Errata

Linux Server Security

Errata for Linux Server Security

Submit your own errata for this product.

The errata list is a list of errors and their corrections that were found after the product was released.

The following errata were submitted by our customers and have not yet been approved or disproved by the author or editor. They solely represent the opinion of the customer.

Color Key: Serious technical mistake Minor technical mistake Language or formatting error Typo Question Note Update

Version Location Description Submitted by Date submitted
Printed Page 87
Box at bottom

The two iptables rules in this box seem to be as from Stephens' website, here:
http://www.kalamazoolinux.org/presentations/20010417/conntrack.html
and or here:
http://www.sns.ias.edu/~jns/wp/2006/01/12/iptables-connection-tracking-ftp/

The rules presented there are for a CLIENT accessing ftp. For an ftp server, INPUT and OUTPUT in the two rules should be reversed as stated in the notes at the bottom of the page, second link.

Anonymous   
Printed Page 210
axfr-get Makefile example

In the Makefile example on this page, there is a reference to the command
'/usr/local/bin/tcpclient -i a.ns.hackenbush.com 53 /usr/local/bin/axfr-get
flywheel.com flywheel.data flywheel.tmp'

However, the '-i' flag expects an argument (it specifies the local IP address to use
- http://cr.yp.to/ucspi-tcp/tcpclient.html), and the make fails. It will work if the
flag is omitted.

Anonymous   
Printed Page 420
7th line from the bottom

bash-# useradd -d /var/logjail -g syslogng -r syslogng

and in the next line is stated that the -r flag tells useradd to set the account
automatically to /bin/false, etc...
The problem is that useradd doesn't have an "-r" flag. Was it mistaken with "-s
/bin/false"?

Anonymous   
Printed Page 433
4th paragraph

From: http://www.balabit.com/products/syslog_ng/reference/x97.html

--------------------------------------------
In earlier revisions of syslog-ng there was a special filter identifier, "DEFAULT",
which matched all not-yet-matched messages. This could make your configuration much
simpler and easier to manage. This feature was removed in syslog-ng 1.5.x, and a more
powerful idea was introduced. For more details consult the Section called Log paths.
--------------------------------------------

Anonymous