OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: hg9627 (Christian.Hennmni.fh-giessen.de)
Date: Tue Oct 09 2001 - 03:47:13 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hello,

    I just set up LPRng based printing in a multi-office environment and made
    no negative experiences so far.

    > possible, printer if it does not compromise the system. Is it possible
    > that lpd(LPRng) can be configured in a fool proof way for this linux
    > system?

    what do you mean by fool-proof? You should be able to print nearly all
    file types, account users and that's what printing is about.

    >I have seen that there exists vulnerabilities even for Redhat 7.0.
    > But I do not know about Redhat 7.1.

    Limit access to your printer via lpd.conf, there's some ways to restrict
    hosts by subnet and ip-addresses. tcp-wrappers should be mandatory
    nowadays. Another question is if office environments really need official
    ip-addresses?
    Given that unrouteable address-space (eg 192.168.xxx.xxx./24) your
    vulnerability exploits can just come from the inside where you can kick someone's butt.

    mfG
            Christian Henn