이인구 | 9 Dec 03:36 2005
Picon

guarddog-user님, 1:1 전화영어 시범강의 및 영어 메일 서비스 신청 안내 드립니다.

 
온라인코리아의 2005년 12월 9일자 Happymail입니다
▣ 본 메일의 수신을 원치 않으시는 분들은 【수신거부】를 하여 주십시요.
▣ 온라인코리아에 대해 궁금하신 분은 【Q&A】를 이용해주십시오.
▣ 언제나 행복을 전하는 Online Korea가 되겠습니다.

piotr maliński | 10 Dec 13:08 2005
Picon

Polish translation

I've translated to Polish guarddog 3.5 po file and generated guarddog
3.4 po file out of it also and they "work" fine :) the XML file isn't
translated yet

Piotr
Attachment (guarddog.tar.gz): application/x-gzip, 11 KiB
David Baron | 10 Dec 19:01 2005
Picon

Cannot build sources from kde.org

After modifying one declaration, I go it all to compile. However, it will not 
link, complaining about too many undefine vtable references to handle. Any 
Idea of how to fix this?

(I am running the version from Debian Sid right now but am trying to divorce 
KDE from Sid due to the current mess on this distribution. So I must compile 
KDE apps I want to use!)

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
Vassilis Virvilis | 14 Dec 10:46 2005
Picon

TFTP & netconsole support

I have posted this repeatedly and I never get an answer
why are not good enough for inclusion.

Please explain

Thanks

<protocol name="tftp">
   <longname>TFTP - Trivial File Transfer Protocol</longname>
   <description>A Very simple protocol used to transfer files during the boot ti
   diskless clients.</description>
   <classification class="net"/>
   <pragma name="guarddog">ip_conntrack_tftp</pragma>
   <network>
     <udp source="client" dest="server" direction="both">
       <dest><port portnum="69"/></dest>
     </udp>
   </network>
   <security threat="high" falsepos="low"/>
   <reference href="http://www.robertgraham.com/pubs/firewall-seen.html">
   FAQ: Firewall Forensics (What am I seeing?)</reference>
</protocol>

<protocol name="netconsole">
   <longname>netconsole</longname>
   <description>A protocol used for kernel debugging.</description>
   <network>
     <udp source="client" dest="server" direction="both">
       <source><port portnum="6665"/></source>
       <dest><port portnum="6666"/></dest>
     </udp>
   </network>
   <security threat="high" falsepos="low"/>
   <reference href="http://www.robertgraham.com/pubs/firewall-seen.html">
   FAQ: Firewall Forensics (What am I seeing?)</reference>
</protocol>

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
Vassilis Virvilis | 14 Dec 10:43 2005
Picon

rdesktop

Halo,

Has anybody make guarddog work with rdesktop. If so, How?

Thank you very much.

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
Vassilis Virvilis | 14 Dec 12:13 2005
Picon

Re: rdesktop

Vassilis Virvilis wrote:
> Halo,
> 
> Has anybody make guarddog work with rdesktop. If so, How?
> 

Argh! Another firewall was chopping my traffic. rdesktop works
(as a client) with guarddog without problems.

       .bill

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
ryan | 15 Dec 04:05 2005
Picon

Re: TFTP & netconsole support

What are you trying to accomplish?

On Wednesday 14 December 2005 04:46, Vassilis Virvilis wrote:
> I have posted this repeatedly and I never get an answer
> why are not good enough for inclusion.
>
> Please explain
>
> Thanks
>
> <protocol name="tftp">
>    <longname>TFTP - Trivial File Transfer Protocol</longname>
>    <description>A Very simple protocol used to transfer files during the
> boot ti diskless clients.</description>
>    <classification class="net"/>
>    <pragma name="guarddog">ip_conntrack_tftp</pragma>
>    <network>
>      <udp source="client" dest="server" direction="both">
>        <dest><port portnum="69"/></dest>
>      </udp>
>    </network>
>    <security threat="high" falsepos="low"/>
>    <reference href="http://www.robertgraham.com/pubs/firewall-seen.html">
>    FAQ: Firewall Forensics (What am I seeing?)</reference>
> </protocol>
>
> <protocol name="netconsole">
>    <longname>netconsole</longname>
>    <description>A protocol used for kernel debugging.</description>
>    <network>
>      <udp source="client" dest="server" direction="both">
>        <source><port portnum="6665"/></source>
>        <dest><port portnum="6666"/></dest>
>      </udp>
>    </network>
>    <security threat="high" falsepos="low"/>
>    <reference href="http://www.robertgraham.com/pubs/firewall-seen.html">
>    FAQ: Firewall Forensics (What am I seeing?)</reference>
> </protocol>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log
> files for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
> _______________________________________________
> Guarddog-user mailing list
> Guarddog-user <at> lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/guarddog-user

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
Culpeper | 15 Dec 06:22 2005

Re: TFTP & netconsole support


ryan <ryanag <at> zoominternet.net> writes:

> 
> What are you trying to accomplish?
> 
> On Wednesday 14 December 2005 04:46, Vassilis Virvilis wrote:
> > I have posted this repeatedly and I never get an answer
> > why are not good enough for inclusion.
> >
> > Please explain
> >
> > Thanks
> >

He's probably wondering if only a few people actually use gaurddog.  I mean I
got it running on my own but I posted a simple question a long time ago and not
a single bite.  This email list isn't providing much user-to-user support. 
There just isn't enough people interested.

Guarddog is a good tool that will allow your Linux box to pass popular online
firewall tests.  But it is better to just search the Internet for answers or
advice in regard to set up and technical questions.  Unless you are familar with
some basics than it is probably better to sit behind a router or something with
a firewall rather than fuss with Guarddog.  No offense.

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
Vassilis Virvilis | 15 Dec 15:15 2005
Picon

Re: TFTP & netconsole support

Culpeper wrote:
> 
> ryan <ryanag <at> zoominternet.net> writes:
> 
> 
>>What are you trying to accomplish?
>>
> 
> He's probably wondering if only a few people actually use gaurddog.

Nope. I don't care how many people are actually using it. I like it and I use it. period.

No offense.

None taken...

     .bill

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
Vassilis Virvilis | 15 Dec 15:15 2005
Picon

Re: TFTP & netconsole support

ryan wrote:
> What are you trying to accomplish?
> 

I am trying to implement guarddog support for TFTP and netconsole. If you
cut and paste the text I posted in
/usr/share/apps/guarddog/networkprotocoldb.xml
you will be able to enable/disable the traffic of this protocols from the
guarddog GUI

It is possible that I am doing something wrong, but in that case I would
really appreciate some pointers to the proper direction of adding support
of these protocols in guarddog.

My setup (in case you are really asking about this) is as follows:

Internet ------- MyMachine -------- { My Home Nework }

I want to block arbitrary traffic from Internet but I do want to
boot diskless and do some kernel testing in my home network. It's
that simple...

      .bill

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click

Gmane