Re: Secure Email, Secure FTP ?

2000-08-15 Thread Derek Martin
Today, Benjamin Scott gleaned this insight: > To do so, configure your SSH client to forward local TCP port 110 (which is > POP3) to remote server TCP port 110. Do the same for TCP port 25 (SMTP). > Then point your mail client to "localhost" for its mail servers. SSH will > forward the conn

Re: A DMZ/Firewall Question

2000-08-15 Thread Derek Martin
Yesterday, Dave Nichols gleaned this insight: > Folks, > > Just a question coming out of some work I'm doing today. I was always > taught a double Firewall surrounded a TRUE DMZ (one in front, one in back). > > I see more and more people representing DMZ's coming off a SINGLE firewall, > the s

Re: Secure Email, Secure FTP ?

2000-08-15 Thread Benjamin Scott
On Tue, 15 Aug 2000, Robert W. Fowler wrote: > since i have SSL/SSH installed and working properly , how would i use it to > secure my Email transactions ? Well, general Internet email is inherently insecure, so this is almost a lost cause. But you can at least protect access to the accounts o

Secure Email, Secure FTP ?

2000-08-15 Thread Robert W. Fowler
hi All. since i have SSL/SSH installed and working properly , how would i use it to secure my Email transactions ? ive been tinkering around using SecureFX for {FTP} and it works Great but i still have a vunerable ftp server hangin out there on the net ... since SecureFX basically secures your lo

Re: A DMZ/Firewall Question

2000-08-15 Thread Kenneth E. Lussier
Dave, It all depends on the needs of the customer, and how much they want to spend. You can actually achieve the same effect with one firewall as you get with two depending on how it is set up. Kenny Dave Nichols wrote: > > Folks, > > Just a question coming out of some work I'm doing today.

Re: A DMZ/Firewall Question

2000-08-15 Thread Bruce Dawson
I believe there's a difference between what I call a "logical" firewall and a "physical" one. The physical one being separate boxes with separate segments coming out of them (segments == wires); usually just routers. A logical one can have one (or more) segments with one or more networks on each s

Rebuttal to Moody's "Linux Sux"

2000-08-15 Thread Benjamin Scott
This is old news, but I just read this particular rebuttal, and I loved the closing lines so much I just had to post them. List regulars will remember the, um, discussion [1] last week about Fred Moody's "Linux Sux Redux" article [2], which had some, um, factual errors in it. SecurityFocus.

Re: [Fwd: Debian GNU/Linux 2.2, the "Joel 'Espy' Klecker" release]

2000-08-15 Thread Benjamin Scott
On Tue, 15 Aug 2000, Tony Lambiris wrote: > They have had official CD's ever since VA Linux started sponsering them. I > bought my Debian CD (2.1) in the Mall of NH, at PlanetX, so they will > probably get the latest release in as well. AFAIK, all they do right now is provide an "Official ISO I

Re: [Fwd: Debian GNU/Linux 2.2, the "Joel 'Espy' Klecker" release]

2000-08-15 Thread Tony Lambiris
They have had official CD's ever since VA Linux started sponsering them. I bought my Debian CD (2.1) in the Mall of NH, at PlanetX, so they will probably get the latest release in as well. Benjamin Scott wrote: > On Tue, 15 Aug 2000, Randy Edwards wrote: > > The Debian Project is pleased to ann

Work on Apache projects at Lotus/IBM!

2000-08-15 Thread David_Marston
The LotusXSL Team needs a buildmeister with good Linux/Unix familiarity. Most of the team's work is delivered as open source software via the Apache Software Foundation. To see it, look for "Xalan" at xml.apache.org. Right now, we need better automated processes and more Linux expertise, particula

Concord, New Hampshire software jobs

2000-08-15 Thread Larry Cook
Sybase in Concord, New Hampshire has multiple job openings. SOFTWARE DEVELOPMENT ENGINEERS (two): One to design and develop our web presentation framework in our Enterprise Portal product (C++, Java, HTML, XML) and the other to design and d

A DMZ/Firewall Question

2000-08-15 Thread Dave Nichols
Folks, Just a question coming out of some work I'm doing today. I was always taught a double Firewall surrounded a TRUE DMZ (one in front, one in back). I see more and more people representing DMZ's coming off a SINGLE firewall, the same one which protects the corporate jewels... and implementi

Re: firewall question

2000-08-15 Thread Kenneth E. Lussier
Sorry, I thought that my feelings on Rob Zeiglers firewall tool were quite well known on the list. But for the benefit of those who are just joinig us, here is a brief synopsis: 1) The scripts are bloated with a lot of un-needed crap that can lead to exploits 2) In his book, Rob admits "I don't

Re: firewall question

2000-08-15 Thread Dave Seidel
That's not a very helpful statement. Care to share with us *why* you wouldn't trust the script, or should we just take your word for it? -- Dave On Tue, 15 Aug 2000 12:00:34 -0400, Kenneth E. Lussier said: > Linux-firewall-tools.com is Rob Zeiglers website. I wouldn't > trust my system to be

Hard Lock

2000-08-15 Thread Kenneth E. Lussier
All, I have a VA Fullon 2230 2u system that has issues. The system randomly goes into a hard lock (no input, output, or errors in the logs). I can recreate the error by forcing heavy disk I/O ( a large tar job usually does it), but it also does it on it's own for no apparent reason. At first I th

Re: [OFF-TOPIC] Commentary on Intel (was: ABit BP6)

2000-08-15 Thread Derek Martin
On Tue, 15 Aug 2000, Benjamin Scott wrote: BS> For example, Panasonic makes a voice mail system that comes in a two-port BS> version and a four-port version. The difference is the license key. And the BS> price tag. And they put a sticker labeled "DO NOT USE" over ports three and BS> four on

Re: firewall question

2000-08-15 Thread Kenneth E. Lussier
Linux-firewall-tools.com is Rob Zeiglers website. I wouldn't trust my system to be protected by that script. Kenny Charles Farinella wrote: > > On Mon, 14 Aug 2000, cdowns wrote: > > > > what i dont understand is why you are listening on port 81 -> > > $ext_address and masqing to and internal

Re: [OFF-TOPIC] Commentary on Intel (was: ABit BP6)

2000-08-15 Thread Benjamin Scott
On Tue, 15 Aug 2000, Derek Martin wrote: > I read an article somewhere about this, and the only reason they didn't > was because it would have been cost-prohibitive to rip out the SMP core. That is true, but they still could have come up with a more sophisticated way to do it, without a big pri

Re: Last nights SLUG meeting

2000-08-15 Thread Ed Lawson
On Tue, 15 Aug 2000, Jerry Kubeck wrote: > Well, all I can say to those who missed last nights presentation by John > Terpstra, you missed the best speaker we have had in the two years I have > been associated with GNHLUG. > Here I was feeling badly due to business forcing me to miss this meeting

Re: [Fwd: Debian GNU/Linux 2.2, the "Joel 'Espy' Klecker" release]

2000-08-15 Thread Benjamin Scott
On Tue, 15 Aug 2000, Randy Edwards wrote: > The Debian Project is pleased to announce the latest release of the > Debian GNU/Linux Operating System. Whohoo! I've been waiting for that for like two years! > This release has been in development for approximately 18 months ... *ahem* ;-) >

Re: [OFF-TOPIC] Commentary on Intel (was: ABit BP6)

2000-08-15 Thread Derek Martin
On Tue, 15 Aug 2000, Benjamin Scott wrote: > I actually think Intel did us a favor with this one. They could easily have > developed a more sophisticated method of disabling SMP on the Celery, but they > didn't. Maybe there are a few friendly engineers somewhere inside Intel. I read an artic

Re: ABit BP6

2000-08-15 Thread Phillip Ezolt
For the record, I had lockup problems too. I switched my western digital drive from using the "normal" master setting to use the "alternate" master setting. After that, things worked fine. (Both settings were documented.) --Phil Compaq: High Performance Server Division/Benchmark Performance

Re: X-window Problem with I810 Video Chip Set

2000-08-15 Thread Benjamin Scott
On Mon, 14 Aug 2000, Brice Gibson wrote: >> I am having a major problem getting Rehat 6.2 and TurboLinux 6.0 to run = >> X-Windows on a Dell OptiPlex GX110 which is using Intel's 810 chip set = >> for SVGA display. > > I am wondering if I have a similar problem I don't think so. If you had

[Fwd: Debian GNU/Linux 2.2, the "Joel 'Espy' Klecker" release]

2000-08-15 Thread Randy Edwards
Thought some folks here might be interested in this (okay, so it's propaganda, but at least it's non-commercial, free software propaganda:-). --Randy Original Message Subject: Debian GNU/Linux 2.2, the "Joel 'Espy' Klecker" release --

[OFF-TOPIC] Commentary on Intel (was: ABit BP6)

2000-08-15 Thread Benjamin Scott
On Mon, 14 Aug 2000, Derek Martin wrote: > There's nothing preventing a Celeron from proper SMP out of the box other > than Intel's greed -- the workaround is simple for both types of > processors. It is standard practice in many industries to charge "high-end" customers more to subsidize "low-

Last nights SLUG meeting

2000-08-15 Thread Jerry Kubeck
Well, all I can say to those who missed last nights presentation by John Terpstra, you missed the best speaker we have had in the two years I have been associated with GNHLUG. Here's Rick Petree's take on John "That was an OUTSTANDING meeting tonight. The turnout was great and John was very perso

Re: firewall question

2000-08-15 Thread Charles Farinella
On Mon, 14 Aug 2000, cdowns wrote: > > what i dont understand is why you are listening on port 81 -> > $ext_address and masqing to and internal machine at port 80 -> > $int_address ? are you running this for a special reason ? This is a generic script I got off the linux-firewalls-tools.com site