[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#636827: denyhosts perhaps a bad example, but still problematic



On 08/07/2011 02:41 PM, Michael Bramer wrote:
On 08/06/2011 01:49 PM, Martin Eberhard Schauer wrote:
I'm sorry to admit that at the second glance I found something strange
on the page referenced to in my initial post:

parts-md5sum:
4b8e0f93635176fdd73d095206b6d249 it uk de 76820
b77da117fa9db52df9830b65e9d4dce8 uk it de 76820
1436b55c5d1a8219435f0197d162f213 it de uk 76820
e285e17f032a698827cd3b9be36f7f4a de uk it 76820

Perhaps there is some database corruption? At least, when we
assume unique entries?

When I understand things right, this means 69286 and 76820
are identical?

I can't check it now... (ddtp ist down... kernel ops)

But maybe 76820 have a extra part?

This is the case...
69286:
Description: a utility to help sys admins thwart SSH crackers
 DenyHosts is a program that automatically blocks SSH
 brute-force attacks by adding entries to /etc/hosts.deny.
 It will also inform Linux administrators about offending
 hosts, attacked users and suspicious logins.
 .
 Synchronization with a central server is possible too.
 .
 Differently from other software that do same work, denyhosts
 doesn't need support for packet filtering or any other kind
 of firewall in your kernel.

76820:
Description: a utility to help sys admins thwart SSH crackers
 DenyHosts is a program that automatically blocks SSH
 brute-force attacks by adding entries to /etc/hosts.deny.
 It will also inform Linux administrators about offending
 hosts, attacked users and suspicious logins.
 .
 Synchronization with a central server is possible too.
 .
 Differently from other software that do same work, denyhosts
 doesn't need support for packet filtering or any other kind
 of firewall in your kernel.
 .
 DenyHosts unfortunately does not support IPv6.

You see the last extra part with 'IPv6'?

Thanks.

Gruss
Grisu



Reply to: