search for: metafocus

I'm not a master of the internet RFCs, but I do believe icmp messages have different types. Now to enable traceroute for IPFW, I might put in a rule like this: ipfw add pass icmp from any to me However, how would I make a rule to limit icmp messages to just those used by traceroute? Can the messages be distinguished as such? A dynamic rule that exists only for the duration of a traceroute

What would be a good POP daemon to use? I know there are a few in the mail ports. Are they any good? What I mean by good is 'secure as possible' (is there really such thing as being totally secure / invulnerable?) Cheers

I get this in my security postings. Jun [undisclosed time] [undiscl.] login: 2 LOGIN FAILURES ON ttyv2 Jun [undisclosed time] [undiscl.] login: 2 LOGIN FAILURES ON ttyv2, qmaild As it turns out, I'm not running qmail :) And if I did, it would definitely have a nologin shell. But that's beside the point- I have had a perception that ttyv was for local/console logins, and that just

...y, DaleCo, S.P.) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 02 Sep 2004 12:05:26 -0500 > From: "Kevin D. Kinsey, DaleCo, S.P." <kdk@daleco.biz> > Subject: Re: IPFW and icmp > To: Dave <mudman@metafocus.net> > Cc: freebsd-security@freebsd.org > Message-ID: <413752D6.4060100@daleco.biz> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Dave wrote: > >> I'm not a master of the internet RFCs, but I do believe icmp messages have >> different t...

> Message: 1 > Date: Thu, 16 Dec 2004 20:31:05 +0800 > From: Ganbold <ganbold@micom.mng.net> > Subject: Strange command histories in hacked shell server Just a minor comment on one portion of your message. [All deleted except the pertinent part - wjv] > Machine is configured in such way that everyone can create an account itself. > Some user dir permissions: > ...