On Sat, 05 Feb 2000, Alex generated:
> tailf /var/log/messages
>is it hard to make the computer auto login on that terninal leaviing
>F1,2,3,4 etc normal..
>i asume i would want to make this user only be able to run this program how
>is that achieved???
What you might want to do instead is insert the following into
/etc/syslog.conf:
*.* /dev/tty12
I do this on all my boxen; it dumps all of the syslog to tty12, you can
read it by hittin ALT-F12. If you only want what /var/log/messages has,
then copy the line(s) that specifies what goes into that file, and
change the /var/log/messages to /dev/tty12. Have a look at syslog.conf(5).
>also is there any potential security problems in this kind of a
>system......
Well, unless you're dumping sensitive info to the logs, and someone has
physical access to the console.
>the other question is i know how to block connections by
>ipchains -A input -s 192.168.1.151 -p tcp -j DENY
>but how can i make it allow connections through port 80 or 21 etc????
>it is in the man page but ipchains rejected it every time i try to use
>it.... i am trying to add in -dports !80
You might want to put lines granting access (target: ACCEPT) just before
the rule that denies access -- somethign like:
ipchains -A input -d your.server 80 -p tcp -j ACCEPT
ipchains -A input -d your.server 21 -p tcp -j ACCEPT
ipchains -A input -s some.host -p tcp -j DENY
Another thing: you may want to use the target REJECT rather than DENY,
as it sends back an ICMP host unreachable or port unreachable message to
the source, rather than just dropping the packet and leaving the source
to timeout. Unless it's a hostile machine, then do what you want ;)
--
jamesw
"A 32 bit extension and graphical shell for a 16 bit patch to an 8 bit
operating system originally coded for a 4 bit microprocessor, written by a
2 bit company that can't stand 1 bit of competition."
"What is Windows 95?"
------------------------------
[EMAIL PROTECTED]
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
