From owner-cvs-all Tue Jun 23 11:05:47 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA02005 for cvs-all-outgoing; Tue, 23 Jun 1998 11:05:47 -0700 (PDT) (envelope-from owner-cvs-all@FreeBSD.ORG) Received: from burka.rdy.com (dima@burka.rdy.com [205.149.163.30]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA01999 for ; Tue, 23 Jun 1998 11:05:44 -0700 (PDT) (envelope-from dima@burka.rdy.com) Received: (from dima@localhost) by burka.rdy.com (8.8.8/RDY&DVV) id LAA22354; Tue, 23 Jun 1998 11:05:33 -0700 (PDT) Message-Id: <199806231805.LAA22354@burka.rdy.com> Subject: Re: Release schedule for 2.2.7 In-Reply-To: <19980623192450.A1458@klemm.gtn.com> from Andreas Klemm at "Jun 23, 1998 7:24:50 pm" To: andreas@klemm.gtn.com (Andreas Klemm) Date: Tue, 23 Jun 1998 11:05:33 -0700 (PDT) Cc: jkh@time.cdrom.com, committers@FreeBSD.ORG X-Class: Fast Organization: HackerDome Reply-To: dima@best.net From: dima@best.net (Dima Ruban) X-Mailer: ELM [version 2.4ME+ PL43 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk Also, sendmail needs to be updated in both -current and -stable. And I'd love to see bind8 in -stable too (we already have it in -current). Andreas Klemm writes: > On Tue, Jun 23, 1998 at 02:14:03AM -0700, Jordan K. Hubbard wrote: > > o Security folks > > > > Check your CERT advisories and whatnot against the state of -stable > > today. Sometimes things are missed. > > daily security check script needs some additions... > > Login failures that are logged in /var/log/messages aren't > reported. Last recently I noticed various login/crack attempts > on a FreeBSD-STABLE machine in my company. > > Things we should report are: > > "refused connect from" by tcp_wrapper > and > "LOGIN FAILURES FROM" by login > > See here: > Jun 22 05:17:43 titan telnetd[10520]: refused connect from 195.90.203.76 > Jun 22 05:18:05 titan telnetd[10523]: refused connect from 195.90.203.76 > Jun 22 05:20:22 titan telnetd[10951]: refused connect from 195.90.203.76 > Jun 22 05:20:37 titan telnetd[10953]: refused connect from 195.90.203.76 > Jun 22 05:21:04 titan telnetd[10955]: refused connect from 195.90.203.76 > Jun 22 05:22:30 titan login: 2 LOGIN FAILURES FROM freefall.FreeBSD.ORG > Jun 22 05:22:30 titan login: 2 LOGIN FAILURES FROM freefall.FreeBSD.ORG, > andreas > Jun 22 05:23:39 titan login: 2 LOGIN FAILURES FROM freefall.FreeBSD.ORG > Jun 22 05:23:39 titan login: 2 LOGIN FAILURES FROM freefall.FreeBSD.ORG, root > Jun 22 05:24:03 titan login: 1 LOGIN FAILURE FROM freefall.FreeBSD.ORG > Jun 22 05:24:03 titan login: 1 LOGIN FAILURE FROM freefall.FreeBSD.ORG, ddd > > -- > Andreas Klemm http://www.FreeBSD.ORG/~andreas > What gives you 90% more speed, for example, in kernel compilation ? > http://www.FreeBSD.ORG/~fsmp/SMP/akgraph-a/graph1.html > "NT = Not Today" (Maggie Biggs) ``powered by FreeBSD SMP'' > -- dima To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message