.2003 at 23:20 Adam Majer wrote: >On Thu, Aug 07, 2003 at 07:03:13PM +0200, Thijs Welman wrote: >> Hi, >> >> Thanks. I forgot to mantion that i am subscribed to >> debian-security-announce as well (ofcourse ;)). As far as the kernel >> updates

Re: Debian Stable server hacked

2003-08-13 Thread Martin G.H. Minkler
*** REPLY SEPARATOR *** On 12.08.2003 at 23:20 Adam Majer wrote: >On Thu, Aug 07, 2003 at 07:03:13PM +0200, Thijs Welman wrote: >> Hi, >> >> Thanks. I forgot to mantion that i am subscribed to >> debian-security-announce as well (ofcourse ;)). As far as the kernel >> updates