From linux-crypto-bounce@nl.linux.org Fri Jul 01 15:06:14 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DoLDc-0001pW-J8; Fri, 01 Jul 2005 15:06:08 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 01 Jul 2005 15:05:31 +0200 (CEST) Received: from web54001.mail.yahoo.com ([206.190.36.225]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1DoLCL-0000Tn-Ay for linux-crypto@nl.linux.org; Fri, 01 Jul 2005 15:04:49 +0200 Received: (qmail 36549 invoked by uid 60001); 1 Jul 2005 13:04:36 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=oTUmO8zG+BtrKfgYNd+RXRoYwDD7GPSTIeH0e8HgvqLUyG7fpjmF0L0v6t8OOIa0VfImVDRg7JBAyVC3l2r23mn3Fsc96N1C6mE/M5Kn3mwyBbWI5sZHA8gOXYXRjkX7Rma0TKYN7KrePfQCW1JK0esUdC0uTK/OprhvK6vAQTI= ; Message-ID: <20050701130436.36547.qmail@web54001.mail.yahoo.com> Received: from [83.235.160.2] by web54001.mail.yahoo.com via HTTP; Fri, 01 Jul 2005 06:04:36 PDT Date: Fri, 1 Jul 2005 06:04:36 -0700 (PDT) From: Phil H Subject: Problems building from tarballs solved To: linux-crypto@nl.linux.org MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: philtickle200@yahoo.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Now reporting success in building loop-aes from sourceforge tarballs - my last post on this, only for closure and for the benefit of future newbs. All problems were solved by reading http://lists.debian.org/debian-user/2003/05/msg00069.html It was a simple omission. Though I had rebuilt my 2.4.27-2-386 kernel with loops off as 2.4.27.noloops, I had subsequently deleted the source trees, which meant all the necessary info was gone. I then had downloaded and unpacked the source for the 2.4.27 kernel (official debian in my case). (Sourceforge tarballs for loop-aes and loop-aes-ciphers were already unpacked). All I then needed to do was: # Boot into my 2.4.27.noloops kernel cp /boot/config-2.4.27-2-386 \ /usr/src/kernel /source-2.4.27/.config; \ cd /usr/src/kernel-source-2.4.27; \ make oldconfig ;\ # this part I knew make dep; \ # this part I DIDN'T know <--- # Then open makefile and set EXTRAVERSION=-2-386 # because module is being built for 2.4.27-2-386 # and not for 2.4.27.noloops cd /home/phil/loop-AES-v3.0d ;\ # or whatever the sources directory is for loop-aes make clean ;\ make LINUX_SOURCE=/usr/src/kernel-source-2.4.27 KEYSCRUB=y ;\ # Then, to do tests, and to build loop-aes-ciphers: # (I'd already built the patched utils.) # Reboot into the original loop-enabled kernel 2.4.27-2-386 cd /home/phil/loop-AES-v3.0d;\ make tests ;\ --> ***test results OK*** # ! cd /home/phil/ciphers-v3.0b ;\ make clean ;\ make LINUX_SOURCE=/usr/src/kernel-source-2.4.27 ;\ make tests ;\ --> ***test results OK*** # ! --------------------------------------------- How easy that was. (No m-a fakesource). No doubt this is not surprising to the old hands. (A minor complication was that, since I had already built loop-aes and loop-aes-ciphers from the Sid debian sources against the loop-enabled kernel, and although these were in a different location, I needed to delete those modules (and run depmod I think) before compiling loop-aes-ciphers - or there were errors). If any of this is wrong, please advise. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri Jul 01 16:25:33 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DoMSQ-0004rU-2V; Fri, 01 Jul 2005 16:25:30 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 01 Jul 2005 16:25:14 +0200 (CEST) Received: from mail.tnnet.fi ([217.112.240.26]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DoMRx-0004pb-6Q for linux-crypto@nl.linux.org; Fri, 01 Jul 2005 16:25:01 +0200 Received: from localhost (localhost [127.0.0.1]) by mail.tnnet.fi (Postfix) with ESMTP id D496530CC51; Fri, 1 Jul 2005 17:24:49 +0300 (EEST) Received: from mail.tnnet.fi ([127.0.0.1]) by localhost (mail [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 07139-12; Fri, 1 Jul 2005 17:24:43 +0300 (EEST) Received: from armas (a64.adsl.tnnet.fi [217.112.242.64]) by mail.tnnet.fi (Postfix) with ESMTP id 4ACC830CBF4; Fri, 1 Jul 2005 17:20:21 +0300 (EEST) Received: from localhost ([127.0.0.1] helo=users.sourceforge.net) by armas with esmtp (Exim) id 1DoMNQ-0004Ny-00; Fri, 01 Jul 2005 17:20:20 +0300 Message-ID: <42C55124.BF1BF49A@users.sourceforge.net> Date: Fri, 01 Jul 2005 17:20:20 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r10 i686) X-Accept-Language: en MIME-Version: 1.0 To: Phil H Cc: linux-crypto@nl.linux.org Subject: Re: Problems building from tarballs solved References: <20050701130436.36547.qmail@web54001.mail.yahoo.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at mail.tnnet.fi Received-SPF: X-Spam-Status: No, score=-1.4 required=5.0 tests=AWL,BAYES_00 autolearn=no version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Phil H wrote: > Now reporting success in building loop-aes from sourceforge tarballs Looks like I have to ruin your day... > cd /usr/src/kernel-source-2.4.27; \ > make oldconfig ;\ # this part I knew > make dep; \ # this part I DIDN'T know <--- But that "make oldconfig ; make dep" is not enough. Correct way to prepare kernel sources + config for module building is to build a kernel without installing the kernel + modules. Something like this: cd /usr/src/kernel-source-2.4.27 Open Makefile and set EXTRAVERSION=-2-386 mv .config z # save config make distclean # get rid of previous kernel compile junk mv z .config # restore config make oldconfig make dep && make clean make bzImage && make modules Now you have kernel sources and all kernel compile time generated files matching your kernel config in a way that can be used to compile more modules. cd /home/phil/loop-AES-v3.0d make LINUX_SOURCE=/usr/src/kernel-source-2.4.27 KEYSCRUB=y -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri Jul 01 20:17:38 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DoQ52-0003TP-Tc; Fri, 01 Jul 2005 20:17:36 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 01 Jul 2005 20:17:18 +0200 (CEST) Received: from woodstock.progeny.com ([216.37.46.131]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DoQ4Z-0003S6-ME for linux-crypto@nl.linux.org; Fri, 01 Jul 2005 20:17:07 +0200 Received: from woodstock.progeny.com (localhost [127.0.0.1]) by woodstock.progeny.com (Postfix) with ESMTP id 6FF9013F75 for ; Fri, 1 Jul 2005 13:16:16 -0500 (EST) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: Your message to progeny-debian awaits moderator approval From: progeny-debian-bounces@lists.progeny.com To: linux-crypto@nl.linux.org Message-ID: Date: Fri, 01 Jul 2005 13:16:15 -0500 Precedence: bulk X-BeenThere: progeny-debian@lists.progeny.com X-Mailman-Version: 2.1.1 Received-SPF: X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_50,NO_REAL_NAME autolearn=no version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: progeny-debian-bounces@lists.progeny.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Your mail to 'progeny-debian' with the subject Returned mail: Data format error Is being held until the list moderator can review it for approval. The reason it is being held: SpamAssassin identified this message as possible spam Either the message will get posted to the list, or you will receive notification of the moderator's decision. If you would like to cancel this posting, please visit the following URL: http://lists.progeny.com/confirm/progeny-debian/fd53f97623a19fcf024a00688882286bbf9edef8 - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sat Jul 02 22:54:24 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dop0I-0004GV-23; Sat, 02 Jul 2005 22:54:22 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sat, 02 Jul 2005 22:53:53 +0200 (CEST) Received: from [217.26.196.81] (helo=mistral.over-link.net) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DoozY-0004Fq-F7 for linux-crypto@nl.linux.org; Sat, 02 Jul 2005 22:53:36 +0200 Received: from localhost (localhost [127.0.0.1]) by mistral.over-link.net (Postfix) with ESMTP id 366A09BCCC for ; Sat, 2 Jul 2005 22:53:37 +0200 (CEST) MIME-Version: 1.0 Date: Sat, 2 Jul 2005 22:53:37 +0200 (CEST) From: Administrateur Over-Link Subject: VIRUS dans votre mail / VIRUS in your mail Message-Id: Content-Type: multipart/report; report-type=delivery-status; boundary="----------=_1120337617-31972-1" To: Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Level: * X-Spam-Status: No, score=2.0 required=5.0 tests=AWL,BAYES_99 autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: admin@over-link.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto This is a multi-part message in MIME format... ------------=_1120337617-31972-1 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable VIRUS=20 Notre filtre a trouv=E9 dans votre mail: - le(s) virus suivant(s) : Worm.Mydoom.M, Worm.Mydoom.M - le(s) fichier(s) interdit(s) suivant(s): message.cmd *** ATTENTION: Votre mail n'a PAS =E9t=E9 REMIS =E0 votre destinataire *** Pour plus d'information : http://support.over-link.net/index.php?virus=3DClick+Here --- Le support Over-Link http://www.over-link.net support@over-link.net ************************* VIRUS Our filter has found: - a virus : Worm.Mydoom.M, Worm.Mydoom.M - a forbidden fil(s): message.cmd *** WARNING: Your mail has NOT been DELIVERED *** For details : http://support.over-link.net/index.php?virus=3DClick+Here&cp=3Dus --- Support Over-Link http://www.over-link.net support@over-link.net ------------=_1120337617-31972-1 Content-Type: message/delivery-status Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Description: Delivery error report Reporting-MTA: dns; mistral Received-From-MTA: smtp; mistral.over-link.net ([127.0.0.1]) Arrival-Date: Sat, 2 Jul 2005 22:53:37 +0200 (CEST) Final-Recipient: rfc822; aide-linux@ze-linux.org Action: failed Status: 5.7.1 Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=31972-01 - VIRUS: Worm.Mydoom.M, Worm.Mydoom.M Last-Attempt-Date: Sat, 2 Jul 2005 22:53:37 +0200 (CEST) ------------=_1120337617-31972-1 Content-Type: text/rfc822-headers Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Description: Undelivered-message headers Received: by mistral.over-link.net (Postfix, from userid 104) id 0652F9BCF5; Sat, 2 Jul 2005 22:53:37 +0200 (CEST) Received: from nl.linux.org (pile-2-82-226-110-89.fbx.proxad.net [82.226.110.89]) by mistral.over-link.net (Postfix) with ESMTP id 156D69BCCC for ; Sat, 2 Jul 2005 22:53:35 +0200 (CEST) From: linux-crypto@nl.linux.org To: aide-linux@ze-linux.org Subject: Returned mail: see transcript for details Date: Sat, 2 Jul 2005 22:53:36 +0200 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0014_FCAD3679.1B246A1C" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-Id: <20050702205335.156D69BCCC@mistral.over-link.net> ------------=_1120337617-31972-1-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Jul 03 01:18:55 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DorG8-0002Eh-CC; Sun, 03 Jul 2005 01:18:52 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 03 Jul 2005 01:18:38 +0200 (CEST) Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1DorFY-0002A2-Lt for linux-crypto@nl.linux.org; Sun, 03 Jul 2005 01:18:16 +0200 Received: (qmail 27501 invoked by uid 0); 2 Jul 2005 23:16:44 -0000 Received: from 84.175.54.172 by www62.gmx.net with HTTP; Sun, 3 Jul 2005 01:16:44 +0200 (MEST) Date: Sun, 3 Jul 2005 01:16:44 +0200 (MEST) From: Peter_22@gmx.de To: Jari Ruusu Cc: philtickle200@yahoo.com, linux-crypto@nl.linux.org MIME-Version: 1.0 References: <42C55124.BF1BF49A@users.sourceforge.net> Subject: =?ISO-8859-1?Q?Re:_Problems_building_from_tarballs_solved?= X-Priority: 3 (Normal) X-Authenticated: #5663700 Message-ID: <16969.1120346204@www62.gmx.net> X-Mailer: WWW-Mail 1.6 (Global Message Exchange) X-Flags: 0001 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Level: X-Spam-Status: No, score=-0.9 required=5.0 tests=AWL,BAYES_00,NO_REAL_NAME autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto > --- Ursprόngliche Nachricht --- > Correct way to prepare kernel sources + config for module building is to > build a kernel without installing the kernel + modules. Something like > this: > > cd /usr/src/kernel-source-2.4.27 > > Open Makefile and set EXTRAVERSION=-2-386 > > mv .config z # save config > make distclean # get rid of previous kernel compile junk > mv z .config # restore config > make oldconfig > make dep && make clean > make bzImage && make modules Do I really need "make modules" in case I use source of running kernel and only just install loop-aes? So far I just reconfigured the kernel .config and built a new image with "make bzImage". Then I changed the kernel image, booted it and that΄s it. Why do I have to recompile hundreds of modules? Regards, Peter -- 5 GB Mailbox, 50 FreeSMS http://www.gmx.net/de/go/promail +++ GMX - die erste Adresse fόr Mail, Message, More +++ - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Jul 03 15:14:05 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dp4IM-0002bI-DS; Sun, 03 Jul 2005 15:14:02 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 03 Jul 2005 15:13:42 +0200 (CEST) Received: from plum.webfusion.co.uk ([212.67.202.208]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dp4Hr-0002a6-7v for linux-crypto@nl.linux.org; Sun, 03 Jul 2005 15:13:31 +0200 Received: from localhost.localdomain ([127.0.0.1]) by plum.webfusion.co.uk with esmtp (Exim 3.36 #1) id 1Dp4Hh-0007rM-00 for linux-crypto@nl.linux.org; Sun, 03 Jul 2005 14:13:21 +0100 From: greg@studio808.co.uk To: linux-crypto@nl.linux.org Date: Sun, 03 Jul 2005 14:13:21 +0100 Subject: Automatic-reply: Returned mail: Data format error Message-Id: Received-SPF: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_50,NO_REAL_NAME autolearn=no version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: greg@studio808.co.uk Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto STUDIO808 RUN A NO TOLERANCE POLICY FOR SPAM & JUNK MAIL. Due to the high amount of spam to this e-mail address we are scanned and tracked for suspected Spam and junk e-mail. Spam and junk e-mail offenders / domains will automatically be blocked and reported to their ISP's. In the process of doing so the auto scanning system may accidentally delete genuine e-mails along with spam and junk mails. We would therefore advise all genuine clients and suppliers to contact studio808 by telephone to obtain the new e-mail address for this mail recipient. We are sorry for any inconvenience or delay this may have caused for genuine clients or suppliers. PLEASE DO NOT REPLY TO THIS AS IT IS AUTO GENERATED AND WE WILL NOT RECIEVE YOUR MESSAGE. Thank you studio808 limited ------------------------------------------------------------------------------------------------------------ Please make sure you have the right persons e-mail address when sending to our domain. All e-mail sent to anything other than a correct recipients name is automatically deleted and persistent offenders will have their domains/e-mail address blocked and reported to their ISP. SPAM / JUNK EMAIL BLOCKED THIS WEEK [126] EMAIL ATTACHMENTS All studio808 e-mail is scanned and any attachments will be automatically deleted. If you are trying to send an attachment to a mail recipient at studio808 please contact them first to obtain the correct e-mail address. - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Jul 03 15:14:13 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dp4IW-0002ew-75; Sun, 03 Jul 2005 15:14:12 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 03 Jul 2005 15:14:07 +0200 (CEST) Received: from pmdeliver02.st1.spray.net ([212.78.207.213]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dp4Hw-0002a5-UO for linux-crypto@nl.linux.org; Sun, 03 Jul 2005 15:13:36 +0200 Received: from pmdeliver02.st1.spray.net (localhost [127.0.0.1]) by pmdeliver02.st1.spray.net (Postfix) with SMTP id 762B326F2E for ; Sun, 3 Jul 2005 13:13:25 +0000 (GMT) From: "Lycos premium email" To: linux-crypto@nl.linux.org Subject: Lycos Email virus alert\! Date: Sun, 3 Jul 2005 15:13:20 +0200 Reply-To: Precedence: bulk Mime-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Message-Id: <20050703131325.762B326F2E@pmdeliver02.st1.spray.net> Content-Transfer-Encoding: quoted-printable Received-SPF: X-Spam-Status: No, score=2.3 required=5.0 tests=BAYES_50,HTML_80_90, HTML_FONT_BIG,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY, REPLY_TO_EMPTY,URI_REDIRECTOR autolearn=no version=3.0.1 X-Spam-Level: ** X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: support-fwd-uk@lycos-europe.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto
Lycos notice
Dear linux-crypto@nl.linux.org,

Lycos Email's Virus protection has det= ected code or content that may contain a virus and it was found in the fo= llowing emails you sent:

=
  • Recipent: greg@studio808.co.uk
  • Subject: Returned mail: Data format error
  • Date: Sun, 3 Jul 2005 15:13:20 +0200
  • Virus found: Worm.Mydoom.M
The recipent greg@studio808.co.uk was warned that he didn't rec= eive your mail. Lycos strongly recommends you to run a complete Virus che= ck on your computer.

You= can do this online at http://antivirus.lycos.co.uk= for free!

To be safe, you need to protect your computer before it is infec= ted with a virus and severe damage is caused.
Protect your com= puter now, for only 3 pence per day, with the Lycos antivirus solution. <= /div>

Lycos quality assurance represents Lycos commitment to quality = and reliability through permanent monitoring of our systems.
 <= /div>
premium mail quality control
 = ;
- Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Sun Jul 03 15:25:32 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dp4TS-0003PM-Aw; Sun, 03 Jul 2005 15:25:30 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Sun, 03 Jul 2005 15:25:21 +0200 (CEST) Received: from mail.tnnet.fi ([217.112.240.26]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dp4T4-0003Ni-TN for linux-crypto@nl.linux.org; Sun, 03 Jul 2005 15:25:06 +0200 Received: from localhost (localhost [127.0.0.1]) by mail.tnnet.fi (Postfix) with ESMTP id E7D4330CC3A; Sun, 3 Jul 2005 16:24:57 +0300 (EEST) Received: from mail.tnnet.fi ([127.0.0.1]) by localhost (mail [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12541-13; Sun, 3 Jul 2005 16:24:49 +0300 (EEST) Received: from armas (a64.adsl.tnnet.fi [217.112.242.64]) by mail.tnnet.fi (Postfix) with ESMTP id 14F3130CBD6; Sun, 3 Jul 2005 16:22:52 +0300 (EEST) Received: from localhost ([127.0.0.1] helo=users.sourceforge.net) by armas with esmtp (Exim) id 1Dp4Qt-0000W7-00; Sun, 03 Jul 2005 16:22:51 +0300 Message-ID: <42C7E6AB.A4F42F92@users.sourceforge.net> Date: Sun, 03 Jul 2005 16:22:51 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r10 i686) X-Accept-Language: en MIME-Version: 1.0 To: Peter_22@gmx.de Cc: philtickle200@yahoo.com, linux-crypto@nl.linux.org Subject: Re: Problems building from tarballs solved References: <42C55124.BF1BF49A@users.sourceforge.net> <16969.1120346204@www62.gmx.net> Content-Type: text/plain; charset=iso-8859-1 X-Virus-Scanned: amavisd-new at mail.tnnet.fi Content-Transfer-Encoding: quoted-printable Received-SPF: X-Spam-Level: X-Spam-Status: No, score=-1.5 required=5.0 tests=AWL,BAYES_00 autolearn=no version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Peter_22@gmx.de wrote: > > mv .config z # save config > > make distclean # get rid of previous kernel compile junk > > mv z .config # restore config > > make oldconfig > > make dep && make clean > > make bzImage && make modules >=20 > Do I really need "make modules" in case I use source of running kernel = and > only just install loop-aes? > So far I just reconfigured the kernel .config and built a new image wit= h > "make bzImage". Then I changed the kernel image, booted it and that=B4s= it. > Why do I have to recompile hundreds of modules? All code that runs in kernel space must be compiled using exactly same kernel configuration. 1) change kernel source -> recompile kernel and all modules 2) change kernel configuration -> recompile kernel and all modules 3) change C compiler -> recompile kernel and all modules Kernel configuration change that does not change compiler code generation= or size of kernel structures probably does not need full recompile of kernel and all modules. Full recompile+install is always the safest thing to do. --=20 Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 = DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Jul 04 00:06:43 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpCbo-0006cu-7T; Mon, 04 Jul 2005 00:06:40 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 04 Jul 2005 00:05:57 +0200 (CEST) Received: from mail.gmx.de ([213.165.64.20] helo=mail.gmx.net) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1DpCav-00024m-RS for linux-crypto@nl.linux.org; Mon, 04 Jul 2005 00:05:45 +0200 Received: (qmail 7422 invoked by uid 0); 3 Jul 2005 22:04:14 -0000 Received: from 84.175.7.233 by www29.gmx.net with HTTP; Mon, 4 Jul 2005 00:04:14 +0200 (MEST) Date: Mon, 4 Jul 2005 00:04:14 +0200 (MEST) From: Peter_22@gmx.de To: Jari Ruusu Cc: philtickle200@yahoo.com, linux-crypto@nl.linux.org MIME-Version: 1.0 References: <42C7E6AB.A4F42F92@users.sourceforge.net> Subject: =?ISO-8859-1?Q?Re:_Problems_building_from_tarballs_solved?= X-Priority: 3 (Normal) X-Authenticated: #5663700 Message-ID: <27946.1120428254@www29.gmx.net> X-Mailer: WWW-Mail 1.6 (Global Message Exchange) X-Flags: 0001 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-1.4 required=5.0 tests=AWL,BAYES_20,NO_REAL_NAME autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: Peter_22@gmx.de Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto > --- Ursprόngliche Nachricht --- > Von: Jari Ruusu > All code that runs in kernel space must be compiled using exactly same > kernel configuration. > > 1) change kernel source -> recompile kernel and all modules > 2) change kernel configuration -> recompile kernel and all modules > 3) change C compiler -> recompile kernel and all modules > > Kernel configuration change that does not change compiler code generation > or > size of kernel structures probably does not need full recompile of kernel > and all modules. Full recompile+install is always the safest thing to do. I must confess, I never did that. On all pervious versions of SuSE I only made neccessary changes to boot encrypted root from usb-stick and only built the kernel image + loop.ko. That΄s it. So far it worked with the same modules before and after. The latest kernel upgrade I made works fine, with no modules recompiled. But I΄d like to know how to build a single module out of the kernel sources, or refresh module dependencies for those parts that have been built into the kernel. The SATA driver and IDE support had to be built in, for example. My efforts towards booting from a cardreader and tiny SD cards were not successful because my bios doesn΄t recognize the cardreaders I could get so far. Regards, Peter -- 5 GB Mailbox, 50 FreeSMS http://www.gmx.net/de/go/promail +++ GMX - die erste Adresse fόr Mail, Message, More +++ - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Jul 04 10:17:36 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpLzc-00051Z-EF; Mon, 04 Jul 2005 10:07:52 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 04 Jul 2005 10:07:32 +0200 (CEST) Received: from web54001.mail.yahoo.com ([206.190.36.225]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1DpLz4-0004xP-V9 for linux-crypto@nl.linux.org; Mon, 04 Jul 2005 10:07:19 +0200 Received: (qmail 92384 invoked by uid 60001); 4 Jul 2005 08:07:07 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=DfLhpl1z94LfyB8cPuN7LBVV3Wyc76tgacxtaYW8TXt8NBhqsWGUBQiQIv97kyOhzlOpLWWBX62DYeWwWAQoFsIOV5/M8ZJdyu5dnl/SyIfL7AnQaM26OF9xQoMgRqY/XvnfKsNfOIo4Q/NULv2TzdSwhZNZ45gr4dcDRHnEN/4= ; Message-ID: <20050704080707.92382.qmail@web54001.mail.yahoo.com> Received: from [83.235.160.2] by web54001.mail.yahoo.com via HTTP; Mon, 04 Jul 2005 01:07:07 PDT Date: Mon, 4 Jul 2005 01:07:07 -0700 (PDT) From: Phil H Subject: Re: Problems building from tarballs solved To: Jari Ruusu Cc: linux-crypto@nl.linux.org In-Reply-To: <42C55124.BF1BF49A@users.sourceforge.net> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: philtickle200@yahoo.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --- Jari Ruusu wrote: > > Looks like I have to ruin your day... Oh well :-( I'd much rather get it 100% right than do it wrong - that's why I posted! Thanks for setting me straight :-) Clearly I need to do more reading, but the websites I've been looking at never seem to spell all this out in explicit newbie-proof steps. You get a piece of the picture in one place and another piece somewhere else. I've started working through http://www.tldp.org/HOWTO/Module-HOWTO/basekerncompat.html. I note this actually tells you to force insertion of a module even though it was compiled for a different kernel version (!) (something Jari will probably disapprove of!) (chpt 6): " ..insmod has a -f option that "forces" insmod to ignore the kernel version mismatch and insert the module anyway. Because it is so unusual for there to be a significant difference between any two kernel versions, I recommend you always use -f." ____________________________________________________ Yahoo! Sports Rekindle the Rivalries. Sign up for Fantasy Football http://football.fantasysports.yahoo.com - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Jul 04 15:26:19 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpQxj-0006JY-TF; Mon, 04 Jul 2005 15:26:15 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 04 Jul 2005 15:25:45 +0200 (CEST) Received: from web54010.mail.yahoo.com ([206.190.36.234]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1DpQx4-0006IG-Tf for linux-crypto@nl.linux.org; Mon, 04 Jul 2005 15:25:35 +0200 Received: (qmail 9361 invoked by uid 60001); 4 Jul 2005 13:24:46 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=hsBblTli6YSVDF+Mf9hwIOwPjY0zlsXdQJtHSMhN+BHnierTpme0qss/bOPdCl65xO4uESYLyrYUTTHtAms7eNWZ3T3vwQWoyq11jNExETGz1DOODZaLrho9FQy7T/yXAcvxsIr0P5euvX2VdyWDl0ZwAO0sdRXzf4YOlhMErrg= ; Message-ID: <20050704132446.9359.qmail@web54010.mail.yahoo.com> Received: from [83.235.160.2] by web54010.mail.yahoo.com via HTTP; Mon, 04 Jul 2005 06:24:46 PDT Date: Mon, 4 Jul 2005 06:24:46 -0700 (PDT) From: Phil H Subject: Re: Problems building from tarballs solved To: Jari Ruusu Cc: linux-crypto@nl.linux.org In-Reply-To: <42C55124.BF1BF49A@users.sourceforge.net> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: philtickle200@yahoo.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Err.. one more question I need to check to be clear, which may be even more ignorant than my previous posts. The running kernel at the time of building the module must have been compiled with compiled with CONFIG_MODULES=y and CONFIG_BLK_DEV_LOOP=n. If I am building the loop.o driver for some kernel (for which I have a working config file ("z")) other than the above running loopless kernel, I can download the sources and do: make distclean # get rid of previous kernel compile junk mv z .config # restore config make oldconfig make dep && make clean make bzImage && make modules cd /home/phil/loop-AES-v3.0d make LINUX_SOURCE=/usr/src/kernel-source-2.x.y KEYSCRUB=y Should config file z also have CONFIG_MODULES=y and CONFIG_BLK_DEV_LOOP=n, or is that irrelevant? ____________________________________________________ Yahoo! Sports Rekindle the Rivalries. Sign up for Fantasy Football http://football.fantasysports.yahoo.com - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Jul 04 16:19:44 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpRnP-0006Fr-6O; Mon, 04 Jul 2005 16:19:39 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 04 Jul 2005 16:19:28 +0200 (CEST) Received: from web54004.mail.yahoo.com ([206.190.36.228]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1DpRmz-0006EH-Gp for linux-crypto@nl.linux.org; Mon, 04 Jul 2005 16:19:13 +0200 Received: (qmail 98508 invoked by uid 60001); 4 Jul 2005 14:19:02 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=YANuZUjK2Csz2CAD7zJRKdUT0rSWT593kylNJHPpCXPZY8gnsJ1s8yW8JTcuNQpqxckgST9fNMCVIjE4ygWUK97t2li42ZRBjSJjgHKXoiarSJeyPoKoZ3GyAqUplBxF4cUczTVJoJGzEzIWh/wNs27m88jyVba+aMMAiPgvsI4= ; Message-ID: <20050704141902.98506.qmail@web54004.mail.yahoo.com> Received: from [83.235.160.2] by web54004.mail.yahoo.com via HTTP; Mon, 04 Jul 2005 07:19:01 PDT Date: Mon, 4 Jul 2005 07:19:01 -0700 (PDT) From: Phil H Subject: Re: Problems building from tarballs solved To: Jari Ruusu Cc: linux-crypto@nl.linux.org In-Reply-To: <42C55124.BF1BF49A@users.sourceforge.net> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: philtickle200@yahoo.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto > Correct way to prepare kernel sources + config for > module building is to > build a kernel without installing the kernel + > modules. Something like this: An aside (I don't know how correct it is): I see that this guide http://www.tldp.org/LDP/lkmpg/2.6/html/x384.htm says you can, if desired, CNTRL-C the kernel build after the SPLIT line and it still results in the source configured correctly for module building: [root@pcsenonsrv linux-2.6.x]# make CHK include/linux/version.h UPD include/linux/version.h SYMLINK include/asm -> include/asm-i386 SPLIT include/linux/autoconf.h -> include/config/* [cntrl-c] Also on that page, the author seems (?) to clarify/contradict his earlier statement about it being desirable to force module loading when the kernel version magic is mismatched. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Jul 04 17:19:33 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpSjG-0006gR-Ug; Mon, 04 Jul 2005 17:19:26 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 04 Jul 2005 17:18:58 +0200 (CEST) Received: from mail.tnnet.fi ([217.112.240.26]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpSiP-0006by-S4 for linux-crypto@nl.linux.org; Mon, 04 Jul 2005 17:18:33 +0200 Received: from localhost (localhost [127.0.0.1]) by mail.tnnet.fi (Postfix) with ESMTP id D5F0A30CC02; Mon, 4 Jul 2005 18:18:21 +0300 (EEST) Received: from mail.tnnet.fi ([127.0.0.1]) by localhost (mail [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 30401-05; Mon, 4 Jul 2005 18:18:14 +0300 (EEST) Received: from armas (a64.adsl.tnnet.fi [217.112.242.64]) by mail.tnnet.fi (Postfix) with ESMTP id BD98EE00A; Mon, 4 Jul 2005 18:18:14 +0300 (EEST) Received: from localhost ([127.0.0.1] helo=users.sourceforge.net) by armas with esmtp (Exim) id 1DpSi6-0000Rw-00; Mon, 04 Jul 2005 18:18:14 +0300 Message-ID: <42C95336.351C51BF@users.sourceforge.net> Date: Mon, 04 Jul 2005 18:18:14 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r10 i686) X-Accept-Language: en MIME-Version: 1.0 To: Phil H Cc: linux-crypto@nl.linux.org Subject: Re: Problems building from tarballs solved References: <20050704080707.92382.qmail@web54001.mail.yahoo.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at mail.tnnet.fi Received-SPF: X-Spam-Status: No, score=-1.6 required=5.0 tests=AWL,BAYES_00 autolearn=no version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Phil H wrote: > " ..insmod has a -f option that "forces" insmod to > ignore the kernel version mismatch and insert the > module anyway. Because it is so unusual for there to > be a significant difference between any two kernel > versions, I recommend you always use -f." insmod -f is intended for binary only modules which end user can't recompile for his kernel. > If I am building the loop.o driver for some kernel > (for which I have a working config file ("z")) other > than the above running loopless kernel, I can download > the sources and do: > > make distclean # get rid of previous kernel > compile junk > mv z .config # restore config > make oldconfig > make dep && make clean > make bzImage && make modules > cd /home/phil/loop-AES-v3.0d > make LINUX_SOURCE=/usr/src/kernel-source-2.x.y > KEYSCRUB=y make distclean cp YOUR_CONFIG_HERE .config make oldconfig make dep && make clean make bzImage && make modules Always run "make distclean" before "make oldconfig". "make distclean" removes .config file, so .config must be saved to some other file ("z") or copied from elsewhere else. > Should config file z also have CONFIG_MODULES=y > and CONFIG_BLK_DEV_LOOP=n, or is that irrelevant? Configuration of kernel that you are compiling is irrelevant to your running kernel. > An aside (I don't know how correct it is): I see that > this guide > http://www.tldp.org/LDP/lkmpg/2.6/html/x384.htm says > you can, if desired, CNTRL-C the kernel build after > the SPLIT line and it still results in the source > configured correctly for module building: > > [root@pcsenonsrv linux-2.6.x]# make > CHK include/linux/version.h > UPD include/linux/version.h > SYMLINK include/asm -> include/asm-i386 > SPLIT include/linux/autoconf.h -> include/config/* > [cntrl-c] Above may work. I recommend full recompile without CTRL-c tricks. -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Mon Jul 04 19:35:25 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpUqp-000885-DW; Mon, 04 Jul 2005 19:35:23 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Mon, 04 Jul 2005 19:34:59 +0200 (CEST) Received: from ar-bouvier.atl.sa.earthlink.net ([207.69.195.108]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpUqF-0007zG-2c for linux-crypto@nl.linux.org; Mon, 04 Jul 2005 19:34:47 +0200 Received: from [10.121.32.25] (helo=mx-pinchot.atl.sa.earthlink.net) by ar-bouvier.atl.sa.earthlink.net with smtp (Exim 3.36 #4) id 1DpUor-0000Rl-00 for linux-crypto@nl.linux.org; Mon, 04 Jul 2005 13:33:21 -0400 To: linux-crypto@nl.linux.org From: barrylippitt@earthlink.net Date: Mon, 4 Jul 2005 13:33:21 -0400 (EDT) Subject: Re: Returned mail: see transcript for details Reply-to: nobody@earthlink.net Precedence: auto_reply MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="SPMB1120498401a5bab179d4664fd637beba9ee8ed18f4" Message-Id: Received-SPF: X-Spam-Status: No, score=0.4 required=5.0 tests=BAYES_60,HTML_30_40, HTML_MESSAGE,NO_REAL_NAME autolearn=no version=3.0.1 X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: barrylippitt@earthlink.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --SPMB1120498401a5bab179d4664fd637beba9ee8ed18f4 Content-Transfer-Encoding: 7bit Content-Type: text/plain; I apologize for this automatic reply to your email. To control spam, I now allow incoming messages only from senders I have approved beforehand. If you would like to be added to my list of approved senders, please fill out the short request form (see link below). Once I approve you, I will receive your original message in my inbox. You do not need to resend your message. I apologize for this one-time inconvenience. Click the link below to fill out the request: https://webmail.pas.earthlink.net/wam/addme?a=barrylippitt@earthlink.net&id=1dPuOR6sW3Nl34d0 --SPMB1120498401a5bab179d4664fd637beba9ee8ed18f4 Content-Type: text/html;
I apologize for this automatic reply to your email.

To control spam, I now allow incoming messages only from senders I have approved beforehand.

If you would like to be added to my list of approved senders, please fill out the short request form (see link below). Once I approve you, I will receive your original message in my inbox. You do not need to resend your message. I apologize for this one-time inconvenience.

Click the link below to fill out the request:


--SPMB1120498401a5bab179d4664fd637beba9ee8ed18f4-- - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Jul 05 00:41:12 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpZcj-0004ow-5n; Tue, 05 Jul 2005 00:41:09 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 05 Jul 2005 00:40:26 +0200 (CEST) Received: from w212.z064003107.lax-ca.dsl.cnc.net ([64.3.107.212] helo=innie.zdi.net) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpZbt-0004nk-PQ for linux-crypto@nl.linux.org; Tue, 05 Jul 2005 00:40:17 +0200 Received: from innie.zdi.net (localhost [127.0.0.1]) by innie.zdi.net (8.11.6/8.11.6) with ESMTP id j64Me3A24305 for ; Mon, 4 Jul 2005 15:40:03 -0700 Date: Mon, 04 Jul 2005 15:40:03 -0700 Message-ID: <20050704224003.24299.81043.Mailman@innie.zdi.net> Subject: Your message to SCLUG awaits moderator approval From: sclug-admin@fatpenguin.com To: linux-crypto@nl.linux.org X-Ack: no X-BeenThere: sclug@fatpenguin.com X-Mailman-Version: 2.0.13 Precedence: bulk Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_50,NO_REAL_NAME autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: sclug-admin@fatpenguin.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Your mail to 'SCLUG' with the subject Delivery failed Is being held until the list moderator can review it for approval. The reason it is being held: Post by non-member to a members-only list Either the message will get posted to the list, or you will receive notification of the moderator's decision. - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Jul 05 08:03:37 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpgWp-0003bO-Bg; Tue, 05 Jul 2005 08:03:31 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 05 Jul 2005 08:03:07 +0200 (CEST) Received: from web54001.mail.yahoo.com ([206.190.36.225]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1DpgWG-0003aK-Pf for linux-crypto@nl.linux.org; Tue, 05 Jul 2005 08:02:56 +0200 Received: (qmail 63570 invoked by uid 60001); 5 Jul 2005 06:02:42 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=TGRU6Km+c3myPEis2c1fWYsAc0p8QDgPA/cfMDf/hhtR0HfShyqaXT3Xq/I287dz3Ef14Inyh+aBNwJ/usVt8+tqk+TA+uPELxmmxfwPlxC1ncb2kdb7gOviKQsPZnsK+o/e7kNvlYOgJCgHbg48zgt34OdWZejODhuuuMUU3sw= ; Message-ID: <20050705060242.63568.qmail@web54001.mail.yahoo.com> Received: from [83.235.160.2] by web54001.mail.yahoo.com via HTTP; Mon, 04 Jul 2005 23:02:42 PDT Date: Mon, 4 Jul 2005 23:02:42 -0700 (PDT) From: Phil H Subject: Re: Problems building from tarballs solved To: Jari Ruusu Cc: linux-crypto@nl.linux.org In-Reply-To: <42C95336.351C51BF@users.sourceforge.net> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: philtickle200@yahoo.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto --- Jari Ruusu wrote: > insmod -f is intended for binary only modules which > end user can't recompile > for his kernel. Come to think of it, the author mentions in a preceding chapter I think that his build discussion only applies to modules distributed as part of linux. Perhaps that's the same thing, but it's not as clear as it might be. > > Should config file z also have CONFIG_MODULES=y > > and CONFIG_BLK_DEV_LOOP=n, or is that irrelevant? > > Configuration of kernel that you are compiling is > irrelevant to your running > kernel. That's what I thought but in truth I expected that I had it wrong. So you just need one (any) kernel compiled with CONFIG_MODULES=y and CONFIG_BLK_DEV_LOOP=n, and running that you can compile loop.o drivers for some other kernel 2.x.y for which you have the sources configured, however this kernel 2.x.y for which you are building the loop.o does NOT need to be configured with CONFIG_MODULES=y and CONFIG_BLK_DEV_LOOP=n? That is correct? __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Jul 05 09:22:35 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DphlJ-0004Eq-AY; Tue, 05 Jul 2005 09:22:33 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 05 Jul 2005 09:22:16 +0200 (CEST) Received: from adam.systinet.com ([69.20.5.29]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1Dphkt-0004E2-4G for linux-crypto@nl.linux.org; Tue, 05 Jul 2005 09:22:07 +0200 Received: (qmail 30740 invoked by uid 515); 5 Jul 2005 07:22:03 -0000 Date: 5 Jul 2005 07:22:02 -0000 Message-ID: <20050705072202.30738.qmail@adam.systinet.com> To: linux-crypto@nl.linux.org Subject: Re: MESSAGE COULD NOT BE DELIVERED From: noreply@systinet.com Precedence: junk X-Loop: ML-autoreply@idoox.com Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_50,NO_REAL_NAME autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: noreply@systinet.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Dear User, due to an overwhelming amount of spam, we do not accept new posts to the forums using email. Please ask your question on our web based forum interface at http://forums.systinet.com This is an automatic reply, do not reply this email. Best Regards, Systinet Team Phone: +1 (781) 362 1300 - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Tue Jul 05 19:00:58 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dpqn2-00051T-9a; Tue, 05 Jul 2005 19:00:56 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 05 Jul 2005 19:00:34 +0200 (CEST) Received: from mail.tnnet.fi ([217.112.240.26]) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DpqmT-0004y4-RY for linux-crypto@nl.linux.org; Tue, 05 Jul 2005 19:00:21 +0200 Received: from localhost (localhost [127.0.0.1]) by mail.tnnet.fi (Postfix) with ESMTP id AF02730CBAA; Tue, 5 Jul 2005 19:59:55 +0300 (EEST) Received: from mail.tnnet.fi ([127.0.0.1]) by localhost (mail [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 01872-05; Tue, 5 Jul 2005 19:59:49 +0300 (EEST) Received: from armas (a64.adsl.tnnet.fi [217.112.242.64]) by mail.tnnet.fi (Postfix) with ESMTP id 0227A30CB8D; Tue, 5 Jul 2005 19:59:49 +0300 (EEST) Received: from localhost ([127.0.0.1] helo=users.sourceforge.net) by armas with esmtp (Exim) id 1Dpqlw-00013A-00; Tue, 05 Jul 2005 19:59:48 +0300 Message-ID: <42CABC84.3CABA444@users.sourceforge.net> Date: Tue, 05 Jul 2005 19:59:48 +0300 From: Jari Ruusu X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r10 i686) X-Accept-Language: en MIME-Version: 1.0 To: Phil H Cc: linux-crypto@nl.linux.org Subject: Re: Problems building from tarballs solved References: <20050705060242.63568.qmail@web54001.mail.yahoo.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at mail.tnnet.fi Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=-1.6 required=5.0 tests=AWL,BAYES_00 autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: jariruusu@users.sourceforge.net Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Phil H wrote: > So you just need one (any) kernel compiled with CONFIG_MODULES=y and > CONFIG_BLK_DEV_LOOP=n, and running that you can compile loop.o drivers for > some other kernel 2.x.y for which you have the sources configured, however > this kernel 2.x.y for which you are building the loop.o does NOT need to > be configured with CONFIG_MODULES=y and CONFIG_BLK_DEV_LOOP=n? > > That is correct? Any kernel that "works", i.e. supports your computer hardware and file systems, can be used to compile any other kernel regardless of their configurations. (Some really ancient kernel sources may require equally ancient gcc + binutils versions, but that is not relevant here) One pitfall is that if you compile and install differently configured kernel that has exactly same kernel version and EXTRAVERSION (i.e. same `uname -r`) as your running kernel, and insmod those newly compiled modules to your running kernel, then you end up with modules running in kernel space but compiled using WRONG configuration. Changing EXTRAVERSION in kernel Makefile before compiling kernel is easy way to avoid this pitfall. That way newly compiled and installed modules will not overwrite modules of your running kernel. Compiling kernel+modules using same `uname -r` as your running kernel, but NOT installing them, is not a problem. -- Jari Ruusu 1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9 DB 1D EB E3 24 0E A9 DD - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Wed Jul 06 08:29:49 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dq3Pl-0004pa-T0; Wed, 06 Jul 2005 08:29:45 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 06 Jul 2005 08:28:59 +0200 (CEST) Received: from web54006.mail.yahoo.com ([206.190.36.230]) by humbolt.nl.linux.org with smtp (Exim 4.22) id 1Dq3Os-0004oT-Hf for linux-crypto@nl.linux.org; Wed, 06 Jul 2005 08:28:50 +0200 Received: (qmail 41170 invoked by uid 60001); 6 Jul 2005 06:28:38 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=2FMSXqxHcbGCROP5mJ6AJNXUCYbcoxcfp9ZAfc0z2ccQsD2RBiBwl+OoAGZ7GdhEqlfgG4SCeWlbskrKFxvv1efiNWBmzeTxtTMIfwGew8vx0kqlK3+ZT+nHf+JNOUKbeBmK2YrSijWiMgcasbXuC5yV1EixLuZXz20N7mImLwM= ; Message-ID: <20050706062838.41168.qmail@web54006.mail.yahoo.com> Received: from [83.235.160.2] by web54006.mail.yahoo.com via HTTP; Tue, 05 Jul 2005 23:28:38 PDT Date: Tue, 5 Jul 2005 23:28:38 -0700 (PDT) From: Phil H Subject: Re: Problems building from tarballs solved To: Jari Ruusu Cc: linux-crypto@nl.linux.org In-Reply-To: <42CABC84.3CABA444@users.sourceforge.net> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Received-SPF: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: philtickle200@yahoo.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto OK all that makes sense and is helpful. Perhaps I haven't had enough coffee yet (it's morning here), but was that a "yes" or a "no" to my question?: > .. this [other] kernel 2.x.y for which you are building > the loop.o does NOT need to > be configured with CONFIG_MODULES=y and > CONFIG_BLK_DEV_LOOP=n? > > That is correct? __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Thu Jul 07 03:51:34 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DqLY3-0005ar-EM; Thu, 07 Jul 2005 03:51:31 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 07 Jul 2005 03:51:07 +0200 (CEST) Received: from [208.185.248.233] (helo=ww2.lostpassword.com) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1DqLXU-0005Za-QO for linux-crypto@nl.linux.org; Thu, 07 Jul 2005 03:50:56 +0200 Received: by ww2.lostpassword.com (Postfix, from userid 65534) id 31E095DA13; Wed, 6 Jul 2005 18:50:42 -0700 (PDT) From: Dmitry Sumin To: linux-crypto@nl.linux.org X-Mailer: Reply-o-Matic v1.2.0 Precedence: bulk References: <20050707015038.0F4FA5D785@ww2.lostpassword.com> In-Reply-To: <20050707015038.0F4FA5D785@ww2.lostpassword.com> Subject: RE: Returned mail: Data format error Message-Id: <20050707015042.31E095DA13@ww2.lostpassword.com> Date: Wed, 6 Jul 2005 18:50:42 -0700 (PDT) Received-SPF: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_50 autolearn=no version=3.0.1 X-Spam-Level: X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: sumin@lostpassword.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto ** DO NOT REPLY - THIS E-MAIL IS BEING SENT ** TO YOU FROM AN UNMONITORED ACCOUNT This e-mail account (sumin@lostpassword.com) is now closed. If you would like to contact Dmitry Sumin please send an e-mail to sumin@passware.com Please update your address book to reflect the changes. Thank you for your patience. ========== Original Message Headers Follow ========== Received: by ww2.lostpassword.com (Postfix, from userid 1025) id 28B265DA1B; Wed, 6 Jul 2005 18:50:39 -0700 (PDT) Received: from nl.linux.org (c-24-91-51-193.hsd1.ma.comcast.net [24.91.51.193]) by ww2.lostpassword.com (Postfix) with ESMTP id 0F4FA5D785 for ; Wed, 6 Jul 2005 18:50:38 -0700 (PDT) From: linux-crypto@nl.linux.org To: sumin@lostpassword.com Subject: Returned mail: Data format error Date: Wed, 6 Jul 2005 21:50:54 -0400 - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/ From linux-crypto-bounce@nl.linux.org Fri Jul 08 01:45:18 2005 Received: from localhost ([127.0.0.1] helo=humbolt) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dqg3O-0006rp-Iz; Fri, 08 Jul 2005 01:45:14 +0200 Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 08 Jul 2005 01:44:36 +0200 (CEST) Received: from secure.yikes.com ([204.61.215.82] helo=yoyo.yikes.com ident=root) by humbolt.nl.linux.org with esmtp (Exim 4.22) id 1Dqg2b-0006qo-Q0 for linux-crypto@nl.linux.org; Fri, 08 Jul 2005 01:44:25 +0200 Received: from yoyo.yikes.com (rdp@localhost.yikes.com [127.0.0.1]) by yoyo.yikes.com (8.13.4/8.13.4/Debian-1) with ESMTP id j67NiJEj024412 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Thu, 7 Jul 2005 16:44:19 -0700 Received: (from rdp@localhost) by yoyo.yikes.com (8.13.4/8.13.4/Submit) id j67NiJ6u024410 for linux-crypto@nl.linux.org; Thu, 7 Jul 2005 16:44:19 -0700 Date: Thu, 7 Jul 2005 16:44:19 -0700 Message-Id: <200507072344.j67NiJ6u024410@yoyo.yikes.com> To: linux-crypto@nl.linux.org From: "Richard Perlman" Subject: Re: Mail System Error - Returned Mail Delivered-By-The-Graces-Of: The Vacation program Received-SPF: X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on humbolt.nl.linux.org X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_50 autolearn=no version=3.0.1 X-ecartis-version: Ecartis v1.0.0 Sender: linux-crypto-bounce@nl.linux.org Errors-to: linux-crypto-bounce@nl.linux.org X-original-sender: perl@lucent.com Precedence: bulk List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: linux-crypto Between 1-July and 1-August 2005 I will be travelling on vacation I will have no access to e-mail and will not be able respond to your message regarding "Mail System Error - Returned Mail." If your message is urgent and you need immediate help you may contact * Eileen Lin +1 408-868-9136 For technical support and 
-sales technical assistance,
contact...
*    Walter Wong  +1 510-747-5652

Note that you will only receive one copy of this notice per week
even if you send me multiple messages.

Richard


-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Fri Jul 08 09:47:22 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1DqnZw-0001lu-Ha; Fri, 08 Jul 2005 09:47:20 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Fri, 08 Jul 2005 09:46:56 +0200 (CEST)
Received: from a15179815.alturo-server.de ([217.160.132.81])
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1DqnZO-0001kw-4J
	for linux-crypto@nl.linux.org; Fri, 08 Jul 2005 09:46:46 +0200
Received: by a15179815.alturo-server.de (Postfix, from userid 105)
	id 6200E80F24C; Fri,  8 Jul 2005 09:46:45 +0200 (CEST)
From: "Autoresponder" 
To: linux-crypto@nl.linux.org
Subject: Re: Returned mail: Data format error
X-Mailer: Confixx Autoresponder
Precedence: junk
Message-Id: <20050708074645.6200E80F24C@a15179815.alturo-server.de>
Date: Fri,  8 Jul 2005 09:46:45 +0200 (CEST)
Received-SPF: 
X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_50 autolearn=no 
	version=3.0.1
X-Spam-Level: 
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: no-reply@lab1.de
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

Vielen Dank fόr Ihre Nachricht an uns.

Leider konnte sie nicht zugestellt werden, da die von Ihnen
verwendete Email-Adresse nicht (mehr) gόltig ist.

Unsere aktuellen Kontaktdaten erfahren Sie unter:
http://ToolsAndMore.Info/?go=Impressum

Bitte antworten Sie nicht direkt auf diese automatisch 
verschickte Email, denn die Absenderadresse dient 
nur zur άbermittlung.

Mit freundlichen Grόssen,
   Tools&More (ehem. LAB1.de)
    Software - Hardware - Services



-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Tue Jul 12 23:30:05 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1DsSKI-000336-TA; Tue, 12 Jul 2005 23:30:02 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Tue, 12 Jul 2005 23:29:23 +0200 (CEST)
Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net)
	by humbolt.nl.linux.org with smtp (Exim 4.22)
	id 1DsSJW-0002zH-FN
	for linux-crypto@nl.linux.org; Tue, 12 Jul 2005 23:29:14 +0200
Received: (qmail 22153 invoked by uid 0); 12 Jul 2005 21:27:43 -0000
Received: from 84.175.24.150 by www80.gmx.net with HTTP;
	Tue, 12 Jul 2005 23:27:43 +0200 (MEST)
Date: Tue, 12 Jul 2005 23:27:43 +0200 (MEST)
From: Peter_22@gmx.de
To: Jari Ruusu 
Cc: linux-crypto@nl.linux.org
MIME-Version: 1.0
References: <42CABC84.3CABA444@users.sourceforge.net>
Subject: =?ISO-8859-1?Q?Harddisk_sectors_&_partitioning?=
X-Priority: 3 (Normal)
X-Authenticated: #5663700
Message-ID: <29654.1121203663@www80.gmx.net>
X-Mailer: WWW-Mail 1.6 (Global Message Exchange)
X-Flags: 0001
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Received-SPF: 
X-Spam-Level: 
X-Spam-Status: No, score=-0.6 required=5.0 tests=AWL,BAYES_50,NO_REAL_NAME 
	autolearn=no version=3.0.1
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: Peter_22@gmx.de
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

Hi there!

My harddisk has 390,716,865 sectors.
I installed it into the PC and partitioned it as part of the setup of SuSE
Linux 8.2 a while ago. Fine so far. What wonders me is the fact that only   
             390,684,734 sectors are used. So 32,131 sectors, which equals
16,451,072 bytes or 15.68 MB, are left free. But for what?
Is there a good reason why this space is left blank? Otherwise, can I erase
these sectors or set up a loop device on it? I have no idea what these
spare-sectors serve for.

Regards,
Peter

-- 
Weitersagen: GMX DSL-Flatrates mit Tempo-Garantie!
Ab 4,99 Euro/Monat: http://www.gmx.net/de/go/dsl

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Wed Jul 13 16:56:07 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dsiea-0003FB-2b; Wed, 13 Jul 2005 16:56:04 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 13 Jul 2005 16:55:39 +0200 (CEST)
Received: from mail.tnnet.fi ([217.112.240.26])
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dsidq-0003Da-Sf
	for linux-crypto@nl.linux.org; Wed, 13 Jul 2005 16:55:18 +0200
Received: from localhost (localhost [127.0.0.1])
	by mail.tnnet.fi (Postfix) with ESMTP id 1C74F30CC92;
	Wed, 13 Jul 2005 17:55:05 +0300 (EEST)
Received: from mail.tnnet.fi ([127.0.0.1])
 by localhost (mail [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
 id 16072-15; Wed, 13 Jul 2005 17:54:58 +0300 (EEST)
Received: from armas (a64.adsl.tnnet.fi [217.112.242.64])
	by mail.tnnet.fi (Postfix) with ESMTP id 4B2F130CD3E;
	Wed, 13 Jul 2005 17:52:02 +0300 (EEST)
Received: from localhost ([127.0.0.1] helo=users.sourceforge.net)
	by armas with esmtp (Exim) id 1Dsiaf-0002F9-00; Wed, 13 Jul 2005 17:52:01 +0300
Message-ID: <42D52A91.BE51BF68@users.sourceforge.net>
Date: Wed, 13 Jul 2005 17:52:01 +0300
From: Jari Ruusu 
X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.4.22aa1r10 i686)
X-Accept-Language: en
MIME-Version: 1.0
To: Peter_22@gmx.de
Cc: linux-crypto@nl.linux.org
Subject: Re: Harddisk sectors & partitioning
References: <42CABC84.3CABA444@users.sourceforge.net> <29654.1121203663@www80.gmx.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: amavisd-new at mail.tnnet.fi
Received-SPF: 
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-Spam-Status: No, score=-0.9 required=5.0 tests=AWL,BAYES_40 autolearn=no 
	version=3.0.1
X-Spam-Level: 
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: jariruusu@users.sourceforge.net
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

Peter_22@gmx.de wrote:
> My harddisk has 390,716,865 sectors.
> I installed it into the PC and partitioned it as part of the setup of SuSE
> Linux 8.2 a while ago. Fine so far. What wonders me is the fact that only
>              390,684,734 sectors are used. So 32,131 sectors, which equals
> 16,451,072 bytes or 15.68 MB, are left free. But for what?
> Is there a good reason why this space is left blank? Otherwise, can I erase
> these sectors or set up a loop device on it? I have no idea what these
> spare-sectors serve for.

Long time ago, disks used cylinder/head/sector access to data. All modern
disks are addressed using logical block numbers. MS-DOS style partition
tables still use some fake cylinder/head/sector info for partitions. Usually
disk partitioning software creates partitions on full cylinder boundary.
Depending on that fake cylinder/head/sector setting, minimum disk space
allocation unit may be many megabytes. That may leave some partial fake
cylinders unused.

IOW, blame your disk partitioning software.

-- 
Jari Ruusu  1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9  DB 1D EB E3 24 0E A9 DD

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Wed Jul 13 18:35:23 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1DskCf-0002EM-VO; Wed, 13 Jul 2005 18:35:22 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 13 Jul 2005 18:35:06 +0200 (CEST)
Received: from web32110.mail.mud.yahoo.com ([68.142.207.124])
	by humbolt.nl.linux.org with smtp (Exim 4.22)
	id 1DskCF-0002C9-0X
	for linux-crypto@nl.linux.org; Wed, 13 Jul 2005 18:34:55 +0200
Received: (qmail 35418 invoked by uid 60001); 13 Jul 2005 16:34:24 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=Message-ID:Received:Date:From:Subject:To:Cc:MIME-Version:Content-Type:Content-Transfer-Encoding;
  b=MpjPcaXY4rdAwCuz6yuX0aiUU0K4ZUGJPEmTdJmnVbvlILx2PGJOcLdf8cjU0s1XTSoODAWir682ew1JhpjTHTHBPV+xC75DqBnXqLQQbHcEMkYtXin3nsS+2A3EqOhnfeXbf2uPvKsPRUxUwOTylaNJg46EspW4DSgAPI/8500=  ;
Message-ID: <20050713163424.35416.qmail@web32110.mail.mud.yahoo.com>
Received: from [192.100.104.17] by web32110.mail.mud.yahoo.com via HTTP; Wed, 13 Jul 2005 09:34:24 PDT
Date: Wed, 13 Jul 2005 09:34:24 -0700 (PDT)
From: Vinay Venkataraghavan 
Subject: Open source firewalls
To: linux-crypto@nl.linux.org
Cc: linux-kernel@vger.kernel.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Received-SPF: 
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: raghavanvinay@yahoo.com
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

Hello,

I have implemented an bare bones Intrusion detection
system that currently detects scans like open, bouce,
half open etc and a host of other tcp scans.

I would like to develop this into a full blown IDS
which is capable of detecting buffer overflow attacks,
sql injection etc. 

I know how to implement buffer overflow attacks. But
how would an intrusion detection system detect a
buffer overflow attack. My question is at the layer
that the intrusion detection system operates, how will
it know that a particular string for exmaple is liable
to overflow a vulnerable buffer. 

Are there other open source firewall implementations
other than snort?

I would apprecitate it if you could let me know.
Thanks,
Vinay



		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - Find what you need with new enhanced search. 
http://info.mail.yahoo.com/mail_250

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Wed Jul 13 18:47:38 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1DskOX-0002ty-3u; Wed, 13 Jul 2005 18:47:37 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 13 Jul 2005 18:47:25 +0200 (CEST)
Received: from linuxwireless.org.ve.carpathiahost.net ([66.117.45.234])
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1DskOC-0002tG-69
	for linux-crypto@nl.linux.org; Wed, 13 Jul 2005 18:47:16 +0200
Received: from WCRSJO2KPAB047 ([200.9.49.66])
	by linuxwireless.org.ve.carpathiahost.net (8.12.10/8.12.10) with SMTP id j6DGlCLc028576;
	Wed, 13 Jul 2005 12:47:12 -0400
Reply-To: 
From: "Alejandro Bonilla" 
To: "'Vinay Venkataraghavan'" ,
        
Cc: 
Subject: RE: Open source firewalls
Date: Wed, 13 Jul 2005 10:47:10 -0600
Message-ID: <014b01c587ca$83a77320$a20cc60a@amer.sykes.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.6604 (9.0.2911.0)
In-Reply-To: <20050713163424.35416.qmail@web32110.mail.mud.yahoo.com>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
Received-SPF: 
X-Spam-Level: 
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_40,RCVD_IN_SORBS_WEB 
	autolearn=no version=3.0.1
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: abonilla@linuxwireless.org
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto


> Are there other open source firewall implementations
> other than snort?
>
> I would apprecitate it if you could let me know.
> Thanks,
> Vinay
>

I might be wrong and this might be a stupid answer but... How about
iptables?
iptables blocks everything incomind, allows, deny and forwards, so I think
that is what you want?

.Alejandro


-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Wed Jul 13 19:13:40 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dskg4-0008JT-Df; Wed, 13 Jul 2005 19:05:44 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 13 Jul 2005 19:05:30 +0200 (CEST)
Received: from vhost12.digitarus.com ([84.234.16.61])
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1DskfF-00073b-4R
	for linux-crypto@nl.linux.org; Wed, 13 Jul 2005 19:04:53 +0200
X-ClientAddr: 212.126.40.83
Received: from [192.168.1.10] ([212.126.40.83])
	(authenticated bits=0)
	by vhost12.digitarus.com (8.12.10/8.12.10) with ESMTP id j6DH6DQg029718;
	Wed, 13 Jul 2005 18:06:13 +0100
Message-ID: <42D549B4.1010406@wiggly.org>
Date: Wed, 13 Jul 2005 18:04:52 +0100
From: Nigel Rantor 
User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Vinay Venkataraghavan 
CC: linux-crypto@nl.linux.org, linux-kernel@vger.kernel.org
Subject: Re: Open source firewalls
References: <20050713163424.35416.qmail@web32110.mail.mud.yahoo.com>
In-Reply-To: <20050713163424.35416.qmail@web32110.mail.mud.yahoo.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Digitarus-vhost12-MailScanner-Information: Please contact Digitarus for more information
X-Digitarus-vhost12-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-MailScanner-From: wiggly@wiggly.org
Received-SPF: 
X-Spam-Level: 
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00 autolearn=no 
	version=3.0.1
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: wiggly@wiggly.org
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

Vinay Venkataraghavan wrote:
> Hello,

Hello, *devil's advocate hat on*

> I have implemented an bare bones Intrusion detection
> system that currently detects scans like open, bouce,
> half open etc and a host of other tcp scans.

As an aside, why, we have snort?

> I would like to develop this into a full blown IDS
> which is capable of detecting buffer overflow attacks,
> sql injection etc. 
> 
> I know how to implement buffer overflow attacks. But
> how would an intrusion detection system detect a
> buffer overflow attack. My question is at the layer
> that the intrusion detection system operates, how will
> it know that a particular string for exmaple is liable
> to overflow a vulnerable buffer. 

Erm, if you know how some buffer overflow attacks work then surely the 
answer is "it depends on the application". To tell if an application is 
vulnerable you would have to audit it in some manner. Either by checking 
the source or doing some black-box testing on it.

Even if you did have a great big database of apps and had identifed 
which of them had possible vulnerabilities it would be easier to simply 
fix them rather than get an external system to disallow such inputs.

And not forgetting that you would have to have some way for your IDS to 
tell what app was running behind a specific port. Thought about that yet?

> Are there other open source firewall implementations
> other than snort?

Snort isn't a firewall. Don't mix apples and oranges. Snort is an IDS. 
The current de-facto "firewall" for linux is the iptables suite.

Cheers,

   n

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Wed Jul 13 21:42:25 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dsn7d-0003SW-GP; Wed, 13 Jul 2005 21:42:21 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 13 Jul 2005 21:42:05 +0200 (CEST)
Received: from ppp2-adsl-6.ath.forthnet.gr ([62.1.225.6] helo=192.168.123.183)
	by humbolt.nl.linux.org with smtp (Exim 4.22)
	id 1Dsn6u-0003Qi-QY
	for linux-crypto@nl.linux.org; Wed, 13 Jul 2005 21:41:37 +0200
From: "Net2Products" 
To: 
Subject: =?ISO-8859-1?Q?=C5=F0=E1=E3=E3=E5=EB=EC=E1=F4=E9=EA=DE?= 
	=?ISO-8859-1?Q?=D6=E9=EB=EF=EE=E5=ED=DF=E1?=
Mime-Version: 1.0
Content-Type: multipart/alternative;
	boundary="= Multipart Boundary 0713052241"
Date: Wed, 13 Jul 2005 22:41:35 +0300
Reply-To: "Net2Products" 
Message-Id: 
Received-SPF: 
X-Spam-Status: No, score=4.6 required=5.0 tests=BAYES_50,HTML_MESSAGE,
	MSGID_FROM_MTA_ID,SUBJ_ILLEGAL_CHARS autolearn=no version=3.0.1
X-Spam-Level: ****
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: net2.products@virgin.net
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

This is a multipart MIME message.

--= Multipart Boundary 0713052241
Content-Type: text/plain;
	charset="ISO-8859-7"
Content-Transfer-Encoding: 8bit

HellasHost - Βασικά Πακέτα Φιλοξενίας

Windows & Linux Starters
Τα βασικά μας πακέτα παρέχουν μία πολύ καλή εισαγωγή στον κόσμο του web hosting. Έχουν αρκετό χώρο φιλοξενίας δίνουν απεριόριστα emails και παρέχουν PHP, ChiliASP και CGI-Scripts στην πλατφόρμα Linux, ενώ παρέχουν PHP, ASP και .NET, στην πλατφόρμα Windows.
3ευρώ/μήνα ή 33ευρώ/χρόνο
Συγκρίνετε πακέτα Windows  | Συγκρίνετε πακέτα Linux
Χώρος Φιλοξενίας
100MB - αρκετός χώρος για να φιλοξενήσετε ένα site αντάξιο της εταιρίας σας. 
3GB data transfer - υψηλή χρήση του badwidth transfer για να σας επισκέπτονται όλοι οι πελάτες σας. 
24ωρη πρόσβαση FTP - εσείς έχετε τον έλεγχο του site σας. 
υποστήριξη MP3 - αποθηκεύστε τα αγαπημένα σας MP3  
FrontPage extensions - χρησιμοποιήστε στο έπακρο τα πακέτα δημιουργίας web site 
Email
απεριόριστα POP3 email boxes - στείλτε και λάβετε email με το δικό σας domain  
Webmail - δείτε τα emails σας όπου και αν είστε (μόνο Linux) 
απεριόριστα email aliases - δημιουργήστε όσα email επιθυμείτε 
Auto responders - αυτόματες απαντήσεις σε πιθανούς πελάτες  
Mailing groups - αυτόματες λίστες email 
Scripting
PHP4 and Chilisoft ASP - δημιουργήστε δυναμικές σελίδες 
CGI - πρόσβαση στο CGI-BIN 
ASP - πλήρης υποστήριξη ASP 
ASP.NET v1.1 - χρήση του παντοδύναμου framework της Microsoft 
PHP4 και PERL - δημιουργήστε δυναμικές σελίδες 
3ευρώ/μήνα ή 33ευρώ/χρόνο
Καλέστε τώρα στο 210-6774963 για περισσότερες πληροφορίες ή στείλτε email στο starters@hellashost.net

--= Multipart Boundary 0713052241
Content-Type: text/html;
	charset="ISO-8859-7"
Content-Transfer-Encoding: 8bit






HellasHost - Βασικά Πακέτα Φιλοξ






	

		

			
			HellasHost - Βασικά 
			Πακέτα Φιλοξενίας
		

		

			
			
			

			Windows & Linux Starters

			Τα 
			βασικά μας πακέτα παρέχουν 
			μία πολύ καλή εισαγωγή στον κόσμο του web hosting. Έχουν αρκετό 
			χώρο φιλοξενίας δίνουν απεριόριστα emails και 
			παρέχουν PHP, ChiliASP και CGI-Scripts
			στην πλατφόρμα Linux, ενώ 
			παρέχουν PHP, ASP και .NET,
			στην πλατφόρμα Windows.

			

			3ευρώ/μήνα ή 
			33ευρώ/χρόνο

			

			
			
			Συγκρίνετε πακέτα Windows  
			| Συγκρίνετε 
			πακέτα Linux

			

			
			Χώρος Φιλοξενίας

			

				
    
					
  • 
					
					100MB - αρκετός χώρος για να φιλοξενήσετε ένα site 
					αντάξιο της εταιρίας σας. 
    • 
					
  • 
					
					3GB data transfer - υψηλή χρήση του 
					badwidth transfer για να σας επισκέπτονται όλοι οι πελάτες 
					σας. 
    • 
					
  • 
					
					24ωρη πρόσβαση FTP - εσείς έχετε τον έλεγχο 
					του site σας. 
    • 
					
  • 
					
					υποστήριξη MP3 - αποθηκεύστε τα αγαπημένα 
					σας MP3  
    • 
					
  • 
					
					FrontPage extensions - χρησιμοποιήστε στο 
					έπακρο τα πακέτα δημιουργίας web site 
    • 
				

			

			
Email

			
    
				
  • 
				απεριόριστα POP3 email boxes - στείλτε και 
				λάβετε email με το δικό σας domain  
    • 
				
  • 
				Webmail - δείτε τα emails σας όπου και αν είστε
				(μόνο Linux)
    • 
				
  • 
				απεριόριστα email aliases - δημιουργήστε όσα 
				email επιθυμείτε 
    • 
				
  • 
				Auto responders - αυτόματες απαντήσεις σε 
				πιθανούς πελάτες  
    • 
				
  • 
				Mailing groups - αυτόματες λίστες email
    • 
			

			

			Scripting

			
    
				
  • 
				PHP4 and Chilisoft ASP - δημιουργήστε δυναμικές 
				σελίδες 
    • 
				
  • 
				CGI - πρόσβαση στο CGI-BIN
    • 
				
  • ASP - πλήρης υποστήριξη 
				ASP 
    • 
				
  • ASP.NET v1.1 - χρήση 
				του παντοδύναμου framework της Microsoft
    • 
				
  • PHP4 και PERL - 
				δημιουργήστε δυναμικές σελίδες
    • 
			

			

			
			3ευρώ/μήνα ή 33ευρώ/χρόνο

			

			Καλέστε τώρα στο 210-6774963 για περισσότερες 
			πληροφορίες ή στείλτε email στο 
			starters@hellashost.net
			

		

	








--= Multipart Boundary 0713052241--


-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Wed Jul 13 23:30:36 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1DsooN-000390-48; Wed, 13 Jul 2005 23:30:35 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Wed, 13 Jul 2005 23:29:59 +0200 (CEST)
Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net)
	by humbolt.nl.linux.org with smtp (Exim 4.22)
	id 1DsonX-000347-Ji
	for linux-crypto@nl.linux.org; Wed, 13 Jul 2005 23:29:43 +0200
Received: (qmail 7457 invoked by uid 0); 13 Jul 2005 21:28:11 -0000
Received: from 84.175.53.27 by www36.gmx.net with HTTP;
	Wed, 13 Jul 2005 23:28:11 +0200 (MEST)
Date: Wed, 13 Jul 2005 23:28:11 +0200 (MEST)
From: Peter_22@gmx.de
To: Jari Ruusu 
Cc: linux-crypto@nl.linux.org
MIME-Version: 1.0
References: <42D52A91.BE51BF68@users.sourceforge.net>
Subject: =?ISO-8859-1?Q?Re:_Harddisk_sectors_&_partitioning?=
X-Priority: 3 (Normal)
X-Authenticated: #5663700
Message-ID: <8906.1121290091@www36.gmx.net>
X-Mailer: WWW-Mail 1.6 (Global Message Exchange)
X-Flags: 0001
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Received-SPF: 
X-Spam-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_50,NO_REAL_NAME 
	autolearn=no version=3.0.1
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-Spam-Level: 
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: Peter_22@gmx.de
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

Thank you for this flash into the past. I remember "disc geometry" and "chs
values" from ancient BIOSes.
So today I could set up 16 primary "partitions" by using losetup and
/dev/loop0 to /dev/loop15, mount them in folders and encrypt them. Fine:-)

Regards,
Peter

> --- Ursprόngliche Nachricht ---
> Von: Jari Ruusu 
> An: Peter_22@gmx.de
> Kopie: linux-crypto@nl.linux.org
> Betreff: Re: Harddisk sectors & partitioning
> Datum: Wed, 13 Jul 2005 17:52:01 +0300
> 
> Peter_22@gmx.de wrote:
> > My harddisk has 390,716,865 sectors.
> > I installed it into the PC and partitioned it as part of the setup of
> SuSE
> > Linux 8.2 a while ago. Fine so far. What wonders me is the fact that
> only
> >              390,684,734 sectors are used. So 32,131 sectors, which
> equals
> > 16,451,072 bytes or 15.68 MB, are left free. But for what?
> > Is there a good reason why this space is left blank? Otherwise, can I
> erase
> > these sectors or set up a loop device on it? I have no idea what these
> > spare-sectors serve for.
> 
> Long time ago, disks used cylinder/head/sector access to data. All modern
> disks are addressed using logical block numbers. MS-DOS style partition
> tables still use some fake cylinder/head/sector info for partitions.
> Usually
> disk partitioning software creates partitions on full cylinder boundary.
> Depending on that fake cylinder/head/sector setting, minimum disk space
> allocation unit may be many megabytes. That may leave some partial fake
> cylinders unused.
> 
> IOW, blame your disk partitioning software.
> 
> -- 
> Jari Ruusu  1024R/3A220F51 5B 4B F9 BB D3 3F 52 E9  DB 1D EB E3 24 0E A9
> DD
> 
> -
> Linux-crypto:  cryptography in and on the Linux system
> Archive:       http://mail.nl.linux.org/linux-crypto/

-- 
GMX DSL = Maximale Leistung zum minimalen Preis!
2000 MB nur 2,99, Flatrate ab 4,99 Euro/Monat: http://www.gmx.net/de/go/dsl

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Thu Jul 14 12:07:13 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dt0cX-0005DC-5R; Thu, 14 Jul 2005 12:07:09 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 14 Jul 2005 12:06:47 +0200 (CEST)
Received: from embla.aitel.hist.no ([158.38.50.22])
	by humbolt.nl.linux.org with smtp (Exim 4.22)
	id 1Dt0c0-0005CW-Sh
	for linux-crypto@nl.linux.org; Thu, 14 Jul 2005 12:06:36 +0200
Received: (qmail 7999 invoked from network); 14 Jul 2005 10:06:32 -0000
Received: from unknown (HELO ?158.38.51.68?) (158.38.51.68)
  by embla.aitel.hist.no with SMTP; 14 Jul 2005 10:06:32 -0000
Message-ID: <42D63AD0.6060609@aitel.hist.no>
Date: Thu, 14 Jul 2005 12:13:36 +0200
From: Helge Hafting 
User-Agent: Debian Thunderbird 1.0.2 (X11/20050602)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Vinay Venkataraghavan 
CC:  linux-crypto@nl.linux.org,  linux-kernel@vger.kernel.org
Subject: Re: Open source firewalls
References: <20050713163424.35416.qmail@web32110.mail.mud.yahoo.com>
In-Reply-To: <20050713163424.35416.qmail@web32110.mail.mud.yahoo.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Received-SPF: 
X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_40 autolearn=no 
	version=3.0.1
X-Spam-Level: 
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: helge.hafting@aitel.hist.no
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

Vinay Venkataraghavan wrote:

>I know how to implement buffer overflow attacks. But
>how would an intrusion detection system detect a
>buffer overflow attack. 
>
Buffer overflow attacks vary, but have one thing in common.  The 
overflow string is much longer than what's usual for the app/protocol in 
question.  It may also contain illegal characters, but be careful - 
non-english users use plenty of valid non-ascii characters in filenames,
passwords and so on.

The way to do this is to implement a transparent proxy module for every 
protocol you want to do overflow prevention for.  Collect the strings
transmitted, pass them on after validating them.  Or reset the 
connection when one gets "too long".  For example, you may want to
limit POP usernames to whatever the maximum username length is
on your system.  But make such things configurable, others may
want longer usernames than you.

>My question is at the layer
>that the intrusion detection system operates, how will
>it know that a particular string for exmaple is liable
>to overflow a vulnerable buffer. 
>
>  
>
It can't know of course, but it can suspect that 1000-character
usernames, passwords or filenames is foul play and reset the
connection.  Or 10k URL's . . .

Helge Hafting


-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Thu Jul 14 12:26:26 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dt0vA-0006LY-Vo; Thu, 14 Jul 2005 12:26:25 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 14 Jul 2005 12:26:14 +0200 (CEST)
Received: from btnl-tn-dsl-static-006.0.144.59.touchtelindia.net ([59.144.0.6] helo=mail.prodmail.net)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dt0ui-0006JV-9A
	for linux-crypto@nl.linux.org; Thu, 14 Jul 2005 12:25:56 +0200
Received: from prodmail.net (prodigy.prodmail.net [192.168.4.1])
	by mail.prodmail.net (8.12.8/8.12.10) with ESMTP id j6E9ftOt011809;
	Thu, 14 Jul 2005 15:55:25 +0530
Received: from [192.168.1.184] by prodmail.net (prodigy) with SMTP; 14 Jul 2005 15:55:43 -0000
Message-ID: <42D63D4A.2050607@prodmail.net>
Date: Thu, 14 Jul 2005 15:54:10 +0530
From: RVK 
Reply-To: rvk@prodmail.net
Organization: GSEC1
User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Helge Hafting 
CC: Vinay Venkataraghavan , linux-crypto@nl.linux.org,
   linux-kernel@vger.kernel.org
Subject: Re: Open source firewalls
References: <20050713163424.35416.qmail@web32110.mail.mud.yahoo.com> <42D63AD0.6060609@aitel.hist.no>
In-Reply-To: <42D63AD0.6060609@aitel.hist.no>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Received-SPF: 
X-Spam-Level: 
X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_40 autolearn=no 
	version=3.0.1
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: rvk@prodmail.net
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

I don't think buffer overflow has anything to do with transparent proxy. 
Transparent proxying is just doing some protocol filtering. Still the 
proxy code may have some buffer overflows. The best way is first to try 
avoiding any buffer overflows and take programming precautions. Other 
way is to chroot the services, if running it on a firewall. There are 
various mechanisms which can be used like bounding the memory region it 
self. Stack Randomisation and Canary based approaches can also avoid any 
buffer overflow attacks.
IDS runs on L7, best example is snort. Its not possible for IDS to 
detect these attacks accurately.

rvk

Helge Hafting wrote:

> Vinay Venkataraghavan wrote:
>
>> I know how to implement buffer overflow attacks. But
>> how would an intrusion detection system detect a
>> buffer overflow attack.
>>
> Buffer overflow attacks vary, but have one thing in common.  The
> overflow string is much longer than what's usual for the app/protocol in
> question.  It may also contain illegal characters, but be careful -
> non-english users use plenty of valid non-ascii characters in filenames,
> passwords and so on.
>
> The way to do this is to implement a transparent proxy module for every
> protocol you want to do overflow prevention for.  Collect the strings
> transmitted, pass them on after validating them.  Or reset the
> connection when one gets "too long".  For example, you may want to
> limit POP usernames to whatever the maximum username length is
> on your system.  But make such things configurable, others may
> want longer usernames than you.
>
>> My question is at the layer
>> that the intrusion detection system operates, how will
>> it know that a particular string for exmaple is liable
>> to overflow a vulnerable buffer.
>>
>>
>>
> It can't know of course, but it can suspect that 1000-character
> usernames, passwords or filenames is foul play and reset the
> connection.  Or 10k URL's . . .
>
> Helge Hafting
>
> -
> To unsubscribe from this list: send the line "unsubscribe 
> linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/
> .
>


-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Thu Jul 14 14:14:23 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dt2bd-0006jV-Om; Thu, 14 Jul 2005 14:14:21 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 14 Jul 2005 14:14:07 +0200 (CEST)
Received: from embla.aitel.hist.no ([158.38.50.22])
	by humbolt.nl.linux.org with smtp (Exim 4.22)
	id 1Dt2bC-0006ii-Lz
	for linux-crypto@nl.linux.org; Thu, 14 Jul 2005 14:13:54 +0200
Received: (qmail 15545 invoked from network); 14 Jul 2005 12:13:52 -0000
Received: from unknown (HELO ?158.38.51.68?) (158.38.51.68)
  by embla.aitel.hist.no with SMTP; 14 Jul 2005 12:13:52 -0000
Message-ID: <42D658A8.4040009@aitel.hist.no>
Date: Thu, 14 Jul 2005 14:20:56 +0200
From: Helge Hafting 
User-Agent: Debian Thunderbird 1.0.2 (X11/20050602)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To:  rvk@prodmail.net
CC: Vinay Venkataraghavan , 
 linux-crypto@nl.linux.org,  linux-kernel@vger.kernel.org
Subject: Re: Open source firewalls
References: <20050713163424.35416.qmail@web32110.mail.mud.yahoo.com> <42D63AD0.6060609@aitel.hist.no> <42D63D4A.2050607@prodmail.net>
In-Reply-To: <42D63D4A.2050607@prodmail.net>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Received-SPF: 
X-Spam-Level: 
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-Spam-Status: No, score=-0.5 required=5.0 tests=AWL,BAYES_50 autolearn=no 
	version=3.0.1
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: helge.hafting@aitel.hist.no
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

RVK wrote:

> I don't think buffer overflow has anything to do with transparent 
> proxy. Transparent proxying is just doing some protocol filtering.

A transparent proxy is a protocol filter, which is why it is an
ideal way of detecting protocol-dependent buffer overflow attacks.

The detection code have to be built into the proxy, of course.

Examples:
A web proxy can check for anomalous long "get" request,
there have been web servers with buffer overflows when the
URL was too long.  The proxy can terminate such connections,
protecting the possibly vulnerable webserver.

An ftp proxy can check for (and remove) anomalous long filenames,
as well as funnies like "ls */*/*/*/*/*"

Similiar for many other services.  The proxy approach is useful
because knowledge of the protocol is necessary.  After all,
it is ok to up/download a huge file via ftp, while a 2M filename
is suspicious.  Size alone is not enough.

> Still the proxy code may have some buffer overflows. 

A proxy (or any other attempt at a firewall) may have its own
holes of course, but avoiding making them isn't that hard.


> The best way is first to try avoiding any buffer overflows and take 
> programming precautions. 

Of course, if you have the source and that source isn't an
unmaintainable mess.  One or both of those conditions may fail,
and then the IDS becomes useful.

> Other way is to chroot the services, if running it on a firewall. 

Provided it is an unixish server . . .

> There are various mechanisms which can be used like bounding the 
> memory region it self. Stack Randomisation and Canary based approaches 
> can also avoid any buffer overflow attacks.

These may or may not be available.  You can always stick a proxy
firewall in front of the server though, no matter what os and
server apps it runs.

Helge Hafting

-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Thu Jul 14 14:23:06 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dt2k5-0007MV-8w; Thu, 14 Jul 2005 14:23:05 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 14 Jul 2005 14:22:56 +0200 (CEST)
Received: from btnl-tn-dsl-static-006.0.144.59.touchtelindia.net ([59.144.0.6] helo=mail.prodmail.net)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dt2jc-0007Jk-F8
	for linux-crypto@nl.linux.org; Thu, 14 Jul 2005 14:22:36 +0200
Received: from prodmail.net (prodigy.prodmail.net [192.168.4.1])
	by mail.prodmail.net (8.12.8/8.12.10) with ESMTP id j6E9ftOx011809;
	Thu, 14 Jul 2005 17:52:13 +0530
Received: from [192.168.1.184] by prodmail.net (prodigy) with SMTP; 14 Jul 2005 17:52:32 -0000
Message-ID: <42D658A9.7050706@prodmail.net>
Date: Thu, 14 Jul 2005 17:50:57 +0530
From: RVK 
Reply-To: rvk@prodmail.net
Organization: GSEC1
User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Helge Hafting 
CC: Vinay Venkataraghavan , linux-crypto@nl.linux.org,
   linux-kernel@vger.kernel.org
Subject: Re: Open source firewalls
References: <20050713163424.35416.qmail@web32110.mail.mud.yahoo.com> <42D63AD0.6060609@aitel.hist.no> <42D63D4A.2050607@prodmail.net> <42D658A8.4040009@aitel.hist.no>
In-Reply-To: <42D658A8.4040009@aitel.hist.no>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Received-SPF: 
X-Spam-Level: 
X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_40 autolearn=no 
	version=3.0.1
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: rvk@prodmail.net
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

Proxies can be a good way of filtering but it can't avoid buffer 
overflows. It can only increase it. More code more bugs. If it is 
running on a hardware firewall as a service then its more dangerous as 
once it is compramised then IDS signatures also can be deleated :-). No 
use of IDS the right ?
So the best way is either make your code free of buffer overflows or use 
some library which controls the attack during any buffer overflow or use 
Stack Randomisation and Canary based approaches.

rvk

Helge Hafting wrote:

> RVK wrote:
>
>> I don't think buffer overflow has anything to do with transparent
>> proxy. Transparent proxying is just doing some protocol filtering.
>
>
> A transparent proxy is a protocol filter, which is why it is an
> ideal way of detecting protocol-dependent buffer overflow attacks.
>
> The detection code have to be built into the proxy, of course.
>
> Examples:
> A web proxy can check for anomalous long "get" request,
> there have been web servers with buffer overflows when the
> URL was too long.  The proxy can terminate such connections,
> protecting the possibly vulnerable webserver.
>
> An ftp proxy can check for (and remove) anomalous long filenames,
> as well as funnies like "ls */*/*/*/*/*"
>
> Similiar for many other services.  The proxy approach is useful
> because knowledge of the protocol is necessary.  After all,
> it is ok to up/download a huge file via ftp, while a 2M filename
> is suspicious.  Size alone is not enough.
>
>> Still the proxy code may have some buffer overflows.
>
>
> A proxy (or any other attempt at a firewall) may have its own
> holes of course, but avoiding making them isn't that hard.
>
>
>> The best way is first to try avoiding any buffer overflows and take
>> programming precautions.
>
>
> Of course, if you have the source and that source isn't an
> unmaintainable mess.  One or both of those conditions may fail,
> and then the IDS becomes useful.
>
>> Other way is to chroot the services, if running it on a firewall.
>
>
> Provided it is an unixish server . . .
>
>> There are various mechanisms which can be used like bounding the
>> memory region it self. Stack Randomisation and Canary based approaches
>> can also avoid any buffer overflow attacks.
>
>
> These may or may not be available.  You can always stick a proxy
> firewall in front of the server though, no matter what os and
> server apps it runs.
>
> Helge Hafting
> .
>


-
Linux-crypto:  cryptography in and on the Linux system
Archive:       http://mail.nl.linux.org/linux-crypto/



From linux-crypto-bounce@nl.linux.org Thu Jul 14 15:06:28 2005
Received: from localhost ([127.0.0.1] helo=humbolt)
	by humbolt.nl.linux.org with esmtp (Exim 4.22)
	id 1Dt3Q3-0006uf-4N; Thu, 14 Jul 2005 15:06:27 +0200
Received: with ECARTIS (v1.0.0; list linux-crypto); Thu, 14 Jul 2005 15:06:11 +0200 (CEST)
Received: from embla.aitel.hist.no ([158.38.50.22])
	by humbolt.nl.linux.org with smtp (Exim 4.22)
	id 1Dt3PY-0006tq-HE
	for linux-crypto@nl.linux.org; Thu, 14 Jul 2005 15:05:56 +0200
Received: (qmail 18675 invoked from network); 14 Jul 2005 12:59:14 -0000
Received: from unknown (HELO ?158.38.51.68?) (158.38.51.68)
  by embla.aitel.hist.no with SMTP; 14 Jul 2005 12:59:14 -0000
Message-ID: <42D6634A.2000801@aitel.hist.no>
Date: Thu, 14 Jul 2005 15:06:18 +0200
From: Helge Hafting 
User-Agent: Debian Thunderbird 1.0.2 (X11/20050602)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To:  rvk@prodmail.net
CC: Vinay Venkataraghavan , 
 linux-crypto@nl.linux.org,  linux-kernel@vger.kernel.org
Subject: Re: Open source firewalls
References: <20050713163424.35416.qmail@web32110.mail.mud.yahoo.com> <42D63AD0.6060609@aitel.hist.no> <42D63D4A.2050607@prodmail.net> <42D658A8.4040009@aitel.hist.no> <42D658A9.7050706@prodmail.net>
In-Reply-To: <42D658A9.7050706@prodmail.net>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Received-SPF: 
X-Spam-Level: 
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on 
	humbolt.nl.linux.org
X-Spam-Status: No, score=-0.3 required=5.0 tests=AWL,BAYES_50 autolearn=no 
	version=3.0.1
X-ecartis-version: Ecartis v1.0.0
Sender: linux-crypto-bounce@nl.linux.org
Errors-to: linux-crypto-bounce@nl.linux.org
X-original-sender: helge.hafting@aitel.hist.no
Precedence: bulk
List-help: 
List-unsubscribe: 
List-software: Ecartis version 1.0.0
List-Id: 
X-List-ID: 
List-subscribe: 
List-owner: 
List-post: 
List-archive: 
X-list: linux-crypto

RVK wrote:

> Proxies can be a good way of filtering but it can't avoid buffer 
> overflows. 

Yes they can - did you read and udnerstand my previous post at all?
A proxy _can_ avoid a buffer overflow by noticing the
anomalously large data item and simply refuse to pass
it on to the real server!  The proxy can terminate the tcp
connection and throw away the data.

> It can only increase it. More code more bugs. 

Of course the proxy can be buggy too, but it is easier to
avoid problems there:
1. The server was written to perform a service, perhaps with
    security thrown in later.  (Yes, that's bad design.)
    A firewall proxy is written for security, so buffer overflows
    are usually avoided in the firewall proxy itself.  Because this
    is exactly what the firewall writer is thinking about.
2. The proxy may be much smaller and simpler than the server
    it protects, it is therefore much easier to audit for security
    problems.
3. Fixing the server is indeed best, but not necessarily an option.
    It could be proprietary, or written in a unknown language.

> If it is running on a har