From: Ron Johnson on
On 06/14/2010 03:54 PM, peasthope(a)shaw.ca wrote:
> From: Ron Johnson<ron.l.johnson(a)cox.ne.>
> Date: Mon, 14 Jun 2010 13:53:42 -0500
>> ... nmap dalton.invalid.
>
> Results are consistent with function of services.

Doesn't seem so to me.

> Joule also lacks /etc/pam.d/telnet but then Joule
> runs Lenny whereas Dalton runs Squeeze.
>
> joule:~# nmap dalton.invalid
>
> Starting Nmap 4.62 ( http://nmap.org ) at 2010-06-14 13:26 PDT
> Interesting ports on dalton.invalid (10.4.0.2):
> Not shown: 1711 closed ports
> PORT STATE SERVICE
> 21/tcp open ftp
> 22/tcp open ssh
> 53/tcp open domain
> 111/tcp open rpcbind

From your 14 Jun 2010 11:03:50 -0700 email:
> peter(a)joule:~$ telnet dalton.invalid
> Trying 10.4.0.2...
> telnet: Unable to connect to remote host: Connection refused

You can't telnet into dalton.invalid if there's no telnetd running
(or, at least, visible).

--
"There is usually only a limited amount of damage that can be
done by dull or stupid people. For creating a truly monumental
disaster, you need people with high IQs."
Thomas Sowell


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
Archive: http://lists.debian.org/4C169B87.5020809(a)cox.net
From: Ron Johnson on
On 06/14/2010 04:22 PM, peasthope(a)shaw.ca wrote:
> From: Tzafrir Cohen<tzafrir(a)cohens.or..il>
> Date: Mon, 14 Jun 2010 19:45:16 +0000
>> You try to login (from telnet) as root?
>
> Oh no. telnet as a user and then su.
>
>> Isn't shorewall rather famous for producing not-so-efficient iptabnles
>> rules?
>
> Recently it changed from shell based compiler
> to perl based compiler. Hopefully efficiency
> improved.

The thought processes behind how you decide iptables rules should be
generated have nothing to do with implementation language.

--
"There is usually only a limited amount of damage that can be
done by dull or stupid people. For creating a truly monumental
disaster, you need people with high IQs."
Thomas Sowell


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
Archive: http://lists.debian.org/4C16A0F0.4000709(a)cox.net