decent non-embeded firewall

2009-03-31 Thread Bryan ONeal
My Netgear FVS318 router/firewall has developed a nasty habit of rebooting every time it gets both portscaned and repeated gnutella requests (who still runs gnutella anyway?) so I am looking to put in a boarder router/firewall to protect it (read replace it if not for the lack of an 8 port switch)

RE: starting by iptable deny all of china is a good start. - Re:OT? Linux-based trojans now targeting WRT and other linux-based routers

2009-03-31 Thread Bryan O'Neal
If you should never get a request outside the US why should you look any further to deny it? This is not complete protection by any measure but it makes an easy first step. I used to go one step further and block my dynamic hosted websites (where you don't get to mess with iptables) from being

RE: starting by iptable deny all of china is a good start. - Re:OT? Linux-based trojans now targeting WRT and other linux-based routers

2009-03-31 Thread Lisa Kachold
Unfortunately, a scan like nmap or netcat can trivially use random or source choice IP. So a distributed denial of service (and more than a few script kiddie bots and toolz) originate from Chinese source addresses. The real scanner is actually behind the proxy watching it all ready for the

RE: starting by iptable deny all of china is a good start. - Re:OT? Linux-based trojans now targeting WRT and other linux-based routers

2009-03-31 Thread Bryan O'Neal
Isn't that what network documentation and maintenance scripts are for ;) Actually you have a very good point but, particularly when people travel. I would block all non US addresses but would turn the rules on and off by country when executives travel (automated on and off dates were

RE: starting by iptable deny all of china is a good start. - Re:OT?Linux-based trojans now targeting WRT and other linux-based routers

2009-03-31 Thread Bryan O'Neal
I agree that you can and will get attacked from US addresses, that may or may not be US machines. However I am still failing to see the problem with block denying a large address range. For example if I am getting 1000 port scans a day from various china addresses why would I not start by denying

Re: decent non-embeded firewall

2009-03-31 Thread Andrew Tuna Harris
Top posting because long email is long. Did you ever look at Smoothwall? I'm going to implement it for one of my clients pretty soon. http://smoothwall.org/ Excerpts from Bryan O'Neal's message of Mon Mar 30 23:17:46 -0700 2009: My Netgear FVS318 router/firewall has developed a nasty habit of

RE: decent non-embeded firewall

2009-03-31 Thread Bryan O'Neal
I thought smothwall was a stand alone isolated distribution that ran on dedicated hardware, not something I could put on top of a standard distribution thus allowing me to keep the box hooked up for its tv centric features. If I had a small dedicated box I could get away with using I would

Re: decent non-embeded firewall (my worthless 2 cents)

2009-03-31 Thread kitepi...@kitepilot.com
allowing me to keep the box hooked up for its tv centric features. DON'T!!! A firewall, is a firewall and is a firewall. In my perpetually delusional state of paranoia, I don't allow ANYTHING not indispensable on my firewall. And even though, I look for ways to eradicate... My firewalls run

Re: decent non-embeded firewall (my worthless 2 cents)

2009-03-31 Thread JD Austin
You hit the nail on the head :) Old computers are cheap and firewall distributions are plentiful. Why expose everything in your network to save almost nothing! I like Smoothwall myself. -- JD Austin Twin Geckos Technology Services LLC j...@twingeckos.com 480.288.8195x201 http://www.twingeckos.com

Re: April 1st coming up - conficker time

2009-03-31 Thread Ryan Rix
Anyone still have their Y2K kits lying around? On Mon, Mar 30, 2009 at 10:00 PM, Charles Jones charles.jo...@ciscolearning.org wrote: On April 1st the Conficker.C virus (probably the most virulent MSWin virus to date) is due to activate. By activate I mean that thusfar it has been just

RE: decent non-embeded firewall (my worthless 2 cents)

2009-03-31 Thread Bryan O'Neal
It's a home box, rite now I just flip the power switch on my router when I sit down and maybe a few times while working (when being stormed). If I have to convert the available box over to a dedicated system then I may, but I also may just keep manually rebooting the Netgear. It is an

RE: decent non-embeded firewall (my worthless 2 cents)

2009-03-31 Thread Paul Mooring
OpenSuse has a limited gui in YaST for SuSE firewall that is essentially a frontend for iptables, it seemed fairly easy to use when I last played with it but I didn't care for the ruleset it generated, it seemed to be way too much, and made it nearly impossible to edit the rules manually through

Psyb0t - the first Linux botnet

2009-03-31 Thread Jason Hayes
http://www.eweek.com/c/a/Security/The-First-Linux- Botnet-626424/?kc=EWKNLLIN03312009STR1 The main thing keeping Linux desktops out of botnets is the sophistication of their users, but the people who built Psyb0t knew most people don't pay much attention to router security. -- Jason Hayes

Re: looking for db recommendation

2009-03-31 Thread Al Tobey
On Tue, Mar 31, 2009 at 9:57 AM, mz m...@infomagic.net wrote: I'm migrating from M$ WinXP to openSUSE 11.0. At the moment I'm looking for a db for simple personal use. I have a music collection db in M$ Access. There are about 1900 records w/ six variables. The collection is mostly vinyl LPs

Re: looking for db recommendation

2009-03-31 Thread Mike Schwartz
On Tue, Mar 31, 2009 at 9:57 AM, mz m...@infomagic.net wrote: I'm migrating from M$ WinXP to openSUSE 11.0. At the moment I'm looking for a db for simple personal use. I have a music collection db in M$ Access. There are about 1900 records w/ six variables. The collection is mostly vinyl LPs

Re: Psyb0t - the first Linux botnet

2009-03-31 Thread Charles Jones
Jason Hayes wrote: http://www.eweek.com/c/a/Security/The-First-Linux-Botnet-626424/?kc=EWKNLLIN03312009STR1 The main thing keeping Linux desktops out of botnets is the sophistication of their users, but the people who built Psyb0t knew most people don't pay much attention to router

Re: looking for db recommendation

2009-03-31 Thread Jerry Davis
On Tue, 31 Mar 2009 10:29:21 -0700 Mike Schwartz mike.l.schwa...@gmail.com wrote: On Tue, Mar 31, 2009 at 9:57 AM, mz m...@infomagic.net wrote: I'm migrating from M$ WinXP to openSUSE 11.0. At the moment I'm looking for a db for simple personal use. I have a music collection db in M$

Re: looking for db recommendation

2009-03-31 Thread keith smith
If you install and use PhpMyAdmin you can easily import a CSV I assume you can export from access in that format. I searched on import CSV into mysql and found a few sites that looked helpful.  You would be doing so on the command line if you follow these tutorials. Search this page for CSV 

RE: looking for db recommendation

2009-03-31 Thread Bryan O'Neal
For simple personal use I would recommend MySQL. You can easily export each table out of MS Access and import into MySQL, or link the MySQL tables in access and run an append query to transfer the information between the access tables and the MySQL tables. -Original Message- From:

RE: looking for db recommendation

2009-03-31 Thread Bryan O'Neal
If you like right click solutions for importing then you can also check out Aqua Fold Data Studios. It has a limited trial but it makes things easy as you can connect up to your MS Access db and export the entire database (table creation, caned queries, and data) with just a few clicks. Recreating

Re: looking for db recommendation

2009-03-31 Thread Bishmer Sekaran
mz wrote: I'm migrating from M$ WinXP to openSUSE 11.0. At the moment I'm looking for a db for simple personal use. I have a music collection db in M$ Access. There are about 1900 records w/ six variables. The collection is mostly vinyl LPs (i.e., entered by hand) with another 2000 LPs

Re: looking for db recommendation

2009-03-31 Thread JD Austin
Oracle express is free (4G limit) and you could learn some transferable skills playing with it. -- JD Austin Twin Geckos Technology Services LLC j...@twingeckos.com 480.288.8195x201 http://www.twingeckos.com Rodney Dangerfield - I haven't spoken to my wife in years. I didn't want to interrupt

Re: Psyb0t - the first Linux botnet

2009-03-31 Thread Jason Hayes
On Tuesday 31 March 2009 10:34:14 Charles Jones wrote: Jason Hayes wrote: http://www.eweek.com/c/a/Security/The-First-Linux-Botnet-626424/?kc=EWKNL LIN03312009STR1 The main thing keeping Linux desktops out of botnets is the sophistication of their users, but the people who built Psyb0t

Re: looking for db recommendation

2009-03-31 Thread Craig White
On Tue, 2009-03-31 at 09:57 -0700, mz wrote: I'm migrating from M$ WinXP to openSUSE 11.0. At the moment I'm looking for a db for simple personal use. I have a music collection db in M$ Access. There are about 1900 records w/ six variables. The collection is mostly vinyl LPs (i.e., entered

RE: looking for db recommendation

2009-03-31 Thread Bryan O'Neal
I don't think any one doubts postgresqls ability to run his db effectively, instead we doubt its ease of use. MS Access it is not ;) -Original Message- From: plug-discuss-boun...@lists.plug.phoenix.az.us [mailto:plug-discuss-boun...@lists.plug.phoenix.az.us] On Behalf Of Bishmer Sekaran

Re: looking for db recommendation

2009-03-31 Thread Bishmer Sekaran
Bryan O'Neal wrote: I don't think any one doubts postgresqls ability to run his db effectively, instead we doubt its ease of use. MS Access it is not ;) -Original Message- From: plug-discuss-boun...@lists.plug.phoenix.az.us [mailto:plug-discuss-boun...@lists.plug.phoenix.az.us] On

RE: looking for db recommendation

2009-03-31 Thread Bryan O'Neal
I was intrigued by the OO opening MS Access dbs, so I tried it. I was unsuccessful with OO 3.0 base and Access 2000 mdb files. :( Would have been cool if it worked ;) I like how you mention middleware/front end considerations; it is after all, at the hart of a dbs usability. MS Access provides its

RE: looking for db recommendation

2009-03-31 Thread Bryan O'Neal
Perhaps I was unduly harsh on Postgresql. And while the last time I messed with it was over a half decade past; it gave me a headache at the time. I am told my headaches would have gone away if I just did XYZ (which changed depending on who you talked to) like setting more restrictive locks.

RE: looking for db recommendation

2009-03-31 Thread Lisa Kachold
Excellent post with good clear direction and suggestions Bishmer Sekaran! And very interesting descriptive literary first person subjective experience from Boneal. Postgres is a very schitzophrenic (and insecure) solution, but very good in clearly defined roles. Since you are clearly right

RE: looking for db recommendation

2009-03-31 Thread Bryan O'Neal
Awe... Thank you Lisa, so few of the people I know would ever call me right brained :) Usually I am the logical hard a** of the group who insists on real evidence and analytical though processes. I suppose this sabbatical is doing me some good after all :) I will decently check out the GUI