[96790] in RedHat Linux List
Re: RedHat bugs???
daemon@ATHENA.MIT.EDU (John D. Hardin)
Thu Oct 29 11:57:01 1998
Date: Thu, 29 Oct 1998 08:32:13 -0800 (PST)
From: "John D. Hardin" <jhardin@wolfenet.com>
To: Leo <leonardo@dinamicmultimedia.es>
cc: redhat-list@redhat.com
In-Reply-To: <36388219.4D525D58@dinamicmultimedia.es>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
On Thu, 29 Oct 1998, Leo wrote:
> Just recently, I was chatting about linux with an individual on an irc
> channel. Suddenly he started telling me everything I was using on my
> computer (from the window manager, to irc client --that's easy--,
> etc...)... Apparently he got into my computer thanks to a bug in
> redhat's linux distribution (or so he said)... He told me the bug in
> question is in lpd (among others). He also said that, in order to
> protect myself, I should disable the printing service, by commenting out
> the line in /etc/services, but this leaves me without proper printing
> environment (I have to manually run lpd as root every time I send a job
> to print).
Disabling lpd is a bit extreme as a first step, assuming of course
that you're up-to-date on all of the errata.
As a first step you should implement packet filtering on your Internet
connection. There's no reason to accept lpd traffic from the
Internet...
Take a look at http://www.lowrent.org/jhardin/ipfwadm.html for a GUI
wrapper around the ipfwadm command that will make managing this easier
for you.
--
John Hardin KA7OHZ jhardin@wolfenet.com
pgpk -a finger://gonzo.wolfenet.com/jhardin PGP key ID: 0x41EA94F5
PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
-----------------------------------------------------------------------
Mary had a little key
she kept it in escrow
and everything that Mary sent
the feds were sure to know -- Andy Starritt, in sci.crypt
-----------------------------------------------------------------------
2 days until Halloween
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com http://archive.redhat.com
To unsubscribe: mail redhat-list-request@redhat.com with
"unsubscribe" as the Subject.
