Discuss November 2006

discuss@lists.centos.org

253 participants
263 discussions

RE: [CentOS] open source security daemon or script
by Alex Palenschat 16 Nov '06

16 Nov '06

> R Lists06 schrieb: > > Can someone please tell me what the name and or website of the open > > source realtime daemon or script is that automatically puts ip > > addresses in the hosts.deny file when servers are repeatedly probed > > for login/password pairs on ftp ports etc please? > > I have not tested it but I think you can do this with: > http://www.snortsam.net/ > I think portsentry does almost exactly what he wants. Snortsam manipulates firewall rules (optionally on multiple hosts/firewalls) and is quite a bit more work to set up if I recall from when I looked at it. The largest requirement is to have a working snort install which he may not have. alex

2 1

RE: [CentOS] open source security daemon or script
by Alex Palenschat 16 Nov '06

16 Nov '06

> Can someone please tell me what the name and or website of > the open source realtime daemon or script is that > automatically puts ip addresses in the hosts.deny file when > servers are repeatedly probed for login/password pairs on ftp > ports etc please? > > It was mentioned in the last year on this list if I remember right. > > I had bookmarked at one time and I cant seem to web search or > find it otherwise. > > Thanks > > - rh Is this what you're looking for? http://sourceforge.net/projects/sentrytools/ alex

2 1

Broken ncurses symlinks
by Moyena Bingi 16 Nov '06

16 Nov '06

Good day, Some of my ncurses symlinks are broken, can anyone help me repair these broken links. I tried installing ncurses 5.5 which added two more broken links. Attached is the orginal broken links I had. _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

5 18

RE: [CentOS] Re: IPTables Blocking Brute Forcers
by Ian Anderson 16 Nov '06

16 Nov '06

Another good one is http://denyhosts.sourceforge.net/ It runs as a daemon, and can either ban IP's addresses all together, or just ban certain services. -----Original Message----- From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On Behalf Of Brian Marshall Sent: Thursday, November 16, 2006 9:33 AM To: CentOS mailing list Subject: Re: [CentOS] Re: IPTables Blocking Brute Forcers Sweeeet! I'll give it a shot. Thanks Mike. > From: <mike.redan(a)bell.ca> > Reply-To: CentOS mailing list <centos(a)centos.org> > Date: Thu, 16 Nov 2006 12:18:00 -0500 > To: <centos(a)centos.org> > Conversation: [CentOS] Re: IPTables Blocking Brute Forcers > Subject: RE: [CentOS] Re: IPTables Blocking Brute Forcers > > You could try something like this: > > http://freshmeat.net/projects/blocksshd/ > >> From there readme: > BlockSSHD is a Perl script based on BruteForceBlocker v1.2.3 that > dynamically > adds IPTables rules for Linux and pf firewall rules for BSD that block > SSH > brute force attacks. It can also detect ProFTPd login failures. > > Cheers, > Mike > > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Brian Marshall > Sent: November 16, 2006 12:10 PM > To: CentOS mailing list > Subject: [CentOS] Re: IPTables Blocking Brute Forcers > > > Hi All, > > So I have a series of funny guys that are constantly trying to brute > force my FTP server. They are always in China, India or Japan, of > course. > > Unfortunately my clients do exchange emails with some people in China > and Japan so I can't just block off the entire region (as much as I'd > love to). > > Does anyone have suggestions on how I can script IPTables or put some > other security measure in place that could detect brute-forcing and > reject from their IP? > > Thanks > > > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS(a)centos.org http://lists.centos.org/mailman/listinfo/centos

1 0

CentOS-announce Digest, Vol 21, Issue 10
by centos-announce-request＠centos.org 16 Nov '06

16 Nov '06

Send CentOS-announce mailing list submissions to centos-announce(a)centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request(a)centos.org You can reach the person managing the list at centos-announce-owner(a)centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2006:0719 Moderate CentOS 4 x86_64 nss_ldap - security update (Johnny Hughes) 2. CESA-2006:0719 Moderate CentOS 4 i386 nss_ldap - security update (Johnny Hughes) 3. CESA-2006:0738 Low CentOS 4 x86_64 openssh - security update (Johnny Hughes) 4. CESA-2006:0738 Low CentOS 4 i386 openssh - security update (Johnny Hughes) 5. CESA-2006:0742 Critical CentOS 4 x86_64 elinks - security update (Johnny Hughes) 6. CESA-2006:0742 Critical CentOS 4 i386 elinks - security update (Johnny Hughes) 7. CESA-2006:0742 Critical CentOS 4 ia64 elinks - security update (Pasi Pirhonen) 8. CESA-2006:0742 Critical CentOS 4 s390(x) elinks - security update (Pasi Pirhonen) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Nov 2006 14:41:03 -0600 From: Johnny Hughes <johnny(a)centos.org> Subject: [CentOS-announce] CESA-2006:0719 Moderate CentOS 4 x86_64 nss_ldap - security update To: CentOS-Announce <centos-announce(a)centos.org> Message-ID: <1163623263.4979.383.camel(a)myth.home.local> Content-Type: text/plain; charset="us-ascii" CentOS Errata and Security Advisory 2006:0719 https://rhn.redhat.com/errata/RHSA-2006-0719.html The following updated files have been uploaded and are currently syncing to the mirrors: x86_64: nss_ldap-226-17.i386.rpm nss_ldap-226-17.x86_64.rpm src: nss_ldap-226-17.src.rpm

2 1

pam ulimit 64 bit
by Peter van Eck 16 Nov '06

16 Nov '06

Hi, Although this is on RHEL 4 update 2 x86-64 I would like to place the question on this list. I'm trying to set up some shell limits for a user. I've added the user to /etc/security/limits.conf There is an entry in /etc/pam.d/login with pam_limits.so as well as in /etc/pam.d/sshd When I try to set ulimit -n <value> I get : cannot modify limit : Operation not permitted Even if I replace all entries in /etc/pam.d/login with the absolute path to /lib64/security it doesn't work. Any suggestions on where to look now ? thanks, Peter

1 0

Firefox 2.0 on CentOS 4.4
by Edward Diener 16 Nov '06

16 Nov '06

I realize that CentOS 4.4 is all about stability but I would still like to install Firefox 2.0 on it, since I am sharing my Firefox project across OSs on a multi-boot machine and the other OSs have Firefox 2.0. Is it possible to get CentOS 4.4 to work properly with Firefox 2.0 and, if so, does anybody know of a CentOS 4.4 repository which has a Firefox 2.0 RPM available.

6 16

RE: [CentOS] About download ISO image, again
by Mark Schoonover 16 Nov '06

16 Nov '06

Karl R. Balsmeier wrote: > The installer still asks you if you want various options, -I don't > seem to remember it having X. > > One thing I can say however is that it's VERY HANDY for me to not have > to burn 3 or 4 CD's, or the DVD, just to get a server deployed. > > So thanks to the CentOS staff who came up with that clever idea. It > is truly handy. > > -karl > > I just did a server install, actually a 2.4TB NAS using the first CentOS disk, but choosing a minimal install option. What's the difference between that option and the server CD?? Thanks! Mark

5 4

RE: [CentOS] Java JDK on CentOS 4.4
by Cady, Josh 16 Nov '06

16 Nov '06

Yesterday I downloaded the "Linux x64 RPM in self-extracting file" jdk-1_5_0_09-linux-amd64-rpm.bin from Sun's website and it installed it easily. "chmod +x jdk-1_5_0_09-linux-amd64-rpm.bin" "./jdk-1_5_0_09-linux-amd64-rpm.bin" It ends up in /usr/java/jdk1.5.0_09/ > -----Original Message----- > From: centos-bounces(a)centos.org [mailto:centos-bounces@centos.org] On > Behalf Of Edward Diener > Sent: Wednesday, November 15, 2006 3:28 PM > To: centos(a)centos.org > Subject: [CentOS] Java JDK on CentOS 4.4 > > I did not choose Java when I installed CentOS 4.4 and I want to install > a JDK to do Java programming. What is the default Java JDK for CentOS > 4.4 ? I see under YumEx very little which looks like a Java JDK. Is > there one in the distribution ? Is there a way to get Sun's latest JDK 5 > installed safely and successfully on CentOS 4.4, perhaps via an RPM for > it tailored to CentOS 4.4, or should I just use the one on Sun's web > site ? After installing the RPM is there anything else I have to do to > get it to work properly in CentOS 4.4 ? Any help is gratefully > appreciated. > > _______________________________________________ > CentOS mailing list > CentOS(a)centos.org > http://lists.centos.org/mailman/listinfo/centos

2 1

Re: [CentOS] Why is your prefer mode for admin Centos ?
by Fabian Arrotin 16 Nov '06

16 Nov '06

> Webmin ? > > ssh ? > > console ? > > system-* ? > Ssh of course ... :o) But i admit that when i deploy a linux server for a customer with a very linux/unix knowledge i installed webmin and create a special user with limited rights inside (through webmin acl), for example just to manage squid acls and nothing else in the case of a proxy server .... ****************************************** * Fabian Arrotin - http://www.arrfab.net * ******************************************

2 1

← Newer
1
...
10
11
12
13
14
15
16
...
27
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss November 2006