Re: [Leaf-user] Changes for new Dachstein release

2002-04-21 Thread Greg Morgan
It is a simple request. Would you please provide both /mnt/floppy and /mnt/cdrom mounting points? Thanks, Greg ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user

RE: [Leaf-user] Changes for new Dachstein release

2002-04-16 Thread Sandro Minola
Hi Victor, hi Charles, hi all My wish list of programs to be included on the next DCD version include xntp.lrp and psentry.lrp both from http://leaf.sourceforge.net/devel/ddouthitt/packages/ Yes, I agree with Victor, PortSentry is really a very useful tool and doesn't need much space. I

RE: [Leaf-user] Changes for new Dachstein release

2002-04-16 Thread Sandro Minola
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Leaf-user] Changes for new Dachstein release I'm not sure if this would be possible but: S From: KP Kirchdörfer [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Victor McAllister [EMAIL PROTECTED], [EMAIL PROTECTED

Re: [Leaf-user] Changes for new Dachstein release

2002-04-16 Thread Charles Steinkuehler
I compiled the 1.1 version of psentry. If Charles consider to include psentry.lrp, I'd suggest to use this package: http://leaf.sourceforge.net/devel/sminola/files/packages/psentry.lrp If Charles is really going to include MY package, I definitely must update the help and version files in

Re: [Leaf-user] Changes for new Dachstein release

2002-04-15 Thread Charles Steinkuehler
Please replace root.bb.links and the call in linuxrc with busybox -s install in linuxrc - makes life easier, if someone uses his own busybox configuration (Config.h). Anyone know a simple way to do this and still eliminate the links when backing up root? Use tinylogin instead the POSIXness

Re: [Leaf-user] Changes for new Dachstein release

2002-04-12 Thread Greg Morgan
Charles Steinkuehler wrote: - Alter weblet disk-checking script to ignore CD-ROM (always 100% full) I am not following the weblet CD-ROM issue. I am running weblet 1.2.0 off of DCD 1.0.2. I've clicked all around on the weblet web pages and I do not see where the CD-ROM is reported

Re: [Leaf-user] Changes for new Dachstein release

2002-04-12 Thread Greg Morgan
Mike Noyes assured me that my message would not bounce. So I am including the whole checkdisk weblet script. I added one more thing to search for and that is floppy drives. Ideally, I don't think you'd want to leave your media mounted. (crack could be run on the shadow password file because

Re: [Leaf-user] Changes for new Dachstein release

2002-04-11 Thread KP Kirchdörfer
Am Donnerstag, 11. April 2002 07:46 schrieb Victor McAllister: My wish list of programs to be included on the next DCD version include xntp.lrp and psentry.lrp both from http://leaf.sourceforge.net/devel/ddouthitt/packages/ I've built a dachstein 1.0.2 based CD with glibc 2.1.3. Among other

Re: [Leaf-user] Changes for new Dachstein release

2002-04-11 Thread KP Kirchdörfer
Am Donnerstag, 11. April 2002 17:48 schrieb Doug Hite: I'm not wanting this to get out of hand ... but ... my wish list of programs to be included on the next DCD version include ez-ipupd.lrp I agree ez-ipupd.lrp is a must have on a CD. Additionally and as alternative for those who don't

Re: [Leaf-user] Changes for new Dachstein release

2002-04-11 Thread Charles Steinkuehler
I thought about portsentry as well, but found it's not a good idea to block ports based on ip-addresses. snip Please correct me, if I understood portsentry wrong; I'm willing to add it as soon as possible, if it's handling dynamic addresses without problems. Port-sentry and similar

Re: [Leaf-user] Changes for new Dachstein release

2002-04-11 Thread Simon Bolduc
it from list)? This does of course assume that the FQDN associated with a dynamic IP changes when the lease does. S From: KP Kirchdörfer [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Victor McAllister [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: [Leaf-user] Changes for new Dachstein release

Re: [Leaf-user] Changes for new Dachstein release

2002-04-11 Thread nephilim
Quoting Simon Bolduc [EMAIL PROTECTED]: I'm not sure if this would be possible but: Wouldn't it be possible to do a reverse lookup on all blocked IPs (via a script) when they are blocked, add it to a file, and then every few hours do another lookup to see if the FQDN associated with the

Re: [Leaf-user] Changes for new Dachstein release

2002-04-10 Thread Charles Steinkuehler
- Alter weblet disk-checking script to ignore CD-ROM (always 100% full) I am not following the weblet CD-ROM issue. I am running weblet 1.2.0 off of DCD 1.0.2. I've clicked all around on the weblet web pages and I do not see where the CD-ROM is reported at all. If you mount the CD-ROM,

RE: [Leaf-user] Changes for new Dachstein release

2002-04-10 Thread Steve Fink
Charles et al, If I may I'd like to request that this functionality be added to Charles' network.conf scripts. My configuration currently is as follows: eth0 external-ip1 external-ip2 eth1

Re: [Leaf-user] Changes for new Dachstein release

2002-04-09 Thread Greg Morgan
Charles Steinkuehler [EMAIL PROTECTED] wrote: It looks like it's getting to be time for a new Dachstein release. There are a number of minor bugs to fix in the system scripts, and (more importantly) security updates to some of the packages on the CD (SNMP and libz). My current ToDo list

Re: [Leaf-user] Changes for new Dachstein release

2002-04-09 Thread Michael D. Schleif
Greg Morgan wrote: Charles Steinkuehler [EMAIL PROTECTED] wrote: [ snip ] - Alter weblet disk-checking script to ignore CD-ROM (always 100% full) I am not following the weblet CD-ROM issue. I am running weblet 1.2.0 off of DCD 1.0.2. I've clicked all around on the weblet web pages

Re: [Leaf-user] Changes for new Dachstein release

2002-04-07 Thread ske
Charles, a coupl'a suggestions for your list... - (in case it were to slip through) network.conf: the non-need for -a, -P, -L, etc parms in INTERN_SERVERx - possibly consider a dhclient that supports releasing one's ip address - my guess is that dhclient v3 will be approx 24k more than the

Re: [Leaf-user] Changes for new Dachstein release

2002-04-06 Thread David T . Price
The SANS site http://www.sans.org/dosstep/ list some IP's that should be blocked from leaving a firewall. The code in the stopMartians function of (Dachstein) ipfilter.conf blocks all but one of the addresses listed in that document. The exception is 192.0.2.0/24- TEST-NET ipfilter.conf

Re: [Leaf-user] Changes for new Dachstein release

2002-04-05 Thread Charles Steinkuehler
Package updates: libz snmp There are newer versions of the ssh packages available, as well... Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Leaf-user mailing list [EMAIL PROTECTED]

Re: [Leaf-user] Changes for new Dachstein release

2002-04-05 Thread John Stoffel
I'd like to see the monster network configuration script broken up more into seperate modules and sections. The main config file would have the options to turn on and off various settings. There would be additional files for: local DNS definitions DMZ setup PPP, PPPOE, WAN links Port

Re: [Leaf-user] Changes for new Dachstein release

2002-04-05 Thread Charles Steinkuehler
I'd like to see the monster network configuration script broken up more into seperate modules and sections. The main config file would have the options to turn on and off various settings. There would be additional files for: local DNS definitions DMZ setup PPP, PPPOE, WAN links

Re: [Leaf-user] Changes for new Dachstein release

2002-04-05 Thread antonio . pallua
Dachstein is great but why put powerful tool like tcpdump? if the box is compromised the bad guy has this tool. It will be great to find docs like the one that explain Ipsec with x509 included in the CD. what about including the package keyboard.lrp (found in oxygen, I think)? and... I

Re: [Leaf-user] Changes for new Dachstein release

2002-04-05 Thread Charles Steinkuehler
why put powerful tool like tcpdump? if the box is compromised the bad guy has this tool. Yeah, but I use tcpdump all the time, so I put it on the CD. Remember, if the box is compromisied, you're kind of hosed anyway...especially if you've got anything like ssh running, which can be easily

Re: [Leaf-user] Changes for new Dachstein release

2002-04-05 Thread Charles Steinkuehler
Please, allow me to request two (2) enhancements to DCD that I would like to see: [1] last I would really like to know when that user logged on, how long they were on and whether or not they are still on. [2] ps I would like to use some att or ucb optional arguments, which would

Re: [Leaf-user] Changes for new Dachstein release

2002-04-05 Thread Jason Low
It sounds like a good time to make a request. On the web page interface I have looked around for the IP address of eth0. Maybe it there already but I didn't find it. Thanks Jason ___ Leaf-user mailing list [EMAIL PROTECTED]

Re: [Leaf-user] Changes for new Dachstein release

2002-04-05 Thread Victor McAllister
Jason Low wrote: It sounds like a good time to make a request. On the web page interface I have looked around for the IP address of eth0. Maybe it there already but I didn't find it. Thanks Jason It is already in Weblet In the little box in the Upper Left Hand Corner Click on the

Re: [Leaf-user] Changes for new Dachstein release

2002-04-05 Thread KP Kirchdörfer
Am Freitag, 5. April 2002 17:07 schrieb Charles Steinkuehler: It looks like it's getting to be time for a new Dachstein release. There are a number of minor bugs to fix in the system scripts, and (more importantly) security updates to some of the packages on the CD (SNMP and libz). Charles;