mail archive Security issues members-only posting
freebsd-security.freebsd.org
(List home) (Recent threads) (174 other FreeBSD lists)
Subscription Options
- RSS or Atom: Read-only subscription using a browser or aggregator. This is the recommended way if you don't need to send messages to the list. You can learn more about feed syndication and clients here.
- Conventional: All messages are delivered to your mail address, and you can reply. To subscribe, send an email to the list's subscribe address with "subscribe" in the subject line, or visit the list's homepage here.
- Low traffic list: less than 3 messages per day
- This list contains about 36,176 messages, beginning Feb 1995
- 0 messages added yesterday
Security issues members-only posting
October 2001 - page 1
Vladislav Pivovarenko — 100192534801 Oct 2001
To Unsubscribe: send mail to with "unsubscribe freebsd-security" in the body of the message...
What is login -p process in 4.4 ? (1 Reply)
guron — 100194941001 Oct 2001*
Hello All , Has put Фрее 4.4 release and has found out not clear process in "ps -ax " list type "login-p user" , user - that w...
LaBrea for BSD (1 Reply)
Laurent Fabre — 100195764101 Oct 2001*
Ok what about two modes, one will acquire spare IP on the network, and the other won't. Instead rules will be loaded from a config file (and yep o...
Chutima S. — 100196818701 Oct 2001*
Hi I read from Firewall handbook as below: icmptypes types Matches if the ICMP type is present in the list types. The list may be specified as any com...
TOOR (1 Reply)
Martin Vana — 100200521902 Oct 2001*
hi, i wonder if user toor with uid0 is created during instalation or if i was hacked. How to destroy user with uid0? thankx To Unsubscribe: send mail ...
ipfw logging complete packets (4 Replies)
Martin Hermanowski — 100200895002 Oct 2001*
Hi list, I would like not only to log some ip packets with ipfw, but to write them to a file, preferred in a format compatible to tcpdump. Is there a ...
login.conf & FreeBSD 4.4 (2 Replies)
Igor Melnichuk — 100200963402 Oct 2001*
I need advise. I have a server with installed FreeBSD 4.4 RELEASE . Limiting users I've created new class "webuser" in login.conf ( fixe...
Magdalinin Kirill — 100202042602 Oct 2001
I didn't find out why, but similar patch that was used on a busy web server on 4.1R box caused serious problems: cpu limits worked fine and did ki...
file permission question (7 Replies)
default — 100203628102 Oct 2001*
Hi, I am allowing a couple of ppl to have a shell account on one of my machines, and I am making a few changes to disallow them from using certain thi...
Need an advice... (5 Replies)
Vladislav Timofeev — 100203956402 Oct 2001*
I have a problem... I need an imap/pop3 servers configured on my FreeBSD 4.3 box. I need an advice... Which server is better Cyrus-imap, wu-imapd or a...
file integrity checking (1 Reply)
Magdalinin Kirill — 100205366602 Oct 2001*
Hello, which directories and files should be checked for file integrity on a regular basis? /bin /etc /kernel /modules /sbin /stand /usr/bin /usr/lib ...
last (4 Replies)
ANdrei — 100211389903 Oct 2001*
excuse me if this is off-topic, or maybe a silly/simple question, but when doing a LAST, i got the following output: user ttyp2 :0.0 Tue Oct 2 12:12 s...
new ipfw command (2 Replies)
Chad David — 100212653903 Oct 2001*
I have started writing a new ipfw command (fwadm) that is much like ipfw, but differs in a number of areas: 1) I use lex and yacc to support a more fl...
Creation of trustedbsd-audit mailing list (fwd) (2 Replies)
Andrew R. Reiter — 100213077503 Oct 2001*
FYI. *-.................................................-- Forwarded message -- Date: Tue, 2 Oct 2001 17:37:02 -0400 (EDT) From: Robert Watson To: Sub...
David La Croix — 100213433703 Oct 2001
In attempting to get something else working, I was running TCP dump, watching specifically for broadcasted traffic, and I came across the following pu...
odd sockstat output (1 Reply)
Bill.Melvin — 100219100004 Oct 2001*
Why would sockstat show me something like this: USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS root sshd 4580 5 tcp4 192.168.120.1:22 192.168...
default cipher types in openssh (4 Replies)
Caitlen — 100219104404 Oct 2001*
I'm noticed that openssh, even when connecting with protocol 2, seems to default to 3des. While that's a pretty conversative stance, isn...
Terry — 100220180904 Oct 2001
using the isakmpd port to freebsd 4.4. the policy file (/etc/isakmpd.policy) seems to be ignored: KeyNote-Version: 2 Comment: This policy accepts ESP ...
Caitlen — 100220814304 Oct 2001
Great... it's good to know that AES is the default now. I'm running FreeBSD 4.4-STABLE #0: Thu Sep 27 17:50:26 ADT 2001 :/usr/src/sys/compile/...
Dag-Erling Smorgrav — 100221642204 Oct 2001
[Bcc:ed to -security, please followup on -arch] The ptrace(2) syscall, which is mainly used by gdb(1), implements some of its functionality by faking ...
drop the notice from the homepage? (3 Replies)
Alfred Perlstein — 100224554805 Oct 2001*
So, about time to ditch the notice on the homepage? :)...
HA/Failover options (3 Replies)
Sean Lutner — 100226114905 Oct 2001*
Hello... I've recently been tasked with coming up with a redundant/failover firewall solution to replace our managed firewalls. The goal is to hav...
tariq_rashid — 100228775905 Oct 2001*
Good afternoon all! Is the following theoretically possible? Star topology VPN: subnet--GW- --GW--subnet | | | | | | VPN...
tariq_rashid — 100229719305 Oct 2001*
thanks for your email - do you mean that the "hub" is a freebsd box? or is this the net4501? can you give me an indication of the isakmpd co...
tariq_rashid — 100229803205 Oct 2001*
ahh -> racoon. i think this problem is specific to isakmpd (the scope of the config files)... and i'm not using racoon as it definitely won...
tariq_rashid — 100229846105 Oct 2001
"However, it's rather easy to set up a simple way to "let the hub know" which IP it is coming from." i'd love to know! i...
Karl M. Joch — 100234336106 Oct 2001*
i know this is quit off-topic, but i think this could affect others too. i have a FreeBSD IPFW/NAT box at a customer. they hav an windows 2000 server ...
Amavis + Linux scanners (13 Replies)
Ng Pheng Siong — 100239375906 Oct 2001*
Hi, I'm looking at running Amavis with Postfix. The Amavis site pointed to several scanner products which predictably offer Linux but not FreeBSD ...
Kern Secure Level (4 Replies)
David S Strait — 100240439606 Oct 2001*
There is a little discussion about kern secure level in the 'man init' page, but its somewhat brief. On Kern level 1, I couldn't get X-win...
PHPNuke exploit (1 Reply)
Karl M. Joch — 100241821907 Oct 2001*
For all running PHPNuke. There is a exploit in admin.php which allows copying/uploading files. there are 2 articles on www.freebsd.at. karl To Unsubsc...
Rolnik Paszczak — 100246345907 Oct 2001
Żarłoczny Burak - Dawno temu (lata osiemdziesąte) uciekł z roli pewnemu farmerowi (niejakiemu Paszczakowi) i jakimś cudem dostał się do kompute...
Burak Moderator — 100254646408 Oct 2001
Hello, I've added you to my Burak group at Yahoo! Groups, a free, easy-to-use email group service. As a member of this group, you may send message...
Yahoo!Groups Notification — 100254685508 Oct 2001
Hello, This is to inform you that your request to unsubscribe from Burak has been completed. Regards, Yahoo! Groups Customer Care Your use of Yahoo! G...
tariq_rashid — 100255721808 Oct 2001
To Unsubscribe: send mail to with "unsubscribe freebsd-security" in the body of the message...
tariq_rashid — 100255992708 Oct 2001
Consider the following network of FreeBSD 4.4R gateways: ( subet-A ) - [ gateway A ] 10.2.0.0/16 | | | | [ "hub" gateway...
Randy Lee — 100256886308 Oct 2001
I've been DOS-ed several times. How do I know where is it coming from ? Where can i find a document to study about DOS ? Thanks in advance....
against trino ? (1 Reply)
Randy Lee — 100257446108 Oct 2001*
How do i protect my server from DOS called 'trinoo' ? is there any scanner that can check the ip of DOS'er ? Thanks a lot....
FreeBSD Security Advisories — 100257528108 Oct 2001
= FreeBSD-SA-01:61 Security Advisory FreeBSD, Inc. Topic: Squid in accelerator-only mode ignores ACLs Category: ports Modules: squid22, squid23, squid...
FreeBSD Security Advisories — 100257532108 Oct 2001
= FreeBSD-SA-01:62 Security Advisory FreeBSD, Inc. Topic: UUCP allows local root exploit Category: core Module: uucp Announced: 2001-10-08 Credits: Af...
any idea on udp port 8? (fwd) (2 Replies)
Charlie C.L. King — 100261597209 Oct 2001*
Hello, everybody: I'm a newbie adm. in bsd and managing my own box. Does any one have any idea what service runs on udp port 8? I'm currently ...
Yapalot Communications — 100265838909 Oct 2001
**FREE LONG DISTANCE...NO OBLIGATION** ![][1] [ ![][2]][3] 1-800-YAPALOT **_ October 9, 2001_** ** Hello, ** You must be getting too many email promot...
EROTICAWWW — 100266901609 Oct 2001
Dear Ladies & Gentlemen, Welcome to the GREATEST SEX SHOW on the ENTIRE NET ! We now offer you to ENTER the World´s No.1 voted SEX-SERVER on the ...
EROTICAWWW — 100266902109 Oct 2001
Dear Ladies & Gentlemen, Welcome to the GREATEST SEX SHOW on the ENTIRE NET ! We now offer you to ENTER the World´s No.1 voted SEX-SERVER on the ...
Adrian Penisoara — 100269135910 Oct 2001*
Hi, [ CC'ed to two persons that I suspect they've been hit by this issue too ] In the last two days we had two signal 6 (ABORT) bind crashes w...
amavis + freebsd (1 Reply)
Chris Orr — 100270068210 Oct 2001*
hey, ive got a question about amavis, and how it preforms.. does anyone use it on mail servers that have 3000+ users? how does it preform? does it put...
Lee Brotherston — 100271639310 Oct 2001
It might be worth checking out http://www.rubberhose.org - I've not actually used it myself, so I can't offer any personal experience, but I...
ipfw - DoS ? (3 Replies)
Randy Lee — 100273002110 Oct 2001*
Oct 9 12:00:02 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 202.228.131.2:3072 Oct 9 12:00:02 MY /kernel: Connection attempt to TCP 216.8.7...
ftp configuration files (1 Reply)
Rob Simmons — 100273143210 Oct 2001*
Instead of having the two ftp config files, ftpchroot and ftpusers, maybe this could be incorporated into fields in the passwd file, or turned into op...
heads up? ssh, krb5-realm.{com,net} (6 Replies)
David Kirchner — 100274141310 Oct 2001*
This problem just started showing up for us today. Apparently, the openssh that comes with 4.2-R has some strange bug in that it looks up krb5-realm i...
Jan Srzednicki — 100275080610 Oct 2001
Hello, I have machine with 4.4-STABLE, built on October the 3rd. I have just put it online, and I noticed something weird in the logs: Oct 10 23:25:06...