Re: SSH

2002-12-16 Thread Patrick Hsieh
erage: 0.03, 0.08, 0.02 Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91 1024D/F3662014 9ADF 6E3F 68DE 8DF8 4A67 0B54 6608 BAA8 F366 2014

Re: SSH

2002-12-16 Thread Patrick Hsieh
erage: 0.03, 0.08, 0.02 Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91 1024D/F3662014 9ADF 6E3F 68DE 8DF8 4A67 0B54 6608 BAA8 F366 2014 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a

Re: Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
O > > Another question is, is there any IPSEC-based VPDN solution? I mean, is there any PKI-based opensource VPDN solution? -- Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91 10

Re: Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
PKI is insecure? Another question is, is there any IPSEC-based VPDN solution? -- Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91 1024D/F3662014 9ADF 6E3F 68DE 8DF8 4A67 0B54 6608 BAA8 F366 2014

Re: Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
O > > Another question is, is there any IPSEC-based VPDN solution? I mean, is there any PKI-based opensource VPDN solution? -- Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91 10

Re: Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
PKI is insecure? Another question is, is there any IPSEC-based VPDN solution? -- Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91 1024D/F3662014 9ADF 6E3F 68DE 8DF8 4A67 0B54 6608 BAA8 F3

Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
Any tips/help would be apreciate.. > > > > > > Thanks in advance... > > > > > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91

Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
Any tips/help would be apreciate.. > > > > > > Thanks in advance... > > > > > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > >

Re: Bind issues

2002-11-14 Thread Patrick Hsieh
org 3. apply the patch 4. dpkg-buildpackage 5. dpkg -i bind*.deb is the method recommended? -- Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91

Re: Bind issues

2002-11-13 Thread Patrick Hsieh
org 3. apply the patch 4. dpkg-buildpackage 5. dpkg -i bind*.deb is the method recommended? -- Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Re: Bind issues

2002-11-13 Thread Patrick Hsieh
在 2002 十一月 14 星期四 12:45,Mike Dresser 寫道: > Any word from the security team on what's going on with potato's bind? > > Mike http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469 http://www.isc.org/products/BIND/bind-security.html Is the Woody bind also vuln

Re: Bind issues

2002-11-13 Thread Patrick Hsieh
ind also vulnerable? -- Patrick Hsieh<[EMAIL PROTECTED]> GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Squid Proxy Cache Security Update Advisory SQUID-2002:3

2002-07-04 Thread Patrick Hsieh
http://www.squid-cache.org/Advisories/SQUID-2002_3.txt Is there anyone working around this problem? -- Patrick Hsieh <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Squid Proxy Cache Security Update Advisory SQUID-2002:3

2002-07-04 Thread Patrick Hsieh
Duane Wessels, for fixes to the MSNT auth helper __ Revision history: 2002-07-03 21:10 GMT Initial release __________ END -- Patrick Hsieh <[EMAIL PROTECTED]> --

Re: Quality of security assurance with Debian vs. RedHat vs. SuSE

2002-06-12 Thread Patrick Hsieh
oody/Sid are > always fun to play with. > > Viva la Debian! > > -Brad Beck > 'vehement debian advocate' > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- Patrick

Using GnuPG or S/MIME?

2002-05-30 Thread Patrick Hsieh
Hello, We are condisering to use GnuPG or S/MIME to encrypt or sign the email in the company. Can someone give me any advice or suggestion? -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Using GnuPG or S/MIME?

2002-05-30 Thread Patrick Hsieh
Hello, We are condisering to use GnuPG or S/MIME to encrypt or sign the email in the company. Can someone give me any advice or suggestion? -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Re: syn flood attacked?

2002-05-17 Thread Patrick Hsieh
t; To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > > > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: syn flood attacked?

2002-05-17 Thread Patrick Hsieh
t; > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > > > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

syn flood attacked?

2002-05-17 Thread Patrick Hsieh
connection, I lots of ms2:~# netstat -ant | grep SYN_RECV | wc -l 2539 Am I being syn flood attacked? How can I get rid of this? -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subj

syn flood attacked?

2002-05-17 Thread Patrick Hsieh
connection, I lots of ms2:~# netstat -ant | grep SYN_RECV | wc -l 2539 Am I being syn flood attacked? How can I get rid of this? -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subj

Re: register_globals in php4

2002-05-09 Thread Patrick Hsieh
gt; in short, register_globals=off means that if you want to use the "id" > variable passed in the query string by the browser, you would access it as > $HTTP_GET_VARS['id'], or $_GET['id'] in 4.1+, rather than $id. more info > at http://www.php.net/manual/en/l

register_globals in php4

2002-05-09 Thread Patrick Hsieh
s it work if user just change the value in the URL directly and send the url directly to web server? How can we avoid the malicious attack by directly http GET/POST with modified parameter values to make possible system error or compromise? -- Patrick Hsieh <[EMAIL PROTECTED]> GPG publi

Re: register_globals in php4

2002-05-09 Thread Patrick Hsieh
gt; in short, register_globals=off means that if you want to use the "id" > variable passed in the query string by the browser, you would access it as > $HTTP_GET_VARS['id'], or $_GET['id'] in 4.1+, rather than $id. more info > at http://www.php.net/manual/en/l

how to use -j DROPLOG in iptables?

2002-05-08 Thread Patrick Hsieh
Any way to deal with that? -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: tcp syn flood and /proc configuration

2002-05-07 Thread Patrick Hsieh
is seriously misconfigured. On Tue, 7 May 2002 17:39:12 +0200 Vincent Hanquez <[EMAIL PROTECTED]> wrote: > On Tue, May 07, 2002 at 10:26:43PM +0800, Patrick Hsieh wrote: > > Hello list, > > > > Is there anyone having any suggestion to tune the /proc/sys/net/ipv4/* >

Re: tcp syn flood and /proc configuration

2002-05-07 Thread Patrick Hsieh
is seriously misconfigured. On Tue, 7 May 2002 17:39:12 +0200 Vincent Hanquez <[EMAIL PROTECTED]> wrote: > On Tue, May 07, 2002 at 10:26:43PM +0800, Patrick Hsieh wrote: > > Hello list, > > > > Is there anyone having any suggestion to tune the /proc/sys/net/ipv4/* >

tcp syn flood and /proc configuration

2002-05-07 Thread Patrick Hsieh
hly appreciated. -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

tcp syn flood and /proc configuration

2002-05-07 Thread Patrick Hsieh
hly appreciated. -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

ssh channel bug and woody update

2002-03-08 Thread Patrick Hsieh
-free -- Patrick Hsieh <[EMAIL PROTECTED]>

ssh channel bug and woody update

2002-03-08 Thread Patrick Hsieh
-free -- Patrick Hsieh <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

mutt security update

2002-01-02 Thread Patrick Hsieh
Hello, There is a security announcement of mutt at http://marc.theaimsgroup.com/?l=mutt-users&m=100991780311807&w=2 Is there new mutt update .deb package available? -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg

mutt security update

2002-01-02 Thread Patrick Hsieh
Hello, There is a security announcement of mutt at http://marc.theaimsgroup.com/?l=mutt-users&m=100991780311807&w=2 Is there new mutt update .deb package available? -- Patrick Hsieh <[EMAIL PROTECTED]> GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg -- To UNSUBSC

postfix DoS problem

2001-12-17 Thread Patrick Hsieh
Hello list, Is postfix 0.0.2005.S(woody) also vulernable? -- Patrick Hsieh <[EMAIL PROTECTED]>

postfix DoS problem

2001-12-17 Thread Patrick Hsieh
Hello list, Is postfix 0.0.2005.S(woody) also vulernable? -- Patrick Hsieh <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Patrick Hsieh
-- Patrick Hsieh--<[EMAIL PROTECTED]>

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Patrick Hsieh
Hi, try iptraf, apt-get install iptraf -- Patrick Hsieh--<[EMAIL PROTECTED]>

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Patrick Hsieh
-- Patrick Hsieh--<[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Network traffic monitoring. (which IP makes big traffic?)

2001-12-06 Thread Patrick Hsieh
Hi, try iptraf, apt-get install iptraf -- Patrick Hsieh--<[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: [SECURITY] [DSA-090-1] xtel symlink vulnerabilities

2001-12-05 Thread Patrick Hsieh
sorry. This is my mistake. I intended to ask the openssh problem but replied to another thread. :-( -- Patrick Hsieh <[EMAIL PROTECTED]>

Re: [SECURITY] [DSA-090-1] xtel symlink vulnerabilities

2001-12-05 Thread Patrick Hsieh
Hello, Is OpenSSH Version: 1:2.9p2-6 also vulernable? -- Patrick Hsieh <[EMAIL PROTECTED]>

Re: [SECURITY] [DSA-090-1] xtel symlink vulnerabilities

2001-12-05 Thread Patrick Hsieh
sorry. This is my mistake. I intended to ask the openssh problem but replied to another thread. :-( -- Patrick Hsieh <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: [SECURITY] [DSA-090-1] xtel symlink vulnerabilities

2001-12-05 Thread Patrick Hsieh
Hello, Is OpenSSH Version: 1:2.9p2-6 also vulernable? -- Patrick Hsieh <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]