Re: Anyone know how some1 did this?

Article View: aus.computers.linux

Article #56511

Back to aus.computers.linux Previous Next

#56511

From: Andrew J Cosgriff
Date: Mon, 17 Feb 1997 00:00

37 lines
2491 bytes

"Adrian" == Adrian Gentle <adrian@vw.maths.monash.edu.au> writes:

Adrian> I don't know how it was done offhand, but there are lots of
Adrian> bugs that you should keep track of if you're permanently
Adrian> net-connected.  Try the linux security mailing lists and
Adrian> archives, or have a look at:
Adrian> http://bach.cis.temple.edu/linux/linux-security/Linux-Alerts/
Adrian> http://www.ecst.csuchico.edu/~jtmurphy/

Adrian> A better way to deal with these problems for a dial-up machine
Adrian> is to add the following line in /etc/hosts.deny

Adrian> ALL: ALL

Adrian> which denys access to all incoming connections.  Read the man
Adrian> pages on hosts.allow and hosts.deny for more information!

Note, though, that this only works if you have tcp wrappers installed,
and only applies to incoming services that run out of inetd, like
telnet, rlogin, ftp, etc.

RedHat comes with a tcp_wrappers RPM.  Someone who knows about debian
can tell us if debian also comes with it, although i'd be surprised if
it didn't.

SSH and Sendmail (which generally don't run out of inetd) allow you to
link with the tcp wrapper library when you compile them, but I don't
know if the library gets installed with the above packages for RedHat
or anything else.

Enjoy,
 Andrew.
-- 
 - Andrew J. Cosgriff -                  ajc@bing.wattle.id.au    (PGP/MIME ok)
 +61 3 9905 1165 (bh) 9905 4746 (fax)    http://www-personal.monash.edu.au/~ajc
            I'm in direct contact with many advanced fun CONCEPTS.

Technical Details

Message-ID: <rui7mk72fl4.fsf@goaway.cc.monash.edu.au>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <ninja.855925829@hutsnet1> <5e89bs$cit$2@harbinger.cc.monash.edu.au>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 102983,c32eead4f8dcf99
X-Google-Attributes: gid102983,public
From: Andrew J Cosgriff <ajc@bing.wattle.id.au>
Subject: Re: Anyone know how some1 did this?
Date: 1997/02/17
Message-ID: <rui7mk72fl4.fsf@goaway.cc.monash.edu.au>
X-Deja-AN: 219476173
Sender: ajc@goaway.cc.monash.edu.au
References: <ninja.855925829@hutsnet1> <5e89bs$cit$2@harbinger.cc.monash.edu.au>
Content-Type: text/plain; charset=US-ASCII
X-Drdoom-Fodder: CERT crash crypt drdoom passwd security root
X-Face: PBPJ+.AE`FBN4$}H<dIo+^`A-G%mJTXXP$^4bBox##5=oF{G\[:0|sNlr%~H1,>rwwEh<qq.dHRpu8ftJ\'14l]<x(nRD>J)x?-5$MQ%Z)svNR@Q\WG6[GDr,}a@8ULwGWBsk,Pqxm!Z<lnD(Skwwe$j+<0g6N6z}>-
Organization: Monash University Computer Centre, Network Services
X-URI: <URL:http://www-personal.monash.edu.au/~ajc>
X-Attribution: ajc
Mime-Version: 1.0 (generated by tm-edit 7.101)
X-PGP-Key-ID: C7BD53F5
Newsgroups: aus.computers.linux

Reply to Parent Message