Openwall Project   /home  Owl  JtR  Pro  crypt  pam_passwdqc  tcb  phpass  scanlogd  popa3d  msulogin  /  Linux  BIND  /  advisories  presentations  /  services  donations  /  wordlists  passwords  /  community  lists  wiki  CVSweb  mirrors  signatures
bringing security into open environments
 
This website is powered by Openwall GNU/*/Linux security-enhanced OS
[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]
Date: Wed, 4 Feb 2004 17:17:32 +0100
From: "Berend-Jan Wever" <SkyLined@...p.tudelft.nl>
To: <owl-users@...ts.openwall.com>
Subject: Re: dhcp client

You could still put dhclient on a cron job to be run once every 5 hours and
5 minutes ?

But, if someone wanted to exploit a dhclient bug, he'll probably won't have
a problem with waiting 6 hours for dhclient to run...

Cheers,

SkyLined

PS. I modified my "/bin/sh" to only run when the user executing it doesn't
have "/bin/false" as shell in "/etc/passwd". It's a lame security trick
that's easily bypassed, but it does keep the script kiddies out. Maybe it's
something Owl could use ?

----- Original Message ----- 
From: "Steve Bremer" <steveb@...coinc.com>
To: <owl-users@...ts.openwall.com>
Sent: Wednesday, February 04, 2004 15:57
Subject: Re: dhcp client


>
> Hi,
>
> >Don't know of any, can't make any recommendations personally.
>
> Here is a pretty popular pppoe client:
>
> http://www.roaringpenguin.com/products/rp-pppoe/index.php
>
> >One other tip I will give ; make your dhcp client exit after
> obtaining
> >a lease ; otherwise it may be possible to send bad data to your
> client
> >and make it crash or worse...
>
> We have a problem where one of our ISPs requires us to make a DHCP
> request every 6 hours or they cut off our connection.  Even though we
> pay for a "business class" connection and static IP, we have to make a
> DHCP request at regular intervals or their firewall blocks our traffic.
> :-(  It's a terrible setup, but it's the only broadband provider in the
> area.
>
> Steve Bremer
> NEBCO, Inc.
> System & Security Administrator
>


Hosted by DataForce ISP - Powered by Openwall GNU/*/Linux