North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Routers vs. PC's for routing - was list problems?

  • From: E.B. Dreger
  • Date: Thu May 23 17:45:38 2002 
JKS> Date: Thu, 23 May 2002 17:34:29 -0400 (EDT)
JKS> From: Jason K. Schechner


JKS> > Why would you want to do this?
JKS> 
JKS> Logging.  If a [email protected] cracks your box he can't erase
JKS> anything that's already been written there.  Often it takes

BSD enforces append-only when running proper securelevel.  AFAIK,
Linux lacks this attribute, and root can disable the so-called
"immutable" attrib.


JKS> a physical change (jumper, dipswitch, etc) to change from
JKS> write-only to read-only making it pretty tough for the
JKS> [email protected] to cover his steps.

Why not log to an external bastion host?


--
Eddy

Brotsman & Dreger, Inc. - EverQuick Internet Division
Phone: +1 (316) 794-8922 Wichita/(Inter)national
Phone: +1 (785) 865-5885 Lawrence

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <[email protected]>
To: [email protected]
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <[email protected]>, or you are likely to
be blocked.