search for: caligula

Just saw this from eWeek. "IBM, which paid roughly $500,000 for the testing, and SuSE (pronounced "SOOS-ah") were announcing the certification jointly. " The article is here: http://www.eweek.com/article2/0,3959,1212529,00.asp --- Darren Reed <avalon@caligula.anu.edu.au> wrote: > In some mail from twig les, sie said: > > > > I actually just asked about FreeBSD's status regarding > Common > > Criteria last week on -questions but no one knew; one guy > > answered that it would be wasteful. Is this the cert on > &g...

Forwarded message: > From R.v.Gogh@kappe-int.com Wed Mar 3 07:54:28 2004 > Message-ID: <0FDD52D38220D611B7CC0004763B37441B2572@HNTS-04> > From: "Gogh, Ruben van" <R.v.Gogh@kappe-int.com> > To: Darren Reed <avalon@caligula.anu.edu.au> > Subject: RE: IPFilter and FreeBSD (was Re: mbuf vulnerability) > Date: Tue, 2 Mar 2004 21:54:23 +0100 > MIME-Version: 1.0 > X-Mailer: Internet Mail Service (5.5.2657.72) > Content-Type: text/plain > Content-Length: 1103 > > Bedankt voor uw e-mail. Ik ben h...

Hi, First of all, I know that not dropping SYN/FIN isn't really a big deal, it just makes no sense. But since it doesn't make any sense, I don't see the reason why not to discard them. I'm running pf on FreeBSD 5.4-RELEASE-p3 and I scrub any traffic. I've read some other posts on google and as far as I can tell, clearly invalid packets (like packets with SYN/RST set) is

.... I can't seem to get R to give me the option to set a new server. Does anyone know how to tell R to stop looking for the default server? thanks, -Paul -- ----####---- Paul Gowder <paul at paultopia.org> "If I sleep, who'll give me the moon?" -Camus, speaking through Caligula. PGP public key (use only when necessary): http://www.paultopia.org/pgp.html

--- Darren Reed <avalon@caligula.anu.edu.au> wrote: > I'm curious, can you use netgraph, like this or > similar, to make > sf2/sf3 redundant interfaces on the same LAN ? > (Load balancing > traffic in/out of an NFS server, say.) > > Darren Hi Darren, I think that's the real purpose behind ng_on...

In http://docs.freebsd.org/cgi/mid.cgi?200402260743.IAA18903 it seems RELENG_4 is vulnerable. Is there any work around to a system that has to have ports open ? Version: 1 2/18/2004@03:47:29 GMT >Initial report > <<https://ialert.idefense.com/KODetails.jhtml?irId=207650>https://ialert.idefense.com/KODetails.jhtml?irId=207650; >ID#207650: >FreeBSD Memory Buffer

Hi there, Is there some way to configure ipfw to do traffic normalizing ("scrubbing", as in ipf for OpenBSD)? Is there any tool to do it for FreeBSD firewalling? I've heard that ipf was ported on current, anything else? TIA, /Dorin. __________________________________ Do you Yahoo!? Yahoo! Mail SpamGuard - Read only the mail you want. http://antispam.yahoo.com/tools

Forwarded message: > From full-disclosure-admin@lists.netsys.com Wed Apr 21 11:49:12 2004 > To: full-disclosure@lists.netsys.com > From: Darren Bounds <dbounds@intrusense.com> > Subject: [Full-Disclosure] IETF Draft - Fix for TCP vulnerability > Date: Tue, 20 Apr 2004 18:19:58 -0400 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > >