Article View: uk.comp.os.linux
Article #469Re: Security
From: Tim Haynes
Date: Mon, 13 Dec 1999 00:00
Date: Mon, 13 Dec 1999 00:00
43 lines
2956 bytes
2956 bytes
Paul Richards <pauldoo@dunvegan1.demon.co.uk> doodled in uk.comp.os.linux:
> > Since I still don't know what all those services are I'll leave them all
> > as is and just set up a firewall.
Bah. Find them and work out whether you want them or not! :]
su root -c 'fuser -n tcp 23'
that's enough of a hint :)
Right, on with the thingy...
> OK, I've got the firewall thing enabled in the kernel ("Network firewalls"
> and "IP: Firewalling") and I installed fwctl. I can run fwctl but it just
> gives me the flags. I guess I'll need to actually read some docs or
> something totally irrational like that...
Yeah. But while you're at it, apt-get install gfcc, and play with that
instead. It's a pretty decent interface to ipchains, and will export shell
scripts for you to debug^Wuse, so you can get the hang of it all sooner or
later.
(Make sure you have a clear picture of what interface in your machine is doing
what, and what the input/forwarding/output chains *do*, as from e.g. the
Masquerading HOWTO. Then consider running gfcc :)
> Some odd things I noted before I rebooted: XF86_SVGA was taking 190Mb of
> memory??? Now it's only at 30Mb.
I've been having that with Potato at work of late - it went up to >300M (on a
box with 256M RAM and 128M swap) and I had to kill my favourite wmaker only
this morning. Grrr!
> Anyway, that was pointless for you guys to know.
Not at all. I hope they've updated the X server package since then, else I'll
kick up A Stink again :]
~Tim
--
| Geek Code: GCS dpu s-:+ a-- C++++ UBLUAVHSC++++ P+++ L++ E--- W+++(--) N++
| w--- O- M-- V-- PS PGP++ t--- X+(-) b D+ G e++(*) h++(*) r--- y-
| Flags : fpu vme de pse tsc msr mce cx8 sep mtrr pge mmx 3dnow
| The sun is melting over the hills, | http://www.glutinous.custard.org
| All our roads are waiting / To be revealed | piglet@glutinous.custard.org
Technical Details
Message-ID:
<slrn85apkk.o6.piglet@pigsty.td.micromuse.co.uk>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<38513A2C.F927313@dunvegan1.demon.co.uk> <8302l8$hbd$1@falstaff.loth.demon.co.uk> <38539997.AE21B515@dunvegan1.demon.co.uk> <830kg5$j10$1@falstaff.loth.demon.co.uk> <38540F5C.30105383@dunvegan1.demon.co.uk> <38551F58.918D54A7@dunvegan1.demon.co.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10d8ad,f54179a9240e5606 X-Google-Attributes: gid10d8ad,public X-Google-Thread: fac57,f54179a9240e5606 X-Google-Attributes: gidfac57,public From: piglet@glutinous.custard.org (Tim Haynes) Subject: Re: Security Date: 1999/12/13 Message-ID: <slrn85apkk.o6.piglet@pigsty.td.micromuse.co.uk> X-Deja-AN: 560256513 References: <38513A2C.F927313@dunvegan1.demon.co.uk> <8302l8$hbd$1@falstaff.loth.demon.co.uk> <38539997.AE21B515@dunvegan1.demon.co.uk> <830kg5$j10$1@falstaff.loth.demon.co.uk> <38540F5C.30105383@dunvegan1.demon.co.uk> <38551F58.918D54A7@dunvegan1.demon.co.uk> X-Original-NNTP-Posting-Host: rhubarb.custard.org X-Complaints-To: abuse@insnet.net X-Trace: starburst.uk.insnet.net 945121159 3773 193.243.233.4 (13 Dec 1999 21:39:19 GMT) X-Caffeine-Requirement: Irn Bru and rising Organization: The Pigsty User-Agent: slrn/0.9.5.7 (UNIX) Reply-To: piglet@glutinous.custard.org NNTP-Posting-Date: 13 Dec 1999 21:39:19 GMT Newsgroups: uk.comp.os.linux,demon.tech.unix