OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Alvin Oga (aoga_at_Maggie.Linux-Consulting.com)
Date: Tue Oct 08 2002 - 07:09:29 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    hi ya

    if the machines are hardened and so are the network..

    if you attempt to do something like telnet,ftp,ppp,pop3s,dhcp...
    it just wotn connect/work ...
            - firewall will drop those services
            becauses its "against policy"

    if the admin is NOT notified/emailed/paged ..
    than the systems need to be upgraded...
            - but than again, you only want tobe emailed/paged
            only when its important... not because a newbie
            tried to do yahoo chat during the work day ...etc
            or telnet/ftp instead of ssh

    c ya
    alvin

    On Tue, 8 Oct 2002, Kjetil Kjernsmo wrote:

    > On Tuesday 08 October 2002 13:57, martin f krafft wrote:
    >
    > > Use netcat for that.
    >
    > [*hm, man netcat*] Yeah, OK, thanks, I didn't know about that.
    >
    > > > That way, people with correct privileges could still use telnet for
    > > > sensible things, yet the admin would be warned if they did
    > > > something very careless with other packages.
    > >
    > > How would the admin be warned?
    >
    > Oh, wasn't that the point with the harden-clients package? If you
    > attempt to install a Bad[tm] client, you will be told, because it
    > conflicts with harden-clients?
    >

    -- 
    To UNSUBSCRIBE, email to debian-security-requestlists.debian.org
    with a subject of "unsubscribe". Trouble? Contact listmasterlists.debian.org