Hello there.

Eventhough nobody would ever want to attack a useless no-thing-doing
dedicated machine like mine, i want to add a little bit o fsecurity to
it by using a simple firewall.
I have, in the past, used "FireHOL" for these tasks.

Now, here's my problem:

I want my machine to generally allow all client ports but deny some,
and generally deny all server ports but allow some.

Now, denying all server ports but allowing specific ports is easy; By
simply writing a line for every server port i wish to allow, the rest
remains blocked.

However, how do i set it up to allow all client ports, but deny some
specific ones?

I tried to do it like this:

Hi all,

I was going through the book "Hacking Ubuntu" by Neil Krawetz, in this
book it is said that never do kill -9 -1 as root.

in my office i tried this command as root on an RHEL4 machine

but there was'nt any system crash as i expected only the x-server got
crashed, and the commands like ps, ls were n't giving any o/p.

when i rebooted the machine everything was back to normal

my question why init process wasn't killed ?

In my /var/log/messages I have a lot (6000+) of:

Jul 16 12:51:20 sole sshd[6669]: Invalid user clamav from 72.3.243.92
Jul 16 12:51:21 sole sshd[6671]: Invalid user appserver from 72.3.243.92
Jul 16 12:51:23 sole sshd[6673]: Invalid user mailman from 72.3.243.92
Jul 16 12:51:25 sole sshd[6675]: Invalid user cyrusimap from 72.3.243.92
Jul 16 12:51:27 sole sshd[6677]: Invalid user qtss from 72.3.243.92
Jul 16 12:51:28 sole sshd[6679]: Invalid user eppc from 72.3.243.92
Jul 16 12:51:30 sole sshd[6681]: Invalid user telnetd from 72.3.243.92
Jul 16 12:51:32 sole sshd[6683]: Invalid user identd from 72.3.243.92
Jul 16 12:51:33 sole sshd[6685]: Invalid user gnats from 72.3.243.92
Jul 16 12:51:35 sole sshd[6687]: Invalid user jeff from 72.3.243.92
Jul 16 12:51:37 sole sshd[6689]: Invalid user irc from 72.3.243.92

what is it? I need to write to something like abuse@72.3.243.92 ?

Do we have anything similar to pam_user.conf (as in HP-UX) in linux so
that if I want to do a per user pam configuration, I can do the same.

Also if its not there is there any way I can achieve a similar
behaviour?.

Thanks
Reji

Linux Init Program
http://freedownloadablebooks.blogspot.com/2008/03/linux-init-program.html
Linux Emergency Filesystems and Procedures
http://freedownloadablebooks.blogspot.com/2008/03/linux-emergency-filesystems-and...
Making and Managing Linux Filesystems
http://freedownloadablebooks.blogspot.com/2008/03/making-and-managing-linux-filesystems...
Accessing Removable Media
http://freedownloadablebooks.blogspot.com/2008/03/accessing-removable-media.html
Linux System Setup
http://freedownloadablebooks.blogspot.com/2008/03/linux-system-setup.html
Linux Tips
http://freedownloadablebooks.blogspot.com/2008/03/linux-tips.html
Basic Liinux Devices
http://freedownloadablebooks.blogspot.com/2008/03/basic-liinux-devices.html
Setting Linux Time
http://freedownloadablebooks.blogspot.com/2008/03/setting-linux-time.html
Linux Help
http://freedownloadablebooks.blogspot.com/2008/03/linux-help.html
Finding Files in Linux
http://freedownloadablebooks.blogspot.com/2008/03/finding-files-in-linux.html ...

Dear all,

this is what i have read in the book ubuntu linux unleashed,

if you have a desire to severly restrict what a user can do, you can
provide him with a restricted shell. to run a restricted bash shell,
you would use the -r option

ex:- bash -r

then try to do something that you could do as a regular user, such as
ls -a,

you will then see

bash: ls: no such file or directory

now my question is suppose i have my shell restricted, how to make it
back un restricted ?

Hello everyone,

I have this simple bash script that reads from standard input and executes
some work depending on the input that it has read. The input lines are
meant to be in the form of a command followed by an argument.

#!/bin/bash

read input

#these two lines divide input in a first word and the rest; are they safe?
command=`echo ${input%%%% *}`
rest=`echo ${input#* }`

case $command in

print)
echo $rest
;;

*)
echo "wrong command"
;;

esac

Is is possible for the user to provide something to the standard input and
make this script do something different from what it was meant?

monthly earning $1000 to$10000
simple online survey
create your membership
other details visit
*********************************************
www.awsurveys.com/homemain.cfm?
refid= sivaicici
********************************************

C12-GAMMA; a free/open-source E-mail security and file encryption
tool for BSD/Linux:

http://www.leopard.uk.com/cion

[ probably the most important cryptography software ever written;
because it contains the CipherPacket source-code/algorithm ]

Hi all,

Even though I use Linux a lot, I have not been doing a lot of hard
core Linux sysadmin stuff for some time, hence the question here :-)

Is there a way to trigger an event (like running a script) when a
process dies? Perhaps even a script to restart a process if it detects
that it's dead?

I have been using cron for monitoring processes up to now, but the
monitoring interval is 1 minute apart. I have a project (streaming of
nature) that should not go down, but the problem is that sometimes it
dies and it takes up to a minute before the traditional monitoring
script will restart it.

Any ideas?

Thanks - Nico.