🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: uk.comp.os.linux
Article #469

Re: Security

#469
From: Tim Haynes
Date: Mon, 13 Dec 1999 00:00
43 lines
2956 bytes
Paul Richards <pauldoo@dunvegan1.demon.co.uk> doodled in uk.comp.os.linux:

> > Since I still don't know what all those services are I'll leave them all
> > as is and just set up a firewall.

Bah. Find them and work out whether you want them or not! :]
	su root -c 'fuser -n tcp 23'
that's enough of a hint :)

Right, on with the thingy...

> OK, I've got the firewall thing enabled in the kernel ("Network firewalls"
> and "IP: Firewalling") and I installed fwctl.  I can run fwctl but it just
> gives me the flags.  I guess I'll need to actually read some docs or
> something totally irrational like that...

Yeah. But while you're at it, apt-get install gfcc, and play with that
instead. It's a pretty decent interface to ipchains, and will export shell
scripts for you to debug^Wuse, so you can get the hang of it all sooner or
later.
(Make sure you have a clear picture of what interface in your machine is doing
what, and what the input/forwarding/output chains *do*, as from e.g. the
Masquerading HOWTO. Then consider running gfcc :)

> Some odd things I noted before I rebooted: XF86_SVGA was taking 190Mb of
> memory???  Now it's only at 30Mb.

I've been having that with Potato at work of late - it went up to >300M (on a
box with 256M RAM and 128M swap) and I had to kill my favourite wmaker only
this morning. Grrr!

> Anyway, that was pointless for you guys to know.

Not at all. I hope they've updated the X server package since then, else I'll
kick up A Stink again :]

~Tim
--
| Geek Code: GCS dpu s-:+ a-- C++++ UBLUAVHSC++++ P+++ L++ E--- W+++(--) N++ 
| w--- O- M-- V-- PS PGP++ t--- X+(-) b D+ G e++(*) h++(*) r--- y-	     
| Flags	: 	fpu vme de pse tsc msr mce cx8 sep mtrr pge mmx 3dnow
| The sun is melting over the hills,         | http://www.glutinous.custard.org
| All our roads are waiting / To be revealed | piglet@glutinous.custard.org
Technical Details
Message-ID: <slrn85apkk.o6.piglet@pigsty.td.micromuse.co.uk>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <38513A2C.F927313@dunvegan1.demon.co.uk> <8302l8$hbd$1@falstaff.loth.demon.co.uk> <38539997.AE21B515@dunvegan1.demon.co.uk> <830kg5$j10$1@falstaff.loth.demon.co.uk> <38540F5C.30105383@dunvegan1.demon.co.uk> <38551F58.918D54A7@dunvegan1.demon.co.uk>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10d8ad,f54179a9240e5606
X-Google-Attributes: gid10d8ad,public
X-Google-Thread: fac57,f54179a9240e5606
X-Google-Attributes: gidfac57,public
From: piglet@glutinous.custard.org (Tim Haynes)
Subject: Re: Security
Date: 1999/12/13
Message-ID: <slrn85apkk.o6.piglet@pigsty.td.micromuse.co.uk>
X-Deja-AN: 560256513
References: <38513A2C.F927313@dunvegan1.demon.co.uk> <8302l8$hbd$1@falstaff.loth.demon.co.uk> <38539997.AE21B515@dunvegan1.demon.co.uk> <830kg5$j10$1@falstaff.loth.demon.co.uk> <38540F5C.30105383@dunvegan1.demon.co.uk> <38551F58.918D54A7@dunvegan1.demon.co.uk>
X-Original-NNTP-Posting-Host: rhubarb.custard.org
X-Complaints-To: abuse@insnet.net
X-Trace: starburst.uk.insnet.net 945121159 3773 193.243.233.4 (13 Dec 1999 21:39:19 GMT)
X-Caffeine-Requirement: Irn Bru and rising
Organization: The Pigsty
User-Agent: slrn/0.9.5.7 (UNIX)
Reply-To: piglet@glutinous.custard.org
NNTP-Posting-Date: 13 Dec 1999 21:39:19 GMT
Newsgroups: uk.comp.os.linux,demon.tech.unix