RE: [Leaf-user] Changes for new Dachstein release

I would request for bind-8 to be put on the next Dachstein CD. Thank you. ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user

Re: [Leaf-user] Changes for new Dachstein release

It is a simple request. Would you please provide both /mnt/floppy and /mnt/cdrom mounting points? Thanks, Greg ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user

Re: [Leaf-user] Changes for new Dachstein release

> The SANS site http://www.sans.org/dosstep/ list some IP's that should be > blocked from leaving a firewall. The code in the stopMartians function > of (Dachstein) ipfilter.conf blocks all but one of the addresses listed > in that document. The exception is > > 192.0.2.0/24- TEST-NET > >

Re: [Leaf-user] Changes for new Dachstein release

> I compiled the 1.1 version of psentry. If Charles consider to include > psentry.lrp, I'd suggest to use this package: > http://leaf.sourceforge.net/devel/sminola/files/packages/psentry.lrp > > If Charles is really going to include MY package, I definitely must update > the help and version files

RE: [Leaf-user] Changes for new Dachstein release

On Behalf Of Simon Bolduc > Sent: Thursday, April 11, 2002 7:47 PM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: Re: [Leaf-user] Changes for new Dachstein release > > > I'm not sure if this would be possible but: > > > S > > > &

RE: [Leaf-user] Changes for new Dachstein release

Hi Victor, hi Charles, hi all > My wish list of programs to be included on the next DCD version include > xntp.lrp and psentry.lrp both from > http://leaf.sourceforge.net/devel/ddouthitt/packages/ Yes, I agree with Victor, PortSentry is really a very useful tool and doesn't need much space. I che

Re: [Leaf-user] Changes for new Dachstein release

> Please replace root.bb.links and the call in linuxrc with > busybox -s install in linuxrc - makes life easier, if someone uses > his own busybox configuration (Config.h). Anyone know a simple way to do this and still eliminate the links when backing up root? > Use tinylogin instead the POSIXne

Re: [Leaf-user] Changes for new Dachstein release

Mike Noyes assured me that my message would not bounce. So I am including the whole checkdisk weblet script. I added one more thing to search for and that is floppy drives. Ideally, I don't think you'd want to leave your media mounted. (crack could be run on the shadow password file because t

Re: [Leaf-user] Changes for new Dachstein release

Charles Steinkuehler wrote: > > > > - Alter weblet disk-checking script to ignore CD-ROM (always 100% full) > > > > I am not following the weblet CD-ROM issue. I am running weblet 1.2.0 > > off of DCD 1.0.2. I've clicked all around on the weblet web pages and I > > do not see where the CD-ROM i

Re: [Leaf-user] Changes for new Dachstein release

Quoting Simon Bolduc <[EMAIL PROTECTED]>: > I'm not sure if this would be possible but: > > Wouldn't it be possible to do a reverse lookup on all blocked IPs (via a > script) when they are blocked, add it to a file, and then every few > hours do another lookup to see if the FQDN associated with

Re: [Leaf-user] Changes for new Dachstein release

remove it from list)? This does of course assume that the FQDN associated with a dynamic IP changes when the lease does. S >From: KP Kirchdörfer <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: Victor McAllister <[EMAIL PROTECTED]>, [EMAIL PROTECTED] >Subject: Re: [Le

Re: [Leaf-user] Changes for new Dachstein release

> I thought about portsentry as well, but found it's not a good idea to > block ports based on ip-addresses. > Please correct me, if I understood portsentry wrong; I'm willing to > add it as soon as possible, if it's handling dynamic addresses > without problems. Port-sentry and similar atomat

Re: [Leaf-user] Changes for new Dachstein release

Am Donnerstag, 11. April 2002 17:48 schrieb Doug Hite: > I'm not wanting this to get out of hand ... but ... > my wish list of programs to be included on the next DCD version > include > > ez-ipupd.lrp > I agree ez-ipupd.lrp is a must have on a CD. Additionally and as alternative for those who d

Re: [Leaf-user] Changes for new Dachstein release

Am Donnerstag, 11. April 2002 07:46 schrieb Victor McAllister: > My wish list of programs to be included on the next DCD version > include xntp.lrp and psentry.lrp both from > http://leaf.sourceforge.net/devel/ddouthitt/packages/ I've built a dachstein 1.0.2 based CD with glibc 2.1.3. Among other

[Leaf-user] Changes for new Dachstein release

I'm not wanting this to get out of hand ... but ... my wish list of programs to be included on the next DCD version include ez-ipupd.lrp The newest version I think is at http://leaf.sourceforge.net/devel/jnilo/packages/ez-ipupd.lrp Docs at http://leaf.sourceforge.net/devel/jnilo/ezipupd.html

[Leaf-user] Changes for new Dachstein release

My wish list of programs to be included on the next DCD version include xntp.lrp and psentry.lrp both from http://leaf.sourceforge.net/devel/ddouthitt/packages/ I hate to have to reboot my DSD box - uptime 123 days - but I am looking forward to the changes Charles is preparing. Thanks - great wo

RE: [Leaf-user] Changes for new Dachstein release

eve PS Dachstein rocks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Charles Steinkuehler Sent: Friday, April 05, 2002 8:07 AM To: [EMAIL PROTECTED] Subject: [Leaf-user] Changes for new Dachstein release It looks like it's getting to be tim

Re: [Leaf-user] Changes for new Dachstein release

> > - Alter weblet disk-checking script to ignore CD-ROM (always 100% full) > > I am not following the weblet CD-ROM issue. I am running weblet 1.2.0 > off of DCD 1.0.2. I've clicked all around on the weblet web pages and I > do not see where the CD-ROM is reported at all. If you mount the CD-R

Re: [Leaf-user] Changes for new Dachstein release

Greg Morgan wrote: > > "Charles Steinkuehler" <[EMAIL PROTECTED]> wrote: [ snip ] > > - Alter weblet disk-checking script to ignore CD-ROM (always 100% full) > > I am not following the weblet CD-ROM issue. I am running weblet 1.2.0 > off of DCD 1.0.2. I've clicked all around on the weblet w

Re: [Leaf-user] Changes for new Dachstein release

"Charles Steinkuehler" <[EMAIL PROTECTED]> wrote: > It looks like it's getting to be time for a new Dachstein release. There > are a number of minor bugs to fix in the system scripts, and (more > importantly) security updates to some of the packages on the CD (SNMP and > libz). > > My current

Re: [Leaf-user] Changes for new Dachstein release

Charles, a coupl'a suggestions for your list... - (in case it were to slip through) network.conf: the non-need for -a, -P, -L, etc parms in INTERN_SERVERx - possibly consider a dhclient that supports releasing one's ip address - my guess is that dhclient v3 will be approx 24k more than the cu

Re: [Leaf-user] Changes for new Dachstein release

The SANS site http://www.sans.org/dosstep/ list some IP's that should be blocked from leaving a firewall. The code in the stopMartians function of (Dachstein) ipfilter.conf blocks all but one of the addresses listed in that document. The exception is 192.0.2.0/24- TEST-NET ipfilter.conf

Re: [Leaf-user] Changes for new Dachstein release

Am Freitag, 5. April 2002 17:07 schrieb Charles Steinkuehler: > It looks like it's getting to be time for a new Dachstein release. > There are a number of minor bugs to fix in the system scripts, and > (more importantly) security updates to some of the packages on the > CD (SNMP and libz). Charl

Re: [Leaf-user] Changes for new Dachstein release

Jason Low wrote: > It sounds like a good time to make a request. On the web page interface I > have looked around for the IP address of eth0. Maybe it there already but > I didn't find it. > > Thanks > Jason It is already in Weblet In the little box in the Upper Left Hand Corner Click on the N

Re: [Leaf-user] Changes for new Dachstein release

It sounds like a good time to make a request. On the web page interface I have looked around for the IP address of eth0. Maybe it there already but I didn't find it. Thanks Jason ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourcef

Re: [Leaf-user] Changes for new Dachstein release

> Please, allow me to request two (2) enhancements to DCD that I would > like to see: > > [1] last > > I would really like to know when that user logged on, how long they were > on and whether or not they are still on. > > [2] ps > > I would like to use some att or ucb optional arguments, which wo

Re: [Leaf-user] Changes for new Dachstein release

Charles Steinkuehler wrote: > > It looks like it's getting to be time for a new Dachstein release. There > are a number of minor bugs to fix in the system scripts, and (more > importantly) security updates to some of the packages on the CD (SNMP and > libz). [ snip ] Please, allow me to reque

Re: [Leaf-user] Changes for new Dachstein release

> I know that I have addressed several of these items over these past > months. > > In fact, I spent some time addressing that space check multicron item; > but, I didn't get any feedback from you: > Please, comment > and I will attempt to c

Re: [Leaf-user] Changes for new Dachstein release

Charles, et al. => I know that I have addressed several of these items over these past months. In fact, I spent some time addressing that space check multicron item; but, I didn't get any feedback from you: Please, comment and I will attem

Re: [Leaf-user] Changes for new Dachstein release

> why put powerful tool like tcpdump? if the box is compromised the bad guy > has this tool. Yeah, but I use tcpdump all the time, so I put it on the CD. Remember, if the box is compromisied, you're kind of hosed anyway...especially if you've got anything like ssh running, which can be easily us

RE: [Leaf-user] Changes for new Dachstein release

PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Charles Steinkuehler Sent: Friday, April 05, 2002 9:07 AM To: [EMAIL PROTECTED] Subject: [Leaf-user] Changes for new Dachstein release It looks like it's getting to be time for a new Dachstein release. There are a number of minor bugs to fix i

Re: [Leaf-user] Changes for new Dachstein release

Dachstein is great but why put powerful tool like tcpdump? if the box is compromised the bad guy has this tool. It will be great to find docs like the one that explain Ipsec with x509 included in the CD. what about including the package keyboard.lrp (found in oxygen, I think)? and... I canno

Re: [Leaf-user] Changes for new Dachstein release

Charles> An excellent suggestion, and I fully intend for the next Charles> major release to have completely re-worked network scripts, Charles> and the firewalling stuff will be seperated from basic Charles> network setup (with support for the users choice of firewall Charles> scripts, like shore

Re: [Leaf-user] Changes for new Dachstein release

> I'd like to see the monster network configuration script broken up > more into seperate modules and sections. > > The main config file would have the options to turn on and off various > settings. There would be additional files for: > > local DNS definitions > DMZ setup > PPP, PPPOE, WAN

Re: [Leaf-user] Changes for new Dachstein release

I'd like to see the monster network configuration script broken up more into seperate modules and sections. The main config file would have the options to turn on and off various settings. There would be additional files for: local DNS definitions DMZ setup PPP, PPPOE, WAN links Port F

Re: [Leaf-user] Changes for new Dachstein release

> Package updates: > libz > snmp There are newer versions of the ssh packages available, as well... Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Leaf-user mailing list [EMAIL PROTECTED] h