Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 05 Feb 2002 06:40:43 +0100
From:      Zahemszky =?iso-8859-1?Q?G=E1bor?= <Gabor@Zahemszky.HU>
To:        freebsd-security@freebsd.org
Subject:   Re: Port 113 Traffic
Message-ID:  <20020205054043.GA210@Picasso.Zahemszky.HU>
In-Reply-To: <20020204200906.5559b083.resopmok@gramsc1.dyndns.org>
References:  <200202041914.g14JEiM74583@dc.cis.okstate.edu> <20020204202532.P34448@heresy.dreamflow.nl> <20020204200906.5559b083.resopmok@gramsc1.dyndns.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Feb 04, 2002 at 08:09:06PM -0500, Chris Thomas wrote:
> Hi folks-
> 
> If i might make suggestions that will both fulfill security concerns and
> provide identd services.  I ran across a program on freshmeat called
> bsidentd (http://freshmeat.net/projects/bsidentd/) which will provide a
> random auth response each time it is queried.  It does not interact with
> user processes, yet prevents programs such as sendmail from hanging during
> auth query and allows services such as IRC, while at the same time
> protecting valuable information about user names.

Hi!

And what about the FBSD's inetd's builtin identd (auth) and the -g option?
man inetd:

     Currently, the only internal service to take arguments is ``auth''.
     Without options, the service will always return ``ERROR : HIDDEN-USER''.
     The available arguments to this service that alter its behavior are:

     -g      Instead of returning the user's name to the ident requester,
             report a username made up of random alphanumeric characters, e.g.
             ``c0c993''.  The -g flag overrides not only the user names, but
             also any fallback name, .fakeid or .noident files.

Bye,

ZGabor < Gabor at Zahemszky dot HU >

-- 
#!/bin/ksh
Z='21N16I25C25E30, 40M30E33E25T15U!' ;IFS=' ABCDEFGHIJKLMNOPQRSTUVWXYZ ';set $Z ;for i { [[ $i = ? ]]&&print $i&&break;[[ $i = ??? ]]&&j=$i&&i=${i%?};typeset -i40 i=8#$i;print -n ${i#???};[[ "$j" = ??? ]]&&print -n "${j#??} "&&j=;typeset +i i;};IFS=' 0123456789 ';set $Z;X=;for i { [[ $i = , ]]&&i=2;[[ $i = ?? ]]||typeset -l i;X="$X $i";typeset +l i;};print "$X"

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020205054043.GA210>