|
From: Greg S. <gs...@is...> - 2006-10-31 09:25:32
|
=0D=0A Thanks for the tip=0D=0A=0D=0A-------------------------------------= ---=0D=0A=0D=0A From: "Rudner, Bj=F6rn" <br...@ba...>=0D=0ASent= : Tuesday, October 31, 2006 3:30 AM=0D=0ATo: dev...@li...= ceforge.net=0D=0ASubject: Re: [Devil-Linux-discuss] More on heartbeat =0D= =0A=0D=0AHello,=0D=0AI'm also using heartbeat and there is a solution to wo= rk around the generation (replay attack) problem. =0D=0A=0D=0AI have insert= ed this comman to the ha.cf:=0D=0Ahbgenmethod time=0D=0A=0D=0AThen the gene= ration is not "counting up" but a timestamp is used.=0D=0ASince I also had = some problems with false time from the hardware (old system, dead battery) = I also changed the init.script to require the xntpd daemon to be startet be= fore heartbeat is startet. Never since had any problems with false generati= on.=0D=0A=0D=0AMit freundlichen Gr=FCssen / Kind Regards =0D=0A=0D=0ABj=F6r= n Rudner =0D=0A=0D=0A____________________________________________ =0D=0ABj= =F6rn Rudner=0D=0ASystemadministrator =0D=0A=0D=0Abaulogis GmbH=0D=0AZamdor= fer Strasse 100=0D=0A81677 M=FCnchen =0D=0A=0D=0ATelefon +49 (89) 930 839-1= 6=0D=0ATelefax +49 1805 456 987-200 16 =0D=0AMobil +49 151 12 16 23 71 =0D= =0AE-Mail br...@ba... =0D=0Ahttp://www.baulogis.com/=0D=0A=0D=0A--= ---Urspr=FCngliche Nachricht-----=0D=0AVon: devil-linux-discuss-bounces@lis= ts.sourceforge.net [mailto:dev...@li...= t] Im Auftrag von cdmiller=0D=0AGesendet: Montag, 30. Oktober 2006 22:01=0D= =0AAn: gs...@is...; dev...@li...= t=0D=0ABetreff: Re: [Devil-Linux-discuss] More on heartbeat=0D=0A=0D=0AGreg= Silber wrote:=0D=0A> More on the continuing saga of me and heartbeat. So f= ar I have =0D=0A> downloaded the latest testing version to get the repositi= oned ping, =0D=0A> submitted a patch to link ip from the iproute2 program i= nto /sbin and =0D=0A> everything is cool. One more thing that is causing a = problem is the =0D=0A> order of initialization of the scripts in the rc. di= rectories. If you =0D=0A> are not using dhcp, then heartbeat and snort try = to load prior to the =0D=0A> network loading (and fail). I fixed this on my= config floppies so I =0D=0A> don't need a rebuild myself, but I thought I = would put it out there in =0D=0A> case you want to patch this. Anyway, I no= w know way too much about =0D=0A> heartbeat, devil, etc. so send questions = if you got em.=0D=0A> =0D=0A> -Greg Silber=0D=0A=0D=0AHi Greg,=0D=0A=0D=0AW= e use Heartbeat here on our current Devil setup (1.2.9). Have you done anyt= hing to get around the /var/lib/heartbeat/hb_generation file getting destro= yed between reboots?=0D=0A=0D=0AThanks,=0D=0A=0D=0A- cameron=0D=0A=0D=0A---= ----------------------------------------------------------------------=0D= =0AUsing Tomcat but need to do more? Need to support web services, security= ?=0D=0AGet stuff done quickly with pre-integrated technology to make your j= ob easier Download IBM WebSphere Application Server v.1.0.1 based on Apache= Geronimo=0D=0Ahttp://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid= =3D263057&dat=3D121642=0D=0A_______________________________________________= =0D=0ADevil-linux-discuss mailing lis...@li...= eforge.net=0D=0Ahttps://lists.sourceforge.net/lists/listinfo/devil-linux-di= scuss=0D=0A=0D=0A__________________________________________________________= __________________=0D=0A=0D=0ADer Inhalt dieser E-Mail ist vertraulich und = ausschlie=DFlich f=FCr den bezeichneten Adressaten (devil-linux-discuss@lis= ts.sourceforge.net) bestimmt.=0D=0AWenn Sie nicht der vorgesehene Adressat = dieser E-Mail oder dessen Vertreter sein sollten,=0D=0Aso beachten Sie bitt= e, dass jede Form der Kenntnisnahme, Ver=F6ffentlichung, =0D=0AVervielf=E4l= tigung oder Wiedergabe des Inhalts dieser E-Mail unzul=E4ssig ist.=0D=0ABit= te setzen Sie sich in diesem Fall mit dem Absender der E-Mail in Verbindung= (br...@ba...).=0D=0A=0D=0A---------------------------------------= ----------------------------------=0D=0AUsing Tomcat but need to do more? N= eed to support web services, security?=0D=0AGet stuff done quickly with pre= -integrated technology to make your job easier=0D=0ADownload IBM WebSphere = Application Server v.1.0.1 based on Apache Geronimo=0D=0Ahttp://sel.as-us.f= alkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D121642=0D=0A_______= ________________________________________=0D=0ADevil-linux-discuss mailing l= ist...@li...=0D=0Ahttps://lists.sourc= eforge.net/lists/listinfo/devil-linux-discuss=0D=0A=0D=0A |